Sunday 26 May 2019

Which tool good for 9S12, 908 etc motorola MCU?

Which are good programmers for 9S12, 908 etc motorola MCU?
preferably a one that doesn't require to lift MCU legs and can connect to mcu by connect points on PCB ?

There are lots of Eeprom programmer can read Motorola
her are few:
UPA USB
VVDI Prog
Xprog
SMOK
CPT
and many more.

Car list + Reviews:
  1. UPA USB read & write 9S12, 908 etc Motorola MCU.
1) Car list:
Motorola HC08*: MC68HC08AS20, MC68HC08AS32, MC68HC08AS60, MC68HC08AZ32, MC68HC(9)08AZ32A, MC68HC908AZ60, MC68HC908AZ60A

MC9S12HY64/HA32

Motorola HCS12*: MC9S12D64, MC9S12A128, MC9S12DG128, MC9S12DG256, MC9S12H128, MC9S12H256, MC9S12HZ64, MC9S12HZ128, MC9S12HZ256

Freescale (Motorola) HCS12X*: MC9S12XD64, MC9S12XD128, MC9S12XDG128, MC9S12XDP384, MC9S12XDP512, MC9S12XHZ256, MC9S12XHZ512

2) Reviews:
  1. MC9S12DG128 - 3L40K reading with Xprog
https://www.digital-kaos.co.uk/forums/showthread.php/542947-MC9S12DG128-3L40K-problem-with-reading-UPA-Carprog-and-Xprog

  1. How to read 68HC05b16 with UPA.
read-68hc05b16-with-upa-01 read-68hc05b16-with-upa-02 read-68hc05b16-with-upa-03 read-68hc05b16-with-upa-04

  1. VVDI Prog reads & writes 9S12, 908 etc. Motorola MCU:
1). Support list:
reading MC9S12 series Chips, VVDI Pro is more stable than XP Prog.
attacking MC9S12 series Chips, VVDIProg is faster.

MCU
ManufacturesTypesSupportRemark
MOTOROLAMC9S12XEPRCan automatically determine D-FLASH/EEE space
MC9S12XAR 
MC9S12XBR 
MC9S12XDR 
MC9S12XDTR 
MC9S12XDPR 
MC9S12XDQR 
MC9S12DGR 
MC9S12DTR 
MC9S12PR 
MC9S12HR 
MC9S12HY 
MC9S12HA 
MC9S12HZ 
MC9S12XHZ 
MC9S12B 
MC9S12GC 
MC9S12XS 
MC9S12K 
MC9S12Q 
MC9S12C 
MC9S12P 
MC9HC(9)08 
ATMELATTINY 
ATMEGEA 
NECuPD70F 
STTMS370 
Note: R means the type is supported, £ means the type will be supported soon in the future.

2) Review...
Question: Read car BMW 3 with Xhorse VVDI eeprom came up once read in Tango CAS 3 + encrypted can this be done if I have Isn of car let me know please asp

Anser: VVDI prog yes with wires…Eeprom

  1. SMOK reads & writes 9S12,908 Motorola MCU:
google and search http://smok.com.pl for official info.

  1. XProg reads & writes 9S12, 908 etc. Motorola MCU:
1) XPROG-M V5.84 Authorizations:
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0027-1 HC(S)908 update Authorized 2016/3/13
AUTH-0027-2 HC(S)908 sercurity Authorized 2016/3/13
xprog-908jpg-05

2)Reviews on Xprog V5.8 Reads MCU 9S12 XEQ 384 on Rang Rover 2015-2016
Read MCU 9S12 XEQ 384 on Rang Rover 2015-2016
Save P-FLASH and D-FLASH unlock KVM secured

Now, I'll show you the location of a KVM module
And dismantle the module with secured MCU 9S12 XEQ
Read on bench using Xprog HQ clone or original
Then save P-FLASH and D-FLASH unlock KVM secured

Here we go.

Module location inside Rang Rover 2015-2016
xprog-land-rover-kvm-unlock-2

Xprog box HQ clone.
xprog-land-rover-kvm-unlock-3

The KVM board
xprog-land-rover-kvm-unlock-4
Secured MCU 9S12 XEQ
xprog-land-rover-kvm-unlock-5 xprog-land-rover-kvm-unlock-6 xprog-land-rover-kvm-unlock-7 xprog-land-rover-kvm-unlock-8

Pin 42 and 46
Lift 1 pins shown in the image.
xprog-land-rover-kvm-unlock-9 xprog-land-rover-kvm-unlock-10 xprog-land-rover-kvm-unlock-11 xprog-land-rover-kvm-unlock-12

Maximum wires length 12cm
xprog-land-rover-kvm-unlock-13

Secured MCU 9S12 XEQ 384
xprog-land-rover-kvm-unlock-14

Run Xprog software v5.8
xprog-land-rover-kvm-unlock-15

MCU/MPU, Freescale NXP 9S12XE, MC9S12XEQ384 D-FLASH-Secured
xprog-land-rover-kvm-unlock-16
Tip & Guide: How to get Xprog to work with secured MCU:
Reset MCU security
Run->change security state->reset MCU security
Wait 10...15 seconds if not success, cancel process
Check connection
Start from a
Remember MCU security byte value
Read, write...commands can be executed many times
Set MCU security
Run->change security sate->set MCU security
Read
xprog-land-rover-kvm-unlock-17 xprog-land-rover-kvm-unlock-18

Reset MCU security
xprog-land-rover-kvm-unlock-19

It will take 10 to 12 seconds to unlock MCU
IP NOT STOP and repeat
xprog-land-rover-kvm-unlock-20 xprog-land-rover-kvm-unlock-21

Read
xprog-land-rover-kvm-unlock-22 xprog-land-rover-kvm-unlock-23 xprog-land-rover-kvm-unlock-24 xprog-land-rover-kvm-unlock-25 xprog-land-rover-kvm-unlock-26

Save data
xprog-land-rover-kvm-unlock-27

MCU/MPU, Freescale NXP 9S12XE, MC9S12XEQ384 P-FLASH-Secured
xprog-land-rover-kvm-unlock-28

Read
xprog-land-rover-kvm-unlock-29 xprog-land-rover-kvm-unlock-30 xprog-land-rover-kvm-unlock-31 xprog-land-rover-kvm-unlock-32
Save data
xprog-land-rover-kvm-unlock-33

Job is done.


That's all.
Thanks.

www.obdexpress.co.uk

http://blog.obdexpress.co.uk/2019/05/27/good-programmers-for-9s12-908-etc-motorola-mcu/

No comments:

Post a Comment

OBDSTAR DC706 Clone Renault EMS3120 ECM by Boot

  Question: Is it possible to clone Renault Continental EMS3120 TC1738 ECM by OBDSTAR DC706 ? Obdexpress.co.uk engineer replied: Yes. ...