Tag Archives: Xprog

BMW CAS2 CAS3 Correct Mileage: Xprog? R270? VVDI Prog?

Topic: looking for a suitable tool to correct mileage in BMW from 2000 to 2010 (at least).

 

I’m often reading about Xprog, R260 and R270 but this confused me. . Don’t know much about short and effective the difference and pros/cons about these tools

 

Goal:to do CAS 2-3 and dash (incl. m35080 v6) in BMW from 2000 to 2010.

 

 

Good stickies for new users.

Xprog is universal programmer for varius chips in automotive and many more…

R270/260 is based most on BMW and MB immo systems+dashboards+some airbags..

it have function for erase 35080/35160 chips too…both are very good programmers and you need them both in this business..

 

R270 BDM programmer has the advantage to clear m35080 eeprom
R260 programmer is more safe in MCU
Xprog is a good tool for many chips and mcu
all are chinese
if you can pay more
, i suggest you to buy vvdi prog

Vvdi prog have the function of 260+r270

 

R270 does 080D0WQ very well – read , erase and write. But you need luck with a good quality tool .

 

If you are buying Rxxx tool..look for the new R280 programmer. It have all functions of r270 and many more include cas4+ newest mask tipes..yust advice

 

 

Test result:

So yesterday I’ve had my first experience with R270.

 

Reading EE chips works for 90%.
But 30 attempts to write a blank 080D0WQ chip…failed
Then used a new 080D chip for the job….success

(Maybe the old installed chip was a bad ass)

 

In summary, R270 CAS4+ programmer on was possible to read, write and erase.
The last- an important tip:

I think there are just a few % from the R270 on the market, which are useable.If someone is looking for it, try my link here: http://www.obdii365.com/wholesale/r270-b-mw-cas4-bdm-programmer-629.html i have luck with it.

 

 

https://www.amazon.com/dp/B071L1GH89

Motorola HC05E6 Pinout to Carprog Full

Part 1: Which tool is best for Motorola HC05E6 reading?

 

UPA USB 1.3 would be better for this then you can run connection test and work out which pin/wire is wrong or which pin needs lifting

Carprog programmer should work if it doesn’t then its wired incorrect to chip or other pins need lifting
ill see what upa manual shows in regards to wiring and pin lift for this chip.

 

Xprog only lift Pin-1.
Tested on many Benz key mcu MC68HC05E6 (011, 021, 040, 051)

 

Carprog or x-prog work good with hc05e6

 

Read to xprog lift 1 pin

 

For xprog programmer you need lift up leg 1,12 & 15
and for UPA-USB lift up leg 1, 11, 12, 15 & 16
Don’t forget to set oscillator 2 khz or 4 khz
Tested many time
Good luck

 

In summary, UPA-USB, Xprog, Carprog all has luck with Motorola HC05E6 reading.

 

Part 2: Carprog programmer read MCU MC68HC05E6

Read in key the MCU MC68HC05E6(0F82B)

carprog-read-key-chip

CarProg read Opel HC05 PIN

(it’s Opel immobiliser 1996-1998)

HC05-reading-with-CarProg

NOTE: for HC05, HC08, HC11, HC12, you need an A10 adapter or just buy Carprog full kit with 21 adapters

 

Carprog A10 adapter wiring diagram:

carprog-a10-adapter-wiring-diagram

CarProg A10 adapter crossreference to others tools cables

A10-mcu-cables-colors

Part 3: Motorola HC05 connection with Carprog v8.21 full

 

MC68HC05B6, MC68HC05B8, MC68HC05B16, MC68HC05B32

carprog-Motorola-HC05-1

carprog-Motorola-HC05-2

MPUMask Set

MC68HC05B6 0B91T

1C14H,

2C14H

0F10V

1E50H

 

MPU Mask Set

MC68HC05B8 0B83T

3D33J

0D54J

 

MPU Mask Set

MC68HC05B16 0D20J,

1D20J,

2D20J,

3D20J

0D60J

0F62J

1G28F

1G35N,

2G35N

http://obd365.blogrip.com/2017/05/05/motorola-hc05e6-pinout-to-carprog-full/

Xprog, R280 and VVDI Prog BMW CAS4 5M48H Read/Write

It’s known to all that Xprog, R280 plus BDM programmer and VVDI Prog all can read and write BMW CAS4 5M48H. So, which one should you take for CAS4 5M48H R/W? Here is the buying guide of ecu programmers for 5M48H R/W.

 

 

(Cheapest) Option 1: Xprog v5.70 read/write CAS4 5M48H

Xprog price: $139

Note: 5.7.0 is the only version XPROG-M can decypte BMW CAS4

 

5M48H R/W process:

Run xprog software

Click on New

Xprog-read-write-CAS4-5M48H (1)

 

Read 5M48H

Xprog-read-write-CAS4-5M48H (2)

Xprog-read-write-CAS4-5M48H (3)

Then write 5M48H

Xprog-read-write-CAS4-5M48H (4)

Xprog-read-write-CAS4-5M48H (5)

Xprog-read-write-CAS4-5M48H (6)

Again, click on Read after verifying the device

Xprog-read-write-CAS4-5M48H (7)

Xprog-read-write-CAS4-5M48H (8)

Xprog read and write CAS4 5M48H successfully.

 

 

Option 2: R280 plus CAS4 programmer read/write CAS4 5M48H

R280 plus price: $469

 

5M48H R/W process:

R280 CAS+ IN CIRCUIT Programmer read 5M48H eeprom

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(1) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(2) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(3) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(4) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(5) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(6) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(7) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(8)

R280 BDM programmer correct EIS/CAS odometer

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(9)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(10)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(11)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(12)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(13)

R280 plus cas4 programmer write dumps to MCU

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(14)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(15)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(16)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(17)

Cas4 programmer read MCU 5M48H

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(18)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(19)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(20)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(21)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(22)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(23)

R280 programmer check EIS/CAS odometer

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(24)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(25)

Done!

 

 

(Best) Option 3: XhorseVVDI Prog Programmer read/write CAS4 5M48H

Vvdi prog price: $429

 

5M48H R/W process:

Open VVDI Prog software, select type, manufacture and model as MC9S12XEP100)

Click “Wiring Diagram”

Maximize wiring diagram: right click and select “zoom window”, then pull down window.

Follow the wiring diagram to connect CAS to the VVDI Programmer.

Start to connect the cable.

The left zone is done, next is to do the right zone.

In this wiring diagram, it only need to remove one 0 ohm resistor to read out data, but one CAS ECU structure is different another one, some needs remove more electronic parts; we will show how to do in the other videos.

Next is to remove this 0 ohm resistor.

Wiring is done, 0 ohm resistor is removed

Plug adapter into VVDI Pro.

Close wiring diagram.

Select “New” – ” Read”

You see it is reading data very fast.

Reading data successfully, click “Save”

Next is to check data.
Open the data, drag the mouse to check, okay, data is all read out, close it.

 

Attach photos of the reading procedure

VVDI-Prog-read-cas4-5M48H (1)

VVDI-Prog-read-cas4-5M48H (2)

VVDI-Prog-read-cas4-5M48H (3)

VVDI-Prog-read-cas4-5M48H (4)

VVDI-Prog-read-cas4-5M48H (5)

VVDI-Prog-read-cas4-5M48H (6)

VVDI-Prog-read-cas4-5M48H (7)

VVDI-Prog-read-cas4-5M48H (8)

VVDI-Prog-read-cas4-5M48H (9)

Enjoy!
In sum,

Xprog 5.7.0 is the only solution for BMW CAS4 among Xprog programmers; and it’s the CHEAPEST compared with vvdi prog and r280 plus.

 

Vvdi prog programmer is the best choice; cost-effective! It’s worth the money coz it covers the most chips (much more than r280)

http://blog.obdii365.com/2017/02/15/bmw-cas4-5m48h-read-write-vvdi-prog-xprog-r280/#3

Program Volvo S80 Key Fob When All Keys Lost

Here is the step-by-step guide to program Volvo S80 2005 new key fob under all keys lost by using Xprog and TM100 key programmer.
Step 1:  Read EEPROM Data
Disassemble  Engine Control Module (ECM) under dashboard, remove and open ECU

volvo-s80-ecu-1

volvo-s80-ecu-2

volvo-s80-ecu-3

Locate 93C86 chip on CPU

Desolder chip and read 93C86 data via ECU programmer,i.e Xprog, then save eeprom data

volvo-s80-cpu-93c86-4

volvo-s80-93c86-chip-5
Step 2: Write key

Some key programming tool optional options you can write key on this model, i.e TM100, VVDI orTango.
Here take an example of TM100 key programmer.

Connect TM100 with computer, open software, select KeyMaker
Select Volvo-S80-(-2003 28F400)

volvo-s80-tm100-6

Then select Open Dump File, upload 93c86 eeprom data just read
Wait some minutes to upload file. Then TM100 will display key information, key number, key position etc.

volvo-s80-tm100-key-position-7
Select unused key position, place a new ordinary ID48 chip into coil of TM100 , then select Write Key

TM100 will re-write ID48 key chip data to car original 93C86 chip and generate a new 93C86 dump file in a few minutes.

volvo-s80-tm100-upload-key-data-8

Re-write the new 93C86 chip data to car original 93C86 chip via ecu programmer.

Reinstall ECM back to car, now you can start car with the ID48 chip.

Re-write the new 93C86 dump file back to car original 93C86 chip with ecu programmer.

Reinstall the ECU back to car. The new ID48 chip will start car.

http://www.key-programmer.org/2017/02/15/program-volvo-s80-all-keys-lost-via-tm100/

Xprog M V5.70 Box ECU Programmer works on Win7

2016 latest version Xprog V5.70 Box ECU programmer with USB dongle has been tested and verified working in obdii365.com. Here are update information and the test result of xprog m 5.70.

 

Xprog info:

Xprog software: v5.7.0

Xprog firmware: v3.9

Type: XPROG-box

Link: USB dongle

High quality with one year warranty.

Operating system: Win XP/Win 7

xprog-v5-70-info

Xprog v5.70 authorization:

BASIC SET Authorized

AUTH-0023 Authorized

AUTH-0024 Authorized

AUTH-0025 Authorized

AUTH-0027 Authorized

xprog-v5-70-authorization

More authorization:

AUTH-0001 Motorola HC05 family authorization (allows to read/write EEPROM)
AUTH-0002 Motorola HC08 family authorization (allows to read/write EEPROM)
AUTH-0003 Motorola HC11 family authorization (allows to read/write EEPROM)
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0005 Texas Instruments TMS370/TMS374 family authorization (allows to read/write EEPROM)
AUTH-0006 Motorola HC05Bxx and HC05Xxx family bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0007 ST M35080 authorization. Read/Write/Erase device to delivery state.
AUTH-0008 BMW EWS3 authorization
AUTH-0009 ATMEGA family authorization (allows to read/write EEPROM and flash memory)
AUTH-0010 MB ZGS001 authorization
AUTH-0011 Motorola HC11EA9/E9 bypass security authorization (allows to bypass security bit and read EEPROM and RAM memory)
AUTH-0012 National CR16 authorization (allows to read/write EEPROM memory)
AUTH-0014 ST7, ST10 family authorization (allows to read/write internal flash)
AUTH-0015 MPC5xx authorization (depending on device program automatically detects MPC5xx, M95xxx device type, flash, external flash and configuration memory size)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0020 ARM (Micronas, …) Family authorization (allows to read/write internal flash and external serial EEPROM)
AUTH-0021 ARM (Micronas, …) Family bypass security authorization (allows to read/write secured and non-secured internal flash and external serial EEPROM, view/change mileage,chassis number (VIN), serial number and PIN code).
AUTH-0023-1 MAC7xxx
AUTH-0023-2 XC23xx
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0025-1 MPC/SPC5xxx Authorized 11/4/2014

 

X-prog 5.70 new functions:

xprog-m-5-7-0-update-info-1 xprog-m-5-7-0-update-info-2 xprog-m-5-7-0-update-info-3 xprog-m-5-7-0-update-info-4 xprog-m-5-7-0-update-info-5 xprog-m-5-7-0-update-info-6 xprog-m-5-7-0-update-info-7 xprog-m-5-7-0-update-info-8 xprog-m-5-7-0-update-info-9 xprog-m-5-7-0-update-info-10 xprog-m-5-7-0-update-info-11 xprog-m-5-7-0-update-info-12 xprog-m-5-7-0-update-info-13 xprog-m-5-7-0-update-info-14 xprog-m-5-7-0-update-info-15 xprog-m-5-7-0-update-info-16 xprog-m-5-7-0-update-info-17 xprog-m-5-7-0-update-info-18 xprog-m-5-7-0-update-info-19 xprog-m-5-7-0-update-info-20 xprog-m-5-7-0-update-info-21

Xprog-m v5.70 test on MCU MC68HC908GR16_FLASH+security:

Notes:

1- use “read security bytes” if security bytes (SS) unknown

2- click on “read security pass” button on the tool bar to “bypass security and read out SS”

3- obtain SS will be placed in to SS data base file and in the future never needs do “bypass security”

4- “bypass security” time -5 min…60mini

 

xprog-software-v5-7-0-read-write-mcu-1 xprog-software-v5-7-0-read-write-mcu-22

http://blog.obdii365.com/2016/11/29/xprog-v570-box-ecu-programmer-tested-ok/

 

 

Xprog and Winkfp fixed BMW R56 MCS FRM3 module

Successfully repaired my dead FRM3 model on my BMW R56, with the MINIMUM cost (xprog and BMW ICOM Winkfp)! Here, i wanna share something useful with you all.xprog

Note: The setup below did work for me, but i’m not sure of yours. You are at your risk.

 

My model:

2011 BMW R56

 

Reason for FRM repair:

I disconnected the battery and the DME to change the thermostat and when I put it back together the FRM was dead.

 

Tool i used:
Except the BMW ICOM A2 emulator plus ISTA+ I had, i also was shopping for xprog v5.55 boxes from

http://www.obdii365.com/wholesale/xprog-m-programmer-dongle-cas-decryption.html

Before this whole ordeal of the junk BMW/MINI FRM dying the only software I used was playing with was Carly for iOS and Dashcommand. But cannot solve issues.

 

BKGD location:

BKGD is on the HC(S)12 BDM adapter in the attached photo.

Vdd(+5V) = Vcc
RESET = B5
BKGD = B3
GND = GND (do not use the GND that is B0)

I think since we are not using the XCLKS and EXTAL flashing works with or without the BDM adapter.
Xprog m software installation:

I was not able to get this software to work with windows 7 64-bit. I was lucky enough to have an old HDD with windows 7 32-bit.
Before plugging in the xprog hardware go to system properties and change the device installation settings to never install driver software from windows update.
Xprog and FRM fix using Xprog:
Once the software was setup I hooked up the frm to the xprog and tried to make a backup of the existing EPROM via the MCU/MPU -> Freescale 9S12XE -> MC9s12XEQ384_EEE profile. Error partition corrupted. Set the sector to 16. I also made a backup of the existing P-FLASH via the MCU/MPU -> Freescale 9S12XE -> MC9s12XEQ384_P-FLASH profile. I think I got errors the first few times I tried to do this but restarting the program resolved the error.
In the MCU/MPU -> Freescale 9S12XE -> MC9s12XEQ384_EEE profile: erase, blank, open good EEE dump, write, verify, close, new, read.
This took several tries because the read back was still showing as blank.
I removed the BDM adapter and went direct into the xprog box. I also closed the program and reopened it when it kept giving me errors. After I was able to get a good write to the FRM I installed it back into the car and it was working again with a couple of errors (xenon high beam failure and fog light failure).
NCS expert & WINKFP setup for FRM:
In NCS expert I backed up the FRM, changed the VO and VIN, reset the FRM to factory and still had the high beam and fog errors. I proceeded to WINKFP to update the FRM and none of the ZB-numbers for my ECU worked. I updated WINKFP with BMW coding tool and the list of available ZB-numbers changed. After WINKFP was able to update the FRM I went back to NCS Expert and copied the VO from the CAS to the FRM and then set the FRM back to defaults. Everything was fixed. Fired up ISTA+ and cleared fault memory.

 

SOLVED!
Afterwards I hooked the frm back to the xprog and made a backup of the EEE and pflash.

My FRM:
R56 HIGH EKS 35 frm3r pl3 6135 3456395 01 23994322 sw141030 hw07 5324828c5
mc9s12xeq384mag
3m25j
Internet file:
R56 HIGH EKS 35 frm3r pl3 6135 3456987 01 23994322 sw156033 hw11 5324828r5

According to realoem parts 61353456395 and 61353456987 are Bilaterally exchangeable.
http://www.realoem.com/bmw/enUS/partsearch?id=SV33-USA-08-2010-R56N-Mini-Cooper_S&diagId=61_2102&q=61353456395

xprog-repair-frm3-1 xprog-repair-frm3-2 xprog-repair-frm3-3 xprog-repair-frm3-4

Hopefully this demonstrates to people it’s possible to repair these modules with the minimum cost.

http://blog.obdii365.com/2016/10/12/xprog-winkfp-fix-dead-frm3-on-bmw-r56/

Which tool to do BMW E92 Odometer Correction

I want to correct odometer in BMW E92 year 2008.  But I have some problem that I could not solve.

I have to change km in CAS and in cluster instrument, which have to flash first?
In the key is stored kilometers? Or this is updated each time you plug in the car?
CAS black or white, what does it?
I would like to buy a device that can flash the cas and cluster, or need a device for each element?
I understand that the hardware to program depends on the chips installed in the cas and cluster. I don’t care welding, what if I would be afraid if remove and replace a chip.

I saw others using these tools but I can’t afford.
M35080 V3.0 Mileage Programmer for BMW
AK300+ V1.5 Key Maker for BMW CAS
XPROG M V5.55
CAS3/912X/9S12X IN CIRCUIT PROGRAMMER
R270

Among these devices, what you advise? I do not mind the price.

 

Customer suggestion:

Put it like this:

1. CAS
White(Cas2) Black(cas3) does not matter. You need 9s12 secured programmer
I use Xprog 5.51 clone with 100% success rate so far.
R270, UPA, and many other can do this.
You need to read eeprom and set KM to 0
2. Dash
Open dash and find inside EEPROM 080DWQ or 35080 V6/VP
You need to erase this memory . R270 clone can erase 080DWQ but can’t erase V series. For this I use digimaster 3 odometer correction master tool but it’s a bit expensive. Best is to buy a set of new eeproms 35080 or 080DWQ doesn’t matter and use them.
Read eprom->save->Change KM to desired value>write to an erased eeprom.

 

Basically what you need:
R270 for Dash / Cas 1-3+ & 1 mask of CAS4
Digiprog 3 4.94 for Cas through OBD
Canfilters for unsupported CAS4 masks & FEM-modules.

Thats how most of the people do it, Dash + CASx/FEMx

Vauxhall Meriva MC68HC08AZ32 pinout to XPROG

I have successfully read Motorola MC68HC08AZ32 chip data by using Xprog-M v5.55 ecu programmer. Pinouts and operations are attached below.

 

Model:

Vauxhall Meriva 1.7 (z17dth)
Part number:
6235248
93177230

 

Why i need ECU programmer?

Meriva 1.7 has engine failure. I have fixed the engine and its running normal now.
I have the airbag light in the dash.
Two airbags has deployed, so that’s why I have mounted resistors to trick the ecu, BUT!
This ecu can only be used one time.

 

And Xprog-m is the most populous in my post for ecu programmer suggestion.

 

How to connect Xprog to the chip MC68HC08AZ32A?

xprog-read-mcu

xprog-m-read-MC68HC08AZ32

Mask sets: 0J66D

Oscillator: 58, 59 pin

Packages: QFP64

EEPROM: 0x0800 – 0x09FF
How to read Motorola MC68HC08AZ32 with Xprog-M?

I solder the mcu back to the board and added the 8 wires, without desoldering all chip.

and read Motorola MC68HC08AZ32 with Xprog-M 5.55 (UPA USB programmer also ok),

then put damp here and get new damp clear, without crash data.

xprog-m-read-MC68HC08AZ32-1.jpg xprog-m-read-MC68HC08AZ32-2 xprog-m-read-MC68HC08AZ32-3

https://eobd21.wordpress.com/2016/08/23/xprog-v555-read-vauxhall-meriva-mc68hc08az32/

Read Mercedes W203 EIS dump by Xprog-m v5.0

Have managed to read dump from W203 EIS module with Xprog m v5.0 box ecu programmer, flash and eeprom OK)

ECU: SIM4LKE

Mask: 3K91D

MCU: MC912DC128ACPV

EZS P/N: 209 545 05 08

Type: W211_HC12

Circuit board from AK500 key programmer:

the test points to solder to the EIS board

AK500 Key Programmer_3511046_b
the signal names from this image:

19 -BKGD
7-rest
8-XTAL
24-GND
1-VDDR
26-GND

good connection for your EZS:

hc12

Finally I can read dumps by Xprog. Confirmed, flash and eeprom OK.

Dumps: w211_hc12_ezs.rar

*** some tips of the EZS: (from a user)

if you can’t connect with SD and dash says ‘—-‘, then is your EZS dead. It could happened when you tried to connect it with xprog, or it went just broken itself. Could be question of flash it and “eeprom it”, but it can be also the MCU is dead. then you’ll need or MCU exchange or use another EZS.

No matter if you buy MCU or EZS, you’ll have still to do this:

put in EZS eeprom correct VIN, because otherwise you will have problem with airbag and ecu’s sync (this EZS nr. can be from diesel or petrol car), put there the same km’s like in dash board, otherwise the ‘—-‘ may not disappear.

then you’ll need to calc and prog. the keys.

after this you’ll need to virginize engine ECU and ESL.
Install everything back, and make it work with SD.

http://blog.obdii365.com/2016/08/10/xprog-v5-0-read-dumps-from-mercedes-w203-eis/