Manufacturer of AEC302C / AEC400 CDI controllers didn’t left possibility to
access internal MCU memory by K-Line. Therefore it is really possible to reset
them if you have any MOTOROLA MC68HC05E6 programmer (XPROG / XPROGm,
UPA, CARPROG, ELNEC, etc.).
Opening the plastic casing
Make a cut around plastic casing to gain access to the printed circuit board (PCB).
Don’t cut too deep – you can damage electrolytic capacitors near the edges of
plastic casing!
Clean the PCB from epoxy sealant. It is significantly easier to clean if sealant is
heated using hot air station or other source of hot air (fan, etc.) – it becomes
crumbly and comes out without excessive effort.
How to connect MCU programmer
NOTE. Wire colors in the picture, corresponds to CARPROG cable A10. Signal
symbols B2, B3, B5, B6, Vcc, Vpp – to XPROG / XPROG-m programmer.
MCU settings for programmer
MCU type: MC68HC05E6
Mask set: 0F82B
EEPROM start: 0x0100 (hex)
EEPROM size: 0xA0 (160 bytes)
Osc. Frequency: 4 MHz
How to reset CDI controller to NEW
Change data at marked position from 00 to 01. This way you will change CDI
controller state to NEVER PROGRAMMED. CDI controller is ready now to store
new code on the first time ignition is switched to ON with a master key.
NOTE. Ignition must be switched on with valid MASTER key that belongs to
immobilizer controller IMM003 / IMM006.
Showing posts with label xprog-m. Show all posts
Showing posts with label xprog-m. Show all posts
Friday, March 8, 2019
Tuesday, September 18, 2018
How to Repair or Unlock ATMEGA64 on Xprog M
Here’s the customer solution to help users solve the problem xprog atmega64 locked and can not read or program chip issue.
This is done off board with qfp64 breakout board should be able to program onboard xprog also though.
This is done off board with qfp64 breakout board should be able to program onboard xprog also though.
Disclaimer: Many thanks dil6222 from cartechnology.co.uk forum. You are at your risk.
Easy fix all you need is:
1. UPA USB PROGRAMMER
2. USBASP WITH SLOW CLOCK JUMPER ON
EXTREME BURNER SOFTWARE AND 10 TO 6PIN ADAPTER
EXTREME BURNER SOFTWARE AND 10 TO 6PIN ADAPTER
3. JUMPER WIRES FEMALE AND MALE
4.QFP64 BREAKOUT BOARD
let’s get started
1. First of all connect jumper wires between atmega and usbasp
you will need to split vcc + into 3 wires and gnd – into 3 wires
you will need to split vcc + into 3 wires and gnd – into 3 wires
Connect vcc+ to pin 21,52 and (64 i believe optional as for avcc i test later)
Connect gnd- to pin 22,53 and 63
Connect SCK to SCK
Connect RESET to RESET
MOSI to PE0 (common problem is people using PB2 and PB3 as there listed as mosi and MISO but they are not )
MISO to PE1
You should end up with something like this . you can see I’ve split the and vcc
2. Next connect PIN2 from UPA DB9 SOCKET to XTAL 1.
Now connect everything else usbasp and upa to usb etc
Now comes the fun bit
3. Open upa software go on tools then pulse generator and you will see this:
Change frequency to 1000khz and click start and leave it running.
4. Open extreme burner avr and go to fuse settings tab and click on read
atmega should connect as normal
atmega should connect as normal
5. Go on each set of fuses low, high, extended lock go on bit details and click load default value for each set
Then tick all the write boxs and click write. or you can manually enter the following
( Low E1, HIGH 99, EXTENDED FD, LOCK FF then click write these are factory lockbits. see photo
Then tick all the write boxs and click write. or you can manually enter the following
( Low E1, HIGH 99, EXTENDED FD, LOCK FF then click write these are factory lockbits. see photo
6. Go on low fuses and check the following clksel settings are there
Cksel0 (1)
Cksel1 (0)
Cksel2 (0)
Cksel3 (0)
Cksel1 (0)
Cksel2 (0)
Cksel3 (0)
Now erase chip and then disconnect upa
That’s it all done it should be able to program/ read as normal without upa sending signal to xtal1 on mega.
Hope this helps many users to unlock Xprog atmega 64.
Thursday, September 13, 2018
How to Read Audi A6 2005-2011 ELV MC9S12 with Xprog
OEM= 4F0905852B
MCU= MC9S12 3L40K
Read as secured
I have done 4pc of this unit last month.
Short cables max 12cm long.
When it don’t read always try to lift reset pin
(I have never done it but some Xprog is sensitive and then try lift reset)
Operate by following my instruction, one friend used the adapter (BDM) and wires with a length of 10 cm. RESET leg lift.
Sunday, September 9, 2018
How to remove BMW Airbag 240 "Internal error" with Xprog
On the example of the control unit Temic 6577-6900727, he himself MRSZ3 V. 2.5-V. 3.0. I will show you how to remove 240 "Internal error" error. This airbag has been installed in BMW e39, е38 and е46.
For this you need a xprog box programmer that will be able to read the data from this ECU. We just need to record new memory without errors in the Motorola MC68HC12b32 element.
See the connection point below in the picture. Next, we take a clean memory, without errors, and save it using the xprog-m programmer in the Motorola element. Next, we set the control unit back to the car and we enjoy the capable system of safety again.
For this you need a xprog box programmer that will be able to read the data from this ECU. We just need to record new memory without errors in the Motorola MC68HC12b32 element.
See the connection point below in the picture. Next, we take a clean memory, without errors, and save it using the xprog-m programmer in the Motorola element. Next, we set the control unit back to the car and we enjoy the capable system of safety again.
(Click to enlarge)
Sunday, August 12, 2018
BMW F series Airbag MAC7241 Pinout to Xprog
How to use Xprog m box ecu programmer to read BMW F series Airbag?
Check pinouts below:
http://www.obdii365.com/producttags/xprog.html
Check pinouts below:
http://www.obdii365.com/producttags/xprog.html
Tuesday, August 7, 2018
Read Volvo S40/V50/C30/C70 MCU MC9S12DG256
Read Volvo S40/V50/C30/C70 2004 MCU MC9S12DG256 80 QFP by xprog m box ecu programmer.
Picture and pinout attached:
Click to enlarge all images.
http://www.obdii365.com/wholesale/v570-xprog-m-ecu-programmer.html
Picture and pinout attached:
Click to enlarge all images.
http://www.obdii365.com/wholesale/v570-xprog-m-ecu-programmer.html
Monday, June 4, 2018
Xprog Pinout to Citroen C-Elysees 2014 BSI M95256
How to: read Citroen C-Elysees 2014 BSI M95256 eeprom and change mileage with xprog m box programmer.
Citroen Elysees 2014 running 232,235KM
Citroen Elysees 2014 running 232,235KM
Sunday, May 13, 2018
How to Repair BMW FRM3 with Xprog V5.60 in 2 Minutes
How to: repair BMW E70 FRM3 (BMW Footwell Module) 3M25J 9S12XEQ384 by xprog v5.60 programmer within 2 minutes.
BMW FRM pinout to Xprog m box

Connect FRM module with Xprog follow pinout
Open Xprog software
Select MCU->Freescale 9S12xE-> 9S12XEQ384 DFlash

Select partition manually

D-Flash size: 32768 bytes (128 sectors (32K))
EEPROM size: 0 bytes (0 sectors)
Press OK to continue

Read and save DFlash


Convert DFlash to eeprom
Open Dflash to EEE for FRM3 Software, upload Dflash data just read
Then convert Dflash to eeprom.
(You can use free online FRM3 D-Flash to EEPROM converter here as well: http://tlvps.tomvanleeuwen.nl/frm/)

Save eeprom, i.e: eee_LL58603.bin

in Xprog 5.60 software, select Open and upload eeprom bin file: eee_LL58603.bin

Select MCU->Freescale 9S12xE-> 9S12XEQ384 EEE

Click Erase tab to erase Dflash and eeprom data

Manually enter Partition
D-Flash size: 0 bytes (0 sectors)
EEPROM size: 4096 bytes (16 sectors (4K))

Click Write to write eeprom


Write data success

Xprog reset FRM3 success.
www.obdii365.com
BMW FRM pinout to Xprog m box

Connect FRM module with Xprog follow pinout
Open Xprog software
Select MCU->Freescale 9S12xE-> 9S12XEQ384 DFlash

Select partition manually

D-Flash size: 32768 bytes (128 sectors (32K))
EEPROM size: 0 bytes (0 sectors)
Press OK to continue

Read and save DFlash


Convert DFlash to eeprom
Open Dflash to EEE for FRM3 Software, upload Dflash data just read
Then convert Dflash to eeprom.
(You can use free online FRM3 D-Flash to EEPROM converter here as well: http://tlvps.tomvanleeuwen.nl/frm/)

Save eeprom, i.e: eee_LL58603.bin

in Xprog 5.60 software, select Open and upload eeprom bin file: eee_LL58603.bin

Select MCU->Freescale 9S12xE-> 9S12XEQ384 EEE

Click Erase tab to erase Dflash and eeprom data

Manually enter Partition
D-Flash size: 0 bytes (0 sectors)
EEPROM size: 4096 bytes (16 sectors (4K))

Click Write to write eeprom


Write data success

Xprog reset FRM3 success.
www.obdii365.com
Subscribe to:
Posts (Atom)










































