Posts tagged with "xprog"

How to Tell Xprog V5.76 v5.70 v5.60 v5.55 etc

Xprog programmer is updated to Xprog box v5.76!! So, what’s new in Xprog box 5.76 programmer & what’s the differences among xprog box (xprog m) v5.76 v5.70 v5.60 v5.5.
Part 1: Similarities of Xprog programmers
Xprog m programmer v5.76 v5.70 v5.60 v5.5 all share the authorization as below:
AUTH-0001 Motorola HC05 family authorization (allows to read/write EEPROM)
AUTH-0002 Motorola HC08 family authorization (allows to read/write EEPROM)
AUTH-0003 Motorola HC11 family authorization (allows to read/write EEPROM)
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0005 Texas Instruments TMS370/TMS374 family authorization (allows to read/write EEPROM)
AUTH-0006 Motorola HC05Bxx and HC05Xxx family bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0007 ST M35080 authorization. Read/Write/Erase device to delivery state.
AUTH-0008 BMW EWS3 authorization
AUTH-0009 ATMEGA family authorization (allows to read/write EEPROM and flash memory)
AUTH-0010 MB ZGS001 authorization
AUTH-0011 Motorola HC11EA9/E9 bypass security authorization (allows to bypass security bit and read EEPROM and RAM memory)
AUTH-0012 National CR16 authorization (allows to read/write EEPROM memory)
AUTH-0014 ST7, ST10 family authorization (allows to read/write internal flash)
AUTH-0015 MPC5xx authorization (depending on device program automatically detects MPC5xx, M95xxx device type, flash, external flash and configuration memory size)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0020 ARM (Micronas, …) Family authorization (allows to read/write internal flash and external serial EEPROM)
AUTH-0021 ARM (Micronas, …) Family bypass security authorization (allows to read/write secured and non-secured internal flash and external serial EEPROM, view/change mileage, Chassis number (VIN), serial number and PIN code).
AUTH-0023-1 MAC7xxx
AUTH-0023-2 XC23xx
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0025-1 MPC/SPC5xxx Authorized 11/4/2014
Part 2: Differences among Xprog box v5.76 v5.70 v5.60 v5.5
Xprog box 5.76 adds new authorization:
(the programmer is coming soon)
MCU/MPU->infineon{XC16x}->SAK-XC164CS-16F
MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG
MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG
MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH
MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH
MCU/MPU->Fresscale9S12XD->MC9S12XDx128_EFPROM
MCU/MPU->Fresscale9S12XD->MC9S12XDx128-EFPROM-secured
MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE
MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE
MCU/MPU->Fresscale9S12XHY->MC9S12XHY128_D-FLASH
MCU/MPU->FresscaleMPC55xx->MPC5515_Code-Flash
MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash
MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash
Immobilizers->Yamaxa->T-MAX_TYPE_I_9S12T64
Other ECU ->Chrysler-DodgeJeep->BCM-GRAND_CHEROKEE_WK_2014_Flash
Other ECU ->GM ECU->SAF-XC164CS-16F
Other ECU ->HONDA Bikes->CB650F 2015_Code_Flash
Other ECU ->Renault ClioOther ->EPS_ST10F269
Other ECU ->Renault Modus ->ECU_SAK-XC164CS-32F
Airbag(XC2xxx)->FR3T-14B321-AF(XC2336A-72)->FR3T-14B321-AFflash0
Airbag(SPC560xx)/MPC560x)->Honda_CR-V(SPC560P50LS)->Code_Flash
XPROG v5.70 adds new MCU/MPU:
MCU/MPU->infineon{XC16x}->SAK-XC164CS-16F
MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG
MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG
MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH
MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH
MCU/MPU->Fresscale9S12XD->MC9S12XDx128_EFPROM
MCU/MPU->Fresscale9S12XD->MC9S12XDx128-EFPROM-secured
MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE
MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE
MCU/MPU->Fresscale9S12XHY->MC9S12XHY128_D-FLASH
MCU/MPU->FresscaleMPC55xx->MPC5515_Code-Flash
MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash
MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash
Immobilizers->Yamaxa->T-MAX_TYPE_I_9S12T64
Other ECU ->Chrysler-DodgeJeep->BCM-GRAND_CHEROKEE_WK_2014_Flash
Other ECU ->GM ECU->SAF-XC164CS-16F
Other ECU ->HONDA Bikes->CB650F 2015_Code_Flash
Other ECU ->Renault ClioOther ->EPS_ST10F269
Other ECU ->Renault Modus ->ECU_SAK-XC164CS-32F
Airbag(XC2xxx)->FR3T-14B321-AF(XC2336A-72)->FR3T-14B321-AFflash0
Airbag(SPC560xx)/MPC560x)->Honda_CR-V(SPC560P50LS)->Code_Flash

XPROG v5.60 ECU Box adds new EEPROM / MCU/ECU:
9S12XEP768 P-FLASH, D-FLASH, EEPROM (AUTH-0024-2)
9S12XET256 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEQ384 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEP768 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEP100 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
XC2361A-56 FLASH3  (AUTH-0023-2)
MC9S12XDP512 0M23S
MAC7241 write bug fixed (AUTH-0023-1)….

Xprog-m 5.5 adds ic device list:
MCU/MPU  SPC560 serial
SPC560P44Lx_Code_Flash
SPC560P44Lx_Code_Flash_Test
SPC560P44Lx_Code_Flash_Shadow
SPC560P44Lx_Data_Flash
SPC560P44Lx_Code_Flash_Block
SPC560P50Lx_Code_Flash
SPC560P50Lx_Code_Flash_Test
SPC560P50Lx_Code_Flash_Shadow
SPC560P50Lx_Code_Flash
SPC560P50Lx_Code_Flash_Block
Freescale MPC5xx
MPC
MPC->Configuration-A
MPC->Configuration-B
MPC->External Flash
MPC->External EEPROM M95xxx
MCU/MPU
Freescale 9s12XHY
MC9S12XHY256 D-Flash
MC9S12XHY256 P-Flash
Freescale (Mac7xxx)
MAC7111VAG50_Flash
MAC7111VAG50_Data_Flash
MAC7112VAG50_Flash
MAC7112VAG50_Data_Flash
MAC7116VAG50_Flash
MAC7116VAG50_Data_Flash
MAC7131MVF_Flash
MAC7131MVF_Data_Flash
MAC7241VAF64_Flash
MAC7241VAF64_Shadow_Flash
MAC7242VAF64_Flash
Freescale 9S12XS-secured
MC9S12XS128_D-Flash-Secured
MC9S12XS128_P-Flash-Secured
In summary, the newer Xprog programmer software, the more powerful. It depends on what you need. If old xprog versions are ok for you, you can buy a cheap xprog 5.5 or even earlier versions and save money. But if it’s used for repair work, the newest xprog v5.76 should be the best choice for you.
This is about Xprog box v5.7.6
xprog-m-v5-76-software-1
xprog-m-v5-76-software-2
xprog-m-v5-76-software-3
xprog-m-v5-76-software-4
Xprog box 5.76 reviews… here you go.
Tested on HC912D60 …is okay..
For over an hour Xprog was connected to a PC, internet active, I have no problem with the certificate.
xprog-5-76-read-HC912D60-1
xprog-5-76-read-HC912D60-2
Today tested on ST10F269 (ZBR2 MAN), multiple reading.
Internet access was off.
xprog-5-76-read-ST10F269

Unlock BMW CAS4 5M48H via VVDI Prog

There are several programmers that can read and write BMW CAS4 5M48H, i.e Xprog V5.5 up, R280 and VVDI prog etc. see here. But there are no many tools can unlock 5m48h. You have unlocked it once you can write back to it .. to make it unsecured .. so easy to read next time. Dialprog 100% works, but it is 2000 euros.

Here is the test report via VVDI Prog by DK forum expert. You are at your risk.



First try with UPA-S using the Tomsad supplied CAS4 cable and software.


steps to unlock and read this CAS4 module (5M48H)
cas4-5m48h-1
cas4-5m48h-2
Things look good, there is some sort of Coax cable and CAS-4 listed on the menu....
Wait, this doesn't look good, there is only 1 connection photo and it's not the same as our CAS!
I guess we are dead in the water before we even set sail, NEXT!
upa-s-cas4-5m48h-1
upa-s-cas4-5m48h-2
upa-s-cas4-5m48h-3
Next try using Xhorse VVDI Prog with software V4.4.4.(latest goes to V4.5.54)


I see 3 options I can select. Backup, R/W/unlock and unlock.
This seems a little confusing, I'm guessing we should start with Backup.

There is 4 different connection diagrams available and our CAS is listed.
It appears we don't have to remove any of the components but have to cut 2 tracks instead.
Also, if it fails to unlock, we have to heat the thing up to 70 degrees and try again.

Time to get the microscope out and get my solder on...
vvdi-prog-5m48h-1
vvdi-prog-5m48h-2
vvdi-prog-5m48h-3
Ok, so the cutting and wiring is all done, it was pretty easy under the scope but i think you would have trouble trying to do it with the naked eye.
The purple wire does not match the color code on the connection diagram but it was the only one left over, so it had to be the right one.
The three fine connections were also made under a microscope, so no telling me it was my dodgy soldering if this thing bricks the CAS!
vvdi-prog-connect-5m48h-1
vvdi-prog-connect-5m48h-2
vvdi-prog-connect-5m48h-3
vvdi-prog-connect-5m48h-4
First up, we are going to back up the D-Flash.
We click "new" and "read" and the programmer goes through some sort of initialization and checks the chip ID.
First issue I get is "FFFF" displayed for chip ID, not good.
I do some reading and watching youtube videos and apparently this is normal.
I click ok and it tries to unlock the chip.
After about 10 seconds it says success and starts to read.
The read finishes after about 30 seconds and says "operation success", HURRAH!
I look at the screen dump and all I see are F's everywhere, BOO!
I flick through the entire dump and I see data, HURRAH!

It seems the D-Flash read OK.
d-flash-by-vvdi-prog-1
d-flash-by-vvdi-prog-2
d-flash-by-vvdi-prog-3
d-flash-by-vvdi-prog-4
Next up is the P-Flash.
I don't reset the programmer or anything, I just click on P-Flash, new and read.
It goes through the same initialization and FFFF on the chip ID, I click OK with confidence.
The unlocking take about the same time and then it starts to read.
1%..... 20 seconds later, still 1%......
Sweat starts to bead on my forehead as I am now sure this has just bricked the CAS.
2%...... Wait, it's moving!
It was a very long process to get to 100%, 28 minutes to be exact.

Operation success and the screen fills with lovely, lovely data and it looks like it was another win on the P-Flash.

So it appears that VVDI Prog was able to read this CAS ok, even though the read time was very long on the P-Flash.
Mind you, when I read CAS-3 using VVDI Prog, I get a very long read time on the flash.
Other people say that their unit only takes about 5 mins to read a full flash, not sure why my unit takes longer.

All the dumps are here guys, let me know if you want me to do any special tests with this thing before I put it away.
p-flash-by-vvdi-prog-1
p-flash-by-vvdi-prog-2
p-flash-by-vvdi-prog-3
Tempted to try and read this with UPA-S using the same wire up.
Once this CAS has been unlocked though, I think it makes it easier to be read again. Unless VVDI-Prog locks it again?


Yes you must lock it again to test if upa s can unlock and read.
Last time I load cas4 dump to tango it needed the isn to decrypt it. Looks like vvdi has decrypt function also.


So I am going to look at the R/W/Unlock menu and see what happens.
There is not many instructions, so I can only assume that this is the section where you can unlock, read, write and then re-lock the MCU.
I select D-flash and click "Reset Sec", it goes through the same initialization, and tells me "Chip is Crypt FF" then operation Success.
This does not seem to be what we want, I can only assume we want "DE-crypt" or something along those lines.
I hit Reset Sec again and it produces "Chip is not crypt FE", this looks better.
I can now also get the correct chip ID when I ID it.

I can read the D-flash and i'm reading the P-flash as I type (another 30 mins).
The D-Flash is the same as the backup version.
I wonder why it had to unlock the chip as I though it was unlocked when we read the backup?

After the D-flash has been read, I will try and write back the D-Flash from PremierD and see if it works.
write-back-d-flash-1
write-back-d-flash-2
write-back-d-flash-3
Yes when Chip shows again FF Security is set to ON.

When try for eg now xprog it will show you that mcu is secured.



Ok, wrote another D-flash to it ok, verified ok.
Locked the MCU with "set sec" and used the bytes "FF" to lock it.
Then unlocked the MCU again, read it and all was good.
Wrote my original D-Flash back and once again locked it.
When it's locked, you cant ID the chip, you get "FFFF", when its unlocked, you get the correct ID.
unlock-success
unlock-ID
Done.

Read CAS4 5M48H via Xprog, R280 and VVDI prog

It’s known to all that XprogR280 plus BDM programmer and VVDI Prog all can read and write BMW CAS4 5M48H. So, which one should you take for CAS4 5M48H R/W? Here is the buying guide of ecu programmers for 5M48H R/W.

 

 

(Cheapest) Option 1: Xprog v5.70 read/write CAS4 5M48H

Xprog price: $139

Note: 5.7.0 is the only version XPROG-M can decypte BMW CAS4

 

5M48H R/W process:

Run xprog software

Click on New

Xprog-read-write-CAS4-5M48H (1)

 

Read 5M48H

Xprog-read-write-CAS4-5M48H (2)

Xprog-read-write-CAS4-5M48H (3)

Then write 5M48H

Xprog-read-write-CAS4-5M48H (4)

Xprog-read-write-CAS4-5M48H (5)

Xprog-read-write-CAS4-5M48H (6)

Again, click on Read after verifying the device

Xprog-read-write-CAS4-5M48H (7)

Xprog-read-write-CAS4-5M48H (8)

Xprog read and write CAS4 5M48H successfully.

 

 

Option 2: R280 plus CAS4 programmer read/write CAS4 5M48H

R280 plus price: $469

 

5M48H R/W process:

R280 CAS+ IN CIRCUIT Programmer read 5M48H eeprom

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(1) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(2) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(3) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(4) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(5) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(6) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(7) R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(8)

R280 BDM programmer correct EIS/CAS odometer

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(9)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(10)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(11)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(12)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(13)

R280 plus cas4 programmer write dumps to MCU

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(14)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(15)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(16)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(17)

Cas4 programmer read MCU 5M48H

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(18)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(19)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(20)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(21)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(22)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(23)

R280 programmer check EIS/CAS odometer

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(24)

R280-BMW-CAS4-programmer-read-write-5M48H-eeprom-(25)

Done!

 

 

(Best) Option 3: XhorseVVDI Prog Programmer read/write CAS4 5M48H

Vvdi prog price: $429

 

5M48H R/W process:

Open VVDI Prog software, select type, manufacture and model as MC9S12XEP100)

Click “Wiring Diagram”

Maximize wiring diagram: right click and select “zoom window”, then pull down window.

Follow the wiring diagram to connect CAS to the VVDI Programmer.

Start to connect the cable.

The left zone is done, next is to do the right zone.

In this wiring diagram, it only need to remove one 0 ohm resistor to read out data, but one CAS ECU structure is different another one, some needs remove more electronic parts; we will show how to do in the other videos.

Next is to remove this 0 ohm resistor.

Wiring is done, 0 ohm resistor is removed

Plug adapter into VVDI Pro.

Close wiring diagram.

Select “New” – ” Read”

You see it is reading data very fast.

Reading data successfully, click “Save”

Next is to check data.
Open the data, drag the mouse to check, okay, data is all read out, close it.

 

Attach photos of the reading procedure

VVDI-Prog-read-cas4-5M48H (1)

VVDI-Prog-read-cas4-5M48H (2)

VVDI-Prog-read-cas4-5M48H (3)

VVDI-Prog-read-cas4-5M48H (4)

VVDI-Prog-read-cas4-5M48H (5)

VVDI-Prog-read-cas4-5M48H (6)

VVDI-Prog-read-cas4-5M48H (7)

VVDI-Prog-read-cas4-5M48H (8)

VVDI-Prog-read-cas4-5M48H (9)

Enjoy!
In sum,

Xprog 5.7.0 is the only solution for BMW CAS4 among Xprog programmers; and it’s the CHEAPEST compared with vvdi prog and r280 plus.

 

Vvdi prog programmer is the best choice; cost-effective! It’s worth the money coz it covers the most chips (much more than r280)

http://blog.obdii365.com/2017/02/15/bmw-cas4-5m48h-read-write-vvdi-prog-xprog-r280/#3

Xprog V5.70 test on MCU MC68HC908GR16 FLASH

2016 latest version Xprog V5.70 Box ECU programmer with USB dongle has been tested and verified working in obd365.com. Here are update information and the test result of xprog m 5.70.

 

Xprog info:

Xprog software: v5.7.0

Xprog firmware: v3.9

Type: XPROG-box

Link: USB dongle

High quality with one year warranty.

Operating system: Win XP/Win 7

xprog-v5-70-info

Xprog v5.70 authorization:

BASIC SET Authorized

AUTH-0023 Authorized

AUTH-0024 Authorized

AUTH-0025 Authorized

AUTH-0027 Authorized

xprog-v5-70-authorization

More authorization:

AUTH-0001 Motorola HC05 family authorization (allows to read/write EEPROM)
AUTH-0002 Motorola HC08 family authorization (allows to read/write EEPROM)
AUTH-0003 Motorola HC11 family authorization (allows to read/write EEPROM)
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0005 Texas Instruments TMS370/TMS374 family authorization (allows to read/write EEPROM)
AUTH-0006 Motorola HC05Bxx and HC05Xxx family bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0007 ST M35080 authorization. Read/Write/Erase device to delivery state.
AUTH-0008 BMW EWS3 authorization
AUTH-0009 ATMEGA family authorization (allows to read/write EEPROM and flash memory)
AUTH-0010 MB ZGS001 authorization
AUTH-0011 Motorola HC11EA9/E9 bypass security authorization (allows to bypass security bit and read EEPROM and RAM memory)
AUTH-0012 National CR16 authorization (allows to read/write EEPROM memory)
AUTH-0014 ST7, ST10 family authorization (allows to read/write internal flash)
AUTH-0015 MPC5xx authorization (depending on device program automatically detects MPC5xx, M95xxx device type, flash, external flash and configuration memory size)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0020 ARM (Micronas, …) Family authorization (allows to read/write internal flash and external serial EEPROM)
AUTH-0021 ARM (Micronas, …) Family bypass security authorization (allows to read/write secured and non-secured internal flash and external serial EEPROM, view/change mileage,chassis number (VIN), serial number and PIN code).
AUTH-0023-1 MAC7xxx
AUTH-0023-2 XC23xx
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0025-1 MPC/SPC5xxx Authorized 11/4/2014

 

X-prog 5.70 new functions:

xprog-m-5-7-0-update-info-1xprog-m-5-7-0-update-info-2xprog-m-5-7-0-update-info-3xprog-m-5-7-0-update-info-4xprog-m-5-7-0-update-info-5xprog-m-5-7-0-update-info-6xprog-m-5-7-0-update-info-7xprog-m-5-7-0-update-info-8xprog-m-5-7-0-update-info-9xprog-m-5-7-0-update-info-10xprog-m-5-7-0-update-info-11xprog-m-5-7-0-update-info-12xprog-m-5-7-0-update-info-13xprog-m-5-7-0-update-info-14xprog-m-5-7-0-update-info-15xprog-m-5-7-0-update-info-16xprog-m-5-7-0-update-info-17xprog-m-5-7-0-update-info-18xprog-m-5-7-0-update-info-20xprog-m-5-7-0-update-info-21

Xprog-m v5.70 test on MCU MC68HC908GR16_FLASH+security:

Notes:

1- use “read security bytes” if security bytes (SS) unknown

2- click on “read security pass” button on the tool bar to “bypass security and read out SS”

3- obtain SS will be placed in to SS data base file and in the future never needs do “bypass security”

4- “bypass security” time -5 min…60mini

 

xprog-software-v5-7-0-read-write-mcu-1 xprog-software-v5-7-0-read-write-mcu-22

http://blog.obdii365.com/2016/11/29/xprog-v570-box-ecu-programmer-tested-ok/

Launch X431 V Pro Repair BMW E90 FRM Module

Many BMWs have a Foot Well Module or FRM that controls electrical functions such lighting.

 
Location:
This is the module that sits on the drivers side foot well, behind the hood release (in US cars).

 

Which vehicles are affected?
E90 Series BMW 3 Series Cars
E70 X5 Series
E81,E82,E87,E88 1 Series

 
What Faults are covered?
Various faults including
Reversing Lights Not Working
Number Plate Lights Not Working
1 or more sidelight,headlight,brake or tail lights not working

 

 

What causes these problems?
The FRM Footwell Module monitors & detects short circuit’s either in the wiring (common in the
E90 boot area) or a short circuit bulb. If you do not get the fault repaired quickly then the module
will eventually permanently switch off that particular output. Once it’s switched off it doesn’t make
any difference if you have repaired the fault the light will stay off.

 

BMW mechanic replace the complete FRM module at a cost of several hundred pounds including coding the module to your car. Here is the procedure in action on a reset we did to a E90 recently.

 

Solution:
Load/re-write the original eeprom dump (parts requires coding as well)

 
Vehicle model example:
2011 BMW 3-series E90

 

Read FRM module CPU data with VVDI ProgXprog or CG100 ecu programmer. Follow the wiring diagram and read eeprom data.
CPU type 9S12XEQ384

bmw-e90-2011-frm-module

fix-bmw-e90-2011-frm-module-1

You can see all data shows F, blank data, CPU data may has been lost

fix-bmw-e90-2011-frm-module-2
Load the original eeprom dump and re-write to CPU.

 

 

When do you need coding/don’t need coding?
There are many variants of FRM (Footwell Module) FRM1, FRM2, and FRM3 which all have different controls and functions such as lights, windows and doors. If the eeprom data is exactly the same as your car original data, you do not need coding.  If fog light or aperture still flashes after load original data, you need to do coding.

 

Device optional:

BMW ICOM Engineering software Ncs expert, Launch X431 V proAutel Maxisys Pro MS908P etc

 

 

Here is the instruction of Launch X431 Pro, it is easier than ICOM engineering software.

Select vehicle make: BMW
Select Coding/Programming

fix-bmw-e90-2011-frm-module-3

Select detail model: 3 series E90

fix-bmw-e90-2011-frm-module-4
Select data stream: FRM Module has been replaced

fix-bmw-e90-2011-frm-module-5

Select FRM module

fix-bmw-e90-2011-frm-module-6

Download file

fix-bmw-e90-2011-frm-module-7

Flash/Reset FRM

fix-bmw-e90-2011-frm-module-8

Complete

fix-bmw-e90-2011-frm-module-9

FRM module is repaired.

 

http://blog.obdii365.com/2016/11/09/repair-bmw-e90-frm-module-by-launch-x431-pro/

DIY Repair bricked FRM3 by Xprog UPA R270

I get many PM’s regarding bricked FRM3 repair. So thought this thread could be a point of information for people who want to repair their bricked module. By bricked I means EEPROM damage through coding / programming due to voltage fluctuation resulting in IFH-0009 error and no communication via OBD.

In this case the module is still good but requires a good EEPROM dump / p-flash being written to it. Once the good EEPROM is in, communication via obd should be restored and vin / VO will need to changed. You also need to find a correct zusb number and flash it with Winkfp.

 

INFO:
MCU is a 9S12XDT384 (mask 3M25J)

DATASHEET – https://goo.gl/bKDpco
PROGRAMMERS confirmed to support this MCU:
UPA USB Programmer
XPROG-M
R270
Orange 5

EEPROM DUMPS:
My collection of FRM3 dumps – p-flash and EEPROM.
https://goo.gl/6dQuCc
METHOD:
Basically…
1. Erase EEPROM (4096bytes)
2. Write good dump
3. Verify obd working and change vin / VO as if retrofitting used FRM3.
4. Flash with correct zusb number for your vehicle using winkfp.

To connect to the MCU there are 3 methods I’m aware of:
1. In socket – desolder chip
2. In circuit – BDM points – reverse of PCB – see image attached.
3. Direct – test clips onto pins like Pamona Micro Grabbers or cheaper alternative.

Connections to:
BKGD
RESET
VDDR (5v)
VSS

repair-bricked-frm3

Hopefully this is helpful for someone.

http://blog.obdii365.com/2016/09/22/repair-bricked-frm3-by-xprog-upa-r270-orange5/

How to read and write Audi A4 eeprom HC12 in cluster

Purpose:

copy the immo information from a cluster to another
make the mileage follow with the immo information

If clone all eeprom content than the mileage is transferred too.

 

 

Model:

Audi a4 2001

 

Optional devices:

Digiprog3, or ecu programmers like XprogCarprogUPA USB programmer

 

Original cluster:

The Jaeger cluster barely works

audi-a4-2001-cluster

 

audi-a4-2001-cluster-1

audi-a4-2001-cluster-2

Suggestion:

read the pin code from both the Instrument and adapt it to the vehicle

 

What to do on pin 21 and 22 on the chip:

 pin-21-pin-22-on-audi-a4-chip

– With car ECU programmers:

Eprom.set type,mcu,hc12,read,save.
eprom,set type,mcu,hc12,file,load,write.
Buy yourself Xprog-M programmer, Carprog full, UPA USB.
Pin 21 and 22 jumper after programming or wait 10 minutes.

 

– with Digiprog 3:

 digiprog3-read-audi-mileage

Eprom,set type,mcu,hc12,read,save.
eprom,set type,mcu,hc12,file,load,write.

 

Reference:

Eeprom HC12 read and write to the other counter:

 

AUDI MM AB 8/2001 DIAGNOSIS / TACHO DIAGNOSIS

(Write down the exact ALWAYS old / incorrect Mileage)

The diagnostic port is in the driver’s footwell. Turn the ignition

on a vehicle. Connect plug ST16 the diagnostic port and the

DIGIPROG.

 

Select the program: cars / trucks – AUDI – MM 4 / 99- DIAG.

The DIGI PROG II shows you the old / incorrect Mileage.

Enter the new / correct Mileage and confirm this.

Should be then after programming on the speedometer 999999 KM give

The old / wrong KM value again so that the speedometer again the old /

false indicates KM. Now you build the speedometer and break it to the

see board. Solder the green and black wire to the same color marked

Arrows at. Now connect the blue and the green plug with

the speedometer and plug ST41 with the DIGI PROG (picture on the following page.)

Now select the program: cars / trucks – AUDI – MM 4/99 HC12.

The DIGI PROG shows you the old / incorrect Mileage. Enter the

new / correct Mileage and confirm this with the hook.

Now shows you the DigiProg II 5 min wait. Remove the connection

between the DigiProg and the speedometer, wait 5 minutes and build the speedometer

again. Alternatively, for 5 min. Wait, you can also like in the image on the

next page shows the pins 21 and 22 bridges.

audi-a4-hc12-eeprom-1

Here necessarily the board from any power supply (Digiprog3 v4.94,

external power supply, etc.), Pin 21 + 22 bridge, and then you can use the tachometer

Immediately reinstall.

audi-a4-hc12-eeprom-2

OBD365 disclaimer:

TRY AT YOUR OWN RISK

Thanks for all tech support from members’ share at cartechnology forum.

http://digiprog3digiprogiii.blogspot.com/2016/08/digiprog-3-v494-read-audi-a4-eeprom.html

Xprog-m v5.0 read dump from MB W203 EIS

Have managed to read dump from W203 EIS module with Xprog m v5.0 box ecu programmer, flash and eeprom OK)

ECU: SIM4LKE

Mask: 3K91D

MCU: MC912DC128ACPV

EZS P/N: 209 545 05 08

Type: W211_HC12

Circuit board from AK500 key programmer:

the test points to solder to the EIS board

AK500 Key Programmer_3511046_b
the signal names from this image:

19 -BKGD
7-rest
8-XTAL
24-GND
1-VDDR
26-GND

good connection for your EZS:

hc12

Finally I can read dumps by Xprog. Confirmed, flash and eeprom OK.

Dumps: w211_hc12_ezs.rar

*** some tips of the EZS: (from a user)

if you can’t connect with SD and dash says ‘—-‘, then is your EZS dead. It could happened when you tried to connect it with xprog, or it went just broken itself. Could be question of flash it and “eeprom it”, but it can be also the MCU is dead. then you’ll need or MCU exchange or use another EZS.

No matter if you buy MCU or EZS, you’ll have still to do this:

put in EZS eeprom correct VIN, because otherwise you will have problem with airbag and ecu’s sync (this EZS nr. can be from diesel or petrol car), put there the same km’s like in dash board, otherwise the ‘—-‘ may not disappear.

then you’ll need to calc and prog. the keys.

after this you’ll need to virginize engine ECU and ESL.
Install everything back, and make it work with SD.

http://obd365.blogrip.com/2016/08/11/read-mercedes-w203-eis-dump-by-xprog-m-v5-0/

How to install Xprog-M v5.60 ecu programmer

The newest XPROG-M programmer v5.6.0 with USB dongle has been tested successfully now, and first released at obdii365.com. Here is the Xprog v5.6 software installation instruction on Windows 7 32 bit.

 

Software version: V5.6.0

Operating System: Windows XP/ Windows 7 32-bit

 

Note:

XPROG v5.6 software can not be used with older Xprog-m firmware. It only can work with XPROG v5.6 ecu programmer. No anti-virus program. No software update.

 

XPROG-M V5.60 Authorizations:
AUTH-0001 Motorola HC05 family authorization (allows to read/write EEPROM)
AUTH-0002 Motorola HC08 family authorization (allows to read/write EEPROM)
AUTH-0003 Motorola HC11 family authorization (allows to read/write EEPROM)
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0005 Texas Instruments TMS370/TMS374 family authorization (allows to read/write EEPROM)
AUTH-0006 Motorola HC05Bxx and HC05Xxx family bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0007 ST M35080 authorization. Read/Write/Erase device to delivery state.
AUTH-0008 BMW EWS3 authorization
AUTH-0009 ATMEGA family authorization (allows to read/write EEPROM and flash memory)
AUTH-0010 MB ZGS001 authorization
AUTH-0011 Motorola HC11EA9/E9 bypass security authorization (allows to bypass security bit and read EEPROM and RAM memory)
AUTH-0012 National CR16 authorization (allows to read/write EEPROM memory)
AUTH-0014 ST7, ST10 family authorization (allows to read/write internal flash)
AUTH-0015 MPC5xx authorization (depending on device program automatically detects MPC5xx, M95xxx device type, flash, external flash and configuration memory size)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0020 ARM (Micronas, …) Family authorization (allows to read/write internal flash and external serial EEPROM)
AUTH-0021 ARM (Micronas, …) Family bypass security authorization (allows to read/write secured and non-secured internal flash and external serial EEPROM, view/change mileage,chassis number (VIN), serial number and PIN code).
AUTH-0023-1 MAC7xxx
AUTH-0023-2 XC23xx
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0025-1 MPC/SPC5xxx Authorized 11/4/2014
Xprog 5.60 Box Programmer PCB Display:
5.6.0-xprog-m-box-pcb

Preparation:

Open DVD disk (E:)

Copy XPROG 5.6.0 zip file to Desktop

Extract XPROG 5.6.0 zip file on Desktop and open the folder

 

Part 1 – Install Adobe Reader XI

Open XP 5.6.0 folder-> AdbeRdr11000_zh_CN application

Preparation steup…

Click Next

Auto install, click Install

Installing Adobe Reader XI…

Adobe Reader XI installation success. Click Finish

 

 

Part 2 – Install Registry Editor

Open XP 5.6.0 folder-> Registry Editor2

Yes to continue

Keys and values have been successfully added to the registry. Click OK

install-xprog-m-5.6-1

Part 3 – Install driver software and computer management setup

Copy XPROGBOX 5.60English from E:/XP 5.6.0 folder to local disk C:

Prompt: installing device driver software…(in the button menu column)

Click the prompt info and click Close

install-xprog-m-5.6-2

Prompt: Device driver software was not successfully installed

Click the prompt info and click Close

Open Computer Management

Select Device Manager-> XPROG-BOX

Right click for Update Driver Software…

install-xprog-m-5.6-3

Browse my computer for driver software manually

Browse Desktop/ xp 5.6.0/ XPROG-BOX drive/ WINDOW XP

Then OK.. Next

Install this driver software anyway

Windows has succesfully updated your device software. Click Close

install-xprog-m-5.6-4

Back to Computer Management

Select Device Manager-> Other Device-> USB Serial Port

Right click for Update Driver Software…

install-xprog-m-5.6-5

Browse my computer for driver software manually

Browse Desktop/ xp 5.6.0/ XPROG-BOX drive/ WINDOW XP

Then OK.. Next

Install this driver software anyway

Windows has successfully updated your device software for XPROG-BOX programmer (COM4). Click Close

install-xprog-m-5.6-6

Then you will see Ports (COM & LPT)-> XPROG-box programmer (COM4)

Select Device Manager-> Human Interface Device-> USB Input Device

install-xprog-m-5.6-7

Part 4 – Read and Write AT93C66 with XPROG V5.60

Open local disk C:-> XPROG-BOX 5.60English-> XprogDesktop application

install-xprog-m-5.6-8

Accept the agreement

Click Device

Select Serial EEPROM/ Atmel/ AT93C66

install-xprog-m-5.6-9

Click New, then Read

install-xprog-m-5.6-10

install-xprog-m-5.6-11

 

Click Write to write file to the device

install-xprog-m-5.6-12

install-xprog-m-5.6-13

install-xprog-m-5.6-14

install-xprog-m-5.6-15

 

Close NONAME2 and NOT save changes to NONAME2

install-xprog-m-5.6-16

Again, click New, then Read

install-xprog-m-5.6-17

Close NONAME2 and NOT save changes to NONAME2

Again, click New, then Read

Close NONAME2 and NOT save changes to NONAME2

Send XprogDesktop application to Desktop to use for convenience

http://blog.obdii365.com/2016/06/30/install-xprog-m-v5-60-on-win7/

Xprog V5.55 Read BMW E46 M35080 EEPROM

Share a customer solution to read BMW E46 EEPROM M35080 with Xprog-m V5.55 programmer, including how to solve “FF FF” error when reading M35080.

 

All begin with “FF” error!

xprog-m-error-FF-FF

Took the cluster apart and soldered directly to pins of M35080 but still got the same results, reads of FF FF

 

Possible reasons:

M35080 16 pin adapter programming board used for the M35080 with the Xprog m is not working properly
”99% sure the FF reads are due to the adapter board” (by a xprog user)

 

How to do:
replaced the 8 wire harness with a new one and the soldering is as it should be

to remove the 8 wires from the board, connect brass pins and connect the 8 wires to the corresponding slots on the 16 pin connector thus avoiding the use of the board

the part of the xprog M35080 adapter programming board:

xprog-m-connection-1

soldered the wires directly to the corresponding pins off of the connector that connects to the xprog box and thus bypassed the M35080 xprog green board:

xprog-m-connection-2

xprog-m-connection-3

xprog-m-connection-4

the M35080 pin order and the Xprog-m 16 pin connector pin labels so that the correct 7 pins can be sequenced between the M35080 eeprom and the Xprog-m special programming board for the M35080 eeprom:

xprog-m-connection-5

xprog-m-connection-6

Have rewired and here is the read:

xprog-m-error-FF-FF

xprog-m-5.55-read-m35080-2

selected E46 M35080 and not E46 Bosch M35080 — that is why the read came out as pictured with an incorrect representation of the VIN and the other data
saved the original file on the m35080 eeprom and then we edited that bin file and saved it with another name

erased the m35080 and loaded the original file that was edited

wrote the new file to the m35080

did a new read to confirm all was well and it was
Hope it’s a matter of selecting the correct device, reading, saving, editing, renaming/saving, erasing and verifying all steps taken and finally writing and then doing a read of the new data on the M35080 and putting back together the cluster and calling it a successful finished project!!!!!

http://blog.obdii365.com/2016/05/30/xprog-m-v5-55-read-bmw-e46-m35080-eeprom/

Theme: Fresh Print by BlogBaker. Powered by BlogBaker.