How to program vag 4th 5th IMMO by Xtool X100 PAD 2 full set

XTOOL X100 PAD2 full set working with Xtool KC100 adapter is verified to program key for VAG 4th 5th IMMO. BTY, X100 PAD 2 standard set is optional to choose vag 4th 5th IMMO programming function.
Matched Dashboard Type for 4th ,5th immobilizer of VW/Audi/Seat/Skoda: CDC24C32,NEC24C32,9S12,NEC24C64,NEC24C64 color screen, Jiangsen, NEC95320, NEC24C64 white screen.

Testing Xtool X100 PAD 2 full set and Xtool KC100:

88-1 8-2 8-3 8-4

Here full package XTOOL X100 PAD2 Full set and Xtool KC100 adapter:

8-5

Here XTOOL Scan Tool X100 PAD2 Full Set special Adapter for 4th 5th immo

8-6

Key programming for 4th,5th immobilizer of VW/Audi/Seat/Skoda:

8-7
8-8
8-9
8-10

Ktag 7.020 Update- Change CID SD Card

This is the Ktag 7.020 firmware master clone and SD card method.

With thanks to ovi730 and SVVAG2000

Now the solution of 7.020 is complete
Attached firmware of 7.020 ktag – no crp lock to cpu , SD image and necessary sd CID

Ktag 7.020 firmware crp0 ok tested L00000000 , C0000, C0000

https://mega.nz/#!rUdDnYDA!RrHb5a8CcksLq22Yl9r-sjwZ-FUfAZV44odW-1N62xQ

SD card CID : For correct operation device it is necessary to change CID SDcard on 035344535330344780399b1368010300 CID: 035344535330344780399b1368010300

ECU Programmer Ktag v7.020 SD image

https://mega.nz/#!7FVwVbjK!HPNbm12Bb4nuYtOoSFmTJQDL–LejDRixGT_0ytmpSw

Info :For correct operation device it is necessary to change CID SDcard on 035344535330344780399b1368010300.

This procedure is supported by not each SD card.

Programs for change of CID and the description of process easy to find in the Internet.I used mmc32 and evoplus_cid from github. This programs for linux. I haven’t found soft working in Windows.

It is difficult to find SDcard which supports change CID.SDcards with built-in chipset of production Samsung meet such requirements….or buy on Alibaba, using search “CUSTOM CID”.

23-1 23-2 23-3 23-4 23-5 23-6

23-7 23-8 23-9 23-10 23-11 23-12 23-14 23-15 23-16 23-17 23-18 23-19 23-20 23-21 23-22 23-23 23-24 23-25 23-26 23-27 23-28 23-29 23-30 23-31 23-32 23-33 23-34 23-35 23-36 23-37

Read and Write BMW Bosch DME MEVD172G with KTAG KTM100

Purpose:

DIY – DME/ECU Read Write and Tuning  2016MY F82 M using KTAG KTM100 master clone ecu tuning tool.

Disclaimer: Credit to su_root on bimmer forum provided the document for educational purposes. We are not responsible for any direct or indirect damage that may occur to your property as a result of the information provided here.

Parts arrived this morning. Below are pictures of what was included in the box.
–KTAG KTM100 Clone (US$349)
-12v/1A AC Adapter
-USB2.0 A-to-B Cable
-Cables to wire up to the DME

27-1 27-2

Software setup:
The instructions provided recommend the use of WinXP/Win7, disabling all network connections and malware detection programs. I was in a rush to stage the software and connect the flashing tool to ensure all was OK so I tested the following setup on a Win10Pro x64 machine. I also made the changes below before starting:
-Disable Driver Signature Enforcement – REQUIRED or Dimsport driver will not install and device will show as ‘Unknown’ under Device Manager
-Disable AV/Malware Software – I use Webroot/Defender and shut them off
-Disable LAN/WLAN adapters

After making the changes above to my PC I powered up the adapter and plugged in the USB cable. Windows warned me of the unsigned driver and continued the install.

Bringing up Car Diagnostic Tool KTM100 I see all is recognized correctly. You can also see below that the DME is supported and a plugin is available to communicate with that DME and calculate the correct checksum. Ready to start!

27-3
27-4

On Sunday I was able to get the car on the dyno and grab some factory numbers.

Phase 1 – Reading the DME:

Here she is. Bosch MEVD172G DME.

Below are a few pictures of the outside of the unit. I cleaned up a bit of sand around the unit to make sure nothing gets in while I attempt to open it up.

27-3 27-527-6

After about 30 minutes with a small blade going around the edges of the unit I was able to open the casing up. Luckily the components are not close to the edge of the case so as you’re going around it with a blade you don’t have to worry too much. But as always be careful not to jam the blade too deep; you may accidentally damage some of the surface mounted components.

27-7 27-8

Wired up the unit to the ECU Programming Tool KTM100 clone using the PDF attachment I posted earlier. Reading procedure is as follows:

1. Connect wires from the provided harnesses to the DME pins as shown in the Bosch PDF including BOOT pin.
2. Power ON KTM100 and connect to USB on PC
3. Launch KTM100 Application
4. Connect the harness side of the cables to the KTM100
5. Click ‘ID’ in KTM100 Application to verify DME communication.
6. Done. Now you can carry out the function you need (read/write/etc)

27-9 27-10

27-11

27-12

Phase 2 – Tuning:

You have two options:

1. Acquire and LEARN tuning software like WinOLS, ECM TITANIUM or similar, and spend time and resources on custom dyno tuning the car.

2. Take your dumped files and send them off to a tuner for tuning service. Most US tuners will flat out turn your business away. I wont call them out here but I would encourage you to contact them and listen to their response first hand.

I installed the DME back into the car yesterday afternoon. It was pretty nerve wrecking to sit in the car and push the ‘Start’ button. I was very confident I followed all the right steps but there’s always that sense of uncertainty in the back of your mind. What if i damaged something? At that moment I didn’t care if the remaps actually yielded any results; I was just hoping the car would crank back up. I held my breath, pushed ‘Start’ and the car sprung back to life. It was such a sense of accomplishment.

Xprog 5.76 vs Xprog M 5.70 vs Xprog Box 5.60 vs Xprog-M 5.5

Xprog-M programmer is updated to Xprog box v5.76!! So, what’s new in Xprog box 5.76 programmer & what’s the differences among xprog box (xprog m) v5.76 v5.70 v5.60 v5.5.

What is Similarities of Xprog-M programmers v5.76 v5.70 v5.60 v5.5?

Xprog m programmer v5.76 v5.70 v5.60 v5.5 all share the authorization as below:

AUTH-0001 Motorola HC05 family authorization (allows to read/write EEPROM)

AUTH-0002 Motorola HC08 family authorization (allows to read/write EEPROM)

AUTH-0003 Motorola HC11 family authorization (allows to read/write EEPROM)

AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)

AUTH-0005 Texas Instruments TMS370/TMS374 family authorization (allows to read/write EEPROM)

AUTH-0006 Motorola HC05Bxx and HC05Xxx family bypass security authorization (allows to read/write secured EEPROM and flash memory)

AUTH-0007 ST M35080 authorization. Read/Write/Erase device to delivery state.

AUTH-0008 BMW EWS3 authorization

AUTH-0009 ATMEGA family authorization (allows to read/write EEPROM and flash memory)

AUTH-0010 MB ZGS001 authorization

AUTH-0011 Motorola HC11EA9/E9 bypass security authorization (allows to bypass security bit and read EEPROM and RAM memory)

AUTH-0012 National CR16 authorization (allows to read/write EEPROM memory)

AUTH-0014 ST7, ST10 family authorization (allows to read/write internal flash)

AUTH-0015 MPC5xx authorization (depending on device program automatically detects MPC5xx, M95xxx device type, flash, external flash and configuration memory size)

AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)

AUTH-0020 ARM (Micronas, …) Family authorization (allows to read/write internal flash and external serial EEPROM)

AUTH-0021 ARM (Micronas, …) Family bypass security authorization (allows to read/write secured and non-secured internal flash and external serial EEPROM, view/change mileage, Chassis number (VIN), serial number and PIN code).

AUTH-0023-1 MAC7xxx

AUTH-0023-2 XC23xx

AUTH-0024-1 MC9S12Cxx

AUTH-0024-2 MC9S12XE

AUTH-0024-3 9S12XE SECURITY

AUTH-0024-4 MC9S12HA/HY/P

AUTH-0025-1 MPC/SPC5xxx Authorized 11/4/2014

What is Differences bettween Xprog-M box v5.76 v5.70 v5.60 v5.5

Xprog box 5.76 adds new authorization:

(More fucntions are coming soon)

MCU/MPU->infineon{XC16x}->SAK-XC164CS-16F

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S12XD->MC9S12XDx128_EFPROM

MCU/MPU->Fresscale9S12XD->MC9S12XDx128-EFPROM-secured

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XHY->MC9S12XHY128_D-FLASH

MCU/MPU->FresscaleMPC55xx->MPC5515_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

Immobilizers->Yamaxa->T-MAX_TYPE_I_9S12T64

Other ECU ->Chrysler-DodgeJeep->BCM-GRAND_CHEROKEE_WK_2014_Flash

Other ECU ->GM ECU->SAF-XC164CS-16F

Other ECU ->HONDA Bikes->CB650F 2015_Code_Flash

Other ECU ->Renault ClioOther ->EPS_ST10F269

Other ECU ->Renault Modus ->ECU_SAK-XC164CS-32F

Airbag(XC2xxx)->FR3T-14B321-AF(XC2336A-72)->FR3T-14B321-AFflash0

Airbag(SPC560xx)/MPC560x)->Honda_CR-V(SPC560P50LS)->Code_Flash

XPROG v5.70 adds new MCU/MPU:
MCU/MPU->infineon{XC16x}->SAK-XC164CS-16F

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S12XD->MC9S12XDx128_EFPROM

MCU/MPU->Fresscale9S12XD->MC9S12XDx128-EFPROM-secured

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XHY->MC9S12XHY128_D-FLASH

MCU/MPU->FresscaleMPC55xx->MPC5515_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

Immobilizers->Yamaxa->T-MAX_TYPE_I_9S12T64

Other ECU ->Chrysler-DodgeJeep->BCM-GRAND_CHEROKEE_WK_2014_Flash

Other ECU ->GM ECU->SAF-XC164CS-16F

Other ECU ->HONDA Bikes->CB650F 2015_Code_Flash

Other ECU ->Renault ClioOther ->EPS_ST10F269

Other ECU ->Renault Modus ->ECU_SAK-XC164CS-32F

Airbag(XC2xxx)->FR3T-14B321-AF(XC2336A-72)->FR3T-14B321-AFflash0

Airbag(SPC560xx)/MPC560x)->Honda_CR-V(SPC560P50LS)->Code_Flash

XPROG-M v5.60 ECU Box adds new EEPROM / MCU/ECU:

9S12XEP768 P-FLASH, D-FLASH, EEPROM (AUTH-0024-2)
9S12XET256 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEQ384 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEP768 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEP100 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
XC2361A-56 FLASH3  (AUTH-0023-2)
MC9S12XDP512 0M23S
MAC7241 write bug fixed (AUTH-0023-1)….

Xprog-m V5.5 supports IC device list:

MCU/MPU  SPC560 serial

SPC560P44Lx_Code_Flash
SPC560P44Lx_Code_Flash_Test
SPC560P44Lx_Code_Flash_Shadow
SPC560P44Lx_Data_Flash
SPC560P44Lx_Code_Flash_Block
SPC560P50Lx_Code_Flash
SPC560P50Lx_Code_Flash_Test
SPC560P50Lx_Code_Flash_Shadow
SPC560P50Lx_Code_Flash
SPC560P50Lx_Code_Flash_Block

Freescale MPC5xx

MPC
MPC->Configuration-A
MPC->Configuration-B
MPC->External Flash
MPC->External EEPROM M95xxx

MCU/MPU

Freescale 9s12XHY

MC9S12XHY256 D-Flash
MC9S12XHY256 P-Flash

Freescale (Mac7xxx)

MAC7111VAG50_Flash
MAC7111VAG50_Data_Flash
MAC7112VAG50_Flash
MAC7112VAG50_Data_Flash
MAC7116VAG50_Flash
MAC7116VAG50_Data_Flash
MAC7131MVF_Flash
MAC7131MVF_Data_Flash
MAC7241VAF64_Flash
MAC7241VAF64_Shadow_Flash
MAC7242VAF64_Flash

Freescale 9S12XS-secured
MC9S12XS128_D-Flash-Secured
MC9S12XS128_P-Flash-Secured

This is about Xprog box v5.7.6

Xprog box 5.76 reviews.

Tested on HC912D60 the fucntion is okay..
For over an hour Xprog was connected to a PC, internet active, I have no problem with the certificate.

Today tested on ST10F269 (ZBR2 MAN), multiple reading.
Internet access was off.

After compared all version of Xpro-m,the customers know Xpro-M very well now,so the customers can choose the Xpro-m according to thire own requirment.

http://www.cnautotool.com/blog/2017/06/30/xprog-5-76-vs-xprog-m-5-70-vs-xprog-box-5-60-vs-xprog-m-5-5/

Xprog 5.76 vs Xprog M 5.70 vs Xprog Box 5.60 vs Xprog-M 5.5

Xprog-M programmer is updated to Xprog box v5.76!! So, what’s new in Xprog box 5.76 programmer & what’s the differences among xprog box (xprog m) v5.76 v5.70 v5.60 v5.5.

 

What is Similarities of Xprog-M programmers v5.76 v5.70 v5.60 v5.5?

Xprog m programmer v5.76 v5.70 v5.60 v5.5 all share the authorization as below:

 

AUTH-0001 Motorola HC05 family authorization (allows to read/write EEPROM)

AUTH-0002 Motorola HC08 family authorization (allows to read/write EEPROM)

AUTH-0003 Motorola HC11 family authorization (allows to read/write EEPROM)

AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)

AUTH-0005 Texas Instruments TMS370/TMS374 family authorization (allows to read/write EEPROM)

AUTH-0006 Motorola HC05Bxx and HC05Xxx family bypass security authorization (allows to read/write secured EEPROM and flash memory)

AUTH-0007 ST M35080 authorization. Read/Write/Erase device to delivery state.

AUTH-0008 BMW EWS3 authorization

AUTH-0009 ATMEGA family authorization (allows to read/write EEPROM and flash memory)

AUTH-0010 MB ZGS001 authorization

AUTH-0011 Motorola HC11EA9/E9 bypass security authorization (allows to bypass security bit and read EEPROM and RAM memory)

AUTH-0012 National CR16 authorization (allows to read/write EEPROM memory)

AUTH-0014 ST7, ST10 family authorization (allows to read/write internal flash)

AUTH-0015 MPC5xx authorization (depending on device program automatically detects MPC5xx, M95xxx device type, flash, external flash and configuration memory size)

AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)

AUTH-0020 ARM (Micronas, …) Family authorization (allows to read/write internal flash and external serial EEPROM)

AUTH-0021 ARM (Micronas, …) Family bypass security authorization (allows to read/write secured and non-secured internal flash and external serial EEPROM, view/change mileage, Chassis number (VIN), serial number and PIN code).

AUTH-0023-1 MAC7xxx

AUTH-0023-2 XC23xx

AUTH-0024-1 MC9S12Cxx

AUTH-0024-2 MC9S12XE

AUTH-0024-3 9S12XE SECURITY

AUTH-0024-4 MC9S12HA/HY/P

AUTH-0025-1 MPC/SPC5xxx Authorized 11/4/2014

 

 

 

What is Differences bettween Xprog-M box v5.76 v5.70 v5.60 v5.5

 

Xprog box 5.76 adds new authorization:

(More fucntions are coming soon)

 

MCU/MPU->infineon{XC16x}->SAK-XC164CS-16F

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S12XD->MC9S12XDx128_EFPROM

MCU/MPU->Fresscale9S12XD->MC9S12XDx128-EFPROM-secured

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XHY->MC9S12XHY128_D-FLASH

MCU/MPU->FresscaleMPC55xx->MPC5515_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

Immobilizers->Yamaxa->T-MAX_TYPE_I_9S12T64

Other ECU ->Chrysler-DodgeJeep->BCM-GRAND_CHEROKEE_WK_2014_Flash

Other ECU ->GM ECU->SAF-XC164CS-16F

Other ECU ->HONDA Bikes->CB650F 2015_Code_Flash

Other ECU ->Renault ClioOther ->EPS_ST10F269

Other ECU ->Renault Modus ->ECU_SAK-XC164CS-32F

Airbag(XC2xxx)->FR3T-14B321-AF(XC2336A-72)->FR3T-14B321-AFflash0

Airbag(SPC560xx)/MPC560x)->Honda_CR-V(SPC560P50LS)->Code_Flash

 

XPROG v5.70 adds new MCU/MPU:
MCU/MPU->infineon{XC16x}->SAK-XC164CS-16F

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->FresscaleHC08-Updated->MC68HCx08AS/AZ32_CONFIG

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S08->MC9S08AW8_FLASH

MCU/MPU->Fresscale9S12XD->MC9S12XDx128_EFPROM

MCU/MPU->Fresscale9S12XD->MC9S12XDx128-EFPROM-secured

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XF->MC9S12XF128_EEE

MCU/MPU->Fresscale9S12XHY->MC9S12XHY128_D-FLASH

MCU/MPU->FresscaleMPC55xx->MPC5515_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

MCU/MPU->FresscaleMPC560x->MPC5602B/C_Code-Flash

Immobilizers->Yamaxa->T-MAX_TYPE_I_9S12T64

Other ECU ->Chrysler-DodgeJeep->BCM-GRAND_CHEROKEE_WK_2014_Flash

Other ECU ->GM ECU->SAF-XC164CS-16F

Other ECU ->HONDA Bikes->CB650F 2015_Code_Flash

Other ECU ->Renault ClioOther ->EPS_ST10F269

Other ECU ->Renault Modus ->ECU_SAK-XC164CS-32F

Airbag(XC2xxx)->FR3T-14B321-AF(XC2336A-72)->FR3T-14B321-AFflash0

Airbag(SPC560xx)/MPC560x)->Honda_CR-V(SPC560P50LS)->Code_Flash
XPROG-M v5.60 ECU Box adds new EEPROM / MCU/ECU:

 

9S12XEP768 P-FLASH, D-FLASH, EEPROM (AUTH-0024-2)
9S12XET256 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEQ384 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEP768 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
9S12XEP100 SECURITY P-FLASH, D-FLASH, EEPROM (AUTH-0024-3)
XC2361A-56 FLASH3  (AUTH-0023-2)
MC9S12XDP512 0M23S
MAC7241 write bug fixed (AUTH-0023-1)….
Xprog-m V5.5 supports IC device list:

MCU/MPU  SPC560 serial

SPC560P44Lx_Code_Flash
SPC560P44Lx_Code_Flash_Test
SPC560P44Lx_Code_Flash_Shadow
SPC560P44Lx_Data_Flash
SPC560P44Lx_Code_Flash_Block
SPC560P50Lx_Code_Flash
SPC560P50Lx_Code_Flash_Test
SPC560P50Lx_Code_Flash_Shadow
SPC560P50Lx_Code_Flash
SPC560P50Lx_Code_Flash_Block

Freescale MPC5xx

MPC
MPC->Configuration-A
MPC->Configuration-B
MPC->External Flash
MPC->External EEPROM M95xxx

MCU/MPU

Freescale 9s12XHY

MC9S12XHY256 D-Flash
MC9S12XHY256 P-Flash

Freescale (Mac7xxx)

MAC7111VAG50_Flash
MAC7111VAG50_Data_Flash
MAC7112VAG50_Flash
MAC7112VAG50_Data_Flash
MAC7116VAG50_Flash
MAC7116VAG50_Data_Flash
MAC7131MVF_Flash
MAC7131MVF_Data_Flash
MAC7241VAF64_Flash
MAC7241VAF64_Shadow_Flash
MAC7242VAF64_Flash

Freescale 9S12XS-secured
MC9S12XS128_D-Flash-Secured
MC9S12XS128_P-Flash-Secured

This is about Xprog box v5.7.6

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-1.png

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-2.png

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-3.png

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-4.png

Xprog box 5.76 reviews.

Tested on HC912D60 the fucntion is okay..
For over an hour Xprog was connected to a PC, internet active, I have no problem with the certificate.

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-5.png

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-6.png

Today tested on ST10F269 (ZBR2 MAN), multiple reading.
Internet access was off.

http://www.forobd2tool.com/wp-content/uploads/2017/06/30/13-7.png

After compared all version of Xpro-m,the customers know Xpro-M very well now,so the customers can choose the Xpro-m according to thire own requirment.