Xhorse VVDI Prog V5.0.3 Update Feature

 Xhorse VVDI Prog software released new update on May 28th, 2021.

* This version DON’t need update firmware
+ Add FM3104,
FM3116,
FM3164,
FM31256,
options in
<1-EEPROM&FLASH>-><RAMTRON>
+ Add R5F11F_Data_8KB_Write,
R5F11FxJx_Flash_256KB_Write,
R5F11FxKx_Flash_384KB_Write,
R5F11FxLx_Flash_512KB_Write,
options in
<2-MCU>-><RENESAS-RL78-G1H>
+ Add R5F11Wx7x_Flash_4KB_Write,
R5F11Wx8x_Flash_8KB_Write,
options in
<2-MCU>-><RENESAS-RL78-G1M>
+ Add R5F11Yx7x_Flash_4KB_Write,
R5F11Yx8x_Flash_8KB_Write,
options in
<2-MCU>-><RENESAS-RL78-G1N>
+ Add MPC5644B,
MPC5644C,
MPC5645B,
MPC5645C,
MPC5646B,
MPC5646C,
options in
<2-MCU>-><MOTOROLA-MPC564XXXX>
+ Add MPC5746G,
MPC5747C,
MPC5747G,
MPC5748C,
MPC5748G,
options in
<2-MCU>-><MOTOROLA-MPC57XXXX>
+ Add SPC564B64,
SPC564B70,
SPC564B74,
SPC56EC64,
SPC56EC70,
SPC56EC74,
options in
<2-MCU>-><ST-SPC564XXXX>
+ Add MT22.1(MC9S12XET256)
option in <3-ECU>-><DELPHI>
+ Add CADILLAC-CATSL
option in <7-AIRBAG-><GM>
+ Add CAMRY(R7F701A22)
option in <7-AIRBAG>-><TOYOTA>
+ Add BAOJUN510-PEPS(MC9S12XEG384),
BAOJUN560-ESCL(STM8AF6226)(2015),
BAOJUN560-PEPS(MC9S12XEG384)(2015)
options in <8-OTHER>-><SAICMOTOR>
+ Add HOWO-STRYKER-SECURED-DASHBOARD(19)
options in
<8-OTHER>-><HOWO>
+ Add MISTRA-47-PKE-MOUDLE(17)
options in
<8-OTHER>-><Hyundai>
+ Add 70-CHIP-IMMO-MOUDLE
options in
<8-OTHER>-><KIA>

 

 

Free Download VVDI Prog software v5.0.3

https://mega.nz/file/4M1TGYgS#_XuD7j2BaxoWatnUXbHM2cBQFt35AnuQOlI3Z4ip6cw

Program 2020 Kia Sportage Key by Xhorse VVDI Mini OBD Tool

 Xhorse VVDI Key Tool Max + Mini OBD Tool support to program a new remote for 2020 Kia Sportage success. This key isn’t a transponder key, a regular lxp90 blade is able to crank it. Now I’m about to show its procedure.

 

Plug VVDI Mini OBD Tool into OBD2 port, connect it with Key Tool Max via Bluetooth.

Immo programming >> Kia >> Select from model >> US market >> Sportage >> Remote key adaptation >> Start execution

 

Wait loading until 100%…

 

Please choose OBDII interface and turn on the ignition switch to ON.

Press “OK”.

 

Switch ignition off, remove the key, press “OK”.

Press UNLOCK or LOCK button for more than 1 second.

 

Match 1 remote successfully.

Press “OK” to program next one, press “Cancel” to complete.

 

You’ll hear a beep when match completed.

 

Remote match completely.

Press “OK”.

 

Let’s test the key, all are workable.

Key programming was done!

This is using VVDI Key Tool Max & Mini OBD Tool to add a remote for 2020 Kia Sportage. This key doesn’t have a chip so I only programmed the remote to vehicle.

https://www.vvdishop.com/

Program Sprinter W906 All Keys Lost by VVDI MB

 Mercedes Sprinter W906 all keys lost programming by xhorse vvdi prog and vvdi mb tool on bench. Reading MCU data using vvdiprog, no need to calculate password online. Password is extracted directly from dump.

FYI: Add a spare key is easier, check the guide here.

 

 

Device used:

Lishi HU64 auto pick

Xhorse VVDI MB BGA Tool

Xhorse VVDI Prog

2 VVDI BE keys to be programmed

Benz EIS EZS Gateway test platform 

 

Main steps:

Decode door lock

Remove EZS

Read EZS adapter

Make key

 

 

Procedure:

Decoding of the door lock (HU64) with the Lishi 2in1 Pick tool

Remove EZS

Read data with VVDI Prog software and EZS adapter (without soldering)

If don’t have EZS adapter, check wiring diagram and solder

In VVDIProg software, select Immobilizer->Benz-EIS Sprinter 9S12DT256 (Adapter)->Read ID

Read ID success

Read EEPROM and save data

 

Run VVDI MB software, select Prepare Key File-> Load EIS file

Load EIS data read by vvdi-prog

Select key7 and key8 unused key position and Prepare Key File

Insert key into EZS and turn ignition ON

Then remove key and insert BE key into vvdi mb tool

Calculate password success. Save key file.

Preparing key 7 and key 8 until completed

Go to Read Write Key function.

Load key7 key file and write key

Turn on ignition switch and turn off

Insert key into VVDI MB,  write 1st key success

Repeat the procedure to write 2nd key.

 

Test both new keys. Working no issue, car starts, remote control works.

Done.

http://blog.vvdishop.com/xhorse-vvdi-mb-program-mercedes-sprinter-w906-all-keys-lost/

Xhorse VVDI2 V7.0.0 Software Update Feature

 Xhorse VVDI2 key programmer software released to new version V7.0.0 on May 20th, 2021.

 

VVDI2 V7.0.0 Update Feature

*** 2021-05-20
*** Require firmware V7.0.0
=====VAG V7.0,0 =====
1. Support OBD access 5ND920873B (H510655, H520657): Support OBD backup eeprom, read immodata, key learn, change KM etc.
2. Support decode Johnson controls immodata: Make dealer key and key learn-Require load the data read by MINI PROG or KEY TOOL PLUS
Support Jetta dashboard: 31G920850A, 31G920850B,  31G920850C, 31G920850F
Support Santana dashboard: 34D920850C, 34D920850E,  34D920850G
3. Improvement for auto detect VAG immobilizer system
4. Bugfix
===== BMW V7.0,0 =====
1. Support disable/enable keys for G-series
2. Support program FEM/BDC (unsupport version) directly, After programming can do unlock function
3. Support delete CAS1/CAS2/CAS3/CAS3+ key position(in Edit key information)
4. Bugfix
===== Porsche V7.0.0 =====
1. Bugfix
===== PSA V7.0,0 =====
1. Bugfix
===== Transponder Programmer V7.0.0 =====
1. Immobilizer data tool: Support make key for the landrover (2015-2018) without write EEPROM back, direct start engine: require VVDI proximity remote
2. Immobilizer data tool: Euro-> Fiat-> Ducato->2010 – 95160 bugfix
3. Immobilizer data tool: Euro->Iveco-> Daily->1999 93C56 bugfix
4. Immobilizer data tool: Aisa-> Mitsubishi-> Pajero->2000 – 68HC805
bugfix
5. Bugfix
===== Copy48 (96 bits)V7.0,0 =====
1. Bugfix
===== J2534 V7,0,0 =====
1. Bugfix
===== Online Upate Tool V7.0.0 =====
1. Bugfix
===== Quick Start V7.0.0 =====
1. Bugfix

 

 

V7.0.0 VVDI2 Software Free Download

Xhorse VVDI Prog MC9S12XEP100 Secured Wiring Diagram

 Xhorse VVDI Prog supports the Motorola MCU MC9S12XEP100 chip. There is a secured and unsecured variant.

I going to read the secured mcu data.

The connection diagram shows the cable. Extra connections over BDM.

Specific pins for the package. Quite helpful.

No need to lift the pin for EXTAL – I’ll just take the zero Ohm R34 off the board.

I can’t see the ground needing to be immediately next to the EXTAL pin. Bottom of C32 or C33 should do.

BKGD can come off TP25…. Reset off TP26. This might be easy!

And we’ll smack GND and VCC onto the BDM header on the board.

Urgh, XCLKS is needed as well… PE7

Which pops out on one of the Arduino-ish headers. Hoping that isn’t too far away from the chip.

Then do soldering job. Not too bad on this. XCLKS (green) is on the underside on one of the Arduino headers. Massive long trace. I think that this is just going to signal to the micro that it’s to expect an external clock signal on EXTALS instead of the crystal.

The EXTAL and ground are in a bit of coax and it warns not to shorten them… so it might be getting a bit fruity on that front.

Looking good. The vvdi prog programmer makes and audible noise when interacting with the micro.

It clearly asked me if I wanted to bypass security. More audible noise, like cool whine. And there we go… It’s unsecured.

It works. Flash contents are still there. Nice.

Allows control of VCC!

Operation success. Save data.

 

Credit to @cyber gibbons.

www.vvdishop.com

Xhorse VVDI Prog Hardware Explanation

 Xhorse VVDI Prog programmer is an interesting device carrying out some quite advanced attacks.

 

 

Here comes the 2021 hardware review.

 

Disclaimer: Credit to the contributor cyber gibbons.  The review here is for sharing purpose. We are not holding the responsibility if cause damage by disassembling the vvdi-prog..

 

The vvdi-prog  has arrived.

DIP socket is for EEPROMs and SPI flash – it can read a lot of the common ones in socket or via a clip.

It’s actually really quite polished, and significantly above average in build quality and design. Strong plastics.

The MCU stuff comes off this DB25 connector on the end.

On opening it, a largely single-sided board. Recent date. Very clean inside, no flux residue.

Interesting inside. An STM32 and a ProASIC. Power supply section looks like thought has gone into it. Loads of diodes, probably for protection in the automotive environment. No sure what the lithium cell is doing.

STM32F407. One of the most common chips out there.

Can’t quite work out the specific part, but it’s a ProASIC3 FPGA.

 There’s one LQFN 32 that I has had the part number badly scratched off it.

Not sure on this. 4 pins and 3 pins tied together, thick tracks. Probably switching or regulating.

A K-Line bus driver, probably for interacting with certain ECUs.

NXP chip

that’s a SWD header for the STM32 up there.

A header for the ProASIC… not worked with these

Protection diodes – not cheap to do this stuff.

It takes 12V and can supply a decent amount of current for some ECUs.

Comes with a series of cables. Braided, sleeved. Nice quality.

Some active components inside… and hot snot. Not sure what the chip is.

This ECU one is a bit more interesting.

Four of each for ground and power – I think this is for powering bigger ECUs like BCMs and immobilisers.

CAN, K-Line, ignition and boot mode come as signals.

Again, some active components inside.

Xhorse vvdiprog is a complex product. Certainly not just something the a TL866 in another box. A device that bypasses security on a range of devices!

https://www.vvdishop.com/service/xhorse-vvdi-prog-hardware-review.html