VVDI Prog Wiring Diagram to MC9S12XEP100 Secured

 Xhorse VVDI Prog supports the Motorola MCU MC9S12XEP100 chip. There is a secured and unsecured variant.

I going to read the secured mcu data.

The connection diagram shows the cable. Extra connections over BDM.

Specific pins for the package. Quite helpful.

No need to lift the pin for EXTAL – I’ll just take the zero Ohm R34 off the board.

I can’t see the ground needing to be immediately next to the EXTAL pin. Bottom of C32 or C33 should do.

BKGD can come off TP25…. Reset off TP26. This might be easy!

And we’ll smack GND and VCC onto the BDM header on the board.

Urgh, XCLKS is needed as well… PE7

Which pops out on one of the Arduino-ish headers. Hoping that isn’t too far away from the chip.

Then do soldering job. Not too bad on this. XCLKS (green) is on the underside on one of the Arduino headers. Massive long trace. I think that this is just going to signal to the micro that it’s to expect an external clock signal on EXTALS instead of the crystal.

The EXTAL and ground are in a bit of coax and it warns not to shorten them… so it might be getting a bit fruity on that front.

Looking good. The vvdi prog programmer makes and audible noise when interacting with the micro.

It clearly asked me if I wanted to bypass security. More audible noise, like cool whine. And there we go… It’s unsecured.

It works. Flash contents are still there. Nice.

Allows control of VCC!

Operation success. Save data.

Credit to @cyber gibbons.

www.vvdishop.com

Check Xhorse VVDI Prog Firmware PCB and Inside Components

 Xhorse VVDI Prog programmer is an interesting device carrying out some quite advanced attacks.

Here comes the 2021 hardware review.

Disclaimer: Credit to the contributor cyber gibbons.  The review here is for sharing purpose. We are not holding the responsibility if cause damage by disassembling the vvdi-prog..

The vvdi-prog  has arrived.

DIP socket is for EEPROMs and SPI flash – it can read a lot of the common ones in socket or via a clip.

It’s actually really quite polished, and significantly above average in build quality and design. Strong plastics.

The MCU stuff comes off this DB25 connector on the end.

On opening it, a largely single-sided board. Recent date. Very clean inside, no flux residue.

Interesting inside. An STM32 and a ProASIC. Power supply section looks like thought has gone into it. Loads of diodes, probably for protection in the automotive environment. No sure what the lithium cell is doing.

STM32F407. One of the most common chips out there.

Can’t quite work out the specific part, but it’s a ProASIC3 FPGA.

 There’s one LQFN 32 that I has had the part number badly scratched off it.

Not sure on this. 4 pins and 3 pins tied together, thick tracks. Probably switching or regulating.

A K-Line bus driver, probably for interacting with certain ECUs.

NXP chip

that’s a SWD header for the STM32 up there.

A header for the ProASIC… not worked with these

Protection diodes – not cheap to do this stuff.

It takes 12V and can supply a decent amount of current for some ECUs.

Comes with a series of cables. Braided, sleeved. Nice quality.

Some active components inside… and hot snot. Not sure what the chip is.

This ECU one is a bit more interesting.

Four of each for ground and power – I think this is for powering bigger ECUs like BCMs and immobilisers.

CAN, K-Line, ignition and boot mode come as signals.

Again, some active components inside.

Xhorse vvdiprog is a complex product. Certainly not just something the a TL866 in another box. A device that bypasses security on a range of devices!

https://www.vvdishop.com/service/xhorse-vvdi-prog-hardware-review.html

Some Important VVDI Prog Airbag SRS pinouts

Here are some airbag pinouts to some important vehicles (European vehicles mainly) that don’t show in Xhorse vvdi prog programmer.  Thanks to @ s qubiak for sharing.

Renault / Dacia SPC560

Pinout xprog edit for vvdi
Test ok

Opel SPC 56AP54x
Pinout CPT edit for vvdi prog

Fiat 500 L
SRS MPC/SPC
CPT edit for vvdi prog

Dacia / Renault SPC560P50L3 V2
pinout CPT edit for VVDI-prog

Dacia /Renault v3 (SPC560P50L3_V3)
pinout CPT edit for vvdiprog

Skoda SPC5604-114pin
pinout CPT edit for VVDI prog

Kia NEC D70F3628
pinout CPT edit for VVDI prog

VW renesas v850 SRS 70F3466(70F3424)
pinout CPT edit for VVDI prog

 

Keep updating…

www.vvdishop.com

VVDI Prog Software Update to V4.8.6

Xhorse VVDI PROG programmer released new software version 4.8.6.
————————————-
v4.8.6              (2019-9-02)
* This version DON’t need update
firmware
+ Add VVDI PROG USER MANUAL 4.8.6
version in Doc folder
+ Add ME17.5.22(TC1724)(ADAPTER),
MEVD17.2.4_Exx(N20)(ADAPTER),
MEVD17.2.4_Exx(N20)(ADAPTER),
MEVD17.2.4_Fxx(N20)(ADAPTER),
MEVD17.2.9_Fxx(N20)(ADAPTER),
MEVD17.2.9_Exx(N20)(ADAPTER),
MED17.5.25(TC1782)(ADAPTER),
MED17_5_22(TC1782)(ADAPTER),
MEVD17_2_3(B38)(ADAPTER),
MEVD17_2_K(B38)(ADAPTER),
MEVD17.2.5(ADAPTER),
MEVD17.2.8(ADAPTER),
MEVD17.2.H(ADAPTER),
MEVD17.2.P_Fxx(N20)(ADAPTER),
MEVD17.2_Fxx(N55)(ADAPTER),
MEVD17.2.G(N55)(ADAPTER),
MEVD17.2.6(N55)(ADAPTER)
options in
<10-BOSCH-ECU-ADAPTER>->
(Need BOSH ECU ADAPTER)
+ Add ME17.5.22(ADAPTER),
MED17_5_25(ADAPTER) options in
<10-BOSCH-ECU-ADAPTER>->
(Need BOSCH ECU ADAPTER)

Free Download VVDI Prog 4.8.6
https://mega.nz/#!Po5XBYBJ!ohwyr2AxAW-FF1nxZXnRQdHHoNjv7L4oLekAxuTxN80

www.vvdishop.com

How to use VVDI Prog to read Delphi MT86 (3500) Gearbox?

Delphi MT86 (3500) Gearbox
Hyundai – Kia

-Read and write ok by ECU reflash cable
-Pinout some as VVDI-Prog manual
-Other operation some as picture

The power should be disconnect and connect before each operation.

Here comes one problem:

i am trying to clone mt86 with 2 infineon inside , i tried to read with vvdi prog the old ecu it says chip not connected i did exactly as the help in vvdiprog. The old ecu have only 3 coils working i don’t know what component is for the coils so i decided clone on other one.

car start with old ecu , and also i tried to read with combiloader it read flash normally i copied on donor ecu but car didnt start so i want to copy whole flash and eeprom with vvdi prog but always chip not connected.

Solution:

In the Delphi MT86 you have 2 Tricore _ TC1766 ( Motor + Gearbox )
To read TC1766 motor you should use this method :
Raise PIN 122 (PIN 122 should be lift).

Good luck.

www.vvdishop.com