Abrites Ltd
Date: 01.10.2015
ABPROG Programmer for AVDI
User’s Manual
Issued by: Abrites Ltd.
www.ABRITES.com
List of revisions
Date Chapter Description Revision
01.10.2015 ALL Document revised 2.0
1 INTRODUCTION
ZN030-ABPROG and ZN031-M35XXX/SPI/I2C Adapter together with ABPROG Programmer software allows
you to erase and write SPI,I2C,Micro Wire EEPROM memory(35xxx,95xxx,24xxx,93xx) with and
without incremental registers , read the SSID of the NEC KEY, erase the NEC chip and then program it
again.
ZN030-ABPROG and ZN031-M35XXX/SPI/I2C Adapter together should be used with ABRITES software
produced by Abrites Ltd.
ABRITES is a trade mark of Abrites Ltd.
1.1 Scope of the manual
This document describes software and hardware installation of kit for EEPROM and MCU memory
programming.
The basic package of kit for EEPROM and MCU memory programming:
ZN030-ABPROG
ZN031- M35XXX/SPI/I2C Adapter
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
SO8 –DIP8 Adapter
ZN032 - Adapter with socket for NEC MCU (optional)
ZN034 - ABPROG flat cable
2 SYSTEM REQUIREMENTS
Minimum system requirements – Windows XP, Pentium 4 with 512 MB RAM
USB port with supply 100 mA / 5V +/- 5%
Version 1.6 4
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
3 SUPPORTED DEVICES
-M35080VP M95080
-M35080V6 M95160
-D080D0WQ M95320
-D160D0WQ M95640
-M95010 M95128
-M95020 M95256
-M95040 24C01
-M95080
-M95160
-M95320
-M95640
-M95128
-M95256
-24C01
-24C02
-93C76
-24C04
-93C86
-24C08
-24C16
-24C32
-24C64
- 24C128
- 24C256
- 24C512
- 24C1024
-93C46
-93C56
-93C66
-RENAULT BCM (X95)
-W164,W166,W203,W204,W210,W211,W212,W216,W220,W221
MB EZS Reading hash without password
Version 1.6 5
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
4 GETTING STARTED
We suppose that already your AVDI interface is configured and fully working.
You can receive optional separate installation file for your kit EEPROM and MCU memory programming.
Software is a windows executable file named ‘SetupInterface_ABPROG_VVxxxx.exe’ where VVxxxx is your
interface identification number.
4.1 Software installation
steps
Please start the executable file above to
initiate installation procedure and follow
the onscreen instructions.
Depending of your operation system
and settings you can be asked to
confirm starting of installation
procedure.
Version 1.6 6
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Press “Next” button to proceed with the installation.
Read carefully license agreement and select “I accept the agreement” if you accepting all. Then press “Next”
button.
If you not agree press cancel to interrupt installation procedure.
Press “Next” button to proceed with the
installation.
Press “Next” button to proceed with the installation.
Version 1.6 7
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Press “Next” button to proceed.
If you don’t want desktop icons
uncheck the checkbox about
creation of icons.
Press “Next” button to proceed.
Press “Install” and wait until
installation complete.
Version 1.6 8
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Be sure that checkbox about
installation of interface’s USB
drivers is set especially if you
installing for first time Abrites
Diagnostic Software.
Press “Finish”.
Depending setting of your operation
system you can be asked to confirm
installation of USB drivers.
Press “Yes”.
Wait until installation of USB
driver finish.
Version 1.6 9
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
4.2 Connection of the programmer to the interface
4.3 Starting of the software
When programmer is ready and connected to the interface you can start the software.
Version 1.6 10
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Drop down list for device type:
SPI, I2C, MW, NEC_KEY, MCU... Drop down list for EEPROM models
Read EEPROM
Write EEPROM
Verify EEPROM
Erase EEPROM
Load dump
Save dump
Exit
Version 1.6 11
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
5 ERASING INCREMENTAL EEPROM
Once you select the "EEPROM" use button "Erase Incr.".
Keep in mind that the time to erase "M35080VP/M35080V6" could reach 90 seconds!
Version 1.6 12
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
After erase finish you can write the new data using the button “Load” and "Prog Incr.".
6 CONNECT "ZN030-ABPROG" WITHOUT "ZN031-M35XXX/SPI/I2C
ADAPTER"
You can use your "ZN030-ABPROG" for programming and reading of ordinary SPI EEPROM
memory as M95080, M95160, M95320, M95640, M95128, M95256 without using "ZN031-
M35XXX/SPI/I2C Adapter". To do this you must connect the memory to DB25 connector in the
manner shown in the picture.
Keep in mind that the power from "ZN030-ABPROG" is 5V DC!
Version 1.6 13
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
7 READ SSID ,ERASING AND PROGRAMMING OF NEC KEY FOR MERCEDES
All existing customers should have received a NEC board, on which to solder the NEC chip. For all
existing customers - if you send to support@abrites.com the dump from the EZS we will send you
back a working key dump and you will not need to worry about virginizing ECU, 7GTronic and so
on.
7.1 Erasing NEC chip
The NEC chip should be soldered on the NEC PCB, which is provided by Abrites. Here is how the
erasing procedure looks like:
Version 1.6 14
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Version 1.6 15
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
7.2 Reading SSID
7.3 Programming NEC chip
Version 1.6 16
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Programming the CPU directly on the key using ABPROG flat cable.
Version 1.6 17
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Version 1.6 18
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
NOTE : FOR CUSTOMERS WHO HAVE "ZN002" AFTER FIRMWARE UPGRADE CAN BE USED
AS "ZN030-ABPROG".
To read the immobilizer with the ABPROG you need to solder as showed on the pictures below.
In the ABPROG you should select “MCU” and the “Renault (X95) BCM” option.
Version 1.6 19
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
Version 1.6 20
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
For Renault and Audi BCM
Blue - 5
Red - 20
Black - 14
Green - 25
Brown - 6
Yellow – 13
Version 1.6 21
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
8. Hash reading without password from the EZS via IR. Password
reading from NEC MCUs version 57
8.1 EZS hash reading through IR
Please use the ZN036 adapter to connect to the EZS. From the drop down please select
MB_EZS_IR and the model i.e. W204. Press the read button and place the IR adapter in the key
fob. After reading the key fob the hashes will be displayed.
Please note that for some models you will need to take the key in and out of the fob multiple times.
Version 1.6 22
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015
8.2 NEC MCU version 57 password reading
Place the NEC processor from the key on the adapter plate (part of the ZN036).
Press the “READ NEC KEY PASSWORD” and wait until the reading is over.
This process can take from several seconds up to a few minutes. After successfully reading the
password you will see the SSID and password fields among other details.
When you have the full dump, the hash files + the password you can save the file and use it later in
order to generate the dumps using the Abrites diagnostics for Mercedes.
Version 1.6 23