Sunteți pe pagina 1din 67

1

Spa Works, 54 Spa Road,


Hockley, Essex. SS54AS

Phone 07808 715245, 07743 646235

E-mail autoremoteman@googlemail.com
www.autoremoteman.co.uk
2

Software Installation Instructions.

Insert the CD into the laptop CD drive.

Copy the Auto-Lock-kit files from the CD and paste them into a folder on the C drive of the
laptop.

Open the Uuprog_10016 folder and run the Setup program.

Copy the uuprog.lic file from the uuprog folder and paste it into C:\program
files\Elrasoft\UPA-USB Suite\Device Programmer.

Copy the uuprog.exe file from the CD and paste it into the same location as above. You will
be prompted to over-write the file. Click ok.

Open the Drivers folder and run the Sentinel Protection Installer 7.3

Insert the security dongle and wait until Windows installs it. (message will appear in the bot-
tom right hand corner)

Plug in the programmer using the USB cable supplied.

When the found new hardware wizard starts, select the third option (not at this time), then
select the second option (install manually). At the next screen select browse, and then direct
the wizard to C:\Elrasoft\UPA-USB Suite\Device programmer. This will install the device
driver for the programmer.

Start the uuprog program. The programmer screen should appear, and at the bottom of the
screen there should be a message saying programmer found and displaying its serial number

Install AdobeRdr_705 from the CD. (just double click the icon, and follow the instructions)

Copy and paste the Locksmith manual from the CD to the laptop desktop screen.

Copy and paste the ToySec2 folder onto the laptop C dive. Then select main.pdf, single right
click and select send to, and then desktop. This will create a shortcut to the Toyota Security
program

Use the same procedure to create a shortcut to the Vagpin.exe file located in the Vag-Pin
folder.

Finally, copy and paste the Hyundai and Pincode programs from the CD to the laptop desk-
top
3

Connect the black programmer box to the computer using THE USB LEAD supplied. Double click the
UPA-USB Programmer icon. At the bottom of the screen you should see a message "Found device pro-
grammer etc."

Click on the yellow chip icon at the top left of the screen.
Select the required device from the list on the right hand side.

The black box with no device socket is the programmer.

The black box with the 24 pin ZIF socket is for programming 8 pin devices. The 8 slots nearest to the lever
are for reading and programming the 93C46, 56 etc. type of device. Pin 1 is marked by a red dot on the left.
The 8 slots at the other end are for programming the 24Cxx, 250xx and 950xx series devices. Once again
pin 1 is marked by a red dot on the left (at the top end, away from the lever)

The black box with 2 device sockets is an adapter for re-programming the 68 pin MC68HC11F1 device
found in :-

Fiat 16F ECU


Fiat Multec ECU
Fiat 8F ECU
Fiat 18F ECU
Vauxhall Multec ECU

Pin 1 is marked by a red dot.

and the 52 pin MC68HC11E9-old device found in :-

Fiat coupe IAW ECU


Fiat 8P ECU
Vauxhall Multec ECU
Alfa Romeo IAW ECU
Renault Renix ECU
Volvo Renix /Siemens

Pin 1 is marked by a red dot.

The black adapter with one BLACK 52 pin PLCC socket is for reading the devices found in the early VW
and Vauxhall immobilisers, and the devices found in the Lucas Mazda immobiliser and Rover/Honda PGM
system immobilisers. The device is read as MC68HC05B6. These devices CANNOT be reprogrammed. All
the information that you need is displayed when you read the device.

The black adapter with one BROWN 52 pin plcc socket is for reading the MC68HC11EA8 device, as found
in the BMW EWS.

The box with the single 28 pin PLCC adapter and the LCD display is a standalone Pin reader for the later
Vauxhall (1999 on) and The VW immobilisers .
4

Software Operating Instructions


1. Connect programmer to computer USB using the leads provided
2. Insert Data protection key into a suitable USB port.
3. Double click the Uuprog icon on desktop screen.
4. Select device type.
5. Load device into relevant adapter (make sure it is clean)
6. Select desired file from the File, Open menu
7. Click on program and follow the on-screen prompts.

Basic Advise
1. Before removing a chip, mark which way round it is fitted
2. Always save the original file before overwriting the chip.
3. Do NOT use excess force when removing chips.
4. Before re-soldering ensure that the chip is located correctly on the
pads.
5. Make sure that the device is clean and remove excess solder from legs
before attempting to read or program.

HEXIDECIMAL. How it works.

Hex is just counting in base 16 instead of Decimal which is base 10. ie.

Decimal = 00 01 02 03 04 05 06 07 08 09 - 10
Hexidecimal = 00 01 02 03 04 05 06 07 08 09 0A OB OC OD OE OF - 10

When you look at a screen dump of a chip you will have address lines down the left hand side i.e.

0000
0010
0020 20 21 22 23 24 25 26 27 28 29 2A 2B 2C 2D 2E 2F
0030

To find an address simply count across the page.


5

BMW EWS Reader


This adapter is the single 52 pin socket with the BROWN device socket.
Device is = MC68HC11EA9
Oscillator Khz speed needs to be set to 8000
Works on 046J and 047J devices. (EWS 2 and 3, 3+)

4th used key


1st unused key
2nd unused key

The unused keys have the 12 bytes of revolving code still set as FF, whereas on the used keys the revolving
code is in use and contains hex information. Locate the first unused key by looking for the first 12 bytes of
FF , the 10 bytes preceding the 12 bytes of revolving code are the fixed code for the key.
This should be programmed to a new blank transponder chip, which should then start the car.

This system does not work with EWS dumps where there are 13 bytes of revolving code.
6

BMW FILES
BMMS41VG.ECU = MS41 ECU VIRGIN FILE. 24C04 DEVICE

BMMS41VG.EEP = MS41 VIRGIN EPROM FILE. 28F200 DEVICE

BMMS52VG.EEP = MS52 VIRGIN EPROM LEFT. 29F200 DEVICE

BMMS52V2.EEP = MS52 VIRGIN EPROM RIGHT. 29F200 DEVICE

BMMS43VG.ECU = MS43 5WK90027 VIRGIN. 29F400 DEVICE

MINI04VG.BSI = MINI BODY CONTROL-93C76 VIRGIN FILE

MIN01VG.ECU = MINI S118012001 VIRGIN. 29F400 DEVICE

CHRYSLER

CHRYSLER FILES

CHRBO139.ECU = DIESEL BOSCH 0281-010-139-VIRGIN FILE. 24C02.

CHRNEOVG.ECU = NEON GREY PLUG ECU. VIRGIN FILE 25040 DEVICE


7

Alfa Romeo. Immobiliser 606 22718


Adding keys.
93C46 device located next to the relay.

Typical Screen Dump.

0000 0405 0704 2C21 2200 A4E2 0001 0804 0462


0010 6208 FFFF 6706 47F1 EF11 00D7 8FF6 0A05
0020 00B5 ???? ???? 00?? 7A0F 699F 000A 0000
0030 0000 0000 0000 0000 0000 0000 0000 0000
0040 0000 0000 0000 FFFF FFFF FFFF FFFF FFFF
0050 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
0060 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF
0070 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF

The question marks represent the key code.

Replace your original code with :-

1E 21 AA 65 42

Then program key chip to match :-

Philips 33

0F 80 21 2C 42 AA 65 1E
21 BF 40 00 00 00 00 00
Alfa Romeo / Fiat / Honda 8

With the Alfa Romeo, Fiat & Honda Delphi immobiliser it is possible to add slave keys
directly to the eeprom without affecting the tally to the engine ECU.

See below for key code location.

By replacing the original code with the code for a known key there is no need for any key
programming. Simply edit the buffer, reprogram the eeprom and solder it back on the im-
mobiliser board. Then program the new key to the relevant code. See below for the codes
to enter into the eeprom, and the corresponding codes to program the key.

Key type = Megamos 13

Key code = Immo code =

RED. 69 40 37 91 76 FC FE 03 06 6D 41 8D
BLUE R 69 30 BB F8 F6 61 FE 03 86 7C 78 3D
BLUE 69 30 BB 34 16 FC FE 03 86 7C 14 85

Note

It is not possible to add a red key in this way as it affects the tally to the engine ECU.
Red code applies only to matched eeprom files with 3 keys already programmed (e.g
IAW 49F etc.)
9
Fiat / Alfa Files
ALFCO4RN.ECU = ALFA BOSCH ENGINE ECU. 24C04 IN RUN (REMOVE IMMO OR PROG KEYS)

ALFEARLY.IMM = ALFA EARLY YELLOW IMMO VIRGIN. 93C46 DIL THROUGH THE BOARD.

ALFDELPH.IMM = ALFA DELPHI IMMO VIRGIN. 93C46 SOIC (SURFACE MOUNT)

ALF22718.IMM = ALFA 60622718 YELLOW IMMO VIRGIN. 93C46 SOIC.

ALFGTVRN.ECU = ALFA GTV MC68HC11E1 52 PIN IN RUN FILE.

ALFGT033.ECU = ALFA GT 0261-501-033 95080-VIRGIN FILE

ALFGT032.ECU = ALFA GT 0261-S01-032 95080 VIRGIN FILE

FIABOSMK.ECU = FIAT BOSCH ECU. 24C04 3 MASTER KEYS PROGRAMMED

FIABOSRN.ECU = FIAT BOSCH ECU. 24C04 IN-RUN (REMOVE IMMO OR PROG KEYS)

FIABRAVO.ROF = FIAT BRAVA / BRAVO 93C46 VIRGIN ROOF REMOTE REMOTE

FIADELMK.IMM = FIAT DELPHI IMMO. 93C46 3 MASTER KEYS PROGRAMMED.

FIADELVG.IMM = FIAT DELPHI IMMO. 93C46 VIRGIN FILE (PROG KEYS)

FIA4EFVG.IMM = FIAT IAW 4EF ECU. 25080 VIRGIN FILE. (PROG 3 KEYS)

FIA49FMK.ECU = FIAT IAW 49F ECU. 95040 3 MASTER KEYS PROGRAMMED.

FIA49FVG.ECU = FIAT IAW 49F ECU. 95040 VIRGIN FILE (PROG 3 KEYS)

FIA49FRN.ECU = FIAT IAW 49F ECU. 95040 IN-RUN FILE

FIACPERN.ECU = FIAT COUPE IAW 4WF. 68HC11E1 52 PIN IN RUN FILE. (REMOVE IMMO)

FIA4Q4RN.ECU = FIAT COUPE IAW 4Q4. MC68HC11E9 old IN RUN.

FIAULYRN.ECU = FIAT ULYSSE IAW 8P22 68HC11A1 52 PIN IN RUN FILE.

FIAYELVG.IMM = FIAT BOSCH YELLOW IMMO 93C46 VIRGIN FILE. (PROG KEYS)

FIA4AFRN.ECU = FIAT IAW4AF IN RUN FILE. 95160 DEVICE

FIABR19D.ECU = BRAVO 1.9 DIESEL VIRGIN FILE. 95040 DEVICE.

FIAMADRN.ECU = MAREA DIESEL, BOSCH ECU. IN RUN FILE

FIA8P22R.ECU = FIAT IAW 8P-22 MC68HC11E9 old. IN RUN.

FIAHITVG.ECU = FIAT HITACHI 2 PLUG VIRGIN FILE. 93C46

FIA5NFVG.ECU = FIAT IAW5NF.T1 STILO VIRGIN FILE. 95160 DEVICE.

FIA16FRN.ECU = FIAT IAW16Fxx. MC68HC11F1. IN RUN.

FIAMARVG.IMM = FIAT MARELLI IMMO. VIRGIN FILE. MC68HC908AZ32 DEVICE

FIA500VG.ECU = FIAT 500 1.3 MULTIJET. VIRGIN FILE 95080 DEVICE

FIAMUL19.ECU = FIAT MULTIPLA 1.9JTD VIRGIN 0281 012 294. 95080 DEVICE
10

FIAT Immobiliser. (Marelli)


Temic 11 key.

The 28 pin device is read as an MC68HC05E6. The 64 Pin is MC68HC08AZ32.

The key location varies from unit to unit. As a guide the key data consists of 3 bytes of infor-
mation, repeated 2, 3, 4 or even 5 times.

Usually on line 010 and 040 towards the end (i.e. address 01E or 01F, 04E or 04F) you will
find key data which is only repeated twice.

CHECK AND DOUBLE CHECK THAT THE KEY DATA IS NOT REPEATED ANY-
WHERE ELSE !!

And the replace the original data with :-

F0 A5 71

Use the Temic 11 T5 masterchip or enter the following code with RW2,3 or 4 :-

A5 8E 7D 5F 00 00 00 0F
A5 8E 7D 5F 00 00 00 0F

FIAT IAW 16F xx type ECUs


The 68 pin PLCC Device is read as an MC68HC11F1

Read the device and then edit line 120 with the following :-

FF FF FF FF FF FF 00 00 FF FF FF FF leave the rest of the line as it is.

This will put the ECU into a condition where it will run the car without the immobiliser con-
nected, or, if you prefer, you can virginise the immobiliser and cycle 3 keys as per factory.
If you choose to not use the immobiliser make sure that it cannot be re-connected, as this
will re-immobilise the ECU.

Fiat Marelli 8F-5T


Device = MC68HC11F1
To put this ECU in run modify the following information. Leave all other data as it is.

00070 = FF 00071 = 00 00072 = 00


000F0 = FF 000F1 = 00 000F2 = 00
00170 = FF 00171 = 00 00172 = 00
00196 = 00 00197 = 00 0019D = AA
11

2 Key Fiat System


Keys can now be added to the Fiat Punto body control unit in the same way as the earlier
Fiat immobilisers.
The device is a 93LC66 and should be programmed as a 93C66x16.

The 1st key is located at address :- 0001-0004 repeated at 01A501A8


2nd key 0005-0008 repeated at 01A901AC
A genuine Fiat crypto 48 chip is needed (from scrap yard key etc.).
Read the key with T-Prog or RW4 and type the first 4 bytes in reverse order over one of
the existing keys in both locations.

i.e. CA 42 D6 06
Will become 06 D6 42 CA

Key 1

Key 2
12

Ford Coded access

It is now possible to turn many Ford ECUs from coded access back to timed access to elimi-
nate the need for In codes.

This works successfully on all late vehicles using the DPC or LP range of ECUs. Which in-
cludes Focus, Transit, Transit Connect etc. etc.

You have the option of virginising the ECU, or editing the original file to retain the pump
tally on diesel vehicles. This means that you only have to program the keys to get the vehicle
running.

Device is a 95040

Modify the File in the following way :-

Address 000C to 0057 should be all 00 00 00 etc.

Line 0060. 00 02 D3 E9 F4 FA FD 00 00 00 00 00 00 00 00 00
Line 0070. 00 01 22 20 F1 F8 00 0A 00 00 00 01 22 20 F1 F8
Line 0080. 00 01 22 20 F1 F8

Leave the rest of the file as it is.

Re-program the device and re solder it. You should now be able to program keys by the
13

FORD Files
FORGALVG.DSH = FORD GALAXY 2003 VIRGIN DASH FILE. 93C86

FOGD629.ECU = FORD GALAXY 0281 010 629 VIRGIN FILE. 24C04

DPC806TC.ECU = FORD DPC 806 FAMILY TIMED/CODED ACCESS. 95040

DPC805VG.ECU = FORD DPC805 VIRGIN FILE. 95040 DEVICE

LP4LP2VG.ECU = FORD LP2 / LP4 ECU VIRGIN FILE. 95040 DEVICE

GALAUTVG.GBX = FORD GALAXY JABCO TRANS ECU VIRGIN FILE. 93C66

HYUNDAI Files
HYCDXKVG.ECU = HYUNDAI AMICA CDX KEFCO ECU VIRGIN FILE. 95040

HYCPEMK1.DSH = HYUNDAI COUPE MK1. INSTRUMENT CLUSTER VIRGIN FILE. 93C46

HYAMICA.ECU = HYUNDAI AMICA MATCHED SET ECU

HYAMICA.IMM = HYUNDAI AMICA MATCHED SET IMMOBILISER


14

ISUZU TROOPER. Immobiliser Box.


Device = 93C66

Pin is located as shown in the Red boxes. Check the VIN number is correct, if it is read the PIN as is. i.e.
9717. If VIN is not in the correct order then highlight the whole file, select edit and then swap byte. This
should correct the VIN. Then read the PIN.
ISUZU Delphi Immobiliser. (various models.) 15
93C46 Device
Check the part number reads correctly. If so read the PIN as is. If not then swap byte as explained in the
previous example.

ISUZU Bosch ECU. Pick up etc.


Device = 24C04
PIN is stored on line E0 as shown, repeated 3 times. Reverse the pairs i.e. 06 28 becomes 2806.
16

Jaguar XJ 6
19941997 with LNA type security module mounted in the boot, n/s near fuel filler cap
Device is a 93C46. Re-program with the file below, program a Megamos 13 transponder
chip with the key data below, and the vehicle will start.

File is LNA26CMK.IMM

Key Data = FF 81 34 58 62 6C C6 65 Read with Genie, AD 90 etc.


89 B1 19 97 FD 07 D2 60 Read with RW 2 etc.

LNA26BVG.IMM = LNA2600CB 93C46 Virgin File

LNA26CVG.IMM = LNA2600CC 93C46 Virgin File

LNA26CMK.IMM = LNA2600CC 93C46. MASTER KEY FILE FOR ABOVE.

XTYGEMVG.IMM = X Type Gem module 93C56 Virgin File


17

Kia Immobiliser box

Device is a 93C46

Highlight the dump, select edit then swap byte. Read the PIN from the top line as shown in the picture
below.
18

Kia Shuma, Pride etc.


Adding key.
Device = 93C46x16.
First swap byte the file as explained in the last example.
Transponder is i.d. 48 Crypto.
Read the transponder and transpose the first 4 bytes. 2,1,4,3, E.g. 35 06 50 41 = 06 35 41 50
Type these over one of the existing key1 at address 0010 or key2 at 0014
19
Nissan NATS 6

Device = 93C66

PIN is located at address A9, AA. Read as is

Nissan NATS 6 PIN.

Device is a 93C66. PIN is located at the following address :-

A9AA
2A9-2AA

Read as is i.e. No reverse pairs and no hex conversion.

NISSAN FILES
NISC46RN.ECU = NISSAN MICRA ETC 93C46 IN RUN FILE

NISMICVG.STG = NISSAN NEW MICRA STEERING UNIT VIRGIN FILE. 24C16 DEVICE

NISMICVG.ECU = NISSAN NEW MICRA SIEMANS ECU VIRGIN FILE. 93C66 DEVICE

NISMICVG.FBX = NISSAN NEW MICRA BONNET FUSE BOX. VIRGIN 93C46 DEVICE
20
Peugeot / Citroen

Peugeot / Citroen separate immobiliser box


Citroen XM Turbo Diesel eeprom board location No = 204. PIN is located at 0008,9 and
000C,D. reads as is

Peugeot 406 B4 BSI. Device = 95040. Pin No. at address 70,1,2,3,Read as is i.e. RVRX
21

Peugeot / Citroen Siemans S200 ECU


Device = 95080

Pin is located at address 00040007h. Read from the ascii column on the right, and swap the pairs. Ie. FGSC
will become SCFG.
22

Peugeot 106 Citroen Saxo Immo.


Device = 93C46

The PIN is located at address 0000C0000F. If you look in the Ascii text on the right hand
side you will see the PIN at the end of the top line.e.g. FYSW.
To obtain the correct number you must swap the pairs around. E.g. YFWS.
PEUGEOT / CITROEN FILES 23

CITBELVG.ECU = CITROEN BELINGO DIESEL 93C56 VIRGIN FILE

CITM72VG.ECU = CITROEN BOSCH MP7.2 24C02 VIRGIN FILE

CITRELVG.IMM = CITROEN RELAY 93C56 IMMO. PIN 64515 ADDRESS 032

CITXM104.ECU = CITROEN XM TD. 93C46 CHIP 104 PIN 5643

CITXM204.ECU = CITROEN XM TD. 93C46 CHIP 204 PIN 5643

CIT744RN.ECU = SAXO BOSCH MP7.44 IN RUN

CITXSPVG.ABG = XSARA PICASSO AIR BAG 602-22-74-00 VIRGIN. 95080.

CITPICVG.BSI = PICASSO S118085320F BSI. VIRGIN. 95160 DEVICE

CITBELVG.BSI = BELINGO BSI VIRGIN FILE. 95160 DEVICE

CITC1VG.IMM = CITROEN C1 VIRGIN IMMO FILE. 24C04 DEVICE

CITED5VG.ECU = EDC15 0281010750 VIRGIN FILE. 95P08 DEVICE

CIT200VG.ECU = S2000 ECU VIRGIN FILE. 95080 DEVICE

CITXSDVG.ECU = XSARA 2. 0281010499 VIRGIN FILE. 95040 DEVICE

CIT801VG.ECU = BELINGO MK1 SID 801 ECU VIRGIN.93C56

CIT801VG.EEP = BELINGO MK1 SID 801 EPROM VIRGIN 29F400

CITPICVG.ECU = PICASSO HDI FULL MX. VIRGIN. 95040 DEVICE

CITXSAVG.ECU = XSARA 0281 010 499 VIRGIN. 95040 DEVICE

CITB744V.ECU = BELINGO 7.4.4 0261 206 944 VIRGIN. 95160 DEVICE

PEU48PVG.ECU = IAW 48P2.70 29F400B VIRGIN FILE

PEU481VG.ECU = IAW 48P11 29F200B VIRGIN FILE

PEU4811V.ECU = IAW 48P11 25080 VIRGIN FILE

PEUP276.ECU = IAW 48P2.76 VIRGIN. 29F400 DEVICE

PEU4823H.ECU = IAW 48P23H VIRGIN. 29F400 DEVICE

PEU206RN.ECU = 206 1AW 48P10 25080 IN RUN FILE

PEU315VG.ECU = IAW 48P2 315 VIRGIN FILE. 29F400 DEVICE

PEU4MPRN.ECU = IAW 4MP2-01 IN RUN FILE. 29F200 DEVICE

PEU4810R.ECU = IAW 48P 10. IN RUN FILE. 25080 DEVICE

PEU8P10R.ECU = IAW8P.10 IN RUN FILE. MC68HC11E9 old DEVICE


24

PEUBOXVG.ECU = PEUGEOT HDI BOXER 95040 VIRGIN FILE

PEURHYRN.ECU = PEUGEOT HDI RHY PART CONFIGURED 95040 IN RUN

PEURHZRN.ECU = PEUGEOT HDI RHZ. PART CONFIGURED 95040 IN RUN

PEUHD3RN.ECU = PEUGEOT HDI 3 PLUG 95040 PT CONFIGURED IN RUN

PEUHD3VG.ECU = PEUGEOT HDI 3 PLUG 95040 VIRGIN FILE

PEUM31RN.ECU = PEUGEOT MA3.1-MP5.1-MP5.2. 93C46 IN RUN.

PEUM30RN.ECU = PEUGEOT MA 3.0, 3.1, MP5.1, 5.2 KEYPAD 93C46 IN RUN

PEUMP7RN.ECU = PEUGEOT MP7.0 V6 24C02 KEY PAD IN RUN FILE

PEUMP7TN.ECU = PEUGEOT MP7.0 V6 24C02 TRANSPONDER IN RUN FILE

PEUMP72V.ECU = PEUGEOT MP7.2 24C02 VIRGIN FILE

PEUSL2VG.ECU = PEUGEOT S2000 ECU 95080 VIRGIN FILE

PEUHDIRN.ECU = PEUGEOT HDI 95040 252 ECU IN RUN FILE. CUT PINS 36 & 66

PEUHDIRF.ECU = PEUGEOT HDI ECU 93C56 PIN RVRX

PEU081VG.ECU = 307 HDI 0281 011 081 VIRGIN FILE. 95P08 DEVICE

PEU250RN.ECU = 307 HDI 0281 010 250 IN RUN FILE.

PEUP744V..ECU = PARTNER 7.4.4 VIRGIN 0261 206 944. 95160 DEVICE

PEULUCVG.ECU = LUCAS PLASTIC DIESEL ECU. VIRGIN 25080 DEVICE

PEU106PN.IMM = PEUGEOT 106 IMMO 93C46 PIN = YFWS

PEUVALVG.BSI = PEUGEOT 406 VALEO CD4 BSI 95040 VIRGIN FILE

PEU206HG.BSI = 206 BSI VIRGIN FILE. 9650584580HG. 95160 DEVICE

PEU207VG.BSI = 207 BSI VIRGIN FILE. MC68HC9S12DG256 DEVICE

PEU307LG.BSI = 307 BSI VIRGIN .9644098380.MC68HC912DG128 DEVICE

PEUHDIFR.BSI = PEUGEOT HDI BSI 95040 PIN RVRX

PEU406VG.BSI = PEUGEOT 406 93C66 B4 BSI VIRGIN FILE

PEUCPH4V.CPH = 306 CPH 96398198.80 VIRGIN FILE. 95040 DEVICE

PEU806VG.CPH = PEUGEOT 806 CPH PART No96386665.80 95040 VIRGIN

PEU40602.DSH = PEUGEOT 406 93C66 2002 DASH. VIRGIN FILE


25

PEUGEOT CPH IMMOBILISER PIN NUMBERS.


DEVICE IS AN ST95040 or 93C66

THE PART NUMBER (PRINTED ON THE CPH LABEL) IS LOCATED AT ADDRESS 023.IF IT READS
CORRECTLY THEN READ THE NUMBER AS IS. i.e 1B 0E 06 22 = RE6Y

IF THE PART NUMBER DOES NOT READ CORRECTLY, THEN THE HEX DUMP NEEDS TO SWAP
BYTE. THIS MEANS THAT EACH 2 PAIRS OF NUMBERS NEED TO BE SWAPPED AROUND.

E.G.

01 41 03 02 C1 04 22 1D BECOMES:-
41 01 02 03 04 C1 1D 22

READ PIN NUMBER AFTER BYTE SWAP - NOT BEFORE !!!!

THE PIN NUMBER IS LOCATED 3 TIMES AT ADDRESS :-

0DD - 0E0
15D - 160
1DD - 1E0
.
AFTER READING THE 4 BYTES FOR THE PIN CODE, USE THE TABLE BELOW TO DECODE THE
PIN.

0=00 I=12
1=01 J=13
2=02 K=14
3=03 L=15
4=04 M=16
5=05 N=17
6=06 O=18
7=07 P=19
8=08 Q=1A
9=09 R=1B
A=0A S=1C
B=0B T=1D
C=0C U=1E
D=0D V=1F
E=0E W=20
F=0F X=21
G=10 Y=22
H=11 Z=23

Peugeot / Citroen Siemens immo. Device = MC68HC05E6.


Highlight the dump and Swap Byte. (select edit, then swap byte from menu)

PIN. Location = 3E, 3F, 40, 41


Correct order for PIN = 3F, 3E, 41, 40

Use the above chart to arrive at the PIN.


26

Citroen Relay / Peugeot Boxer


Works in a similar way to the 2 key Fiat system.
Device is a 93C56
1st key is located at :- 00000003 repeated at 00800083
2nd key 00040007 repeated at 00840087
Reverse the key bytes in the same way as the Fiat.
27

HONDA
HONVIRG.ECU = HONDA 93C46 ECU CRV ETC. VIRGIN FILE

HONCIVDE.IMM = HONDA CIVIC DELPHI IMMO 93C46.2 KEYS SYNC.

HONCIVVG.IMM = HONDA CIVIC DELPHI IMMO 93C46 VIRGIN FILE

HONCIVDE.IMM KEYS = MEGAMOS 13

RED = 19 BB DA 17 88 FF 40 62
BLACK = 19 23 2D 2C B1 FF 40 62

MAZDA.

Lucas immobiliser.
Key = Phillips 33.

Device is MC68HC05B6

Addresses.

Keys = 120 to 128


PIN. = 13A to 13D
Ser. No. = 13E to 143

The keys are displayed as 9 bytes. These are 3 keys at 3 bytes each. i.e.
8D A3 DF 19 80 20 FD FB 1E
Select any one of the 3 keys and enter the 3 bytes into the following key dump to be pro-
grammed with RW2 or similar. (in place of the question marks)

3F 34 8E 7E 3F E8 A1 71
F4 FB 41 0F ?? ?? ?? 0F

LATE MAZDA. Crypto key.

PIN = 142 to 145


28
LEXUS FILES
LEX300VG.ECU = LEXUS GS 300 93C56 VIRGIN FILE (PROG KEYS)

LEX200AU.ECU = LEXUS IS 200 AUTO 93C56 VIRGIN FILE (PROG KEYS)

LEX200MA.ECU = LEXUS IS 200 MANUAL 93C56 VIRGIN FILE (PROG KEY)

LEX300RX.ECU = LEXUS RX300 93C56 VIRGIN FILE. (PROG KEYS)

LEX48010.IMM = LEXUS RX300 89780-48010 VIRGIN IMMO. 93C66 DEVICE

LEX53011.IMM = LEXUS IS220 DIESEL 89784-53011 VIRGIN FILE. 93C46 DEVICE

LEXUS IS200 WITH 3 KEYS


29

RX400 Hybrid. Immobiliser 89780-42011


93C66 Device. 4D transponder

1st Master key

2nd Master key

1st Slave key

The key is entered in the following order :-byte 2, 1, 5, 4 ,3.

E.g. 1st Master key would read 30 37 5E 99 CC ??


30

LEXUS RX300.

2004 ON WITH SEPARATE IMMOBILISER BOX.

1ST MASTER

2ND MASTER

1ST SLAVE

KEY DATA = 7E 90 CD 0A 8F 2E 7B 06 3D C7

READ THE DATA FOR THE 4D CRYPTO KEY THAT YOU ARE PROGRAMMING.
INSERT THE NEW KEY DATA OVER ONE OF THE EXISTING KEYS. NOTE. KEYDATA IS
REPEATED 5 TIMES FOR EACH KEY.
INSERT THE BYTES IN THIS ORDER. 3, 2, 5, 6, 7, I.E. CD, 90, 8F, 2E, 7B,
31

MERCEDES FILES
VIT233VG.ECU = VITO 0281 010 233 VIRGIN FILE. 24C04 DEVICE

SPR231VG.ECU = SPRINTER 0281 010 231 VIRGIN FILE. 24C04 DEVICE

SPR524VG.ECU = SPRINTER 0281 010 524 VIRGIN FILE. 95040 DEVICE

SPR745VG.ECU = SPRINTER 0281 011 745 VIRGIN FILE. 95040 DEVICE

SPR746VG.ECU = SPRINTER 0281 011 746 VIRGIN FILE. 95P08 DEVICE

SPRESPVG.IMM = SPRINTER ESP VIRGIN FILE. MC68HC908AZ32A DEVICE

VITESPVG.IMM = VITO ESP VIRGIN FILE. MC68HC908AZ32A DEVICE

SL500VG.ECU = SL 500 (2003) VIRGIN FILE. 25080 DEVICE

SL5786VG.ECU = SL 500 0261207 786 VIRGIN FILE. 95P08 DEVICE

ACL879VG.ECU = A CLASS A166-150-08-79 VIRGIN FILE. 29F200B DEVICE.

ACL753VG.ECU = A CLASS 0281-010-753 VIRGIN FILE. 24C04 DEVICE

C20568VG.ECU = C 200. 0261-206-568 VIRGIN FILE. MC68HC11E9old DEVICE

C28526VG.ECU = C280. 0261-203-526 VIRGIN FILE. 24C16 DEVICE

C18208VG.ECU = C180 022-545-91-32-08 VIRGIN FILE. 24C02 DEVICE

C20328VG.ECU = C200 0261-204-328 VIRGIN FILE. 24C16 DEVICE

VIT831VG.ECU = VITO 0281-012-831 VIRGIN FILE. 95320 DEVICE

SMT005VG.ECU = SMART CAR 0261-205-005 VIRGIN FILE. 24C02 DEVICE

SMT006VG.BSI = SMART CAR VDO461-240-001-006 VIRGIN. 95160 DEVICE


32

PORSCHE FILES
PORBOXVG.BSI = PORSCHE BOXTER BODY MODULE VIRGIN FILE. 93LC66 DEVICE

PORBOXVG.ALM = BOXTER ALARM 9966182620VIRGIN FILE. 93LC66 DEVICE

POR911VG.ALM = 911 ALARM MODULE. VIRGIN FILE. 93LC66 DEVICE


33
RENAULT FILES
RENIMMVG.IMM = RENAULT IMMO 93C46 VIRGIN FILE

REN21261.IMM = RENAULT IMMO 93C46 PART No 7700421261 VIRGIN FILE

RENCLIO2.BSI = RENAULT CLIO 2 93C66 PART No 8200311990 VIRGIN FILE

RENCLIO.BSI = RENAULT CLIO 93C46 31557 BSI VIRGIN FILE

RENCL2VG.BSI = CLIO 2 UCH 8200621763 VIRGIN FILE. 95040 / 93C66 DEVICE

RENDIESR.ECU = RENAULT DIESEL ECU 24C02 IN RUN FILE

RENRENRN.ECU = RENIX ECU. EARLY MODELS IN RUN. MC68HC11E9 OLD

RENKAN02.ECU = KANGOO502 ECU 24C04 VIRGIN.

REN324VG.ECU = SCENIC DCI. 0281-011-324 VIRGIN FILE. 95040 DEVICE

RENIXRN.ECU = RENIX ECU IN RUN. MC68HC11E9old DEVICE

REN320VG.ECU = MASTER 0281-010-320 VIRGIN FILE. 95P08 DEVICE

REN529VG.ECU = MASTER 0281-011-529 VIRGIN FILE. 95P08 DEVICE

RENSIR32.ECU = RENAULT SIRRUS 32 ECU VIRGIN FILE. 29F200 DEVICE

RENSIR34.ECU = RENAULT SIRRUS 34 ECU VIRGIN FILE. 29F400B DEVICE

RENSIR35.ECU = RENAULT SIRRUS 35 ECU VIRGIN FILE. 29F400B DEVICE

REN001VG.ECU = RENAULT MODIS 0285-010-001 VIRGIN FILE. 95160 DEVICE

RENKANMK.ECU = RENAULT KANGOO ECU 25080 MATCHED KEY FILE

RENKANMK.IMM = RENAULT KANGOO IMM 8200032776 MATCHED KEY FILE

Renault Kangoo lucas-fly by wire.

KEY TYPE = Phillips 33

KEY CODE = 30C0F103 380E1C07


0000FF7F 00FF7100

Early models with Renix ECU

These units can be put into a running condition without the immobiliser.
The 52 pin PLCC device should be read as an MC68HC11E9-old
Files are in the relevant folders.
34

MG Rover Body Control Module


Device is 93C66.

You will need the correct remote with a known Bar code.

Remotes are located at addresses 00023 and 00033.


Bytes 14 of the remote are located at address 2A2D
Bytes 510 are located at 0002300038
Ignore the first and last letter. E.g.

Bar code = N 8D BE 33 61 CE 04 05 04 22 64 K

Remote is entered as :- CE 04 05 04 22 64 8D BE 33 61
35

ROVER FILES
ROV25RN.ECU = ROVER 25 ECU 93C66 IN RUN FILE

ROVMEM16.ECU = ROVER MEMS 1.6 93C46 IN RIN. (CUT PIN 13)

ROV16TUR.ECU = ROVER MEMS 1.6 TURBO 93C46 IN RUN

ROVMEM19.ECU = ROVER MEMS 1.9 93C46 IN RUN FILE (CUT PIN 13)

ROV220TD.ECU = ROVER 220 TDI FBW 93C46 EDGE OF BOARD IN RUN FILE

ROV220TE.ECU = ROVER 220 TDI FBW 93C46 MIDDLE OF BOARD IN RUN

ROV400RN.ECU = ROVER 400 DIESEL ECU 93C46 IN RUN FILE

ROV825RN.ECU = ROVER 825 V6 MEMS 2J 93C66 IN RUN FILE

ROVMEM16.ECU = ROVER MEMS 1.6 PT No MNE10127 93C46 IN RUN CUT13

ROVFREED.ECU = ROVER FREELANDER DIESEL 0281-010-300 95040-VIRGIN

ROVMETRN.ECU = ROVER METRO MNE101270BA 93C46 IN RUN FILE

ROVMGFRN.ECU = MGF VVC ECU 93C66 IN RUN FILE

ROVMGZRN.ECU = MGZ ECU 93C66 IN RUN FILE

ROVMEM2J.ECU = ROVER MINI DUEL PORT 93C66 IN RUN FILE

ROVMEM3R.ECU = MGTF / MEMS 3 IN RUN FILE. 93C66 DEVICE

MG1541VG.BSI = MGTF BODY MODULE YWC001541 93LC66-VIRGIN

MGZSVG.BSI = MGZS BODY MODULE. VIRGIN FILE. 93LC66 DEVICE

ROVER 600/800 + Honda . Valeo box


Device is MC68HC05B6

Address line 10 (110 if using developer board). Should be 10 bytes of information. 1st 5 are key No.1. the 2nd
5 bytes are key No. 2.

i.e. If 10 bytes = 0A 01 02 03 04 -- 05 06 07 08 09

To program the Phillips 33 key. Prefix the 1st 5 bytes with FF FF F5. i.e.

Key No 1 = FF FF F5 0A 01 02 03 04
36

Saab Twice Unit


It is now possible to add a key to the Saab Twice unit by reprogramming the processor with a known key
configuration.

This is done by removing the processor, which is a 64 pin quad flat pack device and modifying the infor-
mation.

Because of the complexity of removing and refitting this device we are offering an option to all Decode kit
owners.

1. If you are confident about working with these devices we will send the Saab adapter FOC.
2. If you would prefer to send units to us, they will be chargeable at a reduced rate of 150.00 instead
of 250.00

If you request an adapter, but then decide to send the units to us, they will be charged at full price.

Key Type = Megamos 13

1st Key Location. = 0005000057


2nd Key Location. = 000580005E
3rd Key Location. = 0006000067
4th Key Location. = 000580006E

Key Code Twice unit code

D5 1E E0 5F 67 B9 01 77 62 02 03 CA E9 A0 4C

A9 1F 66 D5 1E 60 A0 00 62 02 83 C0 6F 82 2A

SUZUKI FILES
SUZHDIVG.ECU = SUZUKI HDI ECU 95040 VIRGIN FILE

SUZVITMS.ECU = SUZUKI VITARA ECU 24C01 MATCHED SET

SUZVITMS.IMM = SUZUKI VITARA IMMO 24C01 MATCHED SET

SUZVITVG.ECU = SUZUKI VITARA VIRGIN FILE. 24C01 DEVICE


37

TOYOTA FILES
TOY05431.ECU = TOYOTA AVENSIS ECU 89661-05431 93C56 VIRGIN FILE

TOY12010.IMM = TOYOTA COROLLA IMMO 89780-12010 93C66 VIRGIN

TOY12070.IMM = TOYOTA COROLLA IMMO 89780-12070 93C66 VIRGIN

TOY26050.IMM = TOYOTA POWERVAN IMMO 89780-26050 93LC66 VIRGIN

TOY30010.IMM = TOYOTA IMMO 89780-30010 93LC66 VIRGIN

TOY33050.IMM = TOYOTA COROLLA IMMO 89780-33050 93LC66 VIRGIN

TOY42030.IMM = TOYOTA RAV 4 IMMO 89780-42030 93LC66 VIRGIN

TOY60030.IMM = TOYOTA LCRUISER IMMO 89780-60030 93LC66 VIRGIN

TOY60091.IMM = TOYOTA LCRUISER IMMO 89780-60091 93LC66 VIRGIN

TOYBOYAR.ECU = TOYOTA YARIS BOSCH ECU 95080 VIRGIN

TOYBOCOR.ECU = TOYOTA COROLLA BOSCH ECU 24C02 VIRGIN

TOY30010.IMM = 89780-30010 IMMOBILISER VIRGIN FILE

TOYLCRUI.ECU = LANDCRUISER 93C56 ECU VIRGIN FILE

TOY35060.IMM = HI-LUX D4D 89780-35060 VIRGIN FILE

TOY60250.IMM = LANDCRUISER 60250 IMMO. VIRGIN FILE.

TOY05030.IMM = AVENSIS 05030 IMMO. VIRGIN FILE. 24C04

TOY26050.IMM = POWER VAN 26050 IMMO. VIRGIN FILE. 93S66

TOYPREVD.IMM = PREVIA D4D VIRGIN FILE

TOYYARD4.ECU =YARIS-D4D-95080-0281-011-651-VIRGIN.ECU

TOY02010.IMM = TRANSPONDER IMMO MC68HC05E6

TOY05010.IMM DITTO

TOY05011.IMM DITTO

TOY05020.IMM DITTO

TOY05021.IMM DITTO
38

TOY71020.IMM = HILUX-VIGO-93C66- 89780-71020 VIRGIN

TOY42040.IMM = RAV4 93C66 89780-42040 VIRGIN

TOY12160.IMM = AVENSIS 93C66 89780-12160 VIRGIN

TOYYARFA.ECU = YARIS AUTOMATIC FUJITSU ECU 25040-VIRGIN

TOY05200.ECU = AVENSIS NON VVTI -1.8 05200 ECU- 93C56-VIRGIN

TOY05431.ECU = AVENSIS 89661-05431 ECU. 93C56-VIRGIN

TOY1AZFE.ECU = RAV4 VVTI 1AZ-FE. 25080 VIRGIN

TOY42080.IMM = 89780-42080. 93C66 VIRGIN

TOY20010.IMM = 89780-20010. 24C04 VIRGIN

TOYAYGO.IMM = AYGO 24C04 VIRGIN

TOYYAR0D.ECU = YARIS 89661-0D270 VIRGIN

TOYYAR63.ECU = YARIS D4D BOSCH 0281-011-563 95P08 VIRGIN

Toyota Avensis. Non VVTI


89780-05010 immo. Adding keys.
4C key.

Read the Tiris format of the key to be programmed.

Change the order of the bytes to 5, 4, 3, 2,.

E.g. 7E 3D 09 4F 25 will become 25 4F 09 3D.

Enter this data in place of the existing data at address 0043 for key 1 or 0039 for key 2.
39

Toyota Aygo, Peugeot 107, Citroen C3 - Immobiliser. Adding keys.


Device = 24c04. Transponder = 4D Type 67.

Type the new key info. over the existing key in all 3 locations.

The example below shows how to replace an existing key with a replacement using the Genie key reader.

If reading on a Zed Bull or similar the key is transposed in a different way i.e. Bytes 2, 5, 4, 3

Key 1 Key 2

1 234
40

To Add a key to a Toyota ECU or Immobiliser


Read the key to be added in a Genie, RW4 or similar. Note the first 5 bytes of the TIRIS
FORMAT data.
Now place the bytes in the following order :- 3rd, 2nd, 5th, 4th.

E.g. 7E BC 42 35 08 will become


42 BC 08 35. This is the information that you will use to replace one of the existing
keys with when you read the ECU or Immobiliser dump.
41
Toyota / Lexus 4C VVTI.

Some of the vvti ECUs split the key data into 2 pairs of bytes. Read the transponder in
TIRIS format as with the previous example. The bytes are swapped in the same way. i.e
3rd, 2nd, 5th, 4th. So in the screen dump below the TIRIS read for the first master key
(outlined in red) would be 7E 7A 79 63 01 xx xx xx xx . The first 2 bytes to enter in the
ECU would be the 3rd, and then second i.e. 79 7A. These would be entered over the top
of the first 2 bytes of the first master key.
The second pair of bytes are entered in the same way, but over the top of the existing
bytes in the lower red box.
It is essential that the new key information is entered in the correct place. If you put the
first 2 bytes over the top of key 1, and the second pair of bytes over the top of key 2 or 3
IT WILL NOT WORK!!

1st master key


1st master

2nd master

1st Slave
42

Vauxhall Corsa C
Body control module
Device = 93C66

PIN is located in the Ascii at location 0005200055

Vauxhall Corsa C
Engine ECU. Marelli.
Device = 95320

PIN number is located at address 000D2000D3.


Read as is no conversion.

Vauxhall Multec ECU


Device = MC68HC11F1.

PIN is located at address 001BA001BB.

Read as is no conversion
43

Vauxhall Vectra C
Instrument Cluster
Device = 93C66

PIN is located in the Ascii at address 001E9

Vauxhall Movano /Renault Kangoo


Immobiliser box
Device = 93C46

PIN is located at address 0002200025


Repeated at 0006200065

PIN is 76 27
44

Mechanical key No.

PIN No.

Vauxhall early immobiliser ( up to 1999 ) PIN number follows chassis number in the text. It is always repeated
twice.

VOLVO,
Early models with Renix ECU

These units can be put into a running condition without the immobiliser.

The 52 pin PLCC device should be read as an MC68HC11E9-old

Files are in the relevant folders.


45

VAUXHALL / OPEL FILES


VAU012VG.ECU = VAUXHALL 0281010012 ECU 24C04 VIRGIN FILE

VAUOMERN.ECU = VAUXHALL OMEGA 0261203272 ECU 24C02 IN RUN FILE

VAUSIM56.ECU = SIMTEC 56 VIRGIN FILE. 93C56 DEVICE

VAUFRORN.ECU = FRONTERA EARLY IN RUN. 93C66 DEVICE

VAUJTDVG.ECU = JTD CORSA ETC. VIRGIN FILE. 95320 DEVICE

VAUMULRN.ECU = MULTEC BLUE/WHITE PLUG IN RUN. MC68HC11F1 DEVICE

VAUMULPP.ECU = MULTEC BTPP IN RUN. MC68HC11E9old DEVICE

VAUMULDD.ECU = MULTEC BPDD VIRGIN FILE. MC68HC11E9old DEVICE

VAUY22VG.ECU = VAUXHALL Y22DTR VIRGIN FILE. 24C04 DEVICE

VAUFROVG.IMM = FRONTERA IMMO VIRGIN FILE. 93LC46 DEVICE

VAUVECDE.ALM = VAUXHALL VECTRA DELPHI ALARM 93C46 VIRGIN

VAUASTVG.DSP = ASTRA TRIPLE INF DISPLAY CC20 VIRGIN. 93C56 DEVICE

VAUVECVG.GBX = VAUXHALL VECTRA B/BOX ECU 24C02 VIRGIN

FRONTERA IMMO PIN CODE

PIN IS LOCATED ON LINE 000060 AS SHOWN. REPEATED TWICE.


VW Audi Skoda Seat Instruments 46

Most of the VAG Instrument clusters on later cars contain the 4 digit PIN required for
programming keys. This information is usually stored in an 8 pin SOIC eeprom
mounted on the circuit board. The devices are usually clearly labelled (i.e. 93c66,
93c86, 24c02 etc.) so identifying the correct device is not difficult.
The following pages contain a number of screen shots showing the location of the PIN,
and how it is calculated.

Early A3, A4, Skoda etc.

PIN of this vehicle is 0471. Take the 2 pairs of highlighted numbers above (71 04 ) and
swap the pairs around.
Note the address label at the left hand side ( 000001F0 ) To arrive at the screen above you
will need to scroll to the bottem of the screen dump.

Audi A3 / A6 - 93C56 Device

This dash usually has 2 x 24C04 devices as well as the 93C56. When you read the 93C56
there will be no 14 digit number.

The PIN is located at the following addresses :-

B0-B1
B2-B3
B4-B5

Reverse the pairs. i.e. 17 94 will become 94 17. No hex conversion.


47

Late Audi A3, A4 A6 etc


The PIN is repeated 3 time on most VAG immobilisers. With the screen dump above the
number is FE 25. To arrive at the correct PIN you must swap the pairs around i.e. 25 FE and
then convert from hexadecimal. The calculator included in Microsoft Windows is ideal for
this. Simply start the calculator program, from the VIEW button select scientific, then high-
light the HEX button, type in 25FE and highlight the DEC button. The converted PIN is
9726

Late Golf, Bora etc


With 93C86 eeprom carries the PIN at the end of the 14 digit immobiliser number. Again
repeated 3 times but this time not a hex conversion. Simply read as is i.e. 84 94
48

VW Passat, Audi A4 A6 etc


Another variation on the 93C86 program. This time the PIN is repeated 3 times at the end of
the third 14 digit number. Once again reverse the pairs i.e. D2 1F becomes 1F D2 and the
convert to decimal with the calculator. PIN = 8146

Late Golf etc. 24C08


PIN not repeated 3 times. Swap the pairs i.e. 75 06 becomes 06 75, Then use calculator to
convert from hex. PIN = 1653
49

VW Golf etc. 24C02


The PIN is repeated 3 times. Swap the 2 pairs i.e. 57 73 becomes 7357 and read as is, no
conversion.

Seat Ibeza etc. 93C66


Repeated 3 times. Swap the pairs and read as is. i.e. 76 72 becomes 7276
50

EARLY VW Immobiliser box.

Device = MC68HC05B6

PIN Number is located at address 0091 & 0092 ) then repeated at 0093 & 0094 i.e.

09 BD 09 BD

hex convert. = 2493

VW Valeo immobiliser.
Device = 24C04

PIN is located at :

66 & 67
112 & 113
1BE & 1BF

Reverse the pairs and hex convert.

Engine ECU 2001+ Audi,VW, etc. 24C04 device

Diesel engines from 2001 on with 24C04 device.

Read the chip and check for the 14 digit security number and VIN. If these are located in the
right hand (ASCII) display, then the PIN will be located at 12E-12F and then repeated at 160
-161. Reverse the pairs and hex convert.

Engine ECU 2001+ Audi, VW etc. 95040 device

Diesel engines from 2000 with 95040 device.

PIN is located at 0032-0033 and repeated below at 0042-0043. Reverse the pairs and hex
convert
51
Audi A3, A6 Dash

93C56 Device

Usually found in the 6 Dial Dash used on the Audi A6.

The Screen dump does not display the 14 digit security number.

The PIN is located on line B0 at address B0,B1, repeated at B2, B3, and then again at B4,B5.

The bytes should be numbers only, and the PIN is arrived at by reversing the pairs. i.e.

65 49 will convert to a PIN of 49 65

VW Polo etc. 2003. Simos 3 Engine ECU


Device = 93C76
14 Digit security number is located at 0071 and the VIN at 007F. Both numbers are only dis-
played once.

The PIN number is located at 005F, 0060 then 0061, 0062 and repeated at 0063, 0064.
Reverse the pairs and use the calculator to hex convert.

VW Polo 2002 Petrol Engine ECU

95080 Device
14 digit security number at 00BC
Vin at 00CC

Pin is located at address A2-A3, repeated at AE-AF and BA-BB

Siemans Simos ECU 5Wp series 2005 on

93C86 Device

14 Digit number located at 0072, VIN at 0080.

Pin is located at 6C-6D, 6E-6F and 70-71.

Reverse the pairs and hex convert. OR


14 Digit located at 0071, VIN at 007F

Pin is located at 5F-60, 61-62, 63-64

Reverse the pairs and hex convert


52

Audi Black immobiliser box. 1996-1999.


93C56 Device

Read the PIN as is i.e. 06 83 = 1667


53

Audi White immobiliser box.

Device = 93C46
This immobiliser is supported by VagPin.

Pin is located at 002C002D and repeated at 002E 002F


Reverse the pairs and hex convert.

VW Golf Mk 5 Petrol Dash

Device = 24C16 or 95160


Pin is located at address 420 421. Read as is and hex convert.
54

VW Golf Mk 5. 2005 CAN System. EDC 15 Engine ECU


Device = 24C16
PIN is located at address 4B and 4C and repeated at6B and 6C

Reverse the pairs and hex convert. i.e. 63 06 becomes 06 63. hex convert becomes 1635.
55
Golf Mk 5 TDI Engine ECU
95320 Device

14 digit security number is repeated 3 times. If you look at the 14 digit number in the hex
screen (left hand side) you will see that it is preceded by 00 00 00. The 2 bytes of informa-
tion before this are the Pin number.

See example below.

Hex convert the 2 bytes to get the Pin number. E.g 06 5F becomes 1631
56

VW Polo etc. 2006 2007. 95320 Device

14 digit security number and VIN only used once. The PIN is located at the
following 3 addresses:-
E6-E7, F2-F3 , FE-FF.
Reverse the pairs and hex convert.
57

VW Caddy Siemens Immobiliser box. 2003-2004

Device 24C04

Pin is located at address 0112-0113 and repeated at 01BE-01BF

Reverse the pairs and hex convert.

Audi A3 96-97
Device = 93C66
Device mounted on the back of the circuit board. (no need to remove needles)

PIN is located at address 1F81F9

Reverse pairs. No hex conversion.

VW / AUDI FILES
A49366VG.DSH = A4-93C66 VIRGIN DASH FILE. PIN = 1477

A424C08.DSH = A4-24C08 DASH DUMP. PIN = 1802

A69386.DSH = A6 93C86 DASH DUMP. PIN 8350

AUPBOSVG.ECU = AUDI-PETROL-BOSCH VIRGIN FILE 95040 DEVICE

AUD590VG.ECU = A4 ECU-0261207590 VIRGIN DUMP 95040 DEVICE

A4MM05VG.DSH = A4 MM DASH VIRGIN FILE. 24C08 DEVICE

AUDSIMRN.ECU = Audi Simos 2 ECU In Run-93C56

VWLT588V.ECU = VW LT 0281 010 588 VIRGIN FILE. 95040 DEVICE

VWTDIVG.ECU = VW TDI ECU 24C04 VIRGIN FILE

VWBOR322.ECU = VW BORA 0261 206 322 VIRGIN FILE. 24C02

VWPAS927.DSH = VW PASSAT 927AX DASH. VIRGIN. 93C86

VWPOL211.ECU = VW POLO SIEMANS 5WP44211. VIRGIN. 93C76

SEA023VG.ECU = SEAT 0261 206 023 VIRGIN FILE. 95040 DEVICE

SEA023VG.EEP = SEAT 0261 206 023 VIRGIN EPROM 29F400BB DEVICE

All other files are for reference, and or recovery of corrupt program.
58

VW Phaeton, Tourag, Porsche Cayenne, Bentley GT 2004


Kessy module
Device = 93C86

Note the layout of VIN and 14 digit number. There are 2 types of Kessy.

PIN is located at addresses 102,103 and repeated at 478, 479. Reverse the pairs.

i.e 69 48 becomes 4869.


59

Schematic drawings for Programming cable

Fiat Magneti Marelli immobilizer box. MC68HC08AZ32 device. 64 pin QFP


60

Fiat Marelli Box.


MC68HC05E6 Device.
61

Fiat 500, Grande Punto Body module

Device is 93C86. Remove the back of the BSI case. No need to remove fuses.
62
Vito / Sprinter WSP Box.
MC68HC08AZ32A Device
Mask Set J66D
63

Mercedes Sprinter / Vito. WSP.


Device = MC68HC08AZ32A
Mask Set L52H
64

Alfa Romeo/ Fiat/Lancia Body Module


MC68HC912DG128 Device.
65
Toyota Transponder Ring Immo. Avensis non VVTI, Corolla, etc.
MC68HC05E6 Device
66
Peugeot 307 BSI9644098380
Device = MC68HC912DG128
Virgin File = PEU307VG.BSI
NOTE. When programming 207 or 307 BSI open all doors first !!
67

Vauxhall Astra H
Instrument cluster. M35080 device.

Located on the dial side of the circuit board.


Use the programming cable, and solder the wires as shown below.
Pin is located in the Ascii column as shown in the red box. Read as is.

orange

S-ar putea să vă placă și