Abrites Ltd

Date: 01.10.2015

ABPROG Programmer for AVDI

User’s Manual

Issued by: Abrites Ltd.

www.ABRITES.com
 List of revisions
Date Chapter Description Revision
01.10.2015 ALL Document revised 2.0
1 INTRODUCTION

ZN030-ABPROG and ZN031-M35XXX/SPI/I2C Adapter together with ABPROG Programmer software allows
you to erase and write SPI,I2C,Micro Wire EEPROM memory(35xxx,95xxx,24xxx,93xx) with and
without incremental registers , read the SSID of the NEC KEY, erase the NEC chip and then program it
again.

ZN030-ABPROG and ZN031-M35XXX/SPI/I2C Adapter together should be used with ABRITES software
produced by Abrites Ltd.

ABRITES is a trade mark of Abrites Ltd.

1.1 Scope of the manual

This document describes software and hardware installation of kit for EEPROM and MCU memory
programming.

The basic package of kit for EEPROM and MCU memory programming:

 ZN030-ABPROG

 ZN031- M35XXX/SPI/I2C Adapter

ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

 SO8 –DIP8 Adapter

 ZN032 - Adapter with socket for NEC MCU (optional)

 ZN034 - ABPROG flat cable

2 SYSTEM REQUIREMENTS
Minimum system requirements – Windows XP, Pentium 4 with 512 MB RAM
USB port with supply 100 mA / 5V +/- 5%

Version 1.6 4
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

3 SUPPORTED DEVICES
-M35080VP M95080
-M35080V6 M95160
-D080D0WQ M95320
-D160D0WQ M95640
-M95010 M95128
-M95020 M95256
-M95040 24C01
-M95080
-M95160
-M95320
-M95640
-M95128
-M95256
-24C01
-24C02
-93C76
-24C04
-93C86
-24C08
-24C16
-24C32
-24C64
- 24C128
- 24C256
- 24C512
- 24C1024
-93C46
-93C56
-93C66
-RENAULT BCM (X95)
-W164,W166,W203,W204,W210,W211,W212,W216,W220,W221
MB EZS Reading hash without password

Version 1.6 5
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

4 GETTING STARTED

We suppose that already your AVDI interface is configured and fully working.
You can receive optional separate installation file for your kit EEPROM and MCU memory programming.

Software is a windows executable file named ‘SetupInterface_ABPROG_VVxxxx.exe’ where VVxxxx is your

interface identification number.

4.1 Software installation

steps

Please start the executable file above to

initiate installation procedure and follow
the onscreen instructions.

Depending of your operation system

and settings you can be asked to
confirm starting of installation
procedure.

Version 1.6 6
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Press “Next” button to proceed with the installation.

Read carefully license agreement and select “I accept the agreement” if you accepting all. Then press “Next”
button.
If you not agree press cancel to interrupt installation procedure.

Press “Next” button to proceed with the

installation.

Press “Next” button to proceed with the installation.

Version 1.6 7
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Press “Next” button to proceed.

If you don’t want desktop icons

uncheck the checkbox about
creation of icons.
Press “Next” button to proceed.

Press “Install” and wait until

installation complete.

Version 1.6 8
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Be sure that checkbox about

installation of interface’s USB
drivers is set especially if you
installing for first time Abrites
Diagnostic Software.

Press “Finish”.

Depending setting of your operation

system you can be asked to confirm
installation of USB drivers.

Press “Yes”.

Wait until installation of USB

driver finish.

Version 1.6 9
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

4.2 Connection of the programmer to the interface

4.3 Starting of the software

When programmer is ready and connected to the interface you can start the software.

Version 1.6 10
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Drop down list for device type:

SPI, I2C, MW, NEC_KEY, MCU... Drop down list for EEPROM models

Read EEPROM

Write EEPROM

Verify EEPROM

Erase EEPROM

Load dump

Save dump

Exit

Version 1.6 11
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

5 ERASING INCREMENTAL EEPROM

Once you select the "EEPROM" use button "Erase Incr.".

Keep in mind that the time to erase "M35080VP/M35080V6" could reach 90 seconds!

Version 1.6 12
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

After erase finish you can write the new data using the button “Load” and "Prog Incr.".

6 CONNECT "ZN030-ABPROG" WITHOUT "ZN031-M35XXX/SPI/I2C

ADAPTER"
You can use your "ZN030-ABPROG" for programming and reading of ordinary SPI EEPROM
memory as M95080, M95160, M95320, M95640, M95128, M95256 without using "ZN031-
M35XXX/SPI/I2C Adapter". To do this you must connect the memory to DB25 connector in the
manner shown in the picture.

Keep in mind that the power from "ZN030-ABPROG" is 5V DC!

Version 1.6 13
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

7 READ SSID ,ERASING AND PROGRAMMING OF NEC KEY FOR MERCEDES

All existing customers should have received a NEC board, on which to solder the NEC chip. For all
existing customers - if you send to [email protected] the dump from the EZS we will send you
back a working key dump and you will not need to worry about virginizing ECU, 7GTronic and so
on.

7.1 Erasing NEC chip

The NEC chip should be soldered on the NEC PCB, which is provided by Abrites. Here is how the
erasing procedure looks like:

Version 1.6 14
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Version 1.6 15
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

7.2 Reading SSID

7.3 Programming NEC chip

Version 1.6 16
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Programming the CPU directly on the key using ABPROG flat cable.

Version 1.6 17
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Version 1.6 18
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

NOTE : FOR CUSTOMERS WHO HAVE "ZN002" AFTER FIRMWARE UPGRADE CAN BE USED
AS "ZN030-ABPROG".
To read the immobilizer with the ABPROG you need to solder as showed on the pictures below.

In the ABPROG you should select “MCU” and the “Renault (X95) BCM” option.

Version 1.6 19
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

Version 1.6 20
ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

For Renault and Audi BCM

Blue - 5
Red - 20
Black - 14
Green - 25
Brown - 6
Yellow – 13

Version 1.6 21
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

8. Hash reading without password from the EZS via IR. Password
reading from NEC MCUs version 57

8.1 EZS hash reading through IR

Please use the ZN036 adapter to connect to the EZS. From the drop down please select
MB_EZS_IR and the model i.e. W204. Press the read button and place the IR adapter in the key
fob. After reading the key fob the hashes will be displayed.
Please note that for some models you will need to take the key in and out of the fob multiple times.

Version 1.6 22
 ABPROG PROGRAMMER USER’S MANUAL
Document number #416/19022014
Date: 01.10.2015

8.2 NEC MCU version 57 password reading

Place the NEC processor from the key on the adapter plate (part of the ZN036).
Press the “READ NEC KEY PASSWORD” and wait until the reading is over.
This process can take from several seconds up to a few minutes. After successfully reading the
password you will see the SSID and password fields among other details.

When you have the full dump, the hash files + the password you can save the file and use it later in
order to generate the dumps using the Abrites diagnostics for Mercedes.

Version 1.6 23