Unlock Audi Chorus Radio Code by Orange5 & iProg

 Here is the tutorial on unlocking the Audi Chorus radio Code using Orange5 & iProg programmers. 

Car example:
AUDI Audi A3 Sportback 1.6 2010

 

Radio:
Audi Corus
Blaupunkt

 

How to:

The radio code unlock was done by Orange5 and Iprog.
You can use online services or programmers).
The process of disassembling the radio is simple.
The Eeprom (95128) itself was read by the Orange 5 programmer via a clip. Save the dump to the computer and open the Iprog program. In the iProg program, click editor and open the saved dump, then open the AUDI eeprom SPI calculator by BLAUPUNKT, click apply and get the PIN. Assemble radio and check.

iProg Change Suzuki Jimny MB91F062BS Mileage

 Suzuki Jimny 2018/2019 mileage data is stored in the Fujitsu MB91F062BS mcu rather than eeprom 93c** chip. iProg clone is the least expensive device to correct mileage on this model.

 

Original KM: 45,000 km

European panel Suzuki 34110-78RA0

Test connection with expected errors

 

Disassemble the instrument cluster

It turned out that the cluster uses a microcontroller (MCU) – Fujitsu MB91F062BS.

MCU Fujitsu MB91F062BS + pins for connecting the programmer are visible on the left

Close-up connection pins (we do not pay attention to this microcircuit)

This means that there is no separate EEPROM chip and the data must be read directly from the MCU. It has 2 memory zones:
– Workflash (64kb) – EEPROM emulation
– Mainflash (1Mb) – The firmware itself

 

 

Mileage correction plan

1. Take the dumps from the cluster
2. Contact expert for services on the necessary dump edits.
3. Write back

 

Now for the steps.

1. I ordered the Chinese version of the iProg + programmer. Looking ahead – reading / writing Workflash is excellent.

At the same time I found out that there are options with MB91F061BS – almost the same MCU but 512kb Mainflash instead of 1Mb on * 062BS .

I crossed my fingers and ordered the iprog programmer, which surprisingly came from a local warehouse in 2 days. I prepared a virtual machine with Windows 7 (later I borrowed a laptop with W10 from a friend) and set up the software. Light flour was to find iProg with working scripts for the Chinese. the kit included a disk that had nowhere to insert in 2023, but a little later the seller answered and gave a link to download from Mega, but by that time I had already found another working version.

The insides of the programmer

Connecting the device to the programmer

In my case, I just took the references from wiring diagram and played it on the table, referring to the schematic for this MCU in iProg

Scheme from iProg

Soldering to the dash

Used adapter with simple connector pinout

Next comes the successful draining of the original dumps and their backup in case you need to fill in everything as it was.

Power connection on the table

Here I am attaching a power supply connection diagram for the cluster on the table, regarding the CAN pins, I called them on the board from the microcircuit that works with CAN, according to the datasheet, it’s better to double-check, but everything seems to be correct.
For power – be sure to connect both GNDs.

Jimny JB74 Denso dash pinout

 

Additional training

In the back of the Internet, 2 other variants of Workflash dumps were found so that there was something to start the comparison with.
1 – EU (like Portuguese) with all the errors as in mine
2 – Japanese without radar errors, without TPMS, oil, etc.

 

Brief summary

In fact, the results are not expected for a long time, but from what I could break. Everything described below concerns only Workflash so far :
– All dumps in HEX form are 95% different, but have the same division in addressing.
For example:
4000-5FE0
6000-7FE0
8000-9FE0
C000-DFE0
– It was possible to turn off the oil indicator light in the EU dump by zeroing blocks C30E-C33B . The most useless information, and with further attempts to decompile in IDA Pro, the assembler code in this place did not prompt me to any thoughts, but I’m zero in the assembler and the decompilation is not sure that it was correct.
– I tried to clean the firmware completely. Then the cluster rolls into the Japanese version, without errors, but without the rest of the functionality.

– I tried to clean everything a little bit, and as a result, one firmware with cleaned module works like European until the last one, however, when the last DAC0 module is changed , it switches to Japanese. This generally makes me think that to disable errors in the European version, you need to edit Mainflash and not Workflash.
— At some point, I thought that I won, I got a European cluster but without errors, like the Japanese version. The joy was short-lived, it turned out that I just got all the Japanese stripped down without errors but with English, although everything is reset to Japanese if you throw it into defaults from the cluster menu.

I wanted to try playing with Mainflash using iprog+. when trying to record, it crashes with an error at the zeroing stage, and I even thought that the games ended when it erased 20% of Mainflash and the cluster no longer turned on. But then it turned out that if you click on the record 100 times, then it falls but advances in zeroing, and then it correctly writes everything from the file to Mainflash.

http://blog.obdii365.com/2023/03/01/suzuki-jimny-mb91f062bs-mileage-correction-by-iprog-clone/

Which Tool to Change Toyota S6J3001LSJ Mileage?

 2018+ new Toyota RAV4/Corolla/Yaris (hybrid and not hybrid) has secured processor spansion mcu S6J3001LSJ. There is also a RH66 chip but the km data is not stored in it.

What tool allows you to adjust the mileage of Denso panels with MCU S6J3001LSJ?

Check options below:

 

1. The cheapest option will be CG100 Prog III programmer.

 

Corolla 2020- S6J3001 MCU pinout to cg100 prog

RAV4 2019-2021 S6J3001 pinout to cg100

Yaris S6J3001LSJ pinout

If need S6J pinouts for other Toyota models, open CG100 software and check.

cg100 will read, modify and write data. If failed to modify data, send original mcu data to CGDI engineer to modify manually (contact sales@obdii365.com)

The detailed procedure can be found here

Toyota Honda S6J3001 Cluster Mileage Correction with CG100

 

Option 2: iProg pro original 

iprog pro original +cardiag script.

The script allows you to adjust the mileage of Denso panels with MCU S6J3001LSJ in Toyota Camry V70, RAV4, Corolla, Altis, Lexus LS, Honda Accord, Hyundai Kona, Hyundai Kona Electric (UART) .

The script reads / writes the WorkFlash dump, the built-in calculator automatically determines the mileage.

NOTE: Iprog clone will not do s6j mcu.

RAV4/Corolla S6J3001LSJ pinout to iprog

Option 3: DigiProg 4

digiprog4 will do follow S6J mcu mileage correction

• TOYOTA CAMRY 2018 DENSO (S6J3001LSJ) – programming – Program nr. 114.
• TOYOTA RAV4 2019 – DENSO (S6J3001LSJ)
• TOYOTA COROLLA 2019 – DENSO (S6J3001LSJ) – programming via C21 – Program nr. 152.

Option 4: Other tools

Xtool, mtool stool cpt ori., SMOK jtag, enigma, dashcoder4 etc.

Dashcoder4 have already new update fusjitsu and spansion just 30/40 seconds.

iprog+ Pro Programmer: Win 7 win10 all ok?

 Problem: I have problem with working on iprog+ pro clone on Windows 10.

I need wait a lot of seconds between toggle scripts (sometimes I need wait a minute to work with next script or wait for opening program – it looks like sometimes programmer is not found or system looks for it, but it is not disconnected in windows system). On Windows 7 it works correctly. Where is problem?
I have turned off Firewall and Windows Defender, but it not resolve my problem.

 

Updated:

I have check two times that real time protection is disabled by DefenderControl program. I have disabled also in regedit:

 

(Windows Defender Security Center Service)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurityHealthService

 

(Security Center service)

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc

 

Start DWORD

 

2 = Enable

4 = Disable

 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

DisableAntiSpyware

Modify = 1

 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection

DisableRealtimeMonitoring

Modify = 1

 

It helps me!

 

So, iprog+ Pro Win10 is ok.

 

iprog+ Pro win7 is definitely ok too.

Video on how to install iProg+ Pro V85 software on Windows 7:

Enjoy iprog+ Pro Programmer on win10 win7.

Refer to Iprog Clone test reports:

http://blog.obdii365.com/2020/04/22/iprog-clone-test-reports/

Free Download V85 iProg Pro Clone Software

 The iProg pro clone programmer new software V85 has been tested and verified working by obdii365.com engineer. Here we provides iprog v85 software free download resource and installation guide.

 

 

V85 Iprog+ Pro Software Free Download
password: oipqga

 

Language: English, Russian

Operating system: WinXP, Win7, Win8

Functions: airbag, dashboard, car radio, ecu, eeprom, immo, mcu and special functions

 

How to Install iprog pro v85 driver and software on windows 7?

Copy and extract iprog V85 software folder to Disk C

Go to Device Manager, right click iProg universal programmer and press Update Driver Software
Select browse my computer for driver software

Select correct driver (32bit or 64bit) from iprog driver folder in C://

C:/IProg V85/IPROG Driver/iprog_win2k-win7_x86-x64_version2
If system give Windows security message, select Install this drive software anywauy
Installing driver software

Windows has sucessfully update irpog software driver

Make sure iprog COM Port was set to COM4

Send iProgProV85 shortcut from C:/IProg V85/iProg+ V85 folder to desktop
Then open iProgProV85 software on desktop

Sofwtare is ready to use.
Select EEPROM, Airbag, dash function to test

https://www.obdii365.com/producttags/iprog.html

Top Tools to Read and Write 35080 / 160 Chip EEPROM

An increasing number of BMW 35080 / 160 chip reading writing tools released on obdii365.com. Let’s have a look at which products they are, what are the subtle differences, which one is the most cost-effective.

Top 1. OEM BMW Dash 35080/35160 Data Reading 8-PIN Adapter

Features:

Read and Write Immo 95128/95256 & dash 35080/35160 No Soldering

Convenient and Safe

Stable without losing Data

Can be used with programmers UPA, Orange5, VVDI Prog, CG Pro etc

1). With UPA.

3). With Orange 5.

3) With CG PRO.

4) With VVDI Prog.

Top 2. 35080/160 Adapter for Iprog+ (any clone one)

IMG: 35080/160 Adapter

It can read / write / delete the incremental area in the chips 35080 6, 35080V6, 35080VP, 080D0WQ, 160D0WQ.

35080/160 adapter is designed to work with Iprog+ clone.

Total price: $129- $169

Top 3. Yanhua Mini ACDP BMW 35080, 35160DO WT EEPROM Read & Write Module

Read and write BMW M35080, 35160DO WT etc EEPROM.

Note: it is an adapter only, If you don’t have Yanhua Mini ACDP basic module , please buy one to work with this adapter.

Total Price: $258

Top 4. 35160DW Chip for VVDI Prog

Eliminate RED DOT problem: temper DOT direct read over SOIC-8 connector

Supports chip M35080, M35080-3, M35080-6, M35080V6, M35080VP, D80D0WQ, 160D0WQ,36160WT,35128WT

Replaced M35160WT XDPG31CH Adapter

Stable and reliable

Perfect replacement of original chip

Refuse the red dot, no need simulator soldering

Support Replacement Chip Models: 

M35080

M35080-3

M35080-6

M35050V6

M35080VP

D80D0WQ

160D0WQ

35160WT

35128WT

Total Price: $453

How to use Xhorse 35160DW Chip with VVDI Prog?

Instruction: This chip used as replacement for ST company 35080xxx, 35160xx, 080D0xx, 160D0xx ,.etc types

Steps:
1. Backup data: Read and Save the dashboard original IC from 3 partitions(MEMORY+LONGID
+ID LOCATION) or ALL option (ALL=MEMORY+LONGID+ID LOCATION), shown as sample
picture

2. Write data: After replace original chip by Xhorse 35160xx chip, please write step 1 saved 3 dumps to each partition on xhorse chip by VVDI PROG.

3. Mileage correction: ‘Erase INC’ button is for erasing the front 2 lines, after erase INC operation then select ALL or MEMORY option to Read data for verify,
Reading data the front 2 lines should all ‘00’, manually enter the target mileage, then click Write option, operation completed.

4. Verify data: Soldering back the Xhorse chip to dashboard, check whether working well without red dot.

Top 5. M35080/35160 Adapter for CG PRO 9S12 Programmer

Operating M35080/35160 series chip ,working with CG Pro 9S12 Freescale Programmer.

Here are the CG-Pro ST 35160WT chip list.

All should be done with a dedicated 35160WT adapter.

Chip:ST 35160WT

Microchip PIC18F6520
Microchip PIC18F6720
Microchip PIC18F8520
Microchip PIC18F8620
Microchip PIC18F8720
Microchip PIC12F635
Microchip PIC12F683
Microchip PIC16F631
Microchip PIC16F636
Microchip PIC16F639
Microchip PIC16F677
Microchip PIC16F684
Microchip PIC16F685
Microchip PIC16F687
Microchip PIC16F688
Microchip PIC16F689
Microchip PIC16F690

Dashboard:BMW 35080 V5 (35160WT)

Demo example:  CG PRO Reset Odometer on a BMW X1 CAS3 2010 M35080

Total price: $402

Top 6. R270+ read/erase 35080

Need luck. Not all R270 clone can read/erase 35080 chips successfully. Some requires modification to work.  You are at your risk.

If money is not a problem, original R270 is a good choice.

Read/Erase M35080 with R270+ procedure:

Price: about $50

If you are interested, check:

Modify R270 BDM Programmer to Erase 35080vp

FYI: Some people have managed to read/erase with cheaper tools Xprog,  Carprog etc, but most of them requires modification which is not recommended.

See also:
Xprog-M V5.55 Read BMW E46 M35080 EEPROM
Carprog read and erase BMW EEPROM M35080

To be upgrading…

http://blog.obdii365.com/2020/07/29/best-35080-160-chip-reading-writing-tools/