2/26/2019

CG100 Prog III Airbag Reset Device update to V5.0.3.0

CG100 Prog III airbag reset device software released to new version 5.0.3.0.

CG-100 V5.0.3.0 NEW

(2019.02.26)
1. Mileage(8 Pin), added support model:
   BAIC Weiwang M50 A00062144
   Baojun 730 23950964
   Baojun 310 23979787
   Baojun 560 23981822
   Baojun 730 23930731
   Baojun 310 23893177
   Brilliance-auto V3 QZB1061C
   Brilliance-auto Junjie TW80000316
   Brilliance-auto V6 QZB1091B
   BUICK LaCROSSE 13518371
   BYD S6 3820010F
   CHANGHE CHANGHE BEIDOUXING ZY-ZB112B-13 34100D6DJ30
   Dongfeng Fengshen AX3 Z410010J-F0500 QZB1068
   Dongfeng Jingyi X5 94103-01 BM3-3820020
   FAW BenTeng R9 3820015ABK01
   FORD Transit ZB168F1T
   GEELY Yuanjing X6 451003 QE17WT1K16791
   GEELY Yuanjing 94206-05
   GEELY Yuanjing 942210-270
   GREAT WALL Havel H6 3820400AKZ54A
   GREAT WALL Havel H1 38200100XG83XA
   GREAT WALL Havel H2 3820100XSZ08B
   GREAT WALL Havel H6 3820100AKZ54A
   Haima M6 FC5A-55-430
   HYUNDAI VERNA 94003-D0010
   JMC Yusheng GP2-10849-MA II
   MITSABISHI Outlander MM0059-502
   NISSAN Venucia T90 3230796-9
   OTHER CHINESE CAR ZHOGNXINPICKUP G001268 3820010-1510 V3820
   OTHER CHINESE CAR ZHOGNXINPICKUP G001268 3820010-1511 V3820
   SUZUKI S-CROSS 34100-66MA0-00
   TJFAW XIALI N5 83800-TBA20
   TOYOTA PRADO 4000 83800-0G022-A
   TOYOTA COROLLA 83800-F2A50 II
   TOYOTA PRADO 80800-6AG80-B
   TOYOTA Sienna 83800-08590-00
   TOYOTA COROLLA 83800-F2U50
   TOYOTA Highlander 83800-0E660
   TOYOTA Yaris 83800-0DX40
   TOYOTA LAND CRUISER 200 83800-6AD30-F
   TOYOTA CROWN 83800-0N160 II
   WULING Rongguang 23888822
   WULING Rongguang ZB169N-C
   WULING hong guang S 23902989
   WULING Rongguang V 23957308
   WULING Hongguang S1 23902135
   ZOTYE Z300 3820010-A01
   ZOTYE T300 3820010001-M12 3820BL
2. Mileage(8 Pin), algorithm update:
   GREAT WALL Havel H2_3820100XSZ08A
   HYUNDAI VERACRUZ 94003-3J390
3. Added search function features in 9S12, Atmel, MB91, M35080, Airbag, ECU, BCM, Amp, and Other pages.
   Added search chip functionality to the Programmer page.
4. Now connection is interrupted when MAC724x chip erase, will prompt an error message.
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
CG-100  V5.0.2.0  
(2019.01.24)
1. Mileage(8 Pin), added support model
   BAIC Weiwang M20 ZY-ZB116B-01 38200000-B02-000
   BAIC Zhanqi ZB128BA
   Baojun 730 23565446
   Baojun 730 23930732
   BISU T5 38200000-H04-000
   Dongfeng Tianjin 3801040-C1252
   Dongfeng Fengguang 580 3820010-SA01 II
   Dongfeng Xiaokang K07II ZB170A 3820010-06
   Dongfeng Jingyi X5 J000122 320133 B12-3820060
   Dongfeng Xiaokang V22 3820010-VA03
   Dongfeng Junfeng 3801010-K61002
   FAW Junpai D60 83800-TFA70 ZB1178B1
   FAW SENYA R7  ZB1191B
   FAW FAW-JIABAO V75 3820010A1V6
   FORD Escort ED8T-10849-AF II
   FUDAY ZB176A2 38201000K9AA
   GEELY Yuanjing 230057 01733307 170330
   GEELY EC8 T-ZB146A
   GEELY Yuanjing 230057 01733307 170607
   GEELY Yuanjing X1 LC-3AB 451003 01731842 170401
   GEELY Yuanjing 230057 01733309 170713
   GEELY Yinglun ZB1121A1
   Haima HAPPIN HMKC-55-430 II
   HONDA CRV 78100-T0X-H210M1
   HYUNDAI Elantra Elantra 94013-4V160
   JAC M4 L23060 3820100V6510 38201M4C1 XTD-170424
   JAC Geerfa 3801910H4020
   JAC Pickup 9P210849AC
   Jiefang Pickup 3820010-3A0 QZB1035B
   Jinbei 750 3820100-C01
   Jinbei 750 3820100-C02-BA II
   KIA KX3 94003-D8100
   KIA SOUL 94003-2X100
   OTHER CHINESE CAR ISUZU 3820100-T60PR
   OTHER CHINESE CAR Isuzu 3820010-L20PA
   OTHER CHINESE CAR ISUZU 900211-190C
   OTHER CHINESE CAR Isuzu Qingling Pickup 3820010-44KA
   SUZUKI ZY-ZB112B-13 34100D6DJ30
   TJFAW XIALI N5 83800-TBD80 ZB1182A6
   TOYOTA YARiS L 83800-0DX00
   TOYOTA CROWN 83800-0N160
   TOYOTA LAND CRUISER 200 83800-6AG80-B
   TOYOTA Levin 83800-F2D11 II
   WAW Aochi 33047 3820010-N82
   WULING Zhiguang 23903219
   WULING Rongguang 23887041 ZB169P-B
   WULING Rongguang 23957309
   WULING hong guang S 24568693
   WULING Rongguang 23887041
2. Programmer, Fujitsu MB91F59BC, MB91F59AC, function update.

CG Pro Read Porsche 1N35H BCM and Write Key Success

Report: 
A friend was trying to Read BCM porsche 2015 1N35H.
MDP can Read but can not Write
Xhorse VVDI Prog can not crack the MCU
Finnaly he decided to test the CG Pro 9s12 programmer and here is the result.

Step 1: Backup PFLASH
Connect CG Pro with BCM follow the wiring diagram
First need to read PFLASH and back it up
In CGPro software, select Immobilizer->Porshce ->BCM-1N35H (PFLASH Backup), press READ
cgpro-porsche-1n35h-bcm-1
cgpro-porsche-1n35h-bcm-2

cgpro-porsche-1n35h-bcm-3
Read PFLASH success, save data
cgpro-porsche-1n35h-bcm-4
You can see the whole dump of PFLASH
cgpro-porsche-1n35h-bcm-5
Step 2: Read DFLASH
Now we will read the DFLASH where other devices failed
Select Porsche->BCM-1N35H, check wiring diagram and connect
cgpro-porsche-1n35h-bcm-6

cgpro-porsche-1n35h-bcm-7
press READ
cgpro-porsche-1n35h-bcm-8
cgpro-porsche-1n35h-bcm-9
cgpro-porsche-1n35h-bcm-10
Read DFLASH success, save data for key adding
cgpro-porsche-1n35h-bcm-11
Step 3: Write DFLASH
Now we try to write on 1N35H where other devices failed either
Open DFLASH just saved
cgpro-porsche-1n35h-bcm-12
cgpro-porsche-1n35h-bcm-13
Press WRITE
cgpro-porsche-1n35h-bcm-14
cgpro-porsche-1n35h-bcm-15
Writing data completed
cgpro-porsche-1n35h-bcm-16
Step 4: Test if other devices can decryt this MCU
For example with Xhorse VVDI Prog
In VVDIProg software, read DFLASH
vvdi-prog-porsche-1n35h-bcm-1

vvdi-prog-porsche-1n35h-bcm-2

vvdi-prog-porsche-1n35h-bcm-3
Chip crack failure. VVDI cannot decryt this MCU.

Step 5: Read DFLASH & PFLASH again
Back again to CG pro
Read DFLASH again and make a key
Read PFLASH again to double check if our attempt with vvdi damaged anything
cgpro-porsche-1n35h-bcm-17
Data is fine, not damaged.
cgpro-porsche-1n35h-bcm-18
Now the DFLASH final reading to see if we can make a key.
This time save DFLASH data, i.e key test.bin
cgpro-porsche-1n35h-bcm-19
Step 6: Write key
Go to CGPro Key making->Porsche->BCM-1N35H, open Key Function
cgpro-porsche-1n35h-bcm-20
cgpro-porsche-1n35h-bcm-21
Open DFlash finally saved
cgpro-porsche-1n35h-bcm-22
You can see the keys and program new key
cgpro-porsche-1n35h-bcm-23
Select Write key and follow CG-Pro prompts until succeed. The last steps are easy.


2/18/2019

CGDI MB and AC Adapter Program Benz old W164 All Keys Lost

Guide: add key to the Mercedes Benz old (A1645450909) EZS W164 when all keys lost using CGDI Prog MB key programmer. With the CGDI MB AC adapter, the data acquisition procedure can be shorten to 9 minutes.
cgdi-mb-old-w164-all-key-lost-1
W164 EZS Old A1645450909
cgdi-mb-old-w164-all-key-lost-2
CGDI AC Adapter is necessary to faster calculate key password.

Credit to Mr. Edward Markin.

Step 1:  Calculate password
Connect AC Adapter with CGDI MB
cgdi-mb-old-w164-all-key-lost-3
Read EIS data
Go to Compute Password->Copy Key without Key ->Collect Data-> Platform mode
cgdi-mb-old-w164-all-key-lost-4
cgdi-mb-old-w164-all-key-lost-5
Check old W164 wiring diagram
cgdi-mb-old-w164-all-key-lost-6
Insert the simulation key within 1 minutes.
Turn the quick collect adapter (AC adapter) switch to the platform position. Turn the key
to the ignition switch to ON position.
cgdi-mb-old-w164-all-key-lost-7
If CGDI prompts data acquisition failure.  Try again.
cgdi-mb-old-w164-all-key-lost-8
If still fail to read ezs data, to rotate the simulation key, you need not knock on the EZS
cgdi-mb-old-w164-all-key-lost-9
EZS data collection begins
cgdi-mb-old-w164-all-key-lost-10
Data collection success after 9 minutes 
Save data
cgdi-mb-old-w164-all-key-lost-11
Upload the data to calculate password
cgdi-mb-old-w164-all-key-lost-12
Press Query Result
cgdi-mb-old-w164-all-key-lost-13
Calculate password success
Go to EIS function, paste password to Key password area
Read EIS data again
cgdi-mb-old-w164-all-key-lost-14
cgdi-mb-old-w164-all-key-lost-15
cgdi-mb-old-w164-all-key-lost-16
We read the data from the EZS with a password and save.

Step 2: Generate EE
Generate key dumps from the created EZS file
cgdi-mb-old-w164-all-key-lost-17
cgdi-mb-old-w164-all-key-lost-18
cgdi-mb-old-w164-all-key-lost-19
Generate Key File
cgdi-mb-old-w164-all-key-lost-20
cgdi-mb-old-w164-all-key-lost-21
Generate key file success and save it

Step 3:  Write Key
Go to Read/Write Key
Insert key into CGDI MB detection coil
cgdi-mb-old-w164-all-key-lost-22
Read key/chip
cgdi-mb-old-w164-all-key-lost-23
Reset key
cgdi-mb-old-w164-all-key-lost-24
Insert new key into EZS, the erased key does not accept the lock
cgdi-mb-old-w164-all-key-lost-25
Write the key and check its work
Go to Open/Write Key
cgdi-mb-old-w164-all-key-lost-26
Select a key position
cgdi-mb-old-w164-all-key-lost-27
Write key success
cgdi-mb-old-w164-all-key-lost-28
Now the new key works perfectly.
In general, at the moment CGDI MB is the best device for the money!!!

Related post:

http://www.obdii365.com/service/cgdi-mb-program-benz-old-w164-all-keys-lost-109180.html