TM100 transponder key programmer v3.28 works well on BMW CAS, CAS2, CAS3, CAS4, EWS4. TM100 not only can program BMW keys but can read data of BMW airbag, dashboard, immobilizer…
— TM100 program BMW keys —
Module 4: BMW CAS1,CAS2,CAS3,CAS3+ valet key
Description:
Read Motorola MCU in CAS module, write transponder with ID46(PCF7936),PCF7942,PCF7943,PCF7944,PCF7945, write the new generated file back to CAS. New key can start engine, but without remote function.
Advanced function:
View VIN, DME code, odometer, transponder type, remote frequency.
Highlight:
Locked PCF7943, PCF7944 can also be reused. Even works all keys lost.
Module 5: BMW CAS1,CAS2,CAS3,CAS3+ remote key
Description:
Read Motorola MCU in CAS module, write transponder with ID46(PCF7936),PCF7942,PCF7943,PCF7944,PCF7945, write the new generated file back to CAS. New key can start engine with remote function.
Advanced function:
View VIN, DME code, odometer, transponder type, remote frequency.
Highlight:
Locked PCF7943, PCF7944 can also be reused. Even works all keys lost.
Module 6: BMW motorcycle HITAG key
Description:
Read M58BW016, write transponder with ID46(PCF7936), write the new generated file back to M58BW016.
— TM100 key programmer read BMW airbag, dash, immo —
Airbag
E60-E65-E65 ASR SGM(0L94R)
Dashboard
-Memory:
M35080
8 Kbit Serial SPI Bus EEPROM
With Incremental Registers
-Programming Interface:
In-Circuit
-Features:
Read, Write Incremental Registers, EEPROM.
Erase M35080 device to delivery state.
Delivery State:
The first 32 bytes (incremental registers)
are set to all ‘0’ (16 words at 0x0000).
The EEPROM memory array
0x0020-0x03FF set to all 0xFF.
-Packages:
SO8
-Adapters:
ST M35080 in-circuit programming adapter
(P/C: 1-002-0006)
-Model:
File
Note: to change mileage, VIN,… click Tools meniu item.
E38-M35080
E39-M35080
E46-M35080-BOSCH
E46-M35080
E53-M35080
E65-M35080
X3-E83-M35080
Z4-E86-M35080
Immobilizer
-Requirements:
1-002-0017 HC (S) 12 BDM adapter
2-002-0018 HC (S) 12 decrypted authorization
-Warning:
. Read encrypted 912 / 9S12 the device must be in strict compliance with the following specifications:
1: All download links BDM cable length can not exceed 15CM;
2: The light does not flash the decryption process must be stopped to read and write!
3: the decryption process must not exceed 10-15 seconds, otherwise
You may damage the CPU. Or loss of data!
For individual devices, such as BMW CAS1 0K50E,
Problems due to the circuit structure, but also to read and efficacy several times,
To determine the correct data before the data can be written!
-Programming Interface Mode “:
Direct download BDM connection (BDM)
-Support:
144 LQFP, 112 LQFP, 80 QFP
-Mode:
All
CAS E65 V1 -2004(0K50E)
CAS E65 V1 -2004-FLASH-(0K50E)
CAS E65 V2 -2004(0K50E)
CAS E65 V2 -2004-FLASH-(0K50E)
CAS E65 V3 -2004(0K50E)
CAS E65 V3 -2004-FLASH-(0K50E)
CAS E66 2004-(2K79X-0L01Y)
CAS E66 2004-FLASH(2K79X-0L01Y)
CAS2 FLASH(2K79X-0L01Y)
CAS2(2K79X-0L01Y)
CAS3 FLASH(2K79X-0L01Y)
CAS3(2K79X-0L01Y)
CAS3+(0L15Y-0M23S)
CAS3+(0L15Y-0M23S)FLASH
CAS4(1L15Y)
CAS4(1L15Y)FLASH
EWS-4
EWS-4.X FLASH
EWS 1,2,3(2D47J-0D46J)
-Device:
MC68HC11E9 Safe Mode
(2D47J 0D46J)
-Characteristic:
BMW EWS 1/2/3 security mode CPU (2D47J 0D46J) decryption
Read / EEPROM
-Reservoir:
EEPROM 0xB600-0xBFFF read / write
-Programming Mode:
adapter
-Package:
PLCC52
-Adapter:
HC11EA9 / E9 programming adapter
(P / C: 1-002-0011)
EWS-3 K-LINK(0D46J)
-BMW EWS-3 module:
MCU MC68HC11EA9
-Memory:
RAM 0x0000-0x01FF RD
ROM 0xD000-0xFFFF RD
EEPROM 0xB600-0xBFFF RD/WR
-Programming Interface:
K-Line
-Adapters:
K-Line adapter (P/C: 1-002-0007)
-Model:
File
Xprog ecu programmer
Xprog M Rev.E
