MBkeyprog-2
Contents
1.2. save Log File Stop 34 Press Write MBkeyprog 2 v1 0 W203 W220 908 W210 W220 05X32 W211 220 912 ESL K line 42 D8 B9 E7 1B EA OF 39 ESL EEprom is loaded B6 OA FD 14 53 78 D C7 DC EO A3 9D ES CD 8A 15 79 18 07 51 9F B6 C6 BF 31 44 ED 7A 66 A9 6A 2F EC OF EF A8 6C BD 61 DF 93 B6 A5 66 ZD 69 ES C9 57 2C F7 82 84 A3 FE AC 14 08 47 B1 05 66 81 AS F4 71 EO C8 F4 71 EO C8 FF FF FF FF 63 63 63 00 Necessary to select password Connect OK Wait Upon completion you see w MBkeyprog 2 v1 0 W203 220 908 W210 W220 05X32 W211 220 912 ESL K line n Open Select Help 42 D8 B9 E7 18 EA 9r 39 Necessary to select password Connect OK Wait ESL EEprom B6 OA DC EO 79 18 31 44 EC OF B6 2c 08 Save Log File Programmed and checked OKI Clear Log File Disconnect the device and connect the ESL connector Write the dump to the EIS processor which has been generated and automatically saved before Write the right dump version to the key processor Write the dump with the written key to the ECU You may need to insert the key in the EIS several times up to 32 till the key is accepted Normally you succeed the first time Return the key to the client 35 6 Supplementary options 6 1 Writing a new key to the ECU Sometimes you need to write a previously prepared new key dump to the ECU Press Load in the load the previously prepared key dump to the
3. um Eey 2 is calculated and saved in all versions EIS CPU HSIZ EEprom calculated and saved ESL EEprom calculated and saved i Pl E gU mas T lt V WDB2110061A2a554784 Now you may write the keys into ECU if this necessary A 646 153 87 79 EEprom ST95160 EDC16 A646 is loaded Renew ECU save Log File Clear Log File Stop 29 In the circled windows you see VIN code and the factory number If the correct dump has been chosen while load ing you will see the right VIN code If the VIN code field is empty it means you have chosen the wrong version while loading Press Calculate ECU and you see s MBkeyprog 7 v1 0 W203 W220 908 w210 w220 05x32 W211 220 912 Calculate E m 176941 ml g Help W211 Help W211 l EIS EEprom is loaded MC58HC9812 QFPBU DKey 2 is calculated and saved in all versions V m EIS CPU HSIZ EEprom calculated and saved P ESL EEprom calculated and saved WDB2110061A694784 Now you may write the keys into ECU if this necessary Am Gia Tes ae TO EEprom ST935160 EDC16 A646 is loaded al LI iv LI E E LI E LI Keyv 2 is calculated into Eeprom ECU ECU EEprom calculated and saved Renew ECU save Log File Clear Log File The new ECU dump is automatically saved in the initial directory with adding New to its initial name Now you have a new dump for EIS processor programming new key programming ECU and ESL programming 30 5
4. Read EIS via K line R 912 ESL K line Read EIS via Kline W210 W220 Save DI FC 7B 25 D9 FC 7B 25 D9 FC AR 25 DESONGS 0060 Be F5 ZU DE Be F5 20 DS BS F5 20 DE BS F5 20 DS 0070 EE EF 65 15 EE EF B5 15 EE EF 65 15 EE EF 65 15 0060 8B 14 87 09 8B 14 67 OF BB 14 87 OF GB 14 87 09 0080 BO EE 01 F4 63 63 63 00 00 55 C2 c 00 DID FE 8C 0000 DS DE 13 11 ED AC 46 ES FD 64 6C OD FD AD AS 3D 0010 ES 49 90 Fe E9 49 GO Fe ES 49 90 Fe EB 49 90 Fe 0020 DY 22 CY F4 DY zz CY Fd DY 22 CY ES DF Z2 CT F4 0050 OF 20 DS 46 OF 20 D9 46 OF 20 D9 46 OF 20 D9 48 0040 YD JA OA 2E 7D 14 OA ZE 7D 14 UA 2E 7D lA UA 2E 0050 FBE 25 D9 FC UB 25 D9 FC AR zn D9 FC SEB 25 D9 FC 0060 BS F5 20 D8 BE F5 20 58 BS F5 20 DE B9 F5 20 DS 0070 EE EF 85 15 EE EF 65 15 EE EF 65 15 EE EF 65 15 0080 8B 14 87 OF B8B l oY OF GB 14 oY OF 8B 14 87 OF 0080 BO FF 01 F4 63 63 63 UD 00 55 CZ BC 00 OO FF BC 16 A gm m m M NM NM Press Save and save the read dumps one by one to the hard disk of your computer is MBkeyprog 2 v1 0 W203 W220 908 w210 W220 05xX32 W211 220 912 ESL K line E T3 Ti 1 TCC ud t par 4 Lt tt opu WE Ca ni al Jat JAA a i ll ANETT 00 00 00 00 00 00 00 00 7H 25 DW FC B9 FS 20 D8 EE EF 85 15 8B 14 87 09 BO FF 01 F4 ESL CPU 4 EEprom DS DE l3 i1 E9 49 90 FC D 22 C7 F4 OF 20 D9 48 7D 1A OA ZE 7H 25 DIEG B9 F5 20 DB EE EF 85 15 6B 14 87 09 BO FF 01 F4 File name is giv
5. 0070 6E FF 58 A4 83 E3 BS B9 FS 96 El D9 AC 987 72 F 00680 5E 14 67 OF BB 14 87 09 EE 14 BF OF B 14 87 OF save Log File 0090 FF FF FF FF 63 63 63 00 00 55 FF FF 00 00 FF FF Clear Log File Mecessary to select password Stop 23 key 0 Key 1 Key 2 Key 3 Key 4 Key 5 Key 6 Key 7 E3 Key 3 Key 4d Key 5 Key 6 r Key 7 ES Press Write and see the following Ed ie MBkeyprog 2 v1 0 E JA T VN W203 w220 908 W210 w220 05xX32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Load Save ESL Bead B Erase W210 W220 Save Old tilli EE dE eere IT Hew Selec Hel Key 3 Bae el 00 00 00 00 00 00 00 00 Key 4 i r Key 5 Programmed and checked OF Key 6 ESL EEprom is loaded Key 7 0000 BS YE 1C 57 BZ CA 51 69 30 CU B4 61 76 C9 15 EZ 0010 SE 40 80 F6 F ZF 1D B6 34 46 22 AS 22 JA ES JC 0020 76 OF El 88 88 26 8C 76 08 10 34 5p 2C 41 54A 3E 00350 De 77 EF C6 ZD 49 Z8 66 ZE BB DA AG 1F Co EE 7D 0040 BE SC CE A3 27 D3 FC C 23 Be CF 66 Oy of DE z 0050 B4 BS De FD 57 8E 5D 14 DA 8C 3D DE 1A SE GA AG 0060 E4 ZB 79 16 88 3E F6 AG 12 Yo AC 7C 80 42 Ce FE 0070 6E FE 59 A4 63 ES BS BB FS 96 El D9 AC 97 72 F 0080 8B 14 87 09 8B 14 87 09 6B 14 87 09 6B 14 87 09 0090 FF FF FF FF 63 63 63 00 00 55 FF FF OO OO FF FF Mecessary to select password Connect OF Wait Upon completion you see ja MBkeyprog J v1 0 EN W203 W2
6. 3B 2E BF EF 64 E3 17 AB C6 14 4WDB2110061A694784 0040 B2 2F 98 BD D7 OA E9 B2 90 9A 94 DA AF OF AB 73 0050 DB FF E3 09 6E OB AC ZA 65 74 74 62 EB 23 97 78 A 646 153 87 79 0060 09 14 54 6B DS FC 59 55 14 79 6E EZ 19 40 AB E UTENTE aaa 0070 9E DD 58 7A 93 49 C4 97 1B EA D2 2E 61 7B OD FF 0080 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 0090 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF Renew ECU EEprom 8T95160 EDC16 A646 is loaded save Log File Key 2 is calculated into Eeprom ECU Clear Log File Stop In this case the new ECU dump is not saved automatically to the hard disk You should press Save of the ECU field the file will be saved with the initial name and _New added 37 6 2 Renew ECU If you have a dealer device Star Diagnosis you can generate a new ECU dump on the original ECU dump to use it later with the help of the dealer device In this case you needn t write the new keys to the ECU You can also use another used ECU instead of the faulty ECU Press Renew ECU i MBkeyprag 7 v1 0 W203 w220 908 w210 wW220 05X32 W211 220 912 ESL K line d s Help W203 Repair ESL ESM Help W220 YIH Calculate ECU 4 Renew ECU l TESSA save Los File Clear Log File You see anew window i Renew ECU m z Ed YIH RN Renew ECU 38 Load the previously read ECU dump Renew ECU E Ed Load ECU A000 EDE 24004 4000 EBU 95POB 4000 LOMPR _29F400 4050 MEz8
7. 95P0B A111 COMPR_29F400 All2 MEz8 95P03 Dem A113 ME28 95P08 iiie dd E G1 EDE 29F500 Upon completion you see B Renew ECU m Ed WDB21100618694784 A 646 153 87 79 Eenew ECU In the circled windows you see the VIN code and the factory number of the ECU If the correct dump has been chose while loading you will see the right VIN code at the least If the VIN code field 1s empty you have chosen the wrong version while loading the file Press Renew ECU in the small window And after that close the win dow You see in the main window se MBkeyprog 7 v1 0 W203 w220 908 w210 W220 05x32 W211 220 912 ESL K line m sd d Help W203 SGI Repair ESL ESM Help W220 646 647 648 EDCLA ST95160 is loaded Successfully Sf ECU EEprom is updated and saved Clear Log File The new dump is automatically saved in the initial directory of loading Renew is added to the initial name 39 6 3 The conversion of the key dump format With the help of our program you can converse the key dump format version correctly To do so load a random dump version m MBkeyprog 2 v1 0 W203 W220 908 210 W220 05x32 W211 220 912 len INE ESL ESM E Help W211 In the window you can see the loaded dump version Choose version for conversion and you see k MBkeyprog 2 v1 0 W203 W220 908 W210 w220 05X32 W211 220 912 ESL K line Help W203 79 GE FA 2B VIN FE 79 e SB D6 OOOO BPN E3 17
8. CPU3 and CPUA in our classification which are not protected by a special password and can be erased You should erase them before the procedure of writing the new dumps to these processors If while working with the old type ESL visually you find out that a fast erasion is not possible choose ESL type NEW and continue to work as if with the new type which is described below In this example we deal with a usual old type ESL With the help of our device we can read the contents of CPU1 and CPU2 EIS processor as well as the contents of CPU3 and CPU4 ESL processors through the diagnostic connector These dumps are not full but we can use them as back up Connect the diagnostic connector To read through the automobile diagnostic connector the switches on the socket must be in the following position Before the procedure of reading you must insert the faulty key in the EIS another auto key the bottom of a dispos able lighter any object which matches the size 15 Press Read EIS F arie E i Me MBkeyprog 2 v1 0 W203 w220 908 W210 w220 05xX32 w211 220 912 ESL K line Read Write and Program ESL Load Save ESL ml E Old a C Her 00 00 00 00 00 please wait Reading OEH Upon completion you see u MBkeyprog 2 y a i W203 w220 908 w210 w220 05x32 w211 220 Read Write and Program ESL Load Save ESL Read Erase Write m fda i New Open Select Help TB ESL CPU 4 EEprom
9. Calculate ECU OA AF 52 EB 7B FE Renew ECU 2E 61 FF FF save Log File PEE FE FE FF 3 Rey v 3 is calculated successfully Clear Log File Then press Save and save the new dump to the hard disk 40 6 4 Key type identification Always write the third version of the dump to NEC processor If you work with old type keys with Motorola processor you may encounter three different dump versions 000000 000010 000020 000030 000040 000050 000060 000070 000080 000090 Var 2 000000 000010 000020 000030 000040 000050 000060 000070 000080 000090 Var 3 000000 000010 000020 000030 000040 000050 000060 000070 000080 000090 Attention If you load for example the third version of the dump to the key with the first processor version the Var 1 MA 567 880 011 14 23 D5 28 14 81 92 FE 01 OE 00 67 2C 59 DC CD 39 F7 01 00 66 89 CF 90 A5 40 75 7E 23 00 EC 45 44 38 2F 81 OD 97 01 01 11 AB 53 53 28 58 04 A8 3F 00 BD CD BC E7 6A OB 8F 59 12 00 MA 567 880 021 01 67 2C 59 DC CD 39 F7 D2 01 98 89 CF 90 A5 40 75 7E 83 01 63 CD BC E7 6A OB 8F 59 B7 01 F3 AB 53 53 28 58 04 A8 73 01 8D EE lE 2E E7 9E F6 AB 0A FF BE EF 31 A9 64 4B 9E 18 69 FF MA 567 880 051 01 67 2C 59 DC CD EE FF FF 00 98 89 CF 90 AS 40 7E FF FF 00 63 CD BC E7 6A OB A9 59 FF 00
10. Ch B4 61 76 C9 15 42 0010 9E 40 80 F6 F6 ZF 1D B6 34 46 22 A9 22 9A E9 9C 0020 76 OF EI 88 89 28 8C 76 08 10 34 SD 2C 41 SA 3E 0030 DC 77 EF C6 2D 49 Z9 66 ZE BB DA A6 1F C8 EE 7D 04402 DE SG GF A3 24 DS FESUC 23 BZ CF66 B of 5E B2 0050 B4 B5 DZ FD 57 9E 5D 14 DA 9C 3D D8 1A 3E 8A A6 0060 E4 2B 79 16 88 3E F6 A6 12 78 AC 7C 80 42 C2 FE 0070 6E FF 59 A4 83 E3 B3 B9 F5 96 El D9 AC 97 72 FE 0080 8B 14 87 09 8B 14 87 09 6B 14 87 09 BB 14 87 09 0090 FF FE FF FF 63 63 63 00 00 55 FF FF 00 00 FF FF Necessary to select password Upon completion you see ie MBkeyprog 2 v1 0 Jt 131 W203 W220 908 W210 w220 05X32 w211 220 912 ESL K line Read Write and Program EST Read EIS via K line Key 0 Load Save ESL Read B Erase Write W210 W220 Save Key 1 ES m E Key 2 a J gt PAET Read EIS l i Open M Select Help l Key 3 Password oo 00 00 00 00 00 00 00 g Key 4 Key 5 Necessary to select password 2 Key 6 Key 7 0000s BS 7E 16 51 BS 7E 10 57 BS 7E 10 57 BS 7E 10 57 0010 9E 40 80 F6 9E 40 80 F6 9E 40 80 F6 9E 40 80 F6 0020 76 OF El 88 76 OF El 88 76 OF El 88 76 OF El 88 0050 DC 77 EF CO DC 77 EF C6 DC 77 EF C6 DC 77 EE C 0040 D 36 CF A3 DI 3C GF A3 DE 3C CF A3 DF 3C GF A3 0050 B4 BS D2 FD B4 B5 D2 FD B4 BS DZ FD B4 BS DAZED 0060 E4 ZB 79 16 E4 ZB 79 16 E4 ZB 79 16 E4 ZB 79 16 0070 6E FF 59 A4 6E FF 59 A4 6E FF 59 A4 6E FF 59 A4 0080 8B 14 87 09 8B 14 87 09 6B 14 87 09 BB 14 87 09
11. De B9 EE EF 65 15 EE 14 87 08 BB FF Ol F4 63 save Log File Clear Log File please wait 19 Upon completion you see s MBkeyprog 2 v1 0 W203 W220 W220 05x32 w211 220 912 ESL K line S E 7 Open M Selec 00 00 00 00 00 00 00 00 0070 EE EE 85 15 EE 0080 6B 14 87 09 8B 0090 BO FF 01 F4 63 Connect Reading please wait 13 11 EO 90 FC E9 C7 F4 D D9 48 OF OA 2E 7D D9 FC 7B 20 D8 B9 85 15 EE Save Log File 87 09 8B 01 F4 63 Clear Log File Press Save and save the dump to the hard disk COXDpaHMTb Kak Danka EE t pf EE Recent Pa ouni cron Mo AOEYMEHTEI Mo koranerorep Ok pPYKEHHE Tun patina bin OTMeHa 2 In this case add 4 to ESL name After you have saved the original dumps start the procedure of erasing Move the switches to the position to work withCPU3 20 Press Erase button and see u MBkeyprog 2 v1 0 l E W203 w220 908 W210 w220 05xX32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via Eline Key 0 Load Save ESL Read Write W210 W220 Save Key 1 EV m P Spen pe E DI LL ipe y Password 00 00 00 00 00 00 00 00 Key 4 1 I r Key 5 Key 6 Erasing Wait r Key 7 Step I1 ESL opened save Log File Clear Log File Stop After the contents of CPU3 processor have been erased the ESL must unlock the steering column The vehicle can be rowed Press Lo
12. He EZ E EE EE SU 7a D6 17 AF EG 12 51 FE FE ae 7a D6 17 AF EG 12 51 FE FE 36 Ome blocked keys Calculate ESL ESM Help WZ11 ZB a4 zn AB UF 23 40 TE FF FE FA 16 Bl C6 AB a7 AB OD FE EE Cg AZ 26 l4 T3 7 E 2 FE FF FE ESL ESM Help W211 zB 94 2 D AS OF m 40 7B F F FF FA 16 Bl Co AB a7 AB OD EE EFE co AZ 26 14 v3 7B EZ EF FF FE AEA KEY 2 v l NIU UC v d P N Calculate ECI Renew ECT save Log File Stop KEY 2 ry 1 C v 2 Nl Load Save Load gt Save l IT Ti ECU EDG15 AO0 00 5T95P08 EDC15 A628 5795030 E ED 16 4611 5795320 EDC15 A646 5795320 H EDC15 A647 5795160 EDC16 4547 5795320 E EDC15 A648 5195160 EDC15 A648 5795320 ME 2 7 5T95P08 ME 2 8 5T95P05 save Log File Clear Log File M m M NM NM NM NM N Key field and Key 0 Key 1 Key 2 Key 3 Key 4d Key 5b5 Key 6 Key 7 All wg m mM M NM M 4 Key 0 Key 1 Key 2 Key 3 Key 4 Key 5 Key 6 Key 7 All After successful loading you see W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 Key 0 Load Save CPU ODO ESL ESM Key 1 0 012 ESL Emm n Key 2 ERE Help W211 E l l Key b Key 6 Key NZ v 1l is loaded Key 7 0000 04 FC OO C4 02 IB 51 F8 BY 28 54 Ul 3C ZB FA CB 0010 6
13. Key 2 is calculated and saved in all versions EIS CPU s EEproms calculated and saved ESL EEprom calculated and saved Now vou may write the keys into ECU if this necessary EEprom ZTS85P 8 EDCIBC3 is loaded 1s calculated into Eeprom ECUI v l1 is calculated into Eeprom ECU is calculated into Eeprom ECU The new ECU dump is automatically saved in the new directory with New added to its initial dump Now you see all the dumps for programming EIS processors the three keys ECU and ESL steering wheel lock 3 Operation with bookmark ESL K line Old m t 3 BEL CAE TTE ERU RLT JE an W203 W220 908 W210 W220 05X32 W211 220 912 ESL K line Read Write and Program ESL Read EIS via K line a Key 0 Load Save ESL Ese NES W210 W220 Save Key 1 Old Key 2 Key 3 Key 4 Key 5 Key 6 Key 7 Erase Help Ee ad EIS wg m NM M M M 14 You must distinguish between the old and new types of ESL steering wheel lock Below you can see the old type of ESL which was used in models W202 W208 W210 the years of production up to 2000 User manual to bookmark ESL ESL OLD W202 W208 W210 kll In some rare cases the most recent years of production the ESL had a new type microchip while they were in the old type box Actually these types differ by a number of electrical software and mechanic characteristics We ll study only one There are two processors in the old type ESL
14. Operation with ESL K Line bookmark New You must distinguish between the old and new ESL types Below you can see the new ESL type which was used in W203 W209 W211 types User manual to bookmark ESL W203 W209 W211 hl Connect the diagnostic connector Disconnect the ESL connector and connect the appropriate connector from our set To work with the new ESL processor the switches on the connector must be in the following position 31 Press Read upon completion you see j MBkeyprog 2 1 0 W203 w220 908 w210 W220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Load Save ESL EET Write W210 W220 Save Old New Open Select Help Read EIS Connect Reading please wait ESL EEprom 0000 CA FF 1D DU CA FF 1D DO CA FF ID DU CA FF ID DO 0010 AD 11 A5 66 AD 11 A5 66 AD 11 A5 66 AD 11 A5 66 0020 FF 63 BY CB DA 65 BY CB DA 63 BY CB DA 63 BY CB 0030 AD 11 45 66 AD 11 A5 66 AD 11 A5 66 AD 11 A5 66 0040 AD 11 A5 66 AD 11 A5 66 AD 11 A5 66 AD 11 A5 66 0050 DD A 6A DE DD D 64 DE DD OA 64 DE DD UA 64 DE 0060 BB E4 Z7 AZ BB E4 Z7 A2 BB E4 27 AS BB E4 27 AZ 0070 De AS AF YB De AS AF VB De AS AF YB De AS AF B 0080 34 56 82 E4 34 56 82 E4 34 56 82 E4 34 56 82 E4 0090 FF FF F4 01 63 63 63 00 00 55 41 02 00 OO FY El Mecessary to select password save Log File Clear Log File Stop If you only need to unlock the steering column then p
15. W210 Repair ESL ESM Help W220 Help W210 Repair ESL ESM Help W220 a 01 51 TE Co Co 00 EE AE TA D9 51 TE TA DG Ue ES AO 34 EC EC OU E3 58 l5 ES Bi 3 6 ES AF KEY wll C v 2 NISUS Key 0 Key 1 Key 2 Key 3 Key 4 Key 5 Key 6 Key 7 wg m m M NM M f ES H Key 3 Key 4 Key 5 Key 6 Key 7 Bee NM M Load the previously read CPU2 dump Mbkevprog z wi U x W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 Key 0 Load Save ETL 64k bin ESL ESM Key 1 i IT m ESL ESM Help W210 Key 2 Load EE CPU 1 256 byt Suid TA RI LIEC RS Help W220 Key 4 Key 5 Key 6 EIS CPU 1 EEprom is loaded O Key 7 0000 FE 02 45 SA D4 BE 1A 00 41 62 00 80 7F 90 02 99 0010 FF EF FF FF FC FF FF FF 5C 7C BA ED FO 01 E9 C2 All 0020 00 OO FD 48 01 iF OF 00 FD FO 2C 00 DD 51 AD 6C 0030 898 SF DE EA 3E E3 82 AA 4A CB 1B 96 AT 7B 34 DD VIN 0040 SB C3 FC 55 1B CA FB 1 FC 38 FC ED FC CB FC 85 0050 EE C8 YER 72 TB 18 EB 12 EG 39 FC ED EC CB FC 95 0060 OO OO OO OO OO OO OO OO 01 00 00 00 00 00 00 00 0070 BF DF BF El 7B 65 8C FC 94 53 77 EO VF CF ES D3 0080 57 FY 34 A4 SF 55 dC BF OD H5 Yo FC 73 AE So 54 0080 AY 19 78 Oe 42 AY AB FD CY OF 3C 34 BD 7A 06 AF O0A0 CC BA dz 96 OF 15 Dd EB FC Ye AD lE 24 D9 ES CB 0080 E9 EV DB 7F 06 69 AO 8E B9 39 F2 EA 02 51 B7 ED Save Log File 00C0 BB BC 7A 35 15 7E BE 51 7C 9
16. save Log File 0090 BO FF 01 F4 60 60 60 01 F4 FF C2 8C BO F9 FF 8C Programmed and checked OK Clear Log File 22 Press Erase and upon completion you see ja MBk pyprog 2 v1 0 W203 w220 908 w210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Load Save ESL Read Tae 210 220 Save l a Old E mm m UM ER EN Read EIS Help Password 00 00 00 00 00 00 00 00 Erasing Wert Step 1 ESL opened Erasing Wait Step 1 ESL opened save Log File Clear Log File stop Press Load and load the same ESL_ New dump which has been generated earlier to the program P MBkeyprog 2 v1 0 W203 w220 908 W210 w220 05xX32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line ESL Read Erase Write W210 W220 Save Sa Kead EIS New Help a 0070 6E FF 59 A4 6E FF 59 A4 6E FF 59 Ad 6E FF 59 A4 8 00680 56 14 84 09 6B L4 87 09 gB 14 84 OF B 14 87 09 i 0090 BO FF 01 F4 60 60 60 01 F4 FF CZ BC BO FS FF 8C Programmed and checked OF ESL EEprom is loaded 0000 B5 TE 1C 57 B2 CA 51 69 30 cl B4 61 T6 Co 15 EZ 0010 SE 40 50 F6 F6 ZF ID B6 34 46 ZZ AD 22 JA ES SC 0020 76 OF El 66 88 26 8C 76 06 10 34 5D zC 41 5A SE 0030 DC 77 EF C6 ZD 49 29 66 ZE BB DA AG lF Co EE 7D 0040 BF SO CFE A3 27 Do EG UC 23 Ba CF 66 gt ef 5E z 0050 B4 BS De ED 57 BE 5D 14 DA 8C 3D D6 1A SE GA AG 0060 E43 ZB 79 16 88 3E F6 A6 12 Yo AC YC 80 42 Ce FE
17. 0 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC95S12 MC68HC912 Load Save ESL ESM Help W211 KEY Load Save ECU Calculate ECU Renew ECU save Log File Clear Log File 27 Upon loading completion you see bkevprog z wv1 U JI W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 Load Save CPU ODO ESL ESM E C 912 176947 T ESL ESL EEM i SETS ESM 5512 TEE E 2 UC v d Load Save ECU y T Help All VIN E O Key 4d EIS EEprom is loaded MCS68HC9S12 QFPB E P H You see that two active keys are written at 0 and 1 positions Let s assume we have to write a third key to position 2 Tick position in front of Key 2 As in our example we work with Mercedes W211 we choose ESL in ESL ESM window Press Calculate W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 Load Save CPU ODO ESL ESH 71912 176947 9812 New odo Aili MCHSHCYS12 QFPHII EIS EEprom is loaded Key 2 is calculated and saved in all versions A LJ Help EIS CPU HSIZ EEprom calculated and saved ESL EEprom calculated and saved NI AV 3 5 Ll nm a gm E M Now you may write the keys into ECU if this necessary 28 In the initial directory where we loaded the EIS processor dump from automatically the following dumps are saved The new
18. 020 38 CC 84 FE AF YF AB BC E4 BF D4 F4 FB FC CB BS DODD DB A3 BF F3 86 C9 64 87 C7 OF 3C 34 9D 7A 06 AF Clear Log File 00E0 CC BA 42 98 07 15 D4 E9 FC 7C AD 1E 24 D9 E5 CB ET SCC W203 W220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 Load Save ETL 64k bin ESL ESM ESL C ESM Help W210 TIRE E J KEY Resi Boles Help W220 27 C Fle B OOAO CC BA 42 98 OF 15 D4 E9 FC 7C AD 1E 24 D9 ES CB ECU OOBO ES E DB 7F 06 69 AO BF B9 39 F2 EA 02 51 B7 BD 0020 38 CC 84 FB BF FE AB BC E4 BF D4 F4 FB FC CB ES OODO DB AS BF F3 86 C9 64 87 C7 OF 3C 34 9D 7A 06 AF DO EU CC BA 42 98 OF 15 D4 E9 FC 7C AD 1E 24 D9 ES C8 VIN QOOFO ES EY DB VF 06 69 AU BF BY 39 Fe EA 02 51 BY BD BAN Help Calculate ECT Key 0 is calculated and saved in all versions Eey 1 is calculated and saved in all versions Key 2 is calculated and saved in all versions Renew ECU EIS CPU s EEproms calculated and saved ESL EEprom calculated and saved save Log File Now you may write the keys into ECU if this necessary Clear Log File Stop The following dumps will be automatically saved to the same directory where the previously read EIS processor dumps have been loaded from The new EIS processor dumps EIS CPU 1 NEW bin and EIS CPU 2 New bin the new dump ESL steering wheel lock under the name ESL_New bin and the three new keys dumps in three new versions you m
19. 20 908 W210 W220 05X32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via Eline Key 0 Load Save ESL Read B Erase Bb Wire W210 W220 Save Key 1 i Old Key 2 T New Open M Sdect Help Read EIS z Pacsword 00 00 00 00 00 00 00 00 Key 4 i i Eog Eoo a rs 5 A Necessary to select password 5 Key 6 Key 7 Connect OF Walt ESL EEprom 0000 BS TES lc 57 BE WES 1C 57 BE TE 1C 5Y BE YE 1C 57 0010 SE 40 50 F SE 40 80 F6 BE 40 80 F amp 9E 40 E F6 0020 76 OF El 88 76 UF El 88 76 UF EL 56 Y6 OF EL 86 0030 DC VY EF C6 DC FY EF C6 DC YY EF C6 DC YY EF C6 0040 DY 3C CF AS D7 3C CF AS D7 3C CF AS D 3C CF AS 0050 B4 BS De FD B4 BS De FD B4 BS De FD B4 BS D2 FD 0060 E4 ZB 79 16 E4 ZB 79 16 E4 ZB 78 16 E4 ZB 79 16 0070 6E FF 59 A4 6E FF 59 A4 6E FF 59 Ad GE FF 59 Ad 00860 8B 14 87 OF 8B 14 87 09 8B 14 87 OF 8B 14 87 08 save Log File 0090 BO FF 01 F4 60 60 60 01 F4 FF CZ 8C BO FO FF 8C Programmed and checked OK Clear Log File stop Disconnect our device and connect the ESL connector back to it Write the dumps which have been generated earlier and automatically saved to EIS processors Write the correct dump versions to the key processors Write the dump with the written keys to the ECU it s actual only for res 24 tyled W210s keys couldn t be written in older models in their ECUs they had a characteristic of ECU match ing this EIS You may need
20. 6 41 3B 62 CE Ad EA 74 4D AC F7 FE 79 94 16 AZ 0020 Bl 41 61 9E CY 7D ZA GF 3D 53 9C GB D6 2D Bl 26 00350 DS 06 BB 69 DC 64 3B ZE GF EF 64 ES 17 AB C6 14 0040 Be ZF BB BD D OA ES Be 90 JA 94 OA AF OF AB 73 0050 OB FF ES 09 6E OB AC ZA 65 74 74 62 EG Z3 97 VE 0060 OF 14 54 6B DB FC 58 55 14 79 6E EZ 19 40 AB EZ 0070 9E DD 56 7A 83 49 Cd 97 IB EA De 2E 61 7B OD FF 0080 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FE FF 0090 FF FF FF FF FF FF FF FF FF FF FF EE FF FF FF FF Renew ELU EEprom ST95160 EDC16 A646 18 loaded All WDB2110061A694784 A 646 153 87 79 4 In the circled windows you see the VIN code and the factory number of the ECU If the correct dump has been chosen while loading you will see the right VIN code at the least If the VIN code field is empty you have chosen the wrong version while loading the file Press Calculate ECU you see pus n MWBkevprag z vi1 U tedre pots E F nur W203 W220 908 W210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9512 MC68HC912 Key 0 Load Save CPU ODO ESL ESM Calculate Key 1 912 C ESL ESL EZM a Key 2 Key 3 New odo LES Hep W211 3 P Key 4 r Key b r Key 6 Key Ne v l is loaded Key 7 0000 04 FC 00 c4 02 1B 51 FS B7 28 54 01 3c ZB FA C9 0010 66 41 3B 82 CE A4 EA 74 4D AC F7 FE 79 94 16 A2 A11 0020 Bl 41 61 SE C 7D ZA BE 3D 55 8C 9B DA 2D Bl 26 0030 D3 06 BB 89 DC 84
21. 61 03 UD FF FF FF EE FF FF FF FF EDC16 A611 5795320 EDC16 4646 5795320 EDC16 A647 5795160 I EDC16 4647 5795320 Key l is calculated and saved in all versions SER EDC16 4648 5T95160 DKey 1l is calculated and saved in all versions EDC15 A648 57953201 Key 2 is calculated and saved in all versions ME 2 7 5795P08 EIS CPU H S EEprom calculated and saved ME 2 8 5795P08 ESM EEprom calculated and saved save Log Pie Now you may write the keys into ECU if this necessary Clear Log File Stop If the loading is successful you will see W203 w220 908 w210 w220 05x32 w211 220 912 ESL K line W203 W639 W215 W220 MC68HC908 Load Save ETL 64k bin ESL ESH ESL ESHM Help W203 Repair ESL ESM Help W220 A g m m E F 01 01 00 00 c2 E9 01 FO ED BA 7C 5c 00 00 00 0180 00 OO 00 00 00 BO 62 BD C5 92 B4 DE 68 8E 60 C2 Olco 34 BO 8F C3 09 35 5B 22 5B FF 2C 58 79 13 4C BE 01D0 82 6C 01 00 00 00 00 00 OO OO 00 OO 90 OF 46 33 01ED0 80 20 61 44 FF OO 03 03 00 00 00 OO 01 01 00 00 s DiF0 OO OO OO OO OO 61 03 00 FF FF FF FF FF FF FF FF WDB2110061a694784 A 646 153 87 79 Key 0 is calculated Eey 1 is calculated Eey 2 is calculated and saved and saved and saved EIS CPU 9068 EEprom calculated in all versions in all versions in all versions and saved ESM EEprom calculated and saved Calculate ECT Renew ECU save Log File Clear Log File Sto
22. A 88 84 lF 7E 37 7C 3 00DD B4 07 31 EO 7B 27 52 58 C7 OF 3C 34 9D 7A 06 AF 0E0 CC BA 42 98 07 15 D4 E9 FC 7C AD 1E 24 D9 ES CB After loading you see ww L 1 Tata F T r bKeyprog Z v1 0 W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 Load Save ETL 64k bin ESL ESM ESL i ESM Help W210 KEY ES Load Save Key 3 Repar ESL ESM Help W220 r v 1 S E Key 4 Do 2 Key 5 I 8 c Y r Key 6 EIS CPU Z EEprom is loaded Key 7 0000 FE 02 45 5A 09 02 19 96 98 42 54 OO 1F FF FF 10 0010 11 61 20 60 58 55 36 YO 5C 7C BA ED FO 01 ES CZ All 0020 OO OO FD 46 Ul 1F OF OO FD FD zc OO DD 51 AD amp c 0050 89 SF DE EA SE ES BZ AA 4A CB 1B 96 AY YB 34 DD 0040 Yc 46 3B IB SA Fl FB le FC 39 FC ED FC CB FC 95 0050 1C Bo UE EZ FD 3 FB le FC 39 FC ED FC Co FC 95 0080 OO OO 00 OO 00 OO OO OO 00 OO OO OO OO 00 00 00 0070 BY 57 BB OY EC DC CA 42 GA 53 77 EU 7F CE ES D3 0080 4B 7C Be 80 B8 AS CA 51 SA 5D DB 11 BO 41 39 4E 0080 YB ZE ZB SD SE AF 36 7D CY OF 3C 34 9D 7A 06 AF O0A0 CC BA 42 96 OF 15 Dd ES FC 7C AD lE 24 D9 ES Co 00B0 E9 ET DB TE 06 69 AO BE BY 39 F2 EA 02 51 B7 BD Save Log File 0020 38 cc 84 FB SF YF AB C E4 BF D4 F4 FB FC CB ES OODO DB AS 8F F3 86 C9 64 87 C7 OF 3C 34 9D 7A 06 AF DOU EU CC BA 42 96 OF 15 Dd ES FC 7C AD lE 24 D9 ES CE z You see that key 0 key 1 key 2 are highlighted in green It means that three active keys are
23. EIS 8 Key 3 00 00 00 00 00 00 00 00 Key 4 1 Key 5 Gomme cine ss Key 6 Reading please wait Key 7 ESL EEprom 0000 DS DE 13 11 EU AC 46 ES FD 64 6C OD FD AD A3 9D 0010 ES 49 90 FC ES 49 90 FC ES 49 90 FC E9 49 90 FC 0020 BE 22 C7 F4 DES 22 C7 F4 RE 22 C7 F4 D7 22 C7 F 4 0030 OF 20 D9 48 OF 20 D9 46 OF 20 D9 48 OF 20 D9 48 0040 7D 14 DA ZE 7D 1A OA ZE TD l OA ZE 7D lA OA ZE 0050 7B 25 D9 FC 7B 25 D9 FC 7B 25 D9 FC 7B 25 D9 FC 0060 B9 FS 20 D B9 F5 20 DSB BY FS 20 DB B9 FS 20 DB 0070 EE EF 85 15 EE EF 65 15 EE EF 65 15 EE EF 85 15 0080 8B 14 87 09 8B 14 87 09 GE 14 87 09 BB 14 87 09 0090 BO FF 01 F4 63 63 63 00 00 55 cz 8c 00 00 FF 8c save Log File Clear Log File Stop 18 Press Save and save dump to the hardware CoxpaHHTb Kak Hanka EE ea Ex EH Recent 2 Pa amp ounua cron E hon nar urere A Mo KOMNEIOTEP 3 Leregene Hma canina 5 L nspaHHrE OKDUKEHHE Tun dana bi OTMEHa pA In this case you must add 3 to ESL name To read the contents of CPU4 processor you must move the switches on the connector to the following position Press Read the process of reading CPU4 processor has begun a MBkeyprog 7 v1 0 w203 W220 lt W220 05x32 w211 220 912 ESL K line T ae ex 10 00 OO OO OO OO OO OO Reading please wait ESL EEprom D5 DE 13 11 EU ES 49 90 FC ES D 22 Cy F4 D UF 20 D9 48 OF D 14 04 2E 7D EB 25 BS FC YB Bo Fe 20
24. F3 AB 53 53 28 58 2B A8 FF 00 8D EE 1E 2E E7 9E BB AB FF FF BE EF 31 A9 64 4B 58 18 FF FF key will not work 63 25 CB 55 72 5B F6 8E FF 00 8D EF 31 A9 64 4B 9E 18 71 00 BE EE lE 2E E7 9E F6 AB FF 00 11 6B 95 34 BD 50 7D 39 A9 FF 66 E2 2F 27 89 04 29 F2 71 7D BD 25 CB 55 72 5B F6 8E FF 654 367 11 6B 95 34 BD 50 78 39 FF FF 66 E2 2F 27 89 04 95 F2 71 FF BD 25 CB 55 72 5B EE BE FF FF 567 880 98 E2 2F 27 89 04 29 F2 FF OE F3 6B 95 34 BD 50 7D 39 FF 00 67 08 BF 2C 28 AS DC 16 3F 36 BO F6 71 14 OA 66 CF 43 12 08 2004 677 08 BF 2C 28 AS FF 16 3F FF BO F6 71 14 0A 66 7F 43 12 FF 41 F5 F6 71 14 0A 66 CF 43 A7 7C 041 62 80 F9 40 BC 11 AF 7F 23 81 62 80 F9 40 BC 11 FF 7F 23 FF 62 08 BF 2C 28 AS DC 16 B4 FF 677 80 F9 40 BC 11 AF 7F 07 12 BO 60 7F AF 6F F3 85 76 4C 01 4E 23 46 7C E7 01 AC 656 167 20 70 F5 60 7F AF 6F AD F3 85 BO 25 F5 60 7F AF 6F FF 85 BO FF 01 AE BF 23 46 7C E7 7B 67 61 01 AE BF 23 46 7C FF 7C 67 FF 23 D5 28 14 81 92 FE 78 62 14 23 D5 28 14 81 92 FF FF 62 14 45 44 38 2F 81 OD 97 8D F5 EC 45 44 38 2F 81 F2 cC
25. Key 6 S0001000000 N calk Key 7 0002000000 N calk 0003000000 N calk 0004000000 N calk 50005000000 N calk S0006000000 N calk 0007000000 N calk S0008000000 N calk s0009000000 N calk S 000A000000 N calk S000E000000 N calk 000cO0D0000 N calk S000D000000 N calk S000E000000 N calk S000F000000 N calk When the password 1s found you will see n bKeyprag z v1 U W203 W220 908 W210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Key 0 Load Save ESL p NU E W210 W220 Save Key 1 s Old Key 2 bad Open Select Help Key 3 Key 4 Key 5 S00D5000000 N Key 6 S00D6000000 N calk Key 7 S00D7000000 N calk S0008000000 N calk S00D9000000 N calk S00DA000000 N calk S00DE000000 N calk S00DC000000 N calk S00D0000000 N calk S00DE000000 N calk S00DF000000 N calk S00E0000000 N calk S00E1000000 N calk S500E2000000 N calk save Log File OR JI Good 42 DS B9 E7 1B EA 9F 39 x This is a password Clear Log File 33 If you are not going to erase in this session you should write the found password on paper in order to save your time next time In our example after successful finding of the password press Erase immediately and you get Mbkevprog Z 1 0 W203 w220 908 w210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Key 0 Load Save ESL Read rate Wi W210 W220 Save Key 1 Old O Key 2 f m Hew Open Select Help Re
26. MBkeyprog 2 USER MANUAL We present to your view a hardware system MB Keyprog 2 Its main function is to facilitate the programming of Mercedes optical keys Besides the program works inde pendently with ECUs dumps gear box etc Attention These instructions don t claim to be completely up to date The program is in constant updating and the newest changes might not be included in these instructions In addition to these instructions we advise to use Help directory in the corresponding windows After you have connected the main unit from your set to USB port you will need to install the drivers included The process of drivers installation is not described in this manual Run the program 1 Operating bookmark W203 W220 908 E MBkeyprog 2 v1 0 S xi W203 W220 908 w210 w220 05x32 w211 220 912 ESL K line 39 W215 W220 MC68HC905 s ES Help W202 Repair ESL ESM Help W220 Calculate ECU Eenew ECU save Log File Clear Log File The program initially opens at W203 W220 908 bookmark It means we work with the EIS where processor MC68HC908AS60 A Z60 is installed You can see the list of the cars where the EIS is based on this processor in the program window encircled in red Below there is a view of the EIS processor at W203 240220 MCGBEICOBAZ 32 4260 1 TASA j AS T P P J ad 2 1 E di P s i WUC 7 UM r t ow F pt 6 r f A FE in 1
27. P E lu E zx mM 44441111 HIM ANGAAR HAA P jim TIWNRRRRRERRRRRRRRRRRRES dabo dd ii ell dla i ie le cae a a E k The processor dump which we marked as CPU KEYS should be considered a suitable programmer At first you should unsolder the processor and read it with the programmer if it 15 necessary depends on the programmer you use If you use programmer ETL then you have to tick the window in front of ETL 64k bin inscription Press LOAD directory in the top left window and upload the previously read dump processor MBkeyprag 7 v1 0 W203 w220 908 w210 wW220 05X32 W211 220 912 ESL K line d s Help W203 Repair ESL ESM Help W220 EIS MC68HC908 EEprom is loaded ES DS FF FF FF FF FF FF FF e m 01 3D n 10 66 va l7 OF zi 52 52 B3 BC 2A DF DA 84 00 07 7B 48 40 34 74 C7 VIN DF 51 44 95 46 OO 07 D an OO OF 42 SE 69 26 EI BE CD 5E 14 93 C3 DU OF J 47 6E 00 03 07 ZE BF SF 6D 21 FB EB 08 72 62 5D 88 01 FF FF FF FF OF 48 40 90 3D DO ED DE 51 44 93 48 49 C5 29 02 90 00 OF 42 SE 74 F D8 F7 BE CD 6E 14 93 54 FF FF FF FF FF UY AB FO 03 01 A7 B7 82 88 4B 2B 79 z Y In the top right part of the window you see PHelused keys and HEIKI bookmarks Unfortunately we can t get the information about the number of used keys in this vehicle from the EIS dump based on processor 908 But if this car has locked keys we see them enriched in red Now according to which Mercedes you work with W203 or
28. W220 you must choose put a dot in ESL ESM window and tick the positions where you fill in the keys For example you work with Mercedes W220 you choose ESM and you wish to fill in three new keys positions from 0 to 2 m MBkeyprog 2 v1 0 W203 W220 908 W210 W220 05x32 W211 220 912 ESL K line s 9 Help W203 Repair ESL ESM Help W220 m ZEE NE G E NM EM M FF 86 s Help ZA 40 PD om 48 5E PD oe 2 Calculate ECU GE 72 Save Log File Clear Log File Now press Calculate after that you will see MBkeyprog 2 v1 0 W203 w220 908 w210 w220 05x32 w211 220 912 ESL K line W203 W639 W215 W220 MC68HC908 Load Save ETL 64k bin ESL ESH ESL ESHM Help W203 Repair ESL ESM Help W220 0150 FF FF FF FF FF FF 03 FF FF FF FF FF FF FF FF FF 0190 FF OF FF FF FF FF FF FF FF FF FF FF AA OO 01 OL 0140 01 OO 01 OO OO Cz EB Ul FO ED BA Ye 5C UU 00 00 0180 OO OO 00 OO OO BU 62 BD C5 92 B4 DE 68 BE 60 CZ 0160 34 BO GSE C3 09 35 55 22 5B FF zC 56 79 13 4C BE wg m m m N 01D0 82 6C 01 00 00 00 00 00 00 DO DO DO 90 OF 46 33 VIN 01E0 60 20 61 44 FF 00 05 03 00 OO 00 00 01 01 00 00 01E0 OO OO OO 00 OO 61 03 OO FF FF FF FF FF EE FF FF PIN l Calculate ECU Key Dl is calculated and saved in all versions Eey 1 is calculated and saved in all versions Key 2 is calculated and saved in all versions Renew ECU EIS CPU H S8 EEprom calculated and saved ESM EEpro
29. ad EIS ij 1 Key 3 O Key 4 Key 5 SOODBOOOOOO N calk Key 6 S00DC000000 N calk Key 7 S00DD000000 N calk SO0DE000000 N calk S00DF000000 N calk S00E0000000 N calk S00E1000000 N calk S00E2000000 N calk OF ILL Good 42 DB B9 EY 1B EA GF 39 lt This is a password Erasing Wait Walt several minutes save Log File Clear Log File Stop Now your ESL 1s ready for the new dump writing In the same way you can prepare the used ESL for writing and put it away for better times Load the previously generated ESL New bin file to the program B bkevprog z wv1 U W203 W220 908 W210 W220 05X32 W211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Key 0 d Save ESL Read Erase Write W210 W220 Save Key l Old r Key 2 i Read EIS New Open Select Help zs Key 3 Key 4 r Key b ESL EEprom is loaded Key 6 0000 B6 OA FD 14 53 78 DB C7 CB 54 9B B6 52 70 DA 49 n Key 7 0010 DC ED A3 9D ES CD BA 15 0C 53 B3 5C 14 dE C4 z 0020 798 18 OF 51 BF B6 C6 SF EF VF DS 58 60 OD FY 85 0030 31 44 ED 7A 66 AS 6A 2F CY DY BF OO 97 ZA CF BF 0040 EC OF EF AG 5C BD 61 DF 4F De AC 60 CD DO 69 VE 0050 83 B6 AS 66 2D 69 E5 C98 A 40 2C D5 60 EC BA 8C 0060 57 20 FY 62 B4 AS FE AC Ch E9 4B 95 75 25 Ce ED 0070 14 06 47 Bl 05 66 81 A5 AE 3D 058 D4 69 41 35 Z3 0080 F4 71 EU Co F4 71 EU C8 F4 71 EU C8 F4 71 EU CB 0090 FF FF FF FF 65 65 65 00 00 55 FF FF 00 00 FF FF Mecessary to select password
30. ad and upload ESL New dump which has been generated earlier to the program be v1 0 Ji d W203 w220 908 W210 w220 05xX32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via E line ESL Read Erase Write W210 W220 Save Old Eead EIS 9 Hew Open N Select lg Help key 4 key 5 Key 6 Erasing Wait Key 7 Step 1 ESL opened ESL EEprom is loaded 0000 BE TE 1C 57 Bae CA 51 69 30 GU B4 61 T6 Co 15 EZ 0010 9E 40 560 F6 F ZF ID B6 34 46 22 AD 22 JA ES SC 0020 76 OF El 66 88 26 C 76 06 10 34 5p zC 41 5A SE 00350 DC 77 EF C6 ZD 49 Z8 66 ZE BB DA AG 1F Co EE 7D 0040 DF 30 CE A3 27 D3 BG UC 23 Ba CF 66 07 ef 5E z 0050 B4 BS De FD 57 BE SD 14 DA 8C 3D D6 1A SE GA AG 0060 E43 ZB 79 16 88 3E F6 A6 12 Ye AC YC 80 42 Ce FE 0070 6E FF 58 44 83 E3 BS BY FS 96 El D9 AC 9 72 F 0080 8B 14 87 09 6B 14 67 09 GB 14 87 OF 6B 14 87 09 save Log File 0090 FF FF FF FF 63 63 63 00 00 55 FF FF OO OO FF FF Necessary to select password Clear Log File Stop 21 Press Write you see ja MBkeyprog 2 1 0 I IK W203 w220 908 W210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Load Save ESL Raad E EM f W210 W220 Save mo mer m em Read EIS Hi New Open M Select lg Help Ka HI Password oo 00 00 00 00 00 OO OO ESL opened ESL EEprom is loaded 00005 BS 7E 10 57 BZ CA 51 69 30
31. ay read about the key dump versions at the end of this manual under the names Key 0 v1 bin Key 0 v2 bin Key 0 v3 bin Key 1 v1 bin Key 1 v2 bin Key 1 v3 bin Key 2 v1 bin Key 2 v2 bin Key 2 v3 bin 12 Now you may generate a new ECU dump where our new keys will be located To do so load the previously read ECU dump in ECU window after you have chosen the necessary version r MENTIS MENS 7 bKeypraog Z v1 0 W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 m Key 0 Load Save ETL 64k bin ESL ESM 1 m Key 1 ESL C ESM Help W210 m Eey 2 Repair ESL ESM Load Save P Help W220 B v l g NIMM W424 i Load Save D CU ECU m EDC15 A628 5795050 g I EDC16 4611 5795320 E0716 4646 5795160 L EDC16 4646 5795320 a EGC16 4547 5795160 EDC16 A547 5795320 EKey l is calculated and saved in all versions EDC16 4648 5795160 Eey 1 is calculated and saved in all versions EDC16 4648 5795320 Key 2 is calculated and saved in all versions MEZ2 7 5795P08 EIS CPU s EEproms calculated and saved ME 2 8 5795P08 ESL EEprom calculated and saved ave Log File Mow you may write the keys into ECU if this necessary Clear Log File Stop If the loading 1s successful you see B MBkeyprog Z v1 0 W203 _W220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 SST Load Save ETL 64
32. dump EIS CPU 9812 New bin the new ESL dump ESL New bin the new key dump in three versions you can read about the key dump versions at the end of this manual Key 2 v1 bin Key 2 v2 bin Key 2 vl bin Now you can generate a new ECU dump where our new keys will be located To do so load the previously read ECU dump in the ECU window Wbokeyprog z v1 0 W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9512 MC68HC912 Load Save CPU ODO ESL ESM 912 176947 ESL ESL ESM y 8812 ESM Load Save KE New odo Help W211 s v2 n C v d EIS EEprom is loaded MCS68HC9S12 QFPB Load Save ECU Ei Bake T Ed IT mni Eey 2 is calculated and saved in all versions EDC15 ADDD ST9SPOS EIS CPU HSIZ EEprom calculated and saved EDC15 4628 5795080 ESL EEprom calculated and saved EDC16 A611 ST95320 Now you may write the keys into ECU if this necessary E EDC16 4646 5T95320 EDC16 A647 5795160 EDC16 A648 5T95160 EDC16 A648 5795320 ME 2 7 5T9S5PO8 ME 2 8 5T95P05 vave Log File Clear Log File Stop I EDC15 A647 5795320 If loading 1s successful you see W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 Load Save CPU ODO ESL ESM 91 176947 ESL ESL ESEM 8512 C ESM New odo Help W211 Load EIS EEprom is loaded MC6BHCS8S12 OFPSO
33. en automatically COXpaHHTb KAK Hanka ra Recent 3 Pa6ouuh cron Mol nokurmeHrEl d Mol raranemrep Leregne Mira cana BKpusceHHe Tun paring zry 3 id VIA SGL Save EIS CPU 2 Save ESL CPU 3 Save ESL CPU 4 m 3y tas Las x Save Log File Clear Log File rriena 2 Disconnect the ESL connector and connect the appropriate connector from our set If you have not done the pre vious reading through the diagnostic connector we recommend to read and save the original ESL dumps to the hard disk of your computer To read and later write CPU3 processor the switches on the connector must be in the following position 17 Press Read the process of reading CPUS processor has begun E ie MBkeyprog v1 0 Sela W203 w220 908 W210 W220 05x32 W211 220 912 ESL K line Read Write and Program ESL Read EIS via Kline Key 0 Load Save ESL e wu W210 W220 Save Key 1 Mas Old eu E Key 2 7 0 Her Opern elegi Hel gno sd Oi Key 3 Password 00 00 00 00 00 00 00 00 Key 4 r Key 5 Key 6 Reading please wait Key 7 PTTTTTTTTTTTTTTTTTTTTTTTITITITTTITITID Upon completion you see a MEH EYpBrag A w 1 U 3 IT i E W203 w220 908 W210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via Eline Key 0 ESL Read Erase Write W210 W220 Save Key l Old r Key 2 Co Herr Den Select Help Read
34. gramming the EIS the three keys ECU and ESM Electronic Selection Module In the following picture you can see the location of EEPROM 93c56 microchip on the ESM plate i W220 MC6BHCO5X16 X32 EI ALS qz C t Sul zi E Re ki ki Fl E ka TET pP P LJ a 3 a m LN J P LI rii ri wa Sa LI EEPROM 93C56 am reni b ur E i a T a ow O ov E egt T uA AR CE w Write the dump to the EIS processor which has been generated and automatically saved before Write the neces sary dump versions to the key processors Write the dump with the written keys to the ECU You may need to insert the key in the EIS several times up to 32 till the key is accepted Normally you succeed the first time Return the vehicle to the client 2 Operation with bookmark W210 W220 05x32 gt MBkeyprog 2 v1 0 W203 w220 908 W210 W220 05X32 W211 220 912 ESL K line W202 WZ208 W2Z10 W215 W220 05X32 Key 0 road Save ba4k bin ESL ESM Key 1 el IL DU ESL C ESM Help W210 KEY E Key 2 m SS Load Save HH Help W220 Key 4 oe 8 a Hr Key 5 Key 6 ed Save ECU D Key 7 JEL 158 VIH P H The list of cars marked in red have MC68HC05X32 processor in their EIS Below you can see CPU1 proces
35. k bin ESL ESM m kel ESL C ESM Help W210 Rar r a E Repair ESL ESM Help W220 a UUBU E98 E DB YF 06 69 AU GF BY 39 FZ EA 02 51 BY BD VEI E m 0020 38 CC 94 FB 6F FF AB OC E4 BF D4 F4 FB FC CB B5 F 00D0 DB AS BF F3 66 C9 64 B7 CY OF 5C 34 3D 7A 06 AF j 1 T WDB 2102061B054020 00E0 CC BA dz 98 OF 15 Dd ES FC Ye AD lE z4 DS ES CB OOFO ES EY DB VF 06 69 AU OF BY 39 FZ EA 02 51 BY BD Key l is calculated and saved in all versions Key 1 is calculated and saved in all versions GENET Eey 2 1s calculated and saved in all versions EIS CPU s EEproms calculated and saved ESL EEprom calculated and saved Renew ECU Now you may write the keys into ECU if this necessary save Log File EEprom ST95PD8 EDC15C3 is loaded Clear Log File stop If the right dump has been chosen while loading you will see at the least the right VIN code If the field of the VIN code is empty you have chosen the wrong version while loading the file 13 Press Calculate ECU you see g a T ka T LE L las W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 v Key 0 Load Save ETL 64k bin ESL ESM Calculate v Key 1 i w ESL C ESM Help W210 v Key 2 Repair ESLIESM Key 3 Help W220 Key 4 Key 5 Key 6 Key 7 Eey 0 is calculated and saved in all versions Key 1 is calculated and saved in all versions i Help r All
36. m calculated and saved save Log File Now you may write the keys into ECU if this necessary Clear Log File Stop The following dumps will be automatically saved to the same directory where the previously read EIS processor dump has been uploaded from The new EIS processor dump EIS CPU 908 New bin the new ESM Electronic Selector Module ESM New bin and the new three keys dumps in three different versions you can read about the different versions of the key dumps at the end of this manual Key 0 v1 bin Key 0 v2 bin Key0 v3 bin Key 1 v3 bin Key 2 v2 bin Key 2 v3 bin Now you may generate a new ECU dump where our new keys will be located To do so load the previously read ECU dump in the ECU window j MBkeyprog 2 LU x W203 W220 908 w210 W220 05x32 W211 220 912 ESL K Line W203 W639 W215 W220 MC68HC908 L Load Save ETL 64k bin ESL ESM a ESL i ESM Help W203 KEY Zi m Load Save E Resa BOL ESM Help W220 b gt 7 m 00 gs F 0180 EF EF FF FF FF FF 03 FE FF FF FF FE FE FF FE FF l E 0190 FF 07 FF FF FF FF FF FF FF FF FF FF AA OO 01 01 I To ECU E O1A0 01 00 01 00 00 c2 ES 01 FO ED BA 7C 5C 00 00 DD TI d 0180 00 00 00 00 00 BD 62 BD C5 92 B4 D6 68 BE 60 C2 00 01C0 3A BO 8F C3 09 35 5B 22 5B FF 2C 58 79 13 4C BE separ ehkki O1D0 8z ec 01 00 00 00 OO 00 00 00 00 00 80 07 46 33 i 01E0 560 20 61 44 FF 00 03 03 00 OO OO 00 01 01 00 00 E 01F0 OOF OO OO OO OO
37. p In the circled windows you see VIN code and ECU factory number If a correct dump has been chosen while load ing you will see at the least the right VIN code If the VIN code field 1s empty you have chosen the wrong version Now You may write the keys inte ECU if this necessary EEprom 8T95160 EDC16 A646 is loaded while downloading the file Press Calculate ECU and you see is MBkeyprog Fu I ERI W203 W220 908 w210 w220 05x32 w211 220 912 ESL K line W203 639 4215 W220 MC68HC908 v Key 0 Load Save ETL 64k bin ESL ESM Calculate v Key 1 0 ESL ESM Help 41203 v Key 2 Help W203 E j Repair ESL ESM HH Help W220 Key 4 r Key b O01F0 00 OO 00 OO 00 61 03 00 FF FF FF FF FF FF FF FF Key 6 Key 7 Key is calculated and saved in all versions Eey 1 is calculated and saved in all versions Em T Key 2 is calculated and saved EIS CPU 9300 EEprom calculated in all versions and saved 4WDB2110061A694784 ESM EEprom calculated and saved A 646 153 87 79 Now vou may write the keys into ECU if this necessary ST95160 EDC16 A646 is loaded Eenew ECU is calculated into Eeprom ECU is calculated into Eeprom ECU is calculated into Eeprom E ECU EEprom calculated save Log File Clear Log File Stop The new ECU dump is automatically saved in the initial directory with New added to its name Now you see all the dumps for pro
38. program Hi ue Allen MOKEYD W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 New odo Load Save m ron VLD CPU Rey N2 v l is loaded O00 4 H c4 U2 IB 00106 66 41 35 62 CE Ad 0020 Bl 41 61 SE CY D 0050 DS 06 BE 859 pe 84 0040 Be ZF Go BD D OA 0050 DB FF ES 09 6E OB 0060 OF 14 54 6B Db FC 0070 SE DD 58 YA 83 49 0050 FF FF FF FF FF EE 0090 FF FF FF FF FF FF Load the ECU dump j MBke yprog Z v1 U W203 w220 908 w210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 Load Save ESL ESM Key NZ v 1 is loaded 04 66 Bl D3 Be OB 0 3 SE FE FF EC 41 41 06 2 E FE 14 DD FE FF OU 3B all Bo an E 5 54 58 FF FE CPU 91 9812 ca Bz JE og ED 09 HB TA FF FF Oz CE E DC D HE Da d FE FE lB A TO Hd OA OB EL 49 FF FF Hew odo EA zA 38 ES AC 59 C4 EE FE Fo 74 HE 2E Bz z A 55 gy FE FE 4D SD oF a 65 l4 1E FE FE ODO 51 EA lt ZA 3B ES AC 59 ca EE EE Fo 74 Qm 2E Bz 2A 55 a FE FE BY 40 SL GE a 65 l4 1B FE FE ESL ESM C ESL UC ESM zu AC 53 EF AA a4 9 EA FE FE o4 EU en 54 a4 v BE Dz FE FE 01 FE BB E3 A be EZ ZE ER FE ESL ESM 20 AC 53 EF AA T4 T9 EA FE FF 54 E 515 54 a 4 v BE De FE FE 01 FE HB E3 OA
39. ress Open in this case an automatic process of all eight keys hashes selection starts and the ESL opens B bKeyprag z v1 U EI W203 W220 908 W210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Key 0 Load Save ESL IM M espe 210 20 Save Key 1 Old v Em am ee EE v Key 2 Password 00 00 OO OO OO OO OO OO Key 4d r Key b S1BADDODDD N calk Key 6 S1BB000000 NH calk n Key 7 S182000000 N calk S182D000000 N calk SIBEUUUDUDUS N calk SlBF 00 N calk S120000000 N calk 5S121000000 N calk S122000000 N calk S123000000 N calk S124000000 N calk S125000000 N calk gc 58 FF 7C 99 DE DS ZF lt This is a hash of 0 key Lets try to open save Log File OK Good Clear Log File To write a new dump to the ESL it 1s necessary to erase previously which is not possible without the correct password selection 32 If you have not used the Open function before the operation of the password selection it is necessary to press Read Then press Select the password selection starts A Keyprog 2 v1 U W203 w220 908 w210 w220 05x32 w211 220 912 ESL K line Read Write and Program ESL Read EIS via K line Key 0 Load Save ESL DES Bu 210 220 Save Key 1 Old Key 2 7 x Select Read EIS New Open Select Help Br Key 3 Password 00 00 00 OO OO OO OO OO E Key 4 Key 5 B3 Cl EE 46 2B 2A 27 4E lt Random
40. sor location in the EIS of Mercedes W210 M W202 W208 W210 MC6BHCO5X16 X32 EG moi MAA A an Ere ju mam CET gui zm i vda DS HEHH HO M 184185 KU52 9865 415740 HLHL9720 CPU 1 Ee ERT T E Lil n i ANT e iji G gm EIS ELLU eJ eau TRE t d ks a P ES a Ja f Add dd d AER es inar Further you can see CPU2 processor location in the EIS of Mercedes W210 ie W202 W208 W210 MC68HCO5SATO AS E A F LU 4 i z AEG a 4 i n ET a s tema we E Jp mue M M AAA amp DT ai NE kant PAAT 4 KE i M s ma 80 FUE TUS R8 PEOR IG PAEST ET E TENSE E 3 ZCA410710CFU 194354 aM EET em pes m x ig TE HLI109721 M ELA TLS EHIVAD ET maa Ji Sa DA hei ae T p un aeaaeae Below you can see the location of CPU1 and CPU2 processors in the EIS of Mercedes W220 b W220 MUGBEICOSAT 6 A 32 OK p r of e L 09 p t o do 97A y 11919 o A TN aa A NE oo BED E TE a EE om he 4 Ge As an example we will study the process of writing three new keys been to Mercedes W210 We should read the contents of CPU1 and CPU2 processors from the EIS Remember these processors are protected against reading and attempts to read them with the help of a programmer which can t evade this protection will lead to the initial dump damage If
41. to insert the key in the EIS several times up to 32 till the key 1s accepted Normally you suc ceed the first time Return the car to the client 25 4 Operation with bookmark W211 W220 912 io MBkeyprog 2 v1 0 OK W203 W220 908 W210 w220 05x32 W211 220 912 ESL K line W209 W211 W219 W220 MC9S12 MC68HC912 Key 0 Load Save CPT ODO ESL ESM Key 1 LJ 912 TME ESE Key 2 9812 New odo ESM l Key 3 Key 4 r Key 5 Key 6 Key 7 All Calculate ECU Renew ECU save Log File Clear Log File Stop The cars which have MC9 S12 processor in their EIS are marked in red How can you identify the type of processor correctly Before you could identify the type by the mask on the box after unsoldering the processor Now many use the programmers for in circuit onboard programming without unsoldering e g Rosfar programmer Disassemble the EIS You see on the main board ST 12 inscription It means you should choose 9812 type of the processor in your program window 26 If you see HC12 inscription on the board lt QON Er e Q e Qu lid if 1 049 ADS Mejia NS ope j E m Q Arni it means you should choose 912 processor type in your CPU program window Let s study the work of the program with 9812 as an example Chose according processor in CPU window Upload dump has been read from EIS je MBkeyprog 2 1 0 W203 w22
42. written in this EIS There are no blocked keys Actually you can write a new key to any position you choose But you need in this case one or several original keys you need to know the key number to write a new key to its place It is easy to learn the number of the active key by reading it in the program of Mercedes NEC Key Programmer which is included or with the help of MB Key Expert provided by our company 11 Let s suppose all the keys let s write three new keys to positions from 0 to 2 Mbkevprog z wi U W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 m Load Save ETL 64k bin ESL ESM Calculate Key 3 Key 4 Key 5 Key 6 Key 7 7 E z EIS CPU 2 EEprom is loaded 0000 FE 02 45 SA 09 n2 19 96 98 42 54 00 1F FF FF 10 0010 11 61 20 60 58 55 36 70 5C 7C BA ED FO 01 E9 ce All 0020 00 OO ED 48 01 1F DF OO FD FO 2c 00 DD 51 AD 6c 0030 89 5F DE EA 3E E3 82 AA 4A CB 1B 96 A7 7B 34 DD VIN 0040 7C 46 3B 1B 3A Fl FB 12 FC 39 FC ED FC CB FC 95 0050 1c BB DE E2 FD 3A FB 12 FC 39 FC ED FC CB FC 95 0060 00 00 00 00 00 00 00 00 00 OO 00 00 00 00 00 00 Calculate ECT 0070 B7 57 07 42 53 77 7F E3 D3 BB EC DC CA SA EQ CE 0060 4B 7C BB 860 B8 AS CA 51 SA SD DB 11 BO 41 39 dE 0080 7B ZE ZB 5D SE AF 36 FD CY OF 3C 34 BD 7A 06 AF O0A0 CC BA dz 96 OF 15 Dd EB FC Ye AD lE 24 DY ES CB 0080 ES E7 DB 7F 06 69 AO BE B9 39 F2 EA 02 51 B7 ED Save Log File 0
43. you use ETL programmer it is necessary to put a tick in the window with the inscription ETL 64k bin in front of it Load the previously read dump to the program r bkevprog z wv1 U W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line WZ02 W208 W210 W215 W220 05X3532 Load Save ETL 4 k bin A Load EE CPU 2 256 byte After loading you can see W203 w220 908 W210 W220 05X32 w211 220 912 ESL K line W202 W208 W210 W215 W220 05X32 Load Save ETL 64E bin ELS CPU 1 EEprom is loaded 0000 FE 0010 FF 0020 uu 0050 83 0040 3B 0050 FB 0060 00 0070 BF 0080 57 0080 A UDAU CC 00B0 ES 0020 BB 0000 B4 00EO CC uz EF 00 SE C3 Ga n DF EY 19 BA E BC 07 BA 45 FE FD DE EC B 00 GE 3d 73 d DE TA 31 dz SA FE 40 FA 53 Ta 00 EI Ad Oz ag TE 35 EQ ga D4 FC 01 3E lB TE 00 TE IF d 07 06 15 TE 07 BE FE lF E3 CA 185 00 63 53 A 15 59 7E ad 15 lA EE OF Bz FE FE 00 e 4c AS D4 AD EE sz n4 00 FE OU 12 12 00 FC BE FD EG oF 51 58 ES ESL ESM C ESL C ESM ESL ESM 7 ESL 41 5c FD JA EC EE 01 3A BD pu E BY TC CU EL fz JC FO UB 3 29 Dn 53 oo OF JC 3H JA OF 7C C ESM 00 BA zc lB FC E 00 VU Fo ac AD Fa BH aU AD 5 0 ED 00 96 ED ED 00 EQ FC a4 1E EA Bd 34 1E UE FO DD AT EL EG OU TE 73 GE z4 Ue lE ap ad 10 Help
Download Pdf Manuals
Related Search