Home

User Manual - Logikey.us

1. Displays 2 keys for use with thumbwheel setting 05 Lexus or Toyota 3 key file program Lexus or Toyota 16bit file program Lexus or Toyota 32bit file program Toyota Prius 47010 file program Q 4 O N Toyota Sequoia 34010 file program Lexus LS400 50020 file program Lexus GX470 60330 file program Lexus LX470 60230 file program 13 Lexus ES330 33110 file program 14 Toyota Camry aa010 file program 15 Toyota 4runner 35090 file program 16 Toyota Landcruiser 60220 file program 17 18 Toyota Sienna 08010 file program Lexus LS430 50050 file program 11 i co Lexus RX330 48020 file program Lexus RX330 0e010 file program Toyota Prius 47020 file program Lexus LS430 50030 file program NO 4 N O1 N O N O0 N Lexus LS430 50031 file program Lexus SC430 24020 file program Lexus or Toyota nontrans file program Honda Red Black keys program Displays 2 keys for use with thumbwheel setting 26 Erase device to all FF Erase device to all 00 Toyota EarlyToyota file program Toyota FJ Cruiser FJ_S93C66 file program Saab CIM SaabCIM03_09 file program Not used Toyota id box 93C86b virgin file program oO ioe io oO N N N N Toyota Camry 2010Camry file program Toyota iSmart_Key_proxy_lIDbox file program 37 83 Not used 84 Chevrolet Cruze PIN read 85 Fiat Punto 500
2. To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 7 1 to register keys into the Immobilizer 31 4 1 15 Thumbwheel Setting 17 File 08010 Flash device identifier IC900 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Year Immo Location Sienna 2004 Above center dash To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 7 1 to register keys into the Immobilizer 4 1 16 Thumbwheel Setting 18 File 50050 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Model Year Immo Location LS 430 2004 Above navigation system To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed 32 After programming is successfully completed
3. but do not lock them c Insert a registered Master key into the ignition switch d Turn ignition switch ON then OFF 5 times e Open then close the driver s door 6 times This must be completed within 35 seconds of finishing the previous step item d above f Remove the Master key from the ignition switch g Insert new key to be registered into the ignition switch do not turn ignition on This must be completed within 10 seconds of removing the Master key h Wait approximately 60 seconds until the Theft light goes out i Remove the key j Programming mode is complete A 2 2 To delete all other existing keys a Ensure there is no key in the ignition 81 b While sitting in drivers seat close all vehicle doors but do not lock them c Insert a registered Master key into the ignition switch d Turn ignition switch ON then OFF 6 times e Open then close the driver s door 7 times This must be completed within 35 seconds of finishing the previous step item d above f Remove the Master key from the ignition switch g The Master key is the only key now programmed into the ECU A 3 Procedure to be followed for the following vehicles Make Model Year Remark LS400 t997 A 3 1 To register a new Master Key after installing a new ECU a While sitting in driver s seat close all vehicle doors but do not lock them b Insert a working Master key into the ignition switch c Turn i
4. 2005 J 4 cyl only Sept 2002 Jan 2003 J 6 cyl only Camry Sept 2002 July 2003 J 4 cyl only Camry Sept 2002 Jan 2003 J 6 cyl only Normally Type 1 ECU vehicles would be programmed using the 16bit file ref sections 4 1 3 and 4 1 4 however if no transponder keys are available the ECU unit can be programmed using the nontrans file In this case a standard metal key should be used after programming To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After performing the programming operation do not install the center plug when reinstalling the ECU 37 4 1 24 Thumbwheel Setting 26 File Red Black Keys Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Honda models specified in the following table Model Year Immo Location NSX 1997 2004 Attached to steering column Prelude 1997 2002 RL 1996 2004 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed The Red Key and one Black Key for use with this programming operation is displayed using thumbwheel setting 27 Use a T Code Pro SDD or CodeSeeker programmer to initialize a Black Key 4 1 25 Thumbwheel Sett
5. 28 After programming is successfully completed follow the procedure described in Appendix A section A 5 1 to register keys into the Immobilizer 4 1 10 Thumbwheel Setting 12 File 60230 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Model Year immolocaton LX 470 2003 2004 Behind glove box To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 5 1 to register keys into the Immobilizer 4 1 11 Thumbwheel Setting 13 File 33110 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table modei Year immo Location ES 330 2004 Behind glove box To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 4 1 12 Thumbwheel Setting 14 File aa010 Flash device identifier Device type 93C series
6. Below oa under To perform the programming function use the procedure described in section 3 1 Display must display OK at the 24 end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 1 1 to register keys into the ECU If the immobilizer will not enter Learn mode after re programming reprogram using Thumbwheel setting 29 Note If vehicle will only register 1 key after programming this is an indication that it probably uses a Type 2 ECU and was programmed with the wrong file Reflash with the correct file 4 1 5 Thumbwheel Setting 07 File 32bit Flash device identifier IC900 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota Lexus Type 2 ECU models specified in the following table 4Runner 2002 Behind glove box Behind glove box Behind glove box Behind glove box Behind glove box Behind glove box GS 300 2001 2003 Under hood driver s side Under hood driver s side Under hood driver s side Behind glove box 25 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 1 1 to register keys into
7. Saab 2008 2009 A 8 1 To register Keys in the Immobilizer use AD t code Pro or MV Pro a Go to type 5 under immo section with key in the on position b Next menu you will see Learn Key c After that has been completed key has been registered Car will not start until the immo is married to the ECU d Use the black dongle provided in the kit to marry system e Turn key to ON and install the black dongle to the data port OBDII 89 APPENDIX B User Manual Circuit Board Photos 90 Penloader ki 91 Attachment of Pomona clip to Penloader Correct installation of extension cables to Pomona clip 92 Circuit Board from 34010 module 93 LE gt sf 5 5 5 5 5 5 5 gt Ja Chrysler Type 1 PIN read 94 Chrysler Type 1 circuit board pad to ground before reading PIN 95 Circuit Board from 02060 module 96 TRIS ge DG 012 wo I So T m N m m N Le hs OOo PR L z Ap Meee eee ee Se ee oe Pa Ouse y 11 F g F tle a ey e Circuit Board from 50020 module 97 pTRG2R33 c apo ont Le Circuit Board from AA010 module 98 cure j 3 a N C AIR iy D lt O N cS Toyota Lexus 16bit ECU circuit board 99 K EX s yu j Penloader installed on Toyota Lexus 16bit ECU circuit board 100 k felh ble 082 Penloader inst
8. Send Mem block 3 to 03 computer Tera Term Select File from the menu options along the top of the Tera Term window then click on Transfer from the drop down menu followed by clicking on the Xmodem option and finally select the Receive option The following window will pop up Tera Term XMODEM Receive Look in B Desktop ex EJ S penloader ht Mem_Block_0 txt Mem_Block_2 txt lt gt File name Mem_Block_3ttt Files of type La l Cancel Help Option C Checksum CRC 1K JT Binary 67 Tera Term Enter the filename for the file to be used to save the received Memory Block data and verify that the Binary option is not selected and that the CRC option is selected Then click on the Open button The following window will pop up and the data transfer will start immediately Tera Term XMODEM Receive x Filename Mem_ Block _2 txt Protocol MODEM CRC Packet Bytes transfered Cancel If the file transfer is successful the above window will disappear leaving only the original Tera Term start up window and the Penloader will display OK along with providing an audio cue If the file transfer is not successful the Penloader will display FAIL 5 3 3 Using Hyper Terminal to send Memory Blocks from the computer to the Penloader Penloader Set thumbwheel to 98 then power up Penloader and wait for thumbwheel number to scroll by Penloader Change thumbwheel t
9. follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 4 1 17 Thumbwheel Setting 19 File 48020 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Model Year Immo Location 2004 VIN RA 330 starts with J Above center dash To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 4 1 18 Thumbwheel Setting 20 File 0e010 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Immo Location 2004 VIN RX 330 starts with Above center dash 2 33 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 4 1 19 Thumbwheel Setting 21 File 47020 Flash device identifier Device ty
10. 9 pin D male connector at one end and a 9 pin D female connector at the other It should NOT include a null modem function To verify that the serial cable is working connect the Penloader to the computer and start up the terminal emulator Hyper Terminal or Tera Term If using Tera Term be sure to restore the setup file that contains the serial settings Set the thumbwheel on the Penloader to 98 and power up the Penloader Set the thumbwheel to 03 and press the Start button to start receiving data for memory block 0 from the computer If the serial cable is working correctly a single uppercase letter C should appear in the terminal emulator screen It is also possible that the incorrect COM port has been selected On the Windows computer start up the Control Panel usually found under the START menu and double click on the System icon This will pop up the System 74 Window Select the Hardware tab then click on the Device Manager button Find the line in the window labeled as Ports COM amp LPT and click on the plus sign next to this text This will expand the line and display all of the working COM ports on the computer These are the only COM port numbers that can be selected to function with the terminal emulator If using a USB to serial adapter this screen will confirm the COM port number allocated to the adapter Special note for Tera Term users Tera Term defaults to only accepting COM numbers 1
11. 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Year Immo Location Camry 2001 2004 Behind glove box Solara 2003 2004 Behind glove box To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 4 1 13 Thumbwheel Setting 15 File 35090 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table 30 Model Year Immo Location 4Runner 2003 2004 Behind glove box To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 7 1 to register keys into the Immobilizer 4 1 14 Thumbwheel Setting 16 File 60220 Flash device identifier IC900 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Vear Immo Location 2003 2004 Behind glove box
12. General Setup 5 2 1 Terminal Emulation Software The following procedures can be used to setup the terminal emulation programs the first time that they are used 5 2 1 1 Hyper Terminal Start Hyper Terminal by going to Start gt All Programs gt Accessories gt Communications and selecting it with the left mouse button A window should appear that looks like 56 Connection Description a New Connection Enter a name and choose an icon for the connection Mame Po Got Enter a name for the connection and select an appropriate icon then click on the OK button Another window will pop up that looks like 57 Connect To Penloader Enter details for the phone number that you want to dial Country region Area code ese Connect using Select the COM port available on the computer and click on the OK button Note the area code and phone number fields are not required once a COM port has been specified These fields should be ignored A further window will pop up as shown below Select the options a shown 38400 8 None 1 None click on the Apply button then the OK button 58 COM1 Properties Port Settings Bits per second 38400 Data bits 8 Parity Mone Stop bits 7 Flow control e fet Restore Defaults The main Hyper Terminal screen should now appear It is recommended that the settings just entered be saved so that they may be used again without having
13. Manufacturer s 2005 Nissan models specified in the following table All 2005 Consult Tcode manual This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the 4 digits of the PIN 4 1 43 Thumbwheel Setting 91 File N A Device type 93C66 Type of operation PIN read Manufacturer s 2009 Nissan models specified in the following table 45 Driver s side under 2009 ang up instrument panel Pathfinder 2009 and up 2009 and up Driver s ade es steering column Remove Alera 2009 and up lower knee protector to Armada 2009 and up access Titan 2009 and up Under dashboard Rogue 2009 and up passenger side near glove box Driver s side behind 2009 angup combination meter 2009 and up hel ire brake pedal 2009 and up Behind glove box 2009 and up Behind glove box Under instrument panel Maxima 2009 and up attached to steering member 350Z 2009 and up ns ha aciacentt 370Z 2009 and up Under dashboard passenger side Left driver s side under instrument lower panel 2009 and up Z12 2009 and up Under dashboard passenger side This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the opera
14. do not select the 1K Xmodem protocol option and also a folder where the file should be saved Click on the Receive button and another window will pop up as shown below M Receive Filename modern never sends filename 20 you must specify a filename for storing the received file Folder C Documents and Settings Desktop Filename Mem_Block_O Hyper term Enter a filename in the field provided and click on the OK button The following window appears 65 Xmodem file receive for penloader Storing as Packet Error checking CRC Retries Total retries 0 File Last error Throughput Elapsed If the file transfer is successful the above window will disappear leaving only the original Hyper Terminal start up window and the Penloader will display OK along with providing an audio cue If the file transfer is not successful the Penloader will display FAIL 5 3 2 Using Tera Term to send Memory Blocks from the Penloader to the Computer Penloader Set thumbwheel to 98 then power up Penloader and wait for thumbwheel number to scroll by Penloader Change thumbwheel to the correct setting for sending the desired Memory Block then press the Start button The following table specifies the thumbwheel settings for each Memory Block 66 Thumbwheel Penloader Display 00 Send Mem block 0 to 00 computer 01 01 Send Mem block 1 to computer 02 02 Send Mem block 2 to computer 03
15. hood driver s side 1998 2000 Under hood driver s side LS 400 1998 2000 Behind glove box 1998 2000 Under hood 1999 2003 Under hood 4998 2000 Below pes under SC 400 1998 2000 Below ee under Note Use this option if the immobilizer will not enter Learn mode after re programming using Thumbwheel selection 30 22 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After the programming procedure successfully completes set Thumbwheel to 04 to display the two Key values programmed 23 4 1 4 Thumbwheel Setting 06 File 16bit Flash device identifier IC900 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota Lexus Type 1 ECU models specified in the following table Model Year ECU Location 4Runner 1998 2001 Behind glove box Avalon 1998 2003 Behind glove box Camry 1998 2000 Behind glove box 1998 2000 Behind glove box Highlander 2001 2003 Behind glove box 1998 2000 Behind glove box 2001 2003 Behind driver seat 2002 2003 Behind glove box Sienna 1998 2003 Behind glove box 1998 2001 Behind glove box GS 300 1998 2000 Under hood driver s side 1998 2000 Under hood driver s side LS 400 1998 2000 Behind glove box 1998 2000 Under hood 1999 2003 Under hood 4998 2000 Below pes under SC 400 1998 2000
16. one was selected during the unzip process right click on the executable file and drag it to the Desktop Once dragged to the desktop release the right mouse button and a drop down menu will appear Select Create Shortcuts Here from this menu and a shortcut will appear on the Desktop Double click on the shortcut to start Tera Term A popup window will appear as shown below Tera Term New connection t TEPIP col e Select the Serial option as shown then select the COM port available on the computer and click on the OK button It is now necessary to setup the COM ports parameters Select Setup from the menu options along the top of the Tera Term window then click on Serial Port from the drop down menu Another window will pop up as shown 61 Tera Term Serial port setup x Port com Y Baud rate Data a bik Cancel Parity mone Stop bit Help Flow control none r Transmit delay 0 msecichar 0 mseciline Select the options as shown except for the COM port which was selected in the last step and should match what is shown on this screen and click on the OK button Tera Term is now setup for use with the Penloader It is recommended that the settings be saved for future use To save these settings select Setup from the menu options along the top of the Tera Term window then click on Save Setup from the drop down menu Name the setup file Penloader ini and select a folder that yo
17. read 95 Restore original contents 98 Switch to THUMB 1 settings 99 Display serial number and power supply THUMB 1 settings Thumbwheel Setting ojo N O o O O1 oO N voltage Penloader Operation Send Memory Block 0 to computer Send Memory Block 1 to computer Send Memory Block 2 to computer Send Memory Block 3 to computer Receive data from computer and save in Memory Block 0 Receive data from computer and save in Memory Block 1 Receive data from computer and save in Memory Block 2 Receive data from computer and save in Memory Block 3 oO Copy from Restore Memory to Memory Block 0 de Copy from Restore Memory to Memory Block 1 Copy from Restore Memory to Memory Block 2 Copy from Restore Memory to Memory Block 3 Copy from Memory Block 0 to Restore Memory Copy from Memory Block 1 to Restore Memory Copy from Memory Block 2 to Restore Memory Copy from Memory Block 3 to Restore Memory Read and save 25LC010 to Restore Memory Read and save 25LC020 to Restore Memory NIN oO ow oa O OI NI oO ON I o N N N Read and save 25LC040 to Restore Memory Read and save 25LC080 to Restore Memory Read and save 25LC160 to Restore Memory Write from Restore Memory to 25LC010 Write from Restore Memory to 25LC020 Write from Restore Memory to 25LC040 24 Write from Restore Memory to 25LC080 25 Write from Restore Memory to 25LC160 26 Read and sav
18. to go through the setup procedure To save the settings click on File from the menu options along the top of the Hyper Terminal window then click on Save As from the drop down menu As this action will actually save a short cut to Hyper Terminal it is recommended that the user select the Desktop and an appropriate name as shown in the following screen shot 59 Save in Emy Documents d My Computer Recent om Network Places eS penloader ht Desktop My Documents 43 My Computer J File name Penloader ht D My Network Save as type Session files ht Hyper Terminal is now ready to use Before closing Hyper Terminal it is recommend that the program be disconnected from the COM port in use To do this click on Call from the menu options along the top of the Hyper Terminal window then click on Disconnect from the drop down menu Each time that Hyper Terminal is started by double clicking on the saved short cut on the Desktop it will automatically connect to the COM port specified 5 2 1 2 Tera Term Once Tera Term has been downloaded and installed it will be necessary to setup the serial communications parameters Before working on this it is easiest if a short cut to Tera Term is created on the computer s Desktop To do this locate the executable file named something like ttermpro exe in the installation folder named something like C TeraTermPro ttpro313 but may be in a subfolder 60 under C if
19. 0 2001 2003 LS400 1998 2000 SC300 1998 2000 SC400 1998 2000 A 1 1 To register Keys in a new ECU a ECU is in Automatic Registration mode and the Security light should be blinking b Insert a key into the ignition switch do not turn ignition on The Security light should now be on not blinking c The key is now registered d Remove key from the ignition switch e Repeat steps b through e if more keys are to be registered f Once all keys are registered remove last key from the ignition switch then depress and release the brake pedal once g Programming mode completes after 10 seconds 79 Note The first key registered will be the new Master Key The last key registered will be the Valet key If only 1 key is to be registered cycle the single key through the registration process 4 or 5 times A 1 2 To register an additional Master Key a 02900 f g h i j Insert a registered Master key into the ignition switch do not turn ignition on Depress and release the gas pedal 5 times Depress and release the brake pedal 6 times Remove the Master key from the ignition switch Insert new key to be registered into the ignition switch do not turn ignition on Depress the gas pedal once Wait approximately 1 minute until the security light stops blinking Remove the key Depress and release the brake pedal once Programming mode completes after 10 seconds A 1 3 To register an additional
20. 0 to an external computer Send Memory Block 1 to an external computer external computer Send Memory Block 3 to an external computer Send Memory Block 2 to an ne 04 Receive data from computer and save in Memory Block 0 05 07 Receive data from computer and save in Memory Block 1 Receive data from computer and save in Memory Block 2 Receive data from computer and save in Memory Block 3 08 10 Copy from Restore Memory to Memory block 0 Copy from Restore Memory to memory block 1 Copy from Restore Memory to memory block 2 11 12 13 Copy from Restore Memory to memory block 3 Copy from memory block 0 to Restore Memory Copy from memory block 1 to Restore Memory 14 15 16 Copy from memory block 2 to Restore Memory Copy from memory block 3 to Restore Memory Read and save 25LC010 to Restore Memory 17 18 19 20 Read and save 25LC020 to Restore Memory Read and save 25LC040 to Restore Memory Read and save 25LC080 to Restore Memory Read and save 25LC160 to Restore Memory 21 Write from Restore Memory to 17 25LC010 29 Write from Restore Memory to 25LC020 23 Write from Restore Memory to 25LC040 DA Write from Restore Memory to 25LC080 25 Write from Restore Memory to 25LC160 26 Read and save 24C01 to Restore Memory 27 Read and save 24C02 to Restore Memory 28 Read and save 24C04 to Restore Memory Re
21. 2 3 and 4 which can be a problem if using a USB to serial adapter as these are often allocated to higher COM port numbers To fix this use Windows Explorer or My Computer to display the folder that Tera Term was unzipped to In the folder there should be a file called teraterm ini Open the file with WordPad or Notepad and search for the word MaxComPort This should find a line of text which reads MaxComPort 4 Edit this line to read MaxComPort 16 And save the file Restart Tera Term and more COM port numbers should be available now Important If the data transfer crashes hangs or does not complete the operation must be cancelled on the computer if it hasn t already timed out AND the Penloader should be powered off Then the procedure should be started from the beginning This is the only assured method of clearing errors and retrying a transfer of data 75 5 5 Data File The Memory Block data transferred from the Penloader will be saved into a text file on the computer This text file can be edited with any standard text editor Notepad Wordpad Microsoft Word however if the file is to be updated and transferred back to the Penloader it is important that the basic structure of the file not be changed The file should NOT be opened with a binary hex editor the Penloader compatible format is text only An example of the contents of a file containing 256 bytes of data transferred up from the computer
22. 2 or 3 the data should be saved to 4 2 4 Thumbwheel Settings 12 through 15 These thumbwheel settings are used to copy the data saved in one of the four permanent storage Memory Blocks 0 1 2 or 3 to the Restore Memory Block Set thumbwheel to 12 13 14 or 15 depending on which memory block 0 1 2 or 3 the data should be copies from 4 2 5 Thumbwheel Settings 16 through 20 These thumbwheel settings are used to read the contents of an external 25LC series SPI device and save the contents to the Restore Memory Block Set thumbwheel to 16 17 18 19 or 20 depending on the device type to be read To perform the read and save function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the operation failed Note that the LC in the device part number is not significant devices may have variations on parts numbers such as 25AA040 or 95C020 51 Thumbwheel Setting Device 25LC010 or 95010 25LC020 or 95020 25LC040 or 95040 25LC080 or 95080 25LC160 or 95160 4 2 6 Thumbwheel Settings 21 through 25 These thumbwheel settings are used to write the contents of the Restore Memory Block to an external 25LC series SPI device Set thumbwheel to 21 22 23 24 or 25 depending on the device type to be read To perform the read and save function use the procedure described in section 3 1 Display must display OK at the end of the pro
23. Hyper Terminal window will disappear leaving only the original Hyper Terminal start up window The Penloader takes a little longer to complete the operation as it must save the transferred data into the onboard Memory Block When the Penloader operation completes it will display OK if the operation was successful and also provide an audio cue If the file transfer is not successful the Penloader will display FAIL 70 5 3 4 Using Tera Term to send Memory Blocks from the computer to the Penloader Penloader Set thumbwheel to 98 then power up Penloader and wait for thumbwheel number to scroll by Penloader Change thumbwheel to the correct setting for receiving and saving the desired Memory Block Do NOT press the Start button yet The following table specifies the thumbwheel settings for each memory block Thumbwheel Penloader Display 04 Receive data from computer and save in Mem block 0 05 Receive data from computer and save in Mem block 1 06 Receive data from computer and save in Mem block 2 07 Receive data from computer and save in Mem block 3 Tera Term Select File from the menu options along the top of the Tera Term window then click on Transfer from the drop down menu followed by clicking on the Xmodem option and finally select the Send option The following window will pop up 71 Tera Term XMODEM Send Look in E Desktop vl gd penloader ht E Mem_Block_O txt Mem_B
24. Manual 3 4 Restore Original Contents The Penloader also contains a reserved Restore Memory Block which is used by the Penloader to save the contents of an external memory device before it overwrites it with new data When programming an external memory device and after the START button is pressed and the Penloader has 15 identified the external device to be programmed the Penloader reads the contents of the external memory device and saves it to the Restore Memory Block Should the user desire to restore the original contents of the external memory device after programming this is made possible through the use of the thumbwheel 95 setting It is important to note that the Restore Memory Block is overwritten by each subsequent programming of an external device As a consequence it is only possible to restore the last contents of the last external memory device programmed It is possible to permanently save the contents of the Restore Memory Block as described in section 4 2 6 3 5 THUMB 1 Settings The Penloader contains a second bank of thumbwheel settings referred to as the THUMB 1 settings These settings are invoked by setting the thumbwheel to 98 prior to powering on the Penloader When this is done the display will indicate THUMB 1 active and the thumbwheel selections will switch over to the THUMB 1 settings table as follows Thumbwheel Setting Operation Send Memory Block
25. OFF 5 times e Quickly open then close the driver s door 6 times f Remove the Master key from the ignition switch g Insert new key to be registered into the ignition switch do not turn ignition on This must be completed within 10 seconds of removing the Master key h Leave key in the ignition switch for a minimum of 60 seconds until the Theft light goes out i Remove the key from the ignition switch j Key is now registered in ECU A 5 Procedure to be followed for the following vehicles Year Remark 2003 2004 eee 2001 2003 LX470 2003 2004 SC430 2002 2003 C 5 1 To register Keys in a new Immobilizer 85 FTTS Theft light should be on indicating that the immobilzer is in Auto learn mode Insert first Master key 4D with an id of 32 52 or b into the ignition switch Theft light will blink once then remain on Remove key from ignition switch Repeat steps b and c for the remaining 3 keys Last key registered is the Valet key 4D with an id of 72 or 92 Removing fourth key closes Auto learn mode Once Auto learn mode is closed the Immobilizer must be resynchronized with the ECU else vehicle will not start Insert a Master Key into the ignition switch and turn ignition switch on do not try to start the vehicle Short OBD2 connector terminal 4 to terminal 13 using a wire or paper clip Wait for 30 minutes Remove shorting wire from OBD2 connector Turn ignition swit
26. PENLOADER TOOL LgerManual For Software Version 2 08 The use of this apparatus is limited to legitimate and legal purposes for vehicle maintenance in compliance with federal and state laws and regulations Thumbwheel Setting Penloader Operation Write from Memory Block 0 to 93C series device 00 Write from Memory Block 1 to 93C series device Write from Memory Block 2 to 93C series device Write from Memory Block 3 to 93C series device Display keys for 3key 16 bit Prog file 3key16bit Prog file 16bit Prog file 32bit Prog file 47010 Prog file 34010 Prog file 50020 Prog file 60330 Prog file 60230 Prog file 33110 Prog file Aa010 Prog file 35090 Prog file 60220 Prog file 08010 Prog file 50050 Prog file 48020 Prog file 0e010 Prog file 47020 Prog file 50030 23 Prog file 50031 24 Prog file 24020 25 Prog file nontrans 29 Erase device to all 00 30 Prog file EarlyToyota 31 Prog file FJ_S93C66 32 Prog file SaabCIM03_09 33 Not in use 34 Prog file id box 93C86b virgin Prog file 2010Camry Prog file iSmart_Key_proxy_IDbox 37 to 83 Not in use 84 Chevrolet Cruze PIN read 85 N Fiat PIN read Saab PIN read Toyota Lexus 3 key read Dodge Caravan PIN read NO oO BK oO o Jeep Liberty 95080 PIN read Nissan 05 PIN read Nissan 09 PIN read VW Beetle PIN read Isuzu PIN read Chrysler PIN
27. PIN read 12 Saab PIN read Toyota Lexus 3 key read Dodge Caravan PIN read Jeep Liberty 95080 PIN read Nissan 2005 PIN read Nissan 2009 and up PIN read co co jee O N 92 VW Beetle 2000 PIN read 93 Isuzu 2003 2005 PIN read 94 Chrysler PIN read 95 Restore original contents Switch to THUMB 1 settings Displays unit serial number and power supply voltage Table 4 1 Thumbwheel selection options 3 2 Visual and Audible Cues When the Penloader is used to program an update into a memory device it will provide both visual and audio cues to the user The following table defines these cues and their definition Note that all visual cues are displayed on the 4 character display 13 Cue Faint ticking sound IDNT with ticks approximately 1 second apart Definition The Penloader is determining what type and size device it is currently positioned over The Penloader is programming the external memory device PROG Machine gun type sound Same sound as used were for PROG The Penloader is comparing the data in the programmed part with the data used to perform the program function The VRFY operation was successful and the data in the programmed part matches the data used in the program operation OK Pseudo charge tune FAIL Low tone held for 2 seconds An error occurred or the Penloader could not determine the type of device The Penloa
28. Valet Key a 02900 f g h i j Insert a registered Master key into the ignition switch do not turn ignition on Depress and release the gas pedal 4 times Depress and release the brake pedal 5 times Remove the Master key from the ignition switch Insert new key to be registered into the ignition switch do not turn ignition on Depress the gas pedal once Wait approximately 1 minute until the security light stops blinking Remove the key Depress and release the brake pedal once Programming mode completes after 10 seconds A 1 4 To delete all other existing keys a b C Insert a registered Master key into the ignition switch do not turn ignition on Depress and release the gas pedal 6 times Depress and release the brake pedal 7 times 80 d Remove the Master key from the ignition switch Insert new key to be registered into the ignition switch do not turn ignition on Depress the gas pedal once Wait approximately 1 minute until the security light stops blinking Remove the key Depress and release the brake pedal once Programming mode completes after 10 seconds D SS E A 2 Procedure to be followed for the following vehicles Model Year Remark Sequoia 2003 LS430 2001 2003 SC430 2002 2003 Lexus A 2 1 To register an additional Master or Valet Key a Ensure there is no key in the ignition b While sitting in driver s seat close all vehicle doors
29. ad and save 24C08 to Restore 29 Memory 30 Read and save 24C16 to Restore Memory 31 Write from Restore Memory to 24C01 32 Write from Restore Memory to 24C02 33 Write from Restore Memory to 24C04 34 Write from Restore Memory to 24C08 35 Write from Restore Memory to 24C16 36 Read and save 93C series device to Restore Memory 37 to 98 Unused Display serial number and power supply voltage 18 These thumbwheel settings will remain in place until the power is cycled with the thumbwheel set to some setting other than 98 19 4 Thumbwheel Selections In Detail 4 1 General Operation The following sections describe the operation of the Penloader under the general thumbwheel settings 4 1 1 Thumbwheel Settings 00 through 03 File Sourced from Memory Block 0 1 2 or 3 Flash device identifier Depends on manufacturer Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Any These thumbwheel setting are used to program a 93C series microwire memory device using the contents of one of the four memory blocks provided Set thumbwheel to 00 01 02 or 03 depending on which memory block 1 2 3 or 4 should source the data to be programmed into to the external device Note that the contents of the comment field will scroll on the display when the thumbwheel is set to one of these selections To perform the programming function use the procedure described in section 3 1 Display must dis
30. alled on Nissan 09 BCM circuit board 101 Pomona clip installed on Nissan 09 BCM circuit board 102 2003 and later Sequoia immobilizer location behind instrument cluster
31. bwheel Setting 96 through 97 These thumbwheel selection options are not in use 4 1 49 Thumbwheel Setting 98 Switch to THUMB 1 4 1 50 Thumbwheel Setting 99 This thumbwheel selection will display the serial number of the Penloader plus the voltage of either rechargeable batteries if an external dc supply is not connected to the unit else the voltage of the external dc supply To display these 2 parameters the thumbwheel switch should be set to 99 and the START button pressed The unit will display a WAIT message then continually scroll through a message that shows the serial number and the supply voltage 49 4 2 THUMB 1 Settings The following sections describe the operation of the Penloader under the THUMB1 thumbwheel settings To invoke these thumbwheel settings set the thumbwheel to 98 before powering on the Penloader These settings are only valid until the Penloader is powered off Anytime the Penloader is used to program a device it reads the device and saves the contents into a Restore memory block contained in the Penloader prior to overwriting the device with new data If there is a desire to restore the original contents of the device after programming this can be achieved using thumbwheel setting 95 ref section 4 1 47 It is important to note that the contents of the Restore memory block are overwritten with each subsequent programming operation Thus functions are provided to save the contents of
32. by 2 hex characters A hex character is a character between 0 and 9 A and F or a and P Any character not identified as a hex character a space character or CR LF combination is ignored It is thus possible but not recommended to insert other characters within the file as they will be ignored For readability it is recommended that 16 consecutive bytes be shown on one line however this is not a requirement Data bytes must be shown in a consecutive order from lowest address to highest address as read from left to right on a line and top to bottom for consecutive lines At the end of the data it is permissible to include a short comment field delineated by the character This comment field will appear on the Penloader display when the thumbwheel is used to select one of the memory blocks as the source of data for a programming operation thumbwheel options 00 01 02 or 03 under the regular thumbwheel settings Comment field may only be placed after the data field The comment field should not exceed 60 characters 77 APPENDIX A Toyota Lexus Post Programming Procedures A 1 Procedure to be followed for the following vehicles Make Model Year Remark 4Runner 1999 2002 Camry 4 cylinder 2001 2003 faite ie LandCruiser 1998 2002 MR2 2000 2003 Sequoia 2001 2002 Sienna 1998 2003 Solara 1999 2003 GS300 1998 2003 GS400 1998 2000 Lexie IS30
33. cedure else the operation failed Note that the LC in the device part number is not significant devices may have variations on parts numbers such as 25AA040 or 95C020 Device 25LC010 or 95010 25LC020 or 95020 23 25LC040 or 95040 24 25LC080 or 95080 25 25LC160 or 95160 4 2 7 Thumbwheel Settings 26 through 30 These thumbwheel settings are used to read the contents of an external 24C series I2C device and save the contents to the Restore Memory Block Set thumbwheel to 26 27 28 29 or 30 depending on the device type to be read To perform the read and save 52 function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the operation failed Note that the C in the device part number is not significant Some parts may use the LC or AA alternatives Thumbwheel Setting Device 26 24C01 27 24C02 24C04 24C08 24C16 4 2 8 Thumbwheel Settings 31 through 35 These thumbwheel settings are used to write the contents of the Restore Memory Block to an external 24C series SPI device Set thumbwheel to 31 32 33 34 or 35 depending on the device type to be read To perform the read and save function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the operation failed Note that the C in the device part number is not significant Some parts may u
34. ch off and remove key Reinsert key and verify that vehicle can now be started Notes Up to 4 keys may be registered If less than 4 keys are registered Auto learn mode must be closed manually To close Auto learn mode turn ignition switch on then off 5 times within a 10 second period then remove the key from the ignition switch Theft light blinking two long blinks and one short blink indicates that Auto learn mode failed Theft light blinking two short blinks and two long blinks indicates that a key that has already been registered was registered a second time 86 A 6 Procedure to be followed for the following vehicles Make Model Year Remark Sequoia 2003 Camr 2001 2004 Toyota Solara 2003 2004 Lexus LS430 2004 Lexus ES330 2004 RX330 2004 VIN starts with Jor2 A 6 1 To register 3 Keys 2 Master 1 Valet in a new Immobilizer a Ensure there is no key in the ignition b While sitting in driver s seat close all vehicle doors but do not lock them c Insert first Master key into the ignition switch and wait 5 seconds d Remove key and insert second Master key into the ignition switch and wait 5 seconds e Remove key and insert Valet key into the ignition switch and wait 5 seconds f Remove key The Immobilizer must be resynchronized with the ECU else vehicle will not start Insert a Master Key into the ignition switch and turn ignition switch on do not try to start the ve
35. der unit is reading data from an external memory device READ None SAVE None The Penloader unit is saving data into a memory block Table 4 2 Visual and audible cues 14 3 3 Memory Blocks The Penloader contains four onboard Memory Blocks which can be used for the purpose of saving and retrieving custom data files Each Memory Block can hold up to 2K Bytes 2048 Bytes of data To identify the Memory Blocks they are numbered as 0 1 2 and 3 Data can be read from an external memory device and saved to any of the four Memory Blocks THUMB 1 thumbwheel options 08 to 11 refer to section 3 5 External memory devices can also be programmed using data sourced from any of the four Memory Blocks thumbwheel options 00 through 03 In addition the Penloader contains the capability to send the contents of any of the Memory Blocks to an external computer via RS 232 for viewing and editing purposes THUMB 1 thumbwheel options 00 to 03 and also to receive and save to a Memory Block data files from an external computer THUMB 1 thumbwheel options 04 to 07 Each memory block has an associated comment field which can be used to name or add a note for a particular Memory Block The comment field may not exceed 58 characters in length including spaces To add a comment field an external computer must be used This procedure is described in a separate document called Penloader Tool Data Send and Receive
36. e 24C01 to Restore Memory Nh D ee Oo wo Read and save 24C02 to Restore Memory Read and save 24C04 to Restore Memory Read and save 24C08 to Restore Memory Read and save 24C16 to Restore Memory Write from Restore Memory to 24C01 32 Write from Restore Memory to 24C02 33 Write from Restore Memory to 24C04 34 Write from Restore Memory to 24C08 35 Write from Restore Memory to 24C16 36 Read and save 93C series device to Restore Memory 37 to 98 Not in use 99 Display serial number and power supply voltage 1 2 3 3 1 3 2 3 3 3 4 3 5 4 1 4 2 5 1 5 2 5 3 5 4 5 5 INTRODUCTION PRODUCT FEATURES PENLOADER OPERATION General Operation Visual and Audible Cues Memory Blocks Restore Original Contents THUMB 1 Settings THUMBWHEEL SELECTIONS IN DETAIL General Operation THUMB 1 Settings UPLOADING DOWNLOADING SERIAL DATA Introduction General Setup Transferring Memory Blocks Between The Penloader and the Computer Troubleshooting Data File 15 15 16 20 20 50 55 55 56 64 73 76 1 Introduction The Penloader was designed to provide a tool that can be used to program memory devices installed on circuit boards as well as read existing PINs The tool is simple to use and requires no external computers keypad entry devices adaptor boards or cables Features of the tool are Small sized unit for ha
37. e 4 digits of the PIN 4 1 39 Thumbwheel Setting 87 File N A Device type 93C56 Type of operation Key read Manufacturer s Toyota and Lexus models specified in the following table Model Year Immo Location Same as Thumbwheel setting 05 This thumbwheel selection can be used to read the 3 keys from the vehicle The display will pause for ease of viewing use the START button to continue scrolling through the digits 4 1 40 Thumbwheel Setting 88 File N A Device type 95040 Type of operation PIN read Manufacturer s Dodge models specified in the following table modei Year Immolocstion Caravan This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the 4 digits of the PIN 4 1 41 Thumbwheel Setting 89 File N A Device type 95080 Type of operation PIN read Manufacturer s Jeep models specified in the following table Model Year Immo Location Liberty 2006 Steering column This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the 4 digits of the PIN 4 1 42 Thumbwheel Setting 90 File N A Device type 93C56 Type of operation PIN read
38. g is successfully completed a GM tech2 dealer programmer with online subscription is required for key registration Therefore it is recommended that the car be towed to a dealer the CEM be reflashed at the dealer then the dealer perform the key registration 4 1 31 Thumbwheel Setting 33 Not in use at this time 4 1 32 Thumbwheel Setting 34 File id box 93C86b virgin Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Year Immo Location To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed 4 1 33 Thumbwheel Setting 35 File 2010Camry Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table 41 Model Year Immo Location Camry 2010 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed 4 1 34 Thumbwheel Setting 36 File Smart_Key_proxy_IDbox Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota and Lexus File is used to update the smart key proxy id b
39. gnition switch ON then OFF d Remove key from ignition switch e Open then close the driver s door Programming mode is complete A 3 2 To register an additional Master Key a Ensure there is no key in the ignition b While sitting in driver s seat close all vehicle doors but do not lock them c Insert a working Master key in the ignition and turn lock to On 5 times d Open and shut the driver door 6 times e Remove the Master key from the ignition 82 f Insert the new in programmed key in the ignition to the ON position for a few minutes until the security light goes out Remove the key open and shut the driver door once The key is now programmed as a master A 3 3 To register an additional Valet Key a b C Ensure there is no key in the ignition While sitting in drivers seat close all vehicle doors but do not lock them Insert a registered Master key into the ignition switch Turn ignition switch ON then OFF 4 times leaving the ignition switch in the ON position on the 4 cycle This operation must be completed within 15 seconds of inserting the key into the ignition switch Open then close the driver s door within 15 seconds of starting step d timing starts when Master key was inserted into the ignition switch Open then close the driver s door 4 times This must be completed within 20 seconds of closing the door in the previous step item e above Remove the Master key fro
40. hicle Short OBD2 connector terminal 4 to terminal 13 using a wire or paper clip Wait for 30 minutes Remove shorting wire from OBD2 connector Turn ignition switch off and remove key Reinsert key and verify that vehicle can now be started 3 ae 2 To register less than 3 Keys in a new Immobilizer a Ensure there is no key in the ignition b While sitting in driver s seat close all vehicle doors but do not lock them 87 sep Insert first Master key into the ignition switch and wait 5 seconds Remove key If required insert a second key into the ignition switch wait 5 seconds then remove key Insert first Master key into the ignition switch Quickly turn ignition switch ON then OFF 5 times Remove key The Immobilizer must be resynchronized with the ECU else vehicle will not start Insert a Master Key into the ignition switch and turn ignition switch on do not try to start the vehicle Short OBD2 connector terminal 4 to terminal 13 using a wire or paper Clip Wait for 30 minutes Remove shorting wire from OBD2 connector Turn ignition switch off and remove key Reinsert key and verify that vehicle can now be started A 7 Procedure to be followed for the following vehicles Make Model Year Remark 4Runner 2003 Camy 2003 Toyota Camry 2003 V6 Engine LandCruiser 2003 Sienna 2004 A 7 1 To register Keys in a new Immobilizer a b Theft light should be on indica
41. ing 27 This thumbwheel setting is used to display the Red Key and one Black Key programmed into a memory device using Thumbwheel setting 26 The keys are displayed in 4 character increments as follows i Before starting perform the programming procedure as described in section 4 1 24 above ii Set thumbwheel to 27 iil Press the START button The display will scroll until Red is displayed then the scroll operation will pause Red identifies the start of the Red Key and Blck identifies the start of the Black Key 38 iv Press the START button again to continue the display scroll to the next 4 digits of the key value v Continue step iv until all 16 digits of each key has been displayed Pressing START again will scroll the data from the beginning again 4 1 26 Thumbwheel Setting 28 File Erase_to FFs Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Any This programming operation will erase the flash device to all FFs which is the normal erased state for flash memory 4 1 27 Thumbwheel Setting 29 File Erase to 00s Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Any This programming operation will erase the flash device to all 00s and is included in case it is needed for experimentation 4 1 28 Thumbwheel Setting 30 File EarlyToy
42. ipated memory devices that it will be required to function with 93C86 microwire devices and 24C16 I2C devices The data files are stored in one of 4 memory blocks numbered 0 through 3 Included in the Penloader is the capability to both send any of these 4 memory blocks up to an external computer and to receive a text file containing data and save it to one of the 4 memory blocks with some limitations The send receive capability is designed to work with standard off the shelf terminal emulator programs such as Microsoft s Hyper Terminal usually included with the Windows operating system and TeraTerm from Ayera Technologies Other terminal emulators may be used if they contain the capability to send and receive files using the Xmodem protocol Hyper Terminal can be found on a Windows computer under Start gt All Programs gt Accessories gt Communications TeraTerm ver 3 1 3 can be downloaded for free from http www ayera com teraterm Other versions have not been tested but should function correctly with the Penloader 55 It is also important that the computer to be used to communicate with the Penloader has a working serial port Many laptops do not include serial ports any longer In this case the user will need to use a USB to serial adapter to provide the serial interface function These can be purchased through a variety of vendors such as Office Depot Staples Best Buy Amazon com Frys etc 5 2
43. is shown below A5 01 02 03 04 05 06 E2 FE 09 OA OB OC OD OE OF 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F 20 21 22 23 24 25 26 27 28 29 2A 2B 2C 2D 2E 2F 30 31 32 33 34 35 36 37 38 39 3A 3B 3C 3D 3E 3F 40 41 42 43 44 45 46 47 48 49 4A 4B 4C 4D 4E 4F 50 51 52 53 54 55 56 9758 539 5A 5B 5C 5D SE oF 60 61 62 63 64 65 66 67 68 69 6A 6B 6C 6D 6E 6F 70 71 72 73 74 10 36 77 78 79 7A 7B 7C 7D 7E 7F 80 81 82 83 84 85 86 87 88 89 8A 8B 8C 8D 8E 8F 90 91 92 93 94 95 96 97 98 99 9A 9B 9C 9D 9E OF AO Al A2 A3 A4 A5 A6 A7 A8 AY AA AB AC AD AE AF BO B1 B2 B3 B4 B5 B6 B7 B8 B9 BA BB BC BD BE BF CO Cl C2 C3 C4 Cbs CO GI C8 CO CA CB CC CD TGE CE DO D1 D2 D3 D4 D5 D6 D7 D8 D9 DA DB DC DD DE DF EO El E2 E3 E4 E5 E6 E7 E8 E9 EA EB EC ED EE EF FO F1 F2 F3 F4 F5 F6 F7 F8 F9 FA FB FC FD FE 5A My special custom hotrod file Each byte of data is shown using hexadecimal or hex representation The Penloader performs the task of translating between text and binary forms When receiving data from the computer it parses each byte according to the following rules Each byte 2 hex characters must be separated by at least one space character or a carriage return CR line feed LF pair indicating end of line 76 There is no limit to the number of spaces or CR LF combinations used between bytes A byte is identified
44. lock_2 txt E gt File name Mem_B lock_O txt Files of type fal v Cancel Help Option Checksum CRC C 1K Tera Term Select the file containing the Memory Block data and verify that the CRC option is selected Then click on the Open button The following window will pop up and the data transfer will start immediately Tera Term XMODEM Send Filename Mem_Block_0 t t Protocol MODEM CRC Packet Bytes transfered Cancel Penloader Press the Start button The file transfer should start and the Penloader should display RCVE while also making a ticking sound 72 When the file transfer has completed The above Tera Term window will disappear leaving only the original Tera Term start up window The Penloader takes a little longer to complete the operation as it must save the transferred data into the onboard Memory Block When the Penloader operation completes it will display OK if the operation was successful and also provide an audio cue If the file transfer is not successful the Penloader will display FAIL 5 4 Troubleshooting Penloader Issues Issue Penloader doesn t display the 00 Send Mem block to computer or the 03 Receive data from computer and save message Response Penloader must be powered up with thumbwheels set to 98 for this option to work correctly Powering up the Penloader with the thumbwheels set to 98 results in an alternate set of f
45. m the ignition switch This must be completed within 20 seconds of closing the door in step e above Insert new key to be registered into the ignition switch This must be completed within 10 seconds of removing the Master key Turn ignition switch ON This must be completed within 10 seconds of inserting the key into the ignition switch Wait at least 60 seconds then turn ignition switch OFF and remove key Key is now registered in ECU Another key may be registered if it is inserted into the ignition switch within 10 seconds or removing the previous key and repeating steps i through k Open then close the driver s door Programming mode is complete 83 A 3 4 To delete all other existing keys a Ensure there is no key in the ignition b While sitting in driver s seat close all vehicle doors but do not lock them c Insert a registered Master key into the ignition switch d Turn ignition switch ON then OFF 6 times leaving the ignition switch in the ON position on the 6 cycle This operation must be completed within 15 seconds of inserting the key into the ignition switch e Open then close the driver s door within 15 seconds of starting step d timing starts when Master key was inserted into the ignition switch f Open then close the driver s door 6 times This must be completed within 20 seconds of closing the door in the previous step item e above g Remove the Master key from the ignition swi
46. nd held use 4 digit alpha numeric display Simple to use Programming options selected through a 2 digit thumbwheel switch Onboard probes with spring loaded protective cover for programming 8 pin SOIC packages Supports Microwire 12C and SPI devices Powered by rechargeable batteries or external 12V dc supply Provides measurement of power supply voltage battery and external supply Includes dual LED lamps to illuminate area around device to be programmed Audio feedback to user Capability to read and display PIN numbers 60 second auto power off when not in use Software is field updateable using a Windows PC and a serial cable 40n board Memory Blocks that can be used to save 4 unique user files Restore operation that can be used to restore contents of last device programmed 2 Product Features Figure 1 Penloader Unit Description Thumbwheel selector 2 On Off button 3 START buttons 4 character display Neoprene grip 6 Spring probes 7 12V dc input connector 3 Penloader Operation This tool provides a set of programming and PIN read functions to help the locksmith when programming new transponder keys and proxy 3 1 General Operation The basic operating procedure for using the Penloader is as follows i Remove module containing memory device to be programmed from the vehicle and disassemble to provide access to the memory device to be programmed
47. o perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed 35 After programming is successfully completed follow the procedure described in Appendix A section A 5 1 to register keys into the Immobilizer 4 1 22 Thumbwheel Setting 24 File 24020 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Model Year Immo Location SC 430 2002 2003 Behind instrument cluster To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 5 1 to register keys into the Immobilizer 4 1 23 Thumbwheel Setting 25 File nontrans Flash device identifier IC900 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota Lexus models specified in the following table 36 VIN All models not equipped with a separate transponder immobilizer unit Must use a Type 1 ECU Sept 2002 Jan 2003 1 or 4 4 or 6 cyl Sept 2002 2005 1 or 4 4 cyl only Camry Sept 2002 Jan 2003 1 or 4 6 cyl only Camry Sept 2002
48. o the correct setting for receiving and saving the desired Memory Block Do NOT press the Start button yet The following table specifies the thumbwheel settings for each memory block 68 Thumbwheel Penloader Display 04 Receive data from computer and save in Mem block 0 05 Receive data from computer and save in Mem block 1 06 Receive data from computer and save in Mem block 2 07 Receive data from 07 3 computer and save in Mem block 3 Hyper term Select Transfer from the menu options along the top of the Hyper Terminal window then click on Send File from the drop down menu The following window will Pop up M Send File Folder C Documents and Settings Desktop Filename Mem Block_2 txt Protocol modem w Hyper term Select the Xmodem protocol important do not select the 1K Xmodem protocol option and also the name of the file containing the Memory Block data using the Browse button When done click on the Send button The following window will appear 69 Xmodem file send for penloader Sending C Documents and Settings Desktop Mem_Block_2 txt Packet Error checking CRC Retries Total retries 0 Last error File OK of 7K Elapsed Remaining Throughput Penloader Press the Start button The file transfer should start and the Penloader should display RCVE while also making a ticking sound When the file transfer has completed the above
49. or read ii Set thumbwheel to the required number refer to Table 3 1 below iii Power up the Penloader thumbwheel must not be set to 98 before power up iv Position the Penloader over the 8 pin memory device ensuring that the spring probes are making good contact with the legs on the memory device Where possible a Flash device identifier is specified to help locate the correct 8 pin device on the circuit board Figure 2 below shows how to locate pin 1 on the 8 pin memory device It is important that the spring probe identified as 1 is in contact with Pin 1 on the 8 pin memory device v Push the START button vi The 4 character display will show status as the programming read operation proceeds The Penloader unit will also provide audio cues during the operation ref section 3 2 below vii On completion the display will identify whether the programming operation was successful or not In the case of PIN reads the display will show the 4 digit PIN and hold it for 5 seconds if the operation was successful Pin 1 locator Figure 2 Locator for Pin 1 The following table shows the options that are selectable using the thumbwheel Thumbwheel Setting Penloader Function Write using data from Memory Block 0 Write using data from Memory Block 1 Q Q oO O1 N oO O gt O NJ O0 Write using data from Memory Block 2 Write using data from Memory Block 3
50. ota Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table 39 Model Year Immo Location To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed 4 1 29 Thumbwheel Setting 31 File FJ S93C66 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Year Immo Location FJ Cruiser Above glove box To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed Use the procedure described in Appendix A section A 8 1 to register keys in the immobilizer 4 1 30 Thumbwheel Setting 32 File SaabCIMO3_ 09 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Saab models specified in the following table Model Year Immo Location 93 2003 2009 Behind steering wheel 40 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programmin
51. ox when it is locked up 4 1 35 Thumbwheel Setting 37 through 83 These thumbwheel selection options are not in use at this time 4 1 36 Thumbwheel Setting 84 File N A Device type 24C16 Type of operation PIN read Manufacturer s Chevrolet models specified in the following table Model Year BCM Location cuze DS This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the 42 end of the operation the display will display the 4 digits of the PIN 4 1 37 Thumbwheel Setting 85 File N A Device type 93C66 Type of operation PIN read Manufacturer s Fiat models specified in the following table Model Year Immo Location 900 This thumbwheel selection can be used to read the 5 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the PIN scrolling display 4 1 38 Thumbwheel Setting 86 File N A Device type 93C66 Type of operation PIN read Manufacturer s Saab models specified in the following table Mode vear Immo Location This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display th
52. pe 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Year Immo Location Prius 2004 Under dash board above steering column To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 34 4 1 20 Thumbwheel Setting 22 File 50030 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Model Year _ImmoLocation LS 430 2001 2002 Above navigation system To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 5 1 to register keys into the Immobilizer 4 1 21 Thumbwheel Setting 23 File 50031 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Model Year Immo Location LS 430 2003 Above navigation system T
53. play OK at the end of the procedure else the programming operation failed 20 4 1 2 Thumbwheel Setting 04 This thumbwheel setting is used to display the 2 keys programmed into a memory device using Thumbwheel setting 05 The keys are displayed in 4 character increments as follows Before starting perform the programming procedure as described in section 4 1 3 below Set thumbwheel to 28 Press the START button The display will scroll until KEY1 is displayed then the scroll operation will pause KEY 1 is the first Key and KEY2 is the second Key Press the START button again to continue the display scroll to the next 4 digits of the key value Continue step iv until all 28 digits of both keys have been displayed Pressing START again will scroll the data from the beginning again 21 4 1 3 Thumbwheel Setting 05 File 3 key16bit Flash device identifier IC900 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota Lexus Type 1 ECU models specified in the following table Model Year ECU Location 4Runner 1998 2001 Behind glove box Avalon 1998 2003 Behind glove box Camry 1998 2000 Behind glove box 1998 2000 Behind glove box Highlander 2001 2003 Behind glove box 1998 2000 Behind glove box 2001 2003 Behind driver seat 2002 2003 Behind glove box Sienna 1998 2003 Behind glove box 1998 2001 Behind glove box GS 300 1998 2000 Under
54. play OK at the end of the procedure else the programming operation failed Important One of the pins of the blue colored component in the corner of the board next to IC1 must be connected to GND before trying to program IC2 refer to photo in Appendix B After programming is successfully completed follow the procedure described in Appendix A section A 6 1 to register keys into the Immobilizer 27 4 1 8 Thumbwheel Setting 10 File 50020 Flash device identifier IC2 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table LS 400 1997 Behind glove box To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 3 1 to register keys into the ECU 4 1 9 Thumbwheel Setting 11 File 60330 Flash device identifier Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Lexus models specified in the following table Modei Year immolocstion GX 470 2003 2004 Behind instrument cluster To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed
55. rm the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the 4 digits of the PIN Important One of the pads on the board must be connected to GND before trying to program the board refer to photo in Appendix B 4 1 47 Thumbwheel Setting 95 File Data from Restore Memory Block Flash device identifier Depends on manufacturer Type of operation Programming Manufacturer s Any This thumbwheel setting is used to restore the contents of a memory device to it s value prior to programming Anytime the Penloader is used to program a device it reads the device and saves the contents into a Restore memory block contained in the Penloader prior to overwriting the device with new data If there is a desire to restore the original contents of the device after programming this can be achieved using thumbwheel setting 95 48 It is important to note that the contents of the Restore Memory Block are overwritten with each subsequent programming operation Thus a function is also provided to save the contents of the Restore memory bank to one of the other 4 Memory Blocks provided ref section 4 2 6 i Set thumbwheel to 95 ii Position the Penloader over the 8 pin memory device iii Press the START button iv If successful the original contents of the memory device will be restored and the display will indicate OK 4 1 48 Thum
56. s Between The Penloader and the Computer All data transfers between the Penloader and a computer use the standard Xmodem protocol For this reason it is necessary to sequence the transfer differently depending on which direction data is to be transferred The following paragraphs describe the sequence to be followed to perform the data transfer Important Penloader must be connected to the computer as described in section 5 2 2 before sequencing through the following paragraphs 5 3 1 Using Hyper Terminal to send Memory Blocks from the Penloader to the computer Penloader Set thumbwheel to 98 then power up Penloader and wait for thumbwheel number to scroll by Penloader Change thumbwheel to the correct setting for sending the desired Memory Block then press the Start button The following table specifies the thumbwheel settings for each memory block Penloader Display 00 Send Mem block 0 to computer 01 Send Mem block 1 to computer 02 Send Mem block 2 to computer 03 Send Mem block 3 to computer Hyper term Select Transfer from the menu options along the top of the Hyper Terminal window then click on 64 Receive File from the drop down menu The following window will pop up M Receive File Place received file in the following folder C Documents and Settngs Desktop Use receiving protocol modem w Receive Close Cancel Hyper term Select the Xmodem protocol important
57. se the LC or AA alternatives Thumbwheel Setting Device 31 24C01 32 24C02 24C04 24C08 24016 53 4 2 9 Thumbwheel Setting 36 This thumbwheel setting is used to read the contents of an external 93C series Microwire device and save the contents to the Restore Memory Block It is not necessary to select the actual 93C series device type as the Penloader will determine which type it is reading from To perform the read and save function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the operation failed Note that the C in the device part number is not significant Some parts may use the LC alternative 4 2 10 Thumbwheel Setting 99 This thumbwheel selection will display the serial number of the Penloader plus the voltage of either rechargeable batteries if an external dc supply is not connected to the unit else the voltage of the external dc supply To display these 2 parameters the thumbwheel switch should be set to 99 and the START button pressed The unit will display a WAIT message then continually scroll through a message that shows the serial number and the supply voltage 54 5 Uploading Downloading Serial Data 5 1 Introduction The Penloader can save up to four data files sourced from external memory devices in onboard flash memory with a maximum file size of 2048 bytes corresponding to the largest antic
58. tch This must be completed within 20 seconds of closing the door in step e above h Open then close the driver s door Programming mode is complete A 4 Procedure to be followed for the following vehicles Make Model Year Remark 2001 2008 A 4 1 To register Keys in a new ECU a Ensure there is no key in the ignition b While sitting in drivers seat close all vehicle doors but do not lock them c Insert first new Master key into the ignition switch d Wait 5 seconds then remove key from ignition switch e Insert second new Master key into the ignition switch f Wait 5 seconds then remove key from ignition switch g Insert new Valet key into the ignition switch 84 h Wait 5 seconds then remove key from ignition switch i All 3 keys should now turn off the theft light but will no start the vehicle j Insert a Master Key into the ignition switch and turn ignition switch on a Short OBD2 connector terminal 4 to terminal 13 using a wire or paper Clip i Wait 30 minutes then turn ignition switch off and remove shorting wire from OBD2 Programming mode is complete Vehicle should now start with any of the 3 keys A 4 2 To register an additional Master or Valet Key a Ensure there is no key in the ignition b While sitting in driver s seat close all vehicle doors but do not lock them c Insert a registered Master key into the ignition switch d Quickly turn ignition switch ON then
59. the Restore memory Block to one of the other 4 Memory Blocks provided The THUMB 1 settings include all of the save operations to the Restore Memory and the copy of the Restore Memory to and from one of the onboard 4 memory blocks 0 1 2 or 3 Note that the write function to these memory blocks can take a while depending on the amount of data to be written In some instances this save operation may take 30 seconds or more In all cases audio cues are used to define the end of the operation and status is shown on the display 4 2 1 Thumbwheel Settings 00 through 03 These thumbwheel settings are used to transfer the contents of a memory block up to a computer This procedure is described in section 5 Set thumbwheel to 01 02 03 or 04 depending on which memory block 0 1 2 or 3 should source the data to be sent to the computer 50 4 2 2 Thumbwheel Settings 04 through 07 These thumbwheel settings are used to transfer the contents of a data file from a computer to a Memory Block This procedure is described in section 5 Set thumbwheel to 04 05 06 or 07 depending on which Memory Block 0 1 2 or 3 the data received should be saved to 4 2 3 Thumbwheel Settings 08 through 11 These thumbwheel settings are used to copy the data saved in the Restore Memory Block to one of the four permanent storage Memory Blocks 0 1 2 or 3 Set thumbwheel to 08 09 10 or 11 depending on which Memory Block 0 1
60. the ECU Note If vehicle will only register 1 key after programming this is an indication that it probably uses a Type 1 ECU and was programmed with the wrong file Reprogram with the correct file 4 1 6 Thumbwheel Setting 08 File 47010 Flash device identifier IC Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Year Immo Location Under dash board above steering column Must drop the column 10mm bolt to release the bracket located in left corner behind roll bar 2001 2003 To perform the programming function use the procedure described in section 3 1 Display must display OK at the end of the procedure else the programming operation failed After programming is successfully completed follow the procedure described in Appendix A section A 4 1 to register keys into the Immobilizer 26 After programming all modules must be resynchronized by performing the following procedure 4 1 7 Thumbwheel Setting 09 File 34010 Flash device identifier IC2 Device type 93C series 93C01 93C02 etc Type of operation Programming Manufacturer s Toyota models specified in the following table Model Year Immo Location Saioa 2003 and Behind cluster Must be a q newer 4D 67 transponder To perform the programming function use the procedure described in section 3 1 Display must dis
61. ting that the immobilzer is in Auto learn mode Insert first Master key 4D with an id of 32 52 or b into the ignition switch Theft light will blink once then remain on Remove key from ignition switch Repeat steps b and c for the remaining 3 keys Last key registered is the Valet key 4D with an id of 72 or 92 Removing fourth key closes Auto learn mode Once Auto learn mode is closed the Immobilizer must be resynchronized with the ECU else vehicle will not start Insert a Master Key into the ignition 88 switch and turn ignition switch on do not try to start the vehicle Short OBD2 connector terminal 4 to terminal 13 using a wire or paper Clip Wait for 30 minutes Remove shorting wire from OBD2 connector Turn ignition switch off and remove key Reinsert key and verify that vehicle can now be started SSS G Notes Up to 4 keys may be registered If less than 4 keys are registered Auto learn mode must be closed manually To close Auto learn mode turn ignition switch on then off 5 times within a 10 second period step on the brake then remove the key from the ignition switch Theft light blinking two long blinks and one short blink indicates that Auto learn mode failed Theft light blinking two short blinks and two long blinks indicates that a key that has already been registered was registered a second time A 8 Procedure to be followed for the following vehicles Make Moder Year Remark
62. tion the display will display the 4 digits of the PIN 46 4 1 44 Thumbwheel Setting 92 File N A Device type 93C76 Type of operation PIN read Manufacturer s Volkswagen VW models specified in the following table Model Year Immo Location 2000 and up In er dash This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the 4 digits of the PIN 4 1 45 Thumbwheel Setting 93 File N A Device type 93LC46 Type of operation PIN read Manufacturer s Isuzu models specified in the following table Model Year Immo ECU BCM Location Axiom 2003 2005 Below steering column Rodeo 2003 2005 Below steering column This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perform the PIN read function use the procedure described in section 3 1 At the end of the operation the display will display the 4 digits of the PIN 47 4 1 46 Thumbwheel Setting 94 File N A Device type 24LC02 Type of operation PIN read Manufacturer s Chrysler models specified in the following table Model Year Immo Location All Type 1 On steering column at Chryslers ee anene ignition switch This thumbwheel selection can be used to read the 4 digit PIN for the vehicle s specified To perfo
63. u will remember then click on the Save button Tera Term does not automatically restore the saved parameters To restore the saved setup next time Tera Term is started select Setup from the menu options along the top of the Tera Term window then click on Restore Setup from the drop down menu Navigate to the folder that the file Penloader ini was saved in select the file and click on the Open button 62 5 2 2 Connecting the Serial Cable Before any data can be moved between the Penloader and a computer a serial cable must be connected between the 2 devices To connect a serial cable to the Penloader the programming head must be removed and replaced with a serial cable head To remove the programming head gently pull the head away from the end of the tube Once removed the serial cable head can be installed To install the new head align the 2 holes in the bottom of the head with the 2 alignment pins on the bottom of the Penloader Note that the 2 alignment pins are not symmetrically positioned with respect to the end of the Penloader tube ensure correct orientation of the new head with respect to the Penloader tube A standard 9 pin D serial cable can now be plugged into the end of the 9 pin female D connector on the end of the Penloader and the other end of the serial cable plugged into the 9 pin male D connector in the computer or USB to serial adapter cable 63 5 3 Transferring Memory Block
64. unctions being allocated to the thumbwheel settings Issue Penloader appears to hang during the data transfer Response 2 possibilities First possibility is that a data error occurred during the transfer and the data transfer has crashed The second possibility is that the procedures outlined in this document were not followed correctly and the data transfer has not started It is important that the sequence of Penloader button presses and terminal emulation program option selections is done in the correct order else the computer and Penloader will not synchronize correctly If the Penloader hangs during the data transfer it must be power cycled 73 Terminal Emulator Issues Issue The terminal emulator data transfer window closes but the data transfer did not complete Response Most of the data transfer operations within a terminal emulator contain a time out function which will stop the attempted data transfer and close the transfer information window should the data transfer take an abnormally long time This should not happen unless i the data transfer has crashed or ii the user is taking too long to dial through the Penloader selections General Issues Issue No data is transferred between the Penloader and the computer even though the instructions have been exactly followed Response Most likely problem is the serial cable or the COM port selection The serial cable used should be a standard cable with a

User Manual - Logikey.us

Contents

Download Pdf Manuals

Related Search

Related Contents