Product Description
1. CGPro 9S12 programmer, Made for encrypted chip .
2. Can perform automatic conversion BMW, Mercedes-Benz kilometer and BMW, Land Rover, Porsche key matching.
3. It combines both CGDI BMW key programmer and CGDI Mercedes key programmer.
CGDI CG Pro 9S12 Freescale Programmer Full Version
CG Pro 9S12 Full Version Highlights:
1. Read and write BMW CAS 1-4, Porsche BCM, Mercedes-Benz EIS, Audi BCM2 Etc anti-theft computer (100% stable security, subject to domestic test users alike)
2. Able to crack a variety of strong encryption chips, stable and fast
3. Equipment using the high-end technology, real-time monitoring, anti-loss system
4. Come with ith independent intellectual property rights, arbitrarily increase the chip models according to customer demands
5. Support 80% of the 35160WT, 35080, 35128 in the market
6. Multi-language: Chinese English
(French, Spanish and Turkish require language authorization)
7. With free new CAS4 DB25 and TMS370 Adapter in package, reading CAS4 without demoulding (No Need to Remove Chip)
HC705/908 AM29FXXX AM29Blxxx 3 in 1 Adapter
Operating HC705/908 Series Chip for repairing old anti-theft computer read write function and ELS lock of Mercedes-Benz,etc
Operating AM29F200/AM29F400/AM29F800 series chips for automotive computer repair, anti-theft computer repair,etc
Operating AM29BL802 series chip etc used in automotive computer repair anti-theft computer repair or Wei Zhi anti-theft cancellation
35160WT Adapter
35160WT Adapter works for the 35160WT and 35128WT chip design that cannot be erased, it can directly repair the original vehicle red dot and directly use the original car chip. This function is the first in the world. No more the need of the emulator, with the CG Pro and 35160WT adapter, you can fix the mileage without emulator.
CGPRO CAN V2.1 Adapter
for CGPro 9S12 Key Programmer support the following engine computer repair BMW E Series 3 Series or 5 Series, BMW F Series, BMW R Series (Mini), Bentley, Volkswagen MT60 MT80.
New CAS4 DB25 Adapter Functions:
Reading CAS4 without demoulding (No Need to Remove Chip)
Free-to-Remove Operation Motorola, (Freescale) Series Chip
Such as BMW CAS4-5M48H (Convenience)
CG Pro 9S12 Features:
Support Freescale 705 series
Support Freescale 908 series
Support Freescale 711 series
Support Freescale 912 series
Support Freescale 9S12 series
Support NEC V850 series
Support engine computer changing and ISN reading
Support BMW, Mercedes-Benz automatic kilometer correcting
Support BMW, Land Rover, Porsche key programming
Support functions:
Anti-theft computer
Instrument mileage
Smart computer
ECU
Key matching
Gateway computer
VIN
Key Refresh
Airbag
Others
CPU->MCU
Storage Chips
CG Pro 9S12 Flash Point:
Able to crack a variety of strong encryption chips, stable and fast
Equipment using the high-end technology, real-time monitoring, anti-loss system
Complementary to the CG-100
Come with ith independent intellectual property rights, arbitrarily increase the chip models according to customer demands
Update: Download software on official website: //www.cgprogcar.com/
CG Pro 9S12 covers ECUs and immobilizers below:
BMW:
CAS4+ 5M48H/1N35H (9S12XEP100)
CAS4 1L15Y (9S12XDP512)
CAS3 0L15Y/0M23S (9S12XDP512 including CAS3+ series)
CAS3 0L01Y (9S12DG256)
CAS2 0L01Y/2K79X (9S12DG256)
CAS2/E66 0L01Y/2K79X (9S12DG256)
CAS1 0K50E (912DT128A Write FLASH data online)
EWS4 0L86D/1L86D/2L86D (9S12DJ64)
EWS3 0D46J/2D47J (MC68HC711EA9)
EWS2 1D47J (MC68HC711EA9)
( able to read/write data above for mileage correction and immobilizer reset )
CG Pro 9S12 and BMW/Porsche key programming:
BMW CAS3 YES
BMW CAS3+ YES
BMW CAS4 YES
BMW CAS4+ YES
BMW EWS4
BMW EWS3
BMW EWS2
Porsche 911 BCM YES
Porsche Boxster BCM YES
Porsche Cayman BCM YES
Porsche Panamera BCM YES
Porsche Cayenne BCM YES
Porsche Macan BCM YES
(Program new keys via eeprom data)
BENZ:
EIS 211 ST12 3L40K/1L59W/4L40K/1L85D/0L85D/2L85D/
EIS 211 HC12 0K50E/3K91D
EIS 209 ST12 3L40K/1L59W/4L40K/1L85D/0L85D/2L85D/
EIS 209 HC12 0K50E/3K91D
EIS 215 ST12 3L40K/1L59W/4L40K/1L85D/0L85D/2L85D/
EIS 215 HC08 2J74Y/4J74Y/1J35D(Can directly reset EIS data with 08 adapter;and read write EEPROM without extra adapter)
EIS 220 HC05 0D53J/0D59J/0D62J/0D69J/0F62J/0F82B/0G47G/0H51A/1D59J/1D69J/1H52A/2D20J/2D59J
EIS 210 HC05 0D53J/0D59J/0D62J/0D69J/0F62J/0F82B/0G47G/0H51A/1D59J/1D69J/1H52A/2D20J/2D59J
EIS 203 HC08 1J35D/2J74Y/4J74Y
EIS 164 ST12 3L40K/4L40K/1L59W/0L85D/1L85D/2L85D
EIS 169 ST12 3L40K/4L40K/1L59W/0L85D/1L85D/2L85D
EIS 639 ST12 0L01Y
EIS 639 HC08 0L02M/1L02M/4J74Y/1J35D/2J74Y
EIS 199 ST12 3L40K/4L40K/1L59W/0L85D/1L85D/2L85D
EIS 230 ST12 3L40K/4L40K/1L59W/0L85D/1L85D/2L85D
(Support all above data read/write for mileage correction and immobilizer reset)
Roewe:
Roewe 750 IMMO 0M89C (Read/Write)
Land Rover:
EWS ST12 3L40K/4L40K/5L40K
RFA 9S12XEQ384 (1M12S 2M12S 1M53J 2M53J ) 9S12XET512 ( 3M53J 2M53J 1M53J)
CG Pro 9S12 covers dashboards below:
Benz
BMW
Domestic cars 9S12 dash
Land Rover
Mini
Audi:
Audi A4/A5/Q5-BCM NEC D70F3634/D70F3380
Audi ELV HC08GR 4L35K
CG Pro 9S12 covers chips below:
Microcontroller:
Motorola:
9S12 series:
9S12XDP512-0L15Y
9S12XDP512-1L15Y
9S12XDP512-0M23S
9S12XEP100-1N35H
9S12XEP100-5M48H
9S12XEx512-2M25J
9S12XEx512-3M25J
9S12D64-2L86D
9S12DJ64-0M89C
9S12DT128-1L59W
9S12DT128-4L40K
9S12DT128-1L85D
9S12DG128-3L40K
9S12DG256-0L01Y(CAS)
9S12DG256-2K79X
9S12XHZ384-1M80F
HC912 serie:
HC912DG128-0K50E
HC912DG128A-0L05H
HC912DG128A-3K91D
HC908 series:
HC908AZ60-4J74Y
HC908AZ60-1J35D
HC908GR16-4L35K
HC711 series:
HC711EA9-2D47J
HC705 series:
HC705-0D69J
HC705-0D53J
NEC:
D70F3634
D70F3380
CPU:
ST:
35080DQ
35160DQ
35080_3/6
35080VP/V6
8-foot chip:
24C01
24C02
24C04
24C08
24C16
24C32
24C64
24C128
24C256
24C01A
24C01B
24C02B
24LC01A
24LC01
24LC02
24LC04
24LC16
24LC32
25010
25020
25040
25080
25160
25320
25640
25128
25256
93C46
93C56
93C66
93C57
93C76
93C86
93A86
93CS56
93CS66
93S56
93LC46
93LC56
93LC66
93LC76
93LC86
95010
95020
95040
95080
95160
95320
95640
95128
95256
AMD:
AM29BL802CB
AM29F200
AM29F400
AM29F800
Renew Key/Remote:
Audi
8K0959754C
8T0959754J_2 smart card
8T0959754J_CH
Generic type smart card
PCB2 8T0959754 433 remote control
PCB2 8T0959754D 868 remote control
PCB2 8T0959754F 433 smart card
PCB2 8T0959754G 315 smart card
PCB2 4H0959754DA 433 smart card
PCB2 4H0959754DB 315 smart card
PCB2 4H0959754DD 868 smart card
BMW
E series:
5WK49125 868MHz remote
5WK49127 315MHz remote
5WK49145 868MHz smart remote
5WK49147 315MHz smart remote
F series:
5WK49661 868MHz
5WK49662 434MHz
5WK49663 315MHz
HUF5661 868Mhz Huf
HUF5662 315Mhz Huf
HUF5663 434Mhz Huf
HUF5667 434Mhz Huf
HUF5661 868Mhz Huf
Huf 434 frequency
Huf 868 frequency
BYD:
K2TA3-74B smart card black
2TA3-76E smart card
K2TA3-H7J smart card white oval
K2TA4-30A smart card
Buick/Chevrolet
4-button smart key 315MHz F7952B
4-button smart key 433MHz F7952B
5-button smart key 315MHz F7952B
5-button smart key 433MHz F7952B
Chrysler/Jeep/Dodge
M3M chip screen printing:F7953
M3M Hitag2
M3N3322971XX
M3N5WY72XX
etc
Great Wall
H2 smart 434MHz PCB: CU1897L
Hyundai/Kia
SVI-CMFEU03
SVI-DMFGE04
SVI-DMFBA03
SVI-HMFEU04
SVI-HMFKP04
etc
Land rover
5E0U40247(434MHz)
YWX000061 (434MHz) Visteon
YWX000071 (315MHz) Visteon
Mitsubishi
GBD-644M-KEY (433MHz)
Nissan:
AES smart card- A232800800 5 key
AES smart card- A2C32801600
AES smart card- A232801600
Hitag2 smart FCCID-CWTWB1U82
etc
Porsche
7PP959753AJ 434MHZ
799595753BM 315MHZ
799595753BN 434MHZ
799595753BQ 315MHZ
799595753BS 434MHZ
Renault
285971998R smart card Hitag
285974100 remote control Hitag
285975779R smart card 433mhz
285979045R smart card 433mhz
Volvo
5WK49266 (900MHz) smart card
5WK49269 (433MHz) smart card
Package includes:
1pc x CG PRO host
1pc x M35080/35160 Adapter
1pc x EEPROM&V850 Adapter
1pc x CG PRO 9S12 HC705/908, AM29FXXX, AM29BLXXX Adapter 3-in-1
1pc x 35160WT adapter
1pc x CGPRO CAN V2.1 Adapter
1pc x CG Pro 9S12 Cable
1pc x CGPROG CAS4 Adapter New DB25 Adapter No Need Soldering
1pc x 711 Adapter
1pc x DB25 Adapter
1pc x 12p Welding Line
1pc x USB cable
1pc x Packing box
CG Pro 9S12 Latest Update Information:
Software Version V2.2.5.0 NEW (2021.12.22)
1.Chips, added support model.
CYPRESS - Traveo
S6J311AHAA
S6J311EJAA
S6J311EHAA
S6J311BHAB
S6J311CHAB
S6J311DJAB
S6J311DHAB
S6J311DHBB
S6J311EJAB
S6J311EHAB
S6J311EHBB
S6J312AHAA
S6J320CQXA
S6J323C
S6J324C
S6J325C
S6J326C
S6J327C
S6J328C
S6J324CLS
S6J324CKS
S6J326CLS
S6J326CKS
S6J32A9
S6J32B9
S6J32C9
S6J32D9
S6J32AA
S6J32BA
S6J32CA
S6J32DA
S6J331E
S6J336A
Motorola - HC(9)08
HC908AS60 - 3J74Y(EEPROM)
HC908AS60A - 3K85K(EEPROM)
HC908AZ60 - 1L31V(EEPROM)
HC908AZ60 - 1L87J(EEPROM)
2. Fix bugs
V2.2.4.0 NEW (2021.08.10)
1. Chips, added support.
CYPRSS - Traveo
S6J3001
8-PIN
S29190_DIP
S29190_SOP
S29290_DIP
S29290_SOP
S29390_DIP
S29390_SOP
2. Software problem repair and optimization
Fix the problem of device freezing when TC17XX and other models are not connected well.
Fix the problem of the engine computer DDE71_EDC17CP02 operation failure.
Fix the problem that the meter mileage adjustment cannot write 0 kilometers.
Fix the problem of EWS3 matching error code feedback error.
Adjust and optimize the firmware upgrade process.
Fix the problem that the meter mileage of BMW 35160WT/35128WT mode 2 cannot be modified when the report is greater than 800,000 kilometers.
3. Modification of some pin diagrams
STM8 pin diagram adds English description.
Color adjustment of the RES-1 line of the wiring diagram of the disassembly-free adapter.
Benz V260 steering column wiring diagram adjustment.
CG Pro 9S12 V2.2.3.0 NEW (2020.08.17)
1.Immobilizer, added support
Ford - Mustang T70 IMMOBOX
2.Key, added support
Toyota - Corolla 93C56 lose
3.Key Refresh, added support
BMW F Series - F series - 315MHZ remote control refresh
4.Chips, added support
ST - STM8
STM8AF5268
STM8AF5269
STM8AF5286
STM8AF5288
STM8AF5289
STM8AF528A
STM8AF52A6
STM8AF52A8
STM8AF52A9
STM8AF52AA
STM8AF6213
STM8AF6223
STM8AF6223A
STM8AF6226
STM8AF6246
STM8AF6248
STM8AF6266
STM8AF6268
STM8AF6269
STM8AF6286
STM8AF6288
STM8AF6289
STM8AF628A
STM8AF62A6
STM8AF62A8
STM8AF62A9
STM8AF62AA
STM8AL3136
STM8AL3138
STM8AL3146
STM8AL3148
STM8AL3166
STM8AL3168
STM8AL3188
STM8AL3189
STM8AL318A
STM8AL31E88
STM8AL31E89
STM8AL31E8A
STM8AL3LE88
STM8AL3LE89
STM8AL3LE8A
STM8AL3L46
STM8AL3L48
STM8AL3L66
STM8AL3L68
STM8AL3L88
STM8AL3L89
STM8AL3L8A
STM8L051F3
STM8L052C6
STM8L052R8
STM8L101F1
STM8L101F2
STM8L101F3
STM8L101G2
STM8L101G3
STM8L101K3
STM8L151C2
STM8L151C3
STM8L151C4
STM8L151C6
STM8L151C8
STM8L151F2
STM8L151F3
STM8L151G2
STM8L151G3
STM8L151G4
STM8L151G6
STM8L151K2
STM8L151K3
STM8L151K4
STM8L151K6
STM8L151M8
STM8L151R6
STM8L151R8
STM8L152C4
STM8L152C6
STM8L152C8
STM8L152K4
STM8L152K6
STM8L152K8
STM8L152M8
STM8L152R6
STM8L152R8
STM8L162R8
STM8L162M8
STM8S003F3
STM8S003K3
STM8S005C6
STM8S005K6
STM8S007C8
STM8S103F2
STM8S103F3
STM8S103K3
STM8S105C4
STM8S105C6
STM8S105K4
STM8S105K6
STM8S105S4
STM8S105S6
STM8S207C6
STM8S207C8
STM8S207CB
STM8S207K6
STM8S207K8
STM8S207M8
STM8S207MB
STM8S207R6
STM8S207R8
STM8S207RB
STM8S207S6
STM8S207S8
STM8S207SB
STM8S208C6
STM8S208C8
STM8S208CB
STM8S208M8
STM8S208MB
STM8S208R6
STM8S208R8
STM8S208RB
STM8S208S6
STM8S208S8
STM8S208SB
STM8S903F3
STM8S903K3
5.Fix some problems.
CG-Pro V2.2.2.0 (2020.04.17)
1.Immobilizer, added support
Volkswagen - KESSY Immobilizer
Volkswagen - Jetta IMMOBOX
2.Chips, added support
TI- TMS370
TMS370C002A
TMS370C010A
TMS370C012A
TMS370C020A
TMS370C022A
TMS370C032A
TMS370C040A
TMS370C042A
TMS370C050A
TMS370C052A
TMS370C056A
TMS370C058A
TMS370C256A
3.Increased Turkish support
4.Fix some problems
CG-Pro V2.2.1.0 (2020.03.20)
1.ECU, added support
B38 MEVD 17.2.3(F20 1793) (PASSWORD)
B38 MEVD 17.2.K(F20 1793) (PASSWORD)
2.Key, added support
E series - original factory new 315 - load brush
3.Chips, added support
Motorola - HC05
HC05E6(0F82B)
Renesas - RH850
R7F701330
Renesas - M32R
M32176F2
M32176F3
M32176F4
M32186F8
Infineon - TC1793
TC1793(PASSWORD)
4.Other,added model
Benz ELV W203
Benz ELV W211
5.Fix some problems
2022 Hottest ECU Programmer PCMTuner
Autel IM508+XP400 Pro Same Immo Function As IM608 Pro
Any questions, please don't hesitate to contact us:Email: sales@CarDiagTool.co.ukSkype: cardiag.co.ukWhatsapp: +86 15002705698
Scan QR Code to Order By Mobile Phone
Shipping Method & Delivery:UK/EU Warehouse Shipping: 3-5 working days. Fast Delivery No Tax.
EU Check:
Ship from EUUK Check:
Ship from UKDHL Shipping: 5-7 working days, you need pay some tax to your customs. Usually we declare a lower price on DHL invoice to help with customs clearance. If your address belongs to remote area, customer will need to pay remote handling cost. Please remember to leave message if you have any special requirement.
Yanwen Express: 10-15 working days. No Tax or remote cost for European Countries.
Yodel/Royal Mail: Just for United Kingdom. No Tax, and the delivery is about 7-10 days.
Standard Post: The delivery is about 15-20 days, no tax. Order under $150 normally with default shipping Standard Post, customers can tick for Express Shipping Service to ship by DHL.
Warranty Item:Almost all item has one year warranty.
We also offer free fix to almost item we sold within one year, free repair. Man-made damage need pay.
We not offer warranty on keys,cables,adapter,online sent software ,please notice it.
Software Download
1. How to install the cgpro new device?
Download the latest software from the official website, then connect the device, and plug 12v power cable, the device will automatically be activated.
http://www.cgprogcar.com/en/?c=list&cs=xiazaizhongxi
2. CG pro 35160WT adapter can not erase the chip.
About this may erase 90%, other 10% chip can not be erased. Our development team is improving this adapter. We can send you the new one once we solve this issue.
3. Can CGPRO program car keys?
Yes, You can program keys for BMW, por-sche, land rover and jaguar, find the corresponding anti-theft and then match the keys according to the software tips, if the customer offer us the model which we do not indicate, then cgpro does not support this model.
4. Can cgpro read CAS data?
Yes. But Some BMW CAS anti-theft devices cannot be directly made with obd by CGDI BMW devices. CAS should be removed and then read out with CGPRO, and then loaded into BMW devices. (i.e, CSA3+ CAS4+)
5. Can CGPRO read Mercedes lock data?
Yes. Just like the BMW equipment, CGDI MB cannot be completely lost by obd directly. We also need to remove EIS. CGPRO reads the EIS data and then loads it into the Mercedes equipment.(i.e. W220)
For example many customers will ask how to do W220 all key lost: first with a programmer(our CGPRO 9S12) will lock chip data read out, and then load the data into the CGDI MB, and then do according to the software prompts.
6.Brief description of 35160WT operation:
The erasure of 35160WT consists of two stages. The first stage is to initialize the device (prompt: it takes 5-20 minutes to initialize the device, please wait patiently). The second stage is to erase (prompt: erase time is about 5-40 minutes, please wait a moment.../Erase time of about 5-40 minutes, wait please...). If the device has been initialized, it will go directly to the second stage. Note that the second stage is really the stage of erasing the chip, the first stage is only the adaptation between the host and the chip.
35160WT erase heating method description (if the chip can not be erased can try):
Before operation, adjust the air gun to 100 degrees Celsius and heat the chip for 20-30s (the chip is welded on the board). After that, stop heating and install it immediately to try the operation. If the chip is not erased in the second stage after the chip is completely cooled, it can be reheated by air gun for 20 to 30 seconds and then stopped heating. Chips may be erased during cooling.
7. Cgpro can not erase it if it is more than 800000km.
Yes
8. Why does the car diagnose a fault when some modules have gone through an ICP operation?
Some of the modules on cars are very smart, especially newer cars.When the module is powered up, the program in the module will check whether the voltage and other working conditions at each point are normal.If it is not in the normal state, an error code is written to the EEPROM. However, ICP operation is to remove the module from the car and only power the microcontroller. The level of other ports must be abnormal, so this problem will occur.
So using ICP mode is risky, especially for operating smart module.
9. Why is it that some modules can be read and some modules cannot be read but the microcontroller is the same?
The operating mode out of reset is determined by the states of the MODC, MODB, MODA pins during reset. The MODC, MODB, MODA bits in the MODE register show the current operating mode.
Mode Selection:
1). Normal modes: Some registers and bits are protected against accident changes.
2).Special modes: Allow greater to protected control registers and bits for special purposes such as testing.

Therefore, please measure the MODE pin before operation to ensure that the chip is in normal MODE!
10. Why is the module function still abnormal after writing EEPROM and FLASH data when the master is HC912 series module?
The EEPROM module contains an extra word called SHADOW word which is loaded
at reset into the EEMCR, EEDIVH and EEDIVL registers.
EEMCR—EEPROM Module Configuration $00F0
bit 7 |
bit 6 |
bit 5 |
bit 4 |
bit 3 |
bit 2 |
bit 1 |
bit 0 |
NOBDML |
NOSHW |
RES |
RES |
1 |
EESWAI |
PROTCK |
DMI |
NOBDML—Background Debug Mode Lockout Disable
0 = The BDM lockout is enabled.
1 = The BDM lockout is disabled.
Loaded from SHADOW word at reset. Read anytime.
Write anytime in special modes (SMODN=0).
To unlock BDM with storage rest data contents of register please do next:
1) Read register data at address $000F0
2) Set MOST significant bit to ??!!!
For example: If data at address $000F0 contain $79 make logical OR with $80
$79 OR $80 = $F9;
3) Next write this value to EEPROM
4)BDM will be enable after next reset ONLY !!!
NOTE: MC68HC912 without post fix has EEPROM shadow byte only.But it located at the same address $000F0.
11. Why does the chip encrypt after the FLASH data is written and reset?
This FSEC register holds all bits associated with the device security. This register is unbanked.
bit 7 |
bit 6 |
bit 5 |
bit 4 |
bit 3 |
bit 2 |
bit 1 |
bit 0 |
KEYEN |
NV6 |
NV5 |
NV4 |
NV3 |
NV2 |
SEC1 |
SEC0 |
KEYEN—Enable backdoor key to security.
1 = backdoor to Flash is enabled.
0 = backdoor to Flash is disabled.
NV[6:2]-Non Volatile Flag Bits.
These 5 bits are available to the user as non-volatile flags.
SEC[1:0]-Memory Security Bits.
The SEC[1:0] bits define the security state of the device as shown
in Security states table:
Security states table
SEC [1:0] |
Description |
00 |
Secured |
01 |
Secured |
10 |
Unsecured |
11 |
Secured |
The Flash security state is defined by the SEC bits of the FSEC register.During reset, the Flash module initializes the FSEC register using data read from the security byte of the Flash configuration field at global address 0x7F_FF0F.
Flash and security byte address
Flash Size |
Description |
32k |
0x7F0F |
64k |
0xFF0F |
128k |
0x1FF0F |
256k |
0x3FF0F |
384k |
0x5FF0F |
512k |
0x7FF0F |
768k |
0xBFF0F |
1024k |
0xFFF0F |
If the byte you want to write FLASH data in the above table for the address is XXXXXX00/ XXXXXX01/ XXXXXX11,then after you have written this data and reset , the microcontroller will encrypt.
12. CG Pro error device is not connected?
Connect CGPro with 12V power supply (it does not have power supply in package, you can use any 12V DC power supply)
Connect CGPro with PC via USB
Run CGPro software