How to read .BIN through Key101

EPROM EEPROM SRAM NVRAM Flash chips, reading/writing hardware and software
Posts: 6
Joined: Wed Jul 05, 2017 6:14 am

How to read .BIN through Key101

Postby Mykk » Sun Jul 09, 2017 2:24 pm

I've a customers vehicle (BMW E34 540i, similar to my personal car but his is automatic) whom wants to make a few changes to his existing tune (Bosch Motronic M3.3 BMW 404DME) The current aftermarket chip is encrypted and running through an EVC Key 101 28 pin protection module. The chip is a 27c512.

I tried a direct read via Moates Burn2 with and without the Key101, both .BINs turned out gibberish.

I've offered to simply burn him another chip with a performance tune and the changes he wants to make. Yet he was adamant about using this tune from his now 20 year old chip from a tuner no longer in biz.

Anyone know how to get a clean read with this chip & protection module then decrypt the .BIN as so I can make some changes and burn onto new chip?

Thanks for the help.

Posts: 6
Joined: Wed Jul 05, 2017 6:14 am

Re: How to read .BIN through Key101

Postby Mykk » Mon Jul 10, 2017 1:25 am

After some research I've experimented with WinKey using a supplied tuner made .SCR just for this application , to no avail.

One person says they've successfully read tune through Key101 using AVR Micrcontroller, a world I know nothing about.

Another says they've successfully pulled a tune through Key101 using a generic Tl866CS socket to USB interface. I've ordered one to try.

Posts: 6
Joined: Wed Jul 05, 2017 6:14 am

Re: How to read .BIN through Key101

Postby Mykk » Tue Jul 18, 2017 11:15 am

I was able to get a clean, decrypted .BIN that appears to have all the data and maps unjarbled by simply reading the chip through the Key101 using a TL866CS universal programmer and it's supplied MiniPro v6.5 software. I chose the SST 27SF512 chip ID and unchecked the "Erase Before" and "Check ID" options.

While file comparing in HXD to a stock chip read the aftermarket encrypted performance chip has alot of similarities that leads me to believe it has correctly decoded, despite the heavily modified axis headers and tables. The large maps also don't appear to have any bytes swapped or cells that seem out of place.

Tomorrow morning at the shop I will load the "decrypted" file to the chip emulator to see if the vehicle runs like normal.

Site Admin
User avatar
Posts: 4867
Joined: Sat Feb 28, 2009 8:34 pm

Re: How to read .BIN through Key101

Postby antus » Tue Jul 18, 2017 7:28 pm

Thanks for the update!
Have you read the FAQ? For lots of information and links to significant threads see here: viewtopic.php?f=7&t=1396

Posts: 6
Joined: Wed Jul 05, 2017 6:14 am

Re: How to read .BIN through Key101

Postby Mykk » Wed Jul 19, 2017 11:38 pm

Loaded the .BIN read of the encrypted chip & key 101 onto the Moates Ostrich 2.0 chip emulator and the vehicle ran beautifully. I'm confident I can make the wanted adjustments and burn to chip.

Also, on a side note. The Universal TL866CS chip reader/programmer was also capable of erasing/blanking a series of fake SST 27SF512 chips acquired off Ebay. The Moates Burn2 was able to write to the fake chips but unable to erase them once programmed.

Return to Chip/Memcal Reading/Writing

Who is online

Users browsing this forum: No registered users and 1 guest