Xhorse VVDI Prog Read MCU MC9S12XEP100 Secured

Xhorse VVDI Prog supports the Motorola MCU MC9S12XEP100 chip. There is a secured and unsecured variant.

Xhorse Vvdi Prog Mc9s12xep100 1

I going to read the secured mcu data.

Xhorse Vvdi Prog Mc9s12xep100 2

The connection diagram shows the cable. Extra connections over BDM.

Xhorse Vvdi Prog Mc9s12xep100 3

Specific pins for the package. Quite helpful.

Xhorse Vvdi Prog Mc9s12xep100 4

No need to lift the pin for EXTAL – I’ll just take the zero Ohm R34 off the board.

I can’t see the ground needing to be immediately next to the EXTAL pin. Bottom of C32 or C33 should do.

BKGD can come off TP25…. Reset off TP26. This might be easy!

Xhorse Vvdi Prog Mc9s12xep100 5

And we’ll smack GND and VCC onto the BDM header on the board.

Xhorse Vvdi Prog Mc9s12xep100 6

Urgh, XCLKS is needed as well… PE7

Xhorse Vvdi Prog Mc9s12xep100 7

Which pops out on one of the Arduino-ish headers. Hoping that isn’t too far away from the chip.

Xhorse Vvdi Prog Mc9s12xep100 8

Then do soldering job. Not too bad on this. XCLKS (green) is on the underside on one of the Arduino headers. Massive long trace. I think that this is just going to signal to the micro that it’s to expect an external clock signal on EXTALS instead of the crystal.

The EXTAL and ground are in a bit of coax and it warns not to shorten them… so it might be getting a bit fruity on that front.

Xhorse Vvdi Prog Mc9s12xep100 9

Looking good. The vvdi prog programmer makes and audible noise when interacting with the micro.

Xhorse Vvdi Prog Mc9s12xep100 10

It clearly asked me if I wanted to bypass security. More audible noise, like cool whine. And there we go… It’s unsecured.

Xhorse Vvdi Prog Mc9s12xep100 11

It works. Flash contents are still there. Nice.

Xhorse Vvdi Prog Mc9s12xep100 13

Allows control of VCC!

Xhorse Vvdi Prog Mc9s12xep100 12

Operation success. Save data.

 

Credit to @cyber gibbons.