topblog Ivoire blogs


Ten steps to read EWS3 0D46J from BMW E39 with Xprog-M

I’d like to show you how to read EWS3 0D46J from BMW E39 using a Xprog-M programmer.


The EWS 3 Immobilizer unit , in the BMW E39 car body, is above the pedals, on the left.


remove it.


take the board out of the case.


The immobilizer is assembled on a Motorola microcontroller with a mask of 0D46J . Read it will be the Xprog-M programmer .


Open the program, go to Device s - Immobilizers - BMW - EWS3 .


looking at the connection diagram.


According to the scheme, connect the programmer Xprog-M to the immobilizer block EWS 3 .


Click the Read button ...


... And the firmware Motorola 0D46J is read.


Job’s done!

More ECU Programmer Info:


6 steps to assemble vvdi be key pro with smart key shell

How to assemble VVDI BE Key Pro imrpoved version with the Smart Key Shell 3 Button for Mercedes Benz?



1. Put the VVDI BE key Pro improved version PCB into the case.




2. Cover the bottom case.



3. Insert the battery and cover the case.


4. Push the metal strips on both sides into the right position.


5. Here rearmetal button.



6.Put into the small key and start button.



If you want to disassemble the case, please do it from the last step to the first step.



Note: If the rear metal component is firstly assembled, then the metal strips on both sides won't be able to put into the right position.




Lishi 2in1 tool picks+decodes Mercedes HU64 lock

Lishi 2 in 1 HU64 Mercedes user manual:

The Mercedes HU64 lock is a straightforward pick and decode process using the lishi 2in1 tool , door locks being far simpler to defeat than boot locks .

The lock is a 10 wafer lock with 5 cut heights referred to as heights 1 to 5 , 1 being the highest lift and 5 being the lowest lift , all 10 cuts are found in the door lock and in the boot lock.



You will notice that the tool has the 10 wafer positions , in 2 rows of 5 , an upper row and a lower row and follows a traditional 1 up and 1 down format . the grid to the right is the cut heights which will be obvious in the decode section of this guide.

There are no proven picking sequences with this lock at present , so its a matter of finding the binding wafer and picking it until bouncing tightly, until all wafers are picked and the lock opens .

The HU64 lock picks easiest in the locking direction and is a double lifter design of tool, and requires the lightest of tension for consistent success .

Excessive tension and overlifting is the most common cause of failure with this lock , the more tension that’s applied the higher the likelyhood of overlifting and the more likelyhood of damage to your tool , so very light tension is required for this tool.

Picking the HU64 lock

Fully insert the Lishi tool into the lock , apply a light tension and move one of the lifters to the first wafer , gently lift the wafer half a mm , if it moves then leave it alone and move on , try the next , any movement in the wafer at all , then leave it alone. When you find a binding wafer, lift until it has free movement again, a tight bounce i refer to as slapping. Every time you find a binding wafer , pick it until it slaps . once all binding wafers are set , the lock will open.

It is not unusual for a set wafer to drop out during the pick process , so expect to find a previously set wafer to bind again even after picking already .

A picture guide of the picking process is below.

Insert the tool fully and apply a light tension


Position 1 is the first to bind and pick


Position 3 is the next to bind and pick


Position 5 is the next to bind and pick


Position 9 is the next to bind and pick


Position 4 is the next to bind and pick


Position 6 is the next to bind and pick


Position 8 is the next to bind and pick


Lock opens


With a light tension and minimal effort, following a basic picking process this lock picks generally in a few minutes, remember a light tension is crucial for continued success.

Decoding the HU64 Lock using the lishi 2 in locksmith tool

As the tool is of the double lifter design , this means that we decode in the same direction as we picked the wafer , so we use the same lifting arm to decode and decode in the same direction as picked.

In order to decode the HU64 lock , the lock must be held in the picked position , so after picking , maintain tension , holding the lock in the picked position , then lift the arm along each numbered line in turn until it comes to a stop, when it stops look along the height line to see the cut height required.

Follow the decode process below.

Position 1 reads as a No 3 cut


Position 2 reads as a No 2 cut


Position 3 reads as a cut No 3


Position 4 reads as No 2 cut


Position 5 reads as a No 2 cut


Position 6 reads as a No 3 cut


Position 7 reads as a No 5 cut


Position 8 reads as a No 5 cut


Position 9 reads as a No 2 cut


Position 10 reads as a No 5 cut


So the key for this lock read from bow to tip as 3232235525

Job’s done with a Lishi 2 in 1 HU64!