How to use Xprog to read BMW EWS3 2D47J mask
It is a BMW E38 year 1997 with EWS3 immobilizer. So, 1997, e38, as I understood there M52 with 1 VANOS.
We are going to read the great and terrible MC68HC11EA9 with a 2D47J mask.
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-1.jpg?w=150 150w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-1.jpg?w=300 300w" sizes="(max-width: 600px) 100vw, 600px" /> 
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-2.jpg?w=84 84w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-2.jpg?w=168 168w" sizes="(max-width: 600px) 100vw, 600px" />
The car does not start.
When connected to the immo, I immediately got a very fast heating of the ELMOS chip on the board, up to 60 degrees and above (as indicated by the laser thermometer), and naturally the unit does not react to the key with the key, just as the indicator LED does not indicate that the unit is connected , well, in short, a 100% corpse.
Since the processor is encrypted, and the machine is far away, and you can not dump the dump, so first I try to get by with small blood and reanimate the board, namely, to change the often failing, the aforementioned, microcircuit.
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-3.jpg?w=150 150w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-3.jpg?w=300 300w" sizes="(max-width: 600px) 100vw, 600px" />
She did not give a substitute for the results. The same heat. Which means only one thing – the end card, and then we have two ways – either to transplant the processor to a live board, or to read the dump and fill it into the normal and secure EWS3 block with the 0D46J processor mask, which I did.
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-4.jpg?w=84 84w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-4.jpg?w=168 168w" sizes="(max-width: 600px) 100vw, 600px" />
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-5.jpg?w=84 84w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-5.jpg?w=169 169w" sizes="(max-width: 600px) 100vw, 600px" />
Read data with Xprog v5.55 box programmer
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-6.jpg?w=84 84w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-6.jpg?w=169 169w" sizes="(max-width: 600px) 100vw, 600px" />
All successfully read
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-7.jpg?w=150 150w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-7.jpg?w=300 300w" sizes="(max-width: 600px) 100vw, 600px" />
General view of the scope of work
https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-8.jpg?w=150 150w, https://eobd21.files.wordpress.com/2018/01/bmw-ews3-2d47j-8.jpg?w=300 300w" sizes="(max-width: 600px) 100vw, 600px" />
On the BMW EWS3 EWS4 test platform, the unit was seen, the key was identified, the relay worked.
Today I was informed that after the EWS-DME synchronization the car successfully left the service station on its own.
http://www.obdii365.com/producttags/xprog.html
