NEC 78K Doctor

THE LEGEND WEB

THE LEGEND WEB
THE
UserLEGEND
ManualWEB
THE LEGEND WEB

ND
THE LEGEND WEB
for
GE
THE LEGEND WEB
THE LEGEND WEB
LE

NEC
THE 78K Doctor
LEGEND WEB
E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND WEB

THE LEGEND
Overview WEB
THE LEGEND WEB
THE LEGEND WEB
This software and accompanied drivers are intended for strictly personal educational purposes

ND
only and it's use is sole liability of customer. All further consequences of any other possible device
THE LEGEND WEB
commercial or illegal use is subject of user's choice and responsibility.
GE
THE LEGEND WEB
The drivers, provided are original Cypress® inf-file and original Cypress® library files, which
compatibility to Your current operating system is subject of Cypress® technical notes and bulletins.
THE LEGEND WEB
LE

Any further questions of misbehaved CyUSB-library to be forwarded to Cypress® Support Desk.

THE LEGEND WEB

E

Hardware serial number is visible in Windows in “My Computer” /“Properties” / “Hardware” /

“Device Manager” - selecting the device - “Properties” / “Details” / “Device Instance id” and Serial
THE LEGEND WEB
TH

Number (8 digits and / or characters) is shown after VID (Vendor Identifier) and PID (Product
Identifier) of the interface hardware. The method, described above may vary, depending on exact
operation system You are using, but in general is the same. This unique serial number eases
THE LEGEND WEB
identification of Your hardware in manufacturer database, providing You corresponding initial software
and further updates.

THE LEGEND WEB

Hardware contains Lithium battery for backing up the critical data for supporting it's
THE LEGEND WEB
functionality. Do not use / store the device in extreme temperatures or inappropriate humidity or
another operational conditions, as this could lead to big leakage currents, shortening battery life.
Consult Lithium-battery specifications for proper storage, transportation and usage. In any case it is
THE LEGEND WEB
good idea to have device connected and powered by USB port or another external compatible +5V DC
source for prolonging battery lifespan.

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND
How to use WEB
When software starts, if hardware is properly connected, You will see the following
THE LEGEND
(button/labels if not active, this means You did something wrong): WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
LE

THE LEGEND WEB

E

Always mind the exact order of connecting and disconnecting the NEC / interface / PC !

THE LEGEND WEB

Not following that rules might seriously harm any / all components:
TH

1. Solder NEC MCU to adapter board or put it to ZIF-socket (depending on hardware options).

THE LEGEND WEB

2. Plug NEC adapter board to NEC 78K Doctor hardware in proper direction. DO NOT reverse adapter
board !!! The orientation of adapter board should be facing up to the label of NEC 78K Doctor
interface. Also NEC MCU soldered to adapter board should be free of dirt, soldering paste and any

THE LEGEND WEB

other flux, which might interfere with electrical signals. Have the adapter well cleared after soldering,
using Isopropyl alcohol or another suitable cleaning solution. When connecting adapter board, NEC
78K Doctor interface should be disconnected from USB – always mind that !!!

THE LEGEND
3. Connect hardware to available USB port of PC.
WEB
Upon completion of Your work with NEC 78K Doctor disconnect in the reverse order:

THE LEGEND
1. Unplug NEC 78K Doctor hardware from USB port of PC.
2. Disconnect NEC adapter board from NEC 78K Doctor hardware.
WEB
3. Unsolder NEC MCU from adapter board.

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

After that step, You could plug again NEC 78K Doctor interface to USB, even if not used. It's
important for it's battery maintenance to be powered most of the time. Disconnect it from USB when
PC has being switched off to avoid transient power peaks on USB connector power supply when
computer has been powered on.

THE LEGEND WEB

Press “Read” button to check if You did required and above described connection.

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
LE

The data shown is:

THE LEGEND WEB

“Key” - Key number. Any MB has a set of eight keys and this information helps to identify
E

current one from the others in the set. Many car settings of seats, mirrors, steering wheel position and

THE LEGEND WEB

more are matched to this number. Usually car comes with Keys numbered 1 and 2. Any additional
TH

purchase of Keys from MB Dealer provides next numbered Keys. If You are going to make a new Key
for the car it is good practice to start from the last available Key number – i.e. from Key 8 downwards.

THE LEGEND WEB

That leaves the customer possibility to order Dealer Keys, without duplicating them.

“SSID” - hexadecimal representation of MB System Serial Identifier. Identifies key to EIS -

THE LEGEND WEB

Electronic Ignition Switch, ICM - Instrument Cluster Module, CGW - Central Gateway, ESL -
Electronic Steering Lock , ECU - Electronic Control Unit for the engine or transmission modules -
“7G-Tronic” (ETC), ISM, etc... modules, which are related to FBS® (immobilizer) system.

THE LEGEND WEB

“Hashes Counter” - remaining starts counter – it is same as Hashes counter of EIS hashes, and
both decrement together when MB key is inserted into EIS. Initial value is 196607 when MB key is
THE LEGEND WEB
new and decrements when MB key is used. Differences in “Hashes Counter” of EIS and MB key could
occur and this leads to car unable to start if key counter is bigger than EIS hash counter.
Solution is in Your hands and it is simple using NEC 78K Doctor to adjust key counter same or
little lesser then EIS counter!!! For this purpose You should click button “Decrement Hashes
Counter” as many times as You need. Read further for an example. This function emulates inserting

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

key to EIS with all data being exchanged as car does. Do not “play” with this button – if key counter
becomes too lesser than EIS hash counter key will become non operational. There is a margin of 100
counts (in general) which EIS tolerates for difference in “Hashes Counter”.

“Version ROM” - version of software, programmed in NEC MCU.

THE LEGEND WEB
“Key Status” - hexadecimal representation of internal operational state.
Two bytes completes to number of 0x100 (in most common example for Key it is 0x14 +
0xEC=0x100). If that check-sum fails, NEC MCU becomes inoperative. Following is description of
THE
most common Status digits: LEGEND WEB
THE LEGEND WEB
0000 – MB Key is blank (erased state of Key after production).
21DF – MB Key is prepared (Key accepts only encrypted data).
04FC – MB Key is programmed, but not activated.

THE LEGEND
05FB – MB Key is programmed, but not activated.
14EC – MB Key is activated and fully functional. WEB

ND
15EB – MB Key is activated and fully functional.

THE LEGEND
0CF4 – MB Key for service purposes (so called “Grey Key”).
WEB
You could also read internal EEPROM data by clicking “Read” button at bottom corner:
GE
THE LEGEND WEB
THE LEGEND WEB
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

After few seconds (not immediate – it takes time) most important EEPROM values are
displayed. Above screen-shot is showing data read according to the file being programmed previously
to the NEC MCU.
THE LEGEND WEB
In contrary to competition products offered, our EEPROM reading process is not destructive to
NEC MCU and it doesn't changes it's “Key Status”, so no further interventions / re-writing is needed.
THE LEGEND
Just a simple and painless reading process !!! WEB
Information, being read is automatically saved in two of the most popular formats for bin-files,
THE LEGEND WEB
related to MB. File, sized of 512 bytes is for SKC® software and another file, sized 87 bytes is for
server calculations. Two folders are created by software - “read” and “archive”. Inside “read” folder
You will find all NEC MCUs, read by You, saved in above mentioned two formats. Every NEC MCU
file is named by it's unique SSID. So, it is very easy to identify the needed data and process it further.
Every time same NEC MCU is read file is filled with the latest data read, so You do not need to worry

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

about file validity. For tracking any changes of NEC MCU data, second folder “archive” contains all
tries to read any NEC. Files are named by Key unique SSID with added date and hour, so it's very easy
to roll back the data to any specific moment You need it. Also this guarantees that newer files will not
replace the older ones. This “archive” folder could grow with time, so have a look at it regularly and
clean it if not necessary data is contained.
THE LEGEND WEB
After Password and Hash data are read and shown on screen, be sure that You have read
corresponding EIS first and You have all Keys Hashes, numbered from 1 to 8, and also so called
THE LEGEND WEB
“Service Hash” (also called “Dealer Password” or different, depending on people's habit to name it).
All these records (Hashes and SSID) are needed for further calculation of new Key for the car or

THE LEGEND WEB

adapting other modules – in example ESL for W204. Have in mind, that first You should use our IR
Doctor software to read EIS Hashes, which are vital part of Mercedes Benz ® FBS immobilizer system
and You can't use NEC 78K Doctor files only for direct generation of all EIS Keys content. With data

THE LEGEND WEB

read by NEC 78K Doctor for current Key, You can only duplicate that specific Key, but for making
another Key or adapting ESL You should have complete data for car, read from EIS.

ND
THE LEGEND WEB
If You are going to generate and program new Key set for EIS that has no keys at all, then You
just need files from IR Doctor software. To this file You could enter Your own Password, as shown in
IR Doctor User Manual. Generate Keys content with this file and read further how to prepare so called
GE
THE LEGEND WEB
“Grey Key”, which will transfer data from existing EIS to the new (blank) unit. Same “Grey Key” will
convert itself to regular Key after new EIS adaptation is finished!!!

THE LEGEND WEB

You shouldn't bother for files saving, matching, etc... All that is done automatic by both IR
LE

Doctor and NEC 78K Doctor software if they are in same folder. First IR Doctor creates file, named by
EIS SSID and fills it with Hashes data. After You read NEC Key MCU for that EIS, NEC 78K Doctor

THE LEGEND WEB

just inserts Password data in the same file. And ONLY after that You could process the files to SKC®
software or server for generating Keys content. Those steps are important and shouldn't be mistaken if
E

You need complete files for any EIS/Key set.

THE LEGEND WEB

TH

If You just need to read Password / Initial Hash from Key then use NEC 78K Doctor software
only and proceed further with data provided by it.

THE LEGEND WEB

Here are examples of folders / files structure for produced results after reading of a single NEC
MCU and how saved files match to data being programmed to the specific key.

THE LEGEND
That is the content of “read” folder:
WEB
THE LEGEND WEB
THE LEGEND WEB
That is the content of “archive” folder:

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND WEB

THE LEGEND WEB
Note, that archive folder contains files, sized 87 bytes from IR Doctor software and files with
size of 21 bytes, which are produced by NEC 78K Doctor. Below is an example of file from “archive”
THE LEGEND WEB
folder, matching to already programmed data to the Key from file “Key3.bin”– screen-shot from Hex
Workshop is shown two pages above:

THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
LE

If You need to make new Key for the car, using complete data, already read from EIS and from
THE LEGEND WEB
original Key, then proceed further those files and have Your Key set files generated. As mentioned
E

above, You could use only the 512-byte file from IR Doctor if You do not have any key for that car. Just
change 8 bytes EIS Password bytes in that file. You could use either SKC® software or server for
THE LEGEND WEB
TH

generating Keys content. It's up to Your choice and Your habits of working with MB Keys. In most of
the cases files, generated by NEC 78K Doctor software are widely recognized and accepted by vast list
of standalone software and online services. Exit NEC 78K Doctor software, disconnect it from USB
THE LEGEND
and remove adapter board from it to unsolder original NEC MCU. WEB
It is supposed, that You will want to keep that original Key and will not erase it or overwrite it
with another Key data. But if You want to do such to it – for example if You want to change it's Key
THE LEGEND WEB
number, because of corrupted Hash data for current one, then just leave it on board and proceed further.
This might be the case if current Hash data got corrupted either in EIS or some of the others FBS®

THE LEGEND WEB

immobilizer modules – ECU, ESL, ETC, ISM, etc... depending on the model. With data read by IR
Doctor and NEC 78K Doctor You will be able to calculate all 8 Keys set for that car and have the
original Key reprogrammed to different Key Number.

THE LEGEND WEB

But if You want to keep it intact, then solder either blank or another used NEC MCU to adapter
board for writing new Key content to it. Connect the boards and hardware as already described ! Start
NEC 78K Doctor software and if needed erase the new NEC MCU, by clicking “Erase” button.
Operation progress is displayed in “Status” window:

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND WEB
Erasing process begins – please, wait patiently for it to finish – it might take more time to
GE
THE LEGEND WEB
achieve desired “Key Status” for some ROM versions. You could interrupt it at any moment by clicking
“Stop” button. This interruption method is used for any NEC MCU - “Erase” button changes it's
caption to “Stop” and makes it possible to restart the process if needed. Do not worry that You will

THE LEGEND WEB

loose already spent time on erasing – this process is not sequential, so You could interrupt it and
LE

continue it at any convenient moment.

THE LEGEND WEB

In rare cases, erasing process could be destructive to content of EEPROM bytes, responsible for
proper operation of Radio part of Key – remote control. After every erase it is good practice to check
E

that Radio Frequency byte (“RF byte” window) and have it fixed with NEC 78K Doctor. The most

THE LEGEND WEB

common value of “RF byte” is 03, but it may vary, depending on country – 315Mhz is USA standard,
TH

433 MHz is EU standard and there is custom frequency of 512 MHz. For any of these frequencies, RF
byte could be different, but You could check it very easy by reading operational Key, which has

THE
working remote control transmitter.
LEGEND WEB
After erasure is completed, You need to check result by clicking “Read” button – this will give

THE LEGEND WEB

You new values of “Key Status” and “RF byte” and will activate “Write” button. If “RF byte” is not in
order, You should repeat erasure – please, note, that if you first click “Read” then button “Write RF”
will change it's caption to “Erase RF”, so You should use it and proceed with erasing accordingly.

THE LEGEND WEB

THE LEGEND WEB
If value of “RF byte” should be corrected, then software will erase NEC MCU until status
“0000” is achieved when using “Erase RF”. This could take more time than usual erasing process, so
You could stop it any time and continue when is convenient to You – in same manner as with ordinary
“Erase” button. If leaved to finish the task, software will have at some moment Key status erased to
“0000” and will stop. Now You can correct the value to “03” or any other proper value, that You might

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

find work for Your Key and click button “Write RF”. Please, remember to always check with “Read”
after You perform “Erase” or “Erase RF” operation and observe “RF byte”!

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND WEB
ONLY now You could write new Key content to NEC MCU. Do not proceed directly to writing
if You are not sure about Radio Frequency (RF) byte – it might surprise You in unpleasant way if You
GE
skip this important step and You will have to repeat it from beginning if RF Byte is corrupted.
THE LEGEND WEB
Click “Write” button and select desired file. Preliminary information for the Key dump content
will be displayed, showing You “Key Number”, “SSID” and “Hashes Counter”, contained in the file.
THE LEGEND WEB
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
Now You could check the result of writing procedure by clicking “Read”:

THE LEGEND WEB

THE LEGEND WEB

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND WEB
If You want, You could also write “Info Bytes User” and “Info Bytes Extra” bytes. Their writing
GE
THE LEGEND WEB
is possible not only after that step, but at any moment – it's just shown here. For example change their
values from “980864630999” shown above to “010203040506” for “Info Bytes User” and from
“211660280600” to “112233445566” for “Info Bytes Extra” bytes. Fill the corresponding fields with

THE LEGEND
desired data and click the button “Write Info Bytes” below them:
WEB
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB
If the Key Number You just programmed to NEC MCU is “not used” in EIS, then You are done
and could exit the software, disconnect the hardware from USB and unsolder NEC MCU from adapter
board for further soldering back to Key PCB and using in car.

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

But if You programmed Key Number which has it's status “used” in EIS, then You should
activate it first and then decrement it's counter to match the EIS Hashes counter. Click “Activate” -
note that this button could be used only if You load corresponding EEPROM dump for that Key.
Give the software needed time to complete that operation and check it's result, despite the
messages software produces. Check the result by clicking “Read”.
THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
LE

THE LEGEND WEB

Now the “Key Status” has changed from “04FC” to “14EC” and “Hashes Counter” has been
decremented in activation process. In that particular case from 196604 it gets to 196600.
E

THE LEGEND WEB

If You need that counter even less than value displayed, then You should use “Decrease
TH

Counts” button. Click it and it shades – when completed it will be active again.
Decrementing process is time-consuming, because of Hashes reordering in NEC MCU

THE LEGEND WEB

EEPROM, so wait for it to finish. Do not interrupt it! It's important for EEPROM integrity this process
to finish correct! Software will give You new “Hashes Counter” value:

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
As mentioned above, You can program with NEC 78K Doctor not only regular Key, but also
“Grey Key” for adapting new (blank) EIS and also “Green Key” for programming spare part EIS
(replacement for specific car). In fact “Grey Key” is regular car Key, programmed with double data –

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

for key itself and for EIS. After it transfers EIS data to new (blank) unit, it converts to regular Key,
according to Key file programmed to it. In situation in which car has no keys at all – either Keys are
lost or stolen, You need to read first EIS with IR Doctor. After using this data You should generate Keys
content with SKC® software or other available online or offline solutions.

THE LEGEND WEB

With all files prepared, You could replace existing EIS with another blank (new) EIS unit. To
transfer data read from old one to the new EIS, You should prepare the “Grey Key”. It is same way the
Mercedes® factory personalizes EIS units - they are mounted in car with empty EEPROM and for each
THE LEGEND WEB
car exists set with two Keys – one has status 04FC and the other has status 0CF4. On newer Keys sets
first Key with regular status 04FC has black bezel for key-chain, while the second one has grey bezel.

THE LEGEND WEB

Exactly for this reason Key is called “Grey Key”. It contains data for all Keys hashes and also
Password and Serial Number of EIS. When You insert “Grey Key” in new EIS, all this data is
transferred and after successful completion of EIS learning procedure, “Grey Key” changes it's status to

THE LEGEND
04FC. So, after You unplug it from EIS You could use it as regular Key.
WEB

ND
Just note, that if You are preparing Key set of two or more keys for car, that has no keys at all,

THE LEGEND
ONLY one of the keys in the set should be prepared as “Grey Key”!
WEB
Other Keys should be programmed in normal way as regular Keys !!!
GE
THE LEGEND WEB
And the first key to insert in new EIS should be the “Grey Key” !!!

THE LEGEND WEB

To prepare “Grey Key” You need erased NEC, to which You will program Key and EIS data:
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB
Button “Write Grey Key” is activated only if Key is erased and possible to program!

Click “Write Grey Key” button and You should select file, that contains Key data first – that is

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

file, generated by SKC® software or other available online or offline solutions:

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
Data from Key file selected – SSID, Key Number, Hashes Counter from this file are shown on
LE

screen and immediately opens another window for selecting file, that contains EIS data – same file You
used to generate Keys:

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB
Additional data for EIS – Key Hashes and Serial Number from this file are shown on screen,

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

along with Original Hash and Password from Key file. If both files have different SSID (i.e. if You
choose not matching files by mistake) software will inform You and writing process will not begin.

If files selected are matching then programming starts and software informs You for progress :

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
THE LEGEND WEB
If You press “Read” button all information from “Grey Key” will be displayed:
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND
You can put it now into blank (new) EIS and personalize it !!! WEB
In similar way, as described per “Grey Key”, could be programmed and “Green Key”.

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

You need to open the second window of software by double-clicking on the image of EIS.
When screen opens, You will notice on the same position where is “Write Grey Key” button of the first
screen, here is located “Write Green Key” button:

THE LEGEND WEB

THE LEGEND WEB
THE LEGEND WEB
THE LEGEND WEB

ND
THE LEGEND GE WEB
THE LEGEND WEB
You select same files in same order as per “Grey Key”, but here also You should provide VIN of the car

THE LEGEND WEB

and “Green Key”-password for that specific car. As already mentioned, “Green Key” has for very
LE

specific purpose to program “replacement” or so called “spare” EIS, which comes from factory with
initialized data and has status “Spare” in contrary to “Series” EIS units, for which You use “Grey Key”.

THE LEGEND WEB

On this second screen also, You could find more information fields about Key operational status
E

and various buttons for performing standard and customs test of Key operational conditions.

THE LEGEND WEB

TH

“RF MHz” - shows frequency of key transmitter for various markets – 315 Mhz is for USA and
Japan, 433 MHz for Europe and most of the world and also exists custom 512 MHz. This field is

THE LEGEND WEB

correct only if Key is being read via IR. When using adapter board it produces false readings. It is
important Key to be assembled correct in enclosure to have correct reading of this value.

THE LEGEND WEB

“RF 1” - shows transmitter adjusting byte in NEC key. If there is not functioning radio if Key is
aftermarket the reason is most probably corrupted RF byte after erasing and programming new dump to
key. It is good practice to read and fix this RF byte before programming new key content to erased

THE LEGEND WEB

NEC MCU. Correct “RF byte” should be „03“. RF byte is only possible to write if NEC Key Status is
„0000“. Read further how to erase Key Status to „0000“ if needed.

THE LEGEND WEB

“RF 2”, “RF3” - additional transmitter adjusting bytes in NEC keys. These has different values,
depending on ROM version, so no advised bytes are present for these fields.

“Battery” - shows in percents the remaining capacity of battery.

Here is how they look for very popular NEC (EU market) Key:

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

THE LEGEND WEB

If You just “played” with previous described function for preparing “Grey Key” just for the idea
THE LEGEND WEB
to see how it is made, You do not need to erase again that NEC MCU to use it like ordinary key. Just
click the button “Convert “Grey” Key to Normal” and any such “0CF4” key will be reverted to normal
“04FC” status. But if the “Grey” Key You are going to convert to normal is not prepared by You, then
THE LEGEND
be sure You read and save it's data as was described above! WEB
Reading, erasing and writing is possible for so called “non-OEM” keys, which allow this to
THE LEGEND WEB
happens via IR, without disassembling them and without any intervention to NEC MCU inside them.

ND
Use the appropriate buttons for any desired function. EEPROM file format, used for these keys in most
of the cases is “051” with length of 160 bytes. When writing such file to non-OEM key, it becomes
THE LEGEND WEB
effective for it immediately and key will behave accordingly to status bytes in the “051”-file, located at
addresses 0x9E, 0x9F:
GE
THE LEGEND WEB
THE LEGEND WEB
LE

THE LEGEND WEB

E

THE LEGEND WEB

TH

THE LEGEND WEB

THE LEGEND WEB
Have in mind, that non-OEM keys have these very convenient functions for EEPROM
THE LEGEND WEB
modification, but they lack some of testing and information functions, so not all fields of software will
have meaningful values when used with non-OEM key.

THE LEGEND WEB

In example, on this second screen, You have some basic test functions for performing IR LED
(Infra Red Light Emitting Diode) tests, radio transmitting part tests in various modes, etc... and most of
these functions are not implemented in non-OEM keys, so do not blaim software for not be able to
perform few of the tasks.
“Red LED ON” - lights the LED of Key, which is located in top narrow part of key enclosure,

WWW. THELEGENDWEB .COM NEC 78K Doctor

 NEC 78K Doctor

near the “Lock” button. This function, not only tests the LED itself, but is evidence that Key accepts
commands and it's inductor-powered part and IR receiver are working properly.

“IR LED ON” - lights the IR LED of Key, which transmits information to EIS in continuous
emitting mode. It is specific tests, to be performed by trained technical staff only.
THE LEGEND WEB
“IR LED CL” - lights the IR LED of Key, which transmits information to EIS in “Central Lock”
emitting mode. It is specific tests, to be performed by trained technical staff only.
THE LEGEND WEB
*** Keeping IR LED excessive time in testing mode could be dangerous to it. In “CL” mode IR

THE LEGEND WEB

LED emits 20 times more energy than in normal mode and this could cause not-desired side effects.
Performing test commands to key just puts it in that test mode. Further steps for estimating of IR LED
emitting power and corresponding MCU pins functionality is technical staff responsibility.

THE LEGEND WEB

“RF ON CL” - puts the Radio Transmitter of Key in “Central Lock” emitting mode. It is

ND
specific tests, to be performed by trained technical staff only.

THE LEGEND WEB

“RF ON “3”” - puts the Radio Transmitter of Key in “Mode 3” emitting mode. It is specific
tests, to be performed by trained technical staff only.
GE
THE LEGEND WEB
“RF ON “4”” - puts the Radio Transmitter of Key in “Mode 4” emitting mode. It is specific
tests, to be performed by trained technical staff only.

THE LEGEND WEB

LE

*** The above 3 test commands for RF part of key, are very useful for testing radio part
(Remote Control) if You have any kind of spectrum analyzer or oscilloscope or other radio-measuring

THE LEGEND WEB

equipment. You could observe the shape of radio-signals and measure it's parameters in different modes
- “CL”, “3” or “4”. In CL mode key emits sequence of bytes, in modes “3” and ”4” key emits non-
E

modulated radio carrier frequency with different parameters. For Motorola keys it happens immediately

THE LEGEND WEB

after sending command. For NEC keys after sending command LED lights and You should press a
TH

button to activate radio transmission. As we commented before, it is very common failure the non-
operative Remote Control. With our software You have the ability to test both software and hardware

THE LEGEND WEB

part of RF. You could read the “RF”-bytes and if their values are OK, then You could perform above
tests on hardware.

THE LEGEND WEB

“Power ON” - turning on the inductor of MB Doctor interface. This way You could check if
inductive coil inside the Motorola / NEC key is operative or defective. Click “Power ON” button and
measure voltage on the inductor. Also, sometimes happens key to stop respond to IR commands. If You
THE LEGEND WEB
put it in powered mode and keep it for some time, key has enough time to re-calculate internal
EEPROM content and could start normal responding to commands.

THE LEGEND WEB

“Power OFF” - turning off the inductor of MB Doctor interface. Cancels all above tests modes!

Enjoy it !!!

WWW. THELEGENDWEB .COM NEC 78K Doctor