Coding procedure for CCM Window Modification

[Nate_Grauvogel]

Partial success...

Windows & sunroof close with the fob and windows open with the fob but the windows do not close automagically with the fob.

I don't think anyone's windows close auto"magically" (i.e. 1-touch)...

BTW What is address 04363 for? Rear hatch? I don't see any difference in the function of the hatch and like I said the windows do not close when closing via fob unless you hold down the close button.

I think I have a related bug with my rear hatch after doing this, so I will be investigating... I have one of the (newer?) cars without a manual release on the hatch.

It used to be that if my hatch didn't pop all the way open on the first try (i.e. the latch would release the first catch, but not the second), I could hit the button again for a 2nd or even 3rd try, or use the switch on the driver's door for the same thing. Now, I have only one shot... if it doesn't release all the way the first time, I have to push the hatch shut again with my palm to get it to pop again.

Later this evening I'll fiddle with the coding to see if I can get the full hatch function back - and to confirm that this mod affected it.

 

[Occams_Razor]

I don't think anyone's windows close auto"magically" (i.e. 1-touch)...

My Jetta will close the windows and sunroof within 30 seconds of pressing the lock button using the KVW100 mod.

I think I have a related bug with my rear hatch after doing this, so I will be investigating... I have one of the (newer?) cars without a manual release on the hatch.

It used to be that if my hatch didn't pop all the way open on the first try (i.e. the latch would release the first catch, but not the second), I could hit the button again for a 2nd or even 3rd try, or use the switch on the driver's door for the same thing. Now, I have only one shot... if it doesn't release all the way the first time, I have to push the hatch shut again with my palm to get it to pop again.

Later this evening I'll fiddle with the coding to see if I can get the full hatch function back - and to confirm that this mod affected it.

Same issue here. 1 shot or you have to close the hatch manually and try again.

BTW My wife was duly impressed, (I guess there is a first time for everything), with the opening and closing of the windows with the fob.

 

[meganuke]

Dieselgti and I tried this again today and it worked. I have a 1C0...C module in my 2003 wagon. The stored values were 202. We changed them to 194 and all is good. The hatch does not unlock automatically. It functions just as it did before.

Thanks for the tip on pulling fuse 14 to reset the CCM.

 

[Nihilator]

Dieselgti and I tried this again today and it worked. I have a 1C0...C module in my 2003 wagon. The stored values were 202. We changed them to 194 and all is good. The hatch does not unlock automatically. It functions just as it did before.

Yeah, that's not something that's *supposed* to change by altering the two or three bytes in the CCM using VDS-PRO. That's a function that the KVW100 performs, but there's no way to perform it manually. Unless, of course, the KVW100's creator is kind enough to share that information with us.

--Chris

 

[Nihilator]

Partial success...

Windows & sunroof close with the fob and windows open with the fob but the windows do not close automagically with the fob.

BTW What is address 04363 for? Rear hatch? I don't see any difference in the function of the hatch and like I said the windows do not close when closing via fob unless you hold down the close button.

The automatic close of the windows is another KVW100 trick. It is not known, currently, how to get that function to work without the KVW100.

Here's a quick theory about the third address: I work a lot with instrument clusters, and I've found that, in the 2048-byte dump from the EEPROM, there are a number of places where the same information is repeated, for no clear reason, three times in a row. For example, if you were to look at your cluster's dump, you'd see the two bytes that spell out your SKC were repeated three times, one after the other. Same thing with the cluster's status (as seen in one of the instrument cluster's measuring blocks..."4" for "new / never adapted" shows up as "04 04 04", and "6" for "adapted / correctly functioning" appears as "06 06 06"). Also, the number of key chip codes as known to the cluster is repeated thrice. Why? I don't know...redundant system?

But it occurs to me that if the three addresses we're supposed to change are one right after another, we may just be changing them for redundancy's sake. It may be that only changing the first one will perform the same function.

--Chris

 

[Occams_Razor]

That means that it would be relatively easy to test by just changing the first address and seeing if you get the same functions.

Or; Do you think the three might be some kind of check digit?

 

[Nihilator]

That means that it would be relatively easy to test by just changing the first address and seeing if you get the same functions.

Or; Do you think the three might be some kind of check digit?

I might do that at some point.

Somebody else, I recall, maybe in this same thread, changed the first two but not the third. Everything worked as fine as it could have. Or maybe it was a different CCM.

--Chris

 

[MOGolf]

I tried 1 but not 2, and I tried 2 but not 1, and found that 1 and 2 had to be changed on GMARK's 04 Jetta or it didn't work.

I also tried the same for my 01 Golf and found it necessary to make all the changes specified for the 'AJ'.

 

[Nate_Grauvogel]

Update for 2-door -C modules (Beetle/Golf)

I think I have a related bug with my rear hatch after doing this, so I will be investigating... I have one of the (newer?) cars without a manual release on the hatch.

It used to be that if my hatch didn't pop all the way open on the first try (i.e. the latch would release the first catch, but not the second), I could hit the button again for a 2nd or even 3rd try, or use the switch on the driver's door for the same thing. Now, I have only one shot... if it doesn't release all the way the first time, I have to push the hatch shut again with my palm to get it to pop again.

Later this evening I'll fiddle with the coding to see if I can get the full hatch function back - and to confirm that this mod affected it.

Well, I didn't get to it as soon as I thought, but here's the result:

I got the normal hatch release operation back by changing the values at addresses 04361-04363 to "194", just like you do for wagons.

Just for clarity, this was a -C CCM in a 2002 NB.

Now, the windows/sunroof work with the remote as expected, and the rear hatch latch stays "open" for a second or two after using the remote or the driver's door switch, and you can release it multiple times if needed without having to manually close the hatch again.

Woot!

 

[Occams_Razor]

Sweet!

Recoded the NB and it works as advertised.

If we could just get the Auto-Close figured out....

 

[vwnumber3]

I have a -C module. I can connect with VDS-PRO and log into the module. But when I try to read an address I get an error. I have coded -AJ modules with the same setup and that works good. I did try pulling the fuse. Any ideas?

 

[Nate_Grauvogel]

Did you remember to log in to the module? ...that was my problem once...

Otherwise - which addresses are you trying to read?

 

[vwnumber3]

I did log in successfully. I was trying to get to 04361, 04362, 04363 to try changing the way my rear hatch works.

 

[Occams_Razor]

Just coded my sister-in-laws 2002.5 VR6 and it works perfectly!

Address OLD NEW
04361 138 130
04362 138 130
04363 138 130

Hold the lock and it closes the doors, windows and sunroof.

Hold the unlock and it opens the doors and windows.

 

[mtltdi]

Just recoded my 2003 Golf with "C" ccm.

Address OLD NEW
04361 138 130
04362 138 130

Works as advertised.

 

[tongsli]

To the TOP

 

[emile]

this worked on my NA 2005 Golf

 

[weasel]

Did anyone ever have success with a key-com ( none posted so far ... ) I have my finger on a "buy it now" button for a KKL cable.

 

[madelgado]

Since all byte are repeated three times, I would not leave the module with two of them modified and not the third... I think that if you put three different values in the three bytes, it will give a configuration error. If two of them are the same, it will assume that configuration.

For 1J0 modules it works more or less the same, but it is not repeated one after the other, but 6 bytes later, this way:

04283 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5
04289 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5
04295 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5

I have seen some configurations posted where there are only 2 bytes modified for the roll-up windows mod... My personal experience says that it should be three; As I say in my first paragraph, it will still work changing only two (4283 and 4289, for instance) but the module will not be fully redundant, so less resistant to any interferience that may alter one bit.

About the auto-roll-up, Mr. szkvw... do the windows roll-up right after a normal door close, or do u have to press a bit longer the close button? I ask because the second option (press longer than normal) would be ideal... otherwise I could never leave the windows open... if you want to share the conf byte and bit number... otherwise it will take to me some time to test this week-end and I will post-it on monday. BTW, I bought a couple of folding mirrors (waiting to come). I will investigate what is the difference between the normal power window motor and folding-enabled PWM... I suspect that it will be small difference ;-) so I suspect that normal PWM is adaptable to FE (folding-enabled) PWM... Anyone tried something like this? TIA!

Once that the FEPWM is working, I will look for the bit to fold/unfold when the car closes/opens.

 

[tongsli]

Miguel,

Did you see the coding for my CCM's?

1J0 959 799 AH 046 Sedan
Memory Address old value new value
04295*** 138/ 64
04283 138 / 64
04289 138 / 2
08628 242 / 246
12724 250 / 254
16820 242 / 246
20916 250 / 254

1J0 959 799 AH 06Q Sedan
Memory Address old value new value
04295*** 72 / 64
04283 72 / 64
04289 72 / 2
08628 242 / 244
12724 250 / 252
16820 242 / 244
20916 250 / 252

 

[Occams_Razor]

do the windows roll-up right after a normal door close, or do u have to press a bit longer the close button?

The way it is supposed to work is that 4 seconds, (early KVW100's) to 1 second, (later KVW100's) the windows will roll up automagically. Mine don't work anymore...

I am really interested in seeing if you can figure out the folding mirrors. It is not a common mod here because of the expense but I am sure that the folks that do have them would like to fold them with the fob but still have control of them from the inside switch.

 

[madelgado]

I will try this week-end the auto-roll-up at close time... no doubts... I am looking for the folding mirrors to investigate, as well as a couple of FE_PWM to play at home and not having to stand in the street ( below 0 Celsius temperature here ;-) ).

About the windows mod, Lito, in the first group of bytes I see this:

04295 138/ 64 <-- 138 is 1000-1010; and 64 is 0100-0000; * NOTE 1:
04283 138 / 64 <-- same as before, but still consistent with previous value
04289 138 / 2 <-- the original value looks good. The new value is different than the others, don't know why... but should be equal to the other new values from my understanding.
08628 242 / 246 <-- 242 is 1111-0010; 246 is 1111-0110; this one looks great. Only one bit altered, necessary to activate the function in the PWM.
12724 250 / 254 <-- 250 is 1111-1010; 254 is 1111-1110; this looks great as well... same bit modified as before... although different decimal value
16820 242 / 246
20916 250 / 254

Note 1: Only the bit in red should be modified... you are altering here up to 4 different functions of your CCM when you only want to change one. It may or may not have impact. An example is the trunk lock... if you let the other bits as they were, no secondary effects should arise. I would suggest to do the binary conversion, then unset (set to 0) the 5th bit (starting on the left) and re-calculate.

To say something like to substract 8 or add 4 is really dangerous, because that statement assumes that the bit is set or unset... It is strongly recommended to work in binary (as a general rule in digital electronics or computing science).

Note 2: The need here is to set (change to 1) the 6th bit.

I have checked all of the configurations posted by Lito in the resource thread and most of them "may" have side effects... for instance this one that I was talking about here... but there are others wich use old: 8/ new: 2... The commong thing among all configurations is that they change at leaset addresses 4283 and 4289 and that they unset (set to 0) in the 5th bit, so windows will roll-up/down with the FOB... Last weekend I coded like 5 or 6 1J0 CCMs with just these rules:

1. Un-set (change to 0) 5th bit on addresses 4283, 4289 and 4295
2. Set (change to 1) 6th bit on addresses 08628 and 12724 and addresses 16820 and 20916 if the car has 4 power windows.

All of them worked 100%... no side effects.. and we extensively tested the trunk and other things... there were Seat Toledo, Seat Leon, Golf IV and Passat 3B (B5). I didn't post anything before because I assume that many people has spent a lot of time trying the posted values...

I am not an expert in this... this is a hobby for me... but I am almost 100% sure of what I am saying is the real thing (which maybe only the Hella engineers know).

Thanks for your patience! Nice brick this time ;-)

 

[tongsli]

Miguel,

The values of the different CCM's at address 04295, 04283 and 04289 & 08628, 12724, 16820, 20916 were as follows:

CCM Without backup horn/siren
138,138,138
242, 250, 242, 250

CCM With backup horn/siren
72,72,72
244, 252, 244, 252


Is there any affect between using 138 vs 72 on the alarm horn?
Is there any affect between using 242 vs 244 on the alarm horn?
Is there any affect between using 250 vs 252 on the alarm horn?

Is there any affect between using BOTH 138 & 242, 250 on the alarm horn?

138 = 1000-1010
72= 0100-1000

242=1111-0010
244=1111-0100
246=1111-0110

thanks,
Lito

 

[BarrieOntGolf]

Crazy Windows

Just got my 2003 Golf TDI 5 days ago. For some reason when the passenger door is opened after the driver door all the windows go down. Can someone tell me what this is all about?

 

[ta79pr]

I have read the all the posts and am one of the early ones to adopt the roll up with key fob modification, but it is not clear to me if all the cars can do the auto roll up when the car is armed, is it just the 2002 and later models?

Just got my 2003 Golf TDI 5 days ago. For some reason when the passenger door is opened after the driver door all the windows go down. Can someone tell me what this is all about?

It sounds like you may have a weak transmitter and the car is registering the intermittant unlock signal as a second one and unlocking the passenger doors. just a guess.

 

[dieselgti]

I have read the all the posts and am one of the early ones to adopt the roll up with key fob modification, but it is not clear to me if all the cars can do the auto roll up when the car is armed, is it just the 2002 and later models?

Yes, you are able to enable roll up/down windows with the earlier MKIV's. I've modified my 2000 GTI and a 1999 Beetle with no problems...

Check out this link for you CCM model...

http://forums.tdiclub.com/showthread.php?t=161339

 

[madelgado]

Since all byte are repeated three times, I would not leave the module with two of them modified and not the third... I think that if you put three different values in the three bytes, it will give a configuration error. If two of them are the same, it will assume that configuration.

For 1J0 modules it works more or less the same, but it is not repeated one after the other, but 6 bytes later, this way:

04283 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5
04289 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5
04295 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5

I have seen some configurations posted where there are only 2 bytes modified for the roll-up windows mod... My personal experience says that it should be three; As I say in my first paragraph, it will still work changing only two (4283 and 4289, for instance) but the module will not be fully redundant, so less resistant to any interferience that may alter one bit.

About the auto-roll-up, Mr. szkvw... do the windows roll-up right after a normal door close, or do u have to press a bit longer the close button? I ask because the second option (press longer than normal) would be ideal... otherwise I could never leave the windows open... if you want to share the conf byte and bit number... otherwise it will take to me some time to test this week-end and I will post-it on monday. BTW, I bought a couple of folding mirrors (waiting to come). I will investigate what is the difference between the normal power window motor and folding-enabled PWM... I suspect that it will be small difference ;-) so I suspect that normal PWM is adaptable to FE (folding-enabled) PWM... Anyone tried something like this? TIA!

Once that the FEPWM is working, I will look for the bit to fold/unfold when the car closes/opens.

Hi, I will correct this post (myself), because there is a small error... most of it is still valid, but not the start address of the sequence. This was possible because I got some 1J0 CCMs from Ray (many thanks!), so that I could compare and realize about my mistake.

The way it is:

04280 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5
04286 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5
04292 conf_byte0 conf_byte1 conf_byte2 conf_byte3 conf_byte4 conf_byte5

Another thing that I've realized is about similarities between 1J0 and 1C0 CCMs. The main difference is the distribution of replicated bytes...

To simplify, we can say that for a 1J0 CCM, the master configuration bytes are:

4280 - conf0
4281 - conf1
4282 - conf2
4283 - conf3
4284 - conf4
4285 - conf5

and for a 1C0 CCM, master conf bytes are:

4352 - conf0
4355 - conf1
4358 - conf2
4361 - conf3
4364 - conf4
4367 - conf5

Well, a common evidence is that the power windows mod is done for 1J0 on address 4283 (conf_byte3) and for 1C0 CCMs, is done at address 4361 (conf_byte3). In both cases, the functionality is activated by substracting 8, which is equivalent to set to 0 the same byte.

About the alarm horn and interior monitoring mod, it is done at address 4285 for a 1J0 CCM and at address 4367 for a 1C0 CCM, and also same bytes and values... isn't it curious? I think that everything that is done for a 1C0 CCM can be implemented on a 1J0 CCM.

Last week end I did not have time to try all combinations and find the f*** bit to enable the one touch roll-up, although I will found some other interesting bits that I will post as soon as I document the address/value pairs. Some of them explain why the trunk opens or why variants have different coding/wiring for the trunk.

I keep on working on this. Merry Christmas and Happy New Year!!!

 

[sk8rdi16]

We are having problems with a 2006 Golf with RC. VDS Pro will not connect at all so not sure of the CCM in there. This worked for me with an '01 Golf '00 Jetta with the 799 AJ. What could be the problem???

 

[jocazeze]

Help needed

Hi
Can you tell me if this will work in a Sharan 1998 MK1 ?

Thanks

 

[Rodrigues]

Heres a good DOS boot disk image that worked for VDS

http://www.espen.se/DOS_CD.zip

CCM 1j0 959 799AJ

This coding procedure varied slightly on the rear windows from other peoples on page 1.

OLD NEW
04283 138 2
04289 138 2
08628 242 246
12724 250 254
16820 242 246
20916 250 254