kw1281test: A Free VDS-Pro / VagTacho Alternative

[2002_auto_tdi]

Works fine for 56 (Radio). I wonder if VCDS can see 46.

I believe I remember my guru mentioning that he could not see 46 on my 02 Auto TDI using VCDS. I wonder if the way that I am fixing the driver's door switch is doing this...that's the only commonality I can think of. I ran an alarm pin switch to the door light on both. Works fine in every other way.

 

[2002_auto_tdi]

I recently changed door lock options on 46 via VCDS and they worked fine. Something else is up.

 

[2002_auto_tdi]

56 not working....I take it back. 56 makes the radio pop but same cryptic error message. I give up for now. Only 17 shows signs of life.

C:\>kw1281test67 COM5 10400 17 ReadEeprom 0 2048
KW1281Test: Yesterday's diagnostics...Today.

Version 0.67-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 10400 17 ReadEeprom 0 2048
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 6.0.0
Culture: en-US
Opening serial port COM5
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920906L KOMBI+WEGFAHRSP VDO V11
Software Coding 06232, Workshop Code: 01120
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501LL $00 $01
01: $75 $18
02: $09 $05 $01 $0A $0F $37
03: VW/Sk LL Serie Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version VWK501LL 01.00 is 36 3D 3E 47
Sending Custom "Need Seed/Key?" block
Cluster is unlocked for ROM/EEPROM access. Skipping Seed/Key login.
Sending ReadEeprom block (Address: $0000, Count: $01)
Received "Read EEPROM Response" block: 00
Address 0 ($0000): Value 0 ($00)
Sending EndCommunication block

 

[2002_auto_tdi]

So switched USB port ...now COM 6...USB PORT on right closest to screen (just a personal note)

Must specify 9600 for 46 for it to work:

C:\>kw1281test67 COM6 9600 46 ReadEeprom 0 2048
KW1281Test: Yesterday's diagnostics...Today.

Version 0.67-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM6 9600 46 ReadEeprom 0 2048
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 6.0.0
Culture: en-US
Opening serial port COM6
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0959799C 8A Komfortgerat HLO 0003
Software Coding 00258, Workshop Code: 01266
Sending Login block
Sending ReadEeprom block (Address: $0000, Count: $01)
Received "Read EEPROM Response" block: 00
Address 0 ($0000): Value 0 ($00)
Sending EndCommunication block

BUT for 17 to work must specify 10400 WTH?

C:\>kw1281test67 COM6 10400 17 ReadEeprom 0 2048
KW1281Test: Yesterday's diagnostics...Today.

Version 0.67-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM6 10400 17 ReadEeprom 0 2048
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 6.0.0
Culture: en-US
Opening serial port COM6
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920906L KOMBI+WEGFAHRSP VDO V11
Software Coding 06232, Workshop Code: 01120
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501LL $00 $01
01: $75 $18
02: $09 $05 $01 $0A $0F $37
03: VW/Sk LL Serie Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version VWK501LL 01.00 is 36 3D 3E 47
Sending Custom "Need Seed/Key?" block
Cluster is unlocked for ROM/EEPROM access. Skipping Seed/Key login.
Sending ReadEeprom block (Address: $0000, Count: $01)
Received "Read EEPROM Response" block: 00
Address 0 ($0000): Value 0 ($00)
Sending EndCommunication block

 

[2002_auto_tdi]

Closer?

I don't like the Eeprom read failed line at end.

Is this sufficient to start writing you think?

C:\>kw1281test67 COM6 10400 17 ReadEeprom 04352
KW1281Test: Yesterday's diagnostics...Today.

Version 0.67-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM6 10400 17 ReadEeprom 04352
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 6.0.0
Culture: en-US
Opening serial port COM6
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920906L KOMBI+WEGFAHRSP VDO V11
Software Coding 06232, Workshop Code: 01120
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501LL $00 $01
01: $75 $18
02: $09 $05 $01 $0A $0F $37
03: VW/Sk LL Serie Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version VWK501LL 01.00 is 36 3D 3E 47
Sending Custom "Need Seed/Key?" block
Cluster is unlocked for ROM/EEPROM access. Skipping Seed/Key login.
Sending ReadEeprom block (Address: $1100, Count: $01)
EEPROM read failed
Sending EndCommunication block

 

[2002_auto_tdi]

I think that I was tired. Anyways, much closer. Could someone please point out the "value"?

Is it "45"? If so, what is next?

Of note, I must pull the usb end each time I do a read or I get that cryptic error message.

Also of note, 4352, 4353, 4354 all have the same "value" of 45.

Looks like 45 translates to 101101 binary.

C:\>kw1281test67 COM6 9600 46 ReadEeprom 04352
KW1281Test: Yesterday's diagnostics...Today.

Version 0.67-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM6 9600 46 ReadEeprom 04352
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 6.0.0
Culture: en-US
Opening serial port COM6
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0959799C 8A Komfortgerat HLO 0003
Software Coding 00258, Workshop Code: 01266
Sending Login block
Sending ReadEeprom block (Address: $1100, Count: $01)
Received "Read EEPROM Response" block: 2D
Address 4352 ($1100): Value 45 ($2D)
Sending EndCommunication block

 

[2002_auto_tdi]

I changed from 45 to 13 for 52, 53, 54. Hatch appears to be opening with unlock button now.

 

[ekincaid]

I just got here today. Looks like you had a hell of a time. Glad you got it working.

 

[2002_auto_tdi]

I just got here today. Looks like you had a hell of a time. Glad you got it working.

Thanks for this! I am just wondering why the changes on my 03 5 spd Wagon worked on 4352, 4353, and 4354 and I didn't need to touch anything else. I am tempted to mess with the remote windows but I can't think of an example which that would be helpful for...then again, I have noticed a tendency for most people here not to do anything at all for the sake of doing it!

I probably want to run through the whole 9 yards to make sure that nothing is off before calling victory. I see that kennethsime had some trouble and appears to have a wagon like me but went about things at different addresses. It seems like the rear doors have to be unlocked for the hatch to open. Not sure if this is where I want it.

I have to hit the remote unlock button multiple times to get the hatch to open but that is fine with me. I have it programmed to unlock all doors when the key is removed with VCDS.

I think I am in a good spot.

EDIT: Nothing unusual...if the vehicle is in a locked state though and I unlock it with the key fob I have to be FAST to get the hatch open or it relocks (silently) within a few seconds. Not sure if modifying another address value can address this.

 

[Mozambiquer]

Thanks for this! I am just wondering why the changes on my 03 5 spd Wagon worked on 4352, 4353, and 4354 and I didn't need to touch anything else. I am tempted to mess with the remote windows but I can't think of an example which that would be helpful for...then again, I have noticed a tendency for most people here not to do anything at all for the sake of doing it!

I probably want to run through the whole 9 yards to make sure that nothing is off before calling victory. I see that kennethsime had some trouble and appears to have a wagon like me but went about things at different addresses. It seems like the rear doors have to be unlocked for the hatch to open. Not sure if this is where I want it.

I have to hit the remote unlock button multiple times to get the hatch to open but that is fine with me. I have it programmed to unlock all doors when the key is removed with VCDS.

I think I am in a good spot.

EDIT: Nothing unusual...if the vehicle is in a locked state though and I unlock it with the key fob I have to be FAST to get the hatch open or it relocks (silently) within a few seconds. Not sure if modifying another address value can address this.

The wagons are set up differently, I ran through trouble when I did the hatch on my Passat wagon. Finally got it figured out.

 

[2002_auto_tdi]

As an additional data point: It just so happens that I had a 2003 Jetta wagon here today; changed 4361,2,3 from 202 to 195, and 4370,1,2 from 6 to 4 - and I have hatch unlock and fob window-open/close working perfectly.

Hi Nuje,

Do you remember the hatch behavior of the 03 Jetta Wagon when modifying just 4370, 1, and 2?

I modified 4352 - 4354 and it does open with the door lock remote now BUT it is a mad rush to grab at the hatch if the vehicle is locked before it silently relocks. I had already set doors to auto unlock with VCDS so the hatch also now stays unlocked while removing the key along with the doors BUT the mad rush starts if unlocking the hatch via the door lock key on the remote. I am considering taking 4352 - 4354 and setting them back to their default and changing only 4370-4372 instead.

Thanks.

 

[Nuje]

Yes. I did not change anything at 4352,3,4 - my only changes for hatch unlock were at 4370,1,2.

The other change I have done is that I have all doors set to unlock with just ONE press of the unlock button on the key fob (that's a change in coding or adaptations with VCDS).

 

[2002_auto_tdi]

Yes. I did not change anything at 4352,3,4 - my only changes for hatch unlock were at 4370,1,2.

The other change I have done is that I have all doors set to unlock with just ONE press of the unlock button on the key fob (that's a change in coding or adaptations with VCDS).

That is very helpful. Making it so all doors unlock in one swoop is helpful.

Do you by chance remember if the hatch relocks with your changes when unlocked via the fob after the system has been armed?

Thanks.

 

[Nuje]

Yes it does. It basically behaves the same as any of the other doors; e.g., if the passenger door is unlocked, the hatch is unlocked (and stays so). If passenger door is locked, same with hatch.

 

[2002_auto_tdi]

Yes it does. It basically behaves the same as any of the other doors; e.g., if the passenger door is unlocked, the hatch is unlocked (and stays so). If passenger door is locked, same with hatch.

Thanks. So interestingly enough, after disabling selective locking from VCDS as you mentioned, my change at 4361 62 63 works the same way you articulated. I guess maybe either way works.

 

[kennethsime]

I probably want to run through the whole 9 yards to make sure that nothing is off before calling victory. I see that kennethsime had some trouble and appears to have a wagon like me but went about things at different addresses. It seems like the rear doors have to be unlocked for the hatch to open. Not sure if this is where I want it.

Here's my change log so far:

I'm debating going to go back in to enable the single-button unlock of all doors. Easier is better, but also I kind of like the idea of only unlocking my own door. Hmm...

 

[2002_auto_tdi]

Here's my change log so far:

I'm debating going to go back in to enable the single-button unlock of all doors. Easier is better, but also I kind of like the idea of only unlocking my own door. Hmm...

Wow, you are meticulous. I used to be but now make changes at risk. Thanks for laying this out. I will be monitoring how my changes pan out and report back if I notice any glitches.

 

[sebba]

Hello and thank you for your great work.

I tried to run kw1281test.exe v0.71beta in combination with a VAG204 interface (VCDS clone?)
It looks like this:

I tried under W7Pro/x86 and also under W10Pro/x86, where VCDS is working as expected.
Also, I disabled boot in intelligent mode in VCDS, test, save... remove and replug the cable, for booting in dump mode. (not very sure this is the correct procedure to boot dumb mode, also)
After that, when I run kw1281test.exe, doesn't matter if W7 or W10, and doesn't matter what command (GetSKC, DumpEeprom etc) I always have the following errors:

Version 0.71-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19043.0
.NET Version: 6.0.0
Culture: en-US
Opening serial port COM3
Sending wakeup message
Reading sync byte
Retrying wakeup message...
Reading sync byte
Retrying wakeup message...
Reading sync byte
Caught: System.InvalidOperationException Controller did not wake up.
Unhandled exception: System.InvalidOperationException: Controller did not wake up.
   at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 59
   at BitFab.KW1281Test.Program.Kwp1281Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 364
   at BitFab.KW1281Test.Program.GetSkc() in C:\Users\gmeno\src\kw1281test\Program.cs:line 749
   at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 296
   at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 30

The VCP driver is installed and the COM port is 3
I tried also to read software versions for ECU or else, i tried with 10400 and also with 9600, W7 and W10, as I said... nothing works.
The car is an Ibiza 1.2 12v 2006

Any advice is welcome.
Thank you,
Seb

 

[sebba]

The VCP driver is installed and the COM port is 3

I also tried with FTDI VCP drivers. Nothing changed. VCDS still work with FTDI drivers

 

[gmenounos]

It sounds like you configured everything right. Unfortunately I don't have that same cable so I'm not sure why it's working with VCDS but not with kw1281test. The only cables I've successfully tested with are:

• Genuine VCDS KII-USB
• Genuine VCDS HEX-USB+CAN
• A generic blue CH340 USB->KKL cable ( https://www.amazon.com/gp/product/B00K6498D0 )
• A generic FTDI USB->Serial cable ( https://www.amazon.com/gp/product/B07589ZF9X ) connected to a Serial->KKL cable.

If you connect to your cluster with VCDS, does it show the protocol as KW1281 like this?

 

[sebba]

Thanks for reply.
Regarding your question, I don't remember...
I'll check soon and reply.
Thank you

 

[sebba]

Hello again,

I just checked and the protocol is KW1281, indeed

Capture.PNG

• sebba
• Nov 9, 2021

The "intelligent mode" is disabled

Capture2.PNG

• sebba
• Nov 9, 2021

Also, for Engine, the protocol is KWP2000

Capture3.PNG

• sebba
• Nov 9, 2021

Could be a bad clone cable?
Thanks



LE:
Inside, my cable is exactly like this: http://obd2toolz.com/index.php?route=product/product&search=vag 20.4&product_id=2066


LLE:
I checked the cable with "VAGCOM_HWType.exe" and also with "C-Test.exe". It seems my cable is a "functional fake" one

hwtype.PNG

• sebba
• Nov 10, 2021

ctest.PNG

• sebba
• Nov 10, 2021

 

[Rjbiga]

Hi @gmenounos,
Thanks for your efforts on the code. I downloaded v66 to be able to pull my car's SKS. I am not able to locate the SKC. Any help?
Thanks again!



Version 0.66-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 5.0.8
Culture: en-US
Opening serial port COM3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920805E KOMBI+WEGFAHRS. BOO V01
Software Coding 01122, Workshop Code: 00046
Unsupported cluster: 1J0920805E KOMBI+WEGFAHRS. BOO V01
Software Coding 01122, Workshop Code: 00046
Sending EndCommunication block

 

[gmenounos]

ECU: 1J0920805E KOMBI+WEGFAHRS. BOO V01

It looks like your cluster is made by Bosch/Motometer and it's running a software version that I haven't tested before. Can you try the DumpRB8Eeprom command and see if that works?

.\kw1281test.exe COM3 10400 17 DumpRB8Eeprom 66560 1024

 

[Rjbiga]

Have tried as advised. This is what I get
Version 0.66-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 10400 17 DumpRB8Eeprom 66560 1024
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 5.0.8
Culture: en-US
Opening serial port COM3
Sending wakeup message
Reading sync byte
Retrying wakeup message...
Reading sync byte
Retrying wakeup message...
Reading sync byte
Caught: System.InvalidOperationException Controller did not wake up.
Unhandled exception: System.InvalidOperationException: Controller did not wake up.
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 59
at BitFab.KW1281Test.Program.Kwp2000Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 355
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 269
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 25

 

[Rjbiga]

It looks like your cluster is made by Bosch/Motometer and it's running a software version that I haven't tested before. Can you try the DumpRB8Eeprom command and see if that works?

.\kw1281test.exe COM3 10400 17 DumpRB8Eeprom 66560 1024

Also tried this

PS C:\> .\Ross-Tech\kw1281test_066\kw1281test.exe COM3 9600 1 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.66-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 9600 1 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 5.0.8
Culture: en-US
Opening serial port COM3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 038906012M 1,9l R4 EDC 0000SG 2813
Software Coding 00002, Workshop Code: 00046
Sending EndCommunication block
Reading sync byte
Keyword Lsb $6B
Keyword Msb $8F
Protocol is KW 2027 (8N1)
KW Version: 2027
Sent: 82 01 F1 10 89 0D (startDiagnosticSession)
Received: 82 F1 01 50 89 4D (startDiagnosticSession ACK)
Sent: 82 01 F1 10 85 09 (startDiagnosticSession)
Received: 83 F1 01 7F 10 78 7C (startDiagnosticSession NAK reqCorrectlyRcvdRspPending)
Received: 83 F1 01 50 85 2F 79 (startDiagnosticSession ACK)
Sent: 82 01 F1 27 41 DC (securityAccess)
Received: 84 F1 01 67 41 00 00 1E (securityAccess ACK)
Sent: 82 01 F1 27 42 DD (securityAccess)
Received: 83 F1 01 67 42 34 52 (securityAccess ACK)
Sent: 08 34 40 E0 00 00 00 04 40 A0 (requestDownload)
Received: 02 74 FF 75 (requestDownload ACK)
Sent: 00 FF 36 A5 A5 14 E0 00 00 3C E0 00 00 42 E0 00 00 40 E4 00 00 02 47 13 00 00 01 00 02 00 03 00 04 00 05 00 06 00 07 00 08 00 09 00 0A 00 0B 00 0C 00 0D 00 0E 00 0F 80 0F A0 0F C0 0F 00 10 45 2F 7D 64 9B C3 BE 88 4F D8 E6 F0 FE E7 BB 6A 48 61 2D 50 48 62 2D 1F E6 F1 00 E6 F4 41 01 00 47 F4 23 00 2D 1A 47 F4 36 00 2D 1A 47 F4 A2 00 2D 1B 47 F4 A3 00 2D 20 47 F4 A4 00 2D 21 47 F4 A5 00 2D 29 47 F4 A6 00 2D 2A 47 F4 A7 00 2D 2A 47 F4 A8 00 2D 2B BB 31 0D DA CA 00 3C E3 0D D7 CA 00 CC E2 BB 33 0D D3 BB 31 CA 00 82 E2 E7 FE 55 00 BB 63 B7 48 B7 B7 E7 FE 55 00 BB 5E 0D C7 BB 25 CA 00 82 E2 E0 02 F4 41 02 00 F6 F2 B4 FE E7 FE AA 00 0D F3 BB 1A CA 00 AA E3 0D E3 BB 16 BB 67 0D E0 BB 13 CA 00 9C E2 0D DC BB 0F CA 00 AC E2 0D D8 A9 E1 09 E1 0D E1 88 10 88 20 E6 F1 00 E6 2E (transferData)
Received: 01 76 77 (transferData ACK)
Sent: 00 FF 36 E1 14 B9 41 E7 F4 7F 00 0D 08 88 10 88 20 E6 F1 00 E6 E1 14 B9 41 E7 F4 76 00 E4 41 01 00 BB 1C 0D 18 88 10 88 20 88 30 E6 F1 00 E6 BB 28 E0 02 F1 4E F1 6E B9 E1 08 11 BB 2A 48 60 3D 09 B9 E1 01 6E 08 11 A0 02 3D F8 21 6E 41 6E 2D 01 E0 26 98 30 98 20 98 10 CB 00 88 10 88 20 88 30 E6 F1 00 E6 E0 02 A9 41 E1 06 99 E1 01 6E BB 05 A0 02 3D FB F1 E6 BB 01 0D EC F7 FE B0 FE 0D 00 A7 58 A7 A7 9A B7 FC 70 F2 F7 B2 FE 7E B7 CB 00 88 10 E6 F1 FF FF E0 06 A7 58 A7 A7 8A B7 04 70 A0 01 3D FA E0 16 0D 03 F2 F7 B2 FE 7E B7 0D D3 8F E1 8F E0 9F E1 9F E0 BB 66 BB 65 BB 23 E7 FE AC 00 BB 46 BB 32 E1 0E BB 43 BB 2F BB 23 BB 1A E7 FE AD 00 BB 3D BB 29 E0 05 E6 F2 FE 01 E0 75 BB 52 A0 05 3D FD BB 3F BB 2C BB C7 A0 02 3D F7 BB 3A BB C3 9F E0 8F E0 BB 4A 9E E0 BB 48 8E E0 98 (transferData)
Received: 01 76 77 (transferData ACK)
Sent: 00 FF 36 BB 46 0D 08 8F E0 9F E0 BB 42 8E E0 BB 40 9E E0 BB 3E CB 00 8E E0 BB 3B 9F E0 BB 39 8F E0 CB 00 BB 36 9F E0 BB 34 9E E0 CB 00 E0 07 8E E1 BB 2F 9F E0 BB 2D 4A E0 F7 80 9E E0 BB 29 8E E0 8F E1 CB 00 8E E0 BB 24 9F E0 BB 22 9E E0 BB 20 CB 00 88 10 E0 71 5C 87 5C 17 4A 88 E0 18 BB E1 A0 01 3D FA 8E E0 0D 54 88 10 8E E1 E0 71 E0 07 9F E0 BB 0E 5C 17 4A E0 F7 80 9E E0 BB 09 A0 01 3D F7 8F E1 8E E0 0D 44 88 30 E6 F3 00 01 0D 02 88 30 E0 73 A7 58 A7 A7 28 31 48 30 3D FB 98 30 CB 00 BB B1 E6 F7 AC 00 BB D4 BB C0 48 70 3D F9 0D 07 BB A9 E6 F7 AE 00 BB CC BB B8 48 70 3D F9 CA 00 7C E1 BB C6 BB B2 CA 00 7C E1 BB C2 BB AE 0D A2 88 10 88 20 88 30 88 40 E6 F3 00 E6 E0 02 F4 43 02 00 F4 33 03 00 F4 23 04 00 E0 04 A9 83 28 44 7C 14 28 41 08 35 A7 58 A7 A7 99 E3 99 F3 0B (transferData)
Received: 01 76 77 (transferData ACK)
Sent: 00 FF 36 BB 09 08 12 18 20 A0 04 3D F7 98 40 98 30 98 20 98 10 CB 00 88 10 88 70 E6 F1 AA AA E7 FE AA 00 CA 00 22 E4 E6 F1 55 55 E7 FE 55 00 BB 7D E6 F1 AA AA E7 FE A0 00 BB 78 98 70 98 10 BB 7B BB 65 CB 00 88 10 88 20 88 30 88 40 88 50 E6 F3 00 E6 E0 02 F4 43 02 00 F4 33 03 00 F4 23 04 00 E0 04 F4 83 05 00 09 81 B9 83 08 31 E7 FE 36 00 B9 E3 08 31 29 81 BB 0A B9 E3 08 31 08 11 18 20 A0 04 3D F9 CA 00 56 E1 98 50 0D C0 88 10 A7 58 A7 A7 BB 04 66 F1 FF 3F A9 E1 0D BB 88 10 88 20 5C 22 66 F2 FC 00 1C 21 68 13 70 21 F6 F2 00 FE 0D AF 88 10 88 20 88 30 88 70 E6 F3 00 E6 E6 F2 20 00 E6 F1 AA AA E7 FE AA 00 BB 2F E6 F1 55 55 E7 FE 55 00 BB 2A E6 F1 AA AA E7 FE 80 00 BB 25 E6 F1 AA AA E7 FE AA 00 BB 20 E6 F1 55 55 E7 FE 55 00 BB 1B E6 F1 AA AA E7 FE 10 00 BB 16 CA 00 9E (transferData)
Received: 01 76 77 (transferData ACK)
Sent: 00 49 36 82 E2 E7 FE 80 00 BB 02 98 70 0D 81 88 20 88 70 26 F2 18 00 F1 FE 67 FF 80 00 BB B8 67 FE 80 00 41 EF 3D FB 98 70 98 20 CB 00 88 10 BB B7 66 F1 FF 3F B9 E1 0D 05 88 10 BB B1 66 F1 FF 3F B8 71 98 10 CB 00 17 1C E1 E3 02 (transferData)
Received: 01 76 77 (transferData ACK)
Sent: 02 31 02 35 (startRoutineByLocalIdentifier)
Received: 03 7F 31 22 D5 (startRoutineByLocalIdentifier NAK conditionsNotCorrectOrRequestSequenceError)
Sent: 01 A6 A7 (166)
Received: 01 76 77 (transferData ACK)
Saved EEPROM to EDC15_EEPROM.bin
Received: 01 76 77 (transferData ACK)
Sent: 01 A2 A3 (162)
Received: 01 76 77 (transferData ACK)
Reboot successful!
SKC: -00001
Immo is On ($33, $33)

 

[gmenounos]

Also tried this

PS C:\> .\Ross-Tech\kw1281test_066\kw1281test.exe COM3 9600 1 GetSKC

Reboot successful!
SKC: -00001
Immo is On ($33, $33)

I think you have Immo2, which is why the ECU doesn't contain the SKC.

 

[gmenounos]

Have tried as advised. This is what I get
Version 0.66-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 10400 17 DumpRB8Eeprom 66560 1024
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 5.0.8
Culture: en-US
Opening serial port COM3
Sending wakeup message
Reading sync byte
Retrying wakeup message...
Reading sync byte
Retrying wakeup message...
Reading sync byte
Caught: System.InvalidOperationException Controller did not wake up.
Unhandled exception: System.InvalidOperationException: Controller did not wake up.
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte controllerAddress, Boolean evenParity) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 59
at BitFab.KW1281Test.Program.Kwp2000Wakeup(Boolean evenParityWakeup) in C:\Users\gmeno\src\kw1281test\Program.cs:line 355
at BitFab.KW1281Test.Program.Run(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 269
at BitFab.KW1281Test.Program.Main(String[] args) in C:\Users\gmeno\src\kw1281test\Program.cs:line 25

Unfortunately, there's not much I can do since I don't have any "BOO" Bosch/Motometer clusters to test with. It doesn't appear that they were even sold in the USA, so I can't pick up a cheap one from the junkyard or eBay.

You can try VAG EEPROM Programmer: https://www.drive2.com/l/9288217/

 

[Rjbiga]

Thanks for the effort. Am really intrigued by your drive and initiative in all this!
I will try the link and should, hopefully report positive results.

 

[Rjbiga]

Indeed the results are positive. I was able to get my car's SKC using the VAG EEprom Programmer
Really appreciate your help!