kw1281test: A Free VDS-Pro / VagTacho Alternative

gmenounos · Dec 10, 2023

Unholysinz said:
what year did they start including the immobilizers on these cars. mine is a 2000 vw jetta. i broke my key and im waiting on getting my new one. the dealer is telling me they need to reprogram it.

2000 Jettas use Immo2. Looking at the log you posted, the SKC looks correct.

Limitedblack · Dec 15, 2023

A big thanks for this code, Successfully read SKC code from a BOO V01. Mastered the basics of correct com & baud, then let it do its thing. Note I had to change the laptop settings not to go into sleep mode, as it took 45 minutes. I have sent you a donation gmenounos via PayPal, with some of the data. Hope this helps. No other readers could connect to this cluster for reading the code.

fatmobile · Dec 18, 2023

I've learned a lot messing with this.
Didn't even know what a command prompt was. I tried to get this running and got this problem:

Screenshot 2023-12-18 130331 by vwfatmobile, on Flickr
Found the port properties: port3, on Ross-Tech Direct USB Interface with VCP so I got it into VCP mode.
it says it won't wake up.

If I try it with ross tech running I get: Caught: System.UnauthorizedAccessException Access to the path 'COM3' is denied.

vcp with rosstech on by vwfatmobile, on Flickr

I have the SKC on a tab in the book that came with the car and I used it to get a new key made.
Now I found the old key and want it to work too.
When using ross tech I put the SKC in the login window I get: "login code not accepted by controller"

Thank you so much for building this cutting-edge tool.
I'm feel like I'm close to getting this working with my KII usb dongle and windows 10 64 bit laptop

gmenounos · Dec 19, 2023

fatmobile said:
I've learned a lot messing with this.
Didn't even know what a command prompt was. I tried to get this running and got this problem:

Screenshot 2023-12-18 130331 by vwfatmobile, on Flickr
Found the port properties: port3, on Ross-Tech Direct USB Interface with VCP so I got it into VCP mode.
it says it won't wake up.

If I try it with ross tech running I get: Caught: System.UnauthorizedAccessException Access to the path 'COM3' is denied.
vcp with rosstech on by vwfatmobile, on Flickr

I have the SKC on a tab in the book that came with the car and I used it to get a new key made.
Now I found the old key and want it to work too.
When using ross tech I put the SKC in the login window I get: "login code not accepted by controller"

Thank you so much for building this cutting-edge tool.
I'm feel like I'm close to getting this working with my KII usb dongle and windows 10 64 bit laptop

There's one more thing you need to do when using a genuine VCDS cable. You need to uncheck the "Boot in Intelligent Mode" setting as described here: https://forums.tdiclub.com/index.ph...tacho-alternative.509151/page-12#post-5638868

ispytj · Dec 21, 2023

@gmenounos Hi there! I just want to say the KW1281 test you have created is an amazing open source tool! Quick question! I am trying to retrieve my SKC code from my 2004 Jetta but am getting an error. The cable I am using (VAG-COM KKL 409.1 Cable) is being recognized on port COM3. The car ignition is in the on position. I am using both of the following commands on a Windows 11 computer:

kw1281test COM3 9600 17 GetSKC
kw1281test COM3 10400 17 GetSKC

Here is the output along with the error I am receiving (Using 10400 for BAUD):

C:\Users\tjpad\OneDrive\Documents\Tyler's Docs\VW GLI>kw1281test COM3 10400 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port COM3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Caught: System.InvalidOperationException Received block end $20 but expected $03
Unhandled exception: System.InvalidOperationException: Received block end $20 but expected $03
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 392
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 39
at BitFab.KW1281Test.Tester.GetSkc() in C:\Users\gmeno\src\kw1281test\Tester.cs:line 518
at BitFab.KW1281Test.Program.Run(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 253
at BitFab.KW1281Test.Program.Main(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 29

Here is the output along with the error I am receiving (Using 9600 for BAUD):

C:\Users\tjpad\OneDrive\Documents\Tyler's Docs\VW GLI>kw1281test COM3 9600 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port COM3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Caught: System.InvalidOperationException Unexpected sync byte: Expected $55, Actual $95
Unhandled exception: System.InvalidOperationException: Unexpected sync byte: Expected $55, Actual $95
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte, Boolean) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 76
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 32
at BitFab.KW1281Test.Tester.GetSkc() in C:\Users\gmeno\src\kw1281test\Tester.cs:line 518
at BitFab.KW1281Test.Program.Run(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 253
at BitFab.KW1281Test.Program.Main(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 29

What would be the cause of this error? Any insight is appreciated!

ispytj · Dec 21, 2023

ispytj said:
@gmenounos Hi there! I just want to say the KW1281 test you have created is an amazing open source tool! Quick question! I am trying to retrieve my SKC code from my 2004 Jetta but am getting an error. The cable I am using (VAG-COM KKL 409.1 Cable) is being recognized on port COM3. The car ignition is in the on position. I am using both of the following commands on a Windows 11 computer:

kw1281test COM3 9600 17 GetSKC
kw1281test COM3 10400 17 GetSKC

Here is the output along with the error I am receiving (Using 10400 for BAUD):

C:\Users\tjpad\OneDrive\Documents\Tyler's Docs\VW GLI>kw1281test COM3 10400 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port COM3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Caught: System.InvalidOperationException Received block end $20 but expected $03
Unhandled exception: System.InvalidOperationException: Received block end $20 but expected $03
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 392
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in C:\Users\gmeno\src\kw1281test\KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 39
at BitFab.KW1281Test.Tester.GetSkc() in C:\Users\gmeno\src\kw1281test\Tester.cs:line 518
at BitFab.KW1281Test.Program.Run(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 253
at BitFab.KW1281Test.Program.Main(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 29

Here is the output along with the error I am receiving (Using 9600 for BAUD):

C:\Users\tjpad\OneDrive\Documents\Tyler's Docs\VW GLI>kw1281test COM3 9600 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM3 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port COM3
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Caught: System.InvalidOperationException Unexpected sync byte: Expected $55, Actual $95
Unhandled exception: System.InvalidOperationException: Unexpected sync byte: Expected $55, Actual $95
at BitFab.KW1281Test.KwpCommon.WakeUp(Byte, Boolean) in C:\Users\gmeno\src\kw1281test\KwpCommon.cs:line 76
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in C:\Users\gmeno\src\kw1281test\Tester.cs:line 32
at BitFab.KW1281Test.Tester.GetSkc() in C:\Users\gmeno\src\kw1281test\Tester.cs:line 518
at BitFab.KW1281Test.Program.Run(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 253
at BitFab.KW1281Test.Program.Main(String[]) in C:\Users\gmeno\src\kw1281test\Program.cs:line 29

What would be the cause of this error? Any insight is appreciated!

UPDATE: Hey @gmenounos , I used the same command with version 0.85 and I was able to pull the SKC successfully. Seems like the latest version 0.86 is throwing the above error I posted. Just wanted to let you know.

fatmobile · Dec 27, 2023

Where I am supposed to see "boot in intelligent mode", I see Force Dumb Mode:

vcp boot intelligent mode by vwfatmobile, on Flickr

And it isn't checked.

gmenounos · Dec 28, 2023

fatmobile said:
Where I am supposed to see "boot in intelligent mode", I see Force Dumb Mode:

And it isn't checked.

Try checking "Force Dumb Mode", Test and Save. Then unplug the VCDS cable from the laptop and plug it back in. Then try kw1281test and hopefully it'll work.

79TA7.6 · Dec 30, 2023

I want to thank Greg for developing this tool. As many others have said, this has proven to be extremely useful. I already pulled the SKC and saved it for future use. I have owned the car for 14 years and have only ever had one key, always wanted to get a second, but the dealer prices always held me back.

Anyway, my 2003 Jetta TDI has some serious transmission issues. I took the trans out, tore it apart, put it back together thinking I solved the issue. Somehow I ended up destroying the speedo gear inside. I have been running the car for the last 3 years, 70k+ miles, with no speedometer or odometer working. I have been driving from the RPM, which is getting old. I am wanting to convert my cluster to be able to read from the ABS instead of the stock speedo gear. Can someone walk me through how to do this, step by step? I am not good at running Command Prompt commands.

I would also like to run my miles up to about where they should be so I am closer for when I need to do my timing belt, but I totally understand if someone does not want to run through changing the odometer reading as stupid people might do stupid and illegal things with that. Odometer died at 375k but I should be close to 450k now.

Edit: Should also mention that VCDS Cable KEY-USB works for this too. I seen lots of mention for KII-USB, but do not remember if I saw KEY-USB.

gmenounos · Jan 2, 2024

ispytj said:
UPDATE: Hey @gmenounos , I used the same command with version 0.85 and I was able to pull the SKC successfully. Seems like the latest version 0.86 is throwing the above error I posted. Just wanted to let you know.

This seems to be timing related, maybe caused by the .NET 8 upgrade in 0.86. Can you check whether this new release works better?

fatmobile · Jan 5, 2024

I got it to work. Got the SKC code for a guys car.
I've never messed with Command prompts before so one thing I didn't understand:
"CD to the folder containing kw1281test.exe"

That means type cd after the prompt and a space.
Then I was able to go to the folder and drag the folder and file into the space after that.
but all it wants is the folder so I deleted the "kw1281test.exe"

The next prompt wants the whole thing "kw1281test.exe COM3 (<in my case) 10400 17 getSKC"

kw1281 test how to by vwfatmobile, on Flickr

fatmobile · Jan 5, 2024

Am I supposed to go to options and put a check back by boot in intelligent mode to use VCDS like normal?

gmenounos · Jan 8, 2024

fatmobile said:
Am I supposed to go to options and put a check back by boot in intelligent mode to use VCDS like normal?

The cable will probably work a little better with VCDS if you do that once you're done with kw1281test.

Probubble01 · Jan 13, 2024

I came across your forum but im not sure what im doing wrong.

so im trying to get my SKC for my2003 audi A4 B6

i had bought the wire you posted a link from amazon. But installing thise drivers didnt seem to work but i got it to show the port. Doesnt work on vdcs or vag com says theres no interface but idk if that matters. The wire came with a disc im not aure how you set up your wire.
Could you guide me

Mozambiquer · Jan 14, 2024

Probubble01 said:
I came across your forum but im not sure what im doing wrong.

so im trying to get my SKC for my2003 audi A4 B6

i had bought the wire you posted a link from amazon. But installing thise drivers didnt seem to work but i got it to show the port. Doesnt work on vdcs or vag com says theres no interface but idk if that matters. The wire came with a disc im not aure how you set up your wire.
Could you guide me

B6 is different, I'm pretty sure.

gmenounos · Jan 14, 2024

Probubble01 said:
I came across your forum but im not sure what im doing wrong.

so im trying to get my SKC for my2003 audi A4 B6

i had bought the wire you posted a link from amazon. But installing thise drivers didnt seem to work but i got it to show the port. Doesnt work on vdcs or vag com says theres no interface but idk if that matters. The wire came with a disc im not aure how you set up your wire.
Could you guide me

Your car has a Bosch RB4 cluster so you need to open a command prompt, CD to the folder with kw1281test.exe and run the following commands (replace COM1 with whatever port your cable is using):

Code:

kw1281test.exe COM1 10400 17 ToggleRB4Mode
kw1281test.exe COM1 10400 17 GetSKC
kw1281test.exe COM1 10400 17 ToggleRB4Mode

Those command reportedly worked for someone else: https://forums.tdiclub.com/index.ph...tacho-alternative.509151/page-43#post-5806065

The deal with RB4 clusters is that the EEPROM is encrypted (i.e. cluster is in "Adapted Mode"), so first the cluster needs to be changed to "New Mode" which allows dumping the unencrypted EEPROM. Then the GetSKC command is run to read the unencrypted EEPROM and decode the SKC. Finally the cluster needs to be switch back to "Adapted Mode".

Importsumlimited · Jan 16, 2024

i came across your forum today not sure if im on the right track here but im tring to get the skc for an 05 audi s4 out of a new (used) ecu not sure if im looking in the right place heres what comes up when i run the program

C:\Users\fasta>.\kw1281test.exe COM5 9600 1 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.88-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 9600 1 GetSKC
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port COM5
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $EF
Keyword Msb $8F
Protocol is KW 2031 (8N1)
KW Version: 2031
Sent: 82 01 F1 10 89 0D (startDiagnosticSession)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 36
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 105
at BitFab.KW1281Test.KW2000Dialog.ReceiveMessage() in /Users/gmenounos/src/kw1281test/Kwp2000/KW2000Dialog.cs:line 199
at BitFab.KW1281Test.KW2000Dialog.SendReceive(DiagnosticService, Byte[], Boolean ) in /Users/gmenounos/src/kw1281test/Kwp2000/KW2000Dialog.cs:line 122
at BitFab.KW1281Test.EDC15.Edc15VM.DumpEeprom(String) in /Users/gmenounos/src/kw1281test/EDC15/Edc15VM.cs:line 17
at BitFab.KW1281Test.Tester.DumpEdc15Eeprom(String ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 366
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 634
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 253
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 29

if you need any more info let me know i really appreciate your help trying to get these codes from audi is a nightmare an i really respect your hard work thank you

gmenounos · Jan 16, 2024

Importsumlimited said:
i came across your forum today not sure if im on the right track here but im tring to get the skc for an 05 audi s4 out of a new (used) ecu not sure if im looking in the right place heres what comes up when i run the program

C:\Users\fasta>.\kw1281test.exe COM5 9600 1 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.88-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM5 9600 1 GetSKC
OSVersion: Microsoft Windows NT 10.0.22621.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port COM5
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $EF
Keyword Msb $8F
Protocol is KW 2031 (8N1)
KW Version: 2031
Sent: 82 01 F1 10 89 0D (startDiagnosticSession)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 36
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 105
at BitFab.KW1281Test.KW2000Dialog.ReceiveMessage() in /Users/gmenounos/src/kw1281test/Kwp2000/KW2000Dialog.cs:line 199
at BitFab.KW1281Test.KW2000Dialog.SendReceive(DiagnosticService, Byte[], Boolean ) in /Users/gmenounos/src/kw1281test/Kwp2000/KW2000Dialog.cs:line 122
at BitFab.KW1281Test.EDC15.Edc15VM.DumpEeprom(String) in /Users/gmenounos/src/kw1281test/EDC15/Edc15VM.cs:line 17
at BitFab.KW1281Test.Tester.DumpEdc15Eeprom(String ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 366
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 634
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 253
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 29

if you need any more info let me know i really appreciate your help trying to get these codes from audi is a nightmare an i really respect your hard work thank you

Sorry, kw1281test can't pull the SKC from an Audi S4 ECU. It only works with VW TDI ECUs and many VW/Audi clusters.

Importsumlimited · Jan 17, 2024

for sure thank you anyways for not only the quick reply but all your hard work with the program even though i could get what i needed i still feel like i learned a lot playing around with it great work!

gmenounos · Jan 22, 2024

New release supports writing to the EDC15 EEPROM using the WriteEdc15Eeprom command: https://github.com/gmenounos/kw1281test/releases/tag/v0.91-beta

Code:

WriteEdc15Eeprom ADDRESS1 VALUE1 [ADDRESS2 VALUE2 ... ADDRESSn VALUEn]
            ADDRESS = EEPROM address in decimal (0-511) or hex ($00-$1FF)
            VALUE = Value to be stored at address in decimal (0-255) or hex ($00-$FF)

For example (EDC15 Immobilizer Off):

.\kw1281test.exe com1 9600 1 WriteEdc15Eeprom 0x1B0 0x60 0x1DE 0x60

If anything goes wrong during the writing process, you'll probably need to disconnect your battery for a minute to reset the ECU. A backup copy of the entire EEPROM will be created just before writing the new values.

Keep in mind this is the EEPROM, not the flash, so you can't upload a tune this way. Also, know that this could brick your ECU if something goes wrong.

gmenounos · Jan 28, 2024

New release supports VW Polo 6N and Skoda Fabia 6Y clusters: https://github.com/gmenounos/kw1281test/releases/tag/v0.92-beta
@imaginifer @ChronoX @himtan Can you please try the latest version and see if it can retrieve your SKC?

79TA7.6 · Jan 29, 2024

I am neding to change my speedometer from looking at the VSS value to looking at the ABS value. Would this be correct: c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 ReadEeprom 0x065 to read what this value is? If so, then do I use the WriteEeprom function then the new specified value to update it?

Trying to understand how to use command prompt with this KW1281test tool.

Should mention this would be used on my 2003 Jetta

gmenounos · Jan 29, 2024

79TA7.6 said:
I am neding to change my speedometer from looking at the VSS value to looking at the ABS value. Would this be correct: c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 ReadEeprom 0x065 to read what this value is? If so, then do I use the WriteEeprom function then the new specified value to update it?

Trying to understand how to use command prompt with this KW1281test tool.

Should mention this would be used on my 2003 Jetta

Yes, that's right. Just make sure that your cluster is running the VWK501 software (see line below that starts with "00: VWK501"). If it's not VWK501 then 0x65 probably won't be the right EEPROM address to change the speedometer sensor.



.\kw1281test.exe com2 10400 17 ReadEeprom 0x65

...

Protocol is KW 1281 (8N1)

ECU: 1J0920946C  KOMBI+WEGFAHRSP VDO V20

Software Coding 17232, Workshop Code: 00000

Sending Custom "Read Software Version" blocks

Sending Custom "Unlock Additional Commands" block

00: VWK501MH $10 $01

...

Sending ReadEeprom block (Address: $0065, Count: $01)

Received "Read EEPROM Response" block: 80

Address 101 ($0065): Value 128 ($80)

Sending EndCommunication block

Assuming VWK501, if the low order bit of address 0x65 is 1 then it uses the ABS sensor. If the low bit is 0 then it uses the VSS. So if the cluster returns 0x80 then it's using the VSS and you'd change it to 0x81 to use the ABS:

.\kw1281test.exe com2 10400 17 WriteEeprom 0x65 0x81

But before you write anything to the cluster EEPROM, you should first dump the whole EEPROM to a file, so if you screw anything up, you can get back to where you started:

.\kw1281test.exe com2 10400 17 DumpEeprom 0 2048

79TA7.6 · Jan 30, 2024

Thank you Greg. I will give this a try soon.
As for the dump, I did that about a month ago. I was a little confused with it as there was nothing in the address that resembled 0x065, or any of the others for like the needle sweep or lit needles, so was not sure if I did it correct. I looked for your email to try to send you the dump file, but did not find it on the github page. I will post it here and see if it makes sense to you.

Code:

C:\Users\micha>c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port com2
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920906L  KOMBI+WEGFAHRSP VDO V11
Software Coding 07232, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501LL $00 $01
01: $75 $18
02: $09 $05 $01 $0A $0F $37
03: VW/Sk LL Serie Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VWK501LL 01.00' is 36 3D 3E 47
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  FF 1A 2A DE DE CD 48 37 01 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Cluster is unlocked for ROM/EEPROM access.
Saving EEPROM dump to 2003JettaTDI
Sending ReadEeprom block (Address: $0000, Count: $10)
Received "Read EEPROM Response" block: 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0010, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF
Sending ReadEeprom block (Address: $0020, Count: $10)
Received "Read EEPROM Response" block: 5B 96 7E F5 5B 96 AF B5 5B 97 9B 8E FF FF FF FF
Sending ReadEeprom block (Address: $0030, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0040, Count: $10)
Received "Read EEPROM Response" block: A4 69 81 0A A4 69 50 4A A4 68 64 71 FF FF FF FF
Sending ReadEeprom block (Address: $0050, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0070, Count: $10)
Received "Read EEPROM Response" block: FF FF A3 D8 CC 09 86 CA 3F FF A3 D8 CC 09 86 CA
Sending ReadEeprom block (Address: $0080, Count: $10)
Received "Read EEPROM Response" block: 3F FF A3 D8 CC 09 86 CA 3F FF 33 33 33 06 06 06
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read EEPROM Response" block: 1E 14 40 00 02 00 10 10 10 00 14 FF FF 00 FF FF
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read EEPROM Response" block: FF FF 56 57 5A 37 5A 30 42 35 35 32 31 34 31 31
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read EEPROM Response" block: 56 57 5A 37 5A 30 42 35 35 32 31 34 31 31 56 57
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read EEPROM Response" block: 5A 37 5A 30 42 35 35 32 31 34 31 31 91 07 91 07
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read EEPROM Response" block: 91 07 33 56 57 53 50 36 39 4D 34 33 4D 30 32 39
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read EEPROM Response" block: 39 32 30 FF 58 58 58 58 58 58 58 58 58 58 58 58
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read EEPROM Response" block: 58 58 58 58 58 98 3B 96 21 93 12 3D 9E 6C 9E 6C
Sending ReadEeprom block (Address: $0100, Count: $10)
Received "Read EEPROM Response" block: 9E 6C 9E 6C 9E 6C 9E 6C 9E 6C 9F 6C 00 00 00 00
Sending ReadEeprom block (Address: $0110, Count: $10)
Received "Read EEPROM Response" block: 00 00 02 00 00 00 00 00 00 00 00 00 31 4A 30 39
Sending ReadEeprom block (Address: $0120, Count: $10)
Received "Read EEPROM Response" block: 32 30 39 30 36 4C 20 20 41 34 56 31 31 06 0C 00
Sending ReadEeprom block (Address: $0130, Count: $10)
Received "Read EEPROM Response" block: 42 00 36 4E 30 39 30 39 39 30 31 20 19 2A 11 01
Sending ReadEeprom block (Address: $0140, Count: $10)
Received "Read EEPROM Response" block: 22 02 03 02 07 64 80 00 DC 05 DC 05 00 00 2C 03
Sending ReadEeprom block (Address: $0150, Count: $10)
Received "Read EEPROM Response" block: C8 0D BA 15 8C 07 06 04 0A 0A 0A 0E 0A 10 00 00
Sending ReadEeprom block (Address: $0160, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 FF 0F 00 00 00 00 1E 14
Sending ReadEeprom block (Address: $0170, Count: $10)
Received "Read EEPROM Response" block: C2 01 03 FF 15 04 00 3E 01 00 00 01 05 50 08 0A
Sending ReadEeprom block (Address: $0180, Count: $10)
Received "Read EEPROM Response" block: 0F 32 18 FF FF 05 04 32 DA 02 01 0F 6D 01 06 01
Sending ReadEeprom block (Address: $0190, Count: $10)
Received "Read EEPROM Response" block: AB FA 01 00 00 00 07 05 02 12 06 02 03 FF FF FF
Sending ReadEeprom block (Address: $01A0, Count: $10)
Received "Read EEPROM Response" block: 05 43 3C 06 09 92 70 06 86 FF 30 30 31 37 33 35
Sending ReadEeprom block (Address: $01B0, Count: $10)
Received "Read EEPROM Response" block: 46 5F 05 04 30 30 31 36 39 35 46 5F 05 04 30 31
Sending ReadEeprom block (Address: $01C0, Count: $10)
Received "Read EEPROM Response" block: 39 34 32 38 41 5F 05 04 00 00 19 7A 3F 00 02 10
Sending ReadEeprom block (Address: $01D0, Count: $10)
Received "Read EEPROM Response" block: C9 00 40 0C FF 80 02 00 41 18 4F 98 50 94 59 2F
Sending ReadEeprom block (Address: $01E0, Count: $10)
Received "Read EEPROM Response" block: F4 F7 1E 03 23 2B E1 FD 3F A8 FB 08 20 30 E9 01
Sending ReadEeprom block (Address: $01F0, Count: $10)
Received "Read EEPROM Response" block: 0A 00 0F 01 05 11 05 00 41 03 00 00 3C 4C 3C 4C
Sending ReadEeprom block (Address: $0200, Count: $10)
Received "Read EEPROM Response" block: 3C 28 32 46 90 93 98 BA 47 F6 81 C2 71 77 78 7C
Sending ReadEeprom block (Address: $0210, Count: $10)
Received "Read EEPROM Response" block: 00 7C 50 E2 4B 96 32 04 00 FF 78 1E 0F 04 02 00
Sending ReadEeprom block (Address: $0220, Count: $10)
Received "Read EEPROM Response" block: 18 00 69 00 DA 02 C8 05 BC 07 B0 09 98 0D 15 0E
Sending ReadEeprom block (Address: $0230, Count: $10)
Received "Read EEPROM Response" block: 03 00 92 00 61 03 BE 06 FD 08 3B 0B B7 0F 47 10
Sending ReadEeprom block (Address: $0240, Count: $10)
Received "Read EEPROM Response" block: 00 00 3C 03 95 0B 13 15 17 00 5E 02 A2 08 C0 0F
Sending ReadEeprom block (Address: $0250, Count: $10)
Received "Read EEPROM Response" block: 08 01 37 01 7E 01 D5 01 17 02 4B 02 4B 02 4B 02
Sending ReadEeprom block (Address: $0260, Count: $10)
Received "Read EEPROM Response" block: 0B 01 39 01 80 01 D6 01 18 02 4B 02 4B 02 4B 02
Sending ReadEeprom block (Address: $0270, Count: $10)
Received "Read EEPROM Response" block: 18 00 3C 00 7C 00 E0 00 44 01 A8 01 A8 01 A8 01
Sending ReadEeprom block (Address: $0280, Count: $10)
Received "Read EEPROM Response" block: 18 00 3C 00 7C 00 E0 00 44 01 A8 01 A8 01 A8 01
Sending ReadEeprom block (Address: $0290, Count: $10)
Received "Read EEPROM Response" block: 24 00 A7 00 8C 01 F3 02 59 04 C1 05 C1 05 C1 05
Sending ReadEeprom block (Address: $02A0, Count: $10)
Received "Read EEPROM Response" block: 85 00 AD 00 C0 00 E4 00 09 01 D3 01 70 02 94 02
Sending ReadEeprom block (Address: $02B0, Count: $10)
Received "Read EEPROM Response" block: E0 02 A6 03 78 04 10 04 E0 03 98 03 58 03 58 02
Sending ReadEeprom block (Address: $02C0, Count: $10)
Received "Read EEPROM Response" block: B8 01 90 01 40 01 28 00 F0 00 90 01 50 02 A0 03
Sending ReadEeprom block (Address: $02D0, Count: $10)
Received "Read EEPROM Response" block: E0 03 10 04 F0 00 90 01 50 02 60 03 E0 03 10 04
Sending ReadEeprom block (Address: $02E0, Count: $10)
Received "Read EEPROM Response" block: 33 00 33 00 FB 02 FB 02 27 05 C1 05 87 8A 77 00
Sending ReadEeprom block (Address: $02F0, Count: $10)
Received "Read EEPROM Response" block: 78 1E 00 27 88 2F 10 38 98 40 20 49 A8 51 30 5A
Sending ReadEeprom block (Address: $0300, Count: $10)
Received "Read EEPROM Response" block: B8 62 40 6B 0A 00 2A 00 46 00 60 00 78 00 8E 00
Sending ReadEeprom block (Address: $0310, Count: $10)
Received "Read EEPROM Response" block: A4 00 B9 00 CD 00 E1 00 64 05 88 13 8C FF 90 90
Sending ReadEeprom block (Address: $0320, Count: $10)
Received "Read EEPROM Response" block: 90 90 90 90 90 94 94 94 90 90 90 88 88 90 90 88
Sending ReadEeprom block (Address: $0330, Count: $10)
Received "Read EEPROM Response" block: 90 90 90 90 8C 90 90 88 90 90 90 70 8C 90 90 90
Sending ReadEeprom block (Address: $0340, Count: $10)
Received "Read EEPROM Response" block: 90 90 A0 90 A0 90 90 A0 90 90 90 90 90 90 74 88
Sending ReadEeprom block (Address: $0350, Count: $10)
Received "Read EEPROM Response" block: 88 88 90 90 8C 90 70 94 90 90 90 90 90 90 00 00
Sending ReadEeprom block (Address: $0360, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0370, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0380, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0390, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 13 00 FF FF BE 32 CC 01 A0 A4 FF 33
Sending ReadEeprom block (Address: $03A0, Count: $10)
Received "Read EEPROM Response" block: 00 FF 0F 0A 15 F6 00 01 56 28 95 52 D3 7B FF F4
Sending ReadEeprom block (Address: $03B0, Count: $10)
Received "Read EEPROM Response" block: FF F9 00 00 00 30 80 F0 80 F0 80 F0 80 F0 18 00
Sending ReadEeprom block (Address: $03C0, Count: $10)
Received "Read EEPROM Response" block: FF 80 FF BF FF FF 18 00 FF 80 FF BF FF FF 18 00
Sending ReadEeprom block (Address: $03D0, Count: $10)
Received "Read EEPROM Response" block: FF 80 FF BF FF FF 00 5D FF 61 FF 61 FF 61 FF 81
Sending ReadEeprom block (Address: $03E0, Count: $10)
Received "Read EEPROM Response" block: 80 89 00 90 00 80 BF FF 02 35 9A FF 00 80 BF FF
Sending ReadEeprom block (Address: $03F0, Count: $10)
Received "Read EEPROM Response" block: 02 35 9A FF 00 80 BF FF 03 3C 9D FF 00 80 BF FF
Sending ReadEeprom block (Address: $0400, Count: $10)
Received "Read EEPROM Response" block: 02 35 9A FF D7 D0 C8 A4 22 22 0E 46 4D 4D 4D 4D
Sending ReadEeprom block (Address: $0410, Count: $10)
Received "Read EEPROM Response" block: 0E 46 4D 4D 4D 4D 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0420, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF
Sending ReadEeprom block (Address: $0430, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF A6 84 2F F7 30 30 72 00 8F 00
Sending ReadEeprom block (Address: $0440, Count: $10)
Received "Read EEPROM Response" block: AB 00 C8 00 E5 00 E5 00 2E 00 87 01 E1 02 3A 04
Sending ReadEeprom block (Address: $0450, Count: $10)
Received "Read EEPROM Response" block: 93 05 93 05 78 00 96 00 B4 00 D2 00 DC 00 F0 00
Sending ReadEeprom block (Address: $0460, Count: $10)
Received "Read EEPROM Response" block: 2E 00 87 01 E1 02 3A 04 AD 04 93 05 FF FF FF FF
Sending ReadEeprom block (Address: $0470, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 09 01 0B 0F 0F 01 01 01 2E 7F 01 0D
Sending ReadEeprom block (Address: $0480, Count: $10)
Received "Read EEPROM Response" block: 01 0B 01 09 07 14 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0490, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $04A0, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $04B0, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 30
Sending ReadEeprom block (Address: $04C0, Count: $10)
Received "Read EEPROM Response" block: 30 30 31 37 33 35 46 49 4C 30 30 30 46 5F 04 05
Sending ReadEeprom block (Address: $04D0, Count: $10)
Received "Read EEPROM Response" block: 31 30 30 30 31 36 39 35 46 49 4C 30 30 30 46 5F
Sending ReadEeprom block (Address: $04E0, Count: $10)
Received "Read EEPROM Response" block: 04 05 31 30 30 31 39 34 32 38 46 49 4C 30 30 30
Sending ReadEeprom block (Address: $04F0, Count: $10)
Received "Read EEPROM Response" block: 41 5F 04 05 9D 8E 0C 00 00 A7 29 07 C9 05 90 02
Sending ReadEeprom block (Address: $0500, Count: $10)
Received "Read EEPROM Response" block: A9 04 0A 4C 18 A5 00 A5 15 4C 00 A5 16 F7 00 A5
Sending ReadEeprom block (Address: $0510, Count: $10)
Received "Read EEPROM Response" block: 17 09 00 0F FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0520, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0530, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0540, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0550, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0560, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0570, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0580, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0590, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05E0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05F0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0600, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0610, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0620, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0630, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0640, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FD FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0650, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0660, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0670, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0680, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0690, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06E0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06F0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0700, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0710, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0720, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0730, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0740, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0750, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0760, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0770, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0780, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0790, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07E0, Count: $10)
Received "Read EEPROM Response" block: 03 00 25 23 43 3C 06 FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07F0, Count: $10)
Received "Read EEPROM Response" block: 4C 4C 00 00 00 00 00 FF FF FF 08 13 08 13 08 13
Saved EEPROM dump to 2003JettaTDI
Sending EndCommunication block

surefoot · Jan 30, 2024

Hi All
I'm after some advice, injector pump failure on my car. I've replaced it with a new one that now needs coding to car.
I came across this thread and hoping it would help me out. I ran the program as described and it returned the following.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 8.0.0
Culture: en-GB
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920981J KOMBI+WEGFAHRS. VDO D15
Software Coding 04460, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
Cluster did not return software version.
Unknown cluster software version. EEPROM access will likely fail.
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

any help would be much appreciated.

I've tried contacting auto locksmiths but trying to get one to come out to have a look is near on impossible!

thanks in advance
Pete

Mozambiquer · Jan 30, 2024

surefoot said:
Hi All
I'm after some advice, injector pump failure on my car. I've replaced it with a new one that now needs coding to car.
I came across this thread and hoping it would help me out. I ran the program as described and it returned the following.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 8.0.0
Culture: en-GB
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920981J KOMBI+WEGFAHRS. VDO D15
Software Coding 04460, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
Cluster did not return software version.
Unknown cluster software version. EEPROM access will likely fail.
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

any help would be much appreciated.

I've tried contacting auto locksmiths but trying to get one to come out to have a look is near on impossible!

thanks in advance
Pete

The injector pump doesn't need coding.
It looks like the cluster has no communication by what I see there.

79TA7.6 · Jan 30, 2024

gmenounos said:
Yes, that's right. Just make sure that your cluster is running the VWK501 software (see line below that starts with "00: VWK501"). If it's not VWK501 then 0x65 probably won't be the right EEPROM address to change the speedometer sensor.

.\kw1281test.exe com2 10400 17 ReadEeprom 0x65 ... Protocol is KW 1281 (8N1) ECU: 1J0920946C KOMBI+WEGFAHRSP VDO V20 Software Coding 17232, Workshop Code: 00000 Sending Custom "Read Software Version" blocks Sending Custom "Unlock Additional Commands" block 00: VWK501MH $10 $01 ... Sending ReadEeprom block (Address: $0065, Count: $01) Received "Read EEPROM Response" block: 80 Address 101 ($0065): Value 128 ($80) Sending EndCommunication block

Assuming VWK501, if the low order bit of address 0x65 is 1 then it uses the ABS sensor. If the low bit is 0 then it uses the VSS. So if the cluster returns 0x80 then it's using the VSS and you'd change it to 0x81 to use the ABS:

.\kw1281test.exe com2 10400 17 WriteEeprom 0x65 0x81

But before you write anything to the cluster EEPROM, you should first dump the whole EEPROM to a file, so if you screw anything up, you can get back to where you started:

.\kw1281test.exe com2 10400 17 DumpEeprom 0 2048

This worked perfect. It has been three years since I have had a speedometer so thank you so much. Now time to play around with some other mods.

gmenounos · Jan 30, 2024

79TA7.6 said:
Thank you Greg. I will give this a try soon.
As for the dump, I did that about a month ago. I was a little confused with it as there was nothing in the address that resembled 0x065, or any of the others for like the needle sweep or lit needles, so was not sure if I did it correct. I looked for your email to try to send you the dump file, but did not find it on the github page. I will post it here and see if it makes sense to you.

So 0x65 is just the address (i.e. location) in the EEPROM that the speed sensor setting (i.e. 0x80 or 0x81) is stored. If you look at the below EEPROM dump, you can see that kw1281test asked for the 16 bytes (aka $10 or 0x10) of EEPROM data starting at location $60. The data that came back was 0xFF for locations 0x60-0x63, 0x08 for location 0x64, 0x80 for location 0x65, and 0xFF for the rest of those 16 locations:

Code:

kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
...
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF

And for those more familiar with cars than computer programming, $60 and 0x60 are both ways of saying that the number is in base-16 (aka hexadecimal or hex) and not base-10 (aka decimal). kw1281test will let you enter EEPROM/ROM addresses and values in decimal or hexadecimal (if you prefix them with either $ or 0x). I'm pretty inconsistent with which format I use, so that might be confusing. Here's a converter in case you need it: https://www.rapidtables.com/convert/number/hex-to-decimal.html

You can always PM me and I'll send you my email address or you can find it on this page: https://bitfab.com/Contact
(I try not to post it in too many places to reduce the amount of email spam I get)

gmenounos · Jan 30, 2024

Mozambiquer said:
The injector pump doesn't need coding.
It looks like the cluster has no communication by what I see there.

Immobilizer III Injection Pump Swapping - Ross-Tech Wiki

wiki.ross-tech.com

Learn something new every day. Sigh.

79TA7.6 · Jan 30, 2024

gmenounos said:
And for those more familiar with cars than computer programming

Lol. I cannot tell you how many times I have had the mechanical portion of my car torn apart. I am a mechanical engineer, but I cannot code for crap. Need to study up and learn it though.

kw1281test: A Free VDS-Pro / VagTacho Alternative

Vendor

Member

Veteran Member

Vendor

Member

Member

Veteran Member

Vendor

Veteran Member

Vendor

Veteran Member

Veteran Member

Vendor

New member

Vendor , w/Business number

Vendor

New member

Vendor

New member

Vendor

Vendor

Veteran Member

Vendor

Veteran Member

New member

Vendor , w/Business number

Veteran Member

Vendor

Vendor

Veteran Member