kw1281test: A Free VDS-Pro / VagTacho Alternative

79TA7.6

Veteran Member
Joined
May 8, 2006
Location
Live: Wilbur/Creston; Work: Moses Lake Washington
TDI
2003 Jetta GLS 5 Speed
I am neding to change my speedometer from looking at the VSS value to looking at the ABS value. Would this be correct: c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 ReadEeprom 0x065 to read what this value is? If so, then do I use the WriteEeprom function then the new specified value to update it?

Trying to understand how to use command prompt with this KW1281test tool.

Should mention this would be used on my 2003 Jetta
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
I am neding to change my speedometer from looking at the VSS value to looking at the ABS value. Would this be correct: c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 ReadEeprom 0x065 to read what this value is? If so, then do I use the WriteEeprom function then the new specified value to update it?

Trying to understand how to use command prompt with this KW1281test tool.

Should mention this would be used on my 2003 Jetta
Yes, that's right. Just make sure that your cluster is running the VWK501 software (see line below that starts with "00: VWK501"). If it's not VWK501 then 0x65 probably won't be the right EEPROM address to change the speedometer sensor.


.\kw1281test.exe com2 10400 17 ReadEeprom 0x65
...
Protocol is KW 1281 (8N1)
ECU: 1J0920946C KOMBI+WEGFAHRSP VDO V20
Software Coding 17232, Workshop Code: 00000
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501MH $10 $01
...
Sending ReadEeprom block (Address: $0065, Count: $01)
Received "Read EEPROM Response" block: 80
Address 101 ($0065): Value 128 ($80)
Sending EndCommunication block


Assuming VWK501, if the low order bit of address 0x65 is 1 then it uses the ABS sensor. If the low bit is 0 then it uses the VSS. So if the cluster returns 0x80 then it's using the VSS and you'd change it to 0x81 to use the ABS:

.\kw1281test.exe com2 10400 17 WriteEeprom 0x65 0x81

But before you write anything to the cluster EEPROM, you should first dump the whole EEPROM to a file, so if you screw anything up, you can get back to where you started:

.\kw1281test.exe com2 10400 17 DumpEeprom 0 2048
 

79TA7.6

Veteran Member
Joined
May 8, 2006
Location
Live: Wilbur/Creston; Work: Moses Lake Washington
TDI
2003 Jetta GLS 5 Speed
Thank you Greg. I will give this a try soon.
As for the dump, I did that about a month ago. I was a little confused with it as there was nothing in the address that resembled 0x065, or any of the others for like the needle sweep or lit needles, so was not sure if I did it correct. I looked for your email to try to send you the dump file, but did not find it on the github page. I will post it here and see if it makes sense to you.

Code:
C:\Users\micha>c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port com2
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920906L  KOMBI+WEGFAHRSP VDO V11
Software Coding 07232, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501LL $00 $01
01: $75 $18
02: $09 $05 $01 $0A $0F $37
03: VW/Sk LL Serie Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VWK501LL 01.00' is 36 3D 3E 47
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  FF 1A 2A DE DE CD 48 37 01 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Cluster is unlocked for ROM/EEPROM access.
Saving EEPROM dump to 2003JettaTDI
Sending ReadEeprom block (Address: $0000, Count: $10)
Received "Read EEPROM Response" block: 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0010, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF
Sending ReadEeprom block (Address: $0020, Count: $10)
Received "Read EEPROM Response" block: 5B 96 7E F5 5B 96 AF B5 5B 97 9B 8E FF FF FF FF
Sending ReadEeprom block (Address: $0030, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0040, Count: $10)
Received "Read EEPROM Response" block: A4 69 81 0A A4 69 50 4A A4 68 64 71 FF FF FF FF
Sending ReadEeprom block (Address: $0050, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0070, Count: $10)
Received "Read EEPROM Response" block: FF FF A3 D8 CC 09 86 CA 3F FF A3 D8 CC 09 86 CA
Sending ReadEeprom block (Address: $0080, Count: $10)
Received "Read EEPROM Response" block: 3F FF A3 D8 CC 09 86 CA 3F FF 33 33 33 06 06 06
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read EEPROM Response" block: 1E 14 40 00 02 00 10 10 10 00 14 FF FF 00 FF FF
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read EEPROM Response" block: FF FF 56 57 5A 37 5A 30 42 35 35 32 31 34 31 31
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read EEPROM Response" block: 56 57 5A 37 5A 30 42 35 35 32 31 34 31 31 56 57
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read EEPROM Response" block: 5A 37 5A 30 42 35 35 32 31 34 31 31 91 07 91 07
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read EEPROM Response" block: 91 07 33 56 57 53 50 36 39 4D 34 33 4D 30 32 39
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read EEPROM Response" block: 39 32 30 FF 58 58 58 58 58 58 58 58 58 58 58 58
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read EEPROM Response" block: 58 58 58 58 58 98 3B 96 21 93 12 3D 9E 6C 9E 6C
Sending ReadEeprom block (Address: $0100, Count: $10)
Received "Read EEPROM Response" block: 9E 6C 9E 6C 9E 6C 9E 6C 9E 6C 9F 6C 00 00 00 00
Sending ReadEeprom block (Address: $0110, Count: $10)
Received "Read EEPROM Response" block: 00 00 02 00 00 00 00 00 00 00 00 00 31 4A 30 39
Sending ReadEeprom block (Address: $0120, Count: $10)
Received "Read EEPROM Response" block: 32 30 39 30 36 4C 20 20 41 34 56 31 31 06 0C 00
Sending ReadEeprom block (Address: $0130, Count: $10)
Received "Read EEPROM Response" block: 42 00 36 4E 30 39 30 39 39 30 31 20 19 2A 11 01
Sending ReadEeprom block (Address: $0140, Count: $10)
Received "Read EEPROM Response" block: 22 02 03 02 07 64 80 00 DC 05 DC 05 00 00 2C 03
Sending ReadEeprom block (Address: $0150, Count: $10)
Received "Read EEPROM Response" block: C8 0D BA 15 8C 07 06 04 0A 0A 0A 0E 0A 10 00 00
Sending ReadEeprom block (Address: $0160, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 FF 0F 00 00 00 00 1E 14
Sending ReadEeprom block (Address: $0170, Count: $10)
Received "Read EEPROM Response" block: C2 01 03 FF 15 04 00 3E 01 00 00 01 05 50 08 0A
Sending ReadEeprom block (Address: $0180, Count: $10)
Received "Read EEPROM Response" block: 0F 32 18 FF FF 05 04 32 DA 02 01 0F 6D 01 06 01
Sending ReadEeprom block (Address: $0190, Count: $10)
Received "Read EEPROM Response" block: AB FA 01 00 00 00 07 05 02 12 06 02 03 FF FF FF
Sending ReadEeprom block (Address: $01A0, Count: $10)
Received "Read EEPROM Response" block: 05 43 3C 06 09 92 70 06 86 FF 30 30 31 37 33 35
Sending ReadEeprom block (Address: $01B0, Count: $10)
Received "Read EEPROM Response" block: 46 5F 05 04 30 30 31 36 39 35 46 5F 05 04 30 31
Sending ReadEeprom block (Address: $01C0, Count: $10)
Received "Read EEPROM Response" block: 39 34 32 38 41 5F 05 04 00 00 19 7A 3F 00 02 10
Sending ReadEeprom block (Address: $01D0, Count: $10)
Received "Read EEPROM Response" block: C9 00 40 0C FF 80 02 00 41 18 4F 98 50 94 59 2F
Sending ReadEeprom block (Address: $01E0, Count: $10)
Received "Read EEPROM Response" block: F4 F7 1E 03 23 2B E1 FD 3F A8 FB 08 20 30 E9 01
Sending ReadEeprom block (Address: $01F0, Count: $10)
Received "Read EEPROM Response" block: 0A 00 0F 01 05 11 05 00 41 03 00 00 3C 4C 3C 4C
Sending ReadEeprom block (Address: $0200, Count: $10)
Received "Read EEPROM Response" block: 3C 28 32 46 90 93 98 BA 47 F6 81 C2 71 77 78 7C
Sending ReadEeprom block (Address: $0210, Count: $10)
Received "Read EEPROM Response" block: 00 7C 50 E2 4B 96 32 04 00 FF 78 1E 0F 04 02 00
Sending ReadEeprom block (Address: $0220, Count: $10)
Received "Read EEPROM Response" block: 18 00 69 00 DA 02 C8 05 BC 07 B0 09 98 0D 15 0E
Sending ReadEeprom block (Address: $0230, Count: $10)
Received "Read EEPROM Response" block: 03 00 92 00 61 03 BE 06 FD 08 3B 0B B7 0F 47 10
Sending ReadEeprom block (Address: $0240, Count: $10)
Received "Read EEPROM Response" block: 00 00 3C 03 95 0B 13 15 17 00 5E 02 A2 08 C0 0F
Sending ReadEeprom block (Address: $0250, Count: $10)
Received "Read EEPROM Response" block: 08 01 37 01 7E 01 D5 01 17 02 4B 02 4B 02 4B 02
Sending ReadEeprom block (Address: $0260, Count: $10)
Received "Read EEPROM Response" block: 0B 01 39 01 80 01 D6 01 18 02 4B 02 4B 02 4B 02
Sending ReadEeprom block (Address: $0270, Count: $10)
Received "Read EEPROM Response" block: 18 00 3C 00 7C 00 E0 00 44 01 A8 01 A8 01 A8 01
Sending ReadEeprom block (Address: $0280, Count: $10)
Received "Read EEPROM Response" block: 18 00 3C 00 7C 00 E0 00 44 01 A8 01 A8 01 A8 01
Sending ReadEeprom block (Address: $0290, Count: $10)
Received "Read EEPROM Response" block: 24 00 A7 00 8C 01 F3 02 59 04 C1 05 C1 05 C1 05
Sending ReadEeprom block (Address: $02A0, Count: $10)
Received "Read EEPROM Response" block: 85 00 AD 00 C0 00 E4 00 09 01 D3 01 70 02 94 02
Sending ReadEeprom block (Address: $02B0, Count: $10)
Received "Read EEPROM Response" block: E0 02 A6 03 78 04 10 04 E0 03 98 03 58 03 58 02
Sending ReadEeprom block (Address: $02C0, Count: $10)
Received "Read EEPROM Response" block: B8 01 90 01 40 01 28 00 F0 00 90 01 50 02 A0 03
Sending ReadEeprom block (Address: $02D0, Count: $10)
Received "Read EEPROM Response" block: E0 03 10 04 F0 00 90 01 50 02 60 03 E0 03 10 04
Sending ReadEeprom block (Address: $02E0, Count: $10)
Received "Read EEPROM Response" block: 33 00 33 00 FB 02 FB 02 27 05 C1 05 87 8A 77 00
Sending ReadEeprom block (Address: $02F0, Count: $10)
Received "Read EEPROM Response" block: 78 1E 00 27 88 2F 10 38 98 40 20 49 A8 51 30 5A
Sending ReadEeprom block (Address: $0300, Count: $10)
Received "Read EEPROM Response" block: B8 62 40 6B 0A 00 2A 00 46 00 60 00 78 00 8E 00
Sending ReadEeprom block (Address: $0310, Count: $10)
Received "Read EEPROM Response" block: A4 00 B9 00 CD 00 E1 00 64 05 88 13 8C FF 90 90
Sending ReadEeprom block (Address: $0320, Count: $10)
Received "Read EEPROM Response" block: 90 90 90 90 90 94 94 94 90 90 90 88 88 90 90 88
Sending ReadEeprom block (Address: $0330, Count: $10)
Received "Read EEPROM Response" block: 90 90 90 90 8C 90 90 88 90 90 90 70 8C 90 90 90
Sending ReadEeprom block (Address: $0340, Count: $10)
Received "Read EEPROM Response" block: 90 90 A0 90 A0 90 90 A0 90 90 90 90 90 90 74 88
Sending ReadEeprom block (Address: $0350, Count: $10)
Received "Read EEPROM Response" block: 88 88 90 90 8C 90 70 94 90 90 90 90 90 90 00 00
Sending ReadEeprom block (Address: $0360, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0370, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0380, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0390, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 13 00 FF FF BE 32 CC 01 A0 A4 FF 33
Sending ReadEeprom block (Address: $03A0, Count: $10)
Received "Read EEPROM Response" block: 00 FF 0F 0A 15 F6 00 01 56 28 95 52 D3 7B FF F4
Sending ReadEeprom block (Address: $03B0, Count: $10)
Received "Read EEPROM Response" block: FF F9 00 00 00 30 80 F0 80 F0 80 F0 80 F0 18 00
Sending ReadEeprom block (Address: $03C0, Count: $10)
Received "Read EEPROM Response" block: FF 80 FF BF FF FF 18 00 FF 80 FF BF FF FF 18 00
Sending ReadEeprom block (Address: $03D0, Count: $10)
Received "Read EEPROM Response" block: FF 80 FF BF FF FF 00 5D FF 61 FF 61 FF 61 FF 81
Sending ReadEeprom block (Address: $03E0, Count: $10)
Received "Read EEPROM Response" block: 80 89 00 90 00 80 BF FF 02 35 9A FF 00 80 BF FF
Sending ReadEeprom block (Address: $03F0, Count: $10)
Received "Read EEPROM Response" block: 02 35 9A FF 00 80 BF FF 03 3C 9D FF 00 80 BF FF
Sending ReadEeprom block (Address: $0400, Count: $10)
Received "Read EEPROM Response" block: 02 35 9A FF D7 D0 C8 A4 22 22 0E 46 4D 4D 4D 4D
Sending ReadEeprom block (Address: $0410, Count: $10)
Received "Read EEPROM Response" block: 0E 46 4D 4D 4D 4D 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0420, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF
Sending ReadEeprom block (Address: $0430, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF A6 84 2F F7 30 30 72 00 8F 00
Sending ReadEeprom block (Address: $0440, Count: $10)
Received "Read EEPROM Response" block: AB 00 C8 00 E5 00 E5 00 2E 00 87 01 E1 02 3A 04
Sending ReadEeprom block (Address: $0450, Count: $10)
Received "Read EEPROM Response" block: 93 05 93 05 78 00 96 00 B4 00 D2 00 DC 00 F0 00
Sending ReadEeprom block (Address: $0460, Count: $10)
Received "Read EEPROM Response" block: 2E 00 87 01 E1 02 3A 04 AD 04 93 05 FF FF FF FF
Sending ReadEeprom block (Address: $0470, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 09 01 0B 0F 0F 01 01 01 2E 7F 01 0D
Sending ReadEeprom block (Address: $0480, Count: $10)
Received "Read EEPROM Response" block: 01 0B 01 09 07 14 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0490, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $04A0, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $04B0, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 30
Sending ReadEeprom block (Address: $04C0, Count: $10)
Received "Read EEPROM Response" block: 30 30 31 37 33 35 46 49 4C 30 30 30 46 5F 04 05
Sending ReadEeprom block (Address: $04D0, Count: $10)
Received "Read EEPROM Response" block: 31 30 30 30 31 36 39 35 46 49 4C 30 30 30 46 5F
Sending ReadEeprom block (Address: $04E0, Count: $10)
Received "Read EEPROM Response" block: 04 05 31 30 30 31 39 34 32 38 46 49 4C 30 30 30
Sending ReadEeprom block (Address: $04F0, Count: $10)
Received "Read EEPROM Response" block: 41 5F 04 05 9D 8E 0C 00 00 A7 29 07 C9 05 90 02
Sending ReadEeprom block (Address: $0500, Count: $10)
Received "Read EEPROM Response" block: A9 04 0A 4C 18 A5 00 A5 15 4C 00 A5 16 F7 00 A5
Sending ReadEeprom block (Address: $0510, Count: $10)
Received "Read EEPROM Response" block: 17 09 00 0F FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0520, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0530, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0540, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0550, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0560, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0570, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0580, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0590, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05E0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05F0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0600, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0610, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0620, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0630, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0640, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FD FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0650, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0660, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0670, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0680, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0690, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06E0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06F0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0700, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0710, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0720, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0730, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0740, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0750, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0760, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0770, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0780, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0790, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07E0, Count: $10)
Received "Read EEPROM Response" block: 03 00 25 23 43 3C 06 FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07F0, Count: $10)
Received "Read EEPROM Response" block: 4C 4C 00 00 00 00 00 FF FF FF 08 13 08 13 08 13
Saved EEPROM dump to 2003JettaTDI
Sending EndCommunication block
 

surefoot

New member
Joined
Jan 30, 2024
Location
Nottingham, England
TDI
Audi Allroad V6 2.5Tdi 2004
Hi All
I'm after some advice, injector pump failure on my car. I've replaced it with a new one that now needs coding to car.
I came across this thread and hoping it would help me out. I ran the program as described and it returned the following.


Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 8.0.0
Culture: en-GB
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920981J KOMBI+WEGFAHRS. VDO D15
Software Coding 04460, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
Cluster did not return software version.
Unknown cluster software version. EEPROM access will likely fail.
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block


any help would be much appreciated.

I've tried contacting auto locksmiths but trying to get one to come out to have a look is near on impossible!

thanks in advance
Pete
 

Mozambiquer

Vendor , w/Business number
Joined
Mar 21, 2015
Location
Versailles Missouri
TDI
1998 VW Jetta TDI. 1982 VW Rabbit pickup, 2001 VW Jetta TDI, 2005 VW Passat wagon TDI X3, 2001 VW golf TDI, 1980 VW rabbit pickup,
Hi All
I'm after some advice, injector pump failure on my car. I've replaced it with a new one that now needs coding to car.
I came across this thread and hoping it would help me out. I ran the program as described and it returned the following.


Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 8.0.0
Culture: en-GB
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920981J KOMBI+WEGFAHRS. VDO D15
Software Coding 04460, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
Cluster did not return software version.
Unknown cluster software version. EEPROM access will likely fail.
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block


any help would be much appreciated.

I've tried contacting auto locksmiths but trying to get one to come out to have a look is near on impossible!

thanks in advance
Pete
The injector pump doesn't need coding.
It looks like the cluster has no communication by what I see there.
 

79TA7.6

Veteran Member
Joined
May 8, 2006
Location
Live: Wilbur/Creston; Work: Moses Lake Washington
TDI
2003 Jetta GLS 5 Speed
Yes, that's right. Just make sure that your cluster is running the VWK501 software (see line below that starts with "00: VWK501"). If it's not VWK501 then 0x65 probably won't be the right EEPROM address to change the speedometer sensor.


.\kw1281test.exe com2 10400 17 ReadEeprom 0x65
...
Protocol is KW 1281 (8N1)
ECU: 1J0920946C KOMBI+WEGFAHRSP VDO V20
Software Coding 17232, Workshop Code: 00000
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501MH $10 $01
...
Sending ReadEeprom block (Address: $0065, Count: $01)
Received "Read EEPROM Response" block: 80
Address 101 ($0065): Value 128 ($80)
Sending EndCommunication block


Assuming VWK501, if the low order bit of address 0x65 is 1 then it uses the ABS sensor. If the low bit is 0 then it uses the VSS. So if the cluster returns 0x80 then it's using the VSS and you'd change it to 0x81 to use the ABS:

.\kw1281test.exe com2 10400 17 WriteEeprom 0x65 0x81

But before you write anything to the cluster EEPROM, you should first dump the whole EEPROM to a file, so if you screw anything up, you can get back to where you started:

.\kw1281test.exe com2 10400 17 DumpEeprom 0 2048
This worked perfect. It has been three years since I have had a speedometer so thank you so much. Now time to play around with some other mods.
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
Thank you Greg. I will give this a try soon.
As for the dump, I did that about a month ago. I was a little confused with it as there was nothing in the address that resembled 0x065, or any of the others for like the needle sweep or lit needles, so was not sure if I did it correct. I looked for your email to try to send you the dump file, but did not find it on the github page. I will post it here and see if it makes sense to you.
So 0x65 is just the address (i.e. location) in the EEPROM that the speed sensor setting (i.e. 0x80 or 0x81) is stored. If you look at the below EEPROM dump, you can see that kw1281test asked for the 16 bytes (aka $10 or 0x10) of EEPROM data starting at location $60. The data that came back was 0xFF for locations 0x60-0x63, 0x08 for location 0x64, 0x80 for location 0x65, and 0xFF for the rest of those 16 locations:

Code:
kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
...
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF
And for those more familiar with cars than computer programming, $60 and 0x60 are both ways of saying that the number is in base-16 (aka hexadecimal or hex) and not base-10 (aka decimal). kw1281test will let you enter EEPROM/ROM addresses and values in decimal or hexadecimal (if you prefix them with either $ or 0x). I'm pretty inconsistent with which format I use, so that might be confusing. Here's a converter in case you need it: https://www.rapidtables.com/convert/number/hex-to-decimal.html

You can always PM me and I'll send you my email address or you can find it on this page: https://bitfab.com/Contact
(I try not to post it in too many places to reduce the amount of email spam I get)
 

79TA7.6

Veteran Member
Joined
May 8, 2006
Location
Live: Wilbur/Creston; Work: Moses Lake Washington
TDI
2003 Jetta GLS 5 Speed
So 0x65 is just the address (i.e. location) in the EEPROM that the speed sensor setting (i.e. 0x80 or 0x81) is stored. If you look at the below EEPROM dump, you can see that kw1281test asked for the 16 bytes (aka $10 or 0x10) of EEPROM data starting at location $60. The data that came back was 0xFF for locations 0x60-0x63, 0x08 for location 0x64, 0x80 for location 0x65, and 0xFF for the rest of those 16 locations:

Code:
kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
...
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF
Now that I am more awake, and looking at this on a computer and not my phone, I understand more what is going on. Each row has 16 addresses, starting at 0 and ending at 15. It is slowly making more sense. Thank you for the explanation to a coding dummy. :)
 

imaginifer

Member
Joined
Jan 3, 2023
Location
Czech Republic
TDI
Škoda Fabia I 1.4 TDI
New release supports VW Polo 6N and Skoda Fabia 6Y clusters: https://github.com/gmenounos/kw1281test/releases/tag/v0.92-beta
@imaginifer @ChronoX @himtan Can you please try the latest version and see if it can retrieve your SKC?

Thanks! But still no success:

Code:
Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: cs-CZ
Opening serial port com3
Caught: System.IO.FileNotFoundException Could not find file 'com3'.
Unhandled exception: System.IO.FileNotFoundException: Could not find file 'com3'.
File name: 'com3'
   at System.IO.Ports.SerialStream..ctor(String, Int32, Parity, Int32, StopBits, Int32, Int32, Handshake, Boolean, Boolean, Boolean, Byte)
   at System.IO.Ports.SerialPort.Open()
   at BitFab.KW1281Test.Interface.GenericInterface..ctor(String, Int32) in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 23
   at BitFab.KW1281Test.Program.OpenPort(String, Int32) in /Users/gmenounos/src/kw1281test/Program.cs:line 500
   at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 259
   at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: cs-CZ
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Y0920880E KOMBI+WEGFAHRSP VDO V07
Software Coding 00101, Workshop Code: 13765
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VSQX01LM $10 $01
01: $69 $19
02: $07 $0B $01 $0B $1B $15
03: PQ24_2 LM KW18/02   
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VSQX01LM 01.10' is 43 43 3D 37
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  28 49 0A 68 1E 51 3D BC 03 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block
 

Mhughes216

Member
Joined
Oct 10, 2023
Location
USA
TDI
2008 VW Beetle
Still can't get 2 spare keys programmed for my 2008 VW beetle. I went to a local locksmith, and they couldn't get a cloned key to work on my car. After about 3 hours of trying to pull the pin and cloning a key, they handed my keys back and said you need to go to the dealer. I just can't believe no one has found a work around to do such a basic thing of adding a key. I'm so disappointed and frustrated with this whole spare key problem. Anybody ever deal with this issue on 2008 New Beetle?
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
Still can't get 2 spare keys programmed for my 2008 VW beetle. I went to a local locksmith, and they couldn't get a cloned key to work on my car. After about 3 hours of trying to pull the pin and cloning a key, they handed my keys back and said you need to go to the dealer. I just can't believe no one has found a work around to do such a basic thing of adding a key. I'm so disappointed and frustrated with this whole spare key problem. Anybody ever deal with this issue on 2008 New Beetle?
kw1281test might work with a 2008 Beetle, which supposedly didn't switch to CAN Bus until 2012. Try the latest version and if it doesn't work, please post what kind of cable you're using and attach the kw1281test.log that's created.
 

imaginifer

Member
Joined
Jan 3, 2023
Location
Czech Republic
TDI
Škoda Fabia I 1.4 TDI
Thanks for testing. Can you try this test release and see if it works any better?
0.921 still nothing:

Code:
Version 0.92.1-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: cs-CZ
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Y0920880E ¶KOMBI+WEGFAHRSP VDO V07
Software Coding 00101, Workshop Code: 13765
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VSQX01LM $10 $01
01: $69 $19
02: $07 $0B $01 $0B $1B $15
03: PQ24_2 LM KW18/02
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VSQX01LM 01.10' is 43 43 3D 37
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  E1 34 C7 D8 4E 01 2F D0 03 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block
 

Mhughes216

Member
Joined
Oct 10, 2023
Location
USA
TDI
2008 VW Beetle
kw1281test might work with a 2008 Beetle, which supposedly didn't switch to CAN Bus until 2012. Try the latest version and if it doesn't work, please post what kind of cable you're using and attach the kw1281test.log that's created.
This is what I got.


KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $0A
Protocol is KW 1281 (8N1)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 130
at BitFab.KW1281Test.KW1281Dialog.ReadAndAckByte() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 442
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 384
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 39
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 519
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 275
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31


KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0920801J KOMBI+WEGFAHRS. M73 V04
Software Coding 11234, Workshop Code: 00028
Caught: System.InvalidOperationException Unsupported cluster version.
Unhandled exception: System.InvalidOperationException: Unsupported cluster version.
at BitFab.KW1281Test.Cluster.MarelliCluster.GetDefaultAddress() in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 38
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 18
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 602
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 275
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
Ok, instead of:
kw1281test.exe Com3 9600 17 GetSKC
try:
kw1281test.exe Com3 9600 17 DumpMarelliMem 14336 2048

If that works, it'll create a .bin file that you can email me and I'll hopefully be able to get the SKC from it. I can also add support for that type of cluster in the next version.
 

Mhughes216

Member
Joined
Oct 10, 2023
Location
USA
TDI
2008 VW Beetle
Ok, instead of:
kw1281test.exe Com3 9600 17 GetSKC
try:
kw1281test.exe Com3 9600 17 DumpMarelliMem 14336 2048

If that works, it'll create a .bin file that you can email me and I'll hopefully be able to get the SKC from it. I can also add support for that type of cluster in the next version.
KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 9600 17 DumpMorelliMem 14336 2048
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 130
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 388
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 39
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 288
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31

This is what I got
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
I'd recommend trying that same command a few more times. Timeouts happen sometimes with some clusters but they all usually work eventually.
 

Mhughes216

Member
Joined
Oct 10, 2023
Location
USA
TDI
2008 VW Beetle
I'll give it shot and let you know.. thanks
KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 9600 17 DumpMarelliMem 14336 2048
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0920801J KOMBI+WEGFAHRS. M73 V04
Software Coding 11234, Workshop Code: 00028
Untested cluster version! You may need to disconnect your battery if this fails.
entryH: 0x18, regBlockH: 0x20, count: 0x0800
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 130
at BitFab.KW1281Test.Cluster.MarelliCluster.WriteMarelliBlockAndReadAck(Byte[]) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 215
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String, UInt16, Nullable`1 ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 104
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.DumpMarelliMem(UInt32, UInt32, ControllerInfo, String ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 400
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 341
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31

Well I got the cluster to do something on this try
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
Well I got the cluster to do something on this try
Maybe try a couple more times. If it always gives a timeout error right after "Sending block 0x6C, Writing data to cluster microcontroller, Receiving ACK" then there might be something about 2008 Beetle clusters that isn't compatible with kw1281test.
 

Mhughes216

Member
Joined
Oct 10, 2023
Location
USA
TDI
2008 VW Beetle
Maybe try a couple more times. If it always gives a timeout error right after "Sending block 0x6C, Writing data to cluster microcontroller, Receiving ACK" then there might be something about 2008 Beetle clusters that isn't compatible with kw1281test.
Yeah it gives me that every time. There is a video on you tube about the chip being different, so I'm going educate myself on. Thanks for your help!
 

norrinraddhr

Member
Joined
Jul 22, 2019
Location
Croatia (EU)
TDI
Golf 4 TDI - 2003 Champ Edition (96kW)
Hi guys,
I need some help from you about KKL Cables that I want to order from AliExpress. Can somebody just confirm what I found on AE, to pick up the right one, here is the link and some info about Cables that I found, need for my VW Golf 4 TDI with IMMO3, thanks.

AliExpress
1) VAG KKL 409.1 OBD2 Scanner CH340 Chip - (6,69€ with shipping)
2) VAG KKL 409.1 FTDI FT232RL Chip with Switch - (9,01€ with shipping)

1. Support OS: Windows XP, Windows 7
2. 409 is for F.i.a.t, for V for A for G
3. Chip CH340 or Chip 409 FTDI FT232RL Chip With Switch
4. 16pin OBD II style Data Link Connector

SWITCH options
Cable used to include a 4 way to switch to different ECU's access:
Position 1 = engine ECU (read / clear engine failure)
Position 2 = airbag ECU (read/remove airbag failure)
Position 3 ECU = ABS (read / erase fault code)
Position 4 = ESP ECU (read / clear fixed fault)

1)


2)


 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
I need some help from you about KKL Cables that I want to order from AliExpress. Can somebody just confirm what I found on AE, to pick up the right one, here is the link and some info about Cables that I found, need for my VW Golf 4 TDI with IMMO3, thanks
Either will work. If you get the one with the switch, it needs to be in position 1 (labeled "7" in the photo) to work with your Golf.
 

norrinraddhr

Member
Joined
Jul 22, 2019
Location
Croatia (EU)
TDI
Golf 4 TDI - 2003 Champ Edition (96kW)
Hi Greg,
thank you for your help and fast reply. I have seen many KKL Cables on AE, mostly they have three sorts of Chips and I like this Cable with FTDI Chip inside and Switch options, but what I don't know is how is the situation with drivers and Windows 7 that I use on my IBM/Lenovo laptops and what would you prefer?

VAG KKL Cables and Chips
1. Chip CH340
2. Chip CH340T
3. Chip 409 FTDI FT232RL With Switch options
 

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion)
Hi Greg,
thank you for your help and fast reply. I have seen many KKL Cables on AE, mostly they have three sorts of Chips and I like this Cable with FTDI Chip inside and Switch options, but what I don't know is how is the situation with drivers and Windows 7 that I use on my IBM/Lenovo laptops and what would you prefer?

VAG KKL Cables and Chips
1. Chip CH340
2. Chip CH340T
3. Chip 409 FTDI FT232RL With Switch options
Windows 7 drivers are available for both CH340 and FTDI:

If the FTDI chip is genuine then it's probably better, but there have been problems with fake FTDI chips in cheap Chinese cables: https://www.sevarg.net/2017/03/04/fixing-fake-ftdi-ft232rl-adapters-ssop/
so beware.
 

Matt-98AHU

Loose Nut Behind the Wheel Vendor
Joined
Apr 23, 2006
Location
Gresham, OR
TDI
2001 Golf TDI, 2005 Passat wagon, 2004 Touareg V10.
Another successful cluster hack for VSS via CAN using kw1281test. I made a video about it... and I didn't remember the right baud rate, so here's an illustration of how important that is. lol

You can almost see what I'm typing. heh. You can select 4k video quality and go full screen, you can just about read it.

Someone did confirm to me that 2000-2001 cars can pick up VSS via CAN if you do swap to a newer cluster. Puts to rest my question on if the older Mk20 modules were infact sending the correct signal for a newer cluster to pick up.

02S swap all the mk4 TDIs! haha

 
Last edited:
Top