kw1281test: A Free VDS-Pro / VagTacho Alternative

B

Bent68

Active member
Joined
Oct 28, 2024
Location
Alabama
TDI
2001 beetle tdi ALH
C:\Users\Bentley Howard>Onedrive\desktop\kw1281test.exe Com3 9600 1 WriteEdc15Eeprom 0x1B0 0x60 0x1DE 0x60
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.2-alpha (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 9600 1 WriteEdc15Eeprom 0x1B0 0x60 0x1DE 0x60
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.6
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 038906012FF 1,9l R4 EDC G000AG 4104
Software Coding 00001, Workshop Code: 00066
Sending EndCommunication block
Reading sync byte
Keyword Lsb $6B
Keyword Msb $8F
Protocol is KW 2027 (8N1)
KW Version: 2027
Sent: 82 01 F1 10 89 0D (startDiagnosticSession)
Received: 83 F1 01 7F 10 13 17 (startDiagnosticSession NAK 19)
Caught: BitFab.KW1281Test.Kwp2000.NegativeResponseException Exception of type 'BitFab.KW1281Test.Kwp2000.NegativeResponseException' was thrown.
Unhandled exception: BitFab.KW1281Test.Kwp2000.NegativeResponseException: Exception of type 'BitFab.KW1281Test.Kwp2000.NegativeResponseException' was thrown.
at BitFab.KW1281Test.KW2000Dialog.SendReceive(DiagnosticService, Byte[], Boolean ) in /Users/gmenounos/src/kw1281test/Kwp2000/KW2000Dialog.cs:line 144
at BitFab.KW1281Test.EDC15.Edc15VM.ReadWriteEeprom(String, List`1 ) in /Users/gmenounos/src/kw1281test/EDC15/Edc15VM.cs:line 21
at BitFab.KW1281Test.Tester.ReadWriteEdc15Eeprom(String , List`1 ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 357
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 405
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
 
A

alanuriel012

New member
Joined
Oct 27, 2024
Location
Dallas
TDI
TT
gmenounos said:
You have a Marelli cluster. There are 2 commands you can try:

kw1281test.exe COM4 9600 17 DumpMarelliMem 3072 1024
kw1281test.exe COM4 9600 17 DumpMarelliMem 14336 2048

If neither of those work then kw1281test may not be compatible with your cluster (and there's not a whole lot I can do to add support unless I have that exact cluster to test with - and even then I may not be able to get it to work).
Click to expand...
Unfortunate it didn't work. I was able to get the SKC and disable the Immobilizer from the ECU by using a CH341A. But I currently have a flashing Icon on the dash. Turns out the car I bought has a swapped dashpod so Im trying to gain access to it so i can change the VIN and make new keys. So far I tried all programs to gain access to the Dashpod so far with no luck. VAG Commander gives me different SKC numbers that dont work. VAG EEPROM doesnt work either I get an error code saying unkown software version. Only other option I haven't tried is VAG TACHO but i need a Windows XP to make the software work properly.
 
B

Bent68

Active member
Joined
Oct 28, 2024
Location
Alabama
TDI
2001 beetle tdi ALH
alanuriel012 said:
Unfortunate it didn't work. I was able to get the SKC and disable the Immobilizer from the ECU by using a CH341A. But I currently have a flashing Icon on the dash. Turns out the car I bought has a swapped dashpod so Im trying to gain access to it so i can change the VIN and make new keys. So far I tried all programs to gain access to the Dashpod so far with no luck. VAG Commander gives me different SKC numbers that dont work. VAG EEPROM doesnt work either I get an error code saying unkown software version. Only other option I haven't tried is VAG TACHO but i need a Windows XP to make the software work properly.
Click to expand...
How where you able to delete the immobilizer ?
 
N

Nate_Grauvogel

Veteran Member
Joined
Feb 10, 2005
Location
Northern VA
TDI
'15 T-Reg Exec
First of all, thank you to gmenounos for the work and the alternative to VDS-PRO!

I bought the cheap CH340 KKL cable in the original post a while back, installed drivers (opened the housing to ensure it's a CH340), and am trying to use a Win10 laptop get my SKC ('02 1C Beetle GLS Turbo) to program a backup key and - if things are stable, enable the remote window rollup/down that I did years ago to my last '02 Beetle (that one was a TDI).

My cluster is a 1C0 920 921 F - verfied with VCDS, and was able to read it only once with KW1281Test and the cheap CH3240 KKL cable.

I think the problems I'm seeing are related to the KKL interface - it worked once to read the software version, but not reliably. I've reinstalled drivers, tried with UART buffer on/off, and tried various baud rates. 10400 never works - can't even wake up the interface. I can't set the COM port to 10400, so using 9600 works with the interface, but results in errors talking to the car's modules. (I've tried reading info from the ECU as well as instruments.)

Here's a typical log just trying to read the software version of the module - any suggestions?

Code: 
Version 0.98.0-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 9600 17 readsoftwareversion
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.6
Culture: en-US
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Error receiving block: Received block end $01 but expected $03. Block bytes:  01 75 FE 01
Partial block: $01 $75 $FE $01
Error receiving blocks: Received block end $01 but expected $03. Block bytes:  01 75 FE 01
Caught: System.InvalidOperationException Received block end $01 but expected $03. Block bytes:  01 75 FE 01
Unhandled exception: System.InvalidOperationException: Received block end $01 but expected $03. Block bytes:  01 75 FE 01
   at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 411
   at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 354
   at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 92
   at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 40
   at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 288
   at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
OR... trying using COM4, this time going to the skc... same/similar results. (I get the "unexpected block end" errors on other ports, too.)

Code: 
Version 0.98.0-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com4 9600 17 getskc
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.6
Culture: en-US
Opening serial port com4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Error receiving block: Received block end $01 but expected $03. Block bytes:  01 75 FE 01
Partial block: $01 $75 $FE $01
Error receiving blocks: Received block end $01 but expected $03. Block bytes:  01 75 FE 01
Caught: System.InvalidOperationException Received block end $01 but expected $03. Block bytes:  01 75 FE 01
Unhandled exception: System.InvalidOperationException: Received block end $01 but expected $03. Block bytes:  01 75 FE 01
   at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 411
   at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 354
   at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 92
   at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 40
   at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 509
   at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 275
   at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
Not sure what to try next other than a different cable or computer. I have a trusty RS-232 serial KKL but no machine to run it with any more, and my VCDS cable is a HEX-NET...too new.
 
powerram250

powerram250

Well-known member
Joined
Apr 11, 2010
Location
Lockridge, IA
TDI
2004 PD Jetta/ 2015 Passat TDI SEL
Thank you so much for the hard work of figuring this out. I was able to retrieve my SKC with it on my 2004 PD Jetta. The problem I had was command prompt couldn't find the kw1281test file on my desktop via typing in the name. I was able to click and drag and drop the file into command prompt to run it. Then I typed the last phrase to "GetSKC" and then there it was.
 
I

imaginifer

Member
Joined
Jan 3, 2023
Location
Czech Republic
TDI
Škoda Fabia I 1.4 TDI
Hello, some time ago I reported here problem with obtaining SKC from Škoda Fabia MK1 1.4 TDI. I've tried it now with the latest version (v0.99.2-alpha) and it works 🙂

Code: 
Version 0.99.2-alpha (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.6
Culture: cs-CZ
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Y0920880E KOMBI+WEGFAHRSP VDO V07
Software Coding 00101, Workshop Code: 13765
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VSQX01LM $10 $01
01: $69 $19
02: $07 $0B $01 $0B $1B $15
03: PQ24_2 LM KW18/02  
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VSQX01LM 01.10' is 43 43 3D 37
Sending Custom "Get Access Level" block
Access level is 4.
Sending Custom "Seed request" block
Block:  01 0C C3 D9 6A 08 34 16 03 00
Access level 7 secret: $98 $E1 $56 $5F
Sending Custom "Key response" block
Sending Custom "Get Access Level" block
Access level is 7.
Cluster is unlocked for ROM/EEPROM access.
Saving EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read EEPROM Response" block: 75 80 20 B5 6F 3A A3 6A FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read EEPROM Response" block: 12 9D B0 85 92 EB 62 FF 12 9D B0 85 92 EB 62 FF
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read EEPROM Response" block: 12 9D B0 85 92 EB 62 FF 22 22 22 06 06 06 00 14
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read EEPROM Response" block: 01 80 72 00 10 10 10 02 14 FF FF 01 FF FF FF FF
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read EEPROM Response" block: 53 4B 5A 37 5A 30 44 32 33 39 34 37 30 31 53 4B
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read EEPROM Response" block: 5A 37 5A 30 44 32 33 39 34 37 30 31 53 4B 5A 37
Sending ReadEeprom block (Address: $0100, Count: $0C)
Received "Read EEPROM Response" block: 5A 30 44 32 33 39 34 37 30 31 92 08
Saved EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
SKC: 02194
Sending EndCommunication block
 
U

user36466

New member
Joined
Nov 29, 2024
Location
US
TDI
Na
Hello all, could someone clarify, is kw1281test only for TDIs? If it works for other cars, what models, years or even makes are generally working?

I have a 12 Jetta, 12 Passat and an 09 Audi A4 I'm trying to make backup key fobs for. The Audi showed the security PIN in VCDS with a rosstech cable upon mouseover of the input field, but the other two did not. Unfortunately I wasn't able to get a response using kw1281test on the other two. I tried a kkl cable also. I tried didn't baud speeds and a bunch of other attempts to get something to work with no success. A locksmith said it won't work on ~2004+ models, but I want to know if that is bs or not.

Thanks a lot. I was hoping this cli tool would be the poor-mans answer to regain the ability to control the vehicles I own. My local dealerships won't give me the pin codes.
 
P2B

P2B

Top Post Dawg
Joined
Jan 11, 2006
Location
Toronto & Muskoka, Canada
TDI
2002 Jetta, 2003 Jetta, 2003 Jetta Wagon
user36466 said:
Hello all, could someone clarify, is kw1281test only for TDIs? If it works for other cars, what models, years or even makes are generally working?
Click to expand...
kw1281test works on VAG cars which use K-Line for diagnostics. It does not work on your CAN bus vehicles. More details in the FAQ (first post in this thread)
 
U

user36466

New member
Joined
Nov 29, 2024
Location
US
TDI
Na
P2B said:
kw1281test works on VAG cars which use K-Line for diagnostics. It does not work on your CAN bus vehicles. More details in the FAQ (first post in this thread)
Click to expand...
Thank you. That explains a lot!
"With very few exceptions*, all 2008 and newer VW/Audi Group cars require CAN"

So there are no similar software tools for any 2008+ VWs/Audis? What a shame..

So is it the CAN communication protocol that is the barrier or is there something else like obfuscated code that is the problem. Or maybe no one has reverse engineered the protocol for open source like gmenounos? (Big kudos to him btw!)
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
user36466 said:
So there are no similar software tools for any 2008+ VWs/Audis? What a shame..
Click to expand...
There are commercial tools like VAGTacho, VAG K+CAN Commander, VAGDashCAN, but they're either expensive or cracked versions from China.

user36466 said:
So is it the CAN communication protocol that is the barrier or is there something else like obfuscated code that is the problem. Or maybe no one has reverse engineered the protocol for open source like gmenounos? (Big kudos to him btw!)
Click to expand...
For me, the barrier is that I only have K-Line cars to develop and test on. I also don't know if there are any generic CAN cables like there are generic KKL cables.
 
B

BriefObsessions

New member
Joined
Dec 5, 2024
Location
Australia
TDI
Touareg 7P
Hello,
Firstly, thanks so much for developing this tool!
I am trying to retrieve the SKC on my 2003 Audi A6 C5 using a HEX+CAN cable in VCP mode, but getting the following error. Have tried the two latest versions (0.99.1 & 0.99.2).

Code: 
\kw1281test_0.99.1-beta_Win10>.\kw1281test.exe com4 10400 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.1-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com4 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.22631.0
.NET Version: 8.0.6
Culture: en-AU
Opening serial port com4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920935B  KOMBI+WEGFAHRS. VDO D12
Software Coding 06764, Workshop Code: 53909
Cluster is Audi C5
Sending custom login block
Sending custom login block
Received block: D1 0A 49 00 73 00 11 01 01 F0
Sending login request
Received block: D1 04 06 D3
Succeeded
Dumping EEPROM to AudiC5.bin
Received block: D1 05 15 22 E3
Caught: System.InvalidOperationException Expected block of type $72
Unhandled exception: System.InvalidOperationException: Expected block of type $72
   at BitFab.KW1281Test.Cluster.AudiC5Cluster.ReadEepromByAddress(UInt32, Byte) in /Users/gmenounos/src/kw1281test/Cluster/AudiC5Cluster.cs:line 168
   at BitFab.KW1281Test.Cluster.AudiC5Cluster.DumpEeprom(UInt32, UInt32, Byte, String) in /Users/gmenounos/src/kw1281test/Cluster/AudiC5Cluster.cs:line 129
   at BitFab.KW1281Test.Cluster.AudiC5Cluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/AudiC5Cluster.cs:line 113
   at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 521
   at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 275
   at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
I searched the thread for my cluster but didn't get any results. Is it supported?
 
Last edited:
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
BriefObsessions said:
Hello,
Firstly, thanks so much for developing this tool!
I am trying to retrieve the SKC on my 2003 Audi A6 C5 using a HEX+CAN cable in VCP mode, but getting the following error. Have tried the two latest versions (0.99.1 & 0.99.2).

Code: 
Dumping EEPROM to AudiC5.bin
Received block: D1 05 15 22 E3
Caught: System.InvalidOperationException Expected block of type $72
I searched the thread for my cluster but didn't get any results. Is it supported?
Click to expand...
Yeah, you may be out of luck with that cluster. I've gotten kw1281test to work with several Audi clusters, but I guess yours is different in some way.
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
New release: v0.99.3-beta
  • Updated to .NET 9.
  • Added support for 8L0920900B clusters.
  • Added support for 1JD920826E (software VCB07LL) clusters.
  • Added support for 1M0920800C (software S599CAA) clusters.
  • Added support for 3U0920842B (software KB5M07HH) clusters.
  • After reading the EDC15 EEPROM, logs the SKC, odometer value, VIN and Immobilizer info.
  • Fixed wakeup timing issue caused by writing to the log during timing sensitive code.
 
F

Feche

New member
Joined
Oct 13, 2024
Location
Argentina
TDI
Golf MK4
case "VWK503LL 09.00":
case "VWK503MH 09.00": // 1J0920927 V02
return [[0x3E, 0x35, 0x3D, 0x3A]];

this will add support for VWK503LL 09.00 clusters, already tested it and it works!
 
K

kent750

Member
Joined
Dec 28, 2024
Location
kootenays BC
TDI
none
gmenounos said:
I have no idea why you can't run the program anymore. Try downloading it again.

Try disconnecting the battery from the car for a minute, then reconnect and try the GetSKC command again.

If that doesn't work, disconnect the battery for a minute and then try the following command and see if it works:
C:\Users\patso\Downloads\kw1281test_0.99.2-alpha_Win10\kw1281test.exe COM6 9600 17 DumpMarelliMem 14336 2048
Click to expand...
I have the same cluster...got this result
C:\Users\kent\Downloads\kw1281test_0.99.3-beta_Win10>.\kw1281test.exe COM4 9600 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.3-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.11
Culture: en-CA
Opening serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 8N1920930J KOMBI+WEGFAHRS. M73 D56
Software Coding 07344, Workshop Code: 00000
entryH: 0x02, regBlockH: 0x08, count: 0x0400
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Writing memory dump program to cluster microcontroller
(Entry: $0200, RegBlock: $0800, Start: $0C00, Count: $0400)
Receiving ACK
Receiving memory dump
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 137
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String, UInt16, Nullable`1 ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 176
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 621
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 277
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 33

Then tried the alternate command and got this

C:\Users\kent\Downloads\kw1281test_0.99.3-beta_Win10>.\kw1281test.exe COM4 9600 17 DumpMarelliMem 14336 2048
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.3-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 DumpMarelliMem 14336 2048
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.11
Culture: en-CA
Opening serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 8N1920930J KOMBI+WEGFAHRS. M73 D56
Software Coding 07344, Workshop Code: 00000
entryH: 0x02, regBlockH: 0x08, count: 0x0800
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Writing memory dump program to cluster microcontroller
(Entry: $0200, RegBlock: $0800, Start: $3800, Count: $0800)
Receiving ACK
Receiving memory dump
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 137
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String, UInt16, Nullable`1 ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 176
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.DumpMarelliMem(UInt32, UInt32, ControllerInfo, String ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 386
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 346
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 33


Any other suggestions gmenounos?
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
New release: https://github.com/gmenounos/kw1281test/releases/tag/v0.99.4-beta
Now supports custom baud rates (e.g. 10400) with native serial ports on Linux. For example, here's kw1281test running on a Raspberry Pi with a red FTDI KKL cable. I didn't need to install any special FTDI drivers but I did change the FTDI latency timer to 1ms as described here.

Code: 
$ ./kw1281test /dev/ttyUSB0 10400 17 ReadSoftwareVersion
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: /dev/ttyUSB0 10400 17 ReadSoftwareVersion
OSVersion: Unix 6.6.62.8
.NET Version: 9.0.0
Culture: en-US
Opening Linux serial port /dev/ttyUSB0
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J5920926C  KOMBI+WEGFAHRSP VDO V13
Software Coding 07232, Workshop Code: 00442
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501MH $10 $01
01: $81 $19
02: $18 $08 $01 $0B $1C $09
03: VW/Sk MH Serie/Flash
Sending EndCommunication block
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
kent750 said:
I have the same cluster...got this result
C:\Users\kent\Downloads\kw1281test_0.99.3-beta_Win10>.\kw1281test.exe COM4 9600 17 GetSKC
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.3-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.11
Culture: en-CA
Opening serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 8N1920930J KOMBI+WEGFAHRS. M73 D56
Software Coding 07344, Workshop Code: 00000
entryH: 0x02, regBlockH: 0x08, count: 0x0400
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Writing memory dump program to cluster microcontroller
(Entry: $0200, RegBlock: $0800, Start: $0C00, Count: $0400)
Receiving ACK
Receiving memory dump
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 137
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String, UInt16, Nullable`1 ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 176
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 621
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 277
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 33

Then tried the alternate command and got this

C:\Users\kent\Downloads\kw1281test_0.99.3-beta_Win10>.\kw1281test.exe COM4 9600 17 DumpMarelliMem 14336 2048
KW1281Test: Yesterday's diagnostics...Today.

Version 0.99.3-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM4 9600 17 DumpMarelliMem 14336 2048
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.11
Culture: en-CA
Opening serial port COM4
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 8N1920930J KOMBI+WEGFAHRS. M73 D56
Software Coding 07344, Workshop Code: 00000
entryH: 0x02, regBlockH: 0x08, count: 0x0800
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Writing memory dump program to cluster microcontroller
(Entry: $0200, RegBlock: $0800, Start: $3800, Count: $0800)
Receiving ACK
Receiving memory dump
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 137
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String, UInt16, Nullable`1 ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 176
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.DumpMarelliMem(UInt32, UInt32, ControllerInfo, String ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 386
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 346
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 33


Any other suggestions gmenounos?
Click to expand...
I think for now, your cluster is not supported. I'll see if I can support it in the future. I have another TT cluster that someone gave me that also doesn't work (but I forgot the part number). If I ever can get it to work then maybe I can add support for yours.
 
K

kent750

Member
Joined
Dec 28, 2024
Location
kootenays BC
TDI
none
gmenounos said:
I think for now, your cluster is not supported. I'll see if I can support it in the future. I have another TT cluster that someone gave me that also doesn't work (but I forgot the part number). If I ever can get it to work then maybe I can add support for yours.
Click to expand...
It's curious... the Readfaultcodes command did work.
 
V

vampirelo

Member
Joined
Mar 18, 2014
Location
Russia
TDI
Golf 4
Hello, tryed to read eeprom from 3U0920942D cluster.
It is amazing that it can read Crypted cluster! However is it possible to read all data including keys, milleage and matching to engine?
There are addresses 50-5f, 70 to 14f not read from cluster.
What can I do to read data in full? Match one key to cluster?


From log file info:

Version 0.99.4-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 DumpEeprom 0 2048 eeprom.bin
OSVersion: Microsoft Windows NT 6.1.7601 Service Pack 1
.NET Version: 9.0.0
Culture: ru-RU
Opening Generic serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 3U0920942D KOMBI+WEGFAHRSP VDO V06
Software Coding 31415, Workshop Code: 00222
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: KB5M07HH $00 $09
01: $36 $26
02: $16 $06 $06 $0D $2E $01
03: Skoda Superb MJ07
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'KB5M07HH 09.00' is 3E 35 3D 3A
Sending Custom "Get Access Level" block
Access level is 2.
Sending Custom "Seed request" block
Block: 06 09 26 DC F9 D9 00 6E 0D 00
Access level 7 secret: $0A $5B $41 $4F
Sending Custom "Key response" block
Sending Custom "Get Access Level" block
Access level is 2.
Failed to unlock cluster.
Saving EEPROM dump to eeprom.bin
Sending ReadEeprom block (Address: $0000, Count: $10)
Received "Read EEPROM Response" block: 02 02 55 F7 02 55 FD 02 00 DE 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0010, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0020, Count: $10)
Received "Read EEPROM Response" block: 31 30 30 38 32 36 32 37 46 49 4C 30 30 30 41 44
Sending ReadEeprom block (Address: $0030, Count: $10)
Received "Read EEPROM Response" block: 04 03 31 30 30 38 32 36 33 35 46 49 4C 30 30 30
Sending ReadEeprom block (Address: $0040, Count: $10)
Received "Read EEPROM Response" block: 41 41 01 02 31 30 31 30 31 36 33 32 46 49 4C 30
Sending ReadEeprom block (Address: $0050, Count: $10)
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 0C 81 FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0070, Count: $10)
Sending ReadEeprom block (Address: $0080, Count: $10)
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $10)
Sending ReadEeprom block (Address: $0110, Count: $10)
Sending ReadEeprom block (Address: $0120, Count: $10)
Sending ReadEeprom block (Address: $0130, Count: $10)
Sending ReadEeprom block (Address: $0140, Count: $10)
Received "Read EEPROM Response" block: 45 C3 45 C3 45 C3 45 C3 45 C3 04 10 10 40 10 01
Sending ReadEeprom block (Address: $0150, Count: $10)
Received "Read EEPROM Response" block: 15 84 00 10 00 A2 00 00 00 00 33 55 30 39 32 30
Sending ReadEeprom block (Address: $0160, Count: $10)
--- skipped ---
Received "Read EEPROM Response" block: 00 00 00 00 FF FF FF 00 D2 53 4B 45 07 FF 00 44
Sending ReadEeprom block (Address: $07F0, Count: $10)
Received "Read EEPROM Response" block: 48 4C 00 00 00 00 00 03 02 03 0F 10 0F 0B 0F 0E

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to eeprom.bin
Sending EndCommunication block
 
Last edited:
K

kent750

Member
Joined
Dec 28, 2024
Location
kootenays BC
TDI
none
gmenounos said:
I think for now, your cluster is not supported. I'll see if I can support it in the future. I have another TT cluster that someone gave me that also doesn't work (but I forgot the part number). If I ever can get it to work then maybe I can add support for yours.
Click to expand...
Appreciate that greatly. You have had success with some tt clusters ? I thought I noted some while going through the thread
 
2

2003_unicorns

Veteran Member
Joined
Oct 23, 2024
Location
Virginia
TDI
2003 Jetta Wagon manual & 2003 Golf 2dr. manual
TLDR, Sorry. I successfully used this to get/keep my hatch open with the door switch on my 03 Jetta Wagon. Do I need to use this software on my 03 door Golf to do the same thing or can that be accomplished via VCDS? I like to go as far as I can with VCDS and then use this.

Thanks!!
 
G

gmenounos

Vendor
Joined
Jun 26, 2003
Location
Watertown, MA, USA
TDI
'99.5 Golf GLS, '01 Jetta GLX Wagon (TDI conversion), Non-TDI: '23 Tesla Model 3 AWD
2003_unicorns said:
TLDR, Sorry. I successfully used this to get/keep my hatch open with the door switch on my 03 Jetta Wagon. Do I need to use this software on my 03 door Golf to do the same thing or can that be accomplished via VCDS? I like to go as far as I can with VCDS and then use this.

Thanks!!
Click to expand...
I believe you need kw1281test for that.
 
You must log in or register to reply here.
Top