kw1281test: A Free VDS-Pro / VagTacho Alternative

gmenounos · Jan 28, 2024

New release supports VW Polo 6N and Skoda Fabia 6Y clusters: https://github.com/gmenounos/kw1281test/releases/tag/v0.92-beta
@imaginifer @ChronoX @himtan Can you please try the latest version and see if it can retrieve your SKC?

79TA7.6 · Jan 29, 2024

I am neding to change my speedometer from looking at the VSS value to looking at the ABS value. Would this be correct: c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 ReadEeprom 0x065 to read what this value is? If so, then do I use the WriteEeprom function then the new specified value to update it?

Trying to understand how to use command prompt with this KW1281test tool.

Should mention this would be used on my 2003 Jetta

gmenounos · Jan 29, 2024

79TA7.6 said:
I am neding to change my speedometer from looking at the VSS value to looking at the ABS value. Would this be correct: c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 ReadEeprom 0x065 to read what this value is? If so, then do I use the WriteEeprom function then the new specified value to update it?

Trying to understand how to use command prompt with this KW1281test tool.

Should mention this would be used on my 2003 Jetta

Yes, that's right. Just make sure that your cluster is running the VWK501 software (see line below that starts with "00: VWK501"). If it's not VWK501 then 0x65 probably won't be the right EEPROM address to change the speedometer sensor.



.\kw1281test.exe com2 10400 17 ReadEeprom 0x65

...

Protocol is KW 1281 (8N1)

ECU: 1J0920946C  KOMBI+WEGFAHRSP VDO V20

Software Coding 17232, Workshop Code: 00000

Sending Custom "Read Software Version" blocks

Sending Custom "Unlock Additional Commands" block

00: VWK501MH $10 $01

...

Sending ReadEeprom block (Address: $0065, Count: $01)

Received "Read EEPROM Response" block: 80

Address 101 ($0065): Value 128 ($80)

Sending EndCommunication block

Assuming VWK501, if the low order bit of address 0x65 is 1 then it uses the ABS sensor. If the low bit is 0 then it uses the VSS. So if the cluster returns 0x80 then it's using the VSS and you'd change it to 0x81 to use the ABS:

.\kw1281test.exe com2 10400 17 WriteEeprom 0x65 0x81

But before you write anything to the cluster EEPROM, you should first dump the whole EEPROM to a file, so if you screw anything up, you can get back to where you started:

.\kw1281test.exe com2 10400 17 DumpEeprom 0 2048

79TA7.6 · Jan 30, 2024

Thank you Greg. I will give this a try soon.
As for the dump, I did that about a month ago. I was a little confused with it as there was nothing in the address that resembled 0x065, or any of the others for like the needle sweep or lit needles, so was not sure if I did it correct. I looked for your email to try to send you the dump file, but did not find it on the github page. I will post it here and see if it makes sense to you.

Code:

C:\Users\micha>c:\users\micha\Desktop\tdi\kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
KW1281Test: Yesterday's diagnostics...Today.

Version 0.86-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port com2
Sending wakeup message
Wakeup duration: 2 seconds
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1J0920906L  KOMBI+WEGFAHRSP VDO V11
Software Coding 07232, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VWK501LL $00 $01
01: $75 $18
02: $09 $05 $01 $0A $0F $37
03: VW/Sk LL Serie Maske
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VWK501LL 01.00' is 36 3D 3E 47
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  FF 1A 2A DE DE CD 48 37 01 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Cluster is unlocked for ROM/EEPROM access.
Saving EEPROM dump to 2003JettaTDI
Sending ReadEeprom block (Address: $0000, Count: $10)
Received "Read EEPROM Response" block: 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0010, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF
Sending ReadEeprom block (Address: $0020, Count: $10)
Received "Read EEPROM Response" block: 5B 96 7E F5 5B 96 AF B5 5B 97 9B 8E FF FF FF FF
Sending ReadEeprom block (Address: $0030, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0040, Count: $10)
Received "Read EEPROM Response" block: A4 69 81 0A A4 69 50 4A A4 68 64 71 FF FF FF FF
Sending ReadEeprom block (Address: $0050, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0070, Count: $10)
Received "Read EEPROM Response" block: FF FF A3 D8 CC 09 86 CA 3F FF A3 D8 CC 09 86 CA
Sending ReadEeprom block (Address: $0080, Count: $10)
Received "Read EEPROM Response" block: 3F FF A3 D8 CC 09 86 CA 3F FF 33 33 33 06 06 06
Sending ReadEeprom block (Address: $0090, Count: $10)
Received "Read EEPROM Response" block: 1E 14 40 00 02 00 10 10 10 00 14 FF FF 00 FF FF
Sending ReadEeprom block (Address: $00A0, Count: $10)
Received "Read EEPROM Response" block: FF FF 56 57 5A 37 5A 30 42 35 35 32 31 34 31 31
Sending ReadEeprom block (Address: $00B0, Count: $10)
Received "Read EEPROM Response" block: 56 57 5A 37 5A 30 42 35 35 32 31 34 31 31 56 57
Sending ReadEeprom block (Address: $00C0, Count: $10)
Received "Read EEPROM Response" block: 5A 37 5A 30 42 35 35 32 31 34 31 31 91 07 91 07
Sending ReadEeprom block (Address: $00D0, Count: $10)
Received "Read EEPROM Response" block: 91 07 33 56 57 53 50 36 39 4D 34 33 4D 30 32 39
Sending ReadEeprom block (Address: $00E0, Count: $10)
Received "Read EEPROM Response" block: 39 32 30 FF 58 58 58 58 58 58 58 58 58 58 58 58
Sending ReadEeprom block (Address: $00F0, Count: $10)
Received "Read EEPROM Response" block: 58 58 58 58 58 98 3B 96 21 93 12 3D 9E 6C 9E 6C
Sending ReadEeprom block (Address: $0100, Count: $10)
Received "Read EEPROM Response" block: 9E 6C 9E 6C 9E 6C 9E 6C 9E 6C 9F 6C 00 00 00 00
Sending ReadEeprom block (Address: $0110, Count: $10)
Received "Read EEPROM Response" block: 00 00 02 00 00 00 00 00 00 00 00 00 31 4A 30 39
Sending ReadEeprom block (Address: $0120, Count: $10)
Received "Read EEPROM Response" block: 32 30 39 30 36 4C 20 20 41 34 56 31 31 06 0C 00
Sending ReadEeprom block (Address: $0130, Count: $10)
Received "Read EEPROM Response" block: 42 00 36 4E 30 39 30 39 39 30 31 20 19 2A 11 01
Sending ReadEeprom block (Address: $0140, Count: $10)
Received "Read EEPROM Response" block: 22 02 03 02 07 64 80 00 DC 05 DC 05 00 00 2C 03
Sending ReadEeprom block (Address: $0150, Count: $10)
Received "Read EEPROM Response" block: C8 0D BA 15 8C 07 06 04 0A 0A 0A 0E 0A 10 00 00
Sending ReadEeprom block (Address: $0160, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 FF 0F 00 00 00 00 1E 14
Sending ReadEeprom block (Address: $0170, Count: $10)
Received "Read EEPROM Response" block: C2 01 03 FF 15 04 00 3E 01 00 00 01 05 50 08 0A
Sending ReadEeprom block (Address: $0180, Count: $10)
Received "Read EEPROM Response" block: 0F 32 18 FF FF 05 04 32 DA 02 01 0F 6D 01 06 01
Sending ReadEeprom block (Address: $0190, Count: $10)
Received "Read EEPROM Response" block: AB FA 01 00 00 00 07 05 02 12 06 02 03 FF FF FF
Sending ReadEeprom block (Address: $01A0, Count: $10)
Received "Read EEPROM Response" block: 05 43 3C 06 09 92 70 06 86 FF 30 30 31 37 33 35
Sending ReadEeprom block (Address: $01B0, Count: $10)
Received "Read EEPROM Response" block: 46 5F 05 04 30 30 31 36 39 35 46 5F 05 04 30 31
Sending ReadEeprom block (Address: $01C0, Count: $10)
Received "Read EEPROM Response" block: 39 34 32 38 41 5F 05 04 00 00 19 7A 3F 00 02 10
Sending ReadEeprom block (Address: $01D0, Count: $10)
Received "Read EEPROM Response" block: C9 00 40 0C FF 80 02 00 41 18 4F 98 50 94 59 2F
Sending ReadEeprom block (Address: $01E0, Count: $10)
Received "Read EEPROM Response" block: F4 F7 1E 03 23 2B E1 FD 3F A8 FB 08 20 30 E9 01
Sending ReadEeprom block (Address: $01F0, Count: $10)
Received "Read EEPROM Response" block: 0A 00 0F 01 05 11 05 00 41 03 00 00 3C 4C 3C 4C
Sending ReadEeprom block (Address: $0200, Count: $10)
Received "Read EEPROM Response" block: 3C 28 32 46 90 93 98 BA 47 F6 81 C2 71 77 78 7C
Sending ReadEeprom block (Address: $0210, Count: $10)
Received "Read EEPROM Response" block: 00 7C 50 E2 4B 96 32 04 00 FF 78 1E 0F 04 02 00
Sending ReadEeprom block (Address: $0220, Count: $10)
Received "Read EEPROM Response" block: 18 00 69 00 DA 02 C8 05 BC 07 B0 09 98 0D 15 0E
Sending ReadEeprom block (Address: $0230, Count: $10)
Received "Read EEPROM Response" block: 03 00 92 00 61 03 BE 06 FD 08 3B 0B B7 0F 47 10
Sending ReadEeprom block (Address: $0240, Count: $10)
Received "Read EEPROM Response" block: 00 00 3C 03 95 0B 13 15 17 00 5E 02 A2 08 C0 0F
Sending ReadEeprom block (Address: $0250, Count: $10)
Received "Read EEPROM Response" block: 08 01 37 01 7E 01 D5 01 17 02 4B 02 4B 02 4B 02
Sending ReadEeprom block (Address: $0260, Count: $10)
Received "Read EEPROM Response" block: 0B 01 39 01 80 01 D6 01 18 02 4B 02 4B 02 4B 02
Sending ReadEeprom block (Address: $0270, Count: $10)
Received "Read EEPROM Response" block: 18 00 3C 00 7C 00 E0 00 44 01 A8 01 A8 01 A8 01
Sending ReadEeprom block (Address: $0280, Count: $10)
Received "Read EEPROM Response" block: 18 00 3C 00 7C 00 E0 00 44 01 A8 01 A8 01 A8 01
Sending ReadEeprom block (Address: $0290, Count: $10)
Received "Read EEPROM Response" block: 24 00 A7 00 8C 01 F3 02 59 04 C1 05 C1 05 C1 05
Sending ReadEeprom block (Address: $02A0, Count: $10)
Received "Read EEPROM Response" block: 85 00 AD 00 C0 00 E4 00 09 01 D3 01 70 02 94 02
Sending ReadEeprom block (Address: $02B0, Count: $10)
Received "Read EEPROM Response" block: E0 02 A6 03 78 04 10 04 E0 03 98 03 58 03 58 02
Sending ReadEeprom block (Address: $02C0, Count: $10)
Received "Read EEPROM Response" block: B8 01 90 01 40 01 28 00 F0 00 90 01 50 02 A0 03
Sending ReadEeprom block (Address: $02D0, Count: $10)
Received "Read EEPROM Response" block: E0 03 10 04 F0 00 90 01 50 02 60 03 E0 03 10 04
Sending ReadEeprom block (Address: $02E0, Count: $10)
Received "Read EEPROM Response" block: 33 00 33 00 FB 02 FB 02 27 05 C1 05 87 8A 77 00
Sending ReadEeprom block (Address: $02F0, Count: $10)
Received "Read EEPROM Response" block: 78 1E 00 27 88 2F 10 38 98 40 20 49 A8 51 30 5A
Sending ReadEeprom block (Address: $0300, Count: $10)
Received "Read EEPROM Response" block: B8 62 40 6B 0A 00 2A 00 46 00 60 00 78 00 8E 00
Sending ReadEeprom block (Address: $0310, Count: $10)
Received "Read EEPROM Response" block: A4 00 B9 00 CD 00 E1 00 64 05 88 13 8C FF 90 90
Sending ReadEeprom block (Address: $0320, Count: $10)
Received "Read EEPROM Response" block: 90 90 90 90 90 94 94 94 90 90 90 88 88 90 90 88
Sending ReadEeprom block (Address: $0330, Count: $10)
Received "Read EEPROM Response" block: 90 90 90 90 8C 90 90 88 90 90 90 70 8C 90 90 90
Sending ReadEeprom block (Address: $0340, Count: $10)
Received "Read EEPROM Response" block: 90 90 A0 90 A0 90 90 A0 90 90 90 90 90 90 74 88
Sending ReadEeprom block (Address: $0350, Count: $10)
Received "Read EEPROM Response" block: 88 88 90 90 8C 90 70 94 90 90 90 90 90 90 00 00
Sending ReadEeprom block (Address: $0360, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0370, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0380, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0390, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 13 00 FF FF BE 32 CC 01 A0 A4 FF 33
Sending ReadEeprom block (Address: $03A0, Count: $10)
Received "Read EEPROM Response" block: 00 FF 0F 0A 15 F6 00 01 56 28 95 52 D3 7B FF F4
Sending ReadEeprom block (Address: $03B0, Count: $10)
Received "Read EEPROM Response" block: FF F9 00 00 00 30 80 F0 80 F0 80 F0 80 F0 18 00
Sending ReadEeprom block (Address: $03C0, Count: $10)
Received "Read EEPROM Response" block: FF 80 FF BF FF FF 18 00 FF 80 FF BF FF FF 18 00
Sending ReadEeprom block (Address: $03D0, Count: $10)
Received "Read EEPROM Response" block: FF 80 FF BF FF FF 00 5D FF 61 FF 61 FF 61 FF 81
Sending ReadEeprom block (Address: $03E0, Count: $10)
Received "Read EEPROM Response" block: 80 89 00 90 00 80 BF FF 02 35 9A FF 00 80 BF FF
Sending ReadEeprom block (Address: $03F0, Count: $10)
Received "Read EEPROM Response" block: 02 35 9A FF 00 80 BF FF 03 3C 9D FF 00 80 BF FF
Sending ReadEeprom block (Address: $0400, Count: $10)
Received "Read EEPROM Response" block: 02 35 9A FF D7 D0 C8 A4 22 22 0E 46 4D 4D 4D 4D
Sending ReadEeprom block (Address: $0410, Count: $10)
Received "Read EEPROM Response" block: 0E 46 4D 4D 4D 4D 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0420, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 FF
Sending ReadEeprom block (Address: $0430, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF A6 84 2F F7 30 30 72 00 8F 00
Sending ReadEeprom block (Address: $0440, Count: $10)
Received "Read EEPROM Response" block: AB 00 C8 00 E5 00 E5 00 2E 00 87 01 E1 02 3A 04
Sending ReadEeprom block (Address: $0450, Count: $10)
Received "Read EEPROM Response" block: 93 05 93 05 78 00 96 00 B4 00 D2 00 DC 00 F0 00
Sending ReadEeprom block (Address: $0460, Count: $10)
Received "Read EEPROM Response" block: 2E 00 87 01 E1 02 3A 04 AD 04 93 05 FF FF FF FF
Sending ReadEeprom block (Address: $0470, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 09 01 0B 0F 0F 01 01 01 2E 7F 01 0D
Sending ReadEeprom block (Address: $0480, Count: $10)
Received "Read EEPROM Response" block: 01 0B 01 09 07 14 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $0490, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $04A0, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Sending ReadEeprom block (Address: $04B0, Count: $10)
Received "Read EEPROM Response" block: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 30
Sending ReadEeprom block (Address: $04C0, Count: $10)
Received "Read EEPROM Response" block: 30 30 31 37 33 35 46 49 4C 30 30 30 46 5F 04 05
Sending ReadEeprom block (Address: $04D0, Count: $10)
Received "Read EEPROM Response" block: 31 30 30 30 31 36 39 35 46 49 4C 30 30 30 46 5F
Sending ReadEeprom block (Address: $04E0, Count: $10)
Received "Read EEPROM Response" block: 04 05 31 30 30 31 39 34 32 38 46 49 4C 30 30 30
Sending ReadEeprom block (Address: $04F0, Count: $10)
Received "Read EEPROM Response" block: 41 5F 04 05 9D 8E 0C 00 00 A7 29 07 C9 05 90 02
Sending ReadEeprom block (Address: $0500, Count: $10)
Received "Read EEPROM Response" block: A9 04 0A 4C 18 A5 00 A5 15 4C 00 A5 16 F7 00 A5
Sending ReadEeprom block (Address: $0510, Count: $10)
Received "Read EEPROM Response" block: 17 09 00 0F FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0520, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0530, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0540, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0550, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0560, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0570, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0580, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0590, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05E0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $05F0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0600, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0610, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0620, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0630, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0640, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FD FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0650, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0660, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0670, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0680, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0690, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06E0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $06F0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0700, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0710, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0720, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0730, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0740, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0750, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0760, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0770, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0780, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $0790, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07A0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07B0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07C0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07D0, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07E0, Count: $10)
Received "Read EEPROM Response" block: 03 00 25 23 43 3C 06 FF FF FF FF FF FF FF FF FF
Sending ReadEeprom block (Address: $07F0, Count: $10)
Received "Read EEPROM Response" block: 4C 4C 00 00 00 00 00 FF FF FF 08 13 08 13 08 13
Saved EEPROM dump to 2003JettaTDI
Sending EndCommunication block

surefoot · Jan 30, 2024

Hi All
I'm after some advice, injector pump failure on my car. I've replaced it with a new one that now needs coding to car.
I came across this thread and hoping it would help me out. I ran the program as described and it returned the following.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 8.0.0
Culture: en-GB
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920981J KOMBI+WEGFAHRS. VDO D15
Software Coding 04460, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
Cluster did not return software version.
Unknown cluster software version. EEPROM access will likely fail.
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

any help would be much appreciated.

I've tried contacting auto locksmiths but trying to get one to come out to have a look is near on impossible!

thanks in advance
Pete

Mozambiquer · Jan 30, 2024

surefoot said:
Hi All
I'm after some advice, injector pump failure on my car. I've replaced it with a new one that now needs coding to car.
I came across this thread and hoping it would help me out. I ran the program as described and it returned the following.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: COM1 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19042.0
.NET Version: 8.0.0
Culture: en-GB
Opening serial port COM1
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 4B0920981J KOMBI+WEGFAHRS. VDO D15
Software Coding 04460, Workshop Code: 00000
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
Cluster did not return software version.
Unknown cluster software version. EEPROM access will likely fail.
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to WAUZZZ4B85N015236_____AUZ7Z0D2642100_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

any help would be much appreciated.

I've tried contacting auto locksmiths but trying to get one to come out to have a look is near on impossible!

thanks in advance
Pete

The injector pump doesn't need coding.
It looks like the cluster has no communication by what I see there.

79TA7.6 · Jan 30, 2024

gmenounos said:
Yes, that's right. Just make sure that your cluster is running the VWK501 software (see line below that starts with "00: VWK501"). If it's not VWK501 then 0x65 probably won't be the right EEPROM address to change the speedometer sensor.

.\kw1281test.exe com2 10400 17 ReadEeprom 0x65 ... Protocol is KW 1281 (8N1) ECU: 1J0920946C KOMBI+WEGFAHRSP VDO V20 Software Coding 17232, Workshop Code: 00000 Sending Custom "Read Software Version" blocks Sending Custom "Unlock Additional Commands" block 00: VWK501MH $10 $01 ... Sending ReadEeprom block (Address: $0065, Count: $01) Received "Read EEPROM Response" block: 80 Address 101 ($0065): Value 128 ($80) Sending EndCommunication block

Assuming VWK501, if the low order bit of address 0x65 is 1 then it uses the ABS sensor. If the low bit is 0 then it uses the VSS. So if the cluster returns 0x80 then it's using the VSS and you'd change it to 0x81 to use the ABS:

.\kw1281test.exe com2 10400 17 WriteEeprom 0x65 0x81

But before you write anything to the cluster EEPROM, you should first dump the whole EEPROM to a file, so if you screw anything up, you can get back to where you started:

.\kw1281test.exe com2 10400 17 DumpEeprom 0 2048

This worked perfect. It has been three years since I have had a speedometer so thank you so much. Now time to play around with some other mods.

gmenounos · Jan 30, 2024

79TA7.6 said:
Thank you Greg. I will give this a try soon.
As for the dump, I did that about a month ago. I was a little confused with it as there was nothing in the address that resembled 0x065, or any of the others for like the needle sweep or lit needles, so was not sure if I did it correct. I looked for your email to try to send you the dump file, but did not find it on the github page. I will post it here and see if it makes sense to you.

So 0x65 is just the address (i.e. location) in the EEPROM that the speed sensor setting (i.e. 0x80 or 0x81) is stored. If you look at the below EEPROM dump, you can see that kw1281test asked for the 16 bytes (aka $10 or 0x10) of EEPROM data starting at location $60. The data that came back was 0xFF for locations 0x60-0x63, 0x08 for location 0x64, 0x80 for location 0x65, and 0xFF for the rest of those 16 locations:

Code:

kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI
...
Sending ReadEeprom block (Address: $0060, Count: $10)
Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF

And for those more familiar with cars than computer programming, $60 and 0x60 are both ways of saying that the number is in base-16 (aka hexadecimal or hex) and not base-10 (aka decimal). kw1281test will let you enter EEPROM/ROM addresses and values in decimal or hexadecimal (if you prefix them with either $ or 0x). I'm pretty inconsistent with which format I use, so that might be confusing. Here's a converter in case you need it: https://www.rapidtables.com/convert/number/hex-to-decimal.html

You can always PM me and I'll send you my email address or you can find it on this page: https://bitfab.com/Contact
(I try not to post it in too many places to reduce the amount of email spam I get)

gmenounos · Jan 30, 2024

Mozambiquer said:
The injector pump doesn't need coding.
It looks like the cluster has no communication by what I see there.

Immobilizer III Injection Pump Swapping - Ross-Tech Wiki

wiki.ross-tech.com

Learn something new every day. Sigh.

79TA7.6 · Jan 30, 2024

gmenounos said:
And for those more familiar with cars than computer programming

Lol. I cannot tell you how many times I have had the mechanical portion of my car torn apart. I am a mechanical engineer, but I cannot code for crap. Need to study up and learn it though.

79TA7.6 · Jan 31, 2024

gmenounos said:
So 0x65 is just the address (i.e. location) in the EEPROM that the speed sensor setting (i.e. 0x80 or 0x81) is stored. If you look at the below EEPROM dump, you can see that kw1281test asked for the 16 bytes (aka $10 or 0x10) of EEPROM data starting at location $60. The data that came back was 0xFF for locations 0x60-0x63, 0x08 for location 0x64, 0x80 for location 0x65, and 0xFF for the rest of those 16 locations:

Code:

kw1281test\086_beta com2 10400 17 DumpEeprom 0 2048 2003JettaTDI ... Sending ReadEeprom block (Address: $0060, Count: $10) Received "Read EEPROM Response" block: FF FF FF FF 08 80 FF FF FF FF FF FF FF FF FF FF

Now that I am more awake, and looking at this on a computer and not my phone, I understand more what is going on. Each row has 16 addresses, starting at 0 and ending at 15. It is slowly making more sense. Thank you for the explanation to a coding dummy.

imaginifer · Feb 4, 2024

gmenounos said:
New release supports VW Polo 6N and Skoda Fabia 6Y clusters: https://github.com/gmenounos/kw1281test/releases/tag/v0.92-beta
@imaginifer @ChronoX @himtan Can you please try the latest version and see if it can retrieve your SKC?

Thanks! But still no success:

Code:

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: cs-CZ
Opening serial port com3
Caught: System.IO.FileNotFoundException Could not find file 'com3'.
Unhandled exception: System.IO.FileNotFoundException: Could not find file 'com3'.
File name: 'com3'
   at System.IO.Ports.SerialStream..ctor(String, Int32, Parity, Int32, StopBits, Int32, Int32, Handshake, Boolean, Boolean, Boolean, Byte)
   at System.IO.Ports.SerialPort.Open()
   at BitFab.KW1281Test.Interface.GenericInterface..ctor(String, Int32) in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 23
   at BitFab.KW1281Test.Program.OpenPort(String, Int32) in /Users/gmenounos/src/kw1281test/Program.cs:line 500
   at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 259
   at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31
Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: cs-CZ
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Y0920880E KOMBI+WEGFAHRSP VDO V07
Software Coding 00101, Workshop Code: 13765
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VSQX01LM $10 $01
01: $69 $19
02: $07 $0B $01 $0B $1B $15
03: PQ24_2 LM KW18/02   
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VSQX01LM 01.10' is 43 43 3D 37
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  28 49 0A 68 1E 51 3D BC 03 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

gmenounos · Feb 5, 2024

imaginifer said:
Thanks! But still no success:

Thanks for testing. Can you try this test release and see if it works any better?

Release v0.921-beta · gmenounos/kw1281test

Alpha release. Do not use.

github.com

Mhughes216 · Feb 8, 2024

Still can't get 2 spare keys programmed for my 2008 VW beetle. I went to a local locksmith, and they couldn't get a cloned key to work on my car. After about 3 hours of trying to pull the pin and cloning a key, they handed my keys back and said you need to go to the dealer. I just can't believe no one has found a work around to do such a basic thing of adding a key. I'm so disappointed and frustrated with this whole spare key problem. Anybody ever deal with this issue on 2008 New Beetle?

gmenounos · Feb 8, 2024

Mhughes216 said:
Still can't get 2 spare keys programmed for my 2008 VW beetle. I went to a local locksmith, and they couldn't get a cloned key to work on my car. After about 3 hours of trying to pull the pin and cloning a key, they handed my keys back and said you need to go to the dealer. I just can't believe no one has found a work around to do such a basic thing of adding a key. I'm so disappointed and frustrated with this whole spare key problem. Anybody ever deal with this issue on 2008 New Beetle?

kw1281test might work with a 2008 Beetle, which supposedly didn't switch to CAN Bus until 2012. Try the latest version and if it doesn't work, please post what kind of cable you're using and attach the kw1281test.log that's created.

imaginifer · Feb 9, 2024

gmenounos said:
Thanks for testing. Can you try this test release and see if it works any better?

Release v0.921-beta · gmenounos/kw1281test

Alpha release. Do not use.

github.com

0.921 still nothing:

Code:

Version 0.92.1-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: cs-CZ
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 6Y0920880E ¶KOMBI+WEGFAHRSP VDO V07
Software Coding 00101, Workshop Code: 13765
Sending ReadIdent block
Sending Custom "Read Software Version" blocks
Sending Custom "Unlock Additional Commands" block
00: VSQX01LM $10 $01
01: $69 $19
02: $07 $0B $01 $0B $1B $15
03: PQ24_2 LM KW18/02
Sending Custom "Unlock partial EEPROM read" block
Unlock code for software version 'VSQX01LM 01.10' is 43 43 3D 37
Sending Custom "Need Seed/Key?" block
Sending Custom "Seed request" block
Block:  E1 34 C7 D8 4E 01 2F D0 03 00
Sending Custom "Key response" block
Sending Custom "Need Seed/Key?" block
Failed to unlock cluster.
Saving EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
Sending ReadEeprom block (Address: $0090, Count: $10)
Sending ReadEeprom block (Address: $00A0, Count: $10)
Sending ReadEeprom block (Address: $00B0, Count: $10)
Sending ReadEeprom block (Address: $00C0, Count: $10)
Sending ReadEeprom block (Address: $00D0, Count: $10)
Sending ReadEeprom block (Address: $00E0, Count: $10)
Sending ReadEeprom block (Address: $00F0, Count: $10)
Sending ReadEeprom block (Address: $0100, Count: $0C)

**********************************************************************
*** Warning: Some bytes could not be read and were replaced with 0 ***
**********************************************************************

Saved EEPROM dump to TMBPZ46Y444086291_____SKZ7Z0D2394701_$0090_eeprom.bin
GetSkc: Unable to find Immobilizer ID in cluster dump.
Unable to determine SKC.
Sending EndCommunication block

Mhughes216 · Feb 9, 2024

gmenounos said:
kw1281test might work with a 2008 Beetle, which supposedly didn't switch to CAN Bus until 2012. Try the latest version and if it doesn't work, please post what kind of cable you're using and attach the kw1281test.log that's created.

This is what I got.

KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 10400 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $0A
Protocol is KW 1281 (8N1)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 130
at BitFab.KW1281Test.KW1281Dialog.ReadAndAckByte() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 442
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 384
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 39
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 519
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 275
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31

KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 9600 17 GetSKC
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0920801J KOMBI+WEGFAHRS. M73 V04
Software Coding 11234, Workshop Code: 00028
Caught: System.InvalidOperationException Unsupported cluster version.
Unhandled exception: System.InvalidOperationException: Unsupported cluster version.
at BitFab.KW1281Test.Cluster.MarelliCluster.GetDefaultAddress() in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 38
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 18
at BitFab.KW1281Test.Tester.GetSkc() in /Users/gmenounos/src/kw1281test/Tester.cs:line 602
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 275
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31

gmenounos · Feb 9, 2024

Ok, instead of:
kw1281test.exe Com3 9600 17 GetSKC
try:
kw1281test.exe Com3 9600 17 DumpMarelliMem 14336 2048

If that works, it'll create a .bin file that you can email me and I'll hopefully be able to get the SKC from it. I can also add support for that type of cluster in the next version.

Mhughes216 · Feb 9, 2024

gmenounos said:
Ok, instead of:
kw1281test.exe Com3 9600 17 GetSKC
try:
kw1281test.exe Com3 9600 17 DumpMarelliMem 14336 2048

If that works, it'll create a .bin file that you can email me and I'll hopefully be able to get the SKC from it. I can also add support for that type of cluster in the next version.
KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: com3 9600 17 DumpMorelliMem 14336 2048
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialStream.ReadByte(Int32)
at System.IO.Ports.SerialStream.ReadByte()
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 130
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlock() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 388
at BitFab.KW1281Test.KW1281Dialog.ReceiveBlocks() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 351
at BitFab.KW1281Test.KW1281Dialog.Connect() in /Users/gmenounos/src/kw1281test/KW1281Dialog.cs:line 91
at BitFab.KW1281Test.Tester.Kwp1281Wakeup(Boolean ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 39
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 288
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31

This is what I got

gmenounos · Feb 9, 2024

I'd recommend trying that same command a few more times. Timeouts happen sometimes with some clusters but they all usually work eventually.

Mhughes216 · Feb 10, 2024

I'll give it shot and let you know.. thanks

Mhughes216 · Feb 10, 2024

Mhughes216 said:
I'll give it shot and let you know.. thanks

KW1281Test: Yesterday's diagnostics...Today.

Version 0.92-beta (https://github.com/gmenounos/kw1281test/releases)
Args: Com3 9600 17 DumpMarelliMem 14336 2048
OSVersion: Microsoft Windows NT 10.0.19045.0
.NET Version: 8.0.0
Culture: en-US
Opening serial port Com3
Sending wakeup message
Reading sync byte
Keyword Lsb $01
Keyword Msb $8A
Protocol is KW 1281 (8N1)
ECU: 1C0920801J KOMBI+WEGFAHRS. M73 V04
Software Coding 11234, Workshop Code: 00028
Untested cluster version! You may need to disconnect your battery if this fails.
entryH: 0x18, regBlockH: 0x20, count: 0x0800
Sending block 0x6C
Writing data to cluster microcontroller
Receiving ACK
Caught: System.TimeoutException The operation has timed out.
Unhandled exception: System.TimeoutException: The operation has timed out.
at System.IO.Ports.SerialPort.ReadByte()
at BitFab.KW1281Test.Interface.GenericInterface.ReadByte() in /Users/gmenounos/src/kw1281test/Interface/GenericInterface.cs:line 34
at BitFab.KW1281Test.KwpCommon.ReadByte() in /Users/gmenounos/src/kw1281test/KwpCommon.cs:line 130
at BitFab.KW1281Test.Cluster.MarelliCluster.WriteMarelliBlockAndReadAck(Byte[]) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 215
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpMem(String, UInt16, Nullable`1 ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 104
at BitFab.KW1281Test.Cluster.MarelliCluster.DumpEeprom(Nullable`1, Nullable`1, String ) in /Users/gmenounos/src/kw1281test/Cluster/MarelliCluster.cs:line 21
at BitFab.KW1281Test.Tester.DumpMarelliMem(UInt32, UInt32, ControllerInfo, String ) in /Users/gmenounos/src/kw1281test/Tester.cs:line 400
at BitFab.KW1281Test.Program.Run(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 341
at BitFab.KW1281Test.Program.Main(String[]) in /Users/gmenounos/src/kw1281test/Program.cs:line 31

Well I got the cluster to do something on this try

gmenounos · Feb 10, 2024

Mhughes216 said:
Well I got the cluster to do something on this try

Maybe try a couple more times. If it always gives a timeout error right after "Sending block 0x6C, Writing data to cluster microcontroller, Receiving ACK" then there might be something about 2008 Beetle clusters that isn't compatible with kw1281test.

Mhughes216 · Feb 10, 2024

gmenounos said:
Maybe try a couple more times. If it always gives a timeout error right after "Sending block 0x6C, Writing data to cluster microcontroller, Receiving ACK" then there might be something about 2008 Beetle clusters that isn't compatible with kw1281test.

Yeah it gives me that every time. There is a video on you tube about the chip being different, so I'm going educate myself on. Thanks for your help!

norrinraddhr · Feb 14, 2024

Hi guys,
I need some help from you about KKL Cables that I want to order from AliExpress. Can somebody just confirm what I found on AE, to pick up the right one, here is the link and some info about Cables that I found, need for my VW Golf 4 TDI with IMMO3, thanks.

AliExpress
1) VAG KKL 409.1 OBD2 Scanner CH340 Chip - (6,69€ with shipping)
2) VAG KKL 409.1 FTDI FT232RL Chip with Switch - (9,01€ with shipping)

1. Support OS: Windows XP, Windows 7
2. 409 is for F.i.a.t, for V for A for G
3. Chip CH340 or Chip 409 FTDI FT232RL Chip With Switch
4. 16pin OBD II style Data Link Connector

SWITCH options
Cable used to include a 4 way to switch to different ECU's access:
Position 1 = engine ECU (read / clear engine failure)
Position 2 = airbag ECU (read/remove airbag failure)
Position 3 ECU = ABS (read / erase fault code)
Position 4 = ESP ECU (read / clear fixed fault)

1)

2)

gmenounos · Feb 14, 2024

norrinraddhr said:
I need some help from you about KKL Cables that I want to order from AliExpress. Can somebody just confirm what I found on AE, to pick up the right one, here is the link and some info about Cables that I found, need for my VW Golf 4 TDI with IMMO3, thanks

Either will work. If you get the one with the switch, it needs to be in position 1 (labeled "7" in the photo) to work with your Golf.

norrinraddhr · Feb 15, 2024

Hi Greg,
thank you for your help and fast reply. I have seen many KKL Cables on AE, mostly they have three sorts of Chips and I like this Cable with FTDI Chip inside and Switch options, but what I don't know is how is the situation with drivers and Windows 7 that I use on my IBM/Lenovo laptops and what would you prefer?

VAG KKL Cables and Chips
1. Chip CH340
2. Chip CH340T
3. Chip 409 FTDI FT232RL With Switch options

turbodieseldyke · Feb 15, 2024

They're 10 bucks and 7 bucks. Why not get both?

gmenounos · Feb 15, 2024

norrinraddhr said:
Hi Greg,
thank you for your help and fast reply. I have seen many KKL Cables on AE, mostly they have three sorts of Chips and I like this Cable with FTDI Chip inside and Switch options, but what I don't know is how is the situation with drivers and Windows 7 that I use on my IBM/Lenovo laptops and what would you prefer?

VAG KKL Cables and Chips
1. Chip CH340
2. Chip CH340T
3. Chip 409 FTDI FT232RL With Switch options

Windows 7 drivers are available for both CH340 and FTDI:

If the FTDI chip is genuine then it's probably better, but there have been problems with fake FTDI chips in cheap Chinese cables: https://www.sevarg.net/2017/03/04/fixing-fake-ftdi-ft232rl-adapters-ssop/
so beware.

Matt-98AHU · Feb 16, 2024

Another successful cluster hack for VSS via CAN using kw1281test. I made a video about it... and I didn't remember the right baud rate, so here's an illustration of how important that is. lol

You can almost see what I'm typing. heh. You can select 4k video quality and go full screen, you can just about read it.

Someone did confirm to me that 2000-2001 cars can pick up VSS via CAN if you do swap to a newer cluster. Puts to rest my question on if the older Mk20 modules were infact sending the correct signal for a newer cluster to pick up.

02S swap all the mk4 TDIs! haha

kw1281test: A Free VDS-Pro / VagTacho Alternative

Vendor

Veteran Member

Vendor

Veteran Member

New member

Vendor , w/Business number

Veteran Member

Vendor

Vendor

Veteran Member

Veteran Member

Member

Vendor

Member

Vendor

Member

Member

Vendor

Member

Vendor

Member

Member

Vendor

Member

Member

Vendor

Member

Veteran Member

Vendor

Loose Nut Behind the Wheel Vendor