I'm going to start with steps. first I will explain the "AS-Built" that uses the Focus MK2, C-Max and Kuga, which means each digit, to understand all the steps that I will describe in this post.
This is As-Built Of my Car to Standard 6000 Radio CD:
727-01-01 0102 184B
727-02-01 5746 3052 58A8
727-02-02 5847 4344 52AA
727-02-03 3943 3838 3655
727-02-04 3933 A0
the first digits are to identify the data frame:
727-01-01
The following correspond to configuration and verification number, which are the last 2 digits
0102 184B
We are going to do a practice to calculate the verification digits, we need a HEX calculator and we do the following sum:
7+27+01+01+01+02+18 = 4B---> 4B are the last digits of the AS-Built File
ok, now we know the first and the last digist of the AS-Built code:
727-01-01 0102 18 4B
727-02-01 5746 3052 58 A8
727-02-02 5847 4344 52 AA
727-02-03 3943 3838 36 55
727-02-04 3933 A0
Now let's know where the module configuration is encoded and where the vin number is configured:
To configuration:
727-01-01 0102 18 4B
if the first numbers are to identify and the last is verify number, next numbers are to configure module, and it this:
010218
In kuga have next oiptions to configure:
ACU config.jpg
this code is diveded into 3 parts:
01
02
18, the key code activation is in the last pars "18"
in this 2 digits is possible activae or deactivate 4 options
each option has a value
front wofers = 80
rear wofers = 40
front tweeters = 20
rear tweeters = 10
keycode activated = 8
SpeedLock activatey = 4
Not used = 2
Not used = 1
Look at the screen shot to see this options. now to calculate only need sum the values in HEX calculator.
if you need activate all options:
front wofers = 80
rear wofers = 40
front tweeters = 20
rear tweeters = 10
keycode activated = 8
SpeedLock activatey = 4
Not used = 2
Not used = 1
----------------------------------------
Total in HEX = FF
Now how to deactivate PIN code with AS-Built or deactivate any option? is easy, only need rest value of the table with HEX calculator.
now i take my original AS-Built and edit to remove PIN code, and this is the operation:
727-01-01 0102 184B -> take a 18, the key code are in this block, and rest 8-> 18 - 8 = 10, now edit all AS Built and change verification code:
727-01-01 0102 1043
The problem is, when you actiavte keycode and speedlock, then you can never activate, the firmware of the unit dont acept deactivate.
To VIN Number:
727-02-01 5746 3052 58 A8
727-02-02 5847 4344 52 AA
727-02-03 3943 3838 36 55
727-02-04 3933 A0
if the first numbers are to identify and the last is verify number, next numbers are to configure module, and it this:
5746 3052 58
5847 4344 52
3943 3838 36
3933
Now put all numbers in line:
57 46 30 52 58 58 47 43 44 52 39 43 38 38 36 39 33
Now conver hex number to decimal
57=87, 46=70, 30=48, 52=82, 58=88, 58=88, 47=71, 43=67, 44=68, 52=82, 39=57, 43=67, 38=56, 38=56, 36=54, 39=57, 33=51.
this is the complete numbers in Decimal:
87 70 48 82 88 88 71 67 68 82 57 67 56 56 54 57 51.
This numbers are ASCII character, only need convert numbers to characters and you have a VIN number
87=W, 70=F, 48=0, 82=R, 88=X, 88=X, 71=G, 67=C 68=D, 82=R 57=9, 67=C 56=8, 56=8, 54=6, 57=9, 51=3.
And now we have my VIN number:
W F 0 R X X G C D R 9 C 8 8 6 9 3.
Tomorrow more......
