SKC From Bin File

   #1  
G

GXCars

Verified VCDS User
Verified
Joined
Mar 14, 2018
Messages
64
Reaction score
28
Location
UK
VCDS Serial number
C?ID=248011
I wonder if someone can point me in the right direction

I need to add another key to my sons 2010 Polo 6R as he's managed to lose one of them, I'll then use VCDS to code up the new key

However my SKC retrieval tool is busted (long story...) I've used one of my other tools to read the bin file from the cluster but now need to figure out where the SKC is written in the hex file and then how to retrieve it, I can open the bin file in HxD but dont know which bytes its stored in.

Does anyone know either what software could be used or how to decipher the bin file to extract the SKC, I realise I could get a locksmith to do me a key for around £80 but I love a challenge (which i'll probably regret later..)

Thanks in advance

Code: 
Sunday,05,April,2020,14:52:57:17347
VCDS -- Windows Based VAG/VAS Emulator Running on Windows 10 x64
VCDS Version: 20.4.0.1 (x64)
Data version: 20200331 DS317.0
www.Ross-Tech.com


VIN: WVWZZZ6RZBY203736   License Plate: PF60XXX
Mileage: 156750km-97399mi   Repair Order: 



--------------------------------------------------------------------------------
--------------------------------------------------------------------------------


Chassis Type: 6R-VW25 (6N0)
Scan: 01 03 04 08 09 15 17 19 25 44 56

VIN: WVWZZZ6RZBY203736   Mileage: 156750km-97399miles

01-Engine -- Status: OK 0000
03-ABS Brakes -- Status: OK 0000
04-Steering Angle -- Status: OK 0000
08-Auto HVAC -- Status: OK 0000
09-Cent. Elect. -- Status: OK 0000
15-Airbags -- Status: OK 0000
17-Instruments -- Status: OK 0000
19-CAN Gateway -- Status: OK 0000
25-Immobilizer -- Status: OK 0000
44-Steering Assist -- Status: OK 0000
56-Radio -- Status: Malfunction 0010
 
-------------------------------------------------------------------------------
Address 01: Engine (J000-CFWA)       Labels:. 03P-906-021-CFW.clb
   Part No SW: 03P 906 021 A    HW: 03P 906 021 
   Component: R3 1.2l TDI   H04 9979  
   Revision: 11001001    Serial number:               
   Coding: 00114014000500080000
   Shop #: WSC 51498 001 1048576
   ASAM Dataset: EV_ECM12TDI03103P906021A 001024
   ROD: EV_ECM12TDI03103P906021.rod
   VCID: 2644570659A4CEB658-8072

No fault code found.
Readiness: 0 0 0 0 1 

-------------------------------------------------------------------------------
Address 03: ABS Brakes (J104)       Labels:. 6R0-907-37x-ESP82.clb
   Part No SW: 6R0 907 379 AK    HW: 6R0 907 379 AF
   Component: ESP8.2i front H05 0001  
   Revision: --------    
   Coding: 230224E3416D00B5C42C24E582D700821100
   Shop #: WSC 00788 648 00255
   VCID: 071A3A82B26EF7BE43-8052

No fault code found.

-------------------------------------------------------------------------------
Address 08: Auto HVAC (J301)       Labels: 6R0-820-045-9AB.clb
   Part No SW: 6R0 820 045 G    HW: 6R0 820 045 G
   Component: Man AC         02 0101  
   Revision: 0002S 02    
   VCID: 326CBB566D6CA216C4-8066

No fault code found.

-------------------------------------------------------------------------------
Address 09: Cent. Elect. (J519)       Labels:. 6R0-937-08x-09.clb
   Part No SW: 6R0 937 086 H    HW: 6R0 937 086 
   Component: BCM PQ25 M++4 H46 0230  
   Revision: BD046001    Serial number: 0392 003111860
   Coding: 24B029BF08A10000002008003D2B0CD00000410F60060000200000000000
   Shop #: WSC 124697 483 00190
   VCID: 418EE49AD8CA098E4D-8014

   Subsystem 1 - Part No SW: 6R0 959 802 AB    HW: 6R0 959 802 AB  Labels: 6R0-959-802.CLB
   Component: J386__TSG_FT  007 1621 
   Serial number: KU0-KU005.01.1116569
   Coding: 08BC30

   Subsystem 2 - Part No SW: 6R0 959 801 AD    HW: 6R0 959 801 AD  Labels: 6R0-959-801.CLB
   Component: J387__TSG_BT  007 1621 
   Serial number: KU0-KU007.01.1113261
   Coding: 08BC30

No fault code found.

-------------------------------------------------------------------------------
Address 15: Airbags (J234)       Labels:| 5K0-959-655.clb
   Part No SW: 6R0 959 655 K    HW: 6R0 959 655 K
   Component: VW10Airbag01X H09 0020  
   Revision: --------    Serial number: 003GX00DDSH.
   Coding: 003158
   Shop #: WSC 00788 648 00255
   ASAM Dataset: EV_AirbaVW10BPAVW250 A01001
   ROD: EV_AirbaVW10BPAVW250.rod
   VCID: 4A9CC3B6EDFCCAD69C-801E

   Crash sensor for side airbag: driver side: 
   Serial number: 3575HRB405T0BI7U7OFA

   Crash sensor for side airbag: front passenger side: 
   Serial number: 3585HRB404V0C15ID0E6

   Crash sensor for side airbag: rear: driver side: 
   Serial number: 3515RRB404V0AMH8CPVS

   Crash sensor for side airbag: rear: passenger side: 
   Serial number: 3525RRB404T0AMH8KOKN

No fault code found.

-------------------------------------------------------------------------------
Address 17: Instruments (J285)       Labels:| 5K0-920-xxx-17.clb-SRI1
   Part No SW: 6R0 920 961 F    HW: 6R0 920 961 F
   Component: KOMBI         H04 0304  
   Serial number: 00000000000000
   Coding: 440200
   Shop #: WSC 00788 648 00255
   ASAM Dataset: EV_Kombi_UDS_VDD_RM09 A04086
   ROD: EV_Kombi_UDS_VDD_RM09_004_VW25.rod
   VCID: 397E8C7AB81A514E05-806C

No fault code found.

-------------------------------------------------------------------------------
Address 19: CAN Gateway (J533)       Labels:. 6N0-909-901-6R.clb
   Part No SW: 6N0 909 901     HW: 6R0 937 086 
   Component: GW-K-CAN TP20 0230  
   Coding: 002100
   Shop #: WSC 124697 483 00190
   VCID: 70E8715EA3E0D006F2-8024

No fault code found.

-------------------------------------------------------------------------------
Address 25: Immobilizer (J334)       Labels:| 5K0-920-xxx-25.clb
   Part No SW: 5K0 953 234     HW: 5K0 953 234 
   Component: IMMO          H04 0304  
   Serial number:               
   Coding: 000000
   Shop #: WSC 00000 000 00000
   ASAM Dataset: EV_Immo_UDS_VDD_RM09 A03008
   ROD: EV_Immo_UDS_VDD_RM09_VW21.rod
   VCID: 6ADC63368D3C2AD6BC-803E

No fault code found.

-------------------------------------------------------------------------------
Address 44: Steering Assist        Labels: 6Q0-423-156.clb
   Part No: 6R0 423 156 B
   Component: LenkhilfeTRW        V277  
   Coding: 11230
   Shop #: WSC 00788  
   VCID: 2F6AB222EA5E8FFEAB-807A

No fault code found.

-------------------------------------------------------------------------------
Address 56: Radio (J503)       Labels:. 5M0-035-1xx-56.clb
   Part No SW: 5M0 035 186 AA    HW: 5M0 035 186 AA
   Component: Radio RCD310  016 0049  
   Revision: 01000000    Serial number: VWZ1Z2L0306610
   Coding: 0700040002
   Shop #: WSC 00788 648 00255
   VCID: 6BD266328AC633DEC7-803E

1 Fault Found:
00857 - CD Changer Unit (R41) 
            004 - No Signal/Communication
             Freeze Frame:
                    Fault Status: 01100100
                    Fault Priority: 5
                    Fault Frequency: 1
                    Reset counter: 190
                    Mileage: 156759 km
                    Time Indication: 0
                    Date: 2014.08.27
                    Time: 02:18:05


End-------------------------(Elapsed Time: 02:03)--------------------------

--------------------------------------------------------------------------------
--------------------------------------------------------------------------------


Address 56,5M0 035 186 AA,recoded (Long Coding),from,0700040002,to,0500040002,(00788/648/00255),
 
   #2  
Uwe

Uwe

Benevolent Dictator
Administrator
Joined
Jan 29, 2014
Messages
49,245
Reaction score
33,795
Location
USA
VCDS Serial number
HC100001
Moving to General VW/Audi Repair because the question doesn't involve VCDS.

I will also point out that a PIN/SKC code is not sufficient to match a key to this car. Being a 2010 model with a UDS cluster/immo, I am near certain that it requires an Immo-4 challenge/response. The immo produces a challenge that changes with every cycle of the ignition (you can see this in Advanced ID) and the response must be calculated from this challenge. I would suppose that the PIN code is one of the inputs needed to generate the response from the challenge, but calculation is never done on the dealers' tool/software, only on VWAG's corporate servers, which makes reverse-engineering it rather difficult...

I suspect the "locksmith tools" that can do key matching on these immos don't actually do it correctly, but use more crude methods that often produce undesired side effect such as a mangled ASAM ID.

-Uwe-
 
   #3  
G

GXCars

Verified VCDS User
Verified
Joined
Mar 14, 2018
Messages
64
Reaction score
28
Location
UK
VCDS Serial number
C?ID=248011
Thanks Uwe,

I was under the impression that all of the immo4 cars had a rolling code system just the transponder chips were different. I had the locksmith do one on a caddy which has the same protocol on the cluster as it was a 2012 van and he just logged in and matched up the key. I think I still have a scan and dont recall seeing anything amiss afterwards. I have a licensed odis but no Geko as its something I've not needed to do and its cost prohibtive for the odd one

My other van had a butchered immo and I ended up having to get the ECU and cluster reflashed and new chips but this one is later so I'll have to dig a little more


Ian
 
   #4  
Jetta 97

Jetta 97

Professional User
Professional VCDS User
Joined
Apr 22, 2014
Messages
1,549
Reaction score
1,547
Location
Dallas (McKinney) ,TX ,USA
VCDS Serial number
C?ID=81680
Like UWE said Pin is useless on this car and VCDS will not be bale to do it.
Also all data in bin file in encrypted and there is no way to decrypted it just like that , so you will not be bale to read any info even if you know where is the store.
Just call your lock smith guy and let him do the job.
 
   #5  
Jetta 97

Jetta 97

Professional User
Professional VCDS User
Joined
Apr 22, 2014
Messages
1,549
Reaction score
1,547
Location
Dallas (McKinney) ,TX ,USA
VCDS Serial number
C?ID=81680
Uwe said:
Moving to General VW/Audi Repair because the question doesn't involve VCDS.

I will also point out that a PIN/SKC code is not sufficient to match a key to this car. Being a 2010 model with a UDS cluster/immo, I am near certain that it requires an Immo-4 challenge/response. The immo produces a challenge that changes with every cycle of the ignition (you can see this in Advanced ID) and the response must be calculated from this challenge. I would suppose that the PIN code is one of the inputs needed to generate the response from the challenge, but calculation is never done on the dealers' tool/software, only on VWAG's corporate servers, which makes reverse-engineering it rather difficult...

I suspect the "locksmith tools" that can do key matching on these immos don't actually do it correctly, but use more crude methods that often produce undesired side effect such as a mangled ASAM ID.

-Uwe-
Click to expand...
Uwe, trust me , Immo challenge works different way. Mainly is relation ship between ECU and Cluster .
Good example is 2006-2008 Passat has immo challenge and Key and EVL can be adopted with Pin only.
In newer cars they just chnage Security Access and Pin is not only one that you need.

I also was able to program key on 2010 Bentley Continental only with Pin.
 
Last edited:
You must log in or register to reply here.
Back
Top