K Bus codes for info, enjoy

[Keith]

These are for the E46 which our cars are based on, any Ibus interface and a laptop can be used for extracting and trying these.

Warning results could be unpredictable and may need a battery off reset if anythng odd happens.

I have not tried many of these yet but am going to make a List for reference and try them at a later date.

Testbook uses codes just like these to test things

The ones I am still looking for are the codes for the FBH

Note you will not activate the airbags whilst playing with these :)


3F 06 72 0C 01 01 00 move driver seat forward
3F 06 72 0C 01 02 00 move driver seat backward
3F 06 72 0C 01 04 00 move driver seat up
3F 06 72 0C 01 08 00 move driver seat down
3F 06 72 0C 01 40 00 move driver seat upper portion forward
3F 06 72 0C 01 80 00 move driver seat upper portion backward

3F 06 72 0C 02 01 00 move driver seat to memory 1
3F 06 72 0C 02 02 00 move driver seat to memory 2
3F 06 72 0C 02 04 00 move driver seat to memory 3

9B 04 51 6D 41 passenger mirror move out
9B 04 51 6D 42 passenger mirror move in
9B 04 51 6D 44 passenger mirror move up
9B 04 51 6D 48 passenger mirror move down
9B 04 51 6D 40 passenger mirror stop (motor won't stop until you tell it)

3F 05 00 0C 01 01 turn off interior lights
3F 05 00 0C 02 01 open trunk
3F 05 00 0C 03 01 lock doors + fade out interior lights
3F 05 00 0C 05 01 open trunk (again??)
3F 05 00 0C 13 01 return some data, relating to light control? (unsure)
3F 05 00 0C 30 01 turn on key buzzer for 2 seconds + fade-in/out interior lights
3F 05 00 0C 34 01 lock/unlock doors

3F 05 00 0C 41 01 Open rear driver window
3F 05 00 0C 42 01 close rear driver window

3F 05 00 0C 43 01 close rear passenger window
3F 05 00 0C 44 01 open rear passenger window

3F 05 00 0C 45 01 trigger unknown relay (coming from rear doors?)

3F 05 00 0C 46 01 lock front passenger door only
3F 05 00 0C 47 01 lock front driver door only

3F 05 00 0C 49 01 trigger wipers
3F 05 00 0C 4A 01 trigger unknown relay (under cluster)
3F 05 00 0C 4B 01 trigger windshield washer pump for 3 seconds (no liquid sprayed)
3F 05 00 0C 4E 01 turn-on clown nose for 3 seconds
3F 05 00 0C 4F 01 lock all but driver door

3F 05 00 0C 52 01 Open front driver window
3F 05 00 0C 53 01 close front driver window

3F 05 00 0C 54 01 Open front passenger window
3F 05 00 0C 55 01 close front passenger window

3F 05 00 0C 60 01 turn on interior lights for 3 seconds
3F 05 00 0C 62 01 spray windshield washer fluid
3F 05 00 0C 63 01 trigger trunk relay for 3 seconds (use 95 01 or 02 01 instead for release only)
3F 05 00 0C 68 01 fade out interior lights
3F 05 00 0C 70 01 flash hazards + turn on interior lights
3F 05 00 0C 73 01 trigger many door relays, don't know what it does
3F 05 00 0C 75 01 flash hazards for 3 seconds (no blinker in-dash)

3F 05 00 0C 7E 01 open sunroof
3F 05 00 0C 7F 01 close sunroof

3F 05 00 0C 95 01 open trunk (yes, again!)
3F 05 00 0C 97 01 lock/unlock doors

3F 0B BF 0C 00 00 00 00 00 00 01 06 FOG LIGHTS

3F 0B BF 0C 00 00 00 00 00 40 00 06 LEFT BRAKE LIGHT DIM
3F 0B BF 0C 00 00 00 00 00 00 08 06 RIGHT BRAKE LIGHT DIM

3F 0B BF 0C 00 00 00 00 01 00 00 06 HIGH BRAKE LIGHT
3F 0B BF 0C 00 00 00 00 08 00 00 06 LEFT BRAKE LIGHT
3F 0B BF 0C 00 00 00 00 10 00 00 06 RIGHT BRAKE LIGHT
3F 0B BF 0C 00 10 00 00 00 00 00 06 BOTH BRAKE LIGHTS + HIGH BRAKE LIGHT

3F 0B BF 0C 00 00 00 00 00 02 00 06 RIGHT LOW BEAM (XENON)
3F 0B BF 0C 00 00 00 00 00 04 00 06 LEFT LOW BEAM (XENON)

3F 0B BF 0C 10 00 00 00 00 00 00 06 DAY-TIME RUNNING LIGHTS

3F 0B BF 0C 00 00 00 00 00 10 00 06 LEFT HIGH BEAM
3F 0B BF 0C 00 00 00 00 00 20 00 06 RIGHT HIGH BEAM
3F 0B BF 0C 00 00 80 00 00 00 00 06 BOTH HIGH BEAMS + IN-DASH INDICATOR

3F 0B BF 0C 00 00 00 00 00 00 20 06 LEFT SIDE MARKER + LEFT REAR FLASHER (STAY LIT)
3F 0B BF 0C 00 00 00 00 00 00 80 06 RIGHT SIDE MARKER + RIGHT REAR FASHER (STAY LIT)

3F 0B BF 0C 00 00 00 00 20 00 00 06 FRONT LEFT FLASHER (STAY LIT)
3F 0B BF 0C 00 00 00 00 40 00 00 06 FRONT RIGHT FLASHER (STAY LIT)

3F 0B BF 0C 80 00 00 00 00 00 00 06 PARKING LIGHTS (XENON ACTUATOR MOVES)
3F 0B BF 0C 00 01 00 00 00 00 00 06 PARKING LIGHTS (XENON ACTUATOR MOVES)
3F 0B BF 0C 00 02 00 00 00 00 00 06 PARKING LIGHTS (XENON ACTUATOR MOVES)

FLASHERS
3F 0B BF 0C 00 00 00 40 00 00 00 06 FLASH TO LEFT
3F 0B BF 0C 00 00 00 80 00 00 00 06 FLASH TO RIGHT
3F 0B BF 0C 20 00 00 00 00 00 00 06 HAZARDS

[DeeCee]

More info on I/K Bus plus BMW circuit info..

http://www.baso.no/

Checkout the BMW E39 Section.


Maybe all of this should be in the useful info sections ?

[Neil Coupland]

OK, I've looked through the list Keith and have to ask, what on earth is
3F 05 00 0C 4E 01 turn-on clown nose for 3 seconds?
Are our cars pre equipped for Comic Relief!!:D

[Keith]

I have no idea! I just copied them from threads elsewhere I wonder if it is supposed to be Chime Noise?

One day all will become clear :)

DeeCee found this thread which potentially is very interesting as if you think along similar lines people are slowly chipping away at the ECUs and one day things like TestBook (or in this case the BMW equivalent) could be replaced with a diy tool.

http://www.x5world.com/navigation-system/23730-coding-your-own-nav-system-without-going-dealer.html

[Roverron]

Well done tracking all this down.

I presume you've been using your testbook?

Any progress on investigating the access algorithms it uses so we can use an ELM327 or Myobdic interface, oreven a dumb Vagcom one?

Ron

[Keith]

Well done tracking all this down.

I presume you've been using your testbook?

Any progress on investigating the access algorithms it uses so we can use an ELM327 or Myobdic interface, oreven a dumb Vagcom one?

Ron

No these are from the hack the Ibus forum for a BMW E46 I will test them at some stage and see if any are the same in our cars

Basically it is a process of monitoring the K-Bus and playing with stuff whilst capturing the Data

[JohnFol]

Clown nose is the big red LED lense mounted to the underside of the rear view mirror. In the US they can also house a transmitter to operate garage doors

[JohnDotCom]

Well I never new that, thanks for the Info.

[black olive]

could also be linked into the speed signal and a camera detector, and used to fire an infra red laser pulse to disable the speed camera, thus giving the 75 and zt an active speed camera system. :D

[JohnFol]

it also doubles up as infra-red indicators which is why you might not see the traditional flashing orange bulbs.

[CDTi]

http://www.x5world.com/navigation-system/23730-coding-your-own-nav-system-without-going-dealer.htmlThats an interesting link. It seems like you can change the country code (and so I presume the language) on the sat nav system.

I wonder can you do the same on our cars?


Or maybe change the language on the IPKs by changing the GM codes i.e.
GM BLOCK
Country Group: Selection of countries, Mexico, Asia and Pacific, UK, Japan, Australia, Gulf, ECE.
Instrument Pack Language: This is the language that will be used by the instrument pack to display information on the LCD display, and by other systems. The choices are: English (UK), English (US), German, French, Italian, Spanish.