if your PCB is same with foto ..... read like this

Why not just use galletto? Or immo off and port write on bench with kess

need boot and cnf1...get a genuine tool.

So where should I connect the CNF1?

I have read it FLS, MPC, EEP, but all EEP is FFFFF...

I understand that I should use HW I family 50 for my ECU PCB?
Where should I connect CNF1?


I read the FLS correctly, but I also want to read the EEP to have a full backup.

protocol 50 has no cnf1
protocol 53 has but i assume it is not your pcb as you have just posted random pics that don declare what you do have.

Ktag will automaticaly read the eeprom in boot mode on any case and will ask you to save everything seperatly and then you get mpc flash and eeprom.

Ktag usually detect wrong protocols so if it didn`t complain it should give you a complete backup of your ecu..

This is why you buy Genuine tools so they can help you(alientech) do what needs to be done and not confuse or waste everyone's time.

Now if you still can`t figure this out desolder the eeprom and read it with an eeprom reader, then you will have the eeprom too...

Ground cnf1, remove resistor if it won't go into bootmode and use galletto to read as any other me7. Keep cnf1 grounded the entire time and ground boot pin while on powerup only