I have a couple older Keyence KV-40dt that I need to modify the program on. The equipment designer is long gone, but I think the program is read protected. This is done using MEMSW $8000. Some of the programs are fairly complicated, so it is potentially worth some effort to get access.
I found this software program to backup the program: http://forums.mrplc.com/index.php?/files/file/647-backup-tool-for-keyence-plc/
It is a demo version that allows downloading the program. However this demo version doesn't allow reloading that program. The company seems defunct and I can't find any valid contact info or a non demo version that allows reloading the program. In another post PLCutils mentions " Any person can read such "pseudo" protected program the same way as Ladder does it with 0x32, 0x00, command." However, I don't know how to write a program to the PLC.
The program downloads a .cod file. In a hex editor it looks all scrambled, but I was going to try to decipher how the MEMSW $8000 gets written and edit the hex. I need to be able to reload the .cod file for this to work. Does anyone have any ideas?
I also saw that .cod files are read by the KV Incrediware software for dos. I don't know if this is the same .cod file format that I have, but I may try getting a copy of that.
