I had to open a deadlocked passenger door at the weekend in my project car with loom damage. It wasn't responding to the remote, key action in the driver/boot locks or the unlock signal from the EWS when the engine fires. I was determined not to have to remove the door card with the door shut.
So I removed the appropriate connector from the ZKE and bypassed the ZKE by sending the power straight to the door from the battery through the appropriate connector sockets. The ZKE takes various inputs which it may use to block the request from the keys & EWS. This is what was happening to me (due to loom damage). So I took it out of the equation. And it worked
The ZKE takes inputs from the window switch through connector X13254. And sends the power to the window regulator through connector X13253. These are the green and purple connectors respectively.
So by injecting the power directly onto connector X13253 with it disconnected you can test the windows. And by doing it onto X13254 with it connected you can simulate the request from the window switches. By back probing the connections on X13254 (connected or disconnected) you can also test if the window switches are sending the signals.
I've attached the ZKE pinout. You would need to read it in conjunction with a wiring diagram to understand what does what and hence where to prod.
You can also control many of the electrics on the car from within INPA. This includes the windows as I had them going up and down from within the software when I was trying to fire the passenger door actuator. You can also test the alarm, hazard lights etc. If the windows work like this I suspect it means the ZKE is fine as INPA would be directly controlling it by sending requests directly instead of the usual inputs (ie switches or for central locking the keys).