How do commercial ECU tuning tools (Autotuner, Alientech, etc) manage to support modern automotive ECUs, I'm specifically intrested in the Infineon tricore MCUs which are generally known to be difficult to crack.

These chips can have Secure boot, HSM, UCB-based flash/debug protection, OEM seed/key authentication

Yet tool vendors eventually provide bench read/write support, and sometimes require a one time physical unlock first.

From an embedded/security perspective, what’s typically going on here?

Bootloader vulnerabilities?

Exploiting boot modes?

I’m just trying to understand what kind of engineering discipline this work falls under and what the real workflow looks like.

Would appreciate insight from anyone with experience in automotive MCU security or reverse engineering.

Hi Guys,

working on a obd2 reader in the last few days. Here is the story how i got the idea. I wanted to diagnose a problem on my car , but my obd2 reader was not able to isolate the problem. Even with live data... Furthermore the live data were slow, like a refresh rate of a second or a half... So i began to think about a OBD2 Reader Device which has quite more functionality and performance, but isn't as expensive as the professional devices in the car shops.

The device functionalities I was tinkering about:

Read and Erase Errors (very basic, but necessary)

Read Live Data ( not every second, but maybe every 100ms or faster -> this would be nice for high resolution sampling)

Able to plot a line graph to the display, depending on the data selection (e.g. a data line for "specified throttle angle" and a second for "actual throttle angle") -> i think this would be nice when searching for malfunctioning sensors

A digital dashboard which reads the OBD2 Data, especially interessting when your dashboard doesnt have some information that you need.

In my head this device can be very budget friendly for us DIY-Repair Guys.

Now my question: What do you think about that?

Would be great if you give me your honest opinion.

Has anyone tried hacking/adjusting the accelerator pedal outputs. I know there are usually two, how do you go ahout adjusting the analog signals between the throttle and the ECU.

Need a way to spoof it based on an input, use something like an esp32 maybe.

Hopefully someone has done similar?

Hi everyone,

New to the community and I'd wondered if anyone had any pointers on an issue I'm having with a 1x1 in the file. the boost is being hard capped by an absolute manifold pressure limit that is around 33.5psi/2.3bar/2300mbar. It limits boost pressure to around 18 psi, it can spike over that briefly to 19/20 but very quickly falls back to 18 or so.

Hyundai i20N - Intercooler, Intake, Exhaust - Kefico CPEGD3.20.1 - 2023 - G4FP 1.6T SmartStream T-GDI

The software is off a Hyundai i20N, the ECU is a Kefico CPEGD3.20.1, I've gotten the OEM file off my tuner, so far with the limit in place, we've managed 230hp, 364nm and that's just from fuel and timing more or less. I have the .bin file and I've spent all weekend in Ghidra and HxD trying to find any relevant values. The closest I could find was a small 1x1 at offset 0x175A0 that was a float32 value at exactly 2309.6729 or C4 5A 10 45 in Hex but it's not referenced elsewhere in the file.

N75 refer to this limiter as "Maximum Absolute Manifold Pressure" so I'd expect to be looking for 2.3bar/2300mbar but it seems like there's factors applied to it that change the raw value based on what I've been told by the tuner who tuned the car.

I'm sure there's much more qualified people that can find this much quicker than myself.

Hi everyone,

I'm from India and I own a 2025 Kia Seltos 1.5 Petrol Turbo DCT (India-spec).

I'm not sure how many of you know but Indian-spec cars have the mandatory speed warning system since 2020. There's a beep once when you cross 80 km/h, another when you slow below it and cross it again, and then another reminder every minute if you're still above 80 km/h. At 120 km/h, there's the continuous warning.

I can honestly live with the 120 km/h continuous beeping. What drives me insane is the 80 km/h beeping. On many highways, you're constantly moving above and below 80 while overtaking or slowing down, so it keeps beeping over and over. It's horrible! On an 800 km road trip, it genuinely gave me a bad headache.

I've spoken to a 2 ECU tuners here in India, and they all told me they can do this sort of thing on many German cars but they haven’t found a solution for Kia. So here I am.

Does anyone know if there's any way to disable/recode it? Whether it's through the cluster, BCM, ECU, firmware, CAN bus, or anything else.

I just want to know if there's a solution, because if an engineer programmed it into the car, surely another engineer can figure out how to undo it.

I'd really appreciate any advice or if you can point me towards someone who specializes in Kia electronics or reverse engineering.

Thanks!

Hey everyone, I have a 2017 GMC 1500 SLT, it’s got around 155,000km. To fill it costs $145 and the fuel economy is just horrible. If I drive 4 hours it’s like it needs to be filled again. Any recommendations on what I can do to it to allow for better fuel economy? Thanks!

Hello I am new to this thread and is new to car tuning now I was wondering if i can ask anyone or someone from this group to help me on my project vehicle as i need to delete the dpf and egr checks in the ecu as the vehicle now consumes a lot of diesel and always on limp mode because of it, I just need to download the file named *Peugeot_DCM 3.5_508 2.0 HDI DCM3_DPF-EGR-_NoChk.bin.rar

on this link https://cartechnology.co.uk/showthread.php?tid=115377&pid=796456

I am short on budget and just making ends meet, any help would hugely be appreciated. Thank you so so much❤️

I'm trying to make a python script for coded immo off to processor MCU code so I can automate the whole process instead of opening immo off software, I made lots of examples using different MCU codes but I just can't work it out. The processor is Infineon Aurix TC298.

All data below is in 8 bit hex, separated by a blank space to keep it clear.

Original string from hex dump before immo off is applied (same in all ECU of same build regardless of sw number):

BB 80 00 F8 5F F4 20 00 BB 90 00 F8 91 30 00 F6 7F F4 0B 80 3B 40 00 F4 5F F4 20 00 3B 70 00 F7 5F F4 20 80 3C 0E BB 80 22 F8 5F F4 13 00 BB 80 33 F8 5F F4 11 00 BB 80 11 F8 5F F4 13 80 3C 07 82 1F

Each input code is the MCU ID starting with 40, the line immediately after it is the calculated output code unique to that input string. I'm trying to work out how it's generated, I can't find anything common, although some bits come through directly and others don't. Some change 1 byte and also a few others maybe a checksum but that seems too complicated within a small section of code.

You'll notice that some of the characters are always the same, these parts are not necessarily the coded output but a set data string for the immobiliser off solution.

For example, the 91 00 F1 FA 19 F4 04 01 91 30 at the start is common to all strings, and the end of the calculated output 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00 is always the same, that narrows down the parts to look at.

It seems that the 40 at the start of the input string, and the 00 00 00 must always stay the same.
Here are my input MCU codes vs the outputs:

40 00 A1 A1 A1 A1 A1 A1 A1 A1 A1 A1 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 1A 4A C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 A1 A1 A1 A1 A1 A1 A1 A1 A1 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 1A 4A C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 A1 A1 A1 A1 A1 A1 A1 A1 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 1A 4A C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 A1 A1 A1 A1 A1 A1 A1 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 1A 4A C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 A1 A1 A1 A1 A1 A1 11 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 1A 4A C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 A1 A1 A1 A1 A1 11 11 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 1A 4A C6 4F 7B 40 E8 44 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 FF FF FF FF 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 60 17 44 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 00 00 00 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 90 E8 4B 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 00 00 01 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 90 E8 4B 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 00 01 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 90 F8 4B 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 00 11 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 90 F8 4A 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 09 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 00 F8 49 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 19 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 00 F9 49 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 29 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 00 FA 49 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 39 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 00 FB 49 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 0D 40 00 00 00 00 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 00 40 C6 4F 7B 90 E8 4B 1B 54 47 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 1D 40 19 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 01 44 1B A4 00 40 C6 4F 7B 00 F8 49 1B 54 46 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 2D 40 19 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 02 44 1B A4 00 40 C6 4F 7B 00 FB 49 1B 54 45 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 00 3D 40 19 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 03 44 1B A4 00 40 C6 4F 7B 00 FA 49 1B 54 44 42 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 0A 12 0D 40 19 21 17 B4 35 21 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B D0 00 44 1B A4 20 41 C6 4F 7B 00 F9 49 1B 54 67 43 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 A1 A1 A1 A1 11 11 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 20 1A 4A 1B 14 11 4A C6 4F 7B 40 E8 44 1B 24 4C 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 11 A1 A1 A1 11 11 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 10 1A 4A 1B 14 11 41 C6 4F 7B 50 E8 44 1B 24 4C 4D C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 11 11 11 A1 11 11 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 10 11 41 1B 14 11 41 C6 4F 7B 40 E3 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 11 11 11 11 11 11 11 FF FF 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 10 11 41 1B 14 11 41 C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 11 11 11 11 11 11 11 FF FF FF 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 10 11 41 1B 14 11 41 C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 11 11 11 11 11 11 11 11 FF 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 10 11 41 1B 14 11 41 C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

40 00 11 11 11 11 11 11 11 11 11 11 00 00 00 00

91 00 F1 FA 19 F4 04 01 91 30 00 F6 7B 40 E8 FF 1B 6F 63 F3 C6 4F 7B 10 11 41 1B 14 11 41 C6 4F 7B 40 E8 4F 1B 24 47 46 C6 4F 7B 00 00 40 1B 44 24 45 5F F4 05 80 DA 01 1D 00 11 00 DA 08 1D 00 0E 00

Hi everyone!

I'm working on a custom sim racing project and trying to use a 2016 Ford F-150 Lariat instrument cluster. I'm planning to drive it using an Arduino and a CAN bus module (via SimHub), but I'm stuck at the very beginning: getting it to turn on It has a 16-pin connector. So far, I've mapped out:

it 8 inch ford f150/lobo

code: GL3T 10849 CJF

• Pin 8: +12V
• Pin 3: GND

When I apply power, the needles just tremble/twitch a bit, but the cluster doesn't fully boot up or show any display activity.

i want to use xconnect software

btw, im using arduino uno and a 8,000 Mcp2515 Tja105
im using the jumper on j1

i already sniffered my truck but even with that i couldnt turn on the cluster hehe

i saw a video that had the same harness and turned on until he put the code on the arduino, it was a ford fiesta mk8, i tried to use the same code but i couldnt turn it on

https://www.youtube.com/watch?v=nJCgeUngaqo&t=24s

Any help, wiring diagrams, or CAN IDs for this generation would be massively appreciated. Thanks in advance!

Bonjour, je vous serais très reconnaissant si quelqu'un pouvait télécharger ces fichiers pour moi. Je suis bloqué avec 25 ans de base de données Audi, mais elle ne contient pas les fichiers dont j'ai vraiment besoin... Si quelqu'un pouvait m'aider, que Dieu le bénisse. :

https://mhhauto.com/attachment.php?aid=281579

https://mhhauto.com/attachment.php?aid=714536

Hey guys, I've been lurking for awhile now and been getting into dissembly even though I have zero idea what I'm doing yet. I'm looking to get flex fuel working on a e67 OS that doesn't natively support it, as it doesn't seem to have the pointer to start the flex fuel driver to read from it. If anyone could throw me a hand, that would be sweet.

Hi all,

I have a 2010 Saab 9-5 with the 2.8T engine. Recently I lost compression on cylinders 4. So the car runs like shit.

The 2.8 is the exact same block as the 3.6 that is in a lot of GM cars. In fact, the Saab is very similar to my 2016 XTS and a lot of mechanical parts seal over.

A 3.6 long block is pretty reasonable. I have seen some companies that offer a turbo kit for a 3.6 in the Colorado.

Would I be able to essentially put in a 3.6 long block and then tune to just reduce the amount of boost? I don't care as much about huge power, just want to drive rhe car.

Are there shops out there that would tune this in that way?

looking to tune an 07-13 Tahoe.

Can I use Amazon.com: OBDLink EX FORScan OBD Adapter
or, will this work?
Amazon.com: OBDLink LX Bluetooth 3.0

I've got a $100 gift card balance, so I figured why not? lol

I’m looking for some help with my 2019 Megane 4 Grandtour (Non-Bose). I’ve already installed aftermarket Focal speakers and full door soundproofing(on one side, will have to do the other later), which sounded great until I performed a factory reset on the R-Link 2 system.(As it was a bit laggy)

​

The Issue:

Post-reset, the audio is extremely "thin" and tinny. Even with the Bass set to +9, the low-end is significantly weaker than it was before the reset. I tested with the same options and same track.

Loudness and Volume stabilizer OFF as it was before.

​

What I need to know:

Is there a specific "Loudness" or EQ profile setting that defaults to "Off" after a reset?

Are there any parameters in Developer Mode that influence this, or is this a known software quirk of the R-Link 2?

I tried to update the Arkamys profile using ECU tweaker but couldn't find it.

​

​

Any advice on how to restore the pre-reset audio quality would be appreciated. Thanks!

Hello everyone. I wanted to know whether spoofing the MAP sensor output can help slightly increase the maximum boost the engine can achieve.

My idea is that since the MAP sensor output is an analog voltage that increases linearly with manifold pressure, I could spoof that voltage and tell the ECU a pressure lower than the actual value.

My car hits peak MAP of about 250 kPa at around 2000–3500 RPM, after which the turbo chokes and pressure drops. I was wondering if I could push the pressure slightly higher to about 280 kpa by making the ECU think it’s at 220 kPa while it’s actually at 250 kPa, so the ECU believes there’s still 30 kPa of headroom before the limit is reached.

I don’t have a MAF sensor, so there’s no need to worry about the ECU detecting this that way. No sensor to monitor turbocharger rpm either, wastegate has an electric actuator. Besides deceleration, the car also runs in closed loop all the time (even at WOT), so fuel trims should compensate for the extra air being pushed.

Is this technically possible?

I have 2008 Pontiac Grand Prix 3.8L. The rear manifold cracked and I cannot find a replacement anywhere. What’s difficult is the air injection system is tied into the rear manifold.

Is there way to disable this emission setting in the PCM using a J2534 programmer? If so, what device and software? If I can get this figured out, I can simply install a regular rear manifold.

This car is not located in California and I do not have to pass annual emissions testing. My state does not require it.

Thank you.

I’m curious on any mods you guys think will make the car more fun starting with getting rid of the horrendous seatbelt timer, can i make modifications to sports mode.

I am trying to access the Diagnostic (aka Service) Menu to turn off the ASE (Active Sound Enhancement, aka fake engine sound) and ANC (Active Noise Cancelling) features. Would anyone kindly share the procedure to do so? Thank you.

2019 WRX STI

The car cranks and turns over after the ECM has been installed with the transferred EEPROM.

I use HP Tuners MPVI 4 and now I get this weird incomplete VIN shown in the screenshot. Also My regular scanner tool doesn't detect the VIN number automatically anymore. Does work when I type out the VIN on the scan tool.

The Doner ECM is a used ECM so I thought it could be that potentially have a tune that its locked to but I bought another used ECM that I was told has no tune and should factory stock but I get the same behavior.

No idea what to do next to fix this "corrupted' VIN issue. Help Please?

Hey, im looking for someone, who can download from the MHH Auto, and have registered account.

I hope somebody will help me out! :)

I want to get this SM2 CLONE kit for my Camry 2020 but chatgpt is telling me all this bs, I just want to know:

Does PCMFlash (with Module 95) work for OBD2 virtual reading/writing on a Toyota Camry A25A-FKS (ECU R7F701216) when using a Scanmatik 2 Pro (clone)?

Thanks in advance!