Clone for CAYC Simos PCR2.1 HW23

[TomLee7]

Hi Guys,

does anywone know if it is possible to clone between this 2 ECUs or is there any other solution with julie emulator to switch off immo?
Car starts with new ECU for a few seconds.

Original:
03L 906 023 B
CAYC 5863 HW23 5WP42899

to

New ECU:
03L 906 023 DQ
CAYC 5915 HW23 5WP42810

I will upload all data readed and unlocked with Kess V2 (Both ECU, EEPROM and Unlocked)

Thank you in advance.

[TomLee7]

Links for Google Drive.

03L 906 023 B
https://drive.google.com/file/d/1PTgzsOkGsEBEsOxNSQ2APZ4nZ6jJBO9N/view?usp=sharing

03L 906 023 DQ
https://drive.google.com/file/d/1SyfsPT6SL-YZPOj3wDBKCO7SbOXkVdOh/view?usp=sharing

[rafal]

it is not easy and cheap job............but possible

[TomLee7]

What is necessary for this job and how expensive would it be?

[brend]

First prepare eep then reflash.

[TomLee7]

As far as i know there is some key in eeprom but i've heard that the TriCore has got a storage block OTP which is write protected there is maybe also this "key" and its compared with the gateway or tachometer ecu. Do you know something about this immobilizer? Or how is it possible to bypass this immobilizer verification?

[brend]

What just do not read about pcr 2.1............lol





And the fact that the from ..Planet Mars.... came up with PCR 2.1 didn't tell for you?


As far as i know there is some key in eeprom but i've heard that the TriCore has got a storage block OTP which is write protected there is maybe also this "key" and its compared with the gateway or tachometer ecu. Do you know something about this immobilizer? Or how is it possible to bypass this immobilizer verification?

[TomLee7]

Well i'm really new to this ECU stuff. I don't know which information is right that's why i'm searching for informations from much more experienced people in this forum.

The first step i will try is to catch this CS Pincode or Mac from the old EEPROM adapt Julie Emulator to Original ECU and solder it in new ECU.
The original ECU is broken so i need to adapt or clone the new ECU.

What do you think?

[TomLee7]

Which changes are necessary in EEPROM?
How can i read this CS Pincode and MAC value?

I've already tried to flash the original EEPROM to the new EEPROM (no problems) and afterwards flash original MCU FLASH to the new MCU FLASH but KESS V2 reported an error after flashing @ 100%.

[brend]

If you can , so do it!
If not you can ask help in DK........777795



Which changes are necessary in EEPROM?
How can i read this CS Pincode and MAC value?






Work with Pcr2.1 you can't just like that's copy/paste .


I've already tried to flash the original EEPROM to the new EEPROM (no problems) and afterwards flash original MCU FLASH to the new MCU FLASH but KESS V2 reported an error after flashing @ 100%.

[TomLee7]

What means DK?
Where can i find this help?
How can i get the MCU ID and CS, MAC?
Are the files from KESS V2 good enough to find out this values?
Or do i need PCMFlash, AVDI Abrites or XCAN from SMOK?
Does anyone has got this Tools or SW?