# MED17.5 - TC1766

1. Connect to Thing and identify.
2. Write down the flash count.
3. Connect to AutoTuner.
4. Bench read ECU.
5. The file you need won’t save where you tell it to. AutoTuner will tell you where it saved the other zip file. View the zip file before extracting and note whether dflash0 or dflash1 has a larger compressed size. Then extract.
6. Import whichever dflash was bigger (to WinOLS or XHD).
7. Convert the flash counters (the ones read with Thing) into hex and search the binary for that string of hex (“flash attempts” “flash successes”).
8. Rewrite the flash counters to 01 or 00 and export the file.
9. Repair checksums using the EDCImmo tool.
10. Turn the Immobilizer off.
11. Save the Immo-Off/Checksummed file to the same place and name as the dflash file you opened to make these changes, compress and write to the ECU.
12. Connect to Thing and identify. Make sure flash counters have been reset.
13. Flash a stock file for that box code.
14. Repeat steps 3-5.
15. Repeat steps 10-12 but turn Immobilizer “On” instead of “Off”

# MED17.1 - TC1796

1. Connect to Thing and identify.
2. Write down the flash count.
3. Connect to KTag (must be ran on a Virtual Machine since our firewall does not permit the KSuite to run).
4. Read Backup using the GPT protocol (not TPROT).
5. Open the EEPROM (.EPR file) in WinOLS or HxD.
6. Search the binary for the flash counter string of hex that you recorded from Thing (“flash attempts” “flash successes”) (Flash attempts should be 5 pairs of hex and successful flashes should also be 5 pairs of hex)
7. Ex. A Thing read that looks like this:

   Programming Attempts: 0x64/0x33/0x33/0x64/0x33
   Successful Flashes: 0x64/0x33/0x33/0x33/0x33

8. Would need a search that looks like this:

   64 33 33 64 33 64 33 33 33 33

9. Rewrite the flash counters to 01 or 00.
10. Add check sums with WinOLS and export. (With HxD, import and run checksums with the EDC17Immo tool. Correct checksums and recheck).
11. Connect to Thing and identify. Make sure flash counters have been rese