Its actually worse than this; you never really know if you are stomping on something.

In this particular case, you know your'e stamping on something having to do with the RSA check, so you can disassemble the RSA routine and determine it that way, and move it to another arbitrary location.

And even then it doesn't tell you the new location isn't being used elsewhere.

You could try logging potential locations and see if they change, but even that isn't 100% because when YOU decide to change that location, maybe some other code is monitoring that location for a change.

It works!!!! Thanks to this incredible site. Always learning!!!!

https://youtu.be/eXW6vsHuM78

almost there , read again and again pdf

but still afraid to test it for real

what conditions value would be as safe as possible for the IgnitionCutDuration: 0x17E04 size 2, 16bit LSB, conversion: X * 20 (ms) ?

 ::)and i just got a joker from @sn00k how conditions could be changed for your preferred values

example :

A6 01 50 46 0A 00 F0 55 E6 FF FF FF FF FF FF FF

LaunchRPM: 0x17E02 size 2, 16bit LSB, conversion: X * 0.25 (rpm)  - 5046 - 4650(16) = 18000(10) * 0.25= 4500 rpm launch set

i did set mine on 4000 rpm =  4000/0.25=16000 = 3E 80  and because of LSB should be write in the conditions 80 3E