Consulting

Hands-on help with automotive reverse engineering — from signal hunting and RAM tracing to secure multimap implementations.

What I help with

ECU reverse engineering — TriCore & PowerPC families, firmware structure, boot-mode strategies, RAM discovery, integrity checks.
Bus work — CAN / ISO-TP: sniffing, decoding, message mapping (buttons, modes, dash), FlexRay strategy when needed.
Diagnostics & tooling — UDS / XCP / CCP fundamentals in practice: how they work, how to leverage them for safe feature work (not just theory).
Multimap mentorship (A→Z) — plan, locate map families, design selectors, validate on bench/dyno, harden and document.
Bin archaeology — pattern-finding in binaries, map/limit detection, state variables, simple telemetry overlays.
Project guidance — get “on the rails”: what to try first, what to ignore, and how to structure a reproducible workflow.

Quick brief: email me your project (car/ECU, current status, goal). I’ll reply with a plan and realistic first steps.
Session: live call or screen-share; we review data (bin/ram logs/captures), design experiments, and build a working path.
Deliverables: concise notes with next steps; optional code snippets, offsets/addresses (where appropriate), and checklists.

€350 per hour (+ VAT if applicable).

Longer engagements available; we can invoice and plan milestones. Unused pre-paid time is refundable.

Focused, practical guidance — no generic slides; we work on your target and constraints.
Confidentiality — I never share other clients’ solutions or internal notes. Your project stays your project.
Realistic scope — if a path is noisy/expensive, I’ll say so and offer safer, faster alternatives.

Bring: bin(s) or partial dumps, basic comms logs (CAN/ISO-TP/FlexRay if available), toolchain list, exact goal.
Training? Yes — I do individual trainings if you’re ready to invest the time. We’ll build your workflow step-by-step.
Not “A2L-only” multimap: many projects don’t have A2L. We’ll map signals/variables and design selectors without relying on shortnames.
Ethics & safety: research and educational use only; keep vehicles safe and legal. I won’t replicate others’ private IP.

Clear plan to reach your goal (bench → car → validation).
Working selector for multimap (dash/buttons/CAN strategy) and verification method.
Identified RAM variables or map regions relevant to your feature.
Hardening notes (cloning resistance, checksums, recovery strategy).

Timezone: Europe/Riga. If you need NDA, mention it in your first email.