Any luck with this?
I’ve been doing a lot of research, the difficulty is that the protocols of our ECUs are 9141 and not CAN, this can make it difficult but it shouldn’t be impossible to get this to work.
From my research, I believe this is the data you want to enter:
TData: 686AF101B40000
TCtrl: 85
RCtrl: 31 (or if Mtch is 2 bytes, then 21)
RPos: It’s either 2808 or 1808 (could be both)
Mtch: 41B400 (or 41B4)
X: 0009
/: 0005
+: FFD8
Out format: 00 (or it could be 10)
Ave: 00
Left/Right: 31
I’m pretty confident on everything except TCtrl, and RCtrl.
The TCtrl is used to determine what inputs in TData are sent to the ECU to retrieve a response. UltraGauge says TCtrl is usually 93, but that represents everything non-GM CAN protocols. Because our protocols are 9141, I do not know if this number is correct and may require some trial and error. Just about every TCtrl I see, the first nibble is 9, but that is for CAN. Every non-CAN number I've seen starts with 8. The second nibble (the "5" in 85) represents the numbers of bytes to read in TData (unless there is an address). The first 2 bytes are typically the address in the Toyota CAN protocol, so if there is an address it should be 3, but because our vehicles use the 9141 protocol I believe it should be 5.
The RCtrl is used to control which byte positions within the Mtch packet (assuming a correct response) are the correct ones to compare. Since there are 3 bytes in Mtch (or 2), the first nibble in RCtrl should be 3 (or 2). All Toyota CAN codes I've seen use RCtrl to examine the 2nd byte so the second nibble in RCtl should be 1 (1 being the second byte and 0 being the first byte), but it could also be 0 or 2.
Because ScanGauge can read the manufacturer code and return the transmission temperature, and since (theoretically, according to UltraGauge) any code that ScanGauge II can read UltraGauge MX can also read with "minor" modifications, then there does exist a code that works.
So the inputs I think that should be tried first for TCtrl = 85 and RCtrl = 31. If this doesn't work, I would try TCtrl = 93, 94, 95, 83, 84, or RCtrl = 30, 32, 20, 21 or any combination of the previous inputs.
I do not have the UG MX, I have the EM plus, so I can’t test these now. I'm sending in my EM plus today to UG to trade it in for the MX, so I should be able to test these out next weekend. Hopefully someone else can try some of these. There can be quite a bit of trial and error involved but I do know it is possible so something has to work.