Title: MED9.1 TFSI KFZW MULTIPLE Post by: Dave9n3 on July 10, 2019, 10:50:33 AM Hi guys,
I'm making a start with a basic tune on a DSG MK5 GTI 2.0TFSI, I have 3 X KFZW and 3 X KFZW2 defined, all have the same load and RPM axis but the ignition angles differ slightly. I have two questions that hopefully some people may be able to answer or point me in the right direction. Are all 3 KFZW and all 3 KFZW2 maps used, if they aren't all used can anyone give me any advice on how best I find out which KFZW and which KFZW2 are used? If they are all used (Inclined to think not at this point in time) what is it that dictates which are used when? I'm aware that on the EA113 the inlet cam is variable and not like the 1.8t where its either advanced or at rest, KFNWSE shows me this. I've checked out the MED9 FR and I haven't been able to find a reference to multiple KFZW and KFZW2's. My IDA skills go just about far enough to identify some RAM variables (thanks Basano) I'd like to try and find out which I need to adjust and when, rather than blindly adjusting. Any pointers would be appreciated :) Title: Re: MED9.1 TFSI KFZW MULTIPLE Post by: Blazius on July 10, 2019, 11:28:34 AM I have not worked or know anything about this ecu.
It is possible, that they are the maps for other versions of the car, like FWD, quattro, auto and manual just like in ME7 ( 0_1_A, 0_2_A etc.)? Title: Re: MED9.1 TFSI KFZW MULTIPLE Post by: Dave9n3 on July 10, 2019, 12:36:24 PM Done a bit of messing in IDA as far as my limited skills allow.
using the map addresses I have for each KFZW and KFZW2 in my chosen binary 1K0907115J KFZW_0_A - IN OLS @1C8484 IN IDA = 0X5C8484 KFZW_1_A - IN OLS @1C8544 IN IDA = 0X5C8544 KFZW_2_A - IN OLS @1C8604 IN IDA = 0X5C8604 KFZW2_0_A - IN OLS @1C86C4 IN IDA = 0X5C86C4 KFZW2_1_A - IN OLS @1C8784 IN IDA = 0X5C8784 KFZW2_2_A - IN OLS @1C8844 IN IDA = 0X5C8844 I've attached two pictures to this, one shows the ROM address for KFZW_0_A , the second picture shows the address for KFZW2_0_A. IDA shows no other different ROM addresses between 0x5C8484 (KFZW_0_A) and 0X5C86C4 (KFZW2_0_A) It also shows no ROM addresses before and after these that look like they would coincide with the known map locations for the other KFZW and KFZW2 maps. Based on this can I assume that because IDA doesn't pick up any subroutines (think that's what they're called) for the other ROM addresses that they're not used in this binary? I'm a massive IDA noob so feel like I'm overlooking things and possibly that I've tried to oversimplify something that is in fact pretty complicated. Title: Re: MED9.1 TFSI KFZW MULTIPLE Post by: Dave9n3 on July 10, 2019, 12:37:53 PM I have not worked or know anything about this ecu. It is possible, that they are the maps for other versions of the car, like FWD, quattro, auto and manual just like in ME7 ( 0_1_A, 0_2_A etc.)? I hope this is the case, lazy but I would rather deal with a single KFZW and KFZW2 than have to try to tune 3X KFZW and 3X KFZW2 on the road :D Title: Re: MED9.1 TFSI KFZW MULTIPLE Post by: jacktfsi on April 06, 2020, 04:01:14 PM I hope this is the case, lazy but I would rather deal with a single KFZW and KFZW2 than have to try to tune 3X KFZW and 3X KFZW2 on the road :D Just having a quick read on your med9 threads as I’m doing bits on this platform too. (Hope you don’t mind me digging up Your thread). I’ve done basic stuff on IDA too and from what I can see the maps are only used once in your bin as is ldrxn_0 You could also dissemble your bin further by highlighting the address on the left and pressing C, this will then show you the addresses your missing I.e your other map addresses for your KFZW 2 and 3 by showing all addresses I.e 5C8485,6,7 etc. Hope this helps |