NefMoto

Noob Zone => Noob Questions => Topic started by: collordeks2234r on November 07, 2023, 03:45:04 AM



Title: 2.8 V6 VAG how do you recognize the correct address, example: CDSLS, CDKAT
Post by: collordeks2234r on November 07, 2023, 03:45:04 AM
Hi. I have a 2.8 V6 VAG ecu. The addresses are similar to 1.8T, 2.7?
how do you recognize the correct address, example: CDSLS, CDKAT

CDSLS = 0x181B0
CDKAT = 0x181A1

How do you know that CDSLS is 181B0 and not 181B1,181B2... etc?
I'm trying to find the address for MSLUB and MSLBAS and many others.  :)
I'm trying to turn off the catalytic converter DTC, but I can turn off the misfire DTC instead - this is important so it stays on. I managed to determine that the addresses of the catalytic converter and misfires are very close in the hexeditor.
Is there a method to modify a given address and then check in VCDS what i have disabled?


Title: Re: 2.8 V6 VAG how do you recognize the correct address, example: CDSLS, CDKAT
Post by: prj on November 07, 2023, 06:11:01 AM
Disassemble the code with IDA Pro and see.

If this is beyond your skill level, then trial and error.


Title: Re: 2.8 V6 VAG how do you recognize the correct address, example: CDSLS, CDKAT
Post by: _nameless on November 07, 2023, 06:12:56 AM
Addresses change with different software versions. Without the original file that you are referring none will be able to assist.


Title: Re: 2.8 V6 VAG how do you recognize the correct address, example: CDSLS, CDKAT
Post by: R32Dude on November 07, 2023, 08:17:33 PM
me7info.exe from the me7logger can sometimes help. Otherwise ida. I uploaded a reasonably complete me7.1.1 st10 ida project on here somewhere . Yours isnt st10 but  much c167 me7.1.1 looks similar. once you find code that uses the variable in mine, you can search your bin with a hex editor. Mask off all addresses when you search as you are looking for similar code but referring to different addresses, or search for nearby code that looks unique. It takes time and patience but at least you will know the code that is using the ram address in question and can look for it. To avoid such nuisances, you need an a2l file for your bin, its worth your weight in gold.