I've been learning assembler, and in case this is useful to anyone, here's the ram locations for the PID controller in the 367724 RS6 binary.
I'll post more stuff as I find it.
lditv_w , {BoostPID-I-DC} , 0x384D68, 2, 0x0000, {%} , 1, 0, 0.005, 0, {LDR duty cycle from the I-controller (word)}
ldptv , {BoostPID-P-DC} , 0x384D6A, 2, 0x0000, {%} , 1, 0, 0.005, 0, {LDR duty cycle from the P-controller}
ldrdtv , {BoostPID-D-DC} , 0x384D6C, 2, 0x0000, {%} , 1, 0, 0.005, 0, {LDR duty cycle from the D-controller}
ldrkd_w , {BoostPID-D-Lookup} , 0x384D6E, 2, 0x0000, {%} , 0, 0, 0.005, 0, {LDR controller parameter for D proportion}
ldrki_w , {BoostPID-I-Lookup} , 0x384D70, 2, 0x0000, {%} , 0, 0, 0.005, 0, {LDR controller parameter for I proportion}
ldrkp_w , {BoostPID-P-Lookup} , 0x384D72, 2, 0x0000, {%} , 0, 0, 0.005, 0, {LDR controller parameter for P proportion}
b_lddy , {BoostPID-DynMode} , 0x3806F8, 2, 0x0001, {} , 0, 0, 1, 0, {Flag for condition LDR dynamic mode}