Pages: [1]
Author Topic: Anyone recognize these maps?  (Read 6078 times)
Nottingham
Full Member
***

Karma: +13/-1
Offline Offline

Posts: 204


« on: May 28, 2012, 12:16:06 AM »

Besides these couple maps I have defined most of the important maps for this file.
Some tuners seem to change them and I would like to know what maps they actually are.

I´ve gone thru most of the definition files for other 1.8T ECUs but none of them seem to have definitions for these.

If someone could take a look:

Offset 169C8h - 16AA2h (just after KFMIOP & NMAXOG)
Offset 1FC46h - 1FC7Dh
Offset 1FFF6h - 1FFFDh

Binary as attachment.

Logged
professor
Sr. Member
****

Karma: +25/-0
Offline Offline

Posts: 409



« Reply #1 on: May 28, 2012, 12:56:27 AM »

True and i see on my files some differences only at
16A22h - 16A41h.

At 169CAh is TNMXH.

Can't find something else so far, i'd also like to learn whats the use of these.
« Last Edit: May 28, 2012, 04:42:02 AM by professor » Logged

Seat Ibiza MK4 Cupra 1.8t 20V, stg3.
"Those 1.8T 20V machines are really tough" ©
RS4boost
Full Member
***

Karma: +46/-0
Offline Offline

Posts: 125


« Reply #2 on: May 28, 2012, 04:08:50 AM »

Hi,

At 169C8 is NMXDKPU.
At 169CA is TNMXH.
At 169CC is TFMIZU.
At 169CE is TNSC.

At 1FC46 you will find the checksum for the flash data area between 810000 and 813FFF.
At 1FFF6 is the checksum stored for 8FC000 - 8FFFFF.

Tom
Logged

Nottingham
Full Member
***

Karma: +13/-1
Offline Offline

Posts: 204


« Reply #3 on: May 28, 2012, 05:51:57 AM »

Excellent, thank you Smiley

Yet 16A22h - 16AA2h is a riddle.

The size happens to be 128 (80h) and it has been fully changed in some of the tuned files.
Logged
RS4boost
Full Member
***

Karma: +46/-0
Offline Offline

Posts: 125


« Reply #4 on: May 28, 2012, 06:58:38 AM »

At first sight, IDA shows that subroutine 8958FC is invited.

The subroutine uses RAM variables FA00, F9EA, F9EE, 3826FC, 3826FF, 382750, 384E1E, 384E1F and bit 3 and 9 of FD94.

I don't have a list of the RAM-variables for this ECU.

Has anyone an idea?

Tom

Logged

matchew
Hero Member
*****

Karma: +47/-22
Offline Offline

Posts: 503


« Reply #5 on: May 28, 2012, 01:00:42 PM »

Yet 16A22h - 16AA2h is a riddle.

That is exactly what it is supposed to be. Wink

I wouldn't worry about it.
Logged
setzi62
Full Member
***

Karma: +142/-0
Offline Offline

Posts: 249


« Reply #6 on: May 28, 2012, 01:40:33 PM »

Didn't know the R in RSA stands for 'riddle'  Smiley
Logged
matchew
Hero Member
*****

Karma: +47/-22
Offline Offline

Posts: 503


« Reply #7 on: May 28, 2012, 01:47:01 PM »

Didn't know the R in RSA stands for 'riddle'  Smiley

Neither did I until today, haha Smiley
Logged
Nottingham
Full Member
***

Karma: +13/-1
Offline Offline

Posts: 204


« Reply #8 on: May 28, 2012, 07:02:59 PM »

16A22h - 16AA2h is RSA signature?
So the signature is always the same for all files that came from the same maker (e.g VAG in this case)?
Some original files for other ME7.5 ECUs have identical data at 16A22h - 16AA2h while some do not, so I guess it is.

Thanks Wink
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.022 seconds with 17 queries. (Pretty URLs adds 0s, 0q)