New things attached here again   

So after some tests with the LC code i can report that by using the correct registers you should have a good functioning Launch control using TSRLDYN without affecting the rest of the code or disturbing the stack.

Further more the stock coils don`t give a F$)K if you use FTOMN 0.2 0.1 or 0 and on Turbo applications you have the appropriate flame and banging Effect... On the NA engine things are different and when stock catalyst is installed it is acting like a normal Limiter if you just use TSRLDYN even with the schubabschaltung deactivated the pops are not something spectacular or loud as it is on an Turbo application so i will have to do something about this too.

Right now i am using a simple version that jumps right off ub checks for B_br and Vfil_w and Nmot_W to activate the lc and i will add the no lift shift by using B_gsch (not sure if it will work though) since we have a DSG car.. Has someone used B_gsch ?

Will do some more tests and report.

Hints for those that will try to do it themselves..

1.Use correct registers to store your variables as i stated above to avoid having a dead ecu after 1-2 days
2.Use "extp    #23Fh, #1" to access your flash (Depends on where you have free space for variables)
3.Use B_br (b_brems) on dsg or B_kuppl for manual.
4.If the car is Dsg set your Lc from the dsg 500+rpm higher than your custom code

More good news for my personal project.

First of all i now have no need to define the complete file as i found somewhere on my pile a matching a2l for my binary.
After i studied a bit i found the correct addressing scheme as there is always inside A2l Files.

Basically you can not use ktag boot reads directly as they are missing some "padding" areas.

  /begin MEMORY_SEGMENT Pst0 "" RESERVED FLASH INTERN 0x0 0x8000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x0 /*mapping_adr:*/0x0 /*length:*/0x8000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT Pst18000 "" RESERVED FLASH INTERN 0x18000 0x8000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x18000 /*mapping_adr:*/0x18000 /*length:*/0x8000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT Pst20000 "" RESERVED FLASH INTERN 0x20000 0xB0000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x20000 /*mapping_adr:*/0x20000 /*length:*/0xB0000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT Pst800000 "" CODE EPROM EXTERN 0x800000 0xE0000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x800000 /*mapping_adr:*/0x800000 /*length:*/0xE0000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT Dst8E0000 "" DATA EPROM EXTERN 0x8E0000 0x20000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x8E0000 /*mapping_adr:*/0x8E0000 /*length:*/0x20000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT ExtRam380000 "" VARIABLES RAM EXTERN 0x380000 0x6000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x380000 /*mapping_adr:*/0x380000 /*length:*/0x6000 /end IF_DATA
    /begin IF_DATA ASAP1B_MCMESS ADDRESS_MAPPING /*orig_adr:*/0x380000 /*mapping_adr:*/0x388000 /*length:*/0x6000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT ExtRam386000 "" VARIABLES RAM EXTERN 0x386000 0x2000 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x386000 /*mapping_adr:*/0x386000 /*length:*/0x2000 /end IF_DATA
    /begin IF_DATA ASAP1B_MCMESS ADDRESS_MAPPING /*orig_adr:*/0x386000 /*mapping_adr:*/0x386000 /*length:*/0x2000 /end IF_DATA
    /end MEMORY_SEGMENT

    /begin MEMORY_SEGMENT ExtRam388000 "" VARIABLES RAM EXTERN 0x388000 0x200 -1 -1 -1 -1 -1
    /begin IF_DATA ETK ADDRESS_MAPPING /*orig_adr:*/0x388000 /*mapping_adr:*/0x388000 /*length:*/0x200 /end IF_DATA
    /begin IF_DATA ASAP1B_MCMESS ADDRESS_MAPPING /*orig_adr:*/0x388000 /*mapping_adr:*/0x388000 /*length:*/0x200 /end IF_DATA
    /end MEMORY_SEGMENT


You have 2 choices here for loading the files to IDA. Either reconstructing the mpc file by padding the areas that are empty or load the binary with offsets.I cross referenced a hex file that i loaded earlier so i can be sure that whatever i do maches that.I always like to reconstruct things so what i did is the following :

Separate the first 32 kb from the mpc (ktag read) pad until 0x18000 and add the rest of the file from 0x18000 and up

ram2(0xf0000)should be added as i stated in the first post and also ram(0x38000)

finally add the flash file with 0x800000 offset and the dpp`s from my first post and you are done.

Now every call or memory address will line up perfectly.

Attached you will find a VIRGIN ida import (Defining has not been done to it)

Happy to help and good to know it was not that hard at the end.I have been testing my retardation algo lately and the only thing left is to make the bang effect on gear shifts on a dsg car cause manuals work fine.Both ignition cut and ignition retard works perfect.The boost on the lc with ignition retard though comes much better.

Once that is done i will add a wkrma indicator as well and move onto med17.

Here is the video in proper quality 

https://www.youtube.com/watch?v=bAks3zVOTR4

Tried B_gsch without success...have 2 more in mind that i will test if i succeed i will post it here aswell.

Do the bang if gearbox requests less than 100%? And don't limit revs with bang only cut some ignitions? This may work also at launch when gearbox controls rpm. At least my old dsg may not do the launch if gearbox don't control rpm.

I think he means do ignition cut if you get torque intervention from TCU

Seems like B_gfen did the job but the duration is too small to produce something with ignition retardation so ignition cut should be used.