ive found the address for these ecus so far and they are confirmed working by me. i found them using winols just comparing the 1 address someone else found till i found the most similar patterns i could in the random coding towards the end of the ecu which honestly took a bunch of hours between all the different bins. I dont have time to do it for you but you can use one of these to find it.


offset for lambda - X*0.0002441406

8e0909518ak 368072:  0x72456 
8e0909518al 386802: 0x72F1A
4b0906018ch 360101: 0x6654A
4b0906018dp: 0x5F8B0
b5 s4 m-box: 0x3bfb2