Just my 2c:

022906032DR file equipped with DSG

we had misfires at cyl1 and constant pwm even after shutoff after transfering routine from example file, all variables was fine, mono lambda patch also here, there is no load limit in this file

- all ram variables redefined to 387* instead of 384* this eliminate misfires, even if IDA shows empty space here, probably some ram-mirroring was there, ive faced this before so just swap it with 387xxx*

- changed turbo routine instead of feeding pwm it manages new ldtvm_w to be able to log wgdc and move pwm to its raster
- new code (below) with port writing hooks up with other pwm operations, i believe its 1ms raster, correctly operating pwm even with !b_kl

exts   #38h, #1
mov      r4, ldtvm_w
movbz   r5, rl4
shl     r5, #8
mov     r4, PP3
mulu    r5, r4
mov     PW3, MDH
mov     r2, MDH


DPUPVDK calculates pvdkds_w based on ml_w in stock its subtracted map values from pu_w and i replaced it with addition due to map is not signed, this gives positive pvdkds_w and msdk_w now looking nice but i still thinking to replace it with native map sensor

RLVMXN/RLVSMXN maxed out to eliminate IOP limit and gives adequate misol_w, now its misol > miist, no torque intervention and car runs smoothly, ps_w, msdk_w, pvdks_w finally sorted out

asm patch for b_mdee (redsol) when shifting, basically some kind of 'jb b_zwget, loc_enable' so it gets selective fuel cut at shifts but unfortunately without noticeable sound

this knowledge costs me 2 days so enjoy it for free  


probably i want to emulate KFVPDKDS / KFPLGU stuff but im not sure for now // any hints?

What is r2 here?

I think I managed to add this patch, I just need to test it. But I still have doubts. I'm not sure I understood the replacement of 822F86 calls 88C57E with 82030A
after in sub 82030A calls 88C57E
82030E calls subroutine 8A2D6A (our procedure)
Am I right that this is just for calling our procedure and nothing more? 88C57E just had to be replaced to create an extra call?

Hi.
Can someone provide me some info about sub_88C57E? What's the logic behind this and how to find it in another binary? (I can't find it by byte pattern or opcode pattern).
My file is 066906032AG, I got some vars from a2l imported.