So I have been finding maps using a fully defined 8N0906018F ols file but have a couple questions about the whole process. 

First, Am I correct to believe that each map I am attempting to find could technically have different offsets?  I find that some addresses match exactly to the defined file where others are in different positions.  I realize this could be an obvious but the inconsistency leads me into thinking I am incorrectly defining maps

Second, is there a better method to finding smaller maps?  I've been taking larger chunks and comparing them while taking note of where they lie between other more certain defined maps.  At the moment I am struggling with finding a more certain location for various prokon addresses like cdkat, cdhsh, etc.



I appreciate the guidance.

Your're correct in thinking that similar maps will have the same basic structure, axis (mostly), but possibly have different offsets. I'm going to assume the encryption board is still installed? If you want to write back to the ecu, you need to replace that board with a standard IC.