Next it evaluates whether there is a second axis after the first one. If this value looks like a valid length it starts to read data from that point on (0x10 byte pairs).
#VAG PROG ECU MAP EDITOR SOFTWARE#
The first two marked bytes (0x2E 0圎C) tell us it might be the start of an axis (the software has a list of known ids for this) It then validate the second pair of bytes (0x10 0x00). For each address that we found we validate the data found at that address. Now we have a list of addresses with which we can work. The software parses the entire binary file for IDs and length bytes that are *probably* maps and stores this in a collection. This chapter will describe – in detail – what the EDC15P Suite software does to fetch theįirst we need to lookup the addresses for the maps that we can find. To be able to detect the available maps we have to do some tricks and make a couple of assumptions in the algorithm used. Start to explore and understand the internal workings of EDC15P.ĭetermining the location and type of maps and variables in the EDC15P binaries is quite a hassle. Once we disassemble the binary file we have an file containing the assembly listing in which we can We can do that by running a disassembler like IDAPro or a seperate disassembler for the specific uC. We convert the binary file into assembly language we need to disassemble the file. This is very valuable information because we don’t have first hand information from either Bosch or VAG that can tell us in details what the ECU does. Once we can read the assembler language (assembly for short) we can track all the things the microprocessor is told to to when the program is running. This is a sort of intermediate between understandable human language and the operation codes used by the microprocessor. To be able to understand the software better we’ll need to dive into the world of assembler language. In the software, the identifiers are stored as well about HW revision,SW version,VAG partnumbers etc.This data is stored in ASCII in the binary file and looks something like this: The software can generate aĭifferences list between two files as well and if we compare a stock file to a tuned file we can see only a few maps get edited normally. Be careful though, you need to know what you are doing. We can see the most important maps being automatically detected and we can change them to ourlikings.
#VAG PROG ECU MAP EDITOR FULL#
Once we download the data from the ECU with a MPPS, Galletto 1260, BDM or some other means to do a full read we can load the binary file into EDC15P Suite Strangly DQ4 is used for boot pin (held low during startup, this will force the ECU in boot mode). Switching between these segments is generally called “recoding”.
#VAG PROG ECU MAP EDITOR MANUAL#
EDC15P has 512KB (4 Mbit) flash memory in which it can store multiple map segments for different situations (automatic gearbox, manual gearbox,quattro etc).
The flash contains the program and maps for the ECU. The main component are – logically: Main CPU, Flash program storage, SRAM memory (working memory),EEPROM (for storing mileage, immo etc) and a lot of input/output (I/O). The ECU contains a multi-layer printed ciruit board (PCB) which holds a lot of SMD components.