Hacking the Motronic ECU (Audi RS2)

[Sir Buff]

good to know, thank you dmitri.
so, is the rev limiter only on one adress (1x1)?

[prj]

good to know, thank you dmitri.
so, is the rev limiter only on one adress (1x1)?

No...
If you want to find it (or "them") you need to either disassemble the binary in IDA or be good at number crunching, data structures and hex binary comparison.
The entire constants area in the ECU is a big mystery until you disassemble the code and see where things are accessed and how they are used.

Maps you can tell using trace and shape, but the constants are a different thing...

[Dan]

Dear Bosch,

I can has original sauce plz?

Kthxbai,
S2 Forum

[prj]

Yeah... or a friend at Bosch.
Like a certain tuner.

[Sir Buff]

How did you learn to set the rev limiter from (for example) 7200 to 7400 rpm?
Is this only possible to find out with a eprom emulator and real time tracking?

[prj]

How did you learn to set the rev limiter from (for example) 7200 to 7400 rpm?
Is this only possible to find out with a eprom emulator and real time tracking?

Personally I learned by comparing different binaries and doing a full disassemble in IDA Pro, because I do not have friends at Bosch.

[rs2spinelli]

Sup

My friend how u put more boost on your s2 and how the s2 not cut off?

[Grunf]

Hi,

this is my first post. I have UrS4 with AAN engine equipped with SMS-Revo 303hp chip which I converted to E85 by using bigger injectors, 3-bar FPR and larger fuel pump. I have access to WBO2 and lambda values are perfect at WOT (with stock fuel pump, engine went lean above 5000 RPM).

Right now, my issue are cold starts. E85 requires upwards triple amount of cold-start enrichment compared to gasoline. I have "hacked" it externally by connecting an additional NTC temp sensor in series with stock one, together with switch that shortens this additional sensor above 85 degrees.

It works but it's a hack. I wonder if anyone knows where cold-start enrichment values are stored on AAN fuel chip and if it's possible to change them, either by burning new EPROM or (maybe) through adaptation and VAG-COM?

Thanx!