Simos PCR2.1

CORRECTION STANDS AND IS SHARPENED: the prompt's "Simos PCR2.1" conflates two unrelated ECUs. PCR 2.1 is properly a CONTINENTAL DIESEL common-rail ECU (VW 1.6/2.0 TDI, EA189/EA288) — its correct name is "Continental PCR 2.1," NOT "Simos" (Simos is Continental's GASOLINE line). The petrol engine codes listed run Continental SIMOS 18.x GDI-turbo ECUs. This reference is authored for SIMOS 18.1 / 18.6

Reference - updated 4 August 2026

The ECU hardware

Infineon AUDO-MAX TriCore TC1791 family (bri3d's boot tooling is literally named TC1791_CAN_BSL). 32-bit TriCore, LITTLE-ENDIAN, executes-in-place from internal program flash (no MMU). ~4 MB PFLASH + ~128 KB DFLASH (data flash), hardware ECC on flash. Simos 18.1 vs 18.10 differ mainly by SW/CAL size and part number, not a fundamentally different core — both are TC1791-class. THIN: exact Infineon orderable suffix (the draft's "TC1791S-384 F200EP" / "TC1791S-512 F240EP") is approximate and should be confirmed from the physical die/markings, not asserted. The genuinely different unit is the DIESEL Continental PCR 2.1 (its own TriCore, 1.6/2.0 TDI) — do NOT apply Simos18 defs, addresses, or checksum layout to it.

Fuelling and load sensing

Petrol / gasoline, turbocharged direct injection (TFSI/TSI, GDI), spark-ignition. Safety envelope is KNOCK / AFR (lambda) / EGT / rail-pressure — NOT the diesel domain (rail-smoke/DPF/EGR/NOx) that belongs to the actual PCR 2.1. NOTE for later cars: EU6d-era Simos18 petrol units DO run a Gasoline Particulate Filter (GPF/OPF), so a petrol-specific particulate/emissions constraint exists even though diesel DPF/EGR strategy does not.

How this ECU is read and flashed

READ/WRITE PATHS: (1) OBD / UDS-over-ISO-TP-over-CAN — DiagnosticSessionControl (extended -> programming), Security Access seed/key, RequestDownload with a dataFormatIdentifier selecting 'Compression A' (LZSS) + 'Encryption A' (AES-128-CBC, fixed key), TransferData/TransferExit; CBOOT then verifies per-block CRC32 + RSA signature and sets the block valid flag. A STOCK (locked) ECU REJECTS a modified block at the RSA check — so OBD tuning of modified content requires the ECU to be UNLOCKED first. After unlock, modified CAL/ASW flashes over OBD needing only correct CRC32 + ECM3. This is exactly the 'ECU LOCKED -> unlock' step commercial tools sell. do not assume unlock is always possible. (3) BENCH / BSL — open ECU, bench power, TC1791 Bootstrap Loader over the boot pins (probe/solder the RST/boot vias); IMMO/SECURITY: immobilizer is component-protection (CP) tied to the car; a swapped/cloned ECU needs immo-off / virginize + CP adaptation. The SBOOT/BSL boot-mode path also recovers bricked or immo-locked units where OBD fails. COMMERCIAL TOOLS: KESSv3, KT200, FoxFlash, Autotuner, bFlash, MagicMotorsport Flex, CMD (OBD+bench+boot, auto-checksum). OPEN SOURCE: bri3d/VW_Flash + bri3d/TC1791_CAN_BSL + bri3d/Simos18_SBOOT cover full read/write/unlock/checksum without a commercial tool.

Engine codes in this family

• CJSA (1.8 TSI EA888.3) — Simos 18.x
• CJSB (1.8 TSI EA888.3) — Simos 18.x
• CHHB (2.0 TSI EA888.3, GTI) — Simos 18.1
• CJXC / DJHA (2.0 TSI EA888.3, Golf R / S3) — Simos 18.1/18.10
• CZCA (1.4 TSI EA211 ACT) — VERIFY: often Simos 10/12, not necessarily 18
• CZDA (1.4 TSI EA211 150ps) — VERIFY: often Simos 10/12
• CZEA (1.4 TSI EA211 ACT) — VERIFY: often Simos 10/12
• DGUA / CZPB and related EA888.3/EA211 — read box code before assuming Simos18

Staging - what each stage really gives

• stage1 - Software only, stock hardware, pump premium (91-93 AKI / 98-100 RON). Raise LDRXN + boost/pressure-ratio limit, retarget KFMIRL/KFMIOP, add timing within knock margin, adjust WOT lambda, zero WOT torque intervention (~99%), align clutch/torque-monitor limits. Typical gains (approx, vary by fuel/market): 1.8 TSI EA888.3 ~170-180 -> ~215-230 hp, +80-100 Nm; 2.0 TSI ~220 -> ~280-290 hp; 1.4 TSI EA211 ~122-150 -> ~155-180 hp / ~270 Nm.
• stage2 - Bolt-ons: catless/high-flow downpipe, intake, upgraded FMIC, sometimes HPFP internals/catch-can. Software sustains higher boost longer, leans on the lambda-EGT map (a DP lowers EGT so slightly less enrichment), more timing. 1.8 TSI ~240-255 hp; 2.0 TSI ~300-320 hp; 1.4 TSI ~185-200 hp. Still stock turbo (IS12/IS20) — compressor-choke limited. Later cars: a GPF/high-flow choice affects emissions/backpressure.
• stage3 - Hardware limit: bigger turbo (IS38 swap is the classic EA888.3 route, or hybrid), larger injectors + upgraded HPFP/LPFP, upgraded intercooler/fueling, upgraded clutch (manual) or DSG/TCU flash. Software: rescale injectors + MAF/speed-density, new boost/WGDC maps, raised clutch/DSG torque limits, revised torque model + monitored ECM3 limits. 2.0 TSI 350-400+ hp; 1.8 TSI 330+ hp on IS38; 1.4 TSI big-turbo kits ~240 hp. Top numbers need E85/race-fuel calibration and careful torque-monitor + clutch-protection work; watch EA888.3 rod-bearing headroom at sustained high power.

Safety limits

• Lambda / AFR: WOT target ~0.80-0.85 lambda (~11.7-12.5 AFR petrol); never lean past the ECU minimum-lambda floor under load — leaning out under boost = detonation. High-RPM lean-out is usually FUEL-SUPPLY limited (HPFP/rail, sometimes LPFP), so verify fuel delivery before adding airmass.
• Knock: keep long-term knock retard near zero; never command more timing than octane/fuel supports. Monitor per-cylinder knock/IDX; back timing off with IAT and load. Account for intercooler heat-soak / high IAT (repeat WOT pulls) in the timing strategy.
• EGT: keep pre-turbine EGT below ~950 C using the lambda-EGT-protection enrichment; sustained over-temp destroys the turbine and exhaust valves.
• Boost / compressor: stay inside the fitted turbo's surge/choke map — raising LDRXN/boost beyond turbo capability just spikes then falls into overboost fault/limp; watch WGDC-driven overshoot.
• Fuel / rail (DI): do not demand more airmass than the HPFP can fuel — rail pressure dropping at high RPM causes lean spikes; injector + HPFP (and sometimes LPFP) upgrade required before large airflow increases.
• Torque monitor (ECM3 / EGAS Level 3): any increase in allowed load/torque MUST be reflected in the monitored limits and the file re-checksummed (CRC32 + the 64-bit ECM3 summation), or the monitor cuts fuel/throttle. Hard, non-negotiable lockstep — the #1 cause of 'tuned but bogging/limp' cars.
• Clutch / gearbox: respect the clutch-torque limiter AND the TCU's own cap. Factory capacities (approx): DQ200 (7-spd DRY, 1.4 TSI) ~250 Nm — the weakest and easiest to exceed; DQ250 (6-spd wet) ~350 Nm; DQ381 (7-spd wet) ~420 Nm; manual per spec. Exceeding it slips the clutch or forces a TCU torque cut — Stage 3 needs a clutch upgrade and/or DSG/TCU flash, not just a raised map.
• GPF/OPF (petrol-specific, later EU6d cars): a gasoline particulate filter is present on newer Simos18 petrol units — heavy WOT over-enrichment increases soot/loading, and delete/high-flow changes have emissions/OBD-readiness consequences. (Diesel DPF/EGR/rail-smoke strategy does NOT apply to these petrol ECUs — that is the domain of the actual Continental PCR 2.1 diesel unit.)
• Integrity: never flash without correcting per-block CRC32 AND the ECM3 monitoring summation; writing a modified block to a still-LOCKED (RSA-enforcing) ECU can leave the unit no-start / in boot-mode recovery. Confirm the ECU is unlocked (or use bench/BSL) before writing modified content.

How confident is this?

SOLID (now source-verified): (a) PCR 2.1 = Continental DIESEL vs Simos18 = petrol — well established; the listed petrol codes run Simos 18.x, PCR 2.1 files are 1.6/2.0 TDI. (b) Checksum stack CONFIRMED against bri3d/VW_Flash lib/checksum.py: per-block CRC32 poly 0x04C11DB7 / init 0 / xor 0, header at offset 0x300 (0x0 in continuation blocks ASW2/3), up to 16 regions with absolute start/end pairs; ECM3 is a 64-bit PURE SUMMATION (not a CRC); RSA signature in OTP is the real wall; OBD flashing of modified blocks requires an UNLOCKED ECU. (c) VW_Flash supports Simos18.1/18.6/18.10 + DQ250-MQB/DQ381-MQB DSG + Gen5 Haldex (confirmed from README). (d) SBOOT unlock via secure-boot weaknesses — bri3d/Simos18_SBOOT + hardwear.io 2024 'Secrets of Simos18'. (e) Map names/roles (LDRXN, KFMIRL, KFMIOP, low/high-octane timing, lambda/EGT, wastegate, clutch torque, torque intervention) — simoswiki.com (verified real) + S4wiki naming. THIN / VERIFY-BEFORE-USE: exact block byte-sizes and base addresses (per part number/SW — pull from VW_Flash flash_info or the file, never hardcode); precise Infineon TC1791 orderable suffix (approx); exact map dimensions/dtypes (approximate — confirm from A2L/DAMOS