MSS60 XDF Mappings

[MtoufP]

Hey everyone,

I'm trying to create an XDF to share with the forum with the binaries that we are reading from the MSS6X Flasher.

Just sharing some of my identifying findings using the MSS6X Flasher so far. Hopefully we can identify some more mappings! I am looking for servotronic comfort/sport addresses. pedal throttle map comfort/sport, ignition min(KF TZ VL MIN), WOT Fueling. I won't bother with cold start, o2 dtc stuff since ECUWORX tool can handle that.

Please share if you have any!

This is from 241E read.

RPM Limiter:
0x6062
1x8
16 bit
Columns: 0x6052

values:
8000 8300 8300 8300 8300 8300 8300 8300

TEMP RPM
0x6088
6x1
columns: 0x6088
row conversion: (X*0.1)-273.2 to degrees

-25.0 0.0 25.0 50.0 60.0 80.0
5000.0 6000.0 6500.0 7000.0 7500.0 8300.

Vanos Admission:
0xA862
16x12 table
16 bit
Row: 0xA82A
Column: 0xA84A
Conversion: X/10

stock values:
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 112.0 103.5 97.7
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 113.7 105.0 100.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 113.7 103.9 98.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 113.7 101.1 95.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 118.0 97.0 87.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 123.7 114.0 87.0
131.0 130.9 131.0 131.0 131.0 131.0 131.0 131.0 131.0 123.6 116.0 83.0
131.0 131.0 131.0 130.0 127.0 126.0 124.0 124.0 128.1 124.0 115.7 83.0
131.0 131.0 131.2 130.0 127.0 127.0 127.1 130.0 128.5 122.5 115.7 83.0
131.0 131.0 131.0 131.0 130.0 130.0 130.0 130.0 126.6 122.8 114.9 92.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 130.0 124.4 118.1 112.4 93.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 129.0 118.6 114.2 109.3 99.8
131.0 131.0 131.0 131.0 131.0 131.0 131.0 123.6 112.8 111.6 107.9 104.0
131.0 131.0 131.0 131.0 131.0 131.0 125.8 108.7 99.4 101.3 103.8 108.2
131.0 131.0 131.0 131.0 131.0 131.0 122.0 102.0 94.1 96.0 101.5 112.0
131.0 131.0 131.0 131.0 131.0 131.0 121.9 100.1 92.2 95.8 103.5 120.0


Vanos Admission Heating (KATH):
0xABD6
16x12
16 bit
Row: 0xAB9E
Column: 0xABBE
Conversion: X/10

stock values:
131.0 131.0 131.0 131.0 131.0 131.0 131.0 126.8 123.0 109.0 98.5 97.7
131.0 131.0 131.0 131.0 131.0 130.9 129.3 124.0 119.0 110.7 100.0 100.0
131.0 131.0 129.0 125.6 123.0 120.3 117.0 119.0 119.0 116.7 98.9 98.0
131.0 131.0 127.3 120.5 117.1 115.8 114.4 117.2 124.8 117.0 95.5 95.0
131.0 131.0 127.3 120.4 117.0 116.0 115.0 117.3 125.7 117.0 91.0 77.0
131.0 131.2 127.0 120.0 118.0 116.0 115.0 117.0 125.0 123.7 106.0 77.0
131.0 130.9 129.1 124.0 118.0 116.5 116.6 119.1 127.0 123.6 111.0 77.0
131.0 131.3 129.7 125.0 118.0 117.0 117.6 120.6 128.1 124.0 110.7 75.0
131.0 131.0 131.2 130.0 127.0 127.0 127.1 130.0 128.5 122.5 110.7 78.0
131.0 131.0 131.0 131.0 130.5 130.0 130.0 130.0 126.6 122.8 114.9 87.0
131.0 131.0 131.0 131.0 131.0 131.0 131.3 130.0 124.4 118.1 112.4 93.0
131.0 131.0 131.0 131.0 131.0 131.0 131.9 129.0 118.6 114.2 109.3 99.8
131.0 131.0 131.0 131.0 131.0 131.0 131.3 123.6 112.8 111.6 107.9 105.0
131.0 131.0 131.0 131.0 131.0 131.0 125.8 108.7 99.4 101.3 103.8 110.0
131.0 131.0 131.0 131.0 131.0 131.0 122.0 102.0 94.1 96.0 101.5 112.0
131.0 131.0 131.0 131.0 131.0 131.0 121.9 100.1 92.2 95.8 103.5 120.0



WOT Ignition Timing KF_TZ_VL
0x28E1EC
16x3
Row: 0x28E1C2
Column: 0x28E1E6
Conversion: x/10

stock values:
3.0 3.0 3.0
16.0 16.0 16.0
20.0 20.0 20.0
27.0 27.0 27.0
30.0 30.0 30.0
30.0 30.0 30.0
34.0 34.0 34.0
33.0 33.0 33.0
33.0 33.0 33.0
31.0 31.0 31.0
33.0 33.0 33.0
33.0 33.0 33.0
30.0 30.0 30.0
30.0 30.0 30.0
30.0 30.0 30.0
31.0 31.0 31.0
32.0 32.0 32.0
32.0 32.0 32.0


Limp Mode Pedal
0x28ACC6
10x1
Column: 0x28ACB2
Conversion: x/10

00 08 16 25 30 35 40 43 46 50

hi thx for this info
Do you know where the vanos exhausts are please?

[tdott]

DTCs

Each DTC has a 26 byte row

To delete a DTC, null 3rd to 10th and the 13 byte

The DTC code is on the 2 first byte, all code id coulb be find on tool32

Can someone help me with this?

For example, before was:
00002B70: 00 16 00 14 00 10 00 0F 00 0D 00 0C 00 05 00 1E

Based on the above, I changed it to:
00002B70: 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00

The DTC came back and wasnt remove.

Can anyone explain if I did it wrong? Thanks.

[Martyn]

Can someone help me with this?

For example, before was:
00002B70: 00 16 00 14 00 10 00 0F 00 0D 00 0C 00 05 00 1E

Based on the above, I changed it to:
00002B70: 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00

The DTC came back and wasnt remove.

Can anyone explain if I did it wrong? Thanks.

Delete the whole string.

[tdott]

Delete the whole string.

Actually I figured it out. I did not need to remove the whole string. For example for DTC 2B70, it is not at offset 2B70, it's somewhere else in the file (forgot the offset, don't have the file open anymore. That was not clear to me before. Figured it out now and confirmed it's working.

Can you confirm what the difference between the two methods are?

[Nick_E92]

Any update? im looking for an XDF right now and this is best thread

[qze]

Here are some other rpm limiters I found :

Martyn I noticed that your bin modification tool only lists the "hot" oil rpm limiters, maybe you could add the cold one too !

hi.
i think i've found those rev limit parameters.


my target is 8500rev, so i did put 8500 to these parameters but when i put 8500 to KL_N_BEGR_TMOT_HEISS engine stalls with warning light on.
i'm assuming that there is KL_N_BEGR_TMOT_KALT or something?

do you guys have any idea to solve this?

thanks.

[Tomba]

my target is 8500rev, so i did put 8500 to these parameters but when i put 8500 to KL_N_BEGR_TMOT_HEISS engine stalls with warning light on.

Never had problems like you described.

i'm assuming that there is KL_N_BEGR_TMOT_KALT or something?

do you guys have any idea to solve this?

thanks.

Yes, there is also a cold map for warming up. They should all be placed close to each other.

Upload your file and I can have a look.

[qze]

Never had problems like you described.


Yes, there is also a cold map for warming up. They should all be placed close to each other.

Upload your file and I can have a look.

hi.

i attached with mine.
since when i put 8500 to KL_N_BEGR_TMOT_HEISS causes crash. so this binary leaves KL_N_BEGR_TMOT_HEISS 8300.

also i'm editing binary with this xdf file.

https://github.com/wilhellmina/MSS60_XDF

thanks.

[Tomba]

upload your tune (128kb) file as well. Once you have done RSA bypass you don't need to write the full file again.

[qze]

upload your tune (128kb) file as well. Once you have done RSA bypass you don't need to write the full file again.

thank you for your advice.

[Tomba]

Try this one

[qze]

Try this one

hi

it worked like a charm!

thank you so much for your help!

[kaiv]

Hello I've merge some info in a text file so I put them here.

241E guide


V-max map:

0xB090-0xB137
Full bin offset +7000

5x 8x2map, [08 00] separator

Stock:
00 00 00 01 00 02 00 03 00 04 00 05 00 06 00 07
11 60 11 60 11 60 11 60 11 60 11 60 11 60 11 60
last:
00 00 00 01 00 02 00 03 00 04 00 05 00 06 00 07
0F C0 0F C0 0F C0 0F C0 0F C0 0F C0 0F C0 0F C0

Full speed:
00 00 00 01 00 02 00 03 00 04 00 05 00 06 00 07
1F 40 1F 40 1F 40 1F 40 1F 40 1F 40 1F 40 1F 40
all

Thanks for sharing!

Has anyone tried this and can confirm this works to remove the top speed limiter?

[Tomba]

Thanks for sharing!

Has anyone tried this and can confirm this works to remove the top speed limiter?

these are the maps for speed limiting, so yes. changing them will work.

[Dash1]

Interested in contributing to the xdf, what tools are you all using? WinOLS? TunerPro?