Originally posted by hotsd101
View Post
Announcement
Collapse
No announcement yet.
MSS60 XDF Mappings
Collapse
X
-
some negative timing in decel areas. What are you using to upload files?Originally posted by Acevin1 View PostHello,
Thats my first post so greetings from Germany
Just a quick question. What Parameters do I have to Change to get very Slight Pop and Bangs or more of a crackle in only m Mode?
I have enough knowledge with win ols. Just asking for a small manual or a list.
Comment
-
Question on the wilhelmina xdf on the github. Does anyone have the static injector flow table (and axes) addresses?
Also, is there an offset that can be applied to the .xdf to work with the tune file rather than the full flash? I'm working with the full flash and it's cumbersome....
And one more thing on that xdf, it appears that the cat warming and standard vanos maps are labeled backwards. I double checked this by flashing and watching INPA data, so please check me on this!!!Last edited by desmo01; 08-22-2026, 03:48 AM.
Comment
-
Hi, I got no car to test, so would you mind sharing your INPA screenshot and the VANOS table you edited? I'll update the xdf. And I do have a partial xdf if you need it.Originally posted by desmo01 View PostQuestion on the wilhelmina xdf on the github. Does anyone have the static injector flow table (and axes) addresses?
Also, is there an offset that can be applied to the .xdf to work with the tune file rather than the full flash? I'm working with the full flash and it's cumbersome....
And one more thing on that xdf, it appears that the cat warming and standard vanos maps are labeled backwards. I double checked this by flashing and watching INPA data, so please check me on this!!!
Comment
-
Nice work on the mappings. The VANOS admission table at 0xA862 and the heating table at 0xABD6 line up well with what I’d expect from the MSS60 structure, and the X/10 scaling checks out against the stock values.Originally posted by omhl View PostHey everyone,
I'm trying to create an XDF to share with the forum with the binaries that we are reading from the MSS6X Flasher.
Just sharing some of my identifying findings using the MSS6X Flasher so far. Hopefully we can identify some more mappings! I am looking for servotronic comfort/sport addresses. pedal throttle map comfort/sport, ignition min(KF TZ VL MIN), WOT Fueling. I won't bother with cold start, o2 dtc stuff since ECUWORX tool can handle that.
Please share if you have any!
This is from 241E read.
RPM Limiter:
0x6062
1x8
16 bit
Columns: 0x6052
values:
8000 8300 8300 8300 8300 8300 8300 8300
TEMP RPM
0x6088
6x1
columns: 0x6088
row conversion: (X*0.1)-273.2 to degrees
-25.0 0.0 25.0 50.0 60.0 80.0
5000.0 6000.0 6500.0 7000.0 7500.0 8300.
Vanos Admission:
0xA862
16x12 table
16 bit
Row: 0xA82A
Column: 0xA84A
Conversion: X/10
stock values:
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 112.0 103.5 97.7
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 113.7 105.0 100.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 113.7 103.9 98.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 113.7 101.1 95.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 118.0 97.0 87.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 131.0 123.7 114.0 87.0
131.0 130.9 131.0 131.0 131.0 131.0 131.0 131.0 131.0 123.6 116.0 83.0
131.0 131.0 131.0 130.0 127.0 126.0 124.0 124.0 128.1 124.0 115.7 83.0
131.0 131.0 131.2 130.0 127.0 127.0 127.1 130.0 128.5 122.5 115.7 83.0
131.0 131.0 131.0 131.0 130.0 130.0 130.0 130.0 126.6 122.8 114.9 92.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 130.0 124.4 118.1 112.4 93.0
131.0 131.0 131.0 131.0 131.0 131.0 131.0 129.0 118.6 114.2 109.3 99.8
131.0 131.0 131.0 131.0 131.0 131.0 131.0 123.6 112.8 111.6 107.9 104.0
131.0 131.0 131.0 131.0 131.0 131.0 125.8 108.7 99.4 101.3 103.8 108.2
131.0 131.0 131.0 131.0 131.0 131.0 122.0 102.0 94.1 96.0 101.5 112.0
131.0 131.0 131.0 131.0 131.0 131.0 121.9 100.1 92.2 95.8 103.5 120.0
Vanos Admission Heating (KATH):
0xABD6
16x12
16 bit
Row: 0xAB9E
Column: 0xABBE
Conversion: X/10
stock values:
131.0 131.0 131.0 131.0 131.0 131.0 131.0 126.8 123.0 109.0 98.5 97.7
131.0 131.0 131.0 131.0 131.0 130.9 129.3 124.0 119.0 110.7 100.0 100.0
131.0 131.0 129.0 125.6 123.0 120.3 117.0 119.0 119.0 116.7 98.9 98.0
131.0 131.0 127.3 120.5 117.1 115.8 114.4 117.2 124.8 117.0 95.5 95.0
131.0 131.0 127.3 120.4 117.0 116.0 115.0 117.3 125.7 117.0 91.0 77.0
131.0 131.2 127.0 120.0 118.0 116.0 115.0 117.0 125.0 123.7 106.0 77.0
131.0 130.9 129.1 124.0 118.0 116.5 116.6 119.1 127.0 123.6 111.0 77.0
131.0 131.3 129.7 125.0 118.0 117.0 117.6 120.6 128.1 124.0 110.7 75.0
131.0 131.0 131.2 130.0 127.0 127.0 127.1 130.0 128.5 122.5 110.7 78.0
131.0 131.0 131.0 131.0 130.5 130.0 130.0 130.0 126.6 122.8 114.9 87.0
131.0 131.0 131.0 131.0 131.0 131.0 131.3 130.0 124.4 118.1 112.4 93.0
131.0 131.0 131.0 131.0 131.0 131.0 131.9 129.0 118.6 114.2 109.3 99.8
131.0 131.0 131.0 131.0 131.0 131.0 131.3 123.6 112.8 111.6 107.9 105.0
131.0 131.0 131.0 131.0 131.0 131.0 125.8 108.7 99.4 101.3 103.8 110.0
131.0 131.0 131.0 131.0 131.0 131.0 122.0 102.0 94.1 96.0 101.5 112.0
131.0 131.0 131.0 131.0 131.0 131.0 121.9 100.1 92.2 95.8 103.5 120.0
WOT Ignition Timing KF_TZ_VL
0x28E1EC
16x3
Row: 0x28E1C2
Column: 0x28E1E6
Conversion: x/10
stock values:
3.0 3.0 3.0
16.0 16.0 16.0
20.0 20.0 20.0
27.0 27.0 27.0
30.0 30.0 30.0
30.0 30.0 30.0
34.0 34.0 34.0
33.0 33.0 33.0
33.0 33.0 33.0
31.0 31.0 31.0
33.0 33.0 33.0
33.0 33.0 33.0
30.0 30.0 30.0
30.0 30.0 30.0
30.0 30.0 30.0
31.0 31.0 31.0
32.0 32.0 32.0
32.0 32.0 32.0
Limp Mode Pedal
0x28ACC6
10x1
Column: 0x28ACB2
Conversion: x/10
00 08 16 25 30 35 40 43 46 50
One thing I’d be careful about before publishing the XDF is validating the addresses against multiple 241E reads rather than assuming every MSS60 binary will have identical offsets. It would also be useful to document the axis addresses and data types explicitly in the XDF so people don’t accidentally interpret the tables incorrectly.
For the remaining maps, I’d be particularly interested in the Servotronic comfort/sport maps and the pedal/throttle maps. The WOT ignition KF_TZ_VL mapping at 0x28E1EC is also a good find.
If anyone has a known-good modified 241E binary, comparing the changed regions against stock should make identifying the remaining maps much easier.
Comment

Comment