PDA

View Full Version : Volvo 850 2.0i Siemens Fenix chip.



WinWoj
13th May, 2013, 09:06 AM
Hi all!

I have Volvo 850 2.0i '96 with siemens Fenix ECU. I found dumps for all Bosch ECUs, but not siemens. So, is there someone, who do more power in this motor? I understand, that I can make higher feul pressure, give bigger nozzle of injector, but injection time and spark advance is included in maps, in flash 28F010 I think. Please tell me, what differences and problems I will have, when start analysing and modyfing that ECU. In attachment You can see 2xTMS and flash memory, I would place in PLCC32 adapter and mods.

197912

WinWoj
16th May, 2013, 09:39 PM
Hi all.

Today I'll read flash 28F010 from my Fenix volvo ecu. I done this via EasyPro90B, defining chip as Intel, and normal load. I'm not satisfy in this readout, because I don't find any ecu number, both in ASCI and HEX value... Maybe it they are not in flash, but in TMS,. I don't know..

Anyway, I'll attach below some pics and dump from flash.

Let's try to analize, I'll start in ecm'01 so when find something, I'll share this knowledge for You.

Cheers!


198725



198722 198723 198724

WinWoj
16th May, 2013, 10:36 PM
Sorry for so quick self-reply, but if we want to keep high quality of this forum, i think, that we must create some style of post. So I working steel and discover some new things, I'd like to share for You guys.

So I make new rep (It's not flood!!!!) for more clearly message.

Below I attach some first look at the 2D data of flash, I hex send before. This fragments represent few maps I think. (It seems to put only maps, not any id of ECU...)

WinWoj
16th May, 2013, 10:41 PM
Below are zoomed 2D screens...:

WinWoj
16th May, 2013, 10:56 PM
And now I am confused, because I see differences in readoots.. Below, in left pics is orginal hex redout from Easyprog90B software, starts from "FF" data and it later looks fine, and in right pics its redout view in ecm'01 software, the same data in HEXCMP progs and another.. And right data looks no good.. to many strange sequences for me.. What I'm doing wrong???

mexanico1971
16th May, 2013, 11:01 PM
bad reading !
you got to read it well !
do it again !

ominimicu
16th May, 2013, 11:14 PM
stop using ecm..and old one ..

WinWoj
16th May, 2013, 11:26 PM
bad reading !
you got to read it well !
do it again !

Maybe You're right...

Tommorow I'll try one more time... In easyprog haven't many cases... Letter "E" or "AM" isn't my "AN" before 28F010 description.. Both "E" and "AM" in easyprog software have "PLCC32" package, but in datasheet E its another package description... Below I attach some pics from my tests... Is it possible, that my "AN28F010" is another type of this flash, I cannot read in this programmer??



198749 198750 198752 198753 198751

WinWoj
16th May, 2013, 11:29 PM
stop using ecm..and old one ..


OK, which kind of stuffs will be better for these analise? In past I tried winols, but still dont understand many things...

WinWoj
17th May, 2013, 12:47 AM
Hi.. I found such dump for my ECU (see attach)... Its exacly the same number of ecu as I have. Dump weight - 128kB. And looks in HEXCMP progs very similary like my 1st redout in easyprog software... What's going on with data, which are properly in programator software tool, and completely different in another programs, but... founded dumps from my collection can be good readings in that programs, like old HEXCMP or ecm...

So now I dont know, how to properly save my dump...?

1. compare MY DUMP in Easyprog programmer tool after readout, with another dump from my collection



198759

2. compare MY DUMP in HexCMP, with another dump from my collection...


198762

Strange, isn't it?

WinWoj
17th May, 2013, 08:50 AM
Guys,

I think ecm has problem with load hex data file... When I load my reading dump in HEXCMP, but AS INTEL HEX (that is this option), then after compare with dump from collection, I find no differences! (maybe 2 bytes at the end of file)..

Now I cant check ecm ability to open as Hex, but later will do this.

Another thing is read data... Flash 28F010 has 1024kB memory, but read is 1/8. So I understand, that when check another adres, (my readout ends with 1FFFF =~128kB) i.e from 20000-...., that I sould read next part of data..? Am I right?

Regards,

1: First readouts (dump) from my ECM in another loading method:


198795 198796 198797

2: nice compare resoult with dump from collection:


198804 198805

WinWoj
17th May, 2013, 04:31 PM
Hi guys.

OK, I read flash, save in bin, and I have the same, as in my collection dump. No difference, so I'm sure, reading is good.

Because I'm not recevie sugestion about another, better than ecm'01 soft software, I used it and with succes.

New binary dump was recognize in soft, also i found good driver and two maps.. I'm confused, thn only 2, but it is good for me at start. Later I'll try to find something in winols, but now I'd like to analize siemens algorithm decoding map data...

Please look at below pics, is pssible to find more maps, i.e. sensor characteristics, limiters or something? Will be easier to
analize, and test in car.. Siemens is a little bit different as Bosch, I thnk... Isn't it?


198887

mexanico1971
18th May, 2013, 12:55 AM
now is good !
you can use google and find forum"s and software edit just for volvo !
look for saab to !

good luck !

regards

WinWoj
18th May, 2013, 09:16 PM
now is good !
you can use google and find forum"s and software edit just for volvo !
look for saab to !

good luck !

regards

Hi, it looks like i haven't luck.. I didn't find any fenix ecu edit tool, Tuner Pro RT, with included xdf for some early fenix haven't more data defined as ecm'01... Please help me with tool for volvo ecu edit tool, with fenix 5.1 or similarity included... I'm confused, in past worked "fenixlive.fr" project, but today not exist... Maybe someone have that tool, in this project will by very helpfull.. So, please give me some ideas for starting...

WinWoj
19th May, 2013, 06:32 PM
Hi.

Nobody helps me.. 2 guys tells that readout wrong and 'stop using ecm2001', but nothing more.. I found, that with this fenix 5.1 system can make 140hp from oem 125hp. Is possible only with basic 2 maps modification? In another Fenix 3 system, in Tuner Pro RT I found 2 maps, RPM limiter and soft number... And now I wondering, from where find more data, like cold start rich mixture charateristic, MAP sensor characteristic, algorithm for MAP axis (in fenix 3 is some equal - x * 7,43 + 80 mBars [when x = (20, 40, 60, 80...)])... I hope, that deassembling is the last thing, couse needed data can be in TMS uP, I've never work before... Fenix 3 has maps with smaller resolution, then Fenix 5, another memories (eeprom vs flash) so another addresses.. Who can helps me hack this ecu. I'll attach reprint from MAHA dyno, before and after mod, but maybe better will be editing more than 2 basic maps (if exist more in this ecu)

Below my findings from R25 (fenix 3) defined in TP5 RT:


199190 199191 199196



199193 199194

mexanico1971
20th May, 2013, 12:53 AM
this is not for fenix !
but is more info that can be useful !

Trionic suites (http://trionic.mobixs.eu/)

regards

Alpinesport
20th May, 2013, 09:21 AM
made a +5 to the maps you need

WinWoj
21st May, 2013, 05:12 PM
made a +5 to the maps you need
Alpine,

How You make this map in PC Link?? I tried, but can't load bin, can't edit axises, i don't understand - but map looks very good. As You can see in my post #12 - I shown the same maps. What is so good in PC Link software?

WinWoj
21st May, 2013, 05:16 PM
this is not for fenix !
but is more info that can be useful !

Trionic suites (http://trionic.mobixs.eu/)

regards

Mexicano,

great thx.. It looks big lecture, exacly as I needed :) Guys from Trionic made big work... I hope, after deassemby Fenix 5.2, I would also provide such staff..

WinWoj
21st May, 2013, 06:39 PM
made a +5 to the maps you need

OK, I understood "+5"... But I found these maps before.. Only 2 maps is enough to up the power??? Companies like bhptuning and another make power-up from 126hp to 143hp.. Is this possible editing only these 2 maps?

WinWoj
29th May, 2013, 09:31 PM
OK, before I start looking for more maps and parameters, their axes and another, I'd like to disassembly data. But I don't know, is flash data is only one memory, or big TMS should be disassembly first? No datasheets for TMS 374 in BPQFP package in Internet... But many comercial project for using it... I can read them, via XProg-m, but is it needed? Maybe all alghoritm + variables and matrixes are placed in flash and disassemling will break our Fenix!! Isnt it?

Regards.