Volvo S80 CEM synchro

[g5n14]

Hello guys!
Have a Volvo s80 which crank but wont start.

Readed out 28f400 and 95p08.

Could some synch it please? Couldnt find cracked soft anywhere.

Huge thanks!!!

[rafal]

........................

[g5n14]

Thaks a lot! Will try now and report! No need change in 28f400?

[rafal]

write eeprom to ecu and try start car............

[carmoh]

hi

you need this soft purhapse???:peaceful:

[g5n14]

Hey. Yes, would be nice! I just got the eeprom ECU fixed by rafal and trying to start now, will see if it works!
But thanks a lot for your reply and if you can share software i would appreciate that!

[g5n14]

Hey! I have tried - doesnt start, but in diagnostic shows me that immobilizer is inactive and key is detected. It means there is some other problem or still might be sync issue?

[rafal]

sync done ok - try to find other problem

[g5n14]

You are the best! Thanked and repped as much times as possible! Have a great day! Will check some basic stuff now!

[g5n14]

Hey! Just checked everything

spark - ok
fuel pump activation and pressure - ok
crankshaft sensor - ok
injector impulses - no, not a single one is squirting


what might be the problem in that case?

[rafal]

soft:
https://www.digital-kaos.co.uk/forums/showthread.php/411075-Volvo-S80-2002-CEM-and-ECU-synchronization-required

[MartiLer]

did you have an ecu block replacement? the author does not finish something ..... in any case, this problem can be solved by hands. Broken utilities do not work correctl.:02.47-tranquillity:

[g5n14]

did you have an ecu block replacement? the author does not finish something ..... in any case, this problem can be solved by hands. Broken utilities do not work correctl.:02.47-tranquillity:


Hey! No, synchro *ucked because of long time without battery. Now immo looks ok but injectors do not squirt. Replaced the injector wiring just now (typical problem for that engine t6 2.8), still no squirts.

[g5n14]

Just checked eeprom and syncro area went to FFFF even though there were no dtc stored in ECU...
If someone could do sync by hand I would really appreciate it...

[rafal]

before done sync what about immo: was active?

[g5n14]

Did not check, customer said it was. But.... looks like immo is on, no squirts + FF in synchro area (just tried writing ECU eeprom again and it went FF after first start). I heard that in early s80 synchro in 28f400 dump was in some other place, other than codecard soft checks.

[MartiLer]

read the keys.

[MartiLer]

read the keys

[g5n14]

What you mean? Transponder ID? Have only one key

[g5n14]

Just found that topic on mhh:

Guys are saying that 95p08 doesnt work with carprog soft. Need to change synchro in 28f400 to make it same like in ori ECM eeprom. Sounds right? Or we can change 95p08 manually. If someone could tell me adress where synchro is in 95p08 and 28f400

[janusz21]

tray this cem

[g5n14]

tray this cem

Is it manuaali synched with ori ECU eeprom data? I have only 4-5 tries until 28f400 legs will start to fall off

[g5n14]

Thanks a lot! Figured out the logic which you used for that conversion, did the same conversion and my file matched yours 100%. But i think maybe BD and 14 is CS and we should also change those bytes accordingly?

Anyway looks pretty good, will try tomorrow and if it doesnt work then we have to figure out the CS calculation algo or wait for someone with ori tango and volvo calc, because tango can calculate ecm into cem synch.

[g5n14]

Hey guys i need some help!

Couldnt erase the TB28F400B5B with Willem PCB5.0 programmer.

Reads fine, verify fine, erasure and programming gives VPP Range error.

anyone knows solution? There is a topic on DK and guy just cleans the legs on adapter. I have cleaned them and moved the chip for like 8 hours now and i really start to lose hope.

[janusz21]

Look this
https://www.digital-kaos.co.uk/forums/showthread.php/334361-Volvo-V70-S80-S60-1999-2004-CEM-Thread/page5

http://www.digital-kaos.co.uk/forums/showthread.php/636747-Motorola-MC683XX-and-reading-writing-external-Flash-via-BDM?p=3196027&viewfull=1#post3196027

flash is very sensitive to soldering temperature , I read tl866 no problem only clean adapter

[g5n14]

what you mean by soldering temp? It is in tsop48 adapter right now, i can read it ok, but can't erase. there is 0 dirt on chip or adapter, there is something wrong with jumper settings i bet, but i can't find any adequate instructions on willem jumper settings.

[janusz21]

soldering hot air in pcb ,i don't know i don't have wilem i use tl866

[g5n14]

Hey! Programmed the chip, figured out the problem with programmer. But now with both files (stock and test) I have only relay clicking in CEM and nothing works. Soldering 100% ok tested many times, what is the problem now?
Readed the flash again, 100% same file as I flashed there. Need help!

[janusz21]

se pm ,,,,,,,,,,,,,,,,,,,,,,,,,

[solarsun]

Hey! Programmed the chip, figured out the problem with programmer. But now with both files (stock and test) I have only relay clicking in CEM and nothing works. Soldering 100% ok tested many times, what is the problem now?
Readed the flash again, 100% same file as I flashed there. Need help!

I think all here trying to helped you but you don't help them

did you replace battery in your test ? Do you have good power... ?

Change battery with new one and have stable supply when you make installation must be at least 12 V at least 5 A.

Also reload files to check syncro cause if you test without good power your files maybe damage again and post also transponder read of id 48 ...

[g5n14]

I think all here trying to helped you but you don't help them

did you replace battery in your test ? Do you have good power... ?

Change battery with new one and have stable supply when you make installation must be at least 12 V at least 5 A.

Also reload files to check syncro cause if you test without good power your files maybe damage again and post also transponder read of id 48 ...


thanks for your reply and thanks to everyone who are trying to help! The problem is found thanks to janusz21, flash is dead because of temperature, will replace tomorrow and post here about the results.

I have good power supply, I don’t have anything atm to read id48 (but I don’t think it’s necessary since key was recognized and starter was working).

[solarsun]

thanks for your reply and thanks to everyone who are trying to help! The problem is found thanks to janusz21, flash is dead because of temperature, will replace tomorrow and post here about the results.

I have good power supply, I don’t have anything atm to read id48 (but I don’t think it’s necessary since key was recognized and starter was working).

ok good luck

[g5n14]

Replaced with 28f400b5 out of used CEM - same stuff. CEM just clicking and nothing works. Any ideas what might be the problem?

[g5n14]

Can someone check if my initial read was good? I have readed it out multiple times its always byte to byte same, so i personally think its not the issue

[janusz21]

Original chip intel tp28f400b or mt28f400b

send my cem number ori and used

[g5n14]

Unfortunately numver is missing from ori, used is 08688513.

Ori tb28f400b5
Used mt28f400b


But i heard from a lot of places that the are replaceble

[janusz21]

put on the same intel tb28f400b5

[g5n14]

put on the same intel tb28f400b5

Thanks! Will try. I’m pretty sure they are interchangeable, but maybe you know better.

Don’t have any in the shop so ordered and will get back to it later.

[g5n14]

Found the sticker from CEM.
Numbers are:
9494706
99W102

Someone have the dump to compare? I’m 99% sure problem is overheated flash, but just wanna make sure that my read is good.

[g5n14]

NEED SOME ADVICES!!!!


Replaced with new flash, i have 10 of them now.
Soldered with iron only, no heat gun.
Same shit - CEM just clicks like mad and nothing works. Tried both with synched and ori files.

Possible CEM overheat?

[g5n14]

NEED SOME ADVICES!!!!


Replaced with new flash, i have 10 of them now.
Soldered with iron only, no heat gun.
Same shit - CEM just clicks like mad and nothing works. Tried both with synched and ori files.

Possible CEM overheat?


Tested with another CEM with different numbers - same shit. GOD DAMN IT!

Wrong initial read? Can someone check?

[brend]

This ...shut... not work!



hi

you need this soft purhapse???:peaceful:https://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=705682&stc=1&thumb=1&d=1586452912

[g5n14]

Thanks a lot!
But unfortunately I’m not an idiot. I know that already.
And I am trying with stock file.

[g5n14]

I have a 28f400 dump synched by hand, but I need first to get rid of this cem clicking problem. After that will correct syncs.

Story of the car:
It came, wasn’t starting but everything else works.
I took out 28f400, readed. Took out ecu eeprom, readed.
Corrected ecu eeprom - soldered both back, not starting but everything else works.
Understood that synch tool is shit and need correct cem dump by hand.
Took out 28f400 again, made synch by hand - cem clicking and nothing works. Put stock file - same shit
I was told by experienced user that flash is overheated, bought 10pcs, trying with stock - same shit.
Tried another cem - same shit.
A bit lost now and think that my initial read is bad

[g5n14]

Ordered number to number CEM from USA to check if first read was bad. No shipping to my country so asked my USA friend to reship it for me. Will take 1-2 month. Car is already staying for 3 month. If someone have any ideas - please tell me!

[brend]

Try this 2 sulution,.............

[g5n14]

Try this 2 sulution,.............
Thanks once again, but I know it.
and I have told you already. Cem doesn’t work at all even with STOCK file. After reprogramming there is some problem which I can’t figure out

[g5n14]

Relay click, dash dead, no com to car

[g5n14]

I am pretty sure my problem is first read from 28f400, so i have tried to compare to some files on DK.
Here is what i figured out after comparing my file to some of files found on DK:

Data structure ori:
datablocks: 1) 00000-00420 2)00800-017f0 3)02000-02810 4)03ff0-042E0
5!!!)04500-05600 6)08000-08050 7)08100-08040 8)08200-08220 9)10000-10090
10)20000-213D0 11!!!)21B90-21BF0 12!!!)22390-232D0 13!!!)40000-7c680 + residuals after 7F000




Data structure DKfile:
datablocks: 1)00000-00420 2)0800-017f0 3) 02000-02810 4)03ff0-042E0
5!!!)04500-05E10 6)08000-08050 7)08100-08040 8)08200-08220 9)10000-10090
10)20000-213D0 11!!!)21C00-21C60 12!!!)22400-23610 13)40000-7F1C0




Data STRUCTURE DIFFERENCES:


ori missing data (FF) from 05600 to 05E10
ori has messed up start and finish of 11 and 12 data blocks
ori moves couple of bytes at 404B0, data is same but moved couple of bytes. For example Ori 404B0=mod 404B5 and it goes for a while and then messes up again, moves forward and then again looks good, and goes on until the end of file.
ori has following trash bytes:




TRASH BYTES IN FF AREAS:


18CC0
18BE0
18A60
189A0
18500
17A80
16320
15300
196D0
1AEF0
1B660
1C200
1CA70
1F270
1FA90
14950
12C50
0F240
0ECF0
0DBE0

[g5n14]

Here are the files i am talking about. If someone can check my thoughts would be great.
Right now i will try to build a working file according to my discoveries, so that tomorrow(already today for me, ducking volvo) i have something to test

[g5n14]

OK! Got some movement!
After creating a folder DK CEM FILES, using ABSOLUTELY MAGICAL SEARCH BUTTON ON DK, using BRILLIANT BRAIN.EXE file found in some topic about key programmers, i have gathered a collection of about 25 CEM dumps, found a file which is very similar to mine, except sync block starts at 06000, not at 04000, which is 100% normal and both was used by volvo engineers for same task accordingly, logic is unknown.

In post above i have made couple of mistakes. EVERYTHING IS GOOD IN MY FILE, EXCEPT TRASH BYTES IN FF AREAS!!!!!!! Also there is trash byte instead of FF in the middle of the bottom area (no idea actually what it is made for, dont have enough experience)


I have now removed trash bytes according to my magical DK file, will upload 3 files here 1)my ori, 2)dk magical file 3)corrected ori
so that you guys, who have unstable voltage supply, cheap programmers, bad contact, bad luck, or whatever else can sleep well instead of spending your nights on dk+winols+energy drinks.

AFTER THAT I WILL GO TO THE GARAGE, UNPACK A NEW 28F400 AND MADAFLIPING FLASH IT AND SOLDER BACK AND SEE THIS GOD DAMN RELAY NEVER CLICK AGAIN!

[g5n14]

here are the files mentioned above.

[g5n14]

Finally checked. Now no relays clicking, radio works, relays are clicking when turn ignition, headlights working.

BUT! No dash, no com to car, no start no crank. Well much shit is missing.

I am pretty sure there is problem with first 4 datablocks. Either same shit with FF or any other problem. Will try to load magic DK file to CEM and see what hapens. If it works - will put everything from 08000 to 10000 to that file, that datablock is car accesories, which looks 100% without problems.

and, ofcourse 6200 sync data.

[g5n14]

All good dash started on DK file, will put synchro and accesories and LEEEETS GOOO!

[g5n14]

All good so far! Synchro added ok, accesories added ok. Only left to add keys. Anyone have carprog soft with volvo transponder feature activated?

[g5n14]

My zedbull is broken, my gambit is on the way. So i have no other choice to read out ID48 other than carprog.

[g5n14]

Hello guys! Got new Zedbull. Readed out the key ID of this volvo, 1C867ACA. It is programmed to the memory, but the car still doesnt crank and shows immo error. Can someone check dumps for me? Im using a file from DK, where i have inserted mine immo data, synchro and key data. But have no crank no start.

[key mechanic]

Привет, ребята! Получил нового Зедбулла. Прочитал идентификатор ключа этого volvo, 1C867ACA. Он запрограммирован в память, но машина все равно не заводится и показывает ошибку immo. Может кто-нибудь проверить свалки для меня? Я использую файл из DK, куда я вставил свои данные immo, синхро и ключевые данные. Но у него нет ни рукоятки, ни старта.
привет, пожалуйста, скажи мне, что ты сделал с машиной? В чем проблема? Как вы разрешили эту ситуацию? У меня есть Volvo cx 2003. чип зарегистрировал Tm100 в 28F400B5. но и машина не заводится. Вы не могли бы мне помочь?