At the moment the earlier models are not supportet. Technical it is a bit different and sending so much samples at a much slower bus makes this thing a bit difficult... But it won't mean it is not possible it just would take much longer...

No, from MY 2005 the cem type changed and the first cpus have a flash with 512kb, look closely to the cpu. The early serials all have 512kb, all cems with a serial starting with 5 or above have 320kb flash, the swap was done shortly before 5 M30835F Flash starts at F80000 to FFFFFF 512kb total M3085...

I didn't try internal, till now i'm happy with mcp, we only measure time between sending and receivng. I think the signal quality and how long the messeage stays on the can bus is the important factor. The 3,3V powered can transceivers have it hard to create a differential signal which could reach u...

With the CODE it gets so easy to read out the CEM

I make progress in flashing by own sbl, a flasher could be an easter egg in this forum, so wait a few days and keep your pincodes and dice units ready

Not my first bootloader, this is even able to read and write external EEPROM of the CPU, but i think most people want a config changer here and i hope to get it work this easter days... Who just needs a dice flash reading tool can pm me to read out his complete CEM flash when he got code by teensy b...

A few seconds ago, i reflashed my config block of my P2 cem by my own bootloader. The main thing it worked but i don't know how secure. I also had many other things to do, so progress took some longer as i thought. Tomorrow i will build a loader by dice for it and the first fearless people can test ...

I'm a bit late but had much different things to do and didn't come so far with a normal user "useful" software. My idea was and is to release a windows soft this week, which allows to change the parameters of the car, like having fog lights, having this, having that. Beyond each parameter ...

I use another lib for this mcp, cause especially on not so original mcps https://github.com/coryjfowler/MCP_CAN_lib This works more stable. #include <SPI.h> #include <mcp_can.h> #include <mcp_can_dfs.h> #define printf Serial.printf /* tunables */ #define SAMPLES 70 /* how many samples to do on a seq...

Who still searches his pincode and has a P2 car from model year 2006-

Just a DICE-206751 is enough to crack pin and dump full flash without any risk.

(or 2005- CEM with series number starting by 0000491...)