Hi everyone, Thought I'd add a little tutorial for the P2 vehicles. For anyone who doesn't know me I'm an autoelectrician. I don't just play with wires like most, I dive deep into the inner workings of the flash files too for a better understanding. I work on Volvo's quite a bit along with other man...

A thread I put up earler in reference to this project and showing what can be done when you start aquiring tools.

viewtopic.php?t=105847

the 3-byte pin you need is actually hex-coded decimal, in other words digits 0-9 and never using A-F, and will appear in hexadecimal exactly how they would be entered. the 3-byte pin for the cem is located in encrypted cem eeprom, and also located in ecu eeprom. if you read the ecu bin using a tool ...

In ghidra, there is no M32C instruction set implemented, so m16c/80 is used. A common instruction missing in m16c/60 and m16c/80 is a SHLNC.L instruction. With below Ghidra SLEIGH functions which are copy pasted from SHL.L we add those to be decoded # (2) :SHLNC.L #imm, Ax :SHLNC.L srcSimm8, dst5Ax ...