https://i.postimg.cc/cC0FzG8b/hex1.jpg https://i.postimg.cc/RVPgg8Cg/hex2.jpg https://i.postimg.cc/wjZ0pmmJ/ident.jpg https://i.postimg.cc/3NtFb4hk/ident2.jpg CEM_B_XC70_HW08688513_08696035_28F400B5_stend.zip Thanks for the reply. Yes, I do swap the large and small sequence numbers, but if I had ma...

Hello. I have been studying CEMB until 2004. Does anyone know how Vida rewrites the configuration area when it is necessary to change the vehicle configuration? The configuration area of the 28f400 flash is the 8000 - 20000 hex addresses. This area contains identification data (8000), configuration ...

And I'm attaching a CEMB dump.

Hello everyone, please test the program for reading and writing flash via BDM, configuration changes, writing and reading configuration via OBD (J2534), Volvo CEM blocks (S60, S80, V70, XC90) 2002 - 2004 based on CEMB MC68376 28F400. The BDM device is based on the Weact-STM32G431CBU6 mini core board...

Hi everybody. I wrote SBL for CEMB to read the full contents of the flash. While in test mode, CAN packets are transmitted in uncontrolled mode with 8 bytes of data. 512 KB is transmitted in 1.3 minutes. The period between CAN packets is 1.192 milliseconds. I receive all data packets on the table w...

I agree, there are very few cars with the CEMB unit left. We do not take these cars for diagnostics because of their age. But I was interested in reverse engineering and the lack of a tool for this block, so I decided to try my hand at it.