Vida CEM swapping

3r1k · Post by **3r1k** » 31 Mar 2021, 09:21

Really like the progress of this thread. Would you mind share some hints on how to simply change the flash over CAN

. From my understanding, an SBL is essential or is there any other way.

I can successfully edit EEPROM parameters such as IMMO over CAN, but that is just using the pre defined offset and nothing fancy I guess...

Post by **vtl** » 31 Mar 2021, 09:22

You need SBL.

3r1k · Post by **3r1k** » 31 Mar 2021, 09:29

vtl wrote: 31 Mar 2021, 09:22You need SBL.

Yeah that's what I thought... Any hints where/how to start writing one would be really helpful, not only for me I guess

Atm my assembly knowledge is lacking a bit.

Post by **vtl** » 31 Mar 2021, 09:35

3r1k wrote: 31 Mar 2021, 09:29 Yeah that's what I thought... Any hints where/how to start writing one would be really helpful, not only for me I guess Atm my assembly knowledge is lacking a bit.

Renesas has evaluation version for embedded workshop with M32C support. You can write SBL in C, I guess. Didn't try myself though.

MaxDenisov · Post by **MaxDenisov** » 31 Mar 2021, 09:55

3r1k wrote: 31 Mar 2021, 09:21 Really like the progress of this thread. Would you mind share some hints on how to simply change the flash over CAN . From my understanding, an SBL is essential or is there any other way.

I can successfully edit EEPROM parameters such as IMMO over CAN, but that is just using the pre defined offset and nothing fancy I guess...

It is getting quite interesting. I need to add new immo and remote instead of lost ones. Right now my spare(second key) can work only if i put it directly into cold conditions(snow etc) but it is getting warmer and snow is melting down)) Vdash is not supporting immo and keys for P2 as far as I understood. Vida is not available in my region for personal/home usage. Official service can do such operation during working days because they afraid that servers can be down during weekends etc. Any ideas how to get SBL?

3r1k · Post by **3r1k** » 31 Mar 2021, 09:57

vtl wrote: 31 Mar 2021, 09:35
3r1k wrote: 31 Mar 2021, 09:29 Yeah that's what I thought... Any hints where/how to start writing one would be really helpful, not only for me I guess Atm my assembly knowledge is lacking a bit.
Renesas has evaluation version for embedded workshop with M32C support. You can write SBL in C, I guess. Didn't try myself though.

Will for sure have a look into that, I am actually trying to do this for a P1 Volvo with HCS12 MCU, but I guess there should be some similarities with the operation.

3r1k · Post by **3r1k** » 31 Mar 2021, 10:01

MaxDenisov wrote: 31 Mar 2021, 09:55
3r1k wrote: 31 Mar 2021, 09:21 Really like the progress of this thread. Would you mind share some hints on how to simply change the flash over CAN . From my understanding, an SBL is essential or is there any other way.

I can successfully edit EEPROM parameters such as IMMO over CAN, but that is just using the pre defined offset and nothing fancy I guess...
It is getting quite interesting. I need to add new immo and remote instead of lost ones. Right now my spare(second key) can work only if i put it directly into cold conditions(snow etc) but it is getting warmer and snow is melting down)) Vdash is not supporting immo and keys for P2 as far as I understood. Vida is not available in my region for personal/home usage. Official service can do such operation during working days because they afraid that servers can be down during weekends etc. Any ideas how to get SBL?

Have only done this to P1 Volvos, but I guess the same principle applies to P2 cars to? On P1 I am required to get the IMMO PIN stored in eeprom to send the CAN commands to learn a new ID48 key. I got this manually by soldering into the MCU.

Have a look here, https://www.swedespeed.com/threads/s40- ... rm.632189/ (sorry wrong forum

)

MaxDenisov · Post by **MaxDenisov** » 31 Mar 2021, 10:08

3r1k wrote: 31 Mar 2021, 10:01
MaxDenisov wrote: 31 Mar 2021, 09:55
3r1k wrote: 31 Mar 2021, 09:21 Really like the progress of this thread. Would you mind share some hints on how to simply change the flash over CAN . From my understanding, an SBL is essential or is there any other way.

I can successfully edit EEPROM parameters such as IMMO over CAN, but that is just using the pre defined offset and nothing fancy I guess...
It is getting quite interesting. I need to add new immo and remote instead of lost ones. Right now my spare(second key) can work only if i put it directly into cold conditions(snow etc) but it is getting warmer and snow is melting down)) Vdash is not supporting immo and keys for P2 as far as I understood. Vida is not available in my region for personal/home usage. Official service can do such operation during working days because they afraid that servers can be down during weekends etc. Any ideas how to get SBL?
Have only done this to P1 Volvos, but I guess the same principle applies to P2 cars to? On P1 I am required to get the IMMO PIN stored in eeprom to send the CAN commands to learn a new ID48 key. I got this manually by soldering into the MCU.

Have a look here, https://www.swedespeed.com/threads/s40- ... rm.632189/ (sorry wrong forum )

Interesting. but still no ideas how to deal with it over OBDII

Post by **vtl** » 31 Mar 2021, 14:35

I would love to kill the immobilizer altogether. My only key (well, ID48 pill) is glued to the immobilizer antenna, I never lock my cars, plus there's a spare key resting in fuse box under the hood.

blasaab · Post by **blasaab** » 31 Mar 2021, 15:03

I have cloned my key. Only remote dosent work but can unlock with the blade.