Vida CEM swapping
- RickHaleParker
- Posts: 7203
- Joined: 25 May 2015, 14:30
- Year and Model: See Signature below.
- Location: Kansas
- Has thanked: 8 times
- Been thanked: 978 times
Got it.
I did find a Cross Platform, Open Source, Signal analysis software suite that support a lot of hardware, including the $10.00 Logic Analyzers. The sigrok project.
Last edited by RickHaleParker on 24 Apr 2021, 13:23, edited 1 time in total.
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
-
MaxDenisov
- Posts: 36
- Joined: 06 Mar 2021, 12:34
- Year and Model: XC90 2010
- Location: Moscow
- Has thanked: 2 times
I would be very happy to try this out on my junk-bench CEM which i already know the pin for (used a parallel BCM interface to get it). But this comes from a MY04 P1 car = old style CEM (CEM-B??), does your program still works for this old Motorola processor based CEM?T5Luke wrote: 24 Apr 2021, 08:08 Anybody has Dice, CODE and likes to try?
Only tested 1 time on bench and it worked. CEM allows only 100 write cycles so i dont like to do endless tests.
There are some small things i need to fix, if tests work 3 times i will upload here for all...
Also, why are you limited to 100 write cycles? Is it the recommended hardware write limit of the MCU or something else?
-
T5Luke
- Posts: 142
- Joined: 11 Nov 2020, 17:00
- Year and Model: S60 T5 2001
- Location: DE
- Has thanked: 11 times
- Been thanked: 130 times
This programm is for the P2 CEM from 2005 and newer, when we can crack the earlier one by teensy i can adopt to this also.
In datasheet is written about 100 write cycles, the early one can do 10 000 without a prob.
In total i have rewritten my bench CEM now 6 times by this prog, i can say it seems to work, but it would be nice if we find some more testers...
In datasheet is written about 100 write cycles, the early one can do 10 000 without a prob.
In total i have rewritten my bench CEM now 6 times by this prog, i can say it seems to work, but it would be nice if we find some more testers...
Ah, understandable. Hook me up in the future if you need testing for this older platform.
I also have a bunch of P1 CEM I am more than interested into getting hacked over the canbus, rather than solder manually.
Fun fact, here in this Volvo country it is cheaper to buy a whole CEM at the junkjard than buying separate relays/fuses placed in the CEM. Cost about 5 EUR at the local junkjard. If shipping wasn't that expensive I would have been more than happy to supply you guys with some...
I also have a bunch of P1 CEM I am more than interested into getting hacked over the canbus, rather than solder manually.
Fun fact, here in this Volvo country it is cheaper to buy a whole CEM at the junkjard than buying separate relays/fuses placed in the CEM. Cost about 5 EUR at the local junkjard. If shipping wasn't that expensive I would have been more than happy to supply you guys with some...
- RickHaleParker
- Posts: 7203
- Joined: 25 May 2015, 14:30
- Year and Model: See Signature below.
- Location: Kansas
- Has thanked: 8 times
- Been thanked: 978 times
If the pincode bytes are 8 bit BCD ( Range 00 - 99 ) why is the pincode BCD expressed as a hexadecimal?
found PIN: 0x25 0x43 0x27 0x93 0x52 0x93
0x25 0x43 0x27 0x93 0x52 0x93 = BCD 37 67 39 147 82 147.
found PIN: 0x25 0x43 0x27 0x93 0x52 0x93
0x25 0x43 0x27 0x93 0x52 0x93 = BCD 37 67 39 147 82 147.
Active
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2017 Ford PIU. 3.5l, Twin Turbo, 365 Hp.
............................
Past
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000. ( Killed by a plastic radiator. )
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion ( I moved, the project did not )
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0. ( Transmission dead after sitting for a winter )
-
vtl
- Posts: 4934
- Joined: 16 Aug 2012, 13:35
- Year and Model: 2005 XC70
- Location: Boston
- Has thanked: 129 times
- Been thanked: 686 times
It also need a driver for K-line, for earlier P2s. I used mc33290d connected to serial port 3.MaxDenisov wrote: 24 Apr 2021, 12:57 @vtl I am working on new pc/hardware design. Please let me know if you are interesting in spare pcb/device
-
vtl
- Posts: 4934
- Joined: 16 Aug 2012, 13:35
- Year and Model: 2005 XC70
- Location: Boston
- Has thanked: 129 times
- Been thanked: 686 times
P1 works. The current github code was improved inadvertently in a way that broke it, but it turned out it can be cracked with P2 path, only shuffleOrder needs to be taken from P1.3r1k wrote: 24 Apr 2021, 17:06 I also have a bunch of P1 CEM I am more than interested into getting hacked over the canbus, rather than solder manually.
I've got a P1 CEM, but have no free minute to hook it up.
-
MaxDenisov
- Posts: 36
- Joined: 06 Mar 2021, 12:34
- Year and Model: XC90 2010
- Location: Moscow
- Has thanked: 2 times
two in one or just separate device/adapter?vtl wrote: 25 Apr 2021, 08:10It also need a driver for K-line, for earlier P2s. I used mc33290d connected to serial port 3.MaxDenisov wrote: 24 Apr 2021, 12:57 @vtl I am working on new pc/hardware design. Please let me know if you are interesting in spare pcb/device
-
- Similar Topics
- Replies
- Views
- Last post
-
- 1 Replies
- 8985 Views
-
Last post by RickHaleParker
-
- 6 Replies
- 8815 Views
-
Last post by abscate
-
- 27 Replies
- 27641 Views
-
Last post by cn90
-
- 10 Replies
- 10217 Views
-
Last post by jonesg
-
- 7 Replies
- 5429 Views
-
Last post by RickHaleParker







