Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America). P2 platform.
Post Reply
5ft24
Posts: 203
Joined: 14 April 2013
Year and Model: 2005 XC90 V8 AWD
Location: Sedro Woolley, Washington
Has thanked: 20 times
Been thanked: 12 times

Re: Vida CEM swapping

Post by 5ft24 »

T5Luke wrote: 05 Sep 2022, 14:02 This reads flash by 6 byte code:
Sweet. Thank you

5ft24
Posts: 203
Joined: 14 April 2013
Year and Model: 2005 XC90 V8 AWD
Location: Sedro Woolley, Washington
Has thanked: 20 times
Been thanked: 12 times

Post by 5ft24 »

Perfect!
Now have a 320K bin to play with LOL
I guess the other question is writing changes back...

5ft24
Posts: 203
Joined: 14 April 2013
Year and Model: 2005 XC90 V8 AWD
Location: Sedro Woolley, Washington
Has thanked: 20 times
Been thanked: 12 times

Post by 5ft24 »

using the online disassembler, what do I use for the entry code. I know the MCU is M32C also, do I just select default for Endian?
Thanks

konielian
Posts: 10
Joined: 22 June 2021
Year and Model: 2010 C70, 2019 XC60
Location: Albania
Has thanked: 1 time
Been thanked: 1 time

Post by konielian »

Hello,

I can help you modifying that flash, i have all neccesary data to change and information.

But i have no idea how to write it back to CEM and this is an issue!

If you want you can send me the flash.

Thanks!

vtl
Posts: 4724
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 603 times

Post by vtl »

5ft24 wrote: 05 Sep 2022, 21:57 using the online disassembler, what do I use for the entry code. I know the MCU is M32C also, do I just select default for Endian?
Thanks
BaseAdr=FB0000

Default endianness.

5ft24
Posts: 203
Joined: 14 April 2013
Year and Model: 2005 XC90 V8 AWD
Location: Sedro Woolley, Washington
Has thanked: 20 times
Been thanked: 12 times

Post by 5ft24 »

ODA as M32C, BaseAddr 0xFB0000 and default Endian... Wants to know where to start disassembling... If I tell it to start at the beginning, it comes up with a bunch of "unknown"...
Attachments
cem.7z
2005 XC90 V8 Dump CEM 30728539
(112.65 KiB) Downloaded 150 times

flyovr
Posts: 4
Joined: 26 January 2020
Year and Model: 2011 C30
Location: PNW
Has thanked: 2 times

Post by flyovr »

T5Luke wrote: 21 Aug 2022, 15:07 If just change config is enough, here a simple extract from my flasher.
Open CEM 320kb bin from CEM MY 2006- and change config. Not so nice but free...
parameter.txt needs to be next to exe and you need to find parameters on your own...

I think it has bugs but it will work...
Sorry, link was wrong, now with parameter file
https://filetransfer.io/data-package/348Y8KBl#link
Hey all, been lurking for some time. Cracked my P2 MY07 XC70 last night using Teensy and managed to get a solid CEM bin file. I can read it with a hex editor and am finding my VIN included.

@T5Luke, Super interested in this config tool. Also noticed you mention its from your flasher. I have been trying to read up through all of the pages of this forum but have gotten lost.

Seems like the 50 user download limit has been hit and was wondering if you could re-up? Looking to change my headlight config to ABL and adjust tire size for speed correction.

Thanks everyone for your work on this. I've always been super interested in the topic but haven't had the time to deep dive into the topic.

Cheers!
07 XC70 with ABL retrofit in works
11 C30 T5 M66 Hilton Stage 2

flyovr
Posts: 4
Joined: 26 January 2020
Year and Model: 2011 C30
Location: PNW
Has thanked: 2 times

Post by flyovr »

5ft24 wrote: 07 Sep 2022, 20:39 ODA as M32C, BaseAddr 0xFB0000 and default Endian... Wants to know where to start disassembling... If I tell it to start at the beginning, it comes up with a bunch of "unknown"...
Seems like we are in the same boat! Tried the same but wasn't able to disassemble exactly like you.

Did you happen to figure out how to flash back to the CEM afterwards? Can't wrap my head around everything at the moment.
07 XC70 with ABL retrofit in works
11 C30 T5 M66 Hilton Stage 2

konielian
Posts: 10
Joined: 22 June 2021
Year and Model: 2010 C70, 2019 XC60
Location: Albania
Has thanked: 1 time
Been thanked: 1 time

Post by konielian »

I can help you change the config you want just send me the 320kb flash and i change it for you!

vtl
Posts: 4724
Joined: 16 August 2012
Year and Model: 2005 XC70
Location: Boston
Has thanked: 114 times
Been thanked: 603 times

Post by vtl »

5ft24 wrote: 07 Sep 2022, 20:39 ODA as M32C, BaseAddr 0xFB0000 and default Endian... Wants to know where to start disassembling... If I tell it to start at the beginning, it comes up with a bunch of "unknown"...
That's ok, as the dump contains both code and data sections. Disassemble the whole file, save to disk. Register at Renesas site, download M32C datasheet, look at the address space map, vectors, start sequence.

Post Reply
  • Similar Topics
    Replies
    Views
    Last post