Plenty of engineers blue there. Did you skim with a machine or home brew skim?vtl wrote: ↑10 Feb 2023, 11:48This is what happens when you crack your CEM at home! Same happened to me! Engine died! Leave CEM pins to the professionals! They have the tools and the expertise!
Rebuilding engine is fun...
hj9.jpg
hj6.jpg
hj7.jpg
hj5.jpg
hj1.jpg
hj10.jpg
hj2.jpg
hj4.jpg
hj3.jpg
hj8.jpg
hj11.jpg
And so on...
Vida CEM swapping
-
oscilloscope
- Posts: 285
- Joined: 20 May 2022
- Year and Model: 2005
- Location: uk
- Has thanked: 27 times
- Been thanked: 11 times
Re: Vida CEM swapping
-
dikidera
- Posts: 1304
- Joined: 15 August 2022
- Year and Model: S60 2005
- Location: Galaxy far far away
- Has thanked: 67 times
- Been thanked: 175 times
What would be the difference between all the CEM variants listed here? https://www.datatransferring.com/cem-p2-2005
Would it be software changes or actual hardware changes exist there?
Would it be software changes or actual hardware changes exist there?
-
oscilloscope
- Posts: 285
- Joined: 20 May 2022
- Year and Model: 2005
- Location: uk
- Has thanked: 27 times
- Been thanked: 11 times
I was also curious about this , and i asked someone in the know which i was informed it was somthing to do with the masks and the crc checking. How true that is I'll never actually know.dikidera wrote: ↑11 Feb 2023, 17:02 What would be the difference between all the CEM variants listed here? https://www.datatransferring.com/cem-p2-2005
Would it be software changes or actual hardware changes exist there?
-
oscilloscope
- Posts: 285
- Joined: 20 May 2022
- Year and Model: 2005
- Location: uk
- Has thanked: 27 times
- Been thanked: 11 times
I'm not sure is the CAN ID mask. The same as the mask of the mcu ? , I assumed the one who was in the know it was to do with the mask of the chip die.
-
dikidera
- Posts: 1304
- Joined: 15 August 2022
- Year and Model: S60 2005
- Location: Galaxy far far away
- Has thanked: 67 times
- Been thanked: 175 times
Hmm. I was simply trying to figure out if they are "all the same" functionally, if they can all be mixed and matched with just the config options changing stuff.
I have an idea in mind to fix my car and make it a bit more powerful.
A 2.0t or 2.3t block, a turbo, a CEM config option change, new wiring harness for the engine bay, a PEM module. MAP and MAF or whichever combination is used on a s60r or s60 t5, and a Bosch ECM
I have an idea in mind to fix my car and make it a bit more powerful.
A 2.0t or 2.3t block, a turbo, a CEM config option change, new wiring harness for the engine bay, a PEM module. MAP and MAF or whichever combination is used on a s60r or s60 t5, and a Bosch ECM
-
oscilloscope
- Posts: 285
- Joined: 20 May 2022
- Year and Model: 2005
- Location: uk
- Has thanked: 27 times
- Been thanked: 11 times
I suppose you could get both types and check for variations on board ic's , and and see what it comes up with on a Google search on the part numbers. Assuming the part numbers even are searchable and not some in-house part number which is placed on the ic.dikidera wrote: ↑12 Feb 2023, 05:36 Hmm. I was simply trying to figure out if they are "all the same" functionally, if they can all be mixed and matched with just the config options changing stuff.
I have an idea in mind to fix my car and make it a bit more powerful.
A 2.0t or 2.3t block, a turbo, a CEM config option change, new wiring harness for the engine bay, a PEM module. MAP and MAF or whichever combination is used on a s60r or s60 t5, and a Bosch ECM
-
rkam
- Posts: 102
- Joined: 19 October 2022
- Year and Model: 14473_96090_XC7007
- Location: Norway
- Has thanked: 5 times
- Been thanked: 25 times
A few pages back there were some pictures of different L-shaped CEMs.
The ones with extra components could be used as replacement for those without, but not the other way around.
Software must also match.
For an engine swap, the CEM is not the main problem.
Your engine controller has to stream the correct data on the CAN bus for the complete network to understand.
In flash there is a portion of data that is called signal configuration.
This is where CAN signals and addresses for communication between controllers, is found.
I was just looking at my EDC16 now, and it is a little bit complicated to find the link between bytes in the signal configuration and datastream.
Example
0x1200021 00001001 000 000 00000000 01000010 09 - - 00 42 -- 09 18 00 42
My EDC will respond with CAN-ID 0x1200021 to a request from 0x000FFFFE
The 29-bit CAN id is split into several parts in the CAN registers of the MPC555 CPU.
The first part is 09, then the next six bits are not in line, then 8-bits are OK, and the last 8 bit are moved 1 step to the left.
Searching for 09 something something 00 42 resulted in 09 18 00 42 in the signal configuration.
0x1200021 will be something like 0x09180042 in signal configuration.
Other found:
0x62401E 03 1C 80 3C
0x80401E 04 18 80 3C
0xA20016 05 1C 00 2C
0x1400006 0A 18 00 0C
0x1600012 0B 18 00 24
0x10C00002 96 18 00 04
0x11C00002 8E 18 00 04
0xF00006 07 98 00 0C
0x18DAF110 C6 DD E2 20
The ones with extra components could be used as replacement for those without, but not the other way around.
Software must also match.
For an engine swap, the CEM is not the main problem.
Your engine controller has to stream the correct data on the CAN bus for the complete network to understand.
In flash there is a portion of data that is called signal configuration.
This is where CAN signals and addresses for communication between controllers, is found.
I was just looking at my EDC16 now, and it is a little bit complicated to find the link between bytes in the signal configuration and datastream.
Example
0x1200021 00001001 000 000 00000000 01000010 09 - - 00 42 -- 09 18 00 42
My EDC will respond with CAN-ID 0x1200021 to a request from 0x000FFFFE
The 29-bit CAN id is split into several parts in the CAN registers of the MPC555 CPU.
The first part is 09, then the next six bits are not in line, then 8-bits are OK, and the last 8 bit are moved 1 step to the left.
Searching for 09 something something 00 42 resulted in 09 18 00 42 in the signal configuration.
0x1200021 will be something like 0x09180042 in signal configuration.
Other found:
0x62401E 03 1C 80 3C
0x80401E 04 18 80 3C
0xA20016 05 1C 00 2C
0x1400006 0A 18 00 0C
0x1600012 0B 18 00 24
0x10C00002 96 18 00 04
0x11C00002 8E 18 00 04
0xF00006 07 98 00 0C
0x18DAF110 C6 DD E2 20
-
dikidera
- Posts: 1304
- Joined: 15 August 2022
- Year and Model: S60 2005
- Location: Galaxy far far away
- Has thanked: 67 times
- Been thanked: 175 times
I do not plan to keep the old Denso system and just use Bosch. But then the entire engine harness needs to be replaced which would not be a serious problem if I am going to be removing my engine. According to VIDA, my CEM and S60 2.4T5 CEM are the same, pin by pin.
Functionally, I am missing a few components, I do not have a PEM module, thus I may not have a wire for the PEM module and my pump may not be compatible.
It is still uncertain, but if this is all there is to it, I think the hardest part is flashing my CEM, as I have not yet started work. I have no dumps, I have not cracked the pin. Although if all that is needed is to flash the eeprom, this may be easier, unless it's protected by a CRC/Hash.
Or maybe there is missing software in the CEM needed for my conversion.
As for the signal configuration in ECM, I have not yet grasped the concept. Does the CEM request this signal configuration? But that seems unlikely as the CEM cannot know who is replying. Or does the ECM conform to some agreed upon algorithm/requirements by the CEM(Volvo programmers)? If the 29 bit can ID is in fact a bit flag, that is 29 flags to indicate how to process the CAN ID. If it's by nibbles, that is still a lot of ways to encode whom it's from.
If the CAN id changes between software upgrades from Volvo, then the CEM needs to know somehow? I am curious if this bit pattern is followed by Denso. And this way I can probably trace how and where the CAN registers are indirectly accessed.
Although my goals will probably take longer as I find myself in a precarious situation with my dead car. Do I fix the current engine, if it's not scored from previous owner. Or if it's bad, do I still replace it and keep it as a NA car, or do I go to the turbo Bosch route and overhaul it entirely, by myself, all alone and if I do I need to flash my CEM and I have not started work on this. Either way I also need tools, micrometer, dial bore gauges, engine hoist(rented), straight edge for checking everything.
Functionally, I am missing a few components, I do not have a PEM module, thus I may not have a wire for the PEM module and my pump may not be compatible.
It is still uncertain, but if this is all there is to it, I think the hardest part is flashing my CEM, as I have not yet started work. I have no dumps, I have not cracked the pin. Although if all that is needed is to flash the eeprom, this may be easier, unless it's protected by a CRC/Hash.
Or maybe there is missing software in the CEM needed for my conversion.
As for the signal configuration in ECM, I have not yet grasped the concept. Does the CEM request this signal configuration? But that seems unlikely as the CEM cannot know who is replying. Or does the ECM conform to some agreed upon algorithm/requirements by the CEM(Volvo programmers)? If the 29 bit can ID is in fact a bit flag, that is 29 flags to indicate how to process the CAN ID. If it's by nibbles, that is still a lot of ways to encode whom it's from.
If the CAN id changes between software upgrades from Volvo, then the CEM needs to know somehow? I am curious if this bit pattern is followed by Denso. And this way I can probably trace how and where the CAN registers are indirectly accessed.
Although my goals will probably take longer as I find myself in a precarious situation with my dead car. Do I fix the current engine, if it's not scored from previous owner. Or if it's bad, do I still replace it and keep it as a NA car, or do I go to the turbo Bosch route and overhaul it entirely, by myself, all alone and if I do I need to flash my CEM and I have not started work on this. Either way I also need tools, micrometer, dial bore gauges, engine hoist(rented), straight edge for checking everything.
Last edited by dikidera on 12 Feb 2023, 12:05, edited 1 time in total.
-
- Similar Topics
- Replies
- Views
- Last post
-
- 1 Replies
- 6431 Views
-
Last post by RickHaleParker
-
- 5 Replies
- 8699 Views
-
Last post by forumoto






