Login Register

Vida CEM swapping

A mid-size luxury crossover SUV, the Volvo XC90 made its debut in 2002 at the Detroit Motor Show. Recognized for its safety, practicality, and comfort, the XC90 is a popular vehicle around the world. The XC90 proved to be very popular, and very good for Volvo's sales numbers, since its introduction in model year 2003 (North America).
Post Reply
User avatar
RickHaleParker
Posts: 7000
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 902 times

Re: Vida CEM swapping

Post by RickHaleParker »

ZRimaZ wrote: 11 Dec 2021, 12:23 here you go
2021-12-11 (1).png
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

ZRimaZ
Posts: 66
Joined: 08 Mar 2009, 12:26
Year and Model: XC60 MY2016 3.0 T6
Location: Lithuania, Kaunas
Has thanked: 19 times
Been thanked: 12 times

Post by ZRimaZ »

RickHaleParker wrote: 11 Dec 2021, 13:03
Yes, I saw it - hw pn is in 2 forms - open text as you pointed and in binary format, just few lines below @ 5FEB4
Have a nice day,

ZRimaZ

User avatar
RickHaleParker
Posts: 7000
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 902 times

Post by RickHaleParker »

ZRimaZ wrote: 11 Dec 2021, 11:49 usually I write HWPN from cem unit in file name....Maybe it's just mistake or kind of mistype...
An idea: Use the VIN number for the file names. VinNumber_XX.bin where XX is FF for Flash File, FD for Flash Data. EP for EeProm. Then a VinNumber.readme file, which is a text file, to contain all information you been putting in the file name and room for notes also. To find something you do a search in .readme files.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

swinokur
Posts: 14
Joined: 05 Sep 2021, 13:57
Year and Model: 2013 C30 Polestar
Location: San Francisco
Has thanked: 2 times

Post by swinokur »

It was a while ago in this thread, but my P1 CEM did crack with the teensy code:

Part Number: 31327215
Searching P/N 31327215 in 49 known CEMs
CAN HS baud rate: 500000
PIN shuffle order: 2 4 5 0 3 1


RickHaleParker wrote: 11 Dec 2021, 11:19 Done pull request issued.
P1 owners can download from my fork and try it or you can wait until VTL approves it and merges it with his.

Please report successful cracks and failures.

The new P1 list:

// P1
{ 8690719, CAN_500KBPS, 2 }, /* Confirmed */
{ 8690720, CAN_500KBPS, 2 }, /* Confirmed */
{ 8690721, CAN_500KBPS, 2 }, /* Unconfirmed */
{ 8690722, CAN_500KBPS, 2 }, /* Confirmed */
{ 30765471, CAN_500KBPS, 2 }, /* Confirmed */
{ 30728906, CAN_500KBPS, 2 }, /* Unconfirmed */
{ 30765015, CAN_500KBPS, 2 }, /* Confirmed */
{ 31254317, CAN_500KBPS, 2 }, /* Confirmed */
{ 31327215, CAN_500KBPS, 3 }, /* Assumed Confirmed */
{ 31254749, CAN_500KBPS, 3 }, /* Assumed Confirmed */
{ 31254903, CAN_500KBPS, 2 }, /* Confirmed */
{ 31296881, CAN_500KBPS, 2 }, /* Unconfirmed */

User avatar
RickHaleParker
Posts: 7000
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 902 times

Post by RickHaleParker »

swinokur wrote: 11 Dec 2021, 17:42 It was a while ago in this thread, but my P1 CEM did crack with the teensy code:

Part Number: 31327215
Searching P/N 31327215 in 49 known CEMs
CAN HS baud rate: 500000
PIN shuffle order: 2 4 5 0 3 1
I now know where 31327215 came from. Change it to confirmed.
Did you do a 31254749?
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

swinokur
Posts: 14
Joined: 05 Sep 2021, 13:57
Year and Model: 2013 C30 Polestar
Location: San Francisco
Has thanked: 2 times

Post by swinokur »

31254749? That was not me.
RickHaleParker wrote: 11 Dec 2021, 18:06 I now know where 31327215 came from. Change it to confirmed.
Did you do a 31254749?

mariom598
Posts: 4
Joined: 07 Jun 2020, 06:17
Year and Model: 2015 XC60
Location: Ancona
Has thanked: 3 times

Post by mariom598 »

ZRimaZ wrote: 08 Dec 2021, 02:44
RickHaleParker wrote: 07 Dec 2021, 12:43
ZRimaZ wrote: 07 Dec 2021, 12:32 I have a lot of p3 bins. I do not know where then pin is located - there was no need for me until now to analyse it, but I can extract pin from flash in other ways...
If you can, figure out the location of the PIN in .bin. Then parse the .bin files to extract the PINS. Publish the list of PINs. Perhaps we can spot a pattern. 🤞
Never checked it, but not I have done it ant -very strange -, but it looks very easy - P3 models with R32C processors R5F64525/R5F64524 have PIN located jus at the start of DataFlash, they are just swapped:
2021-12-08_113710.jpg
2021-12-08_113912.jpg

P3 CEM with M30882FJ processor has different system - it needs more deep analyzing. Attached are few flash files with PINs in their names.
P3 CEM M30882FJ with PINs.rar
Hi, in my case what would be the right pin? Thanks!
Attachments
Capture_096.jpg
Capture_096.jpg (47.41 KiB) Viewed 268 times

User avatar
RickHaleParker
Posts: 7000
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 902 times

Post by RickHaleParker »

mariom598 wrote: 12 Dec 2021, 13:24 Hi, in my case what would be the right pin? Thanks!
23 15 92 67 72 Shuffle {3,1,0,2,4} = 92 15 67 23 72 .
00 01 02 03 04 ....... Placement ...... 00 01 02 03 04


00 01 02 03 04 */ Placement /*
23 15 92 67 72 */ PIN in .bin /*
03 01 00 02 04 */ Shuffle /*
92 15 67 23 72 */ PIN /*
Last edited by RickHaleParker on 13 Dec 2021, 01:11, edited 2 times in total.
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

mariom598
Posts: 4
Joined: 07 Jun 2020, 06:17
Year and Model: 2015 XC60
Location: Ancona
Has thanked: 3 times

Post by mariom598 »

RickHaleParker wrote: 12 Dec 2021, 15:25
mariom598 wrote: 12 Dec 2021, 13:24 Hi, in my case what would be the right pin? Thanks!
23 15 92 67 72 Shuffle {3,1,0,2,4} = 92 15 67 23 72 .
00 01 02 03 04 ....... Placement ...... 00 01 02 03 04


00 01 02 03 04 */ Placement /*
23 15 92 67 72 */ PIN in .bin /*
03 01 00 02 04 */ Shuffle /*
92 15 67 23 72 */ PIN /*
First of all, thank you, I forgot to say, that this is an CEM module mounted on an XC 60/2015

User avatar
RickHaleParker
Posts: 7000
Joined: 25 May 2015, 14:30
Year and Model: See Signature below.
Location: Kansas
Has thanked: 8 times
Been thanked: 902 times

Post by RickHaleParker »

Another way to write a shuffle, which I think is better is: B:P 0:3 1:1 2:0 3:2 4:4 ( .bin to Pin, 0 to 3, 1 to 1, 2 to 0, 3 to 2, 4 to 4 ).
The advantages are:
  • 1. It is easier to read and work with.
    2. If you want to the reverse shuffle to get Pin to .bin:
    • A. Flip each set, P:B 3:0 1:1 0:2 2:3 4:4
      B. Re-sequence the numeric sets P:B 0:2 1:1 2:3 3:0 4:4 { 2,1,3,0,4 }
    .
⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙⸙
1998 C70, B5234T3, 16T, AW50-42, Bosch Motronic 4.4, Special Edition package.
2003 S40, B4204T3, 14T twin scroll AW55-50/51SN, Siemens EMS 2000.
2004 S60R, B8444S TF80 AWD. Yamaha V8 conversion
2005 XC90 T6 Executive, B6294T, 4T65 AWD, Bosch Motronic 7.0.

Post Reply
  • Similar Topics
    Replies
    Views
    Last post