Search found 21 matches
- 04 Dec 2022, 14:35
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
IO terminal can, and does in fact support all the things I wanted to do, write+read of CEM,ECM(basically anything with a SH7055 chip) as well as immobilizer stuff. Like I said, everything, all the bells and whistles. However as you might expect, it's paid and not cheap. I am not a fan of black boxes...
- 04 Dec 2022, 15:23
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
IO terminal can, and does in fact support all the things I wanted to do, write+read of CEM,ECM(basically anything with a SH7055 chip) as well as immobilizer stuff. Like I said, everything, all the bells and whistles. However as you might expect, it's paid and not cheap. I am not a fan of black boxe...
- 25 Jan 2023, 15:43
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
I have fantastic news. It all works...Finally. The CAN stuff at least. I could not get VIDA to work because of my socket code. But I managed to dump my maps in as little as 15-19 seconds. No need for K-line stuff, no "tester present" frames. I had to put all modules to sleep with FF86, the...
- 23 Jun 2023, 10:00
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
Just left a comment under one of modunlock's youtube video, pointing to that discussion, and guess what? It got removed promptly ;) His website also does not refer to our project anymore, like it used to. I know the modunlock's owner reads this. Honor our hard work, respect the GPLv3 license, abide ...
- 16 Oct 2023, 13:07
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
M32C comes in different Flash sizes.
320kB starts at 0xFB0000 with size 0x50000
384kB starts at 0xFA0000 with size 0x60000
512kB starts at 0xF80000 with size 0x80000
From the CPUs point of view, the pin is typically 0x2000 from the end at 0xFFE000.
320kB starts at 0xFB0000 with size 0x50000
384kB starts at 0xFA0000 with size 0x60000
512kB starts at 0xF80000 with size 0x80000
From the CPUs point of view, the pin is typically 0x2000 from the end at 0xFFE000.
- 16 Apr 2024, 14:04
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
Question for everyone. What info do you know is stored in the CEM? For now I know where VIN, Keys, Crypt Key, ECM Sync and PIN is. I am making a tool to make it easy to change any of these elements when you already have a CEM dump. The tool is also able to sync ECM and CEM. Currently this is only fo...
- 11 May 2024, 05:03
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
Here are the virgin files guys. CEM number is 31394157.
- 14 Oct 2024, 03:39
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
I am pleased to announce I have disabled slip lockup. The slip lockup maps now become the default full lockup maps. There is only slight slip lockup during engaging of the torque converter and possibly during shifting, which is normal and required.
- 02 Dec 2024, 08:07
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
It's interesting that Smok can. True, it works with its own cable, and somehow I doubt that they implemented this at the cable firmware level. When T5Luke and I started the project in 2020 there was no one cracking the pin via timing attack. Shortly after we opensourced the code and schematics, the...
- 04 Dec 2024, 12:03
- Jump to forum
- Jump to topic
Re: Vida CEM swapping
Same for Olaf. Sardine-can was a lot of inspiration.






