Vida CEM swapping

Post by **RickHaleParker** » 07 Nov 2021, 14:12

RickHaleParker wrote: 07 Nov 2021, 11:16 Where would you store the data on a Teensy 4.0 other then volatile RAM?

I think I found the answer on my own. There is 1.08KB of Emulated EEPROM memory in Flash that can be used for storing data.

"EEPROM
1080 bytes of emulated EEPROM memory is supported. Writing to this memory temporarily stalls code execution from flash. The EEPROM library is typically used to access this memory. AVR libc functions may also be used."

sparacis · Post by **sparacis** » 08 Nov 2021, 17:53

was anyone ever successful with dumping a P1 CEM over OBD I was able to get about half the things done I wanted to my car with the CEM pin but now i need the IMMO key to finish the rest.

Post by **vtl** » 09 Nov 2021, 07:41

sparacis wrote: 08 Nov 2021, 17:53 was anyone ever successful with dumping a P1 CEM over OBD I was able to get about half the things done I wanted to my car with the CEM pin but now i need the IMMO key to finish the rest.

Are you able to read the CEM? Swedespeed has a P1 brain surgery topic where immo location was discovered. IIRC... " Sorry, down for maintenance."

sparacis · Post by **sparacis** » 09 Nov 2021, 17:23

I don't have an xprog so I can't pull a dump of the CEM, so I was hoping someone figured out how to pull from the OBD port. I know T5luke was able to pull a P2 CEM dump from the obd port using a DiCE so was hoping he got it to work on the P1.

blasaab · Post by **blasaab** » 10 Nov 2021, 00:43

vtl wrote: 05 Nov 2021, 06:06 First byte looks good, the rest is not. I wonder if the shuffle order is different for this P/N? Try to replace 0 with 3 here https://github.com/vtl/volvo-cem-cracke ... er.ino#L75 ?

Hi i have tested 2 more time see files

v50 read2.txt: (121.69 KiB) Downloaded 133 times

v50 read3.txt: (121.69 KiB) Downloaded 121 times

Post by **RickHaleParker** » 10 Nov 2021, 10:17

blasaab wrote: 10 Nov 2021, 00:43 Hi i have tested 2 more time see files

Shuffle order #0 & #3 did not work. You might try shuffle order #1 & #2.

Post by **RickHaleParker** » 10 Nov 2021, 14:21

blasaab wrote: 05 May 2021, 09:00 Im not able to crack my pin so looking at other way. I should have m32c in my car. Is there a guide how to connect throu wires in car or on bench

: MC32_Pinout.jpg (64.63 KiB) Viewed 838 times

Post by **vtl** » 10 Nov 2021, 14:33

When anyone reads the troublesome CEM, which the pin cracker fails to crack, please share your dump. I may be able to find what's wrong with it and what changes the cracker does need.

blasaab · Post by **blasaab** » 11 Nov 2021, 12:13

RickHaleParker wrote: 10 Nov 2021, 14:21
blasaab wrote: 05 May 2021, 09:00 Im not able to crack my pin so looking at other way. I should have m32c in my car. Is there a guide how to connect throu wires in car or on bench
MC32_Pinout.jpg

That was for my s60 that i finaly cracked in my car

blasaab · Post by **blasaab** » 11 Nov 2021, 12:26

I dont know if im doing something wrong. When i did p2 my first 2 pin was always the same and now im getting random pin. Should i add resistor or ignition on? Does my reads looks ok?