Vida CEM swapping

prometey1982 · Post by **prometey1982** » 26 Aug 2022, 15:29

T5Luke wrote: 26 Aug 2022, 14:24 If you have questions look into the p2 protocol documentation...

Hi!
Vitaly told me that others that CEM modules can me flashed without writing SBL to it. Is it possible? For ECM I upload SBL to it.

T5Luke · Post by **T5Luke** » 27 Aug 2022, 06:26

The CEM -MY2004 has a primary bootloader inside with writing capabilities so for this you don't need a secondary bootloader...

Post by **vtl** » 27 Aug 2022, 06:30

I think prometey1982 meant to ask "modules other than CEM".

T5Luke · Post by **T5Luke** » 27 Aug 2022, 06:34

As far i know only the early modules support more primary bootloader functions, later they reduced them more and more and put the functions into to the secondary bootloader. The only other module i know that supports writing function in primary bootloader is the early CCM...

myname · Post by **myname** » 27 Aug 2022, 20:23

Hello,
Im sorry there's way too many pages to catch up on, I've probably only been through 40. Is there anyway to CEM pin crack with software only?
I have a 2007 XC70. I have a Dice cable, a regular USB to OBD cable and a laptop with Vida.
Im not super fluent with the super techy stuff thats been posted here.
Thanks

oscilloscope · Post by **oscilloscope** » 28 Aug 2022, 02:19

Bryt wrote: 25 Aug 2022, 18:46 Ok thanks. I waiting for a cem i bought to test on before a do it on my car. My car has only one fob and i want to add one so i need it to add one more.

Tango can add keys via dump as far as I can tell?

T5Luke · Post by **T5Luke** » 28 Aug 2022, 03:58

myname wrote: 27 Aug 2022, 20:23 Hello,
Im sorry there's way too many pages to catch up on, I've probably only been through 40. Is there anyway to CEM pin crack with software only?
I have a 2007 XC70. I have a Dice cable, a regular USB to OBD cable and a laptop with Vida.
Im not super fluent with the super techy stuff thats been posted here.
Thanks

Yes there is...

Here get your UDS code by this:
https://filetransfer.io/data-package/sdnEjW7j#link

After that download your CEMs data, a full dump of your CPU flash by this:
https://filetransfer.io/data-package/FEduKEfj#link

DICE-206751, a charger for your computer and a charger for your car, can take up to 32h, depends where your code is...
Disconnect battery of your car for 10s to return into normal operating mode...

Works for all P2 cars from MY2006, VIN 10th pos needs to be 6 or higher...

repair · Post by **repair** » 29 Aug 2022, 04:24

T5Luke wrote: 26 Aug 2022, 03:54 The remote fob is stored in the UEM, you need a new fob with codes on package or a used UEM from same MY with used fobs. The transponders are stored in CEM.

I have information that some people do not use someone else's mirror at all to transfer the date of key fobs from it ... .
They only need someone else's keychain and without their own mirror ....
And they don't even open the keychain case at all ...
How can all this be true and purely technically possible?

jaywats · Post by **jaywats** » 29 Aug 2022, 12:48

repair wrote: 29 Aug 2022, 04:24
T5Luke wrote: 26 Aug 2022, 03:54 The remote fob is stored in the UEM, you need a new fob with codes on package or a used UEM from same MY with used fobs. The transponders are stored in CEM.
I have information that some people do not use someone else's mirror at all to transfer the date of key fobs from it ... .
They only need someone else's keychain and without their own mirror ....
And they don't even open the keychain case at all ...
How can all this be true and purely technically possible?

Are you asking about key transponder or remote? Remote is stored in UEM

repair · Post by **repair** » 30 Aug 2022, 01:07

jaywats wrote: 29 Aug 2022, 12:48 Are you asking about key transponder or remote? Remote is stored in UEM

Remote