Vida CEM swapping

[PontusLSE]

I just noticed the last few posts in this thread. I do have a china version VIDA DICE 2014D, how can i find out if it is an DICE-206751?

Hi. You can run DiCE diagnosic tool and look DiCE number. Also you can open regedit and try to find 206751 value.

Thanks, it seems like my dice is the correct version according to the regedit values I will give it a try.

[prometey1982]

What about C compiler for m32c CPU? I installed Renesas HEW but didn't found samples for CAN.

[T5Luke]

Samples are a lot to find in renesas pdf sample sheets. Sending can frames by c compiler is also easy. But don't forget you run on custom hardware with shared soft by sbl. It is easier to interact by assembler as by c compiler. I have a script that erases the part i want but in some cases it crashes and erases more even the pbl. I think something else is kicking in i need to find out...

[NuovoRecord]

Wow, One year ago I asekd about the possibility of CEM hacking for pre-05 cars, and looks like we already have a solution! Now maybe I can finally activate my heated seats

Thanks to T5Luke and everyone else involved in this effort.

[PontusLSE]

The UDS cracker seems to be working But how fast is it supposed to be? I am running this on a virtual windows 7 and I get a new seed/line every 4 seconds. Is that normal?

[T5Luke]

Every 0x100 (256 in decimal) pin tries 1 line is printed.

4 seconds one line means:
256 tries in 4s

pin code min is 0x000000, pincode max is 0xFFFFFF
0xFFFFFF/0xFF*4 = 263172s
263172/60/60 = 73h in worst conditions

My max was something around 32h with worst conditions, i get 1 line each 2s.

[MiclMacl]

The UDS cracker seems to be working But how fast is it supposed to be? I am running this on a virtual windows 7 and I get a new seed/line every 4 seconds. Is that normal?

Mine took around 7-8 hours I think. I did it in stages for a few hours at a time using T5Luke’s UDS tool. I made a note of where the tool had gotten up to, then closed down. I was then able to resume again from the address I had made a note of, at another time.

Never used a battery tender on mine as the car is in such a low power state with a good charge, but did disconnect the battery after each ‘cracking’ session to clear the car down. I think I had to clear DTC codes down, particularly the SRS Airbag from VIDA, but it worked like a charm and I could get the dump off successfully using the PIN.

[rednasdees]

Some info to share,

I was trying to get the pin from my volvo v50 p1 from 2004, i used 2 versions of the cem cracker because i could not get a good result the first time.
The next link will give you guys the outcome of the 2 attempt i made. https://gist.github.com/rednasdees/6288 ... 43d5f75796

Does anyone here know of existing software which i can use to change settings in the cem ?

[vtl]

Some info to share,

I was trying to get the pin from my volvo v50 p1 from 2004, i used 2 versions of the cem cracker because i could not get a good result the first time.
The next link will give you guys the outcome of the 2 attempt i made. https://gist.github.com/rednasdees/6288 ... 43d5f75796

Does anyone here know of existing software which i can use to change settings in the cem ?

719 CEM. Read this: viewtopic.php?p=599631#p599631 May want to try sirloins version.

[rednasdees]

Some info to share,

I was trying to get the pin from my volvo v50 p1 from 2004, i used 2 versions of the cem cracker because i could not get a good result the first time.
The next link will give you guys the outcome of the 2 attempt i made. https://gist.github.com/rednasdees/6288 ... 43d5f75796

Does anyone here know of existing software which i can use to change settings in the cem ?

719 CEM. Read this: viewtopic.php?p=599631#p599631 May want to try sirloins version.

Yea that's what i did, and i got my pin as shown on the gist at the bottom of both crack attempts