Vida CEM swapping

[oscilloscope]

I solved the PIN code for the friend's two cars. You can ask him if I am a liar

Ok answer this why say you can crack a pin when this entire thread, is literally about cracking the very pin you claim to crack. , its pointless. ?

[oscilloscope]

folks so on this test CEM L , i have been checking over the wiring so there is 4 wires which goes to pin 14 , 6 , 3 ,11 pin 5 for gnd. , I'm using a mixture of IOT wiring connection which only utilizes x2 CAN lines so grey connector underside of the CEM L {pin 48 CANL , } { pin 33 CANH}



14 CAN low
6 CAN high
3 ?
11 ?



i have attached the CAN lines via my godiag connector but i don't think i am utilzing pin 3 and 11 , which is clearing somthing to do with the issue i am getting possibly? where do they go on the CEM ? or do they alternate with the CAN lines on the CEM ?

also @ RickHaleParker is there another wiring schematic using the alterative transceivers , also i have ordered some ready made boards from PCBWAY which says they utilize the CF160 transceivers. , still awaiting both items to continue the this quest.

[rkam]

D33 is CAN_H for hispeed
D48 is CAN_L for hispeed

D40 is CAN_H for lowspeed
D55 is CAN_L for lowspeed

[oscilloscope]

D33 is CAN_H for hispeed
D48 is CAN_L for hispeed

D40 is CAN_H for lowspeed
D55 is CAN_L for lowspeed

Thank you bud

[oscilloscope]

D33 is CAN_H for hispeed
D48 is CAN_L for hispeed

D40 is CAN_H for lowspeed
D55 is CAN_L for lowspeed

Sorry just thought

Is it D40 - pin 3 & D55 pin 11 ?

[RickHaleParker]

Give your VIN and let you know the result in 5 minutes.

There are rumours of an algorithm to calculate PIN from VIN. I also know there are people in China that have knowledge about car cracking that we have yet to discover.

Do you have the algorithm for calculating the PIN from the VIN?
If so, will you share the algorithm with the group?
Such an algorithm would go a long ways toward advancing this project.

[RickHaleParker]

also @ RickHaleParker is there another wiring schematic using the alterative transceivers , also i have ordered some ready made boards from PCBWAY which says they utilize the CF160 transceivers. , still awaiting both items to continue the this quest.

The CF160 wiring posted in the Github repository is included with the downloaded zip file.

You might want to add a wire between Signal Ground on the OBD connector and Power Ground on the cracker. That did not get into the design. It works without the common ground but does better with it.

[oscilloscope]

also @ RickHaleParker is there another wiring schematic using the alterative transceivers , also i have ordered some ready made boards from PCBWAY which says they utilize the CF160 transceivers. , still awaiting both items to continue the this quest.

The CF160 wiring posted in the Github repository is included with the downloaded zip file.

You might want to add a wire between Signal Ground on the OBD connector and Power Ground on the cracker. That did not get into the design. It works without the common ground but does better with it.

Do you mean the gnd pin 5 to the teensy pin G ? I managed to get further with the cracker lastnight. When @rkam shared the other connections. Which certainly improved things alot better. , it started getting very late lastnight so I had to tools down or I'll damage something from sleep deprivation. But back on it now

[oscilloscope]

Unfortunately my other test cem was not able to be decoded. With the cracker. Which is disappointing, I have another cem to play around with I managed to score from ebay for £20 quid. I'll certainly will be trying it on that too

[vtl]

I am also interested on making an app which can write back by DiCE the modified flash into the car, thanks to T5Luke, on 28f400 cem that is possible but in the M32C CEM is still not solved.

Solve it! Register at Renesas web site, download M32C datasheet and development environment. Renesas E8/E8a is slightly over $100 on Ebay. You will need a donor CEM, too. Once you have a flash-writing SBL ready, you are basically done. The CAN proto is very simple and wouldn't take long to implement.

Registered on their site. No datasheet for the M32C, and can't find a dev environment to dl there either

rej09b0319_32c80sm_.pdf

16/ M32C/80 Series
32
Software Manual
RENESAS 16/32-BIT SINGLE-CHIP
MICROCOMPUTER
M16C FAMILY / M32C/80 SERIES

rej09b0037_32c85hm.pdf

16/ M32C/85 Group
(M32C/85, M32C/85T)
32 Hardware Manual
RENESAS 16/32-BIT SINGLE-CHIP
MICROCOMPUTER
M16C FAMILY / M32C/80 SERIES


nc308v542r00_ev.exe
nc30v600r00_ev.exe

Forgot which one. Probably, need both.