Vida CEM swapping

[KaoReal]

I/0 has it solved the other way around, you need to desolder flash and load the content with changed pin. Patch Button 28F400B5 Flash File.

What's the chance of bricking the CEM-B doing it this way

Read Intel 28F400 memory and send me I can give you the pin you read. You will do path and when the pin input function is added, as in the other modules, you will enter your own pin. This will allow you to embed car conf. I/0 software and using cem changes.
In fact, when you read the desoldered flash, you will also save the changes you want to make

I'm hoping to program a remote key on 2004 XC90 using PIN and IM608. I know generate key from dump will work for transponder, but I would like remote programming to work if possible. I'm not sure how to message you directly. Here are the dumps with inversion and without.

[Dudde]

I'm hoping to program a remote key on 2004 XC90 using PIN and IM608. I know generate key from dump will work for transponder, but I would like remote programming to work if possible. I'm not sure how to message you directly. Here are the dumps with inversion and without.

Read UEM with im608 and program remote

[KaoReal]

I'm hoping to program a remote key on 2004 XC90 using PIN and IM608. I know generate key from dump will work for transponder, but I would like remote programming to work if possible. I'm not sure how to message you directly. Here are the dumps with inversion and without.

Read UEM with im608 and program remote

IM608 prompts me to to get CEM info when Remote programming?

[haifisch]

Hello,

first time poster here on MVS. Just discovered this thread a few days ago and read through the first 50 pages or so... Thank you all for the amazing work reverse engineering and hacking into Volvo.

I would like to clone the CEM in my 2006 XC90 to another unit I am planning to pick up from the junkyard. Is this possible now?

Also I would like to crack the PIN for my 2002 S60. Is there support for the early P2s already?

I will continue reading the thread but its 300+ pages already so there is still much to catch up and I really need to get back to working my day job lol. I havent been able to figure out the answers for the above questions yet hence the reply.

Thank you in advance!

[scaro]

2002 S60 you have to read bdm first (as of now) (knowing soldering or "pogopins")There is info from helpful and nice ppl in thread how to.

2006 Cem you can clone but maybee not without buying some tools and/or be a bit handy on soldering. Info in thread to.
For example to make full clone, TTL to read and write MCU and something to read 93LC86.

Think this is the "cheapest" way about this time without being good at programming?

[Treur]

Hello,

first time poster here on MVS. Just discovered this thread a few days ago and read through the first 50 pages or so... Thank you all for the amazing work reverse engineering and hacking into Volvo.

I would like to clone the CEM in my 2006 XC90 to another unit I am planning to pick up from the junkyard. Is this possible now?

Also I would like to crack the PIN for my 2002 S60. Is there support for the early P2s already?

I will continue reading the thread but its 300+ pages already so there is still much to catch up and I really need to get back to working my day job lol. I havent been able to figure out the answers for the above questions yet hence the reply.

Thank you in advance!

For cloning you must remove cem from car, and transfer data from MCU and eprom to other cem. I use China xprog for MCU and tl866+ for EPROM.

[Treur]

Read UEM with im608 and program remote

Only new with codes label.

[Treur]

Does anyone know how the odometer is generated in DIM?

I tried the formula from the ETL calculator, but it gives an accuracy of ~250 km

[Dudde]

Does anyone know how the odometer is generated in DIM?

What do you mean? How to change the mileage?

[Treur]

Does anyone know how the odometer is generated in DIM?

What do you mean? How to change the mileage?

Yes, with accuracy up to 1 km