Vida CEM swapping

[vtl]

How do I find the correct shuffle order? Is there a way to do that?

Find you CEM p/n in the source code, change last number in array (usually 0), try to crack, repeat.

[gajoss]

How do I find the correct shuffle order? Is there a way to do that?

Find you CEM p/n in the source code, change last number in array (usually 0), try to crack, repeat.

Confirm if I'm thinking correctly. Red - my CEM number. Yellow - I change the digit - I change the shuffle order of the PIN bytes.

[vtl]

How do I find the correct shuffle order? Is there a way to do that?

Find you CEM p/n in the source code, change last number in array (usually 0), try to crack, repeat.

Confirm if I'm thinking correctly. Red - my CEM number. Yellow - I change the digit - I change the shuffle order of the PIN bytes.

Yes, change it to 2. Also read this: viewtopic.php?p=592875#p592875 We need to change shuffle order for 8690720.

[vfred748]

No way it can't work on the bench. I spent long months with CEM-L on the bench, hundreds of runs.

So i will make it on car, thanks for the advice.

I said it works on the bench. I ran it once, maybe twice on a real car Remove autodetect line, compile/upload, wait for the message, power up the CEM quickly.

Hello the forum,
Sorry for the late for upadting my posts.

I have sucessfully read the pin on the bench, I've changed the can module, maybe the old one was dead.

To resume :
On the CEM
PIN 8 15 & 16 on +12v
PIN 6 on ground (same as the ground on teensy)
PIN 33 & 48 on CAN HS
PIN 40 & 55 on CAN LS

I've booted the CEM cracker & the CEM at the same time with a stabilized power supply.

About 15-20 minutes and the PIN code appear

Great job & thanks for your help.

[vtl]

Hello the forum,
Sorry for the late for upadting my posts.

I have sucessfully read the pin on the bench, I've changed the can module, maybe the old one was dead.

To resume :
On the CEM
PIN 8 15 & 16 on +12v
PIN 6 on ground (same as the ground on teensy)
PIN 33 & 48 on CAN HS
PIN 40 & 55 on CAN LS

I've booted the CEM cracker & the CEM at the same time with a stabilized power supply.

About 15-20 minutes and the PIN code appear

Great job & thanks for your help.

Congrats! Now you can crack pins for your friends

[vfred748]

Hello the forum,
Sorry for the late for upadting my posts.

I have sucessfully read the pin on the bench, I've changed the can module, maybe the old one was dead.

To resume :
On the CEM
PIN 8 15 & 16 on +12v
PIN 6 on ground (same as the ground on teensy)
PIN 33 & 48 on CAN HS
PIN 40 & 55 on CAN LS

I've booted the CEM cracker & the CEM at the same time with a stabilized power supply.

About 15-20 minutes and the PIN code appear

Great job & thanks for your help.

Congrats! Now you can crack pins for your friends

For sure
Unfortunately, I don't know any Volvo driver, but I will help anyone in need.

Greetings from France

[oscilloscope]

Has the CEM cracker been tried on the later delphi CEM's?

Like these one's?

[vtl]

Has the CEM cracker been tried on the later delphi CEM's?

Like these one's?

Screenshot_20260214_092939_eBay.jpg

Is it SPA?

[poteroa]

Hi all.

Quite massive page count on this topic..

Have a question, and maybe someone can answer directly without need to go through 430 pages
Just read the CEM on a V70, 2001 and looking for the PIN. (And IMMO code of course if it is possible to decode from there)
I used the kaev´s Arduino BDM soft, the only problem is that you can not save the read binary with that software.
https://volvo-tech.com/en/793-2/ (Used Arduino UNO for this, as it was easily available).

Going through the peoples replys, I found info that the PIN should be located in address 0x04E000 is this right?
Do not see any sense to buy expensive programmer just for getting one remote programmed to otherwise cheap car.

Anyone able to help on this?

Oh, the CEM unit is HW-PN: 9452596
Other markings: 8645697/01W075

[oscilloscope]

Has the CEM cracker been tried on the later delphi CEM's?

Like these one's?

Screenshot_20260214_092939_eBay.jpg

Is it SPA?

It might be yes , i tallied up the type and compared it to xprogs connnections via bdm, now at first , I saw a locksmith wiring up a xhorse programmer to the BDM connections, and i wondered if the cem cracker has been tried out on them newer cems.