Vida CEM swapping

[Dudde]

I made copy paste to excel.

Any help is surely welcome

EDIT: that did not work, excel deleted double zero values.

edit 2.0: Finally.

HEX file attached. (added as .txt as could not add it otherwise).

By the hint: 0x006000 67 95 26 38 88 11 = PIN = 38 95 88 67 11 26 (byte swap?)

0x4000/0x6000, not 0x40000/0x60000.

Pin is either 67 95 26 38 88 11 or 95 67 38 26 11 88, depending if byte swap was done during reading or not.

You seem to have soo good info on these, so maybe you happen to know how to get the IMMO from the file too?

I just tried to pair used remote that I have, read the 8-digit code + SEED from UEM that was with the keys.. VDASH fails in 0x12 and the remote is not added.. For key programming, not there yet. (Here in Finland the winter blocks a bit to do these outside).

You can't add the remote like that... That's the crypto key from uem, you need to calculate SEED from the crypto.

PM for more info on the Immo stuff, i can also do it for you if you come by my shop

[radziuC30]

VDash da się zaprogramować używany pilot w P2

[Dudde]

VDash da się zaprogramować używany pilot w P2

Yes, but not the way he was trying to do it.

Vdash reads old uem and calculates the seed that is used when adding used remote to new uem

Edit: or what do i know, not using vdash but atleast that's my theory or they just write the data they have stored from old uem to the new one

[gajoss]

Find you CEM p/n in the source code, change last number in array (usually 0), try to crack, repeat.

Confirm if I'm thinking correctly. Red - my CEM number. Yellow - I change the digit - I change the shuffle order of the PIN bytes.

Yes, change it to 2. Also read this: viewtopic.php?p=592875#p592875 We need to change shuffle order for 8690720.

I'm confused. I tried all the shuffle orders contained in the code for my CEM number. The result was negative. Should I try other shuffle orders as well?
In attachment LOGs from the last attempts.

[radziuC30]

I have a question for the cracker creator, is it possible to make a working LCD display in the P3 version?

[vtl]

I'm confused. I tried all the shuffle orders contained in the code for my CEM number. The result was negative. Should I try other shuffle orders as well?
In attachment LOGs from the last attempts.

Use one_pass version: https://github.com/cmolson/volvo-cem-cr ... e/one_pass

[vtl]

Anyone want to experiment his CEM-B (01-04) with the new code? https://github.com/vtl/volvo-cem-cracker/tree/cem-b It does not give any advantage over OpenMoose, other than no Windows is required.

One day I'll merge 4 branches into one, I promise...

P2 2001-04: https://github.com/vtl/volvo-cem-cracker/tree/cem-b
P1 and P2 2005+: https://github.com/vtl/volvo-cem-cracker/tree/master
P3 (and P2 2006+): https://github.com/vtl/volvo-cem-cracker/tree/p3
P1 better on some CEMs, like 719 and 720: https://github.com/cmolson/volvo-cem-cr ... e/one_pass

[duzi]

21 sec.

[Treur]

Anyone want to experiment his CEM-B (01-04) with the new code? https://github.com/vtl/volvo-cem-cracker/tree/cem-b It does not give any advantage over OpenMoose, other than no Windows is required.

One day I'll merge 4 branches into one, I promise...

P2 2001-04: https://github.com/vtl/volvo-cem-cracker/tree/cem-b
P1 and P2 2005+: https://github.com/vtl/volvo-cem-cracker/tree/master
P3 (and P2 2006+): https://github.com/vtl/volvo-cem-cracker/tree/p3
P1 better on some CEMs, like 719 and 720: https://github.com/cmolson/volvo-cem-cr ... e/one_pass

Is this what I think?

My j2534 already has raw CAN, I'll finish ISO-TP, ONLINE and I'll integrate your creations into it))))

[vtl]

Is this what I think?

I don't know. What do you think?