Vida CEM swapping

[dikidera]

I am sure any USB sniff logs would help, as long as DiCE was used, and hopefully with VIDA for its parallel communication(usually best if done on a live car since both buses are active).

[MotorolaV3X]

We have DICE working on a laptop via Bluetooth. What USB sniffer would you recommend for recording a log when connected via USB?

[dikidera]

We have DICE working on a laptop via Bluetooth. What USB sniffer would you recommend for recording a log when connected via USB?

Bluetooth is also nice(for making it work)! As for a tool, I am not quite sure. Any tool would work.

[RickHaleParker]

I am sure any USB sniff logs would help, as long as DiCE was used, and hopefully with VIDA for its parallel communication(usually best if done on a live car since both buses are active).

You got lots of people already setup to do CAN sniffing. You just need to answer their question: What capture format, USBPcap .pcapng files ... ect?

The attached file Volvo DiCE USB Protocol Guide is a draft. It is bound to have errors and short comings. It might give you some useful insights. It might not. I do have a basic, stripped down, no frills Linux-DiCE API written in Python. I could let you peek at.

[kaptensea]

Built my first PIN cracker, tried on a CEM L on bench with part number 30765149

Using a external ac/dc adapter, 12v 10A.

Just getting CAN LS error in the display, after that Unkown CEM, Exiting…

Double checked soldering and resolder, but nothing helps

Any suggestions?

[vtl]

Built my first PIN cracker, tried on a CEM L on bench with part number 30765149

Using a external ac/dc adapter, 12v 10A.

Just getting CAN LS error in the display, after that Unkown CEM, Exiting…

Double checked soldering and resolder, but nothing helps

Any suggestions?

CEM power off, start the Teensy (press reset button), wait for the "Putting all ECUs into programming mode" message, apply power to CEM quickly.

[kaptensea]

Built my first PIN cracker, tried on a CEM L on bench with part number 30765149

Using a external ac/dc adapter, 12v 10A.

Just getting CAN LS error in the display, after that Unkown CEM, Exiting…

Double checked soldering and resolder, but nothing helps

Any suggestions?

CEM power off, start the Teensy (press reset button), wait for the "Putting all ECUs into programming mode" message, apply power to CEM quickly.

A friend came over with his harness adapter between cem and pin cracker. It worked!

So it’s my cable adapter

[Treur]

Yesterday I ported the cracker to my j2534 adapter on the stm32h743. I got the pin with CEM L twice. The first time, with brute-forcing 3 bytes took 20 minutes, and trying with 4 bytes took 17 minutes. The processor is running at 480 MHz.

[MotorolaV3X]

for dikidera log dice via USB, I sent it to private messages.

[dikidera]

Thanks for the logs!.

In other news, a while back someone posted an SBL for the DIM for P1. I confirm it also works for P2, though I did ask my AI assistant to support a few more masks and build a more specialized but nearly autonomous tool, this is so I can dump the UEM module, which is the next goal.

I gave it 4 PDF documents which it referenced to modify the SBL source code to support MC912DG128 and MC912S and to follow the requirements more closely plus any masks(aka changes to the mcu in later revisions) + linker files to move the code into other ram regions should the original offsets overwrite running PBL stuff.

In other more exciting news, with the release of GPT 6 Astra, though I am sure Fable can also do it no problem, the models are now able to recreate software from binary code. For people with cash this means full reimplementation of TCM or ECM code but with user controlled source code.