Hi everyone,
Having a little trouble with a V50, 2012, D5 with the TF80FC box.

The gearbox is clunking, jerking and doing everything apart from being smooth.
Volvo dealer has sold a new valve body that has been fitted but they are refusing to take the vehicle in for the latest tcm upgrade 30667211 ...

Fairly easy to modify to swipe over 3 bytes in HEX, not BCD.


Yes it is, but i'm not cycling through all 5 bytes for the collision.
If we set pin[0] and pin[1] in that script we still have 255^3 combinations to check.

My setup reads a seed. With an unknown key, i set pin[0] and pin[1]

I've ...

Hi all,
So my latest system works like a charm.
I've been working on a new sketch which cut's down the time to crack P3 pins.
so far it's working well. a p3 cem taking 4 hours to crack before is now taking less than 30 mins.

if anyone fancies supplying some known good seed/pin/key combo's I can ...

Hi all,

Haven't been on here for a while. Spent a lot of time working and messing with my own equipment.
This is what I now use after some development. (Still needs finishing off though, with a 3d printed box or something.)

Code is also reduced to 950 lines.
Still currently testing.
Running 2 ...

trashrico8 wrote: 22 Jun 2026, 21:32
Of course, I started by trying to clone the two chips, but it was impossible to establish a connection

If I was dealing with this I would have removed the chips and used a break out board. I find 99% of chips the data is still salvageable.

https://handwiki.org/wiki/Engineering:KeeLoq

Ah, a side-channel attack, my favorite :)


Thank you, I will take a read of all this, I feel a project coming on.
Managed to find the unlock code the for Volvo ID48 chips when I sorted a non start S60 for a Volvo dealer.

It would be nice if we can ...

Thanks for confirming what I already thought I knew about this. I see several people selling use fobs. Can the fob portion without the flip key be reprogrammed without the code from the original packaging? As the main 'security function' is the key/antenna function is it the CEM that needs the ...

Yes, you will need the data from the original UEM.
up to around 2003/2004 there was a separate remote and key. After this Volvo started producing the flick out key top and remote, both were sold separately, and each is programmed in, key is programmed to the CEM, remote is programmed to the UEM ...

Hi everyone.
Had a little search but couldn't see anyting about reusing old remotes so I though I'd post my routine to help people out.

In order to use remotes that have not come with packaging, we will need both the UEM and the current remotes that are linked to it.
Once the data has been read ...

Excellent writeup. My 2004 Volvo V70 2.5T has the same problem. Both keys not responding and the message "Start Prevented Try Again." I don't have any of the tools you used. What I understood from this writeup is that programming new keys would solve this problem. Did i get that right?

Thank you ...