I would be careful on what is good to be posted out in the open, just saying.

I can share how to steal a P2/P3 car also in less than a minute if it's ok for everything to be out in the open 😂


No, it is not so easy. Yes you can crack KeeLoq from air frames. But it is not so easy that you need ...

Next step for me is to understand the remote fobs.
Dumped the UEM using BDM, there was an stadard HC12 chio with a ready unpopulated footprint just beside the cpu itself.
No locks, just readout with no problems.

Used Claude a lot to reverse how it works and how the remote is received and decoded ...

And the algorithm is really was wrong, I received a couple of Eproms and decrypted via IO-Terminal looks normal))) So now I need to write an algorithm for 855. I already found the key.

CEM 93C86 EEPROM dec_ori.zip

I fixed the encryption algorithm and got -
Synchro: 746368207449
Crypto ...

It is from a cem with a M30855FWUGP cpu.
Your dump is different than mine. The immo records are not stored in same way. Rest of data looks like it is.
In mine all stored data is in duplets with crc after each. In this dump the immo data is stored in a different way.
Can you share the flash as ...

I think, you did it on CEM with 835CPU.
Try decrypted eep dump from 855 in attach, can you see anything?
eep_855_dec.zip


It is from a cem with a M30855FWUGP cpu.
Your dump is different than mine. The immo records are not stored in same way. Rest of data looks like it is.
In mine all stored data ...

Thanks to this
https://www.matthewsvolvosite.com/forums/viewtopic.php?p=657191
I have managed to do next small step with my V70 2006.

I only have one key.
So, first trying to follow what mikeak2001 do in his thread.
First step i need to do, enter security access. What key is needed here? It say ...

Here have been a lot of discussions about pressure testing tanks and give them more time. Some steel tanks it is allowed to do if manufacturer provide interval and how long time it can be extended. But this is only for steel tanks. example early V70 with a tank in the baggage room.
My car have two ...

Some more analysis of eeprom data. This information is probably already in this thread somewhere but can be informative to show it again (if anyone is interested). It is from my V70 BiFuel 2006 Denso ECU with CEM-L.

Sync data between CEM and Denso ECU.
In CEM eeprom data is in duplicate with crc ...

As my car have now the gas tanks reached the magic 20 year age I'm not allowed to drive it anymore. Volvo have documented how to make the car safe for the roads again, remove the filling nipple and remove the tube between the gas tanks. I have not any clear indications from inspection companies if I ...

Implemented eeprom and flash programming to my V70 BiFuel CEM with M30855 cpu into my SBL.
Possible to read and write complete cem over can. Still running on Raspberry and SocketCan

Reading flash and eeprom in car
$ python3 sblflasher.py
Bus sleep ...