Currently own a 2005 subaru outback/legacy, and it allows you to register new fobs with a supplied 8 digit pin code. I purchased two keys that came with codes, and 2 flip keys (ford looking style, that appear to be the KEYDIY brand type).
I was able to register the 2 fobs, as they came with codes easily. However my best guess is the ford style flip fobs probably require a device that LISTENS for the 315mhz frequency and then writes it to the eeprom on the KEYDIY..
Anyway.. I took all the keys apart and they seem to run the exact same setup.
3 Button Fob with straight key (looks like the 2008-2009 subaru key) – CFeon q808-104HIP X700Z18 1945HLY
Flipkey – CFeon q808-104HIP X80HL23 1941HLY
Pulled the EEPROMs of all the chips, hoping that there is address space that just requires a new 8 digit key to be put in. I found that the starting bits 00 to 0F contain some unique string to all 4 fobs, then there is programmatic code that I suppose is used by the Programming tools to write values. Addresses 000FF000 to 000FF0F0 seem to contain what I assume is the actual data that is mapped to each button on the circuit board. As I see respectively a consistent identify that denotes areas of code.
The KEYDIY android app appears to have a way to generate new IC code. Not sure if that’s applicable for here.
Anyway… Do I have any chance to get these Fobs to work or pull the current 8 digit pin to register it to my car. Or do I need to order a specific KEYDIY tool that probably listens, and writes to these addresses with their own secret sauce to prevent people like me from editing the eeprom directly in HEX?
Pretty positive the answer is to buy a KEYDIY KD-X2, but was hoping for a way to reprogram things manually. In theory I need “regenerated” remote eeproms, and to know the new codes for the regened.