Getting seed/key on locked pcm brute force style

**mecanicman** · 06-05-2014

Awhile back there was a very detailed thread on EFILive site on how to gain access to a locked PCM. The thread was removed at the request of tuning shops and resellers. Did anyone happen to copy that information? I would like to be able unlock pcms of customers. I believe I have the required hardware with benchtop flashing cable and an avt 852. I have been playing with couple free pieces of software, not very special. HPTuners has some very old posts from when they were devopling their software with all the commands to get the info I want. I think I need a good communication program, a means of setting up the software to try each of the 65536 keys, and a means of recognizing when it has found the right one. Oh yeah, and a clue how to accomplish this!
Planethax developed some software for use with the elm327, I have yet to make it succesfully work, but this is what I am after. Does not have to be that fancy, just do the job.

**EagleMark** · 06-06-2014

I think the ability is there in the LS1 Flash Tool that is yet to be finished. Read the thread and maybe contact Antus to see how it needs to be set up to do the Seed/Key search.

http://www.gearhead-efi.com/Fuel-Inj...-Tool-Released

**mecanicman** · 06-06-2014

I contacted antus over on his forum about the flash tool. Does not sound like finishing the ls1 flash tool is a priority and no completion in the foreseeable future was the message I got. He is busy on some other project. Too bad, his tool has lots of potential.

**EagleMark** · 06-06-2014

Well it seemed to be a top priority when we started selling the cables, not sure how that changed or people would not have bought cables...

I've seen the Seed/Key search talked about, if you read the threads there it may have the info or version number that did it?

**Montecarlodrag** · 06-06-2014

What PCMs do you need to unlock?
LS1 PCMs can be unlocked easily in under 15 min using other methods, I have unlocked several.

A while ago I was searching for the method to unlock newer PCMs (E38, E40, E67) which can't be unlocked with the method I use, but didn't find anything. Well, I know how it's done but don't know what hardware and software is used. There are people doing that but nobody shares, it's like finding the holy grail