How to Bypass and Remove Tuner lock from an LS Pcm

Posts: 71
Joined: Thu Sep 21, 2017 3:00 pm

How to Bypass and Remove Tuner lock from an LS Pcm

Postby 160plus » Sat Apr 28, 2018 6:55 am

The following method will work to temporally bypass the security check commonly used as a method to lock a pcm by tuner's wanting to hide their work. It will also work to unlock a pcm if the KEY becomes corrupted for what ever reason. You will be able to read the bin file out from the pcm with commercial tools, you will also be able to write back to the pcm with commercial tools but it will have to be done in a "Recovery" mode FULL FLASH. Now depending on the software you use to flash the pcm it may also change the Seed and Key back to stock values that can be calculated in a normal manner but again that will depend on the tool used and what version of the software you are running.

This method will work on the P01 512K pcm as well as on the P59 1mb pcm


ENJOY :thumbup:


Posts: 71
Joined: Thu Sep 21, 2017 3:00 pm

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby 160plus » Sat Apr 28, 2018 7:05 am

This can also be taken a step further when using the previous method in conjunction with an Android App I have been developing over the last couple of months. The P01 pcm's can have the tuner lock easily removed in just a couple of minutes, the same method to force unlock the pcm I covered in my previous post is used. While the PCM is in the unlocked state it won't respond to normal commands but it can be written to if your program is expecting the PCM to be in this state.

The P59 can also be done with a similar method but it is a lot more involved on the software side. In time a method for this pcm will also be added into LS Droid but for the time being this should be considered exclusive to the P01 pcm's only.

I need to clean up a few things in the App and write up some basic usage instructions but expect this to be avaible for download in the next week or two https://github.com/LegacyNsfw/PcmHacks/tree/master/Android_Tools.


Posts: 15
Joined: Fri Aug 25, 2017 5:28 pm
Location: Adelaide

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby julespatch » Wed May 02, 2018 4:13 pm

Nice! I'll try this out in the next few days. thank you mate

Posts: 105
Joined: Tue Oct 16, 2012 12:17 pm
Location: Perth

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby Tre-Cool » Thu May 03, 2018 9:06 pm

very cool, with the age of the old ls1 controllers now I stopped locking my stuff a while ago. I don't even bother locking the e38's now too.

I still however have to unlock a bunch of them for other shops though.

Posts: 2464
Joined: Sun Aug 02, 2009 9:16 pm
Location: Bayside, Melbourne, Victoria

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby VX L67 Getrag » Thu May 03, 2018 10:05 pm

If this works in the way it does as described, even if the controller is bricked if you force it to recieve the key pass message it will force a write entire of full file(if selected) & then recover bricked controllers.

I wonder where the pin is located on the E38 controllers to be able to do the same thing?

Posts: 3195
Joined: Mon Aug 02, 2010 6:35 pm

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby Dylan » Thu May 03, 2018 10:13 pm

Unlocked plenty with that pin, although I've never tried to write while in recovery like that

Site Admin
User avatar
Posts: 5835
Joined: Sat Feb 28, 2009 8:34 pm

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby antus » Sun May 06, 2018 10:35 pm

It wont fix a full brick, the boot portion of the os needs to run and believe the initial calibration is not loaded then it gets ready for the initial load on the factory floor. The jump shorts an address pin that breaks the cal segment programmed check (higher address) but only while its pulled low at power on when the check occurs. When you go to read or write the full chip is normally accessible again.
Have you read the FAQ? For lots of information and links to significant threads see here: viewtopic.php?f=7&t=1396

Posts: 74
Joined: Wed Jul 05, 2017 8:30 am
Location: TX USA

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby MudDuck514 » Tue May 08, 2018 2:17 am

Hi all,

Will this Android App work with USB devices (such as the AllPro you all have been working on) or ONLY Bluetooth devices?

If only Bluetooth, how difficult is it to add theBT Module to the AllPro USB? (I noticed someone had ordered BOTH in the main dev thread)

Mike.

Posts: 17
Joined: Wed Dec 06, 2017 1:02 pm

Re: How to Bypass and Remove Tuner lock from an LS Pcm

Postby Vampyre » Tue Nov 26, 2019 2:44 pm

any idea where this pin runs to, I want to try this on a v6 pcm but schematic is different

Return to Tool Development

Who is online

Users browsing this forum: No registered users and 2 guests