P08 Support Information

[antus]

We do clear DTCs, its in the first debug log in the thread:

Code: Select all

[04:10:44:758]  Clearing trouble codes.
[04:10:45:028]  Network RX: 6C F0 10 60
[04:10:45:035]  XPro: 20 01 00 DE
[04:10:45:036]  TX: 68 6A F0 04
[04:10:45:293]  XPro: 20 01 00 DE
[04:10:45:294]  TX: 68 6A F0 04
[04:10:45:552]  XPro: 20 01 00 DE
[04:10:45:552]  TX: 8C FE F0 14
[04:10:45:805]  Network RX: 8C F0 10 54
[04:10:45:810]  XPro: 20 01 00 DE
[04:10:45:811]  TX: 8C FE F0 14

[Gampy]

I didn't know that was for all modules, I thought it was just for the PCM ...

Am I wrong ??

-Enjoy

[antus]

Yes, destination is FE, broadcast.

Whether all modules are working, and honor it.. they are supposed to, but reality can be different and sometimes some badly behaved things need a power cycle.

[Gampy]

I love being wrong ... You don't forget those instances!

I suppose I could have figured that out if I used thy tiny pea brain, I know what FE is ... But I probably wouldn't remember!

Now I will!


The latest Artifact (test build).
Test em up please, P04, P08 and E54.

-Enjoy

PCMHacks_5358b8709bf14cd00bc108547a552478c075c67d.zip
CheckBuild #56
(2.18 MiB) Downloaded 20 times

Browse to where you saved it during download, drag n drop it where you want to unzip it on the fly, adjust destination directory name accordingly in the Select Destination Dialog, when done, browse to Destination directory, find PCMHammer.exe and double click on it.

[antus]

I only have P04 and P08 from that list. P04 is working great. P08, is not responding to this kernel for reasons unknown for me. Ive attached the debug log of the failed P08 run. I know yours is working with the same code. Very interested to see if anyone else with P08 can test.

Repeated the same test with XPro, same result.

Code: Select all

== P04 get properties ==

[01:39:27:544]  PCM Hammer (24/04/2023, 11:44 AM)
[01:39:27:548]  Monday, April 24 2023 @01:39:27:54
[01:39:27:595]  AVT 852 Reset OK
[01:39:27:597]  AVT Firmware 1.5
[01:39:27:897]  Thanks for using PCM Hammer.
[01:39:29:369]  VIN: 1G2NG52E5YM750297
[01:39:29:468]  OS ID: 12589762
[01:39:29:477]  Hardware Type: P04
[01:39:29:479]  **********************************************
[01:39:29:481]  WARNING: P04 Support is still in development.
[01:39:29:483]  It may or may not read your P04 correctly.
[01:39:29:485]  There is currently no ETA for P04 Write.
[01:39:29:487]  **********************************************
[01:39:29:582]  Calibration ID: 9389414
[01:39:29:667]  Hardware ID: 9357440
[01:39:29:820]  Serial Number: 8DWY3C9290
[01:39:29:903]  MEC: 0
[01:36:49:827]  PCM Hammer (24/04/2023, 11:44 AM)

== P04 read ==

[01:36:49:829]  Monday, April 24 2023 @01:36:49:82
[01:36:49:865]  AVT 852 Reset OK
[01:36:49:872]  AVT Firmware 1.5
[01:36:56:849]  Will save to C:\Users\a\Documents\test.bin
[01:36:57:697]  Querying operating system of current PCM.
[01:36:57:781]  OSID: 12589762
[01:36:57:791]  WARNING: P04 Support i still in development.
[01:36:57:793]  It may or may not read your P04 correctly.
[01:36:58:940]  Unlock succeeded.
[01:36:59:010]  Attempting switch to VPW 4x
[01:36:59:027]  Module 0x10 (engine controller) has agreed to enter high-speed mode.
[01:37:02:147]  PCM uses a kernel loader.
[01:37:02:422]  Loader upload 100% complete.
[01:37:02:431]  Loader Version: 69000104
[01:37:02:433]  Loader uploaded to PCM succesfully.
[01:37:02:608]  Kernel upload 12% complete.
[01:37:02:795]  Kernel upload 56% complete.
[01:37:02:982]  Kernel upload 100% complete.
[01:37:04:106]  Kernel Version: 82400104
[01:37:04:113]  Kernel uploaded to PCM succesfully. Requesting data...
[01:37:04:201]  Flash chip: Intel 28F400B, 512kb
[01:38:49:898]  Read complete.
[01:38:49:901]  All read-request messages succeeded on the first try. You have an excellent connection to the PCM.
[01:38:49:904]  We're not sure how much retrying is normal for a read operation on a 512kb PCM.
[01:38:49:907]  Please help by sharing your results in the PCM Hammer thread at pcmhacking.net.
[01:38:49:910]  Starting verification...
[01:38:49:923]  Calculating CRCs from file.
[01:38:49:931]  Requesting CRCs from PCM.
[01:38:49:934]  	Range		File CRC		PCM CRC	Verdict	Purpose
[01:38:52:304]  060000-07FFFF	D2DDB07E	D2DDB07E	Same	OperatingSystem
[01:38:54:700]  040000-05FFFF	10A46FED	10A46FED	Same	OperatingSystem
[01:38:57:081]  020000-03FFFF	C7E426CF	C7E426CF	Same	OperatingSystem
[01:38:58:917]  008000-01FFFF	E5CCF450	E5CCF450	Same	Calibration
[01:38:59:198]  006000-007FFF	E8244787	E8244787	Same	Parameter
[01:38:59:481]  004000-005FFF	85B5BB36	85B5BB36	Same	Parameter
[01:38:59:908]  000000-003FFF	62A39A35	62A39A35	Same	Boot
[01:38:59:987]  The contents of the file match the contents of the PCM.
[01:39:00:071]  Clearing trouble codes.
[01:39:01:243]  Clearing trouble codes.
[01:39:02:370]  Elapsed time 00:02:03.4239078
[01:39:02:378]  Saving contents to C:\Users\a\Documents\test.bin

== P08 get properties ==

[01:41:10:230]  PCM Hammer (24/04/2023, 11:44 AM)
[01:41:10:235]  Monday, April 24 2023 @01:41:10:23
[01:41:10:262]  Thanks for using PCM Hammer.
[01:41:10:268]  AVT 852 Reset OK
[01:41:10:272]  AVT Firmware 1.5
[01:41:12:636]  VIN: 1G3NL52T2YC427854
[01:41:12:723]  OS ID: 12206029
[01:41:12:732]  Hardware Type: P08
[01:41:12:815]  Calibration ID: 12206203
[01:41:12:892]  Hardware ID: 16268310
[01:41:13:020]  Serial Number: 2WL6M40152
[01:41:13:094]  MEC: 0

== P08 read ==

[01:41:41:161]  PCM Hammer (24/04/2023, 11:44 AM)
[01:41:41:168]  Monday, April 24 2023 @01:41:41:16
[01:41:41:175]  Thanks for using PCM Hammer.
[01:41:41:202]  AVT 852 Reset OK
[01:41:41:205]  AVT Firmware 1.5
[01:41:47:116]  Will save to C:\Users\a\Documents\test.bin
[01:41:48:107]  Querying operating system of current PCM.
[01:41:48:201]  OSID: 12206029
[01:41:48:352]  Unlock succeeded.
[01:41:48:426]  Attempting switch to VPW 4x
[01:41:48:454]  Module 0x10 (engine controller) has agreed to enter high-speed mode.
[01:41:51:613]  PCM uses a kernel loader.
[01:42:44:139]  Failed to upload loader to PCM
[01:42:44:241]  Clearing trouble codes.
[01:42:45:366]  Elapsed time 00:00:57.0129985
[01:42:45:375]  Read failed, Error

[Gampy]

Antus,

On the P08, pretty sure that's a load address issue ...
Try just the Kernel at B000, no Loader.

Comment out LoaderRequired and LoaderBaseAddress, change KernelBaseAddress to 0xFFB000 in PcmInfo and build the suite.
Open a Console in the Kernels directory and enter,

Build.cmd -x -aFFB000 -pP08

to build a (-p)P08 (-x)assembly Kernel using (-a)Address FFB000.

Takes a tool with > 1024 byte capacity, your AVT or OBDX should get it done.

Please and Thank you sir!

-Enjoy

[antus]

No luck, no response from that kernel either. I'll see if I can find any proprietary tool in my arsenal that can read it to make sure there is not a hardware failure here for any reason. Unlikely, but you never know. It was reading OK with an earlier revision of our dev code, and it looks like its gotten in some kind of weird state. This is actually from the develop branch, but the result is the same from the test build which you posted. AVT, XPro VT, XPro GT, MDI, Mongoose can all do it which I have on hand. Scantool is the only one that cant.

Code: Select all

[04:30:22:582]  Loaded C:\Users\a\git\PcmHacks\Apps\PcmHammer\bin\Debug\Kernel-P08.bin
[04:30:22:592]  Sending upload request for kernel size 1171, loadaddress FFA800
[04:30:22:649]  TX: 6C 10 F0 34 00 04 93 FF A8 00
[04:30:22:665]  RX: 6C F0 10 74 00 42
[04:30:22:670]  Going to load a 1171 byte kernel to 0xFFA800
[04:30:22:674]  Sending end block payload with offset 0x0, start address 0xFFA800, length 0x493.
[04:30:22:742]  TX: 6D 10 F0 36 80 04 93 FF A8 00 00 7C 07 00 13 FC 00 03 00 FF F6 0C 13 FC 00 00 00 FF F6 0D 61 00 00 96 61 00 00 E4 10 39 00 FF F6 0E 02 00 00 E0 0C 00 00 E0 66 E8 10 39 00 FF F6 0F 20 7C 00 FF AC 93 42 68 00 03 61 00 00 6E 61 00 02 D0 61 00 00 B8 0C 68 3D 00 00 03 67 00 00 B8 0C 68 3D 01 00 03 67 00 00 DE 0C 68 3D 02 00 03 67 00 01 5C 0C 68 3D 03 00 03 67 00 00 B0 0C 28 00 34 00 03 67 00 01 D4 0C 28 00 35 00 03 67 00 01 DA 0C 28 00 36 00 03 67 00 02 02 0C 28 00 20 00 03 66 00 FF 9C 20 7C 00 FF AC 8F 70 04 61 00 02 0E 61 00 00 58 4E 70 60 FE 13 FC 00 55 00 FF FA 27 13 FC 00 AA 00 FF FA 27 0A 39 00 80 00 FF C0 06 4E 75 2A 3C 00 00 27 10 61 00 FF DE 61 00 00 2C 61 00 00 28 61 00 00 24 61 00 00 20 61 00 00 1C 61 00 00 18 61 00 00 14 61 00 00 10 61 00 00 0C 61 00 00 08 51 CD FF D2 4E 75 4E 71 4E 71 4E 71 4E 71 4E 75 20 7C 00 FF AC 79 11 7C 00 08 00 08 70 09 61 00 01 98 4E FA FF 16 22 7C 00 00 80 00 20 7C 00 FF AC 6F 21 51 00 05 70 09 61 00 01 7E 4E FA FE FC 31 FC 00 07 FA 4C 31 FC 68 20 FA 4A 31 FC 70 60 FA 4E 34 7C 00 00 34 BC 90 90 38 12 34 7C 00 02 36 12 34 7C 00 00 34 BC FF FF 3A 3C 00 89 BA 44 67 00 00 34 36 7C 0A AA 38 7C 05 54 36 BC AA AA 38 BC 55 55 36 BC 90 90 38 12 34 7C 00 02 36 12 34 7C 00 00 34 BC F0 F0 3A 3C 00 01 BA 44 67 00 00 06 42 43 42 44 31 FC 10 60 FA 4E 33 C4 00 FF AC 6A 33 C3 00 FF AC 6C 20 7C 00 FF AC 65 70 09 61 00 00 F6 4E FA FE 74 42 80 80 39 00 FF AC 9B E1 88 80 39 00 FF AC 9C E1 88 80 39 00 FF AC 9D 22 40 42 80 80 39 00 FF AC 98 E1 88 80 39 00 FF AC 99 E1 88 80 39 00 FF AC 9A 24 40 45 F1 A8 00 74 18 42 80 61 00 FE AE 12 19 E5 A9 B3 80 72 08 4A 80 D0 80 6D 32 53 01 66 F6 61 00 FE 98 B5 C9 66 E2 20 7C 00 FF AC 93 11 7C 00 F0 00 01 11 7C 00 10 00 02 11 7C 00 7D 00 03 21 40 00 0B 70 0F 61 00 00 76 4E FA FD F4 0A 80 04 C1 1D B7 53 01 66 BE 60 C6 20 7C 00 FF AC 83 70 06 61 00 00 5A 4E FA FD D8 42 80 80 39 00 FF AC 9A E1 88 80 39 00 FF AC 9B E1 88 80 39 00 FF AC 9C 20 40 42 80 80 39 00 FF AC 98 E1 88 80 39 00 FF AC 99 61 00 00 DE 4E FA FD A6 4E FA FD A2 61 00 FE 18 14 39 00 FF F6 0E 02 02 00 03 0C 02 00 03 67 EC 13 FC 00 04 00 FF F6 0C 4E 75 13 FC 00 14 00 FF F6 0C 55 80 61 00 FD F0 13 D8 00 FF F6 0D 61 00 FE 38 61 00 FF C8 51 C8 FF EC 13 FC 00 0C 00 FF F6 0C 13 D8 00 FF F6 0D 61 00 FE 1E 13 FC 00 03 00 FF F6 0C 13 FC 00 00 00 FF F6 0D 61 00 FD B8 61 00 FE 06 10 39 00 FF F6 0E 02 00 00 E0 0C 00 00 E0 66 E8 10 39 00 FF F6 0F 4E 75 20 7C 00 FF AC 93 61 00 FD 92 10 39 00 FF F6 0E 02 00 00 E0 4A 00 67 EE 0C 00 00 80 6E 08 10 F9 00 FF F6 0F 60 E0 10 F9 00 FF F6 0F 20 7C 00 FF AC 93 10 10 02 00 00 FE 0C 00 00 6C 66 C2 0C 28 00 10 00 01 67 00 00 0C 0C 28 00 FE 00 01 66 00 FF B0 4E 75 22 08 13 C1 00 FF AC 64 E0 89 13 C1 00 FF AC 63 E0 89 13 C1 00 FF AC 62 22 00 13 C1 00 FF AC 61 E0 89 13 C1 00 FF AC 60 32 3C 00 0A 22 7C 00 FF AC 5B 13 FC 00 14 00 FF F6 0C 53 80 53 81 61 00 FD 06 13 D9 00 FF F6 0D 51 C9 FF F4 42 81 42 82 14 39 00 FF AC 5F D2 82 14 39 00 FF AC 60 D2 82 14 39 00 FF AC 61 D2 82 14 39 00 FF AC 62 D2 82 14 39 00 FF AC 63 D2 82 14 39 00 FF AC 64 D2 82 61 00 FE AA 13 D0 00 FF F6 0D 14 18 D2 82 51 C8 FF F0 20 01 E0 88 61 00 FC AE 14 39 00 FF F6 0E 02 02 00 03 0C 02 00 03 67 EC 13 FC 00 04 00 FF F6 0C 13 C0 00 FF F6 0D 61 00 FC 8C 14 39 00 FF F6 0E 02 02 00 03 0C 02 00 03 67 EC 13 FC 00 0C 00 FF F6 0C 13 C1 00 FF F6 0D 4E 75 00 00 0D 28 63 29 32 30 32 33 20 70 63 6D 68 61 63 6B 69 6E 67 2E 6E 65 74 6D F0 10 36 01 00 00 00 00 00 6C F0 10 7D 01 00 00 00 00 00 6C F0 10 7D 03 00 00 00 00 00 6C F0 10 7D 00 82 40 01 00 AA 6C F0 10 74 00 44 6C F0 10 76 00 00 6C F0 10 60 AB 71
[04:30:23:767]  Waited 2seconds.. no data present
[04:30:23:772]  AVT: no message waiting.
[04:30:24:776]  Waited 2seconds.. no data present
[04:30:24:780]  AVT: no message waiting.
[04:30:24:784]  Sending 'test device present' notification.
[04:30:24:788]  TX: 8C FE F0 3F

[antus]

Commercial tools can read and write my P08, so the hardware is looking OK. Im starting to think maybe the PCM is replying so fast my interfaces are missing the message or something, although they do seem to crash as get properties works immediately after and if the pcm hammer kernel was in control it would not be able to answer those queries. Having said that we send a halt kernel on fail to upload... more testing required.

[kur4o]

Could it be loading address change. The flash routine doesn`t crash the pcm, so it must run in some way making watchdog happy, If some registers are overlapped it can load a corrupted flash routine.

[antus]

I dont think so, the other tool is using FFB000 and that same address is not working for me. But it was. 50% of the test builds which work for Gampy work for me. But my branch was getting out of sync with Gampy so we got all cleaned up and merged in to develop, the idea being that whatever was different in my tree would be fixed. Problem is, it seems to have gone the other way. I am suspect that maybe its responding too quickly and causing comms errors, or something like that. Will need to go over all the basics and just check everything now. Though the first complete and working read was on my PCM, and the same kernel, same address worked also worked Gampy's. So the question is why and how are they different. I think they are different service numbers, Gampy's OSID is a lot lower than mine, so I am thinking an early one, mine is later. Its possible that there are two revisions. Would love some more testing from other people to learn if this problem is unique to me, or more wide spread.

My Service Number is 09356249, HDW Number 16268310 and OSID 12206203.

Funny thing was we determined we needed a clr.l %d2 to init a temp variable, and that it was missing is why the block sum worked on P04 (the register was clear before the kernel loaded, and not clear on the P08) and just that change was stopping the kernel from loading on mine, but worked fine and fixed the bug on Gampys. And I was able to remove the instruction, and get it booting and responding, and put it back in and see it break. Ive tried playing with alignment and all kinds of things. I had a theory that maybe I had a stuck bit of ram in mine and it was pure luck if is they payload had a 1 or 0 landing on that bit as the size and load address changed and that was making the difference. But now we see the kernel doesnt work either in a different patch of ram so that theory seems unlikely too. It might be possible to make a mem tester kernel that just fills a range with FF, reads it back and compares, then fills it with 00 and compares that too then gives a good or bad for that range of ram. But loader and kernel not working in different parts of ram makes that seem unlikely. Not sure what to try next. Will have to have a think about it. Maybe delay the kernel version response a bit and see if that makes a difference.