E54 Corrupted Parameters

[d0u8l3m]

So, I ended up popping off the flash IC and flashing a copy of the SPS'd bin with an eeprom/flash burner (GQ-4x4)

I reworked this freaking thing 3 times until I found an obscure post on here about a different PCM to byte swap the file before writing and that got it working again. I'll admit as an EE I know enough on the software/firmware side of things to be dangerous but not little details like that until I do it or am told lol.

I still have the BDM leads soldered to it, so when I receive the USB_NT I'll try to see if I can make it work. It should work fine with the 0411 inits since its the same mcu and flash as far as I understand it.

[antus]

I don't think it will, registers and hardware are different, plus please do try. I had to give up, but I think my udb bdm nt might have failed, or support for it was dropped in the software. Have a usb jtag nt on the way to try again (though I think I killed the faulty one trying to do a chip swap). Very interested to hear how you go.

[Lowlyfe1]

I had a similar issue, may want to read thru my post, I was able to solve the issue using the boot pin and 0000 as the seedkey to do a full write viewtopic.php?t=9127

[d0u8l3m]

I had a similar issue, may want to read thru my post, I was able to solve the issue using the boot pin and 0000 as the seedkey to do a full write viewtopic.php?t=9127

I saw your post when I started messing with this, could not get it to work at all, I got pcmhammer to tell me it was in recovery mode once, but then the write failed (in antus post earlier recovery is not supported) and I had to resort to reworking the flash IC. I tried the seed key settings as well both 0000 and FFFF.

I thought the 411 had the same mcu and intel flash but I have so many tabs open I am probably confusing myself.

My usb-nt should show up today so I can start messing around with it. The register settings on the SIM seem pretty straightforward, I am just not sure how the timing will works. I just gotta play with it some and I think I'll be able to get it. Fingers crossed

[antus]

Its much more than same processor. There are variations with platform configuration beyond that. Watchdogs, DLC chip, registers are in different locations and different states from boot between different PCM types. If you look at the PCM Hammer kernel source code in github you'll see what I mean. There are a bunch of addresses set depending on target processor, and different implementations in #ifdef for different variations as well. I've not been able to get the flash to write from cold boot or recovery on the E54. If you get write it to work in BDM the registers you need to poke to achieve that are probably what we need to know to fix recovery mode in PCM Hammer for E54, too.