PCM Hammer P01 and P59 flash tool v015

They go by many names, P01, P59, VPW, '0411 etc. Also covering E38 and newer here.
Vampyre
Posts: 261
Joined: Wed Dec 06, 2017 1:02 pm
cars: grand am, trans am

Re: PCM Hammer - new ls1 flash tool

Post by Vampyre »

successfully wrote new vin to v6 pcm this morning

AVT filter configured
[11:19:34:674] TX: 6C 10 F0 3C 0A
[11:19:34:690] RX: 6C F0 10 7C 0A 00 BA 2D F7
[11:19:34:768] TX: 6C 10 F0 3C 01
[11:19:34:784] RX: 6C F0 10 7C 01 00 31 47 32 4E 56
[11:19:34:784] TX: 6C 10 F0 3C 02
[11:19:34:815] RX: 6C F0 10 7C 02 31 32 45 33 59 4D
[11:19:34:815] TX: 6C 10 F0 3C 03
[11:19:34:830] RX: 6C F0 10 7C 03 37 38 37 31 37 30
[11:19:37:048] Sending seed request.
[11:19:37:048] TX: 6C 10 F0 27 01
[11:19:37:064] RX: 6C F0 10 67 01 25 4A
[11:19:37:080] Parsing seed value.
[11:19:37:080] Sending unlock request (4A25, 8259)
[11:19:37:080] TX: 6C 10 F0 27 02 82 59
[11:19:37:111] RX: 6C F0 10 67 02 34
[11:19:37:173] Changing VIN to 1G2NV12E3YM787170
[11:19:37:173] Block 1
[11:19:37:189] TX: 6C 10 F0 3B 01 00 31 47 32 4E 56
[11:19:37:189] Successful write to block 1
[11:19:37:189] Block 2
[11:19:37:205] TX: 6C 10 F0 3B 02 31 32 45 33 59 4D
[11:19:37:205] Successful write to block 2
[11:19:37:205] Block 3
[11:19:37:220] TX: 6C 10 F0 3B 03 37 38 37 31 37 30
[11:19:37:220] Successful write to block 3
[11:19:37:220] VIN successfully updated to 1G2NV12E3YM787170

now issue is program is trying to validate file, but since its got different check sums comes back as invalid file so cant write or clone.

[11:22:41:268] E:\cals\v6\2000gagt1factoryourvinserial.bin
[11:22:41:393] Validating 512k file.
[11:22:41:393] This file does not contain the expected signature at 0x1FFFE.
[11:22:41:408] Start End Stored Needed Verdict Segment Name
[11:22:41:471] Checksum table is corrupt.
[11:22:41:487] This file is corrupt. It would render your PCM unusable.
User avatar
NSFW
Posts: 679
Joined: Fri Feb 02, 2018 3:13 pm

Re: PCM Hammer - new ls1 flash tool

Post by NSFW »

Thanks for those logs. The app does recognize the flash chip after all.

The parameter blocks are where the PCM stores information about check-engine lights (and probably some other stuff) so it's totally normal for them to change from one power cycle to the next.
Please don't PM me with technical questions - start a thread instead, and send me a link to it. That way I can answer in public, and help other people who have the same question. Thanks!
PeterTremonti
Posts: 29
Joined: Tue Nov 26, 2019 5:29 am
cars: 2005 Suburban 1500 LT 5.3 Flex Fuel
2003 Suburban 1500 LT 5.3 Flex Fuel Parts motor
2001 Yukon XL Denali 1500 6.0L

Re: PCM Hammer - new ls1 flash tool

Post by PeterTremonti »

I'm having an issue writing the original bin to a P59 PCM. It seems to loop multiple times and not finish.

First I tried loading just a .cal file. Looped until cancelled.
Recovered to the original bin with LSDroid.
Tried loading a modified bin that removed VATs and it did the same thing. Cancelled again.
Tried loading the original bin to see if that was the issue. No luck.
I can try again if you have any pointers or suggestions.

Not sure what's going on so I'll just leave this here for you smarter people to look over. Here are the Debug Log tab and the Results tab in .txt form from when I tried again today to write the "2003SuburbanDBW5.3FlexFuelpetertcodesandvats.bin" into the PCM with PCM Hammer's "Write Calibration" button.
Attachments
Results Log VATS delete file into original PCM.txt
(279.24 KiB) Downloaded 195 times
Debug Log VATS delete file into original PCM.txt
(14.08 MiB) Downloaded 206 times
2003SuburbanDBW5.3FlexFuelpetertcodesandvats.bin
(1 MiB) Downloaded 198 times
Available tools:
VCX Nano GM wifi (VXDIAG NANO-PLUS-V1.2 2020.10) (STM32F407 VTG6 ARM brand processor)
VAS 6154 Clone (VW6154-V1.0 1850) Looks like the VCX Nano but not as complicated.
Mongoose ISO/CAN
VAGcom HEX+CAN (HC8198369 Rev. B)
Maxidas DS708
User avatar
Tazzi
Posts: 3422
Joined: Thu May 17, 2012 8:53 pm
cars: VE SS Ute
Location: WA
Contact:

Re: PCM Hammer - new ls1 flash tool

Post by Tazzi »

Looking at your log, it gets to writing and the PCM refuses.
[02:56:17:110] Writing...
[02:56:17:141] Sending payload with offset 0x0000, start address 0x008000, length 0x0080.
[02:56:17:157] TX: STPX H:6D10F0, R:1, L:137
[02:56:17:188] TX: 360000800080004D34000200BFEC3541424AFC3132353737383435000000000000000000000000000600000000000000FF0000000000FF0000000000FF0000000000FF0000000000FF0000000000FF00000000000000000000000000FF0000000000FF0000000000FF0000000000FF0000000000FF0000000000FF00000000000000000000000012CD
[02:56:17:345] RX: 6D F0 10 7F 36 00 EE
Your Local Aussie Reverse Engineer
Contact for Software/Hardware development and Reverse Engineering
Site:https://www.envyouscustoms.com
Mob:+61406 140 726
Image
User avatar
NSFW
Posts: 679
Joined: Fri Feb 02, 2018 3:13 pm

Re: PCM Hammer - new ls1 flash tool

Post by NSFW »

I'm guessing the code that the kernel used to write to the 512k Intel chips doesn't work on the 1mb chips. We'll have to compare the data sheets to see what's different.
Please don't PM me with technical questions - start a thread instead, and send me a link to it. That way I can answer in public, and help other people who have the same question. Thanks!
TE27Levin
Posts: 39
Joined: Tue Dec 03, 2019 4:26 am
cars: 04 escalade

Re: PCM Hammer - new ls1 flash tool

Post by TE27Levin »

I am also having an issue verifying the read with my P59, i'm thinking its my autel J2534 device causing the issues though. I had to put the pcm into recovery mode to get it this far.. See attachment That is a different error than my original. Still pretty cool getting this far with it.
Attachments
debugerr2.txt
(55.87 KiB) Downloaded 201 times
User avatar
Gampy
Posts: 2330
Joined: Sat Dec 15, 2018 7:38 am

Re: PCM Hammer - new ls1 flash tool

Post by Gampy »

I don't know if it helps, confuses or what but I've looked at the code from 10 of these P01/P59 OS's and the Intel Flash code has been the same in all.


Also, finally got a chance to look at the latest kernel code ...

In flash-amd.c line 59, I suspect this FlashLock(); should be replaced.

Code: Select all

			if (!testWrite)
			{
				*address = 0xF0F0;
				*address = 0xF0F0;
-				FlashLock();
+				SIM_CSOR0 = 0x1060;
			}
And a trivial unused int, in common.c line 182,

Code: Select all

-	int stopUsing = 0;
Intelligence is in the details!

It is easier not to learn bad habits, then it is to break them!

If I was here to win a popularity contest, their would be no point, so I wouldn't be here!
THEFERMANATOR
Posts: 13
Joined: Sat May 25, 2019 2:48 am

Re: PCM Hammer - new ls1 flash tool

Post by THEFERMANATOR »

Running into a BIG issue trying to do a full read on a 0411 PCM. It's loaded with a 12208322 OS for an 02 C6500. It was flashed in with a TECH2 and all went well. The PCM works fine, can request the VIN and read properties, but as soon as you go to do a full read, it uploads the kernel's, then freezes the PCM to where NOTHING can read it, basically bricks it. If I remove the plug from it entirely for a few minutes, hook it back up, and it comes back on(turning the switch off does nothing). I'm using a bench cable, so network talk is not in the picture.

Here's the log from it. I'm using PCMHAMMER 007 with an OBDLINK SX cable. I'm currently reading it now with PCMHAMMER 006, and it's reading it.

[11:01:14:625] PCM Hammer 007
[11:01:14:656] ElmDevice initialization starting.
[11:01:14:718] TX:
[11:01:14:905] TX: AT Z
[11:01:15:732] AT Z ELM327 v1.3a
[11:01:15:748] TX: AT E0
[11:01:15:061] Thanks for using PCM Hammer.
[11:01:15:779] AT E0 OK
[11:01:15:779] TX: AT S0
[11:01:15:779] OK
[11:01:15:779] TX: AT RV
[11:01:15:795] Voltage: 13.9V
[11:01:15:810] TX: AT I
[11:01:15:826] Elm ID: ELM327 v1.3a
[11:01:15:826] Initializing PcmHacking.AllProDeviceImplementation
[11:01:15:826] TX: AT #1
[11:01:15:841] This is not an AllPro device.
[11:01:15:841] Determining whether PcmHacking.ScanToolDeviceImplementation is connected.
[11:01:15:841] TX: ST I
[11:01:15:857] ScanTool device ID: STN1130 v4.0.1
[11:01:15:857] TX: AT AL
[11:01:15:873] OK
[11:01:15:873] TX: AT SP2
[11:01:15:888] OK
[11:01:15:888] TX: AT DP
[11:01:15:904] SAE J1850 VPW
[11:01:15:904] TX: AT AR
[11:01:15:919] OK
[11:01:15:919] TX: AT AT0
[11:01:15:935] OK
[11:01:15:935] TX: AT SR F0
[11:01:15:951] OK
[11:01:15:951] TX: AT H1
[11:01:15:966] OK
[11:01:15:966] TX: AT ST 20
[11:01:15:982] OK
[11:01:45:341] Save canceled.
[11:01:47:431] Setting timeout for ReadProperty, 47 ms.
[11:01:47:431] TX: AT ST 0B
[11:01:47:447] OK
[11:01:47:447] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:463] TX: 3C01
[11:01:47:572] RX: 6C F0 10 7C 01 00 31 47 44 4A 36
[11:01:47:572] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:587] TX: 3C02
[11:01:47:619] RX: 6C F0 10 7C 02 48 31 45 58 32 4A
[11:01:47:634] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:634] TX: 3C03
[11:01:47:681] RX: 6C F0 10 7C 03 39 30 31 33 36 34
[11:01:47:681] VIN: 1GDJ6H1EX2J901364
[11:01:47:681] Setting timeout for ReadProperty, 47 ms.
[11:01:47:681] TX: AT ST 0B
[11:01:47:697] OK
[11:01:47:697] Setting timeout for ReadProperty, 47 ms.
[11:01:47:697] TX: AT ST 0B
[11:01:47:712] OK
[11:01:47:712] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:728] TX: 3C0A
[11:01:47:759] RX: 6C F0 10 7C 0A 00 BA 48 C2
[11:01:47:759] OS ID: 12208322
[11:01:47:759] Setting timeout for ReadProperty, 47 ms.
[11:01:47:759] TX: AT ST 0B
[11:01:47:775] OK
[11:01:47:775] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:790] TX: 3C08
[11:01:47:821] RX: 6C F0 10 7C 08 00 BA 49 7F
[11:01:47:821] Calibration ID: 12208511
[11:01:47:821] Setting timeout for ReadProperty, 47 ms.
[11:01:47:821] TX: AT ST 0B
[11:01:47:837] OK
[11:01:47:837] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:853] TX: 3C04
[11:01:47:884] RX: 6C F0 10 7C 04 00 8F 3A 22
[11:01:47:884] Hardware ID: 9386530
[11:01:47:899] Setting timeout for ReadProperty, 47 ms.
[11:01:47:899] TX: AT ST 0B
[11:01:47:899] OK
[11:01:47:899] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:915] TX: 3C05
[11:01:47:946] RX: 6C F0 10 7C 05 31 45 42 31
[11:01:47:946] TX: STPX H:6C10F0, R:1, L:2
[11:01:47:962] TX: 3C06
[11:01:47:993] RX: 6C F0 10 7C 06 38 5A 38 32
[11:01:47:993] TX: STPX H:6C10F0, R:1, L:2
[11:01:48:009] TX: 3C07
[11:01:48:040] RX: 6C F0 10 7C 07 31 30 38 32
[11:01:48:055] Serial Number: 1EB18Z821082
[11:01:48:055] Setting timeout for ReadProperty, 47 ms.
[11:01:48:055] TX: AT ST 0B
[11:01:48:071] OK
[11:01:48:087] TX: STPX H:6C10F0, R:1, L:2
[11:01:48:087] TX: 3C14
[11:01:48:118] RX: 6C F0 10 7C 14 44 4C 41 43
[11:01:48:118] Broad Cast Code: DLAC
[11:01:48:133] Setting timeout for ReadProperty, 47 ms.
[11:01:48:133] TX: AT ST 0B
[11:01:48:133] OK
[11:01:48:133] TX: STPX H:6C10F0, R:1, L:2
[11:01:48:149] TX: 3CA0
[11:01:48:180] RX: 6C F0 10 7C A0 00
[11:01:48:180] MEC: 0
[11:03:38:052] Will save to C:\Users\Ferman\Documents\TUNERPRO files\.bin files\02 C6500 8.1l AT545 12208322.bin
[11:03:38:068] Querying operating system of current PCM.
[11:03:38:068] Setting timeout for ReadProperty, 47 ms.
[11:03:38:068] TX: AT ST 0B
[11:03:38:083] OK
[11:03:38:083] Setting timeout for ReadProperty, 47 ms.
[11:03:38:083] TX: AT ST 0B
[11:03:38:099] OK
[11:03:38:099] TX: STPX H:6C10F0, R:1, L:2
[11:03:38:115] TX: 3C0A
[11:03:38:146] RX: 6C F0 10 7C 0A 00 BA 48 C2
[11:03:38:146] OSID: 12208322
[11:03:38:146] Suppressing VPW chatter.
[11:03:38:146] TX: STPX H:6CFEF0, R:1, L:2
[11:03:38:161] TX: 2800
[11:03:38:193] RX: 6C F0 10 68 00
[11:03:38:193] Sending 'test device present' notification.
[11:03:38:193] TX: AT SH 8C FE F0
[11:03:38:208] Set header response: OK
[11:03:38:208] TX: 3F
[11:03:38:271] Setting timeout for ReadProperty, 47 ms.
[11:03:38:271] TX: AT ST 0B
[11:03:38:286] OK
[11:03:38:286] Sending seed request.
[11:03:38:286] TX: STPX H:6C10F0, R:1, L:2
[11:03:38:302] TX: 2701
[11:03:38:333] RX: 6C F0 10 67 01 2B 76
[11:03:38:333] Parsing seed value.
[11:03:38:333] Sending unlock request (762B, 1D22)
[11:03:38:333] TX: STPX H:6C10F0, R:1, L:4
[11:03:38:349] TX: 27021D22
[11:03:38:380] RX: 6C F0 10 67 02 34
[11:03:38:380] Unlock succeeded.
[11:03:38:411] Sending 'test device present' notification.
[11:03:38:411] TX: 3F
[11:03:38:473] This interface does not support VPW 4x
[11:03:38:473] Loaded C:\Users\Ferman\Documents\PCMhammer\PcmHammer007\read-kernel.bin
[11:03:38:489] Uploading kernel to PCM.
[11:03:38:489] Sending upload request for kernel size 4080, loadaddress FF8000
[11:03:38:505] TX: STPX H:6C10F0, R:1, L:7
[11:03:38:505] TX: 34000FF0FF8000
[11:03:38:536] RX: 6C F0 10 74 00 44
[11:03:38:551] Found response, Success
[11:03:38:551] Going to load a 4080 byte kernel to 0xFF8000
[11:03:38:551] Setting timeout for SendKernel, 213 ms.
[11:03:38:551] TX: AT ST 35
[11:03:38:551] OK
[11:03:38:551] Sending end block payload with offset 0xFC0, start address 0xFF8FC0, length 0x30.
[11:03:38:567] TX: STPX H:6D10F0, R:1, L:57
[11:03:38:567] TX: 36000030FF8FC066104280102F00192F004EBAFC90588F6016102F000510000280000000FF2F0042A74EBAFCC6508F241F4FEF00204E751128
[11:03:38:661] RX: 6D F0 10 76 00 73
[11:03:38:661] Found response, Success
[11:03:38:661] Kernel upload 1% complete.
[11:03:38:661] Sending block with offset 0x000F00, start address 0xFF8F00, length 0x00C0.
[11:03:38:661] TX: STPX H:6D10F0, R:1, L:201
[11:03:38:676] TX: 360000C0FF8F00D482958220429088D0802400E58A2042D0882400E58A2042D0882401948020027201B28066064EB900FF8260202F001A242F0010D4802F42000A222F000A700AD0AF001A103009B000FFC0002041108052AF001A202F001AB0AF001465904280102F00192F004EBAFCF4588F4EB900FF82F00C2FFF80001966102F6F00100006202F000620404E90605E605C0C2F0044001957C0440010000280000000FF2F00487900FFC00A2F2F00182F2F00204EB900FF825E508F508F1F4000054A2F00053C72
[11:03:38:879] RX: 6D F0 10 76 00 73
[11:03:38:879] Found response, Success
[11:03:38:879] Kernel upload 5% complete.
[11:03:38:879] Sending block with offset 0x000E40, start address 0xFF8E40, length 0x00C0.
[11:03:38:879] TX: STPX H:6D10F0, R:1, L:201
[11:03:38:895] TX: 360000C0FF8E40C004302F0022E048100013C000FFC005302F0022100013C000FFC006302F000EE048100013C000FFC007302F000E100013C000FFC008202F0014E088100013C000FFC009202F0014100013C000FFC00A487800054878000B487900FFC0004EB900FF8428508F588F6000013E7001C0AF00104A80671042A7487800BB4EBAFDEC508F600001240CAF00FF7FFF0010630000BC202F0010D0AF00140C8000FFCDFF620000AA42AF000A42AF001A6066222F001A24014C3C2C0051EB851FE88024013EEE
[11:03:39:097] RX: 6D F0 10 76 00 73
[11:03:39:097] Found response, Success
[11:03:39:097] Kernel upload 10% complete.
[11:03:39:113] Sending block with offset 0x000D80, start address 0xFF8D80, length 0x00C0.
[11:03:39:113] TX: STPX H:6D10F0, R:1, L:201
[11:03:39:113] TX: 360000C0FF8D80103900FFC00910000280000000FF81AF0010426F002270042F40001E6030202F001E0280000003FF4A8066064EB900FF8260202F001E068000FFC000204010101000024000FFD16F002252AF001E700AD0AF0014B0AF001E62C4700AD0AF0014103009B000FFC00010000280000000FFE1883200700BD0AF0014103009B000FFC0001000024000FF80413F40000E302F000EB06F00226700009413FC006D00FFC00013FCFFF000FFC00113FC001000FFC00213FC007F00FFC00313FC003600FF3E41
[11:03:39:331] RX: 6D F0 10 76 00 73
[11:03:39:331] Found response, Success
[11:03:39:331] Kernel upload 15% complete.
[11:03:39:331] Sending block with offset 0x000CC0, start address 0xFF8CC0, length 0x00C0.
[11:03:39:331] TX: STPX H:6D10F0, R:1, L:201
[11:03:39:347] TX: 360000C0FF8CC0C00013FCFFF000FFC00113FC001000FFC00213FC007F00FFC00313FC003600FFC00413EF000200FFC00513D700FFC0064878000548780007487900FFC0004EB900FF8428508F588F588F4E754FEFFFE02F021F7900FFC0040019103900FFC00510000280000000FF2F400014202F0014E1882F400014103900FFC00610000280000000FF81AF0014103900FFC00710000280000000FF2F400010202F0010E1882F400010103900FFC00810000280000000FF81AF0010202F0010E1882F4000104009
[11:03:39:550] RX: 6D F0 10 76 00 73
[11:03:39:550] Found response, Success
[11:03:39:550] Kernel upload 20% complete.
[11:03:39:565] Sending block with offset 0x000C00, start address 0xFF8C00, length 0x00C0.
[11:03:39:565] TX: STPX H:6D10F0, R:1, L:201
[11:03:39:565] TX: 360000C0FF8C004878000548780005487900FFC0004EB900FF8428508F588F603E13FC006C00FFC00013FCFFF000FFC00113FC001000FFC00213FC007400FFC003423900FFC0044878000548780005487900FFC0004EB900FF8428508F588F508F4E75598F202F00081F40000213FC006D00FFC00013FCFFF000FFC00113FC001000FFC00213FC007600FFC00313EF000200FFC0044878000548780004487900FFC0004EB900FF8428508F588F588F4E75598F222F0008202F000C1F4100021E8013FC006D00FF47B3
[11:03:39:768] RX: 6D F0 10 76 00 73
[11:03:39:768] Found response, Success
[11:03:39:784] Kernel upload 24% complete.
[11:03:39:784] Sending block with offset 0x000B40, start address 0xFF8B40, length 0x00C0.
[11:03:39:784] TX: STPX H:6D10F0, R:1, L:201
[11:03:39:784] TX: 360000C0FF8B40FFFF22174878000C2F002F014EB900FF8428508F588F508F4E75518F103900FFC00510000280000000FF2F400004202F0004E1882F400004103900FFC00610000280000000FF81AF0004103900FFC00710000280000000FF2E802017E1882E80103900FFC00810000280000000FF81972017E1882E80103900FFC00910000280000000FF81970CAF00001000000462080C9700FFA000674213FC006C00FFC00013FCFFF000FFC00113FC001000FFC00213FC007F00FFC00313FC003400FFC0043FA8
[11:03:40:002] RX: 6D F0 10 76 00 73
[11:03:40:002] Found response, Success
[11:03:40:002] Kernel upload 29% complete.
[11:03:40:002] Sending block with offset 0x000A80, start address 0xFF8A80, length 0x00C0.
[11:03:40:002] TX: STPX H:6D10F0, R:1, L:201
[11:03:40:018] TX: 360000C0FF8A8000FF2E802017E1882E80103900FFC00810000280000000FF81972017E1882E80103900FFC00910000280000000FF819713FC006D00FFC00013FCFFF000FFC00113FC001000FFC00213FC003600FFC00313FC000100FFC004202F0004E088100013C000FFC005202F0004100013C000FFC006201742404840100013C000FFC0072017E088100013C000FFC0082017100013C000FFC0094EB900FF8300487800014878000A487900FFC0004EB900FF8428508F588F202F0004300030000280000041EB
[11:03:40:221] RX: 6D F0 10 76 00 73
[11:03:40:221] Found response, Success
[11:03:40:221] Kernel upload 34% complete.
[11:03:40:236] Sending block with offset 0x0009C0, start address 0xFF89C0, length 0x00C0.
[11:03:40:236] TX: STPX H:6D10F0, R:1, L:201
[11:03:40:236] TX: 360000C0FF89C0700BD0AF0008322F00021201118109B000FFC000588F4E75598F202F00081F40000213FC006C00FFC00013FCFFF000FFC00113FC001000FFC00213FC007D00FFC003423900FFC00413FC000100FFC00513FC000300FFC006423900FFC00713EF000200FFC0084EBAF8D84878000548780009487900FFC0004EBAF9EE508F588F588F4E75518F103900FFC00510000280000000FF2F400004202F0004E1882F400004103900FFC00610000280000000FF81AF0004103900FFC00710000280000042C8
[11:03:40:455] RX: 6D F0 10 76 00 73
[11:03:40:455] Found response, Success
[11:03:40:455] Kernel upload 38% complete.
[11:03:40:455] Sending block with offset 0x000900, start address 0xFF8900, length 0x00C0.
[11:03:40:455] TX: STPX H:6D10F0, R:1, L:201
[11:03:40:470] TX: 360000C0FF890010101000024000FFD16F000652AF00027009B0AF00026CDC302F0006508F4E75518F2F024EBAF93A426F000A42AF00066056202F0006D0AF001020401F5000054240102F0005D16F000A222F000624014C3C2C0051EB851FEA802401D482958220429088E5882400E58A2042D0882400E58A2042D0882401948020024A8066044EBAF8DE52AF0006202F0006B0AF001465A04EBAF8CC302F000A241F508F4E75598F202F000C3F400002700AD0AF0008322F0002E0491201118109B000FFC0003CFD
[11:03:40:673] RX: 6D F0 10 76 00 73
[11:03:40:673] Found response, Success
[11:03:40:673] Kernel upload 43% complete.
[11:03:40:673] Sending block with offset 0x000840, start address 0xFF8840, length 0x00C0.
[11:03:40:673] Sending 'test device present' notification.
[11:03:40:673] TX: 3F
[11:03:40:907] TX: STPX H:6D10F0, R:1, L:201
[11:03:40:923] TX: 360000C0FF8840422F0012422F00131F6F000A00101F6F000800111F6F000600121F6F0004001348780005487800087014D08F2F004EBAFBB8508F588F4EBAFAAA241F508F508F4E752F02202F0008100010000280000000FF2240202F000802800000FF00E088100010000280000000FF2040202F0008028000FF000042404840100042811200202F00087418E4A8100010000280000000FF2F092F082F012F004EBAFF1A508F508F241F4E75518F426F000670042F400002601C202F0002068000FFC00020402EFC
[11:03:41:141] RX: 6D F0 10 76 00 73
[11:03:41:141] Found response, Success
[11:03:41:141] Kernel upload 48% complete.
[11:03:41:141] Sending block with offset 0x000780, start address 0xFF8780, length 0x00C0.
[11:03:41:141] TX: STPX H:6D10F0, R:1, L:201
[11:03:41:157] TX: 360000C0FF878000FFC00113FC001000FFC00213FC006000FFC003202F00047218E2A8100013C000FFC004202F0004028000FF000042404840100013C000FFC005202F000402800000FF00E088100013C000FFC006202F0004100013C000FFC0074878000548780008487900FFC0004EBAFC3E508F588F4EBAFAFE60FE518F518F2F02226F0018206F001C222F0020202F002434091F42000A34081F4200081F4100061F4000041F7CFF8C000C1F7CFFFE000D1F7CFFF0000E1F7C003F000F422F0010422F00113A16
[11:03:41:359] RX: 6D F0 10 76 00 73
[11:03:41:359] Found response, Success
[11:03:41:359] Kernel upload 52% complete.
[11:03:41:359] Sending block with offset 0x0006C0, start address 0xFF86C0, length 0x00C0.
[11:03:41:375] TX: STPX H:6D10F0, R:1, L:201
[11:03:41:375] TX: 360000C0FF86C0202F001820401081203C00FFF60C204010BC00024AAF000866026048202F00182040101010000280000000FF7230C0817230B280660E202F001C204010BC000242806028202F001C204010BC0001202F000860184E71202F001C204010BC000B428060084EBAFB3A6000FEDE4FEF00144E75598F202F000C53802E80602A2017D0AF00102217D2AF000820411210118109B000FFC00020170280000001FF4A8066044EBAFAFC53974A976CD2588F4E754EBAFB7E13FC006C00FFC00013FCFFF03DB9
[11:03:41:578] RX: 6D F0 10 76 00 73
[11:03:41:578] Found response, Success
[11:03:41:578] Kernel upload 57% complete.
[11:03:41:593] Sending block with offset 0x000600, start address 0xFF8600, length 0x00C0.
[11:03:41:593] TX: STPX H:6D10F0, R:1, L:201
[11:03:41:593] TX: 360000C0FF86002F41000C42AF00084EBAFC5652AF00104AAF00086614202F000CD0AF0004B0AF00106C064280600001040CAF0000101400086612202F001C204010BCFFEE202F0008600000E8203C00FFF60E20401010EA081F4000034280102F00037207B280650000C2303B0A064EFB00020010001E001E00A8001E004400440044487800014EBAFC8E588F6000009C2F6F0010000C202F0008220052812F410008223C00FFF60F20411210118109B000FFC00060742F6F0010000C203C00FFF60F2040121031C8
[11:03:41:812] RX: 6D F0 10 76 00 73
[11:03:41:812] Found response, Success
[11:03:41:812] Kernel upload 62% complete.
[11:03:41:812] Sending block with offset 0x000540, start address 0xFF8540, length 0x00C0.
[11:03:41:812] TX: STPX H:6D10F0, R:1, L:201
[11:03:41:827] TX: 360000C0FF854067000098203C00FFF60C204010BC000C203C00FFF60D204010AF00164EBAFD4C203C00FFF60C204010BC0003203C00FFF60D20404210203C00FFF60E204010101200020100031F41001742AF000E603652AF000E42AF000A600C4EBAFCC44EBAFD0A52AF000A7063B0AF000A6CEC4EBAFCB0203C00FFF60E204010101200020100031F4100174A2F0017670A0CAF000001F3000E6FBA4EBAFD4A4FEF00184E754FEFFFEC4EBAFC7A42AF00102F7C000003E80004202F001090AF0004220052813DD1
[11:03:42:030] RX: 6D F0 10 76 00 73
[11:03:42:030] Found response, Success
[11:03:42:030] Kernel upload 67% complete.
[11:03:42:046] Sending block with offset 0x000480, start address 0xFF8480, length 0x00C0.
[11:03:42:046] TX: STPX H:6D10F0, R:1, L:201
[11:03:42:061] TX: 360000C0FF8480D0AF001C204010101000024000FFD16F00144280302F0012D0AF001C2040101010000280000000FF2F004EBAFEFA588F302F0012320052413F410012302F0008B06F001262B47008C0AF00244A8067584280302F0012D0AF001C204010101000024000FFD16F00144280302F0012D0AF001C2040101010000280000000FF2F004EBAFEA4588F302F0014E048100010000280000000FF2F004EBAFE8C588F302F00141F40001660104280302F0012D0AF001C20401F5000167004C0AF00244A8035D4
[11:03:42:280] RX: 6D F0 10 76 00 73
[11:03:42:280] Found response, Success
[11:03:42:280] Kernel upload 71% complete.
[11:03:42:280] Sending block with offset 0x0003C0, start address 0xFF83C0, length 0x00C0.
[11:03:42:280] TX: STPX H:6D10F0, R:1, L:201
[11:03:42:280] TX: 360000C0FF83C00007422F0006603A102F0006120052011F41000642AF000260084EBAFECE52AF00027031B0AF00026CF04EBAFE74203C00FFF60E204010101200020100031F4100070C2F0002000767080C2F0003000766080C2FFFF9000663AE203C00FFF60D20401097508F4E754FEFFFE8202F00203F4000024EBAFE2A7001C0AF00244A80670C203C00FFF60C204010BC00147004C0AF00244A806708302F000253406004302F00023F40000842AF00044EBA04783F400014426F001260424280302F00123590
[11:03:42:498] RX: 6D F0 10 76 00 73
[11:03:42:498] Found response, Success
[11:03:42:498] Kernel upload 76% complete.
[11:03:42:498] Sending block with offset 0x000300, start address 0xFF8300, length 0x00C0.
[11:03:42:514] TX: STPX H:6D10F0, R:1, L:201
[11:03:42:529] TX: 360000C0FF830048780032487800014EBAFFAA508F4E75202F0004487800FA2F004EBAFF98508F4E75598F2F0242AF0004604C226F000422094C3C1C0010624DD3EA802209D281938124009481220220412008E58820402008EB889088D081E588220992804A8166044EBAFEFC202F0004068000FFC0002040421052AF00040CAF0000101300046FAA241F588F4E75598F4297600E2017068000FFD0142040421052977063B0976CEC588F4E75518F202F000C1E80203C00FFF60E204010101200020100031F413FF6
[11:03:42:732] RX: 6D F0 10 76 00 73
[11:03:42:732] Found response, Success
[11:03:42:732] Kernel upload 81% complete.
[11:03:42:748] Sending block with offset 0x000240, start address 0xFF8240, length 0x00C0.
[11:03:42:748] TX: STPX H:6D10F0, R:1, L:201
[11:03:42:748] TX: 360000C0FF82400280000000FF2F082F012F00487800AA4EB900FF87F6508F508F4E714E754E75203C00FFFA27204010BC0055203C00FFFA27204010BCFFAA223C00FFD006203C00FFD006204010100200007F20411080223C00FFD006203C00FFD006204010100000FF80204110804E754E714E714E714E714E75518F42AF00046026429760124E714E714E714E714E714E714E714E7152972017B0AF00106DE64EBAFF8452AF0004202F0004B0AF000C6DD0508F4E7548780005487827104EBAFFBA508F4E7544CE
[11:03:42:966] RX: 6D F0 10 76 00 73
[11:03:42:966] Found response, Success
[11:03:42:966] Kernel upload 85% complete.
[11:03:42:966] Sending block with offset 0x000180, start address 0xFF8180, length 0x00C0.
[11:03:42:966] Sending 'test device present' notification.
[11:03:42:966] TX: 3F
[11:03:43:200] TX: STPX H:6D10F0, R:1, L:201
[11:03:43:216] TX: 360000C0FF818000A800A800A800A8006C4EB900FF8B5A4EB900FF8388600000C44EB900FF8A44600000BA103900FFC0000C00006D660A4EB900FF8D0C600000A4600000A0103900FFC00310000280000000FF42A742A72F00487800B24EB900FF87F6508F508F607A103900FFC0044A00660E487800AA4EB900FF89D8588F6062103900FFC00410000280000000FF42A742A72F004878003D4EB900FF87F6508F508F603E103900FFC00510000280000000FF2040103900FFC00442811200103900FFC00310004450
[11:03:43:419] RX: 6D F0 10 76 00 73
[11:03:43:419] Found response, Success
[11:03:43:419] Kernel upload 90% complete.
[11:03:43:434] Sending block with offset 0x0000C0, start address 0xFF80C0, length 0x00C0.
[11:03:43:434] TX: STPX H:6D10F0, R:1, L:201
[11:03:43:450] TX: 360000C0FF80C0102F000242811200102F000210000280000000FF2F012F00487800BB487800BB4EB900FF87F6508F508F4EB900FF82F060322F6F00100008103900FFC0030C000020661A4EB900FF82F0202F00100080CC0000002F004EB900FF8770588F4EB900FF81286000FF4E103900FFC0010C0000106710103900FFC0010C00FFFE67046000011A103900FFC0020C00FFF067046000010A103900FFC00310000280000000FF72CCD0817209B280650000B2303B0A064EFB000200140024002E004800A83C00
[11:03:43:668] RX: 6D F0 10 76 00 73
[11:03:43:668] Found response, Success
[11:03:43:668] Kernel upload 95% complete.
[11:03:43:668] Sending block with offset 0x000000, start address 0xFF8000, length 0x00C0.
[11:03:43:668] TX: STPX H:6D10F0, R:1, L:201
[11:03:43:699] TX: 368000C0FF80004FEFFFEC007C07004EB900FF8260203C00FFF606204042104EB900FF82F0203C00FFF60C204010BC0003203C00FFF60D204042104EB900FF83224EB900FF82AA42A742A742A742A74EB900FF87F6508F508F4EB900FF82F042AF00102F7C00989680000C202F001090AF000C220052812F41000852AF00104EB900FF826050EF000350EF0002200F54802F00200F5E802F004EB900FF85E0508F2F4000044AAF00046602607E102F000349C07230C0814A806702606E102F00020C00000167324527
[11:03:43:902] RX: 6D F0 10 76 00 73
[11:03:43:902] Found response, Success
[11:03:43:902] Kernel upload 100% complete.
[11:03:43:918] TX: STPX H:6C10F0, R:1, L:2
[11:03:43:933] TX: 3D00
[11:03:44:651] Timeout during receive.
[11:03:44:916] TX: STPX H:6C10F0, R:1, L:2
[11:03:44:932] TX: 3D00
[11:03:45:634] Timeout during receive.
[11:03:45:899] Kernel Version: 00000000
[11:03:45:899] kernel uploaded to PCM succesfully. Requesting data...
[11:03:45:915] Setting timeout for ReadMemoryBlock, 1266 ms.
[11:03:45:915] TX: AT ST FF
[11:03:45:915] OK
[11:03:45:930] Sending 'test device present' notification.
[11:03:45:930] TX: 3F
[11:03:46:975] Reading from 0 / 0x0, length 500 / 0x1F4
[11:03:46:991] TX: STPX H:6D10F0, R:1, L:7
[11:03:46:991] TX: 350101F4000000
[11:03:49:596] Timeout during receive.
[11:03:49:596] No payload following read request.
[11:03:51:125] Timeout during receive.
[11:03:51:125] No payload following read request.
[11:03:52:654] Timeout during receive.
[11:03:52:654] No payload following read request.
[11:03:54:183] Timeout during receive.
[11:03:54:183] No payload following read request.
[11:03:55:711] Timeout during receive.
[11:03:55:711] No payload following read request.
[11:03:57:240] Timeout during receive.
[11:03:57:240] No payload following read request.
[11:03:58:769] Timeout during receive.
[11:03:58:769] No payload following read request.
[11:04:00:298] Timeout during receive.
[11:04:00:298] No payload following read request.
[11:04:01:827] Timeout during receive.
[11:04:01:827] No payload following read request.
[11:04:03:356] Timeout during receive.
[11:04:03:356] No payload following read request.
[11:04:04:884] Timeout during receive.
[11:04:04:884] No payload following read request.
[11:04:06:413] Timeout during receive.
[11:04:06:413] No payload following read request.
[11:04:07:942] Timeout during receive.
[11:04:07:942] No payload following read request.
[11:04:09:471] Timeout during receive.
[11:04:09:471] No payload following read request.
[11:04:11:000] Timeout during receive.
[11:04:11:000] No payload following read request.
[11:04:11:000] Something went wrong. Offset and length were out of bounds for the array or count is greater than the number of elements from index to the end of the source collection.
[11:04:11:015] System.ArgumentException: Offset and length were out of bounds for the array or count is greater than the number of elements from index to the end of the source collection.
at System.Buffer.BlockCopy(Array src, Int32 srcOffset, Array dst, Int32 dstOffset, Int32 count)
at PcmHacking.CKernelReader.<TryReadBlock>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult()
at PcmHacking.CKernelReader.<ReadContents>d__4.MoveNext()
[11:04:11:015] Halting the kernel.
[11:04:11:015] TX: AT SH 6C 10 F0
[11:04:11:031] Set header response: OK
[11:04:11:031] TX: 20
[11:04:12:092] Clearing trouble codes.
[11:04:12:107] TX: AT SH 68 6A F0
[11:04:12:123] Set header response: OK
[11:04:12:123] TX: 04
[11:04:13:184] TX: 04
[11:04:14:244] TX: AT SH 8C FE F0
[11:04:14:260] Set header response: OK
[11:04:14:260] TX: 14
[11:04:15:305] TX: 14
[11:04:16:366] Elapsed time 00:00:37.9704662
[11:04:16:382] Read failed, Error
[11:05:04:180] Setting timeout for ReadProperty, 47 ms.
[11:05:04:180] TX: AT ST 0B
[11:05:04:180] OK
[11:05:04:180] TX: STPX H:6C10F0, R:1, L:2
[11:05:04:196] TX: 3C01
[11:05:04:570] Timeout during receive.
[11:05:04:570] VIN query failed: Timeout
[11:05:04:570] TX: AT SH 6C 10 F0
[11:05:04:586] Set header response: OK
[11:05:04:586] TX: 20
[11:08:21:407] Setting timeout for ReadProperty, 47 ms.
[11:08:21:407] TX: AT ST 0B
[11:08:21:407] OK
[11:08:21:407] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:423] TX: 3C01
[11:08:21:454] RX: 6C F0 10 7C 01 00 31 47 44 4A 36
[11:08:21:454] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:469] TX: 3C02
[11:08:21:501] RX: 6C F0 10 7C 02 48 31 45 58 32 4A
[11:08:21:501] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:516] TX: 3C03
[11:08:21:579] RX: 6C F0 10 7C 03 39 30 31 33 36 34
[11:08:21:579] VIN: 1GDJ6H1EX2J901364
[11:08:21:579] Setting timeout for ReadProperty, 47 ms.
[11:08:21:579] TX: AT ST 0B
[11:08:21:594] OK
[11:08:21:594] Setting timeout for ReadProperty, 47 ms.
[11:08:21:594] TX: AT ST 0B
[11:08:21:610] OK
[11:08:21:610] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:625] TX: 3C0A
[11:08:21:657] RX: 6C F0 10 7C 0A 00 BA 48 C2
[11:08:21:657] OS ID: 12208322
[11:08:21:657] Setting timeout for ReadProperty, 47 ms.
[11:08:21:657] TX: AT ST 0B
[11:08:21:672] OK
[11:08:21:672] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:688] TX: 3C08
[11:08:21:750] RX: 6C F0 10 7C 08 00 BA 49 7F
[11:08:21:750] Calibration ID: 12208511
[11:08:21:766] Setting timeout for ReadProperty, 47 ms.
[11:08:21:766] TX: AT ST 0B
[11:08:21:766] OK
[11:08:21:766] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:781] TX: 3C04
[11:08:21:813] RX: 6C F0 10 7C 04 00 8F 3A 22
[11:08:21:813] Hardware ID: 9386530
[11:08:21:828] Setting timeout for ReadProperty, 47 ms.
[11:08:21:828] TX: AT ST 0B
[11:08:21:828] OK
[11:08:21:828] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:844] TX: 3C05
[11:08:21:875] RX: 6C F0 10 7C 05 31 45 42 31
[11:08:21:875] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:891] TX: 3C06
[11:08:21:922] RX: 6C F0 10 7C 06 38 5A 38 32
[11:08:21:922] TX: STPX H:6C10F0, R:1, L:2
[11:08:21:937] TX: 3C07
[11:08:21:969] RX: 6C F0 10 7C 07 31 30 38 32
[11:08:21:969] Serial Number: 1EB18Z821082
[11:08:21:984] Setting timeout for ReadProperty, 47 ms.
[11:08:21:984] TX: AT ST 0B
[11:08:21:984] OK
[11:08:21:984] TX: STPX H:6C10F0, R:1, L:2
[11:08:22:000] TX: 3C14
[11:08:22:031] RX: 6C F0 10 7C 14 44 4C 41 43
[11:08:22:031] Broad Cast Code: DLAC
[11:08:22:047] Setting timeout for ReadProperty, 47 ms.
[11:08:22:047] TX: AT ST 0B
[11:08:22:047] OK
[11:08:22:047] TX: STPX H:6C10F0, R:1, L:2
[11:08:22:062] TX: 3CA0
[11:08:22:093] RX: 6C F0 10 7C A0 00
[11:08:22:093] MEC: 0
User avatar
Gampy
Posts: 2330
Joined: Sat Dec 15, 2018 7:38 am

Re: PCM Hammer - new ls1 flash tool

Post by Gampy »

THEFERMANATOR wrote:Running into a BIG issue trying to do a full read on a 0411 PCM. It's loaded with a 12208322 OS for an 02 C6500. It was flashed in with a TECH2 and all went well.
The PCM works fine, can request the VIN and read properties, but as soon as you go to do a full read, it uploads the kernel's, then freezes the PCM to where NOTHING can read it, basically bricks it.
If I remove the plug from it entirely for a few minutes, hook it back up, and it comes back on(turning the switch off does nothing). I'm using a bench cable, so network talk is not in the picture.

Here's the log from it. I'm using PCMHAMMER 007 with an OBDLINK SX cable. I'm currently reading it now with PCMHAMMER 006, and it's reading it.
Try release 8, I believe 7 has issues.
Intelligence is in the details!

It is easier not to learn bad habits, then it is to break them!

If I was here to win a popularity contest, their would be no point, so I wouldn't be here!
User avatar
NSFW
Posts: 679
Joined: Fri Feb 02, 2018 3:13 pm

Re: PCM Hammer - new ls1 flash tool

Post by NSFW »

Gampy wrote:I don't know if it helps, confuses or what but I've looked at the code from 10 of these P01/P59 OS's and the Intel Flash code has been the same in all.


Also, finally got a chance to look at the latest kernel code ...

In flash-amd.c line 59, I suspect this FlashLock(); should be replaced.

Code: Select all

			if (!testWrite)
			{
				*address = 0xF0F0;
				*address = 0xF0F0;
-				FlashLock();
+				SIM_CSOR0 = 0x1060;
			}
And a trivial unused int, in common.c line 182,

Code: Select all

-	int stopUsing = 0;
Thanks for finding these, I just pushed them in a private branch that I'm working in right now.

I'm hoping to get another release out this weekend or early next week that will include these and also be able to read unrecognized operating system (as long as they unlock with the default key algo).
Please don't PM me with technical questions - start a thread instead, and send me a link to it. That way I can answer in public, and help other people who have the same question. Thanks!
Post Reply