PCM Hammer P12 development

[kur4o]

Finally got a grasp of slave flashing.

code at ffff6000 is run by slave.

Main configures the slave which routine to use, and than waits some loop so slave can finish his job.

antus found the key bytes for configuration, and now it makes sense.
d0 c0 are used for erase
ea d1 for flashing

I think slave have some boot mode and runs some loop and is configure by some shared memory by Main.

How it is actually done is beyound common sense yet. Slave code lays at 40000 and is 256kb long. Actuall mapping is still in the matrix.

[Gampy]

kur4o,

What starting RAM address ??
How many bytes ??

It's pretty easy to be done, just takes an starting address and byte count then anyone with a P12 and VPW Explorer can do it ...

There are a couple of kinks in it, as delivered ... VPW Explorer is pretty raw in development!
1. Sometimes you have to hit Send Message twice.
2. It always returns a Buffer Empty ... Ignore it.

However, it works ...

Open VPW Explorer
Select: Select Device, setup device accordingly.

In the Send Message text box, enter the following adjusted to desires ...

6D 10 F0 35 01 00 40 FF 20 00

This example should return 64 bytes starting at address FF2000 ... On the P12 as we currently know it.
A person can trial and error out upper and lower boundaries if they wanted.

Mode 35 explanation breakdown,

Mode35-MessageBreakdown.png (6.38 KiB) Viewed 2139 times

[antus]

try FF0000 -> FFFFFF

There is kernel code loaded to FF2000, FF4000 and FF6000 with some gaps in between. pcmhammer wont load that code, some of it is registers, but being able to see that whole range might show something.

[Gampy]

I suspect that is doable, it'll have to be done in bite size chunks ... Size depending on VCI used.

Probably 1024 at a time ...

[darkman5001]

Okay I spent the night tonight installing Windows XP and TIS2000 on a Toughbook and tomorrow morning I plan to try to reflash the PCM and record it with a logger. If all goes well, the PCM will be successfully flashed and back to normal. Keep your fingers crossed.

[Gampy]

Does TIS2000 require XP, or just a 32bit Windows Os ??

[darkman5001]

Does TIS2000 require XP, or just a 32bit Windows Os ??

I have tried to install on windows 7 but have experienced big errors. I recently came across an article talking about it and here is one import etail that I didn't know before.

"64-bit versions of Windows contain backwards compatibility with 32-bit applications, but not with 16-bit applications. And 32-bit versions of Windows are backwards compatible with 16-bit applications. The problem with installing TIS2000 on newer machines is that, while the TIS2000 program itself is 32-bit, the installer and drivers are 16-bit. Therefore, you are able to install TIS2000 natively on ANY 32-bit Windows system. This will just work, without having to run anything in compatibility mode."

TIS2000 works perfectly fine in Windows XP.

[darkman5001]

I have great news guys. Our test PCM is back from the dead.

Also attached is the logs of the successful flash. Hopefully everything we need to see is here.

[Gampy]

Awesome ...

Amazing patience waiting to the next day to do it, after setting it up the previous evening ... There is absolutely NO possible way I could do that, it would drive me insane, I would get NO sleep!

Anyways,
It might be wise to use PCMHammer to do a full read again ... It may have updated it, it would be nice to compare the two reads.

Use kernel: test-kernel-824.9.1.11-P12-FF2000.bin.txt -> Kernel-P12.bin
Do a Read Full PCM ...

Good job.

[Cincinnatus]

When and what took down the PCM? Also wondering is there an older version of tech2win that will use the pcmcia card files for flashing?