PCM Hammer P01 and P59 flash tool v015

[Vampyre]

just did a quick test with other software when stored to ram vin is line 4000HEX after power down its written to 6000Hex

[antus]

Yep thats how the factory os updates the param block. It writes to the other block on key off when it needs to save to persist changes in ram (where the vin change happens first at runtime). P59 though i think always uses 6000.

[Vampyre]

My other flasher kernel is larger than hammers so not sure whats up, maybe I should see if it will still work on my p01, maybe I deleted some code that was needed to load it accidentally

I noticed in the debug the length attribute is massive compared to the other debugs ive seen would that cause an issue

[antus]

Quite possibly... you could test by hard coding the real length. Maybe we'll need to update the app to send the real length in the first upload request.

[Vampyre]

Ok so where would i hard code that, I looked around and it look like it was formulated.

[antus]

Here https://github.com/LegacyNsfw/PcmHacks/ ... el.cs#L293

[Vampyre]

pretty sure its the payload size screwing stuff up for some reason it alters drastically from request 34 to mode 36 send from 6D 10 F0 36 00 0A A0 to 6D 10 F0 36 00 02 A0
im my log of sucessfully loading kernal from other program the mode 36 is 6D 10 F0 36 80 0A A0 FF 91 5E

also can I hard code the 80 00 address to 91 5E to test a theory

TX: 6C 10 F0 34 00 0A A0 FF 80 00
[04:16:49:540] RX: 6C F0 10 74 00 42
[04:16:49:546] Found response, Success
[04:16:49:552] Going to load a 2720 byte kernel to 0xFF8000
[04:16:49:557] Sending end block payload with offset 0x800, start address 0xFF8800, length 0x2A0.
[04:16:49:566] Sending 'test device present' notification.
[04:16:49:572] TX: 8C FE F0 3F
[04:16:49:580] TX: 6D 10 F0 36 00 02 A0 FF 88 00

[Vampyre]

loaded just fine on one of my p59

p04 gives strange response code RX: 6C F0 10 7F 36 00 02 A0 FF 88 12
Im guessing since 00 02 A0 is involved its something to do with file or payload
im using a kernel.bin identical size to the one used by other program to test addressing and payload size
Anyway to remove the remainder payload portion so It loads it all at once


WritePayload: Upload request failed.
[04:52:15:906] TX: 6D 10 F0 36 00 02 A0 FF 88 00 9B 8B 60 06 10 39 00 FF 9B 8C 4E B9 00 FF 97 8E 20 1F 4E 5E 4E 75 4E 56 FF FE 42 00 42 38 9C 32 1D 78 E8 00 FF FE 4E B9 00 FF 9A D8 4E B9 00 FF 9A D8 4E B9 00 FF 9A D8 16 2E FF FE EA 0B 67 2E 4E B9 00 FF 9B 48 3D 40 FF FE 70 01 16 2E FF FE EA 0B 0C 03 00 07 67 0C 0C 03 00 05 67 06 0C 03 00 06 66 0A 11 C0 9C 32 10 3C 00 FF 60 08 4A 00 67 AE 10 2E FF FF 4E 5E 4E 75 48 E7 E0 00 42 02 4E B9 00 FF 9A D8 72 01 30 3C 03 E8 4E B9 00 FF 9B 08 4E B9 00 FF 9A D8 52 41 0C 41 00 0A 63 E8 52 02 08 38 00 05 FA 19 66 06 0C 02 00 FE 63 D0 08 38 00 05 FA 19 66 0C 10 39 00 FF 9B 8F 4E B9 00 FF 97 8E 4C DF 00 07 4E 75 4E 56 FF FE 4A 38 9C 0C 66 1C 47 F8 9C 24 45 F8 9C 00 76 06 34 DB 51 CB FF FC 4E B9 00 FF 98 1C 42 38 9C 0C 60 22 1D 78 E8 00 FF FE 08 2E 00 03 FF FE 67 14 31 F9 00 FF 9B A2 E8 00 4A 38 9C 0C 67 06 4E B9 00 FF 98 1C 4E 5E 4E 75 11 FC 00 6C 9C 24 11 FC 00 F0 9C 25 11 FC 00 10 9C 26 11 FC 00 76 9C 27 42 38 9C 28 11 C0 9C 29 11 FC 00 06 9C 30 4E 75 4E 56 FF FE 2F 00 4E B9 00 FF 9B 48 3D 40 FF FE 10 AE FF FE 12 AE FF FF 20 1F 4E 5E 4E 75 2F 00 31 F9 00 FF 9B A4 E8 00 70 01 4E B9 00 FF 9B 3A 52 00 0C 00 00 05 63 F2 20 1F 4E 75 11 FC 00 55 FA 27 11 FC 00 AA FA 27 08 B8 00 07 C0 06 08 F8 00 07 C0 06 4E 75 40 E7 00 7C 07 00 4E B9 00 FF 9B 26 4E B9 00 FF 91 84 46 DF 4E 75 0C 40 00 02 63 0C 53 40 4E 71 4E 71 4E 71 53 40 66 F6 4E 75 31 F9 00 FF 9B 9E E8 00 4E 75 42 78 9C 0E 42 38 9C 0C 4E 75 31 F9 00 FF 9B A0 E8 00 4E 75 4E B9 00 FF 9A D8 4E 75 20 17 4E 72 27 00 30 38 E8 00 4E 75 10 10 20 20 40 40 50 50 70 70 90 90 B0 B0 D0 D0 FF FF 00 00 00 00 00 00 40 00 00 00 60 00 00 00 80 00 00 02 00 00 00 04 00 00 00 06 00 00 00 04 00 00 00 08 00 00 22 75 44 71 00 89 89 84 85 85 88 87 73 86 00 06 00 06 68 20 70 20 10 20 18 00 18 01 40 00 E0 00 03 00 00 FF A0 00 00 FF 91 5E 00 FF 9A F2 00 00 0C 14 1C FF 4E 56 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 25 3A
[04:52:16:051] RX: 6C F0 10 7F 36 00 02 A0 FF 88 12
[04:52:16:056] Ignoring message: UnexpectedResponse

[antus]

Yeah normally its mode +40 for an error then 7f also meaning error, here its saying 7f error on your mode 36 00 of 2A0 bytes to FF8812. The problem is in the previous request for upload which is probably denied first.

[Vampyre]

I'll check the first fail msg and see what it says, other program sends 36 80 not 36 00. Wonder if that has anything to do with it