resmed_flash.py

[m-kozlowski]

UART-only flash tool for ResMed AirSense 10.
Enters bootloader via RES + BID, erases and writes flash blocks (CCX/CDX/CMX/BLX), with auto baud negotiation.
Supports full 1MB image or individual block flashing, CRC16 validation with optional fix, and auto-detection by file size.

[m-kozlowski]

Hit some issues today with switching to bootloader (timing?). need to investigate...

[m-kozlowski]

setting #BLL = 0001 triggers a fast restart without reinitializing peripherals.
This minor change allowed me to communicate with the bootloader correctly on every attempt.
The only exception is the value BKP6R = 0x1B183CA7, which forces the bootloader to be skipped and transfers execution to the code in the CDX block (0x080fc1ac — init_peripherals_and_os).

[m-kozlowski]

Ahh.. there's one very important caveat:
current patch_tamper implementation forces bootloader to skip immediately to app code without even attemptin uart communication, so the patcher will not work for airbreak users running current version.
(Though it will work on vanilla firmware and airbreak with fixed CRC and tamper patch disabled.)

I will try to rework patch_tamper later, in separate PR