Flasher version check fail

[rakenrowl7]

Hello!

I'm running k5prog under cygwin and successfully read eeprom data with radio in normal mode

$ ./k5prog -r -v -p /dev/com3
Quansheng UV-K5 EEPROM programmer v0.5 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

k5_prepare: try 0
******  Connected to firmware version: [2.01.31]
Sucessfuly read eeprom

However, when reading flasher/bootloader version, the program fails

$ ./k5prog -r -D -Y -vvv -p /dev/com3
Quansheng UV-K5 EEPROM programmer v0.5 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

"I know what i'm doing" value set to 1
wait_flash_message try 9999
RXRXRX:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
magic:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
RXRXRX:

0x000018 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a 24 44 16 81   .i../..B/f..$D..
0x000010: 86 6c 9e e6 ff ff dc ba                           .l......
bad crc 0x6ed1 (should be 0x7f14)
********  k5 command hexdump [obf_len:28 clear_len:22 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000016 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00 d1 6e                                 .....n
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
wait_flash_message: got unexpected command length 20
wait_flash_message try 9998

I'm using a generic ch340 'baofeng' serial cable, cygwin under windows 11. I can confirm the radio and cable works with official QS updater.

I suspect that this issue prevents flashing firmware through k5prog and k5prog-win. https://github.com/OneOfEleven/k5prog-win/issues/4

[sq5bpf]

Might be a timeout issue on some operating systems and some usb/serial drivers which have more latency (buffer more etc)

Please modify all occurrences of k5_receive(fd,10000); change to k5_receive(fd,100000);
and line 697:
l=5; change to l=50;
and see if it works (and post the dump)

Could you also try running it on linux?

[OneOfEleven]

Their radios bootloader is sending a different packet than normal, so k5prog see's that as an invalid packet to move forward with the flash upload.

I'd like to know what bootloader version is in the radio.

[rakenrowl7]

Please modify all occurrences of k5_receive(fd,10000); change to k5_receive(fd,100000); and line 697: l=5; change to l=50; and see if it works (and post the dump)

$ ./k5prog -r -D -Y -vvv -p /dev/com3
Quansheng UV-K5 EEPROM programmer v0.5 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

"I know what i'm doing" value set to 1
wait_flash_message try 9999
RXRXRX:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
magic:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
RXRXRX:

0x000018 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a 24 44 16 81   .i../..B/f..$D..
0x000010: 86 6c 9e e6 ff ff dc ba                           .l......
bad crc 0x6ed1 (should be 0x7f14)
********  k5 command hexdump [obf_len:28 clear_len:22 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000016 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00 d1 6e                                 .....n
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
wait_flash_message: got unexpected command length 20
wait_flash_message try 9998

Could you also try running it on linux?

same issue it seems

[sq5bpf]

EDIT: don't use this one, use the one in the next post

Please try this version and see what debug log it produces.
gcc k5prog_test.c -o k5prog_test -DSTRANGE_FIRMWARE

also if it doesn't work, try changing 0x9 the byte in line 664 to 0x8 and 0xa and see if that helps

test.zip

[sq5bpf]

No, try this one and see if it works with your radio
gcc k5prog_test.c -o k5prog_test -DSTRANGE_FIRMWARE

test2.zip

[rakenrowl7]

hello, sorry for the slow reply

compiling and running the test2.zip content, im getting the same issue

:~/k5prog# ./k5prog_test -r -D -Y -vvv
Quansheng UV-K5 EEPROM programmer v0.5 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

"I know what i'm doing" value set to 1
wait_flash_message try 9999
RXRXRX:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....               
magic:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....               
RXRXRX:

0x000018 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a 24 44 16 81   .i../..B/f..$D..   
0x000010: 86 6c 9e e6 ff ff dc ba                           .l......           
bad crc 0x6ed1 (should be 0x7f14)
********  k5 command hexdump [obf_len:28 clear_len:22 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..   
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......       
## cleartext ##

0x000016 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..   
0x000010: 90 00 8a 00 d1 6e                                 .....n             
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..   
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......       
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..   
0x000010: 90 00 8a 00                                       ....               
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..   
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......       
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..   
0x000010: 90 00 8a 00                                       ....               
*****************
wait_flash_message: got unexpected command length 20
wait_flash_message try 9998
^C

[sq5bpf]

Please check out the latest version of k5prog and see if it works for you with this radio

[rakenrowl7]

apologies for late response. a few days ago, i was testing the update with the previous commands, i was still getting the got unexpected command length 20 error with v0.8. i'll test v0.9 later at home.

[rakenrowl7]

$ ./k5prog -r -D -Y -vvv
Quansheng UV-K5 EEPROM programmer v0.9 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

"I know what i'm doing" value set to 1
wait_flash_message try 9999
RXRXRX:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
magic:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
RXRXRX:

0x000018 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a 24 44 16 81   .i../..B/f..$D..
0x000010: 86 6c 9e e6 ff ff dc ba                           .l......
bad crc 0x6ed1 (should be 0x7f14)
********  k5 command hexdump [obf_len:28 clear_len:22 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000016 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00 d1 6e                                 .....n
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
wait_flash_message: got unexpected packet contents
wait_flash_message try 9998
^C

[rakenrowl7]

i have made some alterations to the c code, and now it results to this:

$ ./k5prog -r -D -Y -vvv
Quansheng UV-K5 EEPROM programmer v0.9 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

"I know what i'm doing" value set to 1
wait_flash_message try 9999
RXRXRX:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
magic:

0x000004 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00                                       ....
RXRXRX:

0x000018 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a 24 44 16 81   .i../..B/f..$D..
0x000010: 86 6c 9e e6 ff ff dc ba                           .l......
bad crc 0x6ed1 (should be 0x7f14)
********  k5 command hexdump [obf_len:28 clear_len:22 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000016 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00 d1 6e                                 .....n
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
Flasher version is: []

with the same modification was able to successfully flash a custom firmware and boot successfully:

$ ./k5prog -b firmware.bin -YYYYYY -F
Quansheng UV-K5 EEPROM programmer v0.9 (c) 2023 Jacek Lipkowski <sq5bpf@lipkowski.org>

"I know what i'm doing" value set to 6
Writing blocks from address 0x0 until 0xf000, firmware size is 0xef20
********  k5 command hexdump [obf_len:28 clear_len:20 crc_ok:0 **********
## obfuscated ##

0x00001c |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: ab cd 14 00 0e 69 14 e6 2f 93 0f 42 2f 66 85 0a   .....i../..B/f..
0x000010: 24 44 16 81 86 6c 9e e6 ff ff dc ba               $D...l......
## cleartext ##

0x000014 |0 |1 |2 |3 |4 |5 |6 |7 |8 |9 |a |b |c |d |e |f |
---------+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+------------
0x000000: 18 05 00 00 01 02 02 02 0e 53 50 4a 37 47 ff 01   .........SPJ7G..
0x000010: 90 00 8a 00                                       ....
*****************
Flasher version is: []
*** FLASH at 0x0000 length 0x0100  result=1
*** FLASH at 0x0100 length 0x0100  result=1
*** FLASH at 0x0200 length 0x0100  result=1
*** FLASH at 0x0300 length 0x0100  result=1
*** FLASH at 0x0400 length 0x0100  result=1
*** FLASH at 0x0500 length 0x0100  result=1
...
*** FLASH at 0xe900 length 0x0100  result=1
*** FLASH at 0xea00 length 0x0100  result=1
*** FLASH at 0xeb00 length 0x0100  result=1
*** FLASH at 0xec00 length 0x0100  result=1
*** FLASH at 0xed00 length 0x0100  result=1
*** FLASH at 0xee00 length 0x0100  result=1
*** FLASH at 0xef00 length 0x0020  result=1

prior to this modification, when attempting to flash firmware with v0.9, a similar got unexpected packet contents prints out

[sq5bpf]

thanks, seems the "i'm in flashing mode" packet detection has to be redone. also see:
#6 (few end comments)

i will try to look what the new vendor flasher looks for using k5emulator. won't use your patch right now because i don't want to break support for the majority of radios (which do work), but maybe i will use it or something similar later.

interesting thing about your debug output: the packet is somethimes 20 bytes and sometimes 22 bytes

[sq5bpf]

please see if this version works for you