Recent content by Rozetkin

  1. Rozetkin

    Hacking Hardware Picofly - a HWFLY switch modchip

    Good luck! I'm willing to help with this. I also found the crc8 initialization, and that scares me. In this firmware it is 256 bytes at address 0x200217B0. This table is definitely used for decryption, but frankly I'm too lazy to figure out how exactly it decrypts payload. I also really need...
  2. Rozetkin

    Hacking Hardware Picofly - a HWFLY switch modchip

    Or, maybe, there is a another check in firmware. I also recently reversed and patched this firmware (although I just rewrote function 0x1002608 instead of jmping the written function further). It seems to me that the id is the primary decryption of both the payload and further code. I could not...
See more