Hacking Hardware Picofly - a HWFLY switch modchip

[Adran_Marit]

So bridge 3/4 thanks, I'll dig out my lite when I get home and have a play.

Did you just use the fw from this thread?

well... I managed to install my flex for cpu.... I failed my rst point however... RIP

 

[vittorio]

https://ofrak.com/ I wonder if this can help us in the reverse of uf2

 

[Mansi]

After the first leaks, it became very interesting to observe the topic.
The topic began to develop very actively. Because there are files to work with)

 

[Tafty]

well... I managed to install my flex for cpu.... I failed my rst point however... RIP

what wire are you using, if kynar is too hard for you switch to magnet wire, its much smaller so really needs a microscope to work with....or at least really really good eyes. just as long as you dont bridge it with the pad directly underneath it you will be ok

 

[vittorio]

I opened the two uf2 with ghidra and probably the one that works is an old version

 

[Piorjade]

I opened the two uf2 with ghidra and probably the one that works is an old version

Yep, old and unkown BCTs. Btw, how do you open it with ghidra? I.e. what CPU instruction set do you choose? ARM Cortex 32bit Big Endian?

 

[vittorio]

I used arm v4 little but I'm not very practical with disassembly

 

[Adran_Marit]

what wire are you using, if kynar is too hard for you switch to magnet wire, its much smaller so really needs a microscope to work with....or at least really really good eyes. just as long as you dont bridge it with the pad directly underneath it you will be ok

Even if I ripped the pad?

 

[szubiennica]

Even if I ripped the pad?

fixing ripped tracks and pads is my passion

 

[Tafty]

Even if I ripped the pad?

If you ripped the pad out its going to be abit more work but still fixable

 

[Adran_Marit]

If you ripped the pad out its going to be abit more work but still fixable

RIP. I might have to try again at another point... going to get some enamel wire if I can tomorrow, but I'm not hopeful

 

[Piorjade]

Probably better to solder some 40AWG enamel magnet wire to the caps and the fets if you don't have super good eyes, steady hands, and/or a microscope.

What thickness do you recommend? 0.1mm, 0.5mm?

 

[Tafty]

What thickness do you recommend? 0.1mm, 0.5mm?

Either is fine 0.5 is easier to work with though as it's abit thicker

 

[renoob]

Yep, old and unkown BCTs. Btw, how do you open it with ghidra? I.e. what CPU instruction set do you choose? ARM Cortex 32bit Big Endian?

You should use bin with hidra
Cortex Little endian, set base address to 10000000 (when you click options) this is very important.
You can also use RP2040.svd file with SVD loader plugin to get nicer output (it shows named peripherals addresses etc etc) .

 

[vittorio]

You should use bin with hidra
Cortex Little endian, set base address to 10000000 (when you click options) this is very important.
You can also use RP2040.svd file with SVD loader plugin to get nicer output (it shows named peripherals addresses etc etc) .

Thanks

 

[Piorjade]

You should use bin with hidra
Cortex Little endian, set base address to 10000000 (when you click options) this is very important.
You can also use RP2040.svd file with SVD loader plugin to get nicer output (it shows named peripherals addresses etc etc) .

Tried to load RP2040.svd, but it fails with an error lol

SVD-Loader.py> Running...
Loading SVD file...
    Done!
Generating memory regions...
    Done!
Generating peripherals...
    XIP_CTRL
Traceback (most recent call last):
  File "[MY FOLDER]/SVD-Loader-Ghidra/SVD-Loader.py", line 137, in <module>
    length = calculate_peripheral_size(peripheral, default_register_size)
  File "[MY FOLDER]/SVD-Loader-Ghidra/SVD-Loader.py", line 55, in calculate_peripheral_size
    size = max(size, register.address_offset + register_size/8)
TypeError: unsupported operand type(s) for /: 'NoneType' and 'int'
SVD-Loader.py> Finished!

 

[renoob]

It needs different SVD loader which support multiple addresses check PM

 

[szubiennica]

does anyone have a diagram of soldering points for Hac-001 V2 (mariko)

 

[binkinator]

does anyone have a diagram of soldering points for Hac-001 V2 (mariko)

Do you mean these?

https://github.com/sthetix/DIAGRAM/blob/main/OLED-on-V2.jpg

https://github.com/sthetix/DIAGRAM/blob/main/OLED-on-V2-Diagram-Version-2.jpg

 

[szubiennica]

Do you mean these?

https://github.com/sthetix/DIAGRAM/blob/main/OLED-on-V2.jpg

https://github.com/sthetix/DIAGRAM/blob/main/OLED-on-V2-Diagram-Version-2.jpg

i mean for core v2, I mean its time to solder rp to v2 standard switch version