Tutorial [Tutorial] How to flash the HWFLY Clone chips

Dean_

Well-Known Member
Member
Joined
Sep 11, 2014
Messages
690
Trophies
0
XP
634
Country
The firmware.bin attached above is vanilla spacecraft + the edits to make it work with their FPGA bitstream. The way they do things is different. They sync up with the FPGA, tie it pin 37? I think. There's not much difference. It's not KazushiMe's mod at all though.
Oh, I see the point. Now we have all the information about the chinese clones except for FPGA thing. And I don't have to use a suspicious chinese firmware. Thank you.
 

leerz

Well-Known Member
Member
Joined
Jan 11, 2015
Messages
648
Trophies
0
Age
34
Location
Makati
Website
leerz25.sitesled.com
XP
1,466
Country
The firmware.bin attached above is vanilla spacecraft + the edits to make it work with their FPGA bitstream. The way they do things is different. They sync up with the FPGA, tie it pin 37? I think. There's not much difference. It's not KazushiMe's mod at all though.
will this ultimately make the hwfly flashable by usb lest even by the sdcard? or any futher updates will need to use an external flasher (rpi) aside from the benefits of getting scv3
 

Mena

Well-Known Member
OP
Member
Joined
Oct 5, 2020
Messages
128
Trophies
0
Age
27
XP
562
Country
United States
will this ultimately make the hwfly flashable by usb lest even by the sdcard? or any futher updates will need to use an external flasher (rpi) aside from the benefits of getting scv3
once the changes on the bitstream in the FPGA are accounted for...yes. You'll be able to just replace the GD32 or flash it. I know so far on the QFN FPGA it's a matter of syncing and there's a magic value they read as an arbitrary lock.

uint32_t fpga_read_magic() { uint8_t buf[5]; buf[0] = 0xEE; gpioa_clear_pin4(); spi0_spi_transfer_buffer(buf, sizeof(buf)); gpioa_set_pin4(); return *(uint32_t *)(buf + 1); }


in main -> pa3_voltage < 1496 && fpga_read_magic() == 0x4D56492E <= "MVI." in ASCII. Whatever that means

typically spacecraft is just pa3_voltage < 1496

in their new firmware I attached on the last page it's 1596 along with the magic value lockout.
 
Last edited by Mena,

free4u

New Member
Newbie
Joined
Jan 22, 2022
Messages
1
Trophies
0
Age
36
XP
34
Country
Korea, South
@Mena
I always turn on the RED LED, but how can I turn on the YELLOW LED?The same results for cable inspection and my other PC.... (Of course, flash is impossible.) Soldering is OK, and booting also fine.
 

Attachments

  • TEST.jpg
    TEST.jpg
    444.8 KB · Views: 38
Last edited by free4u,

Mena

Well-Known Member
OP
Member
Joined
Oct 5, 2020
Messages
128
Trophies
0
Age
27
XP
562
Country
United States
@Mena
I always turn on the RED LED, but how can I turn on the YELLOW LED?The same results for cable inspection and my other PC.... (Of course, flash is impossible.) Soldering is OK, and booting also fine.
Apparently, there are some that do this and need SWD to flash them.
 

urherenow

Well-Known Member
Member
Joined
Mar 8, 2009
Messages
4,159
Trophies
1
Age
46
Location
Japan
XP
2,731
Country
United States
I've figured out the random crashing thanks to a friend. It's the SD card. You need to train it without an SD card inserted.
Umm... wow. I don't have mine yet, but I have the (single page) instructions. It lists on the top: "Required Items", "Recommended Tools", and "Crack Description". The very first thing under "Crack Description" ->

1) Please do not insert microSD card when starting up for the first time

:blink::wacko:

(@Mena the confused & eye-rolling emojis aren't directed at you. They are for all the people who have problems just because they don't RTFM)
 

fragged

Well-Known Member
Member
Joined
Jun 19, 2018
Messages
223
Trophies
0
Age
37
XP
1,010
Country
United States
Umm... wow. I don't have mine yet, but I have the (single page) instructions. It lists on the top: "Required Items", "Recommended Tools", and "Crack Description". The very first thing under "Crack Description" ->

1) Please do not insert microSD card when starting up for the first time

:blink::wacko:

(@Mena the confused & eye-rolling emojis aren't directed at you. They are for all the people who have problems just because they don't RTFM)
They are distributors, not technically proficient in what they are actually selling from everything I've seen.
Anything talked about here is way over their heads sadly.
 

JaRocker

Well-Known Member
Member
Joined
May 3, 2018
Messages
303
Trophies
0
XP
1,132
Country
Jamaica
The Chinese seem to have released an update for the OLED chip with the USB header. I can tell you right now that this update does a couple of things.

1.) It disables debugging completely, if you try and connect to PuTTy you will get an error.
2.) They modified SD Loader so my payload checker will report an unknown payload. I don't know the changes that they've made. It seems like they merged kazushime's update for compatibility into it. Added some text on the bottom right-hand corner. The OLED chip came with 0.2.0 so I wouldn't assume they went back to 0.1.0 for any reason considering all the backlash.

Currently, the state of the RE'ing done on their firmware is:

I have a working build that does a successful glitch, but it crashes sometimes during training. I've gotten it to not crash on my OLED but I had a friend test it and it made their modchip crash. This looks like "infinite glitching" in reality....it's not glitching and the FPGA has hanged/crashed. I need to figure out the differences there before an official open-source release.

TL;DR I need more testers
It’s not flashing is the chip bricked or something. Also can this fw work on the lite chip
 

Attachments

  • 822F8944-0F03-467E-80C2-7A1668607D5A.jpeg
    822F8944-0F03-467E-80C2-7A1668607D5A.jpeg
    1.2 MB · Views: 30
  • 1FDBA767-D383-43A7-9D40-AA1FE5986BBC.jpeg
    1FDBA767-D383-43A7-9D40-AA1FE5986BBC.jpeg
    6.4 MB · Views: 26

james194zt2

Well-Known Member
Newcomer
Joined
Jan 4, 2022
Messages
57
Trophies
0
Age
40
XP
135
Country
United Kingdom
Noob Can’t we just pay someone to make a FPGA from scratch? If not if is because of Legal reason. https://mdpi-res.com/d_attachment/e...46/article_deploy/electronics-07-00246-v2.pdf
It just might be being worked on.... Tearing down these chips as well as working out their inner workings is being done by several people right now.

FPGA is not an easy thing to just reproduce, that and worse still it is also quite dangerous for whoever produces it as they might face the wrath of Nintendo whereas an open source project with multiple possibly anonymous people might fair a little better.
 

JaRocker

Well-Known Member
Member
Joined
May 3, 2018
Messages
303
Trophies
0
XP
1,132
Country
Jamaica
It just might be being worked on.... Tearing down these chips as well as working out their inner workings is being done by several people right now.

FPGA is not an easy thing to just reproduce, that and worse still it is also quite dangerous for whoever produces it as they might face the wrath of Nintendo whereas an open source project with multiple possibly anonymous people might fair a little better.
Ok thanks got it the. Just thought that if the software was separate from the chip that it wouldn’t be a problem, example of Xbox 360 Mod chips. They come blank and you flash them after you get them
 

FR0ZN

Well-Known Member
Member
Joined
Nov 2, 2013
Messages
1,228
Trophies
0
Age
35
XP
2,621
Country
United States
The Chinese seem to have released an update for the OLED chip with the USB header. I can tell you right now that this update does a couple of things.

1.) It disables debugging completely, if you try and connect to PuTTy you will get an error.
2.) They modified SD Loader so my payload checker will report an unknown payload. I don't know the changes that they've made. It seems like they merged kazushime's update for compatibility into it. Added some text on the bottom right-hand corner. The OLED chip came with 0.2.0 so I wouldn't assume they went back to 0.1.0 for any reason considering all the backlash.

Currently, the state of the RE'ing done on their firmware is:

I have a working build that does a successful glitch, but it crashes sometimes during training. I've gotten it to not crash on my OLED but I had a friend test it and it made their modchip crash. This looks like "infinite glitching" in reality....it's not glitching and the FPGA has hanged/crashed. I need to figure out the differences there before an official open-source release.

TL;DR I need more testers

Where do they release the FW updates for their modchips?
 

Mena

Well-Known Member
OP
Member
Joined
Oct 5, 2020
Messages
128
Trophies
0
Age
27
XP
562
Country
United States

0x3000027E

Well-Known Member
Member
Joined
Mar 14, 2018
Messages
341
Trophies
0
Age
42
XP
1,326
Country
United States
I don't know, this was given to me by a friend.

to be clear here: this has issues. "infinite glitching" still happens
'firmware_spacecraft_mod.bin'....Is this the most recent/updated firmware? I just want to check if its what I should flash to SX Lite
 

lufeig

Well-Known Member
Member
Joined
Oct 22, 2009
Messages
282
Trophies
0
Age
43
Location
São Paulo, Brazil
XP
767
Country
Brazil
your friend that goes by the name of Sthetix?

just like him calling a “friend” but never mentioning Mena or Pheeeeenom. 😉

anyway, thank you very much for the contributions of both of you.
 
  • Like
Reactions: doom95

mocthulang

Member
Newcomer
Joined
Jan 21, 2022
Messages
13
Trophies
0
Age
40
XP
77
Country
Vietnam
help me. i messed up my modchip when flashing without dig deep. I need full dumb file of HWFLY lite like below image. if possible someone can help me. thank you
 

Attachments

  • D9595CE3-E659-402D-AD6C-4F7D5B25403E.png
    D9595CE3-E659-402D-AD6C-4F7D5B25403E.png
    111.9 KB · Views: 31
General chit-chat
Help Users
    Z @ ZombieB: Good evening, fellows