@wgwoods Are you able to dump the bootrom at the memory region [0x00400000:0x00401fff] with your modified firmware? I am interested in the RE effort to eventually write a more generic (and cross-platform) ISP programmer as I have recently done for Holtek HT32s. I am aware of the file dump/BBD8-bootrom.flash, but the filesize is greater than expected and I am not sure if that is what I am looking for.
Unfortunately, I don't think a vendor DFU tool was ever publicly released that actually uses ISP protocol in the bootrom, so there are no packet dumps to analyze and I think this is the only way to proceed without direct vendor support.
Tasks:
@wgwoods Are you able to dump the bootrom at the memory region [0x00400000:0x00401fff] with your modified firmware? I am interested in the RE effort to eventually write a more generic (and cross-platform) ISP programmer as I have recently done for Holtek HT32s. I am aware of the file
dump/BBD8-bootrom.flash, but the filesize is greater than expected and I am not sure if that is what I am looking for.Unfortunately, I don't think a vendor DFU tool was ever publicly released that actually uses ISP protocol in the bootrom, so there are no packet dumps to analyze and I think this is the only way to proceed without direct vendor support.
Tasks: