Hacking Hardware Picofly - a HWFLY switch modchip

danielglzt88

Member
Newcomer
Joined
Jan 19, 2021
Messages
20
Trophies
0
Age
35
XP
239
Country
Cuba
Latest firmware here

ChangeLog:

v2.0 + Active MMC communication
v2.1 + Toshiba support
v2.2 + Fix Toshiba boot fail
v2.3 + SanDisk support
v2.4 + Faster Toshiba boot
v2.5 + fix OFW boot

must be RED after USB write. if you see green, set "RGB mode" jumper

WHITE = eMMC write
BLUE = glitch
PURPLE = eMMC boot failure, check CMD / CLK
YELLOW = eMMC write failure, check D0 / unsupported eMMC
CYAN = no reaction to glitch, check mosfet wire
GREEN = success



Q: What supported?
A: Erista (v1), Mariko (v2, Lite, OLED)

Q: eMMC support?
A: Tested on Hynix, Samsung, Toshiba, SanDisk

Q: GREEN, but instant reset
A: Very sensitive NS. add 20K-30K to RST

Q: Need resistors?
A: SysNAND will not work. Line interference. Only emuMMC.

Q: Chip reset? Learning?
A: Short pin 0 to either 1 or GND. Reset internal statistics.

Q: open source?
A: no

Q: why you made it?
A: to prove it possible!

Q: run Atmosphere?
A: no piracy

By using the Atmosphere unlock tool you agree to use it for homebrew only.

Way 1 (USB): flash the unlock.uf2 into chip by USB
Way 2 (no USB): run picofly_tb from Hekate, need unlock.bin on the SD card
It's a great job, congratulations. just one question, will you have a variant for the Rasperry Pi Pico in the future? Thanks anyway, my repeated congratulations.
 

Dee87

Well-Known Member
Member
Joined
Mar 19, 2023
Messages
1,139
Trophies
1
XP
1,588
Country
Germany
IMG_20230320_130608.jpg


instead of soldering everything to the emmc chip itself i decided to solder it to the emmc connector on the board
 

rehius

Well-Known Member
Member
Joined
Feb 6, 2023
Messages
377
Trophies
1
Age
34
XP
1,790
Country
Canada
View attachment 360114View attachment 360115


just playing around with some donor boards what solution should i use ?
Post automatically merged:


yeah thats true bulk is the way to go....
still gonna try and create a pcb and then ill check on it again and see how much bulk is and maybe just buy bulk and offer them for picofly we will see

never used pcbway only jlcpcb and never had issues with them
the second one looks cleaner. don't forget to apply green mask on the square pad right under the wire, it's GND
Post automatically merged:

So, it's pikofly or picofly?
picofly, no idea where the OP got 'k'
Post automatically merged:

View attachment 360216

instead of soldering everything to the emmc chip itself i decided to solder it to the emmc connector on the board
yes, I used the same way. can replace memory much faster
Post automatically merged:

It's a great job, congratulations. just one question, will you have a variant for the Rasperry Pi Pico in the future? Thanks anyway, my repeated congratulations.
no such plans, it's too large to fit
 

binkinator

Garfield’s Fitness Coach
Member
GBAtemp Patron
Joined
Mar 29, 2021
Messages
6,511
Trophies
2
XP
6,156
Country
United States
The 'Atmosphere Unlock' part has been added to the main post
to prevent possible partial / badly unlocked firmwares causing damage to a console.

My congratulations with the security bypass, flynnsmt4!
O
M
G
!!!!

I don’t know if I’m ludicrous or ecstatic!
I’m ludicrous! No, I’m ecstatic! No, wait, I’m ludicrous!
Wow man! Just wow!
@rehius @flynnsmt4 @Everybody

1679315815587.jpeg

Post automatically merged:

@rehius

Well done friend! Very well done! I guess this means my attempt is no longer worthwhile.

Don’t fret though! I plan to continue simply for the knowledge. Will you still be able to give help?
I’m not telling my wife about this so she will still get me the Logic Analyzer! I’m still in for the knowledge!


It’s official! I’ve changed my vote!

6BC92D23-C857-4DDF-8E13-B9EB789C1EEB.jpeg
 
Last edited by binkinator,

Assidefok

Member
Newcomer
Joined
Mar 20, 2023
Messages
8
Trophies
0
XP
29
Country
Spain
The 'Atmosphere Unlock' part has been added to the
to prevent possible partial / badly unlocked firmwares causing damage to a console.

My congratulations with the security bypass, flynnsmt4
The 'Atmosphere Unlock' part has been added to the
to prevent possible partial / badly unlocked firmwares causing damage to a console.

My congratulations with the security bypass, flynnsmt4!
You rock!! 🎉
 
  • Like
Reactions: impeeza

Dee87

Well-Known Member
Member
Joined
Mar 19, 2023
Messages
1,139
Trophies
1
XP
1,588
Country
Germany
O
M
G
!!!!

I don’t know if I’m ludicrous or ecstatic!
I’m ludicrous! No, I’m ecstatic! No, wait, I’m ludicrous!
Wow man! Just wow!
@rehius @flynnsmt4 @Everybody

View attachment 360219
Post automatically merged:


I’m not telling my wife about this so she will still get me the Logic Analyzer! I’m still in for the knowledge!
Wow he replied I really thought he would get arrested for running naked through the streets while screaming: he released it he did it :rofl2::rofl2::rofl2:
 
  • Haha
Reactions: impeeza

binkinator

Garfield’s Fitness Coach
Member
GBAtemp Patron
Joined
Mar 29, 2021
Messages
6,511
Trophies
2
XP
6,156
Country
United States
Wow he replied I really thought he would get arrested for running naked through the streets while screaming: he released it he did it :rofl2::rofl2::rofl2:
The day is young my friend! I’m naked. running around living room. Hard to type! Much excite!
 

Assidefok

Member
Newcomer
Joined
Mar 20, 2023
Messages
8
Trophies
0
XP
29
Country
Spain
So, of we use flex for CPU, are resistors still need? For example, if we would like to install this in OLED model, with flex should be easier right? And what about Emmc point, are there alternatives?
 

binkinator

Garfield’s Fitness Coach
Member
GBAtemp Patron
Joined
Mar 29, 2021
Messages
6,511
Trophies
2
XP
6,156
Country
United States
So, of we use flex for CPU, are resistors still need? For example, if we would like to install this in OLED model, with flex should be easier right? And what about Emmc point, are there alternatives?
Yes. Resistors are still needed even w/ flex. Those don’t go to the flex. They go to the board. See @sthetix diagrams on GitHub for all possible points for your board.
 
  • Haha
Reactions: impeeza

marhalloweenvt

Well-Known Member
Member
Joined
Oct 2, 2014
Messages
235
Trophies
0
Age
29
XP
925
Country
Is there any design of hwfly flex cable on the Internet? I would like to re-implement with easier-to-get method in my country than waiting for nearly 2 month from aliexpress.
 

zecoxao

Well-Known Member
Member
Joined
Dec 25, 2013
Messages
379
Trophies
1
Age
33
XP
1,703
Country
Latest firmware here

ChangeLog:

v2.0 + Active MMC communication
v2.1 + Toshiba support
v2.2 + Fix Toshiba boot fail
v2.3 + SanDisk support
v2.4 + Faster Toshiba boot
v2.5 + fix OFW boot

must be RED after USB write. if you see green, set "RGB mode" jumper

WHITE = eMMC write
BLUE = glitch
PURPLE = eMMC boot failure, check CMD / CLK
YELLOW = eMMC write failure, check D0 / unsupported eMMC
CYAN = no reaction to glitch, check mosfet wire
GREEN = success



Q: What supported?
A: Erista (v1), Mariko (v2, Lite, OLED)

Q: eMMC support?
A: Tested on Hynix, Samsung, Toshiba, SanDisk

Q: GREEN, but instant reset
A: Very sensitive NS. add 20K-30K to RST

Q: Need resistors?
A: SysNAND will not work. Line interference. Only emuMMC.

Q: Chip reset? Learning?
A: Short pin 0 to either 1 or GND. Reset internal statistics.

Q: open source?
A: no

Q: why you made it?
A: to prove it possible!

Q: run Atmosphere?
A: no piracy

By using the Atmosphere unlock tool you agree to use it for homebrew only.

Way 1 (USB): flash the unlock.uf2 into chip by USB
Way 2 (no USB): run picofly_tb from Hekate, need unlock.bin on the SD card
so it's not fake? sadge
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • BigOnYa @ BigOnYa:
    But can it completely remove RealPlayer? Lol jk
    +3
  • Psionic Roshambo @ Psionic Roshambo:
    I remember at one point it being pretty much labeled as malware lol
  • Psionic Roshambo @ Psionic Roshambo:
    I think my favorite one was that dancing purple gorilla... I uninstalled that thing from sooo many machine people would be like "Why is my computer so slow?" lol because this thing is using like 30% of your system resources.....
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    This one lady... her son kept installing Kazaa... OK no problem the issue is he would download DBZ movies and they where amazing usually like 2-8KB in size lol can't remember how many times I had to format and reinstall windows over his stupidity. I even explained to him about file sizes multiple times...
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    yeah Bonzi buddy was malware sort of... It was borderline lol
  • Psionic Roshambo @ Psionic Roshambo:
    At minimum it was nothing anyone should have ever installed lol
    +1
  • SylverReZ @ SylverReZ:
    @BigOnYa, RealPlayer is spyware too.
    +2
  • SylverReZ @ SylverReZ:
    @Psionic Roshambo, Yeah, BonziBuddy was both spyware and ad-ware. It collected children's personal information without consent as well as display fake Windows popups.
    +1
  • Xdqwerty @ Xdqwerty:
    @SylverReZ, atleast bonzi got discontinued
    +2
  • SylverReZ @ SylverReZ:
    @Xdqwerty, The people who created Bonzi now owns a company called 2KDirect; an advertising firm. https://www.ipromote.com/
    +1
  • Xdqwerty @ Xdqwerty:
    @SylverReZ, atleast they get slightly cleaner money
    +1
  • BakerMan @ BakerMan:
    guys, hot take
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    So Bonzi buddy was an evil version of Alexa lol
    +2
  • BakerMan @ BakerMan:
    the legal drinking age here in the US is 21, as some of you may know, but i think either it should be 18 or the age you're an adult should be 21.
    +2
  • BakerMan @ BakerMan:
    and i know what you may be thinking, "why become an adult at 21? doesn't that mean that banging an 18 year old would be illegal?"
    first of all, being in a relationship with someone who's 18 is technically ok, as long as it started when they were 18, but the age gap is still weird depending on how old you are. besides, the age of consent differs between different states
    +1
  • BakerMan @ BakerMan:
    also my reasoning for adult age being 21 is because the reason that's the drinking (and now smoking) age is because it "gives them more time to think rationally and not drive drunk"
    so you should have that extra time to mature and think rationally before going to serve in the military or vote
    +1
  • BakerMan @ BakerMan:
    tl;dr the "adult" age and the legal drinking age (and voting age) here in the US should be the same
    +3
  • Psionic Roshambo @ Psionic Roshambo:
    It's all good no one pays attention to the law anyway lol
  • BigOnYa @ BigOnYa:
    What about making kids wait till 18 or 21 to drive? And yea is messed up, you can join army and die for your country at age 18, but you can't drink alcohol or smoke a cig til 21, is ridiculous
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    If someone is in the military they should be allowed to smoke and drink at 18.... Would help drive recruitment lol
    +1
    Psionic Roshambo @ Psionic Roshambo: If someone is in the military they should be allowed to smoke and drink at 18.... Would help... +1