Hacking Repairing a blue screen bricked switch. any suggestions?

oriam

Active Member
OP
Newcomer
Joined
Oct 7, 2018
Messages
28
Trophies
0
Age
36
XP
439
Country
Germany
Hi guys,
I couldn't resist to buy a blue screen bricked Switch from eBay which is capable of CFW and I want to try to fix it. Otherwise if it will not work I will sell the spare parts.

So here is the current status of the Switch:
I was told by the seller that the Switch was opened and it was tried to disconnect/connect the battery for fixing (I don't know how this should solve any blue screen bricks...). After receiving I noticed additionally that the +/- vol buttons are not correctly working (- is always pressed). Nevertheless, I managed to start Hekate. In Hekate could read out the fuse count of 8 (FW 6.2.0). However, I can not dump anything because the SD slot seems not to be connected. In addition, I saw that the boot0 and boot1 partition sizes are 0 bytes, so I would guess that the previous owner tried to do a downgrade and something went terribly wrong.

Right now, I think about the next steps:
1) I should open the switch and try to see if the SD slot connection is loose
2) I should see why the vol buttons are not correctly working (maybe misfitted in the case?)
3) somehow I should try to restore the original partition layout to manually rebuild the NAND by choidujour.

Regarding the partiton layout I am not sure. I have a working second switch and I know NAND dumps are incompatible but can I use that dump to create the correct partiton layout and then overwrite everything with choidujour afterwards? Or is there any other easier way?

Regarding the 0 byte size of both boot partitions. Might it be possible that the EMMC is defect or not correctly connected? Would Hekate say something like "no EMMC module found"?

Anyone tried to fix a Switch with similar problems? Any further suggestions?

Due to job duties I will not have time to work on the switch until next weekend. So thanks in advance for your suggestions.
 

GothicIII

Well-Known Member
Member
Joined
Jan 4, 2015
Messages
831
Trophies
0
Age
36
XP
2,252
Country
Gambia, The
1st make a nand dump before anything else. I know you currently can't so fix the sd slot beforehand.
If prodinfo is missing then the switch is not recoverable atm. This is device specific.Without a valid prodinfo you can't boot horizon. So only homebrew like hekate or the upcoming linux would work with it.
I think hekate is capable of fixing the partition layout if it is borked. But make a dump first. E.g. if the partition table is borked you could fix it and restoring prodinfo might be possible.
 

Budsixz

Gbatemp Gamemer
Member
Joined
Oct 27, 2018
Messages
466
Trophies
1
Age
30
XP
1,848
Country
India
Hi guys,
I couldn't resist to buy a blue screen bricked Switch from eBay which is capable of CFW and I want to try to fix it. Otherwise if it will not work I will sell the spare parts.

So here is the current status of the Switch:
I was told by the seller that the Switch was opened and it was tried to disconnect/connect the battery for fixing (I don't know how this should solve any blue screen bricks...). After receiving I noticed additionally that the +/- vol buttons are not correctly working (- is always pressed). Nevertheless, I managed to start Hekate. In Hekate could read out the fuse count of 8 (FW 6.2.0). However, I can not dump anything because the SD slot seems not to be connected. In addition, I saw that the boot0 and boot1 partition sizes are 0 bytes, so I would guess that the previous owner tried to do a downgrade and something went terribly wrong.

Right now, I think about the next steps:
1) I should open the switch and try to see if the SD slot connection is loose
2) I should see why the vol buttons are not correctly working (maybe misfitted in the case?)
3) somehow I should try to restore the original partition layout to manually rebuild the NAND by choidujour.

Regarding the partiton layout I am not sure. I have a working second switch and I know NAND dumps are incompatible but can I use that dump to create the correct partiton layout and then overwrite everything with choidujour afterwards? Or is there any other easier way?

Regarding the 0 byte size of both boot partitions. Might it be possible that the EMMC is defect or not correctly connected? Would Hekate say something like "no EMMC module found"?

Anyone tried to fix a Switch with similar problems? Any further suggestions?

Due to job duties I will not have time to work on the switch until next weekend. So thanks in advance for your suggestions.
what i think he did is kinda tried to restore nand to downgrade and then he failed and left it in autorcm
later the battery drained entirely and he tried to open the switch and externally tried to charge it
which he failed again
when he opened the switch he didnt take proper care i think thats why its malfunctioning in hardware too
this is just my speculation though
as for fixing the switch my ideas coincide with yours so unfortunately i cant think of anything more to add
 
Last edited by Budsixz,

PyroGoat

Well-Known Member
Member
Joined
Feb 27, 2015
Messages
125
Trophies
0
XP
291
Country
United States
If I recall correctly and my knowledge isn't out of date, you need your the device specific keys and/or prodinfo to successfully rebuild and encrypt nand to be restored. If I am incorrect please correct me and shoot me a pm :) I have 2 sitting around awaiting better Linux support or for parts until/if any further development comes about.
 

oriam

Active Member
OP
Newcomer
Joined
Oct 7, 2018
Messages
28
Trophies
0
Age
36
XP
439
Country
Germany
The keys are no problem. You can get your biskeys with Hecate dumping tsec and fuse info and use the sdsetup website. Their downgrade guide using choidujour explains how to do that. All other keys one can get with lockpick RCM.

The only problem is the prodinfo.
 

oriam

Active Member
OP
Newcomer
Joined
Oct 7, 2018
Messages
28
Trophies
0
Age
36
XP
439
Country
Germany
I have a strange error. When I print the partiton layout Hekate stops to work while showing EMMC user partiton table.

Also gptrestore stops after decompressing with a crc32 fail. Any ideas what I could do now?
 

Attachments

  • IMG_20190327_082511757-01.jpeg
    IMG_20190327_082511757-01.jpeg
    987.9 KB · Views: 337

oriam

Active Member
OP
Newcomer
Joined
Oct 7, 2018
Messages
28
Trophies
0
Age
36
XP
439
Country
Germany
No, I can't proceed. The person who owned the switch before (and disconnected/connected the battery for unknown reasons) accidentally damaged one pin of the SD connector:cry:. Or someone has an idea how to fix a broken connector pin/leg?

So I can't proceed with anything. Neither I can't start Lakka nor try to repair NAND.

It's useless for me. I want to sell it to people who need spare parts for repairing stuff. E.g. the screen is in very good condition and without scratches or pixel errors. But I had no time up to now to start an eBay auction.
 

ajgarher

New Member
Newbie
Joined
Sep 25, 2019
Messages
1
Trophies
0
Age
38
XP
68
Country
Chile
Hi, sorry to bump out of nowhere, I have a similar issue and I'm trying to recover a blue screen switch from a friend.
My status so far:
- tried to use gptrestore but also got a crc32 error.
- seems like sd slot is not working, it can't be mounted with memloader or tegrarcmgui (the sd cable it's correctly connected, tested sd card on another switch also)
- got the keys with biskeydump
I don't what to do anymore :(.

Thanks in advance for any ideas.
 
  • Like
Reactions: rodrigues14

rodrigues14

Well-Known Member
Newcomer
Joined
Nov 30, 2009
Messages
65
Trophies
1
XP
831
Country
Brazil
Hi, sorry to bump out of nowhere, I have a similar issue and I'm trying to recover a blue screen switch from a friend.
My status so far:
- tried to use gptrestore but also got a crc32 error.
- seems like sd slot is not working, it can't be mounted with memloader or tegrarcmgui (the sd cable it's correctly connected, tested sd card on another switch also)
- got the keys with biskeydump
I don't what to do anymore :(.

Thanks in advance for any ideas.

you try change the mmc board?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
  • K3Nv2 @ K3Nv2:
    why
  • Xdqwerty @ Xdqwerty:
    @K3Nv2, it's not funny
  • K3Nv2 @ K3Nv2:
    ok
  • BigOnYa @ BigOnYa:
    Wut?
  • K3Nv2 @ K3Nv2:
    That's not funny
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    So two cannibals where eating a clown and one says to the other. Hey does this taste funny to you?
    +2
  • K3Nv2 @ K3Nv2:
    What do you call a slow car? Retired
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Did you hear about the police car that someone stole the wheels off of? The police are working tirelessly to find the thieves.
    +2
  • K3Nv2 @ K3Nv2:
    A firefighter got arrested for assault his main claim was what I was told he was on fire
    +2
  • BigOnYa @ BigOnYa:
    What do you call a hooker with a runny nose? Full
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    What do you tell a woman with two black eyes? Nothing you already told her twice!
  • K3Nv2 @ K3Nv2:
    Diddy also works
  • K3Nv2 @ K3Nv2:
    A scientist heard the word batman so he put a naked lady in a cage with a bat
  • Psionic Roshambo @ Psionic Roshambo:
    Chuck Norris won a staring contest, with the sun.
  • K3Nv2 @ K3Nv2:
    A vampires favorite thing to do is moon you
  • BigOnYa @ BigOnYa:
    What's the difference between an airplane, and Ken's mom? Not everyone has been in an airplane.
  • K3Nv2 @ K3Nv2:
    What's the difference between @BigOnYa and his wife? Nothing both want to bone me
    +3
  • RedColoredStars @ RedColoredStars:
    How much wood could a wood chuck chuck if a wood chuck could chuck norris
    +1
  • BakerMan @ BakerMan:
    how do i know? you're a guy, and he wants to bone every guy on this site (maybe, idk)
    +1
  • K3Nv2 @ K3Nv2:
    He wants to bone anything with a dick
    +1
  • Xdqwerty @ Xdqwerty:
    Good night
    +1
  • BigOnYa @ BigOnYa:
    Nighty night, big day tomorrow. Congrats.
    K3Nv2 @ K3Nv2: https://www.instagram.com/reel/C7iLZ35NrQt/?igsh=MWd2Z3U0dmNlMmNxcw==