Hacking Hardware Picofly - a HWFLY switch modchip

cgtchy0412

Well-Known Member
Member
Joined
Apr 26, 2023
Messages
286
Trophies
0
Age
41
XP
429
Country
Indonesia
anyone had experience with this error, appears when waking up from sleep, it only happen in stock sysnand. On emunand with atmosphere everything normal.
Already factory reset stock sysnand, but still.
Any ideas?
 

Attachments

  • 20230531_231723.jpg
    20230531_231723.jpg
    1.8 MB · Views: 26

Mgt

Active Member
Newcomer
Joined
Sep 2, 2021
Messages
29
Trophies
0
Age
24
XP
63
Country
Spain
Just select GPP and Boot0/1 and push power button until RW appears on the right the same as SD Card, mount it after that and plug the Switch to the computer, download HacDiskMount and check the physical partitions.

The same as making a backup.
OK. I am going to tell him to do all this and when I know the results I will publish it here again. thank you
 

abal1000x

Well-Known Member
Member
Joined
Jun 5, 2022
Messages
1,059
Trophies
0
XP
1,360
Country
Gaza Strip
Just select GPP and Boot0/1 and push power button until RW appears on the right the same as SD Card, mount it after that and plug the Switch to the computer, download HacDiskMount and check the physical partitions.

The same as making a backup.
do the biskey mandatory or optional to use the hacdiskmount?
 

POPOLO

Active Member
Newcomer
Joined
Apr 17, 2023
Messages
34
Trophies
0
Age
44
XP
194
Country
Japan
anyone had experience with this error, appears when waking up from sleep, it only happen in stock sysnand. On emunand with atmosphere everything normal.
Already factory reset stock sysnand, but still.
Any ideas?
DAT0 interference
Check if the DAT0 cable is too close to the CLK cable
 

themine1500

Active Member
Newcomer
Joined
Apr 24, 2023
Messages
27
Trophies
0
Age
38
XP
82
Country
United States
i2coled-jpg.372193

PI2040-Zero PIN13 -> SCL PIN12 ->SDA
Would this help for a unit that is timing out on glitch? I let it run.. it is blue light for a few minutes. Then I get the 3 long yellow flash… saying timed out. Should this help? I never get a boot screen. Only black screen.
Post automatically merged:

Would this help for a unit that is timing out on glitch? I let it run.. it is blue light for a few minutes. Then I get the 3 long yellow flash… saying timed out. Should this help? I never get a boot screen. Only black screen.
Well… I’m not sure if this was the issue. But i plugged the speakers in.. and i get one blue flash. And then the yellow error of =** Emmc initialization failure during glitch… is this a dat0 issue?
 
Last edited by themine1500,

Mgt

Active Member
Newcomer
Joined
Sep 2, 2021
Messages
29
Trophies
0
Age
24
XP
63
Country
Spain
I was able to do a rawnand backup without it.

I think that just to decryp the partitions.

The partner has already been able to carry out the tests and partition readings and these are the results when connecting the switch to the computer. now, in what situation is the nintendo switch?
 

Attachments

  • 1.jpg
    1.jpg
    33.5 KB · Views: 22
  • 2.jpg
    2.jpg
    30.4 KB · Views: 20
  • 3.jpg
    3.jpg
    55.1 KB · Views: 18
  • 4.jpg
    4.jpg
    26.3 KB · Views: 18
  • 5.jpg
    5.jpg
    40.9 KB · Views: 21
  • 6.jpg
    6.jpg
    40.3 KB · Views: 21

Flaviocarvalho

Well-Known Member
Member
Joined
Apr 28, 2023
Messages
111
Trophies
0
Age
37
XP
95
Country
Brazil
Anyone know if an emmc just uses the pinouts that are traced on motherboard or it uses all of the points that are on the board? A friend gave me this dat0 adapter wirh this pins broken...wanna know if i can use it whitout interfere on the emmc function
 

Attachments

  • 20230531_154030.jpg
    9.2 MB · Views: 16

Dee87

Well-Known Member
Member
Joined
Mar 19, 2023
Messages
1,139
Trophies
1
XP
1,575
Country
Germany
I noticed that the ums-loader uses IRAM only to boot, and works well when others payloads doesn't works.

So, can we modify other payload to make it works on IRAM too?

I know that IRAM only has 256kb if i right (maybe not xD)

Just a crazy idea to think that i don't lose my lite.
i have a similiar issue with a oled laying around (i didnt do the install)

though on this oled it accured durign a hwfly install with a cheap dat 0 Adapter

i get No sdcard with pico installed , if i use Hekate nothing shows on screen only black .

cannot insert Ofw

Ums-Loader works fine ..

Also have no clue how to go further i can load the partitions without a issue.
 
  • Like
Reactions: Danook28

QuiTim

Well-Known Member
Member
Joined
Mar 30, 2023
Messages
754
Trophies
0
XP
1,153
Country
Albania
i have a similiar issue with a oled laying around (i didnt do the install)

though on this oled it accured durign a hwfly install with a cheap dat 0 Adapter

i get No sdcard with pico installed , if i use Hekate nothing shows on screen only black .

cannot insert Ofw

Ums-Loader works fine ..

Also have no clue how to go further i can load the partitions without a issue.
Theoretically, if these errors are happening because of corrupted nand, could we rewrite/clone/fix emmc with something like this ?
 

HackMan37

Active Member
Newcomer
Joined
May 26, 2023
Messages
37
Trophies
0
XP
78
Country
Dominican Republic
Theoretically, if these errors are happening because of corrupted nand, could we rewrite/clone/fix emmc with something like this ?
They're some people that can rewrite the emmc with the ums-loader.

i can do it, by error i restore the boot0/1 with erista model, but with the emmcgenerator, i got a mariko boot0/1 that get blue screen again, before just black screen trying to boot on ofw.

just that i'm using a universalprod.keys because can't get my keys.
 

Dee87

Well-Known Member
Member
Joined
Mar 19, 2023
Messages
1,139
Trophies
1
XP
1,575
Country
Germany
Theoretically, if these errors are happening because of corrupted nand, could we rewrite/clone/fix emmc with something like this ?
i dont think this has anything to do with nand,
i used a functinall emmc from a v2 (i know its only 32gb) but it should atleast boot hekate if it has something to do with the emmc.

and i can read the emmc on a v2 but i did not to any backups when i installed it Xd was just testing putpose .
ic can do a gppt backup with Nx nand manager.


from some research i think this hwfly that was installes was a clone hwfly with an old ersita software that sends some wrong signals to the ram and destroys them.

but i have no proof for it.

what would be really awesome is a iram payload that does hardware tests that would help us out alot
 
  • Like
Reactions: QuiTim and Danook28

deeps

Well-Known Member
Member
Joined
Jul 3, 2007
Messages
444
Trophies
1
XP
1,231
Country
Anyone know if an emmc just uses the pinouts that are traced on motherboard or it uses all of the points that are on the board? A friend gave me this dat0 adapter wirh this pins broken...wanna know if i can use it whitout interfere on the emmc function
Hard to see in the pic, but see attached pic for all emmc points that are connected to something (oled emmc board for reference)
 

Attachments

  • switchemmc.png
    switchemmc.png
    1.1 MB · Views: 26

floxcap

Well-Known Member
Newcomer
Joined
May 21, 2023
Messages
69
Trophies
0
XP
281
Country
Australia
I noticed that the ums-loader uses IRAM only to boot, and works well when others payloads doesn't works.

So, can we modify other payload to make it works on IRAM too?

I know that IRAM only has 256kb if i right (maybe not xD)

Just a crazy idea to think that i don't lose my lite.

Yes - in theory.
But to put in perspective - the ums-loader is close to max size for IRAM - so we are very limited in what we can run there.
Also - without being able to mount the emmc we can't do a backup from there.

I presume your GPP, BOOT0 & BOOT1 menu items are grey in ums-loader?
(which means there was a problem connecting to the emmc).

I'm currently working on converting ums-loader to a bit of a diagnostics tool - so that those of us that have this problem might be able to get some more information.
Post automatically merged:

I just told you to try this now. In a few minutes he will tell me something and I will let you know what happens. thank you
Post automatically merged:


Test performed. this now appears with UMS. now what next?

That screenshot looks just like mine - the app is unable to mount the emmc.
Post automatically merged:

i dont think this has anything to do with nand,
i used a functinall emmc from a v2 (i know its only 32gb) but it should atleast boot hekate if it has something to do with the emmc.

and i can read the emmc on a v2 but i did not to any backups when i installed it Xd was just testing putpose .
ic can do a gppt backup with Nx nand manager.


from some research i think this hwfly that was installes was a clone hwfly with an old ersita software that sends some wrong signals to the ram and destroys them.

but i have no proof for it.

what would be really awesome is a iram payload that does hardware tests that would help us out alot
I like your train of thought.

As a test I put in a code snippet for starting the DRAM - that seems to work ok... but I didn't think to actually run a read/write DRAM test. I'll add that to my list for the changes I'm making to ums-loader :D
 
Last edited by floxcap,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    SylverReZ @ SylverReZ: @Psionic Roshambo, Thats pretty cool.