Hacking Hardware Picofly - a HWFLY switch modchip

jmmc

Well-Known Member
Member
Joined
May 8, 2011
Messages
168
Trophies
1
XP
1,680
Country
So,this situation is normal?

I don’t know if it’s normal but when I only had one resistor speed of 16mb was around 200mb/s and when it finished the benchmark it said that emmc was in slow mode. I added one more resistor and the speed increased to more or less your results and the message was gone.
 
  • Like
Reactions: Danook28

cgtchy0412

Well-Known Member
Member
Joined
Apr 26, 2023
Messages
286
Trophies
0
Age
41
XP
426
Country
Indonesia
Hello guys, I wanted to order the resistors to use as pulldown, which value and size is recommended? What are there on hwfly flats?
I personally use 10K for pulldown now. As i once use 1K but then some of the unit sometimes boot directly to ofw (glitch failed) and sometime boot hekate. Maybe its specific by mosfet type as i use AON.
 
  • Like
Reactions: abal1000x

sergiochendry

Well-Known Member
Newcomer
Joined
Apr 17, 2023
Messages
52
Trophies
0
Age
32
XP
167
Country
Indonesia
I got wierd switch v2
Yesterday i instal picofly
All perfect, try to reboot many time
And today, something wierd happening
After turn off, swith cannot turn on again
I left about 2 hour, and switch turn on normally
So i remove pico and every cable
Still the same, cannot turn on
Plug in usb charger only draw 0.2-.03 ma
I left switch while charging maybe like 1 hour
Turn on normally to ofw and usb draw 1,6a
What happen with this switch?
 

Attachments

  • 2FA987DD-CFBD-4537-8EAA-F050E9752693.jpeg
    2FA987DD-CFBD-4537-8EAA-F050E9752693.jpeg
    1.1 MB · Views: 22
  • 10B750AE-E750-45F8-A7AA-DD0D2AEA6727.jpeg
    10B750AE-E750-45F8-A7AA-DD0D2AEA6727.jpeg
    868.6 KB · Views: 29
  • F96B282E-75A6-4A68-95A8-EE0878FAC642.jpeg
    F96B282E-75A6-4A68-95A8-EE0878FAC642.jpeg
    768.5 KB · Views: 23
  • 99AA829D-6D8D-4B64-9170-0DF069BCD2C7.jpeg
    99AA829D-6D8D-4B64-9170-0DF069BCD2C7.jpeg
    214.4 KB · Views: 26
  • Like
Reactions: Danook28

abal1000x

Well-Known Member
Member
Joined
Jun 5, 2022
Messages
1,059
Trophies
0
XP
1,356
Country
Gaza Strip
1k for each mosfet, did I get it right?
Yes 1k for each mosfet, parallel.

By calculation it should be around hundreds kilo. I calculate around 300K, but i still not yet confirmed it.

When the pico run, the firmware will configured the gpio as pulled down, read from rp2040 datasheet its around 80k ohms.
Post automatically merged:

I got wierd switch v2
Yesterday i instal picofly
All perfect, try to reboot many time
And today, something wierd happening
After turn off, swith cannot turn on again
I left about 2 hour, and switch turn on normally
So i remove pico and every cable
Still the same, cannot turn on
Plug in usb charger only draw 0.2-.03 ma
I left switch while charging maybe like 1 hour
Turn on normally to ofw and usb draw 1,6a
What happen with this switch?
Seems the power problematic.
Might check this chip
usb_power_ic.png


Datasheet:
https://www.alldatasheet.com/datasheet-pdf/pdf/879766/ROHM/BM92T30MWV.html
 
Last edited by abal1000x,
  • Like
Reactions: Danook28

Danook28

Well-Known Member
Member
Joined
Jul 17, 2018
Messages
487
Trophies
0
Age
34
XP
1,025
Country
Oman
I got wierd switch v2
Yesterday i instal picofly
All perfect, try to reboot many time
And today, something wierd happening
After turn off, swith cannot turn on again
I left about 2 hour, and switch turn on normally
So i remove pico and every cable
Still the same, cannot turn on
Plug in usb charger only draw 0.2-.03 ma
I left switch while charging maybe like 1 hour
Turn on normally to ofw and usb draw 1,6a
What happen with this switch?
Some time you need disconect battery charge soket from the conector then conect and some time press 15 sec and then perss one on power. Me be your pico fly glitch is or ps1 sp2.
 

sergiochendry

Well-Known Member
Newcomer
Joined
Apr 17, 2023
Messages
52
Trophies
0
Age
32
XP
167
Country
Indonesia
Some time you need disconect battery charge soket from the conector then conect and some time press 15 sec and then perss one on power. Me be your pico fly glitch is or ps1 sp2.
I already did that, still the same
Even i press restart
Switch can’t turn on
Post automatically merged:

Like short or just ic nearly dead?
 

Attachments

  • IMG_7596.MOV
    35.3 MB
  • Like
Reactions: Danook28

Danook28

Well-Known Member
Member
Joined
Jul 17, 2018
Messages
487
Trophies
0
Age
34
XP
1,025
Country
Oman
I already did that, still the same
Even i press restart
Switch can’t turn on
Post automatically merged:


Like short or just ic nearly dead?
Is charge cable charge when you flip it???
Turn the charging cord over and see if it charges from both sides, from the top and bottom.
 

Ragna666

Active Member
Newcomer
Joined
Apr 2, 2020
Messages
44
Trophies
0
Location
Hungary
XP
252
Country
Hungary
Hi guys!
Can someone recommend me a a good soldering wire that doesn't have rosin core in it?
And a cheap but good soldering iron.

I done a v2 on saturday but because of the shiiit quality rosin core tin and weak soldering iron instead of max 1hour, it became 5hours of misery.
 
  • Like
Reactions: Danook28

Kiuxn

Well-Known Member
Newcomer
Joined
Mar 18, 2023
Messages
61
Trophies
0
Age
27
XP
136
Country
China
Lets analyze logically.

When the data is big, the rate is high. But when the data is small, the rate is dropped. The difference between the two is, when the data is big, the request to the CMD is not busy compare to when the data is small. The request is only once or twice, then the data stream on to the Dat line. So the DAT line is okay, the CLK is okay, because when its transfer big data the rate is fast.

So i suspect the CMD line is noise, so there will be checksum, error, retry, checksum error, retry until it succeed, then when success the small packet goes to DAT line. And repeat again and again. This reduce the rate of data read from DAT line.

Here is my 1 cent suggestion:
1. Change the cable of the CMD with new one. Maybe the old cable problematic.
2. Try to clean the flux or any dirt around the CMD point.
3. In lite, the CMD point is directly goes to the emmc and cpu with some resistor paralleled to GND, you might check that resistor, it might broke.
View attachment 376193
If you use other device track it yourself in here
https://balika011.hu/switch/
4. Try to reduce little bit the resistance value. Use 33-40 ohms.
I checked the resistor, rewelded and replaced the cable, and the problem is still the same.
 

Attachments

  • 88E48A61-34D6-42AD-BE3F-F4F0A087443B.jpeg
    88E48A61-34D6-42AD-BE3F-F4F0A087443B.jpeg
    1.5 MB · Views: 33
  • 713D137D-3A2A-4BF0-AE34-BDBF7EB2628E.jpeg
    713D137D-3A2A-4BF0-AE34-BDBF7EB2628E.jpeg
    911 KB · Views: 31

abal1000x

Well-Known Member
Member
Joined
Jun 5, 2022
Messages
1,059
Trophies
0
XP
1,356
Country
Gaza Strip
I checked the resistor, rewelded and replaced the cable, and the problem is still the same.
Theres two left:
1. Try lowering the resistor CMD in pico to 30-40 ohm.
datasheet.png


2. Reflow the emmc.
Maybe theres copper/tin debris goes under the emmc that short circuiting some pin.
 
  • Like
Reactions: Danook28

cicci084

Well-Known Member
Member
Joined
Apr 1, 2023
Messages
146
Trophies
0
Age
43
XP
229
Country
Italy
Yes 1k for each mosfet, parallel.

By calculation it should be around hundreds kilo. I calculate around 300K, but i still not yet confirmed it.

When the pico run, the firmware will configured the gpio as pulled down, read from rp2040 datasheet its around 80k ohms.
Post automatically merged:
so what should i order?
:wacko: "confused"
 
  • Like
Reactions: Danook28

abal1000x

Well-Known Member
Member
Joined
Jun 5, 2022
Messages
1,059
Trophies
0
XP
1,356
Country
Gaza Strip
so what should i order?
:wacko: "confused"
Use what others confirmed, is the safest route.

Hwfly confirmed to work (1kOhm).

And 10k ohm also confirmed on this post
https://gbatemp.net/threads/picofly-a-hwfly-switch-modchip.622701/post-10177922

I myself confirmed the hwfly flex.
Don't have time to confirm the hundreds kilo pulldown.
Post automatically merged:

Which results do you have on your benchmark? Can you post an image?
I am currently have no picofly installed devices.
Already sold the last picofly installed devices.
Still waiting for the rp2040-zero to comes from china, 3 devices are in queued.

I have broken sxcore devices at hand, will report back, if i could repair it.
Post automatically merged:

I already did that, still the same
Even i press restart
Switch can’t turn on
Post automatically merged:


Like short or just ic nearly dead?
I read the usb c power delivery documents. Basically the power delivered its detected according to the CC1 and CC2 pin of the usbc.

I've fixed lite whose have a weird usb too. The voltage i measured in Vbus is 0, when i plugged flashdisk. It should be 0 then 5V. I track the CC1 and CC2 seems okay, then the Vin between CC1 and CC2 is controlled by the cpu via 2 transistor. And its turned out the connection on the transistor is open because of corrotion.

disconnected.png

In my cases those yellow box is disconnected, which it should connected.
The line in both transistor goes to cpu.
My guess is, the cpu could instruct/configure the power ic to give vbus to the device. Since the line disconnected, the vbus is not given.

Try to measure the diode value of the transistor, cap, resistor around it. And compare it to a good device. You might found a clue. For me, the clue is the diode value in those both transistor is different.
 
Last edited by abal1000x,
  • Like
Reactions: Danook28

abal1000x

Well-Known Member
Member
Joined
Jun 5, 2022
Messages
1,059
Trophies
0
XP
1,356
Country
Gaza Strip
Yes I know they have firmware on them, what I'm wanting to know is if it is the firmware from here of if they changed the pinout so it doesn't work
I don't think that they will change the pinout.

Because they took the margin of revenue from the hardware not from the software. More people bought the hardware is better.

While the nintendo took the revenue from the software (games). They subsidized the hardware. Couldn't imagine how expensive is Nvidia Jetson, before switch is. Its like 2 or 3 more expensive than lite. And its without lcd, nfc, joycon, bluetooth, wifi, etc :D That is why the N really strict with emulator and the mod, since it will cut their revenue income directly.
Post automatically merged:

Switching to 33ohm, the emmc shield has never been opened, and the same result is obtained.
I have no other clue, other than the emmc is malfunction.

Maybe other people in here have clue or experience on this.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Maximumbeans @ Maximumbeans: @HoTuan You'll need one that hasn't had its stock firmware updated in quite some time, for starters