Hacking Hardware Picofly - a HWFLY switch modchip

thesjaakspoiler

Well-Known Member
Member
Joined
Nov 20, 2018
Messages
1,167
Trophies
0
Age
124
XP
1,792
Country
Afghanistan
Hi. Im trying to find out this litle capacitor value. Does anyone know what is his value ? Nintndeo Switch Lite alternative 3.3v. I look all around the internet but it seems impossible to find out :(
Couldn't find any direct links either but someone mentioned that is 'just a filter'.
Right side is just 3.3v input (where you'd connect the hwfly ribbon cable).
If I'm not mistaken, these lines go to the ALC5639.
These caps are likely there to smooth out any ripples in the voltage.
Just pick something like 100nF to see if that works.
In some cases you probably get away with not installing anything.
 

TankedThomas

Well-Known Member
Member
Joined
May 5, 2009
Messages
644
Trophies
1
Location
New Zealand
XP
603
Country
New Zealand
Any reason you don't like the v2? All switches are hackable with picofly, so you should be able to mod it as well
Oh, I just wanted to use an RCM jig and hack it that way so I don't have to pull out my microscope again. I think I'm just gonna get one of the Picofly modchip sets off of AliExpress for it this time since that should be less scary, but I suppose we'll see.
Forget about 2 Mosfet. You can use only one and it will work perfectly. I cannot understand why there are still people thinking on complex instalation with 2 Mosfets.
Thanks. I would give it another go with just one this time but I'm thinking it might be safer just to get a flex cable for any future attempts. Unless that's just a waste of money? I know "no-wire" installations can be a mess if solder gets underneath (had that happen way back when I installed a XenoGC in my GameCube - I should probably open it back up and clean up the joints in the future from where I rewired the whole thing) but I doubt it's a problem here with plenty of flux, a decent soldering iron, and patience.

@Takezo-San (or anyone else who can help):
I decided to look at my Lite on my own before I bother sending it to anyone. I guess I'm just determined to fix it myself.
Not sure what I'm looking for though. What are the cap values meant to be around the APU? Multimeter in continuity mode, there seems to be continuity even on the caps I haven't touched. Not sure if I'm checking correctly for dead shorts though.

Attached is a photo from my final installation where it stopped working. Left it in 4K, not that it does much good at this quality but just in case.
In order from left to right, here are my readings of the caps in ohms (only the ones along the bottom plus one on the side, ending with the one my green/ground wire is attached to). Hopefully I've measured correctly. I think you need to get the black probe on GND side? Not sure which side is GND for some of them (did test so should be correct but not 100% sure).
14.5, 14.6, 14.5, 14.5, 19.7, 19.7, 19.7, 19.7, 14.3, 127.2, 185.6.
Some of the readings are different when I swap the probes but I didn't think it should matter which way around they go.

Something I think I forgot to mention, it cases it matters: Samsung eMMC and RAM.

EDIT: I might have found the problem. Seems the PMIC got damaged somehow. Doesn't look major but it's chipping away when I rub my tweezers on it. Maybe that's the problem? Not sure if that can cause a blue screen though. Just took photos so they're coming (Windows doesn't read the microscope's SD card for some reason so I have to transfer to my phone first).

EDIT 2: Added a photo of the damaged PMIC MAX77812. It just looked cracked at first (no photo), then it was a minor chip that came off easily when I touched my tweezers to it (second photo), then after some light scratching, it looked worse (final photo).
Based on what I could find, one person in this thread said it could cause a blue screen so hopefully that's the only issue. Now hopefully the guy I found can repair it for me, else I'll have to find someone else who can, since I don't have a hot air station.
If anyone knows of an expert in New Zealand or even somewhere relatively close like Australia (though I'd have to remove the battery to ship it internationally), please let me know. Preferably someone who can even reball the APU if necessary (God forbid).
 

Attachments

  • 2024_0711_170340_004.jpg
    2024_0711_170340_004.jpg
    2.6 MB · Views: 11
  • 2024_0719_154824_005.jpg
    2024_0719_154824_005.jpg
    2.7 MB · Views: 10
  • 2024_0719_162338_009.jpg
    2024_0719_162338_009.jpg
    2.6 MB · Views: 9
Last edited by TankedThomas,

CarlosCruz

Active Member
Newcomer
Joined
Jul 11, 2023
Messages
33
Trophies
0
Age
35
XP
170
Country
Spain
Greetings colleagues. A few days ago they brought me a new OLED switch bought in China for 220e. My surprise was to find a Toshiba nand and the nand committed suicide under the heat gun doing reballing to install the adapter. In the image you can see the difference in thickness between a Toshiba nand and a Samsung one. They discarded it for a reason, they are made of paper. Weighing risks and benefits, I return to the kamikaze method because there is no need to risk putting a heat gun in a new and functional device.
Post automatically merged:

And here we go 😜
Post automatically merged:

Dat0 test point
 

Attachments

  • Screenshot_20240719_115118_Gallery.jpg
    Screenshot_20240719_115118_Gallery.jpg
    2.2 MB · Views: 13
  • Screenshot_20240719_115145_Gallery.jpg
    Screenshot_20240719_115145_Gallery.jpg
    1.7 MB · Views: 10
  • Screenshot_20240719_115201_Gallery.jpg
    Screenshot_20240719_115201_Gallery.jpg
    1.7 MB · Views: 13
  • Screenshot_20240719_115233_Gallery.jpg
    Screenshot_20240719_115233_Gallery.jpg
    1.7 MB · Views: 11
  • Screenshot_20240719_115217_Gallery.jpg
    Screenshot_20240719_115217_Gallery.jpg
    1.6 MB · Views: 10
  • Screenshot_20240719_115253_Gallery.jpg
    Screenshot_20240719_115253_Gallery.jpg
    1.7 MB · Views: 14
  • Screenshot_20240719_115307_Gallery.jpg
    Screenshot_20240719_115307_Gallery.jpg
    1.6 MB · Views: 14
  • Screenshot_20240719_115317_Gallery.jpg
    Screenshot_20240719_115317_Gallery.jpg
    1.9 MB · Views: 8
  • Screenshot_20240719_115337_Gallery.jpg
    Screenshot_20240719_115337_Gallery.jpg
    1.6 MB · Views: 8
  • Screenshot_20240719_153822_Gallery.jpg
    Screenshot_20240719_153822_Gallery.jpg
    1.9 MB · Views: 11
Last edited by CarlosCruz,

Danook28

Well-Known Member
Member
Joined
Jul 17, 2018
Messages
548
Trophies
0
Age
34
XP
1,153
Country
Oman
Greetings colleagues. A few days ago they brought me a new OLED switch bought in China for 220e. My surprise was to find a Toshiba nand and the nand committed suicide under the heat gun doing reballing to install the adapter. In the image you can see the difference in thickness between a Toshiba nand and a Samsung one. They discarded it for a reason, they are made of paper. Weighing risks and benefits, I return to the kamikaze method because there is no need to risk putting a heat gun in a new and functional device.
Post automatically merged:

And here we go 😜
Post automatically merged:

Dat0 test point

You find new place for dat0????
 

thesjaakspoiler

Well-Known Member
Member
Joined
Nov 20, 2018
Messages
1,167
Trophies
0
Age
124
XP
1,792
Country
Afghanistan
EDIT 2: Added a photo of the damaged PMIC MAX77812. It just looked cracked at first (no photo), then it was a minor chip that came off easily when I touched my tweezers to it (second photo), then after some light scratching, it looked worse (final photo).
The blue-ish thing you see is the backside of the die.
That got so hot that it crumbled the casing.
Such kind of damage usually only occurs when there is/was a major short somewhere else.
So that MAX chip might not be the only thing that needs to be replaced.
 
  • Like
Reactions: TankedThomas

TankedThomas

Well-Known Member
Member
Joined
May 5, 2009
Messages
644
Trophies
1
Location
New Zealand
XP
603
Country
New Zealand
The blue-ish thing you see is the backside of the die.
That got so hot that it crumbled the casing.
Such kind of damage usually only occurs when there is/was a major short somewhere else.
So that MAX chip might not be the only thing that needs to be replaced.
Yeah, I know it's the die. Didn't realise it was caused by heat though. Interesting. So it's best that someone else with better skills has a look at it for me then. Just not sure who at this point. The local guy hasn't replied to me for some reason, which is quite annoying... Not sure where to go from here since there doesn't really seem to be anyone else in New Zealand (at least that I know about) who can fix it.
 

MichiS97

"Leftist snowflake milennial"
Member
Joined
Jun 14, 2011
Messages
1,831
Trophies
2
Age
26
Location
Munich
XP
3,735
Country
Germany
Just chiming in here because I have the exact same problem.
I've reballed and resoldered the eMMC in my OLED twice now (Samsung in my case) and both of those times it only worked for three or four weeks. I also followed sthetix's video and used low melt solder for wicking.
I'll try again next weekend and I'll definitely only use Sn63Pb37 and I'll make sure to clean the flux under the eMMC more thoroughly. Fingers crossed.
Just to update this for people who are interested:
I've re-done my work on the eMMC, even switched to a new eMMC altogether, because the old one has gone through like four reball cycles at this point and I wanted to rule out any issues from that. Now I only used Sn63Pb37 solder and Sn63Pb37 solder paste and made sure to clean the area around the eMMC with an ungodly amount of IPA after I was done. I also used a wire with a 0.04mm diameter for the DAT0 line. Everything works now and I've left the Switch on and in the dock while running Tears of the Kingdom for 36 hours and still, everything works fine, let's hope this time it stays that way.
 
  • Like
Reactions: Takezo-San

jeb84

New Member
Newbie
Joined
Jul 22, 2024
Messages
4
Trophies
0
Age
39
XP
14
Country
Morocco
Because it is busted or you burnt it when you are connecting the point A and thus giving you purple screen error. That's the real reason for the purple screen and not the chip. If you have a hot air gun, you can try and reflow it, most of the time the solder connecting the resistor gets disconnected when you solder the wire.

If you will not fix it, then your switch wont work unfortunately even without the mod chip.

You can use 0402 or 0603 and wire it manually if you have difficulty with 0201.

how to do it? thank you
 

josete2k

Well-Known Member
Member
Joined
Apr 24, 2009
Messages
772
Trophies
1
Age
44
Location
Spain
XP
1,839
Country
Spain
Hi...

Some time ago my friend miralatijera made some improvements in the original code.

Main changes are that now it boots very very fast and the update count is stored in flash instead burning internal fuses.

Feel free to use.
 

Attachments

  • update picofly 2.81 WTF.rar
    43.9 KB · Views: 8
  • picofly 2.81 WTF .rar
    54.4 KB · Views: 10

josete2k

Well-Known Member
Member
Joined
Apr 24, 2009
Messages
772
Trophies
1
Age
44
Location
Spain
XP
1,839
Country
Spain
In spanish

changelog :

Timeout de glitch fallido recucido de 20 a 17 ms
Timeout de lectura de emmc reducido de 2500ms a 500
Voltaje de la pi reducido a 1.10v , no hacen falta 1.3 para 280mhz.

Ahora los efuses se guardan en la flash de la pico no en la cpu , conservaremos la pico despues de muchos updates xD

Probado en switch oled, erista v2 y lite
 

thesjaakspoiler

Well-Known Member
Member
Joined
Nov 20, 2018
Messages
1,167
Trophies
0
Age
124
XP
1,792
Country
Afghanistan
In spanish

changelog :

Timeout de glitch fallido recucido de 20 a 17 ms
Timeout de lectura de emmc reducido de 2500ms a 500
Voltaje de la pi reducido a 1.10v , no hacen falta 1.3 para 280mhz.

Ahora los efuses se guardan en la flash de la pico no en la cpu , conservaremos la pico despues de muchos updates xD

Probado en switch oled, erista v2 y lite
Failed glitch timeout reduced from 20 to 17 ms
emmc read timeout reduced from 2500ms to 500
Pi voltage reduced to 1.10v, 1.3 is not needed for 280mhz.

Now the efuses are saved in the pico flash, not in the cpu, we will keep the pico after many updates xD

Tested on switch oled, erista v2 and lite
 

abal1000x

Well-Known Member
Member
Joined
Jun 5, 2022
Messages
1,090
Trophies
0
XP
1,518
Country
Gaza Strip
Hi...

Some time ago my friend miralatijera made some improvements in the original code.

Main changes are that now it boots very very fast and the update count is stored in flash instead burning internal fuses.

Feel free to use.
It would be fantastic if your friend share the code he has changed.
 

LuigiGad

Well-Known Member
Member
Joined
May 7, 2023
Messages
210
Trophies
0
Age
56
XP
640
Country
Italy
Hi...

Some time ago my friend miralatijera made some improvements in the original code.

Main changes are that now it boots very very fast and the update count is stored in flash instead burning internal fuses.

Feel free to use.
Just tested on one of my OLEDs. it works and when the glitch is executed the led is green no longer yellow
 
  • Like
Reactions: josete2k

deeps

Well-Known Member
Member
Joined
Jul 3, 2007
Messages
472
Trophies
1
XP
1,381
Country
Failed glitch timeout reduced from 20 to 17 ms
emmc read timeout reduced from 2500ms to 500
Pi voltage reduced to 1.10v, 1.3 is not needed for 280mhz.

Now the efuses are saved in the pico flash, not in the cpu, we will keep the pico after many updates xD

Tested on switch oled, erista v2 and lite

Let's summon @rehius to tell us why these changes are dumb. When someone makes changes and does not provide the source like this they usually have no idea what they are doing.

Edit: also, making version bumps like this is a dick move that only adds confusion. Rehius owns the version tagging rights.
 

thesjaakspoiler

Well-Known Member
Member
Joined
Nov 20, 2018
Messages
1,167
Trophies
0
Age
124
XP
1,792
Country
Afghanistan
Hello everyone. I bought a dead console and decided to try to restore it. Initially, it looked very bad. I replaced several chips, restored the broken elements and the console turned on and hangs on error 2101-0001. But, to continue the restoration further, I need help, I need measurements of the broken elements that I do not have. Please help with their values, thank you)
R3 is 10k according to this thread :
https://gbatemp.net/threads/when-replacing-resistors-how-close-do-values-have-to-be-noob.611383/
I couldn't find the others.
 
  • Like
Reactions: Mansi

AlexanderRevali

New Member
Newbie
Joined
Jul 25, 2024
Messages
1
Trophies
0
Age
24
XP
3
Country
Mexico
Bien, gracias por la información. Solo por diversión, probablemente lo haré algún día.B-)
Probablemente consiga que el interruptor funcione mucho más rápido y con un mejor rendimiento de refrigeración X
Bien, gracias por la información. Solo por diversión, probablemente lo haré algún día.B-)
Probablemente consiga que el interruptor funcione mucho más rápido y con un mejor rendimiento de refrigeración Xd
¿Puedo dejar el LED RGB ENCENDIDO EN EL RP2040 o tengo que quitarlo necesariamente?
Post automatically merged:

Bien, gracias por la información. Solo por diversión, probablemente lo haré algún día.B-)
Probablemente consiga que el interruptor funcione mucho más rápido y con un mejor rendimiento de refrigeración Xd
¿Puedo dejar el LED RGB ENCENDIDO EN EL RP2040 o tengo que quitarlo necesariamente?
 
Last edited by AlexanderRevali,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Psionic Roshambo @ Psionic Roshambo:
    Yeah they pretty much confirmed he cheated lol
    +3
  • BigOnYa @ BigOnYa:
    I use mame alot on that cabinet, I play Simpsons arcade game all the time, love that game.
    +1
  • Xdqwerty @ Xdqwerty:
    Aside from what I just mentioned about billy mitchell
    im still stupid
  • Psionic Roshambo @ Psionic Roshambo:
    Turtles was good too.
    +2
  • BigOnYa @ BigOnYa:
    Yea definitely
  • SylverReZ @ SylverReZ:
    @Psionic Roshambo, CPS II machines were also difficult due to the suicide battery keeping the chips alive containing the decryption keys to decrypt the game. And if the battery died, then the game won't boot.
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    I kinda wish Lightguns where a bit cheaper.... Would play the hell out of Beast Busters
  • Xdqwerty @ Xdqwerty:
    In fact, im so stupid thats a reason why I should kill myself
  • Psionic Roshambo @ Psionic Roshambo:
    Operation Wolf
  • BigOnYa @ BigOnYa:
    I have one for the Ps3, but it don't work on modern tvs, sucks. Only tried once, maybe I didn't setup right.
    +2
  • Psionic Roshambo @ Psionic Roshambo:
    Killing yourself would be pretty stupid
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, werent 80% ps3 games made for modern tvs?
  • Psionic Roshambo @ Psionic Roshambo:
    I keep thinking about using on of my spare Wiimotes as a lithtgun
  • BigOnYa @ BigOnYa:
    I only tried using that gun on ps3 once, n didn't work, don't know why, found at a garage sell $5, maybe it don't work, who knows
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    I used to have a PS3 move controller but I heard the Wiimotes actually work better
  • BigOnYa @ BigOnYa:
    I read online it won't work on LED tvs, and all mine are LED.
    +1
  • Xdqwerty @ Xdqwerty:
    I wish ps3 could run wii games so I could use my ps move controllers
  • Xdqwerty @ Xdqwerty:
    ik im stupid
  • BigOnYa @ BigOnYa:
    There's a frisbie golf game on ps3 that is really fun w the move controllers. (called something Sports)
    +1
  • Xdqwerty @ Xdqwerty:
    @BigOnYa, I mean, actual wii games
    +1
  • Xdqwerty @ Xdqwerty:
    not just clones for other consoles
  • SylverReZ @ SylverReZ:
    @BigOnYa, Everybody's Golf?
  • BigOnYa @ BigOnYa:
    Sports Champions
    +1
    BigOnYa @ BigOnYa: Sports Champions +1