Hacking Hardware Picofly - a HWFLY switch modchip

[abal1000x]

Can someone tell me if it is safe to briefly power on the Switch to test the hack without the heatsink and APU shield put back on? I'd like to quickly test the hack before reapplying the solder paste. At least as far as the PicoFly "No SD card" screen. All the way to Hekate would be a bonus.

I done that lot of time and its okay, nothing broke.

 

[blackheartme]

Ipa 70% is not really good since it takes more time to evaporate 96% and up is way better (and it cleans better)
Anyway I don't think that this is the issue here.
I know this is old news and repetitive but have you tried docking it? That fckn connector it terrible.
Also regarding the resistor on CMD, could you measure the resistence in ohm mode not diode value.
There have been a couple of cases here where that resistor is fried during soldering. You should get something in the range of 4.7kohm od it's ok.

yeah found out my oled problem the Display connector pin are bent, damn those connector, had to pay $15 to replace those connector

 

[HackMan37]

i wonder what point @HackMan37 used and if they could swap points?

After use an alternative 3.3v point, same result.

I don't think that's a voltage problem.

I was modding the ums-loader, and i have problem loading this section:

This is from hekate
// USB buffers.
#define USB_EP_BULK_IN_BUF_ADDR 0xFF000000
#define USB_EP_BULK_OUT_BUF_ADDR 0xFF800000
#define USB_EP_BULK_OUT_MAX_XFER 0x800000

This is from ums-loader
#define USB_EP_BULK_IN_BUF_ADDR IPL_LOAD_ADDR + MAX_PAYLOAD_SIZE) //64K
#define USB_EP_BULK_OUT_BUF_ADDR (USB_EP_BULK_IN_BUF_ADDR + SZ_64K) //64K
#define USB_EP_BULK_OUT_MAX_XFER SZ_64K

With the hekate values, the screen just glitchs with below image

I think that i make it works on the normal RAM, but don't really know what it's the upside section for xD

Here the modded file "working" on the RAM it's someone else want to sniff in.

 

[_kedo_]

@rehius can you share your dev environment for working on rp2040 fw?
Any additional equipment for debugging, operating system etc.?
Thanks in advance

 

[Danook28]

After use an alternative 3.3v point, same result.

I don't think that's a voltage problem.

I was modding the ums-loader, and i have problem loading this section:

This is from hekate
// USB buffers.
#define USB_EP_BULK_IN_BUF_ADDR 0xFF000000
#define USB_EP_BULK_OUT_BUF_ADDR 0xFF800000
#define USB_EP_BULK_OUT_MAX_XFER 0x800000

This is from ums-loader
#define USB_EP_BULK_IN_BUF_ADDR IPL_LOAD_ADDR + MAX_PAYLOAD_SIZE) //64K
#define USB_EP_BULK_OUT_BUF_ADDR (USB_EP_BULK_IN_BUF_ADDR + SZ_64K) //64K
#define USB_EP_BULK_OUT_MAX_XFER SZ_64K

With the hekate values, the screen just glitchs with below image

I think that i make it works on the normal RAM, but don't really know what it's the upside section for xD

Here the modded file "working" on the RAM it's someone else want to sniff in.

Try inter lakka or obunto. See lcd what show.

 

[FreeLander]

Hello. Just reporting that Success single light color has change. Now it’s a short white color instead of yellow.

Tbh, I was a fan of the single green light to show success. Does it get back when I bridge RGB mode?

 

[QuiTim]

Can someone tell me if it is safe to briefly power on the Switch to test the hack without the heatsink and APU shield put back on? I'd like to quickly test the hack before reapplying the solder paste. At least as far as the PicoFly "No SD card" screen. All the way to Hekate would be a bonus.

No worries, it seems like it doesn't draw any real power until os is up.
I've used hekate for at least 2-3 minutes with bare apu in multiple instances with no problem whatsoever

 

[rehius]

Tbh, I was a fan of the single green light to show success.

there are two kinds of LED: BGR and RGB, it is easier to use yellow/white/blue rather than ask people to swap colours with jumper

Post automatically merged: Jun 4, 2023

Any additional equipment for debugging, operating system etc.?

USB 2.0 analyzers DS Logic / DS Scope, Windows OS, multiple consoles bought to be killed, original SX Lite for analysis, IDA Pro for disasm

Post automatically merged: Jun 4, 2023

Can someone tell me if it is safe to briefly power on the Switch to test the hack without the heatsink and APU shield put back on? I'd like to quickly test the hack before reapplying the solder paste. At least as far as the PicoFly "No SD card" screen. All the way to Hekate would be a bonus.

Almost all of my test units don't have heatsink, until you start a game it's fine

 

[PC-maniak]

ty AWG34 [url removed]

Thanks !

 

[rehius]

My Picofly just came in from ali.... I knew it was gonna be small, but not THIS SMALL. It's smaller than two of my fingers put together. Definitely hiring a professional to install this LOL. TBH at first look it doesn't seem like something that'd even work. Also, could someone check this picture? Circled in red looks to be a bridge? If you see anything else of concern please let me know, thanks!

both pins are +3.3v, should be fine

 

[raksmey1231]

Hi @rehius , can I use Mosfet like this? Is it correct?

 

[Dee87]

Hi @rehius , can I use Mosfet like this? Is it correct?

u got atleast 2 answers on the same question havent u ?

 

[QuiTim]

u got atleast 2 answers on the same question havent u ?

third time's the charm they say

 

[rehius]

Hi @rehius , can I use Mosfet like this? Is it correct?

sure, why not

 

[Dee87]

third time's the charm they say

yeah but its enough if u post it once i guess......

 

[floxcap]

After use an alternative 3.3v point, same result.

I don't think that's a voltage problem.

I was modding the ums-loader, and i have problem loading this section:

This is from hekate
// USB buffers.
#define USB_EP_BULK_IN_BUF_ADDR 0xFF000000
#define USB_EP_BULK_OUT_BUF_ADDR 0xFF800000
#define USB_EP_BULK_OUT_MAX_XFER 0x800000

This is from ums-loader
#define USB_EP_BULK_IN_BUF_ADDR IPL_LOAD_ADDR + MAX_PAYLOAD_SIZE) //64K
#define USB_EP_BULK_OUT_BUF_ADDR (USB_EP_BULK_IN_BUF_ADDR + SZ_64K) //64K
#define USB_EP_BULK_OUT_MAX_XFER SZ_64K

With the hekate values, the screen just glitchs with below image

I think that i make it works on the normal RAM, but don't really know what it's the upside section for xD

Here the modded file "working" on the RAM it's someone else want to sniff in.

Did you init DRAM as part of your mod?
Also, there's a bit more to it than just changing memory addresses.... The ums 'bdk' files from Hekate are a fair bit behind now.
Unfortunately updating is quite involved and by default pushes over the IRAM limit.

 

[raksmey1231]

u got atleast 2 answers on the same question havent u ?

Sorry, I wanna make sure of the answer before I install it on my switch.

sure, why not

Thanks, I will install it on my switch and will see how it works.

 

[abal1000x]

there are two kinds of LED: BGR and RGB, it is easier to use yellow/white/blue rather than ask people to swap colours with jumper

Post automatically merged: Jun 4, 2023

USB 2.0 analyzers DS Logic / DS Scope, Windows OS, multiple consoles bought to be killed, original SX Lite for analysis, IDA Pro for disasm

Post automatically merged: Jun 4, 2023

Almost all of my test units don't have heatsink, until you start a game it's fine

I don't know about oscilloscope.

Is this good enough to be used to monitory the emmc line:
https://www.aliexpress.com/item/100...!sea!ID!3430123615&curPageLogUid=b6Cf6HWt3mIf

What is the specificaiton of scope/logic you use?

 

[FreeLander]

Hi @rehius , can I use Mosfet like this? Is it correct?

Do two MOSFETs need all that space? it became my standard practice to use @Dee87 method. Works great. Won't confuse points, and looks neat.

 

[Switxh]

Do two MOSFETs need all that space? it became my standard practice to use @Dee87 method. Works great. Won't confuse points, and looks neat.

No you can solder them side by side with zero gap inbetween. Idk why he did it like this.