Hacking Tiny2040 RCM switch

[gamecartgirl]

I have a tiny2040 microcontroller I’m wondering if there is any way of programming it as an RCM loader for the Nintendo switch. It’s similar to the Pi Pico but has more memory. In theory couldn’t I take a python RCM loader and convert it to micropython?

 

[Hayato213]

You should specify the specific model.

 

[linuxares]

I mean the controller is probably the same for all 2040 but the pin out might be different

 

[gamecartgirl]

It’s the 8MB version of the Tiny2040 from Pimonori

• Powered by RP2040
• ARM Cortex M0+ running at up to 133Mhz
• 264kB of SRAM
• USB-C connector for power, programming, and data transfer
• 2MB or 8MB of QSPI flash supporting XiP
• User controllable RGB LED
• Twelve IO pins (including four 12-bit ADC channels)
• Switch for basic input (doubles up as DFU select on boot)
• On-board 3V3 regulator (max regulator current output 300mA)
• Input voltage range 3V - 5.5V
• Dimensions: approx 22.9 x 18.2 x 6mm (L x W x H, including the USB-C port)

 

[hippy dave]

The trinket style payload pushers are M0, so it shouldn't be hard to do on M0+ too, sounds like it has the necessary USB support.

 

[thesjaakspoiler]

Injecting a payload over usb is a bit of a special USB operation.
The RP2040 hardware is not the problem.
In 2022 the TinyUSB library didn't have support for that feature for the RP2040 yet.
Maybe they have added that by now.
But I wonder if micropython can do that anyway.

 

[Menacer]

Shouldn't pushing the payload be a part of what die RP2040 picofly does as one step anyways (first glitching the cpu then injecting the payload)?
Shouldn't it be as easy as taking the payload injection part from picofly to turn a rp2040 into a payload pusher for unpatched v1 models?