Hacking Hardware Picofly - a HWFLY switch modchip

[Raugo]

i can dump boot0 from this lite i have if you want to test this theory

Can you dump it at check if the normal firmware bct and normal firmware package1 are the same content as the backup version?

https://switchbrew.org/wiki/Flash_Filesystem#Boot_Partitions

 

[vittorio]

I'm thinking that the fw that starts didn't have control of the id

 

[Adran_Marit]

does this PCB replace the HWFLY cables?

It uses them but you need to buy the flex separately

 

[Raugo]

I have a boot0 from a pikofly console and I can confirm that the bct normal and safe are modified (the backup ones no) Probably that is the reason because is not possible to launch HOS.

 

[scd]

It uses them but you need to buy the flex separately

okay ty, another question, can you make your own ribbon cable via places like PCBway or is that not possible

 

[binkinator]

okay ty, another question, can you make your own ribbon cable via places like PCBway or is that not possible

technically don't need a ribbon cable at all. only one connection goes through it. see previous page:

https://gbatemp.net/threads/pikofly-a-probably-fake-hwfly-modchips-or-not.622701/post-10069528

original post:

https://gbatemp.net/threads/pikofly...-modchips-or-not.622701/page-34#post-10066639

 

[impeeza]

does this PCB replace the HWFLY cables?

nop, because you need the mosfet of the cables for sp1 y sp2 capacitors.

 

[scd]

technically don't need a ribbon cable at all. only one connection goes through it. see previous page:

https://gbatemp.net/threads/pikofly-a-probably-fake-hwfly-modchips-or-not.622701/post-10069528

original post:

https://gbatemp.net/threads/pikofly-a-probably-fake-hwfly-modchips-or-not.622701/

oh cool! saw that but thought it might be too sketchy for me, does this also apply to that dat0 cable?

 

[binkinator]

oh cool! saw that but thought it might be too sketchy for me, does this also apply to that dat0 port?

Those are are just the V1 and V2 solder points in lieu of the chip flex cable. If you’re doing an OLED you should probably buy the DAT0 cable. They are tricky enough to get right as is. I‘m sure some folks on this thread could make it work with just a wire but if you were one of them you wouldn’t be asking the question, so buy the DAT0. :-)

 

[thesjaakspoiler]

You should be able to do a continuity test using the legs of the mosfet, no?

similar to the pics for V1 and V2 in this post:

https://gbatemp.net/threads/pikofly-a-probably-fake-hwfly-modchips-or-not.622701/post-10066639

View attachment 352216
V1


View attachment 352215
V2

OMG! Someone should receive an award for this kind of MacGuyver style modding!
Some people in this community are just next level geniuses.

 

[scd]

Those are are just the V1 and V2 solder points in lieu of the chip flex cable. If you’re doing an OLED you should probably buy the DAT0 cable. They are tricky enough to get right as is. I‘m sure some folks on this thread could make it work with just a wire but if you were one of them you wouldn’t be asking the question, so buy the DAT0. :-)

thank you! got a switch lite that I have abandoned due to the steam deck that would be perfect for this, need to get a pinecil and work my way up to the switch

 

[binkinator]

OMG! Someone should receive an award for this kind of MacGuyver style modding!
Some people in this community are just next level geniuses.

Sure as hell wasn’t me. I just have fantastic copy-paste skills! Maybe OP?

 

[MusicCanKill]

I haven't tested anything from here yet on an actual console but without a console all do the exact same thing when flashed to the pico.
To the people that try to reverse it : What is the actual obstacle that you can't get past?
Has anyone found the exact function that does something with the ID that is getting read from the flash?

 

[TheSynthax]

@Tafty Did yours go through training or just start up immediately?

Also, anyone know specifically what "GRB / RGB LED mode" pads do? or if pins 0/1 chip reset does anything? Maybe those functions weren't implemented yet on the "ubuntu" firmware as we're calling it?

 

[Tafty]

@Tafty Did yours go through training or just start up immediately?

Also, anyone know specifically what "GRB / RGB LED mode" pads do? or if pins 0/1 chip reset does anything? Maybe those functions weren't implemented yet on the "ubuntu" firmware as we're calling it?

the first time you turn it on...it does seem to go through a training proces..but its very short then it goes into trying to glitch.
basically you turn it on..it goes blue led to a solid white led...then to blue again...then green to confirm.

now if you install it wrong it goes through the same process but will fail after the white led.with a colour that shows which point isnt working...so maybe its not training on first boot, just checking it is all correct before attempting to glitch

i hope that makes sense

 

[TheSynthax]

the first time you turn it on...it does seem to go through a training proces..but its very short then it goes into trying to glitch.
basically you turn it on..it goes blue led to a solid white led...then to blue again...then green to confirm.

now if you install it wrong it goes through the same process but will fail after the white led.with a colour that shows which point isnt working...so maybe its not training on first boot, just checking it is all correct before attempting to glitch

i hope that makes sense

Mine does blue > brighter blue (very brief) > white > green

I'll touch up my CPU points.

 

[Tafty]

Mine does blue > brighter blue (very brief) > white > green

I'll touch up my CPU points.

that sounds right to be honest

is it showing the no sd card screen once it has gone green?

 

[TheSynthax]

that sounds right to be honest

is it showing the no sd card screen once it has gone green?

Nope, black screen. I'm not convinced the console isn't just faulty, might have to try with a known working console. Was hoping this one had just bricked itself instead of having a hard fault. I'll investigate it's power delivery, MAX77812 is getting a little warm. It will pink screen without the chip installed.

 

[thesjaakspoiler]

That is all the stuff that is in the Nintendo Developer Portal.
No secret Nintendo internal design documents and codes with SHA2048 keys to the castle.
If you're admitted to the developer program, you can access all this information anyway.
But still fun for everyone who's application Nintendo turned down.
By the way, if someone would have removed all those 4K bmp images, the contents would be down to a few gigabytes.
Which genius at Nintendo thought that providing 4K bmp images is a reasonable idea?

 

[TheSynthax]

This isn't relevant to this thread, and copyrighted content or links to copyrighted content aren't allowed.