Hacking Hardware Picofly - a HWFLY switch modchip

[chronoss]

yes since v2/lite/and oled have the same Apu
V1 is a bit different

Ah ok cool, yes v1 is very different... Thanks a lot...

Someone have the diagram for Oled ?

 

[lightninjay]

Ah ok cool, yes v1 is very different... Thanks a lot...

Someone have the diagram for Oled ?

Check the definitive guide

 

[jkyoho]

Testing permanent dat0. Kamikaze mod.

Very nice spot. Only 2 ground layer on top

 

[QuiTim]

Testing permanent dat0. Kamikaze mod.

 

[vulp_vibes]

Testing permanent dat0. Kamikaze mod.

good job, looks quite clean. good idea running the line back to an existing test pad. tempted to try this myself for fun and the experience

 

[jkyoho]

Here is the photo me using PS aligning different layers from eMMC side and pinpoint the "Square Area” dataX lines. For whoever interested in Kamikaze mod.
Happy grinding

 

[linuxares]

View attachment 382843
Here is the photo me using PS aligning different layers from eMMC side and pinpoint the "Square Area” dataX lines. For whoever interested in Kamikaze mod.
Happy grinding

Now someone with CAD make a 3D mold so people can print and drill x3

 

[jkyoho]

Now someone with CAD make a 3D mold so people can print and drill x3

cant wait

 

[linuxares]

If anyone wonder what the hell is this stupid mod talking about

 

[cowboy619]

If anyone wonder what the hell is this stupid mod talking about

Modded plenty of 360s with this tool and worked like a bomb - IPA at the end waiting for the sound. Priceless

 

[vulp_vibes]

Here is the photo me using PS aligning different layers from eMMC side and pinpoint the "Square Area” dataX lines. For whoever interested in Kamikaze mod.
Happy grinding

dat0 running through that alignment indicator circle is a very convenient visual marker. though, being in between other lines makes me a little wary of potential damage to the surrounding traces. I looked at the board scans and found that the dat0 line also comes out into a via pad beneath two ground layers near the cmd resistor, with fewer small traces surrounding it. would be interesting to see if this point is possible as well

edit: practicing on a dead board in an area with a similar layer stack (two grounds and then a trace). seem to have done it successfully

 

[FreeLander]

Testing permanent dat0. Kamikaze mod.

This community can't stop being innovtive! Can we get more details about this? I'm going to try it

 

[Dee87]

This community can't stop being innovtive! Can we get more details about this? I'm going to try it

haahahahahhaahhahaa
well there goes another Oled Xd

i mean well it could work but i woult rather just reball the emmc

 

[FreeLander]

haahahahahhaahhahaa
well there goes another Oled Xd

i mean well it could work but i woult rather just reball the emmc

tbh I made enough money from successful installs that I made up all my losses and then some, but I'm only interested in spending that money on developing my modding skills, Kamozki seems like the end-game
I've done around 25 OLEDs , and 34 combinations of V2/V1/Lites.

I owe that to this great community, and maybe my persistence

 

[Dee87]

tbh I made enough money from successful installs that I made up all my losses and then some, but I'm only interested in spending that money on developing my modding skills, Kamozki seems like the end-game
I've done around 25 OLEDs , and 34 combinations of V2/V1/Lites.

I owe that to this great community, and maybe my persistence

sure i know what u mean :-)
but before u do that use one of those damaged switches to do some testing :-) u should have a few Oleds laying around Xd

but still for me honestly to risky and doesnt really make sense to maybe destroy a board by drilling a few layers away if it easier just to reball.

did u learn how to reball yet?

if not i would suggest u learnign that and stop using those dat0 adapter cause thats still not a permanent install and whil probaly give u a issue ealier or later ;-)

 

[FreeLander]

sure i know what u mean :-)
but before u do that use one of those damaged switches to do some testing :-) u should have a few Oleds laying around Xd

but still for me honestly to risky and doesnt really make sense to maybe destroy a board by drilling a few layers away if it easier just to reball.

did u learn how to reball yet?

if not i would suggest u learnign that and stop using those dat0 adapter cause thats still not a permanent install and whil probaly give u a issue ealier or later ;-)

That's my next focus. I need to master reballing. Learning a bit every day and loving it. Thank you

 

[cgtchy0412]

edit: practicing on a dead board in an area with a similar layer stack (two grounds and then a trace). seem to have done it successfully

View attachment 382884

Where is that located ? on OLED ?
We need clearer traces area (if any) as the first/original point is too crowded and not worth the risk.
Bellow is the cue btw, alligned with all dat points.

 

[amenjesuspankita]

dat0 running through that alignment indicator circle is a very convenient visual marker. though, being in between other lines makes me a little wary of potential damage to the surrounding traces. I looked at the board scans and found that the dat0 line also comes out into a via pad beneath two ground layers near the cmd resistor, with fewer small traces surrounding it. would be interesting to see if this point is possible as well

View attachment 382849

Esto es dat0? La traducción al español no es muy buena

This is dat0? The Spanish translation is not very good

 

[roxzii]

I dont think so, have you tried mounting GPP from ums-loader on PC with DiskGenius? My OLED gpp mount looks like this. Just in case your Blue screen is caused from courted eMMC partitions by DAT0 adapter.(though Hekate should still load even emmc bad IMO)

View attachment 382365

Okay, small update, the switch is back from the dead and I have display. I used HacDiskMount instead of DiskGenius, but I got GPP to mount and made a copy of all files just to be sure. Boot0/1 won't mount though. Is that an indication of Dat0/1 short?

I'm basically back to square one, no sd card screen appears, the only payload that I can launch is UMS-Loader. Trying OFW still gives blue screen and trying hekate either doesn't work or gives black screen. Checked all the traces between APU and DRAM and as far as I can see there's nothing wrong there.

Sorry to tag you, but @Dee87, @abal1000x, @Takezo-San, any ideas what I should test? Really out of ideas here, all help appreciated.

 

[jkyoho]

Okay, small update, the switch is back from the dead and I have display. I used HacDiskMount instead of DiskGenius, but I got GPP to mount and made a copy of all files just to be sure. Boot0/1 won't mount though.

Can you at least screenshot what you have?
Are you mounting GPP with ums-loader?
When mounting BOOT0/1 on PC, there will be unsupported partition warning and asking for format(DONT FORMAT!)

attached how GPP look in HacDiskMount with my S-lite GPP