Editing Ernie

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
Ernie is the codename for PSVita Syscon.
Codename for Vita Syscon


= Pictures =
= Talking to Ernie =
 
* [[File:xzonnpr.png|200px]](source ifixit, denoted id 1148KM458)
* [[File:Pmsm2bJ.jpg|200px]](denoted red)
* [[File:fVyL18x.jpg|200px]]
* [[File:AS3Dzti.png|200px]]
* [[File:BN2JA8g.png|200px]]
* [[File:7avGDL7.png|200px]]
* [[File:eYTpTOI.png|200px]]
* [[File:hwzb7TN.png|200px]]
* [[File:hwCbt3f.png|200px]]
 
SCEI 1148KM458:
[[File:SCEI 1148KM458 mit20x dirty small.png]]
 
= Talking to Ernie (RL78) =


<pre>
<pre>
Line 33: Line 18:
Disconnecting the tool
Disconnecting the tool
Operation completed.
Operation completed.
</pre>
= Talking to Ernie (78K0R) =
<pre>
02 1b 10 ef 04 dc fd fd ff ff 03 44 37 39 46 30 31 30 39 20 20 f8 03 00 00 00 ff ff ff 0f 03
</pre>
<pre>
Device: D79F0109
</pre>
<pre>
STX: 0x02
LEN: 0x1B
Vendor Code: NEC (0x10)
Macro Extension Code: 0xEF
Macro Function Code: 0x04
Device Extension Codes 1 and 2: 0xDC FD
User Flash Rom Last Adress: ff ff 03 (0x40000)
Device Name (10 bytes) 44 37 39 46 30 31 30 39 20 20 (D79F0109  )
Security Flag: 0xF8
Boot Block Number: 0x03
Start Block: 00 00
End Block : 00 ff
Reserved: FF FF
Checksum: 0x0F
ETX: 0x03
</pre>
</pre>


Line 81: Line 38:
|}
|}


= Identifying VDD/EVDD =
= Some pics (testpoints, layout, blank vs not blank, options) =
 
<pre>
killing evdd kills Tool0 but not I2C, but vdd kills both
2.5V is vdd, 1.8V is evdd0/1
evdd voltage is used for reset for some weird reason
</pre>
 
= Some RL78 pics (testpoints, layout, blank vs not blank, options) =
 
[[File:e9FGck8.png|200px]]
 
[[File:nq4LID7.png|200px]]
 
[[File:6ASfhB1.png|200px]]
 
[[File:yAWXJnK.png|200px]]


[[File:kKhSCdm.png|200px]]
<imgur>QQZji2r.png</imgur>


= Some 78K0R pics =
<imgur>nq4LID7.png</imgur>


* [[File:FEBXKkk.png|200px]]
<imgur>6ASfhB1.png</imgur>
* [[File:jZgJNwF.png|200px]]


== Pinout ==
<imgur>yAWXJnK.png</imgur>


* VDD, TOOL0 and RESET known
<imgur>kKhSCdm.png</imgur>
* TOOL1, FLMD0 and GND Unknown
* F9, F5, F6, J3, J10, G10, F10, H1, H4 possible
* F9, F10, G10, J10, most likely candidates respectively to TOOL0 TOOL1 RESET FLMD0
* F6 is VDD, F9 TOOL0, G10 RESET


= Debugger Points for Glitching =
= Debugger Points for Glitching =


<pre>
<pre>
J1    EVDD
C11    VDD
C10, F6(Optional)  VDD
C10   EVDDX
F11    GND
F5    GND
F9    TOOL0  
F9    TOOL0
G10   FLMD0 (On Old 78K0R pstv/psvita 1000 boards)  
F10   TOOL1? (On Old 78K0R pstv/psvita 1000 boards)
F10   RESET  
G10   RESET
</pre>
L6    REGC
 
== Glitch Victim Versions ==
<pre>
Ernie version: 0x1030505
Ernie version: 0x1030511
Unknown version: 3.30
RL78 Version: 0x0303
</pre>
</pre>
Please note that all contributions to Vita Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see Vita Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)