Homebrew The bootroms

sirocyl

Are we Geniuses or what?
Newcomer
Joined
Apr 30, 2012
Messages
92
Trophies
1
Age
31
XP
324
Country
United States
Based on a careful search and analysis by some of us on #Cakey, the (at least old 3DS) MCU appears to be a modified version of the Renesas 78K0/KE2 UPD78F0531AFC-AA1-A.

It is the only 0.5cmx0.5cm BGA 8-bit 64-pin 16kb-ROM MCU that Renesas manufactures. Documentation can be found on that page. It runs a custom ISA (which is why we failed to determine anything from IDA Pro) with opcodes available in the "78K/0 Series for Instructions" manual on the site linked.

There is a metric fuck-ton of information and docs available, including an emulator for the chip.

That's impressive and awesome. Kudos, #Cakey.
I'm going to be poring over these documents, especially the 78k ISA.
A reimplementation of the important things in C or AVR ASM shouldn't be too hard, it's only 16k to work with.
I have a Teensy++2 which is itching to be put to use. :D
 
  • Like
Reactions: astronautlevel

TheReturningVoid

0xAAAAAAAA
Member
Joined
Oct 2, 2014
Messages
332
Trophies
0
Location
/dev/urandom
XP
244
Country
That's impressive and awesome. Kudos, #Cakey.
I'm going to be poring over these documents, especially the 78k ISA.
A reimplementation of the important things in C or AVR ASM shouldn't be too hard, it's only 16k to work with.
I have a Teensy++2 which is itching to be put to use. :D
I also have an Arduino Uno that may be finding a use in the near future... :P
 

Plailect

Well-Known Member
Member
Joined
Jan 30, 2016
Messages
546
Trophies
1
XP
1,502
Country
United States
That's impressive and awesome. Kudos, #Cakey.
I'm going to be poring over these documents, especially the 78k ISA.
A reimplementation of the important things in C or AVR ASM shouldn't be too hard, it's only 16k to work with.
I have a Teensy++2 which is itching to be put to use. :D

We also discovered that they offer a download for an ide with a built in simulator and decompiler for this family. The decompiler does not appear to accept foreign binaries, but perhaps it will give us some clues for reversing the MCU firmware.
 

tech3475

Well-Known Member
Member
Joined
Jun 12, 2009
Messages
3,665
Trophies
2
XP
6,055
Country
>could glitching possibly be used

I don't even know what you mean by that.

I've heard about hacks being done by messing around with e.g. power connections, etc. to processors which can get them to behave in an odd way.

The Reset Glitch Hack on the 360 being an example.

As I said it was just an idea I was curious about.
 

8BitWonder

Small Homebrew Dev
Member
Joined
Jan 23, 2016
Messages
2,489
Trophies
1
Location
47 4F 54 20 45 45 4D
XP
5,353
Country
United States
Last edited by 8BitWonder,
  • Like
Reactions: VegaRoXas

Suiginou

(null)
OP
Member
Joined
Jun 26, 2012
Messages
565
Trophies
0
Location
pc + 8
XP
738
Country
Gambia, The
  • Like
Reactions: 8BitWonder

8BitWonder

Small Homebrew Dev
Member
Joined
Jan 23, 2016
Messages
2,489
Trophies
1
Location
47 4F 54 20 45 45 4D
XP
5,353
Country
United States
D-Waves aren't general-purpose QCs and, in particular, can neither run Shor's algorithm (irrelevant for this, but would mean instant death for the entire elliptic curve cryptosystem) nor Grover's algorithm.
My bad, guess I was looking more at qubits rather than if it was possible to use it for the mentioned purpose. :P
 
  • Like
Reactions: Deleted User

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    BakerMan @ BakerMan: it looks like a little kids' game, and bunny (welcome btw) is looking for an uncensor patch