EZ-Flash USA Forum

Forum for the EZ-Flash I, II, III, IV & V Gameboy Advance & Nintendo DS USA Forum (Unofficial) Open since 2004!
It is currently Wed Jun 19, 2013 9:31 am

All times are UTC - 6 hours




Post new topic Reply to topic  [ 43 posts ]  Go to page Previous  1, 2, 3  Next
Author Message
Sponsor
 Post subject:
PostPosted: Wed Jan 24, 2007 1:25 pm 
Offline
 Profile

Joined: Fri Jan 12, 2007 4:51 pm
Posts: 39
cory1492 wrote:
I traced down a routine that does flash chip ID, and does an unlock routine depending on that ID (0x60 to NOR chip). So far my assembly of the function is returning bad data (I haven't figured out exactly what data is sent to the function yet). There is definitely an unlock in there, but why it is not needed on the deluxe (even with the same chip as the others) probably comes down to inital programming at the factory.


Perhaps in the latest version (the Lite Deluxe) they wanted to leave a door open for home upgrades, and so they changed the project a bit.

Quote:
Thanks for testing it on your Deluxe PsychoWood, I'm glad to know that I'm not potentially crazy/the only one it works for :lol:


After bothering, at least testing was due ;)


Top
 
Sponsor
 Post subject: EZV OS NOR can be written, PASS patcher and source
PostPosted: Wed Jan 24, 2007 3:03 pm 
Offline
 Profile

Joined: Sat Oct 21, 2006 3:54 pm
Posts: 333
why would they do that only on the deluxe? the compact was released at the same time... then again, if the ez4 compact could save a file to it, then it might be able to be dumped.

and @cory, the theory we had about the ez4 compact not being able to write files to sd might not be true because i am able to save goomba color without it being through sram. maybe it can't write that file size of 256kb?


Top
 
 Post subject: Re: EZV OS NOR can be written, PASS patcher and source
PostPosted: Wed Jan 24, 2007 3:18 pm 
Offline
 Profile

Joined: Fri Jan 12, 2007 4:51 pm
Posts: 39
yoniwei wrote:
why would they do that only on the deluxe? the compact was released at the same time... then again, if the ez4 compact could save a file to it, then it might be able to be dumped.


I don't know, I was just guessing :)
But the compact has a different ("simplified") design than the Deluxe, or maybe the chip is simply different.. did you have a chance to verify that the used chip is the same?


Top
 
 Post subject: EZV OS NOR can be written, PASS patcher and source
PostPosted: Wed Jan 24, 2007 7:00 pm 
Offline
 Profile

Joined: Sat Oct 21, 2006 3:54 pm
Posts: 333
i would open mine up to check.. but i have no idea what im looking for :)


Top
 
 Post subject: Re: EZV OS NOR can be written, PASS patcher and source
PostPosted: Wed Jan 24, 2007 7:31 pm 
Offline
 Profile

Joined: Fri Jan 12, 2007 4:51 pm
Posts: 39
yoniwei wrote:
i would open mine up to check.. but i have no idea what im looking for :)


You just have to look at the codes written on the chips.

For esample, this is my EZ4 miniSD, and the rightest chip is the one with the code given by cory1492 (M6MGT321S8TP).

Just remember, before opening it up, that it will probably void your warranty. Oh well, you probably knew it already, but better saying once more than not saying. :)


Top
 
 Post subject: EZV OS NOR can be written, PASS patcher and source
PostPosted: Wed Jan 24, 2007 9:55 pm 
Offline
 Profile

Joined: Sat Oct 21, 2006 3:54 pm
Posts: 333
i'd rather not void my warrenty unless i absolutely need to. seeing if it has the same chip wouldnt mean that much; its still incompatible


Top
 
 Post subject:
PostPosted: Wed Jan 24, 2007 11:21 pm 
Offline
 WWW  Profile

Joined: Sun Apr 30, 2006 5:39 am
Posts: 1560
Location: Canada, eh?
Give this a run on the compact/mini if you will and let me know how it responds. If everything goes right it should give status as 80 three times, and that is it. It wont try to write or erase, it's just trying to determine if the MCU is responding to the commands I am sending it. You know it got to the end of the program when it displays "regF" part way down the page.
ez4test1.zip

In all honesty, to me this is a proof of concept that they could update the bootstrap if they wanted to (which if you recall I previously doubted was even possible), not limited to just the "PASS" header (and with their safer, more usable code for detecting and altering the compact).

yoniwei: The compact is very different from the deluxe. It contains RAM in some form (for ds homebrew and small GBA loading), but the thing is that the RAM it has is not accessible using the code that works for the deluxe and miniSD versions. Something was definitely changed for the compact.


Top
 
 Post subject:
PostPosted: Thu Jan 25, 2007 1:33 am 
Offline
 Profile

Joined: Sun Jun 25, 2006 2:21 am
Posts: 12
hi

I get the same results with the patcher as PsychoWood using a EZ4 lite. The output of ez4test1 for me is regI/L/F:2e.

I have a dump of the bootstrap if thats any use in debugging etc


cheers


Top
 
 Post subject:
PostPosted: Thu Jan 25, 2007 4:28 am 
Offline
 Profile

Joined: Fri Jan 12, 2007 4:51 pm
Posts: 39
EZtest1 results:

EZ4 Lite Deluxe: Reg I/L/F = 80
EZ4 MiniSD: Reg I/L/F = 2e

yoniwei wrote:
i'd rather not void my warrenty unless i absolutely need to. seeing if it has the same chip wouldnt mean that much; its still incompatible


I undestand your point, if you've got warranty, keep it. :)


Top
 
 Post subject: EZV OS NOR can be written, PASS patcher and source
PostPosted: Thu Jan 25, 2007 9:30 am 
Offline
 Profile

Joined: Sat Oct 21, 2006 3:54 pm
Posts: 333
here is what it says on the compact, and it was instant when i ran it too

setting OS mode
regI:2E

testing lockbit
regL:2e



RegF:2e and then it doesnt change


Top
 
 Post subject: Re: EZV OS NOR can be written, PASS patcher and source
PostPosted: Thu Jan 25, 2007 10:36 am 
Offline
 WWW  Profile

Joined: Sun Apr 30, 2006 5:39 am
Posts: 1560
Location: Canada, eh?
Thanks guys.

ratx: I have been working from disasm of the NDS updater in the bootstrap. There is basically a NDS/GBA detect & key detect routine (which either jumps to the updaters or the appropriate kernels), what looks like a gba multiboot (the gba updater), and a full NDS application (the NDS updater) all in the first 0x40000 of the OS NOR. One PITA is that No$ doesn't have a way to force it to stay in GBA mode to try and get an accurate disasm of the GBA updater.

yoniwei: thanks for the confirmation on the compact.

Basically what this amounts to is: 2e is the first byte of the bootstrap. So they are all basically reading the bootstrap except the deluxe, which is giving an interface to the NOR flash chip. If test2 doesnt provide different results, I'm at a loss as to what to do to make it work with the devices I don't have. The code is identical, NOR is in the correct place on all of them, but I must be missing something since they are not responding to the chip commands :(

About the only thing new I have discovered in what amounts to about 6 hours of wasted time is that the last block (0x10000 bytes) of the OS NOR needs 5 erase commands to be completely formatted instead of the normal 1.

ez4test2.zip
If this doesn't turn up anything new on the non-deluxe versions, maybe windirt can shed some light on it (not holding my breath on that though).


Top
 
 Post subject: EZ4Ldlx OS NOR can be written, PASS patcher and source
PostPosted: Thu Jan 25, 2007 10:53 am 
Offline
 Profile

Joined: Sat Oct 21, 2006 3:54 pm
Posts: 333
setting OS mode:
regI: 2e

resetting sts reg
regR:2e

testing lockbit
regL:2e


regF:2e
regA:2e


Top
 
 Post subject:
PostPosted: Thu Jan 25, 2007 11:15 am 
Offline
 WWW  Profile

Joined: Sun Apr 30, 2006 5:39 am
Posts: 1560
Location: Canada, eh?
Yep, I'm definitely out of ideas then :(


Top
 
 Post subject: EZ4Ldlx OS NOR can be written, PASS patcher and source
PostPosted: Thu Jan 25, 2007 11:21 am 
Offline
 Profile

Joined: Sat Oct 21, 2006 3:54 pm
Posts: 333
cory1492 wrote:
Yep, I'm definitely out of ideas then :(


*Throws various fruits and vegetables*

It'll all work out in the end :)....


Top
 
 Post subject:
PostPosted: Thu Jan 25, 2007 11:57 am 
Offline
 Profile

Joined: Fri Jan 12, 2007 4:51 pm
Posts: 39
cory1492 wrote:
Yep, I'm definitely out of ideas then :(


Nothing new here either, on my miniSD I've got the same output yoniwei had.


Top
 
Sponsor
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 43 posts ]  Go to page Previous  1, 2, 3  Next

All times are UTC - 6 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group  
Design By Poker Bandits