dogtopus

Board #	SKU	Release year (est. range)	Architecture (SoC)	RAM	Card type	Slots	Battery type	Note
BA110	TW CD-123 CN CD-580(+)	2009-2012	Arm7	SDRAM 8MiB	None	None	LR03 (AAA) x2	CN CD-580+ is technically BA110L (L probably stands for Light, which corresponds to the added screen backlight capability)
BA742	CN WuDi V7 TW CD-877 Nurian X20	2010-2012	Arm9 (NXP i.MX233)	DDR SDRAM 32MiB	microSD	1	1I?Pt35/48/62-1 (354862)
BA754	TW CD-888 CN WuDi V10(+)	2012	Arm9 (?)	?	SD	1	?
CA106	HK 638 TW CD-222	2009	Arm7	SDRAM 8MiB	None	None	Casio NP-20	Seems to be using the same SoC as BA110.
CA703	TW CD-606/818 "V-Class" HK 3001S "VLearning" AOne AP701	2003-2004	TLCS-900	SDRAM 8MiB	SmartMedia	1	Nokia BLB-2
CA717 (?)	TW CD-859Nurian X9	?	TLCS-900	?	SD

dogtopus

#!/usr/bin/env python3

# CSR OTAU binary parser
# https://developer.qualcomm.com/qfile/34081/csr102x_otau_overview.pdf
# For use with test and demonstration only. This is obviously not official and
# is not affiliated with Qualcomm.

import io
import os
import sys

dogtopus

Besta RTOS reversing notes

Some random notes about Besta RTOS. Will probably ended up on a wiki somewhere after Project Muteki become mostly usable.

Windows CE?

NOPE. Not even close.

Then why there's Windows CE stuff all over?

dogtopus

SEGA Grand Pianist

SD Card

SD card slot is on its own separate PCB connected via a 8-pin JST PH (?) jumper cable.

Tested with 2GB SD card formatted with FAT16. Cards smaller than 2GB might also work but are untested (since the smallest cards I got are 2GB).

(Official spec stated that it supports 128MB-2GB SD cards formatted with FAT16.)

dogtopus

#!/usr/bin/env python3
# Credits to:
#   - Eleccelerator and PS4 Developer Wiki for the HID report format used in
#     authentication procedure.
#   - Author of jedi_crypto.py who provides detailed information on the basic
#     building blocks used by the authentication scheme (and the Jedi CA
#     certificate).
#
# This tool is for education and demonstration purpose only. Use it at your own
# risk.

dogtopus

SEGA touch slider (837-15275 and 837-15330) protocol

Some of the information are from [this writeup][ja] and some come from original researches.

Logic analyzer captures

[slider_cap.zip (sigrok format)][slider-cap-sigrok]

[slider_cap.zip (original ZeroPlus ALC format)][slider-cap-alc]

dogtopus

[[source]]
url = "https://pypi.org/simple"
verify_ssl = true
name = "pypi"

[packages]
pybluez = "*"
pillow = "*"
packbits = "*"

dogtopus

#!/usr/bin/env python3

from __future__ import annotations

'''
Convert sigrok JSON trace containing UART HCI traffic to HCI PCAP file.

The JSON trace files are typically acquired with:

sigrok-cli -i some-sigrok-session.sr -P uart:baudrate=<hci-baud> -A uart=tx-data:rx-data --protocol-decoder-jsontrace > some-json-trace-file.json

dogtopus

SE for PS4 Licensed Controllers

Disclaimer

This documentation is provided solely for education and interoperability purposes (aka persons who are tired of proprietary non-customizable hardware and want to use their own hardware for DIY controllers). It enables neither chip-cloning nor controller counterfeiting which would violate copyright and/or any other applicable laws. This documentation also comes without warranty. Use it at your own risk.

Basic info

• Model: NXP A710x series, possibly semi-customized (Label says 7105 - A7105 does not exist)
• Protocol: I2C

dogtopus

<?xml version="1.0"?>

<!--
DualSense (DS5) USB HID Report Descriptor

Documentation WIP

TODO: Extract info from hid-playstation and cross-verify with us.
-->