ARM7 BIOS - Revision history

Hallowizer: /* SVC list */ flagged HaltMaybe for checking, since it looks like the idle thread in ARM7 OS calls this in place of the CP15 stuff in ARM9. haven't looked very deep yet though

2022-08-29T03:44:16Z

SVC list: flagged HaltMaybe for checking, since it looks like the idle thread in ARM7 OS calls this in place of the CP15 stuff in ARM9. haven't looked very deep yet though

← Older revision		Revision as of 07:44, 29 August 2022
Line 40:		Line 40:
	\|-		\|-
	\|06		\|06
	\|HaltMaybe		\|HaltMaybe{{check}}
	\|n/a		\|n/a
	\|-		\|-

Hallowizer: /* BIOS and Bootrom */ according to the main page, bootrom has been dumped

2022-06-29T00:23:40Z

BIOS and Bootrom: according to the main page, bootrom has been dumped

← Older revision		Revision as of 04:23, 29 June 2022
Line 6:		Line 6:

	*The contents of 1) can only be read by instructions within the BIOS. It can therefore be dumped by applying some IRQ timer trick to find a usable ''ldr'' instruction or by just using the memcpy at 0x6bb0 with the usual arguments.		*The contents of 1) can only be read by instructions within the BIOS. It can therefore be dumped by applying some IRQ timer trick to find a usable ''ldr'' instruction or by just using the memcpy at 0x6bb0 with the usual arguments.
	*The contents of 2) can only be read until bit 0 in register '''0x04004000 or 0x04004001 (?)''' is cleared. It is disabled after it has been executed and can never be read again until the device is reset~~. It might contains keys and has not been dumped yet~~.		*The contents of 2) can only be read until bit 0 in register '''0x04004000 or 0x04004001 (?)''' is cleared. It is disabled after it has been executed and can never be read again until the device is reset.

	== SVC list ==		== SVC list ==

Nocash: what means n/a? the answer is a bit surprising...

2013-07-27T20:56:07Z

what means n/a? the answer is a bit surprising...

← Older revision		Revision as of 00:56, 28 July 2013
Line 10:		Line 10:
	== SVC list ==		== SVC list ==
	The BIOS provides the following SVC functions. Every SVC not mentioned here just jumps to an infinite loop at 0x16c (b .)		The BIOS provides the following SVC functions. Every SVC not mentioned here just jumps to an infinite loop at 0x16c (b .)

			Caution: In below table, "n/a" in the NAME column seems to mean "not altered" (ie. same as in NDS BIOS). Whilst "n/a" in the DESCRIPTION column seems to mean "not any" (ie. nobody has written a description yet).

	{\| class="wikitable sortable" width="55%"		{\| class="wikitable sortable" width="55%"

Nocash at 16:53, 16 July 2013

2013-07-16T14:53:31Z

← Older revision		Revision as of 18:53, 16 July 2013
Line 157:		Line 157:
	\|n/a		\|n/a
	\|}		\|}


	== reset vectors et al ==		== reset vectors et al ==
Line 174:		Line 173:

	* [[ARM9 SWI Functions]]		* [[ARM9 SWI Functions]]
			* [[Bootloader]] (Stage 1 contained in BIOS ROMs)

Nocash: /* reset vectors et al */

2013-07-16T11:33:04Z

reset vectors et al

← Older revision		Revision as of 15:33, 16 July 2013
Line 170:		Line 170:
	ea000013		ea000013
	ea000000		ea000000

			== See Also ==

			* [[ARM9 SWI Functions]]

Winmaster: Undo revision 3999 by Lu (talk) SPAM/Vandalism

2011-07-15T11:26:56Z

Undo revision 3999 by Lu (talk) SPAM/Vandalism

Show changes

Lu at 01:41, 15 July 2011

2011-07-14T23:41:01Z

Show changes

Remark: No, the endianess was correct.

2009-10-15T07:17:40Z

No, the endianess was correct.

← Older revision		Revision as of 11:17, 15 October 2009
Line 161:		Line 161:
	== reset vectors et al ==		== reset vectors et al ==

	The first few words of the BIOS cannot be dumped. You can deduce them by tracing the code though (all values are noted in ~~little~~ endian here):		The first few words of the BIOS cannot be dumped. You can deduce them by tracing the code though (all values are noted in big endian here):
	ea000006		ea000006
	ea000006		ea000006

Yellows8: Fixed endian.

2009-10-14T18:30:07Z

Fixed endian.

← Older revision		Revision as of 22:30, 14 October 2009
Line 162:		Line 162:

	The first few words of the BIOS cannot be dumped. You can deduce them by tracing the code though (all values are noted in little endian here):		The first few words of the BIOS cannot be dumped. You can deduce them by tracing the code though (all values are noted in little endian here):
	~~060000ea~~		ea000006
	~~060000ea~~		ea000006
	~~1f0000ea~~		ea00001f
	~~040000ea~~		ea000004
	~~030000ea~~		ea000003
	~~feffffea~~		eafffffe
	~~130000ea~~		ea000013
	~~000000ea~~		ea000000

Bushing: minor cleanup

2009-09-13T04:40:49Z

minor cleanup

← Older revision		Revision as of 08:40, 13 September 2009
Line 1:		Line 1:
	== BIOS and Bootrom ==		== BIOS and Bootrom ==
	The ARM7 BIOS is ~~splitted up~~ into two parts:		The ARM7 BIOS is split into two parts:

	# the actual BIOS which is 0x8000 bytes long and starts at 0x0		# the actual BIOS which is 0x8000 bytes long and starts at 0x0
	# the bootrom which is probably also 0x8000 bytes long and starts at 0x8000		# the bootrom which is probably also 0x8000 bytes long and starts at 0x8000

	*The ~~data~~ of 1) can only be read by instructions within the BIOS. It can therefore be dumped by applying some ~~irq~~ timer trick to find a usable ''ldr'' instruction or by just using the memcpy at 0x6bb0 with the usual arguments.		*The contents of 1) can only be read by instructions within the BIOS. It can therefore be dumped by applying some IRQ timer trick to find a usable ''ldr'' instruction or by just using the memcpy at 0x6bb0 with the usual arguments.
	*The ~~data~~ of 2) can only be read until bit 0 in register '''0x04004000 or 0x04004001 (?)''' is cleared. It is ~~enabled~~ after it has been executed and can never be read again until a reset ~~then~~. It might contains keys and has not been dumped yet.		*The contents of 2) can only be read until bit 0 in register '''0x04004000 or 0x04004001 (?)''' is cleared. It is disabled after it has been executed and can never be read again until the device is reset. It might contains keys and has not been dumped yet.

	== SVC list ==		== SVC list ==
Line 66:		Line 66:
	\|-		\|-
	\|0e		\|0e
	\|~~crc16~~		\|CRC16
	\|n/a		\|n/a
	\|-		\|-
Line 134:		Line 134:
	\|-		\|-
	\|24		\|24
	\|~~sha1_init~~		\|SHA1_init
	\|n/a		\|n/a
	\|-		\|-
	\|25		\|25
	\|~~sha1_update~~		\|SHA1_update
	\|n/a		\|n/a
	\|-		\|-
	\|26		\|26
	\|~~sha1_finalize~~		\|SHA1_finalize
	\|n/a		\|n/a
	\|-		\|-
	\|27		\|27
	\|~~sha1~~		\|SHA1
	\|n/a		\|n/a
	\|-		\|-
	\|28		\|28
	\|~~sha1_compare~~		\|SHA1_compare
	\|n/a		\|n/a
	\|-		\|-
	\|29		\|29
	\|~~sha1_random_maybe~~		\|SHA1_random_maybe
	\|n/a		\|n/a
	\|}		\|}
Line 161:		Line 161:
	== reset vectors et al ==		== reset vectors et al ==

	The first few words of the BIOS cannot be dumped. You can ~~guess~~ them by tracing the code though (all values are noted in little endian here):		The first few words of the BIOS cannot be dumped. You can deduce them by tracing the code though (all values are noted in little endian here):
	060000ea		060000ea
	060000ea		060000ea