Ernie

Codename for Vita Syscon

Talking to Ernie

Connecting the tool
Tool : E2 Lite, Tool Num : 5ES000599, Interface : 1 wire UART
Emulator's supply power : OFF
Emulator's firmware version：3.00.00.007
Connecting to the target device
Query the device information.
Device Name : R5F1ZCRK
Devcie Code : 10 00 06
Firmware Version : V3.03
Code Flash 1 (Address : 0x00000000,  Size : 384 K,  Erase Size : 1 K)
Data Flash 1 (Address : 0x000F1000,  Size : 8 K,  Erase Size : 1 K)

Disconnecting the tool
Operation completed.

How to talk

E1/E20/E2 Emulator, E2 Emulator Lite	Syscon	Notes
TOOL0	TOOL0	Pull up the signals of the TOOL0 pin at 1 kΩ and do not arrange these signal lines in parallel with or across other high-speed signal lines.
RESET	RESET	When flash programming by the programming software is to be performed, the RESET# pin should be designed so that the reset signal on the user system does not conflict with the reset signal from the E1/E20/E2/E2 Lite.
GND	GND	The pins of the connector marked "GND" must be at the same ground level as the VSS pin of the MCU.
VDD	VDD	Connect the VDD of the connector to the VDD (power supply) of the user system. Use the emulator within the power supply voltage of 1.8 V to 5.5 V and within the operating voltage range of the MCU.
EVDD	EVDD

Identifying VDD/EVDD

killing evdd kills Tool0 but not I2C, but vdd kills both

Some RL78 pics (testpoints, layout, blank vs not blank, options)

<imgur>IFmhPj3.png</imgur>

<imgur>nq4LID7.png</imgur>

<imgur>6ASfhB1.png</imgur>

<imgur>yAWXJnK.png</imgur>

<imgur>kKhSCdm.png</imgur>

Some 78K0R pics

• <imgur w=500>FEBXKkk.png</imgur>
• <imgur w=500>jZgJNwF.png</imgur>

Pinout

• VDD and GND known
• TOOL0, TOOL1, RESET, FLMD0 Unknown
• F9, F5, F6, J3, J10, G10, F10, H1, H4 possible
• F9, F10, G10, J10, most likely candidates respectively to TOOL0 TOOL1 RESET FLMD0

Debugger Points for Glitching

C11    VDD
C10    EVDDX
F5     GND
F9     TOOL0
F10    TOOL1? (On Old 78K0R pstv/psvita 1000 boards)
G10    RESET
L6     REGC