Which brand is this microcontroller? logo with 2 "x"

[Erwin Ried]

anyone familiar with this brand? it is from a wireless joystick with a lcd screen, chatgpt has no idea

[nctnico]

Please post a clearer picture 

[Erwin Ried]

  I dont have, I found a disassembly online and this is the best, I was thinking the logo of \\ with a / on top could be known.

I was trying to find the firmware section inside the company "firmware updater.exe"

[DavidAlfa]

It's some kind of joystick... Made by someone... found the teardown somewhere... Got some .exe updater...

Yeah, it's some kind of mcu, made by someone, somewhere, sometime...

[thm_w]

https://www.reddit.com/r/Controller/comments/1gxwc5y/manba_one_v2_full_review/

This part is connected to the bluetooth antenna, so it may or may not be the main MCU, there is also another part U1. Either way its probably some obscure brand, qfn40.

I was trying to find the firmware section inside the company "firmware updater.exe"

Did you use binwalk?
Why would you bother if you don't have the device?

[squadchannel]

I was trying to find the firmware section inside the company "firmware updater.exe"

Shenzhen Zhixu Technology Co.,ltd
https://www.smart-one.cn/



https://fcc.report/FCC-ID/2BF5U-MANBAONE
ZC32RF1M

[Erwin Ried]

Oh thanks for the improved image! yeah I noticed it was made on Visual C++ so I think there is a big posibility of being able to mod some behaviours or the boot logo at least.

Basically the V2 of the firmware doesnt send keystrokes to the game when you are in the menu, so it is really difficult to create macros. I would imagine is just an unsigned (no CRC) firmware inside that updater where I could find where this behaviour is done.

Something like this, of course it would be very difficult to add it as option without the source 

[Erwin Ried]

Why would you bother if you don't have the device?

I have it but you know how everything is glued and plastic clips and screws into plastic so better if I can avoid disassembly (since the firmware can be updated already via usb-c, no jtag needed)

Did you use binwalk?

Yeah, seems there is the DLL for USB stuff inside plus a bunch of icons and raw files, its a good start for the research thanks you both @thm_w and @squadchannel very useful

[Erwin Ried]

So... I extracted the firmware inside the .exe

https://github.com/eried/ManbaOneV2/blob/main/firmware/manba_one_V2.21_firmware.bin

you can clearly see in IDA pro that the exe sends the data in

• Start: 0x5732F0
• End: 0x5732F0 + 0x67400 - 1 = 0x5EAAEF

But now I am trying to understand what opcodes is this micro using

with a small modification -> https://github.com/eried/ManbaOneV2/tree/main/updater of their tool, I can reupload the firmware and it works fine! but I want to modify the firmware boot images and such...

Anyone here has more hints to continue this journey? how to find the bitmaps inside? what opcodes could this be? (doesnt look like plain BMP since there isnt anything recognizable):


thanks

[squadchannel]

I believe the display control is handled by the micros on the sub-board.
but from the image, the marking has been erased.

[abyrvalg]

There are two high entropy sections with sizes aligned to 16 bytes, encryption, I guess. And the 128-byte high entropy block at +0x66400 could be a digital signature

[Erwin Ried]

There are two high entropy sections with sizes aligned to 16 bytes, encryption, I guess. And the 128-byte high entropy block at +0x66400 could be a digital signature

yeah so you think that means no fun? 

I tried with different "languages" in ghidra without joy. I was expecting something like a plain BMP considering the logo that is ALWAYS displayed has some kind of aliasing and a red eye (thats why I was dreaming on finding it easily):

[abyrvalg]

That’s not a plain code, 100%. The biggest block has very uniform distribution.