Previous Thread
Next Thread
Print Thread
Page 192 of 195 1 2 190 191 192 193 194 195
#109318 - 04/04/17 06:43 AM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: May 2010
Posts: 765
seanriddle Offline
Senior Member
seanriddle  Offline
Senior Member

Joined: May 2010
Posts: 765
I got the ML102 dump to look better, but BX301 still has lots of duplicate pages. One of the page select bits must not be getting set correctly; I'm sure it has to do with the timing of the opcodes that I'm forcing in.

One interesting thing is that ML102 has the text "YOSHIDA".

www.seanriddle.com/bx301.bin

www.seanriddle.com/ml102.bin

#109319 - 04/04/17 08:29 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: Mar 2002
Posts: 729
hap Offline
Senior Member
hap  Offline
Senior Member

Joined: Mar 2002
Posts: 729
Programcounter is linear in these dumps, right?
Anyway, even after converting to LFSR, ML102 locks up pretty quickly, something's still not right I bet.

#109320 - 04/04/17 09:07 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: May 2010
Posts: 765
seanriddle Offline
Senior Member
seanriddle  Offline
Senior Member

Joined: May 2010
Posts: 765
Yeah, that's what Igor said. It's executing NOPs while dumping, so PL is incrementing in LFSR order and ROM is coming out in execution order.

I'm sure there are some pages that I'm still not getting, and I'm not 100% sure that all the pages are starting at the right place. I haven't found a "start of page" indicator, so all I can do is compare the dump right after ACL to the dump of page 55 and adjust the starting offset of each page based on that. After my latest tweaks, BX301 pages still start 8 bytes in, but ML102 pages start right at the beginning.

#109321 - 04/04/17 11:26 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: Mar 2016
Posts: 7
IgorRus Offline
Member
IgorRus  Offline
Member

Joined: Mar 2016
Posts: 7
Originally Posted by seanriddle
I'm not 100% sure that all the pages are starting at the right place.


Just send "Page select", then "Jump #00", and immediatly start receiving. You always get new page from address #00.

#109324 - 04/05/17 08:51 AM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: May 2010
Posts: 765
seanriddle Offline
Senior Member
seanriddle  Offline
Senior Member

Joined: May 2010
Posts: 765
Hey Igor! I was using the TL opcode to load the page and program counter, but BX301 page 55 didn't start at the same byte as right after ACL. I just changed the code to do a TL and then a T 0, and that seems to have fixed it. I also tweaked the timing a little and now I'm getting 64 unique pages: www.seanriddle.com/bx301.bin

#109325 - 04/05/17 03:15 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: Mar 2002
Posts: 729
hap Offline
Senior Member
hap  Offline
Senior Member

Joined: Mar 2002
Posts: 729
Is it possible to dump the last byte of the page? On the die images it's $80, in your dumps it's $00, but in theory it could be any value.

#109326 - 04/05/17 04:50 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: May 2010
Posts: 765
seanriddle Offline
Senior Member
seanriddle  Offline
Senior Member

Joined: May 2010
Posts: 765
In ROM dump mode the chip only outputs 63 bytes per page- I just inserted 00 to fill the gap. I guess TI must have had a patent on modifying an LFSR to reach all values.

Likewise, in the ML102 dump I inserted 00s for the 20 "missing" pages. I should be able to make a new dump of ML102 today with the new code.

#109327 - 04/05/17 06:17 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: Mar 2016
Posts: 7
IgorRus Offline
Member
IgorRus  Offline
Member

Joined: Mar 2016
Posts: 7
It's possible to read the 64th byte. Just execute command "Goto #63" smile LFSR will load #63 and stuck on it. All bytes read from processor will be 64th in ROM. (in my case was 80h).

#109346 - 04/10/17 07:16 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: May 2010
Posts: 765
seanriddle Offline
Senior Member
seanriddle  Offline
Senior Member

Joined: May 2010
Posts: 765
I decapped and visually dumped G&W Boxing BX-301: http://www.seanriddle.com/gameandwatch.html

Turns out that my electronic dump got all the bits, but shifted the bytes one position in pages 32-63. I'll look at the logic capture and see if I messed up the conversion. Or maybe my timing's still not quite right when I send the opcodes.

I also digitized the segments: http://www.seanriddle.com/bx301svg.7z

And scanned the background: http://www.seanriddle.com/bx301bkg.tif http://www.seanriddle.com/bx301bkgblur.tif

#109347 - 04/10/17 09:19 PM Re: TMS-09xx/1xxx thread (was New Dumps) [Re: seanriddle]  
Joined: Mar 2002
Posts: 729
hap Offline
Senior Member
hap  Offline
Senior Member

Joined: Mar 2002
Posts: 729
Do you have a higher resolution image section of the die shot, for extracting the melody ROM?

Page 192 of 195 1 2 190 191 192 193 194 195

Who's Online Now
2 registered members (Olivier Galibert, Praxis), 23 guests, and 3 spiders.
Key: Admin, Global Mod, Mod
Shout Box
Forum Statistics
Forums9
Topics8,319
Posts107,561
Members4,734
Most Online225
May 26th, 2014
Powered by UBB.threads™ PHP Forum Software 7.6.0
Page Time: 0.046s Queries: 14 (0.025s) Memory: 5.0295 MB (Peak: 5.2560 MB) Zlib enabled. Server Time: 2017-04-28 12:00:13 UTC