Home Page Forums MAME MAME TMS-09xx/1xxx thread (was New Dumps)

Also, on sr16ii.txt:
"18 OSC1 - OSC2 and 100 cap to VSS, 400K resistor to VDD"

400K is way below spec, but if true, it'd be running at around 50kHz or maybe even less.

The resistor is yellow-black-yellow, but I measured it and it's 30K, so I guess orange faded to yellow.

Ok, I added it to MESS and it works.
one rombits correction: sr16iiraw.bin offset $331 change $7F to $3F

I also added Speak & Read to the tispeak.c driver.
also had 1 bit wrong: 2705braw.bin offset $799 change $7E to $6E

Lastly, Super Simon is also working in MESS, I just need to do some finishing touches.

sean: wow, 8 pin DIP in plus one? that's pretty insane. Wonder if it's some kind of COPS chip or maybe it's simply a full on ASIC? Pretty surprising it's so few pins.

Yeah, I guess we'll find out when I torch it. If it is a COPS in a small package, I doubt it's electronically dumpable; at the very least, there aren't 8 I/O pins. Unless there's a way to dump the ROM serially....

I hope it's not a COPS, since I can't visually see the bits on those chips. Of course, if it's an ASIC or an unknown CPU, it'll be harder to emulate.

Could it be a Sharp SM-series microcontroller? I seem to recall that they came in pretty small packages and were used as security lockout ICs for the NES up through the N64.

Incidentally, although this isn't TMS or handheld-related, if you would be willing to take a crack at torching them to see if they're optically readable, it would be really cool for MESS to up the accuracy ante on Nintendo consoles by actually emulating the lockout ICs. They are in fact microcontrollers, after all. It would also be very helpful for the N64, since the IPL does some handshaking with the lockout ICs. Not only that, the IC that handles peripheral I/O on the N64 is theorized to be a microcontroller - it also supplies the 2k or so IPL ROM, so it would be nice to get that torched and read as well.

The Plus One chip has the Natl Semi wavy lines logo, so it's likely a custom or one of their CPUs, possibly simplified.

I've decapped the Sharp SM-510 from the Top Gun handheld LCD game and the Sharp SM-511 from the TMNT LCD game, and I know how to reorder the physical bits into execution order. So if the lockout chips are the same family, I should be able to read them visually.

If they aren't, and are a newer process that's significantly smaller, I may not be able to do anything useful with them. For instance, the bits on the Stop Thief die are about 11.5um by 8um, which is huge, and easy to read. Ten times smaller would be pretty tough for my setup. Also, if it uses implant ROM, my simple experiments with staining haven't successfully revealed those bits.

The lockout chips have all been decapped and imaged from what I recall. The ROM bits for the NES lockout chips have been around for 7 or 8 years. The ROM/info for the "rabbit" (tengen's clone) is out there too. I traced out the die schematic for this part quite a few years ago.

the lockout chips on the NES/SNES wouldn't help to increase accuracy (unless you want to simulate the annoyance of a blinking power light and screen flashing) though it would help on the N64.

I posted info on that goofy astrological calculator, the Kosmos Astro: www.seanriddle.com/tms1400.html

Oki, I will doublecheck the rombits 1st as usual.

Does anyone know what the TMS MCU is in this? (page 2, 2nd post) http://www.handheldmuseum.com/forum...amp;sid=370e68a6d56e8501b3eaddee9211993a
If it's of the TMS1000 series, I think it's likely a TMS1470. The other chip(TMS1024) is an I/O expander chip.