|
|
Joined: Mar 2002
Posts: 1,368 Likes: 120
Very Senior Member
|
Very Senior Member
Joined: Mar 2002
Posts: 1,368 Likes: 120 |
You mean the 3rd digit? Looks like it can only show 0 and 5. I added the game to MESS and it works. Also added Big Trak and Entex Jackpot.
|
|
|
|
|
Joined: Mar 2002
Posts: 1,368 Likes: 120
Very Senior Member
|
|
Very Senior Member
Joined: Mar 2002
Posts: 1,368 Likes: 120 |
sean: on h2h Football, there are 9 digits and 8 LEDs, which R pins select the round LEDs? I'm assuming R0-R7, but it could be R1-R8 too since the game sets R0-R8 in succession.
|
|
|
|
|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
|
OP
Very Senior Member
Joined: May 2010
Posts: 1,051 |
My notes say R0-R7, but I'll double-check. I posted the Tactix info: www.seanriddle.com/necd557l.html
|
|
|
|
|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
|
OP
Very Senior Member
Joined: May 2010
Posts: 1,051 |
Can I send you the chip (and maybe a couple of Rockwell's that are hassling me, too)? I'd like to get them back after you dump them so I can torch them and map out the bits. Sure I can dump them. To get the data out, it's a bit more nuanced. 2 of the pins (near the corner.. 39 and 40 I think) control things. One lets it force NOPs and the other lets you execute a jump. So you have to do a bunch of code that counts clocks after dumping the first bank on reset. Then you count clocks up to each jump/call and then let it execute it get into the new bank. Then you have to keep following jumps/calls to get to all banks. The HD388xx is like that only worse. If it's OK, I'll send the NEC D557L from Tactix, the Rockwell MM75 from Electronic Mastermind, the MM76EL from Scrabble Sensor, and the Hitachi HD38133 from Mattel Armor Battle. Thanks!
|
|
|
|
|
Joined: Feb 2015
Posts: 160 Likes: 6
Senior Member
|
|
Senior Member
Joined: Feb 2015
Posts: 160 Likes: 6 |
You mean the 3rd digit? Looks like it can only show 0 and 5. I added the game to MESS and it works. Also added Big Trak and Entex Jackpot. No, the normal 7-segs. The problem is when the filament blew some conductive material set up a leakage path between plates 0, 1, and 2. I could pull down the affected plates (i.e. light up 0, and plates 0,1,2 all lit, but by pulling plates 1/2 low it extinguished them).
Last edited by kevtris; 04/27/15 02:39 AM.
|
|
|
|
|
Joined: Feb 2015
Posts: 160 Likes: 6
Senior Member
|
|
Senior Member
Joined: Feb 2015
Posts: 160 Likes: 6 |
Can I send you the chip (and maybe a couple of Rockwell's that are hassling me, too)? I'd like to get them back after you dump them so I can torch them and map out the bits. Sure I can dump them. To get the data out, it's a bit more nuanced. 2 of the pins (near the corner.. 39 and 40 I think) control things. One lets it force NOPs and the other lets you execute a jump. So you have to do a bunch of code that counts clocks after dumping the first bank on reset. Then you count clocks up to each jump/call and then let it execute it get into the new bank. Then you have to keep following jumps/calls to get to all banks. The HD388xx is like that only worse. If it's OK, I'll send the NEC D557L from Tactix, the Rockwell MM75 from Electronic Mastermind, the MM76EL from Scrabble Sensor, and the Hitachi HD38133 from Mattel Armor Battle. Thanks! Yeah that's fine.
|
|
|
|
|
Joined: Mar 2015
Posts: 240 Likes: 3
Senior Member
|
|
Senior Member
Joined: Mar 2015
Posts: 240 Likes: 3 |
Are you (or Kevin) able to dump the ROM from Raise the Devil non-destructively? I had always assumed Black Knight Pinball was just a re-branded RTD, but I opened it to look at the chip and it is different... It's labeled MP1296 MSL^8223. It's an extremely rare game, so not one I'd want damaged... 
|
|
|
|
|
Joined: Mar 2006
Posts: 1,079 Likes: 6
Very Senior Member
|
|
Very Senior Member
Joined: Mar 2006
Posts: 1,079 Likes: 6 |
If numbering in hh_tms1k holds then MP1296 should be a tms1100; if the chip is rev E or later it cannot be easily dumped due to the addition of what we assume was a security feature on the die (which Kevtris calls the "Fuck-you-FET") which holds the d7 rom line permanently in one state during dumping/test mode, preventing that bit from being read out. Die revisions D and older of the tms1100 will dump fine (although we cannot read the MPLA (custom instructions) or OPLA (segment/output) data without a decap)
Do you have a picture of the chip itself including all markings?
LN
"When life gives you zombies... *CHA-CHIK!* ...you make zombie-ade!"
|
|
|
|
|
Joined: May 2004
Posts: 996 Likes: 103
Senior Member
|
|
Senior Member
Joined: May 2004
Posts: 996 Likes: 103 |
Just wanted to say thanks to everyone working on those old games, but there is a distinct lack of screenshots in this thread!
|
|
|
|
|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
|
OP
Very Senior Member
Joined: May 2010
Posts: 1,051 |
My Raise the Devil is a B-revision TMS1100, so it's certainly possible that Black Knight is, too. Is it a full-size 28-pin DIP or the smaller shrink DIP? If it's the SDIP, then it's probably not a B. Kevin has dumped many B-revision TMS1100s with no damage. It might be a pain, but we (Hap ) could probably figure out the PLAs.
|
|
|
|
0 members (),
305
guests, and
1
robot. |
|
Key:
Admin,
Global Mod,
Mod
|
|
|
Forums9
Topics9,320
Posts121,923
Members5,074
| |
Most Online1,283
Dec 21st, 2022
|
|
These forums are sponsored by Superior Solitaire, an ad-free card game collection for macOS and iOS. Download it today!
|
|
|
|
