|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
Very Senior Member
Joined: May 2010
Posts: 1,051 |
Unrelated, this has been nagging me :P Anyone know what chips are in Milton Bradley Dream Phone? I'd guess just a tsp50c10, given when it came out, and how it works.
LN I think that's it- the 1991 version has a 16-pin DIP labeled 5507 JKT DREAM PHONE2 CSM11120AN The 1989 Electronic talking Battleship TSP50C10 was labeled 85AX02T B-SHIP 1998 CSM10287AN And Dream Phone has the same 4-transistor amplifier as in the data sheet.
|
|
|
|
Joined: Mar 2002
Posts: 1,371 Likes: 132
Very Senior Member
|
Very Senior Member
Joined: Mar 2002
Posts: 1,371 Likes: 132 |
Ah, you purchased one? I believe Lord Nightmare is interested getting this chip emulated.
|
|
|
|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
Very Senior Member
Joined: May 2010
Posts: 1,051 |
Yeah, someone in the city had just the phone for sale, and it got here really fast.
The "Design Manual" says there is test code at the top of memory, but doesn't go into detail. Maybe some combination of inputs during reset jumps there? There is a bunch of info on how to program/verify the OTP version; maybe some piece of that can also be used on the ROM version?
|
|
|
|
Joined: Mar 2006
Posts: 1,080 Likes: 7
Very Senior Member
|
Very Senior Member
Joined: Mar 2006
Posts: 1,080 Likes: 7 |
So far we know of the following tsp50cxx chips: 1. Keynote speech synthesizer module that Kevtris has ("2472JXT // CSM10075AN") 2. MB Electronic Talking Battleship(1989) ("2234673 // BATTLESHIP // CSM10017AN") 3. MB Electronic Talking Battleship(1998?) ("85AX02T // B-SHIP 1998 // CSM10287AN") 4. MB Dream Phone(1991) ("5507 JKT // DREAM PHONE2 // CSM11120AN") 5. Echo II Speech Synthesizer Card for Apple2 (1989) ("ECHO-2 SEC // LU 9020 // 25954 PHILIPPINES") [note this uses a different, earlier tsp50c01 or 02 or other part with a slightly different pinout to tsp50c10] 6. MB Omega Virus(1992) ("3253ACT // OMEGA VIRUS // CSM11161AN") 7. Mystery Vtech unit from Dumping Union ("84C91HT // VIDEO TECH // CSM10150AN") we suspect that MB Mall Madness also uses a tsp50cxx but don't have the chip label yet. Also from Boardgamegeek forums we know a German voice version of Omega Virus exists as well.
I believe the number even tells you what type of tsp50cxx it is, its the first 2 digits after CSM, next 3 digits are die number, letter is die rev and N means plastic so CSM11120AN = TSP50C11A die # 120, plastic package
Let's try to figure out that test mode, it should be possible to dump these things without any decap at all.
LN
Last edited by Lord Nightmare; 05/08/15 04:53 AM. Reason: add note about german omega virus
"When life gives you zombies... *CHA-CHIK!* ...you make zombie-ade!"
|
|
|
|
Joined: Mar 2006
Posts: 1,080 Likes: 7
Very Senior Member
|
Very Senior Member
Joined: Mar 2006
Posts: 1,080 Likes: 7 |
I picked up just the voice unit from an omega virus board off ebay, so we will have one of those to play with.
LN
"When life gives you zombies... *CHA-CHIK!* ...you make zombie-ade!"
|
|
|
|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
Very Senior Member
Joined: May 2010
Posts: 1,051 |
Cool. I bet it has more interesting phrases than Dream Phone! Although Dream Phone could probably be hacked into a phreaking tool  I need to read the instructions- so far all I get is "Sorry, wrong number. Dial again." I picked up another Battleship, too. It's the same as the other one; the box, the bottom of the board and the code book all say copyright 1989. But the first PCB has a date code of 8105 and the 2nd has 8223??? The top line of the new chip is different; instead of 85AX02T, this one has 88AR7HT. The resonator on Battleship is 8MHz; the one on Dream Phone is 9.6MHz I finally used a frequency counter on the 2 different Microvision Pinball carts; the one with the E rev chip runs 6.7% faster on the 3 pins that I measured than the B rev. I cleaned the Plus One die again and was setting it up under the microscope when it disappeared. I've "tiddly-winked" other dies before, but I've always found them eventually. This one's so tiny, I didn't even hear it hit wherever it landed. I used a bright LED flashlight to try to see it glint, but never found it. Hopefully I've got enough pics of the ROM to figure out all the bits. I dumped the COP410L in Red Light Green Light visually; I'll trace the wiring and dump it electronically, too. I haven't had any luck dumping the COP421 in Einstein. All the other COP chips I've dumped are "L" versions- 444L, 421L and 410L, so maybe that's part of the issue. What's odd is that I can't even see the keyboard matrix scan with a frequency counter or oscilloscope. I know it's working because I can play, so I should see it strobe the rows. I picked up an Entex Basketball 2.
Last edited by seanriddle; 05/08/15 08:55 AM.
|
|
|
|
Joined: Mar 2013
Posts: 344 Likes: 3
Senior Member
|
Senior Member
Joined: Mar 2013
Posts: 344 Likes: 3 |
Last edited by ICEknight; 05/08/15 02:35 PM.
|
|
|
|
Joined: Mar 2015
Posts: 240 Likes: 3
Senior Member
|
Senior Member
Joined: Mar 2015
Posts: 240 Likes: 3 |
I cleaned the Plus One die again and was setting it up under the microscope when it disappeared. I've "tiddly-winked" other dies before, but I've always found them eventually. Oh man, this had me laughing so hard... Using 'tiddly-wink' as a verb just caught me completely off guard.  BTW, what model and power is your microscope?
|
|
|
|
Joined: May 2010
Posts: 1,051
Very Senior Member
|
Very Senior Member
Joined: May 2010
Posts: 1,051 |
I can smile now, but I wasn't very happy last night at 2AM crawling around the floor of my basement looking for it!
I bought one of the cheapest trinocular metallurgical microscopes that I could find, an Omano OMM200 from microscope.com. It came with 10x and 16x eyepieces and 4x, 10x, 40x and 63x objectives. I swapped out the 63x with a more useful 20x. I generally use the 10x for full die shots and sometimes the 20x for a close up of the ROM array. I also bought a camera adapter, but I've since switched to using a 50mm lens digiscoping the 10x eyepiece. I 3d-printed a threaded cone to hold the camera in alignment with the eyepiece.
I built a simple XY table using a couple of linear slides and 2 linear actuator stepper motors. I put another stepper motor on the focus knob, but I recently added a kinematic mount to level the die manually. That helps with focus, since the die is parallel with the film plane.
The latest die I'm working on, from Entex Color Football,is a TMS1400 that measures 5.85mm x 4.82mm. I shot 208 pics of the full die (16x13) using the 10x objective, which resulted in a 19700x16200 pixel image, about 3.4 pixels per micron. To make it easier to work with, I scaled it down about 2.5 times.
I still haven't had luck running any automated panorama scripts, so I manually align the pics using a program I wrote, then use Microsoft ICE to create the composite, which I clean up in GIMP. I've got another program that reads the ROM array to a binary file, then I manually verify the bits by drawing them over a picture of the ROM array.
Blowtorch to ROM file is a couple of hours per chip at best.
|
|
|
Forums9
Topics9,331
Posts122,199
Members5,077
|
Most Online1,283 Dec 21st, 2022
|
|
These forums are sponsored by Superior Solitaire, an ad-free card game collection for macOS and iOS. Download it today!
|
|
|
|