Friday, February 21, 2020

Maybe MAME will read the good night stories for your kids in the near future



 A pretty interesting system for small kids is the STORY READER or GESCHICHTEN ERZÄHLER (how it's called in germany).
This system uses paper-books and cartridges (which contain the audio). Each page has small metal rectangles between the papers, so the console knows which page is currently opened.

The cartridges have only a 10-pin-connector which Sean Riddle reversed really quickly and got 23 english cartridges dumped.
The main problem was that it uses serial rom's (under one or two globs) for each cart. Which are not that easy to dump with normal programmers.
So i contacted Porchio if he could make an Arduino-based-dumper for this system and only a few days later i got his finished work sent.

The now available dumper is working perfectly with an Arduino UNO and only needs 6 wires. Which means it's pretty cheap and easy to built.

Dumping a 8mbit cartridge takes about 2 minutes.


Seven german carts for this system are now also dumped and i will try to get my fingers on the other 8 german carts.

Thanks to Sean and Porchio for this amazing work!

Hopefully someone will take a look at this stuff, as i'm pretty sure, if the "audio" is emulated in MAME it will be an easy hook up with the scanned pages and that way MAME could put your kids to bed.

Sunday, January 26, 2020

MSP55LV100S - SSOP70

Looks like this chip is completely undocumented in the net and a couple of people are searching for the pinout of this chip!

here it is:



confirmed as good on two dumped flashroms.

Monday, January 13, 2020

Casio Loopy - Little Romance

Next piece inside SSJ's package was the Casio Loopy cartridge Little Romance.






the roms got desoldered and dumped directly.
This game is now also preserved.

We are still in search of the last undumped Casio Loopy cartridge Chakura-kun no Omajinai Paradise (チャクラくんのおまじないパラダイス), contact us if you have it and want to help to preserve it.

Thx to SSJ for sending lending us his carts!

 

Casio Loopy - Video Seal Wordprocessor XK-700

SSJ sent me a package with some great stuff inside! (You may have seen some of it's content already at Haze's 2020 preview-blogpost. All GameKing-carts were dumped a couple of days ago.

Also included in this package was this Casio Loopy - Video Seal Wordprocessort XK-700 device. Mostly known as MAGICAL SHOP. A pretty rare device, more infos about could be read here.

It has an internal rom and is completely undumped!

Pictures of the internal hardware:






The rom got desoldered and dumped directly!
Afterwards i did give it a try in MAME (knowing that the emulation of the Loopy is still very primary) and we got this:






Another great and rare item preserved.

Now i will get to the next piece inside the SSJ's package...stay tuned!

Saturday, November 30, 2019

Lexibook JG7415 - Are they crazy?



The Lexibook JG7415 is an 120in1 games- console, which just used the popularity of the WII to get sold as much as possible.
I bought this console locally here just to see if these games are also Sunplus based.

When i opened the console i was surprised that the case was 90% empty. The complete pcb of the console would have easily fit inside one controller.

But what was more surprisingly is the marking Zone 100 110728 v2.1 on the board! Zone is known for it's own Multigame-Consoles, like Zone40 and Zone60, which are both also already emulated in MAME.
So this console was likely be an emulation-target for MAME too.



Next step was to dump this rom!
As the Zone60 (which has 60 games) has a 64mb rom, i was pretty sure that this console (which has 120 games) will have a 128mb rom.
But the rom has A0-A26, which would indicate a 256mb rom!

As this is nothing you can just desolder and put in your programmer for reading, some soldering had to be done.
Luckily the ArduinoMega is an amazing tool for this.


Soldering everything together and checking all connections just took about 1,5 hours.
The only problem with the Arduino, dumping a 256mb rom with it takes about 3,5hours!

First dump was done over night and i sent the dump to Haze for checking! The games booted, but the interesting fact was that only 128mb (split up over the complete romarea) of the 256mb were used.
To verify the dump it was needed to at least dump it one more time...so we had to wait another 3,5hours for verification.
Sad thing, the dumps did not match!
So i dumped it another time, which took another 3,5hours!

While i dumped it the third time, Haze sent me the following message, as he was thinking, that they used known faulty flashroms for this console. And that's why they used 256mb flashroms and only used 128mb of it:

if you divide the ROM into 8MB chunks this is how it maps in terms of used / unused
if the bad bytes are in the not selectable or unused blocks then there's probably nothing to worry about, might even be just bad ROM they used on purpose

0x0000000 0x07fffff - used
0x0800000 0x0ffffff - used
0x1000000 0x17fffff - not selectable, unused
0x1800000 0x1ffffff - not selectable, unused
0x2000000 0x27fffff - not selectable, unused
0x2800000 0x2ffffff - not selectable, unused
0x3000000 0x37fffff - used
0x3800000 0x3ffffff - used
0x4000000 0x47fffff - used
0x4800000 0x4ffffff - used
0x5000000 0x57fffff - not selectable, unused
0x5800000 0x5ffffff - not selectable, unused
0x6000000 0x67fffff - not selectable, unused
0x6800000 0x6ffffff - not selectable, unused
0x7000000 0x77fffff - used
0x7800000 0x7ffffff - used

0x8000000 0x87fffff - used
0x8800000 0x8ffffff - used
0x9000000 0x97fffff - not selectable, unused
0x9800000 0x9ffffff - not selectable, unused
0xa000000 0xa7fffff - not selectable, unused
0xa800000 0xaffffff - not selectable, unused
0xb000000 0xb7fffff - used
0xb800000 0xbffffff - used
0xc000000 0xc7fffff - used
0xc800000 0xcffffff - selectable but unused
0xd000000 0xd7fffff - not selectable, unused
0xd800000 0xdffffff - not selectable, unused
0xe000000 0xe7fffff - not selectable, unused
0xe800000 0xeffffff - not selectable, unused
0xf000000 0xf7fffff - selectable but unused
0xf800000 0xfffffff - selectable but unused
 
I rechecked this with my (now three) dumps and guess what! All three dumps matched exactly in these area's :
0x0000000 0x07fffff - used
0x0800000 0x0ffffff - used

0x1000000 0x17fffff - not selectable, unused
0x1800000 0x1ffffff - not selectable, unused
0x2000000 0x27fffff - not selectable, unused
0x2800000 0x2ffffff - not selectable, unused
0x3000000 0x37fffff - used
0x3800000 0x3ffffff - used
0x4000000 0x47fffff - used
0x4800000 0x4ffffff - used

0x5000000 0x57fffff - not selectable, unused
0x5800000 0x5ffffff - not selectable, unused
0x6000000 0x67fffff - not selectable, unused
0x6800000 0x6ffffff - not selectable, unused
0x7000000 0x77fffff - used
0x7800000 0x7ffffff - used

0x8000000 0x87fffff - used
0x8800000 0x8ffffff - used

0x9000000 0x97fffff - not selectable, unused
0x9800000 0x9ffffff - not selectable, unused
0xa000000 0xa7fffff - not selectable, unused
0xa800000 0xaffffff - not selectable, unused
0xb000000 0xb7fffff - used
0xb800000 0xbffffff - used
0xc000000 0xc7fffff - used
0xc800000 0xcffffff - selectable but unused

0xd000000 0xd7fffff - not selectable, unused
0xd800000 0xdffffff - not selectable, unused
0xe000000 0xe7fffff - not selectable, unused
0xe800000 0xeffffff - not selectable, unused
0xf000000 0xf7fffff - selectable but unused
0xf800000 0xfffffff - selectable but unused


Which mean's ALL used (selectable) area's are GOOD dumped and ALL unused (not selectable) area's are BAD dumped and were different between all three dumps!

Most likely they got the faulty 256mb roms for a very cheap price and just programmed the games around the not working area's!

Without Haze and the working emulation of the Sunplus system, we would have never been able to see this and most likely would have thought that the dumps are BAD. I would have also invested hours of work and checking if my dumping rig has faults are something like that, just because they used bad flashroms in their product's. ==> Are they crazy! ;-)

The rom is already added and the games are working with the next release of MAME, here are shots of it running in MAME:


















Another challenge for me and another perfect teamwork with Haze!

Wednesday, November 27, 2019

Genius TableTop - Black Magic CX

Got another Vtech Learning console yesterday!



This console is a TableTop "PC" with a wireless Keyboard.

The first thing i saw, when i opened the console was a handwritten piece of paper with the text "Zlatko 24 Jahre - Februar 2000" (Zlatko 24 years - February 2000)...this is most likely the guy who built this machine together....but why did he wrote his age on the paper too???


The more interesting thing was found on the pcb itself. this toy uses the same TSOP48 chip package type, as the I.Q.Unlimited cartridge, which i dumped three days ago. (https://team-europe.blogspot.com/2019/11/vtech-iqunlimited-german-rarest.html)



Good that i already built a dumping adapter for this chip-type. The dumping process worked perfectly and this maskrom had a 2mb rom inside.

Included with this console is also a cartridge called "EUROPA". This cartridge is basically empty and working only as a jumper. So the "game" is already inside the internal maskrom of the console.

Here are some videos, the manual and some pictures of the console:
https://archive.org/details/GeniusBlackMagicCX


The rom should get added to MAME the next few days.



Sunday, November 24, 2019

VTech I.Q.Unlimited (German) - rarest cartridge in the Vtech-Universe

Nearly seven years ago, i dumped the rom of the I.Q.Unlimited laptop from VTech. (https://team-europe.blogspot.com/2012/12/vtech-iq-unlimited-german.html)

This machine was a big failure in 1999, as the price was way to high and nobody knew if it's now a kids-learning-toy or a work-machine for adults.
That said, the sales of the I.Q.Unlimited were pretty bad back then.

Today the machine has some fan's, because of the Dragonball EZ cpu inside, which is normally only used on PalmOS machines.
And that's also the reason, why the prices are currently most likely in the range of 50-100EUR for a used machine.

Now to the interesting part:
As the machine did not sale very well in the late nineties, and as no information were anywhere in the internet, i always thought that no cartridges got ever released for this machine. (beside the SAVE-Cartridge, which could get used to store some data on it).
Even in the last seven years i never did see any cartridge popping up in the auction platforms.

This all changed last week. I found and bought a complete unit which included a "learning"-cartridge for this system!
It's called "Englisch für Anfänger" (English for beginners):


After playing a little bit with the complete system and the cartridge (both working really well),  i opened it:

VTech used a LH5S4 maskrom with a non-standard TSOP48 pinout. While i know the "LH*"-maskroms already pretty good, as VTech used them in most of their toys, i basically knew, because of the LH5S4, that this is a 4mbit (512kb) maskrom. But the pinout was completely unknown and nothing i have seen so far.
I searched the net for all LH*-datasheets and after about 2 hours i found the correct pinout. I proofed all lines and while this is for a bigger maskrom, everything fitted perfectly!
This even showed that the I.Q. could take cartridges up to 32mbit as all lines go to the cartridge connector.


 Speaking about the cartridge-connector, here is the cartridge-pinout:
01|GND
02|NC
03|D10
04|D11
05|D4
06|D3
07|D12
08|D2
09|D5
10|D9
11|D13
12|D1
13|D6
14|D8
15|D14
16|D0
17|D7
18|OE
19|D15
20|A4
21|A0
22|A16
23|A1
24|A15
25|A2
26|A14
27|A3
28|A13
29|A12
30|A11
31|A10
32|A9
33|A5
34|A8
35|WE??
36|A19
37|A20
38|->JUMPER R4
39|NC
40|CE
41|A18
42|A17
43|A7
44|A6
45|VCC

Next step was to dump the maskrom. For sure, none of my programmers supported this kind of pinout (as it's really ways off, of the standard TSOP48 pinout). So i had to wire an adapter for dumping it.
While i desoldered the maskrom, i did see that the package type is about 3mm shorter as a standard TSOP48 chip, so i couldn't use a normal TSOP48-ZIF-socket to dump the maskrom, as the legs would not connect to the socket.

After another two hours of work i ended up with this:
My ArduinoMega based LH5S4 dumper! ;-)
Which is also usable for all future LH5S4 or  LH5332 maskroms in the TSOP48 package.

I dumped the complete maskrom as the 32mbit variant and got the same 512kb over and over again:
easier to read if you byteswap this:

WTF! "Entertain Trivia" does not sound like "Englisch für Anfänger" or "English for Beginners".
I hoped for something like this happening! As we already knew that VTech did put two games inside most of their cartridges! (easier/cheaper to produce one cartridge for two games and just select the first half of the rom or the second half of the rom with a soldered switch)

Looking at the second half of the dump you see this:
And this is what i was looking for!

So while i thought the I.Q.Unlimited did not have any cartridges ever released! We now have the content of two!

The dump will get forwarded to MAME and should get added in the next few days.

This was a really great challenge for at least half a day, but the story with the I.Q.Unlimited will continue...
My next step will be to create a flashcart for this device!





Saturday, November 16, 2019

Konami Picno Flashcart

Another system, which did not have any flashcart so far, is the Konami Picno.

This flashcart has 1mb of space and supports all available games.


This design consists of three layers of PCB's, to get the best slot-in solution for this console.


Did not expect that it will work that good, but the result is pretty amazing, easy to solder and cheap to produce.


Price for one flashcart (ready to use, with one 27C801 eprom) is 16EUR.