MAMEWorld >> News
View all threads Index   Threaded Mode Threaded  

Pages: 1

ClawGrip
Reged: 10/19/03
Posts: 132
Send PM


Caps0ff news
#384747 - 12/23/19 08:54 PM


https://caps0ff.blogspot.com/2019/12/dump-december-8051-and-lasers.html

What an fantastic month!!



Hydreigon
MAME Fan
Reged: 12/30/17
Posts: 136
Send PM


Re: Caps0ff news new [Re: ClawGrip]
#384748 - 12/23/19 09:58 PM


So much decaps for the time. One chip I would like to see better reverse engineered is that funky Actel A42MX09 chip on Area 51 Site 4's JAMMIT pcb. It's been decapped and read (by Guru) but we never got the information on the chip's contents. Not correct; Confused the last column on his page for what was done instead of what had to be done.



-.-



Master O
Yes, Even Parodius Music
Reged: 11/20/06
Posts: 1332
Send PM


Re: Caps0ff news new [Re: ClawGrip]
#384749 - 12/23/19 10:06 PM


> https://caps0ff.blogspot.com/2019/12/dump-december-8051-and-lasers.html
>
> What an fantastic month!!

As usual, fascinating insight from caps0ff into how these chips are decapped.



"Note to Noobs:

We are glad to help you but simply posting that something does not work is not going to lead to you getting help. The more information you can supply defining your problem, the less likely it will be that you will get smart-alec replies.

C.D.~"



AJR Hacker
MAME Developer
Reged: 01/31/16
Posts: 146
Send PM


Re: Caps0ff news new [Re: Hydreigon]
#384750 - 12/23/19 10:20 PM


> So much decaps for the time. One chip I would like to see better reverse engineered
> is that funky Actel A42MX09 chip on Area 51 Site 4's JAMMIT pcb. It's been decapped
> and read (by Guru) but we never got the information on the chip's contents.

Not sure if it would have any readable contents, given that A42MX09 is a FPGA.



Pr3tty F1y
MAME Fan
Reged: 07/18/05
Posts: 408
Send PM


Confused new [Re: ClawGrip]
#384753 - 12/24/19 10:25 AM


> https://caps0ff.blogspot.com/2019/12/dump-december-8051-and-lasers.html
>
> What an fantastic month!!

Can anyone help me out here with this one:
PIC16C54 from Blade Force (C059)

The image seems to be a screenshot from the 3DO game Blade Force:


However, I'm not understanding the PIC chip for a 3DO game, so I'm guessing I'm missing something or there is some confusion regarding the attribution of that chip.

Any help?



Haze
Reged: 09/23/03
Posts: 5264
Send PM


Re: Confused new [Re: Pr3tty F1y]
#384754 - 12/24/19 10:39 AM


> > https://caps0ff.blogspot.com/2019/12/dump-december-8051-and-lasers.html
> >
> > What an fantastic month!!
>
> Can anyone help me out here with this one:
> PIC16C54 from Blade Force (C059)
>
> The image seems to be a screenshot from the 3DO game Blade Force:
>
>
> However, I'm not understanding the PIC chip for a 3DO game, so I'm guessing I'm
> missing something or there is some confusion regarding the attribution of that chip.
>
> Any help?

Not sure why that image was selected, the PIC file was named Blade Force too.

It's from the unlicensed NES game Block Force (aka Square Force) and has allowed for the emulation of the proper, non-hacked version of those games in NES emulators. (Previously it was only possible to run hacked versions extracted from multi-games)

(the 'mapper' in those cartridges is a PIC, which Caps0ff dumped)



Pr3tty F1y
MAME Fan
Reged: 07/18/05
Posts: 408
Send PM


Re: Confused new [Re: Haze]
#384755 - 12/24/19 10:42 AM


> > > https://caps0ff.blogspot.com/2019/12/dump-december-8051-and-lasers.html
> > >
> > > What an fantastic month!!
> >
> > Can anyone help me out here with this one:
> > PIC16C54 from Blade Force (C059)
> >
> > The image seems to be a screenshot from the 3DO game Blade Force:
> >
> >
> > However, I'm not understanding the PIC chip for a 3DO game, so I'm guessing I'm
> > missing something or there is some confusion regarding the attribution of that
> chip.
> >
> > Any help?
>
> Not sure why that image was selected, the PIC file was named Blade Force too.
>
> It's from the unlicensed NES game Block Force (aka Square Force) and has allowed for
> the emulation of the proper, non-hacked version of those games in NES emulators.
> (Previously it was only possible to run hacked versions extracted from multi-games)
>
> (the 'mapper' in those cartridges is a PIC, which Caps0ff dumped)

Thank you Haze!

I was just coming back to say I just found it too:
https://wiki.nesdev.com/w/index.php/NES_2.0_Mapper_355



Hydreigon
MAME Fan
Reged: 12/30/17
Posts: 136
Send PM


Re: Caps0ff news new [Re: AJR Hacker]
#384770 - 12/24/19 07:20 PM


This "FPGA" is also known for a security measure named "antifuse". There are readable contents but they are all encrypted.

An oscillator and DS1232, microchip monitor, are present on this pcb meaning there has to be some sort of custom MCU well hidden inside that A42MX09. Very clever to use a protection device/MCU to control inputs.

Some Sega Naomi carts also used a different "antifuse" Actel FPGA for encryption which is understood. Someone, possibly MetalliC, should explain how this Actel FPGA functions to get a better understanding to hook Area 51 Site 4's inputs.

A basic understanding on Actel's antifuse protection scheme: https://www.microsemi.com/document-porta...device-security



-.-



MooglyGuy
Renegade MAME Dev
Reged: 09/01/05
Posts: 2287
Send PM


Re: Caps0ff news new [Re: Hydreigon]
#384774 - 12/25/19 05:20 AM


> Someone, possibly MetalliC, should explain how this Actel FPGA
> functions to get a better understanding to hook Area 51 Site 4's inputs.

That's the thing though, the use of an FPGA in any given circuit is unique to that circuit.

The bitstream that configures its macrocells is ultimately what determines how it functions in a given application. FPGAs are only very rarely emulated on a bitstream level, though, they're typically black-boxed based on what the particular application-specific functionality does.

The end result of this is that knowing how it works in Sega's particular application doesn't help figure out how it works in, say, Atari's application of it. The underlying functionality could be, and most likely is, entirely different.



Hydreigon
MAME Fan
Reged: 12/30/17
Posts: 136
Send PM


Re: Caps0ff news new [Re: MooglyGuy]
#384782 - 12/25/19 02:39 PM


> That's the thing though, the use of an FPGA in any given circuit is unique to that
> circuit.
>
> The bitstream that configures its macrocells is ultimately what determines how it
> functions in a given application. FPGAs are only very rarely emulated on a bitstream
> level, though, they're typically black-boxed based on what the particular
> application-specific functionality does.
>
> The end result of this is that knowing how it works in Sega's particular application
> doesn't help figure out how it works in, say, Atari's application of it. The
> underlying functionality could be, and most likely is, entirely different.


Thanks. I don't even know how I feel about this situation. It may as well be a "rare case" where the FPGA will have to be emulated on a bitstream (seeing how gun/analog inputs are involved). At least I could see why hooking proper inputs for Area 51: Site 4 proved difficult.

I guess I'm correct on how this specific A42MX09 is a funky chip. This may as well be on hold until a proper plan of attack is devised (probably years from now).



-.-



AJR Hacker
MAME Developer
Reged: 01/31/16
Posts: 146
Send PM


Re: Caps0ff news new [Re: Hydreigon]
#384808 - 12/26/19 06:10 PM


> It may as well be a "rare
> case" where the FPGA will have to be emulated on a bitstream (seeing how gun/analog
> inputs are involved). At least I could see why hooking proper inputs for Area 51:
> Site 4 proved difficult.

Rare, perhaps, but not unique. Sega's 837-12079 light gun board used by Virtua Cop 2 and other Model 2 games is another FPGA-based solution, here using a Altera FLEX EPF8282ALC84-4 along with a MB3771 power monitor, various logic and interface chips, and a Sega 315-5338A I/O controller. Sega's Naomi-era 838-13143 "GUN SENSE HOD" board instead uses a standard MCU model with an external EPROM, though its architecture (NEC 78K/2) isn't supported in MAME yet.



Hydreigon
MAME Fan
Reged: 12/30/17
Posts: 136
Send PM


Re: Caps0ff news new [Re: AJR Hacker]
#384827 - 12/27/19 01:51 PM


> Rare, perhaps, but not unique. Sega's 837-12079 light gun board used by Virtua Cop 2
> and other Model 2 games is another FPGA-based solution, here using a Altera FLEX
> EPF8282ALC84-4 along with a MB3771 power monitor, various logic and interface chips,
> and a Sega 315-5338A I/O controller. Sega's Naomi-era 838-13143 "GUN SENSE HOD" board
> instead uses a standard MCU model with an external EPROM, though its architecture
> (NEC 78K/2) isn't supported in MAME yet.

I just figured the gun inputs in the Model 2 games controlled by their respective I/O boards. The gun board is a means to send analog data to the I/O board. The Gun Sense HOD board works in a similar fashion.

Carnevil and Invasion: The Abductors is more similar to Area 51: Site 4 where there are normally no adc related devices from the main pcb. Both of them use a PLD device directly mapped to the main cpu.

This marks another pcb set I need to map a schematic of.



-.-



*=/STARRIDER\=*
MAME Punk
Reged: 02/05/12
Posts: 351
Loc: an open field west of a white house with a boarded front door.
Send PM


Re: Caps0ff news new [Re: Hydreigon]
#384842 - 12/28/19 10:38 PM


I'm not sure why you think it's been decapped and read???
It's still shown as untouched on Guru's Decapping page.
I am the guy that provided Guru with that chip along with the alternate BIOS chip, as well as providing the alternate CHD image.
I asked Guru to send it to CAPS0ff but like AJR Hacker, he doesn't believe it contains any readable contents.



There is no law in the arena




Hydreigon
MAME Fan
Reged: 12/30/17
Posts: 136
Send PM


Re: Caps0ff news new [Re: *=/STARRIDER\=*]
#384848 - 12/29/19 02:25 PM


In that case, I was very mistaken. I thought the second to last column on his page meant what was done as opposed to what should be done.

Looks can be deceiving. I'd risk the decap because the main cpu may not be capable of analog inputs and no additional A/D converters are present on the JAMMIT pcb.



-.-



*=/STARRIDER\=*
MAME Punk
Reged: 02/05/12
Posts: 351
Loc: an open field west of a white house with a boarded front door.
Send PM


Re: Caps0ff news new [Re: Hydreigon]
#384862 - 12/30/19 08:35 PM


I'm not as technically inclined as yourself, but yeah that was my intention when I sent it.
Get it Decapped and get Area 51 Site 4 inputs working!



There is no law in the arena




jonwil
Lurker
Reged: 10/06/03
Posts: 537
Send PM


Re: Caps0ff news new [Re: ClawGrip]
#384880 - 01/01/20 05:45 AM


Have the Fujitsu DSP chip(s) from Star Wars Arcade been secured yet?



Olivier Galibert
Semi-Lurker
Reged: 09/21/03
Posts: 398
Send PM


Re: Caps0ff news new [Re: jonwil]
#384975 - 01/10/20 12:52 PM


> Have the Fujitsu DSP chip(s) from Star Wars Arcade been secured yet?

Is that a joke?


Pages: 1

MAMEWorld >> News
View all threads Index   Threaded Mode Threaded  

Extra information Permissions
Moderator:  John IV, Robbbert, Tafoid 
0 registered and 380 anonymous users are browsing this forum.
You cannot start new topics
You cannot reply to topics
HTML is enabled
UBBCode is enabled
Thread views: 2994