Reverse engineering 161 in 1 cartridge to change Rom games
- Thread starter goguelnikov
- Start date
hatmoose
Enlightened
Excellent print! I had forgotten about the awesome picknmix.
Also link to a picknmix PCB that means no-need to hold the button down on boot
https://www.arcade-projects.com/thr...-enables-picknmix-on-universe-bios-4-0.13916/
Butter Meister
Student
Congratulations on accomplishing what I could not.
Another possible approach for reprogramming the flash chips is to use JTAG, which may be hard with such an old CPLD chip (the version of Quartus that supports this chip runs on XP
)With the "Stilt Chips" being as weird as they are, a drop in replacement doesn't exist. Maybe if the address lanes were split over two flash memory chips like the MSP55LV100S ones are?
Thank you, I'm still interested in this project, and time will tell where it will come. maybe the Chinese will release a new cartridge with updated content, and maybe I myself will be able to create a cheap alternative to expensive flash sd cartridges.Congratulations on accomplishing what I could not.
JTAG is intended for programming cpld. quartus 13 works fine for me under windows 11 - no problem with it. the problem is that some of the flash chips pins are tied to the ground or vcc, and must be controlled from the outside. it is very difficult to cut the traces there, since sometimes there are no traces - the pin is tied to the polygon.
as long as the Chinese have stocks of MSP55LV100S and F0095H0 we have the opportunity to use them to create cheap cartridge systems up to $100. I think it's worth taking advantage of it.
maki
Student
Best way to make people copy you, is to be successful and open source
I'm really in awe of this project and all the effort people put in and what was already achived!
Last edited:
I can't do this yet. None of the sellers on Ali gives any contacts.
Butter Meister
Student
YourPalCeej
Enthusiast
new user, first message? hootie hoooooo
And this is your first message? Chatgpt is that you?
Blio Seri
Enthusiast
What you have achieved so far is amazing, well done sir.
But there is also a harware hurdle to overcome: those cartridges run 3.3V devices on 5V buses, therefore level shifters should be added.
At this point, I can successfully dump, erase, write, and verify all three flash chips: F0095H0 AKA stilt - (CV), MSP55LV100S (P), and JS28F512 (SM).
I've finished RE-tracing of the 161-in-1 V3 cartridge and creating definitions for the CPLD for Quartus. You can view the spreadsheet documents here.
I've (almost) finished a PC program that compiles dumps for all ROMs, patch menus, etc.
Now I'm starting to write the design of the CPLD's on the verilog. However, I still have a few questions and knowledge gaps to be resolved.
Stay tuned.
I've finished RE-tracing of the 161-in-1 V3 cartridge and creating definitions for the CPLD for Quartus. You can view the spreadsheet documents here.
I've (almost) finished a PC program that compiles dumps for all ROMs, patch menus, etc.
Now I'm starting to write the design of the CPLD's on the verilog. However, I still have a few questions and knowledge gaps to be resolved.
Stay tuned.
this is so awesome! I couldnt help but order a mvs version 3 now
. Please let me know if I can assist in any way.I have a usb altera blaster that I can use and some other tools..
I can second thatthis is so awesome! I couldnt help but order a mvs version 3 now
I have a usb altera blaster that I can use and some other tools..
@Vortex if you need someone for testing, I have a v3 cart here.
One issue that is still not clear to me is how to return to the game select menu.
Now in EACH game has a injected code in the vblank int. to check if the <start> button is pressed for 5 seconds, and if it is pressed, then a reset occurs with ID=0 (menu) for the CPLD's.
The disadvantage of this method is 1) the original game code is broken (unibios CRC check will not PASS). 2) the method uses user RAM and thus also breaks the original game.
Therefore, some games runs with glitches or may not work at all. I want to get away from this. But I still don't know how to do this without changing the game code.
Surely there is another way to intercept buttons.
Any ideas?
Now in EACH game has a injected code in the vblank int. to check if the <start> button is pressed for 5 seconds, and if it is pressed, then a reset occurs with ID=0 (menu) for the CPLD's.
The disadvantage of this method is 1) the original game code is broken (unibios CRC check will not PASS). 2) the method uses user RAM and thus also breaks the original game.
Therefore, some games runs with glitches or may not work at all. I want to get away from this. But I still don't know how to do this without changing the game code.
Surely there is another way to intercept buttons.
Any ideas?
A, very simple idea, is to forgot the in game reset. Of course it's cool, but I prefer perfect games than a menu...
Some more ideas:
- it may not be the game to handle this but the bios
- maybe rerouting service menu to an in game reset
Some more ideas:
- it may not be the game to handle this but the bios
- maybe rerouting service menu to an in game reset
What would happen with the pic'n'mix option in the Unibios now?
I guess the game list is probably hard coded in the bios, but the game ID or 'slot' (for want of a better term) may work to start a new game.. and handle the menu/reset angle?
I guess the game list is probably hard coded in the bios, but the game ID or 'slot' (for want of a better term) may work to start a new game.. and handle the menu/reset angle?