Search found 306 matches

by nocash
May 17th, 2014, 5:17 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Great. The testrom looks good. I guess now nothing can stop you getting the remaining bytes out of that chip.
Oh, and it's from the normal SCPH-1000 board? That's even better - the datasheet sounded as if it would lack dumping function - but it seems to be fully supported.
by nocash
May 16th, 2014, 1:23 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Better use this updated version: 80pin2.zip The old version stored self-modifying code at 0040h, which is supposedly overwriting the first bytes of the uploaded program, which is normally no problem --- unless you have switch bounce when triggering /RESET for starting the uploaded program. The new v...
by nocash
May 16th, 2014, 12:43 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Here's a miniature dumping function, binary with source code: 80pin.zip The binary is only 83 bytes (53h) in size, so it shouldn't collide with stack even if it's loaded to 81h. The code is fully relocatable, so it could be loaded to any RAM address. The binary begins with two NOP opcodes (9Dh,9Dh),...
by nocash
May 15th, 2014, 10:50 pm
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Interesting, good to know the 19h,29h date/version values. And very good to know that the old chips didn't support all test commands! Sounds as if the old ROMs are quite different (at least concerning test commands... which aren't too important for normal use). And you have a DTL-H1000 with MC68HC70...
by nocash
May 15th, 2014, 2:09 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Compiled a list of what is dumped, and what isn't dumped, too: <pin> <--chip name--------------------------> <--CRC32/dumped----> <date,ver> <-----console/pcb------------------------> 80pin Sony [...] E35D, 424666 185, SSAD9441D 60BC954E TriMesh 94-09-19,C0 SCPH-1000 NTSC:J PU-7, 1-655-322-11 80pin ...
by nocash
May 14th, 2014, 7:53 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Checked the other 4 versions, too. The debug version's GetDate/Version command responds with version D1h (instead of C1h), somehow I had guessed that it might do that : - ) and it's using a short SCEx timeout. The actual SCEx stuff is handled like this: It does try to read four ASCII SPACEs from the...
by nocash
May 14th, 2014, 3:11 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Whew. That are a lot of dumps, including exotic boards like DTL-H. I jump just done looking at the first two dumps: SC430944 - is just exactly 1:1 as expected - except for the byte at FFDAh. I was thinking that it might be an internal production numbers, and that it might roughly increment along wit...
by nocash
May 12th, 2014, 11:34 pm
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Cool. The SC430944PB is also used in PSones, so it's probably same as my PAL dump, aside from part number & region differences. And SC430934PB? That seems to be yet another revision that I wasn't aware that it does exist at all. And the japanese version would be interesting anyways (I don't remember...
by nocash
May 12th, 2014, 7:23 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

Grounding PB0 and PB1 shouldn't output any serial data! Better try to wire both PB0 and PB1 to 3.5V. If you are lucky (=if RX is low) then you should see serial TX data on one pin. Otherwise you could try to drag RX to GND while searching the TX pin. Ie. while looking for TX at pin number "N", try t...
by nocash
May 6th, 2014, 9:16 pm
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your CDROM BIOS

80-pin chips : The pinout is probably same as in MC68HC05L16 datasheet (best compare some pins like supply and OSC to be sure). It does support selftest mode via the IRQ1+IRQ2 pins, too. For the mode selection, one may assume that it's using Port B bit0+1, too. The only challenging part would be fi...
by nocash
May 1st, 2014, 3:30 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your own CDROM BIOS

Yes, something . Above package covers only the PSX side. There's no software included for the opposite side, since I've no clue what hardware you have... you could use a PC, a PSX, a handheld console, a modded mp3 player, or whatever suitable hardware you might have. PC with serial COM port might be...
by nocash
May 1st, 2014, 12:30 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your own CDROM BIOS

Here's the custom dumping function: Dumper.zip 512-bytes binary with source code. How to dump the CDROM SUB-CPU BIOS from your PSX/PSone console: .------------ pin31, SCOR, cut the connection 39 | 27 to Signal Processor, .-----------------. then wire Pin31 to 7.5V 40 | | 26 | C 30xx | | SC4309xxPB |...
by nocash
April 29th, 2014, 1:36 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your own CDROM BIOS

And the last one from my hardware collection dumped SCPH-5502, PAL, PCB: PU-18 (1-664-537-62) 52-pin "C 3030, SC430929PB, G63C 185, JSBH9716A" CRC32=BA87A3E0h Credits to Tomas Petto for donating the SCPH-1002 and SCPH-5502. The PU-18 board did have nice solder pads, too. Only the SCOR pin (Pin31) wa...
by nocash
April 29th, 2014, 1:10 am
Forum: Research
Topic: Playstation CPU reversing [56k Warning]
Replies: 68
Views: 85052

Re: Playstation CPU reversing.

Cool! Last sceme do clamping from -0x7FF to +0x7FF (result is signed 12bit) and one more strange operation. It round result to closest to zero even number (except -1). Whoops that's odd. And that might be why my software tests lead me to thinking that RLE output would be only 11bit wide, not 12bit. ...
by nocash
April 28th, 2014, 1:43 pm
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

Re: Dump your own CDROM BIOS

Next one dumped: SCPH-1002, PAL, PCB: LATE PU-8 (1-658-467-22) IC304 52pin "C 3021, SC430917PB, G63C 185, JSAF9623G" - 16.5K ROM CRC32=96A79014h It's pretty much same as the dump from the psxdev.ru decapping project. Only differences are region specific: The obvious ones are: Different SCEx string, ...
by nocash
April 27th, 2014, 6:07 am
Forum: Research
Topic: How to dump your CDROM BIOS (Firmware)
Replies: 132
Views: 152874

How to dump your CDROM BIOS (Firmware)

Download the CD-ROM Firmware Dumps I've dumped the PSone/PAL CDROM controller BIOS last night, CRC32=2669A1A7h for the 16.5Kbyte ROM-image (IC304 52pin, chip name: "C 3060, SC430943PB, G63C 185, SS0L0130E" ). That's been done using Motorola's build-in self-dumping function. The way how to enter the...
by nocash
April 25th, 2014, 9:26 pm
Forum: Programming/CPU
Topic: Understanding Dynamic Memory Allocation (malloc)
Replies: 9
Views: 10052

Re: Understanding Dynamic Memory Allocation (malloc)

Yeah, well, it tries to initialize the heap to EMPTY size, and does then corrupt that setting. But even without that bug you would need to initialize it yourself (assuming you want to the heap space to be bigger than 0 bytes). Anyways, the reason why one must manually initialize the heap is that the...
by nocash
April 17th, 2014, 10:36 pm
Forum: Documentation
Topic: Why no wiki?
Replies: 2
Views: 4740

Re: Why no wiki?

Well, using a forum search function is really painful. It can be hard to find old posts - even if you know that you have read (or written) that post some months ago. Forums are great for discussing new findings, but they don't work well to preserve those findings. Wikis can be really more structured...
by nocash
March 29th, 2014, 6:03 am
Forum: Research
Topic: Playstation CPU reversing [56k Warning]
Replies: 68
Views: 85052

Re: Playstation CPU reversing.

I don't thint there are special units for Cr, Cb, Y and others. It's just no place for them among unknown units. Yes, RLE and IDCT should be same/shared for Cr, Cb, Y. I just meant that IDCT results for Cr and Cb must be memorized somewhere (in two 8x8 arrays), so the YUV-to-RGB stage can use that ...
by nocash
March 27th, 2014, 7:40 am
Forum: Research
Topic: Playstation CPU reversing [56k Warning]
Replies: 68
Views: 85052

Re: Playstation CPU reversing.

Okay, then Unit 03 seems to be the FIFO for incoming data - which should be 32 x 32bit in size. Theoretically the FIFO output could be passed straight to the RLE decompression hardware - not quite sure why it's stored in Unit 04 before passing it to RLE decompression hardware. But well, maybe there ...