Xplorer carts

General information to do with the PlayStation 1 Hardware. Including modchips, pinouts, rare or obscure development equipment, etc.
User avatar
Squaresoft74
Verified
/// PSXDEV | ELITE ///
/// PSXDEV | ELITE ///
Posts: 303
Joined: Jan 07, 2016
PlayStation Model: SCPH-7502
Location: France
Contact:

Post by Squaresoft74 » June 18th, 2021, 9:44 pm

Thank you very much for the dumps, i'll check them when i get free time. :)
SONIC3D wrote: June 18th, 2021, 3:30 am 2. There are user-added cheats found in the last 128KB section, too.
I'm not entirely sure about this.
Since original .fcd only cover the first 384Kb area for the rom program/cheat db, isn't the last 128Kb chunk reserved for compressed virtual memory card data only ?

User avatar
SONIC3D
Curious PSXDEV User
Curious PSXDEV User
Posts: 10
Joined: Jun 09, 2021

Post by SONIC3D » June 19th, 2021, 2:54 am

Squaresoft74 wrote: June 18th, 2021, 9:44 pm Thank you very much for the dumps, i'll check them when i get free time. :)
SONIC3D wrote: June 18th, 2021, 3:30 am 2. There are user-added cheats found in the last 128KB section, too.
I'm not entirely sure about this.
Since original .fcd only cover the first 384Kb area for the rom program/cheat db, isn't the last 128Kb chunk reserved for compressed virtual memory card data only ?
Maybe it's for vmc only like you said, I have not tested add additional cheats and compare which section would be changed. I just stated that for letting the potential ROM file user know that there is additional data there(not clean). As I dumped the ROM as is.

:)

User avatar
Squaresoft74
Verified
/// PSXDEV | ELITE ///
/// PSXDEV | ELITE ///
Posts: 303
Joined: Jan 07, 2016
PlayStation Model: SCPH-7502
Location: France
Contact:

Post by Squaresoft74 » June 19th, 2021, 10:19 pm

I checked your dumps and could get 2.006 and 4.55 roms to work just fine with my devices.

On the other hand, 3.18 hangs on a black screen past the Blaze logo.
My Xplorer FX Pro and X-Terminator Pro DX have a Winbond W29C040P-90 512K eeprom.
So i tried flashing my own 3.18 dump to and the same happened.
I'm not sure which eeprom the cart i dumped it from had since i gave a few carts to nocash a few years ago and maybe it was one of them.

Next i tried flashing my dump and yours to a Xplorer FX that has an ATMEL AT29C040A-12PC 512K eeprom and it worked fine there.
Can you check which kind of eeprom the device you dumped it from has ?

I remember the Xploder FX (Germany) r4.50 PRO 1999-10-25 rom won't work properly on Atmel based FX cartridges.
It would crash when attempting to write the eeprom when adding/editing/removing cheats.

Maybe it something similar here with Winbond eeprom ?

I'm attaching my dump if you want to /can check your side.
You do not have the required permissions to view the files attached to this post.

User avatar
SONIC3D
Curious PSXDEV User
Curious PSXDEV User
Posts: 10
Joined: Jun 09, 2021

Post by SONIC3D » June 20th, 2021, 12:48 am

Squaresoft74 wrote: June 19th, 2021, 10:19 pm ...
Next i tried flashing my dump and yours to a Xplorer FX that has an ATMEL AT29C040A-12PC 512K eeprom and it worked fine there.
Can you check which kind of eeprom the device you dumped it from has ?
...
It dumped it from an X-T Pro DX with an ATMEL AT29C040A-12PC ROM. In DIP package. And the date code line shows 9930, so it should be 1999, 30th week.
The RAM is Hitachi HM628128ALFP-10.
PCB model is PXT-6(with no alternative PLD and RAM soldering footprints).

I will update the image later, charging my iPhone.

Currently I have no other Winbond W29C040P model in hand. The v4.55 X-T Pro DX is dumped from that model of ROM, but it has been returned to the donator. So I cannot confirm if it will reproduce your problem on that.

I guess the problem may be caused by the flash command difference. If any one can reverse the ROM, and locate the flash accessing code, we can identify that. I can do Saturn SH-2 code reversing but have no experience in MIPS so I cannot help much on that. Maybe it's better to mark it as AT29C040(A) only in Unirom 8 flasher?

*Update*
Full PCB and shell images:

ImageImage

:)
Last edited by SONIC3D on June 21st, 2021, 1:27 pm, edited 1 time in total.

User avatar
Squaresoft74
Verified
/// PSXDEV | ELITE ///
/// PSXDEV | ELITE ///
Posts: 303
Joined: Jan 07, 2016
PlayStation Model: SCPH-7502
Location: France
Contact:

Post by Squaresoft74 » June 20th, 2021, 1:39 am

Ah thanks for confirming it came from an Atmel based device !

You won't need to ask the donator who provided the Winbond based device you dumped the 4.55 from.
Since i already verified the issue with such carts, i guess that validates it's a similar issue like with the German r4.50 PRO 1999-10-25 rom.

I don't really know if it's down to a missing or broken flash command.
I couldn't help either with reversing the rom, my MIPS knowledge is pretty limited.
(Just enough to perform PSF rips). :oops:
Maybe Sickle or some assembly guru could give a hand here ?
SONIC3D wrote: June 20th, 2021, 12:48 am Maybe it's better to mark it as AT29C040(A) only in Unirom 8 flasher?
I'll write that down in my romset notes.
Not sure if Sickle could add something about it on screen.
Filenames are quite long already and a few currently don't fully show up. :mrgreen:

I have a dual banked SST FX somewhere, i'll check what it gives with this one.

You may want to join the Discord server at some point, where it may be more convenient to discuss what you asked here. :)

*EDIT*

I tried both dumps with my dual banked SST FX.
While it boots and reaches main menu unlike with the Winbond one, it partially hangs when loading the cheat list.
Once open, trying to add/edit/remove a cheat isn't saved at all, and the used space indicator is stuck to 0% while it should report 6%.

I guess it's down to the bank switching not working.

This rom definitely targets Atmel device only.
Which somehow makes sense, as this is an early FX/DX rom and afaik, first gen FX/DX devices came with Atmel eeproms.

I've also extracted the codelist from both dumps using X-Killer and they match 100%.
For some reason, my dump contains some extra data not found in yours.
I guess those are just leftover from a previously flashed version.
I'll discard my dump and replace it with yours when i'll update Unirom's X_ROMS.DAT file. :)

Since you mentioned your cart was brand new, should i label it as:
"X-Terminator PRO DX (Japan) r3.18 PRO 1999-06-24 [!]" ?
I've reseted the user parameters area so it should be as close as what the original .fcd used to flash the cart was.

User avatar
SONIC3D
Curious PSXDEV User
Curious PSXDEV User
Posts: 10
Joined: Jun 09, 2021

Post by SONIC3D » June 21st, 2021, 1:45 pm

PCB and shell images updated for the 3.18 X-T Pro DX in previous post.
Squaresoft74 wrote: June 20th, 2021, 1:39 am
You may want to join the Discord server at some point, where it may be more convenient to discuss what you asked here. :)
Thanks, I just joined there. But a little busy these days. I will ask related questions there when I'm in spare time.
Squaresoft74 wrote: June 20th, 2021, 1:39 am
I tried both dumps with my dual banked SST FX.
While it boots and reaches main menu unlike with the Winbond one, it partially hangs when loading the cheat list.
Once open, trying to add/edit/remove a cheat isn't saved at all, and the used space indicator is stuck to 0% while it should report 6%.

I guess it's down to the bank switching not working.
hmm... I initially think the multi-chip is only different in /CE control logic compare to single-chip version(At least in reading mode). When program accessing the address range of 0x1F040000-0x1F05FFFF the /CE of the specific Flash ROM would be active. In that case the cheat DB reading should not be failed as 0%. So maybe I'm totally wrong in guessing of that control logic. :cry:
Squaresoft74 wrote: June 20th, 2021, 1:39 am I've also extracted the codelist from both dumps using X-Killer and they match 100%.
For some reason, my dump contains some extra data not found in yours.
I guess those are just leftover from a previously flashed version.
I'll discard my dump and replace it with yours when i'll update Unirom's X_ROMS.DAT file. :)

Since you mentioned your cart was brand new, should i label it as:
"X-Terminator PRO DX (Japan) r3.18 PRO 1999-06-24 [!]" ?
I've reseted the user parameters area so it should be as close as what the original .fcd used to flash the cart was.
I have no idea about naming the ROM. I'm not professional in that(managing data). Better leave for you to decide. I just keep preserving the data jobs only. Or maybe, add [!] when we found another dump since not many people would worry about if the ROM is clean, considering the count of existing Xploder/Xplorer/X-Terminator users. :(

And do you know the exact data structure/algorithm info of the cheat DB storage of X-T Pro DX and X-T 2? Especially there can be Japanese Kanji in X-T cheat DB. The X-T 2 seems to use Shift-JIS directly to store cheat DB data but I have no idea if there are full Shift-JIS Kanji characters implemented in ROM. And X-T Pro ROM seems to use additional encryption or compression. If you have info related, I would be really interested in that. I have not used X-Killer, is that tool support Japanese Kanji characters? Is this tool open-sourced?

:roll:

User avatar
Squaresoft74
Verified
/// PSXDEV | ELITE ///
/// PSXDEV | ELITE ///
Posts: 303
Joined: Jan 07, 2016
PlayStation Model: SCPH-7502
Location: France
Contact:

Post by Squaresoft74 » July 12th, 2021, 3:07 pm

Hi,

Sorry for the late reply.
X-killer is an old close source tool from 1999, see attached files.
I don't really have any technical knowledge regarding the cheat DB management/encryption.
Maybe you could try reversing X-killer itself if that could bring some answer ?

In the meantime, i could get and dump a Spanish V2 Xplorer, rom is attached below. ;)
You do not have the required permissions to view the files attached to this post.

User avatar
SONIC3D
Curious PSXDEV User
Curious PSXDEV User
Posts: 10
Joined: Jun 09, 2021

Post by SONIC3D » July 20th, 2021, 8:21 am

Squaresoft74 wrote: July 12th, 2021, 3:07 pm Hi,

Sorry for the late reply.
X-killer is an old close source tool from 1999, see attached files.
I don't really have any technical knowledge regarding the cheat DB management/encryption.
Maybe you could try reversing X-killer itself if that could bring some answer ?

...
Thanks. I may search for some reverse engineering notes on PS1 expansion ROM when I have time. And directly check the code of the cheat DB parsing logic.

And today I tried to fix a broken X-T Pro DX(Japanese Ver.) which is caused by a broken ROM chip. The original chip is AT29C040A. And I tried to install an SST 28SF040A with pre-programmed v4.55 ROM. It boots ok but halts on saving new game cheat entry. I think it is caused by the special write command and the page size of 28SF040.

So for anyone who wants to replace the Flash ROM of X-T Pro(single chip revision). Please consider using AT29C040 and W29C040P only.

User avatar
Squaresoft74
Verified
/// PSXDEV | ELITE ///
/// PSXDEV | ELITE ///
Posts: 303
Joined: Jan 07, 2016
PlayStation Model: SCPH-7502
Location: France
Contact:

Post by Squaresoft74 » July 30th, 2021, 12:30 am

New dump from a recently acquired cartridge: Xplorer V1 (Italy) r1.095BP 1998-08-29. ;)
You do not have the required permissions to view the files attached to this post.

shilongzop
What is PSXDEV?
What is PSXDEV?
Posts: 1
Joined: May 23, 2022
PlayStation Model: 4
Location: Nevada
Contact:

Post by shilongzop » May 24th, 2022, 1:39 am

I know this has been asked before many times but why do cheat carts in general use 5v chips? I always thought the PSX parallel port used 3.5v logic

danhans42
BANNED
BANNED
Posts: 329
Joined: Nov 28, 2012

Post by danhans42 » May 24th, 2022, 2:26 am

Cheaper, easy to get

Post Reply

Who is online

Users browsing this forum: No registered users and 10 guests