Previous 199869 Revisions Next

r17457 Friday 24th August, 2012 at 23:05:16 UTC by Angelo Salese
Rewriting nss driver in progress, hooked up the security keys
[src/mame/drivers]nss.c

trunk/src/mame/drivers/nss.c
r17456r17457
304304   nss_state(const machine_config &mconfig, device_type type, const char *tag)
305305      : snes_state(mconfig, type, tag) { }
306306
307   UINT8 m_m50458_rom_bank;
308   UINT8 m_vblank_bit;
309   DECLARE_READ8_MEMBER(nss_eeprom_r);
310   DECLARE_WRITE8_MEMBER(nss_eeprom_w);
311   DECLARE_READ8_MEMBER(m50458_r);
312   DECLARE_WRITE8_MEMBER(m50458_w);
313   DECLARE_READ8_MEMBER(port00_r);
314   DECLARE_READ8_MEMBER(port01_r);
315   DECLARE_READ8_MEMBER(port02_r);
316   DECLARE_READ8_MEMBER(port03_r);
317   DECLARE_WRITE8_MEMBER(port80_w);
318   DECLARE_WRITE8_MEMBER(port82_w);
319307   DECLARE_READ8_MEMBER(spc_ram_100_r);
320308   DECLARE_WRITE8_MEMBER(spc_ram_100_w);
321309};
r17456r17457
374362M50458 charset is checked at 1382, a word checksum is provided at offsets 0xffe-0xfff of the given ROM
375363
376364*/
365/*
366Nocash info: http://nocash.emubase.de/fullsnes.htm
367map
3680x0000 - 0x7fff BIOS
3690x8000 - 0x8fff RAM
3700x9000 - 0x9fff RAM with write protection
3710xa000          EEPROM Read
372  7   EEPROM Data In (0=Low=Zero, 1=High=One)
373  6   EEPROM Ready   (0=Low=Busy, 1=High=Ready)
374  5-0 Unknown/unused
3750xc000 - 0xdfff instruction ROM
3760xe000          EEPROM Write
377  7   Unknown/set     (should be always 1)
378  6-5 Unknown/unused  (should be always 0)
379  4   EEPROM Clock    (0=Low=Clock, 1=High=Idle) ;(Data In/Out must be stable
380  3   EEPROM Data Out (0=Low=Zero, 1=High=One)   ;on raising CLK edge)
381  2-1 Unknown/unused  (should be always 0)       ;(and updated on falling edge)
382  0   EEPROM Select   (0=High=No, 1=Low=Select)
3830xe000 - 0xffff PROM Input & Output & Program Code (protection RP5H01, used also in earlier Nintendo systems)
384Data Write:
385  7-5  Unknown/unused
386  4    PROM Test Mode (0=Low=6bit Address, 1=High=7bit Address)
387  3    PROM Clock     (0=Low, 1=High) ;increment address on 1-to-0 transition
388  2-1  Unknown/unused
389  0    PROM Address Reset (0=High=Reset to zero, 1=Low=No Change)
377390
378READ8_MEMBER(nss_state::nss_eeprom_r)
379{
380   return 0x40; // eeprom read bit
381}
391Data Read and Opcode Fetch:
382392
383WRITE8_MEMBER(nss_state::nss_eeprom_w)
384{
385   /*
386    x--- ---- EEPROM CS bit?
387    ---x ---- EEPROM clock bit?
388    ---- x--- EEPROM write bit
389    ---- ---x EEPROM reset bit? (active low)
390    */
393  7-5  Always set (MSBs of RST Opcode)
394  4    PROM Counter Out (0=High=One, 1=Low=Zero) ;PROM Address Bit5
395  3    PROM Data Out    (0=High=One, 1=Low=Zero)
396  2-0  Always set (LSBs of RST Opcode)
391397
392//  printf("EEPROM write %02x\n",data);
393}
398i/o
399Input
4000x00 Joypad
401  7   SNES Watchdog (0=SNES did read Joypads, 1=Didn't do so) (ack via 07h.W)
402  6   Vblank or Vsync or so       (0=What, 1=What?)
403  5   Button "Joypad Button B?"   (0=Released, 1=Pressed)
404  4   Button "Joypad Button A"    (0=Released, 1=Pressed)
405  3   Button "Joypad Down"        (0=Released, 1=Pressed)
406  2   Button "Joypad Up"          (0=Released, 1=Pressed)
407  1   Button "Joypad Left"        (0=Released, 1=Pressed)
408  0   Button "Joypad Right"       (0=Released, 1=Pressed)
4090x01 Front-Panel Buttons and Game Over Flag
410  7   From SNES Port 4016h.W.Bit2 (0=Game Over Flag, 1=Normal) (Inverted!)
411  6   Button "Restart"            (0=Released, 1=Pressed) ;-also resets SNES?
412  5   Button "Page Up"            (0=Released, 1=Pressed)
413  4   Button "Page Down"          (0=Released, 1=Pressed)
414  3   Button "Instructions"       (0=Released, 1=Pressed)
415  2   Button "Game 3"             (0=Released, 1=Pressed) ;\if present (single
416  1   Button "Game 2"             (0=Released, 1=Pressed) ; cartridge mode does
417  0   Button "Game 1"             (0=Released, 1=Pressed) ;/without them)
4180x02 Coin and Service Button Inputs
419  7-3 Unknown/unused (maybe the (unused) Test button hides here)
420  2   Service Button (1=Pressed: Add Credit; with INST button: Config)
421  1   Coin Input 2   (1=Coin inserted in coin-slot 2)
422  0   Coin Input 1   (1=Coin inserted in coin-slot 1)
4230x03 RTC
424Output
4250x00/0x80 NMI Control and RAM protect
426  7-4 Unknown/unused      (should be always 0)
427  3     Maybe SNES CPU/PPU reset (usually same as Port 01h.W.Bit1)
428  2   RAM at 9000h-9FFFh  (0=Disable/Protect, 1=Enable/Unlock)
429  1   Looks like maybe somehow NMI Related ?    ;\or one of these is PC10-style
430  0   Looks like NMI Enable                     ;/hardware-watchdog reload?
4310x01/0x81 Unknown and Slot Select
432  7     Maybe SNES Joypad Enable? (0=Disable/Demo, 1=Enable/Game)
433  6   Unknown/unused        (should be always 0)
434  5   SNES Sound Mute       (0=Normal, 1=Mute) (for optional mute in demo mode)
435  4   Unknown  ;from INST-ROM flag! (Lo/HiROM, 2-player, zapper, volume or so?)
436  3-2 Slot Select        (0..2 for Slot 1..3) (mapping to both SNES and Z80)
437  1     Maybe SNES CPU pause?  (cleared on deposit coin to continue) (1=Run)
438  0     Maybe SNES CPU/PPU reset?   (0=Reset, 1=Run)
4390x02/0x82 RTC and OSD
4400x03/0x83 Unknown and LED control
441  7     Layer SNES Enable?             (used by token proc, see 7A46h) SNES?
442  6     Layer OSD Enable?
443  5-4 Unknown/unused (should be always 0)
444  3   LED Instructions (0=Off, 1=On)  ;-glows in demo (prompt for INST button)
445  2   LED Game 3       (0=Off, 1=On)  ;\
446  1   LED Game 2       (0=Off, 1=On)  ; blinked when enough credits inserted
447  0   LED Game 1       (0=Off, 1=On)  ;/
4480x84 Coin Counter Outputs
449  7-2 Unknown/unused (should be always 0)
450  1   Coin Counter 2 (0=No change, 1=Increment external counter)
451  0   Coin Counter 1 (0=No change, 1=Increment external counter)
4520x05 Unknown
4530x07 SNES Watchdog / Acknowledge SNES Joypad Read Flag
394454
455SNES part:
4560x4100 DSW
4570x4016 bit 0 Joypad Strobe?
4580x4016 bit 2 Game Over Flag
395459
396READ8_MEMBER(nss_state::m50458_r)
397{
398460
399   if(m_m50458_rom_bank)
400   {
401      UINT8 *gfx_rom = memregion("m50458_gfx")->base();
402461
403      return gfx_rom[offset & 0xfff];
404   }
405   else
406   {
407      UINT8 *gfx_ram = memregion("m50458_vram")->base();
462*/
408463
409      return gfx_ram[offset & 0xfff];
410   }
411
412   return 0;
413}
414
415WRITE8_MEMBER(nss_state::m50458_w)
416{
417
418   if(m_m50458_rom_bank)
419      logerror("Warning: write to M50458 GFX ROM!\n");
420   else
421   {
422      UINT8 *gfx_ram = memregion("m50458_vram")->base();
423
424      gfx_ram[offset & 0xfff] = data;
425   }
426}
427
428
429464static ADDRESS_MAP_START( bios_map, AS_PROGRAM, 8, nss_state )
430   AM_RANGE(0x0000, 0x7fff) AM_ROMBANK("bank1")
431   AM_RANGE(0x8000, 0x87ff) AM_RAM
432   AM_RANGE(0x8800, 0x8fff) AM_RAM // vram perhaps?
433   AM_RANGE(0x9000, 0x9fff) AM_READWRITE(m50458_r,m50458_w) // M50458 vram & GFX rom routes here
434   AM_RANGE(0xa000, 0xa000) AM_READ(nss_eeprom_r)
435   AM_RANGE(0xe000, 0xe000) AM_WRITE(nss_eeprom_w)
436   AM_RANGE(0xc000, 0xdfff) AM_MIRROR(0x2000) AM_RAM AM_REGION("ibios_rom", 0x6000)
465   AM_RANGE(0x0000, 0x7fff) AM_ROM
437466ADDRESS_MAP_END
438467
439READ8_MEMBER(nss_state::port00_r)
440{
441468
442   /*
443    -x-- ---- almost certainly tied to the vblank signal
444    */
445469
446
447   m_vblank_bit^=0x40;
448
449   return m_vblank_bit | 0xbf;
450}
451
452
453READ8_MEMBER(nss_state::port01_r)
454{
455   return 0xff;
456}
457
458READ8_MEMBER(nss_state::port02_r)
459{
460   /*
461    ---- -x-- (makes the BIOS to jump at 0x4258, sets 0x80 bit 1 and then jumps to unmapped area of the BIOS (bankswitch?))
462    ---- ---x
463    */
464
465   return 0xfb;
466}
467
468READ8_MEMBER(nss_state::port03_r)
469{
470   /*
471    x--- ---- EEPROM2 read bit
472    ---- ---x tested at 7006, some status bit
473
474    */
475
476   return 0xfe;
477}
478
479WRITE8_MEMBER(nss_state::port80_w)
480{
481
482   /*
483    ---- -x-- written when 0x9000-0x9fff is read, probably a bankswitch
484    ---- --x- see port 0x02 note
485    ---- ---x BIOS bankswitch
486    */
487
488   membank("bank1")->set_entry(data & 1);
489   m_m50458_rom_bank = data & 4;
490}
491
492WRITE8_MEMBER(nss_state::port82_w)// EEPROM2?
493{
494   /*
495    ---- x--- EEPROM2 clock bit?
496    ---- -x-- EEPROM2 write bit
497    ---- --x- EEPROM2 CS bit?
498    */
499}
500
501470static ADDRESS_MAP_START( bios_io_map, AS_IO, 8, nss_state )
502471   ADDRESS_MAP_GLOBAL_MASK(0xff)
503   AM_RANGE(0x00, 0x00) AM_READ(port00_r)
504   AM_RANGE(0x01, 0x01) AM_READ(port01_r)
505   AM_RANGE(0x02, 0x02) AM_READ(port02_r)
506   AM_RANGE(0x03, 0x03) AM_READ(port03_r)
507   AM_RANGE(0x72, 0x72) AM_WRITENOP //?
508   AM_RANGE(0x80, 0x80) AM_WRITE(port80_w)
509   AM_RANGE(0x82, 0x82) AM_WRITE(port82_w)
510   AM_RANGE(0xea, 0xea) AM_WRITENOP //?
511472
512473ADDRESS_MAP_END
513474
514475static MACHINE_START( nss )
515476{
516   nss_state *state = machine.driver_data<nss_state>();
517   UINT8 *ROM = state->memregion("bios")->base();
477//   nss_state *state = machine.driver_data<nss_state>();
518478
519   state->membank("bank1")->configure_entries(0, 2, &ROM[0x10000], 0x8000);
520   state->membank("bank1")->set_entry(0);
521
522   state->m_m50458_rom_bank = 0;
523
524479   MACHINE_START_CALL(snes);
525480}
526481
r17456r17457
722677   ROM_REGION(0x10000,           "addons", ROMREGION_ERASE00)      /* add-on chip ROMs (DSP1 will be needed if we dump the NSS version of Super Mario Kart)*/\
723678   ROM_LOAD( "dsp1b.bin", SNES_DSP1B_OFFSET, 0x002800, CRC(453557e0) SHA1(3a218b0e4572a8eba6d0121b17fdac9529609220) ) \
724679   ROM_REGION(0x20000,         "bios",  0)      /* Bios CPU (what is it?) */ \
725   ROM_LOAD("nss-c.dat"  , 0x10000, 0x8000, CRC(a8e202b3) SHA1(b7afcfe4f5cf15df53452dc04be81929ced1efb2) )   /* bios */ \
726   ROM_LOAD("nss-ic14.02", 0x18000, 0x8000, CRC(e06cb58f) SHA1(62f507e91a2797919a78d627af53f029c7d81477) )   /* bios */ \
680   ROM_LOAD("nss-c.dat"  , 0x00000, 0x8000, CRC(a8e202b3) SHA1(b7afcfe4f5cf15df53452dc04be81929ced1efb2) )   /* bios */ \
681   ROM_LOAD("nss-ic14.02", 0x10000, 0x8000, CRC(e06cb58f) SHA1(62f507e91a2797919a78d627af53f029c7d81477) )   /* bios */ \
727682   ROM_REGION( 0x1200, "chargen", ROMREGION_ERASEFF ) \
728683   ROM_LOAD("m50458_char.bin",     0x0000, 0x1200, BAD_DUMP CRC(011cc342) SHA1(d5b9f32d6e251b4b25945267d7c68c099bd83e96) ) \
729684   ROM_REGION( 0x1000, "m50458_gfx", ROMREGION_ERASEFF ) \
r17456r17457
740695
741696   /* instruction / data rom for bios */
742697   ROM_REGION( 0x8000, "ibios_rom", ROMREGION_ERASEFF )
698
699   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
743700ROM_END
744701
745
746702ROM_START( nss_actr )
747703   NSS_BIOS
748704   ROM_REGION( 0x100000, "user3", 0 )
r17456r17457
752708   /* instruction / data rom for bios */
753709   ROM_REGION( 0x8000, "ibios_rom", 0 )
754710   ROM_LOAD( "act-rais.ic8", 0x0000, 0x8000, CRC(08b38ce6) SHA1(4cbb7fd28d98ffef0f17747201625883af954e3a) )
711
712   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
713    ROM_LOAD( "security.prm", 0x000000, 0x000010, CRC(4b74ac55) SHA1(51ea71b06367b4956a4b737385e2d4d15bd43980) )
755714ROM_END
756715
757716ROM_START( nss_con3 )
r17456r17457
763722   /* instruction / data rom for bios */
764723   ROM_REGION( 0x8000, "ibios_rom", 0 )
765724   ROM_LOAD( "contra3.ic8", 0x0000, 0x8000, CRC(0fbfa23b) SHA1(e7a1a78a58c64297e7b9623350ec57aed8035a4f) )
725
726   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
727   ROM_LOAD( "security.prm", 0x000000, 0x000010, NO_DUMP )
766728ROM_END
767729
768730ROM_START( nss_adam )
r17456r17457
774736   /* instruction / data rom for bios */
775737   ROM_REGION( 0x8000, "ibios_rom", 0 )
776738   ROM_LOAD( "addams.ic8", 0x0000, 0x8000, CRC(57c7f72c) SHA1(2e3642b4b5438f6c535d6d1eb668e1663062cf78) )
739
740   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
741   ROM_LOAD( "security.prm", 0x000000, 0x000010, CRC(154d10c2) SHA1(6829e149c341b753ee9bc72055c0634db4e81884) )
777742ROM_END
778743
779744ROM_START( nss_aten )
r17456r17457
785750   /* instruction / data rom for bios */
786751   ROM_REGION( 0x8000, "ibios_rom", 0 )
787752   ROM_LOAD( "amtennis.ic8", 0x0000, 0x8000, CRC(d2cd3926) SHA1(49fc253b1b9497ef1374c7db0bd72c163ffb07e7) )
753
754   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
755   ROM_LOAD( "security.prm", 0x000000, 0x000010,CRC(3e640fa2) SHA1(ac530610a9d4979f070d5f57dfd4886c530aa20f) )
788756ROM_END
789757
790758ROM_START( nss_rob3 )
r17456r17457
796764   /* instruction / data rom for bios */
797765   ROM_REGION( 0x8000, "ibios_rom", 0 )
798766   ROM_LOAD( "robocop3.ic8", 0x0000, 0x8000, CRC(90d13c51) SHA1(6751dab14b7d178350ac333f07dd2c3852e4ae23) )
767
768   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
769   ROM_LOAD( "security.prm", 0x000000, 0x000010, NO_DUMP )
799770ROM_END
800771
801772ROM_START( nss_ncaa )
r17456r17457
807778   /* instruction / data rom for bios */
808779   ROM_REGION( 0x8000, "ibios_rom", 0 )
809780   ROM_LOAD( "ncaa.ic8", 0x0000, 0x8000, CRC(b9fa28d5) SHA1(bc538bcff5c19eae4becc6582b5c111d287b76fa) )
781
782   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
783   ROM_LOAD( "security.prm", 0x000000, 0x000010, CRC(a2e9ad5b) SHA1(a41f82451fc185f8e989a0d4f38700dc7813bb50) )
810784ROM_END
811785
812786ROM_START( nss_skin )
r17456r17457
818792   /* instruction / data rom for bios */
819793   ROM_REGION( 0x8000, "ibios_rom", 0 )
820794   ROM_LOAD( "skins.ic8", 0x0000, 0x8000, CRC(9f33d5ce) SHA1(4d279ad3665bd94c7ca9cb2778572bed42c5b298) )
795
796   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
797   ROM_LOAD( "security.prm", 0x000000, 0x000010, CRC(86f8cd1d) SHA1(d567d194058568f4ae32b7726e433918b06bca54) )
821798ROM_END
822799
823800ROM_START( nss_lwep )
r17456r17457
829806   /* instruction / data rom for bios */
830807   ROM_REGION( 0x8000, "ibios_rom", 0 )
831808   ROM_LOAD( "nss-lw.ic8", 0x0000, 0x8000, CRC(1acc1d5d) SHA1(4c8b100ac5847915aaf3b5bfbcb4f632606c97de) )
809
810   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
811   ROM_LOAD( "security.prm", 0x000000, 0x000010, CRC(e9755c14) SHA1(d8dbebf3536dcbd18c50ba11a6b729dc7085f74b) )
832812ROM_END
833813
834814ROM_START( nss_ssoc )
r17456r17457
839819   /* instruction / data rom for bios */
840820   ROM_REGION( 0x8000, "ibios_rom", 0 )
841821   ROM_LOAD( "s-soccer.ic3", 0x0000, 0x8000, CRC(c09211c3) SHA1(b274a57f93ae0a8774664df3d3615fb7dbecfa2e) )
822
823   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
824   ROM_LOAD( "security.prm", 0x000000, 0x000010, NO_DUMP )
842825ROM_END
843826
844827ROM_START( nss_smw )
r17456r17457
849832   /* instruction / data rom for bios */
850833   ROM_REGION( 0x8000, "ibios_rom", 0 )
851834   ROM_LOAD( "mw.ic3", 0x0000, 0x8000, CRC(f2c5466e) SHA1(e116f01342fcf359498ed8750741c139093b1fb2) )
835
836   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
837   ROM_LOAD( "security.prm", 0x000000, 0x000010, NO_DUMP )
852838ROM_END
853839
854840ROM_START( nss_fzer )
r17456r17457
859845   /* instruction / data rom for bios */
860846   ROM_REGION( 0x8000, "ibios_rom", 0 )
861847   ROM_LOAD( "fz.ic7", 0x0000, 0x8000, CRC(48ae570d) SHA1(934f9fec47dcf9e49936388968d2db50c69950da) )
848
849   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
850   ROM_LOAD( "security.prm", 0x000000, 0x000010, CRC(9650a7d0) SHA1(59d57ab2720cff3a24105a7250560c41def45acc) )
862851ROM_END
863852
864853ROM_START( nss_sten )
r17456r17457
869858   /* instruction / data rom for bios */
870859   ROM_REGION( 0x8000, "ibios_rom", 0 )
871860   ROM_LOAD( "st.ic3", 0x0000, 0x8000, CRC(8880596e) SHA1(ec6d68fc2f51f7d94f496cd72cf898db65324542) )
861
862   ROM_REGION( 0x10, "rp5h01", ROMREGION_ERASE00 )
863   ROM_LOAD( "security.prm", 0x000000, 0x000010, NO_DUMP )
872864ROM_END
873865
866
867
874868GAME( 199?, nss,       0,     nss,      snes, snes_state,    snes,    ROT0, "Nintendo",                    "Nintendo Super System BIOS", GAME_IS_BIOS_ROOT )
875869GAME( 1992, nss_actr,  nss,   nss,      snes, snes_state,    snes,    ROT0, "Enix",                        "Act Raiser (Nintendo Super System)", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND ) // sound sometimes dies, timing issues
876870GAME( 1992, nss_adam,  nss,   nss,      snes, snes_state,    snes,    ROT0, "Ocean",                       "The Addams Family (Nintendo Super System)", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND )

Previous 199869 Revisions Next

© 1997-2024 The MAME Team