Easy telopper 2 cartridge

By popolon_

Master (189)

popolon_'s picture

17-11-2021, 18:33

I bought Easy Telopper 2 cartridge. I do not have Sony F900, i just tried to dump the rom in Canon V30F. The rom however did not show up in msxmem.bas. I opened up the cartridge and it seem this is not just one rom chip:
IMG_20211117_192517302.jpg
IMG_20211117_192357568.jpg
IMG_20211117_170937508.jpg

Login or register to post comments

By Manuel

Ascended (18255)

Manuel's picture

17-11-2021, 19:21

Does the cartridge work?
If you dump the full 64kB of the slot the cartridge is in, do you see anything?

By popolon_

Master (189)

popolon_'s picture

17-11-2021, 20:21

I did not get it to boot, as the machine at least does not have 256K memory. And I do not remember how to boot with megaflashrom to get only that 512K ram, or is that even possible? Anyway maybe I try with Panasonic A1ST machine.

But that 64K dump has some sony text there somewhere (so there is something in the dump):
https://github.com/popolonx/MSX_STUFF/blob/main/easy_teloppe...

But this is not all, because this cartridge has memory mapper inside (OKI M71H003 IC?) or what?. And there are three 512K byte rom chips (MB834000-25), one 64K byte rom chip (OKI M27512ZB), and two 8K SRAM chips (ASHI KASEI AKM6264ALSP-12 )

By popolon_

Master (189)

popolon_'s picture

17-11-2021, 20:39

In panasonic a1st turbo this cartridge did not start. Could the starting be hardcoded to sony F900 machine only? Or something is broken inside cartridge?

By Manuel

Ascended (18255)

Manuel's picture

18-11-2021, 00:07

There might be also a kanji-ROM on-board. You could try to let some software that can detect (and/or dump) the kanji ROM on an MSX with this cartridge inserted.

By Manuel

Ascended (18255)

Manuel's picture

18-11-2021, 00:13

00004000  41 42 60 40 00 00 00 00 00 00 00 00 00 00 00 00 AB`@............
00004010  53 4F 4E 59 20 4A 46 50 20 44 55 4D 4D 59 33 20 SONY JFP DUMMY3
00004020  20 56 65 72 73 69 6F 6E 20 20 33 2E 38 20 20 20  Version  3.8
00004030  20 4A 61 6E 20 32 37 74 68 20 31 39 38 37 20 20  Jan 27th 1987
00004040  43 6F 70 79 72 69 67 68 74 28 43 29 20 62 79 20 Copyright(C) by
00004050  53 4F 4E 59 20 43 6F 72 70 6F 72 61 74 69 6F 6E SONY Corporation
00004060  21 20 FB CB 46 20 0C CB C6 21 CA FF 06 0F 36 C9 ! ..F ...!....6.
00004070  23 10 FB CD 3D 41 E5 DD E1 36 00 11 CA FF 1A FE #...=A...6......
00004080  C9 28 0A FE F7 C0 13 EB 01 03 00 ED B0 F3 3E F7 .(............>.
00004090  32 CA FF CD 64 41 32 CB FF 21 D1 40 22 CC FF 3E 2...dA2..!.@"..>

That's the start of it at 0x4000... (you can see this on 0xA000 as well).

And on other places (0x6000 and 0x8000), it seems different (not a DUMMY!):

00006000  53 4F 4E 59 20 4A 46 50 20 56 65 72 20 32 2E 33 SONY JFP Ver 2.3
00006010  56 20 20 53 65 70 20 32 39 20 31 39 38 37 20 20 V  Sep 29 1987
00006020  43 6F 70 79 72 69 67 68 74 28 43 29 20 62 79 20 Copyright(C) by
00006030  53 4F 4E 59 20 43 6F 72 70 6F 72 61 72 69 6F 6E SONY Corporarion
00006040  C3 98 60 00 C3 A1 60 00 C3 AA 60 00 C3 B3 60 00 ..`...`...`...`.
00006050  C3 BC 60 00 C3 3A 61 00 C3 56 61 00 C3 C5 60 00 ..`..:a..Va...`.
00006060  C3 CE 60 00 C3 D7 60 00 C3 E0 60 00 C3 E9 60 00 ..`...`...`...`.
00006070  C3 F2 60 00 C3 FB 60 00 C3 31 61 00 C3 28 61 00 ..`...`..1a..(a.
00006080  C3 04 61 00 C3 0D 61 00 C3 16 61 00 C3 1F 61 00 ..a...a...a...a.
00006090  C3 57 61 00 C3 5C 66 00 CD 29 63 CD 00 40 C3 C4 .Wa..\f..)c..@..
000060A0  63 CD 29 63 CD 0A 44 C3 C4 63 CD 29 63 CD 5C 44 c.)c..D..c.)c.\D
000060B0  C3 C4 63 CD 29 63 CD BE 44 C3 C4 63 CD 21 63 CD ..c.)c..D..c.!c.
000060C0  00 40 C3 C4 63 CD 19 63 CD E2 48 C3 C4 63 CD 19 .@..c..c..H..c..
000060D0  63 CD 47 4B C3 C4 63 CD 19 63 CD 52 44 C3 C4 63 c.GK..c..c.RD..c
000060E0  CD 19 63 CD 4D 44 C3 C4 63 CD 19 63 CD 78 46 C3 ..c.MD..c..c.xF.
000060F0  C4 63 CD 19 63 CD 3D 46 C3 C4 63 CD 19 63 CD 0C .c..c.=F..c..c..

I suppose someone with more knowledge on ROM reverse engineering could take a look. I'd take me way too much time.

By Manuel

Ascended (18255)

Manuel's picture

26-11-2021, 21:33

According to BiFi, the mapper chip is the same as the one from Halnote, so please try these SAVEROM parameters:

Switch Address: AFFF
Base Address: A000
Block Size: 2000
First Block: 00
Last Block: 7F

By Manuel

Ascended (18255)

Manuel's picture

02-12-2021, 19:10

Manuel wrote:

According to BiFi, the mapper chip is the same as the one from Halnote, so please try these SAVEROM parameters:

Switch Address: AFFF
Base Address: A000
Block Size: 2000
First Block: 00
Last Block: 7F

Bump