Dumping special format rom

Page 1/5
| 2 | 3 | 4 | 5

Par Takamichi

Champion (316)

Portrait de Takamichi

03-07-2020, 16:51

I recently obtained Knit Designer the MSX2+ cartridge for knitting machine. I tried dumping but haven't succeeded.
I used Rom Xtractor and Saverom, first one with all of mode A 8 and 16 kb, mode Konami, and mode C 8 and 16 kb, and in all rom sizes 8/16/32/128/256/512 kb. It tells the rom is residual from 8000H which suggests it's not a megarom.
Saverom indicates the rom is residual between 8000H and BFFFH but the utility can't be that small because it's an MSX2+ application with many graphics.
All of these freeze the MSX emulator, except 32KB ones that are empty and are not recognized at all. Can anybody guess how to dump this rom? Here's the failed dumps and video of Knit Designer running on real MSX. The file will expire within a week.

!login ou Inscrivez-vous pour poster

Par gdx

Prophet (3561)

Portrait de gdx

03-07-2020, 17:42

Knit Designer cartridge contains many chips whose two 64kB ROMs.

https://datasheetspdf.com/pdf-file/541611/Toshiba/TC54512/1

Par Guillian

Prophet (3327)

Portrait de Guillian

03-07-2020, 19:04

Takamichi wrote:

Can anybody guess how to dump this rom?

Perhaps it has a custom mapper (8 KB banks)
It seems it writes to ports #07 and #04.
Try to type in BASIC:
OUT &H07,&h81
OUT &H04,&h3C
Dump the ROM again (probably a plain 32 or 64 KB ROM is fine)

Then type:
OUT &H04,&h2C
And dump it again.

Using a debugger could be easier to check if the OUTs select different banks.

Par Takamichi

Champion (316)

Portrait de Takamichi

04-07-2020, 05:51

gdx wrote:

Knit Designer cartridge contains many chips whose two 64kB ROMs.

https://datasheetspdf.com/pdf-file/541611/Toshiba/TC54512/1

I uploaded that image to generation-msx myself.

Par Takamichi

Champion (316)

Portrait de Takamichi

04-07-2020, 06:39

Guillian wrote:
Takamichi wrote:

Can anybody guess how to dump this rom?

Perhaps it has a custom mapper (8 KB banks)
It seems it writes to ports #07 and #04.
Try to type in BASIC:
OUT &H07,&h81
OUT &H04,&h3C
Dump the ROM again (probably a plain 32 or 64 KB ROM is fine)

Then type:
OUT &H04,&h2C
And dump it again.

Using a debugger could be easier to check if the OUTs select different banks.

Result. I hope the file names are self explanatory. Notes:
- Executing third OUT caused Rom Xtractor unable to recognize the Knit Designer, as if no cartridge is inserted.
- Before two OUT commands, Saverom recognized only page 2. After, it recognized 0, 1 and 2. Same after executing three OUTs.

As for output/input this cartridge saves/loads with a dedicated "memory card".

Par NYYRIKKI

Enlighted (5556)

Portrait de NYYRIKKI

04-07-2020, 06:25

From the picture I can see wire leaving from /CS2 so I think all of the memory is indeed visible only in #8000-#BFFF window.

If you can, please download Super-X, put the cartridge on slot 1 and execute following commands:

BLOAD"SUPER-X.LDR",R
_@
PO7,81H
PO4,0CH
S#PAGE0.ROM,8000#1,BFFF
PO4,1CH
S#PAGE1.ROM,8000#1,BFFF
PO4,2CH
S#PAGE2.ROM,8000#1,BFFF
PO4,3CH
S#PAGE3.ROM,8000#1,BFFF

This will save only 64kB of the ROM, but we need to see inside before we can figure out, how to dump the rest if there is more.

Par NYYRIKKI

Enlighted (5556)

Portrait de NYYRIKKI

04-07-2020, 06:31

Ah, there were new posts already... Please ignore...

Par NYYRIKKI

Enlighted (5556)

Portrait de NYYRIKKI

04-07-2020, 06:54

Ok, seems that my theory about the /CS2 usage did not hold... Please try SUPER-X with these commands:

BLOAD"SUPER-X.LDR",R
_@
PO7,81H
PO4,0CH
S#PAGE0.ROM,0#1,FFFF
PO4,1CH
S#PAGE1.ROM,0#1,FFFF
PO4,2CH
S#PAGE2.ROM,0#1,FFFF
PO4,3CH
S#PAGE3.ROM,0#1,FFFF

Par Takamichi

Champion (316)

Portrait de Takamichi

04-07-2020, 06:59

NYYRIKKI wrote:

From the picture I can see wire leaving from /CS2 so I think all of the memory is indeed visible only in #8000-#BFFF window.

If you can, please download Super-X, put the cartridge on slot 1 and execute following commands:

BLOAD"SUPER-X.LDR",R
_@
PO7,81H
PO4,0CH
S#PAGE0.ROM,8000#1,BFFF
PO4,1CH
S#PAGE1.ROM,8000#1,BFFF
PO4,2CH
S#PAGE2.ROM,8000#1,BFFF
PO4,3CH
S#PAGE3.ROM,8000#1,BFFF

This will save only 64kB of the ROM, but we need to see inside before we can figure out, how to dump the rest if there is more.

I tried anyway. It's first time I booted Super X, and the startup screen does appear but entering "P07,81H" simply returns # Error. Am I making mistake?

Par NYYRIKKI

Enlighted (5556)

Portrait de NYYRIKKI

04-07-2020, 07:08

Takamichi wrote:

I tried anyway. It's first time I booted Super X, and the startup screen does appear but entering "P07,81H" simply returns # Error. Am I making mistake?

Yes, the second character is Omega, not zero... Please use the later version of instructions as the pages seem to be bigger than we thought... This will take 256kB disk space.

Par Takamichi

Champion (316)

Portrait de Takamichi

04-07-2020, 07:48

NYYRIKKI wrote:

Ok, seems that my theory about the /CS2 usage did not hold... Please try SUPER-X with these commands:

BLOAD"SUPER-X.LDR",R
_@
PO7,81H
PO4,0CH
S#PAGE0.ROM,0#1,FFFF
PO4,1CH
S#PAGE1.ROM,0#1,FFFF
PO4,2CH
S#PAGE2.ROM,0#1,FFFF
PO4,3CH
S#PAGE3.ROM,0#1,FFFF

I realized it's not P0 (pee-zero) but PO myself so I tried and here's the result, including the MSX screen photo showing what I typed ;)
None of the .rom is executable but I found several messages in them;
PAGE1.ROM 87D0H-92A3H; Prompt messages in both English and Japanese.
PAGE2.ROM 8325H-85F2H: Error messages like memory card battery loss

Page 1/5
| 2 | 3 | 4 | 5