CUBO CD32 Games..

[Toni Wilen]

Originally Posted by ross

@Toni: found, is a PCF2127 (slave address is 0x51, last bit is R/W select).
It's much more than an RTC.

I don't see how 0x5c becomes 0x51. (with or without including R/W bit)
Also datasheet says first revision is dated 2010.

[ross]

Originally Posted by Toni Wilen

I don't see how 0x5c becomes 0x51. (with or without including R/W bit)
Also datasheet says first revision is dated 2010.

From your table there is S10100011 sequence, that is S,0x51,R.
And maybe 2127 is an evolution from an old IC.

Too much similarity to be incidental, but who know.

[Toni Wilen]

Originally Posted by ross

From your table there is S10100011 sequence, that is S,0x51,R.
And maybe 2127 is an evolution from an old IC.

Too much similarity to be incidental, but who know.

I assumed data was inverted because disassembly does something like this: moveq #$5c,d0; not.b d0; bsr.w transmit_stuff;

But if it is actually is 0x51 (0xa2)..

EDIT: There are many RTCs with 0x51 ID, with different registers. Model of used chip would be nice to know..

[ross]

Originally Posted by Toni Wilen

EDIT: There are many RTCs with 0x51 ID, with different registers. Model of used chip would be nice to know..

arghh.. but this restrict the field, something available in 1995/1999..

[ross]

PCF8593_1 19940606 Product specification
A simple 8 pin IC, same family, seems a good candidate...

[Toni Wilen]

I added I2C decoder, game does this repeatedly:

Write 0x40 to register 0. (Perhaps this means "latch current time")
Read registers 1 and 2
Write 0x00 to register 0. (Reset latch)

EDIT: This would make sense with PCF8593. Bit 6 is "hold last count flag" and 1 and 2 are hundreds of seconds and seconds.

[ross]

Originally Posted by Toni Wilen

This would make sense with PCF8593. Bit 6 is "hold last count flag" and 1 and 2 are hundreds of seconds and seconds.

A basic RTC workings check

[Toni Wilen]

RTC emulation done. It didn't seem to affect anything else than time and date appearing in service menu (?)

RTC is strange, it only has 2 bit year counter! Does the game save year in NVRAM? (Now it shows 1997 as year)

[ross]

In service menu there is function to setup date, i'll make some tests..

[ross]

No, date is set at 1997 between SETUP restart (even without CUBO reset).

The 8593 upper 8 bytes of RAM is unused?

EDIT: there is an Arduino example code used to 'roll' years in timer (07h) if a proper mask is set (0xC0) in years/date (05h)

(07h) is ever read?

[Toni Wilen]

Originally Posted by ross

No, date is set at 1997 between SETUP restart (even without CUBO reset).

The 8593 upper 8 bytes of RAM is unused?

EDIT: there is an Arduino example code used to 'roll' years in timer (07h) if a proper mask is set (0xC0) in years/date (05h)

(07h) is ever read?

Right, it puts some extra values to register 9 and 10. So also RTC registers needs to be saved to nvram file (=extra 16 bytes added).

Register 5 year bits, register 7+ are now writable. Other registers always contain current date and time.

NVRAM error message is now gone but it still goes to service menu.

[ross]

Originally Posted by Toni Wilen

Right, it puts some extra values to register 9 and 10.

Partially works.
On register 9 only a nibble is saved, 0x00 start from 1996, 0x0F is 2011, 2012 wrap..

[EDIT: I've even unsuccessfully tried to manually insert value in .nvr file]

[Toni Wilen]

Important config change: added enable/disable options for RTC, NVRAM and Touchscreen. PIC is also disabled if PIC settings is empty.

EDIT: Any ideas why it enters service menu automatically? Or is there some setting that needs to be manually set?

Originally Posted by ross

Partially works.
On register 9 only a nibble is saved, 0x00 start from 1996, 0x0F is 2011, 2012 wrap..

Reads and writes are byte based, I don't do any nibble operations (except with "real" time registers). Sounds like "unsupported" distant future date

[ross]

Originally Posted by Toni Wilen

Important config change: added enable/disable options for RTC, NVRAM and Touchscreen. PIC is also disabled if PIC settings is empty.

EDIT: Any ideas why it enters service menu automatically? Or is there some setting that needs to be manually set?

Yes, check my ISO hack (method in PM, is something that is in "do not try this at home" category

Reads and writes are byte based, I don't do any nibble operations (except with "real" time registers). Sounds like "unsupported" distant future date

Yeah, the famous CUBO CD32 year 2012 bug

Toni, i'm slow in debugging, memwatch is not working in $600000(+$400000) memory

[Toni Wilen]

Originally Posted by ross

memwatch is not working in $600000(+$400000) memory

Fixed.

--

"Hopper" and "Suzo" service mode tests still fail. (It would be nice to have photos of the actual hardware, again..)

Hopper uses $80000b bits 7 and 2 (Unused bits in PIC communication register). Response probably in some $800003 bit (DIP 1). Suzo test sets bit 4 of $80001b (Unused bits in RTC I2C communication register).

[Toni Wilen]

Something seems to happen if DIP 2 #4 and #5 are set. But touch screen isn't active, only joystick + button works.

EDIT: They are related to hopper, hopper test waits if both dips are set. Unsetting either will return error instantly.

[brolly]

Originally Posted by nikolaos1960

Thanks Ross!
I Knew that laser quiz had 3 versions!
Italian,France,Greek!

These had 3 separate releases as far as I know. Hopefully ElectroBlaster will dump his greek CD once he receives it.

Originally Posted by ross

A prepatched iso in my folder (odeontw2_hack_ross.zip).

I'm curious, what does this hacked version fix exactly? Could you give some more info about it?

Impressive work so far guys, seems like all CUBO mysteries are going to be solved soon

[nikolaos1960]

Originally Posted by brolly

These had 3 separate releases as far as I know. Hopefully ElectroBlaster will dump his greek CD once he receives it.

THANKS FOR THE INFORMATION BROLLY!
Good news really!

[ElectroBlaster]

Originally Posted by nikolaos1960

PLEASE SIR! I AM FROM GREECE!
I really beg you,for this game!

I shall get right on this! The whole lot arrived, seller did a great job with packing

[ElectroBlaster]

This Laser Quest Greece.... any preference on how people would like the iso image presented?

Been a while since I imaged anything tbh... back in the day I would use ISO burner, CDRWin or CloneCD etc.