| Contents |
SNES Hardware Specifications
SNES I/O Map
SNES Memory
SNES DMA Transfers
SNES Picture Processing Unit (PPU)
SNES Audio Processing Unit (APU)
SNES Maths Multiply/Divide
SNES Controllers
SNES Cartridges
SNES Hotel Boxes and Arcade Machines
SNES Unpredictable Things
SNES Timings
SNES Pinouts
CPU 65XX Microprocessor
About
About/Credits
| SNES I/O Map |
0000h..1FFFh - WRAM - Mirror of first 8Kbyte of WRAM (at 7E0000h-7E1FFFh) 2000h..20FFh - N/A - Unused |
2100h - INIDISP - Display Control 1 8xh 2101h - OBSEL - Object Size and Object Base (?) 2102h - OAMADDL - OAM Address (lower 8bit) (?) 2103h - OAMADDH - OAM Address (upper 1bit) and Priority Rotation (?) 2104h - OAMDATA - OAM Data Write (write-twice) (?) 2105h - BGMODE - BG Mode and BG Character Size (xFh) 2106h - MOSAIC - Mosaic Size and Mosaic Enable (?) 2107h - BG1SC - BG1 Screen Base and Screen Size (?) 2108h - BG2SC - BG2 Screen Base and Screen Size (?) 2109h - BG3SC - BG3 Screen Base and Screen Size (?) 210Ah - BG4SC - BG4 Screen Base and Screen Size (?) 210Bh - BG12NBA - BG Character Data Area Designation (?) 210Ch - BG34NBA - BG Character Data Area Designation (?) 210Dh - BG1HOFS - BG1 Horizontal Scroll (X) (write-twice) / M7HOFS (?,?) 210Eh - BG1VOFS - BG1 Vertical Scroll (Y) (write-twice) / M7VOFS (?,?) 210Fh - BG2HOFS - BG2 Horizontal Scroll (X) (write-twice) (?,?) 2110h - BG2VOFS - BG2 Vertical Scroll (Y) (write-twice) (?,?) 2111h - BG3HOFS - BG3 Horizontal Scroll (X) (write-twice) (?,?) 2112h - BG3VOFS - BG3 Vertical Scroll (Y) (write-twice) (?,?) 2113h - BG4HOFS - BG4 Horizontal Scroll (X) (write-twice) (?,?) 2114h - BG4VOFS - BG4 Vertical Scroll (Y) (write-twice) (?,?) 2115h - VMAIN - VRAM Address Increment Mode (?Fh) 2116h - VMADDL - VRAM Address (lower 8bit) (?) 2117h - VMADDH - VRAM Address (upper 8bit) (?) 2118h - VMDATAL - VRAM Data Write (lower 8bit) (?) 2119h - VMDATAH - VRAM Data Write (upper 8bit) (?) 211Ah - M7SEL - Rotation/Scaling Mode Settings (?) 211Bh - M7A - Rotation/Scaling Parameter A & Maths 16bit operand(FFh)(w2) 211Ch - M7B - Rotation/Scaling Parameter B & Maths 8bit operand (FFh)(w2) 211Dh - M7C - Rotation/Scaling Parameter C (write-twice) (?) 211Eh - M7D - Rotation/Scaling Parameter D (write-twice) (?) 211Fh - M7X - Rotation/Scaling Center Coordinate X (write-twice) (?) 2120h - M7Y - Rotation/Scaling Center Coordinate Y (write-twice) (?) 2121h - CGADD - Palette CGRAM Address (?) 2122h - CGDATA - Palette CGRAM Data Write (write-twice) (?) 2123h - W12SEL - Window BG1/BG2 Mask Settings (?) 2124h - W34SEL - Window BG3/BG4 Mask Settings (?) 2125h - WOBJSEL - Window OBJ/MATH Mask Settings (?) 2126h - WH0 - Window 1 Left Position (X1) (?) 2127h - WH1 - Window 1 Right Position (X2) (?) 2128h - WH2 - Window 2 Left Position (X1) (?) 2129h - WH3 - Window 2 Right Position (X2) (?) 212Ah - WBGLOG - Window 1/2 Mask Logic (BG1-BG4) (?) 212Bh - WOBJLOG - Window 1/2 Mask Logic (OBJ/MATH) (?) 212Ch - TM - Main Screen Designation (?) 212Dh - TS - Sub Screen Designation (?) 212Eh - TMW - Window Area Main Screen Disable (?) 212Fh - TSW - Window Area Sub Screen Disable (?) 2130h - CGWSEL - Color Math Control Register A (?) 2131h - CGADSUB - Color Math Control Register B (?) 2132h - COLDATA - Color Math Sub Screen Backdrop Color (?) 2133h - SETINI - Display Control 2 00h? |
2134h - MPYL - PPU1 Signed Multiply Result (lower 8bit) (01h) 2135h - MPYM - PPU1 Signed Multiply Result (middle 8bit) (00h) 2136h - MPYH - PPU1 Signed Multiply Result (upper 8bit) (00h) 2137h - SLHV - PPU1 Latch H/V-Counter by Software (Read=Strobe) 2138h - RDOAM - PPU1 OAM Data Read (read-twice) 2139h - RDVRAML - PPU1 VRAM Data Read (lower 8bits) 213Ah - RDVRAMH - PPU1 VRAM Data Read (upper 8bits) 213Bh - RDCGRAM - PPU2 CGRAM Data Read (Palette)(read-twice) 213Ch - OPHCT - PPU2 Horizontal Counter Latch (read-twice) (01FFh) 213Dh - OPVCT - PPU2 Vertical Counter Latch (read-twice) (01FFh) 213Eh - STAT77 - PPU1 Status and PPU1 Version Number 213Fh - STAT78 - PPU2 Status and PPU2 Version Number Bit7=0 |
2140h - APUI00 - Main CPU to Sound CPU Communication Port 0 (00h/00h) 2141h - APUI01 - Main CPU to Sound CPU Communication Port 1 (00h/00h) 2142h - APUI02 - Main CPU to Sound CPU Communication Port 2 (00h/00h) 2143h - APUI03 - Main CPU to Sound CPU Communication Port 3 (00h/00h) 2144h..217Fh - APU Ports 2140-2143h mirrored to 2144h..217Fh |
2180h - WMDATA - WRAM Data Read/Write (R/W) 2181h - WMADDL - WRAM Address (lower 8bit) (W) 00h 2182h - WMADDM - WRAM Address (middle 8bit) (W) 00h 2183h - WMADDH - WRAM Address (upper 1bit) (W) 00h 2184h..21FFh - Unused region (open bus) / Expansion (B-Bus) - 2200h..3FFFh - Unused region (open bus) / Expansion (A-Bus) - |
4000h..4015h - Unused region (open bus) ;\These ports have - 4016h/Write - JOYWR - Joypad Output (W) ; long waitstates 00h 4016h/Read - JOYA - Joypad Input Register A (R) ; (1.78MHz cycles) - 4017h/Read - JOYB - Joypad Input Register B (R) ; (all other ports - 4018h..41FFh - Unused region (open bus) ;/are 3.5MHz fast) - |
4200h - NMITIMEN- Interrupt Enable and Joypad Request 00h 4201h - WRIO - Joypad Programmable I/O Port (Open-Collector Output) FFh 4202h - WRMPYA - Set unsigned 8bit Multiplicand (FFh) 4203h - WRMPYB - Set unsigned 8bit Multiplier and Start Multiplication (FFh) 4204h - WRDIVL - Set unsigned 16bit Dividend (lower 8bit) (FFh) 4205h - WRDIVH - Set unsigned 16bit Dividend (upper 8bit) (FFh) 4206h - WRDIVB - Set unsigned 8bit Divisor and Start Division (FFh) 4207h - HTIMEL - H-Count Timer Setting (lower 8bits) (FFh) 4208h - HTIMEH - H-Count Timer Setting (upper 1bit) (01h) 4209h - VTIMEL - V-Count Timer Setting (lower 8bits) (FFh) 420Ah - VTIMEH - V-Count Timer Setting (upper 1bit) (01h) 420Bh - MDMAEN - Select General Purpose DMA Channel(s) and Start Transfer 0 420Ch - HDMAEN - Select H-Blank DMA (H-DMA) Channel(s) 0 420Dh - MEMSEL - Memory-2 Waitstate Control 0 420Eh..420Fh - Unused region (open bus) - |
4210h - RDNMI - V-Blank NMI Flag and CPU Version Number (Read/Ack) 0xh 4211h - TIMEUP - H/V-Timer IRQ Flag (Read/Ack) 00h 4212h - HVBJOY - H/V-Blank flag and Joypad Busy flag (R) (?) 4213h - RDIO - Joypad Programmable I/O Port (Input) - 4214h - RDDIVL - Unsigned Division Result (Quotient) (lower 8bit) (0) 4215h - RDDIVH - Unsigned Division Result (Quotient) (upper 8bit) (0) 4216h - RDMPYL - Unsigned Division Remainder / Multiply Product (lower 8bit) 4217h - RDMPYH - Unsigned Division Remainder / Multiply Product (upper 8bit) 4218h - JOY1L - Joypad 1 (gameport 1, pin 4) (lower 8bit) 00h 4219h - JOY1H - Joypad 1 (gameport 1, pin 4) (upper 8bit) 00h 421Ah - JOY2L - Joypad 2 (gameport 2, pin 4) (lower 8bit) 00h 421Bh - JOY2H - Joypad 2 (gameport 2, pin 4) (upper 8bit) 00h 421Ch - JOY3L - Joypad 3 (gameport 1, pin 5) (lower 8bit) 00h 421Dh - JOY3H - Joypad 3 (gameport 1, pin 5) (upper 8bit) 00h 421Eh - JOY4L - Joypad 4 (gameport 2, pin 5) (lower 8bit) 00h 421Fh - JOY4H - Joypad 4 (gameport 2, pin 5) (upper 8bit) 00h 4220h..42FFh - Unused region (open bus) - |
(additional DMA control registers are 420Bh and 420Ch, see above) 43x0h - DMAPx - DMA/HDMA Parameters (FFh) 43x1h - BBADx - DMA/HDMA I/O-Bus Address (PPU-Bus aka B-Bus) (FFh) 43x2h - A1TxL - HDMA Table Start Address (low) / DMA Curr Addr (low) (FFh) 43x3h - A1TxH - HDMA Table Start Address (high) / DMA Curr Addr (high)(FFh) 43x4h - A1Bx - HDMA Table Start Address (bank) / DMA Curr Addr (bank)(xxh) 43x5h - DASxL - Indirect HDMA Address (low) / DMA Byte-Counter (low) (FFh) 43x6h - DASxH - Indirect HDMA Address (high) / DMA Byte-Counter (high)(FFh) 43x7h - DASBx - Indirect HDMA Address (bank) (FFh) 43x8h - A2AxL - HDMA Table Current Address (low) (FFh) 43x9h - A2AxH - HDMA Table Current Address (high) (FFh) 43xAh - NTRLx - HDMA Line-Counter (from current Table entry) (FFh) 43xBh - UNUSEDx - Unused byte (read/write-able) (FFh) 43xCh+ - Unused region (open bus) - 43xFh - MIRRx - Mirror of 43xBh (R/W) (FFh) 4380h..5FFFh - Unused region (open bus) - |
6000h..7FFFh - Expansion (eg. Battery Backed RAM, in HiROM cartridges) 8000h..FFFFh - Cartridge ROM |
0000h-003Fh Cheat Device: Pro Action Replay 1-3: I/O Ports; overlapping WRAM 2000h-2007h MSU1: Media Streaming Unit (homebrew) 2184h-218Fh Copier: Super UFO models Pro-7 and Pro-8 2188h-2199h Satellaview Receiver Unit (connected to Expansion Port) 21C0h-21C3h More or less "used" by Nintendo's "SNES Test" cartridge 21C0h-21DFh Exertainment (exercise bicycle) (connected to Expansion Port) 21D0h-21E5h Sony Super Disc prototype: CDROM Controller & BIOS Cart RAM lock 21FCh-21FFh Nocash Debug Extension (char_out and 21mhz_timer in no$sns emu) 2200h-230Eh SA-1 (programmable 65C816 CPU) I/O Ports 2400h-2407h Nintendo Power (flashcard) (bank 00h only, no mirrors) 2800h-2801h S-RTC Real Time Clock I/O Ports 2800h-2810h Copier: FDC I/O Ports CCL (Supercom Partner & Pro Fighter) 2C00h-2FFFh Cheat Device: X-Terminator 2: SRAM (32Kbytes, in banks 00h-1Fh) 3000h-32FFh GSU-n (programmable RISC CPU) I/O Ports 3000h-37FFh SA-1 (programmable 65C816 CPU) on-chip I-RAM 3800h-3804h ST018 (Seta) (pre-programmed ARM CPU) (maybe also FF40h..FF63h) 4100h Nintendo Super System (NSS) DIP-Switches (on game cartridge) 4800h-4807h S-DD1 Data Decompression chip 4800h-4842h SPC7110 Data Decompression chip (optionally with RTC-4513) 5000h-5FFFh Satellaview MCC mem ctrl (sixteen 1bit I/O ports banks 00h-0Fh) 5000h-5FFFh Satellaview 32Kbyte SRAM (eight 4Kbyte-chunks in banks 10h-17h) 58xxh Copier: Venus (Multi Game Hunter) 5Fxxh Copier: Gamars Super Disk 6000h-7FFFh SRAM Battery Backed Static RAM (in HiROM cartridges) (bank 3xh) 6000h-7FFFh SGB Super Gameboy I/O Ports 6000h-7FFFh DSP-n on HiROM boards (pre-programmed NEC uPD77C25 CPU) 7F40h-7FAFh CX4 I/O Ports (with 3K SRAM at 6000h..6BFFh) 7FF0h-7FF7h OBC1 OBJ Controller I/O Ports (with 8K SRAM at 6000h..7FFFh) 8000h-FFFFh Cartridge ROM (including header/exception vectors at FFxxh) 8000h Pirate X-in-1 Multicart 32K-ROM bank (mapping 20 small games) 8000h-FFFFh Copier: Various models map ROM, I/O, SRAM, DRAM in ROM area 8000h-8101h Cheat Device: Game Genie I/O Ports (in ROM banks 00h and FFh) A000h-A007h Cheat Device: Pro Action Replay 2: I/O Control (in HiROM area) FFE0h-FFFFh Exception Vectors (variable in SA-1 and CX4) (fixed in GSU) FFE8h-FFEAh Cheat Device: X-Terminator 1-2: I/O Ports (in LoROM area) FFF0h-FFF3h Tri-Star/Super 8: NES Joypad 1-2, BIOS-disable, A/V-select xF8000h-3FFFFFh DSP-n on LoROM boards (pre-programmed NEC uPD77C25 CPU) 600000h-6F7FFFh DSP-n on 2Mbyte-LoROM boards (planned/prototype only) 600000h-67FFFFh ST010/ST011 Command/Status/Parameters I/O Ports 680000h-6FFFFFh ST010/ST011 On-chip Battery-backed RAM 700000h-7xxxxxh SRAM Battery Backed Static RAM (in LoROM cartridges) 808000h-BFFFFFh Bootleg Copy-Protection I/O Ports C00000h-FFFFFFh Satellaview FLASH Cartridges (Detect/Write/Erase commands) C00000h-Cn7FFFh JRA PAT Backup FLASH Memory (Detect/Write/Erase commands) C08000h-FFFFFFh Satellaview-like FLASH Data Packs in LoROM Cartridges E00000h-FFFFFFh Satellaview-like FLASH Data Packs in HiROM Cartridges E00000h-E0FFFFh X-Band Modem 64K SRAM (in two 32Kx8 chips) FBC000h-FBC1BFh X-Band Modem I/O Ports (mainly in this area) FFFF00h-FFFFFFh Pirate X-in-1 multicart mapper I/O port |
| SNES Memory |
| SNES Memory Map |
Bank Offset Content Speed
00h-3Fh:0000h-7FFFh System Area (8K WRAM, I/O Ports, Expansion) see below
00h-3Fh:8000h-FFFFh WS1 LoROM (max 2048 Kbytes) (64x32K) 2.68MHz
(00h:FFE0h-FFFFh) CPU Exception Vectors (Reset,Irq,Nmi,etc.) 2.68MHz
40h-7Dh:0000h-FFFFh WS1 HiROM (max 3968 Kbytes) (62x64K) 2.68MHz
7Eh-7Fh:0000h-FFFFh WRAM (Work RAM, 128 Kbytes) (2x64K) 2.68MHz
80h-BFh:0000h-7FFFh System Area (8K WRAM, I/O Ports, Expansion) see below
80h-BFh:8000h-FFFFh WS2 LoROM (max 2048 Kbytes) (64x32K) max 3.58MHz
C0h-FFh:0000h-FFFFh WS2 HiROM (max 4096 Kbytes) (64x64K) max 3.58MHz
|
OAM (512+32 bytes) (256+16 words) VRAM (64 Kbytes) (32 Kwords) Palette (512 bytes) (256 words) Sound RAM (64 Kbytes) Sound ROM (64 bytes BIOS Boot ROM) |
Offset Content Speed 0000h-1FFFh Mirror of 7E0000h-7E1FFFh (first 8Kbyte of WRAM) 2.68MHz 2000h-20FFh Unused 3.58MHz 2100h-21FFh I/O Ports (B-Bus) 3.58MHz 2200h-3FFFh Unused 3.58MHz 4000h-41FFh I/O Ports (manual joypad access) 1.78MHz 4200h-5FFFh I/O Ports 3.58MHz 6000h-7FFFh Expansion 2.68MHz |
LoROM games --> max 2MByte ROM (banks 00h-3Fh, with mirror at 80h-BFh) HiROM games --> max 4MByte ROM (banks 40h-7Dh, with mirror at C0h-FFh) |
HiROM ---> SRAM at 30h-3Fh,B0h-BFh:6000h-7FFFh ;small 8K SRAM bank(s) LoROM ---> SRAM at 70h-7Dh,F0h-FFh:0000h-7FFFh ;big 32K SRAM bank(s) |
S-DD1, SA-1, and SPC7110 chips (with mappable 1MByte-banks) Satellaview FLASH carts (can enable/disable ROM, PSRAM, FLASH) Nintendo Power FLASH carts (can map FLASH and SRAM to desired address) Pirate X-in-1 multicart mappers (mappable offset in 256Kbyte units) Cheat devices (and X-Band modem) can map their BIOS and can patch ROM bytes Copiers can map internal BIOS/DRAM/SRAM and external Cartridge memory Hotel Boxes (eg. SFC-Box) can map multiple games/cartridges |
| SNES Memory Control |
7-1 Not used 0 Access Cycle for Memory-2 Area (0=2.68MHz, 1=3.58MHz) (0 on reset) |
2.684658 MHz = 21.47727 MHz / 8 ;same access time as WRAM 3.579545 MHz = 21.47727 MHz / 6 ;faster access than WRAM |
| SNES Memory Work RAM Access |
The whole 128K are at 7E0000h-7FFFFFh. The first 8K are also mirrored to xx0000h-xx1FFFh (xx=00h..3Fh and 80h..BFh) Moreover (mainly for DMA purposes) it can be accessed via Port 218xh. |
7-0 Work RAM Data |
| SNES Memory OAM Access (Sprite Attributes) |
15 OAM Priority Rotation (0=OBJ #0, 1=OBJ #N) (OBJ with highest priority) 9-14 Not used 7-1 OBJ Number #N (for OBJ Priority) ;\bit7-1 are used for two purposes 8-0 OAM Address (for OAM read/write) ;/ |
1st Access: Lower 8bit (even address) 2nd Access: Upper 8bit (odd address) |
Write to EVEN address --> set OAM_Lsb = Data ;memorize value Write to ODD address<200h --> set WORD[addr-1] = Data*256 + OAM_Lsb Write to ANY address>1FFh --> set BYTE[addr] = Data Read from ANY address --> return BYTE[addr] |
| SNES Memory VRAM Access (Tile and BG Map) |
7 Increment VRAM Address after accessing High/Low byte (0=Low, 1=High) 6-4 Not used 3-2 Address Translation (0..3 = 0bit/None, 8bit, 9bit, 10bit) 1-0 Address Increment Step (0..3 = Increment Word-Address by 1,32,128,128) |
Translation Bitmap Type Port [2116h/17h] VRAM Word-Address 8bit rotate 4-color; 1 word/plane aaaaaaaaYYYxxxxx --> aaaaaaaaxxxxxYYY 9bit rotate 16-color; 2 words/plane aaaaaaaYYYxxxxxP --> aaaaaaaxxxxxPYYY 10bit rotate 256-color; 4 words/plane aaaaaaYYYxxxxxPP --> aaaaaaxxxxxPPYYY |
8bit-rotate/step32 aaaaaaaaXXXxxYYY --> aaaaaaaaxxYYYXXX 10bit-rotate/step128 aaaaaaXXXxxxxYYY --> aaaaaaxxxxYYYXXX |
Prefetch occurs AFTER changing the VRAM address (by writing 2116h/17h). Prefetch occurs BEFORE incrementing the VRAM address (by reading 2139h/3Ah). |
1st Send a byte from OLD prefetch value to the CPU ;-this always 2nd Load NEW value from OLD address into prefetch register;\these only if 3rd Increment address so it becomes the NEW address ;/increment occurs |
| SNES Memory CGRAM Access (Palette Memory) |
1st Access: Lower 8 bits (even address) 2nd Access: Upper 7 bits (odd address) (upper 1bit = PPU2 open bus) |
Write to EVEN address --> set Cgram_Lsb = Data ;memorize value Write to ODD address --> set WORD[addr-1] = Data*256 + Cgram_Lsb Read from ANY address --> return BYTE[addr] |
| SNES DMA Transfers |
| SNES DMA and HDMA Start/Enable Registers |
DMA and HDMA Transfer order is Channel 0 first... Channel 7 last HDMA has higher prio than DMA HDMA is running even during Forced Blank. |
7-0 General Purpose DMA Channel 7-0 Enable (0=Disable, 1=Enable) |
7-0 H-DMA Channel 7-0 Enable (0=Disable, 1=Enable) |
| SNES DMA and HDMA Channel 0..7 Registers |
7 Transfer Direction (0=A:CPU to B:I/O, 1=B:I/O to A:CPU) 6 Addressing Mode (0=Direct Table, 1=Indirect Table) (HDMA only) 5 Not used (R/W) (unused and unchanged by all DMA and HDMA) 4-3 A-BUS Address Step (0=Increment, 2=Decrement, 1/3=Fixed) (DMA only) 2-0 Transfer Unit Select (0-4=see below, 5-7=Reserved) |
Mode Bytes B-Bus 21xxh Address ;Usage Examples... 0 = Transfer 1 byte xx ;eg. for WRAM (port 2180h) 1 = Transfer 2 bytes xx, xx+1 ;eg. for VRAM (port 2118h/19h) 2 = Transfer 2 bytes xx, xx ;eg. for OAM or CGRAM 3 = Transfer 4 bytes xx, xx, xx+1, xx+1 ;eg. for BGnxOFS, M7x 4 = Transfer 4 bytes xx, xx+1, xx+2, xx+3 ;eg. for BGnSC, Window, APU.. 5 = Transfer 4 bytes xx, xx+1, xx, xx+1 ;whatever purpose, VRAM maybe 6 = Transfer 2 bytes xx, xx ;same as mode 2 7 = Transfer 4 bytes xx, xx, xx+1, xx+1 ;same as mode 3 |
7-0 B-Bus Address (selects an I/O Port which is mapped to 2100h-21FFh) |
23-16 CPU-Bus Data Address Bank (constant, not incremented/decremented) 15-0 CPU-Bus Data Address (incremented/decremented/fixed, as selected) |
23-16 CPU-Bus Table Address Bank (constant, bank number for 43x8h/43x9h) 15-0 CPU-Bus Table Address (constant, reload value for 43x8h/43x9h) |
23-16 Not used 15-0 Number of bytes to be transferred (1..FFFFh=1..FFFFh, or 0=10000h) (This is really a byte-counter; with a 4-byte "Transfer Unit", len=5 would transfer one whole Unit, plus the first byte of the second Unit.) (The 16bit value is decremented during transfer, and contains 0000h on end.) |
23-0 Not used (in this mode, the Data is read directly from the Table) |
23-16 Current CPU-Bus Data Address Bank (this must be set by software) 16-0 Current CPU-Bus Data Address (automatically loaded from the Table) |
15-0 Not used |
- Current Table Address Bank (taken from 43x4h) 15-0 Current Table Address (reloaded from 43x2h/43x3h) (incrementing) |
7-0 Not used |
7 Repeat-flag ;\(loaded from Table, and then 6-0 Number of lines to be transferred ;/decremented per scanline) |
7-0 Not used (read/write-able) |
1 byte Repeat-flag & line count N bytes Data (where N=unit size, if repeat=1: multiplied by line count) |
1 byte Repeat-flag & line count 2 bytes 16bit pointer to N bytes of Data (where N = as for Direct HDMA) |
00h Terminate this HDMA channel (until it restarts in next frame)
01h..80h Transfer 1 unit in 1 line, then pause for next "X-01h" lines
81h..FFh Transfer X-80h units in X-80h lines ("repeat mode")
|
| SNES DMA and HDMA Notes |
420Ch=00h ;stop all HDMA channels 43x0h=02h ;transfer two bytes to [bbus+0], and [bbus+0] 43x1h=88h ;dummy bbus destination address (unused port 2188h) 42x4h=abus.src.bank ;with <abus.src> pointing to "02h,77h,55h,00h" 42x8h=abus.src.offs.lo ;ie. repeat/pause 2 scanlines (02h), transfer 42x9h=abus.src.off.hi ;one data unit (77h,55h), and after the pause, 42xAh=01h ;remain count ;finish the transfer (00h). |
| SNES Picture Processing Unit (PPU) |
Mode0 Mode1 Mode2 Mode3 Mode4 Mode5 Mode6 Mode7 - BG3.1a - - - - - - OBJ.3 OBJ.3 OBJ.3 OBJ.3 OBJ.3 OBJ.3 OBJ.3 OBJ.3 BG1.1 BG1.1 BG1.1 BG1.1 BG1.1 BG1.1 BG1.1 - BG2.1 BG2.1 - - - - - - OBJ.2 OBJ.2 OBJ.2 OBJ.2 OBJ.2 OBJ.2 OBJ.2 OBJ.2 BG1.0 BG1.0 BG2.1 BG2.1 BG2.1 BG2.1 - BG2.1p BG2.0 BG2.0 - - - - - - OBJ.1 OBJ.1 OBJ.1 OBJ.1 OBJ.1 OBJ.1 OBJ.1 OBJ.1 BG3.1 BG3.1b BG1.0 BG1.0 BG1.0 BG1.0 BG1.0 BG1 BG4.1 - - - - - - - OBJ.0 OBJ.0 OBJ.0 OBJ.0 OBJ.0 OBJ.0 OBJ.0 OBJ.0 BG3.0 BG3.0a BG2.0 BG2.0 BG2.0 BG2.0 - BG2.0p BG4.0 BG3.0b - - - - - - Backdrop Backdrop Backdrop Backdrop Backdrop Backdrop Backdrop Backdrop |
.N per-tile priority setting (in BG Map and OAM entries) .Np per-pixel priority setting (for 128-color BG2 in Mode7) .Na/b per-screen priority bit (in port 2105h) (plus .N as usually) |
| SNES PPU Control |
7 Forced Blanking (0=Normal, 1=Screen Black) 6-4 Not used 3-0 Master Brightness (0=Screen Black, or N=1..15: Brightness*(N+1)/16) |
Forced blank doesn't apply immediately... so one must wait whatever (maybe a scanline) before VRAM can be freely accessed... or is it only vice-versa: disabling forced blank doesn't apply immediately/shows garbage pixels? |
7-5 Not used 4 OBJ (0=Disable, 1=Enable) 3 BG4 (0=Disable, 1=Enable) 2 BG3 (0=Disable, 1=Enable) 1 BG2 (0=Disable, 1=Enable) 0 BG1 (0=Disable, 1=Enable) - Backdrop (Always enabled) |
7 External Synchronization (0=Normal, 1=Super Impose and etc.)
6 EXTBG Mode (Screen expand)
ENABLE THE DATA SUPPLIED FROM THE EXTERNAL LSI.
FOR THE SFX, ENABLE WHEN THE SCREEN WITH PRIORITY IS USED ON MODE-7.
5-4 Not used
3 Horizontal Pseudo 512 Mode (0=Disable, 1=Enable)
(SHIFT SUBSCREEN HALF DOT TO THE LEFT)
2 BG V-Direction Display (0=224 Lines, 1=239 Lines) (for NTSC/PAL)
1 OBJ V-Direction Display (0=Low, 1=High Resolution/Smaller OBJs)
IN THE INTERLACE MODE, SELECT EITHER OF 1-DOT PER LINE OR 1-DOT
REPEATED EVERY 2-LINES. IF "1" IS WRITTEN, THE OBJ SEEMS REDUCED
HALF VERTICALLY IN APPEARANCE.
0 V-Scanning (0=Non Interlace, 1=Interlace) (See Port 2105h)
|
| SNES PPU BG Control |
7 BG4 Tile Size (0=8x8, 1=16x16) ;\(BgMode0..4: variable 8x8 or 16x16) 6 BG3 Tile Size (0=8x8, 1=16x16) ; (BgMode5: 8x8 acts as 16x8) 5 BG2 Tile Size (0=8x8, 1=16x16) ; (BgMode6: fixed 16x8?) 4 BG1 Tile Size (0=8x8, 1=16x16) ;/(BgMode7: fixed 8x8) 3 BG3 Priority in Mode 1 (0=Normal, 1=High) 2-0 BG Screen Mode (0..7 = see below) |
Mode BG1 BG2 BG3 BG4 0 4-color 4-color 4-color 4-color ;Normal 1 16-color 16-color 4-color - ;Normal 2 16-color 16-color (o.p.t) - ;Offset-per-tile 3 256-color 16-color - - ;Normal 4 256-color 4-color (o.p.t) - ;Offset-per-tile 5 16-color 4-color - - ;512-pix-hires 6 16-color - (o.p.t) - ;512-pix plus Offs-p-t 7 256-color EXTBG - - ;Rotation/Scaling |
7-4 Mosaic Size (0=Smallest/1x1, 0Fh=Largest/16x16) 3 BG4 Mosaic Enable (0=Off, 1=On) 2 BG3 Mosaic Enable (0=Off, 1=On) 1 BG2 Mosaic Enable (0=Off, 1=On) 0 BG1 Mosaic Enable (0=Off, 1=On) |
7-2 SC Base Address in VRAM (in 1K-word steps, aka 2K-byte steps)
1-0 SC Size (0=One-Screen, 1=V-Mirror, 2=H-Mirror, 3=Four-Screen)
(0=32x32, 1=64x32, 2=32x64, 3=64x64 tiles)
(0: SC0 SC0 1: SC0 SC1 2: SC0 SC0 3: SC0 SC1 )
( SC0 SC0 SC0 SC1 SC1 SC1 SC2 SC3 )
|
15-12 BG4 Tile Base Address (in 4K-word steps) 11-8 BG3 Tile Base Address (in 4K-word steps) 7-4 BG2 Tile Base Address (in 4K-word steps) 3-0 BG1 Tile Base Address (in 4K-word steps) |
1st Write: Lower 8bit ;\1st/2nd write mechanism uses "BG_old" 2nd Write: Upper 2bit ;/ |
BGnHOFS = (Current<<8) | (Prev&~7) | ((Reg>>8)&7);
Prev = Current;
or
BGnVOFS = (Current<<8) | Prev;
Prev = Current;
|
| SNES PPU Rotation/Scaling |
7-6 Screen Over (see below) 5-2 Not used 1 Screen V-Flip (0=Normal, 1=Flipped) ;\flip 256x256 "screen" 0 Screen H-Flip (0=Normal, 1=Flipped) ;/ |
0=Wrap within 128x128 tile area 1=Wrap within 128x128 tile area (same as 0) 2=Outside 128x128 tile area is Transparent 3=Outside 128x128 tile area is filled by Tile 00h |
1st Write: Lower 8bit ;\1st/2nd write mechanism uses "M7_old" 2nd Write: Upper 8bit ;/ |
1st Write: Lower 8bit ;\1st/2nd write mechanism uses "M7_old" 2nd Write: Upper 5bit ;/ |
( VRAM.X ) = ( M7A M7B ) * ( SCREEN.X+M7HOFS-M7X ) + ( M7X ) ( VRAM.Y ) ( M7C M7D ) ( SCREEN.Y+M7VOFS-M7Y ) ( M7Y ) |
M7A=+COS(angle)*ScaleX, M7B=+SIN(angle)*ScaleX M7C=-SIN(angle)*ScaleY, M7D=+COS(angle)*ScaleY M7X,M7Y = Center Coordinate M7HOFS,M7VOFS = Scroll Offset SCREEN.X = Display (Target) X-Coordinate: (0..255) XOR (xflip*FFh) SCREEN.Y = Display (Target) Y-Coordinate: (1..224 or 1..239) XOR (yflip*FFh) VRAM.X,Y = BG Map (Source) Coordinates (in 1/256 pixel units) |
IF xflip THEN SCREEN.X=((0..255) XOR FFh), ELSE SCREEN.X=(0..255) IF yflip THEN SCREEN.Y=((1..224/239) XOR FFh), ELSE SCREEN.Y=(1..224/239) ORG.X = (M7HOFS-M7X) AND NOT 1C00h, IF ORG.X<0 THEN ORG.X=ORG.X OR 1C00h ORG.Y = (M7VOFS-M7Y) AND NOT 1C00h, IF ORG.Y<0 THEN ORG.Y=ORG.Y OR 1C00h VRAM.X = ((M7A*ORG.X) AND NOT 3Fh) + ((M7B*ORG.Y) AND NOT 3Fh) + M7X*100h VRAM.Y = ((M7C*ORG.X) AND NOT 3Fh) + ((M7D*ORG.Y) AND NOT 3Fh) + M7Y*100h VRAM.X = VRAM.X + ((M7B*SCREEN.Y) AND NOT 3Fh) + (M7A*SCREEN.X) VRAM.Y = VRAM.Y + ((M7D*SCREEN.Y) AND NOT 3Fh) + (M7C*SCREEN.X) |
IF xflip THEN VRAM.X=VRAM.X-M7A, ELSE VRAM.X=VRAM.X+M7A IF xflip THEN VRAM.Y=VRAM.Y-M7C, ELSE VRAM.Y=VRAM.Y+M7C (The result is same as on hardware, although the real hardware doesn't seem to use that method, instead it seems to contain an excessively fast multiply unit that recalculates (M7A*SCREEN.X) and (M7C*SCREEN.X) on every pixel.) |
MPY = M7A * ORG.X / 8 ;at SCREEN.X=-3.0 MPY = M7D * ORG.Y / 8 ;at SCREEN.X=-2.5 MPY = M7B * ORG.Y / 8 ;at SCREEN.X=-2.0 MPY = M7C * ORG.X / 8 ;at SCREEN.X=-1.5 MPY = M7B * ((SCREEN.Y-MOSAIC.Y) XOR (yflip*FFh))/ 8 ;at SCREEN.X=-1.0 MPY = M7D * ((SCREEN.Y-MOSAIC.Y) XOR (yflip*FFh))/ 8 ;at SCREEN.X=-0.5 MPY = M7A * ((SCREEN.X AND FFh) XOR (xflip*FFh)) / 8 ;at SCREEN.X=0.0..336.0 MPY = M7C * ((SCREEN.X AND FFh) XOR (xflip*FFh)) / 8 ;at SCREEN.X=0.5..336.5 MPY = M7A * (M7B/100h) ;during in V-Blank and Forced-Blank |
M7_reg = new * 100h + M7_old M7_old = new |
| SNES PPU Sprites (OBJs) |
7-5 OBJ Size Selection (0-5, see below) (6-7=Reserved)
Val Small Large
0 = 8x8 16x16 ;Caution:
1 = 8x8 32x32 ;In 224-lines mode, OBJs with 64-pixel height
2 = 8x8 64x64 ;may wrap from lower to upper screen border.
3 = 16x16 32x32 ;In 239-lines mode, the same problem applies
4 = 16x16 64x64 ;also for OBJs with 32-pixel height.
5 = 32x32 64x64
6 = 16x32 32x64 (undocumented)
7 = 16x32 32x32 (undocumented)
(Ie. a setting of 0 means Small OBJs=8x8, Large OBJs=16x16 pixels)
(Whether an OBJ is "small" or "large" is selected by a bit in OAM)
4-3 Gap between OBJ 0FFh and 100h (0=None) (4K-word steps) (8K-byte steps)
2-0 Base Address for OBJ Tiles 000h..0FFh (8K-word steps) (16K-byte steps)
|
Byte 0 - X-Coordinate (lower 8bit) (upper 1bit at end of OAM) Byte 1 - Y-Coordinate (all 8bits) Byte 2 - Tile Number (lower 8bit) (upper 1bit within Attributes) Byte 3 - Attributes |
Bit7 Y-Flip (0=Normal, 1=Mirror Vertically) Bit6 X-Flip (0=Normal, 1=Mirror Horizontally) Bit5-4 Priority relative to BG (0=Low..3=High) Bit3-1 Palette Number (0-7) (OBJ Palette 4-7 can use Color Math via CGADSUB) Bit0 Tile Number (upper 1bit) |
Bit7 OBJ 3 OBJ Size (0=Small, 1=Large) Bit6 OBJ 3 X-Coordinate (upper 1bit) Bit5 OBJ 2 OBJ Size (0=Small, 1=Large) Bit4 OBJ 2 X-Coordinate (upper 1bit) Bit3 OBJ 1 OBJ Size (0=Small, 1=Large) Bit2 OBJ 1 X-Coordinate (upper 1bit) Bit1 OBJ 0 OBJ Size (0=Small, 1=Large) Bit0 OBJ 0 X-Coordinate (upper 1bit) |
| SNES PPU Video Memory (VRAM) |
Bit 0-9 - Character Number (000h-3FFh) Bit 10-12 - Palette Number (0-7) Bit 13 - BG Priority (0=Lower, 1=Higher) Bit 14 - X-Flip (0=Normal, 1=Mirror horizontally) Bit 15 - Y-Flip (0=Normal, 1=Mirror vertically) |
Bit 15 Apply offset to H/V (0=H, 1=V) ;-Mode 4 only Bit 14 Apply offset to BG2 ;\Mode 2 (... and Mode 6, though Bit 13 Apply offset to BG1 ;/ Mode 6 has only BG1 ?) Bit 12-10 Not used Bit 9-0 Scroll offset to be applied to BG1/BG2 Lower 3bit of HORIZONTAL offsets are ignored. |
Bit15-8 Not used (contains tile-data; no relation to the BG-Map entry) Bit7-0 Character Number (00h-FFh) (without XYflip or other attributes) |
Color Bits (Planes) Upper Row ........... Lower Row Plane 0 stored in bytes 00h,02h,04h,06h,08h,0Ah,0Ch,0Eh ;\for 4/16/256 colors Plane 1 stored in bytes 01h,03h,05h,07h,09h,0Bh,0Dh,0Fh ;/ Plane 2 stored in bytes 10h,12h,14h,16h,18h,1Ah,1Ch,1Eh ;\for 16/256 colors Plane 3 stored in bytes 11h,13h,15h,17h,19h,1Bh,1Dh,1Fh ;/ Plane 4 stored in bytes 20h,22h,24h,26h,28h,2Ah,2Ch,2Eh ;\ Plane 5 stored in bytes 21h,23h,25h,27h,29h,2Bh,2Dh,2Fh ; for 256 colors Plane 6 stored in bytes 30h,32h,34h,36h,38h,3Ah,3Ch,3Eh ; Plane 7 stored in bytes 31h,33h,35h,37h,39h,3Bh,3Dh,3Fh ;/ In each byte, bit7 is left-most, bit0 is right-most. Plane 0 is the LSB of color number. |
Vertical Rows Left-most .......... Right-Most Upper Row in bytes 01h,03h,05h,07h,09h,0Bh,0Dh,0Fh ;\ 2nd Row in bytes 11h,13h,15h,17h,19h,1Bh,1Dh,1Fh ; 3rd Row in bytes 21h,23h,25h,27h,29h,2Bh,2Dh,2Fh ; 4th Row in bytes 31h,33h,35h,37h,39h,3Bh,3Dh,3Fh ; 256-color 5th Row in bytes 41h,43h,45h,47h,49h,4Bh,4Dh,4Fh ; Mode 7 6th Row in bytes 51h,53h,55h,57h,59h,5Bh,5Dh,5Fh ; 7th Row in bytes 61h,63h,65h,67h,69h,6Bh,6Dh,6Fh ; Bottom Row in bytes 71h,73h,75h,77h,79h,7Bh,7Dh,7Fh ;/ |
32x32 pixel OBJ Tile 000h Tile000h, Tile001h, Tile002h, Tile003h Tile010h, Tile011h, Tile012h, Tile013h Tile020h, Tile021h, Tile022h, Tile023h Tile030h, Tile031h, Tile032h, Tile033h |
16x16 BG Tile 1FFh 16x16 OBJ Tile 1FFh Tile1ffh Tile200h Tile1ffh Tile1f0h Tile20fh Tile210h Tile10fh Tile100h |
| SNES PPU Color Palette Memory (CGRAM) and Direct Colors |
15 Not used (should be zero) (read: PPU2 Open Bus) 14-10 Blue 9-5 Green 4-0 Red |
00h Main Backdrop color (used when all BG/OBJ pixels are transparent) 01h-FFh 256-color BG palette (when not using direct-color mode) 01h-7Fh 128-color BG palette (BG2 in Mode 7) 01h-7Fh Eight 16-color BG palettes 01h-1Fh Eight 4-color BG palettes (except BG2-4 in Mode 0) 21h-3Fh Eight 4-color BG palettes (BG2 in Mode 0 only) 41h-5Fh Eight 4-color BG palettes (BG3 in Mode 0 only) 61h-7Fh Eight 4-color BG palettes (BG4 in Mode 0 only) 81h-FFh Eight 16-color OBJ palettes (half of them with color-math disabled) N/A Sub Backdrop color (not in CGRAM, set via COLDATA, Port 2132h) |
Color Bit7-0 all zero --> Transparent ;-Color "Black" is Transparent! Color Bit7-6 Blue Bit4-3 ;\ Palette Bit 2 Blue Bit2 ; 5bit Blue N/A Blue Bit1-0 (always zero) ;/ Color Bit5-3 Green Bit4-2 ;\ Palette Bit 1 Green Bit1 ; 5bit Green N/A Green Bit0 (always zero) ;/ Color Bit2-0 Red Bit4-2 ;\ Palette Bit 0 Red Bit1 ; 5bit Red N/A Red Bit0 (always zero) ;/ |
| SNES PPU Window |
7-0 Window Position (00h..0FFh; 0=leftmost, 255=rightmost) |
Bit 2123h 2124h 2125h 7-6 BG2 BG4 MATH Window-2 Area (0..1=Disable, 1=Inside, 2=Outside) 5-4 BG2 BG4 MATH Window-1 Area (0..1=Disable, 1=Inside, 2=Outside) 3-2 BG1 BG3 OBJ Window-2 Area (0..1=Disable, 1=Inside, 2=Outside) 1-0 BG1 BG3 OBJ Window-1 Area (0..1=Disable, 1=Inside, 2=Outside) |
Bit 212Ah 212Bh 7-6 BG4 - Window 1/2 Mask Logic (0=OR, 1=AND, 2=XOR, 3=XNOR) 5-4 BG3 - Window 1/2 Mask Logic (0=OR, 1=AND, 2=XOR, 3=XNOR) 3-2 BG2 MATH Window 1/2 Mask Logic (0=OR, 1=AND, 2=XOR, 3=XNOR) 1-0 BG1 OBJ Window 1/2 Mask Logic (0=OR, 1=AND, 2=XOR, 3=XNOR) |
7-5 Not used 4 OBJ (0=Enable, 1=Disable) ;\"Disable" forcefully disables the layer 3 BG4 (0=Enable, 1=Disable) ; within the window area (otherwise it is 2 BG3 (0=Enable, 1=Disable) ; enabled or disabled as selected in the 1 BG2 (0=Enable, 1=Disable) ; master enable bits in port 212Ch/212Dh) 0 BG1 (0=Enable, 1=Disable) ;/ - Backdrop (Always enabled) |
| SNES PPU Color-Math |
7-6 Force Main Screen Black (3=Always, 2=MathWindow, 1=NotMathWin, 0=Never) 5-4 Color Math Enable (0=Always, 1=MathWindow, 2=NotMathWin, 3=Never) 3-2 Not used 1 Sub Screen BG/OBJ Enable (0=No/Backdrop only, 1=Yes/Backdrop+BG+OBJ) 0 Direct Color (for 256-color BGs) (0=Use Palette, 1=Direct Color) |
7 Color Math Add/Subtract (0=Add; Main+Sub, 1=Subtract; Main-Sub) 6 Color Math "Div2" Half Result (0=No divide, 1=Divide result by 2) 5 Color Math when Main Screen = Backdrop (0=Off, 1=On) ;\ 4 Color Math when Main Screen = OBJ/Palette4..7 (0=Off, 1=On) ; OFF: Show - Color Math when Main Screen = OBJ/Palette0..3 (Always=Off) ; Raw Main, 3 Color Math when Main Screen = BG4 (0=Off, 1=On) ; or 2 Color Math when Main Screen = BG3 (0=Off, 1=On) ; ON: Show 1 Color Math when Main Screen = BG2 (0=Off, 1=On) ; Main+/-Sub 0 Color Math when Main Screen = BG1 (0=Off, 1=On) ;/ |
Disable = Display RAW Main Screen as such (without math) Enable = Apply math on Mainscreen (Ie. 212Ch enables the main screen, 2131h selects if math is applied on it) |
7 Apply Blue (0=No change, 1=Apply Intensity as Blue) 6 Apply Green (0=No change, 1=Apply Intensity as Green) 5 Apply Red (0=No change, 1=Apply Intensity as Red) 4-0 Intensity (0..31) |
| SNES PPU Timers and Status |
7-0 Not used (CPU Open Bus; usually last opcode, 21h for "MOV A,[2137h]") |
Doing a dummy-read from SLHV (Port 2137h) by software Switching WRIO (Port 4201h) Bit7 from 1-to-0 by software Lightgun High-to-Low transition (Pin6 of 2nd Controller connector) |
1st read Lower 8bit 2nd read Upper 1bit (other 7bit PPU2 open bus; last value read from PPU2) |
H Counter values range from 0 to 339, with 22-277 being visible on the
screen. V Counter values range from 0 to 261 in NTSC mode (262 is
possible every other frame when interlace is active) and 0 to 311 in
PAL mode (312 in interlace?), with 1-224 (or 1-239(?) if overscan is
enabled) visible on the screen.
|
7 OBJ Time overflow (0=Okay, 1=More than 8x34 OBJ pixels per scanline) 6 OBJ Range overflow (0=Okay, 1=More than 32 OBJs per scanline) 5 Master/Slave Mode (PPU1.Pin25) (0=Normal=Master) 4 Not used (PPU1 open bus) (same as last value read from PPU1) 3-0 PPU1 5C77 Version Number (only version 1 exists as far as I know) |
7 Current Interlace-Frame (0=1st, 1=2nd Frame) 6 H/V-Counter/Lightgun/Joypad2.Pin6 Latch Flag (0=No, 1=New Data Latched) 5 Not used (PPU2 open bus) (same as last value read from PPU2) 4 Frame Rate (PPU2.Pin30) (0=NTSC/60Hz, 1=PAL/50Hz) 3-0 PPU2 5C78 Version Number (version 1..3 exist as far as I know) |
Super Scope X=OPHCNT-40, Y=OPVCT-1 (games support software calibration) Justifier 1 X=OPHCNT-??, Y=OPVCT-? (games support software calibration) Justifier 2 X=OPHCNT-??, Y=OPVCT-? (games support software calibration) M.A.C.S. X=OPHCNT-76, Y=OPVCT-41 (hardcoded, mechanical calibration) |
| SNES PPU Interrupts |
7 VBlank NMI Enable (0=Disable, 1=Enable) (Initially disabled on reset) 6 Not used 5-4 H/V IRQ (0=Disable, 1=At H=H + V=Any, 2=At V=V + H=0, 3=At H=H + V=V) 3-1 Not used 0 Joypad Enable (0=Disable, 1=Enable Automatic Reading of Joypad) |
15-9 Not used 8-0 H-Count Timer Value (0..339) (+/-1 in long/short lines) (0=leftmost) |
15-9 Not used 8-0 V-Count Timer Value (0..261/311, NTSC/PAL) (+1 in interlace) (0=top) |
7 Vblank NMI Flag (0=None, 1=Interrupt Request) (set on Begin of Vblank) 6-4 Not used 3-0 CPU 5A22 Version Number (version 2 exists) |
7 H/V-Count Timer IRQ Flag (0=None, 1=Interrupt Request) 6-0 Not used |
7 V-Blank Period Flag (0=No, 1=VBlank) 6 H-Blank Period Flag (0=No, 1=HBlank) 5-1 Not used 0 Auto-Joypad-Read Busy Flag (1=Busy) (see 4200h, and 4218h..421Fh) |
| SNES PPU Resolution |
256x224 for 60Hz (NTSC) consoles 256x264 for 50Hz (PAL) consoles |
256x224 near-fullscreen on 60Hz (NTSC) consoles (or Tiny Picture at 50Hz) 256x239 not-really-fullscreen on 50Hz (PAL) consoles (or Overscan at 60Hz) |
Source Pixels ---> TV-Screen Pixels WW W WW W W WW g WW ggg WWW W WW W W WWW g WW ggg |
Air Strike Patrol (mission overview) (whatever mode? with Interlace) Bishoujo Wrestler Retsuden (some text) (512x448, BgMode5+Interlace) Ball Bullet Gun (in lower screen half) (512x224, BgMode5) Battle Cross (in game) (but isn't hires?) (512x224, BgMode1+PseudoH)(Bug?) BS Radical Dreamers (user name input only) (512x224, BgMode5) Chrono Trigger (crash into Lavos sequence) (whatever mode? with Interlace) Donkey Kong Country 1 (Nintendo logo) (512x224, BgMode5) G.O.D. (intro & lower screen half) (512x224, BgMode5) Jurassic Park (score text) (512x224, BgMode1+PseudoH+Math) Kirby's Dream Land 3 (leaves in 1st door) (512x224, BgMode1+PseudoH) Lufia 2 (credits screen at end of game) (whatever mode?) Moryo Senki Madara 2 (text) (512x224, BgMode5) Power Drive (in intro) (512x448, BgMode5+Interlace) Ranma 1/2: Chounai Gekitou Hen (256x448, BgMode1+InterlaceBug) RPM Racing (in intro and in game) (512x448, BgMode5+Interlace) Rudra no Hihou (RnH/Treasure of the Rudras)(512x224, BgMode5) Seiken Densetsu 2 (Secret of Mana) (setup) (512x224, BgMode5) Seiken Densetsu 3 (512x224, BgMode5) Shock Issue 1 & 2 (homebrew eZine) (512x224, BgMode5) SNES Test Program (by Nintendo) (Character Test includes BgMode5/BgMode6) Super Play Action Football (text) (512x224, BgMode5) World Cup Striker (intro/menu) (512x224, BgMode5) |
Dragonball Z Super Butoden 2-3 (when you start it up in the black screen?) |
| SNES PPU Offset-Per-Tile Mode |
Chrono Trigger (title screen, intro's "Black Omen" appearing) Star Fox/Starwing (to "rotate" the landscape background) Tetris Attack Yoshi's Island (dizziness effect, wavy lava) |
| SNES Audio Processing Unit (APU) |
| SNES APU Memory and I/O Map |
0000h..00EFh RAM (typically used for CPU pointers/variables) 00F0h..00FFh I/O Ports (writes are also passed to RAM) 0100h..01FFh RAM (typically used for CPU stack) 0200h..FFBFh RAM (code, data, dir-table, brr-samples, echo-buffer, etc.) FFC0h..FFFFh 64-byte Boot ROM or RAM (selectable via Port 00F1h) |
2140h - APUI00 - Main CPU to Sound CPU Communication Port 0 2141h - APUI01 - Main CPU to Sound CPU Communication Port 1 2142h - APUI02 - Main CPU to Sound CPU Communication Port 2 2143h - APUI03 - Main CPU to Sound CPU Communication Port 3 |
00F0h - TEST - Testing functions (W) 0Ah 00F1h - CONTROL - Timer, I/O and ROM Control (W) 80h 00F2h - DSPADDR - DSP Register Index (R/W) (FFh) 00F3h - DSPDATA - DSP Register Data (R/W) (DSP[7Fh]) 00F4h - CPUIO0 - CPU Input and Output Register 0 (R and W) R=00h,W=00h 00F5h - CPUIO1 - CPU Input and Output Register 1 (R and W) R=00h,W=00h 00F6h - CPUIO2 - CPU Input and Output Register 2 (R and W) R=00h,W=00h 00F7h - CPUIO3 - CPU Input and Output Register 3 (R and W) R=00h,W=00h 00F8h - AUXIO4 - External I/O Port P4 (S-SMP Pins 34-27) (R/W) (unused) FFh 00F9h - AUXIO5 - External I/O Port P5 (S-SMP Pins 25-18) (R/W) (unused) FFh 00FAh - T0DIV - Timer 0 Divider (for 8000Hz clock source) (W) (FFh) 00FBh - T1DIV - Timer 1 Divider (for 8000Hz clock source) (W) (FFh) 00FCh - T2DIV - Timer 2 Divider (for 64000Hz clock source) (W) (FFh) 00FDh - T0OUT - Timer 0 Output (R) (00h) 00FEh - T1OUT - Timer 1 Output (R) (00h) 00FFh - T2OUT - Timer 2 Output (R) (00h) |
x0h - VxVOLL - Left volume for Voice 0..7 (R/W) x1h - VxVOLR - Right volume for Voice 0..7 (R/W) x2h - VxPITCHL - Pitch scaler for Voice 0..7, lower 8bit (R/W) x3h - VxPITCHH - Pitch scaler for Voice 0..7, upper 6bit (R/W) x4h - VxSRCN - Source number for Voice 0..7 (R/W) x5h - VxADSR1 - ADSR settings for Voice 0..7, lower 8bit (R/W) x6h - VxADSR2 - ADSR settings for Voice 0..7, upper 8bit (R/W) x7h - VxGAIN - Gain settings for Voice 0..7 (R/W) x8h - VxENVX - Current envelope value for Voice 0..7 (R) x9h - VxOUTX - Current sample value for Voice 0..7 (R) xAh - NA - Unused (8 bytes of general-purpose RAM) (R/W) xBh - NA - Unused (8 bytes of general-purpose RAM) (R/W) 0Ch - MVOLL - Left channel master volume (R/W) 1Ch - MVOLR - Right channel master volume (R/W) 2Ch - EVOLL - Left channel echo volume (R/W) 3Ch - EVOLR - Right channel echo volume (R/W) 4Ch - KON - Key On Flags for Voice 0..7 (W) 5Ch - KOFF - Key Off Flags for Voice 0..7 (R/W) 6Ch - FLG - Reset, Mute, Echo-Write flags and Noise Clock (R/W) 7Ch - ENDX - Voice End Flags for Voice 0..7 (R) (W=Ack) 0Dh - EFB - Echo feedback volume (R/W) 1Dh - NA - Unused (1 byte of general-purpose RAM) (R/W) 2Dh - PMON - Pitch Modulation Enable Flags for Voice 1..7 (R/W) 3Dh - NON - Noise Enable Flags for Voice 0..7 (R/W) 4Dh - EON - Echo Enable Flags for Voice 0..7 (R/W) 5Dh - DIR - Sample table address (R/W) 6Dh - ESA - Echo ring buffer address (R/W) 7Dh - EDL - Echo delay (ring buffer size) (R/W) xEh - NA - Unused (8 bytes of general-purpose RAM) (R/W) xFh - FIRx - Echo FIR filter coefficient 0..7 (R/W) |
| SNES APU Block Diagram |
OUTx(n-1) PITCHn
PMON | ADSRn/ENV
|____MUL___| |
DIR*256 | +-------------------------------> ENVxn
+SRCn*4 | | .-----------------> OUTxn
_____ _______ __V___ | | _____
| | | BRR | | BRR | | _____ | |VOLnL|
| RAM |--->|Decoder|--->| Time |---o '-->| | | .-->| MUL |---> Ln
|_____| |_______| |______| \ | MUL | | | |_____|
______ NONn o--->| |---+---+ _____
| Noise| |_____| | |VOLnR|
| Time |---o '-->| MUL |---> Rn
|______| |_____|
^
|
FLG
|
________ _____ _____
c0 --->| ADD | |MVOLc| Master Volume | |
c1 --->| Output |--------------------->| MUL |---------------->| |
c2 --->| Mixing | |_____| | |
c3 --->| | _____ | ADD |--> c
c4 --->| | |EVOLc| Echo Volume | |
c5 --->| | Feedback .------>| MUL |---------------->| |
c6 --->| | Volume | |_____| |_____|
c7 --->|________| _____ | _________________
| EFB | | | |
EON ________ | MUL |<---+---------------------| Add FIR Sum |
c0 -:->| | |_____| |_________________|
c1 -:->| | | _|_|_|_|_|_|_|_|_
c2 -:->| | | | MUL FIR7..0 |
c3 -:->| | | ESA=Addr, EDL=Len |_7_6_5_4_3_2_1_0_|
c4 -:->| ADD | __V__ FLG _______________ _|_|_|_|_|_|_|_|_
c5 -:->| Echo | | | ECEN | Echo Buffer c | | FIR Buffer c |
c6 -:->| Mixing |-->| ADD |--:-->| RAM |-->| (Hardware regs) |
c7 -:->|________| |_____| |_______________| |_________________|
Newest --> Oldest Newest --> Oldest
|
_____ _____ ___________ _______ _______
| | | | | Pre- | | | | Post- |
| DSP |-->| D/A |-->| Amplifier |-->| Analog|-->| Ampl. |--> Multi-Out
|_____| |_____| |___________| | Mixer | | | (Stereo Out)
| | | | (with |
| Cartridge Slot Stereo In --->| | | phase |--> TV Modulator
| | | | inver-| (Mono Out)
| Expansion Port Stereo In --->| | | sion) |
| |_______| | |--> Expansion Port
| /MUTE signal | | | (Mono Out)
'------------------------------->----' |_______|
|
| SNES APU SPC700 CPU Overview |
A 8bit accumulator X 8bit index Y 8bit index SP 8bit stack pointer (addresses memory at 0100h..01FFh) PSW 8bit flags YA 16bit combination of Y=MSB, and A=LSB PC 16bit program counter |
Bit7 N Sign Flag (0=Positive, 1=Negative) Bit6 V Overflow Flag (0=None, 1=Overflow) Bit5 P Zero Page Location (0=00xxh, 1=01xxh) Bit4 B Break Flag (0=Reset, 1=BRK opcode; set <after> BRK opcode) Bit3 H Half-carry (0=Borrow, or no-carry, 1=Carry, or no-borrow) Bit2 I Interrupt Enable (0=Disable, 1=Enable) (no function in SNES APU) Bit1 Z Zero Flag (0=Non-zero, 1=Zero) Bit0 C Carry Flag (0=Borrow, or no-carry, 1=Carry, or no-borrow) |
Native Syntax Nocash Syntax aa [aa] ;\addresses memory at [0000..00FF] aa+X [aa+X] ; (or at [0100..01FF when flag P=1) aa+Y [aa+Y] ; (aa+X and aa+Y wrap within that area, (X) [X] ; ie. addr = (aa+X) AND 0FFh) (Y) [Y] ;/ aaaa [aaaa] ;\ aaaa+X [aaaa+X] ; addresses memory at [0000..FFFF] aaaa+Y [aaaa+Y] ;/ [aa]+Y [[aa]+Y] ;-Byte[Word[aa]+Y] ;\double-indirect (using [aa+X] [[aa+X]] ;-Byte[Word[aa+X]] ;/16bit pointer in RAM) aa.b [aa].b ;-Bit0..7 of address [0000..00FF] (8bit addr) aaa.b [aaa].b ;-Bit0..7 of address [0000..1FFF] (13bit addr) stack (push/pop/call/ret) ;-addresses memory at [0100..01FF] (SP+100h) |
Native Syntax Nocash Syntax Opcode Clk Expl NVPBHIZC |
| SNES APU SPC700 CPU Load/Store Commands |
MOV A,#nn MOV A,nn E8 nn 2 A=nn N.....Z. MOV X,#nn MOV X,nn CD nn 2 X=nn N.....Z. MOV Y,#nn MOV Y,nn 8D nn 2 Y=nn N.....Z. MOV A,X MOV A,X 7D 2 A=X N.....Z. MOV X,A MOV X,A 5D 2 X=A N.....Z. MOV A,Y MOV A,Y DD 2 A=Y N.....Z. MOV Y,A MOV Y,A FD 2 Y=A N.....Z. MOV X,SP MOV X,SP 9D 2 X=SP N.....Z. MOV SP,X MOV SP,X BD 2 SP=X ;at 0100..01FF ........ |
MOV A,aa MOV A,[aa] E4 aa 3 A=[aa] N.....Z. MOV A,aa+X MOV A,[aa+X] F4 aa 4 A=[aa+X] N.....Z. MOV A,!aaaa MOV A,[aaaa] E5 aa aa 4 A=[aaaa] N.....Z. MOV A,!aaaa+X MOV A,[aaaa+X] F5 aa aa 5 A=[aaaa+X] N.....Z. MOV A,!aaaa+Y MOV A,[aaaa+Y] F6 aa aa 5 A=[aaaa+Y] N.....Z. MOV A,(X) MOV A,[X] E6 3 A=[X] N.....Z. MOV A,(X)+ MOV A,[X]+ BF 4 A=[X], X=X+1 N.....Z. MOV A,[aa]+Y MOV A,[[aa]+Y] F7 aa 6 A=[[aa]+Y] N.....Z. MOV A,[aa+X] MOV A,[[aa+X]] E7 aa 6 A=[[aa+X]] N.....Z. MOV X,aa MOV X,[aa] F8 aa 3 X=[aa] N.....Z. MOV X,aa+Y MOV X,[aa+Y] F9 aa 4 X=[aa+Y] N.....Z. MOV X,!aaaa MOV X,[aaaa] E9 aa aa 4 X=[aaaa] N.....Z. MOV Y,aa MOV Y,[aa] EB aa 3 Y=[aa] N.....Z. MOV Y,aa+X MOV Y,[aa+X] FB aa 4 Y=[aa+X] N.....Z. MOV Y,!aaaa MOV Y,[aaaa] EC aa aa 4 Y=[aaaa] N.....Z. MOVW YA,aa MOVW YA,[aa] BA aa 5 YA=Word[aa] N.....Z. |
MOV aa,#nn MOV [aa],nn 8F nn aa 5 [aa]=nn (read) ........ MOV aa,bb MOV [aa],[bb] FA bb aa 5 [aa]=[bb] (no read) ........ MOV aa,A MOV [aa],A C4 aa 4 [aa]=A (read) ........ MOV aa,X MOV [aa],X D8 aa 4 [aa]=X (read) ........ MOV aa,Y MOV [aa],Y CB aa 4 [aa]=Y (read) ........ MOV aa+X,A MOV [aa+X],A D4 aa 5 [aa+X]=A (read) ........ MOV aa+X,Y MOV [aa+X],Y DB aa 5 [aa+X]=Y (read) ........ MOV aa+Y,X MOV [aa+Y],X D9 aa 5 [aa+Y]=X (read) ........ MOV !aaaa,A MOV [aaaa],A C5 aa aa 5 [aaaa]=A (read) ........ MOV !aaaa,X MOV [aaaa],X C9 aa aa 5 [aaaa]=X (read) ........ MOV !aaaa,Y MOV [aaaa],Y CC aa aa 5 [aaaa]=Y (read) ........ MOV !aaaa+X,A MOV [aaaa+X],A D5 aa aa 6 [aaaa+X]=A (read) ........ MOV !aaaa+Y,A MOV [aaaa+Y],A D6 aa aa 6 [aaaa+Y]=A (read) ........ MOV (X)+,A MOV [X]+,A AF 4 [X]=A, X=X+1 (no read) ........ MOV (X),A MOV [X],A C6 4 [X]=A (read) ........ MOV [aa]+Y,A MOV [[aa]+Y],A D7 aa 7 [[aa]+Y]=A (read) ........ MOV [aa+X],A MOV [[aa+X]],A C7 aa 7 [[aa+X]]=A (read) ........ MOVW aa,YA MOVW [aa],YA DA aa 5 Word[aa]=YA (read lsb)........ |
PUSH A PUSH A 2D 4 [SP]=A, SP=SP-1 ........ PUSH X PUSH X 4D 4 [SP]=X, SP=SP-1 ........ PUSH Y PUSH Y 6D 4 [SP]=Y, SP=SP-1 ........ PUSH PSW PUSH PSW 0D 4 [SP]=Flags, SP=SP-1 ........ POP A POP A AE 4 SP=SP+1, A=[SP] ........ POP X POP X CE 4 SP=SP+1, X=[SP] ........ POP Y POP Y EE 4 SP=SP+1, Y=[SP] ........ POP PSW POP PSW 8E 4 SP=SP+1, Flags=[SP] NVPBHIZC |
| SNES APU SPC700 CPU ALU Commands |
OR a,b OR a,b 00+x ... .. a=a OR b N.....Z. AND a,b AND a,b 20+x ... .. a=a AND b N.....Z. EOR a,b XOR a,b 40+x ... .. a=a XOR b N.....Z. CMP a,b CMP a,b 60+x ... .. a-b N.....ZC ADC a,b ADC a,b 80+x ... .. a=a+b+C NV..H.ZC SBC a,b SBC a,b A0+x ... .. a=a-b-not C NV..H.ZC |
cmd A,#nn cmd A,nn x+08 nn 2 A,nn cmd A,(X) cmd A,[X] x+06 3 A,[X] cmd A,aa cmd A,[aa] x+04 aa 3 A,[aa] cmd A,aa+X cmd A,[aa+X] x+14 aa 4 A,[aa+X] cmd A,!aaaa cmd A,[aaaa] x+05 aa aa 4 A,[aaaa] cmd A,!aaaa+X cmd A,[aaaa+X] x+15 aa aa 5 A,[aaaa+X] cmd A,!aaaa+Y cmd A,[aaaa+Y] x+16 aa aa 5 A,[aaaa+Y] cmd A,[aa]+Y cmd A,[[aa]+Y] x+17 aa 6 A,[[aa]+Y] cmd A,[aa+X] cmd A,[[aa+X]] x+07 aa 6 A,[[aa+X]] cmd aa,bb cmd [aa],[bb] x+09 bb aa 6 [aa],[bb] cmd aa,#nn cmd [aa],nn x+18 nn aa 5 [aa],nn cmd (X),(Y) cmd [X],[Y] x+19 5 [X],[Y] |
CMP X,#nn CMP X,nn C8 nn 2 X-nn N.....ZC CMP X,aa CMP X,[aa] 3E aa 3 X-[aa] N.....ZC CMP X,!aaaa CMP X,[aaaa] 1E aa aa 4 X-[aaaa] N.....ZC CMP Y,#nn CMP Y,nn AD nn 2 Y-nn N.....ZC CMP Y,aa CMP Y,[aa] 7E aa 3 Y-[aa] N.....ZC CMP Y,!aaaa CMP Y,[aaaa] 5E aa aa 4 Y-[aaaa] N.....ZC |
ASL a SHL a 00+x .. .. Left shift, bit0=0 N.....ZC ROL a RCL a 20+x .. .. Left shift, bit0=C N.....ZC LSR a SHR a 40+x .. .. Right shift, bit7=0 N.....ZC ROR a RCR a 60+x .. .. Right shift, bit7=C N.....ZC DEC a DEC a 80+x .. .. a=a-1 N.....Z. INC a INC a A0+x .. .. a=a+1 N.....Z. |
cmd A cmd A x+1C 2 A cmd X cmd X x+1D-80 2 X ;\increment/decrement only cmd Y cmd Y x+DC-80 2 Y ;/(not rotate/shift) cmd aa cmd [aa] x+0B aa 4 [aa] cmd aa+X cmd [aa+X] x+1B aa 5 [aa+X] cmd !aaaa cmd [aaaa] x+0C aa aa 5 [aaaa] |
ADDW YA,aa ADDW YA,[aa] 7A aa 5 YA=YA+Word[aa] NV..H.ZC SUBW YA,aa SUBW YA,[aa] 9A aa 5 YA=YA-Word[aa] NV..H.ZC CMPW YA,aa CMPW YA,[aa] 5A aa 4 YA-Word[aa] N.....ZC INCW aa INCW [aa] 3A aa 6 Word[aa]=Word[aa]+1 N.....Z. DECW aa DECW [aa] 1A aa 6 Word[aa]=Word[aa]-1 N.....Z. DIV YA,X DIV YA,X 9E 12 A=YA/X, Y=YA MOD X NV..H.Z. MUL YA MUL YA CF 9 YA=Y*A, NZ on Y only N.....Z. |
CLR1 aa.b CLR [aa].b b*20+12 aa 4 [aa].bit_b=0 ........ SET1 aa.b SET [aa].b b*20+02 aa 4 [aa].bit_b=1 ........ NOT1 aaa.b NOT [aaa].b EA aa ba 5 invert [aaa].bit_b ........ MOV1 aaa.b,C MOV [aaa].b,C CA aa ba 6 [aaa].bit_b=C ........ MOV1 C,aaa.b MOV C,[aaa].b AA aa ba 4 C=[aaa].bit_b .......C OR1 C,aaa.b OR C,[aaa].b 0A aa ba 5 C=C OR [aaa].bit_b .......C OR1 C,/aaa.b OR C,not[].b 2A aa ba 5 C=C OR not[aaa].bit_b .......C AND1 C,aaa.b AND C,[aaa].b 4A aa ba 4 C=C AND [aaa].bit_b .......C AND1 C,/aaa.b AND C,not[].b 6A aa ba 4 C=C AND not[aaa].bit_b .......C EOR1 C,aaa.b XOR C,[aaa].b 8A aa ba 5 C=C XOR [aaa].bit_b .......C CLRC CLR C 60 2 C=0 .......0 SETC SET C 80 2 C=1 .......1 NOTC NOT C ED 3 C=not C .......C CLRV CLR V,H E0 2 V=0, H=0 .0..0... |
DAA A DAA A DF 3 BCD adjust after ADC N.....ZC DAS A DAS A BE 3 BCD adjust after SBC N.....ZC XCN A XCN A 9F 5 A = (A>>4) | (A<<4) N.....Z. TCLR1 !aaaa TCLR [aaaa],A 4E aa aa 6 [aaaa]=[aaaa]AND NOT A N.....Z. TSET1 !aaaa TSET [aaaa],A 0E aa aa 6 [aaaa]=[aaaa]OR A N.....Z. |
| SNES APU SPC700 CPU Jump/Control Commands |
BPL dest JNS dest 10 rr 2/4 if N=0 --> JR dest ........ BMI dest JS dest 30 rr 2/4 if N=1 --> JR dest ........ BVC dest JNO dest 50 rr 2/4 if V=0 --> JR dest ........ BVS dest JO dest 70 rr 2/4 if V=1 --> JR dest ........ BCC dest JNC dest 90 rr 2/4 if C=0 --> JR dest ........ BCS dest JC dest B0 rr 2/4 if C=1 --> JR dest ........ BNE dest JNZ dest D0 rr 2/4 if Z=0 --> JR dest ........ BEQ dest JZ dest F0 rr 2/4 if Z=1 --> JR dest ........ BBS aa.b,dest JNZ [aa].b,dest b*20+03 aa rr 5/7 if [aa].bit_b=1 -> ........ BBC aa.b,dest JZ [aa].b,dest b*20+13 aa rr 5/7 if [aa].bit_b=0 -> ........ CBNE aa,dest CJNE A,[aa],d 2E aa rr 5/7 if A<>[aa] --> ........ CBNE aa+X,dest CJNE A,[aa+X],d DE aa rr 6/8 if A<>[aa+X] --> ........ DBNZ Y,dest DJNZ Y,dest FE rr 4/6 Y=Y-1, if Y<>0 --> ........ DBNZ aa,dest DJNZ [aa],dest 6E aa rr 5/7 [aa]=[aa]-1, if .. ........ |
BRA dest JR dest 2F rr 4 PC=PC+/-rr ........ JMP !aaaa JMP aaaa 5F aa aa 3 PC=aaaa ........ JMP [!aaaa+X] JMP [aaaa+X] 1F aa aa 6 PC=Word[a+X] ........ CALL !aaaa CALL aaaa 3F aa aa 8 [S-1]=PC,S=S-2,PC=aaaa ........ TCALL n CALL [FFnn] n1 ;n=0..F 8 Push PC, PC=[FFDE-n*2] ........ PCALL uu PCALL FFnn 4F nn 6 Push PC, PC=FF00..FFFF ........ RET RET 6F 5 PC=[S+1],S=S+2 ........ RET1 RETI 7F 6 Pop Flags, PC NVPBHIZC BRK BRK 0F 8 Push $+1,PSW,PC=[FFDE] ...1.0.. /RESET /RESET - ? PC=[FFFEh] ..00.0.. |
NOP NOP 00 2 do nothing ........ SLEEP SLEEP EF ? Halts the processor ........ STOP STOP FF ? Halts the processor ........ CLRP CLR P 20 2 P=0 ;zero page at 00aa ..0..... SETP SET P 40 2 P=1 ;zero page at 01aa ..1..... EI EI A0 3 I=1 ;interrupt enable .....1.. DI DI C0 3 I=0 ;interrupt disable .....0.. |
| SNES APU SPC700 I/O Ports |
0 Timer-Enable (0=Normal, 1=Timers don't work) 1 RAM Write Enable (0=Disable/Read-only, 1=Enable SPC700 & S-DSP writes) 2 Crash SPC700 (0=Normal, 1=Crashes the CPU) 3 Timer-Disable (0=Timers don't work, 1=Normal) 4-5 Waitstates on RAM Access (0..3 = 0/1/4/9 cycles) (0=Normal) 6-7 Waitstates on I/O and ROM Access (0..3 = 0/1/4/9 cycles) (0=Normal) |
0-2 Timer 0-2 Enable (0=Disable, set TnOUT=0 & reload divider, 1=Enable)
3 Not used
4 Reset Port 00F4h/00F5h Input-Latches (0=No change, 1=Reset to 00h)
5 Reset Port 00F6h/00F7h Input-Latches (0=No change, 1=Reset to 00h)
Note: The CPUIO inputs are latched inside of the SPC700 (at time when
the Main CPU writes them), above two bits allow to reset these latches.
6 Not used
7 ROM at FFC0h-FFFFh (0=RAM, 1=ROM) (writes do always go to RAM)
|
0-7 DSP Register Number (usually 00h..7Fh) (80h..FFh are read-only mirrors) |
0-7 DSP Register Data (read/write the register selected via Port 00F2h) |
0-7 Data written to/read from corresponding register on main 5A22 CPU |
0-7 Input/Output levels (0=Low, 1=High) |
0-7 Divider (01h..FFh=Divide by 1..255, or 00h=Divide by 256) |
0-3 Incremented at the rate selected via TnDIV (reset to 0 after reading) 4-7 Not used (always zero) |
00..1F 0,3,0,1,0,0,0,1,0,0,1,0,0,1,0,2, 2,3,0,3,1,1,1,1,0,0,0,1,0,0,0,1 20..3F 0,3,0,1,0,0,0,1,0,0,1,0,0,1,3,2, 0,3,0,3,1,1,1,1,0,0,0,1,0,0,0,3 40..5F 0,3,0,1,0,0,0,1,0,0,0,0,0,1,0,3, 2,3,0,3,1,1,1,1,0,0,0,1,0,0,0,0 60..7F 0,3,0,1,0,0,0,1,0,1,0,0,0,1,2,1, 0,3,0,3,1,1,1,1,1,1,1,1,0,0,0,1 80..9F 0,3,0,1,0,0,0,1,0,0,1,0,0,0,1,0, 2,3,0,3,1,1,1,1,0,0,1,1,0,0,10,3 A0..BF 1,3,0,1,0,0,0,1,0,0,0,0,0,0,1,1, 0,3,0,3,1,1,1,1,0,0,1,1,0,0,1,1 C0..DF 1,3,0,1,0,0,0,1,0,0,1,0,0,0,1,7, 2,3,0,3,1,1,1,1,0,1,0,1,0,0,4,1 E0..FF 0,3,0,1,0,0,0,1,0,0,0,0,0,1,1,0, 0,3,0,3,1,1,1,1,0,1,0,1,0,0,3,0 Note: For conditional jumps (with condition=true), add 2 additional cylces. |
number_of_I/O_waits = list_entry number_of_RAM_waits = total_number_of_internal_cycles - list_entry |
| SNES APU Main CPU Communication Port |
7-0 APU I/O Data (Write: Data to APU, Read: Data from APU) |
Wait until Word[2140h]=BBAAh
kick=CCh ;start-code for first command
for block=1..num_blocks
Word[2142h]=dest_addr ;usually 200h or higher (above stack and I/O ports)
Byte[2141h]=01h ;command=transfer (can be any non-zero value)
Byte[2140h]=kick ;start command (CCh on first block)
Wait until Byte[2140h]=kick
for index=0 to length-1
Byte[2141h]=[src_addr+index] ;send data byte
Byte[2140h]=index.lsb ;send index LSB (mark data available)
Wait until Byte[2140h]=index.lsb ;wait for acknowledge (see CAUTION)
next index
kick=(index+2 AND FFh) OR 1 ;-kick for next command (must be bigger than
next block ;(if any) ; last index+1, and must be non-zero)
[2142h]=entry_point ;entrypoint, must be below FFC0h (ROM region)
[2141h]=00h ;command=entry (must be zero value)
[2140h]=kick ;start command
Wait until Byte[2140h]=kick ;wait for acknowledge
|
FFC0 CD EF mov x,EF ;\
FFC2 BD mov sp,x ; zerofill RAM at [0001h..00EFh]
FFC3 E8 00 mov a,00 ; (ie. excluding I/O Ports at F0h..FFh)
@@zerofill_lop: ; (though [00h..01h] destroyed below)
FFC5 C6 mov [x],a ; (also sets stacktop to 01EFh, kinda
FFC6 1D dec x ; messy, nicer would be stacktop 01FFh)
FFC7 D0 FC jnz @@zerofill_lop ;/
FFC9 8F AA F4 mov [F4],AA ;\notify Main CPU that APU is ready
FFCC 8F BB F5 mov [F5],BB ;/for communication
@@wait_for_cc: ;\
FFCF 78 CC F4 cmp [F4],CC ; wait for initial "kick" value
FFD2 D0 FB jnz @@wait_for_cc ;/
FFD4 2F 19 jr main
;---
@@transfer_data:
@@wait_for_00: ;\
FFD6 EB F4 mov y,[F4] ;index (should become 0) ;
FFD8 D0 FC jnz @@wait_for_00 ;/
@@transfer_lop:
FFDA 7E F4 cmp y,[F4]
FFDC D0 0B jnz FFE9 ------->
FFDE E4 F5 mov a,[F5] ;get data
FFE0 CB F4 mov [F4],y ;ack data
FFE2 D7 00 mov [[00]+y],a ;store data
FFE4 FC inc y ;addr lsb
FFE5 D0 F3 jnz @@transfer_lop
FFE7 AB 01 inc [01] ;addr msb
@@
FFE9 10 EF jns @@transfer_lop ;strange...
FFEB 7E F4 cmp y,[F4]
FFED 10 EB jns @@transfer_lop
;- - -
main:
FFEF BA F6 movw ya,[F6] ;\copy transfer (or entrypoint)
FFF1 DA 00 movw [00],ya ;addr ;/address to RAM at [0000h]
FFF3 BA F4 movw ya,[F4] ;cmd:kick
FFF5 C4 F4 mov [F4],a ;ack kick
FFF7 DD mov a,y ;cmd
FFF8 5D mov x,a ;cmd
FFF9 D0 DB jnz @@transfer_data
FFFB 1F 00 00 jmp [0000+x] ;in: A=0, X=0, Y=0, SP=EFh, PSW=02h
;---
FFFE C0 FF dw FFC0 ;reset vector
|
| SNES APU DSP BRR Samples |
0-7 Instrument number (index in DIR table) |
0-7 Sample Table Address (in 256-byte steps) (indexed via VxSRCN) |
Byte 0-1 BRR Start Address (used when voice is Keyed-ON) Byte 2-3 BRR Restart/Loop Address (used when end of BRR data reached) |
7-4 Shift amount (0=Silent, 12=Loudest, 13-15=Reserved) 3-2 Filter number (0=None, 1..3=see below) 1-0 Loop/End flags (0..3=see below) |
7-4 First Sample (signed -8..+7) 3-0 Second Sample (signed -8..+7) |
Code 0 = Normal (continue at next 9-byte block) Code 1 = End+Mute (jump to Loop-address, set ENDx flag, Release, Env=000h) Code 2 = Ignored (same as Code 0) Code 3 = End+Loop (jump to Loop-address, set ENDx flag) |
sample = (nibble SHL shift) SAR 1 Accordingly, shift=0 is rather useless (since it strips the low bit). When shift=13..15, decoding works as if shift=12 and nibble=(nibble SAR 3). |
Filter 0: new = sample Filter 1: new = sample + old*0.9375 Filter 2: new = sample + old*1.90625 - older*0.9375 Filter 3: new = sample + old*1.796875 - older*0.8125 |
Filter 0: new = sample Filter 1: new = sample + old*1+((-old*1) SAR 4) Filter 2: new = sample + old*2+((-old*3) SAR 5) - older+((older*1) SAR 4) Filter 3: new = sample + old*2+((-old*13) SAR 6) - older+((older*3) SAR 4) |
If new>+7FFFh then new=+7FFFh (but, clipped to +3FFFh below) ;\clamp 16bit If new<-8000h then new=-8000h (but, clipped to ZERO below) ;/(dirt-effect) If new=(+4000h..+7FFFh) then new=(-4000h..-1) ;\clip 15bit If new=(-8000h..-4001h) then new=(-0..-3FFFh) ;/(lost-sign) If new>+3FF8h OR new<-3FFAh then overflows can occur in Gauss section |
| SNES APU DSP BRR Pitch |
0-13 Sample rate (0=stop, 3FFFh=fastest) (1000h = 32000Hz) 14-15 Not used (read/write-able) |
0 Not used 1-7 Flags for Voice 1..7 (0=Normal, 1=Modulate by Voice 0..6) |
Step = VxPitch ;range 0..3FFFh (0..128 kHz)
IF PMON.Bit(x)=1 AND (x>0) ;pitch modulation enable
Factor = VxOUTX(x-1) ;range -4000h..+3FFFh (prev voice amplitude)
Factor = (Factor SAR 4)+400h ;range +000h..+7FFh (factor = 0.00 .. 1.99)
Step = (Step * Factor) SAR 10 ;range 0..7FEEh (0..256 kHz)
XXX somewhere here, STEP (or the COUNTER-RESULT) is cropped to 128kHz max) XX?
Counter = Counter + Step ;range 0..FFFFh, carry=next BRR block
|
out = ((gauss[0FFh-i] * oldest) SAR 10) ;-initial 16bit value out = out + ((gauss[1FFh-i] * older) SAR 10) ;-no 16bit overflow handling out = out + ((gauss[100h+i] * old) SAR 10) ;-no 16bit overflow handling out = out + ((gauss[000h+i] * new) SAR 10) ;-with 16bit overflow handling out = out SAR 1 ;-convert 16bit result to 15bit |
000,000,000,000,000,000,000,000,000,000,000,000,000,000,000,000 ;\ 001,001,001,001,001,001,001,001,001,001,001,002,002,002,002,002 ; 002,002,003,003,003,003,003,004,004,004,004,004,005,005,005,005 ; 006,006,006,006,007,007,007,008,008,008,009,009,009,00A,00A,00A ; 00B,00B,00B,00C,00C,00D,00D,00E,00E,00F,00F,00F,010,010,011,011 ; 012,013,013,014,014,015,015,016,017,017,018,018,019,01A,01B,01B ; entry 01C,01D,01D,01E,01F,020,020,021,022,023,024,024,025,026,027,028 ; 000h..0FFh 029,02A,02B,02C,02D,02E,02F,030,031,032,033,034,035,036,037,038 ; 03A,03B,03C,03D,03E,040,041,042,043,045,046,047,049,04A,04C,04D ; 04E,050,051,053,054,056,057,059,05A,05C,05E,05F,061,063,064,066 ; 068,06A,06B,06D,06F,071,073,075,076,078,07A,07C,07E,080,082,084 ; 086,089,08B,08D,08F,091,093,096,098,09A,09C,09F,0A1,0A3,0A6,0A8 ; 0AB,0AD,0AF,0B2,0B4,0B7,0BA,0BC,0BF,0C1,0C4,0C7,0C9,0CC,0CF,0D2 ; 0D4,0D7,0DA,0DD,0E0,0E3,0E6,0E9,0EC,0EF,0F2,0F5,0F8,0FB,0FE,101 ; 104,107,10B,10E,111,114,118,11B,11E,122,125,129,12C,130,133,137 ; 13A,13E,141,145,148,14C,150,153,157,15B,15F,162,166,16A,16E,172 ;/ 176,17A,17D,181,185,189,18D,191,195,19A,19E,1A2,1A6,1AA,1AE,1B2 ;\ 1B7,1BB,1BF,1C3,1C8,1CC,1D0,1D5,1D9,1DD,1E2,1E6,1EB,1EF,1F3,1F8 ; 1FC,201,205,20A,20F,213,218,21C,221,226,22A,22F,233,238,23D,241 ; 246,24B,250,254,259,25E,263,267,26C,271,276,27B,280,284,289,28E ; 293,298,29D,2A2,2A6,2AB,2B0,2B5,2BA,2BF,2C4,2C9,2CE,2D3,2D8,2DC ; 2E1,2E6,2EB,2F0,2F5,2FA,2FF,304,309,30E,313,318,31D,322,326,32B ; entry 330,335,33A,33F,344,349,34E,353,357,35C,361,366,36B,370,374,379 ; 100h..1FFh 37E,383,388,38C,391,396,39B,39F,3A4,3A9,3AD,3B2,3B7,3BB,3C0,3C5 ; 3C9,3CE,3D2,3D7,3DC,3E0,3E5,3E9,3ED,3F2,3F6,3FB,3FF,403,408,40C ; 410,415,419,41D,421,425,42A,42E,432,436,43A,43E,442,446,44A,44E ; 452,455,459,45D,461,465,468,46C,470,473,477,47A,47E,481,485,488 ; 48C,48F,492,496,499,49C,49F,4A2,4A6,4A9,4AC,4AF,4B2,4B5,4B7,4BA ; 4BD,4C0,4C3,4C5,4C8,4CB,4CD,4D0,4D2,4D5,4D7,4D9,4DC,4DE,4E0,4E3 ; 4E5,4E7,4E9,4EB,4ED,4EF,4F1,4F3,4F5,4F6,4F8,4FA,4FB,4FD,4FF,500 ; 502,503,504,506,507,508,50A,50B,50C,50D,50E,50F,510,511,511,512 ; 513,514,514,515,516,516,517,517,517,518,518,518,518,518,519,519 ;/ |
Incoming BRR Data ---> Interpolated Data _ _ _ _ | | | | | | | | . . . . Nibbles=79797979, Shift=12, Filter=0 | | | | | | | | ---> / \ / \ / \ / \ HALF-volume ZIGZAG-wave | |_| |_| |_| |_ ' ' ' ' ___ ___ | | | | .'. .'. Nibbles=77997799, Shift=12, Filter=0 | | | | ---> / \ / \ FULL-volume SINE-wave | |___| |___ ' '.' '. _______ ___ | | .' '. Nibbles=77779999, Shift=12, Filter=0 | | ---> / \ SQUARE wave (with rounded edges) | |_______ ' '.____ _______ ___ | | .' '. | | Nibbles=77778888, Shift=12, Filter=0 | | ---> / \ | | OVERFLOW glitch on -4000h*801h | |_______ ' '.|_|_ _____ _ __ | |_ _| .' ''. .' Nibbles=7777CC44, Shift=12, Filter=0 | |___| ---> / '..' CUSTOM wave-form | ' ___ __ | |___| | _ \ ! / . \ ! / Nibbles=77DE9HZK, Shift=3M, Filter=V |_ ____| _| ---> - + - + - + - SOLAR STORM wave-form __| |______|___ / ! \ ' / ! \ |
| SNES APU DSP ADSR/Gain Envelope |
0-3 4bit Attack rate ;Rate=N*2+1, Step=+32 (or Step=+1024 when Rate=31) 4-6 3bit Decay rate ;Rate=N*2+16, Step=-(((Level-1) SAR 8)+1) 7 ADSR/Gain Select ;0=Use VxGAIN, 1=Use VxADSR (Attack/Decay/Sustain) 8-12 5bit Sustain rate ;Rate=N, Step=-(((Level-1) SAR 8)+1) 13-15 3bit Sustain level ;Boundary=(N+1)*100h N/A 0bit Release rate ;Rate=31, Step=-8 (or Step=-800h when BRR-end) |
0-7 Not used (instead, Attack/Decay/Sustain parameters are used) |
0-6 Fixed Volume (Envelope Level = N*16, Rate=Infinite) ;Volume=N*16/800h 7 Must be 0 for this mode |
0-4 Gain rate (Rate=N) 5-6 Gain mode (see below) 7 Must be 1 for this mode |
Mode 0 = Linear Decrease ;Rate=N, Step=-32 (if Level<0 then Level=0) Mode 1 = Exp Decrease ;Rate=N, Step=-(((Level-1) SAR 8)+1) Mode 2 = Linear Increase ;Rate=N, Step=+32 Mode 3 = Bent Increase ;Rate=N, If Level<600h then Step=+32 else Step=+8 In all cases, clip E to 0 or 0x7ff rather than wrapping. |
0-6 Upper 7bit of the 11bit envelope volume (0..127) 7 Not used (zero) |
0-7 Upper 8bit of the current 15bit sample value (-128..+127) |
00h=Stop 04h=1024 08h=384 0Ch=160 10h=64 14h=24 18h=10 1Ch=4 01h=2048 05h=768 09h=320 0Dh=128 11h=48 15h=20 19h=8 1Dh=3 02h=1536 06h=640 0Ah=256 0Eh=96 12h=40 16h=16 1Ah=6 1Eh=2 03h=1280 07h=512 0Bh=192 0Fh=80 13h=32 17h=12 1Bh=5 1Fh=1 |
Save the new value, *clipped* to 11 bits, to determine the increment for GAIN Bent Increase mode next sample. Note that a negative value for the new value will result in the clipped version being greater than 0x600. |
| SNES APU DSP Volume Registers |
0-7 Volume (-127..+127) (negative = phase inverted) (sample=sample*vol/128) |
0-7 Volume (-128..+127) (negative = phase inverted) (sample=sample*vol/128) |
sum = sample0*V0VOLx SAR 6 ;\ sum = sum + sample1*V0V1Lx SAR 6 ; sum = sum + sample2*V0V2Lx SAR 6 ; with 16bit overflow handling sum = sum + sample3*V0V3Lx SAR 6 ; (after each addition) sum = sum + sample4*V0V4Lx SAR 6 ; sum = sum + sample5*V0V5Lx SAR 6 ; sum = sum + sample6*V0V6Lx SAR 6 ; sum = sum + sample7*V0V7Lx SAR 6 ; sum = (sum*MVOLx SAR 7) ; sum = sum + (fir_out*EVOLx SAR 7) ;/ if FLG.MUTE then sum = 0000h sum = sum XOR FFFFh ;-final phase inversion (as done by built-in post-amp) |
| SNES APU DSP Control Registers |
0-7 Flags for Voice 0..7 (0=No change, 1=Key On) |
Writing 1 to the KON bit will set the envelope to 0, the state to
Attack, and will start the channel from the beginning (see DIR and
VxSRCN). Note that this happens even if the channel is already playing
(which may cause a click/pop), and that there are 5 'empty' samples
before envelope updates and BRR decoding actually begin.
|
0-7 Flags for Voice 0..7 (0=No change, 1=Key Off) |
Setting 1 to the KOFF bit will transition the voice to the Release
state. Thus, the envelope will decrease by 8 every sample (regardless
of the VxADSR and VxGAIN settings) until it reaches 0, where it will
stay until the next KON.
|
0-4 Noise frequency (0=Stop, 1=16Hz, 2=21Hz, ..., 1Eh=16kHz, 1Fh=32kHz) 5 Echo Buffer Writes (0=Enable, 1=Disable) (doesn't disable echo-reads) 6 Mute Amplifier (0=Normal, 1=Mute) (doesn't stop internal processing) 7 Soft Reset (0=Normal, 1=KeyOff all voices, and set Envelopes=0) |
0-7 Flags for Voice 0..7 (0=Keyed ON, 1=BRR-End-Bit encountered) |
Note that the bit is set at the START of decoding the BRR block, not
at the end. Recall that BRR processing, and therefore the setting of
bits in this register, continues even for voices in the Release state.
|
0-7 Flags for Voice 0..7 (0=Output BRR Samples, 1=Output Noise) |
Level = ((Level SHR 1) AND 3FFFh) OR ((Level.Bit0 XOR Level.Bit1) SHL 14) |
These registers seem to be polled only at 16000 Hz, when every other
sample is due to be output. Thus, if you write two values in close
succession, usually but not always only the second value will have an
effect:
; assume KOFF = 0, but no voices playing
mov $f2, #$4c ; KON = 1 then KON = 2
mov $f3, #$01 ; -> *usually* only voice 2 is keyed on. If both are,
mov $f3, #$02 ; voice 1 will be *2* samples ahead rather than one.
and
; assume various voices playing
mov $f2, #$5c ; KOFF = $ff then KOFF = 0
mov $f3, #$ff
mov $f3, #$00 ; -> *usually* all voices remain playing
FLG bit 7, however, is polled every sample and polled for each voice.
|
These registers and FLG bit 7 interact as follows:
1. If FLG bit 7 or the KOFF bit for the channel is set, transition
to the Release state. If FLG bit 7 is set, also set the envelope
to 0.
2. If the 'internal' value of KON has the channel's bit set, perform
the KON actions described above.
3. Set the 'internal' value of KON to 0.
|
This has a number of consequences:
* KON effectively takes effect 'on write', even though a non-zero
value can be read back much later. KOFF and FLG.7, on the other
hand, exert their influence constantly until a new value is
written.
* Writing KON while KOFF or FLG.7 will not result in any samples
being output by the channel. The channel is keyed on, but it is
turned off again 2 samples later. Since there is a 5 sample delay
after KON before the channel actually beings processing, the net
effect is no output.
* However, if KOFF is cleared within 63 SPC700 cycles of the
KON write above, the channel WILL be keyed on as normal. If KOFF
is cleared betwen 64 and 127 SPC700 cycles later, the channel
MIGHT be keyed on with decreasing probability depending on how
many cycles before the KON/KOFF poll the KON write occurred.
* Setting both KOFF and KON for a channel will turn the channel
off much faster than just KOFF alone, since the KON will set the
envelope to 0. This can cause a click/pop, though.
|
| SNES APU DSP Echo Registers |
0-7 Volume (-128..+127) (negative = phase inverted) (sample=sample*vol/128) |
0-7 Volume (-128..+127) (negative = phase inverted) (sample=sample*vol/128) |
0-7 Flags for Voice 0..7 (0=Direct Output, 1=Echo (and Direct) Output) |
0-7 Echo Buffer Base Address (in 256-byte steps) |
Byte 0: Lower 7bit of Left sample (stored in bit1-7) (bit0=unused/zero) Byte 1: Upper 8bit of Left sample (stored in bit0-7) Byte 2: Lower 7bit of Right sample (stored in bit1-7) (bit0=unused/zero) Byte 3: Upper 8bit of Right sample (stored in bit0-7) |
0-3 Echo Buffer Size (0=4 bytes, or 1..15=Size in 2K-byte steps) (max=30K) 4-7 Not used (read/write-able) (ie. 16 ms steps) (max=240ms) |
Note that the ESA register is accessed 32 cycles before the value is
used for a write; at a sample level, this causes writes to appear to be
delayed by at least a full sample before taking effect.
|
The EDL register value is only used under certain conditions:
* Write the echo buffer at sample 'idx' (cycles 29 and 30)
* If idx==0, set idx_max = EDL<<9 (cycle 30-ish)
* Increment idx. If idx>=idx_max, idx=0 (cycle 30-ish)
This means that it can take up to .25s for a newly written value to
actually take effect, if the old value was 0x0f and the new value is
written just after the cycle 30 in which buffer index 0 was written.
|
0-7 Echo Coefficient for 8-tap FIR filter (-80h..+7Fh) |
addr = (ESA*100h+ram_index*4) AND FFFFh ;-Echo RAM read/write addr buf[(i-0) AND 7] = EchoRAM[addr] SAR 1 ;-input 15bit from Echo RAM sum = buf[(i-7) AND 7]*FIR0 SAR 6 ;oldest ;\ sum = sum + buf[(i-6) AND 7]*FIR1 SAR 6 ; calculate 16bit sum of sum = sum + buf[(i-5) AND 7]*FIR2 SAR 6 ; oldest 7 values, these sum = sum + buf[(i-4) AND 7]*FIR3 SAR 6 ; additions are done sum = sum + buf[(i-3) AND 7]*FIR4 SAR 6 ; without overflow sum = sum + buf[(i-2) AND 7]*FIR5 SAR 6 ; handling sum = sum + buf[(i-1) AND 7]*FIR6 SAR 6 ;/ sum = sum + buf[(i-0) AND 7]*FIR7 SAR 6 ;newest ;-with overflow handling if overflow occurred in LAST addition: saturate to min/max=-8000h/+7FFFh audio_output=NormalVoices+((sum*EVOLx) SAR 7) ;-output to speakers echo_input=EchoVoices+((sum*EFB) SAR 7) ;-feedback to echo RAM echo_input=echo_input AND FFFEh ;-isolate 15bit/bit0=0 if echo write enabled: EchoRAM[addr]=echo_input ;-write (if enabled in FLG) i = i + 1 ;-FIR index for next sample ram_index=ram_index+1 ;-RAM index for next sample decrease remain, if remain=0, reload remain from EDL and set ram_index=0 |
FIR0 FIR1 FIR2 FIR3 FIR4 FIR5 FIR6 FIR7 EFB FF 08 17 24 24 17 08 FF 40 Echo with Low-pass (bugged) 7F 00 00 00 00 00 00 00 7F Echo (nearly endlessly repeated) 7F 00 00 00 00 00 00 00 40 Echo (repeat w. decreasing vol) 7F 00 00 00 00 00 00 00 00 Echo (one-shot) |
| SNES APU Low Level Timings |
Time <--- RAM Access ---> <---- Register Array ----> <--Extra--> T0 [V0BRR.2nd.dta1] -- ,V0VOLL ,V2SRCN T1 [V1SRCN/DIR.lsb/msb] V0VOLR ,V1PITCHL ,V1ADSR1 ENDX.0, Timer0,1,2 T2 [V1BRR.1st.hdr/dta0] V0ENVX ,V1PITCHH ,V1ADSR2 V1:FLG.7 T3 [V1BRR.2nd.dta1] V0OUTX ,V1VOLL ,V3SRCN T4 [V2SRCN/DIR.lsb/msb] V1VOLR ,V2PITCHL ,V2ADSR1 ENDX.1 T5 [V2BRR.1st.hdr/dta0] V1ENVX ,V2PITCHH ,V2ADSR2 V2:FLG.7 T6 [V2BRR.2nd.dta1] V1OUTX ,V2VOLL ,V4SRCN T7 [V3SRCN/DIR.lsb/msb] V2VOLR ,V3PITCHL ,V3ADSR1 ENDX.2 T8 [V3BRR.1st.hdr/dta0] V2ENVX ,V3PITCHH ,V3ADSR2 V3:FLG.7 T9 [V3BRR.2nd.dta1] V2OUTX ,V3VOLL ,V5SRCN T10 [V4SRCN/DIR.lsb/msb] V3VOLR ,V4PITCHL ,V4ADSR1 ENDX.3 T11 [V4BRR.1st.hdr/dta0] V3ENVX ,V4PITCHH ,V4ADSR2 V4:FLG.7 T12 [V4BRR.2nd.dta1] V3OUTX ,V4VOLL ,V6SRCN T13 [V5SRCN/DIR.lsb/msb] V4VOLR ,V5PITCHL ,V5ADSR1 ENDX.4 T14 [V5BRR.1st.hdr/dta0] V4ENVX ,V5PITCHH ,V5ADSR2 V5:FLG.7 T15 [V5BRR.2nd.dta1] V4OUTX ,V5VOLL ,V7SRCN T16 [V6SRCN/DIR.lsb/msb] V5VOLR ,V6PITCHL ,V6ADSR1 ENDX.5 T17 [V6BRR.1st.hdr/dta0] V5ENVX ,V6PITCHH ,V6ADSR2 V6:FLG.7, Timer2 T18 [V6BRR.2nd.dta1] V5OUTX ,V6VOLL ,V0SRCN T19 [V7SRCN/DIR.lsb/msb] V6VOLR ,V7PITCHL ,V7ADSR1 ENDX.6 T20 [V7BRR.1st.hdr/dta0] V6ENVX ,V7PITCHH ,V7ADSR2 V7:FLG.7 T21 [V7BRR.2nd.dta1] V6OUTX ,V7VOLL ,V1SRCN T22 [V0SRCN/DIR.lsb/msb] V7VOLR ,V0PITCHL ,V0ADSR1 ENDX.7 T23 [RdEchoLeft.lsb/msb] V7ENVX ,V0PITCHH ,FIR0 T24 [RdEchoRight.lsb/msb] V7OUTX ,FIR1 ,FIR2 T25 --- ;SRAM./OE=no FIR3 ,FIR4 ,FIR5 T26 [V0BRR.1st.hdr/dta0] FIR6 ,FIR7 ,--- T27 --- ;SRAM./OE=yes?! MVOLL ,EVOLL ,EFB T28 --- ;SRAM./OE=yes?! MVOLR ,EVOLR ,PMON T29 --- ;SRAM./OE=no NON ,EON ,DIR FLG.5 T30 [WrEchoLeft.lsb/msb] EDL ,ESA ,KON? FLG.5 T31 [WrEchoRight.lsb/msb] KOFF ,FLG.LSB ,V0ADSR2 FLG.0-4,V0:FLG.7,KON |
ENDX 8bits KON-changed 1bit FLG.MSBs 3bit (or maybe/rather it's full 8bit, including LSBs?) |
Time 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 0 1 (Tnn) LRCK ---________________________________________________------ (DSP.Pin43) MX1 _-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-- (DSP.Pin3) MX2 __-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__-__- (DSP.Pin4) MX3 __'__'__'__'__'__'__'__'__'__'__'__'__'__'__'__'__'__'__' (DSP.Pin5) /WE --C--C--C--C--C--C--C--C--C--C--C--C--C--C--CEECEEC--C--C (SRAM.Pin27) /OE DDCDDCDDCDDCDDCDDCDDCDDCEECEECddCDDCddCddCddC--C--CDDCDDC (SRAM.Pin22) /CE0 DDCDDCDDCDDCDDCDDCDDCDDC--C--C--CDDCddCddC--C--C--CDDCDDC (SRAM.Pin20a) /CE1 --C--C--C--C--C--C--C--CEECEEC--C--C--C--C--CEECEEC--C--C (SRAM.Pin20b) |
"-" High "_" Low "'" Very short High (near falling edges of MX2) "C" CPU access ;-(occurs when MX2=High) "EE" Echo access ;\ "DD" DSP access (DIR/BRR) ; (occurs when MX2=Low) "dd" DSP access (dummy) ;/ |
| SNES Maths Multiply/Divide |
1st Write: Lower 8bit of signed 16bit Multiplicand ;\1st/2nd write mechanism 2nd Write: Upper 8bit of signed 16bit Multiplicand ;/uses "M7_old" (Mode7) |
Any Write: Signed 8bit Multiplier ;-also affects "M7_old" |
| SNES Controllers |
| SNES Controllers I/O Ports - Automatic Reading |
Register Serial Default Bit Transfer Purpose Number______Order______(Joypads)_____ 15 1st Button B (1=Low=Pressed) 14 2nd Button Y 13 3rd Select Button 12 4th Start Button 11 5th DPAD Up 10 6th DPAD Down 9 7th DPAD Left 8 8th DPAD Right 7 9th Button A 6 10th Button X 5 11th Button L 4 12th Button R 3 13th 0 (High) 2 14th 0 (High) 1 15th 0 (High) 0 16th 0 (High) |
AUTO JOYPAD READ ---------------- When enabled, the SNES will read 16 bits from each of the 4 controller port data lines into registers $4218-f. This begins between H=32.5 and H=95.5 of the first V-Blank scanline, and ends 4224 master cycles later. Register $4212 bit 0 is set during this time. Specifically, it begins at H=74.5 on the first frame, and thereafter some multiple of 256 cycles after the start of the previous read that falls within the observed range. |
Reading $4218-f during this time will read back incorrect values. The only reliable value is that no buttons pressed will return 0 (however, if buttons are pressed 0 could still be returned incorrectly). Presumably reading $4016/7 or writing $4016 during this time will also screw things up. |
| SNES Controllers I/O Ports - Manual Reading |
7-3 Not used 2 OUT2, Output on CPU Pin 39 (seems to be not connected) (1=High) 1 OUT1, Output on CPU Pin 38 (seems to be not connected) (1=High) 0 OUT0, Output on CPU Pin 37 (Joypad Strobe) (both gameports, pin 3) |
7-2 Not used 1 Input on CPU Pin 33, connected to gameport 1, pin 5 (JOY3) (1=Low) 0 Input on CPU Pin 32, connected to gameport 1, pin 4 (JOY1) (1=Low) |
7-5 Not used 4 Input on CPU Pin 31, connected to GND (always 1=LOW) (1=Low) 3 Input on CPU Pin 30, connected to GND (always 1=LOW) (1=Low) 2 Input on CPU Pin 29, connected to GND (always 1=LOW) (1=Low) 1 Input on CPU Pin 28, connected to gameport 2, pin 5 (JOY4) (1=Low) 0 Input on CPU Pin 27, connected to gameport 2, pin 4 (JOY2) (1=Low) |
7-0 I/O PORT (0=Output Low, 1=HighZ/Input) 7 Joypad 2 Pin 6 / PPU Lightgun input (should be usually always 1=Input) 6 Joypad 1 Pin 6 5-0 Not connected (except, used by SFC-Box; see Hotel Boxes) |
7-0 I/O PORT (0=Low, 1=High) |
| SNES Controllers Hardware ID Codes |
13th ... 24th Hex Type 0000.00000000 0.00 No controller connected 0000.11111111 0.FF Normal Joypad (probably also 3rd-party joypads/joysticks) 0001 1 Mouse 0010 2 ? Unknown (if any) 0011 3 SFC Modem (used by JRA PAT) 0100 4 NTT Data Controller Pad (used by JRA PAT) .... 5-C Unknown (if any) 1101 D Voice-Kun (IR-transmitter/receiver, for CD Players) 1110.xxxxxxxx E.xx Third-Party Devices (see below) 1110.000000xx E.0x Epoch Barcode Battler II (detection requires DELAYS?!) 1110.01010101 E.55 Konami Justifier 1110.01110111 E.77 Sunsoft Pachinko Controller 1110.11111110 E.FE ASCII Turbo File Twin in STF mode 1110.11111111 E.FF ASCII Turbo File Twin in TFII mode (or Turbo File Adapter) 1111 F Nintendo Super Scope N/A N/A M.A.C.S. (no ID, returns all bits = trigger button) |
Lasabirdie ;\ Twin Tap ; these should have custom IDs? Miracle Piano ; X-Band Keyboard ;/ Exertainment ;-connects to expansion port (thus no controller id) BatterUP ;\ TeeV Golf ; these might return StuntMaster ; normal "joypad" ID? Nordic Quest ; Hori SGB Commander (in normal mode / in SGB mode) ; Nintendo Joysticks ;/ |
| SNES Controllers Detecting Controller Support of ROM-Images |
Type Method Joypad <none/default> Mouse String "START OF MOUSE BIOS", or opcodes (see below) Multiplayer 5 String "START OF MULTI5 BIOS" Super Scope String "START OF SCOPE BIOS", or Title=<see list> Lasabirdie String "GOLF_READY!" X-Band Keyboard String "ZSAW@",x,x,"CXDE$#" (keyboard translation table) Turbo File (STF) String "FAT0SHVC" Turbo File (TFII) Opcodes "MOV Y,000Fh/MOV A,[004017h]/DEC Y/JNZ $-5" Exertainment Opcodes "MOV [21C1h],A/MOV A,0Bh/MOV [21C4h],A/MOV X,20F3h" Barcode Battler Opcodes "INC X/CMP X,(00)0Ah/JNC $-6(-1)/RET/36xNOP/RET" Voice-Kun Opcodes "MOV [004201h],A/CLR P,20h/MOV A,D/INC A" Justifier Title="LETHAL ENFORCERS " M.A.C.S. Title="MAC:Basic Rifle " Twin Tap Title="QUIZ OH SUPER " Miracle Piano Title="MIRACLE " NTT Data Pad Title="NTT JRA PAT " SFC Modem Title="NTT JRA PAT " Pachinko Title=CB,AF,BB,C2,CA,DF,C1,DD,CB,AF,BB,C2,CA,DF,C1,DD,xx(6) BatterUP - ;\ TeeV Golf - ; these are probably simulating standard joypads StuntMaster - ; (and thus need no detection) Nordic Quest - ;/ |
"START OF xxx BIOS" [bios program code...] "NINTENDO SHVC xxx BIOS VER x.xx" "END OF xxx BIOS" |
"START OF MULTI5 BIOS" |
"START OF MULTI5 CONNECT CHECK" |
"START OF MOUSE BIOS" |
MOV Y,0Ah/LOP:/MOV A,[(00)4016h+X]/DEC Y/JNZ LOP/MOV A,[(00)4016h+X] |
"START OF SCOPE BIOS" |
"BATTLE CLASH " "METAL COMBAT " "T2 ARCADE " "BAZOOKA BLITZKRIEG " "OPERATION THUNDERBOLT" "TINSTAR " "Hunt for Red October " "SPACE BAZOOKA " "X ZONE " "LAMBORGHINI AMERICAN " "SUPER SCOPE 6 " "YOSHI'S SAFARI " "Lemmings 2,The Tribes" |
| SNES Controllers Joypad |
1st Button B (0=High=Released, 1=Low=Pressed) 2nd Button Y (0=High=Released, 1=Low=Pressed) 3rd Button Select (0=High=Released, 1=Low=Pressed) 4th Button Start (0=High=Released, 1=Low=Pressed) 5th Direction Up (0=High=Released, 1=Low=Pressed) 6th Direction Down (0=High=Released, 1=Low=Pressed) 7th Direction Left (0=High=Released, 1=Low=Pressed) 8th Direction Right (0=High=Released, 1=Low=Pressed) 9th Button A (0=High=Released, 1=Low=Pressed) 10th Button X (0=High=Released, 1=Low=Pressed) 11th Button L (0=High=Released, 1=Low=Pressed) 12th Button R (0=High=Released, 1=Low=Pressed) 13th ID Bit3 (always 0=High) 14th ID Bit2 (always 0=High, except 1=Low for NTT Data Pad) 15th ID Bit1 (always 0=High) 16th ID Bit0 (always 0=High) 17th and up Padding (always 1=Low) (or 0=High when no pad connected) |
__--L--_________________--R--__ Button Colors:
/ _ \ PAL and Japan North America
| _| |_ (X) | X = Blue X = Gray
| |_ _| SLCT STRT (Y) (A) | Y = Green Y = Gray
| |_| (B) | A = Red A = Purple
\_________.-----------._________/ B = Yellow B = Purple
|
Advanced Control Pad (Mad Catz) (joypad with autofire or so) Angler (?) Functionally identical to the ASCII Pad (optional "stick" in dpad) asciiGrip (ASCII) (normal joypad for single-handed use) asciiPad (ASCIIWARE) (joypad with autofire and slowmotion) Capcom Pad Soldier (Capcom) (standard pad in bent/squeezed/melted design) Competition Pro (Competition Pro) (joypad with autofire and slowmotion) Competition Pro (Competition Pro) (slightly redesigned standard joypad) Conqueror 2 (QuickShot?) (joystick with autofire, programmable buttons) Cyberpad (Quickshot?) (6-shaped pad, programmable, autofile, slow motion) Dual Turbo (Akklaim) (set of 2 wireless joypads with autofire or so) Energiser (?) (very odd shaped pad, programmable, auto fire, slow motion) Fighter Stick SN (?) (desktop joystick, with autofire or so) Gamemaster (Triton) (edgy-shaped pad, one programmable button) High Frequency Control Pad (High Frequency) (normal pad, wrong button colors) Invader 2 (QuickShot?) (joypad with autofire) JS-306 Power Pad Tilt (Champ) (joypad with autofire, slowmotion, tilt-mode) Multisystem 6 (Competition Pro) (pad supports Genesis and SNES) Nigal Mouncefill Fly Wheel (Logic 3) (wheel-shaped, tilt-sensor instead dpad) NTT Data Pad (for JRA PAT) (joypad with numeric keypad) (special ID) Pro Control 6 (Naki) (joypad, programmable & whatever extra features) Pro-Player (?) (joystick) Score Master (Nintendo) (desktop joystick with autofire or so) SF-3 (Honey Bee) (very flat normal pad with autofire) SGB Controller (?) (joypad ...) SN Propad SN Propad 2 SN Propad 6 SN-6 (Gamester) (standard joypad clone) Specialized Fighter Pad (ASCIIWARE) (autofire, L/R as "normal" buttons) Speedpad (?) (joypad, one auto-switch, L/R buttons as "normal" buttons) Super Control Pad (?) (standard joypad clone, plus 3-position switch?) Super Joy Card (Hudson) (standard joypad with auto-fire or so) Supercon (QuickShot) (standard joypad, odd shape, odd start/select buttons) Superpad (InterAct) (standard joypad clone) Superpad (noname) (standard joypad) TopFighter (?) (desktop joystick, programmable, LCD panel, auto-fire, slowmo) Turbo Touch 360 (Triax) (joypad with autofire) V356 (Recoton) (normal joypad, with whatever 3-position switch) noname joypads (normal joypad clones without nintendo text nor snes logo) joypad (Konami) (wireless joypad, no extra functions) (dish-shaped receiver) joypads (Game Partner) (set of 2 wireless joypads with autofire or so) AK7017828 or so??? (Game Partner) (joypad, slow motion, auto fire) Noname pad (Tomee) (standard joypad clone) SNES+MD? (Nakitek) (joypad with whatever special features) |
| SNES Controllers Mouse (Two-button Mouse) |
1st..8th Unused (always 0=High) 9th Right Button (0=High=Released, 1=Low=Pressed) 10th Left Button (0=High=Released, 1=Low=Pressed) 11th Sensitivity Bit1 (0=High=Zero) ;\0=slow, 1=normal, 2=fast 12th Sensitivity Bit0 (0=High=Zero) ;/ 13th ID Bit3 (always 0=High) 14th ID Bit2 (always 0=High) 15th ID Bit1 (always 0=High) 16th ID Bit0 (always 1=Low) 17th Vertical Direction (0=High=Down, 1=Low=Up) 18th Vertical Offset Bit6 (0=High=Zero) ;\ 19th Vertical Offset Bit5 (0=High=Zero) ; 20th Vertical Offset Bit4 (0=High=Zero) ; this is a 7bit 21th Vertical Offset Bit3 (0=High=Zero) ; UNSIGNED value 22th Vertical Offset Bit2 (0=High=Zero) ; (00h=No motion) 23th Vertical Offset Bit1 (0=High=Zero) ; 24th Vertical Offset Bit0 (0=High=Zero) ;/ 25th Horizontal Direction (0=High=Right, 1=Low=Left) 26th Horizontal Offset Bit6 (0=High=Zero) ;\ 27th Horizontal Offset Bit5 (0=High=Zero) ; 28th Horizontal Offset Bit4 (0=High=Zero) ; this is a 7bit 29th Horizontal Offset Bit3 (0=High=Zero) ; UNSIGNED value 30th Horizontal Offset Bit2 (0=High=Zero) ; (00h=No motion) 31th Horizontal Offset Bit1 (0=High=Zero) ; 32th Horizontal Offset Bit0 (0=High=Zero) ;/ 33th and up Padding (always 1=Low) |
0 - slow - linear fixed level (1:1) 1 - normal - exponential -?- levels (1:1 to ?:1) (?:1=smaller than 6:1) 2 - fast - exponential six levels (1:1 to 6:1) |
[4016h]=01h ;set STB=1 dummy=[4016h+n] ;issue CLK pulse while STB=1 <-- increments the value, [4016h]=00h ;set STB=0 or wraps from 2 to 0 ;Thereafter, one should read the Sensitivity bits, typically like so: [4016h]=01h ;set STB=1 ;\another STB on/off, for invoking reading [4016h]=00h ;set STB=0 ;/(not sure if this part is required) for i=11 to 0, dummy=[4016h+n], next i ;skip first 12 bits for i=1 to 0, sensitivity.bit(i)=[4016h+n], next i ;read 2 sensitivity bits ;Repeat the above procedure until the desired sensitivity value is reached. |
| SNES Controllers Mouse Games |
Acme Animation Factory Alice Paint Adventure Arkanoid: Doh It Again Bishoujo Senshi Sailor Moon S Kondowa Puzzle de Oshioikiyo! (Japan only) Brandish 2: Expert (Japan only) BreakThru! Civilization Cameltry (called On The Ball in North America and the UK) Cannon Fodder Dai3ji Super Robot Taisen (Japan only) Dai4ji Super Robot Taisen (Japan only) Doom Dokyusei 2 (Japan only) Dragon Knight 4 (Japan only) Eye of the Beholder Farland Story 2 (Japan only) Fun and Games Galaxy Robo (Japan only) Hiouden: Mamono-tachi tono Chikai (Japan only) Jurassic Park (mouse MUST be in slot 2) King Arthur's World Koutetsu No Kishi (Japan only) Koutetsu No Kishi 2 (Japan only) Koutetsu No Kishi 3 (Japan only) Lamborghini American Challenge Lemmings 2: The Tribes Lord Monarch (Japan only) The Lord of the Rings Mario and Wario (Japan only) Mario Paint (1992) Mario's Super Picross (Japan only) Mario's Early Years: Pre-School Mega Lo Mania Might and Magic III Motoko-chan no Wonder Kitchen (Japan only) Nobunaga's Ambition On the ball Operation Thunderbolt Pieces Populous II Power Monger Revolution X San Goku Shi Seishi: Tenbu Spirits (Japan only) Shien's Revenge SimAnt Snoopy Concert Sound Fantasy (unreleased) Spellcraft (unreleased) Super Caesars Palace Super Game Boy Super Castles (Japan only) Super Noah's Ark 3D Super Pachi-slot Mahjong Super Robot Wars 3 Super Solitaire Terminator 2: The Arcade Game Tin Star Tokimeki Memorial (Japan only) Troddlers Utopia Vegas Stakes Warrior of Rome III (unreleased) Wolfenstein 3D Wonder Project J Zan 2: Spirits (Japan only) Zan 3: Spirits (Japan only) |
Kaite Tsukutte Asoberu Dezaemon (Japan only)
Pro Action Replay Mk3
Kakinoki Shogi (1995) ASCII Corporation (JP)
Spell Craft: Aspects of Valor (1993) ... same as "Spellcraft (unreleased)"?
(in Spellcraft: mouse works in-game only, not in title screen)
|
| SNES Controllers Multiplayer 5 (MP5) (Five Player Adaptor) |
[4016h].Bit0=1 ;-strobe on (to player 1-5) [4016h].Bit0=0 ;-strobe off (to player 1-5) read any number of bits from [4016h].Bit0 ;-read Player 1 data read any number of bits from [4017h].Bit0/Bit1 ;-read Player 2/3 data [4201h].Bit7=0 ;-select Player 4/5 read any number of bits from [4017h].Bit0/Bit1 ;-read Player 4/5 data [4201h].Bit7=1 ;(prepare here for next frame) ;-select Player 2/3 do no further access until next frame (allow [4201h].Bit7=1 to stabilize) |
[4016h].Bit0=1 ;-strobe on (force MP5 Bit1=1) read 8 bits from [4016h+n].Bit1 to byte A ;-read byte A [4016h].Bit0=0 ;-strobe off (normal data mode) read 8 bits from [4016h+n].Bit1 to byte B ;-read byte B if A=FFh and B<>FFh then MP5=present ;-verify result |
2or3? Way Multiplay Adaptor (Gamester LMP) (with only 2 (or 3?) sockets) 5 Player Game Plug (Laing) (same polygonal case as SN-5) HORI Multitap HSM-07 (HORI) (4 "top-loading" connectors) HORI Super Tetris 3 (HORI) (red case, otherwise same as HORI HSM-07) Multi Adaptor Auto (Partyroom21) Multi Player Adaptor (unknown manufacturer) (roughly PS1 shaped) Multi-Player Adaptor (Super Power) (same case as Multiplay Adaptor from LMP) Multiplay Adaptor (Gamester LMP) (square gray case, "crown" shaped LMP logo) SN-5 Multitap (Phase 9) (same polygonal case as Super 5 QJ/Super 5-Play) SNES MultiPlayer 5 Schematic Diagram (1st May 1992) (Nintendo) (book2.pdf) Super 5 QJ (same polygonal case as SN-5) Super 5 Multi-Player Adapter by Innovation (same polygonal case as SN-5) Super 5-Play (Performance) (same polygonal case as SN-5) Super Link by BPS (Bullet Proof Software) (same case as HORI HSM-07) Super Multitap (noname) (polyshaped, but different than the SN-5 case) Super Multitap (Hudson) (long slim device with 4 connectors on front panel) Super Multitap 2 (Hudson) (square device with yellow Bomberman face) Super Multitap Honest (same polygonal case as SN-5) Tribal-Tap 5 (Nakitek) (same case as Multiplay Adaptor from LMP) Tribal Tap, 6 Player Adaptor (Naki) Tribal Tap, 6 Player Adaptor (Fire) (same as Naki, but without Naki logo) |
_________ _________
|74HCT4053| | 74HC241 |
| | /MODE5P--->|/OE |
??? --->|VEE /EN|<------STB--------------->|IN OUT|---> STB'BCD
| _ _ _ | STB'A--->|IN OUT|---> DETECT
IO'SEL --->|SELX X1|------>CLK1-------------->|IN OUT|---> CLK'B
CLK --->|X _ _ _X0|------>CLK0-------------->|IN _ _OUT|---> CLK'CD
IO'SEL --->|SELY Y1|<-------------------------|OUT IN|<--- IN0'A
IN0 <---|Y _ _ _Y0|<-------------------------|OUT IN|<--- IN0'C
IO'SEL --->|SELZ Z1|<-------------------------|OUT IN|<--- IN01
IN1 <---|Z Z0|<-------------------------|OUT IN|<--- IN0'D
| | ??? --->|OE |
|_________| |_________|
_________ _________
| 74HC126 | |4-Channel|
CLK --->|IN OUT|---> CLK1 VCC --->|2P Switch|---> /MODE5P
STB'A --->|OE _ _ | GND --->|5P _ _ _ |
CLK1 --->|IN OUT|---> CLK'A GND --->|2P |---> VCC'BCD
??? --->|OE _ _ | VCC --->|5P _ _ _ |
STB --->|IN OUT|---> STB'A IN1'A --->|2P |---> IN01
??? --->|OE _ _ | IN0'B --->|5P _ _ _ |
GND --->|IN OUT|---> IN1 IO'A <---|2P |<--- IO
DETECT --->|OE | IO'SEL <---|5P |
|_________| |_________|
__________________________________________
| (Female)(............Male.............)| GND ------[10K]----- DETECT
|Pin SNES PORT2 PORT3 PORT4 PORT5 | VCC ------[10K]----- IO'SEL
|1 VCC VCC VCC'BCD VCC'BCD VCC'BCD| VCC ------[10K]----- CLK1
|2 CLK CLK'A CLK'B CLK'CD CLK'CD | VCC ------[10K]----- CLK0
|3 STB STB'A STB'BCD STB'BCD STB'BCD| VCC ------[10K]----- IN0'A
|4 IN0 IN0'A IN0'B IN0'C IN0'D | VCC ------[10K]----- IN01
|5 IN1 IN1'A - - - | VCC'BCD ------[10K]----- IN0'C
|6 IO IO'A - - - | VCC'BCD ------[10K]----- IN0'D
|7 GND GND GND GND GND | VCC'BCD --<LED|--[220]-- VCC
|__________________________________________| VCC'BCD --------||------ GND
|
74HCT4053 (triple 2-to-1 line analog multiplexer/demultiplexer) 74HC126 (quad 3-state noninverting buffer with active high enables) 74HC241 (dual 4-bit 3-state noninverting buffer/line driver) 4-channel 2-position switch (2P/5P-mode selection) LED (glows in 2P-mode) 1 female joypad connector, 4 male joypad connectors plus some resistors |
.-----. .-----.
VCC--[RP]-------CLK---> 1|IN0 '-' VCC|20 <---VCC
VCC--[RP]--------IO---> 2|IN1 16L8 OUT7|19 --->IN0 (out-only)
VCC--[RP]-----IN0'A---> 3|IN2 PAL I/O6|18 --->IN1
VCC--[RP]-----IN1'A---> 4|IN3 I/O5|17 --->STB'A
VCC--[RP]---/MODE6P---> 5|IN4 I/O4|16 --->IO'A
VCC--[RP]-----IN0'B---> 6|IN5 I/O3|15 --->CLK'B
VCC--[RP]---/MODE2P---> 7|IN6 I/O2|14 --->CLK'CDE
VCC--[RP]-----IN0'D---> 8|IN7 I/O1|13 --->STB'BCDE
VCC--[RP]-----IN0'C---> 9|IN8 OUT0|12 <---IN0'E (out-only???)
GND -->10|GND IN9|11 <---/STB----[R]---VCC
'-------------'
.----------. .-------. .-------.
|3-position| | S9013 | | S9013 | .-[R]-STB
|switch 2P|--/MODE2P | E|-->VCC'BCDE | E|---GND |
GND--| 5P|--NC | NPN B|<--/MODE2P | NPN B|<-------+
| 6P|--/MODE6P | C|---SNES.VCC | C|-->/STB |
'----------' '-------' '-------' '-[R]-GND
.------------------------------------------------------.
| (Female)(.............Male........................)| ???--|LED>--???
|Pin SNES PORT2 PORT3 PORT4 PORT5 PORT6 |
|1 VCC VCC VCC'BCDE VCC'BCDE VCC'BCDE VCC'BCDE| further resistors
|2 CLK CLK CLK'B CLK'CDE CLK'CDE CLK'CDE | ???
|3 STB STB'A STB'BCDE STB'BCDE STB'BCDE STB'BCDE|
|4 IN0 IN0'A IN0'B IN0'C IN0'D IN0'E | (not installed)
|5 IN1 (IN1'A) - - - - | diodes ???
|6 IO (IO'A) - - - - |
|7 GND GND GND GND GND GND |
'------------------------------------------------------'
Note: The PCB has wires to all 7 pins of PORT2,
but the installed connector has only 5 pins, so,
in practice, IN1'A and IO'A are not connected.
|
| SNES Controllers Multiplayer 5 - Unsupported Hardware |
Lightguns Turbo File SFC Modem Voice-Kun X-Band Keyboard A second MP5 plugged into the first MP5 |
Mouse (requires 50mA) Devices with unknown controller IDs (which might exceed 17mA) Maybe also various unlicensed wireless/autofire joypads/joysticks |
Cartridges with GSU-n (programmable RISC CPU) (aka Super FX/Mario Chip) Maybe also things like X-Band modem and Cheat Devices |
Two MP5's (connected to port 1 and 2) (maybe also power consumption related) |
MP5 in port 1 (instead of port 2) (would mess-up the port 2-5 numbering) |
| SNES Controllers Multiplayer 5 - Supported Games |
Game Languages Players
Bakukyuu Renpatsu!! Super B-Daman ("battle mode") (J) 4
Bakutou Dochers: Bumps-jima wa Oosawagi ("battle mode") (J) 4
Barkley Shut Up and Jam! / Barkey no Power Dunk (E,J) 4
Battle Cross (supports only 5 joypads; player 6 always inactive) (J) 5
Battle Jockey (J) 4
Bill Walsh College Football (E) 4
Chibi Maruko-chan: Mezase! Minami no Island!! (J) 4
College Slam (E) 4
Crystal Beans From Dungeon Explorer (J) 3
Dino Dini's Soccer! (E,F,G) ??
Dragon: The Bruce Lee Story (E) 3
Dream Basketball: Dunk & Hoop (only 5, not 6) (J) 5
Dynamic Stadium (J) 4
Elite Soccer / World Cup Striker (E,F,G,J) 4
ESPN National Hockey Night (E) 5
FIFA International Soccer (E,J) 4
FIFA Soccer 96 (E,F,G,I,S,SW) 4
FIFA Soccer 97: Gold Edition / FIFA 97: Gold Edition (E,F,G,I,S,SW) 5
FIFA 98: Road to World Cup (E,F,G,I,S,SW) 5
Finalset (J) 4
Fire Striker / Holy Striker (E,J) 4
Fever Pitch Soccer / Head-On Soccer (E,F,G,I,S) 4
From TV Animation Slam Dunk: SD Heat Up!! (J) 5
Go! Go! Dodge League (J) 4
HammerLock Wrestling/Tenryuu Genichirou no Pro Wrestling Revol. (E,J) 4
Hanna Barbera's Turbo Toons (E) 5
Hat Trick Hero 2 (J) 4
Hebereke no Oishii Puzzle wa Irimasenka (J) 5
Human Grand Prix III: F1 Triple Battle (J) 3
Human Grand Prix IV: F1 Dream Battle (J) 3
Hungry Dinosaurs / Harapeko Bakka (E,J) ??
International Superstar Soccer Deluxe/Jikkyou World Soccer 2 (E,J) 4
J.League Excite Stage '94 / Capcom's Soccer Shootout (E,J) 4
J.League Excite Stage '95 (J) 4
J.League Excite Stage '96 (J) 4
J.League Soccer Prime Goal (J) ?
J.League Super Soccer '95 Jikkyo Stadium (J) 4
J.R.R. Tolkien's The Lord of the Rings: Volume 1 (E,G) 4
Jikkyou Power Pro Wrestling '96: Max Voltage (only 4, not 5) 5? (J) 4
Jimmy Connors Pro Tennis Tour (japanese version only?) (E,F,G,J) 4
JWP Joshi Pro Wrestling: Pure Wrestle Queens (J) 4
Kingyo Chuuihou! Tobidase! Game Gakuen (J) 3
Kunio-kun no Dodge Ball Da yo Zenin Shuugou! (J) 4
Looney Tunes B-Ball / Looney Tunes Basketball (E) 4
Madden NFL '94 / NFL Pro Football '94 (E,J) 4
Madden NFL 95 (E) 4
Madden NFL 96 (E) 5
Madden NFL 97 (E) 4
Madden NFL 98 (E) 5
Micro Machines (E) 4
Micro Machines 2: Turbo Tournament (E) 4
Mizuki Shigeru no Youkai Hyakkiyakou (J) 4
Multi Play Volleyball (J) 4
Natsume Championship Wrestling (E) 4
N-Warp Daisakusen (homebrew) (requires 2 multitaps) (E) 8
NBA Give 'n Go / NBA Jikkyou Basket: Winning Dunk (E,J) 4
NBA Hang Time (E) 4
NBA Jam (E,J) 4
NBA Jam: Tournament Edition (E,J) 4
NBA Live 95 (E,J) 5
NBA Live 96 (E) 5
NBA Live 97 (E) 5
NBA Live 98 (E) 5
NCAA Final Four Basketball (E) 4
NCAA Football (E) 4
NFL Quarterback Club / NFL Quarterback Club '95 (E,J) 5
NFL Quarterback Club 96 (E,J) 5
NHL '94 / NHL Pro Hockey '94 (E,J) 5
NHL '94 / NHL Pro Hockey '94 (E,J) 5
NHL '95 (E) ?
NHL '96 (E) ?
NHL '97 (E) ?
NHL '98 (E) 5
Olympic Summer Games (E) 5
Peace Keepers, The / Rushing Beat Shura (E,J) 4
Pieces / Jigsaw Party (E,J) 5
Rap Jam: Volume One (E,F,S) 4
Saturday Night Slam Masters / Muscle Bomber: Body Explosion (E,J) 4
Secret of Mana / Seiken Densetsu 2 (E,F,G,J) 3
Secret of Mana 2 / Seiken Densetsu 3 (with patch by Parlance) (E,J,patch) 3
Shijou Saikyou no Quiz Ou Ketteisen Super (uses 4 twin taps) (J) 8
Shin Nihon Pro Wrestling: Chou Senshi in Tokyo Dome (J) 4
Shin Nihon Pro Wrestling Kounin: '94 Battlefield in Tokyo Dome (J) 4
Shin Nihon Pro Wrestling Kounin: '95 Tokyo Dome Battle 7 (J) 4
Smash Tennis / Super Family Tennis (E,J) 4
Sporting News Power Baseball, The (E) 4
Sterling Sharpe: End 2 End (E) 4
Street Hockey '95 (E) 4
Street Racer (E,J) 4
Sugoi Hebereke (J) 4
Sugoro Quest++: Dicenics (J) 4
Super Bomberman (E,J) 4
Super Bomberman: Panic Bomber World (J) 4
Super Bomberman 2 (E,J) 4
Super Bomberman 3 (E,J) 5
Super Bomberman 4 (J) 5
Super Bomberman 5 (J) 5
Super Fire Pro Wrestling: Queen's Special (J) ?
Super Fire Pro Wrestling Special (J) ?
Super Fire Pro Wrestling X (J) ?
Super Formation Soccer 94: World Cup Edition (J) ?
Super Formation Soccer 95: della Serie A (J) ?
Super Formation Soccer 96: World Club Edition (J) ?
Super Formation Soccer II (J) ?
Super Ice Hockey / Super Hockey '94 (E,J) ?
Super Kyousouba: Kaze no Sylphid (J) ?
Super Power League (J) ?
Super Puyo Puyo Tsu: Remix (J) 4
Super Slam Dunk / Magic Johnson no Super Slam Dunk! (E,J) ?
Super Tekkyuu Fight! (J) ?
Super Tetris 3 (J) 4
Syndicate (E,F,G,J) 4
Tiny Toon Adventures: Wacky Sports/Dotabata Daiundoukai (E,J) 4
Top Gear 3000 / Planet's Champ TG 3000, The (E,J) 4
Vegas Stakes / Las Vegas Dream in Golden Paradise (E,J) 4
Virtual Soccer / J.League Super Soccer (E,J) 5
Vs. Collection (J) ?
Wedding Peach (J) 3
WWF Raw (E) 4
Yuujin no Furi Furi Girls (J) 4
Zero 4 Champ RR (J) ?
Zero 4 Champ RR-Z (J) ?
|
Momotaro Dentetsu Happy (1996) Hudson Soft (JP) Bomberman B-Daman: 4 players (via Battle) Kiteretsu Daihyakka - Choujikuu Sugoroku: 5 players J.League '96 Dream Stadium: 4 players |
Elite Soccer/World Cup Striker: 5 players (Using the "Multiple Players" option while setting up for a game, you can assign different people to different controllers.) FIFA International Soccer: 5 players FIFA Soccer 96: This actually supports 5 players, not four. Pause the game and access the controllers with a multi-tap connected... up to five can join in. Madden NFL '94: 5 players Madden NFL '95: 5 players Madden NFL '97: 5 players |
Dino Dini's Soccer J.League Soccer Prime Goal NHL '95 through '97 |
| SNES Controllers SuperScope (Lightgun) |
Front Sight Sight Tube Receiver (connect to
/ _______ / ___ / controller slot 2)
=-- |__.-.__|( _______|___|_______
\ \_______________/ __/ | _______________ |
/___.___________.___/ | | | |
: : | | | |
: Slot 1 : Slot 2 | | TV SET | |
: : | | | |
: : | | | |
V V | |_______________| |
|___________________|
|__|_|_|_|_|_|_|__|
Transmitter
/ Release Pause
/ Slot 1 / Slot 2 Fire / Power Switch (Off/On/Turbo)
_____ / / / / / /
\\____\____._______,___._______,,__,,_.._________
|| ^ \\\\\///// \
|| _____/
||___ ________________________ /
\ \\ <-Cursor _/ /
\ \ __/ /
\ \ \ /______
\ \ \ _________\
\_____\ /___/ <-- Shoulder Rest
|
1st Fire Button (0=High=Released, 1=Low=Pressed/Newly Pressed) 2nd Cursor Button (0=High=Released, 1=Low=Pressed) 3rd Turbo Switch (0=Normal/PowerOn, 1=Turbo/PowerOn) 4th Pause Button (0=High=Released, 1=Low=Newly Pressed) 5th..6th Extra ID Bits (always 0=High) 7th Offscreen (0=High=Okay, 1=Low=CRT-Transmission Error) 8th Noise (0=High=Okay, 1=Low=IR-Transmission Error) 9th..12th Extra ID Bits (always 1=Low) 13th..16th ID Bits (always 1=Low=One) (0Fh) 17th and up Unused (always 1=Low) |
Battle Clash (US) (EU) / Space Bazooka (JP) (1992) Nintendo Bazooka Blitzkrieg (US) (1992) Bandai Hunt for Red October (used for bonus games) (US) (EU) (JP) Lamborghini American Challenge (used in special game mode) (US) (EU) (1993) Lemmings 2 (US) (EU) (JP) (1994) Psygnosis (at game start: aim at crosshair) Metal Combat: Falcon's Revenge (includes OBC1 chip) (US) (1993) Operation Thunderbolt (US) (1994) Taito Super Scope 6 (bundled with the hardware) (Blastris & LazerBlazer) (1992) Terminator 2 - T2: The Arcade Game (US) (EU) (JP) (1993) Carolco/LJN Tin Star (US) (1994) Nintendo X-Zone (US) (EU) (1992) Kemco Yoshi's Safari (US) (EU) (JP) (1993) Nintendo |
| SNES Controllers Konami Justifier (Lightgun) |
-_______________________--
| : :....: \_/\
|________________:__:....: /
\________________\.:....; O \_ <---- O = Start Button
|_ _____ |
\| ) |/\ \ <---- ) = Trigger
\___/ | |
| |
|_____|
RJ12-socket ____/ \________ Cable (to SNES controller port)
(for second gun)
|
Blue Gun --> connects to SNES (and has 6pin RJ12 socket for second gun) Pink Gun --> connects to 6pin RJ12 socket of first gun |
1st..12th Unused (always 0=High) 13th..16th ID Bit3-0 (MSB first, 1=Low=One, always 0Eh = 1110b) 17th..24th Extra ID Bit7-0 (MSB first, 1=Low=One, always 55h = 01010101b) 25th Gun 1 Trigger (1=Low=Pressed?) 26th Gun 2 Trigger (1=Low=Pressed?) 27th Gun 1 Start Button (1=Low=Pressed?) 28th Gun 2 Start Button (1=Low=Pressed?) 29th Previous Frame was H/V-latching Gun1/2 (1=Low=Gun1, 0=High=Gun2) 30th..32th Unused (always 0=High) 33th and up Unused (always 1=Low) |
Lethal Enforcers (bundled with the hardware) (1993) Konami (US) (EU) (JP) |
| SNES Controllers M.A.C.S. (Lightgun) |
Lightpen
_____ ____....-----\ _
|_____| #\\ ________________ |______________\//______________
___"__"__# -------"""""" |--| |
|___#__#__#_ | | Trigger __ |
" " # |_|------..._________________|--|_ ___ | '--.__ |
| | \ \ \ '--.___|
|_ _ _ _|_/_/ \
| | \ \
|_____| \ \
|___/
|
4017h.Bit0 Trigger Button (1=LOW=Pressed) |
MACS Basic Rifle Marksmanship v1.1e (v1.2a) (1993) Sculptured Software (US) MACS Basic Rifle Marksmanship v1994.0 (1994?) MACS Moving Target Simulator (?) (1993) Sculptured Software (US) |
| SNES Controllers Twin Tap |
Shijou Saikyou no Quiz Ou Ketteisen Super (1992) TBS/Partyroom21/S'pal (JP) |
1st Button 2 (or 4/6/8) (1=Low=Pressed) (would be "B" on joypads) 2nd Button 1 (or 3/5/7) (1=Low=Pressed) (would be "Y" on joypads) 3rd..12th Unknown 13th..16th Unknown (would be ID Bit3..0 on other SNES controllers) 17th..24th Unknown (would be Extended ID Bit7..0 on other SNES controllers) 25th and up Unknown |
| SNES Controllers Miracle Piano |
__ _________________________________________________________ __
| |:::::::::::: MIRACLE .. .. .. .. .. ::::::::::::| |
| |:::::::::::: .. .. .. .. .. ::::::::::::| |
| |:::::::::::: # # # # : .. .. .. .. ::::::::::::| |
| |:::::::::::: # # # # : .. .. .. ::::::::::::| |
| |_________________________________________________________| |
| | U U | U U U | U U | U U U | U U | U U U | U U | U U U | | |
| | U U | U U U | U U | U U U | U U | U U U | U U | U U U | | |Keys
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
|__|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|_|__|
C D E F G A H C D E F G A H C D E F G A H C D E F G A H C Notes
<-------------><------------><------------><------------>X Octaves
36..47 48..59 | 60..71 72..83 84 Key Numbers
|
Middle C
49 Piano Keys (29 White Keys, 20 Black Keys) (4 octaves, plus next higher C)
1 Foot Pedal (Sustain)
8 Push Buttons (Mode/Volume Selection)
|
| SNES Controllers Miracle Piano Controller Port |
1st Data Present Flag (0=High=None, 1=Low=Yes) 2nd..9th Data Bit7..0 (MSB First, inverted 1=LOW=Zero) 10th..12th Unknown 13th..16th Unknown (would be ID Bit3..0 on other SNES controllers) 17th and up Unknown |
1st..8th Data Bit7..0 (MSB First, 0=LOW=Zero) |
[004016h]=01h ;strobe on
delay (strobe=1 for 102 master clks) ;short delay = READ mode
[004016h]=00h ;strobe off
data_present_flag = [004016h].bit0 ;data present flag (1=LOW=Yes)
for i=7 to 0
data.bit(i)=NOT [004016h].bit0 ;data bits (MSB first, 1=LOW=Zero)
next i
|
[004016h]=01h ;strobe on (start bit)
delay (strobe=1 for 528 master clks) ;long delay = WRITE mode
for i=7 to 0
[004016h].bit0=data.bit(i) ;data bits (MSB first, 1=HIGH=One)
dummy=[004016h] ;issue short CLK pulse
next i
[004016h]=00h ;strobe off (stop/idle)
delay (strobe=0 for min 160 master clks) ;medium delay
|
| SNES Controllers Miracle Piano MIDI Commands |
Expl. Dir Hex Note off (Undocumented) W 8#h,<key>,00h ;same as Note ON with velo=00h Note on/off command R/W 9#h,<key>,<velo> Main volume level W B0h,07h,<vol> Sustain on/off command R/W B#h,40h,<flag> Local control on/off W B0h,7Ah,<flag> All notes off W B#h,7Bh,00h Patch change command (*) R ?? C#h,<instr> ;TO keyboard = Undocumented Miracle button action R F0h,00h,00h,42h,01h,01h,<bb>,F7h Unknown (Undocumented) W F0h,00h,00h,42h,01h,02h,<??>,F7h ;??? Keyboard buffer overflow R F0h,00h,00h,42h,01h,03h,01h,F7h Midi buffer overflow R F0h,00h,00h,42h,01h,03h,02h,F7h Firmware version request W F0h,00h,00h,42h,01h,04h,F7h Miracle firmware version R F0h,00h,00h,42h,01h,05h,<maj>,<min>,F7h Patch split command W F0h,00h,00h,42h,01h,06h,0#h,<lp>,<up>,F7h Unknown (Undocumented) W F0h,00h,00h,42h,01h,07h,F7h ;??? All LEDs on command W F0h,00h,00h,42h,01h,08h,F7h LEDs to normal command W F0h,00h,00h,42h,01h,09h,F7h Reset (Undocumented) W FFh |
N#h Hex-code with #=channel (#=0 from keyb, #=0..7 to keyb) <key> Key (FROM Miracle: 24h..54h) (TO Miracle: 18h..54h/55h?) <velo> Velocity (01h..7Fh, or 00h=Off) <vol> Volume (00h=Lowest, 7Fh=Full) <flag> Flag (00h=Off, 7Fh=On) <instr> Instrument (00h..7Fh) for all notes <lp> Instrument (00h..7Fh) for notes 24?/36-59, lower patch number <up> Instrument (00h..7Fh) for notes 60-83/84?, upper patch number <maj>.<min> Version (from version 1.0 to 99.99) <bb> button on/off (bit0-2:button number, bit3:1=on, bit4-7:zero) |
| SNES Controllers Miracle Piano Instruments |
000 Grand Piano 032 Marimba 064 Synth Bells 096 Tube Bells' 001 Detuned Piano 033 Glockenspiel' 065 Vox 1 097 Frogs/Ducks 002 FM Piano 034 Kalimba' 066 Vox 2 098 Banjo' 003 Dyno 035 Tube Bells 067 Vox 3 099 Shakuhachi' 004 Harpsichord 036 Steel Drums 068 Mod Synth 100 Piano' 005 Clavinet 037 Log Drums' 069 Pluck Synth 101 Vibraphone' 006 Organ 038 Strings 1 070 Hard Synth 102 FM Piano' 007 Pipe Organ 039 Pizzicato 071 Syntar 103 Clock Belis' 008 Steel Guitar 040 Strings 2 072 Effects 1 * 104 Harpsichord' 009 12-StringGuitar 041 Violin 1' 073 Effects 2 * 105 Clavinet' 010 Guitar 042 Trumpet' 074 Percussion 1 * 106 Organ' 011 Banjo 043 Trumpets 075 Percussion 2 * 107 Pipe Organ' 012 Mandolin 044 Horn' 076 Percussion 3 * 108 Metal Guitar' 013 Koto' 045 Horns 077 Sine Organ' 109 Stick' 014 Jazz Guitar' 046 Trombone' 078 Organ # 110 Guitar' 015 Clean Guitar' 047 Trombones 079 Pipe Organ # 111 Xylophone' 016 Chorus Guitar 048 CupMuteTrumpet' 080 Harpsichord # 112 Marimba' 017 Fuzz Guitar 049 Sfz Brass 1 081 Synth Pad 1 113 Syn Trombone' 018 Stop Guitar 050 Sfz Brass 2 082 Synth Pad 2 114 Syn Trumpet' 019 Harp' 051 Saw Synth 083 Synth Pad 3 115 Sfz Brass 1' 020 Detuned Harp 052 Tuba' 084 Synth Pad 4 116 Sfz Brass 2' 021 Upright Bass' 053 Harmonica 085 Synth Pad 5 117 Saw Synth' 022 Slap Bass' 054 Flute' 086 Synth Pad 6 118 Church Bells' 023 Electric Bass' 055 Pan Flute' 087 Synth Pad 7 119 Marcato' 024 Moog 056 Calliope 088 Synth Pad 8 120 Marcato 025 Techno Bass 057 Shakuhachi 089 Synth Pad 9 121 Violin 2' 026 Digital Waves 058 Clarinet' 090 Synth Pad 10 122 Strings 3 027 Fretless Bass' 059 Oboe' 091 Synth Pad 11 123 Synth Bells' 028 Stick Bass 060 Bassoon' 092 Synth Pad 12 124 Techno Bass' 029 Vibraphone 061 Sax' 093 Synth Pad 13 125 Mod Synth' 030 MotorVibraphone 062 Church Bells 094 Synth Pad 14 126 Pluck Synth' 031 Xylophone 063 Big Bells 095 Synth Pad 15 127 Hard Synth' |
' These programs are single voice, which lets The Miracle play up to 16 notes simultaneously. All other programs are dual voice, which lets it play up to 8 notes simultaneously. * 072..076 See below for a list of Effects/Percussion sounds. # 078..080 To be true to the nature of the sampled instrument, these patches do not respond to velocity. |
Note Effects 1 Effects 2 Percussion 1 Percussion 2 Percussion 3 30-35 Jet Yes (ding) - - Ratchet 36-4l Gunshot No (buzz) Kick Drum Rim Shot Snap 1 42-47 RoboDeath Applause Snare Exotic Snap 2 48-53 Whoosh Dogbark Toms Congas Dripdrum 1 54-59 Punch Door creak Cymbal Timbale Dripdrum 2 60-65 Slap Door slam Closed Hat Cowbell Wet clink 66-71 Duck Boom Open Hat Bongos Talk Drum 72-77 Ow! 1 Car skid Ride Whistle Agogo 78-83 Ow! 2 Goose Shaker Clave Explosion |
| SNES Controllers Miracle Pinouts and Component List |
1 PC/Amiga/Mac RS232 GND (also wired to RTS) 2 PC/Amiga/Mac RS232 RxD 3 PC/Amiga/Mac RS232 TxD 7 NES/SNES/Genesis GND 10 NES/SNES/Genesis Data 13 NES/SNES/Genesis Strobe 14 Sense SENSE0 (0=MIDI Output off, 1=MIDI Output on) 15 Sense SENSE1 (0=9600 Baud; for RS232, 1=31250 Baud; for MIDI) 19 NES/SNES/Genesis Clock all other pins = not connected |
U1 Snd 16pin TDA7053 (stereo amplifier for internal speakers) U2 Snd 8pin NE5532 (dual operational amplifier) U3 Snd 16pin LM13700 or LM13600 (unclear in schematic) (dual amplifier) U4 Snd 14pin LM324 (quad audio amplifier) U5 Main 3pin LM78L05 (converts +10V to VLED, supply for 16 LEDs) U6 Main 14pin 74LS164 serial-in, parallel-out (to 8 LEDs) U7 Main 14pin 74LS164 serial-in, parallel-out (to another 8 LEDs) U8 Main 5pin LM2931CT (converts +12V to +10V, and supply for Power LED) U9 Main 3pin LM78L05 (converts +10V to +5REF) U10 Snd 14pin TL084 (JFET quad operational amplifier) U11 Snd 40pin J004 (sound chip, D/A converter with ROM address generator) U12 Snd 32pin S631001-200 (128Kx8, Sound ROM for D/A conversion) U13 Main 3pin LM78L05 (converts +10V to VCC, supply for CPU and logic) U14 Main 40pin AS0012 (ASIC) Keyboard Interface Chip (with A/D for velocity) U15 Main 40pin 8032 (8051-compatible CPU) (with Y1=12MHz) U16 Snd 40pin AS0013 (ASIC) U17 Main 28pin 27C256 EPROM 32Kx8 (Firmware for CPU) U18 Main 28pin 6264 SRAM 8Kx8 (Work RAM for CPU) U19 Main 16pin LT1081 Driver for RS232 voltages U20 Main 8pin 6N138 opto-coupler for MIDI IN signal S1-8 Main 2pin Push Buttons S9 Main 3pin Power Switch (12V/AC) J1 Main 3pin 12V AC Input (1 Ampere) J2 Main 2pin Sustain Pedal Connector (polarity is don't care) J3 Snd 2pin RCA Jack Right J4 Snd 2pin RCA Jack Left J5 Snd 5pin Headphone jack with stereo switch (mutes internal speakers) J6 Main 25pin DB25 connector (RS232 and SNES/NES/Genesis controller port) J7 Main 5pin MIDI Out (DIN) J8 Main 5pin MIDI In (DIN) JP1 Main 16pin Keyboard socket right connector JP2 Main 16pin Keyboard socket left connector JP3 Snd 4pin Internal stereo speakers connector |
| SNES Controllers NTT Data Pad (joypad with numeric keypad) |
_______________
__--L--___/ \__--R--__
/ _ (<)(>) (=) \
| _| |_ (1)(2)(3)(*)(C) (X) |
| |_ _| (4)(5)(6)(#)(.) (Y) (A) |
| |_| (7)(8)(9)( 0 ) (B) |
| |
\__________.---------------._________/
|
1st Bit31 Button (B) (0=High=Released, 1=Low=Pressed) 2nd Bit30 Button (Y) (0=High=Released, 1=Low=Pressed) 3rd Bit29 Button (<) Select (0=High=Released, 1=Low=Pressed) 4th Bit28 Button (>) Start (0=High=Released, 1=Low=Pressed) 5th Bit27 Direction Up (0=High=Released, 1=Low=Pressed) 6th Bit26 Direction Down (0=High=Released, 1=Low=Pressed) 7th Bit25 Direction Left (0=High=Released, 1=Low=Pressed) 8th Bit24 Direction Right (0=High=Released, 1=Low=Pressed) 9th Bit23 Button (A) (0=High=Released, 1=Low=Pressed) 10th Bit22 Button (X) (0=High=Released, 1=Low=Pressed) 11th Bit21 Button (L) (0=High=Released, 1=Low=Pressed) 12th Bit20 Button (R) (0=High=Released, 1=Low=Pressed) 13th Bit19 ID Bit3 (always 0=High) 14th Bit18 ID Bit2 (always 1=Low) 15th Bit17 ID Bit1 (always 0=High) 16th Bit16 ID Bit0 (always 0=High) 17th Bit15 Button (0) (0=High=Released, 1=Low=Pressed) 18th Bit14 Button (1) (0=High=Released, 1=Low=Pressed) 19th Bit13 Button (2) (0=High=Released, 1=Low=Pressed) 20th Bit12 Button (3) (0=High=Released, 1=Low=Pressed) 21th Bit11 Button (4) (0=High=Released, 1=Low=Pressed) 22th Bit10 Button (5) (0=High=Released, 1=Low=Pressed) 23th Bit9 Button (6) (0=High=Released, 1=Low=Pressed) 24th Bit8 Button (7) (0=High=Released, 1=Low=Pressed) 25th Bit7 Button (8) (0=High=Released, 1=Low=Pressed) 26th Bit6 Button (9) (0=High=Released, 1=Low=Pressed) 27th Bit5 Button (*) (0=High=Released, 1=Low=Pressed) 28th Bit4 Button (#) (0=High=Released, 1=Low=Pressed) 29th Bit3 Button (.) Dot (0=High=Released, 1=Low=Pressed) 30th Bit2 Button (C) Clear (0=High=Released, 1=Low=Pressed) 31th Bit1 Unknown/Unused (unknown, probably always 1 or always 0) 32th Bit0 Button (=) End (0=High=Released, 1=Low=Pressed) 33th and up Padding (unknown, probably always 1 or always 0) |
| SNES Controllers X-Band Keyboard |
___________________________________________________________________
| >< Num Caps Scroll |
| BAND Lock Lock Lock |
| ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ ___ |
| | | | | | | | | | | | | | L |Sel|Sta| R | |
| |___|___|___|___|___|___|___|___|___|___|___|___|___|___|___|___| |
| |Can|1! |2@ |3# |4$ |5% |6^ |7& |8* |9( |0) |-_ |=+ | <-- | X | |
| |___|___|___|___|___|___|___|___|___|___|___|___|___|_______|___| |
| |Switc| Q | W | E | R | T | Y | U | I | O | P |[{ |]} | | Y | |
| |_____|___|___|___|___|___|___|___|___|___|___|___|___| |___| |
| |Caps | A | S | D | F | G | H | J | K | L |;: |'" | Enter | A | |
| |______|___|___|___|___|___|___|___|___|___|___|___|________|___| |
| |Shift | Z | X | C | V | B | N | M |,< |.> |/? |Shift |UP | B | |
| |________|___|___|___|___|___|___|___|___|___|___|______|___|___| |
| |`~ | |>< |Ctr| |Ctr|>< |\| |LT |DN |RT | |
| |___|___|___|___|_______________________|___|___|___|___|___|___| |
|___________________________________________________________________|
|
1st-12th Unknown/unused 13th-16th Unknown/unused (should be usually a 4bit ID) 17th-24th Unknown/unused (should be sometimes extended 8bit ID) 25th and up Unknown/unused |
[004201]=7Fh ;-set IOBIT=0
id=getbits(8) ;-read ID byte (must be 78h, aka "x")
if CAPS=OFF [004201]=FFh ;-set IOBIT=1 (when CAPS=OFF) (CAPS LED)
num=getbits(4) ;-read num scancodes
if num>0 then for i=1 to num ;\
[dst]=getbits(8) ; read that scancodes (if any)
dst=dst+1 ;
next i ;/
[004201]=FFh ;set IOBIT=1 ;-set IOBIT=1
|
for i=1 to n/2 ;\
delay (loop 7 times or so) ; read 2bits at once, LSB first
x=(x SHR 2) OR ([004017h] SHL 6) ;
next ;/
x=(x XOR FFh) SHR (8-n) ;-invert & move result to LSBs
|
nn normal key F0h,nn normal key released E0h,nn special key E0h,F0h,nn special key released |
____0xh____1xh___2xh___3xh___4xh___5xh___6xh___7xh_____8xh_____9xh___
x0h --- --- --- --- --- --- --- NUM-0 --- <90h>?
x1h --- CTR1? C N ,< --- --- NUM-. --- <91h>?
x2h --- SHF1? X B K '" --- NUM-2 --- <92h>?
x3h --- --- D H I --- --- NUM-5 --- <93h>?
x4h --- CTR2? E G O [{ --- NUM-6 NUM-SUB <94h>?
x5h --- Q 4$ Y 0) =+ --- NUM-8 --- <95h>?
x6h --- 1! 3# 6^ 9( --- BS CANCEL JOY-A <96h>?
x7h --- --- --- --- --- --- --- NUM-DIV JOY-B <97h>?
x8h --- --- --- --- --- CAPS --- --- JOY-X <98h>?
x9h --- --- SPACE --- .> SHF2? NUM-1 NUM-RET JOY-Y <99h>?
xAh --- Z V M /? ENTER --- NUM-3 JOY-L <9Ah>?
xBh --- S F J L ]} NUM-4 --- JOY-R <9Bh>?
xCh --- A T U ;: \| NUM-7 NUM-ADD SELECT <9Ch>?
xDh SWITCH W R 7& P \| --- NUM-9 START <9Dh>?
xEh `~ 2@ 5% 8* -_ --- --- NUM-MUL <8Eh>? ---
xFh --- --- --- --- --- --- --- --- <8Fh>? ---
|
E0h,5Ah JOY-A (alternate to normal scancode 86h) E0h,6Bh LEFT E0h,72h DOWN E0h,74h RIGHT E0h,75h UP |
| SNES Controllers Tilt/Motion Sensors |
___
/ \ BatterUP _________________
| | | [] | Some versions (probably for
| | | [] START | SEGA or so) have a "C" button,
| | <-- blue foam .| UP | and no X/Y/SELECT buttons.
| | .' | [] [] |
| | .' | LEFT RIGHT | Purpose of the 4 DIP switches
|_____| .........' | :::: [] | is unknown (maybe sensitivity,
| .' | | DIPs DOWN [] | or assigning the swing-sensor
| '.' | DPAD | SELECT| to a specific joypad-button?)
| .' | <-- buttons --> | A[] |
| : | | |
\_'_/ ......... | B[] |
| | '. \ /
| | '. \ X[] /
| | <-- handle '. \ /
| | \ Y[] /
| | \_______/
| |
\_/
'.______ cable (to console's controller port)
|
Cal Ripken Jr. Baseball, 1992 Mindscape ESPN Baseball Tonight, 1994 Sony Imagesoft Hardball III, 1994 Accolade Ken Griffey Jr. Presents Major League Baseball, 1994 Nintendo Ken Griffey, Jr.'s Winning Run, 1996 Nintendo MLBPA Baseball, 1994 EA Sports Sports Illustrated Championship Football and Baseball, 1993 Malibu Games Super Baseball, 1994 EA Techmo Super Batter Up, 1993 Namco |
.......................................
cables ___________:___________
(to joypad | O O O O O O |__
and to | .'''''. TeeV : | <-- BIOS
console) | : _ : Golf : | cartridge
Golf Club | : (_) : :__| or so
(with 2 AA batteries) | :.......: | (with "PGA
___________ | O O :.O O.: O O | Tour Golf"
| :\ __ |Mode1 : ''''' : Mode2| text on it)
| : : | |_______:_______:_______|
| : : | _____________________
| : :__|=======================|_____________________|
|__________:/
|
1 +6V 2 GND 3 Joypad (SNES:DTA, SEGA:Right In) 4 Joypad (SNES:CLK, SEGA:N/A) 5 Joypad (SNES:STB, SEGA:Left In) 6 GND 7 VCC (SNES:+5V, SEGA:N/A?) (for Joypad?) 8 N/A 9 GND 10 Video in (NTSC composite) 11 Joypad (SNES:DTA, SEGA:Right Out) 12 Joypad (SNES:STB, SEGA:Left Out) 13 GND 14 Audio in (Left) 15 Audio in (Right) Resolution: 240x86 color triads Field of View: 17 degrees Weight: circa 2.5 pounds |
| SNES Controllers Lasabirdie (golf club) |
Lasabirdie - Get in the Hole (1995) Ricoh/Good House (JP) |
_______________________________ __
|...............................| insert two / /
|: :| AA batteries / / <-- handle
|: # Golf Ball # :| | / / (rather
|: # _ / # :| | / / short)
|: # (_) # # :| V / /
|: # # :| ______/ /
|: # # :| | /
_|:.............................:| \ / <-- yellow laser symbol
/ | LT RT UP DN A B RICOH | \___/
| |_______________________________| |
/ <---- cable (to SNES controller port 2) | <-- laser beam
|
1st Button B (CANCEL) (1=Low=Pressed) 2nd Button DOWN (1=Low=Pressed) 3rd..6th Nibble Data bit3-0 (1=Low=One?) (MSB first) 7th Nibble Available (toggles CLK like) 8th Packet Available (1=Low=Yes) 9th Button A (START) (1=Low=Pressed) 10th Button UP (1=Low=Pressed) 11th Button LEFT (PAUSE) (1=Low=Pressed) 12th Button RIGHT (1=Low=Pressed) 13th..16th ID Bit3-0 (unknown) ;read, but not checked by software 17th..24th Extra ID Bit7-0 (unknown) ;read, but not checked by software 25th and up Unknown/Unused (probably all one, or all zero ?) |
20h select "GOLF_READY!" ID string packet 22h select version string packet 30h select whatever data packet? 3Fh select whatever data packet? 40h..55h sent while receiving nibbles number 0..21 5Fh terminate transfer (or re-select default packet type?) |
output 1 start bit ("0")
output 8 data bits (MSB first)
output 2 stop bits ("0","0")
release line (output "1", until the next byte transferred in next frame)
|
"GOLF_READY!" ;-ID-string packet ;\without checksum FFh,FFh,0,0,0,0,0,0,0,0,0 ;-Empty packet ;/ 9 chars, 1 unknown, 1 chksum ;-Version-string ;\with checksum 10 data bytes, 1 chksum ;-Normal packet ;/ |
if [421Ah].bit8 = 0 then exit ;-exit if no packet available
for i=0 to 21
old_state = [421Ah].bit9
@@wait_lop:
send_byte(40h+i)
wait_vblank
if [421Ah].bit9 <> old_state then jmp @@wait_done
wait_vblank
if [421Ah].bit9 <> old_state then jmp @@wait_done
jmp @@wait_lop
@@wait_done:
nibble=([421Ah] SHR 10) AND 0Fh
if (i AND 1)=0 then buf[i/2]=nibble, else buf[i/2]=buf[i/2]+nibble*10h
next i
send_byte(5Fh) ;-terminate transfer or so
|
| SNES Controllers Exertainment (bicycle exercising machine) |
Cannondale Cup (1993) CEG/American Softworks/RadicalEntertainment (US) Exertainment Mountain Bike Rally (1994) LifeFitness/RadicalEntertainment (US) Exertainment Mountain Bike Rally & Speed Racer (combo cart) (1995) (USA) Exertainment Mountain Bike Rally & Speed Racer (combo cart) (prototype) (EU) |
U1 40pin TL16C550AN CF62055 N9304 2342265 TI ;-RS232 controller U2 20pin PEEL18CV8P CTM22065 333FB ;-some PAL (sticker "K41A-12802-0000") U3 20pin 74HC374N (addr.msb & serial) ;\two 8bit latches (13bit SRAM address, U4 20pin 74HC374N (addr.lsb) ;/and the 3bit serial-port outputs) U5 28pin LH5268A-10LL 9348 SHARP ;-8Kx8 SRAM U6 16pin ADM232LJN 9403 OF31824 ;-RS232 voltage converter BATT1 CR2032 ;-battery (for SRAM) P2 4pin short cable to rear 623K-6P4C;-SIO (1=LED?, 2=CLK?, 3=DTA?, 4=/SEL?) P3 3pin long cable to front 616M-4P4C;-RS232 (1=GND, 2=N/A, 3=TX, 4=RX) Px 28pin Connector to SNES expansion port (at bottom of SNES console) |
| SNES Controllers Exertainment - I/O Ports |
21C0h.0 TL16C550AN - RX Data FIFO (R) ;\when (?) 21C0h.0 TL16C550AN - TX Data FIFO (W) ; DLAB=0 (?) 21C1h.0 TL16C550AN - Interrupt Control (R/W) ;/ 00h 21C0h.1 TL16C550AN - Baudrate Divisor Latch LSB, Bit0-7 (R/W) ;\when (-) 21C1h.1 TL16C550AN - Baudrate Divisor Latch MSB, Bit8-15 (R/W) ;/DLAB=1 (-) 21C2h TL16C550AN - Interrupt Status (R) 01h 21C2h TL16C550AN - FIFO Control (W) 00h 21C3h TL16C550AN - Character Format Control (R/W) ;<--- Bit7=DLAB 00h 21C4h TL16C550AN - Handshaking Control (R/W) 00h 21C5h TL16C550AN - RX/TX Status (R) (Write=reserved for testing) 60h 21C6h TL16C550AN - Handshaking Status (R) (Write=unknown/reserved) 0xh 21C7h TL16C550AN - Scratch (R/W) (-) 21C8h 74HC374N (U3) - RAM address MSBs and SPI-style Serial Port (W) (-) 21C9h Not used 21CAh 74HC374N (U4) - RAM address LSBs (W) (-) 21CBh Not used 21CCh RAM (U5) data byte to/from selected RAM addr (R/W) (battery backed) 21CDh Not used 21CEh Not used 21CFh ? initially set to 00h (not changed thereafter) (W) ;\maybe one of 21Dxh Not used ; these resets 21DFh ? initially set to 80h (not changed thereafter) (W) ;/the TL16C550AN? |
0 Serial Port Select (0=Select, 1=Idle) 1 Serial Port Data (transferred LSB first) 2 Serial Port Clock (0=Idle) (data must be stable on 0-to-1 transition) 3-7 Upper 5bit of 13bit RAM address (see Ports 21CAh/21CCh) |
20xxh = set address (00h..EFh = yloc*18h+xloc) (24x10 chars) 20Fxh = set address (F0h..F3h = control registers 0..3) 1C20h = ascii space with attr=1Ch ? 1E20h = ascii space with attr=1Eh ? 1Exxh = ascii chars ":" and "0..9" and "A..Z" (standard ascii codes) 1Exxh = lowercase chars "a..z" (at "A..Z"+80h instead of "A..Z"+20h) 0000h = value used for control regs 0 and 1 0111h = value used for control reg 2 0070h,0077h,0470h = values used for control reg 3 |
Port 21CAh.Bit0-7 = RAM Address Bit0-7 (W) ;\13bit address, 0000h..1FFFh Port 21C8h.Bit3-7 = RAM Address Bit8-12 (W) ;/ Port 21C8h.Bit0-2 = See Serial Port description (W) Port 21CCh.Bit0-7 = RAM Data Bit0-7 (R/W) |
| SNES Controllers Exertainment - RS232 Controller |
0-7 Data (with 16-byte FIFO) |
0-7 Data (with 16-byte FIFO) |
0 Received Data Available Interrupt (0=Disable, 1=Enable) 1 Transmitter Holding Register Empty Interrupt (0=Disable, 1=Enable) 2 Receiver Line Status Interrupt (0=Disable, 1=Enable) 3 Modem Status Interrupt (0=Disable, 1=Enable) 4-7 Not used (always zero) |
0-7 Divisor Latch LSB/MSB, should be set to "divisor = XIN / (baudrate*16)" |
0 Interrupt Pending Flag (0=Pending, 1=None) 1-3 Interrupt ID, 3bit (0..7=see below) (always 00h when Bit0=1) 4-5 Not used (always zero) 6 FIFOs Enabled (always zero in TL16C450 mode) ;\these bits have same 7 FIFOs Enabled (always zero in TL16C450 mode) ;/value as "FIFO Enable" |
ID Prio Expl. 00h 4 Handshaking inputs CTS,DSR,RI,DCD have changed (Ack: Read 21C6h) 01h 3 Transmitter Holding Register Empty (Ack: Write 21C0h or Read 21C2h) 02h 2 RX FIFO has reached selected trigger level (Ack: Read 21C0h) 03h 1 RX Overrun/Parity/Framing Error, or Break Interrupt (Ack: Read 21C5h) 06h 2 RX FIFO non-empty & wasn't processed for longer time(Ack: Read 21C0h) |
0 FIFO Enable (0=Disable, 1=Enable) (Enables access to FIFO related bits) 1 Receiver FIFO Reset (0=No Change, 1=Clear RX FIFO) 2 Transmitter FIFO Reset (0=No Change, 1=Clear TX FIFO) 3 DMA Mode Select (Mode for /RXRDY and /TXRDY) (0=Mode 0, 1=Mode 1) 4-5 Not used (should be zero) 6-7 Receiver FIFO Trigger (0..3 = 1,4,8,14 bytes) |
0-1 Character Word Length (0..3 = 5,6,7,8 bits) 2 Number of Stop Bits (0=1bit, 1=2bit; for 5bit chars: only 1.5bit) 3 Parity Enable (0=None, 1=Enable Parity or 9th data bit) 4-5 Parity Type/9th Data bit (0=Odd, 1=Even, 2=Set9thBit, 3=Clear9thBit) 6 Set Break (0=Normal, 1=Break, Force SOUT to Low) 7 Divisor Latch Access (0=Normal I/O, 1=Divisor Latch I/O) (DLAB) |
0 Output Level for /DTR pin (Data Terminal Ready) (0=High, 1=Low) 1 Output Level for /RTS pin (Request to Send) (0=High, 1=Low) 2 Output Level for /OUT1 pin (General Purpose) (0=High, 1=Low) 3 Output Level for /OUT2 pin (General Purpose) (0=High, 1=Low) 4 Loopback Mode (0=Normal, 1=Testmode, loopback TX to RX) 5-7 Not used (always zero) |
0 RX Data Ready (DR) (0=RX FIFO Empty, 1=RX Data Available) 1 RX Overrun Error (OE) (0=Okay, 1=Error) (RX when RX FIFO Full) 2 RX Parity Error (PE) (0=Okay, 1=Error) (RX parity bad) 3 RX Framing Error (FE) (0=Okay, 1=Error) (RX stop bit bad) 4 RX Break Interrupt (BI) (0=Normal, 1=Break) (RX line LOW for long time) 5 Transmitter Holding Register (THRE) (1=TX FIFO is empty) 6 Transmitter Empty (TEMT) (0=No, 1=Yes, TX FIFO and TX Shift both empty) 7 At least one Overrun/Parity/Framing Error in RX FIFO (0=No, 1=Yes/Error) |
0 Change flag for /CTS pin (Clear to Send) ;\change flags (0=none, 1 Change flag for /DSR pin (Data Set Ready) ; 1=changed since last 2 Change flag for /RI pin (Ring Indicator) ; read) (automatically 3 Change flag for /DCD pin (Data Carrier Detect) ;/cleared after reading) 4 Input Level on /CTS pin (Clear to Send) ;\ 5 Input Level on /DSR pin (Data Set Ready) ; current levels 6 Input Level on /RI pin (Ring Indicator) ; (inverted ?) 7 Input Level on /DCD pin (Data Carrier Detect) ;/ |
0-7 General Purpose Storage (eg. read/write-able for chip detection) |
| SNES Controllers Exertainment - RS232 Data Packets & Configuration |
Bike Packet 01h ;\these might both contain same bike data, Bike Packet 02h ;/both required to be send (else SNES hangs) Bike Packet 03h ;<-- confirms/requests pause mode Bike Packet 08h Login Part 1 (ID string) Bike Packet 09h PPU Status Request (with ignored content) Bike Packet 0Ah Login Part 3 (reply to random values) Bike Packet 0Ch Login Part 5 (fixed values 00,FF,00,0C,..) |
SNES Packet 00h Idle (zerofilled) or PPU Status Response (with "RAD" string) SNES Packet 01h Biking Start (start biking; probably resets time/distance) SNES Packet 02h Biking Active (biking) SNES Packet 03h Biking Pause (pause biking) SNES Packet 04h Biking Exit (finish or abort biking) SNES Packet 05h User Parameters SNES Packet 06h Biking ? SNES Packet 07h Biking ? SNES Packet 08h Biking ? SNES Packet 09h Login Part 2 (random values) SNES Packet 0Bh Login Part 4 (based on received data) SNES Packet 0Dh Login Part 6 (login okay) SNES Packet 0Fh Logout (login failed, or want new login) SNES Packet 0Ah,0Ch,0Eh (?) (unused?) |
1 start bit, 8 data bits, sticky parity, 1 stop bit, or, in other words: 1 start bit, 9 data bits, no parity, 1 stop bit |
NTSC: 5.36931750MHz/35/16 = 9588.067 Hz PAL: 5.32034250MHz/35/16 = 9500.612 Hz |
| SNES Controllers Exertainment - RS232 Data Packets Login Phase |
Bike Packet 08h Login Part 1 (ID string) SNES Packet 09h Login Part 2 (random values) Bike Packet 0Ah Login Part 3 (reply to random values) SNES Packet 0Bh Login Part 4 (based on received data) Bike Packet 0Ch Login Part 5 (fixed values 00,FF,00,0C,..) SNES Packet 0Dh Login Part 6 (login okay) (communication phase...) SNES Packet 0Fh Logout (login failed, or want new login) |
Bike Packet 09h PPU Status Request (with ignored content) SNES Packet 00h PPU Status Response (with "RAD" string) |
ATT Attention Code (133h, with 9th bit aka parity set = packet start)
00h Command (LSB=08h, MSB=Unknown/unused)
01h..0Bh ID String ("LIFEFITNESS" or "LIFEFITNESs") ;[0Bh].bit5=flag? [1EEEh]
0Ch..0Dh Unknown/unused
0Eh Checksum (00h-[00h..0Dh])
|
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=09h, MSB=Zero) 01h..0Ah Random values (RND1,RND2,RND3,RND4,RND5,RND6,RND7,RND8,RND9,RND10) 0Bh Checksum (00h-[00h..0Ah]) |
ATT Attention Code (133h, with 9th bit aka parity set = packet start) 00h Command (LSB=0Ah, MSB=Unknown/unused) 01h RND1+RND5 ;\ 02h RND2+(RND5*13+9) ; RND'values same as in 03h RND3+((RND5*13+9)*13+9) ; Login Part 2 04h RND4+(((RND5*13+9)*13+9)*13+9) ; 05h RND5+((((RND5*13+9)*13+9)*13+9)*13+9) ;/ 06h..0Ah Unknown/unused <-- these ARE USED for response TO bike 0Bh..0Dh Unknown/unused <-- these seem to be totally unused 0Eh Checksum (00h-[00h..0Dh]) |
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=0Bh, MSB=Zero) 01h..0Ah Values "[01h]+[01h..0Ah]" from Login Part 3 0Bh Checksum (00h-[00h..0Ah]) |
ATT Attention Code (133h, with 9th bit aka parity set = packet start) 00h Command (LSB=0Ch, MSB=Unknown/unused) 01h..0Ah Constants (00h,FFh,00h,0Ch,0Ah,63h,00h,FAh,32h,C8h) 0Bh..0Dh Unknown/unused 0Eh Checksum (00h-[00h..0Dh]) |
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=0Dh, MSB=Zero) 01h..0Ah All zero (00) 0Bh Checksum (00h-[00h..0Ah]) |
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=0Fh, MSB=Zero) 01h..0Ah All zero (00) 0Bh Checksum (00h-[00h..0Ah]) |
ATT Attention Code (133h, with 9th bit aka parity set = packet start) 00h Command (LSB=09h, MSB=Unknown/unused) 01h..0Dh Unknown/unused 0Eh Checksum (00h-[00h..0Dh]) |
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=00h, MSB=Zero) 01h PPU2 Status [213Fh] (PPU2 chip version & Interlace/Lightgun/NTSC) 02h PPU1 Status [213Eh] (PPU1 chip version & OBJ overflow flags) 03h CPU Status [4210h] (CPU chip version & NMI flag) 04h Curr Scanline [213Dh] (lower 8bit of current scanline number) 05h..0Ah Constants (52h,41h,44h,00h,00h,00h) (aka "RAD",0,0,0) 0Bh Checksum (00h-[00h..0Ah]) |
| SNES Controllers Exertainment - RS232 Data Packets Biking Phase |
SNES Packet 00h Idle (while in menu) (also used for PPU Status Response) SNES Packet 01h Biking Start (start biking; probably resets time/distance) SNES Packet 02h Biking Active (biking) SNES Packet 03h Biking Pause (pause biking) SNES Packet 04h Biking Exit (finish or abort biking) SNES Packet 05h User Parameters SNES Packet 06h Biking ? SNES Packet 07h Biking ? SNES Packet 08h Biking ? Bike Packet 01h ;\these might both contain same bike data, Bike Packet 02h ;/both required to be send (else SNES hangs) Bike Packet 03h ;<-- confirms/requests pause mode |
ATT Attention Code (133h, with 9th bit aka parity set = packet start) 00h Command (LSB=00h..07h or so, MSB=Curr Level 0..12, Pedal Resistance) 01h Speed in pedal rotations per minute (0..xxx) (above 200=glitches?) 02h Time (MSB) in 60 second units (0..255) ;\ 03h Time (LSB) in 1 second units (0..59) ;/ 04h Calories per hour (MSB) in 256 cal/hr units ;\this used in bank B0h 05h Calories per hour (LSB) in 1 cal/hr units ;/ 06h Calories burned (MSB) in 256/4 cal units ;\ 07h Calories burned (LSB) in 1/4 cal units ;/ 08h Distance (MSB) in 65536/3600 miles ;\ 09h Distance (MID) in 256/3600 miles ; 0Ah Distance (LSB) in 1/3600 miles ;/ 0Bh Pulse in heart beats per minute (1..255 bpm, or 0=No Pulse Sensor) 0Ch Fit Test Score (clipped to range 10..60) 0Dh Whatever 8bit (invalid values CRASH combo-cart games) 0Eh Checksum (00h-[00h..0Dh]) |
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=01h..0xh ?, MSB=Wanted Level 0..12 Pedal Resistance) 01h Something (MSB=often same as above MSB, LSB=Present Hill related) 02h Present Hill 03h..09h Upcoming Hills (7 bytes) 0Ah Whatever (in MENU: 01h,02h,00h, WORKOUT:80h, FIT-TEST:85h) 80h..86h 0Bh Checksum (00h-[00h..0Ah]) |
ACK Acknowledge Code (33h, received packet with good checksum From Bike) 00h Command (LSB=05h, MSB=Wanted Level 0..12, Pedal Resistance) 01h Player's Sex (00h=Female, 01h=Male) 02h Player's Age in years (0..99) 03h Player's Weight in pounds (0..255, plus below Weight Extra) 04h Player's Pulse in heart beats per minute 05h Player's Weight Extra (added to weight, eg. 399 = values FFh+90h) 06h..09h Garbage, set to same value as [05h], but NOT counted in checksum? 0Ah Whatever (same as in other "From SNES" communication packets) 0Bh Checksum (00h-[00h..0Ah]) --- in this case, excluding [06h..09h] ? |
| SNES Controllers Exertainment - Drawings |
Exercising Machine (Side View) Front Panel
(located below of the monitor)
Monitor ____________________________________
.\ / Handles | |
.' \ / Saddle |:::::: /\ /\ TV Menu|
.' \ \ / |:::::: Volume Program _ _ |
\ \ \___ |:::::: O \/ \/ |_| |_||
\__--""| // ===== |____________________________________|
| | // || | | | | |
| | // || | | | | TV-Picture
| Rack | / | / | Pedals | | | | in picture
| | / \ / | / | | | |
| | / \____/ _ | | | | TV Program Up/Down
| | / / \ | | Volume Up/Down
| |/ O \ | Headphone socket
|______|___________________| Speaker
|
Handlebars with Controllers
____ ______ ______ ____
| | _ \ / | |
| | /\ /\ | 1st 1st | X | |
| || O || <-- DPAD XYAB --> | Y A | |
| | \/_\/ | | B | |
| | | <-- L-Button R-Button --> | | |
| | O O | (on bottom (on bottom | | |
|____|______/ side) side) \______|____|
| | | \ | |
| | \ Select | |
| | Start | |
|__| ________ ________ |__|
| | |<-- 2nd DPAD 2nd XYAB -->| | |
| __ |_______/ (also with Start/Select/L/R) \_______| __ |
| \______________________.---._______________________/ |
\_________________________|___|__________________________/
| |
|
| SNES Controllers Pachinko |
1st..8th Unknown/unused (would be Buttons/DPAD on joypads) 9th Used... probably a button? (would be Button-A on joypads) 10th..12th Unknown/unused (would be Buttons on joypads) 13th..16th ID Bit3-0 (must be 0Eh) (MSB first) 17th..24th Extra ID Bit7-0 (must be 77h) (MSB first) 25th Unknown/unused 26th..32th Analog Dial Position (7bit, MSB first, inverted, 1=Low=Zero) 33th.. Unknown/padding |
_
Top-View \_\___ . __________ Side-View
..' '..|\ .' '''''' '. <-- Blue Head
...' '.| _|______________|
.'.' ___ '. <__<_|__<_|_______) <-- Yello dial
/ .' .' '. '. | |
/ | | | |__ | | <-- Blue Base
|/\| |SUNSOFT| | / | |
'. '.___.' .'/ | |
'. .' ''._ __ _.'' \
'. .' _____|__|_____ ''----- cable
''._____.'' (______________)
|
Hissatsu Pachinko Collection 1 (J) 1994 Sunsoft/Fuji Hissatsu Pachinko Collection 2 (J) 1995 Sunsoft/Fuji Hissatsu Pachinko Collection 3 (J) 1995 Sunsoft/Daiichi/Nifty-Serve Hissatsu Pachinko Collection 4 (J) 1996 Sunsoft/Kyoraku/Nifty-Serve |
| SNES Controllers Other Inputs |
| SNES Add-On Turbo File (external backup memory for storing game positions) |
SNES Turbo File Twin (160K) (128K in STF mode, 4x8K in TFII mode) SNES Turbo File Adapter (SNES adapter for NES Turbo File & Turbo File II) |
Name Capacity Connection Turbofile (AS-TF02) 1x8Kbyte NES-to-SNES Adapter Turbo File II 4x8Kbyte NES-to-SNES Adapter Turbo File Twin 4x8Kbyte plus 128Kbyte Direct SNES Connection Gameboy version ? N/A ? Gameboy Advance ? N/A ? |
| SNES Add-On Turbo File - TFII Mode Transmission Protocol |
call oldest_invoke_transfer ;start transfer if invoke_okay then for i=0001h to 1FFFh, oldest_recv_byte(buf[i]) jmp oldest_reset_turbofile ;end transfer (always, even if invoke failed) |
call oldest_invoke_transfer ;start transfer if invoke_okay then for i=0001h to 1FFFh, oldest_send_byte(buf[i]) jmp oldest_reset_turbofile ;end transfer (always, even if invoke failed) |
call oldest_detect_and_get_status
if no_tf_connected then fail/exit
if data_phase=1 then ;oops, already invoked
oldest_detect_and_get_status ;abort old transfer
jmp oldest_invoke_transfer ;retry invoking new transfer
[004016]=01h ;strobe on ;\
for i=1 to 15,dummy=[004017],next i ;issue 15 clks ; invoke transfer
[004016]=00h ;strobe off ; (16 clks total)
dummy=[004017] ;issue 1 clk ;/
call oldest_detect_and_get_status ;\want flag set now
if data_phase=0 then fail/exit ;/
for i=1 to 7 ;\skip remaining 7 bits
dummy=[004017] ;<-- required? ;issue clk ; of unused byte 0000h
[004016]=01h ;strobe on ; (the first bit was
[004016]=00h ;strobe off ; skipped by STROBE in
next i ;/detect_and_get_status)
|
[004016]=01h ;strobe on
[004016]=00h ;strobe off
for i=23 to 0 ;get ID/status (MSB first)
temp=[004017] ;issue clk & get data
stat.bit(i)=temp.bit0
next i
if stat.bit(11..8)<>0Eh then no_tf_connected=1 ;major 4bit id
if stat.bit(7..0)<>0FFh then no_tf_connected=1 ;minor 8bit id
if stat.bit(12)=1 then data_phase=1 else data_phase=0
|
[004016]=01h ;strobe on dummy=[004017] ;issue clk [004016]=00h ;strobe off dummy=[004017] ;issue clk [004016]=00h ;strobe off (again?) jmp oldest_detect_and_get_status |
for i=0 to 7 ;transfer data byte (LSB first)
temp=[004017] ;issue clk (required?), and get bit from joy4
data.bit(i)=temp.bit(1) ;extract received data bit
[004016]=01h ;strobe on
[004201]=80h*data.bit(i) ;write SAME/UNCHANGED bit to hardware
[004016]=00h ;strobe off (WRITE CLOCK)
next i
|
for i=0 to 7 ;transfer data byte (LSB first)
dummy=[004017] ;issue clk (really required for writing?)
[004016]=01h ;strobe on
[004201]=80h*data.bit(i) ;write NEW bit to hardware
[004016]=00h ;strobe off (WRITE CLOCK)
next i
|
| SNES Add-On Turbo File - TFII Mode Filesystem |
2 ID "AB" (41h,42h) 2 Filesize (16+N+2) (including title and checksum) 16 Title in ASCII (terminated by 00h or 01h) N Data Portion 2 Checksum (all N bytes in Data Portion added together) |
1 Don't care (should be 00h) ;fixed, at offset 0001h 2 ID AAh,55h ;fixed, at offset 0002h..0003h 508 Data Portion (Data, end code "BEDEUTUN", followed by some unused bytes) |
The early version has transferred all bytes in reversed bit-order, so above ID bytes AAh,55h will be seen as 55h,AAh in newer versions! |
| SNES Add-On Turbo File - STF Mode Transmission Protocol |
set strobe=1 8x sendbit (LSB first) ;command (24h=read or 75h=write) 20x sendbit (LSB first) ;address (00000h..FFFFFh) set strobe=0 FileTwinRecvStatusAndID error if bad-ID or general-error-flag (for write: also write protect-error) retry "FileTwinSendCommand" if desired Read (or Write) Mode bit isn't set |
set strobe=1 if command was READ then issue clk (don't do that on WRITE command) set strobe=0 FileTwinRecvStatusAndID retry "TerminateCommand" if Data Read/Write Mode bits are still nonzero |
set strobe=1 8x sendbit (LSB first) set strobe=0 |
set strobe=1 set strobe=0 8x recvbit (from joy4) (LSB first) (inverted) |
set strobe=1 set strobe=0 12x recvbit (from joy2) (ignored) 4x recvbit (from joy2) (MSB first) (major ID, must be 0Eh) 8x recvbit (from joy2) (MSB first) (minor ID, must be FEh) 1x recvbit (from joy2) Data Write Mode (0=No/Idle, 1=Yes/Command 75h) 1x recvbit (from joy2) Data Read Mode (0=No/Idle, 1=Yes/Command 24h) 1x recvbit (from joy2) General-Hardware-Error (1=Error) 1x recvbit (from joy2) Write-Protect-Error (1=Error/Protected) 4x recvbit (from joy2) (MSB first) (capacity) (usually/always 0=128K) |
set strobe=1 --> [004016h]=1 set strobe=0 --> [004016h]=0 recvbit (from joy2) --> bit=[004017h].bit0 recvbit (from joy4) --> bit=NOT [004017h].bit1 sendbit --> [004201h]=bit*80h, dummy=[004017h] issue clk --> dummy=[004017h] |
| SNES Add-On Turbo File - STF Mode Filesystem |
00h Single Drive with 128Kbytes (normal) (plus extra 32Kbyte for TFII mode) 01h Single Drive with 256Kbytes 02h Single Drive with 384Kbytes 03h Single Drive with 640Kbytes (really, this is NOT 512Kbytes) 04h Multi-Drive with 1 normal 128K Drive (128K total) ;\allows to READ from 05h Multi-Drive with 2 normal 128K Drives (256K total) ; all drives, but 06h Multi-Drive with 3 normal 128K Drives (384K total) ; can WRITE only 07h Multi-Drive with 5 normal 128K Drives (640K total) ;/to first drive 08h..0Fh Reserved (treated same as 00h; Single Drive with 128Kbytes) |
000h..00Fh FAT (4Kbytes) 010h..1FFh Entries for 1st 124Kbytes 200h..7FFh Unused 800h..9FFh Entries for 2nd 128Kbytes (if any) A00h..BFFh Entries for 3rd 128Kbytes (if any) C00h..DFFh Entries for 4th 128Kbytes (if any) (seems to be bugged) E00h..FFFh Unused xxxh..xxxh Partition-Read FAT (though WRITES are to address zero ?) |
000h..1EFh Entries for 1st 124Kbytes 1F0h..3EFh Entries for 2nd 128Kbytes (if any) 3F0h..5EFh Entries for 3rd 128Kbytes (if any) 5F0h..7EFh Entries for 4th 128Kbytes (if any) (seems to be bugged) 7F0h..FFBh Unused FFCh..FFFh ID "FAT0" |
0-11 filesize in kbyte (1st blk), 000h (2nd..Nth blk), FFFh (free blk) 12-23 NNNh (next blk), FFFh (last blk), or also FFFh (free blk) 24-31 8bit sector chksum (all 1024 bytes added together), or FFh (free blk) |
000h..003h ID1 (must be "SHVC") 004h..007h ID2 (should be same as Game Code at [FFB2h] in ROM-Header) 008h..017h Filename (padded with ...spaces ?) 018h.. File Data (Filesize from FAT, multiplied by 1024, minus 24 bytes) |
| SNES Add-On Turbo File - Games |
Bahamut Lagoon (1996) Square (INCORRECTLY?! claimed to support Turbo File) Daisenryaku Expert WWII: War in Europe (1996) SystemSoftAlpha/ASCII Corp (JP) Dark Law - Meaning of Death (1997) ASCII (JP) Derby Stallion III (1995) (supports both TFII and STF modes) Derby Stallion 96 (1996) (supports TFII and STF and Satellaview-FLASH-cards) Derby Stallion 98 (NP) (1998) (supports both TFII and STF modes) Gunple/Ganpuru - Gunman's Proof (1997) ASCII/Lenar (JP) Mini Yonku/4WD Shining Scorpion - Let's & Go!! (1996) KID/ASCII Corp (JP) Ongaku Tukool/Tsukuru Kanaderu (supports STF and Satellaview-FLASH-cards) RPG Tukool 1 RPG Tukool 2 (supports STF and Satellaview-FLASH-cards) Sound Novel Tukool (supports STF and Satellaview-FLASH-cards) Tactics Ogre - Let Us Cling Together (supports both TFII and STF modes) Wizardry 6 - Bane of the Cosmic Forge (1995) (JP) (English) |
STF: Tower Dream STF: Best Shot Pro Golf (J) STF: Jewel of Live (RPG Maker Super Dante) (BS) STF: Solid Runner (J) STF: Wizardry Gaiden IV - Taima no Kodou (J) (v1.1) |
Ardy Lightfoot (1993) Derby Stallion II (1994) Derby Stallion III (1995) (supports both TFII and STF modes) Derby Stallion 96 (1996) (supports TFII and STF and Satellaview-FLASH-cards) Derby Stallion 98 (NP) (1998) (supports both TFII and STF modes) Down the World: Mervil's Ambition (1994) Kakinoki Shogi (1995) ASCII Corporation Tactics Ogre - Let Us Cling Together (supports both TFII and STF modes) Wizardry 5 - Heart of the Maelstrom (1992) Game Studio/ASCII (JP) BS Wizardry 5 (JP) (Satellaview BS-X version) |
TFII: Haisei Mahjong - Ryouga (J) TFII: Super Fire Pro Wrestling Special, X, and X Premium (J) TFII: Super Robot Taisen Gaiden - Masou Kishin - The Lord of Elemental (J) |
Best Play Pro Yakyuu (1988) ASCII (J) Best Play Pro Yakyuu '90 (1990) (J) Best Play Pro Yakyuu II (1990) (J) Best Play Pro Yakyuu Special (1992) (J) Castle Excellent (1986) ASCII (J) (early access method without filename) Derby Stallion - Zenkoku Ban (1992) Sonobe Hiroyuki/ASCII (J) Downtown - Nekketsu Monogatari (19xx) Technos Japan Corp (J) Dungeon Kid (1990) Quest/Pixel (J) Fleet Commander (1988) ASCII (J) Haja no Fuuin (19xx) ASCII/KGD (J) Itadaki Street - Watashi no Mise ni Yottette (1990) ASCII (J) Ninjara Hoi! (J) Wizardry - Legacy of Llylgamyn (19xx?) (J) Wizardry - Proving Grounds of the Mad Overlord (1987) (J) Wizardry - The Knight of Diamonds (1991) (J) |
| SNES Add-On Barcode Battler (barcode reader) |
Barcode World (1992) Sunsoft (JP) (includes cable with 15pin connector) |
Alice's Paint Adventure (1995) Amazing Spider-Man, The - Lethal Foes (19xx) Barcode Battler Senki Coveni Wars (1993) Epoch Donald Duck no Mahou no Boushi (19xx) Doraemon 2: Nobita's Great Adventure Toys Land (1993) Doraemon 3: Nobita and the Jewel of Time (1994) Doraemon 4 - Nobita to Tsuki no Oukoku (19xx) Doroman (canceled) Dragon Slayer - Legend of Heroes 2 (1993) Epoch J-League Excite Stage '94 (1994) J-League Excite Stage '95 (1995) Lupin Sansei - Densetsu no Hihou wo Oe! (19xx) Super Warrior Combat (19xx - does this game exist at all?) |
Region__Case___EXT___Barcode-Reader__Name__________________Year___ Japan White None Yes Barcode Battler 1991 Japan Black 1 Yes Barcode Battler II 1992 Japan Black 2 None Barcode Battler II^2 199x Europe Black 1 Yes Barcode Battler 1992/1993 |
Unknown if all 3 pins are actually used by NES/SNES cable/interface? Unknown if NES/SNES software can access LCD/buttons/speaker/EEPROM ? |
"OK" All is well, the device is operating as normal. "ER" Maybe there's something wrong? "BBII" The Barcode Battler is sending data to the device. "SFC" The SFC/SNES is waiting for a signal from the Barcode Battler. |
80pin NEC uPD75316GF (4bit CPU with on-chip 8Kx8 ROM, 512x4 RAM, LCD driver) 8pin Seiko S2929A (Serial EEPROM, 128x16 = 2Kbit) (same/similar as S29290) 3pin EXT socket (3.5mm "stereo" jack) (only in new versions with black case) LCD Screen (with 7-segment digits and some predefined words/symbols) Five LEDs (labelled "L/R-Battle Side") Seven Push Buttons (L/R-POWER, L/R-Battle, Power on/off, Select, Set) Speaker with sound on/off switch (both on bottom side) Barcode reader (requires card-edges to be pulled through a slot) Batteries (four 1.5V AA batteries) (6V) |
| SNES Add-On Barcode Transmission I/O |
1st..12th Unknown/unused (probably always 0=High?)
13th..16th ID Bits3..0 (MSB first, 1=Low=One) (must be 0Eh)
17th..24th Extended ID Bits7..0 (MSB first, 1=Low=One) (must be 00h..03h)
(the SNES programs accept extended IDs 00h..03h, unknown
if/when/why the BBII hardware does that send FOUR values)
25th Status: Barcode present (1=Low=Yes)
26th Status: Error Flag 1 ?
27th Status: Error Flag 2 ?
28th Status: Unknown ?
|
29th-32th 1st Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
33th-36th 2nd Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
37th-40th 3rd Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
41th-44th 4th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
45th-48th 5th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
49th-52th 6th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
53th-56th 7th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
57th-60th 8th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
61th-64th 9th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
65th-68th 10th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
69th-72th 11th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
73th-76th 12th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
77th-80th 13th Barcode Digit, Bits3..0 (MSB first, 1=Low=One)
81th and up Unknown/unused
Above would be 13-digit EAN-13 codes
Unknown how 12-digit UPC-A codes are transferred ;\whatever leading
Unknown if/how 8-digit EAN-8 codes are transferred ; or ending padding?
Unknown if/how 8-digit UPC-E codes are transferred ;/
|
1 Start bit (must be LOW) 8 Data bits (LSB first, LOW=Zero, HIGH=One) 1 Stop bit (must be HIGH) |
"nnnnnnnnnnnnn" ;13-digit EAN-13 code (ASCII chars 30h..39h) <Unknown> ;12-digit UPC-A code (with ending/leading padding?) " nnnnnnnn" ;8-digit EAN-8 code (with leading SPC-padding, ASCII 20h) <Unknown> ;8-digit UPC-E code (with ending/leading padding?) "ERROR " ;indicates scanning error |
"EPOCH",0Dh,0Ah ;<-- this is sent/accepted by existing hardware/software "SUNSOFT" ;<-- this would be alternately accepted by the NES game |
| SNES Add-On Barcode Battler Drawings |
_______________________________
.---""" _______________________ """---.
| /\ | | /\ |
| \ \ | | / / |
| L \/ | LCD Screen | \/ R |
| POWER | | POWER |
| /\ | | /\ |
| \ \ | | / / |
| L \/ |_______________________| \/ R |
| BATTLE BATTLE |
| O O O O O |
| L <-- Battle Side --> R |
) EXT |
| On/off Select Set |
| [====] [====] [====] |
'---_____________________________________---'
--> : _____________________________ : --> --> pull card this way
:/ CARD IN --> \:
|_______________________________|
|
_______________________________
.---""" : : """---.
| : Battery Lid : |
| : (Four AA Batteries) : |
| : : |
| :.........................: |
| |
| |
| |
| __ |
| o |__| |
| o o o Sound |
| o on/off ( <-- 3.5mm 3pin
| Speaker | EXT socket
| |
'---__ __---'
| |
| |
|_______________________________|
|
_______________ ___________ _______________ | .-------. _|__ESCAPE___|_ .-------. | | | FIGHT | / < SUPER HIT > \ |RECOVER| | | |BARCODE| /|_______________|\ | MISS | | | '-------' '-------' | | (*) (/) (K) POWER INPUT (i) (/) (*) | | _ _ _ _ _ _______ _ _ _ _ _ | | |_||_||_|| || | |ENERGY | |_||_||_|| || | | | |_||_||_||_||_| |DAMAGE | |_||_||_||_||_| | | _ _ _ _ _ |_______| _ _ _ _ _ | | |_||_||_|| || | |ATTACK | |_||_||_|| || | | | |_||_||_||_||_| | MAGIC | |_||_||_||_||_| | | _ _ _ _ _ |_______| _ _ _ _ _ | | |_||_||_|| || | |DEFENCE| |_||_||_|| || | | | |_||_||_||_||_| |SURVIVA| |_||_||_||_||_| | |_________________|_______|_________________| |
_________________
cables -> / _______ '''---> 3pin 3.5mm "stereo" EXT connector
_____|_____|____ '''---> 7pin SNES/SuperFamicom connector
___| |___
| | _.----> 3pin 3.5mm "stereo" EXT connector
| BBII INTERFACE | .-'
| | |
| O O O O | '-_ cable
|________________________| ''-------> 15pin Famicom connector
|
_________________________________________________ | | | NINJA STAR WEAPON-17 | | > INSERT | | ----------------------^------------------------ | | | | | | ___ /___\ ____ | | ___---""" /__/ \__\ """---___ | | ---___ __ O __ ___--- | | """---___\ _\ /_ /___---""" / | | \ / / | | | | /_ | | ----------------------V--------------------'( ) | | ST 400 ||| | |_________________________________________________| |
_________________________________________________ | | | BARCODE BATTLER | | NINJA STAR | | 1992 Epoch | | A lethal weapon which demands skill, patience | | and, most important, perfect timing. Send it | | spinning at the enemy when the Battler spirit is| | with you and the effect can be devasting. Time | | it wrong and the star may harmlessly bounce off | | their defences. | | || || |||| || || |||| || || |||| | | || || |||| || || |||| || || |||| | | || || |||| || || |||| || || |||| | |_________________________________________________| |
| SNES Add-On SFC Modem (for JRA PAT) |
| SNES Add-On SFC Modem - Data I/O |
1st RX Data Bit7 (0=High=Zero, 1=Low=One) ;\ 2nd RX Data Bit6 (0=High=Zero, 1=Low=One) ; 3rd RX Data Bit5 (0=High=Zero, 1=Low=One) ; to be ignored when 4th RX Data Bit4 (0=High=Zero, 1=Low=One) ; no RX Data Present 5th RX Data Bit3 (0=High=Zero, 1=Low=One) ; 6th RX Data Bit2 (0=High=Zero, 1=Low=One) ; 7th RX Data Bit1 (0=High=Zero, 1=Low=One) ; 8th RX Data Bit0 (0=High=Zero, 1=Low=One) ;/ 9th RX Data Present (0=High=None, 1=Low=Yes) 10th Unknown/Unused 11th Unknown/Unused 12th Unknown/Unused 13th ID Bit3 (always 0=High) 14th ID Bit2 (always 0=High) 15th ID Bit1 (always 1=Low) 16th ID Bit0 (always 1=Low) 17th and up Unknown/Unused (probably always whatever) |
1st Unknown Flags Bit7 (1=Low=Busy or so, 0=Ready to get TX Data) 2nd Unknown Flags Bit6 (0=High=Error/Abort or so) 3rd Unknown Flags Bit5 (1=Low=Busy or so) 4th Unknown Flags Bit4 (1=Low=Busy or so) 5th Unknown Flags Bit3 Unused? 6th Unknown Flags Bit2 Unused? 7th Unknown Flags Bit1 Unused? 8th Unknown Flags Bit0 Unused? 9th and up Unknown/Unused (probably always whatever) |
1st TX Data Present (0=Low=Yes, 1=HighZ=None) 2nd TX Data Bit7 (0=Low=Zero, 1=HighZ=One) ;\ 3rd TX Data Bit6 (0=Low=Zero, 1=HighZ=One) ; should be DATA 4th TX Data Bit5 (0=Low=Zero, 1=HighZ=One) ; when Data Present, 5th TX Data Bit4 (0=Low=Zero, 1=HighZ=One) ; or otherwise, 6th TX Data Bit3 (0=Low=Zero, 1=HighZ=One) ; should be FFh, 7th TX Data Bit2 (0=Low=Zero, 1=HighZ=One) ; or "R" or "C" ? 8th TX Data Bit1 (0=Low=Zero, 1=HighZ=One) ; (RTS/CTS or so?) 9th TX Data Bit0 (0=Low=Zero, 1=HighZ=One) ;/ 10th and up Should be "1" (1=HighZ) |
| SNES Add-On SFC Modem - Misc |
JRA = Japan Racing Association (japanese horse racing) PAT = Personal Access Terminal (for telephone/online betting) NTT = Nippon Telegraph and Telephone (japanese telecommunications) |
baud rates seem to be 2400,1200 (see ROM 03:8910) (and "AT%B" strings) uses standard AT-commands (ATI0, ATS0?, ATD, ATX1, etc.) supports AMD FLASH only there are two ROM versions (SHVC-TJAJ-0 and SHVC-TJBJ-0) |
baud rates seem to be 9600,2400,1200 (see ROM 03:87F0) (and "AT%B" strings) uses standard AT-commands (ATI0, ATS0?, ATD, ATX1, etc.) supports AMD/ATMEL/SHARP FLASH there are two ROM versions (SHVC-TJDJ-0 and SHVC-TJEJ-0) |
unknown, reportedly also horse betting with NTT modem there is one ROM version (SHVC-TOBJ-0) |
| SNES Add-On Voice-Kun (IR-transmitter/receiver for use with CD Players) |
4017h.Bit0: 1st-12th Unknown/unused (probably always 0=High?) 13th-16th ID Bits 3-0 (MSB First, 0=High=Zero) (always 0Dh) 17th and up Unknown/unused (probably always whatever?) 4017h.Bit1: any bits Infrared level (receiver) (0=High=Off, 1=Low=On) 4201h.Bit7: any bits Infrared level (transmit) (0=Low=Off, 1=High=On) |
[ ] Stop [|>} Play [||] Pause [<<] Previous Track [>>] Next Track 0..9 Numeric Digits +10 Plus 10 ;\alternately either one of these >10 Two-Digit-Input ;/can be selected during configuration |
Logical ________--------------------________--------------------________ Physical ________||||||||||||||||||||________||||||||||||||||||||________ |
Angelique Voice Fantasy (29 Mar 1996) EMIT Vol. 1 - Toki no Maigo (25 Mar 1995) EMIT Vol. 2 - Inochigake no Tabi (25 Mar 1995) EMIT Vol. 3 - Watashi ni Sayonara wo (25 Mar 1995) EMIT Value Set (EMIT Vol. 1-3) (15 Dec 1995) |
| SNES 3D Glasses |
Jim Power: The Lost Dimension in 3-D (1993) (Loriciel) (Pulfrich Effect) |
Right Eye -- Clear ;\as so for SNES Jim Power: The Lost Dimension in 3-D) Left Eye -- Dark ;/(that is, opposite as for NES Orb-3D) |
| SNES Cartridges |
| SNES Cartridge ROM Header |
FFC0h Cartridge title (21 bytes, uppercase ascii, padded with spaces)
FFC0h First byte of title (or 5Ch far-jump-opcode in Pirate X-in-1 Carts)
FFD4h Last byte of title (or 00h indicating Early Extended Header)
FFD5h Rom Makeup / ROM Speed and Map Mode (see below)
FFD6h Chipset (ROM/RAM information on cart) (see below)
FFD7h ROM size (1 SHL n) Kbytes (usually 8=256KByte .. 0Ch=4MByte)
Values are rounded-up for carts with 10,12,20,24 Mbits
FFD8h RAM size (1 SHL n) Kbytes (usually 1=2Kbyte .. 5=32Kbyte) (0=None)
FFD9h Country (also implies PAL/NTSC) (see below)
FFDAh Developer ID code (00h=None/Homebrew, 01h=Nintendo, etc.) (33h=New)
FFDBh ROM Version number (00h=First)
FFDCh Checksum complement (same as below, XORed with FFFFh)
FFDEh Checksum (all bytes in ROM added together; assume [FFDC-F]=FF,FF,0,0)
|
FFB0h Reserved (15 zero bytes) |
FFB0h Maker Code (2-letter ASCII, eg. "01"=Nintendo) FFB2h Game Code (4-letter ASCII) (or old 2-letter padded with 20h,20h) FFB6h Reserved (6 zero bytes) FFBCh Expansion FLASH Size (1 SHL n) Kbytes (used in JRA PAT) FFBDh Expansion RAM Size (1 SHL n) Kbytes (in GSUn games) (without battery?) FFBEh Special Version (usually zero) (eg. promotional version) |
FFBFh Chipset Sub-type (usually zero) (used when [FFD6h]=Fxh) |
FFE0h Zerofilled (or ID "XBOO" for WRAM-Boot compatible files) FFE4h COP vector (65C816 mode) (COP opcode) FFE6h BRK vector (65C816 mode) (BRK opcode) FFE8h ABORT vector (65C816 mode) (not used in SNES) FFEAh NMI vector (65C816 mode) (SNES V-Blank Interrupt) FFECh ... FFEEh IRQ vector (65C816 mode) (SNES H/V-Timer or External Interrupt) FFF0h ... FFF4h COP vector (6502 mode) FFF6h ... FFF8h ABORT vector (6502 mode) (not used in SNES) FFFAh NMI vector (6502 mode) FFFCh RESET vector (6502 mode) (CPU is always in 6502 mode on RESET) FFFEh IRQ/BRK vector (6502 mode) |
* Game uses 2-3 ROM chips (eg. one 8MBit plus one 2MBit chip) * Game originally designed for 2 ROMs, but later manufactured as 1 ROM (?) * Game uses a single 24MBit chip (23C2401) |
Title Hardware Size Checksum Dai Kaiju Monogatari 2 (J) ExHiROM+S-RTC 5MB 4MB + 4 x Last 1MB Tales of Phantasia (J) ExHiROM 6MB <???> Star Ocean (J) LoROM+S-DD1 6MB 4MB + 2 x Last 2MB Far East of Eden Zero (J) HiROM+SPC7110+RTC 5MB 5MB Momotaro Dentetsu Happy (J) HiROM+SPC7110 3MB 2 x 3MB Sufami Turbo BIOS LoROM in Minicart xx without checksum Sufami Turbo Games LoROM in Minicart xx without checksum Dragon Ball Z - Hyper Dimension LoROM+SA-1 3MB Overdump 4MB SD Gundam GNext (J) LoROM+SA-1 1.5MB Overdump 2MB Megaman X2 LoROM+CX4 1.5MB Overdump 2MB BS Super Mahjong Taikai (J) BS Overdump/Mirr+Empty Demon's Crest... reportedly 12MBit ? but, that's bullshit ? |
SPC7110 Title ROM Size (Header value) Checksum Super Power League 4 2MB (rounded to 2MB) 1x(All 2MB) Momotaro Dentetsu Happy (J) 3MB (rounded to 4MB) 2x(All 3MB) Far East of Eden Zero (J) 5MB (rounded to 8MB) 1x(All 5MB) |
Bit7-6 Always 0 Bit5 Always 1 (maybe meant to be MSB of bit4, for "2" and "3" MHz) Bit4 Speed (0=Slow, 1=Fast) (Slow 200ns, Fast 120ns) Bit3-0 Map Mode |
0=LoROM/32K Banks Mode 20 (LoROM) 1=HiROM/64K Banks Mode 21 (HiROM) 2=LoROM/32K Banks + S-DD1 Mode 22 (mappable) "Super MMC" 3=LoROM/32K Banks + SA-1 Mode 23 (mappable) "Emulates Super MMC" 5=HiROM/64K Banks Mode 25 (ExHiROM) A=HiROM/64K Banks + SPC7110 Mode 25? (mappable) |
00h ROM 01h ROM+RAM 02h ROM+RAM+Battery x3h ROM+Co-processor x4h ROM+Co-processor+RAM x5h ROM+Co-processor+RAM+Battery x6h ROM+Co-processor+Battery x9h ROM+Co-processor+RAM+Battery+RTC-4513 xAh ROM+Co-processor+RAM+Battery+overclocked GSU1 ? (Stunt Race) x2h Same as x5h, used in "F1 Grand Prix Sample (J)" (?) 0xh Co-processor is DSP (DSP1,DSP1A,DSP1B,DSP2,DSP3,DSP4) 1xh Co-processor is GSU (MarioChip1,GSU1,GSU2,GSU2-SP1) 2xh Co-processor is OBC1 3xh Co-processor is SA-1 4xh Co-processor is S-DD1 5xh Co-processor is S-RTC Exh Co-processor is Other (Super Gameboy/Satellaview) Fxh.xxh Co-processor is Custom (subclassed via [FFBFh]=xxh) Fxh.00h Co-processor is Custom (SPC7110) Fxh.01h Co-processor is Custom (ST010/ST011) Fxh.02h Co-processor is Custom (ST018) Fxh.10h Co-processor is Custom (CX4) |
00h ROM ;if gamecode="042J" --> ROM+SGB2
01h ROM+RAM (if any such produced?)
02h ROM+RAM+Battery ;if gamecode="XBND" --> ROM+RAM+Batt+XBandModem
;if gamecode="MENU" --> ROM+RAM+Batt+Nintendo Power
03h ROM+DSP
04h ROM+DSP+RAM (no such produced)
05h ROM+DSP+RAM+Battery
13h ROM+MarioChip1/ExpansionRAM (and "hacked version of OBC1")
14h ROM+GSU+RAM ;\ROM size up to 1MByte -> GSU1
15h ROM+GSU+RAM+Battery ;/ROM size above 1MByte -> GSU2
1Ah ROM+GSU1+RAM+Battery+Fast Mode? (Stunt Race)
25h ROM+OBC1+RAM+Battery
32h ROM+SA1+RAM+Battery (?) "F1 Grand Prix Sample (J)"
34h ROM+SA1+RAM (?) "Dragon Ball Z - Hyper Dimension"
35h ROM+SA1+RAM+Battery
43h ROM+S-DD1
45h ROM+S-DD1+RAM+Battery
55h ROM+S-RTC+RAM+Battery
E3h ROM+Super Gameboy (SGB)
E5h ROM+Satellaview BIOS (BS-X)
F5h.00h ROM+Custom+RAM+Battery (SPC7110)
F9h.00h ROM+Custom+RAM+Battery+RTC (SPC7110+RTC)
F6h.01h ROM+Custom+Battery (ST010/ST011)
F5h.02h ROM+Custom+RAM+Battery (ST018)
F3h.10h ROM+Custom (CX4)
|
00h - International (eg. SGB) (any) 00h J Japan (NTSC) 01h E USA and Canada (NTSC) 02h P Europe, Oceania, Asia (PAL) 03h W Sweden/Scandinavia (PAL) 04h - Finland (PAL) 05h - Denmark (PAL) 06h F France (SECAM, PAL-like 50Hz) 07h H Holland (PAL) 08h S Spain (PAL) 09h D Germany, Austria, Switz (PAL) 0Ah I Italy (PAL) 0Bh C China, Hong Kong (PAL) 0Ch - Indonesia (PAL) 0Dh K South Korea (NTSC) (North Korea would be PAL) 0Eh A Common (?) (?) 0Fh N Canada (NTSC) 10h B Brazil (PAL-M, NTSC-like 60Hz) 11h U Australia (PAL) 12h X Other variation (?) 13h Y Other variation (?) 14h Z Other variation (?) |
"xxxx" Normal 4-letter code (usually "Axxx") (or "Bxxx" for newer codes) "xx " Old 2-letter code (space padded) "042J" Super Gameboy 2 "MENU" Nintendo Power FLASH Cartridge Menu "Txxx" NTT JRA-PAT and SPAT4 (SFC Modem BIOSes) "XBND" X-Band Modem BIOS "Zxxx" Special Cartridge with satellaview-like Data Pack Slot |
| SNES Cartridge PCBs |
SHVC Normal cartridge (japan, usa, europe) SNSP Special PAL version (for SA1 and S-DD1 with built-in CIC) BSC BIOS (or game cartridge) with external Satellaview FLASH cartridge slot MAXI Majesco Sales Inc cartridge (Assembled in Mexico) MJSC Majesco Sales Inc cartridge (Assembled in Mexico) WEI Whatever? (Assembled in Mexico) EA Electronics Arts cartridge |
1 One ROM chip (usually 36pin, sometimes 32pin) Y Two 4Mbit ROM chips (controlled by 74LS00) 2 Two 8Mbit ROM chips (controlled by 74LS00,MAD-1,etc.) B Two 16Mbit ROM chips (controlled by 74LS00 or MAD-1) L Two 32Mbit ROM chips (controlled by SPC7110F,S-DD1 or MAD-1) 3 Three 8Mbit ROM chips (controlled by 74LS139) (decoder/demultiplexer) 4 Four ROM chips (used only for 4PVnn/4QW EPROM prototype boards) 8 Eight ROM chips (used only for 8PVnn/8Xnn EPROM prototype boards) |
A LoRom (A15 / Pin40 not connected to ROM) (uh, 1A3B-20 ?) B LoRom plus DSP-N chip C LoRom plus Mario Chip 1 62pin (and 36pin ROM) (no X1) CA LoRom plus GSU-1 62pin (and 32pin ROM) CB LoRom plus GSU-2 or GSU-2-SP1 62pin (and 40pin ROM) DC LoRom plus CX4 62pin (and 32pin ROMs) DH HiRom plus SPC7110F 62pin (and 32pin+44pin ROMs) DE LoRom plus ST018 62pin (and 32..40pin ROM possible) DS LoRom plus ST010/ST011 62pin (and 32..36pin ROM possible) E LoRom plus OBC1 chip 62pin (and 32pin ROMs) J HiRom (A15 / Pin40 is connected to ROM) K HiRom plus DSP-N chip L LoRom plus SA1 chip 62pin (and 44pin ROM) (16bit data?) N LoRom plus S-DD1 chip 62pin (and 44pin ROM) P LoRom with 2 prototype EPROMs (=unlike ROM A16..Ahi,/CS) PV WhateverRom with 4 prototype EPROMs (=unlike ROM A16..Ahi,/CS) Q WhateverRom prototype (see book2.pdf) QW WhateverRom prototype (see book2.pdf) RA LoRom plus GSU1A with prototype EPROMs (=unlike ROM A16..Ahi,/CS) 62pin X WhateverRom prototype (see book2.pdf) |
0 No SRAM 1 2Kx8 SRAM (usually narrow 24pin DIP, sometimes wide 24pin DIP) 2 prototype variable size SRAM 3 8Kx8 SRAM (usually wide 28pin DIP) 5 32Kx8 SRAM (usually wide 28pin DIP) 6 64Kx8 SRAM (32pin SMD, found on boards with GSU) 8 64Kx8 SRAM (in one SA1 cart) (seems to be a 64Kx8 chip, not 256Kx8) |
N No battery B Battery (with Transistor+Diodes or MM1026/MM1134 chip) M Battery (with MAD-1 chip; or with rare MAD-R chip) X Battery (with MAD-2 chip; maybe amplifies X1 oscillator for DSP1B chips) C Battery and RTC-4513 R Battery and S-RTC F FLASH Memory (instead of SRAM) (used by JRA-PAT and SPAT4) |
5S 32Kx8 SRAM (for use by GSU, not battery backed) 6S 64Kx8 SRAM (for use by GSU, not battery backed) 7S 64Kx8 or 128Kx8 SRAM (for use by GSU, not battery backed) 9P 512Kx8 PSRAM (32pin 658512LFP-85) (for satellaview) (the black-blob Star Fox PCB also contains RAM, but lacks the ending "nS") |
-NN revision number (unknown if this indicates any relevant changes) |
CPU2 SGB-R-10 Super Gameboy (1994) SHVC-MMS-X1 Nintendo Power FLASH Cartridge (1997) (older version) SHVC-MMS-02 Nintendo Power FLASH Cartridge (1997) (newer version) SHVC-MMSA-1 Nintendo Power FLASH Cartridge (19xx) ??? SHVC-SGB2-01 Super Gameboy 2 (1998) SHVC-1C0N Star Fox (black blob version) (PCB name lacks ending nS-NN) SHVC TURBO Sufami Turbo BASE CASSETTE (Bandai) <unknown?> Sufami Turbo game cartridges 123-0002-16 X-Band Modem (1995 by Catapult / licensed by Nintendo) BSMC-AF-01 Satellaview Mini FLASH Cartridge (plugged into BIOS cartridge) BSMC-CR-01 Satellaview Mini FLASH Cartridge (???) (not rewriteable ?) GPC-RAMC-4M SRAM Cartridge (without ROM)? GPC-RAMC-S1 SRAM Cartridge (without ROM)? GS 0871-102 Super Famicom Box multi-game cartridge NSS-01-ROM-A Nintendo Super System (NSS) cartridge NSS-01-ROM-B Nintendo Super System (NSS) cartridge NSS-01-ROM-C Nintendo Super System (NSS) cartridge NSS-X1-ROM-C Rebadged NSS-01-ROM-C board (plus battery/sram installed) RB-01, K-PE1-945-01 SNES CD Super Disc BIOS Cartridge (prototype) |
2Mbit 256Kbyte LH532 TC532 N-2001 (2nd chip/2A0N) (+SGB) (+Sufami) 4Mbit 512Kbyte 23C401 LH534 TC534 HN623n4 HN623x5 23C4001 LH5S4 CAT534 CXK384 8Mbit 1Mbyte 23C801 LH538 TC538 HN623n8 23C8001 TC23C8003 CAT548 16Mbit 2Mbyte 23C1601 LH537 LHMN7 TC5316 M5316 24Mbit 3Mbyte 23C2401 (seen on SHVC-1J3M board) 32Mbit 4Mbyte 23C3201 LH535 LHMN5 M5332 23C3202/40pin/SA1 N-32000/44pin/DD1 |
| SNES Cartridge ROM-Image Headers and File Extensions |
000h-001h ROM Size (in 8Kbyte units)
002h Program execution mode
Bit Expl.
7 Entrypoint (0=Normal/Reset Vector, 1=JMP 8000h)
6 Multi File (0=Normal/Last file, 1=Further file(s) follow)
5 SRAM mapping (0=mode20, 1=mode21)
4 Program mapping (0=mode20, 1=mode21)
3-2 SRAM Size (0=32Kbytes, 1=8Kbytes, 2=2Kbytes, 3=None)
1 Reserved (zero)
0 Unknown (seems to be randomly set to 0 or 1)
003h Reserved (zero) (but, set to 01h in homebrew "Pacman" and "Nuke")
004h-007h Reserved (zero)
008h-009h SWC File ID (AAh, BBh)
00Ah File Type (04h=Program ROM, 05h=Battery SRAM, 08h=real-time save)
00Bh-1FFh Reserved (zero)
|
000h-001h ROM Size (in 8Kbyte units)
002h Multi File (00h=Normal/Last file, 40h=Further file(s) follow)
(02h=Whatever, used in homebrew Miracle,Eagle,Cen-Dem)
003h ROM Mode (00h=LoROM, 80h=HiROM)
004h-005h DSP1/SRAM Mode (8377h=ROM, 8347h=ROM+DSP1, 82FDh=ROM+DSP1+SRAM)
006h-1FFh Reserved (zero) (or garbage at 01FCh in homebrew Darkness Demo)
|
SF Abbreviation for Super Famicom xx Image size in Mbit (2,4,8,16,32) (1-2 chars, WITHOUT leading zero) yyy Game catalogue number (or random number if unknown) z Indicates multi file (A=first, B=second, etc.) 078 File extension (should be usually 078) |
000h-00Fh ID "GAME DOCTOR SF 3" 010h Unknown (80h) ;-SRAM size limit 011h Unknown (20h) ;\ 012h Unknown (21h) ; DRAM mapping related 013h-018h Unknown (6x60h) ; 019h Unknown (20h) ; 01Ah Unknown (21h) ; 01Bh-028h Unknown (14x60h) ;/ 029h-02Ah Zero ;-SRAM mapping related 011h-020h 512Kbyte DRAM chunk, mapped to upper 32Kbyte of Bank 0xh-Fxh 021h-024h 512Kbyte DRAM chunk, mapped to lower 32Kbyte of Bank 4xh-7xh 025h-028h 512Kbyte DRAM chunk, mapped to lower 32Kbyte of Bank Cxh-Fxh 029h-02Ah SRAM Flags (bit0-15 = Enable SRAM at 6000-7000 in banks 0xh-Fxh) 02Bh-1FFh Zero (Reserved) |
000h Unknown (20h or 40h) ;maybe ROM size in 8K units ? 001h-007h Zero 008h-00Fh ID "SUPERUFO" 010h Unknown (01h) 011h Unknown (02h or 04h) ;maybe rom speed ? 012h Unknown (E1h or F1h) ;MSB=chipset (Exh or Fxh) ? 013h Unknown (00h) 014h Unknown (01h) 015h Unknown (03h) 016h Unknown (00h) 017h Unknown (03h) 018h-1FFh Zero |
Nnnn Game code (4 letters) Vv ROM Version N Disk Number (0=First) SFC Fixed extension (Super FamiCom) |
1D0h Unknown/unspecified (LSB=01h..03h, MSB=00h..0Dh) ;maybe ROM mapping 1D1h Unknown/unspecified ;maybe title and/or NSRT version 1E8h ID1 "NSRT" 1ECh ID2 16h (22 decimal) 1EDh Controllers (MSB=Port1, LSB=Port2) 1EEh Checksum (sum of bytes at [1D0h..1EDh]+FFh) 1EFh Checksum Complement (Checksum XOR FFh) |
00h Gamepad 01h Mouse 02h Mouse or Gamepad 03h Super Scope 04h Super Scope or Gamepad 05h Justifier 06h Multitap 07h Mouse, Super Scope, or Gamepad 08h Mouse or Multitap 09h Lasabirdie 0Ah Barcode Battler 0Bh..0Fh Reserved |
| SNES Cartridge ROM-Image Interleave |
0,1,2,3,4,5,6,7,8,9 - Original 1,3,5,7,9,0,2,4,6,8 - Interleaved |
Header must be located at file offset 007Fxxh (ie. in LoROM fashion) Header must not be a Sufami Turbo header (=title "ADD-ON BASE CASSETE") Header must not be a Satellaview header (=different chksum algorithm) Header should not contain corrupted entries The "Map Mode" byte at "[007FD5h] ANDed with 0Fh" is 01h,05h,0Ah (=HiROM) |
1,3,5,7,9,0,2,4,6,8 - Interleaved 3,7,0,4,8,1,5,9,2,6 - Double-Interleaved |
0,1,2,3,4,5,6,7,8,9 - Original 5,0,6,1,7,2,8,3,9,4 - Mis-de-interleaved |
Dai Kaiju Monogatari 2 (JP) (5Mbytes) PCB: SHVC-LJ3R-01 Tales of Phantasia (JP) (6Mbytes) PCB: SHVC-LJ3M-01 |
| SNES Cartridge CIC Lockout Chip |
| SNES Cartridge CIC Pseudo Code |
CicInitFirst, CicInitTiming, CicRandomSeed, CicInitStreams
time=data_start, a=1, noswap=1, if snes then noswap=0
mainloop:
for x=a to 0Fh
if nes then Wait(time-5), else if snes then (time-7) ;\verify idle
if (nes_6113=0) and (P0.0=1 or P0.1=1) then Shutdown ;/
Wait(time+0) ;\
if (console xor snes) then a=[00h+x].0, else a=[10h+x].0 ; output data
if noswap then P0.0=a, else P0.1=a ;/
Wait(time+2-data_rx_error) ;\
if (console xor snes) then a=[10h+x].0, else a=[00h+x].0 ; verify input
if noswap then a=(a xor P0.1), else a=(a xor P0.0) ;
if a=1 then Shutdown ;/
Wait(time+3) ;\output idle
if noswap then P0.0=0, else P0.1=0 ;/
if snes then time=time+92, else if nes then time=time+79
next x
CicMangle(00h), CicMangle(10h) ;\mangle
if snes then CicMangle(00h), CicMangle(10h) ; (thrice on SNES)
if snes then CicMangle(00h), CicMangle(10h) ;/
if snes then noswap=[17h].0 ;eventually swap input/output pins (SNES only)
a=[17h]
if a=0 then a=1, time=time+2
if snes then time=time+44, else if nes then time=time+29
goto mainloop
|
for i=[buf+0Fh]+1 downto 1
a=[buf+2]+[buf+3h]+1
if a<10h then x=[buf+3], [buf+3]=a, a=x, x=1, else x=0
[buf+3+x]=[buf+3+x]+a
for a=x+6 to 0Fh, [buf+a]=[buf+a]+[buf+a-1]+1, next a
a=[buf+4+x]+8, if a<10h then [buf+5+x]=[buf+5+x]+a, else [buf+5+x]=a
[buf+4+x]=[buf+4+x]+[buf+3+x]
[buf+1]=[buf+1]+i
[buf+2]=NOT([buf+2]+[buf+1]+1)
time=time+84-(x*6)
next i
|
timer=0 ;reset timer (since reset released)
P0=00h
console=P0.3 ;get console/cartridge flag
if console
while P0.2=1, r=r+1 ;get 4bit random seed (capacitor charge time)
P1.1=1, P1.1=0 ;issue reset to CIC in cartridge
timer=0 ;reset timer (since reset released)
if nes_6113 and (console=1)
Wait(3), nes_6113_in_console=1, P0.0=1 ;request special 6113 mode
if nes_6113 and (console=0)
Wait(6), nes_6113_in_console=P0.1 ;check if 6113 mode requested
|
time=seed_start
for i=0 to 3 ;send/receive 4bit random seed (r)
bit=((i+3) and 3) ;bit order is 3,0,1,2 (!)
if console=1 Wait(time+0+i*15), P0.0=r.bit, Wait(time+3+i*15), P0.0=0 ;send
if console=0 Wait(time+2+i*15), r.bit=P0.1 ;recv
next i
|
if snes
if ntsc then x=9, else if pal then x=6
[01h..0Fh]=B,1,4,F,4,B,5,7,F,D,6,1,E,9,8 ;init stream from cartridge (!)
[11h..1Fh]=r,x,A,1,8,5,F,1,1,E,1,0,D,E,C ;init stream from console (!)
if nes_usa ;3193A
[01h..0Fh]=1,9,5,2,F,8,2,7,1,9,8,1,1,1,5 ;init stream from console
[11h..1Fh]=r,9,5,2,1,2,1,7,1,9,8,5,7,1,5 ;init stream from cartridge
if nes_6113_in_console then overwrite [01h]=5 or so ??? ;special-case
if nes_europe ;3195A
[01h..0Fh]=F,7,B,E,F,8,2,7,D,7,8,E,E,1,5 ;init stream from console
[11h..1Fh]=r,7,B,D,1,2,1,7,E,6,7,A,7,1,5 ;init stream from cartridge
if nes_hongkong_asia ;3196A
[01h..0Fh]=E,6,A,D,F,8,2,7,E,6,7,E,E,E,A ;init stream from console
[11h..1Fh]=r,6,A,D,E,D,E,8,E,6,7,A,7,1,5 ;init stream from cartridge
if nes_uk_italy_australia ;3197A
[01h..0Fh]=3,5,8,9,3,7,2,8,8,6,8,5,E,E,B ;init stream from console
[11h..1Fh]=r,7,9,A,A,1,6,8,5,8,9,1,5,1,7 ;init stream from cartridge
if_nes_famicombox ;3198A
(unknown)
|
if snes_d411 -> seed_start=630, data_start=817 ;snes/ntsc
if snes_d413 -> (unknown?) (same as d411?) ;snes/pal
if nes_3193 -> (seems to be same as nes_3195?) ;nes/usa (v1)
if nes_3195 -> seed_start=32, data_start=200 ;nes/europe
if nes_3196 -> (unknown?) ;nes/asia
if nes_3197 -> (unknown?) ("burns five") ;nes/uk
if nes_6113 -> seed_start=32, data_start=201 ;nes/usa (v2)
if nes_6113_in_console -> seed_start=33, data_start=216 ;nes/special
if nes_tengen -> seed_start=32, data_start=201 ;nes/cic-clone
;now timing errors...
data_rx_error=0 ;default
if console=0 and nes_3193a -> randomly add 0 or 0.25 to seed_start/data_start
if console=0 and snes_d413 -> always add 1.33 to seed_start/data_start (bug)
if console=0 and nes_6113 -> data_rx_error=1 (and maybe +1.25 on seed/data?)
if other_chips & chip_revisions -> (unknown?)
|
a=0, if nes then time=830142, else if snes then time=1037682 endless_loop: ;timings here aren't 100.000% accurate if nes_3195 then time=xlat[P1/4]*174785 ;whereas, xlat[0..3]=(3,2,4,5) if (console=0) and (snes or nes_6113) then P0=03h, P1=01h if (console=1) then P1=a, Wait(timer+time), a=a xor 4 ;toggle reset on/off goto endless_loop |
| SNES Cartridge CIC Instruction Set |
A 4bit Accumulator X 4bit General Purpose Register L 4bit Pointer Register (lower 4bit of 6bit HL) H 2bit Pointer Register (upper 2bit of 6bit HL) C 1bit Carry Flag (changed ONLY by "set/clr c", not by "add/adc" or so) PC 10bit Program Counter (3bit bank, plus 7bit polynomial counter) |
ROM 512x8bit (program ROM) (NES/EUR=768x8) (max 1024x8 addressable) RAM 32x4bit (data RAM) (max 64x4 addressable) STACK 4x10bit (stack for call/ret opcodes) PORTS 4x4bit (external I/O ports & internal RAM-like ports) (max 16x4) |
00 nop no operation (aka "addsk A,0" opcode) 00+n addsk A,n add, A=A+n, skip if result>0Fh 10+n cmpsk A,n compare, skip if A=n 20+n mov L,n set L=n 30+n mov A,n set A=n 40 mov A,[HL] set A=RAM[HL] 41 xchg A,[HL] exchange A <--> RAM[HL] 42 xchgsk A,[HL+] exchange A <--> RAM[HL], L=L+1, skip if result>0Fh 43 xchgsk A,[HL-] exchange A <--> RAM[HL], L=L-1, skip if result<00h 44 neg A negate, A=0-A ;(used by 6113 mode) 45 ? 46 out [L],A output, PORT[L]=A 47 out [L],0 output, PORT[L]=0 48 set C set carry, C=1 49 clr C reset carry, C=0 4A mov [HL],A set RAM[HL]=A 4B ? 4C ret return, pop PC from stack 4D retsk return, pop PC from stack, skip 4E+n ? 52 movsk A,[HL+] set A=RAM[HL], L=L+1, skip if result>0Fh 53 ? (guess: movsk A,[HL-]) 54 not A complement, A=A XOR 0Fh 55 in A,[L] input, A=PORT[L] 56 ? 57 xchg A,L exchange A <--> L 58+n ? 5C mov X,A set X=A 5D xchg X,A exchange X <--> A 5E ??? "SPECIAL MYSTERY INSTRUCTION" ;(used by 6113 mode) 5F ? 60+n testsk [HL].n skip if RAM[HL].Bit(n)=1 64+n testsk A.n skip if A.Bit(n)=1 68+n clr [HL].n set RAM[HL].Bit(n)=0 6C+n set [HL].n set RAM[HL].Bit(n)=1 70 add A,[HL] add, A=A+RAM[HL] 71 ? (guess: addsk A,[HL]) 72 adc A,[HL] add with carry, A=A+RAM[HL]+C 73 adcsk A,[HL] add with carry, A=A+RAM[HL]+C, skip if result>0Fh 74+n mov H,n set H=n ;2bit range, n=0..3 only (used: 0..1 only) 78+n mm jmp nmm long jump, PC=nmm 7C+n mm call nmm long call, push PC+2, PC=nmm 80+nn jmp nn short jump, PC=(PC AND 380h)+nn - reset PC=000h |
Exchanged opcodes 48 <--> 49 (set/clr C) Exchanged opcodes 44 <--> 54 (neg/not A) ROM Size is 768x8 (although only 512x8 are actually used) |
| SNES Cartridge CIC Notes |
PC = (PC AND 380h) + (PC.Bit0 XOR PC.Bit1)*40h + (PC AND 7Eh)/2 |
Format <------------- Valid Address Area ----------> <--Stuck--> Linear 00 01 02 03 04 05 06 07 08 09 0A ... 7C 7D 7E or 7F 7F 7F 7F Polynomial 00 40 60 70 78 7C 7E 3F 5F 6F 77 ... 05 02 01 or 7F 7F 7F 7F |
Line 1..32 ---> Address X+9Fh..80h ;\Lines (Y) Line 33..64 ---> Address X+1Fh..00h ;/ Column 1+(n*W) --> Data Bit(n) of Address 000h+Y ;\ ;\ Column 2+(n*W) --> Data Bit(n) of Address 020h+Y ; ; Columns (X) Column 3+(n*W) --> Data Bit(n) of Address 040h+Y ; ; Column 4+(n*W) --> Data Bit(n) of Address 060h+Y ; ; chips with 200h-byte Column 5+(n*W) --> Data Bit(n) of Address 100h+Y ; ; (W=8) (64x64 bits) Column 6+(n*W) --> Data Bit(n) of Address 120h+Y ; ; Column 7+(n*W) --> Data Bit(n) of Address 140h+Y ; ; Column 8+(n*W) --> Data Bit(n) of Address 160h+Y ; ;/ Column 9+(n*W) --> Data Bit(n) of Address 200h+Y ; Column 10+(n*W) --> Data Bit(n) of Address 220h+Y ; chips with 300h-byte Column 11+(n*W) --> Data Bit(n) of Address 240h+Y ; (W=12) (96x64 bits) Column 12+(n*W) --> Data Bit(n) of Address 260h+Y ;/ |
Name Pin Dir Expl P0.0 1 Out Data Out ;\SNES version occassionally swaps these P0.1 2 In Data In ;/pins by software (ie. Pin1=In, Pin2=Out) P0.2 3 In Random Seed (0=Charged/Ready, 1=Charging/Busy) P0.3 4 In Lock/Key (0=Cartridge/Key, 1=Console/Lock) P1.0 9 Out Reset SNES (0=Reset Console, 1=No) P1.1 10 Out Reset Key (0=No, 1=Reset Key) P1.2 11 In Unused, or Reset Speed A (in 3195A) ;\blink speed of reset P1.3 12 In Unused, or Reset Speed B (in 3195A) ;/signal (and Power LED) P2.0 13 - Unused P2.1 14 - Unused P2.2 15 - Unused P2.3 - - Unused P3.0 - RAM Unused, or used as "noswap" flag (in SNES CIC) P3.1 - - Unused P3.2 - - Unused P3.3 - - Unused |
Nintendo[1..F] = Tengen[1..F] - (2,0,0,0,0,0,8,8,8,8,8,8,8,8,2) |
Nintendo[1..F] = Tengen[1..F] - (2,0,0,0,0,A,E,8,8,8,8,8,8,8,2) (That, for Tengen-USA seeds. The Tengen-style-EUR/ASIA/UK seeds may differ) |
Byte 000h, bit0-7 = 1st-8th bit on Pin 1 (DTA.OUT on NES)(DTA.OUT/IN on SNES) Byte 001h, bit0-7 = 1st-8th bit on Pin 2 (DTA.IN on NES) (DTA.IN/OUT on SNES) Byte 002h, bit0-7 = 9th-16th bit on Pin 1 Byte 003h, bit0-7 = 9th-16th bit on Pin 2 etc. |
Console Cartridge Notes 3193 3193 Works (the "old" way) ;\used combinations 3193 6113 Works (the "new" way) ;/ 6113 6113 Works (special seed/timing) ;\ 6113 3193 Doesn't work ; not used as far as known 6113 ?? Might work (??=unknown chip) ;/ |
4MHz Clock Units ...............................
1MHz Clock Units . . . . . . . .
___________ ;\Console+Cartridge
Data Should-be __| |________________ ;/should be 3us High
__________ ;\actually 2.5us High
Data From Console __.' ''----.......____ ;/and 3us falling
__________ ;\
Data From Cartridge __.' ''----.......____ ; either same as console
or, delayed: __________ ; or 0.25us later
Data From Cartridge ___.' ''----.......___ ;/
|
3.072MHz Clock Units ...............................
1.024MHz Clock Units . . . . . . . . . .
________ ;\Console+Cartridge
Data Should-be ________| |_____________ ;/should be 3us High
_________ ;\actually 3.33us high
Data From/To Console ________| '--..._______ ;/and 2us falling
_________ ;\
Data From/To Cart ____| '--...___________ ; 1.33us earlier
or, delayed _________ ; or 1.33us later
Data From/To Cart ____________| '--...___ ;/
|
| SNES Cartridge CIC Versions |
3193,3193A NES NTSC Cartridges and Consoles ;\USA,Canada 6113,6113A,6113B1 NES NTSC Cartridges (not consoles) ;/(and Korea?) 3194 Unknown/doesn't exist? 3195,3193A NES PAL Cartridges and Consoles "PAL-B";-Europe 3196(A?) NES PAL Cartridges and Consoles ;-Hong Kong,Asia 3197(A?) NES PAL Cartridges and Consoles "PAL-A";-UK,Italy,Australia 3198(A?) FamicomBox CIC Cartridges and Consoles ;\ 3199(A?) FamicomBox Coin Timer (not a CIC) ; Japan N/A Famicom Cartridges and Consoles ;/ RFC-CPU10 (?) NES R.O.B. robot (no CIC, but maybe a 4bit Sharp CPU, too?) |
F411,F411A,F411B SNES NTSC Cartridges-with-SMD-Chipset and Consoles D411,D411A,D411B SNES NTSC Cartridges-with-DIP-Chipset F413,F413A,F413B SNES PAL Cartridges-with-SMD-Chipset and Consoles D413,D413A,D413B SNES PAL Cartridges-with-DIP-Chipset SA-1,S-DD1,MCC-BSC SNES Cartridges (coprocessors/mappers with on-chip CIC) |
23C1033 337002 ;Tengen's 16pin "Rabbit" CIC clone 337006 ;Tengen's 40pin "RAMBO-1" mapper with built-in CIC clone 4051 7660 KC5373B MX8018 NINA Ciclone ;homebrew multi-region CIC clone (based on Tengen design) |
10198 - CIC clone noname - CIC clone (black chip without any part number) ST10198S - NTSC CIC clone ST10198P - PAL CIC clone 265111 - maybe also a CIC clone (used in Bung Game Doctor SF6) D1 - maybe also a CIC clone (used in Super UFO Pro8) 74LS112 - reportedly also a CIC clone (with fake part number) (UFO Pro6) CIVIC 74LS13 16pin - CIC/D411 clone (used in a 8-in-1 pirate cart) CIVIC CT6911 16pin - CIC clone (used in a 7-in-1 pirate cart) 93C26 16pin - CIC clone (used in a 8-in-1 pirate cart) D1 16pin - CIC? (used in Super VG pirate) STS9311A 52583 16pin - CIC clone (used in Donkey King Country 3 pirate) black blob 16pin - CIC/D411 clone (used in Sonic the Hedgehog pirate) |
Name YYWW-YYWW 3193 8539-8642 3193A 8547-8733 (in cartridges) (but should be in consoles for more years) 3195 8627-8638 3195A 8647-9512 3197A 8647-9227 6113 8734-8823 6113A 8823-8933 6113B1 8847-9344 |
| SNES Cart LoROM Mapping (ROM divided into 32K banks) (around 1500 games) |
Board Type ROM Area ROM Mirrors SHVC-1A0N-01,02,10,20,30 00-7D,80-FF:8000-FFFF 40-7D,C0-FF:0000-7FFF SHVC-2A0N-01,10,11,20 00-7D,80-FF:8000-FFFF 40-7D,C0-FF:0000-7FFF SHVC-BA0N-01,10 00-7D,80-FF:8000-FFFF 40-7D,C0-FF:0000-7FFF SHVC-YA0N-01 00-7D,80-FF:8000-FFFF 40-7D,C0-FF:0000-7FFF |
Board Type ROM Area SRAM Area SHVC-1A1B-04,05,06 00-1F,80-9F:8000-FFFF 70-7D,F0-FF:0000-FFFF SHVC-1A3B-11,12,13 00-1F,80-9F:8000-FFFF 70-7D,F0-FF:0000-FFFF SHVC-1A5B-02,04 00-1F,80-9F:8000-FFFF 70-7D,F0-FF:0000-FFFF SHVC-2A3B-01 00-3F,80-BF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-2A3M-01 with MAD-R 00-3F,80-BF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-2A3M-01,11,20 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-1A3B-20 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-1A1M-01,11,20 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-2A1M-01 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-BA1M-01 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-1A3M-10,20,21,30 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-BA3M-01 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-1A5M-01,11,20 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-2A5M-01 00-7D,80-FF:8000-FFFF 70-7D,F0-FF:0000-7FFF SHVC-1A7M-01 ? ? |
| SNES Cart HiROM Mapping (ROM divided into 64K banks) (around 500 games) |
Board ROM Area ROM Mirrors SRAM Area Type at 0000-FFFF at 8000-FFFF (none such) SHVC-BJ0N-01,20 40-7d,c0-ff 00-3f,80-bf N/A SHVC-YJ0N-01 40-7d,c0-ff 00-3f,80-bf N/A SHVC-1J0N-01,10,20 40-7d,c0-ff 00-3f,80-bf N/A SHVC-2J0N-01,10,11 40-7d,c0-ff 00-3f,80-bf N/A SHVC-3J0N-01 40-6f,c0-ef 00-2f,80-af N/A |
Board ROM Area ROM Mirrors SRAM Area Type at 0000-FFFF at 8000-FFFF at 6000-7FFF SHVC-1J3B-01 40-7d,c0-ff 00-3f,80-bf 20-3f,a0-bf SHVC-1J1M-11,20 40-7d,c0-ff 00-3f,80-bf 20-3f,a0-bf SHVC-1J3M-01,11,20 40-7d,c0-ff 00-3f,80-bf 20-3f,a0-bf SHVC-BJ3M-10 40-7d,c0-ff 00-3f,80-bf 20-3f,a0-bf SHVC-1J5M-11,20 40-7d,c0-ff 00-3f,80-bf 20-3f,a0-bf SHVC-2J3M-01,11,20 40-7d,c0-ff 00-3f,80-bf 10-1f,30-3f,90-9f,b0-bf SHVC-2J5M-01 40-7d,c0-ff 00-3f,80-bf 10-1f,90-9f,30-3f,b0-bf SHVC-LJ3M-01 40-7d,c0-ff 00-3f,80-bf 80-bf |
| SNES Cart SA-1 (programmable 65C816 CPU) (aka Super Accelerator) (35 games) |
00h-3Fh/80h-BFh:2200h-23FFh I/O Ports 00h-3Fh/80h-BFh:3000h-37FFh I-RAM (2Kbytes, on-chip, 10MHz fast RAM) 00h-3Fh/80h-BFh:6000h-7FFFh One mappable 8Kbyte BW-RAM block 00h-3Fh/80h-BFh:8000h-FFFFh Four mappable 1MByte LoROM blocks (max 8Mbyte) 40h-4Fh:0000h-FFFFh Entire 256Kbyte BW-RAM (mirrors in 44h-4Fh) C0h-FFh:0000h-FFFFh Four mappable 1MByte HiROM blocks (max 8Mbyte) |
00h-3Fh/80h-BFh:0000h-07FFh I-RAM (at both 0000h-07FFh and 3000h-37FFh) 60h-6Fh:0000h-FFFFh BW-RAM mapped as 2bit or 4bit pixel buffer |
2Kbytes internal I-RAM (work ram/stack) (optionally battery backed) Optional external backup/work BW-RAM up to 2MByte (or rather only 2Mbit?) Addressable ROM up to 8MByte (64MBits) |
XXX pg 62..66 timings
ok XXX pg 67..78 char/bitmap
ok XXX pg 79..81 arit
XXX pg 82..86 var-len
ok XXX pg 87..90 dma
|
1-126 Unknown 127 PAL/NTSC (for CIC mode and/or HV-timer?) 128 Unknown |
BSC-1L3B-01 NTSC SRAM Battery FLASH-Slot (Itoi Shig. no Bass Tsuri No.1) SHVC-1L0N3S-20 NTSC SRAM NoBattery (Dragon Ball Z Hyper Dimension) SHVC-1L3B-11 NTSC SRAM Battery SHVC-1L5B-10 NTSC SRAM Battery SHVC-1L5B-11 NTSC SRAM Battery SHVC-1L8B-10 NTSC SRAM Battery SNSP-1L0N3S-01 PAL SRAM NoBattery (Dragon Ball Z Hyper Dimension) SNSP-1L3B-20 PAL SRAM Battery |
U1 44pin ROM (probably with full 16bit databus connected) U2 28pin SRAM (LH52A64N-YL or LH52256ANZ or 32pin LH52A512NF) U3 128pin SA1 (SA1 RF5A123) U4 8pin Battery controller MM1026AF ;\only if PCB does include a battery BATT 2pin CR2032 ;/ CN1 62pin SNES cartridge edge-connector CN2 62pin Satellaview FLASH cartridge slot ;-only on BSC-boards |
| SNES Cart SA-1 Games |
#Asahi Shinbun Rensai Kato Ichi-Ni-San Kudan Shogi Shingiru (1995) Varie (JP) Daisenryaku Expert WWII: War in Europe (1996) SystemSoftAlpha/ASCII Corp (JP) Derby Jockey 2 (1995) Muse Soft/Asmik (JP) Dragon Ball Z: Hyper Dimension (1996) TOSE/Bandai (JP) (EU) #Habu Meijin no Omoshiro Syouhi -Unverified (19xx) Hiroshi/etc. (JP) Itoi Shigesato no Bass Tsuri No. 1 (1997) HAL Laboratory/Nintendo (JP) J. League '96 Dream Stadium (1996) Hudson Soft (JP) Jikkyou Oshaberi Parodius (1995) Konami (JP) Jumpin' Derby (1996) Naxat Soft (JP) #Kakinoki Shogi (1995) ASCII Corporation (JP) Kirby Super Star (1996) HAL Laboratory/Nintendo (NA) (JP) (EU) Kirby's Dream Land 3 (1997) HAL Laboratory/Nintendo (NA) (JP) Marvelous: Mouhitotsu no Takarajima (1996) Nintendo/R&D2 (JP) Masoukishin: Super Robot Wars Gaiden: Lord of Elemental (19xx) Banpresto (JP) Masters New: Haruka Naru Augusta 3 (1995) T&E Soft (JP) Mini Yonku/4WD Shining Scorpion - Let's & Go!! (1996) KID/ASCII Corp (JP) Pachi Slot Monogatari PAL Kogyo Special -Unverified (1995) PAL/KSS (JP) Pebble Beach no Hotou: New Tournament Edition (1996) T&E Soft (JP) PGA European Tour (1996) Halestorm/THQ/Black Pearl Software (NA) PGA Tour '96 (1995) Black Pearl Software/Electronic Arts (NA) Power Rangers Zeo: Battle Racers (1996) Natsume/Bandai (NA) #Pro Kishi Simulation Kishi No Hanamichi (1996) Atlus (JP) xRin Kaihou 9 Dan No Igo Taidou -Unverified (1996) .. (JP) SD F-1 Grand Prix (and "Sample" version) (1995) Video System (JP) SD Gundam G NEXT (1995) BEC/Bandai (JP) #Shin Shogi/Syogi Club (1995) Hect/Natsu (JP) #Shogi Saikyou (1995) Magical Company (JP) (unverified?) #Shogi Saikyou 2 (1996) Magical Company (JP) #Shougi Mahjong (1995) Varie Corp (JP) Super Bomberman Panic Bomber World (1995) Hudson Soft (JP) Super Mario RPG: Legend of the Seven Stars (1996) Square/Nintendo (NA) (JP) Super Robot T.G.: The Lord Of Elemental (?) (1996) Winkysoft/Banpresto (JP) #Super Shogi 3 Kitaihei -Unverified (1995) I'Max (JP) xTaikyoku-Igo Idaten -Unverified (1995) BPS (JP) xTakemiya Masaki Kudan No Igo Taisyou -Unverified (1995) KSS (JP) |
| SNES Cart SA-1 I/O Map |
Port Side Name Reset Expl. 2200h SNES CCNT 20h SA-1 CPU Control (W) 2201h SNES SIE 00h SNES CPU Int Enable (W) 2202h SNES SIC 00h SNES CPU Int Clear (W) 2203h SNES CRV - SA-1 CPU Reset Vector Lsb (W) 2204h SNES CRV - SA-1 CPU Reset Vector Msb (W) 2205h SNES CNV - SA-1 CPU NMI Vector Lsb (W) 2206h SNES CNV - SA-1 CPU NMI Vector Msb (W) 2207h SNES CIV - SA-1 CPU IRQ Vector Lsb (W) 2208h SNES CIV - SA-1 CPU IRQ Vector Msb (W) 2209h SA-1 SCNT 00h SNES CPU Control (W) 220Ah SA-1 CIE 00h SA-1 CPU Int Enable (W) 220Bh SA-1 CIC 00h SA-1 CPU Int Clear (W) 220Ch SA-1 SNV - SNES CPU NMI Vector Lsb (W) 220Dh SA-1 SNV - SNES CPU NMI Vector Msb (W) 220Eh SA-1 SIV - SNES CPU IRQ Vector Lsb (W) 220Fh SA-1 SIV - SNES CPU IRQ Vector Msb (W) 2210h SA-1 TMC 00h H/V Timer Control (W) 2211h SA-1 CTR - SA-1 CPU Timer Restart (W) 2212h SA-1 HCNT - Set H-Count Lsb (W) 2213h SA-1 HCNT - Set H-Count Msb (W) 2214h SA-1 VCNT - Set V-Count Lsb (W) 2215h SA-1 VCNT - Set V-Count Msb (W) 2216h - - - - 2220h SNES CXB 00h MMC Bank C - Hirom C0h-CFh / LoRom 00h-1Fh (W) 2221h SNES DXB 01h MMC Bank D - Hirom D0h-DFh / LoRom 20h-3Fh (W) 2222h SNES EXB 02h MMC Bank E - Hirom E0h-EFh / LoRom 80h-9Fh (W) 2223h SNES FXB 03h MMC Bank F - Hirom F0h-FFh / LoRom A0h-BFh (W) 2224h SNES BMAPS 00h SNES CPU BW-RAM Mapping to 6000h-7FFFh (W) 2225h SA-1 BMAP 00h SA-1 CPU BW-RAM Mapping to 6000h-7FFFh (W) 2226h SNES SBWE 00h SNES CPU BW-RAM Write Enable (W) 2227h SA-1 CBWE 00h SA-1 CPU BW-RAM Write Enable (W) 2228h SNES BWPA FFh BW-RAM Write-Protected Area (W) 2229h SNES SIWP 00h SNES I-RAM Write-Protection (W) 222Ah SA-1 CIWP 00h SA-1 I-RAM Write-Protection (W) 222Bh - - - - 2230h SA-1 DCNT 00h DMA Control (W) 2231h Both CDMA 00h Character Conversion DMA Parameters (W) 2232h Both SDA - DMA Source Device Start Address Lsb (W) 2233h Both SDA - DMA Source Device Start Address Mid (W) 2234h Both SDA - DMA Source Device Start Address Msb (W) 2235h Both DDA - DMA Dest Device Start Address Lsb (W) 2236h Both DDA - DMA Dest Device Start Address Mid (Start/I-RAM) (W) 2237h Both DDA - DMA Dest Device Start Address Msb (Start/BW-RAM)(W) 2238h SA-1 DTC - DMA Terminal Counter Lsb (W) 2239h SA-1 DTC - DMA Terminal Counter Msb (W) 223Ah - - - - 223Fh SA-1 BBF 00h BW-RAM Bit Map Format for 600000h-6FFFFFh (W) 224xh SA-1 BRF - Bit Map Register File (2240h..224Fh) (W) 2250h SA-1 MCNT 00h Arithmetic Control (W) 2251h SA-1 MA - Arithmetic Param A Lsb (Multiplicand/Dividend) (W) 2252h SA-1 MA - Arithmetic Param A Msb (Multiplicand/Dividend) (W) 2253h SA-1 MB - Arithmetic Param B Lsb (Multiplier/Divisor) (W) 2254h SA-1 MB - Arithmetic Param B Msb (Multiplier/Divisor)/Start (W) 2255h - - - - 2258h SA-1 VBD - Variable-Length Bit Processing (W) 2259h SA-1 VDA - Var-Length Bit Game Pak ROM Start Address Lsb (W) 225Ah SA-1 VDA - Var-Length Bit Game Pak ROM Start Address Mid (W) 225Bh SA-1 VDA - Var-Length Bit Game Pak ROM Start Address Msb & Kick 225Ch - - - - 2261h - - - Unknown/Undocumented (Jumpin Derby writes 00h) 2262h - - - Unknown/Undocumented (Super Bomberman writes 00h) |
Port Side Name Reset Expl. 2300h SNES SFR SNES CPU Flag Read (R) 2301h SA-1 CFR SA-1 CPU Flag Read (R) 2302h SA-1 HCR H-Count Read Lsb / Do Latching (R) 2303h SA-1 HCR H-Count Read Msb (R) 2304h SA-1 VCR V-Count Read Lsb (R) 2305h SA-1 VCR V-Count Read Msb (R) 2306h SA-1 MR Arithmetic Result, bit0-7 (Sum/Product/Quotient) (R) 2307h SA-1 MR Arithmetic Result, bit8-15 (Sum/Product/Quotient) (R) 2308h SA-1 MR Arithmetic Result, bit16-23 (Sum/Product/Remainder) (R) 2309h SA-1 MR Arithmetic Result, bit24-31 (Sum/Product/Remainder) (R) 230Ah SA-1 MR Arithmetic Result, bit32-39 (Sum) (R) 230Bh SA-1 OF Arithmetic Overflow Flag (R) 230Ch SA-1 VDP Variable-Length Data Read Port Lsb (R) 230Dh SA-1 VDP Variable-Length Data Read Port Msb (R) 230Eh SNES VC Version Code Register (R) |
| SNES Cart SA-1 Interrupt/Control on SNES Side |
0-3 Message from SNES to SA-1 (4bit value) 4 NMI from SNES to SA-1 (0=No Change?, 1=Interrupt) 5 Reset from SNES to SA-1 (0=No Reset, 1=Reset) 6 Wait from SNES to SA-1 (0=No Wait, 1=Wait) 7 IRQ from SNES to SA-1 (0=No Change?, 1=Interrupt) |
0-4 Not used (should be 0) 5 IRQ Enable (Character conversion DMA) (0=Disable, 1=Enable) 6 Not used (should be 0) 7 IRQ Enable (from SA-1) (0=Disable, 1=Enable) |
0-4 Not used (should be 0) 5 IRQ Acknowledge (Character conversion DMA) (0=No change, 1=Clear) 6 Not used (should be 0) 7 IRQ Acknowledge (from SA-1) (0=No change, 1=Clear) |
0-3 Message from SA-1 to SNES (4bit value) (same as 2209h.Bit0-3) 4 NMI Vector for SNES (0=ROM FFExh, 1=Port 220Ch) (same as 2209h.Bit4) 5 IRQ from Character Conversion DMA (0=None, 1=Interrupt) (ready-to-do-DMA) 6 IRQ Vector for SNES (0=ROM FFExh, 1=Port 220Eh) (same as 2209h.Bit6) 7 IRQ from SA-1 to SNES (0=None, 1=Interrupt) (triggered by 2209h.Bit7) |
0-7 SA-1 Chip Version |
| SNES Cart SA-1 Interrupt/Control on SA-1 Side |
0-3 Message from SA-1 to SNES (4bit value) 4 NMI Vector for SNES (0=ROM FFEAh, 1=Port 220Ch) 5 Not used (should be 0) 6 IRQ Vector for SNES (0=ROM FFEEh, 1=Port 220Eh) 7 IRQ from SA-1 to SNES (0=No Change?, 1=Interrupt) |
0-3 Not used (should be 0) 4 NMI Enable (from SNES) (0=Disable, 1=Enable) 5 IRQ Enable (from DMA) (0=Disable, 1=Enable) 6 IRQ Enable (from Timer) (0=Disable, 1=Enable) 7 IRQ Enable (from SNES) (0=Disable, 1=Enable) |
0-3 Not used (should be 0) 4 NMI Acknowledge (from SNES) (0=No change, 1=Clear) 5 IRQ Acknowledge (from DMA) (0=No change, 1=Clear) 6 IRQ Acknowledge (from Timer) (0=No change, 1=Clear) 7 IRQ Acknowledge (from SNES) (0=No change, 1=Clear) |
0-3 Message from SNES to SA-1 (4bit value) (same as 2200h.Bit0-3) 4 NMI from SNES to SA-1 (0=No, 1=Interrupt) (triggered by 2200h.Bit4) 5 IRQ from DMA to SA-1 (0=No, 1=Interrupt) (triggered by DMA-finished) 6 IRQ from Timer to SA-1 (0=No, 1=Interrupt) (triggered by Timer) 7 IRQ from SNES to SA-1 (0=No, 1=Interrupt) (triggered by 2200h.Bit7) |
| SNES Cart SA-1 Timer |
0 HEN ;\Enables Interrupt or so ? 1 VEN ;/ 2-6 Not used (should be 0) 7 Timer Mode (0=HV Timer, 1=Linear Timer) |
0-7 Don't care (writing any value restarts the timer at 0) |
0-8 H-Counter (9bit) 9-15 Not used (should be 0) |
0-8 V-Counter (9bit) 9-15 Not used (should be 0) |
| SNES Cart SA-1 Memory Control |
0-2 Select 1Mbyte ROM-Bank (0..7) 3-6 Not used (should be 0) 7 Map 1Mbyte ROM-Bank (0=To HiRom, 1=To LoRom and HiRom) |
0-4 Select 8Kbyte BW-RAM Block for mapping to 6000h-7FFFh (0..31) 5-7 Not used (should be 0) |
0-6 Select 8Kbyte BW-RAM Block for mapping to 6000h-7FFFh (0..31 or 0..127) 7 Select source (0=Normal/Bank 40h..43h, 1=Bitmap/Bank 60h..6Fh) |
0-6 Not used (should be "..") (whatever ".." means, maybe "0"?) 7 Format (0=4bit, 1=2bit) |
600000h.Bit0-1 or Bit0-3 mirrors to 400000h.Bit0-1 or 400000h.Bit0-3 600001h.Bit0-1 or Bit0-3 mirrors to 400000h.Bit2-3 or 400000h.Bit4-7 600002h.Bit0-1 or Bit0-3 mirrors to 400000h.Bit4-5 or 400001h.Bit0-3 600003h.Bit0-1 or Bit0-3 mirrors to 400000h.Bit6-7 or 400001h.Bit4-7 etc. |
0-6 Not used (should be 0) 7 Write Enable BW-RAM (0=Protect, 1=Write Enable) |
0-3 Select size of Write-Protected Area ("256 SHL N" bytes)
4-7 Not used (should be 0)
|
0-7 Write enable flags for eight 256-byte chunks (0=Protect, 1=Write Enable) |
| SNES Cart SA-1 DMA Transfers |
0-1 DMA Source Device (0=ROM, 1=BW-RAM, 2=I-RAM, 3=Reserved);\for 2 DMA Destination Device (0=I-RAM, 1=BW-RAM) ;/Normal DMA 3 Not used (should be 0) 4 DMA Char Conversion Type (0=Type 2/Semi-Automatic, 1=Type 1/Automatic) 5 DMA Char Conversion Enable (0=Normal DMA, 1=Character Conversion DMA) 6 DMA Priority (0=SA-1 CPU Priority, 1=DMA Priority) ;<-- for Normal DMA 7 DMA Enable (0=Disable, 1=Enable... and Clear Parameters?) |
0-1 Color Depth (0=8bit, 1=4bit, 2=2bit, 3=Reserved) 2-4 Virtual VRAM Width (0..5 = 1,2,4,8,16,32 characters) (6..7=Reserved) 5-6 Not used (should be 0) 7 Terminate Character Conversion 1 (0=No change, 1=Terminate DMA) |
0-23 24bit Memory Address (translated to 23bit ROM Offset via 2220h..2223h) 0-17 18bit BW-RAM Offset 0-10 11bit I-RAM Offset |
0-17 BW-RAM Offset (transfer starts after writing 2237h) 0-10 I-RAM Offset (transfer starts after writing 2236h) (2237h is unused) |
0-15 DMA Transfer Length in bytes (1..65535) (0=Reserved/unknown) |
0-1 2bit pixel (bit 2-7=unused) 0-3 4bit pixel (bit 4-7=unused) 0-7 8bit pixel |
ROM --> I-RAM 10.74MHz ROM --> BW-RAM 5.37MHz BW-RAM --> I-RAM 5.37MHz I-RAM --> BW-RAM 5.37MHz |
Set DCNT (select source/dest/prio/enable) Set SDA (set source offset) Set DTC (set transfer length) Set DDA (set destination offset, and start transfer) If desired, wait for CFR.Bit5 (DMA completion interrupt) |
| SNES Cart SA-1 Character Conversion |
Conversion DMA-Transfer Source / Pixel-Format Type 1 Automatic BW-RAM, Packed Pixels, Bitmap Pixel Array Type 2 Semi-Automatic CPU, Unpacked Pixels, 8x8 Pixel Tiles |
I-RAM buffer 32/64/128 bytes (two 8x8 tiles at 2bit/4bit/8bit color depth) |
Set DCNT (Port 2230h) set to Char Conversion Type 1 (...and no DMA-enable?) |
Set SDA (Port 2232h-2234h)=BW-RAM offset, align by (bytes/char)*(chars/line)
Set CDMA (Port 2231h) = store bits/pixel and chars/line
Set DDA (Port 2235h-2236h)=I-RAM offset, align (bytes/char)*2 (2237h=unused)
Wait for SFR.Bit5 (Port 2300h) Char_DMA_IRQ (=first character available)
Launch SNES-DMA via Port 43xxh from "Virtual BW-RAM?" to PPU-VRAM
(this can transfer the WHOLE bitmap in one pass)
|
Set CDMA.Bit7=1 (Port 2231h) - terminate SA-1 DMA
(that stops writing to I-RAM on SA-1 side)
(and stops tile-data to be mapped to 400000h-43FFFFh on SNES-side)
|
Set DCNT (Port 2230h) set to Char Conversion Type 2 and set DMA-enable Set CDMA (Port 2231h) = store bits/pixel (chars/line is not used) Set DDA (Port 2235h-2236h)=I-RAM offset, align (bytes/char)*2 (2237h=unused) |
for y=0 to 7, for x=0 to 7, [2240h+x+(y and 1)]=pixel(x,y), next x,y On SNES side: Transfer DMA from 1st/2nd I-RAM buffer half to VRAM or WRAM |
Set DCNT.Bit7=0 (Port 2230h) - disable DMA |
| SNES Cart SA-1 Arithmetic Maths |
0-1 Arithmetic Mode (0=Multiply, 1=Divide, 2=MultiplySum, 3=Reserved) 2-7 Not used (should be "..") (whatever ".." means, maybe "0"?) |
0-15 SIGNED multiplicand or dividend (that is, both are signed) |
0-15 SIGNED multiply parameter, or UNSIGNED divisor |
32bit Multiply Result (SIGNED) 40bit Multiply/Sum (SIGNED) 16bit Division Result (SIGNED) 16bit Division Remainder (UNSIGNED !!!) |
0-6 Not used (reportedly "..") (whatever ".." means, maybe 0 or open bus?) 7 Arithmetic Sum Overflow Flag (0=No overflow, 1=Overflow) |
| SNES Cart SA-1 Variable-Length Bit Processing |
0-3 Data Length (1..15=1..15 bits, or 0=16 bits) 4-6 Not used (should be "..") (whatever ".." means, maybe "0"?) 7 Data Read Mode (0=Fixed Mode, 1=Auto-increment) |
0-23 Game Pak ROM Address |
0-15 Data |
Are the selected bits located in MSBs or LSBs? Are the other bits set to zero? To next/prev values? Sign-expanded?? |
| SNES Cart GSU-n (programmable RISC CPU) (aka Super FX/Mario Chip) (10 games) |
| SNES Cart GSU-n List of Games, Chips, and PCB versions |
Dirt Racer (1994) MotiveTime/Elite Systems (EU) Dirt Trax FX (1995) Sculptured Software/Acclaim Entertainment (NA) Powerslide (cancelled, but unfinished prototype leaked) Elite Systems (EU) Star Fox / Starwing (1993) Argonaut/Nintendo EAD (NA) (JP) (EU) Star Fox / Starwing: Competition Edition (demo version) (1993) (NA) (EU) Stunt Race FX / Wild Trax (1994) Argonaut/Nintendo EAD (NA) (JP) (EU) Vortex (1994) Argonaut Games/Electro Brain (NA), Pack-In-Video (JP) |
Doom (1996) Sculptured Software/Williams (NA), Imagineer (JP), Ocean (EU) Super Mario World 2: Yoshi's Island (1995) Nintendo EAD (NA) (JP) (EU) Winter Gold / FX Skiing (1997) Funcom/Nintendo (NA) (EU) Star Fox 2 (cancelled, but near-finished Beta version leaked into internet) |
FX Fighter (Beta) (cancelled) Argonaut Games/GTE Entertainment (NA) (EU) Comanche (cancelled) Nova Logic (NA) Super Mario FX (cancelled) Nintendo EAD |
MC1 - 100pin - A/N Inc. Nintendo Mario Chip 1 (reportedly "FX-chip 1") GSU1 - 100pin - A/N Inc. Nintendo Super FX 1 (10.74MHz RISC-like CPU) GSU1A - 100pin - A/N Inc. Nintendo Super FX 1 GSU2 - 112pin - A/N Inc. Nintendo Super FX 2 (as above, but 21MHz) GSU2-SP1 - 112pin - A/N Inc. Nintendo Super FX 2 (as above, but 21MHz) |
SHVC-1C0N Mario Chip 1 Star Fox (Blob) SHVC-1C0N5S-01 Mario Chip 1 Star Fox (SMD) SHVC-1CA0N5S-01 GSU-1 Dirt Racer & Vortex SHVC-1CA0N6S-01 GSU-1 Dirt Trax FX SHVC-1CA6B-01 GSU-1 Battery Stunt Race FX SHVC-1CB0N7S-01 GSU-2 Doom SHVC-1CB5B-01 GSU-2 Battery Super Mario World 2: Yoshi's Island SHVC-1CB5B-20 GSU-2-SP1 Battery Super Mario World 2: Yoshi's Island SHVC-1RA2B6S-01 GSU1A Batt+Eprom Powerslide (prototype board) GS 0871-102 Mario Chip 1 Super Famicom Box PSS61 multi-game-cart |
| SNES Cart GSU-n Memory Map |
00-3F/80-BF:3000-347F GSU I/O Ports 00-1F/80-9F:8000-FFFF Game Pak ROM in LoRom mapping (1Mbyte max) 60-7D/E0-FF:0000-FFFF Game Pak RAM with mirrors (64Kbyte max?, usually 32K) Other Addresses Open Bus |
00-3F/80-BF:3000-34FF? GSU I/O Ports 00-3F/80-BF:6000-7FFF Mirror of 70:0000-1FFF (ie. FIRST 8K of Game Pak RAM) 00-3F/80-BF:8000-FFFF Game Pak ROM in LoRom mapping (1Mbyte max?) 40-5F/C0-DF:0000-FFFF Game Pak ROM in HiRom mapping (mirror of above) 70-71/F0-F1:0000-FFFF Game Pak RAM with mirrors (64Kbyte max?, usually 32K) 78-7x/F8-Fx:0000-FFFF Unknown (maybe Additional "Backup" RAM like GSU2) Other Addresses Open Bus |
00-3F/80-BF:3000-34FF GSU I/O Ports 00-3F/80-BF:6000-7FFF Mirror of 70:0000-1FFF (ie. FIRST 8K of Game Pak RAM) 00-3F:8000-FFFF Game Pak ROM in LoRom mapping (2Mbyte max) 40-5F:0000-FFFF Game Pak ROM in HiRom mapping (mirror of above) 70-71:0000-FFFF Game Pak RAM (128Kbyte max, usually 32K or 64K) 78-79:0000-FFFF Additional "Backup" RAM (128Kbyte max, usually none) 80-BF:8000-FFFF Additional "CPU" ROM LoROM (2Mbyte max, usually none) C0-FF:0000-FFFF Additional "CPU" ROM HiROM (4Mbyte max, usually none) Other Addresses Open Bus |
00-3F:0000-7FFF Mirror of LoROM at 00-3F:8000-FFFF (for "GETB R15" vectors) 00-3F:8000-FFFF Game Pak ROM in LoRom mapping (2Mbyte max) 40-5F:0000-FFFF Game Pak ROM in HiRom mapping (mirror of above 2Mbyte) 70-71:0000-FFFF Game Pak RAM (128Kbyte max, usually 32K or 64K) PBR:0000-01FF Code-Cache (when having manually stored opcodes in it) |
Any Address Exception Vectors [xxx0h]=0100h - [xxx2h]=0100h - [xxx4h]=0104h [FFE4h]=0104h COP Vector in 65C816 mode (COP opcode) [xxx6h]=0100h [FFE6h]=0100h BRK Vector in 65C816 mode (BRK opcode) [xxx8h]=0100h [FFE8h]=0100h ABT Vector in 65C816 mode (Not used in SNES) [xxxAh]=0108h [FFEAh]=0108h NMI Vector in 65C816 mode (Vblank) [xxxCh]=0100h - [xxxEh]=010Ch [FFEEh]=010Ch IRQ Vector in 65C816 mode (H/V-IRQ & GSU-STOP) |
[FFD5h]=20h Set to "Slow/LoROM" (although both LoROM/HiROM works) [FFD6h]=13h..1Ah Chipset = GSUn (plus battery present/absent info) [FFD8h]=00h Normal SRAM Size (None) (always use the Expansion entry) [FFBDh]=05h..06h Expansion RAM Size (32Kbyte and 64Kbyte exist) Caution: Starfox/Star Wing, Powerslide, and Starfox 2 do not have extended headers (and thereby no [FFBDh] entry). RAM Size for Starfox/Starwing is 32Kbytes, RAM Size for Powerslide and Starfox 2 is unknown. |
SNES bus (for forwarding ROM/RAM access to SNES) ROM bus (for GSU opcode fetches, GETxx reads, and SNES reads) RAM bus (for GSU opcode fetches, LOAD/STORE/PLOT/RPIX, and SNES access) Code cache bus (for GSU opcode fetches only) (and SNES I/O via 3100h..32FFh) |
| SNES Cart GSU-n I/O Map |
3000h-3001h R0 Default source/destination register (Sreg/Dreg) (R/W) 3002h-3003h R1 PLOT opcode: X coordinate (0000h on reset) (R/W) 3004h-3005h R2 PLOT opcode: Y coordinate (0000h on reset) (R/W) 3006h-3007h R3 General purpose (R/W) 3008h-3009h R4 LMULT opcode: lower 16bits of result (R/W) 300Ah-300Bh R5 General purpose (R/W) 300Ch-300Dh R6 LMULT and FMULT opcodes: multiplier (R/W) 300Eh-300Fh R7 MERGE opcode (R/W) 3010h-3011h R8 MERGE opcode (R/W) 3012h-3013h R9 General purpose (R/W) 3014h-3015h R10 General purpose (conventionally stack pointer) (R/W) 3016h-3017h R11 LINK opcode: destination (R/W) 3018h-3019h R12 LOOP opcode: counter (R/W) 301Ah-301Bh R13 LOOP opcode: address (R/W) 301Ch-301Dh R14 GETxx opcodes: Game Pak ROM Address Pointer (R/W) 301Eh-301Fh R15 Program Counter, writing MSB starts GSU operation (R/W) 3020h-302Fh - 3030h-3031h SFR Status/Flag Register (R) (Bit1-5: R/W) 3032h - 3033h BRAMR Back-up RAM Register (W) 3034h PBR Program Bank Register (8bit, bank 00h..FFh) (R/W) 3035h - 3036h ROMBR Game Pak ROM Bank Register (8bit, bank 00h..FFh) (R) 3037h CFGR Config Register (W) 3038h SCBR Screen Base Register (8bit, in 1Kbyte units) (W) 3039h CLSR Clock Select Register (W) 303Ah SCMR Screen Mode Register (W) 303Bh VCR Version Code Register (R) 303Ch RAMBR Game Pak RAM Bank Register (1bit, bank 70h/71h) (R) 303Dh - 303Eh-303Fh CBR Cache Base Register (in upper 12bit; lower 4bit=unused) (R) N/A COLR Color Register (COLOR,GETC,PLOT opcodes) N/A POR Plot Option Register (CMODE opcode) N/A Sreg/Dreg Memorized TO/FROM Prefix Selections N/A ROM Read Buffer (1 byte) (prefetched from [ROMBR:R14]) N/A RAM Write Buffer (1 byte/word) N/A RAM Address (1 word, or word+rambr?) (for SBK opcode) N/A Pixel Write Buffer (two buffers for one 8-pixel row each) 3100h-32FFh Cache RAM |
3000h..301Fh 20h R0-R15 3020h..302Fh 10h open bus 3030h..3031h 2 status reg 3032h..303Fh 0Eh mirrors of status reg (except 303Bh=01h=VCR) 3040h..305Fh 20h mirror of R0-R15 3060h..307Fh 20h mirrors of status reg (except 307Bh=01h=VCR) 3080h..30FFh 80h open bus 3100h..32FFh 200h cache 3300h..332Fh 30h open bus 3330h..333Fh 10h mirrors of status reg (except 333Bh=01h=VCR) 3340h..335Fh 20h mirror of R0-R15 3360h..337Fh 20h mirrors of status reg (except 337Bh=01h=VCR) 3380h..33FFh 80h open bus 3400h..342Fh 30h open bus 3430h..343Fh 10h mirrors of status reg (except 343Bh=01h=VCR) 3440h..345Fh 20h mirror of R0-R15 3460h..347Fh 20h mirrors of status reg (except 347Bh=01h=VCR) 3480h..3FFFh B80h open bus |
3000h..301Fh 20h R0-R15 3020h..302Fh 10h mirror of 3030h..303Fh 3030h..303Fh 10h status regs (unused or write-only ones return 00h) 3040h..30FFh C0h mirrors of 3000h..303Fh 3100h..32FFh 200h cache 3300h..34FFh 200h mirrors of 3000h..303Fh 3500h..3FFFh B00h open-bus |
| SNES Cart GSU-n General I/O Ports |
0 - Always 0 (R) 1 Z Zero Flag (0=NotZero/NotEqual, 1=Zero/Equal) (R/W) 2 CY Carry Flag (0=Borrow/NoCarry, 1=Carry/NoBorrow) (R/W) 3 S Sign Flag (0=Positive, 1=Negative) (R/W) 4 OV Overflow Flag (0=NoOverflow, 1=Overflow) (R/W) 5 GO GSU is running (cleared on STOP) (can be forcefully=0 via 3030h)(R/W) 6 R ROM[R14] Read (0=No, 1=Reading ROM via R14 address) (R) 7 - Always 0 (R) 8 ALT1 Prefix Flag ;\for ALT1,ALT2,ALT3 prefixes (R) 9 ALT2 Prefix Flag ;/ (R) 10 IL Immediate lower 8bit flag ;\Unknown, probably set/reset internally 11 IH Immediate upper 8bit flag ;/when processing opcodes with imm operands 12 B Prefix Flag ;-for WITH prefix (used by MOVE/MOVES opcodes) 13 - Always 0 (R) 14 - Always 0 (R) 15 IRQ Interrupt Flag (reset on read, set on STOP) (also set if IRQ masked?) |
0 BRAM Flag (0=Disable/Protect, 1=Enable) 1-7 Not used (should be zero) |
0-7 GSU Chip Version (01h..0xh ?) |
0-4 - Not used (should be zero) 5 MS0 Multiplier Speed Select (0=Standard, 1=High Speed Mode) 6 - Not used (should be zero) 7 IRQ Interrupt Mask (0=Trigger IRQ on STOP opcode, 1=Disable IRQ) |
0 CLS Clock Select (0=10.7MHz, 1=21.4MHz) 1-7 - Not used (should be zero) |
| SNES Cart GSU-n Bitmap I/O Ports |
0-7 Screen Base in 1K-byte Units (Base = 700000h+N*400h) |
0-1 MD0-1 Color Gradient (0=4-Color, 1=16-Color, 2=Reserved, 3=256-Color) 2 HT0 Screen Height (0=128-Pixel, 1=160-Pixel, 2=192-Pixel, 3=OBJ-Mode) 3 RAN Game Pak RAM bus access (0=SNES, 1=GSU) 4 RON Game Pak ROM bus access (0=SNES, 1=GSU) 5 HT1 Screen Height (MSB of HT0 bit) 6-7 - Not used (should be zero) |
256x128 pixels 256x160 pixels 256x192 pixels OBJ Mode 256x256 pixel 000 010 .. 1F0 | 000 014 .. 26C | 000 018 .. 1E8 | 000 .. 00F 100 .. 10F 001 011 .. 1F1 | 001 015 .. 26D | 001 019 .. 1E9 | .. .. .. .. .. .. .. .. .. .. | .. .. .. .. | .. .. .. .. | 0F0 .. 0FF 1F0 .. 1FF .. .. .. .. | .. .. .. .. | .. .. .. .. | 200 .. 20F 300 .. 30F 00E 01E .. 1FE | 012 026 .. 27E | 016 02E .. 2FE | .. .. .. .. .. .. 00F 01F .. 1FF | 013 027 .. 27F | 017 02F .. 2FF | 2F0 .. 2FF 3F0 .. 3FF |
Height 128 --> (X/8)*10h + (Y/8) Height 160 --> (X/8)*14h + (Y/8) Height 192 --> (X/8)*18h + (Y/8) OBJ Mode --> (Y/80h)*200h + (X/80h)*100h + (Y/8 AND 0Fh)*10h + (X/8 AND 0Fh) |
4 Color Mode TileNo*10h + SCBR*400h + (Y AND 7)*2 16 Color Mode TileNo*20h + SCBR*400h + (Y AND 7)*2 256 Color Mode TileNo*40h + SCBR*400h + (Y AND 7)*2 |
0-7 CD0-7 Color Data |
0 PLOT Transparent (0=Do Not Plot Color 0, 1=Plot Color 0) 1 PLOT Dither (0=Normal, 1=Dither; 4/16-color mode only) 2 COLOR/GETC High-Nibble (0=Normal, 1=Replace incoming LSB by incoming MSB) 3 COLOR/GETC Freeze-High (0=Normal, 1=Write-protect COLOR.MSB) 4 OBJ Mode (0=Normal, 1=Force OBJ mode; ignore SCMR.HT0/HT1) 5-7 Not used (should be zero) |
<------- COLOR/GETC TO COLOR -------> <------- PLOT COLOR TO RAM -------->
______ __________ ______
Bit7-4 --+--|Freeze|- - - - - ->| |---+------------->| |
| |POR.3 | | COLOR | | |Transp|
| |______| ______ | _ _ _ _ | | ______ |POR.0 |--> RAM
'---------->|Nibble| | | '-->|Dither| | |
|POR.2 |-->| Register | |POR.1 |-->| |
Bit3-0 ------------->|______| |__________|------>|______| |______|
|
| SNES Cart GSU-n CPU MOV Opcodes |
Opcode Clks Flags Native Nocash 2s 1d 2 000---- MOVE Rd,Rs mov Rd,Rs ;Rd=Rs 2d Bs 2 000vs-z MOVES Rd,Rs movs Rd,Rs ;Rd=Rs (with flags, OV=bit7) An pp 2 000---- IBT Rn,#pp mov Rn,pp ;Rn=SignExpanded(pp) Fn xx yy 3 000---- IWT Rn,#yyxx mov Rn,yyxx ;Rn=yyxx |
EF 1-6 000---- GETB movb Rd,[romb:r14] ;hi=zero-expanded 3D EF 2-6 000---- GETBH movb Rd.hi,[romb:r14] ;lo=unchanged 3E EF 2-6 000---- GETBL movb Rd.lo,[romb:r14] ;hi=unchanged 3F EF 2-6 000---- GETBS movbs Rd,[romb:r14] ;hi=sign-expanded |
3D 4n 6 000---- LDB (Rn) movb Rd,[ramb:Rn] ;Rd=Byte[..] ;n=0..11 4n 7 000---- LDW (Rn) mov Rd,[ramb:Rn] ;Rd=Word[..] ;n=0..11 3D Fn lo hi 11 000---- LM Rn,(hilo) mov Rn,[ramb:hilo] ;Rn=Word[..] 3D An kk 10 000---- LMS Rn,(yy) mov Rn,[ramb:kk*2] ;Rn=Word[..] 3D 3n 2-5 000---- STB (Rn) movb [ramb:Rn],Rs ;Byte[..]=Rs ;n=0..11 3n 1-6 000---- STW (Rn) mov [ramb:Rn],Rs ;Word[..]=Rs ;n=0..11 3E Fn lo hi 4-9 000---- SM (hilo),Rn mov [ramb:hilo],Rn ;Word[..]=Rn 3E An kk 3-8 000---- SMS (yy),Rn mov [ramb:kk*2],Rn ;Word[..]=Rn 90 1-6 000---- SBK mov [ram:bk],Rs ;Word[LastRamAddr]=Rs |
3E DF 2 000---- RAMB movb ramb,Rs ;RAMBR=Rs & 01h ;RAM Bank 3F DF 2 000---- ROMB movb romb,Rs ;ROMBR=Rs & FFh ;ROM Bank |
3D 4E 2 000---- CMODE movb por,Rs ;=Rs&1Fh 4E 1 000---- COLOR movb color,Rs ;=Rs&FFh DF 1-6 000---- GETC movb color,[romb:r14] ;=[membyte] 4C 1-48 000---- PLOT plot [r1,r2],color ;Pixel=COLR, R1=R1+1 3D 4C 20-74 000-s-z RPIX rpix Rd,[r1,r2] ;Rd=Pixel? FlushPixCache |
| SNES Cart GSU-n CPU ALU Opcodes |
Opcode Clks Flags Native Nocash 5n 1 000vscz ADD Rn add Rd,Rs,Rn ;Rd=Rs+Rn 3E 5n 2 000vscz ADD #n add Rd,Rs,n ;Rd=Rs+n 3D 5n 2 000vscz ADC Rn adc Rd,Rs,Rn ;Rd=Rs+Rn+Cy 3F 5n 2 000vscz ADC #n adc Rd,Rs,n ;Rd=Rs+n+Cy 6n 1 000vscz SUB Rn sub Rd,Rs,Rn ;Rd=Rs-Rn 3E 6n 2 000vscz SUB #n sub Rd,Rs,n ;Rd=Rs-n 3D 6n 2 000vscz SBC Rn sbc Rd,Rs,Rn ;Rd=Rs-Rn-(Cy XOR 1) 3F 6n 2 000vscz CMP Rn cmp Rs,Rn ;Rs-Rn 7n 1 000-s-z AND Rn and Rd,Rs,Rn ;Rd=Rs AND Rn ;n=1..15! 3E 7n 2 000-s-z AND #n and Rd,Rs,n ;Rd=Rs AND n ;n=1..15! 3D 7n 2 000-s-z BIC Rn bic Rd,Rs,Rn ;Rd=Rs AND NOT Rn ;n=1..15! 3F 7n 2 000-s-z BIC #n bic Rd,Rs,n ;Rd=Rs AND NOT n ;n=1..15! Cn 1 000-s-z OR Rn or Rd,Rs,Rn ;Rd=Rs OR Rn ;n=1..15! 3E Cn 2 000-s-z OR #n or Rd,Rs,n ;Rd=Rs OR n ;n=1..15! 3D Cn (?) 2 000-s-z XOR Rn xor Rd,Rs,Rn ;Rd=Rs XOR Rn ;n=1..15? 3F Cn (?) 2 000-s-z XOR #n xor Rd,Rs,n ;Rd=Rs XOR n ;n=1..15? 4F 1 000-s-z NOT not Rd,Rs ;Rd=Rs XOR FFFFh |
03 1 000-0cz LSR shr Rd,Rs,1 ;Rd=Rs SHR 1 96 1 000-scz ASR sar Rd,Rs,1 ;Rd=Rs SAR 1 04 1 000-scz ROL rcl Rd,Rs,1 ;Rd=Rs RCL 1 ;\through 97 1 000-scz ROR rcr Rd,Rs,1 ;Rd=Rs RCR 1 ;/carry 3D 96 2 000-scz DIV2 div2 Rd,Rs ;Rd=Rs SAR 1, Rd=0 if Rs=-1 Dn 1 000-s-z INC Rn inc Rn ;Rn=Rn+1 ;n=0..14! En 1 000-s-z DEC Rn dec Rn ;Rn=Rn-1 ;n=0..14! |
4D 1 000-s-z SWAP ror Rd,Rs,8 ;Rd=Rs ROR 8 95 1 000-s-z SEX movbs Rd,Rs ;Rd=SignExpanded(Rs&FFh) 9E 1 000-s-z LOB and Rd,Rs,0FFh ;Rd=Rs AND FFh ;SF=Bit7 C0 1 000-s-z HIB shr Rd,Rs,8 ;Rd=Rs SHR 8 ;SF=Bit7 70 1 000xxxx MERGE merge Rd,r7,r8 ;Rd=R7&FF00 + R8/100h |
S = set if (result AND 8080h) is nonzero V = set if (result AND C0C0h) is nonzero C = set if (result AND E0E0h) is nonzero Z = set if (result AND F0F0h) is nonzero (not set when zero!) |
9F 4,8 000-scz FMULT smulw Rd:nul,Rs,r6 ;Rd=signed(Rs*R6/10000h) 3D 9F 5,9 000-scz LMULT smulw Rd:R4,Rs,R6 ;Rd:R4=signed(Rs*R6) 8n 1,2 000-s-z MULT Rn smulb Rd,Rs,Rn ;Rd=signed(RsLsb*RnLsb) 3E 8n 2,3 000-s-z MULT #n smulb Rd,Rs,n ;Rd=signed(RsLsb*0..15) 3D 8n 2,3 000-s-z UMULT Rn umulb Rd,Rs,Rn ;Rd=unsigned(RsLsb*RnLsb) 3F 8n (?) 2,3 000-s-z UMULT #n umulb Rd,Rs,n ;Rd=unsigned(RsLsb*0..15) |
| SNES Cart GSU-n CPU JMP and Prefix Opcodes |
Opcode Clks Flags Native Nocash 00 1 000---- STOP stop ;SFR.GO=0, SFR.IRQ=1, R15=$+2 01 1 000---- NOP nop ;NOP (often used as dummy after jump) 02 1* 000---- CACHE cache ;IF CBR<>PC&FFF0 then CBR=PC&FFF0 |
Opcode Clks Flags Native Nocash 05 nn 2 ------- BRA addr jr addr ;Always, R15=R15+signed(nn) 06 nn 2 ------- BGE addr jge addr ;If (S XOR V)=0 then .. 07 nn 2 ------- BLT addr jl addr ;If (S XOR V)=1 then .. 08 nn 2 ------- BNE addr jne addr ;If ZF=0 then R15=R15+signed(nn) 09 nn 2 ------- BEQ addr je addr ;If ZF=1 then R15=R15+signed(nn) 0A nn 2 ------- BPL addr jns addr ;If SF=0 then R15=R15+signed(nn) 0B nn 2 ------- BMI addr js addr ;If SF=1 then R15=R15+signed(nn) 0C nn 2 ------- BCC addr jnc addr ;If CY=0 then R15=R15+signed(nn) 0D nn 2 ------- BCS addr jc addr ;If CY=1 then R15=R15+signed(nn) 0E nn 2 ------- BVC addr jno addr ;If OV=0 then R15=R15+signed(nn) 0F nn 2 ------- BVS addr jo addr ;If OV=1 then R15=R15+signed(nn) 9n 1 000---- JMP Rn jmp Rn ;R15=Rn ;n=8..13! 3D 9n 2 000---- LJMP Rn jmp Rn:Rs ;R15=Rs, PBR=Rn, CBR=? ;n=8..13! 3C 1 000-s-z LOOP loop r12,r13 ;r12=r12-1, if Zf=0 then R15=R13 9n 1 000---- LINK #n link r11,addr;R11=R15+n ;n=1..4 |
Opcode Clks Flags Name Bflg ALT1 ALT2 Rs Rd 3D 1 -1----- ALT1 - 1 - - - ;prefix for 3D xx opcodes 3E 1 --1---- ALT2 - - 1 - - ;prefix for 3E xx opcodes 3F 1 -11---- ALT3 - 1 1 - - ;prefix for 3F xx opcodes 1n 1 ------- TO Rn - - - - Rn ;select Rn as Rd 2n 1 1------ WITH Rn 1 - - Rn Rn ;select Rn as Rd & Rs Bn 1 ------- FROM Rn - - - Rn - ;select Rn as Rs 05..0F nn 2 ------- Bxx addr - - - - - ;branch opcodes (no change) other .. 000---- other 0 0 0 R0 R0 ;other opcodes (reset all) |
| SNES Cart GSU-n CPU Pseudo Opcodes |
-- 3 000---- LEA Rn,yyxx ;Alias for IWT, without "#" -- - 000---- MOVE Rn,#hilo ;Alias for IBT/IWT (depending on size) -- - 000---- MOVE Rn,(xx) ;Alias for LM/LMS (depending on size) -- - 000---- MOVE (xx),Rn ;Alias for SM/SMS (depending on size) -- - 000---- MOVEB Rn,(Rm) ;Alias for LDB/TO+LDB (depending Rn) -- - 000---- MOVEB (Rm),Rn ;Alias for STB/FROM+STB -- - 000---- MOVEW Rn,(Rm) ;Alias for LDW/TO+LDW (depending Rn) -- - 000---- MOVEW (Rm),Rn ;Alias for STW/FROM+STW |
jmp nnnn alias for "mov r15,nnnn" jz/jnz/jae/jb alias for "je/jne/jc/jnc" |
push rs mov [r10],rs, 2xinc_r10 ;\INCREASING on PUSH? or MEMFILL? pop rd 2xdec_r10, mov rd,[r10] ;/ (see Star Fox 1:ACA4) cmp rn,0 alias for "sub rn,rn,0" call alias for link+jmp ret alias for jmp r11 alu rd,op short for "alu rd,rs,op" and rd,rs,n alias for "bic rd,rs,not n" |
| SNES Cart GSU-n CPU Misc |
ROM Read: 5 cycles per byte at 21MHz, or 3 cycles per byte at 10MHz RAM Write: 10 cycles per word at 21MHz, or unknown at 10MHz? RAM Write: unknown number of cycles per byte? ROM/RAM Opcode-byte-read: 3 cycles at both 21MHz and 10MHz? |
1) jump + NOP ;very simple 2) jump + ONE-BYTE-OPCODE ;still quite simple 3) jump + MULTI-BYTE-OPCODE ;rather strange 4) Prefix + jump + ONE-BYTE-SUFFIX 5) Prefix + jump + MULTI-BYTE-SUFFIX |
| SNES Cart GSU-n Code-Cache |
CACHE sets CBR to "R15 AND FFF0h" (whereas R15=address after CACHE opcode) LJMP sets CBR to "R15 AND FFF0h" (whereas R15=jump target address) SNES write to SFR register with GO=0 sets CBR=0000h (all of the above three cases do also mark all cache lines as empty) |
| SNES Cart GSU-n Pixel-Cache |
1) cache full 2) doing rpix <--- this does also WAIT until it is flushed 3) changing r1 or r2 (really?) |
| SNES Cart GSU-n Other Caches |
| SNES Cart Capcom CX4 (programmable RISC CPU) (Mega Man X 2-3) (2 games) |
Mega Man X2 (1994) Capcom (NA) (JP) (EU) ;aka Rockman X2 Mega Man X3 (1995) Capcom (NA) (JP) |
I/O 00-3F,80-BF:6000-7FFF ROM 00-3F,80-BF:8000-FFFF SRAM 70-77:0000-7FFF (not installed; reads return 00h) |
$7f49-b = ROM Offset $7f4d-e = Page Select $7f4f = Instruction Pointer Start Address = ((Page_Select * 256) + Instruction Pointer) * 2) + ROM_Offset |
Program ROM is obviously 256x16-bit pages at a time. (taken from the SNES ROM) Program RAM is 2x256x16-bit. (two banks) ;<-- uh, that means cache? Data ROM is 1024x24-bit. (only ROM internal to the Cx4) Data RAM is 4x384x16-bit. ;<-- uh, but it HAS 8bit data bus? Call stack is 8-levels deep, at least 16-bits wide. |
Index Name ;Entry = Table Contents = Formula ------------------------------------------------------------------------- 000..0FFh Div ;N[0..FFh] = FFFFFFh..008080h = 800000h/(00h..FFh) 100..1FFh Sqrt ;N[0..FFh] = 000000h..FF7FDFh = 100000h*Sqrt(00h..FFh) 200..27Fh Sin ;N[0..7Fh] = 000000h..FFFB10h = 1000000h*Sin(0..89') 280..2FFh Asin ;N[0..7Fh] = 000000h..75CEB4h = 800000h/90'*Asin(0..0.99) 300..37Fh Tan ;N[0..7Fh] = 000000h..517BB5h = 10000h*Tan(0..89') 380..3FFh Cos ;N[0..7Fh] = FFFFFFh..03243Ah = 1000000h*Cos(0..89') |
PCB "SHVC-2DC0N-01, (C)1994 Nintendo" U1 32pin P0 8M MASK ROM (LH538LN4 = 8Mbit) U2 32pin P1 4/8 MASK ROM (LH534BN2 or LH5348N2 or so = 4Mbit) U3 80pin CX4 (CAPCOM CX4 DL-2427, BS169FB) U4 18pin CIC (F411A) X1 2pin 20MHz J 62pin Cart Edge connector (unknown if any special pins are actually used) |
PCB "SHVC-1DC0N-01, (C)1994 Nintendo" U1 40pin MASK ROM (TC5316003CF = 16Mbit) U2 80pin CX4 (CAPCOM CX4 DL-2427, BS169FB) U3 18pin CIC (F411A) X1 2pin 20MHz J 62pin Cart Edge connector (unknown if any special pins are actually used) |
[FFBD]=00h ;expansion RAM size (none) (there is 3KB cx4ram though) [FFBF]=10h ;CustomChip=CX4 [FFD5]=20h ;Slow LoROM (but CX4 opcodes are probably using a faster cache) [FFD6]=F3h ;ROM+CustomChip (no battery, no sram) [FFD7]=0Bh ;rom size (X2: 1.5MB, rounded-up to 2MB) (X3: real 2MB) [FFD8]=00h ;sram size (none) (there is 3KB cx4ram though) [FFDA]=33h ;Extended Header (with FFB0h-FFBFh) |
612Eh movb ext_dta,[ext_ptr] ;\these 3 opcodes are used to 4000h inc ext_ptr ; read one byte from [ext_ptr], 1C00h finish ext_dta ;/and to increment ext_ptr by 1 |
4000h inc ext_ptr ;-increment ext_ptr by 1 |
| SNES Cart Capcom CX4 - I/O Ports |
6000h..6BFFh R/W CX4RAM (3Kbytes) 6C00h..7F3Fh ? Unknown/unused 7F40h..7F42h ?/W DMA source, 24bit SNES LoROM address 7F43h..7F44h ?/W DMA length, 16bit, in bytes (eg. 0800h = 2Kbytes) 7F45h..7F46h ?/W DMA destination, 16bit in CX4RAM (6000h = 1st byte) 7F47h ?/W DMA start (write 00h to transfer direction SNES-to-CX4) 7F48h ?/W Unknown "toggle" (set to 00h/01h, maybe cache load/on/off?) 7F49h..7F4Bh R/W Program ROM Base, 24bit LoROM addr (028000h in Mega Man) 7F4Ch ?/W Unknown (set to 00h or 01h) soft_reset? maybe flush_cache? 7F4Dh..7F4Eh ?/W Program ROM Instruction Page (PC/200h) 7F4Fh ?/W Program ROM Instruction Pointer (PC/2), starts execution 7F50h..7F51h R/W Unknown, set to 0144h (maybe config flags or waitstates?) 7F52h R/W Unknown (set to 00h) hard_reset? maybe force stop? 7F53h..7F5Dh ? Unknown/unused 7F5Eh R/? Status (bit6=busy, set upon [7F47],[7F48],[7F4F] writes) 7F5Fh ? Unknown/unused 7F60h..7F69h ? Unknown/unused (maybe [FFE0..FFE9]) 7F6Ah..7F6Bh R/W SNES NMI Vector [FFEA..FFEB] 7F6Ch..7F6Dh ? Unknown/unused (maybe [FFEC..FFED]) 7F6Eh..7F6Fh R/W SNES IRQ Vector [FFEE..FFEF] 7F70h..7F7Fh ? Unknown/unused (maybe [FFF0..FFFF]) 7F80h..7FAFh R/W Sixteen 24bit CX4 registers (R0..R15, at 7F80h+N*3) 7FB0h..7FFFh ? Unknown/unused 8000h..FFFFh R ROM (32Kbyte LoROM Banks) (disabled when CX4 is busy) FFExh..FFxxh R/? Exception Vectors (from above I/O Ports, when CX4 is busy) |
| SNES Cart Capcom CX4 - Opcodes |
Opcode Clks NZC Syntax 0000h ?? ??? nop ;nop is used as delay after "mul" opcodes 0400h ?? ??? - 0800h+p0aaaaaaaa ?? ??? jmp addr/prg_page:addr 0C00h+p0aaaaaaaa ?? ??? jz addr/prg_page:addr ;Z=1 (equal) 1000h+p0aaaaaaaa ?? ??? jc addr/prg_page:addr ;C=1 (above/equal) 1400h+p0aaaaaaaa ?? ??? js addr/prg_page:addr ;N=1 (negative) 1800h ?? ??? - 1C00h ?? ??? finish ext_dta 2000h ?? ??? - 2400h+nn0000000n ?? ??? skip<?/?/nc/c/nz/z/ns/s> ;skip next opcode 2800h+p0aaaaaaaa ?? ??? call addr/prg_page:addr 2C00h+p0aaaaaaaa ?? ??? callz addr/prg_page:addr ;Z=1 (equal) 3000h+p0aaaaaaaa ?? ??? callc addr/prg_page:addr ;C=1 (above/equal) 3400h+p0aaaaaaaa ?? ??? calls addr/prg_page:addr ;N=1 (negative) 3800h ?? ??? - 3C00h ?? ??? ret 4000h ?? ??? inc ext_ptr 4400h ?? ??? - 4800h+ssoooooooo ?? ??? cmp <op>,A/A*2/A*100h/A*10000h ;\ 4C00h+ssoooooooo ?? ??? cmp <imm>,A/A*2/A*100h/A*10000h ; compare 5000h+ssoooooooo ?? NZC cmp A/A*2/A*100h/A*10000h,<op> ; 5400h+ssoooooooo ?? NZC cmp A/A*2/A*100h/A*10000h,<imm> ;/ 5800h+ss00000000 ?? ??? mov A,A.?/lsb/lsw/? ;-sign-expand 5C00h ?? ??? - 6000h+nnoooooooo ?? ??? mov A/ext_dta/?/prg_page,<op> 6400h+nnoooooooo ?? ??? mov A/?/?/prg_page,<imm> 6800h+nnoooooooo ?? ??? movb ram_dta.lsb/mid/msb/?,cx4ram[<op>] 6C00h+nnoooooooo ?? ??? movb ram_dta.lsb/mid/msb/?,cx4ram[ram_ptr+<imm>] 7000h+00oooooooo ?? ??? mov rom_dta,cx4rom[<op>*3] 7400h ?? ??? - 7800h+0noooooooo ?? ??? mov prg_page.lsb/msb,<op> 7C00h+0noooooooo ?? ??? mov prg_page.lsb/msb,<imm> 8000h+ssoooooooo ?? ??C add A,A/A*2/A*100h/A*10000h,<op> ;\ 8400h+ssoooooooo ?? ?Z? add A,A/A*2/A*100h/A*10000h,<imm> ; 8800h+ssoooooooo ?? ??? sub A,<op>,A/A*2/A*100h/A*10000h ; add/subtract 8C00h+ssoooooooo ?? ??C sub A,<imm>,A/A*2/A*100h/A*10000h ; 9000h+ssoooooooo ?? NZC sub A,A/A*2/A*100h/A*10000h,<op> ; 9400h+ssoooooooo ?? NZC sub A,A/A*2/A*100h/A*10000h,<imm> ;/ 9800h+00oooooooo ?? ??? smul MH:ML,A,<op> ;\use NOP or other opcode, 9C00h+00oooooooo ?? ??? smul MH:ML,A,<imm> ;/result is signed 48bit A000h ?? ??? - A400h ?? ??? - A800h+ssoooooooo ?? ??? xor A,A/A*2/A*100h/A*10000h,<op> ;\ AC00h+ssoooooooo ?? ??? xor A,A/A*2/A*100h/A*10000h,<imm> ; B000h+ssoooooooo ?? ?Z? and A,A/A*2/A*100h/A*10000h,<op> ; logic B400h+ssoooooooo ?? ?Z? and A,A/A*2/A*100h/A*10000h,<imm> ; B800h+ssoooooooo ?? ??? or A,A/A*2/A*100h/A*10000h,<op> ; BC00h+ssoooooooo ?? ??? or A,A/A*2/A*100h/A*10000h,<imm> ;/ C000h+00oooooooo ?? ??? shr A,<op> ;\ C400h+00oooooooo ?? NZ? shr A,<imm> ; C800h+00oooooooo ?? ??? sar A,<op> ; CC00h+00oooooooo ?? N?? sar A,<imm> ; shift/rotate D000h+00oooooooo ?? ??? ror A,<op> ; D400h+00oooooooo ?? ??? ror A,<imm> ; D800h+00oooooooo ?? ??? shl A,<op> ; DC00h+00oooooooo ?? N?? shl A,<imm> ;/ E000h+00oooooooo ?? ??? mov <op>,A E400h ?? ??? - E800h+nnoooooooo ?? ??? movb cx4ram[<op>],ram_dta.lsb/mid/msb/? EC00h+nnoooooooo ?? ??? movb cx4ram[ram_ptr+<imm>],ram_dta.lsb/mid/msb/? F000h+00oooooooo ?? ??? xchg <op>,A F400h ?? ??? - F800h ?? ??? - FC00h ?? ??? stop ;stop, and clear Port [FF5E].bit6 |
00h Register A 01h Register MH ;multiply.result.upper.24bit (MSBs are sign-expanded) 02h Register ML ;multiply.result.lower.24bit (same for signed/unsigned) 03h Register ext_dta 08h Register rom_dta 0Ch Register ram_dta 13h Register ext_ptr ;24bit SNES memory address 1Ch Register ram_ptr 2Eh Special snesrom[ext_ptr] (?) ;for use by opcode 612Eh only (?) 50h Constant 000000h 51h Constant FFFFFFh 52h Constant 00FF00h 53h Constant FF0000h 54h Constant 00FFFFh 55h Constant FFFF00h 56h Constant 800000h 57h Constant 7FFFFFh 58h Constant 008000h 59h Constant 007FFFh 5Ah Constant FF7FFFh 5Bh Constant FFFF7Fh 5Ch Constant 010000h 5Dh Constant FEFFFFh 5Eh Constant 000100h 5Fh Constant 00FEFFh 6xh Register R0..R15, aka Port [7F80h+x*3] ;(x=0h..Fh) |
nnh Immediate 000000h..0000FFh (unsigned) |
nnh Program Counter LSBs (within 256-word page) (absolute, non-relative) |
00h Skip next opcode if selected flag is zero (conditions ?/nc/nz/ns) 01h Skip next opcode if selected flag is set (conditions ?/c/z/s) |
00h Unused, should be zero |
| SNES Cart Capcom CX4 - Functions |
PAGE:PC__Function_____________________________ 0000:00 build_oam 0001:00 scale_tiles ;<-- (seems to be unused by Mega Man games) 0002:00 hires_sqrt ;<-- (seems to be unused by Mega Man games) 0002:03 sqrt ;<-- (seems to be unused by Mega Man games) 0002:05 propulsion 0002:07 get_sin ;<-- (seems to be unused by Mega Man games) 0002:0A get_cos ;<-- (seems to be unused by Mega Man games) 0002:0D set_vector_length 0002:10 triangle1 0002:13 triangle2 0002:15 pythagorean 0002:1F arc_tan 0002:22 trapeziod 0002:25 multiply 0002:2D transform_coordinates 0003:00 scale_rotate1 0005:00 transform_lines 0007:00 scale_rotate2 0008:00 draw_wireframe_without_clearing_buffer 0008:01 draw_wireframe_with_clearing_buffer 000B:00 disintergrate 000C:00 wave 000E:00 test_set_r0_to_00h ;\sixteen 4-word functions, ... ... ; located at 000E:00+4*(0..15) 000E:3C test_set_r0_to_0Fh ;/setting R0 to 00h..0Fh 000E:40 test_2K_ram_chksum 000E:54 test_square ;R1:R2 = R0*R0 000E:5C test_immediate_register ;copy 16 cpu constants to 30h-bytes RAM 000E:89 test_3K_rom_chksum ;"immediate_rom" |
Mega Man X2: [0008:3B]="or a,a,28h" [000A:C4]="mov a,28h" ;ROM bank 28h Mega Man X3: [0008:3B]="or a,a,08h" [000A:C4]="mov a,08h" ;ROM bank 08h |
| SNES Cart DSP-n/ST010/ST011 (pre-programmed NEC uPD77C25 CPU) (23 games) |
DSP-1, DSP-1A, DSP-1B, DSP-2, DSP-3, DSP-4 |
64pin SETA ST010 D96050CW-012 (PCB SHVC-1DS0B-01) 64pin SETA ST011 D96050CW-013 (PCB SHVC-1DS0B-10; with extra transistor) |
[FFD6h]=03h..05h Chipset = DSPn (plus battery present/absent info) |
[FFD6h]=F6h Chipset = Custom (plus battery; for the on-chip RAM) [FFD4h]=00h Last byte of Title=00h (indicate early extended header) [FFBFh]=01h Chipset Sub Type = ST010/ST011 |
| SNES Cart DSP-n/ST010/ST011 - NEC uPD77C25 - Registers & Flags & Overview |
LoROM Mapping: DSP PCB Mode ROM RAM Bank Data (DR) Status (SR) DSP1/DSP4 SHVC-1B0N-01 LoROM 1M - 30h-3Fh 8000h-BFFFh C000h-FFFFh DSP2 SHVC-1B5B-01 LoROM 1M 32K 20h-3Fh 8000h-BFFFh C000h-FFFFh DSP3 SHVC-1B3B-01 LoROM 1M 8K 20h-3Fh 8000h-BFFFh C000h-FFFFh DSP1 SHVC-2B3B-01 LoROM 2M 8K 60h-6Fh 0000h-3FFFh 4000h-7FFFh ST010 SHVC-1DS0B-01 LoROM 1M - 60h-6xh 0000h 0001h ST011 SHVC-1DS0B-10 LoROM 512K- 60h-6xh 0000h 0001h HiROM Mapping: DSP PCB Mode ROM RAM Bank Data (DR) Status (SR) DSP1 SHVC-1K0N-01 HiROM 4M - 00h-1Fh 6000h-6FFFh 7000h-7FFFh DSP1 SHVC-1K1B-01 HiROM 4M 2K 00h-1Fh 6000h-6FFFh 7000h-7FFFh DSP1B SHVC-1K1X-01 HiROM 4M 2K 00h-0Fh,20h-2Fh 6000h-6FFFh 7000h-7FFFh DSP1B SHVC-2K1X-01 HiROM 2M 2K 00h-0Fh,20h-2Fh 6000h-6FFFh 7000h-7FFFh DSP1B SHVC-2K3X-01 HiROM 2M 8K 00h-0Fh,20h-2Fh 6000h-6FFFh 7000h-7FFFh SFC-Box: DSP PCB Mode ROM RAM Bank Data (DR) Status (SR) DSP1? GS 0871-102 <Might have variable LoROM/HiROM mapping supported?> |
Type DR SR SRAM DSPn+LoROM (1MB) 30-3F:8000-BFFF 30-3F:C000-FFFF None DSPn+LoROM (1MB+RAM) 20-3F:8000-BFFF 20-3F:C000-FFFF 70-7D:0000-7FFF DSPn+LoROM (2MB+RAM) 60-6F:0000-3FFF 60-6F:4000-7FFF 70-7D:0000-7FFF DSPn+HiROM 00-1F:6000-6FFF 00-1F:7000-7FFF 20-3F:6000-7FFF ? DSPn+HiROM (MAD-2) 00-0F:6000-6FFF 00-0F:7000-7FFF 30-3F:6000-7FFF ? ST010/ST011+LoROM 60-6x:0000 60-6x:0001 68-6F:0000-0FFF |
DP 8-bit Data RAM Pointer (ST010/11: 11-bit) RP 10-bit Data ROM Pointer (ST010/11: 11-bit) PC 11-bit Program ROM Counter (ST010/11: 14-bit) STACK 11-bit x 4-levels (for call/ret/irq) (ST010/11: 14-bit x 8-level) K,L two 16bit registers (multiplier input) AccA,AccB two 16bit registers (ALU accumulators) (aka A and B) FlagA,FlagB two 6bit registers with S1,S0,C,Z,OV1,OV0 flags for AccA/AccB TR,TRB two 16bit registers (temporary storage) SR 16bit status I/O register DR parallel I/O data (selectable 8bit/16bit via SR's DRC bit) SI,SO serial I/O data (selectable 8bit/16bit via SR's SOC,SIC bits) |
S0 Sign Flag (set if result.bit15) Z Zero Flag (set if result=0000h) C Carry Flag (set if carry or borrow) OV0 Overflow Flag (set if result>+7FFFh or result<-8000h) S1 Direction of Last Overflow (if OV0 then S1=S0, else S1=unchanged) OV1 Number of Overflows (0=even, 1=odd) (inverted when OV0 gets set) |
or a,a ;SA1=A.Bit15 (undocumented) ;\officially ;\No Addition mov l,sgn ;L=8000h-SA1 (but used by DSP1) ;/SA1=Undefined ;/ mov a,val1 ;\ add a,val2 ;affect OVA0 (and, if OVA0 set, also SA1) ; Adding jnova0 skip0 ;test OVA0 ; Two Values mov a,sgn ;A=8000h-SA1 (saturate max=+7FFFh, min=-8000h) ; skip0: ;/ ;below works with up to three 16bit values, ;\ ;would also work with hundreds of small 8bit values, ; ;ie. works if multiple overflows occur in opposite directions ; ;but doesn't work if two overflows occur in same direction) ; Adding xor a,a ;clear OVA1 ; More Values add a,val1 ;no overflow OVA1 yet ; add a,val2 ;this may set OVA1 ; add a,val3 ;this may set/reset OVA1 ; jnova1 skip1 ;test OVA1 (skip if 0 or 2 overflows occurred) ; mov a,sgn ;A=8000h-SA1 (done if 1 overflow occurred) ; skip1: ;/ |
15 RQM (R) Request for Master (0=Busy internally, 1=Request external I/O) 14-13 USF1-0 User's Flags (general purpose) (0=Low, 1=High) 12 DRS (R) DR Status (for 16bit DR mode; 2x8bit) (0=Ready, 1=Busy) 11 DMA Direct Memory Access Mode (0=Non-DMA, 1=DMA) 10 DRC DR Control, parallel data length (0=16bit, 1=8bit) 9 SOC SO Control, serial data output length (0=16bit, 1=8bit) 8 SIC SI Control, serial data input length (0=16bit, 1=8bit) 7 EI Interrupt Enable (0=Disable, 1=Enable) 6-2 N/A (R?) Unused/Reserved (should be zero) (read=always zero?) 1-0 P1-0 Output to P0,P1 pins (0=Low, 1=High) |
2048 x 24bit Instruction ROM/PROM Opcodes 2048 x 1bit Instruction PROM Protection Flags (0=Lock, 1=Allow Dumping) 1024 x 16bit Data ROM/PROM 256 x 16bit Data RAM |
Oldest Files 10K (DSPn) --> Big-Endian, 24bit-to-32bit padding Old Files 8K (DSPn) or 52K (ST01n) --> Big-Endian, raw 24bit opcodes Newer Files 8K (DSPn) or 52K (ST01n) --> Little-Endian, raw 24bit opcodes |
Oldest Files 97h,C0h,0xh,FFh ;big-endian 24bit, plus FFh-padding byte Old Files 97h,C0h,0xh ;big-endian 24bit, without padding Newer Files 0xh,C0h,97h ;little-endian 24bit, without padding |
uPD77C25 Mask ROM uPD77P25 Programmable PROM/UVEPROM |
23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 +--+--+-----+-----------+--+-----+-----------+--+-----------+-----------+ |0 |RT| P | ALU opcode|A | DPL | DPH |RP| SRC | DST | ALU +--+--+-----+-----------+--+-----+-----------+--+-----------+-----+-----+ |1 |0 | BRCH (jump opcode) | NA (11bit Next Address) | - | JP +--+--+--------------------------+--------------------+-----+-----+-----+ |1 |1 | ID (16bit Immediate Data) | - | DST | LD +--+--+-----------------------------------------------+-----+-----------+ |
22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 +--+--+-----+-----------+--+-----+--------+--+-----------+-----------+ |0 |RT| P | ALU opcode|A | DPL | DPH |RP| SRC | DST | ALU +--+--+-----+-----------+--+-+---+--------+--+-----------+-----+-----+ |1 |0 | BRCH (jump opcode) | NA (9bit Next Address) | - | JP +--+--+----------------------+--------------------+---+--+-----+-----+ |1 |1 | ID (16bit Immediate Data) |- | DST | LD +--+--+-----------------------------------------------+--+-----------+ |
| SNES Cart DSP-n/ST010/ST011 - NEC uPD77C25 - ALU and LD Instructions |
23 0 Must be 0 for ALU opcodes 22 RT Return after ALU (0=No/Normal, 1=Yes/Return from Call/Interrupt) 21-20 P ALU input P (0=RAM[DP], 1=IDB(SRC), 2=K*L*2/10000h, 3=K*L*2) 19-16 ALU ALU opcode 15 A ALU input/output Q (0=AccA, 1=AccB) 14-13 DPL Data RAM Pointer DP.3-0 adjust (0=DPNOP, 1=DPINC, 2=DPDEC, 3=DPCLR) 12-9 DPH Data RAM Pointer DP.7-4 adjust (0..0Fh=M0..MF) (XOR by that value) 8 RP Data ROM Pointer RP.9-0 adjust (0=RPNOP, 1=RPDEC) 7-4 SRC Source (copied to DST, and, for ALU, to "IDB" internal data bus) 3-0 DST Destination (copied from SRC) |
23 1 Must be 1 for LD opcodes 22 1 Must be 1 for LD opcodes 21-6 ID 16bit Immediate 5-4 - Reserved (should be zero) 3-0 DST Destination (copied from ID) |
Hex Name ;Expl. S1 S0 Cy Zf OV1 OV0 00h NOP ;No operation - - - - - - 01h OR ;Acc = Acc OR P sf sf 0 zf 0 0 02h AND ;Acc = Acc AND P sf sf 0 zf 0 0 03h XOR ;Acc = Acc XOR P sf sf 0 zf 0 0 04h SUB ;Acc = Acc - P * sf cy zf * ov 05h ADD ;Acc = Acc + P * sf cy zf * ov 06h SBB ;Acc = Acc - P - OtherCy * sf cy zf * ov 07h ADC ;Acc = Acc + P + OtherCy * sf cy zf * ov 08h DEC ;Acc = Acc - 1 * sf cy zf * ov 09h INC ;Acc = Acc + 1 * sf cy zf * ov 0Ah NOT ;Acc = Acc XOR FFFFh sf sf 0 zf 0 0 0Bh SAR1 ;Acc = Acc/2 ;signed sf sf cy zf 0 0 0Ch RCL1 ;Acc = Acc*2 + OtherCy sf sf cy zf 0 0 0Dh SLL2 ;Acc = Acc*4 + 3 sf sf 0 zf 0 0 0Eh SLL4 ;Acc = Acc*16 + 15 sf sf 0 zf 0 0 0Fh XCHG ;Acc = Acc ROL 8 sf sf 0 zf 0 0 |
Hex SRC (Source, Bit7-4) DST (Destination, Bit3-0) 00h TRB (Temporary B) @NON (none) 01h A (AccA) @A (AccA) 02h B (AccB) @B (AccB) 03h TR (Temporary A) @TR (Temporary A) 04h DP (Data RAM Pointer) @DP (Data RAM Pointer) 05h RP (Data ROM Pointer) @RP (Data ROM Pointer) 06h RO (ROM[RP]) @DR (parallel I/O port) 07h SGN (saturation = 8000h-SA1) @SR (status register) 08h DR (parallel I/O port) @SOL (SO serial LSB first) 09h DRNF (DR without RQM/DRQ) @SOM (SO serial MSB first) 0Ah SR (status register) @K (Multiply Factor A) 0Bh SIM (SI serial MSB first) @KLR (K=SRC and L=ROM[RP]) 0Ch SIL (SI serial LSB first) @KLM (L=SRC and K=RAM[DP OR 40h]) 0Dh K (Multiply Factor A) @L (Multiply Factor B) 0Eh L (Multiply Factor B) @TRB (Temporary B) 0Fh MEM (RAM[DP]) @MEM (RAM[DP]) |
DST field = @KLR or @KLM combined with SRC field = K or L register DST field and SRC field specify the same register P-SELECT field = RAM, DST field = @MEM (for ALU operation) |
| SNES Cart DSP-n/ST010/ST011 - NEC uPD77C25 - JP Instructions |
23 1 Must be 1 for JP opcodes 22 0 Must be 0 for JP opcodes 21-13 BRC Jump/Call opcode 12-2 NA 11bit Next Address Bit0-10 (000h..7FFh, in 24-bit word steps) 1-0 - Reserved (should be zero) (ST010/ST011: Bit12-11 of NA) |
Binary Hex Op Expl.
000000000 000h JMPSO * Unconditional jump to SO register
100000000 100h JMP Unconditional jump 0000h..1FFFh
100000001 101h JMP * Unconditional jump 2000h..3FFFh
101000000 140h CALL Unconditional call 0000h..1FFFh ;\return via RT-bit
101000001 141h CALL * Unconditional call 2000h..3FFFh ;/in ALU opcodes
010000000 080h JNCA CA = 0 ;\
010000010 082h JCA CA = 1 ; carry flag of AccA/AccB
010000100 084h JNCB CB = 0 ;
010000110 086h JCB CB = 1 ;/
010001000 088h JNZA ZA = 0 ;\
010001010 08Ah JZA ZA = 1 ; zero flag of AccA/AccB
010001100 08Ch JNZB ZB = 0 ;
010001110 08Eh JZB ZB = 1 ;/
010010000 090h JNOVA0 OVA0 = 0 ;\
010010010 092h JOVA0 OVA0 = 1 ; overflow flag for last operation
010010100 094h JNOVB0 OVB0 = 0 ;
010010110 096h JOVB0 OVB0 = 1 ;/
010011000 098h JNOVA1 OVA1 = 0 ;\
010011010 09Ah JOVA1 OVA1 = 1 ; overflow flag for last 3 operations
010011100 09Ch JNOVB1 OVB1 = 0 ; (set if 1 or 3 overflows occurred)
010011110 09Eh JOVB1 OVB1 = 1 ;/
010100000 0A0h JNSA0 SA0 = 0 ;\
010100010 0A2h JSA0 SA0 = 1 ; sign bit (ie. Bit15) of AccA/AccB
010100100 0A4h JNSB0 SB0 = 0 ;
010100110 0A6h JSB0 SB0 = 1 ;/
010101000 0A8h JNSA1 SA1 = 0 ;\
010101010 0AAh JSA1 SA1 = 1 ; extra sign bit ("Bit16")
010101100 0ACh JNSB1 SB1 = 0 ; indicating direction of overflows
010101110 0AEh JSB1 SB1 = 1 ;/
010110000 0B0h JDPL0 DPL = 00h ;\
010110001 0B1h JDPLN0 DPL <> 00h ; lower 4bit of DP (Data RAM Pointer)
010110010 0B2h JDPLF DPL = 0Fh ;
010110011 0B3h JDPLNF DPL <> 0Fh ;/
010110100 0B4h JNSIAK SI ACK = 0 ;\
010110110 0B6h JSIAK SI ACK = 1 ; serial I/O port (SI/SO serial in/out)
010111000 0B8h JNSOAK SO ACK = 0 ;
010111010 0BAh JSOAK SO ACK = 1 ;/
010111100 0BCh JNRQM RQM = 0 ;\parallel I/O port (DR data register)
010111110 0BEh JRQM RQM = 1 ;/
|
| SNES Cart DSP-n/ST010/ST011 - List of Games using that chips |
Ace Wo Nerae! 3D Tennis (DSP-1A) (1993) Telenet Japan (JP) Armored Trooper Votoms: The Battling Road (1993) Takara (JP) Ballz 3D, and 3 Jigen Kakutou Ballz (DSP-1B) (1994) PF Magic/Accolade (NA) Battle Racers (1995) Banpresto (JP) Bike Daisuki! Hashiriya Kon - Rider's Spirits (1994) Genki/NCS (JP) Final Stretch (1993) Genki/LOZC (JP) Korean League (aka Hanguk Pro Yagu) (1993) Jaleco (KO) Lock-On / Super Air Diver (1993) Vic Tokai Michael Andretti's Indy Car Challenge (1994) Genki/Bullet-Proof (NA) (JP) Pilotwings (1991) Nintendo EAD (NA) (JP) (EU) (DSP-1) (visible DSP1 glitch) Shutokou Battle'94: K.T. Drift King (1994) Genki/Bullet-Proof (JP) Shutokou Battle 2: Drift King K.T. & M.B. (1995) Genki/Bullet-Proof (JP) Super 3D Baseball (?) (is that same as Super Bases Loaded 2 ?) Super Air Diver 2 (1995) Asmik (JP) Super Bases Loaded 2 (1994) Jaleco (NA) (JP) Super F1 Circus Gaiden (1995) Nichibutsu (JP) Super Mario Kart (DSP-1/DSP-1B) (1992) Nintendo EAD (NA) (JP) (EU) Suzuka 8 Hours (1993) Namco (NA) (JP) Touge Densetsu: Saisoku Battle (1996) Genki/Bullet-Proof Software (JP) ? |
DSP-2: Dungeon Master (DSP-2) (1992) FTL Games/JVC Victor (JP) DSP-3: SD Gundam GX (DSP-3) (1994) BEC/Bandai (JP) DSP-4: Top Gear 3000 (DSP-4) (1995) Gremlin Interactive/Kemco (NA) (JP) (EU) ST010: F1 Race of Champions / Exhaust Heat II (1993) SETA Corp. (NA) (JP) ST011: Hayazashi Nidan Morita Shogi (1993) Random House/SETA Corp. (JP) |
| SNES Cart DSP-n/ST010/ST011 - BIOS Functions |
00h 16-bit Multiplication 10h Inverse Calculation 20h 16-bit Multiplication 01h Set Attitude A 11h Set Attitude B 21h Set Attitude C 02h Projection Parameter Setting 03h Convert from Object to Global Coordinate A 13h Convert from Object to Global Coordinate B 23h Convert from Object to Global Coordinate C 04h Trigonometric Calculation 14h 3D Angle Rotation 06h Object Projection Calculation 08h Vector Size Calculation 18h Vector Size Comparison 28h Vector Absolute Value Calculation (bugged) (fixed in DSP1B) 38h Vector Size Comparison 0Ah Raster Data Calculation 0Bh Calculation of Inner Product with the Forward Attitude A and a Vector 1Bh Calculation of Inner Product with the Forward Attitude B and a Vector 2Bh Calculation of Inner Product with the Forward Attitude C and a Vector 0Ch 2D Coordinate Rotation 1Ch 3D Coordinate Rotation 0Dh Convert from Global to Object Coordinate A 1Dh Convert from Global to Object Coordinate B 2Dh Convert from Global to Object Coordinate C 0Eh Coordinate Calculation of a selected point on the Screen 0Fh Test Memory Test 1Fh Test Transfer DATA ROM 2Fh Test ROM Version (0100h=DSP1/DSP1A, 0101h=DSP1B) |
01h Convert Bitmap to Bitplane Tile 03h Set Transparent Color 05h Replace Bitmap using Transparent Color 06h Reverse Bitmap 07h Add 08h Subtract 09h Multiply (bugged) (used in Dungeon Master japanese/v1.0) 0Dh Scale Bitmap 0Fh Process Command (dummy NOP command for re-synchronisation) 10h..FFh Mirrors of 00h..0Fh |
02h Unknown 03h Calculate Cell Offset 06h Set Board Dimensions 07h Calculate Adjacent Cell 18h Convert Bitmap to Bitplane 38h Decode Shannon-Fano Bitstream (USF1 bit in SR register = direction) 1Eh Calculate Path of Least Travel 3Eh Set Start Cell 0Fh Test Memory Test 1Fh Test Transfer DATA ROM 2Fh Test ROM Version (0300h=DSP3) |
xxh Unknown 13h Test Transfer DATA ROM 14h Test ROM Version (0400h=DSP4) 15h..1Fh Unused (no function) 20h..FFh Mirrors of 10h..1Fh |
00h Set RAM[0010h]=0000h 01h Unknown Command 02h Sort Driver Placements 03h 2D Coordinate Scale 04h Unknown Command 05h Simulated Driver Coordinate Calculation 06h Multiply 07h Raster Data Calculation 08h 2D Coordinate Rotation 09h..0Fh Mirrors of 01h..07h 10h..FFh Mirrors of 00h..0Fh |
00h Unused (no function) 01h ? 02h ? 03h ? 04h ? 05h ? 06h ? 07h ? 08h Unused (no function) 09h ? 0Ah Unused (no function) 0Bh ? 0Ch ? 0Dh Unused (no function) 0Eh ? 0Fh ? 10h..F0h Unused (no function) F1h Selftest1 ? F2h Selftest2 ? F3h Dump Data ROM (bugged, doesn't work due to wrong loop address) F4h..FFh Unused (no function) |
| SNES Cart Seta ST018 (pre-programmed ARM CPU) (1 game) |
Hayazashi Nidan Morita Shogi 2 (ST018) (1995) Random House/SETA Corp. (JP) |
00000000h ROM 128K -- with 32bit databus 20000000h 40000000h I/O ports 60000000h probably (absent) external ROM/EPROM ;can redirect exceptions here? 80000000h A0000000h ROM 32K ? -- with 8bit databus C0000000h E0000000h RAM 16K |
40000010h.R Data from SNES (reset STAT.3 and get latched data-to-arm) 40000020h.R Status (get STAT) 40000000h.W Data to SNES (set STAT.0 and latch data-to-snes) 40000010h.W Flag to SNES (set STAT.2 on writing any value) (IRQ?) 40000020h.W Config 1 40000024h.W Config 2 40000028h.W Config 3 4000002Ch.W Config 4 |
3800h.R Data to SNES (reset STAT.0 and get latched data-from-arm) 3802h.R Ack Flag (reset STAT.2 and get dummy data?) 3804h.R Status (get STAT) 3802h.W Data from SNES (set STAT.3 and latch data-from-snes) 3804h.W Reset ARM (00h=Normal, 01h=HardReset, FFh=SoftReset?) |
0 SNES ARM ARM-to-SNES Data Present (0=No, 1=Yes) 1 - - Unknown/Unused (unknown) 2 SNES - ARM-to-SNES IRQ Flag? (0=No, 1=Yes) 3 - ARM SNES-to-ARM Data Present (0=No, 1=Yes) 4 SNES - Fatal Problem (0=Okay, 1=SNES skips all transfers) 5 - ARM Redirect ARM to 600000xxh (0=No, 1=Yes) 6 SNES - Unused (unless [FF41h]<>00h) (0=Busy, 1=Ready) 7 SNES - ARM Reset Ready (0=Busy, 1=Ready) |
PCB "SHVC-1DE3B-01, (C) 1995 Nintendo" U1 32pin LH534BN6 LoROM 512Kx8 (alternately 40pin) (PCB: "4/8/16/32M") U2 28pin LH52A64N SRAM 8Kx8 (PCB: "64K") U3 160pin Seta ST018, (C)1994-5 SETA (PCB: "ST0018/ST0019") U4 16pin 74LS139A (demultiplexer) (PCB: "LS139") U5 8pin /\\ 532 26A (battery controller) (PCB: "MM1026") U6 18pin FA11B CIC (PCB: "CIC") BATT 2pin Maxell CR2032T (3V battery for U2) X1 3pin [M]21440C 21.44MHz (plastic oscillator) (PCB: "21.44MHz") P1 62pin SNES Cart Edge connector (plus shield) |
00h..9Fh Unused A0 Debug: Reboot A1 Debug: Get Version 4 ;\maybe major/minor version (or vice-versa) A2 Debug: Get Version 5 ;/ A3 Debug: Dump 80h bytes from address NNNNNNNNh A4 Debug: Dump NNh bytes from address NNNNNNNNh A5 Debug: Write NNh bytes to address NNNNNNNNh A8 do_high_level_func_0_1_with_reply_flag A9 do_high_level_func_1_1_with_reply_flag AA UploadBoardAndSomethingElse (send 9x9 plus 16 bytes to 0E0000400h) AB Write_1_byte_to_0E0000468h (usually value=02h) AC Read ARM "R12" register value AD Read 1 byte from 0E0000464h (LEN) AE do_high_level_func_2_with_reply_flag AF Read 1 byte from 0E0000464h (LEN+1)*2 B0 Read (LEN+1)*2 bytes from 0E000046Ch ;LEN as from cmd ADh/AFh B1 do_high_level_func_0_X_Y_with_reply_flag (send 2 bytes: X,Y) B2 do_high_level_func_1_X_Y_with_reply_flag (send 2 bytes: X,Y) B3 do_high_level_func_4_with_1_reply_byte (recv 1 byte) B4 do_high_level_func_5_with_1_reply_byte (recv 1 byte) B5 do_high_level_func_6_with_1_reply_byte (recv 1 byte) B6 do_high_level_func_7_with_1_reply_byte (recv 1 byte) B7 do_high_level_func_3_with_reply_flag B8h..F0h Unused F1 Selftest 1 ;if response.bit2=1, receive 2 error bytes F2 Selftest 2 ;if response<>00h, receive 2 error bytes F3 Debug: Dump 128Kbyte ROM from 00000000h ;\for HEX-DUMP display F4 Debug: Dump 32Kbyte ROM from A0000000h ;/ F5 Debug: Get Chksum for 128K ROM at 00000000h F6 Debug: Get Chksum for 32K ROM at A0000000h F7h..FFh Unused |
| ARM CPU Reference |
| ARM Register Set |
System/User FIQ Supervisor Abort IRQ Undefined -------------------------------------------------------------- R0 R0 R0 R0 R0 R0 R1 R1 R1 R1 R1 R1 R2 R2 R2 R2 R2 R2 R3 R3 R3 R3 R3 R3 R4 R4 R4 R4 R4 R4 R5 R5 R5 R5 R5 R5 R6 R6 R6 R6 R6 R6 R7 R7 R7 R7 R7 R7 -------------------------------------------------------------- R8 R8_fiq R8 R8 R8 R8 R9 R9_fiq R9 R9 R9 R9 R10 R10_fiq R10 R10 R10 R10 R11 R11_fiq R11 R11 R11 R11 R12 R12_fiq R12 R12 R12 R12 R13 (SP) R13_fiq R13_svc R13_abt R13_irq R13_und R14 (LR) R14_fiq R14_svc R14_abt R14_irq R14_und R15 (PC) R15 R15 R15 R15 R15 -------------------------------------------------------------- CPSR CPSR CPSR CPSR CPSR CPSR -- SPSR_fiq SPSR_svc SPSR_abt SPSR_irq SPSR_und -------------------------------------------------------------- |
| ARM Flags & Condition Field (cond) |
Code Suffix Flags Meaning 0: EQ Z=1 equal (zero) (same) 1: NE Z=0 not equal (nonzero) (not same) 2: CS/HS C=1 unsigned higher or same (carry set) 3: CC/LO C=0 unsigned lower (carry cleared) 4: MI N=1 negative (minus) 5: PL N=0 positive or zero (plus) 6: VS V=1 overflow (V set) 7: VC V=0 no overflow (V cleared) 8: HI C=1 and Z=0 unsigned higher 9: LS C=0 or Z=1 unsigned lower or same A: GE N=V greater or equal B: LT N<>V less than C: GT Z=0 and N=V greater than D: LE Z=1 or N<>V less or equal E: AL - always (the "AL" suffix can be omitted) F: NV - never (ARMv1,v2 only) (Reserved on ARMv3 and up) |
Bit Expl. 31 N - Sign Flag (0=Not Signed, 1=Signed) ;\ 30 Z - Zero Flag (0=Not Zero, 1=Zero) ; Condition 29 C - Carry Flag (0=Borrow/No Carry, 1=Carry/No Borrow) ; Code Flags 28 V - Overflow Flag (0=No Overflow, 1=Overflow) ;/ 27 Q - Reserved (used as Sticky Overflow in ARMv5TE and up) 26-8 - - Reserved (For future use) - Do not change manually! 7 I - IRQ disable (0=Enable, 1=Disable) ;\ 6 F - FIQ disable (0=Enable, 1=Disable) ; Control 5 T - Reserved (used as THUMB flag in ARMv4T and up) ; Bits 4-0 M4-M0 - Mode Bits (See below) ;/ |
Binary Hex Dec Expl. 0xx00b 00h 0 - Old User ;\26bit Backward Compatibility modes 0xx01b 01h 1 - Old FIQ ; (supported only on ARMv3, except ARMv3G, 0xx10b 02h 2 - Old IRQ ; and on some non-T variants of ARMv4) 0xx11b 03h 3 - Old Supervisor ;/ 10000b 10h 16 - User (non-privileged) 10001b 11h 17 - FIQ 10010b 12h 18 - IRQ 10011b 13h 19 - Supervisor (SWI) 10111b 17h 23 - Abort 11011b 1Bh 27 - Undefined 11111b 1Fh 31 - Reserved (used as System mode in ARMv4 and up) |
| ARM 26bit Memory Interface |
Bit Name Expl. 31-28 N,Z,C,V Flags (Sign, Zero, Carry, Overflow) 27-26 I,F Interrupt Disable bits (IRQ, FIQ) (1=Disable) 25-2 PC Program Counter, 24bit, Step 4 (64M range) 1-0 M1,M0 Mode (0=User, 1=FIQ, 2=IRQ, 3=Supervisor) |
R14_svc = PC ($+8, including old PSR bits) M1,M0 = 11b = supervisor mode, F=same, I=1, PC=14h, to continue at the fault location, return by SUBS PC,LR,8. |
| ARM Exceptions |
Address Prio Exception Mode on Entry Interrupt Flags BASE+00h 1 Reset Supervisor (_svc) I=1, F=1 BASE+04h 7 Undefined Instruction Undefined (_und) I=1, F=unchanged BASE+08h 6 Software Interrupt (SWI) Supervisor (_svc) I=1, F=unchanged BASE+0Ch 5 Prefetch Abort Abort (_abt) I=1, F=unchanged BASE+10h 2 Data Abort Abort (_abt) I=1, F=unchanged BASE+14h ?? Address Exceeds 26bit Supervisor (_svc) I=1, F=unchanged BASE+18h 4 Normal Interrupt (IRQ) IRQ (_irq) I=1, F=unchanged BASE+1Ch 3 Fast Interrupt (FIQ) FIQ (_fiq) I=1, F=1 |
- R14_<new mode>=PC+nn ;save old PC, ie. return address - SPSR_<new mode>=CPSR ;save old flags - CPSR new T,M bits ;set to T=0 (ARM state), and M4-0=new mode - CPSR new I bit ;IRQs disabled (I=1), done by ALL exceptions - CPSR new F bit ;FIQs disabled (F=1), done by Reset and FIQ only - PC=exception_vector ;see table above |
SUBS PC,R14,4 ;both PC=R14_irq-4, and CPSR=SPSR_irq |
MOVS PC,R14 ;both PC=R14_svc, and CPSR=SPSR_svc |
MOVS PC,R14 ;both PC=R14_und, and CPSR=SPSR_und |
prefetch abort: SUBS PC,R14,#4 ;PC=R14_abt-4, and CPSR=SPSR_abt data abort: SUBS PC,R14,#8 ;PC=R14_abt-8, and CPSR=SPSR_abt |
| ARM Instruction Summary |
Instruction Cycles Flags Expl.
MOV{cond}{S} Rd,Op2 1S+x+y NZc- Rd = Op2
MVN{cond}{S} Rd,Op2 1S+x+y NZc- Rd = NOT Op2
ORR{cond}{S} Rd,Rn,Op2 1S+x+y NZc- Rd = Rn OR Op2
EOR{cond}{S} Rd,Rn,Op2 1S+x+y NZc- Rd = Rn XOR Op2
AND{cond}{S} Rd,Rn,Op2 1S+x+y NZc- Rd = Rn AND Op2
BIC{cond}{S} Rd,Rn,Op2 1S+x+y NZc- Rd = Rn AND NOT Op2
TST{cond}{P} Rn,Op2 1S+x NZc- Void = Rn AND Op2
TEQ{cond}{P} Rn,Op2 1S+x NZc- Void = Rn XOR Op2
|
Instruction Cycles Flags Expl.
ADD{cond}{S} Rd,Rn,Op2 1S+x+y NZCV Rd = Rn+Op2
ADC{cond}{S} Rd,Rn,Op2 1S+x+y NZCV Rd = Rn+Op2+Cy
SUB{cond}{S} Rd,Rn,Op2 1S+x+y NZCV Rd = Rn-Op2
SBC{cond}{S} Rd,Rn,Op2 1S+x+y NZCV Rd = Rn-Op2+Cy-1
RSB{cond}{S} Rd,Rn,Op2 1S+x+y NZCV Rd = Op2-Rn
RSC{cond}{S} Rd,Rn,Op2 1S+x+y NZCV Rd = Op2-Rn+Cy-1
CMP{cond}{P} Rn,Op2 1S+x NZCV Void = Rn-Op2
CMN{cond}{P} Rn,Op2 1S+x NZCV Void = Rn+Op2
|
Instruction Cycles Flags Expl.
MUL{cond}{S} Rd,Rm,Rs 1S+mI NZx- Rd = Rm*Rs
MLA{cond}{S} Rd,Rm,Rs,Rn 1S+mI+1I NZx- Rd = Rm*Rs+Rn
UMULL{cond}{S} RdLo,RdHi,Rm,Rs 1S+mI+1I NZx- RdHiLo = Rm*Rs
UMLAL{cond}{S} RdLo,RdHi,Rm,Rs 1S+mI+2I NZx- RdHiLo = Rm*Rs+RdHiLo
SMULL{cond}{S} RdLo,RdHi,Rm,Rs 1S+mI+1I NZx- RdHiLo = Rm*Rs
SMLAL{cond}{S} RdLo,RdHi,Rm,Rs 1S+mI+2I NZx- RdHiLo = Rm*Rs+RdHiLo
|
Instruction Cycles Flags Expl.
LDR{cond}{B}{T} Rd,<Address> 1S+1N+1I+y ---- Rd=[Rn+/-<offset>]
LDM{cond}{amod} Rn{!},<Rlist>{^} nS+1N+1I+y ---- Load Multiple
STR{cond}{B}{T} Rd,<Address> 2N ---- [Rn+/-<offset>]=Rd
STM{cond}{amod} Rn{!},<Rlist>{^} (n-1)S+2N ---- Store Multiple
SWP{cond}{B} Rd,Rm,[Rn] 1S+2N+1I ---- Rd=[Rn], [Rn]=Rm
|
Instruction Cycles Flags Expl.
B{cond} label 2S+1N ---- PC=$+8+/-32M
BL{cond} label 2S+1N ---- PC=$+8+/-32M, LR=$+4
MRS{cond} Rd,Psr 1S ---- Rd=Psr
MSR{cond} Psr{_field},Op 1S (psr) Psr[field]=Op
SWI{cond} Imm24bit 2S+1N ---- PC=8, ARM Svc mode, LR=$+4
The Undefined Instruction 2S+1I+1N ---- PC=4, ARM Und mode, LR=$+4
condition=false 1S ---- Opcodes with {cond}=false
NOP 1S ---- R0=R0
|
Instruction Cycles Flags Expl.
CDP{cond} Pn,<cpopc>,Cd,Cn,Cm{,<cp>} 1S+bI ---- Coprocessor specific
STC{cond}{L} Pn,Cd,<Address> (n-1)S+2N+bI [address] = CRd
LDC{cond}{L} Pn,Cd,<Address> (n-1)S+2N+bI CRd = [address]
MCR{cond} Pn,<cpopc>,Rd,Cn,Cm{,<cp>} 1S+bI+1C CRn = Rn {<op> CRm}
MRC{cond} Pn,<cpopc>,Rd,Cn,Cm{,<cp>} 1S+(b+1)I+1C Rn = CRn {<op> CRm}
|
|..3 ..................2 ..................1 ..................0| |1_0_9_8_7_6_5_4_3_2_1_0_9_8_7_6_5_4_3_2_1_0_9_8_7_6_5_4_3_2_1_0| |_Cond__|0_0_0|___Op__|S|__Rn___|__Rd___|__Shift__|Typ|0|__Rm___| DataProc |_Cond__|0_0_0|___Op__|S|__Rn___|__Rd___|__Rs___|0|Typ|1|__Rm___| DataProc |_Cond__|0_0_1|___Op__|S|__Rn___|__Rd___|_Shift_|___Immediate___| DataProc |_Cond__|0_0_1_1_0|P|1|0|_Field_|__Rd___|_Shift_|___Immediate___| PSR Imm |_Cond__|0_0_0_1_0|P|L|0|_Field_|__Rd___|0_0_0_0|0_0_0_0|__Rm___| PSR Reg |_Cond__|0_0_0_0_0_0|A|S|__Rd___|__Rn___|__Rs___|1_0_0_1|__Rm___| Multiply |_Cond__|0_0_0_0_1|U|A|S|_RdHi__|_RdLo__|__Rs___|1_0_0_1|__Rm___| MulLong |_Cond__|0_0_0_1_0|B|0_0|__Rn___|__Rd___|0_0_0_0|1_0_0_1|__Rm___| TransSwap |_Cond__|0_1_0|P|U|B|W|L|__Rn___|__Rd___|_________Offset________| TransImm |_Cond__|0_1_1|P|U|B|W|L|__Rn___|__Rd___|__Shift__|Typ|0|__Rm___| TransReg |_Cond__|0_1_1|________________xxx____________________|1|__xxx__| Undefined |_Cond__|1_0_0|P|U|S|W|L|__Rn___|__________Register_List________| TransBlock |_Cond__|1_0_1|L|___________________Offset______________________| B,BL |_Cond__|1_1_0|P|U|N|W|L|__Rn___|__CRd__|__CP#__|____Offset_____| CoDataTrans |_Cond__|1_1_1_0|_CPopc_|__CRn__|__CRd__|__CP#__|_CP__|0|__CRm__| CoDataOp |_Cond__|1_1_1_0|CPopc|L|__CRn__|__Rd___|__CP#__|_CP__|1|__CRm__| CoRegTrans |_Cond__|1_1_1_1|_____________Ignored_by_Processor______________| SWI |
| ARM Opcodes: Branch and Branch with Link (B, BL, SWI) |
Bit Expl.
31-28 Condition
27-25 Must be "101" for this instruction
24 Opcode (0-1)
0: B{cond} label ;branch (jump) PC=PC+8+nn*4
1: BL{cond} label ;branch/link (call) PC=PC+8+nn*4, LR=PC+4
23-0 nn - Signed Offset, step 4 (-32M..+32M in steps of 4)
|
Bit Expl.
31-28 Condition
27-24 Opcode
1111b: SWI{cond} nn ;software interrupt
23-0 nn - Comment Field, ignored by processor (24bit value)
|
Bit Expl. 31-28 Condition 27-25 Must be 011b for this instruction 24-5 Reserved for future use 4 Must be 1b for this instruction 3-0 Reserved for future use |
cond011xxxxxxxxxxxxxxxxxxxx1xxxx - reserved for future use (except below). cond01111111xxxxxxxxxxxx1111xxxx - free for user. |
| ARM Opcodes: Data Processing (ALU) |
Bit Expl.
31-28 Condition
27-26 Must be 00b for this instruction
25 I - Immediate 2nd Operand Flag (0=Register, 1=Immediate)
24-21 Opcode (0-Fh) ;*=Arithmetic, otherwise Logical
0: AND{cond}{S} Rd,Rn,Op2 ;AND logical Rd = Rn AND Op2
1: EOR{cond}{S} Rd,Rn,Op2 ;XOR logical Rd = Rn XOR Op2
2: SUB{cond}{S} Rd,Rn,Op2 ;* ;subtract Rd = Rn-Op2
3: RSB{cond}{S} Rd,Rn,Op2 ;* ;subtract reversed Rd = Op2-Rn
4: ADD{cond}{S} Rd,Rn,Op2 ;* ;add Rd = Rn+Op2
5: ADC{cond}{S} Rd,Rn,Op2 ;* ;add with carry Rd = Rn+Op2+Cy
6: SBC{cond}{S} Rd,Rn,Op2 ;* ;sub with carry Rd = Rn-Op2+Cy-1
7: RSC{cond}{S} Rd,Rn,Op2 ;* ;sub cy. reversed Rd = Op2-Rn+Cy-1
8: TST{cond}{P} Rn,Op2 ;test Void = Rn AND Op2
9: TEQ{cond}{P} Rn,Op2 ;test exclusive Void = Rn XOR Op2
A: CMP{cond}{P} Rn,Op2 ;* ;compare Void = Rn-Op2
B: CMN{cond}{P} Rn,Op2 ;* ;compare neg. Void = Rn+Op2
C: ORR{cond}{S} Rd,Rn,Op2 ;OR logical Rd = Rn OR Op2
D: MOV{cond}{S} Rd,Op2 ;move Rd = Op2
E: BIC{cond}{S} Rd,Rn,Op2 ;bit clear Rd = Rn AND NOT Op2
F: MVN{cond}{S} Rd,Op2 ;not Rd = NOT Op2
20 S - Set Condition Codes (0=No, 1=Yes) (Must be 1 for opcode 8-B)
19-16 Rn - 1st Operand Register (R0..R15) (including PC=R15)
Must be 0000b for MOV/MVN.
15-12 Rd - Destination Register (R0..R15) (including PC=R15)
Must be 0000b (or 1111b) for CMP/CMN/TST/TEQ{P}.
When above Bit 25 I=0 (Register as 2nd Operand)
When below Bit 4 R=0 - Shift by Immediate
11-7 Is - Shift amount (1-31, 0=Special/See below)
When below Bit 4 R=1 - Shift by Register
11-8 Rs - Shift register (R0-R14) - only lower 8bit 0-255 used
7 Reserved, must be zero (otherwise multiply or undefined opcode)
6-5 Shift Type (0=LSL, 1=LSR, 2=ASR, 3=ROR)
4 R - Shift by Register Flag (0=Immediate, 1=Register)
3-0 Rm - 2nd Operand Register (R0..R15) (including PC=R15)
When above Bit 25 I=1 (Immediate as 2nd Operand)
11-8 Is - ROR-Shift applied to nn (0-30, in steps of 2)
7-0 nn - 2nd Operand Unsigned 8bit Immediate
|
LSL#0: No shift performed, ie. directly Op2=Rm, the C flag is NOT affected. LSR#0: Interpreted as LSR#32, ie. Op2 becomes zero, C becomes Bit 31 of Rm. ASR#0: Interpreted as ASR#32, ie. Op2 and C are filled by Bit 31 of Rm. ROR#0: Interpreted as RRX#1 (RCR), like ROR#1, but Op2 Bit 31 set to old C. |
V=not affected C=carryflag of shift operation (not affected if LSL#0 or Rs=00h) Z=zeroflag of result N=signflag of result (result bit 31) |
V=overflowflag of result C=carryflag of result Z=zeroflag of result N=signflag of result (result bit 31) |
R15=result ;modify PSR bits in R15, ARMv2 and below only. In user mode only N,Z,C,V bits of R15 can be changed. In other modes additionally I,F,M1,M0 can be changed. The PC bits in R15 are left unchanged in all modes. |
CPSR = SPSR_<current mode> PC = result For example: MOVS PC,R14 ;return from SWI (PC=R14_svc, CPSR=SPSR_svc). |
| ARM Opcodes: PSR Transfer (MRS, MSR) |
Bit Expl.
31-28 Condition
27-26 Must be 00b for this instruction
25 I - Immediate Operand Flag (0=Register, 1=Immediate) (Zero for MRS)
24-23 Must be 10b for this instruction
22 Psr - Source/Destination PSR (0=CPSR, 1=SPSR_<current mode>)
21 Opcode
0: MRS{cond} Rd,Psr ;Rd = Psr
1: MSR{cond} Psr{_field},Op ;Psr[field] = Op
20 Must be 0b for this instruction (otherwise TST,TEQ,CMP,CMN)
For MRS:
19-16 Must be 1111b for this instruction (otherwise SWP)
15-12 Rd - Destination Register (R0-R14)
11-0 Not used, must be zero.
For MSR:
19 f write to flags field Bit 31-24 (aka _flg)
18 s write to status field Bit 23-16 (reserved, don't change)
17 x write to extension field Bit 15-8 (reserved, don't change)
16 c write to control field Bit 7-0 (aka _ctl)
15-12 Not used, must be 1111b.
For MSR Psr,Rm (I=0)
11-4 Not used, must be zero.
3-0 Rm - Source Register <op> (R0-R14)
For MSR Psr,Imm (I=1)
11-8 Shift applied to Imm (ROR in steps of two 0-30)
7-0 Imm - Unsigned 8bit Immediate
In source code, a 32bit immediate should be specified as operand.
The assembler should then convert that into a shifted 8bit value.
|
| ARM Opcodes: Multiply and Multiply-Accumulate (MUL, MLA) |
Bit Expl.
31-28 Condition
27-25 Must be 000b for this instruction
24-21 Opcode
0000b: MUL{cond}{S} Rd,Rm,Rs ;multiply Rd = Rm*Rs
0001b: MLA{cond}{S} Rd,Rm,Rs,Rn ;mul.& accumulate Rd = Rm*Rs+Rn
0100b: UMULL{cond}{S} RdLo,RdHi,Rm,Rs ;multiply RdHiLo=Rm*Rs
0101b: UMLAL{cond}{S} RdLo,RdHi,Rm,Rs ;mul.& acc. RdHiLo=Rm*Rs+RdHiLo
0110b: SMULL{cond}{S} RdLo,RdHi,Rm,Rs ;sign.mul. RdHiLo=Rm*Rs
0111b: SMLAL{cond}{S} RdLo,RdHi,Rm,Rs ;sign.m&a. RdHiLo=Rm*Rs+RdHiLo
20 S - Set Condition Codes (0=No, 1=Yes) (Must be 0 for Halfword mul)
19-16 Rd (or RdHi) - Destination Register (R0-R14)
15-12 Rn (or RdLo) - Accumulate Register (R0-R14) (Set to 0000b if unused)
11-8 Rs - Operand Register (R0-R14)
7-4 Must be 1001b for these instructions
3-0 Rm - Operand Register (R0-R14)
|
| ARM Opcodes: Memory: Block Data Transfer (LDM, STM) |
Bit Expl.
31-28 Condition
27-25 Must be 100b for this instruction
24 P - Pre/Post (0=post; add offset after transfer, 1=pre; before trans.)
23 U - Up/Down Bit (0=down; subtract offset from base, 1=up; add to base)
22 S - PSR & force user bit (0=No, 1=load PSR or force user mode)
21 W - Write-back bit (0=no write-back, 1=write address into base)
20 L - Load/Store bit (0=Store to memory, 1=Load from memory)
0: STM{cond}{amod} Rn{!},<Rlist>{^} ;Store (Push)
1: LDM{cond}{amod} Rn{!},<Rlist>{^} ;Load (Pop)
Whereas, {!}=Write-Back (W), and {^}=PSR/User Mode (S)
19-16 Rn - Base register (R0-R14) (not including R15)
15-0 Rlist - Register List
(Above 'offset' is meant to be the number of words specified in Rlist.)
|
IB increment before ;P=1, U=1 IA increment after ;P=0, U=1 DB decrement before ;P=1, U=0 DA decrement after ;P=0, U=0 |
ED empty stack, descending ;LDM: P=1, U=1 ;STM: P=0, U=0 FD full stack, descending ; P=0, U=1 ; P=1, U=0 EA empty stack, ascending ; P=1, U=0 ; P=0, U=1 FA full stack, ascending ; P=0, U=0 ; P=1, U=1 |
STMFD=STMDB=PUSH STMED=STMDA STMFA=STMIB STMEA=STMIA LDMFD=LDMIA=POP LDMED=LDMIB LDMFA=LDMDA LDMEA=LDMDB |
While R15 loaded, additionally: CPSR=SPSR_<current mode> |
Rlist is referring to User Bank Registers R0-R15 (rather than to registers of the current mode; such like R14_svc etc.) Base write-back should not be used for User bank transfer. Caution - When instruction is LDM: If the following instruction reads from a banked register (eg. R14_svc), then CPU might still read R14 instead; if necessary insert a dummy NOP. |
| ARM Opcodes: Memory: Single Data Transfer (LDR, STR) |
Bit Expl.
31-28 Condition
27-26 Must be 01b for this instruction
25 I - Immediate Offset Flag (0=Immediate, 1=Shifted Register)
24 P - Pre/Post (0=post; add offset after transfer, 1=pre; before trans.)
23 U - Up/Down Bit (0=down; subtract offset from base, 1=up; add to base)
22 B - Byte/Word bit (0=transfer 32bit/word, 1=transfer 8bit/byte)
When above Bit 24 P=0 (Post-indexing, write-back is ALWAYS enabled):
21 T - Memory Management (0=Normal, 1=Force non-privileged access)
When above Bit 24 P=1 (Pre-indexing, write-back is optional):
21 W - Write-back bit (0=no write-back, 1=write address into base)
20 L - Load/Store bit (0=Store to memory, 1=Load from memory)
0: STR{cond}{B}{T} Rd,<Address> ;[Rn+/-<offset>]=Rd
1: LDR{cond}{B}{T} Rd,<Address> ;Rd=[Rn+/-<offset>]
Whereas, B=Byte, T=Force User Mode (only for POST-Indexing)
19-16 Rn - Base register (R0..R15) (including R15=PC+8)
15-12 Rd - Source/Destination Register (R0..R15) (including R15=PC+12)
When above I=0 (Immediate as Offset)
11-0 Unsigned 12bit Immediate Offset (0-4095, steps of 1)
When above I=1 (Register shifted by Immediate as Offset)
11-7 Is - Shift amount (1-31, 0=Special/See below)
6-5 Shift Type (0=LSL, 1=LSR, 2=ASR, 3=ROR)
4 Must be 0 (Reserved, see The Undefined Instruction)
3-0 Rm - Offset Register (R0..R14) (not including PC=R15)
|
<expression> ;an immediate used as address ;*** restriction: must be located in range PC+/-4095+8, if so, ;*** assembler will calculate offset and use PC (R15) as base. |
[Rn] ;offset = zero
[Rn, <#{+/-}expression>]{!} ;offset = immediate
[Rn, {+/-}Rm{,<shift>} ]{!} ;offset = register shifted by immediate
|
[Rn], <#{+/-}expression> ;offset = immediate
[Rn], {+/-}Rm{,<shift>} ;offset = register shifted by immediate
|
<shift> immediate shift such like LSL#4, ROR#2, etc. (see ALU opcodes).
{!} exclamation mark ("!") indicates write-back (Rn will be updated).
|
| ARM Opcodes: Memory: Single Data Swap (SWP) |
Bit Expl.
31-28 Condition
27-23 Must be 00010b for this instruction
Opcode (fixed)
SWP{cond}{B} Rd,Rm,[Rn] ;Rd=[Rn], [Rn]=Rm
22 B - Byte/Word bit (0=swap 32bit/word, 1=swap 8bit/byte)
21-20 Must be 00b for this instruction
19-16 Rn - Base register (R0-R14)
15-12 Rd - Destination Register (R0-R14)
11-4 Must be 00001001b for this instruction
3-0 Rm - Source Register (R0-R14)
|
| ARM Opcodes: Coprocessor Instructions (MRC/MCR, LDC/STC, CDP) |
Bit Expl.
31-28 Condition
27-24 Must be 1110b for this instruction
23-21 CP Opc - Coprocessor operation code (0-7)
20 ARM-Opcode (0-1)
0: MCR{cond} Pn,<cpopc>,Rd,Cn,Cm{,<cp>} ;move from ARM to CoPro
1: MRC{cond} Pn,<cpopc>,Rd,Cn,Cm{,<cp>} ;move from CoPro to ARM
19-16 Cn - Coprocessor source/dest. Register (C0-C15)
15-12 Rd - ARM source/destination Register (R0-R15)
11-8 Pn - Coprocessor number (P0-P15)
7-5 CP - Coprocessor information (0-7)
4 Reserved, must be one (1) (otherwise CDP opcode)
3-0 Cm - Coprocessor operand Register (C0-C15)
|
Bit Expl.
31-28 Condition
27-25 Must be 110b for this instruction
24 P - Pre/Post (0=post; add offset after transfer, 1=pre; before trans.)
23 U - Up/Down Bit (0=down; subtract offset from base, 1=up; add to base)
22 N - Transfer length (0-1, interpretation depends on co-processor)
21 W - Write-back bit (0=no write-back, 1=write address into base)
20 Opcode (0-1)
0: STC{cond}{L} Pn,Cd,<Address> ;Store to memory (from coprocessor)
1: LDC{cond}{L} Pn,Cd,<Address> ;Read from memory (to coprocessor)
whereas {L} indicates long transfer (Bit 22: N=1)
19-16 Rn - ARM Base Register (R0-R15) (R15=PC+8)
15-12 Cd - Coprocessor src/dest Register (C0-C15)
11-8 Pn - Coprocessor number (P0-P15)
7-0 Offset - Unsigned Immediate, step 4 (0-1020, in steps of 4)
|
Bit Expl.
31-28 Condition
27-24 Must be 1110b for this instruction
ARM-Opcode (fixed)
CDP{cond} Pn,<cpopc>,Cd,Cn,Cm{,<cp>}
23-20 CP Opc - Coprocessor operation code (0-15)
19-16 Cn - Coprocessor operand Register (C0-C15)
15-12 Cd - Coprocessor destination Register (C0-C15)
11-8 Pn - Coprocessor number (P0-P15)
7-5 CP - Coprocessor information (0-7)
4 Reserved, must be zero (otherwise MCR/MRC opcode)
3-0 Cm - Coprocessor operand Register (C0-C15)
|
| ARM Pseudo Instructions and Directives |
nop mov r0,r0 ldr Rd,=Imm ldr Rd,[r15,disp] ;use .pool as parameter field add Rd,=addr add/sub Rd,r15,disp adr Rd,addr add/sub Rd,r15,disp adrl Rd,addr two add/sub opcodes with disp=xx00h+00yyh mov Rd,Imm mvn Rd,NOT Imm ;or vice-versa and Rd,Rn,Imm bic Rd,Rn,NOT Imm ;or vice-versa cmp Rd,Rn,Imm cmn Rd,Rn,-Imm ;or vice-versa add Rd,Rn,Imm sub Rd,Rn,-Imm ;or vice-versa |
org adr assume following code from this address on .gba indicate GBA program .nds indicate NDS program .fix fix GBA/NDS header checksum .norewrite do not delete existing output file (keep following data in file) .data? following defines RAM data structure (assembled to nowhere) .code following is normal ROM code/data (assembled to ROM image) .include includes specified source code file (no nesting/error handling) .import imports specified binary file (optional parameters: ,begin,len) .radix nn changes default numeric format (nn=2,8,10,16 = bin/oct/dec/hex) .errif expr generates an error message if expression is nonzero .if expr assembles following code only if expression is nonzero .else invert previous .if condition .endif terminate .if/.ifdef/.ifndef .ifdef sym assemble following only if symbol is defined .ifndef sym assemble following only if symbol is not defined .align nn aligns to an address divisible-by-nn, inserts 00's l equ n l=n l: [cmd] l=$ (global label) @@l: [cmd] @@l=$ (local label, all locals are reset at next global label) end end of source code db ... define 8bit data (bytes) dw ... define 16bit data (halfwords) dd ... define 32bit data (words) defs nn define nn bytes space (zero-filled) ;... defines a comment (ignored by the assembler) // alias for CRLF, eg. allows <db 'Text',0 // dw addr> in one line |
align .align 4 code16 .thumb align nn .align nn .code 16 .thumb % nn defs nn code32 .arm .space nn defs nn .code 32 .arm ..ds nn defs nn ltorg .pool x=n x equ n .ltorg .pool .equ x,n x equ n ..ltorg .pool .define x n x equ n dcb db (8bit data) incbin .import defb db (8bit data) @@@... ;comment .byte db (8bit data) @ ... ;comment .ascii db (8bit string) @*... ;comment dcw dw (16bit data) @... ;comment defw dw (16bit data) .text .code .hword dw (16bit data) .bss .data? dcd dd (32bit data) .global (ignored) defd dd (32bit data) .extern (ignored) .long dd (32bit data) .thumb_func (ignored) .word dw/dd, don't use #directive .directive .end end .fill nn,1,0 defs nn |
hs cs ;condition higher or same = carry set lo cc ;condition lower = carry cleared asl lsl ;arithmetic shift left = logical shift left |
Type Normal Alias Decimal 85 #85 &d85 Hexadecimal 55h #55h 0x55 #0x55 $55 &h55 Octal 125o 0o125 &o125 Ascii 'U' "U" Binary 01010101b %01010101 0b01010101 &b01010101 Roman &rLXXXV (very useful for arrays of kings and chapters) |
Prio Operator Aliases 8 (,) brackets 7 +,- sign 6 *,/,MOD,SHL,SHR MUL,DIV,<<,>> 5 +,- operation 4 EQ,GE,GT,LE,LT,NE =,>=,>,<=,<,<>,==,!= 3 NOT 2 AND 1 OR,XOR EOR |
mov r0,0ffh ;no C64-style "#", and no C-style "0x" required
stmia [r7]!,r0,r4-r5 ;square [base] brackets, no fancy {rlist} brackets
mov r0,cpsr ;no confusing MSR and MRS (whatever which is which)
mov r0,p0,0,c0,c0,0 ;no confusing MCR and MRC (whatever which is which)
ldr r0,[score] ;allows to use clean brackets for relative addresses
push rlist ;alias for stmfd [r13]!,rlist (and same for pop/ldmfd)
label: ;label definitions recommended to use ":" colons
|
| ARM Instruction Cycle Times |
Instruction Cycles Additional
---------------------------------------------------------------------
ALU 1S +1S+1N if R15 loaded, +1I if SHIFT(Rs)
MSR,MRS 1S
LDR 1S+1N+1I +1S+1N if R15 loaded
STR 2N
LDM nS+1N+1I +1S+1N if R15 loaded
STM (n-1)S+2N
SWP 1S+2N+1I
B,BL 2S+1N
SWI,trap 2S+1N
MUL 1S+ml
MLA 1S+(m+1)I
MULL 1S+(m+1)I
MLAL 1S+(m+2)I
CDP 1S+bI
LDC,STC (n-1)S+2N+bI
MCR 1N+bI+1C
MRC 1S+(b+1)I+1C
{cond} false 1S
|
n = number of words transferred b = number of cycles spent in coprocessor busy-wait loop m = depends on most significant byte(s) of multiplier operand |
| ARM Versions |
| SNES Cart OBC1 (OBJ Controller) (1 game) |
Metal Combat: Falcon's Revenge (1993) Intelligent Systems/Nintendo (Note: the game also requires a Super Scope lightgun) |
7FF0h OAM Xloc = [Base+Index*4+0] (R/W) 7FF1h OAM Yloc = [Base+Index*4+1] (R/W) 7FF2h OAM Tile = [Base+Index*4+2] (R/W) 7FF3h OAM Attr = [Base+Index*4+3] (R/W) 7FF4h OAM Bits = [Base+Index/4+200h].Bit((Index AND 3)*2+0..1) (R?/W) 7FF5h Base for 220h-byte region (bit0: 0=7C00h, 1=7800h) 7FF6h Index (OBJ Number) (0..127) 7FF7h Unknown (set to 00h or 0Ah) (maybe SRAM vs I/O mode select) |
| SNES Cart S-DD1 (Data Decompressor) (2 games) |
Star Ocean (6MB ROM, 8KB RAM) (1996) tri-Ace/Enix (JP) Street Fighter Alpha 2 (4MB ROM, no RAM) (1996) Capcom (NA) (JP) (EU) |
4800h DMA Enable 1 (bit0..7 = DMA 0..7) (unchanged after DMA) 4801h DMA Enable 2 (bit0..7 = DMA 0..7) (automatically cleared after DMA) 4802h Unknown ;\set to 0000h by Star Ocean (maybe SRAM related) 4803h Unknown ;/unused by Street Fighter Alpha 2 4804h ROM Bank for C00000h-CFFFFFh (in 1MByte units) 4805h ROM Bank for D00000h-DFFFFFh (in 1MByte units) 4806h ROM Bank for E00000h-EFFFFFh (in 1MByte units) 4807h ROM Bank for F00000h-FFFFFFh (in 1MByte units) <DMA> DMA from ROM returns Decompressed Data (originated at DMA start addr) |
???-??? SRAM (if any) 008000h-00FFFFh Exception Handlers, mapped in LoROM-fashion (ROM 0..7FFFh) C00000h-CFFFFFh ROM (mapped via Port 4804h) (in HiROM fashion) D00000h-DFFFFFh ROM (mapped via Port 4805h) (in HiROM fashion) E00000h-EFFFFFh ROM (mapped via Port 4806h) (in HiROM fashion) F00000h-FFFFFFh ROM (mapped via Port 4807h) (in HiROM fashion) |
SHVC-1NON-01 CartSlotPin59 not connected (no C12 capacitor on PA1 pin) SHVC-1NON-10 Strange revision (capacitor C12 between PA1 and GND) SNSP-1NON-10 PAL version (S-DD1.Pin82 wired to ... VCC?) (also with C12) SHVC-LN3B-01 Version with additional SRAM for Star Ocean |
1-81 Unknown 82 PAL/NTSC (for CIC mode) 83-100 Unknown |
| SNES Cart S-DD1 Decompression Algorithm |
input=[src], src=src+1 if (input AND C0h)=00h then num_planes = 2 if (input AND C0h)=40h then num_planes = 8 if (input AND C0h)=80h then num_planes = 4 if (input AND C0h)=C0h then num_planes = 0 if (input AND 30h)=00h then high_context_bits=01c0h, low_context_bits=0001h if (input AND 30h)=10h then high_context_bits=0180h, low_context_bits=0001h if (input AND 30h)=20h then high_context_bits=00c0h, low_context_bits=0001h if (input AND 30h)=30h then high_context_bits=0180h, low_context_bits=0003h input=(input SHL 11) OR ([src+1] SHL 3), src=src+1, valid_bits=5 for i=0 to 7 do bit_ctr[i]=00h, prev_bits[i]=0000h for i=0 to 31 do context_states[i]=00h, context_MPS[i]=00h plane=0, yloc=0, raw=0 |
if num_planes=0
for plane=0 to 7 do GetBit(plane)
[dst]=raw, dst=dst+1
else if (plane AND 1)=0
for i=0 to 7 do GetBit(plane+0), GetBit(plane+1)
[dst]=prev_bits[plane] AND FFh, dst=dst+1, plane=plane+1
else
[dst]=prev_bits[plane] AND FFh, dst=dst+1, plane=plane-1
yloc=yloc+1, if yloc=8 then yloc=0, plane = (plane+2) AND (num_planes-1)
|
context = (plane AND 1) SHL 4 context = context OR ((prev_bits[plane] AND high_context_bits) SHR 5) context = context OR (prev_bits[plane] AND low_context_bits) pbit=ProbGetBit(context) prev_bits[plane] = (prev_bits[plane] SHL 1) + pbit if num_planes=0 then raw = (raw SHR 1)+(pbit SHL 7) |
state=context_states[context]
code_size=EvolutionCodeSize[state]
if (bit_ctr[code_size] AND 7Fh)=0 then
bit_ctr[code_size]=GetCodeword(code_size)
pbit=context_MPS[context]
bit_ctr[code_size] = bit_ctr[code_size]-1
if bit_ctr[code_size]=00h ;"GolombGetBit"
context_states[context]=EvolutionLpsNext[state]
pbit=pbit XOR 1
if state<2 then context_MPS[context]=pbit
else if bit_ctr[code_size]=80h
context_states[context]=EvolutionMpsNext[state]
return pbit
|
if valid_bits=0 then input=input OR [src], src=src+1, valid_bits=8
input=input SHL 1, valid_bits=valid_bits-1
if (input AND 8000h)=0 return 80h+(1 SHL code_size)
tmp=((input SHR 8) AND 7Fh) OR (7Fh SHR code_size)
input=input SHL code_size, valid_bits=valid_bits-code_size
if valid_bits<0 then
input=input OR (([src] SHL (-valid_bits))
src=src+1, valid_bits=valid_bits+8
return RunTable[tmp]
|
0 , 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3 4 , 4, 5, 5, 6, 6, 7, 7, 0, 1, 2, 3, 4, 5, 6, 7 |
25, 2, 3, 4, 5, 6, 7, 8, 9,10,11,12,13,14,15,16,17 18,19,20,21,22,23,24,24,26,27,28,29,30,31,32,24 |
25, 1, 1, 2, 3, 4, 5, 6, 7, 8, 9,10,11,12,13,14,15 16,17,18,19,20,21,22,23, 1, 2, 4, 8,12,16,18,22 |
128, 64, 96, 32, 112, 48, 80, 16, 120, 56, 88, 24, 104, 40, 72, 8 124, 60, 92, 28, 108, 44, 76, 12, 116, 52, 84, 20, 100, 36, 68, 4 126, 62, 94, 30, 110, 46, 78, 14, 118, 54, 86, 22, 102, 38, 70, 6 122, 58, 90, 26, 106, 42, 74, 10, 114, 50, 82, 18, 98, 34, 66, 2 127, 63, 95, 31, 111, 47, 79, 15, 119, 55, 87, 23, 103, 39, 71, 7 123, 59, 91, 27, 107, 43, 75, 11, 115, 51, 83, 19, 99, 35, 67, 3 125, 61, 93, 29, 109, 45, 77, 13, 117, 53, 85, 21, 101, 37, 69, 5 121, 57, 89, 25, 105, 41, 73, 9, 113, 49, 81, 17, 97, 33, 65, 1 |
| SNES Cart SPC7110 (Data Decompressor) (3 games) |
Far East of Eden Zero (with RTC-4513) (1995) Red Company/Hudson Soft (JP) Momotaro Dentetsu Happy (1996) Hudson Soft (JP) Super Power League 4 (1996) Hudson Soft (JP) |
| SNES Cart SPC7110 Memory and I/O Map |
4800h..4842h SPC7110 I/O Ports 6000h..7FFFh Battery-backed SRAM (8K bytes, in all 3 games) 8000h..FFFFh Exception Handlers (Program ROM offset 8000h..FFFFh) C00000h..CFFFFFh Program ROM (1MByte) (HiROM) D00000h..DFFFFFh Data ROM (1MByte-fragment mapped via Port 4831h) E00000h..EFFFFFh Data ROM (1MByte-fragment mapped via Port 4832h) F00000h..FFFFFFh Data ROM (1MByte-fragment mapped via Port 4833h) |
000000h..0FFFFFh Program ROM (1MByte) (HiROM) 100000h..xFFFFFh Data ROM (1MByte, 2MByte, or 4MByte max) |
4800h -- Decompressed Data Read
4801h 00 Compressed Data ROM Directory Base, bit0-7
4802h 00 Compressed Data ROM Directory Base, bit8-15
4803h 00 Compressed Data ROM Directory Base, bit16-23
4804h 00 Compressed Data ROM Directory Index
4805h 00 Decompressed Data RAM Target Offset, bit0-7 OFFSET IN BANK $50
4806h 00 Decompressed Data RAM Target Offset, bit8-15 OFFSET IN BANK $50
4807h 00 Unknown ("DMA Channel for Decompression")
4808h 00 Unknown ("C r/w option, unknown")
4809h 00 Decompressed Data Length Counter, bit0-7
480Ah 00 Decompressed Data Length Counter, bit8-15
480Bh 00 Unknown ("Decompression Mode")
480Ch 00 Decompression Status (bit7: 0=Busy/Inactive, 1=Ready/DataAvailable)
|
4810h 00 Data ROM Read from [Base] or [Base+Offs], and increase Base or Offs 4811h 00 Data ROM Base, bit0-7 (R/W) 4812h 00 Data ROM Base, bit8-15 (R/W) 4813h 00 Data ROM Base, bit16-23 (R/W) 4814h 00 Data ROM Offset, bit0-7 ;\optionally Base=Base+Offs 4815h 00 Data ROM Offset, bit8-15 ;/on writes to both of these registers 4816h 00 Data ROM Step, bit0-7 4817h 00 Data ROM Step, bit8-15 4818h 00 Data ROM Mode 481Ah 00 Data ROM Read from [Base+Offset], and optionally set Base=Base+Offs |
4820h 00 Dividend, Bit0-7 / Multiplicand, Bit0-7 4821h 00 Dividend, Bit8-15 / Multiplicand, Bit8-15 4822h 00 Dividend, Bit16-23 4823h 00 Dividend, Bit24-31 4824h 00 Multiplier, Bit0-7 4825h 00 Multiplier, Bit8-15, Start Multiply on write to this register 4826h 00 Divisor, Bit0-7 4827h 00 Divisor, Bit8-15, Start Division on write to this register 4828h 00 Multiply/Divide Result, Bit0-7 4829h 00 Multiply/Divide Result, Bit8-15 482Ah 00 Multiply/Divide Result, Bit16-23 482Bh 00 Multiply/Divide Result, Bit24-31 482Ch 00 Divide Remainder, Bit0-7 482Dh 00 Divide Remainder, Bit8-15 482Eh 00 Multiply/Divide Reset (write = reset 4820h..482Dh) (write 00h) 482Fh 00 Multiply/Divide Status (bit7: 0=Ready, 1=Busy) |
4830h 00 SRAM Chip Enable/Disable (bit7: 0=Disable, 1=Enable) 4831h 00 Data ROM Bank for D00000h-DFFFFFh (1MByte, using HiROM mapping) 4832h 01 Data ROM Bank for E00000h-EFFFFFh (1MByte, using HiROM mapping) 4833h 02 Data ROM Bank for F00000h-FFFFFFh (1MByte, using HiROM mapping) 4834h 00 SRAM Bank Mapping?, workings unknown |
4840h 00 RTC Chip Enable/Disable (bit0: 0=Disable, 1=Enable) 4841h -- RTC Command/Index/Data Port 4842h -- RTC Ready Status |
| SNES Cart SPC7110 Decompression I/O Ports |
Byte0 Decompression Mode (00h,01h,02h) Byte1 Compressed Data ROM Source Pointer, bit16-23 ;\ordered as so Byte2 Compressed Data ROM Source Pointer, bit8-15 ; (ie. big-endian) Byte3 Compressed Data ROM Source Pointer, bit0-7 ;/ |
00 - manual decompression, $4800 is used to read directly from the data rom |
02 - hardware decompression, decompressed data is mapped to $50:0000,
$4800 can be used to read sequentially from bank $50
|
DECOMPRESSION FINISHED STATUS: high bit set = done, high bit clear = processing, cleared after successful read, high bit is cleared after writing to $4806, $4809/A is set to compressed data length --- decompression mode is activated after writing to $4806 and finishes after reading the high bit of $480C |
| SNES Cart SPC7110 Direct Data ROM Access |
0 Select Step (for 4810h) (0=Increase by 1, 1=Increase by "Step" Value) 1 Enable Offset (for 4810h) (0=Disable/Read Ptr, 1=Enable/Read Ptr+Offset) 2 Expand Step from 16bit to 24bit (0=Zero-expand, 1=Sign-expand) 3 Expand Offset from 8bit?/16bit to 24bit (0=Zero-expand, 1=Sign-expand) 4 Apply Step (after 4810h read) (0=On 24bit Pointer, 1=On 16bit Offset) 5-6 Special Actions (see below) 7 Unused (should be zero) |
0=No special actions 1=After Writing $4814/5 --> 8 bit offset addition using $4814 2=After Writing $4814/5 --> 16 bit offset addition using $4814/5 3=After Reading $481A --> 16 bit offset addition using $4814/5 |
4818 write: set command mode, 4818 read: performs action instead of returning value, unknown purpose command mode is loaded to $4818 but only set after writing to both $4814 and $4815 in any order $4811/2/3 may increment on a $4810 read depending on mode byte) $4814/$4815 is sometimes incremented on $4810 reads (depending on mode byte) |
| SNES Cart SPC7110 Multiply/Divide Unit |
4820h Dividend, Bit0-7 / Multiplicand, Bit0-7 4821h Dividend, Bit8-15 / Multiplicand, Bit8-15 4822h Dividend, Bit16-23 4823h Dividend, Bit24-31 4824h Multiplier, Bit0-7 4825h Multiplier, Bit8-15, Start Multiply on write to this register 4826h Divisor, Bit0-7 4827h Divisor, Bit8-15, Start Division on write to this register 4828h Multiply/Divide Result, Bit0-7 4829h Multiply/Divide Result, Bit8-15 482Ah Multiply/Divide Result, Bit16-23 482Bh Multiply/Divide Result, Bit24-31 482Ch Divide Remainder, Bit0-7 482Dh Divide Remainder, Bit8-15 482Eh Multiply/Divide Reset (write = reset 4820h..482Dh) (write 00h) 482Fh Multiply/Divide Status (bit7: 0=Ready, 1=Busy) |
482Eh.bit0 (0=unsigned, 1=signed) (un)signed div0 returns --> result=00000000h, remainder=dividend AND FFFFh -80000000h/-1 returns <unknown> ? |
| SNES Cart SPC7110 with RTC-4513 Real Time Clock (1 game) |
Far East of Eden Zero (with RTC-4513) (1995) Red Company/Hudson Soft (JP) |
4840h RTC Chip Select (bit0: 0=Deselect: CE=LOW, 1=Select: CE=HIGH) 4841h RTC Data Port (bit0-3: Command/Index/Data) 4842h RTC Status (bit7: 1=Ready, 0=Busy) (for 4bit transfers) |
03h Write-Mode 0Ch Read-Mode |
Index Bit3 Bit2 Bit1 Bit0 Expl. 0 Sec3 Sec2 Sec1 Sec0 Seconds, Low 1 LOST Sec6 Sec5 Sec4 Seconds, High 2 Min3 Min2 Min1 Min0 Minutes, Low 3 WRAP Min6 Min5 Min4 Minutes, High 4 Hour3 Hour2 Hour1 Hour0 Hours, Low 5 WRAP PM/AM Hour5 Hour4 Hours, High 6 Day3 Day2 Day0 Day0 Day, Low ;\ 7 WRAP RAM Day5 Day4 Day, High ; 8 Mon3 Mon2 Mon1 Mon0 Month, Low ; or optionally, 9 WRAP RAM RAM Mon4 Month, High ; 6x4bit User RAM A Year3 Year2 Year1 Year0 Year, Low ; B Year7 Year6 Year5 Year4 Year, High ;/ C WRAP Week2 Week1 Week0 Day of Week D 30ADJ IRQ-F CAL/HW HOLD Control Register D E RATE1 RATE0 DUTY MASK Control Register E F TEST 24/12 STOP RESET Control Register F |
Sec Seconds (BCD, 00h..59h) Min Minutes (BCD, 00h..59h) Hour Hours (BCD, 00h..23h or 01h..12h) Day Day (BCD, 01h..31h) Month Month (BCD, 01h..12h) Year Year (BCD, 00h..99h) Week Day of Week (0..6) (Epson suggests 0=Monday as an example) PM/AM Set for PM, cleared for AM (is that also in 24-hour mode?) WRAP Time changed during access (reset on CE=LOW, set on seconds increase) HOLD Pause clock when set (upon clearing increase seconds by 1 if needed) LOST Time lost (eg. battery failure) (can be reset by writing 0) IRQ-F Interrupt Flag (Read-only, set when: See Rate, cleared when: See Duty) RATE Interrupt Rate (0=Per 1/64s, 1=Per Second, 2=Per Minute, 3=Per Hour) DUTY Interrupt Duty (0=7.8ms, 1=Until acknowledge, ie. until IRQ-F read) MASK Interrupt Disable (when set: IRQ-F always 0, STD.P always High-Z) TEST Reserved for Epson's use (should be 0) (auto-cleared on CE=LOW) RAM General purpose RAM (usually 3bits) (24bits when Calendar=off) CAL/HW Calendar Enable (1=Yes/Normal, 0=Use Day/Mon/Year as 24bit user RAM) 24/12 24-Hour Mode (0=12, 1=24) (Time/Date may get corrupted when changed!) 30ADJ Set seconds to zero, and, if seconds was>=30, increase minutes STOP Stop clock while set (0=Stop, 1=Normal) RESET Stop clock and reset seconds to 00h (auto-cleared when CE=LOW) |
| SNES Cart SPC7110 Decompression Algorithm |
initialize
while len>0
decoded=0
con=0, decompression_core
con=1+decoded, decompression_core
con=3+decoded, decompression_core
con=7+decoded, decompression_core
out = (out SHL 4) XOR (((out SHR 12) XOR decoded) AND Fh)
decoded=0
con=15, decompression_core
con=15+1+decoded, decompression_core
con=15+3+decoded, decompression_core
con=15+7+decoded, decompression_core
out = (out SHL 4) XOR (((out SHR 12) XOR decoded) AND Fh)
[dst]=(out AND FFh), dst=dst+1, len=len-1
|
initialize
while len>0
if (buf_index AND 01h)=0
for pixel=0 to 7
a = (out SHR 2) AND 03h
b = (out SHR 14) AND 03h
decoded=0
con = get_con(a,b,c)
decompression_core
con = con*2+5+decoded
decompression_core
do_pixel_order(a,b,c,2,decoded)
plane0.bits(7..0) = out.bits(15,13,11,9,7,5,3,1)
plane1.bits(7..0) = out.bits(14,12,10,8,6,4,2,0)
[dst]=plane0
else
[dst]=plane1
buf_index=buf_index+1, dst=dst+1, len=len-1
|
initialize
while len>0
if (buf_index AND 11h)=0
for pixel=0 to 7
a = (out SHR 0) AND 0Fh
b = (out SHR 28) AND 0Fh
decoded=0
con=0
decompression_core
con=decoded+1
decompression_core
if con=2 then con=decoded+11 else con = get_con(a,b,c)+3+decoded*5
decompression_core
con=Mode2ContextTable[con]+(decoded AND 1)
decompression_core
do_pixel_order(a,b,c,4,decoded)
plane0.bits(7..0) = out.bits(31,27,23,19,15,11,7,3)
plane1.bits(7..0) = out.bits(30,26,22,18,14,10,6,2)
plane2.bits(7..0) = out.bits(29,25,21,17,13, 9,5,1)
plane3.bits(7..0) = out.bits(28,24,20,16,12, 8,4,0)
bitplanebuffer[buf_index+0] = plane2
bitplanebuffer[buf_index+1] = plane3
[dst]=plane0
else if (buf_index AND 10h)=0
[dst]=plane1
else
[dst]=bitplanebuffer[buf_index AND 0Fh]
buf_index=buf_index+1, dst=dst+1, len=len-1
|
src=directory_base+(directory_index*4) mode=[src+0] src=[src+3]+[src+2]*100h+[src+1]*10000h ;big-endian (!) buf_index=0 out=00000000h c=0 top=255 val.msb=[src], val.lsb=00h, src=src+1, in_count=0 for i=0 to 15 do pixelorder[i]=i for i=0 to 31 do ContextIndex[i]=0, ContextInvert[i]=0 |
decoded=(decoded SHL 1) xor ContextInvert[con]
evl=ContextIndex[con]
top = top - EvolutionProb[evl]
if val.msb > top
val.msb = val.msb-(top-1)
top = EvolutionProb[evl]-1
if top>79 then ContextInvert[con] = ContextInvert[con] XOR 1
decoded = decoded xor 1
ContextIndex[con] = EvolutionNextLps[evl]
else
if top<=126 then ContextIndex[con] = EvolutionNextMps[evl]
while(top<=126)
if in_count=0 then val.lsb=[src], src=src+1, in_count=8
top = (top SHL 1)+1
val = (val SHL 1), in_count=in_count-1 ;16bit val.msb/lsb
|
m=0, x=a, repeat, exchange(x,pixelorder[m]), m=m+1, until x=a for m=0 to (1 shl shift)-1 do realorder[m]=pixelorder[m] m=0, x=c, repeat, exchange(x,realorder[m]), m=m+1, until x=c m=0, x=b, repeat, exchange(x,realorder[m]), m=m+1, until x=b m=0, x=a, repeat, exchange(x,realorder[m]), m=m+1, until x=a out = (out SHL shift) + realorder[decoded] c = b |
if (a=b AND b=c) then return=0 else if (a=b) then return=1 else if (b=c) then return=2 else if (a=c) then return=3 else return=4 |
90,37,17, 8, 3, 1,90,63,44,32,23,17,12, 9, 7, 5, 4, 3, 2 90,72,58,46,38,31,25,21,17,14,11, 9, 8, 7, 5, 4, 4, 3, 2 2 ,88,77,67,59,52,46,41,37,86,79,71,65,60,55 |
1 , 6, 8,10,12,15, 7,19,21,22,23,25,26,28,29,31,32,34,35 20,39,40,42,44,45,46,25,26,26,27,28,29,30,31,33,33,34,35 36,39,47,48,49,50,51,44,45,47,47,48,49,50,51 |
1 , 2, 3, 4, 5, 5, 7, 8, 9,10,11,12,13,14,15,16,17,18, 5 20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38 5 ,40,41,42,43,44,45,46,24,48,49,50,51,52,43 |
0 ,0 ,0 ,15,17,19,21,23,25,25,25,25,25,27,29 |
| SNES Cart SPC7110 Notes |
Test123.ABCDABCDAAAAAAAAaaaabbbbccccdddd7654321076543210.Test123 |
68 91 36 15 F8 BF 42 35 2F 67 3D B7 AA 05 B4 F7 70 7A 26 20 EA 58 2C 09 61 00 C5 00 8C 6F FF D1 42 9D EE 7F 72 87 DF D6 5F 92 65 00 00 |
4B F6 80 1E 3A 4C 42 6C DA 16 0F C6 44 ED 64 10 77 AF 50 00 05 C0 01 27 22 B0 83 51 05 32 4A 1E 74 93 08 76 07 E5 32 12 B4 99 9E 55 A3 F8 00 |
13 B3 27 A6 F4 5C D8 ED 6C 6D F8 76 80 A7 87 20 39 4B 37 1A CC 3F E4 3D BE 65 2D 89 7E 0B 0A D3 46 D5 0C 1F D3 81 F3 AD DD E8 5C C0 BD 62 AA CB F8 B5 38 00 |
SHVC-BDH3B-01 (without RTC) SHVC-LDH3C-01 (with RTC) |
| SNES Cart Unlicensed Variants |
A Bug's Life 2MB, CRC32=014F0FCFh Aladdin 2000 2MB, CRC32=752A25D3h Bananas de Pijamas 1MB, CRC32=52B0D84Bh Digimon Adventure 2MB, CRC32=4F660972h King of Fighters 2000 (aka KOF2000) 3MB, CRC32=A7813943h Pocket Monster (aka Picachu) 2MB, CRC32=892C6765h Pokemon Gold Silver 2MB, CRC32=7C0B798Dh Pokemon Stadium 2MB, CRC32=F863C642h Soul Edge Vs Samurai 2MB, CRC32=5E4ADA04h Street Fighter EX Plus Alpha 2MB, CRC32=DAD59B9Fh X-Men vs. Street Fighter 2MB, CRC32=40242231h |
80-xx:8000-FFFF Read 8bit Latch (bits re-ordered as: 0,6,7,1,2,3,4,5) 88-xx:8000-FFFF Write 8bit Latch (bits ordered as: 7,6,5,4,3,2,1,0) |
Soul Blade 3MB, CRC32=C97D1D7Bh |
80-BF:8000-FFFF Filled with a constant 4-byte pattern (55h,0Fh,AAh,F0h) C0-FF:0000-FFFF Open bus (not used) |
Tekken 2 2MB, CRC32=066687CAh |
[80-BF:80xx]=0Fh,00h Clear all 6 bits [80-BF:81xx]=xxh Probably "No Change" (unused, except for Reading) [80-BF:82xx]=FFh,00h Set Data bit0 [80-BF:83xx]=FFh,00h Set Data bit1 [80-BF:84xx]=FFh,00h Set Data bit2 [80-BF:85xx]=FFh,00h Set Data bit3 [80-BF:86xx]=FFh,00h Set ALU Direction bit (0=Up/Left, 1=Down/Right) [80-BF:87xx]=FFh,00h Set ALU Function bit (0=Count, 1=Shift) X=[80-BF:81xx] Return "4bitData plus/minus/shl/shr 1" ;the above specs are based on 12 known/guessed results (as guessed by d4s), ;the remaining 52 combinations are probably following same rules (not tested ;on real hardware). theoretically some ports might do things like "set bitX ;and clear bitY", in that case, there would be more than 64 combinations. |
| SNES Cart S-RTC (Realtime Clock) (1 game) |
Dai Kaiju Monogatari 2 (1996) Birthday/Hudson Soft (JP) |
002800h S-RTC Read (R) 002801h S-RTC Write (W) |
Send <0Eh,04h,0Dh,0Eh,00h,Timestamp(12 digits),0Dh> to [002801h] If ([002800h] AND 0F)=0Fh then read <Timestamp(13 digits)> If ([002800h] AND 0F)=0Fh then read <Timestamp(13 digits)> If ([002800h] AND 0F)=0Fh then read <Timestamp(13 digits)> If ([002800h] AND 0F)=0Fh then read <Timestamp(13 digits)> etc. |
Seconds.lo (BCD, 0..9) Seconds.hi (BCD, 0..5) Minutes.lo (BCD, 0..9) Minutes.hi (BCD, 0..5) Hours.lo (BCD, 0..9) Hours.hi (BCD, 0..2) Day.lo (BCD, 0..9) Day.hi (BCD, 0..3) Month (HEX, 01h..0Ch) Year.lo (BCD, 0..9) Year.hi (BCD, 0..9) Century (HEX, 09h..0Ah for 19xx..20xx) |
Day of Week? (0..6) (unknown if RTC assigns sth like 0=Sunday or 0=Monday) |
| SNES Cart Super Gameboy |
SGB CPU - 80pin - Super Gameboy CPU/Video/Audio Chip ICD2-R (or ICD2-N) - 44pin - Super Gameboy SGB-to-SNES Interface Chip |
6000 R LCD Character Row and Buffer Write-Row 6001 W Character Buffer Read Row Select 6002 R 16-Byte Packet Available Flag 6003 W Reset/Multiplayer/Speed Control 6004-6007 W Controller Data for Player 1-4 6008-600E - Unused (Open Bus, or mirror of 600Fh on some chips) 600F R Chip Version (21h or 61h) 6800-680F - Unused (Open Bus) 7000-700F R 16-byte command packet (addr 7000..700F) 7800 R Character Buffer Data (320 bytes of currently selected row) 7801-780F R Unused (Mirrors of 7800h, not Open Bus) |
CPU Open Bus values (though, for some reason, usually with bit3=1). |
6001h.R, 6004h-6005h.R --> mirror of 6000h.R 6003h.R, 6006h-6007h.R --> mirror of 6002h.R 6008h-600Eh.R --> mirror of 600Fh.R |
7-3 Current Character Row on Gameboy LCD (0..11h) (11h=Last Row, or Vblank) 2 Seems to be always zero 1-0 Current Character Row WRITE Buffer Number (0..3) |
7-2 Unknown/unused (should be zero) 1-0 Select Character Row READ Buffer Number (0..3) |
7-1 Seems to be always zero 0 New 16-byte Packet Available (0=None, 1=Yes) |
7 Reset Gameboy CPU (0=Reset, 1=Normal) 6 Unknown/unused (should be zero) 5-4 num_controllers (0,1,3=One,Two,Four) (default 0=One Player) 3-2 Unknown/unused (should be zero) 1-0 SGB CPU Speed (0..3 = 5MHz,4MHz,3MHz,2.3MHz) (default 1=4MHz) |
7 Start (0=Pressed, 1=Released) 6 Select (0=Pressed, 1=Released) 5 Button B (0=Pressed, 1=Released) 4 Button A (0=Pressed, 1=Released) 3 Down (0=Pressed, 1=Released) 2 Up (0=Pressed, 1=Released) 1 Left (0=Pressed, 1=Released) 0 Right (0=Pressed, 1=Released) |
7-0 ICD2 Chip Version |
21h = ICD2-R (without company logo on chip package) 61h = ICD2-R (with company logo on chip package) ?? = ICD2-N (this one is used in SGB2) |
7-0 Data |
7-0 Data (320 bytes; from Buffer Row number selected in Port 6001h) |
http://problemkaputt.de/pandocs.htm http://problemkaputt.de/pandocs.txt |
* JUMP does always destroy the NMI vector (even if it's 000000h) * (The SGB BIOS doesn't seem to use NMIs, so destroying it doesn't harm) * JUMP can return via 16bit retadr (but needs to force program bank 00h) * After JUMP, all RAM can be used, except [0000BBh..0000BDh] (=NMI vector) * The IRQ/COP/BRK vectors/handlers are in ROM, ie. only NMIs can be hooked * APU Boot-ROM can be executed via MOV [2140h],FEh (but Echo-Write is kept on) * The TEST_EN command points to a RET opcode (ie. it isn't implemented) * Upon RESET, six packets with gameboy cart header are sent by gameboy bios * command 19h does allow to change an undoc flag (maybe palette related?) * command 1Ah..1Fh point to RET (no function) (except 1Eh = boot info) * sgb cpu speed can be changed (unknown if/how supported by sgb bios) |
Codes for Super GameBoy Hardware Enter these codes very quickly for the desired effect. After choosing a border from 4 - 10, press L + R to exit. Press L, L, L, L, R, L, L, L, L, R. - Screen Savers At the Super Game Boy, press L, L, L, R, R, R, L, L, L, R, R, R, R, R, R, R - Super Gameboy Credits Hold UP as you turn on the SNES and then press L, R, R, L, L, R - Toggle Speed During a game, press L, R, R, L, L, R - Toggle Speed During a game, press R, L, L, R, R, L - Toggle Sound -- |
| SNES Cart Satellaview (satellite receiver & mini flashcard) |
| SNES Cart Satellaview I/O Map |
2188h Stream 1 Hardware Channel Number, Lsb (R/W) 2189h Stream 1 Hardware Channel Number, Msb (R/W) 218Ah Stream 1 Queue Size (number of received 1+22 byte Units) (R) 218Bh Stream 1 Queue 1-byte Status Units (Read=Data, Write=Reset) 218Ch Stream 1 Queue 22-byte Data Units (Read=Data, Write=Reset/Ack) 218Dh Stream 1 Status Summary (R) 218Eh Stream 2 Hardware Channel Number, Lsb (R/W) 218Fh Stream 2 Hardware Channel Number, Msb (R/W) 2190h Stream 2 Queue Size (number of received 1+22 byte Units) (R) 2191h Stream 2 Queue 1-byte Status Unit(s?) (Read=Data, Write=Reset) 2192h Stream 2 Queue 22-byte? Data Unit(s?) (Read=Data, Write=Reset/Ack) 2193h Stream 2 Status Summary (R) 2194h POWER (bit0) and ACCESS (bit2-3) LED Control? (R/W) 2195h Unknown/Unused, maybe for EXT Expansion Port (?) 2196h Status (only bit1 is tested) (R) 2197h Control (only bit7 is modified) (R/W) 2198h Serial I/O Port 1 (R/W) 2199h Serial I/O Port 2 (R/W) |
C00000h Type 1-4 Detection Command (W) C00002h Type 1-4 Detection Status (R) C0FFxxh Type 1-4 Detection Response (R) C00000h Type 1,3,4 Command for Type 1,3,4 (W) C00000h Type 1,3,4 Status (normal commands) (R) C00004h Type 1,3 Status (erase-entire command) (R) C02AAAh Type 2 Command/Key for Type2 (W) C05555h Type 2 Command/Status for Type2 (R/W) xx0000h Type 1-4 Erase 64K Sector Address (W) xxxxxxh Type 1-4 Write Data Address (W) |
005000h Unknown/Unused 015000h Bank 00h-3Fh and 80h-FFh (0=FLASH, 1=PSRAM) (?) 025000h Mapping for PSRAM/FLASH (0=32K/LoROM, 1=64K/HiROM) 035000h Bank 60h-6Fh (0=FLASH, 1=PSRAM) (?) 045000h Unknown (set when mapping PSRAM as Executable or Streaming Buffer) 055000h Bank 40h-4Fh (0=PSRAM, 1=FLASH) ;\probably also affects Banks 00h-3Fh 065000h Bank 50h-5Fh (0=PSRAM, 1=FLASH) ;/and maybe 80h-BFh when BIOS is off? 075000h Bank 00h-1Fh (0=PSRAM/FLASH, 1=BIOS) 085000h Bank 80h-9Fh (0=PSRAM/FLASH, 1=BIOS) 095000h Unknown/Unused (except: used by BS Dragon Quest, set to 00h) 0A5000h Unknown/Unused (except: used by BS Dragon Quest, set to 80h) 0B5000h Unknown/Unused (except: used by BS Dragon Quest, set to 80h) 0C5000h Bank C0h-FFh FLASH Reads? (0=Disable, 1=Enable) 0D5000h Bank C0h-FFh FLASH Writes (0=Disable, 1=Enable) 0E5000h Apply Changes to Other MCC Registers (0=Unused/Reserved, 1=Apply) 0F5000h Unknown/Unused |
| SNES Cart Satellaview I/O Ports of MCC Memory Controller |
005000h Unknown/Unused 015000h Bank 00h-3Fh and 80h-FFh (0=FLASH, 1=PSRAM) (?) 025000h Mapping for PSRAM/FLASH (0=32K/LoROM, 1=64K/HiROM) 035000h Bank 60h-6Fh (0=FLASH, 1=PSRAM) (?) 045000h Unknown (set when mapping PSRAM as Executable or Streaming Buffer) 055000h Bank 40h-4Fh (0=PSRAM, 1=FLASH) ;\probably also affects Banks 00h-3Fh 065000h Bank 50h-5Fh (0=PSRAM, 1=FLASH) ;/and maybe 80h-BFh when BIOS is off? 075000h Bank 00h-1Fh (0=PSRAM/FLASH, 1=BIOS) 085000h Bank 80h-9Fh (0=PSRAM/FLASH, 1=BIOS) 095000h Unknown/Unused 0A5000h Unknown/Unused 0B5000h Unknown/Unused 0C5000h Bank C0h-FFh FLASH Reads? (0=Disable, 1=Enable) 0D5000h Bank C0h-FFh FLASH Writes (0=Disable, 1=Enable) 0E5000h Apply Changes to Other MCC Registers (0=Unused/Reserved, 1=Apply) 0F5000h Unknown/Unused |
00-0F:5000 MCC I/O Ports (Memory Control, BIOS/PSRAM/FLASH Enable) 10-1F:5000-5FFF SRAM (32Kbyte SRAM in 4K-banks) xx-3F:6000-7FFF PSRAM (Mirror of 8K at PSRAM offset 06000h..07FFFh) 00-3F:8000-FFFF PSRAM/FLASH/BIOS in 32K-banks (Slow LoROM mapping) 40-4F:0000-FFFF PSRAM/FLASH (for Executables with Slow HiROM mapping) 50-5F:0000-FFFF PSRAM/FLASH (for Executables with Slow HiROM mapping) 60-6F:0000-FFFF FLASH/PSRAM (for use as Work RAM or Data Files) 70-77:0000-FFFF PSRAM 80-BF:8000-FFFF PSRAM/FLASH/BIOS in 32K-banks (Fast LoROM mapping) C0-FF:0000-FFFF PSRAM/FLASH (FLASH with R/W Access) |
BIOS ROM 1MByte (LoROM mapping, 20h banks of 32Kbytes each) FLASH 1Mbyte (can be mapped as LoROM, HiROM, or Work Storage) PSRAM 512Kbyte (can be mapped as LoROM, HiROM, or Work RAM) SRAM 32Kbyte (mapped in eight 4K banks) |
| SNES Cart Satellaview I/O Receiver Data Streams |
0-15 Hardware Channel Number (16bit)
XXX reportedly only 14bit !?
|
0-6 Number of received Units contained in the Queue (0..127) 7 Overrun Error Flag (set when received more than 127 units) |
0-1 Unknown/unused 2-3 Error Flags (probably set on checksum errors or lost data/timeouts) 4 Packet Start Flag (0=Normal, 1=First Frame of Packet) (with Header) 5-6 Unknown/unused 7 Packet End Flag (0=Normal, 1=Last Frame of Packet) |
| SNES Cart Satellaview I/O Receiver Data Streams (Notes) |
MOV A,01h ;\ MOV [218Bh],A ; must be executed in FAST memory (at 3.58MHz) (otherwise the NOP ; the Status Queue may be not in sync with the Data Queue) NOP ; (for Stream 2 do the same with Port 2192h/2193h accordingly, NOP ; though the existing games that do use Stream 2 are including NOP ; several near-excessive timing bugs in that section) MOV [218Ch],A ;/ |
N=[218Ah] ;-get queue size if N=0 then exit ;-exit if no data in queues if N.Bit7=1 then reset_queue/abort_packet/exit ;-handle overrun error N=max(20,N) ;-limit to max 20 (if desired) for i=0 to (N-1), stat[i]=[219Bh], next ;-read status units stat_summary=[219Dh] ;-get status summary for i=0 to (N*22-1), data[i]=[219Ch], next ;-read data units |
90h ;packet is 1 frame (10-byte header + 12-byte data) 10h,80h ;packet is 2 frames (10-byte header + 34-byte data) 10h,00h,80h ;packet is 3 frames (10-byte header + 56-byte data) 10h,00h,00h,80h ;packet is 4 frames (10-byte header + 78-byte data) |
| SNES Cart Satellaview I/O Receiver Control |
0 Usually set <-- is ZERO by Itoi (maybe POWER LED) (see? 2196h.Bit0) 1 Usually zero <-- is SET by Itoi (see? 2196h.Bit0) 2-3 Usually both set or both cleared (maybe ACCESS LED) (Bit2 is Access LED) 4-7 Usually zero |
0 Unknown (reportedly toggles at fast speed when 2194h.Bit0-or-1? is set) 1 Status (0=Okay, 1=Malfunction) 2-7 Unknown/unused |
0-6 Unknown/unused (should be left unchanged) 7 Power Down Mode? (0=Power Down, 1=Operate/Normal) (Soundlink enable?) |
0 Clock (must be manually toggled per data bit) 1-5 Unknown/unused (should be 0) 6 Chip Select - For Port 1: 1=Select / For Port 2: 0=Select 7 Data (Write=Data.Out, Read=Data.in) (data-in is directly poll-able) |
Reg[0] = 88h (or 00h when Power-Down?) (soundlink on/off?) Reg[1] = 80h Reg[2] = 04h Reg[3] = 00h Reg[4] = 08h Reg[5] = 00h Reg[6] = 70h Reg[7] = Not used Reg[8] = 00h Reg[9..FF] = Not used |
| SNES Cart Satellaview I/O FLASH Detection (Type 1,2,3,4) |
[C00000h]=38h, [C00000h]=D0h ;request chip info part 1 delay (push/pop A, three times each) ;delay [C00000h]=71h ;enter status mode repeat, X=[C00002h], until (X.bit7=1) ;wait until ready [C00000h]=72h, [C00000h]=75h ;request chip info part 2 FOR i=0 to 9, info[i]=BYTE[C0FF00h+i*2], NEXT ;read chip info (10 bytes) [C00000h]=FFh ;somewhat bugged, see below ;terminate status mode |
info[0] - ID1 (Must be "M" aka 4Dh) info[1] - ID2 (Must be "P" aka 50h) info[2] - Flags (Must be bit7=0 and bit0=0) (other bits unknown) info[3] - Device Info (upper 4bit=Type, lower 4bit=Size) info[4..9] - Unknown/Unused (BIOS copies them to RAM, but doesn't use them) |
| SNES Cart Satellaview I/O FLASH Access (Type 1,3,4) |
[C00000h]=50h ;clear status register [C00000h]=71h ;enter status mode repeat, X=[C00004h], until (X.bit3=0) ;wait until VPP voltage okay [C00000h]=A7h ;"erase all unlocked pages"? ;select erase entire-chip mode [C00000h]=D0h ;start erase [C00000h]=71h ;enter status mode repeat, X=[C00004h], until (X.bit7=1) ;wait until ready if (X.bit5=1) then set erase error flag ;check if erase error [C00000h]=FFh ;terminate status mode |
[C00000h]=50h ;clear status register [C00000h]=20h ;select erase sector mode [nn0000h]=D0h ;start erase 64K bank nn [C00000h]=70h ;enter status mode repeat, X=[C00000h], until (X.bit7=1) ;wait until ready ;; if (X.bit5=1) then set erase error flag ;check if erase error [C00000h]=FFh ;terminate status mode |
FOR i=first to last
[C00000h]=10h ;write byte command
[nnnnnnh+i]=data[i] ;write one data byte
[C00000h]=70h ;enter status mode
repeat, X=[C00000h], until (X.bit7=1) ;wait until ready
NEXT i
[C00000h]=70h ;enter status mode
repeat, X=[C00000h], until (X.bit7=1) ;hmmm, wait again
if (X.bit4=1) then set write error flag ;check if write error
[C00000h]=FFh ;terminate status mode
|
[C00000h]=71h ;enter status mode X=[C00004h] ;read status byte IF (X.bit7=0) THEN busy IF (X.bit3=1) THEN not-yet-ready-to-erase (VPP voltage low) IF (X.bit7=1) AND (X.bit5=0) THEN ready/okay IF (X.bit7=1) AND (X.bit5=1) THEN erase error ? |
[C00000h]=70h ;enter status mode |
[C00000h]=FFh ;terminate |
| SNES Cart Satellaview I/O FLASH Access (Type 2) |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=80h ;unlock erase [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=10h ;do erase entire chip [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=70h ;enter status mode repeat, X=[C05555h], until (X.bit7=1) ;wait until ready if (X.bit5=1) then set erase error flag ;check if erase error [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=F0h ;terminate status mode |
[C00000h]=50h ;huh? (maybe a BIOS bug) [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=80h ;unlock erase [C05555h]=AAh, [C02AAAh]=55h, [nn0000h]=30h ;do erase bank nn repeat, X=[C05555h], until (X.bit7=1) ;wait until ready if (X.bit5=1) then set erase error flag ;check if erase error [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=F0h ;terminate status mode |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=A0h ;enter write mode FOR i=first to last, [nnnnnn+i]=data[i] ;write 1..128 byte(s) [nnnnnn+last]=DATA[last] ;write LAST AGAIN ;start write operation [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=70h ;enter status mode repeat, X=[C05555h], until (X.bit7=1) ;wait until ready [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=F0h ;terminate status mode |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=70h ;enter status mode X=[C05555h] ;read status byte IF (X.bit7=0) THEN busy IF (X.bit7=1) AND (X.bit5=0) THEN ready/okay IF (X.bit7=1) AND (X.bit5=1) THEN ready/erase error ? |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=F0h ;terminate |
| SNES Cart Satellaview Packet Headers and Frames |
00h 1 Transmission ID (in upper 4bit) (must stay same for all fragments) 01h 1 Current Fragment Number (in lower 7bit) 02h 3 Fragment Size (N) (big-endian) (excluding first 5 bytes at [00..04]) 05h 1 Fixed, Must be 01h 06h 1 Total Number of Fragments (00h=Infinite Streaming?) 07h 3 Target Offset (big-endian) (location of fragment within whole file) 0Ah N-5 Data Body (first 12 bytes located directly in header frame) ... ... Unused/Padding (until begin of next 22-byte Frame) |
00h 1 Unknown/unused (would be 4bit Transmission ID for normal packets) 01h 1 Unknown/unused (would be 7bit Fragment Number for normal packets) 02h 3 Packet Size (N) (big-endian) (excluding first 5 bytes at [00..04]) 05h N Data Body (first 17 bytes located directly in header frame) ... ... Unused/Padding (until begin of next 22-byte Frame) |
00h End of Line (or return from a "\s" Sub-String)
0Dh Carriage Return Line Feed (in descriptions)
20h..7Eh ASCII 6pix characters (unlike SHIFT-JIS 12pix ones)
80h..9Fh Prefixes for double-byte characters (SHIFT-JIS)
A0h..DFh Japanese single-byte characters (JIS or so)
E0h..EAh Prefixes for double-byte characters (SHIFT-JIS)
F0h Prefix for Symbols (40h..51h:Music-Note,Heart,Dots,Faces,MaKenji)
"\\" Yen symbol (unlike ASCII, not a backslash)
"\b0".."\b3" Insert Username/Money/Gender/NumItems (12pix SHIFT-JIS)
"\c0".."\c5" Changes color or palette or so
"\d#",p24bit Insert 16bit Decimal at [p24bit] using 6pix-font
"\D#",p24bit Insert 16bit Decimal at [p24bit] using 12pix-font
"\du#",v24bit Insert 16bit Decimal Interpreter-Variable using 6pix-font
"\Du#",v24bit Insert 16bit Decimal Interpreter-Variable using 12pix-font
# = 00 Variable width (no leading spaces/zeroes)
# = 1..6 Width 1..6 chars (with leading spaces)
# = 01..06 Width 1..6 chars (with leading zeroes)
"\s",ptr24bit Insert Sub-string (don't nest with further "\s,\d,\D")
"\g",ptr24bit Insert Custom Graphics/Symbol (ptr to xsiz,ysiz,bitmap)
"\i" Carriage Return (set x=0, keep y=unchanged) (not so useful)
"\m0".."\m3" Flags (bit0=ForceHorizontal16pixGrid, bit1=DonNotUpdateBg3Yet)
"\n" Carriage Return Line Feed (same as 0Dh)
"\p00".."\p07" Palette
"\w00".."\w99" Character Delay in Frames (00=None)
"\x00".."\xNN" Set Xloc
"\y00".."\yNN" Set Yloc
|
| SNES Cart Satellaview Channels and Channel Map |
00h 2 ID 53h,46h ("SF")
02h 4 Unknown/unused
06h 1 Number of entries (must be at least 1)
07h 1 Checksum (above 7 bytes at [00..06] added together)
08h .. Entries (each one is 3+N*13 bytes)
|
00h 2 Software Channel Number (first 2 bytes, of total 4 bytes) 02h 1 Number of sub-entries (N) (must be at least 1) 03h N*13 Sub-entries (each one is 13 bytes) |
00h 1 Unknown/unused
01h 2 Software Channel Number (last 2 bytes, of total 4 bytes)
03h 5 Unknown/unused
08h 2 Fragment Interval (in seconds) (big-endian) (for use as timeout)
0Ah 1 Type/Target (lower 4bit indicate transfer method or so)
Bit0-1: Autostart after Download (0=No, 1=Optional, 2=Yes, 3=Crash)
Bit2-3: Target (0=WRAM, 1=PSRAM, 2=EntireFLASH, 3=FreeFLASH)
Bit4-7: Unknown/Unused
0Bh 2 Hardware Channel Number (2 bytes) (for Port 2188h/218Eh)
|
0121h Used for hardware-connection test (received data is ignored) 0124h Channel Map AAEEh Dummy number (often used to indicate an absent Time Channel) NNNNh Other Hardware Channels (as listed in Channel Map) [7FFFF7h] Incoming Time Channel value for some games (from separate loader?) |
1.1.0.4 Welcome Message (100 bytes) 1.1.0.5 Town Status (256 bytes) 1.1.0.6 Directory (16Kbytes) 1.1.0.7 SNES Patch (16Kbytes) 1.1.0.8 Time Channel (used by BS Satella2 1, BS Fire Emblem, and Itoi) 1.2.0.48 Time Channel (used by Dragon Quest 1, BS Zelda no Densetsu Remix) ?.?.?.? Time Channel (for BS Zelda - Kodai no Sekiban Dai 3 Hanashi) 1.2.129.0 Special Channel used by Derby Stallion 96 <-- on roof of building 1.2.129.16 Special Channel used by Derby Stallion 96 <-- 6th main menu option 1.2.130.N Special Channel(s) used by Itoi Shigesato no Bass Tsuri No. 1 N.N.N.N Other Software Channels (as listed in Directory) N.N.0.0 None (for directory entries that have no File or Include File) |
| SNES Cart Satellaview Town Status Packet |
00h 1 Flags (bit0=1=Invalid) (bit1-7=unknown/unused)
01h 1 Town Status ID (packet must be processed only if this ID changes)
02h 1 Directory ID (compared to Directory ID in Directory packet)
03h 4 Unknown/unused
07h 1 APU Sound Effects/Music & BSX Receiver Power-Down
Bit0-3 Unknown/unused
Bit4-5 APU (0=Mute, 1=Effects, 2=Effects/MusicA, 3=Effects/MusicB)
Bit6 BSX (0=Normal, 1=Power-down with Port 2199h Reg[0]=88h)
Bit7 BSX (0=Normal, 1=Power-down with Port 2199h Reg[0]=00h)
(Or, maybe, the "Power-down" stuff enables satellite radio,
being injected to audio-inputs on expansion port...?)
08h 1 Unknown/unused
09h 8 People Present Flags (Bit0-63) (max 5) (LITTLE-ENDIAN)
11h 2 Fountain Replacement & Season Flags (Bit0-15) (LITTLE-ENDIAN)
13h 4 Unknown/unused
17h 1 Number of File IDs (X) (may be 00h=none) (max=E8h)
18h X File IDs (one byte each) (compared against File ID in Directory)
|
None 00h Default Fountain (default when no bits set) (animated) Bit0 01h Jan Altar with Apple or so Bit1 02h Feb Red Roses arranged as a Heart Bit2 03h Mar Mohican-Samurai & Batman-Joker Bit3 04h Apr Pink Tree Bit4 05h May Origami with Fish-flag Bit5 06h Jun Decorative Mushrooms Bit6 07h Jul Palmtree Christmas with Plastic-Blowjob-Ghost? Bit7 08h Aug Melons & Sunshade Bit8 09h Sep White Rabbit with Joss Sticks & Billiard Balls Bit9 0Ah Oct National Boule-Basketball Bit10 0Bh Nov Red Hemp Leaf (cannabis/autum) Bit11 0Ch Dec Christmas Tree (with special Gimmick upon accessing it) |
None 00h Default (when no bits set) Bit12 01h Spring (pale green grass) (seems to be same as default) Bit13 02h Summery (poppy colors with high contrast) Bit14 03h Autumn (yellow/brown grass) Bit15 04h Winter (snow covered) |
| SNES Cart Satellaview Directory Packet |
00h 1 Directory ID (compared to Directory ID in Town Status packet) 01h 1 Number of Folders (Buildings, People, or hidden folders) 02h 3 Unknown/unused 05h .. Folders (and File) entries (see below) ;\together .. 1 Number of Expansion Data Entries (00h=none) ; max 3FFBh bytes .. .. Expansion Data Entries (see next chapter) ;/ |
00h 1 Flags (bit0=1=Invalid) (bit1-7=unknown/unused)
01h 1 Number of File Entries (if zero: buildings are usually closed)
02h 15h Folder Name (max 20 chars, terminated by 00h) (shown in building)
17h 1 Length of Folder Message (X) (in bytes, including ending 00h)
18h X Folder Message/Description (terminated by 00h)
18h+X 1 More Flags (Folder Type)
Bit0 : Folder Content (0=Download/Files, 1=Shop/Items)
Bit1-3 : Folder Purpose (0=Building, 1=Person, 2=Include-Files)
000b = Indoors (Building ID at [19h+X]) (Bit3-1=000b) (0)
x01b = Outdoors (Person ID at [19h+X]) (Bit2-1=01b) (1,5)
x1xb = Folder contains hidden Include Files (Bit2=1b) (2,3,6,7)
100b = Unknown/unused (may be useable for "Files at Home"?) (4)
Bit4-7 : Unknown/unused
19h+X 1 Folder 6bit ID (eg. for Building:01h=News, for People:01h=Hiroshi)
1Ah+X 1 Unknown/Unused
1Bh+X 1 Unknown/Unused
1Ch+X 1 Clerk/Avatar (00h..10h) (eg. 0Eh=Robot, 10h=BS-X) (11h..FFh=Crash)
1Dh+X 1 Unknown/Unused
1Eh+X 1 Unknown/Unused
1Fh+X 1 Unknown/Unused
20h+X .. File/Item Entries (each one is 32h+X bytes; for items: fixed X=79h)
|
00h 1 File ID (compared to File IDs in Town Status Packet) 01h 1 Flag (bit0=used by "Town Status" check (1=Not Available)) 02h 15h File Name (max 20 chars, terminated by 00h) (shown in building) |
17h 1 Length of File Message (X) (in bytes, including ending 00h) 18h X File Message/Description (terminated by 00h) |
17h 1 Length of Item Description+Activation+Price+Flag (X) (fixed=79h) 18h 25h Item Description (max 36 chars, plus ending 00h) 3Dh 47h Item Activation Message (min 1, max 70 chars, plus ending 00h) 84h 12 Item Price (12-Digit ASCII String, eg. "000000001200" for 1200G) 90h 1 Item Drop/Keep Flag (00h=Drop after Activation, 01h=Keep Item) |
18h+X 4 Software Channel Number of Current File (for Items: N.N.0.0=None)
1Ch+X 3 Big-Endian Filesize
1Fh+X 3 Unknown/unused (except, first 2 bytes used by Derby Stallion 96)
22h+X 1 Flags
Bit0: used by "Town Status" check (1=Not Available)
Bit1: Unknown/unused
Bit2: Building Only (0=Also available at Home, 1=Building only)
Bit3: Low Download Accuracy / Streaming or so
0=High-Download-Accuracy (for programs or other important data)
1=Low-Download-Accuracy (for audio/video data streaming)
Bit4: Unused (except, must be 0 for Derby Stallion 96 files)
Bit5-7: Unknown/unused
23h+X 1 Unknown/unused
24h+X 1 Flags/Target (seems to be same/similar as in Channel Map)
Bit2-3:
0=Download to WRAM (not really implemented, will crash badly)
1=Download to PSRAM (without saving in FLASH)
2=Download to Continous FLASH banks (erases entire chip!)
3=Download to FREE-FLASH banks (relocate to PSRAM upon execution)
25h+X 2 Unknown/unused
27h+X 1 Date (Bit7-4=Month, Bit3-0=0) ;\copied to Satellaview
28h+X 1 Date (Bit7-3=Day, Bit2=0, Bit1-0=Unknown) ;/FLASH File Header FFD6h
29h+X 1 Timeslot (Bit7-3=StartHours.Bit4-0, Bit2-0=Start Minutes.Bit5-3)
2Ah+X 1 Timeslot (Bit4-0=EndHours.Bit4-0, Bit7-5=Start Minutes.Bit2-0)
2Bh+X 1 Timeslot (Bit7-2=EndMinutes.Bit5-0, Bit1-0=Unused)
2Ch+X 4 Software Channel Number for additional Include File (N.N.0.0=None)
30h+X 2 Unknown/unused
|
BS Dragon Quest (copy of channel_map in PSRAM, episode_number in WRAM) BS Zelda no Densetsu Kodai no Sekiban Dai 3 Hanashi (hw_channel in WRAM) |
FOLDER[00h].Bit0=Don't care (folder may be marked as hidden) FOLDER[18h+X]=Don't care (folder may be also used as building/person/etc.) |
FILE[1Ah+X]<>0000h (software channel isn't N.N.0.0) FILE[22h+X].Bit2=0 (flagged as available at home) FILE[18h]=Don't care (file description isn't shown at home) |
| SNES Cart Satellaview Expansion Data (at end of Directory Packets) |
00h 1 Directory ID (compared to Directory ID in Town Status packet) 01h 1 Number of Folders (Buildings, People, or hidden folders) 02h 3 Unknown/unused 05h .. Folders (and File) entries (see previous chapter) ;\together .. 1 Number of Expansion Data Entries (00h=none) ; max 3FFBh .. .. Expansion Data Entries ;/bytes |
00h 1 Flags (bit0=1=Invalid) (bit1-7=unknown/unused) 01h 1 Unknown/unused 02h 2 Length (N) (16bit) (this one is BIG-ENDIAN) 04h N Expansion Chunk(s) (all values in chunks are LITTLE-ENDIAN) |
00h 1 Chunk ID (00h) |
00h 1 Chunk ID (01h)
01h 2 Chunk Length (73h+L1..L5) (LITTLE-ENDIAN)
03h 11h Message Box Headline (max 16 chars, terminated by 00h) ;\
14h 20h BG Palette 5 (copied to WRAM:7E20A0h/CGRAM:50h) (16 words) ;
34h 38h BG Data (copied to WRAM:7E4C8Ch/BG1 Map[06h,0Dh])(4x7 words);/
6Ch 2 Length of BG Animation Data (L1) ;\
6Eh L1 BG Animation Data (for Custom Building) (see below) ;/
6Eh+L1 2 Tile Length (L2) (MUST be nonzero) (zero would be 64Kbytes) ;\
BUG: Below Data may not start at WRAM addr 7Exx00h/7Exx01h ;
(if so, data is accidently read from address-100h) ;
70h+L1 L2 Tile Data (DMAed to VRAM Word Addr 4900h) (byte addr 9200h) ;/
70h+L1+L2 2 Length (L3) (should be even, data is copied in 16bit units) ;\
72h+L1+L2 L3 Cell to Tile Xlat (copied to 7E4080h, BUG:copies L3+2 bytes);/
72h+L1..L3 2 Length (L4) (MUST be even, MUST be nonzero, max 30h) ;\
74h+L1..L3 L4 Cell Solid/Priority List (copied to 7E45D0h,copies L4 bytes);/
74h+L1..L4 2 Unknown/unused, probably Length (L5) ;\
76h+L1..L4 L5 Door Location(s) (byte-pairs: xloc,yloc, terminated FFh,FFh);/
Door Locations work only if BG1 cells also have bit15 set!
Bit15 must be set IN FRONT of the door, this is effectively
reducing the building size from 4x7 to 4x6 cells.
Note: Animated BG cells are FORCEFULLY having bit15 cleared!
|
00h 1 Chunk ID (02h)
01h 2 Chunk Length (N) (LITTLE-ENDIAN) (N may be even,odd,zero)
03h N Data (copied to 7F0000h) (N bytes) (max 0A00h bytes or so)
00h 4 7F0000h Person 2Ch - Token Interpreter Entrypoint
04h 4 7F0004h Person 2Dh - Token Interpreter Entrypoint
08h .. 7F0008h General Purpose (Further Tokens and Data)
|
00h 1 Chunk ID (03h..FFh) 01h 2 Chunk Length (N) (LITTLE-ENDIAN) 03h N Data (ignored/skipped) |
00h 2 Base.xloc (0..47) (FFFFh=No Animation Data) 02h 2 Base.yloc (0..47) 04h X*4 Group(s) of 2 words (offset_to_frame_data,duration_in_60hz_units) 04h+X*4 2 End (FFFEh=Loop/Repeat animation, FFFFh=Bugged/One-shot animat.) 06h+X*4 .. BG Animation Frame Data Block(s) (see below) .. 0-2 Padding (to avoid 100h-byte boundary BUG in L2) |
00h Y*8 Group(s) of 4 words (xloc, yloc, bg1_cell, bg2_cell) 00h+Y*8 2 End of Frame List (8000h) (ie. xloc=8000h=end) |
BG1 64x32 map at VRAM:0000h-07FFh, 8x8 tiles at VRAM:1000h-4FFFh (foreground) BG2 64x32 map at VRAM:0800h-0FFFh, 8x8 tiles at VRAM:1000h-4FFFh (background) BG3 32x32 map at VRAM:5000h-53FFh, 8x8 tiles at VRAM:5000h-6FFFh (menu text) OBJ 8x8 and 16x16 tiles at VRAM:6000h-7FFFh (without gap) (people) Custom BG1/BG2 Tiles are at VRAM:4900h-xxxxh (BG.Tile No 390h-xxxh) Custom OBJ Tiles at VRAM:7C00h-xxxxh (OBJ.Tile No 1C0h..xxxh) |
BG.PAL0 Four 4-Color Palettes (for Y-Button BG3 Menu) BG.PAL1 Four 4-Color Palettes (for Y-Button BG3 Menu) BG.PAL2 Buildings BG.PAL3 Buildings BG.PAL4 Buildings BG.PAL5 Custom Palette BG.PAL6 Landscape (Trees, Phone Booth) (colors changing per season) BG.PAL7 Landscape (Lawn, Streets, Water, Sky) (colors changing per season) |
Custom BG1/BG2 Cells are at WRAM:7E4080h-7E41FFh (Cell No 3D0h-3FFh) Custom Cell Solid/Priority... |
| SNES Cart Satellaview Other Packets |
00h 1 Number of entries (01h..FFh) (MUST be min 01h) 01h .. Entries (max 3FFFh bytes) |
00h 1 Flags (bit0=1=Invalid) (bit1-7=unknown/unused) 01h 1 Unknown/unused 02h 2 Length (N) (16bit, big-endian) (MUST be min 0001h) 04h 3 SNES-specific Memory Address (24bit, big-endian) 07h N Data (N bytes) |
00h 100 Custom Message (max 99 characters, plus ending 00h) |
00h 1 Unknown/unused (probably NOT seconds) ;(un-)used by Itoi only 01h 1 Minutes (0..3Bh for 0..59) 02h 1 Hours (0..17h for 0..23) (or maybe 24..26 after midnight) 03h 1 Day of Week (01h..07h) (rather not 00h..06h) (?=Monday) 04h 1 Day (01h..1Fh for 1..31) 05h 1 Month (01h..0Ch for 1..12) 06h 1 Unknown/unused (maybe year) ;\could be 2x8bit (00:00 to 99:99) 07h 1 Unknown/unused (maybe century) ;/or maybe 16bit (0..65535) or so |
00h N Data, N bytes (N=Filesize as specified in Directory) |
1.2.130.0 ;\Special Contests 1..4 (or so) 1.2.130.16 ; The 4 contests are looking more or less the same, possibly 1.2.130.32 ; with different parameters, different japanese descriptions, 1.2.130.48 ;/contest 2-3 have "No fishing" regions in some lake-areas. 1.2.130.other ;-Invalid (don't use; shows error with TV-style "test screen") |
0000h 3 Unknown/unused (3 bytes)
0003h 8 ID "SHVCZDBJ" (compared against [B289D6])
000Bh 2 Number of Chunks at 0010h and up (16bit) (little-endian) (min 1)
000Dh 1 Unknown/unused? (8bit)
000Eh 1 Checksum (bytes at [0000h..7DFFh] added together) (8bit)
000Fh 1 Checksum complement (8bit)
0010h DF0h Chunks
7E00h 200h Begin of non-checksummed area (IF ANY) (if it DOES exist,
then it MIGHT contain a file-style header at 7FB0h..7FFFh ?)
|
| SNES Cart Satellaview Buildings |
1) Load File from FLASH Card 2) Delete File from FLASH Card 3) Download File (only files that are "Available at Home") (max 32 files) 4) Delete Settings in SRAM |
00h Robot Skyscraper (lower-left) 01h News Center 02h Parabol Antenna 03h Junkfood 04h Police 05h Maths +-x/ 06h Beach Shop (Shop for Predefined ROM Items) 07h Turtle-Arena 08h C-Skyscaper (Shop for Predefined ROM Items) 09h Red-Heart Church 0Ah Red \\\ Factory (upper-right corner) 0Bh Dracula Gift-Shop 0Ch Cow-Skull Church 0Dh Spintop/Abacus (near Maths +-X/) 0Eh Blank Skyscraper (near Parabol Antenna) 0Fh Sign (near Red Factory) (works only ONCE) (or custom building) 10h Greek Buddah Temple (upper-end) 11h Bigger Neighbor's Building 12h Smaller Neighbor's Building (unknown how to get in there) 13h Phone Booth (can be entered only with Telephone Card item) 14h Sewerage (near Spintop) (Shop for Predefined ROM Items) 15h Unused 16h Unused ;\these Building-Folders MUST not exist (else BIOS randomly 17h Unused ;/crashes, accidently trying to animate Building number "44h/3") 18h Special Location without folder: Player's Home 19h Special Location without folder: Hydrant (near police) 1Ah Special Location without folder: Talking Tree (near C-Skyscraper) 1Bh Special Location without folder: Fountain (or Fountain Replacement) 1Ch Special Location without folder: Beach Toilets (Railway Station) 1Dh Special Location without folder: Ocean's Shore 1Eh Special Location without folder: Unused 1Fh Special Location without folder: Unused 20h-3Fh Building-Folders with these IDs do destroy memory (don't use!) |
| SNES Cart Satellaview People |
00h Red Ball (on beach) (disappears after access) 01h Spring-boot (aka Dr.Hiroshi's Shop) (near news center) (sells items) 02h General Pee (showing up here and there pissing against buildings) 03h Brown Barbarian on Cocaine (near temple) 04h Blue Depressive Barbarian (near temple) 05h Ghost Waver (near phone booth) 06h Boy in Neighborhood 07h Older Elvis (near churches) 08h Purple Helmet (on beach) 09h Surfer (near beach shop) 0Ah Grayhaired (northwest lawn) 0Bh Alien Man (near phone booth) 0Ch Uncle Bicycle (near parabol antenna) 0Dh Circus Man (near temple/lake) 0Eh Speedy Blind Man (near parabol antenna/spintop) 0Fh Blonde Boy (near factory) 10h Girl with Pink Dress (near Bigger Neighbor's Home) 11h Brunetty Guy (near Bigger Neighbor's Home) 12h Brunette (near junkfood) 13h Darkhaired (near junkfood) 14h Blue Longhair (near junkfood) 15h Brunette Longhair (near junkfood) 16h Brunette Longhair (near red-heart church) 17h Green Longhair (near red-heart church) 18h Bicycle Girl (near C-Skyscraper) 19h Brunette Office Woman (near C-Skyscraper) 1Ah Blue Longhair (near parabol antenna) 1Bh Turquoise Longhair (near home) 1Ch Blue Longhair (near maths/spintop) 1Dh Brunette Longhair (near news center/beach stairs) 1Eh Black Longhair (near police) 1Fh Red Longhair (southeast beach) 20h Blackhaired Girl (near police) 21h Greenhaired Girl (on bench between temple and lake) 22h Graybluehaired older Woman (east of C-skyscraper) 23h Darkhaired Housewife (near home) 24h Traditional Woman (west of Robot-Skyscraper) 25h Greenhaired Girl (near Turtle-Arena) 26h Pinkhaired Girl (near Cow-Skull Church) 27h Brown Dog (northeast lawn) 28h White Dog (near home) 29h Gray Duck (near temple/lake) 2Ah Portable TV-Headed Guy (near Robot-Skyscraper) 2Bh Satellite Wide-screen TV-Headed Guy (near Robot-Skyscraper) 2Ch Custom Person 2Ch ;\may be enabled only if defined in Expansion Area 2Dh Custom Person 2Dh ;/of Directory Packet (otherwise crashes) |
2Eh Dead Dentist (on bench near lake) (gives Money when owning Fishing Pole)
2Fh Gimmick: Allows to use Bus/Taxi/Ferrari Tickets at Fountain
30h Gimmick: Allows to use Express/Museum-Train-Tickets at Railways Station
31h Gimmick: Special Event when accessing the Hydrant
32h Frog 32h (west of Robot-Skyscraper) ;Change Identity Item
33h Frog 33h (west of Robot-Skyscraper, too) ;Change GUI Border Scheme
(or on street near turtle arena?)
34h Frog 34h (northwest lawn) ;Change GUI Color Scheme
35h Frog 35h (near Cow-Skull Church) ;Change GUI Cursor Shape
36h Gimmick: Allows to use Whale/Dolphin/Fish Food at Oceans Shore
37h Ship (cannot be accessed?) (near factory)
38h Mr.Money (near police) (donates a 500G coin) ;\only one can be present
39h Mr.Money (near police) (donates a 1000G coin) ; at once, after the coin,
3Ah Mr.Money (near police) (donates a 5000G coin) ;/all do act as Folder 38h
3Bh-3Fh Unused?
|
00h Geisha (faecher) 01h Snorty (nose bubble) 02h Gold hat 03h Naked guy 04h Soldier (lanze) 05h Whore (lipstick/eye blinking) 06h Wise man1 (huge white eyebrows) 07h Wise man2 (huge stirn, huge ears) 08h DJ Proppy (headphones, sunglasses, muscles) 09h Casino manager (fat guy with red slip-knot) 0Ah Student girl (manga, karierte bluse) 0Bh School girl (satchel ranzen/smiley) 0Ch Kinky gay (green hair, sunglasses, gold-ohrring) 0Dh Yankee (glistening teeth/dauerwelle) 0Eh Robot (blech-mann) 0Fh Blonde chick (blonde, lipstick) 10h BS-X logo (not a person, just the "BS-X" letters) 11h-FFh Unknown/Unused/Crashes 30h None (seems to be an un-intended effect, probably unstable, don't use) |
| SNES Cart Satellaview Items |
00 88C229h Transfer Device (allows to teleport to any building) (unlimited) 01 88C2B8h Telephone Card (5) (allows to enter phone booth) ;\ 02 88C347h Telephone Card (4) (allows to enter phone booth) ; decreases 03 88C3D6h Telephone Card (3) (allows to enter phone booth) ; after usage 04 88C465h Telephone Card (2) (allows to enter phone booth) ; 05 88C4F4h Telephone Card (1) (allows to enter phone booth) ;/ 06 88C583h Fishing Pole (allows to get Money from Dead Dentist, Person 2Eh) 07 88C612h Express Train Ticket ;\these are treated special 08 88C6A1h Museum Train Ticket ;/by code at 88936Ch 09 88C630h Bus Ticket (at Fountain) ;\these all have same description 0A 88C7BFh Taxi Ticket ; 0B 88C84Eh Ferrari Blowjob Ticket ;/ |
0C 88C8DDh Doping Item (walk/run faster when pushing B Button) 0D 88C96Ch Unknown (disappears after usage) |
0E 88C9FBh Whale Food (can be used at Oceans Shore) 0F 88CA8Ah Dolphin Food (can be used at Oceans Shore) 10 88CB19h Fish Food (can be used at Oceans Shore) |
11 88CBA8h Boy/Girl Gender Changer (can be used only once) 12 88CC37h Transform Boy/Girl into Purple Helmet guy (Person 08h)(temporarily) 13 88CCC6h Transform Boy/Girl into Brunette chick (Person 1Dh)(temporarily) 14 88CD55h Smaller Neighbor's Home Door Key (allows to enter that building) |
15 88CDE4h Change Identity (edit user name) (from Frog 32h) (works only once) 16 88CE73h Change GUI Border Scheme (from Frog 33h) (works only once) 17 88CF02h Change GUI Color Scheme (from Frog 34h) (works only once) 18 88CF91h Change GUI Cursor Shape (from Frog 35h) (works only once) |
00h 15h Item Name (max 20 chars, plus ending 00h) (First 2 bytes 00h = Free) 15h 1 Length of following (Description, Pointer, Whatever) (always 79h?) 16h 25h Item Description (max 36 chars, plus ending 00h) 3Bh 47h Item Activation Message (max 70 chars, plus ending 00h) If Activation Message = empty (single 00h byte), then Item Function follows: 3Ch 3 Pointer to Interpreter Tokens (eg. 99974Dh for Transfer Device) 3Fh 43h Unknown/Unused/Padding (should be zero) (there is no SRAM allocated for custom item functions, so this part may be used only for predefined ROM items) 82h 12 Item Price (12-Digit ASCII String, eg. "000000001200" for 1200G) 8Eh 1 Item Drop/Keep Flag (00h=Drop after Activation, 01h=Keep Item) |
| SNES Cart Satellaview SRAM (Battery-backed) |
0000h 2 ID "SG" (aka 53h,47h) 0002h 2 Checksum Complement (same as below checksum XORed with FFFFh) 0004h 2 Checksum (bytes 0..2FFFh added together) (assume [2..5]=0,0,FF,FF) 0006h 20 User's Name (Shift-JIS) 001Ch 2 User's Gender (0000h=Boy, 0001h=Girl) 001Eh 6 Money (max 00E8D4A50FFFh; aka 999,999,999,999 decimal) 0024h 2 Number of Items (0..10h) (or temporarily up to 11h) 0026h 44h Item Entries (4-bytes each: Type=00/01=ROM/RAM, and 24bit pointer) 006Ah 8F0h Custom RAM Items (8Fh bytes each) (First 2 bytes 00h = free entry) 095Ah 2 Remaining Time on Doping Item (decreases when entering buildings) 095Ch 2 Number of Doping Items (walk/run faster when pushing B Button) 095Eh 2 Remaining Calls on first Telephone Card Item minus 1 0960h 2 Number of Telephone Card Items (unlocks Phone Booth) 0962h 2 Number of Transfer Devices (enables Teleport via menu or X-Button) 0964h 2 Number of Fishing Poles (allows to get Money from Dead Dentist) 0966h 2 Number of Smaller Neighbor's Home Keys (0000h=Lock, other=Unlock) 0968h 2 GUI Cursor Shape 16bit selector (0000h..0005h) (other=crash) 096Ah 3 GUI Border Scheme 24bit pointer (def=9498D9h) (MUST be 94xxxxh) 096Dh 3 GUI Color Scheme 24bit pointer (initially 94A431h) 0970h 1 Player got 500 coin from Person 38h ;\(00h=No, 01h=Yes, 0971h 1 Player got 1000 coin from Person 39h ; flags stay set until 0972h 1 Player got 5000 coin from Person 3Ah ; that Person leaves 0973h 1 Player picked-up Red Ball aka Person 00h ;/the town) 0974h 18h BIOS Boot/NMI/IRQ Hook Vectors (retf's) (mapped to 105974h and up) 098Ch 2B0h BIOS Function Hook Vectors (jmp far's) (mapped to 10598Ch and up) 0C3Ch 64h BIOS Reset Function (and some zero-filled bytes) 0CA0h 100h BIOS Interpreter Token Handlers (16bit addresses in bank 81h) 0DA0h 100h Garbage Filled (reserved for unused Tokens number 80h..FFh) 0EA0h 2 Garbage Filled (for impossible 8bit token number 100h) 0EA2h 215Eh Reserved (but, mis-used for game positions by some games) 3000h 3000h Backup Copy of 0..2FFFh 6000h 2000h General Purpose (used for game positions by various games) |
0000h-0EA1h BX-X BIOS (see above) 1400h-14FFh BS Super Mario USA 3 (256 bytes) 1500h-15FFh BS Super Mario Collection 3 (256 bytes) 1500h-15FFh BS Kodomo Tyosadan Mighty Pockets 3 (256 bytes) 1600h-1626h BS Satella Walker 2 (27h bytes) 1600h-1626h BS Satella2 1 (27h bytes) 1700h-17FFh BS Excitebike Bun Bun Mario Battle Stadium 4 (256 bytes) 2000h-27FFh BS Marvelous Camp Arnold Course 1 (2Kbytes) 2800h-2F89h BS Dragon Quest 1 (1.9Kbytes) (probably 1K, plus 1K backup copy) 2006h-2FF5h BS Zelda no Densetsu Remix (3.9Kbytes) 2000h-2EFFh BS Zelda no Densetsu Kodai no Sekiban Dai 3 Hanashi (3.75K) 2000h-2FFFh BS Super Famicom Wars (V1.2) (first 4K of 8Kbytes) 3000h-5FFFh Backup Copy of 0..2FFFh (not useable for other purposes) 6000h-63FFh BS Treasure Conflix (1Kbyte) 6020h-62F9h BS Sutte Hakkun 98 Winter Event Version (0.7Kbytes) 6000h-7FFFh BS Chrono Trigger - Jet Bike Special (8Kbytes) 6800h-6FFFh BS Super Famicom Wars (V1.2) (middle 2K of 8Kbytes) 7500h-7529h BS Cu-On-Pa (2Ah bytes) 7800h-7FFFh BS Super Famicom Wars (V1.2) (last 2K of 8Kbytes) 7826h-7827h BS Dr. Mario (only 2 bytes used?) (7C00h-7FFFh) BS Radical Dreamers (default, if free, at 7C00h) (1Kbyte) |
| SNES Cart Satellaview FLASH File Header |
FFB0h 2 Maker Code (2-letter ASCII) ;\garbage when
FFB2h 4 Program Type (00000100h=Tokens, Other=65C816) ; [FFDBh]=01h
FFB6h 10 Reserved (zero) ;/
FFC0h 16 Title (7bit ASCII, 8bit JIS (?), and 2x8bit SHIFT-JIS supported)
FFD0h 4 Block Allocation Flags (for 32 blocks of 128Kbytes each) (1=used)
Retail (demo) games usually have ffff here -- Uh ???
(exception BS Camp Arnold Marvelous) -- Uh ???
FFD4h 2 Limited Starts (bit15=0=Infinite, otherwise bit14-0=Remaining Flags)
FFD6h 1 Date (Bit7-4=Month, Bit3-0=0) ;\copied to from
FFD7h 1 Date (Bit7-3=Day, Bit2=0, Bit1-0=Unknown) ;/Directory Packet
FFD8h 1 Map Mode (20h=LoROM, 21h=HiROM) (or sometimes 30h/31h)
FFD9h 1 File/Execution Type
Bit0-3 Unknown/unused (usually/always 0)
Bit4 Receiver Power Down (0=No/Sound Link, 1=Power-Down 2197h)
Bit5-6 Execution Area (0=FLASH, 1=Reloc FLASH-to-PSRAM, 2/3=Fail)
Bit7 Skip the "J033-BS-TDM1 St.GIGA" Intro (0=Normal, 1=Skip)
FFDAh 1 Fixed (33h)
FFDBh 1 Unknown (usually 02h, sometimes 01h, or rarely 00h) (see FFBxh)
FFDCh 2 Checksum complement (same as below, XORed with FFFFh)
FFDEh 2 Checksum (all bytes added together; assume [FFB0-DF]=00h-filled)
FFE0h 32 Exception Vectors (IRQ,NMI,Entrypoint,etc.) (for 65C816 code)
|
FFD0h 4-byte Block Allocation field (set to whichever used FLASH Blocks) FFD6h 2-byte Date field (set to Date from Satellite Directory Entry) FFDAh 1-byte Fixed Value (set to 33h) |
| SNES Cart Satellaview BIOS Function Summary |
105974 boot_hook (changed by nocash fast-boot patch) 105978 nmi_hook 10597C irq_vector 105980 download_start_hook --> see 9B8000 105984 file_start_hook --> see 958000 105988 whatever_hook --> see 99xxxx |
10598C detect_receiver 105990 port_2194_clr_bit0 105994 port_2196_test_bit1 |
105998 set_port_218B_and_218C_to_01h 10599C set_port_218C_to_00h 1059A0 read_data_queue |
1059A4 init_port_2199_registers 1059A8 send_array_to_port_2199 ;BUGGED? 1059AC recv_3x8bit_from_port_2199 1059B0 send_16bit_to_port_2199 1059B4 recv_8bit_from_port_2199 |
1059B8 port_2198_send_cmd_recv_multiple_words 1059BC port_2198_send_cmd_recv_single_word 1059C0 port_2198_send_cmd_send_verify_multiple_words 1059C4 port_2198_send_cmd_send_verify_single_word 1059C8 port_2198_send_cmd_send_single_word 1059CC port_2198_send_10h_send_verify_single_word 1059D0 port_2198_send_cmd_verify_FFFFh 1059D4 port_2198_send_20h_verify_FFFFh 1059D8 recv_2198_skip_x BUGGED! 1059DC recv_2198_want_x 1059E0 send_30h_to_port_2198 1059E4 send_00h_to_port_2198 1059E8 send_8bit_to_port_2198 1059EC wait_port_2198_bit7 |
1059F0 forward_data_queue_to_target 1059F4 forward_queue_to_wram 1059F8 forward_queue_to_psram 1059FC forward_queue_to_entire_flash 105A00 forward_queue_to_entire_flash_type1 105A04 forward_queue_to_entire_flash_type2 105A08 forward_queue_to_entire_flash_type3 105A0C forward_queue_to_entire_flash_type4 105A10 forward_queue_to_flash_sectors 105A14 forward_queue_to_flash_sectors_type1 105A18 forward_queue_to_flash_sectors_type2 105A1C forward_queue_to_flash_sectors_type3 105A20 forward_queue_to_flash_sectors_type4 105A24 forward_queue_to_channel_map ;with 5-byte frame-header 105A28 forward_queue_to_town_status |
105A2C scan_flash_directory 105A30 allocate_flash_blocks 105A34 .. prepare exec / map file or so 105A38 verify_file_checksum 105A3C get_flash_file_header_a 105A40 delete_flash_file_a 105A44 get_flash_file_header_5A 105A48 copy_file_header 105A4C search_test_file_header, out:[57] 105A50 test_gamecode_field 105A54 copy_file_to_psram 105A58 get_file_size 105A5C decrease_limited_starts |
105A60 map_flash_as_data_file (for non-executable data-files?) 105A64 map_psram_as_data_file (for non-executable data-files?) 105A68 .. mapping and copy 512Kbytes ? 105A6C map_flash_for_rw_access 105A70 map_flash_for_no_rw_access 105A74 map_flash_for_reloc_to_psram 105A78 .. mapping (unused?) 105A7C map_flash_as_lorom_or_hirom 105A80 execute_game_code 105A84 .. map_psram_for_streaming ??? 105A88 map_psram_as_lorom_or_hirom 105A8C .. copy 256Kbytes... |
105A90 flash_abort 105A94 flash_abort_type1 105A98 flash_abort_type2 105A9C flash_abort_type3 105AA0 flash_abort_type4 105AA4 flash_erase_entire 105AA8 flash_erase_entire_type1 105AAC flash_erase_entire_type2 105AB0 flash_erase_entire_type4 ;4! 105AB4 flash_erase_entire_type3 105AB8 flash_test_status ERASE-PROGRESS 105ABC flash_test_status_type1 105AC0 flash_test_status_type2 105AC4 flash_test_status_type4 ;4! 105AC8 flash_test_status_type3 105ACC flash_erase_first_sector 105AD0 flash_erase_first_sector_type1 105AD4 flash_erase_first_sector_type2 105AD8 flash_erase_first_sector_type3 105ADC flash_erase_first_sector_type4 105AE0 flash_erase_next_sector 105AE4 flash_erase_next_sector_type1 105AE8 flash_erase_next_sector_type2 105AEC flash_erase_next_sector_type3 105AF0 flash_erase_next_sector_type4 105AF4 flash_write_byte 105AF8 flash_write_byte_type1 105AFC flash_write_byte_type2 105B00 flash_write_byte_type3 105B04 flash_write_byte_type4 105B08 flash_get_free_memory_size 105B0C flash_get_and_interprete_id 105B10 flash_get_id 105B14 flash_init_chip 105B18 flash_init_chip_type1 105B1C flash_init_chip_type2 105B20 flash_init_chip_type3 105B24 flash_init_chip_type4 |
105B28 apply_satellite_directory 105B2C directory_find_8bit_folder_id 105B30 directory_find_32bit_file_channel 105B34 test_if_file_available 105B38 download_file_and_include_files 105B3C directory_find_32bit_bugged |
105B40 .. initialize stuff on reset 105B44 download_nmi_handling (with download_callback etc.) 105B48 download_nmi_do_timeout_counting 105B4C nmi_do_led_blinking 105B50 mark_flash_busy 105B54 mark_flash_ready 105B58 set_port_2197_bit7 105B5C clr_port_2197_bit7 105B60 detect_receiver_and_port_2196_test_bit1 105B64 init_flash_chip_with_err_29h 105B68 init_flash_chip_with_err_2Ah 105B6C detect_receiver_and_do_downloads 105B70 do_download_function 105B74 retry_previous_download 105B78 set_target_id_and_search_channel_map 105B7C apply_target_for_download 105B80 clear_queue_and_set_13D1_13D2 105B84 flush_old_download ;[218C]=0, clear some bytes |
105B88 download_to_whatever (BUGGED) 105B8C download_channel_map 105B90 download_welcome_message 105B94 download_snes_patch 105B98 download_town_status 105B9C download_town_directory 105BA0 download_to_memory |
105BA4 add_download_array 105BA8 wait_if_too_many_downloads 105BAC do_download_callback 105BB0 dload_channel_map_callback_1 105BB4 dload_channel_map_callback_2 105BB8 dload_welcome_message_callback 105BBC dload_snes_patch_callback 105BC0 dload_town_status_callback_1 105BC4 dload_town_status_callback_2 105BC8 dload_town_directory_callback_1 105BCC dload_town_directory_callback_2 105BD0 .. flash status 105BD4 dload_to_mem_wram_callback1 ;\ 105BD8 dload_to_mem_wram_callback2 ; 105BDC dload_to_mem_psram_callback1 ; 105BE0 dload_to_mem_psram_callback2 ; dload_to_memory_callbacks 105BE4 dload_to_mem_entire_flash_callback1 ; 105BE8 dload_to_mem_entire_flash_callback2 ; 105BEC dload_to_mem_free_flash_callback1 ; 105BF0 dload_to_mem_free_flash_callback2 ;/ 105BF4 dload_to_mem_entire_flash_callback_final 105BF8 dload_to_mem_free_flash_callback_final 105BFC reset_interpreter_and_run_thread_958000h 105C00 verify_channel_map_header 105C04 raise_error_count_check_retry_limit 105C08 search_channel_map 105C0C post_download_error_handling 105C10 .. erase satellite info ? |
105C14 apu_flush_and_clear_queues 105C18 apu_flush_raw 105C1C apu_message 105C20 apu_nmi_handling 105C24 apu_upload_extra_thread 105C28 apu_upload_curr_thread 105C2C apu_enable_effects_music_b 105C30 apu_enable_effects_music_a 105C34 apu_mute_effects_and_music 105C38 apu_enable_effects_only |
105C3C reboot_bios (this one works even when BIOS=disabled or WRAM=destroyed) |
105C96 Unused 7 bytes (used for nocash fast-boot patch) 105C9D Unused 3 bytes (zero) 105CA0 Token Vectors (16bit offsets in bank 81h) |
105xxx Tables in SRAM (see above) 808000 Unsorted ptrs to BIOS Functions, Token-Extensions, and OBJ-Tile-Data 9FFFF0 Pointers to source data for APU uploads |
808C2A Invoke_dma_via_ax_ptr 8091B6 Create_machine_code_thread 809238 Pause_machine_code_thread 80938F Do nothing (retf) (used as dummy callback address) 80ABC8 ...whatever 80AC01 ...whatever 80B381 Upload_gui_border_shape_to_vram 80B51B Clear_text_window_content 80B91E Fill_400h_words_at_7E76000_by_0080h ;clear whole BG3 map in WRAM 80EB99 Injump_to_APU_Town_Status_handling (requires incoming pushed stuff) 81C210 Reset_interpreter 81C29A Set_interpreter_enable_flag 81C2B0 Create_interpreter_thread 81C80E Deallocate_all_obj_tiles_and_obj_palettes |
jmp 105C3Ch ;srv_reboot_bios (simple, but quite annoying) |
call restore_wram ;-restore WRAM (as how it was owned by BIOS) jmp far (($+4) AND 00FFFFh) ;-PB=00h (so below can map BIOS to bank 80h) mov a,80h ;\ ;\ push a ;=80h ; ; set DB=80h, and pop db ;/ ; enable BIOS in bank 80h-9Fh mov [085000h],a ;map BIOS to bank 80h-9Fh ; (though not yet in 00h-1Fh) mov [0E5000h],a ;apply ;/ call far 99D732h ;super-slow ;out: M=0 ;-upload [9FFFF0h] to APU .assume p=10h ;(above set M=0, and keeps X=unchanged) call far 81C210h ;-Reset Token Interpreter call far 81C29Ah ;-Enable/Unpause Interpreter call far 80937Fh ;set NMI callback to RETF prevent FILE to be executed AGAIN) mov x,[13B2h] ;BIOS online flag (8bit) ;\skip below if offline jz @@skip ;/ push pb ;\retadr for below ;\ push @@back-1 ;/ ; push db ;-incoming pushed DB for below ; push 7E00h ;\ ; init apu effects/music pop db ; incoming current DB for below ; (according to APU bits pop db ;=7Eh ;/ ; in town status packet) jmp far 80EB99h ;--> injump to 105BC0h ; @@back: ; .assume p=20h ;(above set's it so) ; ;(if executed, ie. not when @@skip'ed) ;/ @@skip: clr p,30h // .assume p=00h ;below call 81C2B0h requires M=0, X=0 mov [0CDEh],0000h ;-mark fade-in/out non-busy mov a,0099h ;\ ;\ mov [0BEh],a ; 99D69A ;BIOS - enter town ; create_interpreter_thread mov a,0D69Ah ;/ ; (99D69Ah = enter town) call far 81C2B0h ;/ set p,20h // .assume p=20h mov a,81h ;\enable NMI and joypad (unstable: BIOS isn't yet mapped!) mov [4200h],a ;/caution: ensure that no NMI occurs in next few clk cycles mov a,80h ;\enable BIOS also in bank 0, mov [075000h],a ;map BIOS to bank 00h-1Fh ; and return to BIOS NMI handler jmp far 80BC27h ;apply [0E5000h]=a, and retf ;/ |
| SNES Cart Satellaview Interpreter Token Summary |
00h ControlSubThread(pEntrypoint) ;special actions upon xx0000h..xx0005h 01h SetXYsignViewDirectionToSignsOfIncomingValues(vX,vY) ;not if both zero 02h SleepWithFixedObjShape(wSleep,pObjShape) 03h SleepWithXYstepAs9wayObjShape(wSleep,pObjShape1,..,pObjShape9) 04h SleepWithXYsignAs9wayObjShape(wSleep,pObjShape1,..,pObjShape9) 05h ClearForcedBlankAndFadeIn(wSleep,wSpeedRange?) 06h MasterBrightnessFadeOut(wSleep,wSpeedRange?) ;OptionalForcedBlank? 07h SetMosaicAndSleep(wSleep,wBgFlags,wMosaicSize) 08h N/A (hangs) 09h SleepAndBlendFromCurrentToNewPalette(wSleep,vPalIndex,pNewPalette) 0Ah HdmaEffectsOnBg3(wSleep,wEffectType,vScrollOffset,vExtraOffset) 0Bh SleepWithAngleAs9wayObjShape(wSleep,pObjShape1,..,pObjShape9) ;[18A8+X] 0Ch DisableObjsOfAllThreads() 0Dh ReEnableObjsOfAllThreads() 0Eh SleepWithXYsignAs9wayPlayerGenderObjShape(wSleep,pObjShape1,..,Shape9) 0Fh N/A (hangs) 10h SleepAndSetXYpos(wSleep,vX,vY) 11h SleepAndMoveTowardsTargetXYpos(wSleep,vX,vY) 12h SleepAndMoveByIncomingXYstep(wSleep,vX,vY) 13h SleepAndMoveAndAdjustXYstep(wSleep,vRotationAngleToOldXYstepOrSo?) 14h SleepAndMoveWithinBoundary(wSleep,vX1,vX2,vY1,vY2,wFactor?) 15h SleepAndMoveChangeBothXYstepsIfCollideOtherThread(wSleep,wBounceSpeed?) 16h SleepAndMoveAndIncrementXYstep(wSleep,vXincr,vYincr,qXlimit,qYlimit) 17h SleepAndMoveByIncomingYstepAndWavingXstep(wSleep,wY) 18h SleepAndMoveAndAccelerateTowardsTarget(wSleep,vX,vY,vSpeed) 19h SleepAndMoveAndSomethingComplicated?(wSleep,vX,vY) ;out: X,Y=modified 1Ah AdjustXYstep(wNewSpeedOrSo?) ;in: [18A8+X]=angle 1Bh MoveByOldXYstepWithoutSleep() 1Ch SleepAndMoveChangeXYstepIfCollideOtherThread(wSleep,vMask,vX?,vY?) 1Dh N/A (hangs) 1Dh N/A (hangs) 1Fh N/A (hangs) 20h Goto(pTarget) 21h Gosub(pTarget) ;max nesting=8 (or less when also using Loops) 22h Return() ;return from Gosub 23h QuitThread() ;terminate thread completely 24h LoopStart(wRepeatCount) ;see token 62h (LoopNext) 25h Sleep(wSleep) 26h MathsLet(vA,vB) ;A=B 27h MathsAdd(vA,vB) ;A=A+B ;1998 if unsigned carry 28h MathsSub(vA,vB) ;A=A-B ;1998 if signed overflow 29h MathsAnd(vA,vB) ;A=A AND B ;1998 if nonzero 2Ah MathsOr(vA,vB) ;A=A OR B ;1998 if nonzero 2Bh MathsXor(vA,vB) ;A=A XOR B ;1998 if nonzero 2Ch MathsNot(vA) ;A=NOT A ;1998 if nonzero 2Dh MathsMulSigned(vA,vB) ;A=A*B/100h ;1998 never (tries to be overflow) 2Eh MathsDivSigned(vA,vB) ;A=A/B*100h ;1998 if division by 0 2Fh SignedCompareWithConditionalGoto(vA,wOperator,vB,pTarget) 30h GotoIf_1998_IsNonzero(pTarget) 31h GotoIf_1998_IsZero(pTarget) 32h GotoArray(vArrayIndex,pPointerToArrayWithTargets) 33h ReadJoypad(bJoypadNumber,wX,wY) 34h CreateAnotherInterpreterThreadWithLimit(vThreadCount,bLimit,pEntry) 35h CheckIfXYposCollidesWithFlaggedThreads(vFlagMask) ;out: 1998=ID 36h GetUnsignedRandomValue(vA,wB) ;A=Random MOD B, special on B>7FFFh 37h SetObjWidthDepthFlagmask(vWidth,vDepth,vMask) ;for collide checks 38h CreateAnotherInterpreterThreadWithIncomingXYpos(vX,vY,pEntrypoint) 39h N/A (hangs) 3Ah SoundApuMessage00h_nnh(vParameter8bit) 3Bh SoundApuMessage01h_nnnh(vLower6bit,bMiddle2bit,bUpper2bit) 3Ch SoundApuMessage02h_nnnnh(vLower6bit,bMiddle2bit,bUpper2bit) 3Dh SoundApuUpload(bMode,pPtrToPtrToData) 3Eh SetPpuBgModeKillAllOtherThreadsAndResetVariousStuff(bBgMode) 3Fh SetTemporaryTableForBanksF1hAndUp(vTableNumber,pTableBase) 40h KillAllFlaggedThreads(vMask) ;ignores flags, and kills ALL when Mask=0 41h SetBUGGEDTimerHotspot(wHotspot) ;BUG: accidently ORed with AE09h 42h Ppu_Bg1_Bg2_SetScrollPosition(vX,vY) 43h Ppu_Bg1_Bg2_ApplyScrollOffsetAndSleep(wSleep,vX,vY) 44h NopWithDummyParameters(wUnused,wUnused) 45h NopWithoutParameters() 46h AllocateAndInitObjTilesOrUseExistingTiles(wLen,pSrc) 47h AllocateAndInitObjPaletteOrUseExistingPalette(pSrc) 48h DmaObjTilesToVram(wObjVramAddr,wOBjVramEnd,pSrc) 49h SetObjPalette(wObjPalIndex,wObjPalEnd,pSrc) 4Ah SramAddSubOrSetMoney(bAction,vLower16bit,vMiddle16bit,vUpper16bit) 4Bh SramUpdateChksumAndBackupCopy() 4Ch N/A (hangs) 4Dh N/A (hangs) 4Eh N/A (hangs) 4Fh N/A (hangs) 50h TestAndGotoIfNonzero(vA,vB,pTarget) ;Goto if (A AND B)<>0 51h TestAndGotoIfZero(vA,vB,pTarget) ;Goto if (A AND B)==0 52h InitNineGeneralPurposePrivateVariables(wA,wB,wC,wD,wE,wF,wG,wH,wI) 53h MultipleCreateThreadBySelectedTableEntries(vFlags,vLimit,pPtrToTable) 54h PrepareMultipleGosub() ;required prior to token 6Ah 55h StrangeXYposMultiplyThenDivide(wA,wB) ;Pos=Pos*((B-A)/2)/((B-A)/2) 56h BuggedForceXYposIntoScreenArea() ;messes up xpos and/or hangs endless 57h Maths32bitAdd16bitMul100h(vA(Msw),vB) ;A(Msw:Lsw)=A(Msw:Lsw)+B*100h 58h Maths32bitSub16bitMul100h(vA(Msw),vB) ;A(Msw:Lsw)=A(Msw:Lsw)-B*100h 59h SoundApuUploadWithTimeout(wTimeout,pPtrToPtrToData) 5Ah N/A (hangs) 5Bh N/A (hangs) 5Ch N/A (hangs) 5Dh N/A (hangs) 5Eh N/A (hangs) 5Fh N/A (hangs) 60h CallMachineCodeFunction(pTarget) 61h SetTemporaryOffsetFor0AxxxxhVariables(vOffset) 62h LoopNext() ;see token 24h (LoopStart) 63h SetForcedBlankAndSleepOnce() 64h ClearForcedBlankAndSleepOnce() 65h AllocateAndInitObjPaletteAndObjTilesOrUseExistingOnes(pSrc) ;fragile 66h WriteBgTiles(wBgNumber,pPtrTo16bitLenAnd24bitSrcPtr) 67h WritePalette(pPtrTo16bitLenAnd24bitSrcPtr) ;to backdrop/color0 and up 68h WriteBgMap(wBgNumber,pPtrTo16bitLenAnd24bitSrcPtr) 69h KillAllOtherThreads() 6Ah MultipleGosubToSelectedTableEntries(vFlags,pPtrToTable) ;see token 54h 6Bh AllocateAndInitBgPaletteTilesAndMap2(vX1,vY1,pPtrToThreePtrs,vBgMapSize) 6Ch DeallocateAllObjTilesAndObjPalettes() 6Dh BuggedSetBgParameters(bBgNumber,pPtr,wXsiz,wYsiz,wUnused,wUnused) 6Eh BuggedSetUnusedParameters(bSomeNumber,pPtr,wX,wY) 6Fh BuggedChangeBgScrolling(wX,wY) 70h PauseAllOtherThreads() 71h UnPauseAllOtherThreads() 72h GosubIfAccessedByPlayer(pGosubTargetOrPeopleFolderID) 73h Dma16kbyteObjTilesToTempBufferAt7F4000h() ;Backup OBJ Tiles 74h Dma16kbyteObjTilesFromTempBufferAt7F4000h() ;Restore OBJ Tiles 75h SetFixedPlayerGenderObjShape(pSrc,wLen1,wLen2) 76h InstallPeopleIfSatelliteIsOnline() ;create all people-threads 77h KillAllOtherThreadsAndGotoCrash() ;Goto to FFh-filled ROM at 829B5Eh 78h ZerofillBgBufferInWram(vBgNumber) 79h ChangePtrToObjPriority(vVariableToBePointedTo) ;default is <Ypos> 7Ah ChangeObjVsBgPriority(vPriorityBits) ;should be (0..3 * 1000h) 7Bh SetXYposRelativeToParentThread(vX,vY) 7Ch TransferObjTilesAndObjPaletteToVram(pPtrToPtrsToPaletteAndTileInfo) 7Dh AllocateAndInitBgPaletteTilesAndMap1(vX1,vY1,pPtrToThreePtrs,vBgMapSize) 7Eh DrawMessageBoxAllAtOnce(vWindowNumber,vDelay,vX,vY,pPtrToString) 7Fh DrawMessageBoxCharByCharBUGGED(..) ;works only via CALL, not token 7Fh 80h..FFh Reserved/Crashes (jumps to garbage function addresses) |
v 16bit Global or Private Variable or Immediate (encoded as 3 token bytes) p 24bit Pointer (3 token bytes) (banks F0h..FFh translated, in most cases) b 8bit Immediate (encoded directly as 1 token byte) w 16bit Immediate (encoded directly as 2 token bytes) q 16bit Immediate (accidently encoded as 3 token bytes, last byte unused) |
+/-00nnnnh --> +/-nnnnh R ;immediate +/-01nnnnh --> +/-[nnnnh+X] R/W ;private variable (X=thread_id*2) +/-02nnnnh --> +/-[nnnnh] R/W ;global variable + 03nnnnh --> +[nnnnh+[19A4h]] W ;special (write-only permission) + 09nnnnh --> +[nnnnh+[19A4h]] R/W ;special (read/write permission) + 0Annnnh --> +[nnnnh+[19A4h]] R ;special (read-only permission) Examples: 000001h or FF0001h (aka -00FFFFh) are both meaning "+0001h". 021111h means "+[1111h]", FDEEEF (aka -021111h) means "-[1111h]". |
00nnnnh..EFnnnnh --> 00nnnnh..EFnnnnh (unchanged) F0nnnnh --> TokenProgramPtr+nnnn (relative) F1nnnnh (or F2nnnnh) --> [[AFh+0]+nnnn*3] (indexed by immediate) F3nnnnh --> [[AFh+0]+[nnnn+X]*3] (indexed by thread-variable) F4nnnnh --> [[AFh+0]+[nnnn]*3] (indexed by global-variable) F5nnnnh (or F6nnnnh) --> [[AFh+3]+nnnn*3] (indexed by immediate) F7nnnnh --> [[AFh+3]+[nnnn+X]*3] (indexed by thread-variable) F8nnnnh --> [[AFh+3]+[nnnn]*3] (indexed by global-variable) F9nnnnh (or FAnnnnh) --> [[AFh+6]+nnnn*3] (indexed by immediate) FBnnnnh --> [[AFh+6]+[nnnn+X]*3] (indexed by thread-variable) FCnnnnh --> [[AFh+6]+[nnnn]*3] (indexed by global-variable) FDnnnnh..FFnnnnh --> crashes (undefined/reserved) |
0000h Goto_if_less ;A<B 0001h Goto_if_less_or_equal ;A<=B 0002h Goto_if_equal ;A=B 0003h Goto_if_not_equal ;A<>B 0004h Goto_if_greater ;A>B 0005h Goto_if_greater_or_equal ;A>=B |
xx0000h Pause xx0001h UnpauseSubThreadAndReenableObj xx0002h PauseAfterNextFrame xx0003h PauseAndDisableObj xx0004h ResetAndRestartSubThread xx0005h KillSubThread NNNNNNh Entrypoint (with automatic reset; only if other than old entrypoint) |
809225h CallKillAllMachineCodeThreads() 80B47Dh CallGetTextLayerVramBase() 80B91Eh CallClearBg3TextLayer() 818EF9h CallSetApuRelatedPtr() 818F06h CallDrawMessageBoxCharByChar(vWindowNumber,vDelay,vX,vY,pPtrToString) 818FF0h CallDrawBlackCircleInLowerRightOfWindow() 81903Dh CallDisplayButton_A_ObjInLowerRightOfWindow() 81A508h CallSetGuiBorderScheme(pAddr1,pAddr2) 81A551h CallSetTextWindowBoundaries(wWindowNumber,bXpos,bYpos,bXsiz,bYsiz) 81A56Eh CallHideTextWindow(wWindowNumber) 81A57Bh CallSelectWindowBorder(wWindowNumber,wBorder) ;0..3, or FFh=NoBorder 81A59Ah CallSelectTextColor(wWindowNumber,bColor,bTileBank,bPalette) 81A5C3h CallClearTextWindowDrawBorder(wWindowNumber) 81A5D2h CallZoomInTextWindow(wWindowNumber,wZoomType) ;\1,2,3=Zoom HV,V,H 81A603h CallZoomOutTextWindow(wWindowNumber,wZoomType) ;/0=None/BuggyWinDiv2 81A634h CallSetGuiColorScheme(pAddr) 81A65Dh CallChangePaletteOfTextRow(vX,vY,vWidth,vPalette) 81A693h CallPeekMemory16bit(vDest,pSource) 81A6B4h CallPokeMemory16bit(vSource,pDest) 81C7D0h CallInitializeAndDeallocateAllObjTilesAndObjPalettes() 81C871h CallDeallocateAllObjs() 81CDF9h CallBackupObjPalette() 81CE09h CallRestoreObjPalette() 829699h CallUploadPaletteVram(pSource,wVramAddr,bPaletteIndex) 88932Fh CallTestIfFolderExists() ;in: 0780, out: 1998,077C,077E 88D076h CallTestIfDoor() 99D9A4h CallSelectPlayerAsSecondaryThread ;[19A4]=PlayerThreadId*2 |
99D69A EnterTown (use via goto, or use as entrypoint) 828230 DeallocMostBgPalettesAndBgTiles ;except tile 000h and color 00h-1Fh 88C1C6 SetCursorShape0 88C1D0 SetCursorShape1 88C1E0 SetCursorShape2 88C1EA SetCursorShape3 88C1F4 SetCursorShape4 88C1FE SetCursorShape5 99D8AB PauseSubThreadIfXYstepIsZero 99D8CD MoveWithinX1andX2boundaries 99D903 MoveWithinY1andY2boundaries |
| SNES Cart Satellaview Chipsets |
U1 44pin MCC-BSC LR39197 Nintendo U2 36pin ROM (36pin/40pin possible) U3 32pin 658512LFP-85 (4Mbit PSRAM) U4 28pin LH52B256NB-10PLL (256Kbit SRAM) U5 8pin MM1134 (battery controller for SRAM) BT1 2pin Battery CN1 62pin SNES Cartridge Edge (pin 2,33 used) CN2 62pin Flash Cartridge Connector (male?) |
U1 20pin 74LS541 8-bit 3-state buffer/line driver U2 20pin 74LS541 8-bit 3-state buffer/line driver U3 20pin 74LS245 8-bit 3-state bus transceiver U4 8pin SPR-BSA (unknown, might be controlled via port 2198h or 2199h?) U5 100pin DCD-BSA (custom Nintendo chip) U6 64pin MN88821 (maybe a MN88831 variant: Satellite Audio Decoder) U7 18pin AN3915S Clock Regenerator (for amplifying/stabilizing Y1 crystal) U8 4pin PQ05RH1L (5V regulator with ON/OFF control) U9 14pin LM324 Quad Amplifier Y1 2pin 18.432MHz crystal T1 4pin ZJYS5102-2PT Transformator T2 4pin ZJYS5102-2PT Transformator CN1 28pin SNES Expansion Port CN2 38pin Expansion Port (EXT) (believed to be for modem) CN3 3pin To POWER and ACCESS LEDs on Front Panel CN4 7pin Rear connector (satellite and power supply?) |
U1 56pin Sharp LH28F800SUT-ZI (or -Z1?) (1Mbyte FLASH) CN1 62pin Flash Cartridge Connector (female?) |
U1 ?pin unknown (reportedly read-only... mask ROM?) CN1 62pin Flash Cartridge Connector (female?) |
U1 36pin ROM U2 28pin SRAM (32Kbytes) U3 16pin MAD-1A U4 16pin CIC D411B BT1 2pin Battery CR2032 CN1 62pin SNES Cartridge Edge (pin 2,33 used) CN2 62pin Flash Cartridge Connector (male 2x31 pins) |
U1 44pin ROM U2 28pin SRAM (8Kbytes) U3 128pin SA1 U4 8pin MM1026AF (battery controller for SRAM) BT1 2pin Battery CN1 62pin SNES Cartridge Edge (pin 2,33 used) CN2 62pin Flash Cartridge Connector (male?) |
| SNES Cart Data Pack Slots (satellaview-like mini-cartridge slot) |
Derby Stallion 96 (SpecialLoROM, 3MB ROM, 32K RAM) Itoi Shigesato no Bass Tsuri No. 1 (SA-1, map-able 4MB ROM, 8K RAM) Joushou Mahjong Tenpai (HiROM, 1MB) Ongaku Tukool/Tsukuru Kanaderu (HiROM, 1MB) RPG Tukool/Tsukuru 2 (LoROM, 2MB) Same Game Tsume Game (HiROM, 1MB) Satellaview BS-X BIOS (MCC, 1MB ROM) (FLASH at C00000h) SD Gundam G-NEXT (SA-1, map-able 1.5MB ROM, 32K RAM) Sound Novel Tukool/Tsukuru (SpecialLoROM, 3MB ROM, 64K RAM) |
[FFB2h]="Z" ;first letter of game code [FFB5h]<>20h ;game code must be 4-letters (not space padded 2-letters) [FFDAh]=33h ;game code must exist (ie. extended header must be present) |
MCC (BSX-BIOS) FLASH at C00000h (continous) (mappable via MCC chip) SA-1 FLASH at <unknown address> (probably mappable via SA1) HiROM FLASH at E00000h (probably continous) LoROM/SpecialLoROM FLASH at C00000h (looks like 32K chunks) |
1st 1MB of ROM mapped to banks 00-1F 2nd 1MB of ROM mapped to banks 20-3F and A0-BF 3rd 1MB of ROM mapped to banks 80-9F 1MB of Data Pack FLASH mapped to banks C0-DF 32K..64K SRAM mapped to banks 70-71 |
| SNES Cart Nintendo Power (flashcard) |
U1 18pin CIC ("F411B Nintendo")
U2 100pin MX15001 ("Mega Chips MX15001TFC")
U3 44pin 16M FLASH ("MX 29F1601MC-11C3") (2Mbyte FLASH, plus hidden sector)
U4 44pin 16M FLASH ("MX 29F1601MC-11C3") (2Mbyte FLASH, plus hidden sector)
U5 44pin 16M FLASH (N/A, not installed)
U6 28pin SRAM ("SEC KM62256CLG-7L") (32Kbyte SRAM)
U7 8pin MM1134 ("M 707 134B") (battery controller)
BAT1 2pin Battery ("Panasonic CR2032 +3V")
|
U1 80pin G-MMC1 ("MegaChips MX15002UCA"
U2 40pin 8M FLASH ("MX29F008ATC-14") (plus hidden sector)
U3 32pin 1M SRAM ("UT621024SC-70LL")
X1 3pin N/A (oscillator? not installed)
BAT1 2pin Battery ("Panasonic CR2025")
|
Gamecode: "MENU" (this somewhat indicates the "MX15001" chip)
ROM Size: 512K (the menu size, not including the other FLASH blocks)
SRAM Size: 0K (though there is 32Kbyte SRAM for use by the games)
Battery Present: Yes
Checksum: Across 512Kbyte menu, with Directory assumed to be
FFh-filled (except for the "MULTICASSETTE 32" part)
|
ROM Offset SNES Address Size Content 000000h 808000h 4xxxh Menu Code (around 16K, depending on version) 004xxxh 80xxxxh 3xxxh Unused (FFh-filled) 007FB0h 80FFB0h 50h Cartridge Header 008000h 818000h 40000h Unused (FFh-filled) 048000h 898000h 372Bh Something (APU code/data or so) 04B72Bh 8xxxxxh 47D5h Unused (FFh-filled) 050000h 8A8000h 8665h Something (VRAM data or so) 058665h 8Bxxxxh 798Bh Unused (FFh-filled) 060000h 8C8000h 10000h Directory (File 0..7) (2000h bytes/entry) 070000h 8E8000h 10000h Unused (FFh-filled) |
Super Famicom Flashcards (in Japan) Gameboy Color Flashcards (in Japan) Super Famicom Magazine (online via Satellaview BS-X) (in Japan) Official SNES Magazine (printout) (in USA) |
| SNES Cart Nintendo Power - New Stuff |
[0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=F0h ;FLASH read/reset command [00000h]=38h, [00000h]=D0h, [00000h]=71h ;FLASH request chip info part 1 dummy=[00004h] ;Read Ready-status (bit7=1=ready) [00000h]=72h, [00000h]=75h ;FLASH request chip info part 2 Port[2404h..2407h]=[0FF00h+(n*8)+0,2,4,6] ;Read mapping info for File(n) [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=F0h ;FLASH read/reset command |
[00000h]=38h ;copy hidden sector to page buffer? [00000h]=D0h ; ...confirm above [00000h]=71h ;read extended status register dummy=[00004h] ; ...do read it (bit7=1=ready) [00000h]=72h ;swap page buffer (map above buffer to cpu side?) [00000h]=75h ;read page buffer to cpu xx=[0FFxxh] ; ...do read it |
[00000h]=74h ;write page buffer single byte from cpu [0xxxxh]=xx ; ...do write it |
[00000h]=E0h ;sequential load from cpu to page buffer [00000h]=num.L ; ...byte count lsb (minus 1 ?) (0=one byte, what=100h bytes) [00000h]=num.H ; ...byte cound msb (zero) [?]=data ; ...data? [00000h]=0Ch ;forward page buffer to flash [00000h]=num.L ; ...byte count lsb (minus 1 ?) (0=one byte, what=100h bytes) [addr]=num.H ; ...byte cound msb (zero) [...]? ; ...do something to wait until ready |
C0FF00 03 11 AA 74 AA 97 00 12 ;Menu (512K Lorom, no SRAM) C0FF08 00 08 29 15 4A 12 10 01 ;Super Mario World (512K Lorom, 2K SRAM) C0FF10 0B FF AA FF AA FF 21 FF ;Doraemon 4 (1.5M Lorom, no SRAM) C0FF18 49 FF 61 FF A5 FF 51 FF ;Dragon Slayer II (1.5M Hirom, 8K SRAM) C0FF20..FF FF-filled (byte at C0FF7Fh is 00h in some carts) ;-unused E0FF00..8F FF-filled (other values at E0FF8xh in some carts) ;\garbage, from E0FF90 FF FF 55 00 FF FF FF FF FF FF FF FF FF FF FF FF ; chip-testing E0FFA0 FF FF FF FF FF FF 55 00 FF FF FF FF FF FF FF FF ; or so E0FFB0 FF FF FF FF FF FF 55 00 FF FF FF FF FF FF FF FF ;/ E0FFC0..FF FF-filled ;-unused |
if [002400h]<>7Dh then skip unlocking ;else locking would be re-enabled [002400h]=09h ;\ dummy=[002400h] ; [002401h]=28h ; wakeup sequence (needed before sending other commands, [002401h]=84h ; and also enables reading from port 2400h..2407h) [002400h]=06h ; [002400h]=39h ;/ |
[002400h]=00h RESET and map GAME14 ? (issues /RESET pulse) [002400h]=01h causes always 8x7D [002400h]=02h Set STATUS.bit2=1 (/WP=HIGH, release Write protect) [002400h]=03h Set STATUS.bit2=0 (/WP=LOW, force Write protect) [002400h]=04h HIROM:ALL (map whole FLASH in HiROM mode) [002400h]=05h HIROM:MENU (map MENU in HiROM mode instead normal LoROM mode) [002400h]=06h causes always 8x7D (aka, undoes toggle?) [002400h]=07h causes always 8x7D [002400h]=08h causes always 8x7D [002400h]=09h no effect ;\ [002400h]=0ah no effect ;/ [002400h]=0bh causes always 8x7D [002400h]=0ch causes always 8x7D [002400h]=0dh causes always 8x7D [002400h]=0eh causes always 8x7D [002400h]=0fh causes always 8x7D [002400h]=10h causes always 8x7D [002400h]=14h causes always 8x7D [002400h]=20h Set STATUS.bit3=0 (discovered by skaman) (default) [002400h]=21h Set STATUS.bit3=1 (discovered by skaman) (disable ROM read?) [002400h]=24h causes always 8x7D [002400h]=44h no effect (once caused crash with green rectangle) [002400h]=80h..8Fh ;-Issue /RESET to SNES and map GAME 0..15 [002400h]=C5h causes always 8x7D [002400h]=FFh sometimes maps GAME14 or GAME15? (unreliable) |
| SNES Cart Nintendo Power - I/O Ports |
Write registers: 2400h - Command 2401h - Extra parameter key (used only for wakeup command) 2402h..2407h - Unknown/unused Read registers (before wakeup): 2400h..2407h - Fixed 7Dh Read registers (after wakeup): 2400h - Fixed 2Ah 2401h - Status 2402h..2403h - Fixed 2Ah 2404h - Mapping Info: ROM/RAM Size ;\these four bytes are 2405h..2406h - Mapping Info: SRAM Mapping related ; initialized from the 2407h - Mapping Info: ROM/RAM Base ;/hidden flash sector |
0-1 zero 2 release /WP state (set by CMD_02h, cleared by CMD_03h) 3 disable ROM reading? (set by CMD_21h, cleared by CMD_20h) 4-7 Selected Slot (0=Menu/File0, 1..15=File1..15) (via CMD_8xh) |
0-1 SRAM Size (0=2K, 1=8K, 2=32K, 3=None) ;ie. 2K SHL (N*2) 2-4 ROM Size (0=512K, 2=1.5M, 5=3M, 7=4M) ;ie. 512K*(N+1) 5 Maybe ROM Size MSB for carts with three FLASH chips (set for HIROM:ALL) 6-7 Mode (0=Lorom, 1=Hirom, 2=Forced HIROM:MENU, 3=Forced HIROM:ALL) |
0-3 SRAM Base in 2K units 4-7 ROM Base in 512K units (bit7 set for HIROM:MENU on skaman's blank cart) |
29,4A for Lorom with SRAM 61,A5 for Hirom with SRAM AA,AA for Lorom/Hirom without SRAM 61,A5 (when forcing HIROM:ALL) D5,7F (when forcing HIROM:MENU) 8A,8A (when forcing HIROM:MENU on skaman's blank cart) |
mov [002400h],09h cmp [002400h],7Dh jne $ ;lockup if invalid mov [002401h],28h mov [002401h],84h mov [002400h],06h mov [002400h],39h mov [002400h],80h+(Directory[n*2000h+0] AND 0Fh) jmp $ ;lockup (until reset applies) |
| SNES Cart Nintendo Power - FLASH Commands |
[0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=F0h, data=[addr..] ;Read/Reset [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=90h, ID=[00000h] ;Get Maker ID [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=90h, ID=[00002h] ;Get Device ID [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=90h, WP=[x0004h] ;Get Sector Protect [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=70h, SRD=[00000h] ;Read Status Reg [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=50h ;Clear Status Reg [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=A0h, [addr..]=data ;Page/Byte Program [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=80h ;Prepare Erase... [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=10h ;...do Chip Erase [0AAAAh]=AAh, [05554h]=55h, [x0000h]=30h ;...do Sector Erase [0xxxxh]=B0h ;...Erase suspend [0xxxxh]=D0h ;...Erase resume [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=60h ;Prepare Protect... [0AAAAh]=AAh, [05554h]=55h, [addr]=20h ;...do Sector Protect [0AAAAh]=AAh, [05554h]=55h, [addr]=40h ;...do Sector Unprot. [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=C0h ;Sleep [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=E0h ;Abort |
[0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=77h ;Prepare Hidden... [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=99h, [addr..]=data ;...do Hidden Write [0AAAAh]=AAh, [05554h]=55h, [0AAAAh]=E0h ;...do Hidden Erase [00000h]=38h, [00000h]=D0h, [00000h]=71h, dummy=[00004] ;Prepare Hidden Rd... [00000h]=72h, [00000h]=75h, data=[addr...] ;...do Hidden Read |
7 Write/Erase State (0=Busy, 1=Ready) 6 Erase Suspend (0=Normal, 1=Sector Erase Suspended) 5 Erase Failure (0=Okay, 1=Fail in erase) 4 Program Failure (0=Okay, 1=Fail in program) 3 Reserved (zero) (MX29F1610A/B) 3 Sector-Protect Status (0=?, 1=?) (MX29F1611 only) 2 Sleep Mode (0=Normal, 1=Sleep) (MX29F1611 only) 1-0 Reserved (zero) |
[00000h]=Manufacturer ID: C2h = Macronix [00002h]=Device ID: FAh = MX29F1610A ;\with sector_protect, suspend/resume, without sleep/abort FBh = MX29F1610B ;/ F7h = MX29F1611 ;-with sector_protect, suspend/resume, sleep/abort 6Bh = MX29F1615 ;-without sector_protect, suspend/resume, sleep/abort F3h = MX29F1601MC ;<-- undocumented, used in SNES nintendo power carts [x0004h]=Sector Protect State: 00h = normal unprotected 128Kbyte sector (can occur on all sectors) C2h = write-protected 128Kbyte sector (can occur on first & last sector only) |
| SNES Cart Nintendo Power - Directory |
ROM Offset SNES Address Size Content 060000h 8C8000h 2000h File 0 (Menu) 062000h 8CA000h 2000h File 1 064000h 8CC000h 2000h File 2 066000h 8CE000h 2000h File 3 068000h 8D8000h 2000h File 4 06A000h 8DA000h 2000h File 5 06C000h 8DC000h 2000h File 6 06E000h 8DE000h 2000h File 7 070000h 8E8000h 10000h Unused (FFh-filled) |
0000h 1 Directory index (00h..07h for Entry 0..7) (or FFh=Unused Entry) 0001h 1 First 512K-FLASH block (00h..07h for block 0..7) 0002h 1 First 2K-SRAM block (00h..0Fh for block 0..15) 0003h 2 Number of 512K-FLASH blocks (mul 4) (=0004h..001Ch for 1..7 blks) 0005h 2 Number of 2K-SRAM blocks (mul 16) (=0000h..0100h for 0..16 blks) 0007h 12 Gamecode (eg. "SHVC-MENU- ", "SHVC-AGPJ- ", or "SHVC-CS - ") 0013h 44 Title in Shift-JIS format (padded with 00h's) (not used by Menu) 003Fh 384 Title Bitmap (192x12 pixels, in 30h*8 bytes, ie. 180h bytes) 01BFh 10 Date "MM/DD/YYYY" (or "YYYY/MM/DD" on "NINnnnnn" carts) 01C9h 8 Time "HH:MM:SS" 01D1h 8 Law "LAWnnnnn" or "NINnnnnn" (eg. "LAW01712", or "NIN11001") 01D9h 7703 Unused (1E17h bytes, FFh-filled) 1FF0h 16 For File0: "MULTICASSETTE 32" / For Files 1-7: Unused (FFh-filled) |
Left 8 pixels = (Byte[00h+y*2]) Middle 8 pixels = (Byte[01h+y*2]) OR (Byte[18h+y*2] SHR 4) Right 8 pixels = (Byte[18h+y*2] SHL 4) OR (Byte[19h+y*2] SHR 4) |
LAW = games installed on kiosks in Lawson Convenience Store chain NIN = games pre-installed by nintendo (eg. derby 98) |
| SNES Cart Sufami Turbo (Mini Cartridge Adaptor) |
| SNES Cart Sufami Turbo General Notes |
00-1F:8000h-FFFFh BIOS ROM (always 256Kbytes) (max 1MByte) 20-3F:8000h-FFFFh Cartridge A ROM (usually 512Kbytes) (max 1MByte) 40-5F:8000h-FFFFh Cartridge B ROM (usually 512Kbytes) (max 1MByte) 60-63:8000h-FFFFh Cartridge A SRAM (usually 0/2/8 Kbytes) (max 128Kbyte) 70-73:8000h-FFFFh Cartridge B SRAM (usually 0/2/8 Kbytes) (max 128Kbyte) 80-FF:8000h-FFFFh Mirror of above banks |
Crayon Shin Chan Gegege No Kitarou Gekisou Sentai Car Ranger Poi Poi Ninja ;-link-able with itself (2-player sram) Sailor Moon Stars Panic 2 SD Gundam Generations: part 1 ;\ SD Gundam Generations: part 2 ; SD Gundam Generations: part 3 ; link-able with each other SD Gundam Generations: part 4 ; SD Gundam Generations: part 5 ; SD Gundam Generations: part 6 ;/ SD Ultra Battle: Seven Legend ;\link-able with each other SD Ultra Battle: Ultraman Legend ;/ |
IC1 18pin unknown (CIC) IC2 16pin "74AC139" or so IC3 40pin SUFAMI TURBO "LH5326NJ" or so (BIOS ROM) (256Kbyte) IC4 8pin unknown CP1 unknown (flashlight? oscillator? strange capacitor?) CN1 62pin SNES cartridge edge (male) CN2 40pin Sufami Cartridge Slot A (Game to be played) CN3 40pin Sufami Cartridge Slot B (Other game to be "linked") C1..4 2pin capacitors for IC1..4 R1..4 2pin resistors for unknown purpose |
| SNES Cart Sufami Turbo ROM/RAM Headers |
FFB0h Maker Code "B2" ;\extended header, present FFB2h Game Code "A9PJ" ; even though [FFDAh]<>33h FFB6h Reserved (10x00h) ;/ FFC0h Title "ADD-ON BASE CASSETE " (really mis-spelled, with only one "T") FFD4h Mapmode (always 30h = Fast LoROM) FFD5h Reserved (6x00h) (no ROM/RAM size entries, no ext.header-flag, etc.) FFDCh Dummy "checksum" value (always FFh,FFh,00h,00h) FFE0h Exception Vectors (IRQ,NMI,Entrypoint,etc.) |
8000h 16 "BANDAI SFC-ADX",0,0 ;Game ROM ID 8010h 16 "SFC-ADX BACKUP",0,0 ;Game SRAM ID |
00h 14 ID "BANDAI SFC-ADX" (required, compared against 14-byte ID in BIOS) 0Eh 2 Zero-filled 10h 14 Title, padded with spaces (can be 7bit ASCII and 8bit Japanese) 1Eh 2 Zero-filled 20h 2 Entrypoint (in bank 20h) ;game starts here (if it is in Slot A) 22h 2 NMI Vector (in bank 20h) ;if RAM[000000h]=00h: use BIOS NMI handler 24h 2 IRQ Vector (in bank 20h) 26h 2 COP Vector (in bank 20h) 28h 2 BRK Vector (in bank 20h) 2Ah 2 ABT Vector (in bank 20h) 2Ch 4 Zero-filled 30h 3 Unique 24bit ID of a Game (or series of games) (usually 0xh,00h,0yh) 33h 1 Index within a series (01h and up) (eg. 01h..06h for Gundam 1-6) 34h 1 ROM Speed (00h=Slow/2.68Mhz, 01h=Fast=3.58MHz) 35h 1 Chipset/Features (00h=Simple, 01h=SRAM or Linkable?, 03h=Special?) 36h 1 ROM Size in 128Kbyte Units (04h=512K, 08h=1024K) 37h 1 SRAM Size in 2Kbyte Units (00h=None, 01h=2K, 04h=8K) 38h 8 Zero-filled |
40h 1 Program code/data in some carts, 00h or 01h in other carts 41h 63 Program code/data in some carts, 00h-filled in other carts |
0000h 15 ID "SFC-ADX BACKUP",0 ;Other = begin of free memory 000Fh 1 Zero 0010h 14 Title (same as 0010h..001Dh in ROM Header) 001Eh 1 Zero 001Fh 1 Zero (except, 01h in Poi Poi Ninja) 0020h 4 Unique ID and Index in Series (same as 0030h..0033h in ROM Header) 0024h 1 Filesize (in 2Kbyte units) (same as 0037h in ROM Header) 0025h 11 Zero-filled |
| SNES Cart Sufami Turbo BIOS Functions & Charset |
80FF00 FillSramPages ;in: AL=num, AH=slot, XL=first, [09h]=fillword 80FF04 CopySramToSram ;in: AL=num, AH=direction, X/Y=first (slot A/B) 80FF08 CopySramToWram ;in: AL=num, AH=direction, X=first, Y=slot, [09h]=addr 80FF0C GetChar2bpp ;in: A=char(0000h..0FFFh), [06h]=dest_addr (64 bytes) 80FF10 GetChar4bpp ;in: A=char(0000h..0FFFh), [06h]=dest_addr (128 bytes) 80FF14 GetCartType ;out: AL/AH=Types for Slot A/B, b0=ROM, b1=SRAM, b2=? 80FF18 GetSramSize ;out: AL/AH=Sizes for Slot A/B, 0-4=0,2,8,32,128Kbyte 80FF1C FindFreeSram ;in: AL=slot, out: AL=first_free_page, FFh=none 80FF20 GetSramAddrTo6 ;in: AL=slot, XL=page, out: [06h]=addr 80FF24 GetSramAddrTo9 ;in: AL=slot, XL=page, out: [09h]=addr 80FF28 ShowHelpSwap ;display instructions how to exchange cartridges 80FF2C ShowHelpNoSwap ;display instructions how to remove cartridges 80FF30 DeleteFile ;in: AL=first, AH=slot 80FF34 TestSramId ;in: AL=page, AH=slot, out: CY: 0=Used, 1=Free 80FF38 SramToSramCopy ;in: AL=num, X=src, Y=dst; XH/YH=slot, XL/YL=first |
num = number of 2Kbyte pages slot = slot (0 or 1 for slot A or B) first = first 2Kbyte page number (of a file/area) (within selected slot) page = single 2Kbyte page number (within selected slot) addr = 24bit SNES memory address AL/AH, XL/XH, YL/YH = LSB/MSB of A,X,Y registers |
| SNES Cart X-Band (2400 baud Modem) |
| SNES Cart X-Band Misc |
D00000h-DFFFFFh 1MB ROM (executed here, not at C00000h-CFFFFFh) E00000h-E0FFFFh 64K SRAM (in two 32Kx8 chips) (unknown if BOTH have battery) FBC000h-FBC17Fh I/O Ports (unknown functions?) FBC180h-FBC1BFh I/O Ports (Rockwell Modem Chip) FBFC02h I/O Port (unknown functions?) FBFE00h I/O Port (unknown functions?) FFC000h I/O Port (unknown functions?) 004F02h I/O Port (unknown functions?) 00F000h Dummy/strobe read? 00FFE0h Dummy/strobe read? |
Doom + Ken Griffey Jr. Baseball ? (not listed in stats) Killer Instinct + Madden NFL '95 + Madden NFL '96 + Mortal Kombat II + Mortal Kombat 3 + NBA Jam TE + NHL '95 ? (not listed in stats) NHL '96 ? (not listed in stats) Super Mario Kart + Weaponlord + (listed in sf2dxb stats only) |
Kirby's Avalanche + Super Street Fighter II + The Legend of Zelda: A Link to the Past (secret maze game) + Super Mario World (chat function) |
benner 3.26.97 (main character with most stats is lower-right) sf2dxb 4.30.97 luke2 3.1.97 |
U1 28pin Winbond W24257S-70L (32Kx8 SRAM) U2 36pin X X, X BAND, X X, SNES US ROM 1.0.1 (BIOS ROM) U3 100pin FredIIH, H3A4D1049, 9511 Korea (with Hyundai logo) U4 68pin RC2324DPL, R6642-14, Rockwell 91, 9439 A49172-2, Mexico U5 6pin LITEON 4N25 (optocoupler) (near TN0) (back side) U6 28pin Winbond W24257S-70L (32Kx8 SRAM) U7 6pin AT&T LF1504 (solid state relay) (near TN0) (back side) BT0 2pin Battery (not installed) (component side) BT200 2pin Battery (3V Lithium Penata CR2430) (back side) SW1 3pin Two-position switch (purpose unknown... battery off ??) J0 10pin Card-reader (for credit cards or so?) 8 contacts, plus 2pin switch J1 62pin SNES Cartridge Edge (to be plugged into the SNES console) J2 62pin SNES Cartridge Slot (for game-cart plugged on top of the modem) J3 4/6pin RJ socket (to phone line) Y1 2pin Oscillator (R24AKBB4, =24MHz or so?) (back side) TN0 4pin Transformator (671-8001 MIDCOM C439) LEDs Three red LEDs (purpose/usage unknown?) |
MODEM is "RC2424DPL, R6642-25, Rockwell 91, 9507 A61877.2, Hong Kong" |
SRAMs are "SEC KOREA, 550A, KM62256CLG-7L" BIOS is "X X 9549, X BAND, X X, SUPER FAMICOM, ROM1.0" FRED is "Catapult, FRED5S, 549D" (100pin) MODEM is "RC2424DPL, R6642-25, Rockwell 91, 9609 A62975-2, Mexico" Y1 is "A24.000" BT201 is "C?2032" (installed instead of bigger BT200) |
| SNES Cart X-Band I/O Map |
kDefaultInternal: equ ($1de000*2) ;;=3BC000h ;aka SNES: FBC000h kDefaultControl: equ ($1dff00*2) ;;=3BFE00h ;aka SNES: FBFE00h |
Addr $nn*2 i\harddef.a i\feq.a ;Comment ---------------------------------------------------------------------------- C000h $00*2 kPatch_0_Byte0 - (lo?) ;Translation (Patch Addr) regs ... C002h $01*2 kPatch_0_Byte1 - (mid?) ;(aka "Vectors 0..10"?) C004h $02*2 kPatch_0_Byte2 - (hi?) C006h N/A - C008h $04*2 kPatch_1_Byte0 - C00Ah $05*2 kPatch_1_Byte1 - C00Ch $06*2 kPatch_1_Byte2 - C00Eh N/A - C010h $08*2 kPatch_2_Byte0 - C012h $09*2 kPatch_2_Byte1 - C014h $0A*2 kPatch_2_Byte2 - C016h N/A - C018h $0C*2 kPatch_3_Byte0 - C01Ah $0D*2 kPatch_3_Byte1 - C01Ch $0E*2 kPatch_3_Byte2 - C01Eh N/A - C020h $10*2 kPatch_4_Byte0 - C022h $11*2 kPatch_4_Byte1 - C024h $12*2 kPatch_4_Byte2 - C026h N/A - C028h $14*2 kPatch_5_Byte0 - C02Ah $15*2 kPatch_5_Byte1 - C02Ch $16*2 kPatch_5_Byte2 - C02Eh N/A - C030h $18*2 kPatch_6_Byte0 - C032h $19*2 kPatch_6_Byte1 - C034h $1A*2 kPatch_6_Byte2 - C036h N/A - C038h $1C*2 kPatch_7_Byte0 - C03Ah $1D*2 kPatch_7_Byte1 - C03Ch $1E*2 kPatch_7_Byte2 - C03Eh N/A - C040h $20*2 kPatch_8_Byte0 - C042h $21*2 kPatch_8_Byte1 - C044h $22*2 kPatch_8_Byte2 - C046h N/A - C048h $24*2 kPatch_9_Byte0 - C04Ah $25*2 kPatch_9_Byte1 - C04Ch $26*2 kPatch_9_Byte2 - C04Eh N/A - C050h $28*2 kPatch_10_Byte0 - C052h $29*2 kPatch_10_Byte1 - C054h $2A*2 kPatch_10_Byte2 - C056h N/A - C058h $2C*2 kRange0Start - C05Ah ""-mid? - C05Ch ""-hi? - C05Eh N/A - C060h $30*2 kRange1Start - C062h ""-mid? - C064h ""-hi? - C066h N/A - C068h N/A - C06Ah N/A - C06Ch N/A - C06Eh N/A - C070h $38*2 kMagicAddrByte0 kmagicl C072h $39*2 kMagicAddrByte1 kmagicm C074h $3A*2 kMagicAddrByte2 kmagich C076h N/A - C078h N/A - C07Ah N/A - C07Ch N/A - C07Eh N/A - C080h $40*2 kRange0End krangel C082h ""-mid? krangem C084h ""-hi? krangeh C086h N/A - C088h $44*2 kRange1End - C08Ah ""-mid? - C08Ch ""-hi? - C08Eh N/A - C090h N/A - C092h N/A - C094h N/A - C096h N/A - C098h N/A - C09Ah N/A - C09Ch N/A - C09Eh N/A - C0A0h $50*2 kRange0Dest ktrbl C0A2h ""-hi? ktrbh C0A4h $52*2 kRange0Mask ktrm C0A6h N/A - C0A8h $54*2 kRange1Dest - C0AAh ""-hi? - C0ACh $56*2 kRange1Mask - C0AEh N/A - C0B0h N/A - C0B2h N/A - C0B4h N/A - C0B6h N/A - C0B8h N/A - C0BAh N/A - C0BCh N/A - C0BEh N/A - C0C0h $60*2 kRAMBaseByte0 ksaferambasel C0C2h $61*2 kRAMBaseByte1 ksaferambaseh C0C4h N/A - C0C6h N/A - C0C8h $64*2 kRAMBoundByte0 ksaferambndl C0CAh $65*2 kRAMBoundByte1 ksaferambndh C0CCh N/A - C0CEh N/A - C0D0h $68*2 kVTableBaseByte0 kvtablel ;\vector table base address? C0D2h $69*2 kVTableBaseByte1 kvtableh ;/ (in 32-byte, or 32-word steps maybe?) C0D4h N/A - C0D6h N/A - C0D8h $6c*2 kEnableByte0 kenbll C0DAh $6d*2 kEnableByte1 kenblh C0DCh N/A - C0DEh N/A - C0E0h $70*2 kROMBound ksaferombnd C0E2h N/A - C0E4h N/A - C0E6h N/A - C0E8h $74*2 kROMBase ksaferombase C0EAh N/A - C0ECh N/A - C0EEh N/A - C0F0h N/A - ;<-- but this is used on SNES !?! C0F2h N/A - ;<-- but this is used on SNES !?! C0F4h N/A - C0F6h N/A - C0F8h $7c*2 kAddrStatus kaddrstatusl C0FAh ""-hi? kaddrstatush C0FCh N/A - C0FEh N/A - C100h $80*2 kSControl ksctl ;smart card control C102h N/A - C104h N/A - C106h N/A - C108h $84*2 kSStatus ksstatus ;smart card status C10Ah N/A - C10Ch N/A - C10Eh N/A - C110h $88*2 kReadMVSyncLow kreadmvsync ;<--Low? ;\Range of 0 to $61. C112h $89*2 kReadMVSyncHigh kreadmvsynclow ;<--low? ;/Equal to C114h N/A - ; ReadSerialVCnt/2. C116h N/A - ; Value is $5c at start C118h $8c*2 kMStatus1 kmstatus1 ; of VBlank. C11Ah N/A - C11Ch N/A - C11Eh N/A - C120h $90*2 kTxBuff ktxbuff ; modem (and serial) bits ... C122h N/A - C124h N/A - C126h N/A - C128h $94*2 kRxBuff krxbuff C12Ah N/A - C12Ch N/A - C12Eh N/A - C130h $98*2 kReadMStatus2 kreadmstatus2 C132h N/A - C134h N/A - C136h N/A - C138h $9c*2 kReadSerialVCnt kreadserialvcnt C13Ah N/A - C13Ch N/A - C13Eh N/A - C140h $a0*2 kReadMStatus1 kreadmstatus1 C142h N/A - C144h N/A - C146h N/A - C148h $a4*2 kGuard kguard C14Ah N/A - C14Ch N/A - C14Eh N/A - C150h $a8*2 kBCnt kbcnt C152h N/A - C154h N/A - C156h N/A - C158h $ac*2 kMStatus2 kmstatus2 C15Ah N/A - C15Ch N/A - C15Eh N/A - C160h $b0*2 kVSyncWrite kvsyncwrite C162h N/A - C164h N/A - C166h N/A - C168h $b4*2 kLEDData kleddata C16Ah $b5*2 kLEDEnable kledenable C16Ch N/A - C16Eh N/A - C170h N/A - C172h N/A - C174h N/A - C176h N/A - C178h N/A - C17Ah N/A - C17Ch N/A - C17Eh N/A - C180h $c0*2 kModem - ;<-- base for rockwell registers (C180h-C1BEh) |
FC02h N/A - ;<-- unknown, but this is used by SNES FE00h $00*2 kKillReg kkillhere ;same as killheresoft...trans register FE02h $01*2 kControlReg kreghere FF80h $c0*2 kKillHereSoft kkillheresoft ;\maybe some sort of mirrors of FF82h $c1*2 kCtlRegSoft kctlregsoft ;/FE00h and FE02h ? |
617000h ? weirdness kSNESKillHereSoft ;\maybe some sort of mirrors of 617001h ? weirdness kSNESCtlRegSoft ;/FE00h and FE02h ? |
FFC000h I/O Port (unknown functions?) ;-bank FFh ;\ 004F02h I/O Port (unknown functions?) ;\ ; whatever, used 00F000h Dummy/strobe read? ; bank 00h ; by SNES version 00FFE0h Dummy/strobe read? ;/ ;/ |
| SNES Cart X-Band I/O - Memory Patch/Mapping |
0 HereAssert: equ $01 ; "Here" = cannot see cart 1 Unknown/unused 2 DecExcept: equ $04 ; 3 Force: equ $08 ; 4-7 Unknown/unused |
0 EnTwoRam: equ $01 ;<-- maybe disable one of the two SRAMs? 1 EnSafeRom: equ $02 ;<-- maybe SRAM read-only? or FlashROM? 2 RomHi: equ $04 ; 3 EnInternal: equ $08 ;<-- maybe disable ports C000h..C1FFh? 4 EnFixedInternal: equ $10 ;<-- maybe whatever related to above? 5 EnSNESExcept: equ $20 ; 6-7 Unknown/unused |
0-23 Unknown (also referred to as "transition address"?) |
0-23 Unknown (maybe ROM start/end addresses for BIGGER patch regions?) |
0-15 Unknown (maybe SRAM mapping target for above ROM ranges?) |
0-7 Unknown |
0-15 Unknown (maybe SRAM mapping target for ROM patch vectors?) |
0-10 Vector 0-10 Enable (aka enable "kPatch_0..10"?) (?=off, ?=on) 11 range0ena 12 range1ena 13 unknown/unused 14 transAddrEnable aka magicena ;enable transition address 15 zeroPageEnable ;enable zero page <-- game cart access? |
0-15 Unknown |
0-15 Unknown |
0-7 Unknown |
0-7 Unknown |
0-15 Unknown |
| SNES Cart X-Band I/O - Smart Card Reader |
FBC100h Card Data/Control/Whatever (out) FBC108h.Bit0 (In) Card Switch (1=card inserted, 0=card missing) FBC108h.Bit1 (In) Card Data (input) |
0 outputClk: equ $01 1 enOutputData:equ $02 ;aka data direction? 2 outputData: equ $04 3 outputReset: equ $08 4 outputVcc: equ $10 5-7 unknown/unused |
0 detect: equ $01 Card Switch (1=card inserted, 0=card missing) 1 dataIn: equ $02 Card Data (input) 2 outputClk: equ $04 ;\ 3 enOutputData:equ $08 ; Current state of Port C100h.Bit0-4 ? 4 outputData: equ $10 ; 5 outputReset: equ $20 ; 6 outputVcc: equ $40 ;/ 7 outputVpp: equ $80 ;-Current state of Port ????.Bit0 ? |
0 ksoutputvpp: equ $01 1-7 unknown/unused |
_______ _______
VCC C1 | | | C5 GND common smart card pinout
|____ | ____| (unknown if xband is actually
RST C2 | \__| / | C6 VPP using that same pinout)
|____/ \____|
CLK C3 | \_____/ | C7 I/O
|____/ | \____|
NC? C4 | | | C8 NC?
|_______|_______|
|
| SNES Cart X-Band I/O - LED and Debug |
0-7 probably controls the LEDs (can be also used for other stuff) |
0-7 seems to select data-direction for LED pins (0=input, 1=output) |
FBC168h Data ;bit2 (data, in/out) ;\there is maybe also a reset FBC16Ah Direction ;bit2 (0=input, 1=output) ;/flag, eventually in bit5 ? |
Data=Output(0), Delay (LOOPx01F4h)
Data=Output(1), Delay (LOOPx01F4h)
Data=Input
wait until Data=1 or fail if timeout
wait until Data=0 or fail if timeout
wait until Data=1 or fail if timeout
Delay (LOOPx02BCh)
for i=1 to 4
Data=Output(0), Delay (NOPx8)
Data=Output(1), Delay (NOPx8)
Data=Input, Delay (LOOPx0050h)
for i=1 to 4
Data=Output(0), Delay (NOPx8)
Data=Output(1), Delay (LOOPx003Ch)
Data=Input, Delay (LOOPx001Eh)
Data=Input, Delay (LOOPx0064h)
for i=0 to 63
Data=Output(1), Delay (NOPx8)
Data=Input, Delay (LOOPx000Ah)
key.bit(i)=Data, Delay (LOOPx004Bh)
|
sum=00h
for i=0 to 55
if (sum.bit(0) xor key.bit(i))=1 then sum=sum/2 xor 8Ch else sum=sum/2
|
| SNES Cart X-Band I/O - Whatever Stuff (External FIFO for Modem?) |
0 enModem 1 resetModem 2 bit_8 3 enstop 4 onestop 5 enparity 6 oddparity 7 break |
0 kRMrxready: rxready: equ $01 ;1 = have rx data, 0 = no data 1 kRMframeerr: ltchedframeerr: equ $02 2 kRMparityerr: ltchedparityerr: equ $04 3-4 kRMframecount: sfcnt: equ $18 6-7 unknown/unused |
0 txfull: equ $01 ; 1 = full, 0 = not full 1 txempty: equ $02 2 rxbreak: equ $04 3 overrun: equ $08 4-5 smartrxretry: equ $30 smartrxnumretry: equ $30 6-7 smarttxretry: equ $c0 smarttxnumretry: equ $c0 |
0-7 unknown |
0-7 unknown (whatever... B control... or B counter?) |
0 ensmartrxretry: equ $1 ; 1 ensmarttxretry: equ $2 ; 2 smart: equ $4 ; 3 sync: equ $8 ; 4-7 unknown/unused |
0-7 unknown |
Range of 0 to $61. Equal to ReadSerialVCnt/2. Value is $5c at start of VBlank. |
0-7 some incrementing counter...
;i\feq.a: kreadserialvcnt
; top 8 bits of 20 bit counter tied to
; input clock, or it increments 1 each 4096 clks
; resets to zero at vblank
; at 24 mhz, each 170.667 usec
; in 1/60 sec, counts up to 97 ($61), so
; range is 0 to $61 (verified by observation)
|
;i\harddef.a: kReadSerialVCnt
; Top 8 bits of 19 bit counter tied to
kFirstVCnt equ $5c ; input clock, i.e. it increments 1 each 2048 clks.
kLastVCnt equ $5b ; At 24 MHz, each 85.333 usec
kMaxVCnt equ $61 ; in 1/60 sec, counts up to 195 ($C3), so
kMinVCnt equ $00 ; range is 0 to $C3 (not yet verified by testing)
; Value is about $B8 at start of vblank, counts up to $C3,
; wraps to 0. Note that ReadMVSyncHigh VCnt is equal
; ReadSerialVCnt/2. Note also that if there is no data
; in the read fifo, it appears that ReadSerialVCnt has
; the value of ReadMVSyncHigh (i.e. 1/2 the resolution)
|
kVCntsPerModemBit: equ $5 ; 1 modem bit time is 1/2400 sec, or 417 usec
; 417/85.333 (1 VCnt) = 4.89, rounded up gives
; 5 VCnts per modem bit. Not that this refers
; to ReadSerialVCnt.
|
kLinesPerModemBit: equ $7 ; 417/64 (1 horiz line time) = 6.51, rounded up
; gives 7 Lines per modem bit
|
; for rx: ; 1. read status until rxready ; 2. read serialVcnt <-- uhm, what/why? ; 3. read Rxbuff (reading rxbuff clears the full fifo entry) |
| SNES Cart X-Band I/O - Rockwell Modem Ports |
0-7 RBUFFER Received Data Buffer. Contains received byte of data 8 RXP Received Parity bit (or ninth data bit) 9-15 N/A Unused |
0-8 N/A Unused 9 GTE TX 1800Hz Guard Tone Enable (CCITT configuration only) 10 SDIS TX Scrambler Disable 11 ARC Automatic on-line Rate Change sequence Enable 12 N/A Unused 13 SPLIT Extended Overspeed TX/RX Split. Limit TX to basic overspeed rate 14 HDLC High Level HDLC Protocol Enable (in parallel data mode) 15 NRZIE Unknown (listed in datasheet without further description) |
0 CRFZ Carrier Recovery Freeze. Disable update of receiver's carrier
recovery phase lock loop
1 AGCFZ AGC Freeze. Inhibit updating of receiver AGC
2 IFIX Eye Fix. Force EYEX and EYEY serial data to be rotated
equalizer output
3 EQFZ Equalizer Freeze. Inhibit update of receiver's adaptive
equalizer taps
4-5 N/A Unused
6 SWRES Software Reset. Reinitialize modem to its power turn-on state
7 EQRES Equalizer Reset. Reset receiver adaptive equalizer taps to zero
8 N/A Unused
9 TXVOC Transmit Voice. Enable sending of voice samples
10 RCEQ Receiver Compromise Equalizer Enable. Control insertion of
receive passband digital compromise equalizer into receive path
11 CEQ(E) Compromise Equalizer Enable. Enable transmit passband digital
compromise equalizer
12 TXSQ Transmitter Squelch. Disable transmission of energy
13-15 N/A Unused
|
0,1 WDSZ Data Word Size, in asynchronous mode (5, 6, 7, or 8 bits)
2 STB Stop Bit Number (number of stop bits in async mode)
3 PEN Parity Enable (generate/check parity in async parallel data mode)
4,5 PARSL Parity Select (stuff/space/even/odd in async parallel data mode)
6 EXOS Extended Overspeed. Selects extended overspeed mode in async mode
7 BRKS Break Sequence. Send of continuous space in parallel async mode
8 ABORT HDLC Abort. Controls sending of continuous mark in HDLC mode
9 RA Relay A Activate. Activate RADRV output
10 RB Relay B Activate. Activate RBDVR output
11 L3ACT Loop 3 (Local Analog Loopback) Activate. Select connection of
transmitter's analog output Internally to receiver's analog input
12 N/A Unused
13 L2ACT Loop 2 (Local Digital Loopback) Activate. Select connection of
receiver's digital output Internally to transmitter's digital
input (locally activated digital loopback)
14 RDL Remote Digital Loopback Request. Initiate a request for remote
modem to go into digital loop-back
15 RDLE Remote Digital Loopback Response Enable. Enable modem to respond
to remote modem's digital loopback request
|
0 RTS Request to Send. Request transmitter to send data
1 RTRN Retrain. Send retrain-request or auto-rate-change to remote modem
2 N/A Unused
3 TRFZ Timing Recovery Freeze. Inhibit update of receiver's timing
recovery algorithm
4 DDIS Descrambler Disable. Disable receiver's descrambler circuit
5 N/A Unused
6 TPDM Transmitter Parallel Data Mode. Select parallel/serial TX mode
7 ASYNC Asynchronous/Synchronous. Select sync/async data mode
8 SLEEP Sleep Mode. Enter SLEEP mode (wakeup upon pulse on RESET pin)
9 N/A Unused
10 DATA Data Mode. Select idle or data mode
11 LL Leased Line. Select leased line data mode or handshake mode
12 ORG Originate. Select originate or answer mode (see TONEC)
13 DTMF DTMF Dial Select. Select DTMF or Pulse dialing in dial mode
14 CC Controlled Carrier. Select controlled or constant carrier mode
15 NV25 Disable V.25 Answer Sequence (Data Modes), Disable Echo Suppressor
Tone (Fax Modes). Disable transmitting of 2100Hz CCITT answer tone
when a handshake sequence is initiated in a data mode or disables
sending of echo suppressor tone in a fax mode
|
0 CRCS CRC Sending. Sending status of 2-byte CRC in HDLC mode
1-7 N/A Unused
8 BEL1O3 Bell 103 Mark Frequency Detected. Status of 1270Hz Bell 103 mark
9 DTDET DTMF Digit Detected. Valid DTFM digit has been detected
10 PNSUC PN Success. Receiver has detected PN portion of training sequence
11 ATBELL Bell Answer Tone Detected. Detection status of 2225Hz answer tone
12 ATV25 V25 Answer Tone Detected. Detection status of 2100Hz answer tone
13 TONEC Tone Filter C Energy Detected. Status of 1650Hz or 980Hz (selected
by ORG bit) FSK tone energy detection by Tone C bandpass filter in
Tone Detector configuration
14 TONEB Tone Filter B Energy Detected. Status of 390Hz FSK tone energy
detection by Tone B bandpass filter in Tone Detector configuration
15 TONEA Tone Filter A Energy Detected. Status of energy above threshold
detection by Call Progress Monitor filter in Dial Configuration or
1300 Hz FSK tone energy detection by Tone A bandpass filter in
Tone Detector configuration
|
0-3 DTDIG Detected DTMF Digit. Hexadecimal code of detected DTMF digit 4-6 N/A Unused 7 EDET Early DTMF Detect. High group frequency of DTMF tone pair detected 8-9 N/A Unused 10 SADET Scrambled Alternating Ones Sequence Detected 11 U1DET Unscrambled Ones Sequence Detected 12 SCR1 Scrambled Ones Sequence Detected 13 S1DET S1 Sequence Detected 14 PNDET Unknown (listed in datasheet without further description) 15 N/A Unused |
0-2 SPEED Speed Indication. Data rate at completion of a connection
3 OE Overrun Error. Overrun status of Receiver Data Buffer (RBUFFER)
4 FE Framing Error. Framing error or detection of an ABORT sequence
5 PE Parity Error. Parity error status or bad CRC
6 BRKD Break Detected. Receipt status of continuous space
7 RTDET Retrain Detected. Detection status of a retrain request sequence
8 FLAGS Flag Sequence. Transmission status of Flag sequence in HDLC mode,
or transmission of a constant mark in parallel asynchronous mode
9 SYNCD Unknown (listed in datasheet without further description)
10 TM Test Mode. Active status of selected test mode
11 RI Ring Indicator. Detection status of a valid ringing signal
12 DSR Data Set Ready. Data transfer state
13 CTS Clear to Send. Training sequence has been completed (see TPDM)
14 FED Fast Energy Detected. Energy above turn-on threshold is detected
15 RLSD Received Line Signal Detector (carrier and receipt of valid data)
|
0-7 TBUFFER Transmitter Data Buffer. Byte to be sent in parallel mode 8 TXP Transmit Parity Bit (or 9th Data Bit) 9-15 N/A Unused |
0-7 CONF Modem Configuration Select. Modem operating mode (see below)
8-9 TXCLK Transmit Clock Select (internal, disable, slave, or external)
10-11 VOL Volume Control. Speaker volume (off, low, medium, high)
12-15 TLVL Transmit Level Attenuation Select. Select transmitter analog
output level attenuation in 1 dB steps. The host can fine tune
transmit level to a value lying within a 1 dB step in DSP RAM
|
0-15 N/A Unused |
0-15 DATA RAM data word (R/W) |
0-8 ADDR RAM Address
9 WT RAM Write (controls read/write direction for RAM Data registers)
10 CRD RAM Continuous Read. Enables read of RAM every sample from
location addressed by ADDR Independent of ACC and WT bits
11 IOX X-RAM only: I/O Register Select. Specifies that X RAM ADDRESS
bit0-7 (Port 1Ch) is an internal I/O register address
11 N/A Y-RAM only: Unused
12-14 N/A Unused
15 ACC RAM Access Enable. Controls DSP access of RAM associated with
address ADDR bits. WT determines if a read or write is performed
|
0 RDBF Receiver Data Buffer Full (RBUFFER Full) 1 N/A Unused 2 RDBIE Receiver Data Buffer Full Interrupt Enable 3 TDBE Transmitter Data Buffer Empty (TBUFFER Empty) 4 N/A Unused 5 TDBIE Transmitter Data Buffer Empty Interrupt 6 RDBIA Receiver Data Buffer Full Interrupt Active (IRQ Flag) 7 TDBIA Transmitter Data Buffer Empty Interrupt Active (IRQ Flag) 8 NEWC New Configuration. Initiates new configuration (cleared by modem 9 N/A Unused upon completion of configuration change) 10 NCIE New Configuration Interrupt Enable 11 NEWS New Status. Detection of a change in selected status bits 12 NSIE New Status Interrupt Enable 13 N/A Unused 14 NCIA New Configuration Interrupt Active (IRQ Flag) 15 NSIA New Status Interrupt Active (IRQ Flag) |
CONF Bits/sec Mode Name 01h 2400 V.27 ter 02h 4800 V.27 ter 11h 4800 V.29 12h 7200 V.29 14h 9600 V.29 52h 1200 V.22 51h 600 V.22 60h 0-300 Bell 103 62h 1200 Bell 212A 70h - V.32 bis/V.23 clear down ;\ 71h 4800 V.32 ; 72h 12000 V.32 bis TCM ; RC96DT/RC144DT only 74h 9600 V.32 TCM ; (not RC96V24DP/RC2324DPL) 75h 9600 V.32 ; 76h 14400 V.32 bis TCM ; 78h 7200 V.32 bis TCM ;/ 80h - Transmit Single Tone 81h - Dialing ;used by SNES X-Band (dial mode) 82h 1200 V.22 bis 83h - Transmit Dual Tone 84h 2400 V.22 bis ;used by SNES X-Band (normal mode) 86h - DTMF Receiver A0h 0-300 V.21 A1h 75/1200 V.23 (TX/RX) A4h 1200/75 V.23 (TX/RX) A8h 300 V.21 channel 2 B1h 14400 V.17 TCM ;\ B2h 12000 V.17 TCM ; RC96DT/RC144DT only B4h 9600 V.17 TCM ; (not RC96V24DP/RC2324DPL) B8h 7200 V.17 TCM ;/ |
XRAM YRAM Parameter 032 - Turn-on Threshold 03C - Lower Part of Phase Error (this, in X RAM ?) - 03C Upper Part of Phase Error (this, in Y RAM ?) - 03D Rotation Angle for Carrier Recovery 03F - Max AGC Gain Word 049 049 Rotated Error, Real/Imaginary 059 059 Rotated Equalizer Output, Real/Imaginary 05E 05E Real/Imaginary Part of Error 06C - Tone 1 Angle Increment Per Sample (TXDPHI1) 06D - Tone 2 Angle Increment Per Sample (TXDPHI2) 06E - Tone 1 Amplitude (TXAMP1) 06F - Tone 2 Amplitude (TXAMP2) 070 - Transmit Level Output Attenuation 071 - Pulse Dial Interdigit Time 072 - Pulse Dial Relay Make Time 073 - Max Samples Per Ring Frequency Period (RDMAXP) 074 - Min Samples Per Ring Frequency Period (RDMINP) 07C - Tone Dial Interdigit Time 07D - Pulse Dial Relay Break Time 07E - DTMF Duration 110-11E 100-11E Adaptive Equalizer Coefficients, Real/Imag. 110 100 First coefficient, Real/Imag. (1) (Data/Fax) 110 110 Last Coefficient, Real/Imag. (17) (Data) 11E 11E Last Coefficient, Real/Imag. (31) (Fax) - 121 RLSD Turn-off Time 12D - Phase Error 12E - Average Power 12F - Tone Power (TONEA) 130 - Tone Power (TONEB,ATBELL,BEL103) 131 - Tone Power (TONEC,ATV25) 136 - Tone Detect Threshold for TONEA (THDA) 137 - Tone Detect Threshold for TONEB,ATBELL,BEL103 (THDB) 138 - Tone Detect Threshold for TONEC,ATV25 (THDC) 13E - Lower Part of AGC Gain Word 13F - Upper Part of AGC Gain Word 152 - Eye Quality Monitor (EQM) - 162-166 Biquad 5 Coefficients a0,a1,a2,b1,b2 - 167-16B Biquad 6 Coefficients a0,a1,a2,b1,b2 - 16C-170 Biquad 1 Coefficients a0,a1,a2,b1,b2 - 171-175 Biquad 2 Coefficients a0,a1,a2,b1,b2 - 176-17A Biquad 3 Coefficients a0,a1,a2,b1,b2 179 - Turn-off Threshold - 17B-17F Biquad 4 Coefficients a0,a1,a2,b1,b2 |
| SNES Cart X-Band Rockwell Notes |
"18002071194" at D819A0h in US-BIOS (leading "800" = Toll-free?) "03-55703001" at CE0AB2h in Japanese BIOS (leading "3" = Tokyo?) |
1-100 unknown |
Pin Number Signal Name I/O Type 1 RS2 IA 2 RS1 IA 3 RS0 IA 4 /TEST1 5 /SLEEP OA 6 RING 7 EYEY OB 8 EYEX OB 9 EYESYNC OB 10 RESET ID 11 XTLI IE 12 XTLO OB 13 +5VD 14 GP18 OA 15 GP16 OA 16 XTCLK IA 17 DGND1 18 TXD IA 19 TDCLK OA 20 TRSTO MI 21 TSTBO MI 22 TDACO MI 23 RADCI MI 24 RAGCO MI 25 MODEO MI 26 RSTBO MI 27 RRSTO MI 28 /RDCLK OA 29 RXD OA 30 TXA2 O(DD) 31 TXA1 O(DD) 32 RXA I(DA) 33 RFILO MI 34 AGCIN MI 35 VC 36 NC 37 NC 38 NC 39 /RBDVR OD 40 AGND 41 /RADRV OD 42 /SLEEP1 IA 43 RAGCI MI 44 NC 45 RSTBI MI 46 RRSTI MI 47 RADCO MI 48 TDACI MI 49 TRSTI MI 50 TSTBI MI 51 MODE1 MI 52 +5VA 53 SPKR O(OF) 54 DGND2 55 D7 IA/OB 56 D6 IA/OB 57 D5 IA/OB 58 D4 IA/OB 59 D3 IA/OB 60 D2 IA/OB 61 D1 IA/OB 62 D0 IA/OB 63 /IRQ OC 64 /WRITE IA 65 /CS IA 66 /READ IA 67 RS4 IA 68 RS3 IA |
| SNES Cart X-Band BIOS Functions |
Sega SNES SNES Function Gen. US JP |
000h RestoreSegaOS 001h AskForReplay 002h ThankYouScreen ;thankyou shown at next coldboot? 003h InstallDispatchedManager 004h CallManagerControl 005h SoftInitOS 006h GetDispatchedFunction 007h 007h 007h SetDispatchedFunction ;change/install BIOS function vector 008h SetDispatchedGroup 009h GetManagerGlobals 00Ah SetManagerGlobals 00Bh AllocateGlobalSpace 00Ch FreeGlobalSpace 00Dh DisposePatch 00Eh CompactOSCodeHeap 00Fh GetPatchVersion 010h SetPatchVersion |
011h InitHeap 012h NewMemory 013h NewMemoryHigh 014h NewMemoryClear 015h DisposeMemory 016h 01Ah 01Ah GetMemorySize ;get size of an item 017h MaxFreeMemory 018h TotalFreeMemory 019h SwitchPermHeap 01Ah SwtichTempHeap ;uh, Swtich? 01Bh CreateTempHeap 01Ch CreateHeapFromPtr 01Dh CreateTempSubHeap 01Eh AllocPermHeapZone 01Fh DisposePermHeapZone 020h CompactHeap 021h MoveHeap 022h PrepareHeapForMove 023h ComputeHeapPtrDelta 024h ResizeHeap 025h BlockMove 026h WhichMemory 027h GetHeapSize 028h VerifySegaHeap 029h PurgePermHeaps 02Ah ByteCopy 02Bh UnpackBytes 02Ch FillMemory 02Dh GetCurrentHeap 02Eh FindLastAllocatedBlock 02Fh SetOSUnstable 030h SetDBUnstable 031h SetAddressUnstable 032h InstallReliableAddress 033h CheckOSReliable |
034h ? InitControllers 035h 033h ReadHardwareController ;get joypad data 036h 034h ControllerVBL ;do joypad and keyboard scanning 037h ? ReadAllControllers 038h 036h FlushHardwareKeyboardBuffer ;flush char_queue 039h 037h GetNextHardwareKeyboardChar ;read char_queue 03Ah 038h GetHardwareKeyboardFlags 03Bh 039h SetHardwareKeyboardFlags 03Ch 03Ah GetNextESKeyboardRawcode ;read scancode_queue ;ES=Eric Smith 03Dh ? GetNextESKeyboardStatus 03Eh 03Ch GetNextESKeyboardChar ;read scancode_queue, xlat to char 03Fh ? SendCmdToESKeyboard - 03Eh 03Fh keyb_io_read_scancodes - 03Fh keyb_blah_do_nothing - 040h keyb_io_read_verify_id_code - 041h 043h keyb_forward_scancode_queue_to_char_queue |
040h GetGlobal 041h SetGlobal |
042h 042h 044h AddGamePatch 043h LoadGamePatch 044h DisposeGamePatch 045h GetGamePatchVersion 046h GetGamePatchFlags 047h 04Ah 04Eh FindGamePatch 048h 054h 058h CreateGameDispatcher 049h InitGamePatch 04Ah StartGame 04Bh GameOver 04Ch ResumeGame 04Dh GameDoDialog 04Eh UpdateGameResultsAfterError 04Fh HandleGameError 050h PlayCurrentGame 051h 053h 057h InstallGameFunction 052h 055h 059h DisposeOldestGamePatch 053h MarkGamePatchUsed |
054h InitMessages 055h ProcessServerData 056h ProcessPeerData 057h SendMessage 058h GetSendMessageHandler 059h GetPeerMessageHandler 05Ah GetSerialOpCode 05Bh GetServerMessageHandler 05Ch InstallPeerHandler 05Dh InstallReceiveServerHandler 05Eh InstallSendMessageHandler 05Fh ReceivePeerMessageDispatch 060h ReceiveServerMessageDispatch 061h GobbleMessage 062h SetClearLoginMisc 063h GetLoginMisc |
064h CreateSprite 065h CreateSpriteInFront 066h CreateSpriteHigh 067h DisposeSprite 068h MoveSprite 069h DrawSprite 06Ah IncrementSpriteFrame 06Bh SetSpriteFrame 06Ch GetSpriteFrame 06Dh FlipSprite 06Eh CreateSpriteData 06Fh CreateTextSprite 070h CreateTextSpriteFromBitmap 071h ExplodeSprite 072h SetSpriteGrayFlag 073h SetSpriteTilePosition 074h SetSpriteImage 075h SetSpritePalette 076h WriteSpriteToVDP 077h FigureTileSize 078h AllocateSprite 079h FreeSprite 07Ah GetSpriteLastTile 07Bh GetSpriteFirstTile 07Ch NewSpark 07Dh DisposeSpark 07Eh GetSparkSprite 07Fh StartSpark 080h StopSpark 081h DrawXBandLogo 082h DisposeXBandLogoRef 083h DisposeXBandLogoSparks 084h SyncOTron |
085h InitDecompression 086h CreateDecompressor 087h DisposeDecompressor 088h SetDstPattern 089h SetImageTiling 08Ah SetImageOrigin 08Bh GetImageClut 08Ch DisposeImagePatterns 08Dh DecompressFrame 08Eh SetDecompressorOptionsSelector 08Fh SetDecompressorPixelMappingSelector 090h SetDecompressorPaletteSelector 091h GetDictionaryCache 092h ReleaseDictionaryCache 093h SetDecompressorImage 094h ExpandPatternDictionary 095h GetDecompressorCache 096h ReleaseDecompressorCache 097h JoshDecompress |
098h AddTimeRequest 099h RemoveTimeRequest 09Ah TimeIdle 09Bh IncCurrentTime 09Ch DelayMS 09Dh DelayTicks 09Eh SetOSIdle 09Fh SegaOSIdle 0A0h GetJesusTime 0A1h SetJesusTime 0A2h GetJesusDate 0A3h SetJesusDate |
0A4h InitAnimateProcs 0A5h SpawnAnimation 0A6h SpawnDBAnimation 0A7h CreateAnimation 0A8h DisposeAnimation 0A9h DrawAnimationFrame 0AAh StartAnimation 0ABh StopAnimation 0ACh SuspendAnimations 0ADh SetAnimationPriority 0AEh SetAnimationGrayFlag 0AFh GetAnimationSuspendLevel |
0B0h InitPathManager 0B1h CreatePath 0B2h DisposePath 0B3h SetPathPoints 0B4h SetPathFrames 0B5h SetPathVelocity 0B6h GetPathPoint 0B7h DistBetweenPoints |
0B8h InitPatternManager 0B9h NewPatternBlock 0BAh NewPatternBlockHigh 0BBh FreePatternBlock 0BCh DeallocateTopPatternBlock 0BDh NewFirstPatternBlock 0BEh SetRange 0BFh ClearRange 0C0h RangeIsFree 0C1h FindFreeRange 0C2h GetLeftOnesTable 0C3h GetRightOnesTable |
0C4h CreateSegaCursor 0C5h DisposeSegaCursor 0C6h MoveSegaCursor 0C7h HideSegaCursor 0C8h ShowSegaCursor 0C9h GetSegaCursorPos 0CAh SetSegaCursorImage 0CBh LoadCursorFromVRAM 0CCh DrawSegaCursor 0CDh LoadCursorPattern |
0CEh InitSegaFonts 0CFh SetCurFont 0D0h GetCurFont 0D1h GetCurFontHeight 0D2h GetCurFontLineHeight 0D3h SetFontColors 0D4h GetFontColors 0D5h SetupTextGDevice 0D6h GetTextPatternAddress 0D7h GetTextGDeviceOrigin 0D8h DrawSegaString 0D9h RenderSegaString 0DAh MeasureSegaText 0DBh CenterSegaText 0DCh DrawClippedSegaText 0DDh DrawCenteredClippedSegaText 0DEh DrawPaddedClippedSegaText 0DFh GetCharWidth 0E0h SegaNumToString 0E1h SegaNumToDate 0E2h SegaAppendText 0E3h CompareDates 0E4h CompareStrings 0E5h SetupTextSpriteGDevice 0E6h EraseTextGDevice 0E7h GetStringLength |
0E8h DrawDBXYString ;Database\StringDB.c 0E9h GetDBXYString ;Database\StringDB.c 0EAh GetSegaString ;Database\StringDB.c 0EBh GetWriteableString ;Database\StringDB.c 0ECh SetWriteableString ;Database\StringDB.c 0EDh DeleteWriteableString ;Database\StringDB.c 0EEh GetUniqueWriteableStringID ;Database\StringDB.c - AddDBXYString ;Database\StringDB.c (simulator) |
0EFh CopyCString 0F0h SetTextPatternStart 0F1h EqualCStrings 0F2h GetTextStateReference 0F3h SaveTextState 0F4h RestoreTextState 0F5h DisposeTextStateReference 0F6h VDPCopyBlitDirect 0F7h VDPCopyBlitDirectBGColor 0F8h VDPCopyBlitTiled 0F9h VDPCopyBlitTiledBGColor 0FAh OrBlit2to4 0FBh OrBlit1to4 |
0FCh PInit 0FDh POpen 0FEh PListen 0FFh POpenAsync 100h PListenAsync 101h PClose 102h PNetIdle 103h PCheckError 104h PWritePacketSync 105h PWritePacketASync 106h PGetError 107h PUOpenPort 108h PUClosePort 109h PUProcessIdle 10Ah PUProcessSTIdle 10Bh PUReadSerialByte 10Ch PUWriteSerialByte 10Dh PUTransmitBufferFree 10Eh PUReceiveBufferAvail 10Fh PUTestForConnection 110h PUReadTimeCallback 111h PUWriteTimeCallback 112h PUSetupServerTalk 113h PUTearDownServerTalk 114h PUSetError 115h PUIsNumberBusy 116h PUOriginateAsync 117h PUAnstondet 118h PUWaitForRLSD 119h PUInitCallProgress 11Ah PUCallProgress 11Bh PUDialNumber 11Ch PUWaitDialTone 11Dh PUAnswerAsync 11Eh PUCheckAnswer 11Fh PUCheckRing 120h PUResetModem 121h PUSetTimerTicks 122h PUSetTimerSecs 123h PUTimerExpired 124h PUHangUp 125h PUPickUp 126h PUWriteXRAM 127h PUWriteYRAM 128h 13Dh PUReadXRAM 129h 13Eh PUReadYRAM 12Ah PUIdleMode 12Bh PUDataMode 12Ch PUDialMode 12Dh PUToneMode 12Eh PUCheckLine 12Fh PUCheckCarrier 130h PUDetectLineNoise 131h PUListenToLine 132h PUDisableCallWaiting 133h PUAsyncReadDispatch 134h PUDoSelectorLogin 135h PUMatchString 136h PGetDebugChatScript |
137h TInit 138h TOpen 139h TListen 13Ah TOpenAsync 13Bh TListenAsync 13Ch TClose 13Dh TCloseAsync 13Eh TUnthread 13Fh TNetIdle 140h TUCheckTimers 141h TReadDataSync 142h TReadDataASync 143h TWriteDataSync 144h TWriteDataASync 145h TAsyncWriteFifoData 146h TReadData 147h TWriteData 148h TReadAByte 149h TWriteAByte 14Ah TQueueAByte 14Bh TReadBytesReady 14Ch TDataReady 14Dh TDataReadySess 14Eh TIndication 14Fh TForwardReset 150h TNetError 151h TCheckError 152h TUInitSessRec 153h TUSendCtl 154h TUDoSendCtl 155h TUDoSendOpenCtl 156h TUUpdateSessionInfo 157h TUSendOpen 158h TUSendOpenAck 159h TUSendCloseAdv 15Ah TUSendFwdReset 15Bh TUSendFwdResetAck 15Ch TUSendFwdResetPacket 15Dh TUSendRetransAdv 15Eh TUOpenDialogPacket 15Fh TUFwdResetPacket 160h TUCloseConnPacket 161h TURetransAdvPacket 162h TUAllowConnection 163h TUDenyConnection 164h TUSetError 165h TUGetError 166h TGetUserRef 167h TSetUserRef 168h TGetTransportHold 169h TGetTransportHoldSession 16Ah TSetTransportHold 16Bh TSetTransportHoldSession |
16Ch InitPermDatabase 16Dh CompactPermDatabase 16Eh 185h DBGetItem 16Fh DBAddItem 170h 188h 19Bh DBDeleteItem 171h 189h 19Ch DBGetUniqueID 172h DBGetUniqueIDInRange 173h DBGetItemSize 174h DBCountItems 175h 18Dh DBGetFirstItemID 176h 18Eh DBGetNextItemID 177h DBNewItemType 178h DBGetTypeFlags 179h DBSetTypeFlags 17Ah DBDeleteItemType 17Bh DBPurge 17Ch DBTypeChanged 17Dh ComputeTypeCheckSum 17Eh DBVerifyDatabase 17Fh DBROMSwitch 180h DBAddItemPtrSize 181h 199h 1ACh DBAddItemHighPtrSize 182h 19Ah 1ADh DBPreflight ;check if enough free mem for new item 183h GetItemSize 184h DBGetTypeNode 185h DBGetPrevTypeNode 186h DBTNGetItem 187h DBTNGetPrevItem 188h DBTNDisposeList 189h DeleteItem 18Ah AddItemToDB 18Bh AllowDBItemPurge |
18Ch LinearizeScreenArea 18Dh GetSegaScreenBaseAddr 18Eh InitSegaGDevices 18Fh SetCurrentDevice 190h GetCurrentDevice 191h RequestClut 192h ReleaseClut 193h IncrementClutReferences 194h SetupClutDB 195h GetSegaScreenOrigin 196h GetSegaGDevice 197h EraseGDevice 198h SetupVDP 199h BlankClut 19Ah FadeInClut 19Bh FadeInScreen 19Ch GenerateGrayMap 19Dh WaitVBlank 19Eh SetBackgroundColor 19Fh GetBackgroundColor 1A0h RequestUniqueClut 1A1h RequestSpecificClut 1A2h SetupClut 1A3h GetClut 1A4h GetColorLuminance 1A5h FillNameTable |
1A6h DMAToVRAM 1A7h CopyToVRAM 1A8h CopyToCRAM 1A9h CopyToVSRAM 1AAh CopyToVMap 1ABh FillVRAM 1ACh FillCRAM 1ADh FillVSRAM |
1AEh GetOpponentPhoneNumber 1AFh SetOpponentPhoneNumber 1B0h GetCurOpponentIdentification 1B1h SetCurOpponentIdentification 1B2h GetCurOpponentTaunt 1B3h GetCurOpponentInfo 1B4h ClearOldOpponent 1B5h GetOpponentVerificationTag 1B6h SetOpponentVerificationTag |
1B7h GetCurrentLocalUser 1B8h FillInUserIdentification 1B9h GetLocalUserTaunt 1BAh SetLocalUserTaunt 1BBh GetLocalUserInfo 1BCh SetLocalUserInfo 1BDh IsUserValidated 1BEh SetCurUserID 1BFh GetCurUserID 1C0h VerifyPlayerPassword 1C1h IsEmptyPassword 1C2h ComparePassword 1C3h GetPlayerPassword |
1C4h NewDITL 1C5h GiveDITLTime 1C6h DisposeDITL 1C7h GetDITLItem 1C8h InitDITLMgr 1C9h ClearDITLDone 1CAh ProcessDITLScreen 1CBh SetupDITLItemList 1CCh SetupDITLObjectData 1CDh DisposeDITLItemList 1CEh SetupControlTable 1CFh DisposeControlTable 1D0h GetDITLObjectData |
1D1h InitUserEvents 1D2h FlushUserEvents 1D3h WaitForUserButtonPress 1D4h CheckUserButtonPress 1D5h GetNextControllerEvent 1D6h GetNextCommand 1D7h QueueGet 1D8h QueueInsert |
1D9h SetBGMDisable 1DAh GetBGMDisable 1DBh InitSoundMgr 1DCh ShutDownSoundMgr 1DDh StartDBBGM 1DEh StopBGM 1DFh PlayDBFX 1E0h FX1NoteOff 1E1h FX2NoteOff 1E2h ShutUpFXVoice1 1E3h ShutUpFXVoice2 |
1E4h GetDataSync 1E5h GetDataBytesReady 1E6h GetDataError |
1E7h GetChallengePhoneNumber 1E8h SetChallengePhoneNumber 1E9h GetChallengeIdentification 1EAh SetChallengeIdentification |
1EBh 210h 224h GetGameID ;out:A=SnesCartStandardChksum, X=SnesHeaderCCITT - 211h 225h ... related to GameID ? |
1ECh IsRemoteModemTryingToConnect 1EDh SetRemoteModemTryingToConnectState 1EEh InitScreen 1EFh PreflightScreen 1F0h SetupScreen 1F1h SendCommandToScreen 1F2h KillScreen 1F3h GetNewScreenIdentifier 1F4h GetCurScreenIdentifier 1F5h GetScreenStateTable 1F6h ResetCurrentScreen 1F7h GetScreenLayoutRectangleCount 1F8h GetScreenLayoutRect 1F9h GetScreenLayoutCharRect 1FAh GetScreenLayoutPointCount 1FBh GetScreenLayoutPoint 1FCh GetScreenLayoutStringCount 1FDh GetScreenLayoutString 1FEh DrawScreenLayoutString 1FFh BoxScreenLayoutString 200h GetScreensEnteredCount |
201h SetBackdropID 202h SetBackdropBitmap 203h ClearBackdrop 204h HideBackdrop 205h SetAuxBackgroundGraphic 206h ShowBackdrop 207h GetBlinkySprite |
208h GetBoxSerialNumber 209h SetBoxSerialNumber 20Ah GetHiddenBoxSerialNumbers 20Bh GetBoxHometown 20Ch SetBoxHometown 20Dh SetBoxState 20Eh ResetBoxState 20Fh GetBoxState 210h SetLastBoxState 211h ResetLastBoxState 212h GetLastBoxState 213h GetGameWinsLosses 214h SetCompetitionResults 215h GetCompetitionResults 216h SetGameErrorResults 217h GetGameErrorResults 218h UpdateGameResults 219h ClearGameResults 21Ah ClearNetErrors 21Bh GetLocalGameValue 21Ch SetLocalGameValue 21Dh GetOppGameValue 21Eh SetOppGameValue 21Fh IsBoxMaster 220h SetBoxMaster 221h 24Bh 25Fh SetCurGameID ;SNES/US: [3631,3633] 222h 24Ch GetCurGameID 223h CheckBoxIDGlobals 224h InitBoxIDGlobals 225h ChangedBoxIDGlobals 226h DBAddConstant 227h DBGetConstant 228h DBSetConstants 229h SetDialNetworkAgainFlag 22Ah CheckDialNetworkAgainFlag 22Bh SetBoxXBandCard 22Ch GetBoxXBandCard 22Dh GetBoxLastCard 22Eh SetBoxMagicToken 22Fh SetBoxProblemToken 230h GetBoxProblemToken 231h UseBoxProblemToken 232h SetBoxValidationToken 233h GetBoxValidationToken 234h SetIMovedOption 235h SetQwertyKeyboardOption 236h SetCallWaitingOption 237h SetAcceptChallengesOption 238h GetAcceptChallengesOption 239h GetIMovedOption 23Ah GetQwertyKeyboardOption 23Bh GetCallWaitingOption 23Ch GetNetErrors |
23Dh GetBoxPhoneNumber 23Eh SetBoxPhoneNumber 23Fh GetLocalAccessPhoneNumber 240h SetLocalAccessPhoneNumber 241h Get800PhoneNumber |
242h GetLocalUserName 243h SetLocalUserName 244h GetLocalUserROMIconID 245h SetLocalUserROMIconID 246h GetLocalUserCustomROMClutID 247h SetLocalUserCustomROMClutID 248h GetLocalUserPassword 249h SetLocalUserPassword 24Ah ValidateUserPersonification 24Bh InvalidateUserPersonification |
24Ch GetAddressBookTypeForCurrentUser 24Dh GetAddressBookIDFromIndex 24Eh CountAddressBookEntries 24Fh RemoveAddressBookEntry 250h GetIndexAddressBookEntry 251h AddAddressBookEntry 252h GetUserAddressBookIndex 253h DeleteAddressBookEntry 254h SendNewAddressesToServer 255h MarkAddressBookUnchanged 256h AddressBookHasChanged 257h CorrelateAddressBookEntry - PreflightNewAddressEntry |
258h AddPlayerToAddressBook 259h UpdateAddressBookStuff 25Ah AddOnDeckAddressBookEntry 25Bh MinimizeUserHandle |
25Ch GetDBGraphics 25Dh DrawDBGraphic 25Eh DrawDBGraphicAt 25Fh DrawGraphic 260h DisposeGraphicReference 261h GetGraphicReferenceClut 262h DrawPlayerIcon 263h NukePlayerRAMIcon 264h GetPlayerRAMIconBitMap 265h GetPlayerIconBitMap 266h GetIconBitMap 267h PlayerRAMIconExists 268h DisposeIconReference 269h GetDBButtonFrame 26Ah DrawGraphicGray 26Bh HueShift |
26Ch FindLineBreak 26Dh SegaBoxText 26Eh DrawSegaStringLength 26Fh MeasureSegaTextLength 270h InitTextEdit 271h SetTextEditLineHeight 272h TextEditAppend 273h TextEditDelete 274h DisposeTextEdit 275h TextEditActivate 276h TextEditDeactivate 277h TextEditPreflightAppend 278h TextEditGetLineLength 279h DrawTextBox 27Ah SetJizzleBehavior 27Bh GetJizzleBehavior 27Ch StartTextBoxAnimation 27Dh StopTextBoxAnimation 27Eh DisposeTextBoxReference 27Fh DrawSegaTextPlusSpaces 280h UpdateTECaret 281h EraseTextEditLine 282h GetCompressedJizzlers |
283h FindNextNewsString 284h AddPageToNewsBox 285h GetPageFromNewsBox 286h GetNewsForm 287h GetNumNewsPages 288h EmptyNewsBox 289h DrawNewsPage 28Ah ValidateNews 28Bh InvalidateNews 28Ch SetupNewsForServerConnect 28Dh ServerConnectNewsDone 28Eh DoNewsControlIdle 28Fh KillCurNewsPage 290h GetNewsGraphicsID 291h ShowLeftRightPageControls 292h DrawNewsReturnIcon 293h SetNewsCountdownTimeConst 294h DrawXBandNews 295h DisposeXBandNews |
296h GetNGPListGamePatchInfo 297h GetNGPListGamePatchVersion 298h GetNGPVersion 299h UpdateNGPList 29Ah UpdateNameList 29Bh GetGameName |
29Ch ChangeUserPersonificationPart 29Dh InstallOpponentPersonification 29Eh GetPersonificationPart 29Fh PutPersonificationOnWire 2A0h GetPersonificationFromWire 2A1h DisposePersonificationSetup 2A2h ReceivePersonficationBundle 2A3h ParsePersonificationBundle 2A4h CreatePersonificationBundle |
2A5h CountInBoxEntries 2A6h CountOutBoxEntries 2A7h AddMailToOutBox 2A8h AddMailToInBox 2A9h RemoveMailFromInBox 2AAh GetIndexInBoxMail 2ABh GetIndexOutBoxMail 2ACh GetInBoxGraphicID 2ADh MarkMailItemRead 2AEh DeleteAllOutBoxMail 2AFh GetInBoxTypeForCurrentUser 2B0h GetOutBoxTypeForCurrentUser 2B1h GetOutBoxIDFromIndex 2B2h GetInBoxIDFromIndex 2B3h GetBoxIDFromIndex |
2B4h AddItemToSendQ 2B5h AddItemSizeToSendQ 2B6h DeleteSendQ 2B7h KillSendQItem 2B8h GetFirstSendQElementID 2B9h GetNextSendQElementID 2BAh CountSendQElements 2BBh GetSendQElement 2BCh RemoveItemFromSendQ |
2BDh SetDialogColors 2BEh DoDialog 2BFh DialogParameterText 2C0h DoDialogItem 2C1h DoDialogParam 2C2h DoPlayAgainDialog 2C3h CopyString 2C4h DoAnyResponse 2C5h DoDataDrivenDismissal 2C6h DoPassword 2C7h DrawDialogFrame 2C8h FillTextRectangle 2C9h HorizontalLine 2CAh KillProgressTimer 2CBh ReplaceParameters 2CCh SetupProgressTimer 2CDh VerticalLine 2CEh CreateShiners 2CFh DisposeShiners |
2D0h SetVector 2D1h SetVectorTblAddr 2D2h SetSafeRamSrc 2D3h SetSafeRomSrc 2D4h 323h 33Dh SetLEDs 2D5h SetLEDScreenAnimation |
2D6h InitJoggler 2D7h DisplayJoggler 2D8h StopJoggler |
2D9h QDefDialog 2DAh ShowDefDialogs 2DBh CountDefDialogs 2DCh DisableDefDialogs 2DDh EnableDefDialogs |
2DEh CheckNetRegister 2DFh NetRegister 2E0h NetRegisterDone 2E1h SetNetTimeoutValue 2E2h GetNetTimeoutValue 2E3h GetNetWaitSoFar 2E4h NetRegisterTimeOutTimeProc 2E5h IsBoxNetRegistered 2E6h GetNetRegisterCase |
- BeginSession - DeleteSession - EndSession - BeginStreamCapture - AddDataToStream |
- BeginSessionPlayback - SessionExists - PlaybackNextStream - PlaybackCurrentStream - PlaybackPreviousStream - DoesNextSessionStreamExist - DoesPreviousSessionStreamExist |
- SynchModems - SynchVbls |
2E7h GTSInit 2E8h GTSShutdown 2E9h GTSFlushInput 2EAh GTSessionPrefillFifo 2EBh GTSessionEstablishSynch 2ECh GTSessionExchangeCommands 2EDh GTSessionValidateControl 2EEh GTSErrorRecover 2EFh GTSCloseSessionSynch 2F0h GTSDoCommand 2F1h GTSDoResend 2F2h GTSResendFromFrame 2F3h GTSSetPacketFormat 2F4h GTSSetRamRomOffset 2F5h GTSessionSetLatency 2F6h GTSessionSendController8 2F7h GTSessionReadController8 2F8h GTSessionSendController12 2F9h GTSessionReadController12 2FAh GTSessionSendController16 2FBh GTSessionReadController16 2FCh GTSessionSendController18 2FDh GTSessionReadController18 2FEh GTSessionSendController24 2FFh GTSessionReadController24 300h GTSessionSendController27 301h GTSessionReadController27 |
302h GTModemInit 303h GTModemGetModemError 304h GTModemClearFifo 305h GTModemClockInByte 306h GTModemClockOutByte 307h GTModemAbleToSend 308h GTModemSendBytes 309h GTModemCheckLine 30Ah GTModemReadModem 30Bh GTSendReceiveBytes 30Ch GTCloseSessionSafe 30Dh GTCreateLooseSession 30Eh GTLooseSessionIdle 30Fh GTCloseLooseSession 310h GTSyncotron 311h GTMasterCalculateLatency 312h GTSlaveCalculateLatency 313h GTSyncoReadModemVBL 314h GTSyncronizeVBLs 315h GTSyncronizeMasterLeave 316h GTSyncronizeSlaveLeave 317h GTSyncoTronVBLHandler 318h GTUnused1 319h GTUnused2 31Ah GTUnused3 31Bh GTUnused4 31Ch GTUnused5 31Dh GTUnused6 |
31Eh SetupKeyboardEntryLayout 31Fh DisposeKeyboardEntryLayout 320h DoKeyboardEntry 321h InitKeyboardEntry 322h SendCommandToKeyboard 323h FinishKeyboardEntry 324h RefreshKeyboard 325h StuffCurrentKeyboardField 326h SelectKeyboardField 327h SendCommandToChatKeyboard 328h GetKeyLayoutFieldCount 329h GetKeyLayoutFieldSize 32Ah SetKeyboardEntryMeasureProc 32Bh SetFocusField 32Ch DrawKeyboard 32Dh ComputeCursorLineNumber 32Eh CacheKeyboardGraphics 32Fh ReleaseKeyboardGraphicsCache |
330h GetCardType 331h CardInstalled 332h 381h ReadCardBytes ;read smart card byte(s) 333h WriteCardBit 334h GotoCardAddress 335h IncrementCardAddress 336h 385h ReadCardBit ;read smart card bit 337h ResetCard 338h PresentSecretCode 339h GetRemainingCredits 33Ah FindFirstOne 33Bh CountCardBits 33Ch DebitCardForConnect 33Dh DebitSmartCard 33Eh CheckValidDebitCard 33Fh IsGPM896 340h IsGPM103 341h IsGPM256 342h Debit896Card 343h Debit103Card 344h Get896Credits 345h Get103Credits 346h CheckWipeCard 347h UserWantsToDebitCard |
348h QSort |
349h TrySecretCommand 34Ah TestThisSequence 34Bh ExecCommands 34Ch GetSecretList 34Dh GetSecretSequence 34Eh ResetSecretCommand 34Fh TestSequence 350h PlayMaze 351h EndPlayMaze |
352h LongDivide 353h LongMultiply 354h Sqrt 355h RandomShort 356h Sine 357h Cosine |
358h GetFirstRanking 359h GetNextRanking 35Ah GetPrevRanking 35Bh GetHiddenStat 35Ch NextRankingExists 35Dh PrevRankingExists 35Eh CountRankings 35Fh GetFirstRankingID 360h GetNextRankingID 361h GetUniqueRankingID 362h GetRankingSize 363h DeleteRanking 364h AddRanking 365h GetRanking |
366h InitProgressProcs 367h SpawnProgressProc 368h DisposeProgressProc 369h SetProgressPosition 36Ah ProgressIdle |
36Bh SetupRadioButton 36Ch DrawRadioButton 36Dh ActivateRadioButton 36Eh DeactivateRadioButton 36Fh RadioButtonSelectNext 370h RadioButtonSelectPrevious 371h RadioButtonGetSelection 372h RadioButtonSetSelection 373h RadioButtonIdle 374h DisposeRadioButtonRef 375h DrawRadioSelection |
376h NetIdleFunc 377h CheckError 378h 3D9h 3F8h ccitt_updcrc |
379h DoPeerConnection 37Ah ConnectToPeer 37Bh DisplayPeerInfo 37Ch DoSlavePeerConnect 37Dh DoMasterPeerConnect 37Eh PeerConnectionDropped 37Fh DoPeerRestoreOS 380h DoExchangePeerData 381h DoPeerDialog 382h Chat 383h PeerStartVBL 384h PeerStopVBL 385h PeerVBLHandler |
386h FifoInit 387h FifoActive 388h FifoWrite 389h FifoRead 38Ah FifoPeek 38Bh FifoPeekEnd 38Ch FifoAvailable 38Dh FifoRemaining 38Eh FifoSkip 38Fh FifoCopy 390h FifoChkSum 391h GetFifoIn 392h FifoLastCharIn 393h FifoUnwrite 394h FifoSize 395h FifoFlush 396h FifoUnread 397h FifoResetConsumption 398h FifoAdjustConsumption |
- AddToResultFIFO - ReplaceTopEntryOfResultFIFO - GetTopEntryOfResultFIFO - GetIndexEntryInResultFIFO - CountEntriesInResultFIFO |
- FourWayMail stuff |
399h AddVBLRequest 39Ah RemoveVBLRequest 39Bh VBLIdle 39Ch PatchRangeStart <--- ?? 39Dh PatchRangeEnd = kPatchRangeStart + 50 <--- ??? - 54xh SNES table end |
Sega SNES SNES Function Gen. US JP |
00h 00h? kOSHandleGameError 01h 01h? kOSGameOver |
02h kOSNewMemory 03h kOSDisposeMemory 04h kOSDelayTicks |
05h kOSSetSafeRomSrc 06h kOSSetSafeRamSrc 07h kOSSetVectorTableAddr 08h kOSSetVector 09h 12h kOSSetLEDs |
0Ah kOSReadSerialByte 0Bh kOSWriteSerialByte 0Ch kOSReceiveBufferAvail 0Dh kOSTransmitBufferFree 0Eh kOSCheckLine 0Fh kOSDetectLineNoise 10h kOSCheckCarrier 11h kOSListenToLine 12h kOSSetTimerTicks 13h kOSTimerExpired 14h kOSToneMode 15h 20h kOSReadXRAM 16h 21h kOSReadYRAM 17h kOSWriteXRAM 18h kOSWriteYRAM |
19h kOSGTSSetPacketFormat 1Ah kOSGTSSetRamRomOffset 1Bh kOSGTSessionSetLatency 1Ch kOSGTSessionPrefillFifo 1Dh kOSGTSessionEstablishSynch 1Eh kOSGTSErrorRecover 1Fh kOSGTSCloseSessionSynch 10h kOSGTSFlushInput 11h kOSGTSessionValidateControl 12h kOSGTSessionExchangeCommands 13h kOSGTSDoCommand 14h kOSGTSDoResend 15h kOSGTSResendFromFrame 16h kOSGTModemInit 17h kOSGTModemGetModemError 18h kOSGTModemClearFifo 19h kOSGTModemClockInByte 1Ah kOSGTModemClockOutByte 1Bh kOSGTModemAbleToSend 1Ch kOSGTModemSendBytes 1Dh kOSGTModemCheckLine |
1Eh kOSInitControllers 1Fh kOSReadControllers |
20h kOSGTSyncotron 21h kOSGTMasterCalculateLatency 22h kOSGTSlaveCalculateLatency 23h kOSGTSyncoReadModemVBL 24h kOSGTSyncronizeVBLs 25h kOSGTSyncronizeMasterLeave 26h kOSGTSyncronizeSlaveLeave 27h kOSGTSyncoTronVBLHandler |
28h 4Eh kOSLastFunction |
| SNES Cart FLASH Backup |
ID=2001h - AM29F010 AMD (128Kbyte) ;supported by BOTH bios versions ID=D51Fh - AT29C010A Atmel (128Kbyte) ;supported only by newer bios version ID=32B0h - LH28F020SUT Sharp (256Kbyte?);supported only by newer bios version |
80h-9Fh:8000h-FFFFh ;1Mbyte LoROM (broken into 32 chunks of 32Kbytes) C0h-C3h:0000h-7FFFh ;128Kbyte FLASH (broken into 4 chunks of 32Kbytes) |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=90h ;enter ID mode manufacturer=01h=[C00000h], device_type=20h=[C00001h] ;read ID (AM29F010) [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=F0h ;terminate command |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=80h ;prepare erase [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=10h ;erase entire chip repeat, stat=[C00000h], until stat.bit7=1=okay, or stat.bit5=1=timeout |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=80h ;prepare erase [C05555h]=AAh, [C02AAAh]=55h, [Cxx000h]=30h ;erase 16kbyte sector repeat, stat=[Cxx000h], until stat.bit7=1=okay, or stat.bit5=1=timeout |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=A0h ;write 1 byte command [Cxxxxxh]=dta ;write the data byte repeat, stat=[Cxxxxxh], until stat.bit7=dta.bit7=okay, or stat.bit5=1=timeout |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=90h ;enter ID mode manufacturer=1Fh=[C00000h], device_type=D5h=[C00001h] ;read ID (AT29C010A) [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=F0h ;terminate command |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=80h ;prepare erase [C05555h]=AAh, [C02AAAh]=55h, [C05555h]=10h ;erase entire chip wait two frames (or check if bit6 toggles on each read from [C00000h]) |
No such command (one can write data without erasing) (to simulate a 16K-erase: write 128 all FFh-filled 128-byte blocks) |
[C05555h]=AAh, [C02AAAh]=55h, [C05555h]=A0h ;write 1..128 byte(s) [Cxxxxxh+0..n]=dta[0..n] ;write the data byte(s) repeat, stat=[Cxxxxxh+n], until stat=dta[n] ;wait last written byte |
[C00000h]=90h ;enter ID mode manufacturer=B0h=[C00000h], device_type=32h=[C00001h] ;read ID (LH28F020SUT) [C00000h]=FFh ;terminate command |
[C00000h]=57h/47h, [C000FFh]=D0h ;<-- C000FFh (!) ;set/reset protection repeat, stat=[C00000h], until stat.bit7=1 ;wait busy if stat.bit4=1 or stat.bit5=1 then [C00000h]=50h ;error --> clear status [C00000h]=FFh ;terminate command |
[C00000h]=A7h, [C00000h]=D0h ;erase entire chip repeat, stat=[C00000h], until stat.bit7=1 ;wait busy if stat.bit4=1 or stat.bit5=1 then [C00000h]=50h ;error --> clear status [C00000h]=FFh ;terminate command |
[C00000h]=20h, [Cxx000h]=D0h ;erase 16kbyte sector repeat, stat=[C00000h], until stat.bit7=1 ;wait busy if stat.bit4=1 or stat.bit5=1 then [C00000h]=50h ;error --> clear status [C00000h]=FFh ;terminate command if failed, issue "Reset Protection", and retry |
[C00000h]=40h ;write 1 byte command [Cxxxxxh]=dta ;write the data byte repeat, stat=[C00000h], until stat.bit7=1 ;wait busy ;below error-check & terminate are needed only after writing LAST byte if stat.bit4=1 or stat.bit5=1 then [C00000h]=50h ;error --> clear status [C00000h]=FFh ;terminate command |
U1 32pin ROM U2 32pin AMD AM29F010-90PC (FLASH) U3 16pin SN74LS139AN U4 16pin D411B (CIC) |
U1 32pin ROM U2 32pin Sharp LH28F020SUT-N80 (FLASH) U3 16pin 74AC139 U4 18pin F411B (CIC) U5 14pin 74AC08 |
| SNES Cart Cheat Devices |
Pro Action Replay AAAAAADD raw 8-digits WRAM Pro Action Replay Mk2/Mk3 AAAAAADD raw 8-digits WRAM/ROM/SRAM X-Terminator/Game Wizard AAAAAADD raw 8-digits WRAM Game Genie/Game Mage DDAA-AAAA encrypted 4-4 digits ROM/SRAM Gold Finger AAAAADDDDDDCCW raw 14-digits DRAM/SRAM Front Far East NNAAAAAADD.. raw 10..80 digits DRAM offset |
Name Hardware/ROM Software/WRAM Built-in Pro Action Replay None (of 4) 4 None Pro Action Replay Mk2a/b 0/2/4 (of 4) 100 None Pro Action Replay Mk3 1/5 (of 7) 100 ? games Game Genie (Codemasters/Galoob) 5 (of 6) None None Game Mage (Top Game & Company) 8? None? 250 codes? X-Terminator (Fire) None (of 0) 4 None X-Terminator 2 (noname) None (of 0) 64 307 games Game Wizard (Innovation) None? ? ? Game Saver (Nakitek) allows to save WRAM/VRAM snapshots in non-battery DRAM Game Saver+ (Nakitek) allows to save WRAM/VRAM snapshots in battery DRAM Super UFO (copier, supports Gold Finger and X-Terminator codes) Super Wild Card/Magicom (copiers, support Gold Finger and Front Far East) Parame ROM Cassette Vol 1-5 (by Game Tech) (expansions for X-Terminator 2) |
| SNES Cart Cheat Devices - Code Formats |
AAAAAADD ;-address (AAAAAA) and data (DD) |
DEADC0DE ;-prefix (often misspelled as "DEADCODE", with "O" instead "0") AAAAAANN ;-address (AAAAAA) and number of following 4-byte groups (NN) DDEEFFGG ;-first 4-byte group (DD=1st byte, .. GG=4th byte) HHIIJJKK ;-second 4-byte group (HH=5th byte, .. KK=8th byte) (if any) ... ;-further 4-byte groups (etc.) (if any) |
DDAA-AAAA ;-encrypted data (DD) and encrypted/shuffled address (AA-AAAA) |
Genie Hex: D F 4 7 0 9 1 5 6 B C 8 A 2 3 E Normal Hex: 0 1 2 3 4 5 6 7 8 9 A B C D E F |
ijklqrst opabcduv wxefghmn ;Genie Address (i=Bit23 ... n=Bit0) abcdefgh ijklmnop qrstuvwx ;SNES Address (a=Bit23 ... x=Bit0) |
AAAAADDEEFFCCW ;-Address (AAAAA), Data (DD,EE,FF), Checksum (CC), Area (W) |
CC = A0h + AAAAA/10000h + AAAAA/100h + AAAAA + DD (+ EE (+ FF)) |
W=0 DRAM (ROM image) (reportedly also for W=2,8,A,C,F) W=1 SRAM (Saved game image) |
NNAAAAAADD.. Number of bytes (NN), Address (AAAAAA), Data (DD..) |
| SNES Cart Cheat Devices - Game Genie |
"GENSRC" 32Kbytes LoROM, straight I/O addresses CRC32=AC94F94Ah "K7" 32Kbytes LoROM, messy I/O addresses CRC32=F8D4C303h "ed" 64Kbytes LoROM, messy I/O addresses CRC32=58CBF2FEh |
"Game Genie ",0,0,0,0,0 ;32K versions (GENSRC & K7) "Game Genie Jo" ;64K version (ed) |
Version "GENSRC" "K7" & "ed" Control W:008000h W:xx8100h, W:008001h ;ed: xx=00, K7: xx=FF CodeFlags R/W:008001h R:FF8001h, W:008000h ;bit 0-4 = enable code 1-5 CodeMsb R/W:008003h+N*4 R:FF8005h+N*6, W:008004h+N*6 ;\ CodeMid R/W:008004h+N*4 R:FF8006h+N*6, W:008007h+N*6 ; N=0-4 for CodeLsb R/W:008005h+N*4 R:FF8007h+N*6, W:008006h+N*6 ; code 1-5 CodeData R/W:008006h+N*4 R:FF8008h+N*6, W:008009h+N*6 ;/ |
00h Select Game Genie BIOS 02h Select Game Genie I/O Ports 06h Select Game Cartridge 07h Select Game Cartridge and keep it selected |
Bit0-4 Enable Code 1..5 (0=Disable, 1=Enable) Bit5-7 Should be zero |
http://cgfm2.emuviews.com/txt/genie.txt |
| SNES Cart Cheat Devices - Pro Action Replay I/O Ports |
008000h ;Code 0-3 (MID) (shared for code 0..3) 010000h,010001h,010002h ;Code 0 (DTA,LSB,MSB) (not used by BIOS) 010003h ;Control (set to FFh) 010004h,010005h,010006h ;Code 1 (DTA,LSB,MSB) (not used by BIOS) 010007h,010008h,010009h ;Code 2 (DTA,LSB,MSB) (used as NMI vector.LSB) 01000Ah,01000Bh,01000Ch ;Code 3 (DTA,LSB,MSB) (used as NMI vector.MSB) |
100000h,100001h,100002h,100003h ;Code 0 (DTA,LSB,MID,MSB) (code 0) 100004h,100005h,100006h,100007h ;Code 1 (DTA,LSB,MID,MSB) (code 1) 100008h,100009h,10000Ah,10000Bh ;Code 2 (DTA,LSB,MID,MSB) (code 2/NMI.LSB) 10000Ch,10000Dh,10000Eh,10000Fh ;Code 3 (DTA,LSB,MID,MSB) (code 3/NMI.MSB) 100010h ;Control A (set to 00h or FFh) C0A00nh ;Control B (address LSBs n=0..7) (written data=don't care) |
Address bit0 - set if one or more codes use bank 7Fh..FEh Address bit1 - set/cleared for PAL/NTSC selection (or vice-versa NTSC/PAL?) Address bit2 - set to... maybe, forcing the selection in bit1 (?) |
100000h,100001h,100002h,100003h ;Code 0 (DTA,LSB,MID,MSB) (code 0) 100004h,100005h,100006h,100007h ;Code 1 (DTA,LSB,MID,MSB) (code 1) 100008h,100009h,10000Ah,10000Bh ;Code 2 (DTA,LSB,MID,MSB) (code 2) 10000Ch,10000Dh,10000Eh,10000Fh ;Code 3 (DTA,LSB,MID,MSB) (code 3) 100010h,100011h,100012h,100013h ;Code 4 (DTA,LSB,MID,MSB) (code 4) 100014h,100015h,100016h,100017h ;Code 5 (DTA,LSB,MID,MSB) (always NMI.LSB) 100018h,100019h,10001Ah,10001Bh ;Code 6 (DTA,LSB,MID,MSB) (always NMI.MSB) 10001Ch ;Control A (bit4,6,7) 10001Dh-10001Fh ;Set to zero (maybe accidently, trying to init "code 7") 10003Ch ;Control B (set to 01h upon game start) 086000h ;Control LEDs (bit0,1) 206000h ;Control C (bit0) 008000h ;Control D (set to 00h upon PAR-NMI entry) |
Bit0-3 Should be 0 Bit4 ROM Mapping (0=Normal, 1=Temporarily disable BIOS & enable GAME ROM) Bit5 Should be 0 Bit6-7 Select/force Video Type (0=Normal, 1=NTSC, 2=PAL, 3=Reserved) |
Bit0 Control left or right LED? (0=on or off?, 1=off or on?)
Bit1 Control other LED ("")
Bit2-7 Should be 0
|
Bit0 Whatever (0=BIOS or PAR-NMI Execution, 1=GAME Execution) Bit1-7 Should be 0 |
| SNES Cart Cheat Devices - Pro Action Replay Memory |
00/02/04/06:6000h..7FFFh ;-32Kbyte SRAM (four 8K banks) |
1) Boot game with switch in MIDDLE position (maybe needed only for testing) 2) Set LOWER position & push RESET button (to enter the BIOS menu) 3) After selecting codes/cheat finder, start game with MIDDLE position 4) Finally, UPPER position enables codes (best in-game, AFTER intro/menu) |
UPPER Position "Codes on" Enable GAME and enable codes MIDDLE Position "Codes off" Enable GAME and disable codes LOWER Position "Trainer On" Enable BIOS and (maybe) enable codes |
Pro Action Replay Mk1 v2.1 1992 32K CRC32=81A67556h Pro Action Replay Mk2 v1.0 1992,93 32K CRC32=83B1D39Eh Pro Action Replay Mk2 v1.1 1992,93,94 32K CRC32=70D6B036h Pro Action Replay Mk3 v1.0U 1995 128K CRC32=0D7F770Ah |
PAR1-3 3-position switch (on right edge of the cartridge) PAR1-3 32Kbytes SRAM (probably not battery-backed) PAR1-2 32Kbytes BIOS PAR3 128Kbytes BIOS (with modernized GUI and built-in "PRESET" codes) PAR1 46pin cartridge slot (incompatible with coprocessors that use 62pins) PAR2-3 62pin cartridge slot PAR2-3? second Npin cartridge slot at rear side (for CIC from other region) PAR3 two LEDs (within sticker-area on front of cartridge) PAR1-3 whatever logic chip(s) |
| SNES Cart Cheat Devices - X-Terminator & Game Wizard |
X-Terminator 1 X-Terminator 2 00FFE8h.W 00FFEAh.W ;map BIOS (by writing any value) 00FFE9h.W 00FFEBh.W ;map GAME (by writing any value) 00FFEAh.R (NMI read) 00FFEAh.R (NMI read) ;map BIOS/GAME (switch-selection) 008000h-00FFFFh 008000h-00FFFFh ;BIOS (32Kbytes) N/A 028000h-02FFFFh ;Expansion ROM 32Kbytes 00,02,04,06:6000-7FFF 00-1F:02C00-2FFF ;SRAM (32Kbytes) |
X-Terminator 1993 (english) (CRC32=243C4A53h) (no built-in codes) X-Terminator 2 19xx (japanese) (CRC32=5F75CE9Eh) (codes for 307 games) |
Parame ROM Cassette Vol 1-5 (by Game Tech) |
028000h - ID "FU O9149" (aka "UFO 1994" with each 2 bytes swapped) 028008h - Boot callback (usually containing a RETF opcode) 028010h - List of 16bit pointers (80xxh-FFFFh), terminated by 0000h |
2 checksum (MSB,LSB) taken from GAME cartridge ROM header [FFDCh] 1 number of following 5-byte codes (N) 5*N codes (MID,MSB,DTA,LSB,TYPE) ;TYPE=predefined description (00h..23h) |
Super UFO Pro-8 V8.8c BIOS |
Goldstar GM76C256ALL-70 (32Kbytes SRAM, not battery-backed) D27256 (32Kbytes UV-Eraseable EPROM) two logic chips & two PALs or so (part numbers not legible on existing photo) 3-position switch (on PCB solder-side) (SCAN/NORMAL/ACTION) two cartridge slots (for PAL and NTSC cartridges or so) |
| SNES Cart Cheat Devices - Game Saver |
L+R upon boot --> test screen / version number L+R+START upon boot --> toggle slow DRAM checksumming on/off SELECT in title --> enter revival codes R+SELECT in game --> save state L+SELECT in game --> load state R+START in game --> toggle slow motion on/off ;\one of these keeps L+START in game --> toggle slow motion on/off ;/HDMA enabled (or so) |
Game Saver v1.3 (19xx) Game Saver v1.7 (31 Jul 1995) |
002100h-0021xxh PPU ports (logged at 2081xxh) (or at 2080xxh on 2nd write) 004200h-0042xxh CPU ports (logged at 2082xxh) 008000h-00FFFFh BIOS ROM 32Kbytes 0080xFh Switch to GAME mapping (upon opcodes that end at 80xFh) 00FFEAh Switch to BIOS mapping (upon NMI execution; when enabled) 108000h-108001h I/O - First/second write flags for write-twice PPU ports 108002h-108003h I/O - Exception Mode/Status (bit0-1=BRK, bit2=NMI) 208000h-2087FFh SRAM 2Kbytes (includes auto-logged writes to PPU/CPU ports) 400000h-73FFFFh DRAM 256Kbytes (for saving WRAM/VRAM/OAM/CGRAM, CPU/DMA regs) 808000h-80FFFFh GAME ROM (even while BIOS mapping is enabled) |
00000-0FFFF Blank (no action) (shown as "XXXXX" in GUI) 10000-1FFFF Exception Mode (value for [108002]) (not used for any games) 20000-3FFFF Preserve WRAM byte at 7E0000-7FFFFF (used for most games) 40000-4FFFF PPU write-twice related (used only for Starfox/Star Wing) 50000-5FFFF PPU write-twice related (not used for any games) 60000-6FFFF Reserved (no action) (not used for any games) 70000-7FFFF Select special BRK handler (used only for Aero the Acro Bat) 80000-9FFFF Preserve WRAM byte at 7E0000-7FFFFF and pass it to 2140h ;\not A0000-BFFFF Preserve WRAM byte at 7E0000-7FFFFF and pass it to 2141h ; used C0000-DFFFF Preserve WRAM byte at 7E0000-7FFFFF and pass it to 2142h ; by any E0000-FFFFF Preserve WRAM byte at 7E0000-7FFFFF and pass it to 2143h ;/games |
24pin SRAM (2Kbytes) (probably used only because DRAM is too slow for I/O) 28pin ROM/EPROM (32Kbytes) 62pin cartridge slot (on rear side of device) 14pin eight DRAM chips (256Kbytes in total) Xpin huge chip (whatever logic) 3pin 7805 or so (for turning much of the 9 volts into heat) 2pin oscillator (20.000MHz) (for DRAM refresh generator when power-off) socket/cable/plug for NTSC-SNES 9V DC supply (not PAL-SNES 9V AC supply) battery box for six 1.5V AA batteries, battery LED, and battery switch resistors, capacitors, and maybe diodes, transistors |
| SNES Cart Cheat Devices - Theory |
1) rewrite ROM-image in RAM once before game starts (GF/FFE/emulators) 2) patch on ROM reading (by watching address bus) (GG and PAR2-3) |
1) allow WRAM addresses 7E0000-7FFFFF (PAR1-3, XT1-2) 2) allow WRAM addresses 7E0000-7FFFFF and nn0000-nn1FFF (N/A) |
1) rewrite once before game starts (GF) 2) patch on SRAM reading (like hardware based ROM patches) (GG and PAR2-3) 3) rewrite repeatedly on NMI execution (like WRAM patches) (N/A) |
| SNES Cart Tri-Star (aka Super 8) (allows to play NES games on the SNES) |
00E000h-00FFFFh.R - BIOS ROM (8Kbytes) 00FFF0h.W - NES Joypad 1 (8bit data, transferred MSB first, 1=released) 00FFF1h.W - NES Joypad 2 (bit4-5: might be NES reset and/or whatever?) 00FFF2h.W - Enter NES Mode (switch to NES video signal or so) 00FFF3h.W - Disable BIOS and map SNES cartridge |
Tri-Star (C) 1993 ;ROM CHKSUM: 187C Tri-Star Super 8 by Innovation (C) 1995 ;ROM CHKSUM: F61E |
82pin NOAC chip (black blob on 82pin daughterboard) (on PCB bottom side) 28pin EPROM 27C64 (8Kx8) (socketed) 16pin SNES-CIC clone (NTSC: ST10198S) (PAL: probably ST10198P) (socketed) 20pin sanded-chip (probably 8bit latch for joypad 1) 20pin sanded-chip (probably 8bit latch for joypad 2) 16pin sanded-chip (probably 8bit parallel-in shift-register for joypad 1) 16pin sanded-chip (probably 8bit parallel-in shift-register for joypad 2) 16pin sanded-chip (probably analog switch for SNES/NES audio or video) 20pin sanded-chip (probably PAL for address decoding or so) (socketed) 2pin oscillator (? MHz) (for NES cpu-clock and/or NES color-clock or so) 62pin cartridge edge (SNES) (on PCB bottom side) 12pin cartridge edge (A/V MultiOut) (to TV set) (on PCB rear side) 62pin cartridge slot (SNES) 60pin cartridge slot (Famicom) (japanense NES) 72pin cartridge slot (NES) (non-japanense NES) 6pin socket for three shielded wires (Composite & Stereo Audio in from SNES) TV Modulator (not installed on all boards) four transistors, plus some resistors & capacitors |
| SNES Cart Pirate X-in-1 Multicarts (1) |
A0-A3 Bank Number bit0-3 (base offset in 256Kbyte units) A4 Bank Number bit4 (or always one in "1997 New 7 in 1") A5 Always 0 (or Bank bit4 in "1997 New 7 in 1") A6 Varies (always 0, or always 1, or HiROM-flag in "Super 7 in 1") A7 Always 1 (maybe locks further access to the I/O port) |
Title FFFFxx 6FFFxx Size/Notes 8 in 1 and 10 in 1 C0-DF N/A 8MB (8 big games + 10 mini games?) 1997 New 7 in 1 D0-DF,F0-FF N/A ? MB Super 5 in 1 80-9F 80-9F 8MB Super 6 in 1 80-8F N/A 4MB Super 7 in 1 80-8F,D0 80-8F,D0 8MB? (mario all stars + 3 games) Super 11 in 1 80-9F N/A 8MB+DSP4 ? |
U1 16pin CIVIC CT6911 (CIC clone) U2 16pin 74LS13x or so (not legible on photo) U3 16pin whatever (not legible on photo) U4 14pin 74LS02 or so (not legible on photo) U5 black blob U6 black blob |
U 20pin iCT PEEL18CV8P-25 U 16pin 93C26 A60841.1 9312 (CIC clone) U 42pin 56C001 12533A-A 89315 U 42pin 56C005-4X 12534A-A 89317 |
U 16pin CIVIC 74LS13 (CIC clone) U 16pin not installed U 28pin 27C64Q EPROM (8Kx8) U 20pin iCT PEEL18CV8P-25 U 42pin JM62301 U 42pin JM62305 |
| SNES Cart Pirate X-in-1 Multicarts (2) |
20xxh NES PPU left-overs (written to, but ignored by the SNES) 40xxh NES APU left-overs (written to, but ignored by the SNES) 8000h ROM Bank Size/Base |
0-4 ROM Base Offset (in 32Kbyte units) 5 Unknown/unused (always zero) 6-7 ROM Bank Size (0=Used/unknown, 1=Unused/Unknown, 2=1x32K, 3=2x32K) |
PCB Name: Unknown (it has one, but isn't legible on lousy photo) 32pin C20H (1Mbyte ROM) 24pin Unknown (maybe SRAM) (there is no battery visible on PCB front side) 20pin Unknown (looks like a sanded chip; presumably memory mapper) 16pin CIVIC CTxxxx? (CIC clone) 46pin Cartridge Edge Connector |
| SNES Cart Copiers |
| SNES Cart Copiers - Front Fareast (Super Magicom & Super Wild Card) |
Super Magicom (Front/CCL) Super Wild Card (Front) Supercom Pro (CCL) (later CCL models use other I/O ports) Super Drive Pro-3 UFO (noname) (later UFO models use other I/O ports) |
C000.R FDC Flags (Bit7: MCS3201 IRQ Signal, Bit6: Drive 'Index' Signal)
Note: Index signal is (mis-)used for Disk Insert Check
C002.W FDC MCS3201 Drive Control Register (motor on, etc.)
C004.R FDC MCS3201 Main Status Register
C005.RW FDC MCS3201 Command/Data Register
C007.R FDC MCS3201 Diagnostics Register (bit7=disk change; MCS-chip only)
C007.W FDC MCS3201 Density Select Register (bit0-1=Transfer rate)
C008.R Parallel Data Input (Reading this register reverses busy flag)
C008.W Parallel Data Output (bit0-3) and DRAM/SRAM mapping (bit0-1)
Bit 0: 0=LoROM/Mode 20, 1=HiROM/Mode 21 (DRAM Mapping)
Bit 1: 0=LoROM/Mode 1, 1=HiROM/Mode 2 (SRAM Mapping)
C009.R Parallel Port Busy Flag, Bit 7 (older EP1810 Version) (Altera chip)
C000.R Parallel Port Busy Flag, Bit 5 (newer FC9203 Version) (FRONT chip)
C00A-C00F Unused (mirrors of C008h-C009h)
C010-DFFF Unused (mirrors of C000h-C00Fh)
|
E000.W Memory Page 0 ;\Select an 8Kbyte page, CART/DRAM/SRAM address is: E001.W Memory Page 1 ; SNES address AND 1FFFh ;lower bits E002.W Memory Page 2 ; +Selected Page * 2000h ;upper bits E003.W Memory Page 3 ;/ +SNES address AND FF0000h ;bank number E004.W Set System Mode 0 (BIOS Mode) (with all I/O enabled) E005.W Set System Mode 1 (Play Cartridge) (with all I/O disabled) E006.W Set System Mode 2 (Cartridge Emulation 1) (with E004-E007 kept on) E007.W Set System Mode 3 (Cartridge Emulation 2) (with all I/O disabled) E008.W Select 44256 DRAM Type (for 2,4,6,8 Mega DRAM Card) E009.W Select 441000 DRAM Type (for 8,16,24,32 Mega DRAM Card) E00C.W BIOS Mode:CART at A000-BFFF, DRAM Mode:DRAM in bank 20-5F/A0-DF E00D.W BIOS Mode:SRAM at A000-BFFF, DRAM Mode:CART in bank 20-5F/A0-DF |
bb2000-bb3FFF RW: SRAM or CART (E00C/E00D) bb-40-7D,C0-FF ;\8K page via bb8000-bb9FFF RW: DRAM bb-00-7D,80-FF ; E000-E003 bbA000-bbBFFF RW: SRAM or CART (E00C/E00D) bb=00-7D,80-FF ;/ bbC000-bbC00x RW: I/O Ports bb=00-7D,80-FF bbE000-bbE00x W : I/O Ports bb=00-7D,80-FF bbE000-bbFFFF R : BIOS ROM (8/16/256Kbytes) bb=00-1F |
bb0000-bbFFFF RW: CART |
bb0000-bb7FFF R : DRAM Mapping, bb=40-6F, C0-DF. (HiROM/Mode 21) bb8000-bbFFFF R : DRAM Mapping, bb=00-6F, 80-DF. (AnyROM/Mode 20,21) 708000-70FFFF RW: SRAM Mode 1 Mapping. ;<-- typically for LoROM 306000-307FFF RW: SRAM Mode 2 Mapping, Page 0. ;<-- typically for HiROM 316000-317FFF RW: SRAM Mode 2 Mapping, Page 1. ;\extra banks for HiROM 326000-327FFF RW: SRAM Mode 2 Mapping, Page 2. ; (do any 'real' cartridges 336000-337FFF RW: SRAM Mode 2 Mapping, Page 3. ;/do actually have that?) |
Even DRAM Bank is mapped to bb0000-bb7FFF. Odd DRAM Bank is mapped to bb8000-bbFFFF. |
Wait Busy Bit = 1 ;Status PC Port 379h/279h/3BDh.Bit7 Write One Byte ;Data PC Port 378h/278h/3BCh.Bit0-7 Reverse Strobe Bit ;Control PC Port 37Ah/27Ah/3BEh.Bit0 |