Need Help Dumping Nintendo Campus Challenge Reproduction

Discussion of hardware and software development for Super NES and Super Famicom.

Moderator: Moderators

Forum rules
  • For making cartridges of your Super NES games, see Reproduction.
coke364
Posts: 2
Joined: Wed Feb 15, 2012 2:42 pm

Need Help Dumping Nintendo Campus Challenge Reproduction

Post by coke364 » Wed Feb 15, 2012 2:46 pm

I have a 1992 SNES Campus Challenge Reproduction cartridge and i am trying to dump it but its not showing up. I am using a retrode 2. Can someone please let me know how i can make this happen, whether i need new hardware, or a new process?

3gengames
Formerly 65024U
Posts: 2269
Joined: Sat Mar 27, 2010 12:57 pm

Post by 3gengames » Wed Feb 15, 2012 3:10 pm

Write a script for the retrode since it uses a custom PCB?

coke364
Posts: 2
Joined: Wed Feb 15, 2012 2:42 pm

Post by coke364 » Wed Feb 15, 2012 4:30 pm

3gengames wrote:Write a script for the retrode since it uses a custom PCB?


Howe would i do that?

User avatar
Jeroen
Posts: 982
Joined: Tue Jul 03, 2007 1:49 pm

Post by Jeroen » Wed Feb 15, 2012 8:18 pm

First you'd have to find out how the campus challenge "talks" to the snes (banking hardware/registers etc)

Then you'd have to find out how the scripts of the retrode work...i'm sure there's an example on their site or whatever.
If you have those two you'd have a pretty good way of dumping it.

I won't get into the minefield of the ethics of dumping such a cart.

User avatar
MottZilla
Posts: 2832
Joined: Wed Dec 06, 2006 8:18 pm

Post by MottZilla » Wed Feb 15, 2012 9:32 pm

The ethics of dumping an unlicensed reproduction?

The reproduction probably has some mechanism working to prevent others from easily copying it and playing it.

SkinnyV
Posts: 425
Joined: Wed May 04, 2011 2:41 pm
Location: Montréal, Canada
Contact:

Post by SkinnyV » Wed Feb 15, 2012 9:47 pm

I'm really up for having this cart dumped but never bought it to try since I was pretty sure bunnyboy added some bad ass copy-protection to prevent such a thing happening. A scan of the PCB might help a bit though.

3gengames
Formerly 65024U
Posts: 2269
Joined: Sat Mar 27, 2010 12:57 pm

Post by 3gengames » Wed Feb 15, 2012 10:05 pm

The copy protection is nobody else really knows how it works, and it hard to reproduce in small quantities.

byuu
Posts: 1537
Joined: Mon Mar 27, 2006 5:23 pm

Post by byuu » Wed Feb 15, 2012 10:47 pm

Send it to Guru and have the ROMs themselves read out directly. Then if needed, send the image to d4s to crack any stupid protection checks.
Note: either of them may be busy or not want to do this and say no.

bunnyboy
Posts: 449
Joined: Thu Oct 27, 2005 1:44 pm
Location: CA
Contact:

Post by bunnyboy » Thu Feb 16, 2012 12:47 am

I didn't bother with copy protection, but its a custom mapper so Retrode won't work without some reprogramming. The ROM is a standard flash chip so you can dump it with a programmer after transplanting it to an adapter board.

SkinnyV
Posts: 425
Joined: Wed May 04, 2011 2:41 pm
Location: Montréal, Canada
Contact:

Post by SkinnyV » Thu Feb 16, 2012 9:22 pm

:shock:

Wow, that wasn't expected! Thanks for the info bunnyboy.

byuu
Posts: 1537
Joined: Mon Mar 27, 2006 5:23 pm

Post by byuu » Fri Feb 17, 2012 3:04 pm

If there were a way to dump the full 16MB address range with the Retrode, we could trivially write C apps to handle any mappers. Is that possible?

d4s
Posts: 88
Joined: Mon Jul 14, 2008 4:02 pm

Post by d4s » Fri Feb 17, 2012 3:49 pm

byuu wrote:Send it to Guru and have the ROMs themselves read out directly. Then if needed, send the image to d4s to crack any stupid protection checks.
Note: either of them may be busy or not want to do this and say no.


Can do.

I haven't delved too deeply into the hardware.
Shouldn't be too complicated, though.
IIRC, the original pcb had a microcontroller interfaced to the SNES via a dual-port RAM and there was some sort of rudimentary network port present aswell. (couple of pictures)
The above is a dump of the retrousb cartridge.
I'm not sure if and to what extent the ROMs were patched in comparison to the original cartridge.

I was also given a partial dump of the original Powerfest 94 ROMs for evaluation, which ran on similar hardware.
However, I've promised not to share that one.

bunnyboy
Posts: 449
Joined: Thu Oct 27, 2005 1:44 pm
Location: CA
Contact:

Post by bunnyboy » Sat Feb 18, 2012 10:31 am

byuu wrote:If there were a way to dump the full 16MB address range with the Retrode, we could trivially write C apps to handle any mappers. Is that possible?

The Retrode appears as just a standard FAT formatted disk to the computer, so the C code you would have to write is the AVR firmware. All the A bus pins are connected so you could read/write anywhere.

byuu
Posts: 1537
Joined: Mon Mar 27, 2006 5:23 pm

Post by byuu » Sat Feb 18, 2012 9:49 pm

I'm not sure if and to what extent the ROMs were patched in comparison to the original cartridge.


Well, if we can get a guaranteed clean dump, I wouldn't mind poking at emulating it. Experience tells me the network communication stuff probably won't happen though.

The Retrode appears as just a standard FAT formatted disk to the computer, so the C code you would have to write is the AVR firmware. All the A bus pins are connected so you could read/write anywhere.


Oh? I thought Matthias said it couldn't write. In that case, dumping the S-DD1, SPC7110, and Cx4 (in MMX2, MMX3 can be dumped directly) should be trivial. And all we need is a proper SuperCIC integration to finally have a 100% compatible cartridge dumper. Awesome stuff!

SkinnyV
Posts: 425
Joined: Wed May 04, 2011 2:41 pm
Location: Montréal, Canada
Contact:

Post by SkinnyV » Sun Feb 19, 2012 11:43 am

Matthias (creator of Retrode) said he tried to implement the SuperCic but failed to unlock the SA-1. He was in contact with Ikari about this but apparently it's missing some clock signal. He is looking for some help into the matter though.

Post Reply