| |
tlr
Registered: Sep 2003
Posts: 1790 |
RR memory map during freeze?
I'm a bit confused about the memory map in the freeze state. Unfortunately I do not have a real RR so I can't analyse it myself. Anyone cares to enlighten me?
Jens explicitly states in Inside_Replay.txt that no RAM can be visible in the $8000-$9FFF area during freeze, but that $DE00 (or $DF00) is possible.
Quote:Freeze:
ROM is mapped to $e000-$ffff, bank 0 is active directly after Freeze. Writing to bits 0 and 1 of the $de00 register will have no effect on GAME and EXROM.
RAM can be selected and used in $df00 or $de02, respectively, but not in $8000. Banking bits work, so you have full read access to the ROM, and access to up to four RAM pages with the AllowBank bit set (minus 2 bytes if REU
compatible bit is set). Cz states this in his Inside_Replay_Essentials.txt:
Quote:Being in freeze mode allows ROM banks to be mapped by $de00 as before but of course they are mapped to $e000. RAM can only be accessed on the free I/O1 area. In spite of this it seems vice (r30505) has RAM enabled at both $8000 and $DE00 (or $DF00) during the frozen state before acking it.
From examining the 1541U2 code (3.0beta5) it looks like no RAM can be visible at $DE00 (or $DF00) during freeze which also seems to be wrong.
I was hoping that RAM at $DE00 was mapped in automatically in the freeze state so I could save regs there to avoid trashing the stack unnecessarily.
Which is it? |
|
| |
chatGPZ
Registered: Dec 2001
Posts: 11386 |
drop a testprog into the repo and i'll check it on the real hw :) (you want to check if ram can be read at $8000, and if it can be written to at either $8000 and $e000). iirc its like jens' description says.... the existing tests omit the freeze mode, so i wouldnt be surprised if that is broken in VICE. |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
The really interesting bit is whether RAM is at $DE00 already from the start. Jens just states that "RAM can be selected".
I'll see if I can whip up a small test program. |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
There: testprogs/C64/carts/rr-freeze/.
The test first lets you select $DE01 bits, then tries to fill $DExx and $DFxx with an increasing pattern. It will then allow you to freeze.
Upon freezing, $DExx and $DFxx will be preserved to C64 ram, then modified and preserved again. Lastly freeze mode will be acked and $9Exx + $9Fxx will be read and finally the whole lot will be dumped to screen.
I believe $DE01=$40 and $DE01=$00 are the interesting cases. |
| |
Count Zero
Registered: Jan 2003
Posts: 1932 |
Will see to check your test commit at the weekend.
*Yieks* the essentials.txt looks quite wasted :)
Cannot really remember the setup when in "freeze state" and only the "maxmachine memory setup" is active with an RR attacged. Also emulations on various hardwares will likely largely differ. That is actually one of the test cases I wanted to cover on future Action Replay & Clones Acid Ramtest v0.1 versions. Never really got on to it - as always :(
Also I am not sure about the influence the mode selection using the AllowBank bit would make but whenever that makes a difference we know whom to beat down excessively :)
Will report back whenever I find time for some more tests as well. |
| |
chatGPZ
Registered: Dec 2001
Posts: 11386 |
i can see differences between emu and real hw.... however, it would be nice if you could explain what exactly this hexdump is trying to tell me :) what should it look like when there is ram and what should it look like when there is none? |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Quote: i can see differences between emu and real hw.... however, it would be nice if you could explain what exactly this hexdump is trying to tell me :) what should it look like when there is ram and what should it look like when there is none?
@gpz: hmm, yes maybe it's a bit to crude. :)
Basically each "sample" is presented in hex rows of two.
Initially $9Exx and $9Fxx is prefilled with an incrementing pattern. (differnt for each).
First two shows the $de00 area directly after freeze.
The next two shows the $de00 area after trying to eor that area with #$ff.
the next two shows the $de00 area read back through $9e00 in the normal memory map.
After this six more rows, but for $df00 instead.
If REU-Comp is set only the upper part is meaningful, the lower part should be unconnected space.
If REU-Comp is not set, only the lower part is meaningful.
Did that make any sense at all?
This was just a quickie to verify if RAM is present already at the freeze entry. I will try to improve the test to check for RAM/ROM/banking in a more generic way. |
| |
chatGPZ
Registered: Dec 2001
Posts: 11386 |
check the readme i added in the repo... if i interpreted the results correctly there is indeed no ram in i/o space in freeze mode. |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Interesting! Thanks for interpreting my cryptic descriptions and deciphering the test program output. :)
I noticed you tested on the Nordic Replay btw. Supposedly the control regs on that is slightly altered compared to Retro Replay just to accommodate the Atomic Power. I assume the alterations are just extra stuff. Do you know which by any chance? |
| |
Count Zero
Registered: Jan 2003
Posts: 1932 |
Huh - after querying Grp soon will try to make heads and tails of this on RR/NP/U1541v1 - looks extensible.
And wow - there IS a difference on Atomic to (new) Nordic Power (clone)?
Or is it some implementation thing? Got an original Atomic/Nordic Power here to check against the "clone Nordic Power" carts Jens produced. Will report back ASAP. |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Quote: Huh - after querying Grp soon will try to make heads and tails of this on RR/NP/U1541v1 - looks extensible.
And wow - there IS a difference on Atomic to (new) Nordic Power (clone)?
Or is it some implementation thing? Got an original Atomic/Nordic Power here to check against the "clone Nordic Power" carts Jens produced. Will report back ASAP.
What I ment is that there is a difference between RR and Nordic Replay. Jens states so here: http://wiki.icomp.de/wiki/Nordic_Replay , but he doesn't state what the difference is.
Meanwhile I extended the freeze test to try to present the detected mapping in a more sane way. Ongoing work... |
| |
chatGPZ
Registered: Dec 2001
Posts: 11386 |
the difference is that the nordic/atomic power cartridge has one additional mapping mode, see here. basically set 0xde00 to 0x22 to enable 16k game mode with 8k rom at 8000 and 8k ram at a000.
the values used for this mode are invalid (and unused) for regular AR/RR.
i can also try on an actual retro replay, but unless you are using said mapping modes it shouldnt make a difference :) |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Interesting. I hadn't seen that documented before.
Meanwhile I've updated rr-freeze quite a lot so it can now visualize the mapping. It looks rather weird in vice so I'd be very interested to see what it does on your hw if you have the time. |
| |
chatGPZ
Registered: Dec 2001
Posts: 11386 |
*please* add more elaborated description in the readme =) |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Will do. Going away travelling for a week starting tomorrow though.
Short story: memory prefilled with tags so the program can determine which bank it sees in a particular area. Bank scanning is done with bit 1 and 0 of de00 set to 00. |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
I added a little more information to the readme. From what i can see in vice it looks like the exrom/game bits aren't properly disabled when in the frozen state. And should banking the E000 rom really be possible there?
I have a list of features to add but it'll be a week or two. Feel free to ask questions so i know what's missing the most in the docs. |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
I've improved the program further, and also added a save feature with an offline analysis tool, see below.
What it doesn't check but perhaps ought to:
- what happens with the mapping after KILL in the "random" state.
- what happens with the mapping _during_ when the ack bit is set =1.
From the dump below you can at least see the anomaly that bank EXROM/GAME selection is still possible, even when in the freezed state. This is supposedly not the case on the real HW although I don't have it to test.
Questions? Comments?
link: testprogs/C64/carts/rr-freeze/
analyzing file: dumps/dump_x64_r30583.prg
program: RR-FREEZE R05, format: 0
<RESET>
--- RST ---
detected initial state:
9E:A* BE:- DE:- DF:A* FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
$40 -> $DE01 (REU-Comp=1, NoFreeze=0, AllowBank=0)
--- CNFD ---
detected initial state:
9E:A* BE:- DE:A* DF:- FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
$88 -> $DE00 ("random" mapping, bank 5 in ROM)
$8C -> $DE00 (kill)
<FREEZE>
--- FRZ ---
detected initial state:
9E:0 BE:- DE:0 DF:- FE:A*
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
$60 -> $DE00 (ACK)
$20 -> $DE00
--- ACKD ---
detected initial state:
9E:0* BE:- DE:0 DF:- FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
LEGEND:
0-7 -> RAM banks 0-7, an '*' means read only.
A-H -> ROM banks 0-7, should have an '*', otherwise it is writable (!)
- -> no cart detected
? -> mapping mismatch (e.g $de not mapped to $9e and similar) |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Need help dumping on RR and 1541U2. If you feel you can spare the time, please send me a PM for instructions.
Here's a dump from hoxs v1.0.8.7:
analyzing file: dumps/dump_hoxs64_v1087.prg
program: RR-FREEZE R05, format: 0
<RESET>
--- RST ---
detected initial state:
9E:A* BE:- DE:- DF:A* FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
$40 -> $DE01 (REU-Comp=1, NoFreeze=0, AllowBank=0)
--- CNFD ---
detected initial state:
9E:A* BE:- DE:A* DF:- FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
$88 -> $DE00 ("random" mapping, bank 5 in ROM)
$8C -> $DE00 (kill)
<FREEZE>
--- FRZ ---
detected initial state:
9E:A* BE:- DE:A* DF:- FE:A*
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
$60 -> $DE00 (ACK)
$20 -> $DE00
--- ACKD ---
detected initial state:
9E:0 BE:- DE:0 DF:- FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: A* B* C* D* E* F* G* H* A* B* C* D* E* F* G* H*
-------------
LEGEND:
0-7 -> RAM banks 0-7, an '*' means read only.
A-H -> ROM banks 0-7, should have an '*', otherwise it is writable (!)
- -> no cart detected
? -> mapping mismatch (e.g $de not mapped to $9e and similar) |
| |
tlr
Registered: Sep 2003
Posts: 1790 |
Impetigo kindly contributed data from his Retro Replay cartridge, which gives some rather interesting discrepancies.
For instance, this passage from Jens' document doesn't seem to hold up:Freeze:
ROM is mapped to $e000-$ffff, bank 0 is active directly after Freeze. Writing
to bits 0 and 1 of the $de00 register will have no effect on GAME and EXROM.
RAM can be selected and used in $df00 or $de02, respectively, but not in
$8000. Banking bits work, so you have full read access to the ROM, and access
to up to four RAM pages with the AllowBank bit set (minus 2 bytes if REU
compatible bit is set). You should leave this memory map ASAP by setting bit
6 of $de00, because C-64 RAM in the $e000 area is not available, and you
don't have control of the GAME and EXROM lines.
Also note the strange banking behaviour of the kernal area in ultimax mode with the ram bit set.
analyzing file: dumps/dump_rr_40_impetigo.prg
program: RR-FREEZE R05, format: 0
<RESET>
--- RST ---
detected initial state:
9E:A* BE:- DE:- DF:A* FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* - - - - - - - -
BE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: 0 0 0 0 0 0 0 0 - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
-------------
$40 -> $DE01 (REU-Comp=1, NoFreeze=0, AllowBank=0)
--- CNFD ---
detected initial state:
9E:A* BE:- DE:A* DF:- FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* - - - - - - - -
BE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
DE: 0 0 0 0 0 0 0 0 - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
-------------
$88 -> $DE00 ("random" mapping, bank 5 in ROM)
$8C -> $DE00 (kill)
<FREEZE>
--- FRZ ---
detected initial state:
9E:- BE:- DE:- DF:- FE:A*
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: - - - - - - - - - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
-------------
$60 -> $DE00 (ACK)
$20 -> $DE00
--- ACKD ---
detected initial state:
9E:0* BE:- DE:0 DF:- FE:-
scan of all banks/modes:
x01xx000 -> $DE00 (RAM) x00xx000 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx001 -> $DE00 (RAM) x00xx001 -> $DE00 (ROM)
9E: 0* 1* 2* 3* 0* 1* 2* 3* - - - - - - - -
BE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
DE: 0 0 0 0 0 0 0 0 - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx010 -> $DE00 (RAM) x00xx010 -> $DE00 (ROM)
9E: - - - - - - - - - - - - - - - -
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 A* B* C* D* E* F* G* H*
DF: - - - - - - - - - - - - - - - -
FE: - - - - - - - - - - - - - - - -
x01xx011 -> $DE00 (RAM) x00xx011 -> $DE00 (ROM)
9E: 0 1 2 3 0 1 2 3 A* B* C* D* E* F* G* H*
BE: - - - - - - - - - - - - - - - -
DE: 0 0 0 0 0 0 0 0 - - - - - - - -
DF: - - - - - - - - - - - - - - - -
FE: A* A* A* A* E* E* E* E* A* B* C* D* E* F* G* H*
-------------
LEGEND:
0-7 -> RAM banks 0-7, an '*' means read only.
A-H -> ROM banks 0-7, should have an '*', otherwise it is writable (!)
- -> no cart detected
? -> mapping mismatch (e.g $de not mapped to $9e and similar) |
