blog.jmp.no

Electronics, coding and hacking. And ADD.

Cool NES, baby! »

Dumping the Coolbaby console flash

2017
9
November

You may remember that in my last post I said I was interested in the NOR flashrom inside the Coolbaby NES game console. Well, I've been obsessing with it lately, so let me review the progress from the past two weeks.

My original idea was to read the IC in situ, I soldered up a ton of breakout pins and was able to dump the contents while the system was running.


Unfortunately, the CPU made it difficult to read the flash rom while the system was powered off. Probably some pull-downs or whatever that caused problems for me, so I removed everything and started from scratch. I even tested the console one last time to make sure everyting was working before I started ripping it apart.


I bought a TSOP56-to-dip adapter, and decided it was time to desolder the flash rom to dump it. I tried to protect most of the board with kapton tape and aluminium foil, and fired up the hot air station.


It went surprisingly well, and a few minutes later the chip was cleaned up and secured in the ZIF TSOP56 adapter.


I decided to use a STM32F4 Discovery board for reading the data. It has lots of nice I/O pins, it's fast, it has native USB and much more.

So, here it is all wired up - not pretty but it works. My apologies if you have OCD and like colour coded wires, I just used what was at hand.


The next step was to write a UART-over-USB for the ARM processor. Then, interface the pins to the flash rom and try to implement the protocol for reading the contents. Once that's in place, I wrote a client on the PC side that receives the data and saves it as a binary file.

Yada yada yada, long story short: success! I present to you a sample from the file. Here you can see part of the adventures games lists:


Next up is figuring out how the games are arranged and how the menus work.

Stay tuned.


Share:

to Dumping the Coolbaby console flash

Feed for this Entry

9 Comments

  • I'm following up to see if you're able to flash the roms! Really interesting!
    Thanks for this

    #1093 | Comment by Xavier on Dec 13, 2017 03:47pm
  • Xavier: I'm reading and writing the flash memory now, and a "hack pcb" is in the works. What's stopping me right now is the fact that I haven't had the time to reverse-engineer the menu system yet. But I'll get to it.

  • Very interesting project. I had a coolbaby as well.Hope you can reflash the ROM into something more interesting!

    #1097 | Comment by XH Chok on Dec 24, 2017 04:22pm
  • I got the HDMI version for christmas and immediately started googling around for hacks so I can add some more of the classics to the game list and found this blog. Can't wait to see how this works out for you! Keep us posted! :)

    #1098 | Comment by MissDeliana on Dec 26, 2017 01:53pm
  • So we're you able to get anywhere?

    #1104 | Comment by Eric on Apr 3, 2018 10:35pm
  • Any joy? keen to add some other games and remove some so the kids don't get lost in the list so much. Thanks

    #1108 | Comment by Fred on Apr 19, 2018 10:02am
  • Great work Xavier, I'm just posting up a comment so I get notifications of your progress, very cool project, perhaps the hack pcb could include a ribbon cable header for a 72 or 60 pin cartridge slot.. perhaps further down the line, just being able to reflash the rom chip with all my favourites and removing the crap would be excellent, keep up the good work! :-)

    #1112 | Comment by Pat on May 12, 2018 08:36am
  • Sorry, got mixed up with the first comment(thought your name was Xavier).

    Also, I only just noticed something rather interesting..

    I wasn't paying a great deal of attention to the pictures and assumed you had the hdmi one and noticed in the picture of hex code the game "bucky o'hare", as far as I have been and to find, this game is only available on the HD version.. Can you confirm if it's on the game list on the packaging or menu.

    If not then perhaps the composite and HD versions both have the same flash dump and there is simply just a jumper(or pin connected to ground) that the firmware checks in order to which list of games to display on the menu..

    I know it may be a stretch and you ordered yours in October/November so it may have just simply been the first model with a different list of games..

    #1113 | Comment by Pat on May 12, 2018 09:13am
  • nice job!! fingers crossed for future progress:)

    #1115 | Comment by marcindh on May 24, 2018 05:17pm

About You

Email address is not published

Add to the Discussion

Add to Google