NeoGeoX Hacking and Mods

mr_e

Tarma's Gun Polisher
Joined
Sep 24, 2012
Posts
108
i did this with 2 different cards a 4 gig and an 8 gig and the system didn't boot. i can browse the files fine on my pc but no go on the ngx. Maybe its because they are hc cards? the only none hc cards i have are only 1 gig.

Shit. I dont know anything about the different card types. SD card guru I am not. But if they are a different style than the stock one that is in there, it sounds like a solid possibility to me. dd images are block level copies of the disk, you'd think it would work.

Can we modify files on the stock sd internal filesystem and still have it boot? I'd like to add the following line to the /etc/inittab
Code:
tty3::respawn:/sbin/getty -8 38400 tty3

boot it in the dock with a keyboard on it, then do "ctrl-alt-f3". With any luck, that will pop a shell.
 
Last edited:

kyosuke75

Mr. Big's Thug
Joined
May 7, 2002
Posts
196
just picked up one at gamespot, the guy thought i was weird for getting it. i have firmware 370. im happy with it.

Yeah seriously, when i picked up at gamestop they were like wtf is this neo geo thing? Of course this is coming from a 19 year old female gamestop employee so I doubted she was alive when this thing came out.
 

cabear

n00b
Joined
Oct 26, 2009
Posts
37
the guy behind the counter said "oh yeah snk like the kings of fighters" i just smiled but in my head all i could think of was "i'm buying this for magician lord..."
 

hatch

n00b
Joined
Feb 8, 2002
Posts
15
Can we modify files on the stock sd internal filesystem and still have it boot? I'd like to add the following line to the /etc/inittab
Code:
tty3::respawn:/sbin/getty -8 38400 tty3

Hello,

Yes, we can. I spent a few hours tinkering with the SD cards partitions and files yesterday, especially the bin and dge files in the /local/snk-desktop folder on the first ext3 partition (did anyone notice the leftovers from the factory test there, e.g. the images used to test the display? ;) ). I will try to bring up a shell this evening, when I am home again.

Also, mind that most files, e.g. in the config folder, have a second file associated containing a MD5 checksum - e.g. snk.conf and snk.md5 in /local/snk-desktop/config. If you alter a config file without updating the MD5 in it's counterpart, the system won't boot. Just do "md5sum filename.cfg" and edit the MD5 file to fix that, though.

Btw, it seems that I messed up one of the files invoking FBA when selecting a game; I can get my unit boot to the SNK desktop, but once I select a game, it just crashes and exits again. Would anyone be so kind as to send me an archive with the files from /local/snk-desktop (and its subfolders) so I can do a file comparison to fix that?

Cheers from Vienna, Austria.

Martin
 
Joined
Nov 10, 2012
Posts
30
Btw, it seems that I messed up one of the files invoking FBA when selecting a game; I can get my unit boot to the SNK desktop, but once I select a game, it just crashes and exits again. Would anyone be so kind as to send me an archive with the files from /local/snk-desktop (and its subfolders) so I can do a file comparison to fix that?

Cheers from Vienna, Austria.

Martin

If I remember correctly the actual emulator is Ngu.dge or named something similar in the /local/snk_destop folder.

I removed it once and had the same issues you are explaining. You propably just have replace that file.
 

nerdstick

Crossed Swords Squire
Joined
Oct 1, 2012
Posts
183
If I remember correctly the actual emulator is Ngu.dge or named something similar in the /local/snk_destop folder.

I removed it once and had the same issues you are explaining. You propably just have replace that file.

Are all of the Dingoo emulators .dge? Wonder if swapping the roms for another system would work if you swapped the emulator as well.
 
Joined
Nov 10, 2012
Posts
30
Are all of the Dingoo emulators .dge? Wonder if swapping the roms for another system would work if you swapped the emulator as well.

Yes they are. I haven't tried swapping the emulator with another emu. In theory it should work. Even if the original emu has a md5 associated with it you could always change that. I did get a cp2 rom to run on the original emu but it didn't have video and the sound was really distorted.

My problem is I don't have a lot of time to tinker with this thing. I'm lucky if I get an hour a day so I'm just providing what I can when I can.
 

Rot

Calvin & Hobbes, ,
Joined
Jul 8, 2003
Posts
11,441
I have NO fuckin idea what's going on in here... all i can say is that at least there's no rom posting...

...haxxoring is OK.... some of my best friends here have managed to fook up their NG X to try and be the first to get it working properly... I'm impressed by the dedication and stuffs...

...Keep it up...

xROTx

PS. Is it me... or is there an large proportion of people i don't fookin know posting in this thread? It's like the n00bsville Twilight zone in here....
 

topher

Tesse's Maintainence Man
Joined
May 8, 2004
Posts
2,904
For those that have pulled their units apart, is there enough room in the unit to replace the thumbstick with one from a NGPC?
 

Rot

Calvin & Hobbes, ,
Joined
Jul 8, 2003
Posts
11,441
"... ..."

That was the sort of crappy post i'd expect from a longtime member called kernow...

ie. Makes no sense and I feel it's just trying to add to your post count...

...i'd advise you not to do it again...

xROTx
 

topher

Tesse's Maintainence Man
Joined
May 8, 2004
Posts
2,904
For those that have pulled their units apart, is there enough room in the unit to replace the thumbstick with one from a NGPC?

So this post won't get lost in the coming drama, I'm quoting myself.

Hopefully this thread isn't about to get derailed....
 

Rot

Calvin & Hobbes, ,
Joined
Jul 8, 2003
Posts
11,441
So this post won't get lost in the coming drama, I'm quoting myself.

Hopefully this thread isn't about to get derailed....

Here's the new plan Topher pal...

...I'll keep my eye on this thread... and will make sure it stays on topic.... i will also fuck anyone who upsets me with random posts that mean jack shit.... like that fuckin n00b http://www.neo-geo.com/forums/member.php?40875-xan_NEOGEO_fan....

Next time he posts something dumb... he's on a vacation....

xROTx
 

topher

Tesse's Maintainence Man
Joined
May 8, 2004
Posts
2,904
Here's the new plan Topher pal...

...I'll keep my eye on this thread... and will make sure it stays on topic.... i will also fuck anyone who upsets me with random posts that mean jack shit.... like that fuckin n00b http://www.neo-geo.com/forums/member.php?40875-xan_NEOGEO_fan....

Next time he posts something dumb... he's on a vacation....

xROTx

LOL, no problem. I have a feeling that since this thread seems to be linked all over the net in every story about hacking the X that the silly posts are going to increase all throughout the forum as we get more new members...


And for what it's worth, after actually looking at my NGPC and the X, my idea was dumb...
 
Last edited:
Joined
Mar 12, 2012
Posts
46
But I am on vacation... It's not like I post links to roms... besides, if we're gauging a member's post count and join date as a level of n00bness, that's silly...
 

Rot

Calvin & Hobbes, ,
Joined
Jul 8, 2003
Posts
11,441
But I am on vacation... It's not like I post links to roms... besides, if we're gauging a member's post count and join date as a level of n00bness, that's silly...

I'm not gauging you on your post count... on your join date etc etc.....i'm not that sort of mod... ask around...

I'm gauging you on your contribution to this site...

The post you replied after mine said you didn't think about who you were replying too... or what... this is a thread about learning about a new system...

i don't care if you didn't post roms on here... i care that you posted a comment that didn't belong...

I won't derail this thread... but if you post again.. better make sure it truly adds to the current thread... i'm not in the mood to play ball... and you won't be missed...

Last warning...

xROTx
 

Ukyo

,
20 Year Member
Joined
Aug 25, 2000
Posts
1,063
hey, if I open this thing up, is it easy to get between the outer glass and the screen itself?

there is a piece of dust on the inside of the unit that is driving me fucking crazy...
 

ack

Ninja Combat Warrior
15 Year Member
Joined
Apr 9, 2009
Posts
538
Hi

Finally got a microsd card reader/writer this afternoon and was able to poke the device and to get some more info. My test microsd is a 16G SDHC card with the stock image dd'd to it. I still working on direct access into the device, the following output is from running scripts and redirecting the output to the 1g fat partition.

Here is the dmesg output with nothing hooked up.
Code:
Linux version 2.6.31.3-g0ddfdb5-dirty (ugame_hhx@ugame-desktop) (gcc version 4.3.3 (GCC) ) #275 Mon Nov 19 09:51:24 CST 2012
Jz47XX Floating coprocessor work on 32*32bit mode
console [early0] enabled
CPU revision is: 2ed1024f (Ingenic JZRISC)
FPU revision is: 00330000
CPU clock: 1020MHz, System clock: 128MHz, Peripheral clock: 128MHz, Memory clock: 128MHz
JZ4770 F4770 board setup
Power Management for JZ
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
User-defined physical RAM map:
 memory: 10000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00010000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00010000
On node 0 totalpages: 65536
free_area_init_node: node 0, pgdat 804425d0, node_mem_map 81000000
  Normal zone: 512 pages used for memmap
  Normal zone: 0 pages reserved
  Normal zone: 65024 pages, LIFO batch:15
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 65024
Kernel command line: mem=256M console=ttyS2,57600n8 ip=off root=/dev/mmcblk0p1 ro
PID hash table entries: 1024 (order: 10, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Primary instruction cache 16kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 32 bytes
Memory: 254916k/262144k available (2954k kernel code, 6864k reserved, 1348k data, 152k init, 0k highmem)
SLUB: Genslabs=7, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:384
Console: colour dummy device 80x25
console handover: boot [early0] -> real [ttyS2]
Calibrating delay loop... 814.28 BogoMIPS (lpj=4071424)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
jz_platform_init
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
jz_i2c0 jz_i2c0.0: JZ4760 i2c bus driver.
jz_i2c1 jz_i2c1.1: JZ4760 i2c bus driver.
jz_i2c2 jz_i2c2.5: JZ4760 i2c bus driver.
i2c-gpio i2c-gpio.3: using pins 101 (SDA) and 100 (SCL)
act8600_power:
4               84              1
5               49              1
6               57              0
7               57              1
8               36              1
===>start MSC0 clock
mmc0: No card detect facilities available
mmc0: new high speed SDHC card at address 1234
JZ mmc0 driver registered
===>start MSC1 clock!
===>REG_CPM_CLKGR0 = 0x2fddb780
JZ mmc1 driver registered
musb_hdrc: version 6.0, musb-dma, otg (peripheral+host), debug=0
jz4760: Normal mode.
musb_hdrc musb_hdrc.0: DMA IRQ: Shared. DMA Channels: 6.
jz4760: Disable USB PHY.
musb_hdrc: ConfigData=0x12 (UTMI-8, HB-ISO Rx, SoftConn)
musb_hdrc: MHDRC RTL version 2.0 
jz_vbus_hotplug: Registered.
musb_hdrc musb_hdrc.0: USB OTG mode controller at b3440000 using DMA, IRQ 21
NET: Registered protocol family 1
cable state is OFFLINE
msgmni has been set to 498
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler cfq registered (default)
Medive printk:  create proc :  it6610_me!
LCDC: PixClock:12000000
REG_CPM_LPCDR=0x20000023
LCDC: PixClock:12000000
REG_CPM_LPCDR=0x20000023
test kernel argv from uboot start!
JZ4770: Char device core registered.
JZ4770: Virtual Driver of TCSM registered.
init rda5807p 
++++++++++++ HP OUT +++++++++++++
REG_CPM_GPUCDR= 0x00000002
GPU CLOCK USE PLL0
GPU GPU_CLK2x= 340 MHz
Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
serial8250: ttyS2 at MMIO 0x0 (irq = 3) is a 16550A
loop: module loaded
efuse check OK!
register misc device efuse successed.
jz4770_mii_bus: probed
eth%d: Don't found any phy device at all
jz4770_mac jz4770_mac.0: MII Probe failed!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
usbmon: debugfs is not available
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
drivers/usb/host/ohci-jz.c: starting JZ OHCI USB Controller
drivers/usb/host/ohci-jz.c: Clock to USB host has been enabled 
jz-ohci jz-ohci.0: JZ OHCI
jz-ohci jz-ohci.0: new USB bus registered, assigned bus number 1
jz-ohci jz-ohci.0: irq 20, io mem 0x13430000
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
g_file_storage gadget: File-backed Storage Gadget, version: 20 November 2008
g_file_storage gadget: Number of LUNs=1
jz4760: Disable USB PHY.
musb_hdrc musb_hdrc.0: MUSB HDRC host driver
musb_hdrc musb_hdrc.0: new USB bus registered, assigned bus number 2
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
jz4760: Enable USB PHY.
jz-gpio-keys: scan interval 20ms
input: JZ GPIO keys as /class/input/input0
input: touchscreen as /class/input/input1
input: JZ Touch Screen registered.
Create vbat proc entry.
WARNING: can NOT get clock 4119!
jz4770-rtc jz4770-rtc: rtc core: registered jz4770-rtc as rtc0
mmcblk0: mmc0:1234 SA16G 14.6 GiB 
 mmcblk0: p1 p2 p3 p4
usbcore: registered new interface driver usbhid
usbhid: v2.6:USB HID core driver
register codec 802adf58
===>enter init_jz_i2s
musb_stage0_irq 759: unhandled DISCONNECT transition (UNDEFINED)
 drivers/video/jz4760_lcd.c 3103 avout_ack_timer 1
hdmi out
JZ I2S OSS audio driver initialized
NET: Registered protocol family 17
jz4770-rtc jz4770-rtc: setting system clock to 2010-11-01 09:55:25 UTC (1288605325)
kjournald starting.  Commit interval 5 seconds
EXT3-fs: mounted filesystem with writeback data mode.
VFS: Mounted root (ext3 filesystem) readonly on device 179:1.
Freeing unused kernel memory: 152k freed
Warning: unable to open an initial console.
kjournald starting.  Commit interval 5 seconds
EXT3-fs: mounted filesystem with writeback data mode.

Here is what shows up in dmesg when you insert ninja masters sd card
Code:
key_open
Card Insert
Card Eject
Card Insert
mmc1: new high speed SD card at address 0001
mmcblk1: mmc1:0001  63.0 MiB 
 mmcblk1: p1
mmcblk1: p1 size 129145 exceeds device capacity, limited to end of disk

The card gets mounted here and contains the following files
Code:
/dev/mmcblk1p1           64544     43856     20688  68% /mnt/mmc

/mnt/mmc
/mnt/mmc/card_game
/mnt/mmc/card_game/game1.png
/mnt/mmc/card_game/game1.fba
/mnt/mmc/card_game/game_card_configure.conf

drwxr-xr-x 2 root root     4096 Nov  1  2010 .
drwxr-xr-x 3 root root     4096 Nov  1  2010 ..
-rwxr-xr-x 1 root root 44770560 Nov  1  2010 game1.fba
-rwxr-xr-x 1 root root    87272 Nov  1  2010 game1.png
-rwxr-xr-x 1 root root       61 Nov  1  2010 game_card_configure.conf

$ cat game_card_configure.conf 
card_game_work_path=/mnt/mmc/card_game/
card_game_number=1

When you put in a normal sd card dmesg has the following output
Code:
key_open
Card Insert
mmc1: new SDHC card at address b368
mmcblk1: mmc1:b368 SD    14.8 GiB 
 mmcblk1:
mmcblk1: retrying using single block read
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 0
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 1
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 2
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 3
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 4
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 5
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 6
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 7
Buffer I/O error on device mmcblk1, logical block 0
mmcblk1: retrying using single block read
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 0
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 1
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 2
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 3
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 4
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 5
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 6
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 7
Buffer I/O error on device mmcblk1, logical block 0
 unable to read partition table
mmcblk1: error -145 sending read/write command, response 0x0, card status 0x400b00
end_request: I/O error, dev mmcblk1, sector 0
FAT: unable to read boot sector

So it would seem there maybe sometype of decryption going on in the kernel. But since linux is gpl someone could probably nag them for the source code ;)

dmesg from inserting one of the joysticks and a keyboard into the dock
Code:
usb 2-1.1: new low speed USB device using musb_hdrc and address 3
usb 2-1.1: device v1292 p4e47 is not supported
usb 2-1.1: configuration #1 chosen from 1 choice
input: TOMMO NEOGEOX Arcade Stick as /class/input/input2
generic-usb 0003:1292:4E47.0001: input: USB HID v1.00 Gamepad [TOMMO NEOGEOX Arcade Stick] on usb-musb_hdrc.0-1.1/input0

usb 2-1.1: USB disconnect, address 3
usb 2-1.1: new low speed USB device using musb_hdrc and address 4
usb 2-1.1: device v413c p2003 is not supported
usb 2-1.1: configuration #1 chosen from 1 choice
input: Dell Dell USB Keyboard as /class/input/input3
generic-usb 0003:413C:2003.0002: input: USB HID v1.10 Keyboard [Dell Dell USB Keyboard] on usb-musb_hdrc.0-1.1/input0

-ack
 

FA-MAS

Kula's Candy
Joined
Oct 3, 2009
Posts
299
So it would seem there maybe sometype of decryption going on in the kernel. But since linux is gpl someone could probably nag them for the source code ;)

I doubt they'd give up the source. But since the Neo Geo X is able to access these cards, how about making it make the dumps/modifications itself?

Ack, think you'd be able to make it get us a full dd of the Ninja Masters? Methinks the previous didn't contain the boot sector/partition table.
 
Last edited:

Iroshi*Nagasaki

Kabuki Klasher
Joined
Mar 20, 2004
Posts
125
I've been following this thread closely and I have to say "great job" to all who have and continue to contribute to the effort of hacking the neo x. I would like to ask if all the work thats being done is being done on all versions of the neo x or only the 3.37?
 

topher

Tesse's Maintainence Man
Joined
May 8, 2004
Posts
2,904
http://neogeox.grafbb.com/t213-convertx-rom

Anybody care to post translation/ cliff note? I know what it does, just don't know if roms have to be same size or smaller then ones being replaced, are we still limited to 20, etc, etc...

I wish the video showed them getting loaded onto the X and launched...
 

nerdstick

Crossed Swords Squire
Joined
Oct 1, 2012
Posts
183
http://neogeox.grafbb.com/t213-convertx-rom

Anybody care to post translation/ cliff note? I know what it does, just don't know if roms have to be same size or smaller then ones being replaced, are we still limited to 20, etc, etc...

I wish the video showed them getting loaded onto the X and launched...

You're still limited to 20, the romlist is located in binary. I'm guessing all this is is a GUI version of the A380 tool.
 

topher

Tesse's Maintainence Man
Joined
May 8, 2004
Posts
2,904
What is the OS requirements for the program? Looks like Linux or OSX. If that's the case, I'm hosed till I upgrade some home computers...I'm still running 10.4 on the Mac and haven't had a Linux box since RedHat had their IPO and Loki was still alive...last distro I used was the commercial ver of Suse around that same time frame...ah, the memories and the frustrations...
 
Top