hobune Channels Contact About Donate

Hacking the Game Boy cartridge protection

Back to video page | Download comments jsonl

Comments (archived 2022-07-01 16:22; 307 top, 422 total comments)

Modern Vintage Gamer 2020-03-28 19:30:51

amazing work and great video !

535 likes
Replies (7)
visaa78 2020-05-21 00:33:18

I was wondering why youtube would recommand me this channel but it is because of you !

7 likes
Alex Jones 2020-10-19 21:46:48

Thanks for crediting Stack Smashing in your recent video on the GB's bootloader, MVG - another cool hardware channel to add to my subs! :)

6 likes
Ryan Graham 2020-11-15 16:18:10 (edited 2020-11-15 16:18:26 )

Stacksmashing, mvg, and live overflow. The gang is all here

0 likes
Jared Connell 2020-11-30 04:54:18

I always get a kick out of seeing that my favorite YouTube channels watch each other lol

2 likes
Kylo Rage 2021-02-10 17:32:06

Couldn't agree more!!

0 likes
Ultra gamer shorts 2021-06-26 08:50:07

Hi

0 likes
Chun-Li 春麗 2021-11-24 18:31:04

yoooo

0 likes
Roberto Borgen 2021-02-05 15:19:03

I actually wondered back then, why they didn't develop that bootup logo with variations or animation from the game or "presented by Pepsi cola" etc

25 likes
Replies (1)
Super Smash Dolls 2021-02-07 05:39:05

You can technically animate the screen by not clearing VRAM and instead doing something else with the screen the moment the BIOS gives control. Several demos do this. However, this was most likely prohibited by Nintendo's cert requirements; they probably wouldn't want someone doing this with their trademarks.

2 likes
etansivad 2020-05-08 04:06:07

This is wonderful. Thank you for posting it.
I'm really stunned with how far FPGA boards have progressed. I hope you release the GB cartridge soon! My son has been fascinated since I showed him how we can use my oscilloscope to sniff the datalines of the SNES controller bus in real time. This led into a discussion of different pin types and how we could sniff other types and how you might glitch them. This is perfect because I can setup a bread board to branch off from my Super Game boy.

6 likes
Alexander Borsi 2020-04-08 17:10:32

Gotta love it when you can't wait for a PCB to arrive, so you just go and make one... And then design the PCB anyway, and release it for others! Nice!

52 likes
yo what 2020-04-15 16:50:49

That was a clever way of copy protection! Really interesting video, well done!

4 likes
La Flama Blanca 2020-03-28 22:43:30

I would happily watch a few ads to help encourage you to make more videos of this type. Your skills are insane 👍

12 likes
Espen Skog 2021-02-06 16:22:20

You presented this very well and kept it simple, tidy and interesting. Great job :)

0 likes
traida111 2021-05-15 17:32:57

every video i watch just blows my mind. its like decades of thinking 'what if', what if i got into this stuff and was good at it, what would it look like...? your videos are like painting the experience to my imagionation. Very satisfying. To see all this stuff is just incredible. I notice all the places I would have probably got stuck (so many times) and it just blows my mind. not to mentioned the quality of your editing. you are epic bro

0 likes
Eugene Jenkins 2020-11-17 16:06:10

You are just amazing... You make it so much easier to understand how games and their consoles work together. Ive always had an interest in programming and hacking and with your knowledge and great explanations I'm able to move forward with my own projects.. Thanks and awsome videos.

0 likes
TQ255 2020-04-10 08:58:19

Incredible, never knew they already made this technique inside the gameboy

4 likes
TheCarpenterUnion 2021-06-23 05:07:29

Remarkably simple. This is an excellent entry point for anyone looking to get into hardware hacking. Great video! 👍

0 likes
thevideoman12 2021-02-11 18:59:03

i dreamt about doing things like this since when i was a kid. this fueld my interest and carrer significantly. thanks, gameboy.

2 likes
Joan 2020-04-16 02:46:23

This is very awesome, would love to see something similar for the game boy advance

4 likes
billigerfusel 2020-03-28 21:48:50

Wow, that's really easy to extract a cartridge rom. Thought it would be more difficult than just a parallel read after seeing the Snes protection.

3 likes
Nutrition Facts 2020-03-28 19:05:56

I am looking forward to more beginner Ghidra tutorials from you on your channel, they are very helpful!

1 like
PASTRAMIKick 2020-04-16 02:38:57

They could've multiplexed the first 8 Address lines to behave as Data Lines sometimes, you'd only need an 8-bit latch to hold the address before a data read or write. That's how the old 8086 CPU worked, still a pretty cool workaround to having 8 extra pins.

5 likes
Replies (2)
SerBallister 2021-02-06 06:50:40 (edited 2021-02-06 06:51:12 )

I think the GBA did something like that. If I remember speaking to an engineer doing it at the time, he said the bus can auto-increment addresses too so you're not clocking in a new address every fetch.

0 likes
David Thacher 2021-05-14 01:58:02

You can multiplex all of them. Few different approaches exist here. They can also may write through section of map which controls address window.

0 likes
Tim Seguine 2020-04-27 21:15:46

I always wondered why the logo was blank if you didn't insert a cartridge.

10 likes
Hey It's Andrew 2021-02-07 00:36:21

Quickly becoming one of my favorite youtube channels. This guy is going places!

0 likes
InsaneFirebat 2020-04-06 08:51:32

Clever license protection, for its time.

128 likes
Replies (11)
Namuh 2020-04-07 23:06:29

aw man you profilepic is freakin cool
almost want to steal but that would be uncool

2 likes
InsaneFirebat 2020-04-07 23:23:09

It's from the Super NES game, Super Metroid. It IS the Super Metroid. So I don't own it either :)

3 likes
Namuh 2020-04-09 04:14:20

@InsaneFirebat yeah yeah I know. But still It's not cool if theres more than 1 with that pic.

2 likes
KuraIthys 2020-04-10 09:37:59

It sounds clever.
But Sega tried more or less the same thing, it got to court, and was ruled unenforceable.
The legal judgement was something to the effect that because you HAD to include this trademarked logo to get any software running, you had no choice in the matter, and thus couldn't be prosecuted for it...


These kind of things seem pretty clever, but they rarely seem to work in the company's favour in court, because courts seem to favour allowing people to write their own software for a given hardware platform over protecting the platform owner...

17 likes
George Hafiz 2020-04-11 20:51:23

@InsaneFirebat It's grown up Baby Metroid!

0 likes
Elliott Savva 2020-04-15 22:44:23

The Mega Drive did it a year earlier.

0 likes
Elliott Savva 2020-04-15 22:48:18

@KuraIthys I recognise your name. I think I had a conversation or argument or something with you a couple of years ago maybe on a GameHut video relating to the Mega Drive and/or the Amiga?

0 likes
Mr yasab 2020-05-22 18:19:54

@George Hafiz hello

0 likes
Silica 🏳️‍⚧️ 2020-10-25 19:52:26

Does absolutely nothing to stop 'copying' though haha

0 likes
JWG . LLC 2021-06-13 12:02:11

Sega sued Accolade for that exact thing and lost the Cort case. If the system requires the logo to be displayed. Then there is no copyright infringement

accolade vs sega "Accolade's acts of reverse engineering Sega Genesis software to learn about its security systems and subsequent publishing of unlicensed Sega Genesis games are protected under the fair use doctrine of copyright law. Sega is held responsible for using its security system to place its trademark on Accolade's games."

0 likes
Charles Johnson 2021-07-28 00:45:23

It still holds up compared to drm

0 likes
XTJ7 2020-04-12 12:41:58

That was very informative and a good presentation. Well done!

2 likes
Alix'x WorkShop 2021-02-08 12:09:44

This guy has some serious engineer skills... I'm amazed!!!

1 like
Shahar Nacht 2020-04-08 16:01:42

This is genius!
It's basically a devkit for the gameboy created from scratch?

9 likes
Lele 2020-04-10 13:22:56

Sehr interessantes und informatives Video! Super cool wie solche Technik früher funktioniert hat

3 likes
shazmosushi 2020-12-01 09:58:24

Good channel, with great content. Keep up the great work.

0 likes
Hagen P 2021-04-11 20:15:59

Nice work. You could simplify the FPGA code slightly by just replacing the logo address range during the first read, and otherwise just always return the original ROM data. After all, the ROM already contains the correct logo.

0 likes
Androxilogin 2020-04-09 10:03:56

That is pretty in-depth and awesome information. Great video!

1 like
Undefined NaN 2021-02-04 01:24:39

Just a note: you accidentally put reg [7:0] rom[0:32768] instead of reg [7:0] rom[0:32767], which could result in using an extra block ram

0 likes
AverageAggie 2021-02-11 15:20:59

A project I may work on once I finish my senior design, would be to make a similar cartridge but build an FPGA onto it... may be a fun way to mess around with verilog and some game boy stuff.

0 likes
Master Bates 2020-03-29 05:43:46

Collaboration between two wonderful engineering channels, amazing. Shove a CodeBullet or CodeParade in there too!

3 likes
Nicola Selenu 2020-03-30 00:09:52

amazing job! thanks for sharing your findings <3

1 like
Shahriar Eftekhari 2020-03-29 01:31:19

Very nice video. Thanks for that. May I ask which tool you use to make those animations? like when the numbers fit in the logo or the flowchart drawing?

1 like
Replies (1)
stacksmashing 2020-03-29 10:20:07

Thank you! I’m using Keynote for the animations!

1 like
villahed94 2020-12-06 05:39:05

Analyzing the video, I came up with another idea that would have been possible with technology of the day.
Since you mentioned the presence of a 1mhz clock signal, you could power a very small microcontroller that could just count cycles and since the boot process always takes the same amount of time , swap the hacked logo bank and the original one based on said counter.
And it could be a very small additional ROM just mapped to the address.

0 likes
0906WEST 2020-04-16 20:55:17

Great content man. Keep it up! 👍🏻

1 like
Da Meck 2021-05-16 05:26:32

Is think Nintendo's approach to lock the nintendo was actually pretty smart.
They still kept the private flashing of cards possible, but could prohibit the commercial use of it

0 likes
Carl Friedrich Gauss 2020-03-29 14:03:18

Excellent content as usual!

1 like
HyperHunt621 2020-11-15 17:32:02

I’ll be completely honest. I have no idea what any of this really means, but I’m just fascinated by the technical jargon and seeing how things work, and you actually have a pretty chill voice, too, so I’ve subscribed. ^_^

1 like
rasputunga 2022-01-13 07:32:34

Some days ago I bought the gamboy cartrdige breakout port and I want to build something similar to this. I am a newbie with this kind of projects and I have a doubt about the forwarder: do you synchronize in some shape or form the FPGA clock and GB one?

Thanks for these amazing videos!

0 likes
Mathias De Weerdt 2020-05-23 10:39:17

Could you make a video on how you made such a cardridge, seems interesting :)

0 likes
soggytoast111 2020-09-09 13:11:20 (edited 2020-09-09 13:12:00 )

Is this something that would have been feasible with 1990s hardware? I would imagine that it would be a lot harder to set a conditional on first read/second read of the logo at the time. Any ideas on how that might have been accomplished?

0 likes
Somehow Sane 2020-03-28 20:30:27

That is really interesting. I always enjoy learning new things about old tech!

7 likes
Replies (1)
Greenleaf Financial 2020-03-30 11:02:07

Also when Ghidra ninja teaches us.

0 likes
Steven Honeyman 2020-04-06 13:22:39

The breakout PCB looks useful, looking forward to the gerbers being released :)

2 likes
Replies (1)
優さん 2020-04-07 21:16:57

With coronavirus floating around, you really want more things to be released into the public?

1 like
Elliott Savva 2020-04-15 22:51:06

So the cartridge "protection" works just like in the Mega Drive? Interesting video by the way!

3 likes
Elias X 2021-02-18 16:08:34 (edited 2021-02-18 16:09:49 )

Very clever hybrid technical/juridical protection. The only mistake programmers made, defeated all - they shouldn't read the logo twice.

0 likes
Mistah MegaManFan 2021-01-25 04:30:11

@ModernVintageGamer has a LOT of great videos on things. Watching his channel is undoubtedly why I was recommended yours (and subbed)

0 likes
David Gonçalves Álvarez 2022-05-20 12:52:59

Nintendo loves trademark violations so much that they implemented a protection based around that. Epic.

0 likes
Christian Olmeda 2020-11-16 22:24:26

I'm really into all this stuff. If I wanted to learn about this kind of hacking to do as a hobby what kind of information should I study or read?

0 likes
MilMike 2020-04-06 20:18:53

oh I remember my first gameboy... best day in my life as a kid. Played tetris all day long. Interesting to see how the protection works

1 like
Duality 2020-04-03 09:38:16

I have actually been working on a similar project A GameBoy cart with an fpga on it, and wanted to use the same level shifters, good to know that they are a little problematic.
What exactly is the problem though with them? do you have any details?

2 likes
Replies (1)
KuraIthys 2020-04-10 09:41:21

he mentioned their autosense capability.
Based on datasheets for such devices I'm assuming these are bidirectional level shifters that can automatically decide which direction the shifter is operating in (eg which side is 'in' and which is 'out') and possibly also what the voltages are on either side.


If the auto sensing system messes that up, I can see that causing a bunch of issues...

0 likes
gozukipl 2021-03-18 23:49:49 (edited 2021-03-18 23:50:06 )

LOve the video. Amazing work and well explained. Maybe you can help. I got an idea of getting own quick code into GBC but don’t want to use expensive flash cart. I’m rather to build own small GBC cart store one game, maybe saves so with a battery. But can not find any source that could help build it. Maybe you know anything? Thx

0 likes
Basherqueen 2020-12-06 21:34:10

Awesome, that's a simple hack.👍

0 likes
JustForYoutube 2020-04-20 01:31:31

you rarely see this kind of work.
stacksmashing / liveOverflow = Creativity

1 like
Gerrit Weiermann 2020-05-11 14:35:18

Just imagining a low cost wifi module that let kids develop their own games and upload them wireless 🙃
I wonder if the gameboy could provide enough power to connect an esp with it :)

0 likes
Mr Bear 2020-04-14 02:58:20

Really cool! what are the potential of this making board?

0 likes
runforitman 2021-02-08 00:52:59

I love their thought process
force unauthorised 3rd parties to use their logo so they can sue them

0 likes
Zos Xavius 2020-04-02 04:47:22

Name dropping MVG? Instant subscribe. This was interesting too. I sort of knew this but didn't realize how simple it was.

32 likes
kookoon 2020-04-07 09:14:19

Very interesting video.


Since he still stores the nintendo logo in memory, would it still be considered illegal? Even though the logo isn't showed.

8 likes
Replies (4)
z01010000b 2020-04-07 10:16:17

No. At least not in the US. Companies like Nintendo hoped for that to be the case but Sega lost a very similar case against Accolade back in 1992.
I quote Wikipedia: "...Sega is held responsible for using its security system to place its trademark on Accolade's games." In other words, even showing the actual Nintendo logo in this very particular case wouldn't be illegal. It's just that having your own logo is so much cooler.

7 likes
Elliott Savva 2020-04-15 22:58:41

@z01010000b Well in the video he did say something to effect of "so it is legal".

0 likes
Silica 🏳️‍⚧️ 2020-10-25 19:53:53

Nah trademark law works differently lol it has to be shown to count as a violation xD

0 likes
Charles Johnson 2021-07-28 00:51:14

Data ownership is legally gray. Suppose you copyright the word “foo”. Does that reasonably mean you own the byte representation? What if I use the bytes to make a colored t shirt, is that infringing?

0 likes
AliReza Beytari 2020-03-28 21:24:19

Whenever I receive a notification that you have uploaded a new video, I immediately stop whatever I was doing and sit to watch your video. What an awesome work. Keep up the good work! ✌❤

2 likes
Z O 2020-04-08 10:45:10 (edited 2020-04-08 10:47:15 )

Nintendo lawyers from the 90's enters chat. This is really fascinating haha, great vid!!

35 likes
Replies (1)
JWG . LLC 2021-06-13 12:06:10

Sega sued Accolade for that exact thing and lost the Cort case. If the system requires the logo to be displayed. Then there is no copyright infringement

accolade vs sega "Accolade's acts of reverse engineering Sega Genesis software to learn about its security systems and subsequent publishing of unlicensed Sega Genesis games are protected under the fair use doctrine of copyright law. Sega is held responsible for using its security system to place its trademark on Accolade's games."

1 like
konstero 2021-02-06 19:24:29

Very well explained!

0 likes
y1ink 2021-05-15 09:36:05

Love the vid awesome work. Just binge watching all your vids

0 likes
Satoshi Matrix 2020-04-06 03:12:29

This is really cool, but what is the practical use of this? Do you plan to get into GameBoy homebrew game development? It would be really cool if so.

0 likes
Rattehalli RaviShankar 2021-02-06 06:24:43

Excellent work. You are genius.

0 likes
Juan Gonzalez 2020-04-23 15:25:53

This is awesome! How did you learn all this stuff?

1 like
Replies (1)
Wisxper 2021-02-03 15:54:19

hearts and doesn’t answer

0 likes
Veliladon 2020-04-10 01:16:39

This is impressive but couldn't you just have two ROM chips, an SN74S08, and an SR latch that feeds into a transistor that flips the chip select between the ROMs each time you try and read 0x0133? So you'd start with a hacked ROM, read the logo in up to 0x0133, route the relevant address lines through the SN74S08, trigger the SR latch which would then switch the transistor and changes the CS line over to the genuine ROM? It sees like a lot less hassle than building a full FPGA setup?

1 like
Duuqnd 2020-04-07 11:15:02

I realized that the logo was copy protection when I noticed that if the logo didn't look correct (for maybe a dusty cartridge) the game wouldn't load.

0 likes
Frangoose 2020-04-08 16:46:56

Fantastic & inspiring video!

1 like
cherry 2020-04-01 02:42:31

This video is amazing! Good job!

0 likes
Urbanstrangler 2020-04-11 17:50:01

This was inspiring. This was fascinating.

2 likes
Cyber_Akuma 2021-02-03 19:03:41

IIRC, wasn't this how Argonaut (the guys who eventually made StarFox) got hired by Nintendo? By demonstrating their development skills by bypassing the Gameboy's protection in a similar way with their logo right in front of them?

0 likes
KTVX.94 2021-03-12 03:10:38

This is like using a chainsaw to cut tomatoes, love it

0 likes
Giovanni Scotti 2021-02-05 20:55:21

Why don't you use synchronizers on control signals in your Verilog code? Don't you have metastability issues when crossing clock domains?

0 likes
Karl Koscher 2020-04-07 21:19:03

Scott Shawcroft of Adafruit has managed to put CircuitPython on a SAMD51, which is apparently fast enough to emulate a Game Boy cartridge. There's a fantastic video from Hackaday Supercon about it: https://www.youtube.com/watch?v=ycTFYb-9nhI

0 likes
Great Said 2020-03-28 18:51:19

as always great video, thank you sir

2 likes
Benjamin McLean 2021-03-30 02:15:03

Hmm ... would it be possible to make a YM3812 cart that uses the audio pin to play Adlib music? It'd be neat to play FM synthesis tracker music on the gameboy.

0 likes
Alex Jones 2020-10-19 21:48:10

Came here from the MVG video on the GB bootloader, this is awesome. I look forward to watching your other videos! :D

1 like
Walaryne 2020-05-10 21:47:27

This is just the kinda stuff I love to watch.
A question though, is all the tooling for that particular FPGA board you have closed source? I've seen that stuff like PlatformIO has FPGA boards listed, but I don't know to what extent it operates with them.

2 likes
blakegriplingph 2020-04-09 00:07:28

Interestingly, a similar hack was demonstrated by Argonaut Games to Nintendo. Normally this would've ended up in a lawsuit, but Ninty was reportedly impressed by it that Argonaut became one of their partners, eventually culminating in Star Fox for the SNES.

0 likes
Turhiki 2021-07-02 03:22:24

Hello, I have a nanoloop one cartridge (a homebrew for the GB) that boots fine in a first generation GB and a GB Pocket (after displayin a "Hello" instead of the Nintendo logo), so I guess that the technique you explain here was used in that cartridge. But the same cartridge will not boot in a super game boy (although it does show the "Hello"). Would that be because the SGB has an extra protection feature? It really intrigues me, but I have no idea why it does that. If you could share any theory it would be really appreciated. Thanks.

0 likes
Will Nilges 2021-04-02 01:55:00

This is the kind of content I crave.

0 likes
Joker On Acid 2020-04-06 04:06:07

Pretty great work! Thanks

0 likes
Kevin Wydler 2020-04-12 00:13:11

Love these videos!

0 likes
Failure to Life 2020-12-01 13:40:32

Even though I wouldn’t take the time to do this, I love watching.

2 likes
I'm Ethan 2020-04-20 03:28:47

Oh that's why my Gameboy Micro wouldn't display the Nintendo logo without a cartridge! Real interesting stuff! (Does that mean my hack cart has a trademark violation in it??)

0 likes
konatadesuka 2020-04-09 09:21:28

This was also leveraged by Sony on the PSOne, not the original Playstation that had the wobble track copy protection but the later version, the small one.
The original one displayed whatever logo the disc had, the PSOne checked against a ROM stored logo and if they didn't match, the console didn't boot the game.

0 likes
Megamix 2021-02-02 20:43:51

I'm not sure if you knew about this already but did you know that the Sachen 4-in-1 cartridges has their own logo and bypasses the bootstrap check?

0 likes
jensmaa 2020-03-28 20:29:46

You might want to have a look at the SACHEN cartridges. They were released in the 90s and showed their logo while booting. And they somehow worked just fine.

3 likes
Replies (3)
stacksmashing 2020-03-28 20:44:16

That sounds interesting, will try to get my hands on one! I also have a cartridge that displays its own logo, using the same method as shown in the video (though not with an FPGA)

2 likes
Rena Kunisaki 2020-04-05 15:22:10

They probably switched ROM banks when the logo was read or after some set duration.

3 likes
Nezuji Yarou 2020-04-12 09:57:22

Some time many years ago, I read through an annotated, decompiled copy of the GB boot ROM, and IIRC it didn't compare the cartridge and onboard logos bit-for-bit. Instead, it calculated a line-by-line hash/checksum for each horizontal line of the logos, and compared those.

I had one of these Sachen cartridges, and I remember thinking that the "Sachen" logo looked really weird; it was barely readable. I believe that this was done in order to return the same hash/checksum values as the proper "Nintendo" logo, despite displying a different image.

1 like
GC-2206 omar 2021-05-14 02:32:23

Amazing, can I ask you how to write a cartridge with a new game ?

0 likes
MD Genjin 2020-10-21 15:48:34

I have a Mega Memory cartridge (onto which you can backup game saves) and unless used on a Game Boy Advance, it says "Megamem" instead of Nintendo but it still runs fine! There's also a Smartcom personal organizer cartridge that says Smartcom instead of Nintendo but still boots fine (although I've heard it's not compatible with the Game Boy Advance) and Rocket Games' unlicensed Game Boy Color games say ROCKET instead of Nintendo but again they still run fine!

0 likes
Proxy 2020-04-07 14:16:04 (edited 2020-04-07 14:28:19 )

another great source for more info on the Gameboy is "The Ultimate Gameboy Talk"
https://www.youtube.com/watch?v=HyzD8pNlpwI
also about the code, wouldn't it just be easier to have the always block check the RD line for changes instead of the CLK? it would make it only run when it actually Reads instead of constantly checking. or just completely get rid of the always block and use a ternary operator with the RD input.
then again, using an FPGA to emulate ROM is a bit overkill anyways

0 likes
Stefan Noack 2020-06-21 21:49:36 (edited 2020-06-21 21:50:55 )

hm.. couldn't this be done with just a comparator and a flip-flop? the comparator triggers upon accessing the last logo byte and trips off the flip flop to switch an otherwise unused rom address line. this would waste half of the rom, but seems much less overkill than an fpga. this way it would have even been possible back in the day.

0 likes
Marco Acea 2020-11-21 07:55:01

This was an amazing video!

0 likes
陈北宗 2021-09-04 05:15:35

For the level shifting, it may be a better idea to use IMO level shifting chips with external direction control like SN74LVC16T245 for the address and signal lines. Those chips needs control signals, but thise can be derived from the CS, RD and WR pins using some 74LVC1Gxx logic. This means for the target board it can be directly connected without the need of level shifters, and since those SN74LVCxxT245 chips contains line redrivers, you can even run longer wires with little ill effects. Also you can include an op amp like LMV321 to buffer the audio line, basically also a redriver.

0 likes
shrpdrts 2020-04-07 16:37:29

This is so cool, do you think this works with the GBC as well?

0 likes
Replies (1)
Wisxper 2021-02-03 15:55:57

No they have different bootloaders

0 likes
FloatingBlaze 2020-03-30 06:26:57

Every single concept of this video is pure gold... Yes, even the comments.

3 likes
blakegriplingph 2021-01-31 23:37:42

It's a rather shrewd form of DRM that relies more on their lawyers filing trademark lawsuits and less on active protection. An even lower-tech method would be the "NINTENDO" trademark stamped on Famicom Disk System floppies which was required for the FDS to boot. Bootleggers were too chicken to stamp that exact wordmark so they came up with ways to dodge it until they realised that only a few indentations was all it took to defeat it.

0 likes
Ryner Lute 2020-04-15 16:21:19

You can use an ice40 fpga or one of those chinese $5 fpgas for the cartridge. It's also possible to load the binaries of a game to the internal block ram of the fpga. Or if you're feeling adventurous, add a microsd card slot in which you can read from the fpga.

0 likes
Replies (1)
stacksmashing 2020-04-15 20:27:22

Yea the problem is getting an ICE40 board with enough IOs and enough RAM - I wanted to try it on one of my ECP5 boards though

0 likes
Shawn 2021-01-22 07:23:37

Did you ever finalize and release the breakout cartridge?

1 like
Faruk Ege Hatırnaz 2021-02-04 23:44:34

Such an amazing video! Instant subscribe.

0 likes
Wojciech Pitra-Ptaszek 2021-02-05 11:06:48

Nice work there! I was watching this with pleasure, thanx for that!

0 likes
Replies (1)
stacksmashing 2021-02-05 11:10:32

Glad you enjoyed it :)

0 likes
iSlyFox 2020-04-14 06:17:56

Mistakes Were Made - How the Gameboy copy protection was defeated

122 likes
Replies (4)
Elliott Savva 2020-04-15 22:43:35

I don't get the joke.

1 like
Arun Raman 2020-04-21 03:32:42

@Elliott Savva Watch MVG

9 likes
David Calman 2021-01-20 20:09:16

it's trademark protection, like Sega TMSS

0 likes
Hagen P 2021-04-11 20:17:46

"Mistakes were made." - Well, not for the time when it was invented. FPGAs were prohibitively expensive at the time, so were ASICs.

0 likes
Lou 2020-03-28 18:02:50

Nice video ! But is it really "copy protection" ? I don't understand how it can prevent copies of games.

3 likes
Replies (6)
stacksmashing 2020-03-28 18:38:18

True, it doesn’t prevent copies, it prevents others from publishing game cartridges for it :)

8 likes
Jedzia Dex 2020-04-05 12:57:15 (edited 2020-04-05 12:59:42 )

@stacksmashing Actually, it doesn't even do that in the legal sense.
It would be a strange world in which we are no longer allowed to pronounce names or show symbols. Reminds me of Voldem.... Well, You-Know-Who;)
A second page with a disclaimer, that the Nintendo(R) Logo is needed to run the game is enough to "circumvent" this bodge legally.

It's like a recipe for a drink from Coca Cola plus your own urine. Coca Cola may not like that, but there is nothing they can do about it.
disclaimer: <Coca Cola is a trademark of the Coca-Cola Company> ... you get it.
Cheers, i am very proud of the last example*g*

1 like
stacksmashing 2020-04-05 13:00:22

Not a lawyer, this is what most sourced said - it seemed successful in that the third party cartridges that exist (i.e. SACHEN) indeed do not display the Nintendo logo. Also remember that trademark laws vary a lot between countries, so I think it’s hard to give a definitive statement on this

0 likes
Rena Kunisaki 2020-04-05 15:25:31

@stacksmashing I think some of them just did that to be cool. When this was designed, it worked legally, but the law was soon changed to allow the use of trademarks and copyrighted data if they were required to make the product work.

0 likes
kilrahvp 2020-04-06 14:23:18

@Jedzia Dex If you sold anything with the coca cola name or logo on it they can definitely sue you, their trademark is registered. To use a registered trademark you need the permission of the trademark holder.

0 likes
Jedzia Dex 2020-04-06 18:45:59

@kilrahvp Too late, everything sold. I didn't know that cola with urine is so popular!?! rotfl

0 likes
gamerpaddy 2021-05-21 02:25:53

i wonder if it could be done without a fpga
by using a second ROM that contains the logo and when the GB is turned on, the modded ROM starts until a few ms later and switches to the original ROM before the second logo read happens.
or (if the ROM is only filled halfway, basically having addr bit 16 allways 0) putting the logo at 0x8104 and flipping bit 16 x msec after turning on/first read.

0 likes
Lucidz PLAYSTATION Dreams 2021-02-07 12:06:52

Exactly how I would have done it 😉

0 likes
Roman 2020-04-11 15:41:59

I already asked you about this but since now you team with the big boy aka LiveOverflow do you think you can reverse engeneering Bosch E-bike motors ?

0 likes
Genre Fluid 2021-01-21 18:03:59

Could this be used to play videos on it as well as games I wonder?

0 likes
Andy Brychenko 2020-03-30 08:26:25

Super cool video, thank you!

1 like
Matthomar 2020-04-10 02:44:39

Thank you very much.


I am so interested in this topic, yet not by myself.
Is there a way to meet up with people to endeavor on topics like this?

0 likes
Dion Starfire 2021-02-02 19:22:27

A lawsuit in the early 90's removed the legal underpinnings for this sort of usage of trademarks as a form of copy protection. lookup Sega vs. Accolade for more info. Accolade published unlicensed games that used Sega's copy-protection code including the part that displayed the Sega logo. A court eventually ruled that the code usage was fair use and Sega's act of requiring display of a trademark for a game work was an "improper use" of trademark because it served to limit competition which is the function of patents and not trademarks.

1 like
Frederico Dargel 2020-04-13 18:33:36

it will be perfect for gameboy's re-shells that has "game girl" on it.

17 likes
True Forensics 2020-04-07 11:22:19

Well done, awesome dude.
Keep hacking.

1 like
Andrew Thomas 2021-02-19 16:03:15

How do you get the ROM onto the FPGA? Do you preload it somehow? Or is it being read from and SD card reader or something?

0 likes
Prathap Reddy 2020-03-29 03:12:02

Awesome work ninja you rock ,,,,,,

1 like
JWG . LLC 2021-06-13 11:55:30 (edited 2021-06-13 11:59:16 )

2:15
Sega sued Accolade for that exact thing and lost the Cort case. If the system requires the logo to be displayed. Then there is no copyright infringement

accolade vs sega "Accolade's acts of reverse engineering Sega Genesis software to learn about its security systems and subsequent publishing of unlicensed Sega Genesis games are protected under the fair use doctrine of copyright law. Sega is held responsible for using its security system to place its trademark on Accolade's games."

0 likes
Gabriel Barrantes 2021-05-08 02:27:04

W T F this content is so freaking amazing

0 likes
James Peters 2020-05-13 19:56:11

Do you think this would be possible using the new Raspberry Pi 4?

0 likes
Jannes Vanquaillie 2020-04-10 07:41:15

you're a genius for finding that out and a hero for making that public.
In my eyes at least, in the eyes of the law, that may differ ;).

0 likes
Replies (2)
stacksmashing 2020-04-10 09:03:33

Ah this is well known in the community, this is not something I found - there also used to be cartridges at the time that used a similar trick!
But glad you like the video!

2 likes
Elliott Savva 2020-04-15 23:06:36

@stacksmashing Thanks for the video anyway as it is very well explained.

0 likes
Daniel Lopez 2020-11-23 11:16:10

Your Channel is just awesome!

0 likes
Abrißbirne 66 2020-08-27 14:22:07

Ah, a Game Boy Logo Expert, now I have someone who I can ask this question:
When I saw this trailer /watch?v=UzuOw50zmbU
at second 5 I felt something like a childhood flashback. I don't know if my mind is making this up but I think back in the days our Game Boy would sometimes show this weird logo that you can see in this trailer. Then I blew on the pins and restarted the System and then it usually worked. What is that? Have you, or anyone else, seen that on the Game Boy before? Is it a typical bug that they are referencing in the trailer? I feel like I have seen it before, but I'm not 100% sure, I was like 4 years old when I played with the Game Boy. Maybe this happens when specific pins are blocked?

0 likes
redd 2020-04-14 17:25:42

Nice Hackers reference with "Hack the planet" on the PCB at the end

4 likes
Sascha Seeberg 2021-02-06 00:29:03

Love "Hack the Planet" on the PCB =)

0 likes
Inaworldoflove 2021-01-14 01:52:45

Good video. BTW, the word infamous is not 'in-famous', it has the stress on the word in, so it is 'IN-fa-mous'.

0 likes
Matteo Falduto 2021-02-03 17:58:35

Nintendo had better lawyers than engineers.

0 likes
Leonardo dePinto 2020-04-02 16:50:47

Dude you have earned my subscription

0 likes
Black Moon Dragoon 2021-06-08 23:10:24

Dear Stacksmashing, In the past had a game from a company called "Sachen", no Nintendo logo appeared instead the logo "Sachen" and it still worked on the official gameboy

0 likes
Taska Nawa 2020-04-08 13:17:09

awesome work

1 like
varun aggarwal 2021-05-17 07:16:15

Great content.

0 likes
Pierre Donias 2020-03-28 22:17:39

That awkward pause at the end to reach the advertisable video length ;)

226 likes
Replies (9)
stacksmashing 2020-03-28 22:28:38

coughs

174 likes
Anunay 2020-03-31 15:30:06

Youtube is weird, Why put a minimum advisable length, it only encourages long and cringy videos while real gems like these are left behind.

71 likes
Sasszem 2020-04-01 10:31:45

No use, Nintendo will claim it / disable ads...

17 likes
Reth Hard 2020-04-06 03:02:06

@Sasszem
Knock! Knock!

Who's there?

😈 NINTENDO 😈

12 likes
qn2h 2020-04-09 22:38:09

There aren’t any ads on the vid

4 likes
Jared Connell 2020-11-30 04:55:49

There isn't a minimum length for ads but 10+ minute videos are allowed to have unlimited midroll ads

2 likes
Dance Dance North 2021-02-06 18:48:08

The minimum for mid-roll was reduced to 8 minutes some time in 2020. :-) I like it, too. Creators and viewers have less filler to deal with.

3 likes
Walter Comunello 2021-02-09 23:32:37

@stacksmashing just talk a little bit slower. spoken info will be much more clear and you will pass the 10min mark with no effort.

0 likes
KTVX.94 2021-03-12 03:12:27

Tbh it gave me enough time to pause

0 likes
Gecko o 2020-04-10 06:48:03

I have to say, this is one of the weirdest protection methods that I have seen, I mean the logo is right there, any programmer with some hex knowledge could take it, I think that even I could do it and the fact that the logo is copyrighted would not stop some people, especially on the other side of the globe, If I know it, I used to own a pirate pokemon crystal cartridge, I remember that I even dissasebled it because the battery was dead, that and playing with the missing number fried it, yes, missigno in fact can break your game.

0 likes
Replies (1)
KuraIthys 2020-04-10 09:44:50

That's because it's not a technical protection so much as a legal one.


Their goal wasn't to make it difficult on a technical level to 'break' their protection.
Their goal was that if you broke their protection they could sue you for trademark infringement.
Thus the difficulty this presents is legal, not technical.


Still,

It was proven in court that this method isn't seen as legally valid, so it's a moot point.

0 likes
Syphist 2020-04-09 15:59:07

It only took 31 years, but it has finally been done.

3 likes
Replies (1)
ami 2020-10-19 13:34:46

well, some bootleg cartridges did this back then

2 likes
Remco M 2020-11-22 21:17:43

If someone wanted to implement this in the simplest hardware, wouldn't a rom chip that's twice the size (or two rom chips, one big and one tiny one.
The first time address 133 has been selected, a flipflop is activated, etither flipping an address line, or toggling chip select pins.That way, you wouldn't need an expensive FPGA.

0 likes
Replies (1)
stacksmashing 2020-11-22 21:20:35

Absolutely!

0 likes
Anton Liakhovitch 2021-05-14 03:50:22

I'm now wondering if there's a low tech way of doing this with discrete components, so a company at the time could cheaply and legally publish an unapproved game.

My thought: I conjecture that the Gameboy will always do the reads after the same set number of cartridge clock cycles, since there is no user input before then. Have a smaller, separate ROM store the unofficial logo and put the official one on the main ROM. A counter chip can count clock cycles, and switch the ROM chip over via chip enable signals right after the hacked logo is read.

0 likes
Replies (2)
Anton Liakhovitch 2021-05-14 04:12:38

If there's interest I might design a PCB for this so people can sell hardware homebrew game carts for cheap on Etsy or whatever and get sued a little less hard by the Nintendo lawyer army.

0 likes
Anton Liakhovitch 2021-05-14 07:03:11

Doh, much more robust design that also uses a comparator and a counter:
Just have the comparator compare the address bus to the (constant) address of the beginning of the logo, and use the output to clock a counter. Once the counter counts to two, flip the enable pins of the rom chips.

0 likes
BitSmythe 2021-02-03 05:40:11

Has enough parts “just lying around” to build a Cray computer.

0 likes
Maxifire32 2021-06-25 13:13:32

3:05 did anyone notice the "hacked" and "nintendo" logo spells out "Hacked Nintendo"?

1 like
Wisxper 2021-02-03 15:52:10

Wow. Nintendo really took advantage of suing..

0 likes
Alexander KHan 2020-04-15 01:39:13

Nice video. Thank you

1 like
Metalgrimm 2021-02-06 03:57:58

should've replace "Hacked" text into "Hello World"

6 likes
SysGhost 2021-01-15 19:39:57

Since you still need the original Nintendo logo data in the ROM, isn't that enough for Nintendo to sue?
The logo image is still a logo image even if it isn't displayed.

0 likes
Nintendo Direct 2021-04-16 18:16:51

you should TOTALLY collab with the 8-bit guy, or TDNC (This Does Not Compute)!

0 likes
Mohamed Edrees 2020-11-16 23:45:31

Wow brilliant work these remarkable

0 likes
TwistedSouL 2020-11-18 00:43:07

Everyone: LiveOverflow... boot rom.. CIC... data lines...
Me: Is that dust on the Gameboy or on my screen? 🤔

0 likes
R Frohn 2020-03-28 18:28:38

Great video. Thanks

1 like
Kyugi Yeneku 2020-04-11 22:32:52

Hmm would this be possoble to do in the time the Gameboy was released (the technology that was avalable then)

0 likes
GTA 5 Online Shorts 2021-04-06 09:36:39

it seems its purpose is not protection but just checking if pins are connected well.

0 likes
Jeff Heim 2020-12-23 16:25:27

Forcing pirates to use your logo so you can get them for copyright. It's brilliant.

0 likes
ROBLOXXER 2021-04-01 15:29:43

this whole thing where the gameboy will lockup if it's not the nintendo logo sorta seems like a pc that locks up if u try to upgrade it but if u bypass that the company sues

0 likes
lolomixed64 2021-01-26 18:41:56

Even If I don´t understand too much about this. It´s quite satisfaying to watch this videos.

0 likes
Lionel Walder 2021-01-17 16:58:18

C'est de la balle :D

0 likes
Steven Spring 2021-04-03 22:19:11

You are an inspiration, I'm a small tech youtuber doing some videos on the pi, IT career tops etc.. love your content man.

0 likes
Saeed Mahmoodi 2020-04-01 15:30:46 (edited 2020-04-01 15:31:00 )

I want 1 video every day, I enjoy this more than all animes

7 likes
Kemal Eren Uşaklıgil 2021-07-18 10:15:52

ok, now make among us on gameboy using the online multiplayer thing you made in the other video so people with gameboys can play the game with any device

1 like
Beastinlosers 2020-06-13 05:34:10

What's the progress on the chip?

0 likes
Matt DeLuco 2021-02-01 04:06:05

Nice Hackers reference on the breakout cart ;)

0 likes
TheGoldenBlock 2022-01-05 01:05:24

question: if i load a rom hack i made [with gb studio] onto a flash cart, will the nintendo logo show or will it show my name and lock?

0 likes
OneMadGypsy 2021-04-11 21:22:26

Has an FPGA, voltage regulators and presumably a ton of other parts/boards - let's hack something that doesn't even have a backlight. 😂 You could probably just make a better gameboy. Upgrade to an OLED display, maybe some better audio, slim the device, convert it to 3.3v, and make it run any cartridge that will fit in the slot. You could probably pull it off with a RPi Pico. If so, you can run the Pico at 1.8v. You could make batteries last forever.

0 likes
L e n n r d 2021-02-21 23:51:58

Imagine playing on this unportable version and having all clunky wires instead of just using an emulator.... BeCauSe aEsThEtIcS OlD tEcH bAcK tO lIfE

0 likes
SysGhost 2020-04-07 22:27:32

One still has to store data for the Nintendo logo in order for the ROM to pass the second read check. Wouldn't that be enough for Nintendo to sue someone with this even if said logo isn't displayed?

0 likes
Replies (2)
David Jacques 2020-04-10 05:49:10

If it's not displayed, all it is are numerical values compared to other numerical values by the CPU. It has the be interpreted as an image to be the logo. If you shot a movie, and it just so happened that, if you open the file in a text editor, you see "Nintendo" in the otherwise meaningless sequence of characters, could they sue you for trademark violation, even though it never showed if you played the movie as intended?

0 likes
SysGhost 2020-04-10 06:37:34

@David Jacques It's Nintendo. The universes master of legal prosecution. They'll find a way.

0 likes
RyanWake bradtelle 2021-02-07 05:24:07

Can you make a video recreating this without any information as if you were the first one figuring out how to make a ROM cartridge. But only with tools available before the game boy came out

0 likes
Replies (1)
Jo Eds 2021-07-27 10:04:42

Why?

0 likes
Migles Pigles 2021-04-02 14:19:55

If the Nintendo logo still needs to be in the cart the second time (check time) for the gb to boot, how isn't still a copyright infringement? Even if you don't display it, it is still there

1 like
Replies (1)
Jeremy Davis 2021-05-10 13:35:11

My understanding is that this is about trademark, not copyright. A trademark is used to show which company made a product, whereas a copyright protects the creator of a work of art (such as a game) from having to compete with copies. I'm not a lawyer, but it seems to me that if a trademark isn't displayed anywhere, there's no infringement because there's no chance of misleading a consumer.

1 like
Duuqnd 2020-04-07 11:32:05

An FPGA is obviously the easiest way to do it now, but with the technology of the eighties that wouldn't have been possible.
Maybe you could check how many clock cycles or milliseconds it takes before it reads the logo the second time so it knows when to switch using either a timer or counter circuit.
The switch could simply force the A9 pin high when reading the first time and after a certain amount of time it lets it function normally.
This would cause it to unknowingly read from 0x0304 to 0x0333 the first time (where the hacked logo could be stored), and then read from 0x0104 to 0x0133 (normal logo).

1 like
Replies (1)
KuraIthys 2020-04-10 09:54:34

You'd be surprised. FPGA's of some description have been around a long time.


The C64 uses a PLA for bus arbitration. (Programmable Logic Array)
The Sinclair Spectrum implements a fair few secondary functions using a similar device as well.


They're nowhere near the level of complexity of an FPGA, but they're the same general idea.


And in the 90's you certainly could get an FPGA - they weren't cheap.
But if you were say, implementing a Developer cartridge for the Nintendo 64...
You'd use an FPGA for some of the interface logic. (see, pictures of the interface units Rare built themselves for various projects - you can clearly see the FPGA used in some of them.)


By the mid-90's you could absolutely use an FPGA, but you likely wouldn't want to given the cost of one.
(remember the gameboy is a 90's device more so than an 80's one)


And if the complexity of what you are implementing is low enough, you could've done it with an early 80's style PLA.


Probably not the simplest or cheapest option for the time though...

0 likes
Mad Max 2021-02-11 01:23:20

It's not a big deal...gb source code was in the net since 2000

0 likes
Gehtklar Meister 2020-04-05 18:26:20

How is the TOCTOU-attack a bug rather than an oversight/dodgy implementation?

0 likes
Replies (1)
Elliott Savva 2020-04-15 23:02:50

A bug is an oversight I always thought?

1 like
neophytealpha 2021-02-04 05:35:37

Would be an interesting project.

0 likes
Lord Steve Wilson Esquire 2020-04-07 14:42:52

That is very smart trademark protection, as long as you are changing, modifying or even storing their logo on your own device you are falling foul of trademark protection, you cant use fair use either.

0 likes
Midi Music Forever 2021-02-04 22:59:57

This video has been up for almost a year and still no legal action from Nintendo?!

1 like
Replies (1)
Super Smash Dolls 2021-02-07 05:45:48

Sega v Accolade rendered this kind of trademark-induced security ineffective in the US.

0 likes
Shobhit Verma 2021-02-27 07:44:36

Awesome video

0 likes
John Dripper 2021-02-05 04:33:44

Can u make an indept video of how to convert LCD signals to HDMI/VGA with FPGA I need to capture footage from old Nokia feature phones like Nokia 1100, Nokia engage etc etc

0 likes
Its Just A Meme 2021-02-10 16:01:49

Cartridge was said 39 times during this video

2 likes
RUDE_DUDE 2020-11-26 16:13:00

Wow mind-blowing

0 likes
The Guy With A name 2022-01-24 03:59:13

Does anyone know if this applies to game boy colors?

0 likes
Neto T 2020-03-28 20:29:42

Bro You are genius. You know that right.

2 likes
Dark Dragon Gaming 2021-11-14 19:38:14

Hack The Planet! Hackers is such a great movie!

1 like
Travis Pettry 2021-02-10 01:12:27

Did you end up releasing the breakout board?

0 likes
Heron 2021-02-04 14:06:43

Finally I can play that cracked version of tetris on my Gameboy, thanks!

1 like
Null Null 2020-03-29 14:09:26

This is so cool

1 like
WarDogdauWDD 2021-11-28 09:10:46

Is there a way to do this with a Gameboy advance and not having to use a big thing of tech ?

0 likes
Alex 2020-03-29 08:28:47

I'm jealous of your knowledge, what is your academic background?

2 likes
The One 2021-02-11 02:53:16

The video is exactly 10 minutes long
The video was uploaded 10 months ago
And I’m watching this at 10 : 00PM

0 likes
Khatharr Malkavian 2021-05-23 05:36:40

Bruh... You can supply the expected functionality with a cheap eeprom but you went straight for fpga, lmao.

I guess it'll make the hack easier, though it would have been more fun to just use an eeprom, a counter, and a latch.

0 likes
Replies (1)
Khatharr Malkavian 2021-05-23 06:41:50

Alternatively you could spend the $5 to get an ATxmega128 and have a nice, neat little single-chip solution that can do anything you want to the poor DMG.

0 likes
Murad Pervez 2021-02-07 05:11:52

This is how you get Mew to appear under the truck!

0 likes
PASTRAMIKick 2020-04-16 02:43:24

Verilog looks better than VHDL, I've never liked VHDL but that's what I know

2 likes
Replies (1)
Tee Jay 2020-11-06 11:33:17

I pefer Verilog too. But from academical point of view VHDL is better. It has a well defined handling of data-types.

0 likes
Gary Stinten 2020-11-14 14:36:18

where can i see the game and watch video?

curious to see the innards..

thanks

0 likes
m B 2020-04-11 09:27:50 (edited 2020-04-11 09:28:42 )

An interessting and cool example of the use of the audio pin on a cartridge is nanoloop mono:
http://www.nanoloop.de/mono/index.html

"On the original Game Boy models, one pin of the cartridge connector functions as audio input, connected to the built-in amplifier. This unique feature allows to generate sound on the cart and play it through the headphone output on a completely analog signal path.

In the nanoloop mono cart, the analog components (op-amps, comparators, logic cells etc) of a PIC microcontroller are connected and configured in such a way that they form a hybrid soundchip with 3 analog filters and a true random noise generstor, using only a few passive external components."

0 likes
Replies (2)
m B 2020-04-11 09:30:37

Btw, nanoloop mono also has a custom logo shown when booting

0 likes
stacksmashing 2020-04-11 09:32:37

Yea I also own a regular nanoloop cartridge and it also shows a custom logo :)

1 like
Mohamed Edrees 2020-11-17 22:47:06

Brilliant I have a challenge I know some brilliant mind like you Will solve it I need help with a Korean nintendo wii Locked on error 003 after update there is way to fix it but it's a painful and I can't find a modchip if there any way through software please and a lot of thanks to you for your time and work

1 like
Replies (1)
Ghost in the Robot 2021-03-13 15:59:24

Check out Letterbomb which is a softmod for wii... You can write to the NAND memory for homebrew and flash roms...

0 likes
Dmitri Leontev 2020-09-29 07:58:34

Li Cheng Industries-published Game Boy games has the Nintendo logo modified to read "Niutoude".

5 likes
Replies (1)
Super Smash Dolls 2021-02-07 05:45:01

That doesn't use this exploit - AFAIK CGB just doesnt check the bottom half of the logo

2 likes
sinister geek 2020-03-29 12:57:58

glad to hear you bypass the nintendo logo !! ...

2 likes
aspzx 2020-04-09 18:16:39

Any idea why the Gameboy reads the logo twice? Why not read it once, display it on the screen and then compare the data to the stored reference data?

0 likes
Replies (1)
KuraIthys 2020-04-10 09:58:33

Does seem a bit weird.
My guess is it's accidental.
Someone just didn't think about it when they programmed the bootloader.


That, or it's a technical issue - in the first pass the logo has to be loaded into video memory so that it can be displayed.
The second pass the CPU has to compare it with a value stored in an internal ROM...

1 like
Junky228 2021-02-05 08:27:30

I swear I've seen a couple cartridges released that were able to boot with a custom logo, without packaging an FPGA into them

3 likes
Replies (1)
Super Smash Dolls 2021-02-07 05:44:14

You could do this with a standard ROM chip and some custom bankswitching logic. For example, you could have a custom bankswitch IC that starts with HOME in bank 1, then switches it back to bank 0 after the BIOS reads the logo. Put your fake logo in bank 1 and the Nintendo logo in bank 0, and you get a custom logo, at least on DMG. CGB wont accept this afaik, but it also doesnt check half the bytes at all, so you dont even need a custom mapper on CGB if your logo is some half-Nintendo, half-custom monstrosity.

1 like
TripDering 2020-04-11 21:36:02

Read all the comments and no mention of the "Mega Memory Card" for GB - that displayed a "MegaMem" logo on boot.

2 likes
Kutay 2021-01-31 21:11:45

So much effort in this video.

0 likes
Jacob Mead 2021-02-02 02:08:37

This video is 1990's nintendo's worst nightmare

0 likes
Kamilake 2020-04-25 14:06:08

Awesome..!!!

2 likes
Andrey Bibiano Jardim 2021-02-11 01:37:07

I thought it read the logo directly from screen like a framebuffer

0 likes
JGSH 2020-04-18 11:28:48

Why is the ROM only 32kb? Shouldn't 16 address pins make addressing possible for 64kb?

0 likes
D None 2021-05-15 13:25:49 (edited 2021-05-15 13:26:07 )

Verilog is ugly. Sorry to say. It's almost like the last 25 years hasn't happened 😂

Great video though! Thank you!

0 likes
Replies (1)
stacksmashing 2021-05-15 13:26:23

I agree! 😀

1 like
TERA3515 2020-04-17 23:35:22

Anyone press start/select when the Nintendo logo appears it makes it disappear and the game doesn’t boot

0 likes
The Sulake 2020-03-28 19:38:05

Can u Reverse a sprx ps3 plugin for a game?

0 likes
Daniel Johnson 2020-11-16 22:27:56

as soon as you brought out those level shifters, i knew you were going to have problems with them lol. those ICs are garbage

0 likes
Replies (2)
Jo Eds 2021-07-27 10:02:56

What would you use then?

0 likes
Daniel Johnson 2021-07-27 11:35:24

Non bidirectional level shifters. We struggled with those at work and switched to SN74LVCXT245

0 likes
Dove Fab 2020-05-22 16:48:23

Omg my childhood answer to why it it was black Nintendo logo had been answered!! I never knew why😱😱😱

0 likes
Daniel Habazin 2021-05-17 15:26:12

a bit late, but i love the hack the planet reference

0 likes
Jason Allcreator 2021-02-05 08:05:37

NORMALIZE HACKING NINTENDO!

1 like
killerdrone360 2020-04-04 23:48:05

Cant nintendo still sue you for having the nintendo logo on the chip at all?

1 like
Replies (3)
stacksmashing 2020-04-05 09:58:21

Not a lawyer, so absolutely no clue if this was enforceable in the first place :)

1 like
Tuxfanturnip 2020-04-07 14:06:41

I think they might be able to claim copyright of the image as data, but the trademark is only violated if it's displayed to the user? Not at all an expert, just my guess

0 likes
KuraIthys 2020-04-10 09:47:38

@Tuxfanturnip Based on a similar lawsuit in the past...
The fact that this form if infringement is REQUIRED to be able to get software to run on such a system actually works against it legally...


Basically, because if you want to get a gameboy game to run at all you HAVE to include this logo, that fact alone counts against this method in a court.
(that's what the ruling against Sega said, anyway... - Sega used a very similar method for the Mega Drive)


It's technically a copyright/trademark violation, but since it's forced upon you for technical reasons, it can't be enforced.
Something to that extent.

1 like
Gonçalo Franco 2021-02-13 15:35:09

That guy is a genious

0 likes
poké battle 2021-02-07 00:43:29

0:40 this for NES and Nintendo64
Not for Nintendo gameboy

0 likes
Keiya 2021-05-20 03:34:22

Isn't this just the Sega TMSS, which courts shot down?

0 likes
keiseyku 2020-04-16 15:25:49 (edited 2020-04-16 15:30:26 )

Would it be possible to hack 'gbc ONLY games' to work on gb?

0 likes
Replies (2)
stacksmashing 2020-04-16 16:20:12

Nope

0 likes
Silica 🏳️‍⚧️ 2020-10-25 20:02:30

@stacksmashing the ZAZZ glitch tried this in 'bringing arbitrary code execution to other games' lol he tried to load Pokémon crystal on a GB. The graphics where super messed up and the game crashed upon going beyond the title screen 🤣

0 likes
Phantom Works Studios ( PWS ) 2020-07-13 18:34:56

wow really so in other words I would have to pay for there logo just to run it on the handheld? Thats like be having to pay Microsoft everytime I wanted to run a custom program that I made on C++ for windows ><

0 likes
Damian Yerrick 2020-03-28 19:19:29

2:09 At least in the United States of America, Nintendo would probably have lost such a lawsuit. U.S. courts don't let a trademark holder assert a trademark as an ersatz patent. Kellogg v. Nabisco; Sega v. Accolade.

8 likes
Replies (2)
Rena Kunisaki 2020-04-05 15:23:30

Pretty sure this was designed before that ruling.

1 like
Karl Koscher 2020-04-07 21:14:32

I was going to mention this as well, although it's interesting that Sega continued using their Trademark Security System on the Saturn and Dreamcast well past the 1992 ruling against them. Presumably they hoped it would be enforceable in other jurisdictions.

1 like
Waschmaschine_jan 2020-04-07 11:08:50

Gameboy devkit 😂😂

0 likes
Finanzielle Freiheit dank Kryptowährungen 2020-04-12 17:45:34

Sehr gutes Video - Danke Dir

1 like
Love0verflow 2021-05-21 15:12:08

Man this is so facinating, I wonder how hard it is for simple people to understand this.

0 likes
Vili Muratovic 2020-04-06 12:51:21

Can an expansion pack be created from a PC's RAM?

0 likes
Replies (3)
kilrahvp 2020-04-06 14:19:47

Nope, PC RAM is dynamic so needs a complex controller to deal with it. Could be implemented in an FPGA, but then you don't need the RAM anymore

0 likes
Vili Muratovic 2020-04-06 14:27:38

@kilrahvp I have the game zelda majora's Mask for Nintendo 64 but unfortunately I don't have the expansion pack, is there any way to create an Expansion pack from other components?

0 likes
KuraIthys 2020-04-10 09:49:05

@Vili Muratovic Probably.
but why would you? Functional equivalents to the expansion pack (or even actual expansion packs) can be gotten off ebay for about $9.
I guarantee you that trying to build your own will cost you way more than that...

0 likes
Florian Dalwigk 2020-11-02 16:46:16

Nice!

0 likes
marts 2021-02-05 12:46:11

Nice!

0 likes
ashok shastri 2022-01-09 13:57:45

Bro big fan of yours from Lamatol village, golbazar-06 municipality, siraha district, sagarmatha zone, province no 2, nepal 🇳🇵

0 likes
Will Becker 2021-02-04 08:27:47

Good video

0 likes
__c0d3 2021-10-27 02:02:51

You are an effin genius..

0 likes
Radio Rob 2020-03-28 22:10:15

The volume of this video is so low, I can barely hear it!

1 like
Peter Müller 2021-02-10 22:58:13

Epic!

0 likes
Archived_Videos 2021-02-02 10:58:00

VERY cool

0 likes
RAMChYLD 2020-04-12 02:00:27

Argonaut Software has a less elegant but more indigenous solution- they’d have a capacitor and resistor that when the GB was powered up, the capacitor would be empty at the time and send the GB the Argonaut text. But when the second read is done, the capacitor would have charged and somehow trigger the ROM to return the Nintendo logo.

https://www.eurogamer.net/articles/2013-07-04-born-slippy-the-making-of-star-fox

They didn’t get into the specifics tho, but I’d think that the capacitor would meddle with the address bits to shift the memory access.

0 likes
Replies (1)
David Thacher 2021-05-14 01:56:31

This would work for memory map. Double the ROM, and the cap is page select. (Delay via RC time constant, which works since this is very static.) Giving two pages with the same address space. The controller still believes it is working within a single page.

They could also build a write through section of address space were they can change the page select.

0 likes
windows computer 2021-06-01 01:26:03

stack overflow is taken will it be stack flowsmash?

0 likes
Andre Savelev 2022-01-11 15:00:57

Cool!

1 like
Phino K.M. 2021-02-05 22:07:30 (edited 2021-02-05 22:09:22 )

Why not use an Arduino Mega or something? It runs on 5 V. And you can just read two 8 bit ports into an uint16_t or to get the address, read it from an array or whatever and output it onto an 8 bit port. And then if you want check if the logo was already read once. The program would be dead simple.

0 likes
Replies (2)
stacksmashing 2021-02-05 22:08:03

Arduino/AVR is simply not fast enough

0 likes
Phino K.M. 2021-02-05 22:39:49 (edited 2021-02-05 22:43:42 )

​@stacksmashing Really? How fast does it have to be? Triggering a pin change ISR, reading two bytes from two registers and and outputting a corresponding byte from memory to another register plus some checks for the logo. That's a pretty simply task. If you program efficiently, I think 100 clock cycles could be realistic. So at 16 MHz, when the read pin is pulled low it would take about 6.25 microseconds to output the data. Obviously you can't use Arduino (the library) cause it's slow as fuck.
I'm sure you could get it faster if you wanna take the time to write the code in assembly. But assembly is kinda annoying to work with compared to C. So I guess that would be a reason not to use ATmega. I just thought an ATmega would be nice cause it would be quite easy to solder directly onto the cartridge PCB and it's cheaper than an FPGA.
Anyway, so how quickly do the data pins need to be set after the read pin is pulled low?

0 likes
Digilent, Inc. 2020-04-07 17:51:46

Not sure if we should call the cops for hax or pat your back for a solid use of the Arty A7...

0 likes
Replies (1)
stacksmashing 2020-04-07 18:08:06 (edited 2020-04-07 18:48:49 )

Definitely back patting if you ask me!

1 like
aziztcf 2020-03-29 11:47:25

Haha, didn't expect to see FPGA for a simple GB cart hack. Kinda overkill isn't it?

0 likes
Chitresh Goel 2020-04-01 06:05:07 (edited 2020-04-01 06:05:37 )

Can we do this thing on Arduino UNO and it also work on 5v?

1 like
Replies (2)
stacksmashing 2020-04-01 15:00:39

Unfortunately the Arduino Uno doesn't have enough IOs, also it's pretty slow at 16MHz, making it very hard to get the timing right (if possible at all) and also it doesn't have enough memory to store the full ROM

3 likes
Eduardo Anonimo 2020-04-04 22:27:25

@stacksmashing and an ESP32?

0 likes
lops lopaa 2020-04-07 00:43:11

7:45 so basically he broke the law

0 likes
iWhacko 2020-11-30 13:22:06

When can we get the Cartridge?

0 likes
Tirael Archangel 2020-04-11 12:46:24

What cart was sacrificed, by the way? :)

0 likes
Replies (1)
stacksmashing 2020-04-11 14:43:33

A Tetris cartridge - I’d be lying if I claimed it didn’t hurt, but I have 5 or so of them...

1 like
Floppey! 2021-06-23 04:51:26

real programmers codes only in vim.

1 like
runforitman 2021-02-08 00:50:03

youtube out here guessing my interests again
knows I already watch, and like, liveoverflow and am interested in electronics

0 likes
Dani Moyano 2020-04-28 21:32:55

You guys have a lot of spare time in your life

0 likes
Walter Comunello 2021-02-09 23:30:34

awesome.

0 likes
Prometheus 2020-07-17 00:44:09

Thumbs up for using Sublime Text

0 likes
Command_Blockling_400 MC 2020-11-27 22:08:09 (edited 2020-11-27 22:08:35 )

as soon as he switched on the game boy at 7:41 I got an ad

1 like
vignesh muthukumar 2020-04-06 16:59:08

I dont know what a game boy is. Anyway nice video

0 likes
JS7457 2020-12-29 22:32:58 (edited 2020-12-29 22:33:22 )

When will the pcb be released ? :(

0 likes
Cycro the large planet / Windows 11 2021-02-17 18:07:04

Why did you hack the ████████ ████ ███ cartrige protection?

0 likes
R62A 6 Train Offical, ThatRobloxTransitFoamer 2020-04-09 15:16:18

if you hack your Game Boy, then The Startup Screen will say "Hacked" instead of Nintendo

0 likes
Walla 2021-02-06 01:42:48

awesome

0 likes
Benjamin Piepiora 2020-04-06 20:12:30

Hack the planet!

2 likes
Louis Ledoux 2021-02-03 20:56:49

Rom should be 0:32767?

0 likes
CoolThingHere 2020-04-09 17:44:55

the audio is very quiet

0 likes
Kenichi Mori 2021-01-24 00:21:02

ゲームボーイ = GameBoy

0 likes
Ismael Farfan 2020-04-07 01:25:04

Am I the only one hearing he say "cockroach" instead of "cartridge"?

0 likes
Johnson Long 2020-04-20 16:11:11

Product from 1985 has copyright laws,, all proper, all legal, safe product.
Product from 2019 china, no copy right law, copied technology, illegal, pirates, may explode in your pocket.

1 like
o0julek0o 2020-04-16 15:10:24

I just hope the sacrificial cartridge was one of those awful sports games

0 likes
Replies (2)
stacksmashing 2020-04-17 21:57:35

It was Tetris - and yes, it hurt :O

0 likes
o0julek0o 2020-04-17 22:06:12

@stacksmashing nooo, whyyy

0 likes
miguel panta 2021-02-05 22:11:38

superb

0 likes
Bichael Stevens 2021-04-06 13:13:19

Where is part 1???

0 likes
Noah Neuber 2021-02-08 22:56:16

You're from Germany aren't you
Btw great video

0 likes
slendi 2020-03-28 18:19:04

Nice.

3 likes
DryBananaHippyHat 2020-03-28 20:24:45

Nice.

1 like
B3n Yomismo 2021-02-04 21:12:32

Nintendo: >:(

0 likes
choccy milk 2021-02-06 04:49:50

time to make my gbc say bruh

0 likes
buder5 2021-05-13 03:03:59

32kb carthridge LUL

0 likes
Mete Kaan Aktay 2020-03-28 18:27:27

Can you continue to reversing Wannacry, please?

4 likes
Codii Studios 2021-02-07 15:12:59 (edited 2021-02-07 15:13:44 )

3:06 yooo this guy hacked nintendo it says
stacksmashing

hacked
nintendo

0 likes
Orange Juce 2020-04-08 20:31:26

Um.. Cloning Dmg hardware... Anyone?

0 likes
BoxxyDough 2020-12-22 01:15:31

HACK THE PLANNNETTTTTTTTTTTTTTTTT

1 like
Min Htet Nyi 2022-01-08 19:44:10

sorry to bother but can someone tell me how and what to study to understand all this.

0 likes
jeff boi 2021-05-17 13:58:08

wait wha if you made it so that the audio pn plays rickroll upon first check lololol

0 likes
Dolphin 69 2020-08-17 16:29:36

Oh mann, man dein akzent ist super xD

0 likes
Dheeraj Karki 2020-04-09 16:37:19

Why i am watching this at 1 Am.

0 likes
ArsenTech 2021-06-15 12:26:59

Interesting

0 likes
robunzatsu 2020-04-07 18:31:59

just a normie passerby that got this vid through recommendations

0 likes
PGTMR2 2020-04-10 01:51:00

Tetris with all long straight pieces muahahah muahahahahaha

0 likes
William H 2020-04-13 09:26:46

oh sweet!
Finally I can have a custom version of Tetris that says "PENIS" when I boot it up!

7 likes
Luigi Super 2020-04-06 05:57:14

cool

0 likes
Abul Al Arabi 2021-05-06 15:52:57

Wow

0 likes
Benrico Krog 2020-04-15 16:51:37

Here from liveoverflow✌🏼

6 likes
dj videos 2021-02-08 11:35:51

So much filler to stretch it to 10 mins...

0 likes
EndOfLineTech 2020-05-18 20:16:47

Technically, (all that matters in a court room) (also psa, not that it reallly matters anymore) no matter what, Nintendo has the upper hand, even if you do this, you still have the word “Nintendo” and are using it to misrepresent one self and the cartridge

0 likes
BRAILOR js 2020-04-24 08:18:40

nice

1 like
Mooootrr 2020-03-28 17:54:41

POST MORE OFTEN

2 likes
Oktay Bekar 2021-02-05 23:33:46

dann kannst du mir bestimmt helfe. ich arbeite seit knapp 1.5 Jahren mit nem Kumpel von der Uni an nem eigenen Gameboy. wir wollte die möglichkeit schaffen für jeden privaten eine konsole zu bieten für die man umsonst spiele machen kann. also ohne license und so. wir haben aber einige probleme mit dem vram und rom. hast du discord oder so?

0 likes
Sontapää11 Jokulainen 2020-07-12 08:02:07

Subbed.

0 likes
The_Legend#5074 My Discord 2021-02-06 23:20:14

10:00 for money mhm

0 likes
Jalisco El24 2020-04-11 20:45:45

Everytime i hear him say cartridge to me it sounds like he says cockroach

0 likes
ErCapoAlex [gamesgalaxy.it] 2021-02-15 08:17:47

♥️

0 likes
Prehistoricman 2020-10-22 11:12:29

There's a large difference between bisexual and beesexual ;)

0 likes
yousef elsayed 2020-03-28 20:19:35

what i should learn to be able to do what you just did?

1 like
Replies (1)
Jo Eds 2021-07-27 10:06:51

Patience.

0 likes
MD Moyan 2020-03-28 23:50:24

imma firin mah lazer

0 likes
James Davis 2021-02-15 01:27:03

"By" directional not "be" directional,

1 like
Anthonblogz :P 2021-02-12 23:32:13

i cant see the GB Maybe Try harder

0 likes
Replies (1)
Anthonblogz :P 2021-02-12 23:32:32

as i mean i cant see the words in the GB

0 likes
Lilithe Lotor 2020-04-07 00:14:12

Macked? Wow... mack-daddy of the GB over here

0 likes
Althu electronics 2020-04-15 15:59:06

Hi sir you please helping. Arduino program

0 likes
Replies (2)
stacksmashing 2020-04-15 20:24:40

Sorry, don’t understand what you mean

0 likes
Althu electronics 2020-04-16 05:31:16

@stacksmashing

Can you teach me the program?
(This Arduino program)

0 likes
Michael Dodd 2021-02-06 11:58:03

I don't understand why they would bother, in the real world Nintendo would have sued anyway knowing that the rom still contained the Nintendo(R) logo in it and would have found it during disclosure in any court case.

0 likes
dominic nunes alves 2020-04-10 21:46:20

Sprichst du deutsch ? Dein Englisch hört sich wie meins an ^^

0 likes
Replies (2)
stacksmashing 2020-04-11 08:36:19

Akzent? Welcher Akzent? 😂 Ja, komme aus Deutschland!

1 like
dominic nunes alves 2020-04-11 13:00:04

stacksmashing / Ghidra Ninja haha nicht böse gemeint, trotzdem geiles Video 👍🏼😄

1 like
R. pizzamonkey 2021-05-15 03:07:47

What language is that at 6:49 ?

0 likes
Replies (1)
stacksmashing 2021-05-15 07:16:29

Verilog

1 like
zlckm's Old Channel 2021-02-07 19:59:17

hackboy

0 likes
ExTaCiii 2020-04-09 16:03:32

Can you be more quiet next time?

0 likes
Khan 2020-04-08 19:18:52

About 30 years too late.

0 likes
Jonathan Wick 2020-03-30 02:26:14

Couldn't you have just used an Arduino instead of an FPGA (that way you wouldn't need level shifters)?

2 likes
Replies (7)
Michał Bojarski 2020-03-30 06:04:53

with mcu it a bit more complicated as you have to check how fast rom puts its data out. ROMs are fast, MCU like arduino would need first to read address line, analyze it, read flash and put it on gpio. It all takes processor clocks

1 like
Jonathan Wick 2020-03-30 11:22:53

@Michał Bojarski Thanks for your reply. I have done something similar with an Arduino Mega and yes the code was much more complicated than the FPGA code in the video but the hardware setup was much cleaner.

1 like
VoidField101x 2020-03-30 17:43:22 (edited 2020-03-30 19:26:14 )

Well I don't think that it would be very flexible. Sure a Arduino / AVR is flexible, but with about 16 MHz and the GameBoy with about 4 Mhz you don't have that much time to handle everything. While instructions on the Gameboy will take more than 4 clockcycles (so the speed is more about 1Mhz), the Arduino still has to finish outputting data in about 16 cycles (while staying in sync with the data bus). And that ignores the weird timing issues / requirements some Processors have, like a data hold and setup times.

To be fair, I didn't do much research about the specific timings of all cpu instructions (neither for the Gameboy nor for AVR Processors) or the timing requirements for the Gameboy data bus. But it can get very annoying and complicated to debug timing issues.
But it might be worth trying.

2 likes
Jonathan Wick 2020-03-31 01:45:34

​@VoidField101x As i said i've done it with a nearly identical device and you are right the most annoying thing about it was the timing but after i looked at the ATmega328 datasheet
i figured out what registers must be set to what values to get the timing right and it worked like a charm.

1 like
stacksmashing 2020-03-31 06:58:10

​@Jonathan Wick The problem is not only speed, but also that the ATmega328 doesn't have enough flash to store code + game - and for the more complex carts you don't have enough RAM to implement i.e. a ROM cartridge. I also looked at using an STM32 (which some people also did in the past), but in the end the FPGA makes life so much easier - and makes it much easier to explain :)

2 likes
Jonathan Wick 2020-03-31 18:00:40

@stacksmashing Thanks for replying. I used an external RAM chip with the ATmega but i get your point ;)

1 like
Eduardo Anonimo 2020-04-04 23:00:46

@Jonathan Wick More info please, im interested in that but not for gaming purposes.

0 likes
LunatiC OnE 2020-04-11 11:18:04

Dude why you sound like you record your voice secretly and afraid of something

0 likes
kev_rcng 2021-06-10 07:19:20

Are you a german?

0 likes
Augenhaber 2021-02-06 01:45:38

uff.. Ganz schrecklicher Akzent 🙈

0 likes
Reverse Yigit 2021-02-12 09:48:41

Omg

0 likes
HelaFaye 2020-03-28 17:42:13

I love you

5 likes
hypurban 2020-04-05 18:49:36

BI is pronounced like BYE. BI-directional, not BEE-directional

0 likes
Replies (1)
stacksmashing 2020-04-05 20:05:30

Thanks, will try to say it correctly next time - in my language it’s pronounced bee directional :)

1 like
D N 2021-02-18 08:25:59

Why

0 likes
Silentt Ivan 2021-02-10 17:57:55

Oof

0 likes
Jeetender Kakkar 2021-02-13 08:12:01

10000

0 likes
TobbAnimations 2021-02-03 17:00:42

MacKed

0 likes
sürünen adam 2021-08-04 14:49:36

res

0 likes
ネ ⟩/Zîør∆\⟨ -- ? 2020-05-30 01:58:46

Cıctendo

0 likes
Coding with Barnes 2021-06-23 11:06:01

Yah

0 likes
Jack Baumgart 2020-04-09 11:43:11

%z

0 likes