[Dec/28/97]

Firetrap (Japanese)
-------------------

These images were read from a working firetrap, but it has a slight graphic
glitch on the top line of a couple of sprites (don't yet know if it's image
related!)

The roms from this board are mainly mask programmed, but 6 eproms. All roms
used were 27256's except for FT0E (character set) which was a 2764. 

Main Board              (Suspected Use)
----------
FT01 = E2               Tiles
FT02 = E3                 "
FT03 = E4                 "
FT04 = E6                 "
FT05 = J2                 "
FT06 = J3                 "
FT07 = J4                 "
FT08 = J6                 "
FT0A = A1               Z80 Code (Game)
FT0B = A2                 "
FT0C = A3                 "
FT0D = A4                 "
FT0E = C17              Charset

Sound Board
-----------
FT09 = H12              Sprites
FT10 = H14                "
FT11 = H15                "
FT12 = H16                "
FT13 = J10              6502 Code (Sound)
FT14 = J11                "

Images FT09,FT10,FT0B,FT0C,FT0D and FT0E were from eproms

Protection
----------
There is an empty socket, which normally has an 8751 microcontroller in it.
(at position F17) which is not present on my board. there is, however two
wired connections on the back of the board at this point. They go from pin's
39 and 40 of the socket to nearby pads. Pin 39 is wired to the pad next to
pin 36 (inside the socket). Pin 40 goes to the pad in line with pin 4 (again,
inside the socket.)

I have included a GIF file, showing details of these patches (8751.GIF)

Other Patches
-------------
There is also a single wire on the sound board, although this must have
been added at manufacture, as the IC affected is inserted after the wirewrap!

In addition there are several patches on the daughter board mounted on two
sockets that plugs into IC101 and IC102. Again, these look like factory made
modifications.




[MAME]

Fire Trap memory map

Z80:
0000-7fff ROM
8000-bfff Banked ROM (4 banks)
c000-cfff RAM
d000-d7ff bg #1 video/color RAM (alternating pages 0x100 long)
d000-dfff bg #2 video/color RAM (alternating pages 0x100 long)
e000-e3ff fg video RAM
e400-e7ff fg color RAM
e800-e97f sprites RAM

memory mapped ports:
read:
f010      IN0
f011      IN1
f012      IN2
f013      DSW0
f014      DSW1
f015      from pin 10 of 8751 controller
f016      from port #1 of 8751 controller

write:
f000      IRQ acknowledge
f001      sound command (also causes NMI on sound CPU)
f002      ROM bank selection
f003      flip screen
f004      NMI disable
f005      to port #2 of 8751 controller (signal on P3.2)
f008-f009 bg #1 x scroll
f00a-f00b bg #1 y scroll
f00c-f00d bg #2 x scroll
f00e-f00f bg #2 y scroll

interrupts:
VBlank triggers NMI.
the 8751 triggers IRQ

6502:
0000-07ff RAM
4000-7fff Banked ROM (2 banks)
8000-ffff ROM

read:
3400      command from the main cpu

write:
1000-1001 YM3526
2000      ADPCM data for the MSM5205 chip
2400      bit 0 = to sound chip MSM5205 (1 = play sample); bit 1 = IRQ enable
2800      ROM bank select

-