Dumpcast Forum Index Dumpcast
The Official Forum of the Dumpcast Project
Back to the main site
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

KABUTO

 
Post new topic   Reply to topic    Dumpcast Forum Index -> Dumping Games
View previous topic :: View next topic  
Author Message
hotaru



Joined: 29 Jun 2007
Posts: 98
Location: twilight

PostPosted: Tue Jan 22, 2008 6:03 am    Post subject: KABUTO Reply with quote

Code:

resource (
   name "KABUTO Ver.1.01d"
   description "[KABUTO Ver.1.01d]"
   rom ( name MPR-21931-X2.IC501 size 2097152 crc 89F2B1A1 md5 E10C53C2F8B90BAB96EAD2D368858623 sha1 8951D1BB219AB2FF8583033D2119C899CC81F18C )
)

i've dumped the above from the 3 following models:
Dreamcast MODEL No.HKT-3000 [NTSC|J]
Dreamcast MODEL No.HKT-3010 [NTSC|J]
Dreamcast HKT-3020 [NTSC|U]

this confirms my suspicion that the BIOS are: (1) not region specific & (2) that the region data is coded on another IC. i've yet to examine the differences in syscalls (and they do differ in [NTSC|J] & [NTSC|U] models using the same BIOS.)

does anyone know what IC the region data is coded/stored & from what IC the syscalls are taken? also, does anyone know what range of memory IC401 uses?

on to the documentation request:
Code:

resource (
   name "KABUTO Ver.1.004"
   description "[KABUTO Ver.1.004]"
   rom ( name MPR-21068.IC501 size 2097152 crc 5454841F md5 37C921EB47532CAE8FB70E5D987CE91C sha1 1EA132C0FBBF07EF76789EADC07908045C089BD6 )
)

i've also dumped the above from a Dreamcast MODEL No.HKT-3000 [NTSC|J]. note that all the above coded BIOS are named MPR-XXXXX.IC501 or MPR-XXXXX-XX.IC501. the name is stamped on IC501. the Dreamcast is very easy to disassemble & it is my hope that other Dumpcast members (especially you HKT-3030 users) will help in properly documenting these ICs.

thanks all & more on the syscall data sometime next week... Wink
Back to top
View user's profile Send private message
executter



Joined: 10 Dec 2007
Posts: 262

PostPosted: Tue Jan 22, 2008 7:56 pm    Post subject: Reply with quote

yep i also verified this from my dreamcast.
the other bios "KABUTO Ver.1.004" comes only with the first jp dreamcast (it seems that only GD handling routines have been updating on the newer bios).

the region data is stored in the 128kb flash --> IC502

don't know exactly where syscall is, but since some section of syscall & bios are very similar, i think at dc's boot, syscall is "copying & modifying" into RAM from the bios (and other source ???). but i'm not sure.

for you, what is IC401's function ?
Back to top
View user's profile Send private message
hotaru



Joined: 29 Jun 2007
Posts: 98
Location: twilight

PostPosted: Wed Jan 23, 2008 3:36 am    Post subject: Reply with quote

@executter- to be more precise, i know that the region data is written to IC502 & was inquiring as to what IC writes to it. btw, any ideas on how to factory reset the flash?

IC401 is a SEGA 315-6258 custom ASIC (QFP56). not sure of it's function, but assume it to've something to do w/ video.

thanks mate.
Back to top
View user's profile Send private message
executter



Joined: 10 Dec 2007
Posts: 262

PostPosted: Wed Jan 23, 2008 6:24 pm    Post subject: Reply with quote

http://mc.pp.se/dc/syscalls.html

from my dreamcast magazine, IC401 is described as an unit processing video (sorry for my poor translation Twisted Evil ) for RGB output. I don't know more on this chips and how it works.
Back to top
View user's profile Send private message
hotaru



Joined: 29 Jun 2007
Posts: 98
Location: twilight

PostPosted: Thu Jan 24, 2008 3:41 pm    Post subject: Reply with quote

@executter- thanks. forgot to check marcus comstedt's page. Embarassed DC-TOOL GUI - Version 2.0 - by [big_fury]SiZiOUS is said to be able to reset IC502, but i've really no idea what it will actually do to the partition... any other known methods of factory reseting IC502?

Last edited by hotaru on Sat Jun 07, 2008 1:16 pm; edited 2 times in total
Back to top
View user's profile Send private message
executter



Joined: 10 Dec 2007
Posts: 262

PostPosted: Thu Jan 24, 2008 10:43 pm    Post subject: Reply with quote

maybe FlashReset : http://dreamagain.free.fr/FlashReset_alcohol.rar

Quote:
"WARNING - MUST READ
-------------------

* When you burn this on a cd, be sure to clearly write what it
is. You won't want to use it by mistake. It doesn't ask you for
confirmation or anything.

* If you use this program after you gone online in PSO once (or
more) with the serial # currently stored in your DC, you'll no
longer be able to go online again with this serial # without
calling Sega and ask them to reset it.

* Beware also that all PSO saves created with a certain serial #
won't be recognized with another serial #.

* All your ISP settings will be erased too. (For Europeans users,
it means that you'll have to launch dreamkey and select
reinstall-me. This, of course, only if you don't use the PW
browser to setup another ISP)



WHAT IT IS ?
------------

This little prog will allow you to reset your dreamcast internal
memory, erasing all isp settings, and, most notably, PSO serial
number.

It's useful to run import JP PSOv.2 over an US (and probably EU)
PSOv.1. Note that if you do this, you'll of course won't be able
to re-use your v1 saves. You'll have to restart from scratch.

Note that I don't have PSOv.2 myself, and don't know all of the
details to make it work.

I just quickly hacked this stuff together because I had to reset
my DC's internal memory for a complicated PSO serial # mess, and
it seems that many people need this these days with import
PSOv.2. There's also the alternative to use v1 PW browser and
hold B+X at start, but for people who can't find PW browser v1,
this one may come handy.

HOW TO USE
----------

Just put the CD in your dreamcast and power it up. Once the SEGA
license screen appear, the screen's border should become red,
then green. It is red while erasing the flash, and turn green
when it's done. It's very quick, it takes approx 1/2 second.

Once the border is green, you can remove the cd and switch your
dreamcast off and on. It will ask you for the date and time like
the first time you powered it up.

Note that all your ISP settings will be erased too."
Back to top
View user's profile Send private message
fackue



Joined: 04 May 2007
Posts: 10

PostPosted: Fri Jan 25, 2008 10:29 pm    Post subject: Reply with quote

executter wrote:
maybe FlashReset : http://dreamagain.free.fr/FlashReset_alcohol.rar

http://dchelp.dcemulation.org/personal/flashreset.7z - Nero
http://dchelp.dcemulation.org/personal/flashreset.rar - DiscJuggler


Last edited by fackue on Thu Jun 26, 2008 10:37 pm; edited 1 time in total
Back to top
View user's profile Send private message AIM Address
hotaru



Joined: 29 Jun 2007
Posts: 98
Location: twilight

PostPosted: Sat Jan 26, 2008 10:59 pm    Post subject: Reply with quote

@executter, fackue- many thanks. Very Happy

DC flashrom reset tool seems to delete only partial sections of the IC502 partition. all information pertaining to GD-ROMs previously loaded remain intact. Sad i've noticed the SYSCALLS.BIN hash varies when the GD-ROM ASSY is working & idle. note that i'ven't yet checked for variations in said hash when booting GD-ROMs with differing peripheral strings... only with httpd-ack v20071123 server in the drive.
Back to top
View user's profile Send private message
hotaru



Joined: 29 Jun 2007
Posts: 98
Location: twilight

PostPosted: Tue Jun 10, 2008 3:45 am    Post subject: MPR-21931-X1.IC501 Reply with quote

Code:

resource (
   name "KABUTO Ver.1.01d"
   description "[KABUTO Ver.1.01d][GDC Version 1.10 1999-03-31 MP]"
   rom ( name MPR-21931-X1.IC501 size 2097152 crc 89F2B1A1 md5 E10C53C2F8B90BAB96EAD2D368858623 sha1 8951D1BB219AB2FF8583033D2119C899CC81F18C )
   rom ( name MPR-21931-X2.IC501 size 2097152 crc 89F2B1A1 md5 E10C53C2F8B90BAB96EAD2D368858623 sha1 8951D1BB219AB2FF8583033D2119C899CC81F18C )
)

just found a bd w/ MPR-21931-X1.IC501! the dump was identical to MPR-21931-X2.IC501... hmmmm. the hunt for undumped BIOS continues...
Back to top
View user's profile Send private message
Quzar



Joined: 23 Apr 2007
Posts: 51
Location: Miami, FL

PostPosted: Wed Jun 25, 2008 2:10 am    Post subject: Reply with quote

hrm, somehow I missed this thread ages ago. Now that I'm home with my DCs though, I'll find a bunch of boards and post if I find a different kind.

In addition to those you posted, I have a KABUTO ver.1.011 from my set5 box. I don't have any other boards dumped, but I'll list here if IC names differ and see if I can dump them at a later date.

IC BD KATANA MAIN VA0 837-13392-04 (171-7782C) IC501: "SEGA / MPR-21086-X2 / 32647LA1 / J991146"

Each / represents a new line, that was a heatpipe NTSC-J 3010.

IC BD KATANA MAIN VA0 837-13392-02 (171-7782B) IC501: "MPR-21068 / SEGA JAPAN / 9850 D"

Another NTSCJ. Seems older as it's B instead of C and there is no

IC BD KATANA MAIN VA1 837-13778/02 (171-7965F-X3) IC501: "SEGA / MPR-21931-X1 / 019"

I'm pretty sure that was just a standard US DC. The board was out of case.

IC BD KATANA MAIN VA0 837-13392-04 (171-7782C) IC501: "MPR-21933 / SEGA JAPAN / 9928 D"

US release DC, manufactured august of 99.

IC BD KATANA MAIN VA1 837-13778 (171-7965E) IC501: "SEGA / MPR-21931-X2 / 1B6782LB / C001446"

A year 00 US DC.

Hope any of that gives clues. If there are any that seem like they may be different (I think the third would be a candidate) let me know and I'll try to get stuff set up to dump the bios.
_________________
I only upload the information, not images.
Back to top
View user's profile Send private message Visit poster's website AIM Address MSN Messenger
Quzar



Joined: 23 Apr 2007
Posts: 51
Location: Miami, FL

PostPosted: Thu Nov 06, 2008 5:57 pm    Post subject: Reply with quote

http://bbs.chinaemu.org/read-htm-tid-64492.html

Has pictures of a DC and bios chip that isn't of the MPR family.
_________________
I only upload the information, not images.
Back to top
View user's profile Send private message Visit poster's website AIM Address MSN Messenger
Quzar



Joined: 23 Apr 2007
Posts: 51
Location: Miami, FL

PostPosted: Mon Jan 04, 2010 10:19 am    Post subject: Reply with quote

Just found a pic of the insides of a Sakura Wars DC. BIOS is MPR-23588-X2.

http://crystal-ice.tw/album/main.php?cmd=imageview&var1=My_Stuff%2FVideo+Gaming%2FDreamcast%2FDSC01464.JPG
_________________
I only upload the information, not images.
Back to top
View user's profile Send private message Visit poster's website AIM Address MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    Dumpcast Forum Index -> Dumping Games All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

Anti Bot Question MOD - phpBB MOD against Spam Bots
Blocked registrations / posts: 641 / 0