KABUTO

This forum is for the discussion of dumping games. Get help with your dumping here.

Moderator: Moderators

Post Reply
hotaru
Posts: 98
Joined: Thu Jun 28, 2007 8:41 pm
Location: twilight

KABUTO

Post by hotaru »

Code: Select all

resource (
	name "KABUTO Ver.1.01d"
	description "[KABUTO Ver.1.01d]"
	rom ( name MPR-21931-X2.IC501 size 2097152 crc 89F2B1A1 md5 E10C53C2F8B90BAB96EAD2D368858623 sha1 8951D1BB219AB2FF8583033D2119C899CC81F18C )
)
i've dumped the above from the 3 following models:
Dreamcast MODEL No.HKT-3000 [NTSC|J]
Dreamcast MODEL No.HKT-3010 [NTSC|J]
Dreamcast HKT-3020 [NTSC|U]

this confirms my suspicion that the BIOS are: (1) not region specific & (2) that the region data is coded on another IC. i've yet to examine the differences in syscalls (and they do differ in [NTSC|J] & [NTSC|U] models using the same BIOS.)

does anyone know what IC the region data is coded/stored & from what IC the syscalls are taken? also, does anyone know what range of memory IC401 uses?

on to the documentation request:

Code: Select all

resource (
	name "KABUTO Ver.1.004"
	description "[KABUTO Ver.1.004]"
	rom ( name MPR-21068.IC501 size 2097152 crc 5454841F md5 37C921EB47532CAE8FB70E5D987CE91C sha1 1EA132C0FBBF07EF76789EADC07908045C089BD6 )
)
i've also dumped the above from a Dreamcast MODEL No.HKT-3000 [NTSC|J]. note that all the above coded BIOS are named MPR-XXXXX.IC501 or MPR-XXXXX-XX.IC501. the name is stamped on IC501. the Dreamcast is very easy to disassemble & it is my hope that other Dumpcast members (especially you HKT-3030 users) will help in properly documenting these ICs.

thanks all & more on the syscall data sometime next week... :wink:
User avatar
executter
Posts: 407
Joined: Mon Dec 10, 2007 5:04 am
Contact:

Post by executter »

yep i also verified this from my dreamcast.
the other bios "KABUTO Ver.1.004" comes only with the first jp dreamcast (it seems that only GD handling routines have been updating on the newer bios).

the region data is stored in the 128kb flash --> IC502

don't know exactly where syscall is, but since some section of syscall & bios are very similar, i think at dc's boot, syscall is "copying & modifying" into RAM from the bios (and other source ???). but i'm not sure.

for you, what is IC401's function ?
hotaru
Posts: 98
Joined: Thu Jun 28, 2007 8:41 pm
Location: twilight

Post by hotaru »

@executter- to be more precise, i know that the region data is written to IC502 & was inquiring as to what IC writes to it. btw, any ideas on how to factory reset the flash?

IC401 is a SEGA 315-6258 custom ASIC (QFP56). not sure of it's function, but assume it to've something to do w/ video.

thanks mate.
User avatar
executter
Posts: 407
Joined: Mon Dec 10, 2007 5:04 am
Contact:

Post by executter »

http://mc.pp.se/dc/syscalls.html

from my dreamcast magazine, IC401 is described as an unit processing video (sorry for my poor translation :twisted: ) for RGB output. I don't know more on this chips and how it works.
hotaru
Posts: 98
Joined: Thu Jun 28, 2007 8:41 pm
Location: twilight

Post by hotaru »

@executter- thanks. forgot to check marcus comstedt's page. :oops: DC-TOOL GUI - Version 2.0 - by [big_fury]SiZiOUS is said to be able to reset IC502, but i've really no idea what it will actually do to the partition... any other known methods of factory reseting IC502?
Last edited by hotaru on Sat Jun 07, 2008 7:16 am, edited 2 times in total.
User avatar
executter
Posts: 407
Joined: Mon Dec 10, 2007 5:04 am
Contact:

Post by executter »

maybe FlashReset : http://dreamagain.free.fr/FlashReset_alcohol.rar
"WARNING - MUST READ
-------------------

* When you burn this on a cd, be sure to clearly write what it
is. You won't want to use it by mistake. It doesn't ask you for
confirmation or anything.

* If you use this program after you gone online in PSO once (or
more) with the serial # currently stored in your DC, you'll no
longer be able to go online again with this serial # without
calling Sega and ask them to reset it.

* Beware also that all PSO saves created with a certain serial #
won't be recognized with another serial #.

* All your ISP settings will be erased too. (For Europeans users,
it means that you'll have to launch dreamkey and select
reinstall-me. This, of course, only if you don't use the PW
browser to setup another ISP)



WHAT IT IS ?
------------

This little prog will allow you to reset your dreamcast internal
memory, erasing all isp settings, and, most notably, PSO serial
number.

It's useful to run import JP PSOv.2 over an US (and probably EU)
PSOv.1. Note that if you do this, you'll of course won't be able
to re-use your v1 saves. You'll have to restart from scratch.

Note that I don't have PSOv.2 myself, and don't know all of the
details to make it work.

I just quickly hacked this stuff together because I had to reset
my DC's internal memory for a complicated PSO serial # mess, and
it seems that many people need this these days with import
PSOv.2. There's also the alternative to use v1 PW browser and
hold B+X at start, but for people who can't find PW browser v1,
this one may come handy.

HOW TO USE
----------

Just put the CD in your dreamcast and power it up. Once the SEGA
license screen appear, the screen's border should become red,
then green. It is red while erasing the flash, and turn green
when it's done. It's very quick, it takes approx 1/2 second.

Once the border is green, you can remove the cd and switch your
dreamcast off and on. It will ask you for the date and time like
the first time you powered it up.

Note that all your ISP settings will be erased too."
fackue
Posts: 10
Joined: Thu May 03, 2007 6:58 pm

Post by fackue »

Last edited by fackue on Thu Jun 26, 2008 4:37 pm, edited 1 time in total.
hotaru
Posts: 98
Joined: Thu Jun 28, 2007 8:41 pm
Location: twilight

Post by hotaru »

@executter, fackue- many thanks. :D

DC flashrom reset tool seems to delete only partial sections of the IC502 partition. all information pertaining to GD-ROMs previously loaded remain intact. :( i've noticed the SYSCALLS.BIN hash varies when the GD-ROM ASSY is working & idle. note that i'ven't yet checked for variations in said hash when booting GD-ROMs with differing peripheral strings... only with httpd-ack v20071123 server in the drive.
hotaru
Posts: 98
Joined: Thu Jun 28, 2007 8:41 pm
Location: twilight

MPR-21931-X1.IC501

Post by hotaru »

Code: Select all

resource (
	name "KABUTO Ver.1.01d"
	description "[KABUTO Ver.1.01d][GDC Version 1.10 1999-03-31 MP]"
	rom ( name MPR-21931-X1.IC501 size 2097152 crc 89F2B1A1 md5 E10C53C2F8B90BAB96EAD2D368858623 sha1 8951D1BB219AB2FF8583033D2119C899CC81F18C )
	rom ( name MPR-21931-X2.IC501 size 2097152 crc 89F2B1A1 md5 E10C53C2F8B90BAB96EAD2D368858623 sha1 8951D1BB219AB2FF8583033D2119C899CC81F18C )
)
just found a bd w/ MPR-21931-X1.IC501! the dump was identical to MPR-21931-X2.IC501... hmmmm. the hunt for undumped BIOS continues...
Quzar
Posts: 52
Joined: Mon Apr 23, 2007 1:22 pm
Location: Miami, FL
Contact:

Post by Quzar »

hrm, somehow I missed this thread ages ago. Now that I'm home with my DCs though, I'll find a bunch of boards and post if I find a different kind.

In addition to those you posted, I have a KABUTO ver.1.011 from my set5 box. I don't have any other boards dumped, but I'll list here if IC names differ and see if I can dump them at a later date.

IC BD KATANA MAIN VA0 837-13392-04 (171-7782C) IC501: "SEGA / MPR-21086-X2 / 32647LA1 / J991146"

Each / represents a new line, that was a heatpipe NTSC-J 3010.

IC BD KATANA MAIN VA0 837-13392-02 (171-7782B) IC501: "MPR-21068 / SEGA JAPAN / 9850 D"

Another NTSCJ. Seems older as it's B instead of C and there is no

IC BD KATANA MAIN VA1 837-13778/02 (171-7965F-X3) IC501: "SEGA / MPR-21931-X1 / 019"

I'm pretty sure that was just a standard US DC. The board was out of case.

IC BD KATANA MAIN VA0 837-13392-04 (171-7782C) IC501: "MPR-21933 / SEGA JAPAN / 9928 D"

US release DC, manufactured august of 99.

IC BD KATANA MAIN VA1 837-13778 (171-7965E) IC501: "SEGA / MPR-21931-X2 / 1B6782LB / C001446"

A year 00 US DC.

Hope any of that gives clues. If there are any that seem like they may be different (I think the third would be a candidate) let me know and I'll try to get stuff set up to dump the bios.
I only upload the information, not images.
Quzar
Posts: 52
Joined: Mon Apr 23, 2007 1:22 pm
Location: Miami, FL
Contact:

Post by Quzar »

http://bbs.chinaemu.org/read-htm-tid-64492.html

Has pictures of a DC and bios chip that isn't of the MPR family.
I only upload the information, not images.
Quzar
Posts: 52
Joined: Mon Apr 23, 2007 1:22 pm
Location: Miami, FL
Contact:

Post by Quzar »

Just found a pic of the insides of a Sakura Wars DC. BIOS is MPR-23588-X2.

http://crystal-ice.tw/album/main.php?cm ... C01464.JPG
I only upload the information, not images.
Post Reply