https://wiki.pcbotaku.com/wiki/api.php?action=feedcontributions&feedformat=atom&user=Invzim 2026-10-11T12:47:30Z User contributions MediaWiki 1.43.9 https://wiki.pcbotaku.com/wiki/index.php?title=Category:Hardware&diff=263 2022-10-16T14:05:02Z

<p>Invzim: Created blank page</p> <hr /> <div></div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:PCB&diff=262 2022-10-16T14:04:49Z

<p>Invzim: Created blank page</p> <hr /> <div></div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Naomi&diff=261 2022-10-16T14:04:39Z

<p>Invzim: Naomi</p> <hr /> <div></div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Disc_Layout&diff=258 2016-05-13T10:59:05Z

<p>Invzim: Created page with &quot;Category:Naomi ==GD-ROM Layout== GD-ROM&#039;s contain 2352 bytes pr sector, with 2048 available for data payload and the rest for error-checking - the same as [http://en.wikipedi...&quot;</p> <hr /> <div>[[Category:Naomi]]<br /> ==GD-ROM Layout==<br /> GD-ROM's contain 2352 bytes pr sector, with 2048 available for data payload and the rest for error-checking - the same as<br /> [http://en.wikipedia.org/wiki/CD-ROM CD-rom's].<br /> <br /> Naomi GD-ROMS contain 3 sessions.<br /> * low density data track (variable size)<br /> * audio track (variable size)<br /> * high density data track (fixed size, always starts at sector 45000, or 10:00:00 - ten minutes)<br /> <br /> The high density track that always starts at sector 45000 contains 3(4) files. The last sector is 549299, and with two seconds for postgap, 75*2, last usable sector is 549 149<br /> * NAOMIGD.ROM - identical file on all(?) games, probably equivalent to 1ST_READ.BIN on dreamcast<br /> * Bxx.BIN - a 256 byte file, containing name of image file to be loaded, and a CRC32 checksum of image file<br /> * a DIMM image file, the actual game loaded into DIMM memory<br /> <br /> In addition, the first 16 sectors (32768 bytes) must be present - dreamcast docs often refer to this chunk as &quot;IP.BIN&quot;, although you can call it whatever you want.<br /> <br /> ==Creating Compatible layout==<br /> Iso image of game-data must begin at sector 45000. To acheive this, first make a dummy iso image that is exactly 92,160,000 bytes long - 92160000 bytes/2048 bytes pr sector=45000, this can be done by making an iso of a blank file that is 91,80,3648 bytes. In this example, we may call this &quot;45000.iso&quot;.<br /> <br /> Next create an iso for the game data containing the 3 files for the high density data track, we can call this &quot;track3.iso&quot;:<br /> *Bxx.BIN<br /> *NAOMIGD.BIN<br /> *GAME.BIN<br /> <br /> mkisofs -sort ./sfile -v -A&quot; &quot; -sysid &quot;SEGA SEGAKATANA&quot; -publisher &quot;SEGA ENTERPRISES,LTD.&quot; -V &quot;ZERO3_UPPER_GD&quot; -volset &quot;ZERO3_UPPER_GD&quot; -p &quot;CRI CD CRAFT VER.2.32&quot; -o track3.iso -C0,45000 -G IP.BIN ./t3files<br /> <br /> The processing of sort files appear to be pseudorandom, and highly annoying. This works, sfile:<br /> ./t3files/NAOMIGD.BIN 97<br /> ./t3files/BCY.BIN 98<br /> ./t3files/ZERO3ROM.BIN 99<br /> ./t3files/BLANK 100<br /> <br /> Sort file Rules: files closes to the rim (highest sector) should be placed FIRST in the file, with the LOWEST number. The mkisofs parameter ./t3files, ./t3files/*, t3files/* gives different sorts. Parameter ./t3files matches ./t3files/ in the file. Go figure..<br /> <br /> You don't need a large dummy file (BLANK) that is positioned at the start of the ISO, but the game loads faster - and is a trick to place the files at the very end of the disc like the original GD-ROM.<br /> <br /> combine the images with dd, or copy /b and burn.<br /> dd if=track3.iso of=45000.iso bs=2048 seek=45000</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Naomi_CF_boot&diff=256 2013-08-01T20:38:44Z

<p>Invzim: </p> <hr /> <div>[[category:Naomi]]<br /> <br /> The NAOMI (including Chihiro and Triforce) Compact Flash solution is a 'drop in' replacement for the GD-ROM system. The setup includes:<br /> <br /> *Compact Flash reader unit (Sega Japan made, with common SCSI style interface connector and 5 pin GD-ROM power header)<br /> *Firmware update GD-ROM (specific to system for included game only)<br /> *Security PIC<br /> *Compact Flash card with encrypted game image (manufactured by Hagiwara Sys-Com)<br /> <br /> The solution appears to be exclusive the UK.<br /> <br /> For the Naomi, a version of the firmware that bypasses the check for Hagiwara Sys-Com cards exists. This version is &quot;hacked&quot;, as the upgrade says 4.02, but the serial port output still reports the version to be gcxb-2.0.0 v4.01/v4.00 on start up.<br /> <br /> ===Step 1 - get the seed key===<br /> All ATA devices have a 512 byte structure that contains among other things, a 20 byte serial number represented in ASCII. The 3rd and 4th to the last ASCII characters, in hex, is used as the seed in this protection scheme/maze (offset 0x24 and 0x25 in the 512 byte block, or in desimal - offset 36 &amp; 37). Since the block is defined as 16bit words, the ascii characters are for some reason swapped, ABCDEFGH would be stored as BADCFEHG. Smartctl, part of the [http://sourceforge.net/projects/smartmontools/ S.M.A.R.T. Monitoring Tools] can read the serial number. It comes with all Linux distributions, and is also available for Windows. In the example below, 0x3037 is the seed key we're looking for.<br /> <br /> This number, is also what you need to input into various tools that prepare the CF card for you.<br /> <br /> ====Get part of serial number with smartctl====<br /> smartctl -r ataioctl,2 -i /dev/sda<br /> <br /> smartctl 5.40 2010-03-16 r3077 [x86_64-unknown-linux-gnu] (local build)<br /> Copyright (C) 2002-10 by Bruce Allen, http://smartmontools.sourceforge.net<br /> <br /> <br /> REPORT-IOCTL: Device=/dev/sda Command=IDENTIFY DEVICE<br /> Input: FR=...., SC=0x01, LL=...., LM=...., LH=...., DEV=...., CMD=0xec IN<br /> REPORT-IOCTL: Device=/dev/sda Command=IDENTIFY DEVICE returned 0<br /> <br /> ===== [IDENTIFY DEVICE] DATA START (BASE-16) =====<br /> 000-015: 5a 04 ef 03 00 00 10 00 00 00 00 02 3f 00 0f 00 |Z...........?...|<br /> 016-031: 10 7d 00 00 31 30 36 31 30 46 39 30 32 43 41 30 |.}..10610F902CA0|<br /> 032-047: 30 30 30 30 '''37 30''' 36 36 01 00 01 00 04 00 55 59 |0000'''70'''66......UY|<br /> 048-063: 4e 41 30 31 36 32 31 35 4d 32 20 42 4b 43 20 53 |NA016215M2 BKC S|<br /> 064-079: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | |<br /> 080-095: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 01 00 | ..|<br /> 096-111: 00 00 00 0f 00 00 00 02 00 00 07 00 ef 03 10 00 |................|<br /> 112-127: 3f 00 10 7d 0f 00 00 01 10 7d 0f 00 00 00 01 00 |?..}.....}......|<br /> 128-143: 03 00 e0 01 e0 01 78 00 78 00 00 00 00 00 00 00 |......x.x.......|<br /> 144-159: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 160-175: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 176-191: 1f 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 192-207: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 208-223: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 224-239: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 240-255: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 256-271: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 272-287: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 288-303: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 304-319: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 320-335: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 336-351: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 352-367: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 368-383: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 384-399: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 400-415: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 416-431: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 432-447: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 448-463: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 464-479: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 480-495: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> 496-511: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|<br /> ===== [IDENTIFY DEVICE] DATA END (512 Bytes) =====<br /> <br /> === START OF INFORMATION SECTION ===<br /> Device Model: 512MB CKS<br /> Serial Number: 0116F009C20A0000'''07'''66<br /> Firmware Version: YUAN1026<br /> User Capacity: 519,708,672 bytes<br /> Device is: Not in smartctl database [for details use: -P showall]<br /> ATA Version is: [No Information Found]<br /> ATA Standard is: [No Information Found]<br /> Local Time is: Sun Apr 24 22:28:55 2011 CEST<br /> SMART support is: Ambiguous - ATA IDENTIFY DEVICE words 82-83 don't show if SMART supported.<br /> A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options.<br /> <br /> ----<br /> <br /> The following started out as something copy/pasted (see document history), and expanded with detail as investigation ensued.<br /> <br /> #Read ATA IDENTIFY DEVICE data.<br /> #Read 2 bytes of the CF serial number (offset +0x24 in the identify structure). [This means games are locked to a specific card, i.e. copying data from one official Sega card to another official Sega card most likely won't work, unless by extreme coincidence the 2 bytes read have identical values.]<br /> #Use these 2 bytes as a word, and add 0x20 to the value. This resulting value will give the location of the xor &quot;key&quot; data sector.<br /> #Go to that sector, and xor this data (byte by byte) with the data in encrypted sector 0x277.<br /> #Use the same two bytes of the serial number as above as a word, but this time add 0x19.<br /> #Go to that sector, compute a sum of 32-bit dwords, accumulating in a 32-bit dword.<br /> #This value must match the 32-bit dword stored at offset 0x38 in sector 0x1D7.<br /> #The 8-byte manufacturer ID must match a specific value. [Hagiwara Sys-Com cards only.]<br /> ==References==<br /> http://www.compuphase.com/mbr_fat.htm<br /> <br /> http://averstak.tripod.com/fatdox/bootsec.htm<br /> <br /> [http://notinmame.blogspot.com/2011/04/happy-easter.html 4.02 Firmware]</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_rom_layout&diff=255 2013-07-31T19:18:28Z

<p>Invzim: </p> <hr /> <div>[[Category:CPS2]]<br /> <br /> ==Graphics Layout==<br /> When using eproms on a normal CPS2 board, the GFX eprom space is split into two chunks. The lower chunk, and the higher chunk.<br /> <br /> <br /> *Lower chunk consists of eproms 13,15,17,19<br /> *Higher chunk consists of eproms 14,16,18,20<br /> <br /> <br /> The eproms of each chunk are interleaved, so while the GFX eproms may be of different size, they are always the same size within each chunk. Some games only use one chunk, either the higher or lower. Because the way the interleaving works, you need 4 physical eproms for each chunk.<br /> <br /> <br /> *When using F and G PAL, the split is at 16mb (half of 32mb)<br /> *When using B pal, the split is at 8mb (half of 16mb)<br /> *PAL D &amp; E is not known<br /> <br /> ===Details about interleaving===<br /> *First 8 bytes of low chunk: eprom 13 byte 1&amp;2 | eprom 15 byte 1&amp;2 | eprom 17 byte 1&amp;2 | eprom 19 byte 1&amp;2<br /> *next 8 bytes of low chunk: eprom 13 byte 3&amp;4 | eprom 15 byte 3&amp;4 | eprom 17 byte 3&amp;4 | eprom 19 byte 3&amp;4<br /> this goes on until the split of the chunks, when it starts again with the even numbered roms<br /> *First 8 bytes of high chunk: eprom 14 byte 1&amp;2 | eprom 16 byte 1&amp;2 | eprom 18 byte 1&amp;2 | eprom 20 byte 1&amp;2<br /> *next 8 bytes of high chunk: eprom 14 byte 3&amp;4 | eprom 16 byte 3&amp;4 | eprom 18 byte 3&amp;4 | eprom 20 byte 3&amp;4<br /> <br /> ==cps2.c form MAME==<br /> With the info above, the MAME source is quite understandable<br /> <br /> <br /> ROM_REGION( 0x1400000, &quot;gfx&quot;, 0 )<br /> ROMX_LOAD( &quot;nff.13m&quot;,0x0000000,0x400000,CRC(c9fca741) SHA1(1781d4fc18b6d6f79b7b39d9bcace750fb61a5cf) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.15m&quot;,0x0000002,0x400000,CRC(f809d898) SHA1(a0b6af49e1780678d808c317b875161cedddb314) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.17m&quot;,0x0000004,0x400000,CRC(15ba4507) SHA1(bed6a82bf1dc1aa501d4c2d098115a15e18d446a) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.19m&quot;,0x0000006,0x400000,CRC(3dd41b8c) SHA1(676078baad789e25f6e5a79de29672587be7ff00) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.14m&quot;,0x1000000,0x100000,CRC(3fe3a54b) SHA1(0a8e5cae141d24fd8b3cb11796c44728b0acd69e) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.16m&quot;,0x1000002,0x100000,CRC(565cd231) SHA1(0aecd433fb4ca2de1aca9fbb1e314fb1f6979321) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.18m&quot;,0x1000004,0x100000,CRC(63ca5988) SHA1(30137fa77573c84bcc24570bccb7dba61ddb413c) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> ROMX_LOAD( &quot;nff.20m&quot;,0x1000006,0x100000,CRC(21eb8f3b) SHA1(efa69f19a958047dd91a294c88857ed3133fcbef) , ROM_GROUPWORD | ROM_SKIP(6) )<br /> <br /> In English, load 0x400000 bytes (4mb) from file nff.13m, start at offset 0. After each word (2 bytes), skip 6 bytes ahead. Same for rom 15m, but start at offset 2.<br /> <br /> For nff.14m we see that the start offset is the high chunk, starting at 0x1000000 (16mb).</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Main_Page&diff=254 2013-07-31T19:07:25Z

<p>Invzim: </p> <hr /> <div>This site is for all the stuff that is ok in MAME, but not on arcadeotaku - simple enough..<br /> <br /> This site is for people that think:<br /> *Hoarding information is lame<br /> *Selling conversions for money is lame<br /> *Conversions, repairs and mods of arcade hardware is fun and interesting<br /> <br /> <br /> [[:Category:IC|All IC Information]]<br /> <br /> [[:Category:Hardware|Great name for a category]]<br /> <br /> [[:Category:PCB|Details about specific PCB's]]<br /> <br /> [[:Category:Naomi|Details about the Naomi system]]<br /> <br /> [[:Category:CPS2|Details about the CPS2 system]]<br /> <br /> [[:Category:sys246|Details about the 246/256 system]]<br /> <br /> Cool links:<br /> *http://mayhewlabs.com/3dpcb</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Main_Page&diff=253 2013-07-31T19:06:08Z

<p>Invzim: </p> <hr /> <div>This site is for all the stuff that is ok in MAME, but not on arcadeotaku - simple enough..<br /> <br /> *It's better to share information than hoard it<br /> *Selling conversions for money is lame<br /> *Conversions and playing with arcade hardware is fun<br /> <br /> [[:Category:IC|All IC Information]]<br /> <br /> <br /> [[:Category:Hardware|Great name for a category]]<br /> <br /> [[:Category:PCB|Details about specific PCB's]]<br /> <br /> [[:Category:Naomi|Details about the Naomi system]]<br /> <br /> [[:Category:CPS2|Details about the CPS2 system]]<br /> <br /> [[:Category:sys246|Details about the 246/256 system]]<br /> <br /> Cool links:<br /> *http://mayhewlabs.com/3dpcb</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=User:Invzim&diff=252 2013-07-28T18:55:25Z

<p>Invzim: </p> <hr /> <div>==Original sdbz==<br /> Extract boot.bin with mymc<br /> offset 0x28:<br /> 4BBADF4BB3CBC2426F7E05E285C068C0<br /> E4583F13661191B72E5A84B0BAB81ED2<br /> <br /> ==Tekken 5.1 - try 1==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin with mymc<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Tekken 5.1 - try 2==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *strip ECC from file<br /> *Regenerate with ecc_check.exe<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Tekken 5.1 - try 3==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin with mymc<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *strip ECC from file<br /> *Flash to PS2 memorycard using hdproject<br /> *Read back memorycard with CECHZM1 USB adapter, using PS3MCA tool<br /> *write back to nand chip with eprom programmer<br /> *works<br /> <br /> <br /> <br /> ==Super Dragon Ball Z==<br /> Just to check system, reflashed original image back<br /> *works<br /> <br /> <br /> ==Soul Calibur 3==<br /> *Merge sc31001-na-a.ic002 sc31001-na-a_spr.ic002 to NM00031.bin<br /> *extract boot.bin with mymc<br /> *patch boot.bin with hex keys<br /> *add boot.bin with mymc<br /> *rename file to sc3-zim.bin<br /> *write back to nand chip<br /> *does not work, 3 beeps</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=User:Invzim&diff=251 2013-07-28T18:25:54Z

<p>Invzim: </p> <hr /> <div>==Original sdbz==<br /> Extract boot.bin with mymc<br /> offset 0x28:<br /> 4BBADF4BB3CBC2426F7E05E285C068C0<br /> E4583F13661191B72E5A84B0BAB81ED2<br /> <br /> ==Tekken 5.1 - try 1==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin with mymc<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Tekken 5.1 - try 2==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *strip ECC from file<br /> *Regenerate with ecc_check.exe<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Super Dragon Ball Z==<br /> Just to check system, reflashed original image back<br /> *works<br /> <br /> <br /> ==Soul Calibur 3==<br /> *Merge sc31001-na-a.ic002 sc31001-na-a_spr.ic002 to NM00031.bin<br /> *extract boot.bin with mymc<br /> *patch boot.bin with hex keys<br /> *add boot.bin with mymc<br /> *rename file to sc3-zim.bin<br /> *write back to nand chip<br /> *does not work, 3 beeps</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=User:Invzim&diff=250 2013-07-28T17:59:16Z

<p>Invzim: /* Soul Calibur 3 */</p> <hr /> <div>==Original sdbz==<br /> Extract boot.bin with mymc<br /> offset 0x28:<br /> 4BBADF4BB3CBC2426F7E05E285C068C0<br /> E4583F13661191B72E5A84B0BAB81ED2<br /> <br /> ==Tekken 5.1 - try 1==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin with mymc<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Tekken 5.1 - try 2==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *strip ECC from file<br /> *Regenerate with ecc_check.exe<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Soul Calibur 3==<br /> *Merge sc31001-na-a.ic002 sc31001-na-a_spr.ic002 to NM00031.bin<br /> *extract boot.bin with mymc<br /> *patch boot.bin with hex keys<br /> *add boot.bin with mymc<br /> *rename file to sc3-zim.bin<br /> *write back to nand chip<br /> *does not work, 3 beeps</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=User:Invzim&diff=249 2013-07-28T17:41:02Z

<p>Invzim: </p> <hr /> <div>==Original sdbz==<br /> Extract boot.bin with mymc<br /> offset 0x28:<br /> 4BBADF4BB3CBC2426F7E05E285C068C0<br /> E4583F13661191B72E5A84B0BAB81ED2<br /> <br /> ==Tekken 5.1 - try 1==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin with mymc<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Tekken 5.1 - try 2==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *strip ECC from file<br /> *Regenerate with ecc_check.exe<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Soul Calibur 3==<br /> *Merge sc31001-na-a.ic002 sc31001-na-a_spr.ic002 to NM00031.bin<br /> *extract boot.bin with mymc<br /> *patch boot.bin with hex keys<br /> *add boot.bin with mymc<br /> *rename file to sc3-zim.bin</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=User:Invzim&diff=248 2013-07-28T16:36:32Z

<p>Invzim: Created page with &quot;==Original sdbz== Extract boot.bin with mymc offset 0x28: 4B BA DF 4B B3 CB C2 42 6F 7E 05 E2 85 C0 68 C0 E4 58 3F 13 66 11 91 B7 2E 5A 84 B0 BA B8 1E D2 ==Tekken 5.1 ...&quot;</p> <hr /> <div>==Original sdbz==<br /> Extract boot.bin with mymc<br /> offset 0x28:<br /> 4B BA DF 4B B3 CB C2 42 6F 7E 05 E2 85 C0 68 C0 <br /> E4 58 3F 13 66 11 91 B7 2E 5A 84 B0 BA B8 1E D2<br /> <br /> ==Tekken 5.1 - try 1==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin with mymc<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *write back to NAND chip<br /> *does not work, 3 beeps<br /> <br /> ==Tekken 5.1 - try 2==<br /> *Merge te51verb_spr.ic002 and te51verb.ic002<br /> *extract boot.bin<br /> *patch with hex keys above<br /> *insert boot.bin with myc<br /> *strip ECC from file<br /> *Regenerate with ecc_check.exe<br /> *write back to NAND chip<br /> *does not work, 3 beeps</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=247 2013-07-26T21:12:33Z

<p>Invzim: </p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * K9F6408UOA<br /> * K9F6408UOB<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> * [[File:MBM30LV0064.PDF]] - Fujitsu MBM30LV0064 datasheet<br /> * TC58V64FT<br /> * [[File:TC58V64AFT.PDF]] - Toshiba TC58V64AFT datasheet<br /> ==Memory card pinout==<br /> http://www.hardwarebook.info/Sony_Playstation_Memory_Card<br /> <br /> <br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=242 2013-07-26T16:45:25Z

<p>Invzim: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> * [[File:MBM30LV0064.PDF]] - Fujitsu MBM30LV0064 datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=File:MBM30LV0064.PDF&diff=241 2013-07-26T16:44:44Z

<p>Invzim: </p> <hr /> <div></div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=240 2013-07-25T20:52:05Z

<p>Invzim: /* Desoldering method */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=239 2013-07-25T20:44:45Z

<p>Invzim: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=238 2013-07-25T20:22:01Z

<p>Invzim: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have.<br /> <br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=237 2013-07-24T20:05:59Z

<p>Invzim: /* listing/extracting files */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=236 2013-07-24T20:05:34Z

<p>Invzim: /* listing/extracting files */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=235 2013-07-24T19:59:45Z

<p>Invzim: </p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> <br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=234 2013-07-24T19:59:30Z

<p>Invzim: </p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> ==listing/extracting file==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> <br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=233 2013-07-24T19:20:45Z

<p>Invzim: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=File:K9F6408UOC.pdf&diff=232 2013-07-24T19:14:41Z

<p>Invzim: Datashseet</p> <hr /> <div>Datashseet</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=231 2013-07-24T19:12:27Z

<p>Invzim: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> NAND flash chips seen:<br /> *Samsung K9F6408U0C<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=230 2013-07-24T19:04:13Z

<p>Invzim: </p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> <br /> Image should be 8 650 752 bytes.<br /> NAND flash chips seen:<br /> *Samsung K9F6408UOC<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=229 2013-07-24T19:02:51Z

<p>Invzim: </p> <hr /> <div>==Memory Card==<br /> <br /> [http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> ==Dumping the memory card==<br /> Image should be 8 650 752 bytes.<br /> NAND flash chips seen:<br /> *Samsung K9F6408UOC<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> <br /> ==To be verified==<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=228 2013-07-24T19:02:39Z

<p>Invzim: </p> <hr /> <div>==Memory Card==<br /> <br /> [http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> ==Dumping the memory card==<br /> Image should be 8 650 752 bytes.<br /> NAND flash chips seen:<br /> *Samsung K9F6408UOC<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct dumps.<br /> <br /> <br /> ===To be verified===<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=227 2013-07-24T12:42:54Z

<p>Invzim: Created page with &quot;==Memory Card== [http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru] [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Me...&quot;</p> <hr /> <div>==Memory Card==<br /> <br /> [http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> ===To be verified===<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Main_Page&diff=226 2013-07-24T12:34:33Z

<p>Invzim: </p> <hr /> <div>[[:Category:IC|All IC Information]]<br /> <br /> <br /> [[:Category:Hardware|Great name for a category]]<br /> <br /> [[:Category:PCB|Details about specific PCB's]]<br /> <br /> [[:Category:Naomi|Details about the Naomi system]]<br /> <br /> [[:Category:CPS2|Details about the CPS2 system]]<br /> <br /> [[:Category:sys246|Details about the 246/256 system]]<br /> <br /> Cool links:<br /> *http://mayhewlabs.com/3dpcb</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=Main_Page&diff=225 2012-10-10T12:23:11Z

<p>Invzim: </p> <hr /> <div>[[:Category:IC|All IC Information]]<br /> <br /> <br /> [[:Category:Hardware|Great name for a category]]<br /> <br /> [[:Category:PCB|Details about specific PCB's]]<br /> <br /> [[:Category:Naomi|Details about the Naomi system]]<br /> <br /> [[:Category:CPS2|Details about the CPS2 system]]<br /> <br /> wiki now up on new server, sorry for the outage.. -zim<br /> <br /> Cool links:<br /> *http://mayhewlabs.com/3dpcb</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=M-Audio_BX8a&diff=224 2012-09-30T17:06:23Z

<p>Invzim: </p> <hr /> <div>[[Category:Hardware]]<br /> <br /> Terrible hum and distorted sounds, 4 of the main capacitors blown.<br /> <br /> *2 x 4700uf 50v 105c 22mm 37mm 10mm (Diameter, height, pitch)<br /> *2 x 2200uf 35v 105c 16mm 26mm 7mm<br /> *n x 220uf 25v 105c 8mm 11mm 4mm<br /> *n x 47uf 25v 105c 5mm 11mm 2mm</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=M-Audio_BX8a&diff=223 2012-09-30T16:52:53Z

<p>Invzim: </p> <hr /> <div>[[Category:Hardware]]<br /> <br /> Terrible hum and distorted sounds, 4 of the main capacitors blown.<br /> <br /> *2 x 4700uf 50v 105c 22mm 37mm 10mm (Diameter, height, pitch)<br /> *2 x 2200uf 35v 105c 15mm 26mm 7mm<br /> *n x 220uf 25v 105c 8mm 11mm 4mm<br /> *n x 47uf 25v 105c 5mm 11mm 2mm</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=M-Audio_BX8a&diff=222 2012-09-30T16:27:54Z

<p>Invzim: Created page with &quot;Category:Hardware Terrible hum and distorted sounds, 4 of the main capacitors blown. *2 x 4700uf 50v 105c 22mm 27mm 10mm (Diameter, height, pitch) *2 x 2200uf 35v 105c 15mm...&quot;</p> <hr /> <div>[[Category:Hardware]]<br /> <br /> Terrible hum and distorted sounds, 4 of the main capacitors blown.<br /> <br /> *2 x 4700uf 50v 105c 22mm 27mm 10mm (Diameter, height, pitch)<br /> *2 x 2200uf 35v 105c 15mm 26mm 7mm<br /> *n x 220uf 25v 105c 8mm 11mm 4mm<br /> *n x 47uf 25v 105c 5mm 11mm 2mm</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=221 2012-09-28T21:48:59Z

<p>Invzim: /* B-board qsound routing error */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===B-board qsound routing error===<br /> *93646B-3<br /> *93646B-4<br /> <br /> These earlier boards have what is suspected to be a PCB layout error affecting games that use the G PAL. Instead of routing the high address line of the qsound samples to to pin9 of PAL3, it instead routes a low address line. This results in garbled sounds.<br /> <br /> To fix this, lift pin9 of PAL3 out of socket and solder a jumper wire from it to pin C13 on connector CN3.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> unknown<br /> <br /> i1=1 i2=2 i4=4 i5=5 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = i2 * /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> /o18 = /i2 * /i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = /i4 * i5 output pin 17 is the enable line on eprom 18&amp;20<br /> /o16 = /i4 * /i5 output pin 16 is the enable line on eprom 17&amp;19<br /> /o15 = /i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12<br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_Cheat_Sheet&diff=220 2012-09-28T21:44:26Z

<p>Invzim: /* Merge Q-sound roms &lt;4mb */</p> <hr /> <div>[[Category:CPS2]]<br /> <br /> For G PAL and 27c322 for QSound and Graphics<br /> <br /> B board 93646B-4 is not compatible with proper G version of PAL3, use wire hack.<br /> <br /> ==Jumpers==<br /> *COOC [1-4] Audio Prog 1 eprom<br /> *COOC [5-9] Audio Prog 2 eprom<br /> *OCOC [10-13] Qsound 11 &amp; 12 eproms<br /> *CO CO CO CO CO CO CO CO [14-29] 13-20 GFX eproms<br /> <br /> ==Merge Q-sound roms &lt;4mb==<br /> When merging, make sure you don't overwrite the buffer when you load the second rom image.<br /> <br /> *Load rom 11, load rom 12 at offset 200000 - Label 11<br /> <br /> ==Merging GFX Roms &lt;4mb==<br /> *Load Rom 13, load rom 14 at offset 200000 - Label 13<br /> *Load Rom 15, load rom 16 at offset 200000 - Label 15<br /> *Load Rom 17, load rom 18 at offset 200000 - Label 17<br /> *Load Rom 19, load rom 20 at offset 200000 - Label 19</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=219 2012-09-28T13:38:56Z

<p>Invzim: /* PAL/GAL images */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===B-board qsound routing error===<br /> These earlier boards have what is suspected to be a PCB layout error, routing the qsound address line found on CN3 pin C14 to pin 9 of PAL3, instead of a higher address line found on CN3 pin 13. This results in garbled sounds because the address lines are not decoded properly when using the G pal (2x4mb eproms).<br /> <br /> *93646B-3<br /> *93646B-4<br /> <br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> unknown<br /> <br /> i1=1 i2=2 i4=4 i5=5 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = i2 * /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> /o18 = /i2 * /i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = /i4 * i5 output pin 17 is the enable line on eprom 18&amp;20<br /> /o16 = /i4 * /i5 output pin 16 is the enable line on eprom 17&amp;19<br /> /o15 = /i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12<br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=218 2012-09-27T23:27:51Z

<p>Invzim: /* PAL3 */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===B-board qsound routing error===<br /> These earlier boards have what is suspected to be a PCB layout error, routing the qsound address line found on CN3 pin C14 to pin 9 of PAL3, instead of a higher address line found on CN3 pin 13. This results in garbled sounds because the address lines are not decoded properly when using the G pal (2x4mb eproms).<br /> <br /> *93646B-3<br /> *93646B-4<br /> <br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> unknown<br /> <br /> i1=1 i2=2 i4=4 i5=5 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = i2 * /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> /o18 = /i2 * /i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = /i4 * i5 output pin 17 is the enable line on eprom 18&amp;20<br /> /o16 = /i4 * /i5 output pin 16 is the enable line on eprom 17&amp;19<br /> /o15 = /i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12<br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=217 2012-09-25T23:11:23Z

<p>Invzim: /* Version E */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> unknown<br /> <br /> i1=1 i2=2 i4=4 i5=5 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = i2 * /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> /o18 = /i2 * /i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = /i4 * i5 output pin 17 is the enable line on eprom 18&amp;20<br /> /o16 = /i4 * /i5 output pin 16 is the enable line on eprom 17&amp;19<br /> /o15 = /i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12<br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=216 2012-09-25T23:09:16Z

<p>Invzim: /* Version E */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> unknown<br /> <br /> i1=1 i2=2 i4=4 i5=5 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = i2 * /i1<br /> /o18 = /i2 * /i1<br /> /o17 = /i4 * i5<br /> /o16 = /i4 * /i5<br /> /o15 = /i7<br /> /o14 = i7<br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=215 2012-09-25T23:05:37Z

<p>Invzim: /* Version D */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=214 2012-09-25T23:04:37Z

<p>Invzim: /* Version D */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> i1=1 i2=2 i3=3 i4=4 i5=5 i6=6 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> /o19 = /i2 * i1 * /i3 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 * /i5 * /i6 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> o14 = /i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> o12 = gnd<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=213 2012-09-25T20:39:22Z

<p>Invzim: /* Version F */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> i1=1 i4=4 i7=7 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20<br /> <br /> /o19 = i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> /o17 = i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i7 output pin 15 is the enable line on eprom 11<br /> /o14 = i7 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=212 2012-09-25T20:38:01Z

<p>Invzim: /* Version G */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_Cheat_Sheet&diff=211 2012-09-25T20:22:19Z

<p>Invzim: </p> <hr /> <div>[[Category:CPS2]]<br /> <br /> For G PAL and 27c322 for QSound and Graphics<br /> <br /> B board 93646B-4 is not compatible with proper G version of PAL3, use wire hack.<br /> <br /> ==Jumpers==<br /> *COOC [1-4] Audio Prog 1 eprom<br /> *COOC [5-9] Audio Prog 2 eprom<br /> *OCOC [10-13] Qsound 11 &amp; 12 eproms<br /> *CO CO CO CO CO CO CO CO [14-29] 13-20 GFX eproms<br /> <br /> ==Merge Q-sound roms &lt;4mb==<br /> '''---NOT CONFIRMED WORKING---<br /> '''<br /> <br /> When merging, make sure you don't overwrite the buffer when you load the second rom image.<br /> <br /> *Load rom 11, load rom 12 at offset 200000 - Label 11<br /> <br /> ==Merging GFX Roms &lt;4mb==<br /> *Load Rom 13, load rom 14 at offset 200000 - Label 13<br /> *Load Rom 15, load rom 16 at offset 200000 - Label 15<br /> *Load Rom 17, load rom 18 at offset 200000 - Label 17<br /> *Load Rom 19, load rom 20 at offset 200000 - Label 19</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=210 2012-09-25T20:19:25Z

<p>Invzim: /* Version G */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> o12.oe = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=209 2012-09-25T20:19:09Z

<p>Invzim: /* Version G */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> The equations, or logic, of this chip is:<br /> i1=1 i4=4 i9=9 GND=10 /nc11=11 o12=12 o13=13 o14=14 o15=15 o16=16 o17=17 o18=18 o19=19 VCC=20 <br /> <br /> o19 = /i1 output pin 19 is the enable line on eprom 14&amp;16<br /> o18 = i1 output pin 18 is the enable line on eprom 13&amp;15<br /> o17 = /i4 output pin 17 is the enable line on eprom 18&amp;20<br /> o16 = i4 output pin 16 is the enable line on eprom 17&amp;19<br /> o15 = i9 output pin 15 is the enable line on eprom 11<br /> o14 = /i9 output pin 14 is the enable line on eprom 12 <br /> /o13 = gnd<br /> /o12 = vcc<br /> o12.oe = vcc<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=208 2012-09-25T20:01:54Z

<p>Invzim: /* PAL F-&gt;G hack */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3. This works on all revisions.<br /> <br /> ==PAL F-&gt;G hack, later model B boards==<br /> With 93646B-6 and 93646B-7, you can simply lift pin 7 and solder a jumperwire to pin 9.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim https://wiki.pcbotaku.com/wiki/index.php?title=CPS2_PAL3&diff=207 2012-09-25T19:56:04Z

<p>Invzim: /* PAL3 */</p> <hr /> <div>[[Category:CPS2]]<br /> ==PAL/GAL images==<br /> http://www.jammarcade.net/pal-dumps/<br /> <br /> ''As of 21 Sept 2012 - the G Pal from jamma arcade is not confirmed working, F version works great''<br /> <br /> ==PAL3==<br /> Deals with addressing the ROMS, 4(5) different versions. Original part is PALCE16V8H-15, 15 is the speed rating, 15ns. Pin compatible GAL is GAL16V8B-15, GAL16V8B-10 is also confirmed working.<br /> <br /> ===On rom board 93646B-4===<br /> *Pin 2 via jumpers go to A20 on eprom 13,14,15,16 (GFX low chunk)<br /> *pin 3 go to A19 on eprom 13,14,15,16 <br /> <br /> *pin 5 via jumpers go to A20 on eprom 17,18,19,20 (GFX high chunk)<br /> *pin 6 go to A19 on eproms 17,18,19,20 <br /> <br /> *pin 7 via jumpers go to A20 on eprom 11,12 (Qsound samples)<br /> *pin 8 go to A19 on eprom 11,12<br /> <br /> ==Version B==<br /> Up to 16mb GFX, 2x2mb qsound sample eproms.<br /> <br /> ==Version D==<br /> Unknown<br /> <br /> ==Version E==<br /> Existence to be confirmed<br /> <br /> ==Version F==<br /> Up to 32mbit GFX, 2x2mb qsound sample eproms<br /> <br /> <br /> ==Version G==<br /> Up to 32mbit GFX, 2x4mb Qsound sample eproms.<br /> <br /> ==PAL F-&gt;G hack==<br /> It is possible to trick an F into behaving like a G with a jumper wire. You need to lift pin 7 of PAL3 so it doesn't go into the socket and solder a jumper wire from pin 7 to pin C13 of connector CN3.<br /> <br /> ==PAL version cheat-sheet==<br /> *If qsound samples (11&amp;12) is 4mb each, it's a G</div>

Invzim