CPS3 suicides no more?
- Svovl
- Posts: 222
- Joined: September 6th, 2012, 7:46 am
- Location: Denmark
- eBay: clemensnk
- Initials: CNK
CPS3 suicides no more?
It seems that some hackers are progressing on 'phoenixing' CPS3 games.
Razoola mentions it on his page: http://cps2shock.emu-france.info"
Razoola mentions it on his page: http://cps2shock.emu-france.info"
- CPS2
- Street Fighter
- Posts: 1993
- Joined: August 19th, 2008, 10:03 pm
- Location: Leeds
- Svovl
- Posts: 222
- Joined: September 6th, 2012, 7:46 am
- Location: Denmark
- eBay: clemensnk
- Initials: CNK
Re: CPS3 suicides no more?
Aha, thought as much as it probably had been discussed in here. It was hidden in a lot of cps2 related stuff though
- IDCHAPPY
- c***3
- Posts: 2611
- Joined: May 3rd, 2010, 7:25 pm
- Location: Edinburgh
- eBay: Arcadedreams2013
- Initials: IDC
- Contact:
Re: CPS3 suicides no more?
Give me a like on Facebook at:
https://www.facebook.com/pages/Arcadedr ... ef=tn_tnmn
https://www.facebook.com/pages/Arcadedr ... ef=tn_tnmn
- Svovl
- Posts: 222
- Joined: September 6th, 2012, 7:46 am
- Location: Denmark
- eBay: clemensnk
- Initials: CNK
Re: CPS3 suicides no more?
So now that I have made a fool out of my self for not reading the forum carefully enough perhaps I can use this thread to try to get my head around what the consequences of this work is.
Say I had a SF3 Third Strike that died on me. Could the work described in the thread referenced save the game? and how would you practically go about it doing it (from the perspective of the hypothetical unlucky owner of a dead game)?
Say I had a SF3 Third Strike that died on me. Could the work described in the thread referenced save the game? and how would you practically go about it doing it (from the perspective of the hypothetical unlucky owner of a dead game)?
- idc
- Ralf Little impersonator
- Posts: 1311
- Joined: October 16th, 2008, 9:17 pm
- Location: Tamworth, Staffordshire
- eBay: iancourt
- Initials: IAN
- Contact:
Re: CPS3 suicides no more?
Just wait... We're still testing stuff. Leo and Artemio are still looking at the "magic" 256 byte area in the BIOS.Svovl wrote:So now that I have made a fool out of my self for not reading the forum carefully enough perhaps I can use this thread to try to get my head around what the consequences of this work is.
Say I had a SF3 Third Strike that died on me. Could the work described in the thread referenced save the game? and how would you practically go about it doing it (from the perspective of the hypothetical unlucky owner of a dead game)?
It could go several ways:
1. [This is where we are at present!] Carts have to be revived as 2I. If it's already a 2I cart, then it's simply a case of removing the battery. If it's any other cart, then the flash ROM will need to be de-soldered, reprogrammed and then re-soldered. You can run 2I, but to run any other game, you'd have to wait for an updated version of Darksoft's CD-ROM conversion tool which supports 2I. We have a guy who is working on a custom emulator for 2I which will help us to create a table in order to separate code from data in 2I. Since 2I is encrypted a little differently to the other five games, we will have to wait for that.
2. We figure out how to revive all carts, battery free. This would, however, likely mean de-soldering the flash ROM, reprogramming it and re-soldering it for all games except 2I, unless it's possible to reprogram it via some custom-made hardware that carts can just be plugged into.
3. We figure out how to rewrite the security keys, so the cart runs with a battery, just in the manner that Capcom would do it (or maybe slightly differently, but the end result would be the same). In this case, it may not be necessary to reprogram the flash ROM.
- Svovl
- Posts: 222
- Joined: September 6th, 2012, 7:46 am
- Location: Denmark
- eBay: clemensnk
- Initials: CNK
Re: CPS3 suicides no more?
Thank you for the explanation!idc wrote: Just wait... We're still testing stuff. Leo and Artemio are still looking at the "magic" 256 byte area in the BIOS.
It could go several ways:
1. [This is where we are at present!] Carts have to be revived as 2I. If it's already a 2I cart, then it's simply a case of removing the battery. If it's any other cart, then the flash ROM will need to be de-soldered, reprogrammed and then re-soldered. You can run 2I, but to run any other game, you'd have to wait for an updated version of Darksoft's CD-ROM conversion tool which supports 2I. We have a guy who is working on a custom emulator for 2I which will help us to create a table in order to separate code from data in 2I. Since 2I is encrypted a little differently to the other five games, we will have to wait for that.
2. We figure out how to revive all carts, battery free. This would, however, likely mean de-soldering the flash ROM, reprogramming it and re-soldering it for all games except 2I, unless it's possible to reprogram it via some custom-made hardware that carts can just be plugged into.
3. We figure out how to rewrite the security keys, so the cart runs with a battery, just in the manner that Capcom would do it (or maybe slightly differently, but the end result would be the same). In this case, it may not be necessary to reprogram the flash ROM.
-
- Please Continue...
- Posts: 6
- Joined: July 8th, 2009, 2:18 am
- Location:
Re: CPS3 suicides no more?
So does the battery removal work only for 2nd impact (Japanese cart) or will it work on a Double Impact (USA cart) as well. Is there a difference between the two?
- idc
- Ralf Little impersonator
- Posts: 1311
- Joined: October 16th, 2008, 9:17 pm
- Location: Tamworth, Staffordshire
- eBay: iancourt
- Initials: IAN
- Contact:
Re: CPS3 suicides no more?
Should work on all 2nd Impact carts, regardless of region. The USA region is actually called "2nd Impact" too; "Double Impact" is the Dreamcast title.Daffyjjh wrote:So does the battery removal work only for 2nd impact (Japanese cart) or will it work on a Double Impact (USA cart) as well. Is there a difference between the two?
-
- Please Continue...
- Posts: 43
- Joined: February 24th, 2011, 7:25 pm
- Location:
Re: CPS3 suicides no more?
AMAZING progress everyone.. Here's my understanding of CPS3 revival (where we stand):
- someone at Capcom goofed and left the decryption keys in 2nd Impact Flash ROM. To force the security cart to use that suicide-free key, one needs to remove the battery in the security cart. In addition, You can take any security cart, and convert it to a 2nd Impact by reflashing the flash ROM on it. The only issue is that this security cart will then only boot 2nd Impact.
- darksoft released a utility to force CPS3 games to used different security carts (except for 2nd Impact). It works by modifying the CD-ROM image (you'll need to burn to a CD-R a modified image and boot it)
- Ultimate solution (darksoft working on it.. hopefully will be done soon): Convert your dead security cart to 2nd Impact. Burn a CD-R of the game you want using the 2nd Impact security key.
I see a "problem" to this solution:
1) This should devalue all original CPS3 CD-ROM/Security carts (as one can now download for free any CPS3 game their want, rather than collect "originals") - I believe this is similar to what happened to Naomi with CF/Netbooting.
2) In the long run, original CPS3 CD-ROM games should all stop working (except for 2nd Impact) because they will no longer have original working security carts. Darksoft's fix doesn't address this; it provides us a way to play the games on original Motherboards (using modified CD-R discs and modified security carts).
Wouldn't the ultimate solution be a way to figure out how to still use original CD-ROM discs with modified security carts? (similar to how one can use original Naomi CD-ROM carts with burned PIC's if you lost your security key) ??
Never the less.. Darksoft is an encryption/assembly guru, and I tip my hat to him!
- someone at Capcom goofed and left the decryption keys in 2nd Impact Flash ROM. To force the security cart to use that suicide-free key, one needs to remove the battery in the security cart. In addition, You can take any security cart, and convert it to a 2nd Impact by reflashing the flash ROM on it. The only issue is that this security cart will then only boot 2nd Impact.
- darksoft released a utility to force CPS3 games to used different security carts (except for 2nd Impact). It works by modifying the CD-ROM image (you'll need to burn to a CD-R a modified image and boot it)
- Ultimate solution (darksoft working on it.. hopefully will be done soon): Convert your dead security cart to 2nd Impact. Burn a CD-R of the game you want using the 2nd Impact security key.
I see a "problem" to this solution:
1) This should devalue all original CPS3 CD-ROM/Security carts (as one can now download for free any CPS3 game their want, rather than collect "originals") - I believe this is similar to what happened to Naomi with CF/Netbooting.
2) In the long run, original CPS3 CD-ROM games should all stop working (except for 2nd Impact) because they will no longer have original working security carts. Darksoft's fix doesn't address this; it provides us a way to play the games on original Motherboards (using modified CD-R discs and modified security carts).
Wouldn't the ultimate solution be a way to figure out how to still use original CD-ROM discs with modified security carts? (similar to how one can use original Naomi CD-ROM carts with burned PIC's if you lost your security key) ??
Never the less.. Darksoft is an encryption/assembly guru, and I tip my hat to him!
- idc
- Ralf Little impersonator
- Posts: 1311
- Joined: October 16th, 2008, 9:17 pm
- Location: Tamworth, Staffordshire
- eBay: iancourt
- Initials: IAN
- Contact:
Re: CPS3 suicides no more?
No. They didn't leave the key in as such, but their goof was to use a zero key. The vector on the flash points to an empty area of RAM. On CPS3 carts, the SH2 CPU reads 0x00 for empty RAM regions as opposed to the 'usual' 0xFF, so it thinks it sees a correct key, but it's really just empty RAM.leonk wrote:- someone at Capcom goofed and left the decryption keys in 2nd Impact Flash ROM. To force the security cart to use that suicide-free key, one needs to remove the battery in the security cart. In addition, You can take any security cart, and convert it to a 2nd Impact by reflashing the flash ROM on it. The only issue is that this security cart will then only boot 2nd Impact.
To be honest, collectors will always want originals, with intact battery, so in that sense it might not affect price of working carts that much. CPS3 has a very niche market anyway. What it will likely do, however, is increase the value of dead carts. Without any form of cart revival, eventually all carts would become completely worthless, so which is better? Would you prefer to own a more valuable cart that will immediately worth nothing when it eventually dies, or one that's been slightly devalued, but can at least be resurrected from the grave when it has died and will therefore still have some value?leonk wrote:- darksoft released a utility to force CPS3 games to used different security carts (except for 2nd Impact). It works by modifying the CD-ROM image (you'll need to burn to a CD-R a modified image and boot it)
- Ultimate solution (darksoft working on it.. hopefully will be done soon): Convert your dead security cart to 2nd Impact. Burn a CD-R of the game you want using the 2nd Impact security key.
I see a "problem" to this solution:
1) This should devalue all original CPS3 CD-ROM/Security carts (as one can now download for free any CPS3 game their want, rather than collect "originals") - I believe this is similar to what happened to Naomi with CF/Netbooting.
You think that this is not something we're aiming to do?leonk wrote:2) In the long run, original CPS3 CD-ROM games should all stop working (except for 2nd Impact) because they will no longer have original working security carts. Darksoft's fix doesn't address this; it provides us a way to play the games on original Motherboards (using modified CD-R discs and modified security carts).
Wouldn't the ultimate solution be a way to figure out how to still use original CD-ROM discs with modified security carts? (similar to how one can use original Naomi CD-ROM carts with burned PIC's if you lost your security key) ??
This is what we would like to do, in order of priority/likelihood:
1. Get Darksoft's tool to work with 2I carts, so all games can be run with a 2I zombie cart.
2. Revive carts for all six games to run as battery free zombie carts.
3. Revive carts for all six games by rewriting the security data, still requiring a battery.
leonk wrote:Never the less.. Darksoft is an encryption/assembly guru, and I tip my hat to him!
- Tyranix95
- Please Continue...
- Posts: 59
- Joined: June 21st, 2012, 12:22 am
- Location:
Re: CPS3 suicides no more?
<nod>idc wrote:...
This is what we would like to do, in order of priority/likelihood:
1. Get Darksoft's tool to work with 2I carts, so all games can be run with a 2I zombie cart.
2. Revive carts for all six games to run as battery free zombie carts.
3. Revive carts for all six games by rewriting the security data, still requiring a battery.
...
Hack > Legit.
-
- Please Continue...
- Posts: 43
- Joined: February 24th, 2011, 7:25 pm
- Location:
Re: CPS3 suicides no more?
Awesome...
Can I make 1 suggestion .. consider moving to an SRAM based memory IC that is not volatile! (Yes, they do exist!) This way, you flash them once, but they won't lose data if power is lost.
Can I make 1 suggestion .. consider moving to an SRAM based memory IC that is not volatile! (Yes, they do exist!) This way, you flash them once, but they won't lose data if power is lost.
- Tyranix95
- Please Continue...
- Posts: 59
- Joined: June 21st, 2012, 12:22 am
- Location:
Re: CPS3 suicides no more?
Yeah, that would be so very cool if someone could figure out a way to stop the start-up keys from disappearing from the CPS B and C boards.leonk wrote:Awesome...
Can I make 1 suggestion .. consider moving to an SRAM based memory IC that is not volatile! (Yes, they do exist!) This way, you flash them once, but they won't lose data if power is lost.
That would be right-up there with putting the start-up keys back on dead CPS boards.
Now that would just make my day.
- Devil Soundwave
- Doesn't go to eleven
- Posts: 4713
- Joined: January 7th, 2009, 11:56 pm
- Location: Wetherby, Yorkshire
- eBay: DevilSoundwave
-
- Posts: 124
- Joined: July 8th, 2011, 10:04 pm
- Location:
- eBay: greenberetfan
- Initials: PFG
Re: CPS3 suicides no more?
leonk wrote:Awesome...
Can I make 1 suggestion .. consider moving to an SRAM based memory IC that is not volatile! (Yes, they do exist!) This way, you flash them once, but they won't lose data if power is lost.
Yes that's an option, but I'm going to concentrate rather on the new version of the tool.
Check my blog for updates )
Arcade Project Master at www.arcade-projects.com
- Rossyra
- Supermod
- Posts: 7902
- Joined: February 12th, 2009, 1:24 am
- Location: UK
-
- Please Continue...
- Posts: 2
- Joined: May 15th, 2012, 4:44 pm
- Location:
Re: CPS3 suicides no more?
A guy owning a SF3.2 has reported that once he had removed the battery, he was unable to rewrite the game on a board where SF3.3 was installed..... is it normal ?
-
- Posts: 124
- Joined: July 8th, 2011, 10:04 pm
- Location:
- eBay: greenberetfan
- Initials: PFG
Re: CPS3 suicides no more?
Hi there,
for those who's like to see the new version of the tool coming soon and would like to help with it, please read here: http://64darksoft.blogspot.com/2012/12/ ... ublic.html"
All I'm asking you, is just to play
for those who's like to see the new version of the tool coming soon and would like to help with it, please read here: http://64darksoft.blogspot.com/2012/12/ ... ublic.html"
All I'm asking you, is just to play
Arcade Project Master at www.arcade-projects.com
- Spectre
- By Spectre
- Posts: 1695
- Joined: January 22nd, 2009, 5:42 pm
- Location: Suffolk, UK
- eBay: spectre-uk
- Initials: JIM
Re: CPS3 suicides no more?
Well do my best to find some time to contribute
Marquees: http://spectre.myartsonline.com/