Topic: IQ's PGM WIP

[iq_132]

Are there any PCB's you require to speed up the work on Ketsui?

Getting a Ketsui pcb to XingXing would really be best.  He could likely trojan either the internal arm7 out or at the very least blackbox the reads/writes from the asic enough to get it going nearly perfectly. ^^  I don't have the equipment to do any of that.

[Evrain]

He could likely trojan either the internal arm7 out

I thought that was impossible on the "A" revision of the chip?

[iq_132]

I thought that was impossible on the "A" revision of the chip?

Most games use Asic27a chips. Martial Masters, Kov2, photoy2k, kovsh, puzzli2, puzlstar, oldsplus, kovshp.  There are different revisions of the Asic27a (55857E,55857F,55857G). Afaik, only the ones used in games like killbldp, svg, theglad,and dmnfrnt are at this point undumpable (well... mostly undumpable), but I could be wrong. The whole dumping/trojaning thing is XingXing's specialty, he is really the person to ask.

[Haze]

Most games use Asic27a chips. Martial Masters, Kov2, photoy2k, kovsh, puzzli2, puzlstar, oldsplus, kovshp.  There are different revisions of the Asic27a (55857E,55857F,55857G). Afaik, only the ones used in games like killbldp, svg, theglad,and dmnfrnt are at this point undumpable (well... mostly undumpable), but I could be wrong. The whole dumping/trojaning thing is XingXing's specialty, he is really the person to ask.

In the 'no external rom' cases like these it's still only possible if they have internal code which does table lookups, and has none-buffer checked parameters.

It's entirely possible to have a secure MCU program, in which case decapping (and thus the destruction of the board) is the only proper option, and even then these chips are generally too modern for that to be effective (they're likely protected against such attacks, and they're custom non-mask parts.. which might not even have a read-out mechanism)

[xingxing]

In the 'no external rom' cases like these it's still only possible if they have internal code which does table lookups, and has none-buffer checked parameters.

It's entirely possible to have a secure MCU program, in which case decapping (and thus the destruction of the board) is the only proper option, and even then these chips are generally too modern for that to be effective (they're likely protected against such attacks, and they're custom non-mask parts.. which might not even have a read-out mechanism)

agree!
i hope decapping can give us more infomation of this asic

[iq_132]

My friend RetroRepair dumped the graphics/sound roms for these.  It doesn't get as far as ketsui, but I'll keep working on it.

[iq_132]

More...

[iq_132]

Last ones for now...

[SuperPang]

Great work as usual Iq 

[Huggybaby]

More Cave stuff is always welcome, thanks IQ.

[jsjyqz]

great,IQ,thank you for your work,PGM driver has some sound problems,so can you fix them?

[sidnei55]

Hello Everyone
How is the situation of the DUMP Demon Front?

Thanks.   

[iq_132]

Hello Everyone
How is the situation of the DUMP Demon Front?

Thanks.   

It is only missing the protection rom -- which is nearly impossible to dump.

[iq_132]

This was passed along to me today. Pretty neat!

[SuperPang]

Black Label?