maintance on a cps3 board

Naomi & all other arcade tech questions forum
OldFoo

Post by OldFoo »

There's good news for CPS2 boards. They also have a suicide battery, but it can be modded so that it no longer needs a battery. This also means that a dead board can be revived. :smt023



If you want the battery to be changed for you, JammaBoards.com has a service for less than $20.
OldFoo

Post by OldFoo »

What repair shop did capcom recommend? I'm wondering if they sold off the CPS3 cart programmer to said shop...
OldFoo

Post by OldFoo »

Capcom? No. If you call them they will only say that they no longer support or repair these boards. What happened is someone managed to dump/decrypt the security chip into a bios-like ROM file. Once this is done, you can duplicate and restore the security chip. This has not yet been done for CPS3 (as far as I know).
OldFoo

Post by OldFoo »

Its more complex than that...



The encryption table is stored in the custom capcom IC that is surface mounted on the cartridge's PCB. You can't dump it and get valid keys, because as soon as you de-solder it, you loose power, loosing the key. The "bios" you speak of (I'm assuming you mean the TSOP48 flash rom), is just that, a bios. From what has been gathered, it only contains the game's region, and if its a CD or NoCD game. It does not have any encryption keys inside.



Also, jammaboards.com does NOT offer CPS3 battery replacement, only CPS2.



If anyone needs CPS3 battery swaps done, let me know. I offer the service for $30 per game + return shipping. I have over 20 successes under my belt, and so far no failures.



Peace!

Bill
OldFoo

Post by OldFoo »

If you read what I said carefully, I said "bios-like". This was meant to simplify the explanation.



My mention of JammaBoards was in reference to a CPS2 question. And, yes, it has been already dumped and can be copied.



Security on chips is meant to make it difficult to copy. It's not impossible as it is only a matter of time. For example, I've been researching on getting the code that is in the GD-ROM security chips so that lost or broken PIC's can be re-produced. I think I'm pretty close. Even the manufacturer of the PIC says that the security can be bypassed under certain conditions.
OldFoo

Post by OldFoo »

that would be a great step for us, i'm so feared of breaking one of these pics legs!
OldFoo

Post by OldFoo »

joshua3dg wrote:If you read what I said carefully, I said "bios-like". This was meant to simplify the explanation.



My mention of JammaBoards was in reference to a CPS2 question. And, yes, it has been already dumped and can be copied.



Security on chips is meant to make it difficult to copy. It's not impossible as it is only a matter of time. For example, I've been researching on getting the code that is in the GD-ROM security chips so that lost or broken PIC's can be re-produced. I think I'm pretty close. Even the manufacturer of the PIC says that the security can be bypassed under certain conditions.


I know the TSOp 48's in the CPS3's can be copied, but has anyone successfuly re-mounted a new one? It would be really really cool if you could turn a Warzard into a Red Earth...



About the naomi security keys... I have a spare Virtua Striker 3 key that is kickin around that I'd be happy to donate for research. Just keep me looped in if you discover how to duplicate them (and launch games off of CD-r's hehehehehe).



-Bill
Post Reply