The fact that the sled moves out to attempt to read the ring means that the MCU on your modchip isn't correctly intercepting the drive commands and invalidating the ring seek command. So, i'd initially look at the MCU part of the modchip being clocked incorrectly.
MrS
Drop me a line Pinchy if your still interested in R.Eing this... i like your idea about streaming an ISO across USB2. Be kinda like the PSUL/PSOLoad exploits for the GC.
mrsporty(AT)gmail.com
Neither is it a very encouraging set of more than one word ;)
TBH the mod isn't that hard to R.E. There is no complex crypto involved and the timing isn't particularly high speed or sensitive.
The real reasons no one has dont it before is either lack of interest or lack of financial motivation.
DSO - Digital Sampling Oscilloscope.
A scope with sample and hold capabilities. Way off budget for most of us i would imagine unless your employment or educational facility brought you into contact with one.
I have a collection of PDF's should aid you in identifying the relevant datalines on the various IC's used in the saturns CD mech and the available modchips. Unfortunately , the forum wont let me upload it as either a ZIP or a RAR.
Mail me for it.
I dont have either the PIC code or the PLD fusemap im afraid .. all of that is based on my own observations using an el-cheapo logic analyser.
In this instance PAL/GAL can be interchanged as they used different devices on different batches. They both perform the same function tho and it would...
The combination of the 3 chips works basically as follows:
The PIC is sat BETWEEN the DATAIN and DATAOUT of the CDROM controller MCU (This controller is referred to as the 64/32 pin chip by peeps on this board) . It monitors the command packets allowing most of them to pass unmollested until...
The manuf code stamped on the PLD in the middle of that mod board doesn't really mean much. As long as its a 16V8 and it has the same JEDEC file programmed into it , they would be electronically identical.
MrS
My primary goal was to document the protection scheme, although some sort of ATA interface wouldn't be out of the ball park in the long run.
An offshoot to the work so far is that i cant see it being too hard to inject a packet into the data stream when the region is being read .. thus negating...
For anyone thats interested , heres the progress ive made so far with reverse engineering the current batch of 21 pin mods in an attempt to create a universal type.
In the attached Zip are 3 images:
full1.jpg - This is a currently available SSIC8B modchip layed out for easy access.
board1.jpg...
The "fuse" in a 16C54 isnt the same as a physical fuse.
By milling the epoxy and using fuming nitric you can expose the silicon die of the PIC. You would then proceed to cover the ROM area of the mcu and expose the
"fused" security bit to UV light thus wiping it and allowing the PIC to be...
What you'd do is :
Pop in the game you want , reset OR power up the console whilst holding the direction of the region the game is in. After 2 or 3 seconds , let go of any buttons and hit reset again to play.
The console will remain in the region you selected for any further resets.
The...
If it was possible i would have designed the mod to be just that... unfortunately IT IS NOT POSSIBLE TO HAVE AN AUTO REGION MOD.
Sorry for the shouting but i really cant stress this enough. After powering on the console , there is a VERY small delay before the chip that has the region jumpers...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.