file   : readme.txt
author : rtw
created: 2011-04-04

Melty Blood Actress Again, ECOLE 2008, NAOMI M4 cart.

Cart is populated with an FPGA, a PIC and a set of FLASH chips.

On some carts there is an extra EPROM with an updated program. In
this case the EPROM updates the main program to version A.

The EPROM shadows the FLASH address space.

JP2 has to be 1-2 to boot program ROM from FLASH.
JP2 has to be 3-2 to boot program ROM from EPROM.

On this specific cart only the first 0x1d0000 bytes of the main
program code is encrypted. The encryption method is unknown for now. 

This dump contains both program versions. 

Version 0 (FLASH) has only been verified to boot to the main screen
and pass the ROM test.

In order to make a loadable image you need to replace the first 0x400000
bytes of ic8.bin with one of the versions in the decrypted directory.

Name                        Size     CRC32
-----------------------------------------------
mbaa_cart.jpg                582125  0xdab8ff1f
mbaa_pcb_parts.jpg          1086947  0x6133b214
mbaa_pcb_solder.jpg         1055202  0x02290999
mbaa_rom_test_version_0.jpg 2337370  0x6e12f501
mbaa_rom_test_version_a.jpg 1836849  0x5248aceb
mbaa_version_0.jpg           787216  0x53b5fb68
mbaa_version_a.jpg           752403  0x78ef6d67

Name                    Size      CRC32       Chip Type    Note
---------------------------------------------------------------
encrypted\ic8.bin       67108864  0x0fbc0512  S29GL512N10T first 0x1d0000 encrypted
encrypted\ic9.bin       67108864  0x06d8f022  S29GL512N10T unencrypted 
encrypted\ic10.bin      67108864  0xb6bb7ce4  S29GL512N10T unencrypted  
encrypted\ic11.bin      67108864  0x211ac347  S29GL512N10T unencrypted  
encrypted\ic12.bin      67108864  0xb8a6bff2  S29GL512N10T unencrypted  
encrypted\ic13.bin      67108864  0x4886329f  S29GL512N10T unencrypted  
encrypted\epr-24455.bin  4194304  0x8660c63b  27C160       first 0x1d0000 encrypted 

Name                         Size      CRC32       Note
------------------------------------------------------------
decrypted\epr-24455_dec.bin  4194304   0x0b1ec5ee  Version A
decrypted\ic8_dec.bin        4194304   0x42ddef8f  Version 0 

. Board supplied by rtw
. Board dumped by rtw