file   : readme.txt
author : Tormod
created: 2011-09-22

Mushiking The King Of Beetles II ENG, SEGA 2005 *PROPER*

Cart is populated with an FPGA, a PIC and a set of FLASH chips.

On some carts there is an extra EPROM with an updated program. 
In this case the EPROM updates the main program to version 2.

The EPROM shadows the first 0x400000 bytes of the FLASH address space.

JP2 has to be 2-1 to boot program ROM from FLASH.
JP2 has to be 3-2 to boot program ROM from EPROM.

In order to replicate the FLASH content the dump is 
made in the following manner:

. JP2 set to 2-1, disables EPROM and activates the original program version 1.
. An encrypted dump is made, this replicates the exact FLASH contents.
. A decrypted dump is made to aid verification.
. JP2 set to 3-2, the EPROM shadows the first 0x400000 bytes of the FLASH address.
  and activates program version 2.
. An encrypted dump of the EPROM (size 0x400000) is made.
. A decrypted dump of the EPROM (size 0x400000) is made.

Version 1 (FLASH) has only been verified to pass the ROM test.

The game does not start up since it requires additional hardware.

The dump has been verified against the ROM test signatures.

The encryption key is: 0x7cb963eb

Both encrypted and decrypted dumps are supplied. 

Name                         Size     CRC32
------------------------------------+-----------
mktkobiieng_cart.jpg          433570  0x4a07f6e7
mktkobiieng_pcb_1.jpg        1126522  0x736fc44c
mktkobiieng_pcb_2.jpg        1122346  0x73d67c9a
mktkobiieng_rom_test_v1.jpg   982282  0x766005ac
mktkobiieng_rom_test_v2.jpg   959650  0xcb9b93af

Name                        Size      CRC32       Chip Type
-----------------------------------------------------------
encrypted\epr-24357_v2.ic7   4194304  0xa2236d58  27C160  
encrypted\fpr-24333.ic8     67108864  0xa467b69c  S29GL512N10T
encrypted\fpr-24334.ic9     67108864  0x13d2d1dc  S29GL512N10T

Name                        Size      CRC32       Chip Type
-----------------------------------------------------------
decrypted\epr-24357_v2.ic7   4194304  0x45f8f669  27C160      
decrypted\fpr-24333.ic8     67108864  0x100b16ce  S29GL512N10T
decrypted\fpr-24334.ic9     67108864  0x4b0da1a7  S29GL512N10T

. Board supplied by f205v
. Board dumped by Tormod
. Thanks to CaH4e3 for being vigilant