DC selfboot patch v3.0

[dpaddict]

hi was searching through groups.google on my efforts to make the jap version of Ferrari F355 Challenge selfboot, and i came accross one message which read:

Homepage update hv picture tutorial for how to setup dc selfboot
& how to selfboot F355,WACKLYRACER,GUNDAM0079,SF3DOUBLEIMPACT :)

DC selfboot patch v3.0 at

http://go.to/selfboot
* page slow ,keep refresh until page load *

However the site is gone, and this is the only place i have found a hopefull solution to boot F355.

My question is can someone send me this file or perhaps a mirror to the website. Or even a solution to boot F355:)

my email is paulgcw@*SPAM*thrip.karoo.co.uk

(remove *SPAM*)

[Megalexxx]

Try this :
_ BinHack your 1st_read.bin
_ open it with an hex editor (like Hedit)
_ look for "CD001"
_ note the number 4 bytes before (it should be 5C2E, for example : "5C 2E 00 00 01 00 00 00" + "CD001"
_ look for "A600000" (you should find it at least once, but you need to modify only one)
_ replace it by the code you noted before (5C2E...)

If you want 60 Hz, replace 090003610C711061 by 090003610C7130E1.

This should work.

[dpaddict]

hey thanks for the reply, first i tried what you said with binhacking it then hex editing it, what i got though was
5A 2E 00 00 01 00 00 00,
and thats if im looking in the right place. (i searched for CD001) There where no instances of 5C2E, so my first question is that value right?

Im new to hex editing so patience would be appreciated:)

Next i searched for the hex values for A600000, however the only value near this was A6000000 (if i searched for the value you gave i got an error, i dont know if you missed a 0 off or something?)

Now im slightly confused:) ive upped a screenshot of what i see to http://www.thrip.karoo.net/cd001.jpg

Now when you say replace A600000 with this code am i right in thinking that i copy the values ive highlighted in the pick and paste them or change all the values manually.
Ive also upped a picture of the first A6000000 value when i searched.
http://www.thrip.karoo.net/a6.jpg

Would i be right in thinking that i copy all the highlighted values, from the first pic and overwrite all the values in the second picture?
And only for this instance of the A6000000 value?

Secondly would any of the other .bin files need hacking? i figured that because it partially loaded that the 1st_read.bin was ok but then it looked at another file and found an incorrect LBA so it resetted. The other .bin files on the cd are:
2_dp.bin
Maigo.bin
Sg_dpldr.bin

Sorry to be such a hassle but if you could help a bit more:)
thanks

[Megalexxx]

So...
Where to begin ?

"5A2E" is the right value for you (it's LBA = 11700, mine is 11702).
The value to replace is "A6000000" (I missed a "0"), but is there only one code like this ? If so, just replace the four bytes "A600" by "5A2E".

Then, you might have to BinHack the other .bin files. Try this if patching only 1st_read.bin doesn't work.

[dpaddict]

thanks for clearing things up for me, i almost understand to the point where id risk burning to one of my last 6cds:)

The answer to your question is yes there is more than one instance of the A6000000 code, so do i need to replace the 4 bytes (A600 with 5A2E) with all instances of this code, or just the one.

Also i read somewhere that if other .bin files had the CD001 string in there, then they too need to be hacked, so i checked them and all the others have this string. So when binhacking them do i just do the same procedure as i have done for the 1st_read.bin?(ie, include pointing it to the ip.bin.)

Almost there:D

[Megalexxx]

Binhacking modifies 1st_read.bin and ip.bin. If you use it with another bin file, it won't change anything in ip.bin. What it (mostly) does is make your bin file point to LBA = xxx (11700 for you, with no CDDA).
If you use BinHack on other bin files, it will look for "CD001" and then point to the LBA you specified. So you can use it on any bin file instead of changing the value with an hex editor.
Some games I burnt work without changing the other bin files, but most of them need that.

You need to modify only 1 "A600", but I can't tell you which one.
Can you find "A6 00 00 00 01 00 00 00" ?

[dpaddict]

Ok good news i think i searched for that hex value and i found it, i also noticed that its just before a CD001 string (or whatever its called) so for this value i just change the first 4 bytes and then i should be set?

As for the other .bins i remember reading somewhere that they only required hacking so internet access works correctly, but dont quote me on that.

So now if i follow what i just did on all the .bins i should have one working selfboot game:D

however youre going to hate me now:) i noticed you mentioned this doesnt work for CDDA games, could you put what i need to do for games with CDDA, cause i got a couple of them to do.
Ive already selfbooted a few, its just incase i get this same problem with a CDDA game. (also i notice that a few CDDA games come without the music, so if i got one of these should i treat them as CDDA or just normal games?)

[Megalexxx]

I didn't say it doesn't work for CDDA games. I just meant it's another LBA value.

LBA = 11702 + 166 (for ip.bin) = 11868
11868(decimal) = 2E5C(binary) => 5C2E(DC binary)

If you have CDDA, LBA value is higher.
But you can use BinHack to do this. It works perfectly.

[dpaddict]

Ok this is going to sound strange but i binhacked the 1st_read.bin, then i went to hex edit it only to find that there was no instances of the A600 hex values, then i copied the ip.bin to a different folder and binhacked all the other files.
I then compared the two ip.bin's i had and the one in the selfboot folder was different so i used the one i copied to another folder to inject into the iso file.

However when i put the disc in the dreamcast i got the same error, it came upto the 'Now Loading' screen then resets to the menu screen.

Could this be because i used the ip.bin which wasnt used to binhack all the .bin files?

Also ive heard that using a 45000lba would work, however i was wondering how i got a audio.raw file that size for the lba?
I read about it at http://internetconvoy.com/4500.htm however both files there are down.
I searched the forums about this and there is a guide but i couldnt really understand that.

[Megalexxx]

About "45000 trick" : it's just because original LBA value for DC GDRom is 45000. So if you don't manage to change the LBA in your bin files, you can make your 2nd session start at LBA = 45000.

You should find "mktmp" anywhere. Just look around. It creates a file with a specified filesize.

What you say about ip.bin sounds strange. I managed to make this game selfboot using the methode I describe. I think it reboots because of this 2nd "A600" you didn't change...

[dpaddict]

Ok so reading your post i had a sudden realisation of how stupid i am. When i went that site i thought that was what the file was called, little did i realise that there where actual commands to make the files there, second it wasnt until you reffered to mktmp as a program that it clicked, and had been sitting in my echelon selfboot directory all along.

So ive quicky burned a test 45000lba session on a cdrw and will be seeing if the game will work this way tomorrow.

As for the .bin files, i think ive followed what you said to the letter, however if your interested ive uploaded them all in a .zip file to http://www.thrip.karoo.net/bin.zip (2.5mb file) if you have a chance to have a look and see if theres anything wrong, if you dont it doesnt matter, cause im gonna give burning the 45000 way then if that dont work, bin it:)

[Megalexxx]

DC don't read CDRW CDs unless you open it and change (I don't know the name in english...) ... well, you have to turn a screw in your DC.

[dpaddict]

As for the cdrw, i only tested on that to make sure it would burn teh audio sessions and get a 45000lba.

Ok now im ready to bang my head against the wall, i just burnt a disc using the 45000lba method only for it to boot up to the dreamcast menu screen.
I did everything right i think, heres what i did:

1. Copy all the files off the cd to the \data directory.
2. Changed all the attributes of Read Only off.
3. Moved the ip.bin to the \Selfboot directory.
4. Created the two audio files using the command 'mktmp audio.raw 39332496' and 'mktmp audio.raw 39332496'
5. Burnt these files using the command 'cdrecord -dev=1,1,0 -multi -audio audio.raw audio2.raw speed=4
6. Checked that if was the correct lba with msinfo, it was
7. Created a 257mb dummy file called 00dummy.dat and placed it in the \data directory.
8. Made the ISO using the command 'mkisofs -C 0,45000 -V F355 -l -o data.iso data
9. After the ISO was created i used inpins.exe to insert the ip.bin into the ISO.
10. Used Cdrwin to burn the ISO image using CDROM-XA, Mode2, Finalize/Close Session - Yes, Write Postgap - Yes, Open new session - No.

Any ideas where im going wrong?

[Megalexxx]

Sounds weird...

Try to find a program called "CDDA.EXE" : it enables CDDA in old bin files. I needed to use it sometimes to make some games selfboot.
Who knows ?

[dpaddict]

I think im gonna call it quits on this one, ive wated enough cds:)
Ill just burn it as a non selfboot and wait untill i find a version that is selfboot.

Thanks for all your help though.

[Megalexxx]

That's too bad. I managed to burn it selfboot using this method...
If you want to waste some more CDs, try to selfboot Perpetual Blue.
Don't forget to tell me how you did if you succeded ! ;)
I'm still searching after loads of coasters.

[dpaddict]

Ok ive now ordered 60 more blank cds which should turn up in a day or two, ive got 4 left spare till then.
I hate quiting so im gonna keep going till ive waisted 10cds.

Looking in the .bin files with a hex editor, i found the following references to CD001:

1st_read.bin = 1 Instance of CD001
1st- A600000001000000

- Now then the last cd i burnt i never modified the 1st_read.bin assumming it would boot from 45000lba, however i found this bit of info:

A600 reversed = A6 - A6 = 0 ...for non-selfboot
5A2E reversed = 2E5A - A6 = 2DB4 or 11700
5C2E reversed = 2E5C - A6 = 2DB6 or 11702
6EB0 reversed = B06E - A6 = AFC8 or 45000

Which means it didnt work last time because it was looking for the wrong lba or something. (btw i know nothing about the mathematics or whatever above so im guessin here:))

2_DP.bin = 2 Instances of CD001
1st- 6EB0000001000000
2nd- 6EB0000001000000

So this is set for booting at 45000lba, i think.
This is where things either arent important or im stuck, im assumming now to selfboot this for 45000lba i still need to binhack the 1st_read.bin to 45000, leave the 2_DP.bin alone.
However this was the code i found in the other .bin files, the writing below the hex values are the text thats next to the CD001.

SG_DPLDR.bin = 1 Instances of CD001
4498008C4C98008C
CD001.2_DP.BIN;1

Maigo.bin = 1 Instances of CD001
4C9C008C549C008C
CD001.ÿÿSEGA SEG
AKATANA

I was just wondering if these values mean anything to you or should i just leave these files alone?

I hope you can understand that, and answer:)

[Megalexxx]

For mathematics stuff : if you want to get a value, just take 2 bytes, reverse them (the processor take the lower byte first), and then, use your calculator to change the hexa value to a decimal one :
1) reverse : 6EB0 => B06E
2) convert : B06E (Hex) => 45000 (Dec)

If you can wait until next week, I'll have a look at the release I have. Maybe I could find back what I did.

[dpaddict]

ok two more cds down, 1 cdrwin messed up and the other, i binhacked 1st_read.bin to 45000 then burnt as usual with a 45000lba, only for it to do the familiar 'Now Loading' screen to the dreamcast menu screen.

So i think i will wait a week or so to see if you can figure out what you did:)

[Megalexxx]

Ok, this is what you need to do :

_ binhack your 1st_read.bin
_ hexedit it

_ look for "A6000000E0400E0C"
_ replace "A600" by your LBA value

_ look for "30E103E2"
_ replace it by "106103E2"

_ don't modify other bin files

This should work :)

[dpaddict]

ok good news i did what you said, apart from the
_ look for "30E103E2"
_ replace it by "106103E2"

because they wherent there, but it doesnt matter because it works now:D

Thanks:cool:

[Megalexxx]

Great !

I think "30E103E2" is for 50 Hz mode. You might have an already patch version...

Well, now, try to selfboot Perpetual Blue. ;)

[dpaddict]

Sorry i dont have that game so i cant offer you any help:( Sorry, however if i come accross some info or get the game ill let you know:)

[comat]

and three years later.....

many thanks Megalexxx and dpaddict !!! Everything worked like a charm first-try!
LBA 45000 w/ 250mb dummy :D