Forums

Sega Master System / Mark III / Game Gear
SG-1000 / SC-3000 / SF-7000 / OMV
Home - Forums - Games - Scans - Maps - Cheats - Credits
Music - Videos - Development - Hacks - Translations - Homebrew

View topic - SMS BIOS version 2.0

Reply to topic
Author Message
  • Site Admin
  • Joined: 19 Oct 1999
  • Posts: 11824
  • Location: London
Reply with quote
SMS BIOS version 2.0
Post Posted: Fri Dec 26, 2014 7:51 pm
Last edited by Maxim on Wed Mar 04, 2015 7:59 pm; edited 1 time in total
This came up over at the Sega8bit forums:

http://shinobiman.proboards.com/thread/9804/built-games?page=2

Am I right in thinking this hasn't been dumped? Is it particularly unusual?
2v96o44.jpg (241.96 KB)
2v96o44.jpg
29vze4z.jpg (260.72 KB)
29vze4z.jpg

  View user's profile Send private message Visit poster's website
  • Joined: 05 Jun 2010
  • Posts: 692
  • Location: Pennsylvania, USA
Reply with quote
Post Posted: Fri Dec 26, 2014 7:57 pm
I've only ever seen v1.3 of that particular boot screen. Hope you can get it dumped and see if there's any real changes some time soon!
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Fri Dec 26, 2014 8:07 pm
Interesting. I don't recall seeing that but it's something that is easy to overlook, so I may have a system with the same BIOS somewhere.
Asked more questions to the owner.
  View user's profile Send private message Visit poster's website
  • Joined: 22 Dec 2004
  • Posts: 40
  • Location: UK
Reply with quote
Post Posted: Wed Jan 14, 2015 8:58 pm
Interesting find, but is there anything interesting about the rom itself?

I hope they didn't just change the number from 1.3 to 2.0 ;)
  View user's profile Send private message
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Wed Jan 14, 2015 9:13 pm
It is probably a very minor change, but nevertheless we'll get it dumped and check. Its owner agreed to let me borrow the console for dumping., so that may happen soon.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 19 Oct 1999
  • Posts: 11824
  • Location: London
Reply with quote
Post Posted: Wed Jan 14, 2015 10:43 pm
In my previous analysis of the BIOSes, which have version numbers past 2, the actual BIOS functionality doesn't change materially. I suspect it will be unexciting but we want completeness :) I'm curious to see if it is a mask ROM or an escaped EPROM. It seems strange for it to be rare.
  View user's profile Send private message Visit poster's website
  • Joined: 22 Dec 2004
  • Posts: 40
  • Location: UK
Reply with quote
Post Posted: Wed Jan 14, 2015 11:00 pm
I guess we can always hope for a BIOS with the original EU/US SEGA Bumper logo followed by the JP Attract screen.

That would be the ultimate BIOS with Snail Maze game still hidden. :D
  View user's profile Send private message
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Fri Feb 20, 2015 10:52 am
I have the machine here.
Here are the information from the back (that Rudi also posted on Sega8bit forum).

SEGA MASTER SYSTEM
Power Base
Model No 3010
Rating: DC 9V 850mA
Use 3025-18 AC Adaptor Only
Serial No: 77541514
Sega Enterprises, Ltd. Made In China
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
SMS 2.0 BIOS rom
Post Posted: Fri Feb 20, 2015 12:40 pm
Last edited by Bock on Wed Mar 04, 2015 10:56 am; edited 4 times in total
Attached unreleased dump of a very uncommon European BIOS dump from a SMS 1. It says "v2.0"
*EDIT* rom released and added to www.smspower.org/Games/SegaMasterSystemRom-SMS

FYI the other BIOS roms are
SMS Prototype (M404) [Proto] [BIOS]
SMS Prototype (v1.0) [Proto] [BIOS]
SMS (v1.3) [BIOS]
SMS Japanese (v2.1) [BIOS]
Hang On & Safari Hunt (v2.4, 1988) [BIOS]
Hang On (v3.4, 1988) [BIOS]
Missile Defense 3-D (v4.4, 1988) [BIOS]
Alex Kidd in Miracle World [BIOS] (no version)
Sonic The Hedgehog [BIOS] (no version)


It'd be interesting to know where does it sit and what are the differences with other known roms.

There's something odd, on the real hardware when booting the snail game, the tilemap shows a little glitch on two sides. Attached pictures.

It doesn't seem to repro on MEKA or Emulicious. The tile in question appears to be tile $B0 (referenced in tilemap at $39C0 and $39FE). The "correct" value shown with other version of the snail game and currently in MEKA is $00. I haven't investigated further yet.

If you zero 3 bytes from 0x114 you can cancel the cartridge check and boot into the instruction screen. Then UP+1+2 to start the secret snail game.
Capture.JPG (39.86 KB)
Capture.JPG
photo 1.JPG (47.59 KB)
photo 1.JPG
photo 2.JPG (52.4 KB)
photo 2.JPG

  View user's profile Send private message Visit poster's website
  • Joined: 14 Apr 2013
  • Posts: 429
Reply with quote
Post Posted: Sat Feb 21, 2015 11:54 pm
When do these 2 glitches appear? Do they scroll in with the maze or do they appear right after the maze has finished scrolling?
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Sun Feb 22, 2015 11:02 am
Sorry that wasn't explained. They become visible as the maze is scrolling in (to the left-most glitch is visible first and the right-most one later when the maze almost finished scrolling).
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 19 Oct 1999
  • Posts: 11824
  • Location: London
Reply with quote
Post Posted: Sun Feb 22, 2015 11:59 am
I did a very preliminary disassembly to compare 1.3 to 2.0...

https://github.com/maxim-zhao/smsbioses

Notes so far:

- v2 drops an unnecessary di at line 169
- Data at $1a7 ($1a6 in v1) is the 2.0/1.3 tilemap data
- v1.3 seems to have more data, pushing all the labels along by 8 bytes. I amended some of the label names in v2 to match, but far from all of them.
- Emulicious's disassembly didn't detect the code in RAM:
   ld hl, $0288
   ld de, $C700
   ld bc, $00D9
   ldir
   call $C700   ; Possibly invalid

- The RAM-resident code is quite different between the two, but I didn't go into the details yet. I remember there were two distinct sets of code for the export BIOSes (albeit very similar) but I don't remember exactly how. I guess I lost that work from 9 years ago.
  View user's profile Send private message Visit poster's website
  • Joined: 14 Apr 2013
  • Posts: 429
Reply with quote
Post Posted: Sun Feb 22, 2015 2:00 pm
The glitches come from the values stored in $c9c0 and $c9fe.
These values are loaded into vram when the snail maze scrolls in.
RAM is only cleared at the beginning. So it seems like some code that is executed from RAM when $c700 is called overwrites these values with something non-zero.
  View user's profile Send private message Visit poster's website
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Sun Feb 22, 2015 2:21 pm
As Maxim says, BIOS v2.0 is quite similar to v1.3.

Regarding the RAM-resident code, the main difference concerns the function which determines whether or not a cartridge (or card, etc.) is inserted. In v1.3, the following code is used:

Quote
 C72C: 21 F0 1F     ld hl,1FF0h
 C72F: 18 08        jr +08h (C739h)
 C731: 21 F0 3F     ld hl,3FF0h
 C734: 18 03        jr +03h (C739h)
 C736: 21 F0 7F     ld hl,7FF0h
 C739: 11 60 C2     ld de,C260h
 C73C: 01 10 00     ld bc,0010h
 C73F: ED B0        ldir
 C741: 21 56 C7     ld hl,C756h
 C744: 11 60 C2     ld de,C260h
 C747: 06 08        ld b,08h
 C749: 1A           ld a,(de)
 C74A: BE           cp (hl)
 C74B: C0           ret nz
 C74C: 23           inc hl
 C74D: 13           inc de
 C74E: 10 F9        djnz -07h (C749h)
 C750: CD 61 C7     call C761h

This function may be called at $c736, $c731 or $c72c. It copies the ROM header into RAM, checks for "TMR SEGA" and then calls $c761. The function at $c761 ensures that the region code is 4 and that the checksum is correct.

In v2.0, the above code is replaced with:

Quote
 C726: 21 00 00     ld hl,0000h
 C729: 01 01 02     ld bc,0201h
 C72C: 11 C0 C9     ld de,C9C0h
 C72F: ED B0        ldir
 C731: 3A C0 C9     ld a,(C9C0h)
 C734: 21 C1 C9     ld hl,C9C1h
 C737: 01 00 02     ld bc,0200h
 C73A: ED A1        cpi
 C73C: 20 04        jr nz,+04h (C742h)
 C73E: E2 3A C7     jp po,C73Ah
 C741: C9           ret

This code copies the first 513 bytes of ROM into RAM and then simply checks that all 513 are not identical.

BIOS v2.0 therefore does not check for "TMR SEGA". It also does not perform the other header checks - although the function from $c761 is still present, it is never called.

I believe the detection algorithm used by v2.0 is similar to that used by the Japanese BIOS (which is numbered v2.1)?
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Sun Feb 22, 2015 2:25 pm
Could it be then that in spite of the numbering, 2.0 came before 1.3 ?

I have the system here I'll open it and take pictures.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 19 Oct 1999
  • Posts: 11824
  • Location: London
Reply with quote
Post Posted: Sun Feb 22, 2015 2:27 pm
That's right - although the Japanese one masks out some of the bits. Maybe this was intended to be the Japanese BIOS? Only existing Japanese (and SG-1000) games need this lenient check.

MPR numbers should help with sequencing.
  View user's profile Send private message Visit poster's website
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Sun Feb 22, 2015 2:36 pm
Calindro wrote
The glitches come from the values stored in $c9c0 and $c9fe.
These values are loaded into vram when the snail maze scrolls in.
RAM is only cleared at the beginning. So it seems like some code that is executed from RAM when $c700 is called overwrites these values with something non-zero.

Indeed - BIOS v2.0 copies the first 513 bytes of ROM into $c9c0 - $cbc0.

Bock wrote
It doesn't seem to repro on MEKA or Emulicious.

I assume you tried to reproduce the glitch with a patched BIOS ("zero 3 bytes from 0x114")? Unfortunately this patch prevents the glitch from appearing, because it prevents the RAM-resident code from running at all.

An alternative patch, which should show the glitch on emulators, is to zero the byte at $02c5.
  View user's profile Send private message Visit poster's website
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Sun Feb 22, 2015 2:47 pm
One further difference in the RAM-resident code: both versions of the BIOS end with the following instructions if a game is detected:

 3E EB        ld a,EBh
 D3 3E        outa (3Eh)
 3A 00 C0     ld a,(C000h)
 D3 3E        outa (3Eh)
 C3 00 00     jp 0000h

Version 2.0 adds a few additional instructions immediately before those above:

 C7C0: 21 AC 03     ld hl,03ACh
 C7C3: 22 03 C2     ld (C203h),hl
 C7C6: 3E 03        ld a,03h
 C7C8: FB           ei
 C7C9: CD 2E 04     call 042Eh
 C7CC: F3           di

The effect of these additional instructions, along with 19 additional bytes of data at $03ac - $03be, is to zero the sprite palette.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 19 Oct 1999
  • Posts: 11824
  • Location: London
Reply with quote
Post Posted: Sun Feb 22, 2015 2:50 pm
So does what you see depend on what's read from ROM - or rather, what the undriven expansion port gives you, assuming that's the last slot checked. Maybe they tested on hardware that returned zeroes.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Sun Feb 22, 2015 3:19 pm
The ROM chip says

Sega (c)
315-5216
120U
8644 Z30

The board 1986 Made in Hong Kong, appears to be the same as
http://www.smspower.org/Development/PALMasterSystemM4POWERBASEPAL837-6097

  View user's profile Send private message Visit poster's website
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Sun Feb 22, 2015 3:44 pm
The BIOS is the chip marked "SONY MPR-10883" (the one marked "315-5216" is the I/O Controller).

This compares to MPR-11124 for the Japanese BIOS v2.1. Unfortunately, I do not believe that an MPR number for BIOS v1.3 is known (the chips are generally marked "SONY CXK3864").

It is a shame that the date stamped on the board simply reads "5 AUG" and is missing a year.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Sun Feb 22, 2015 3:48 pm
Oops sorry.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Wed Feb 25, 2015 11:46 am
I'll release that rom this week (among with a few others). I purchased the system from its owner in case there's any further useful investigation to do.

It's interesting because it means this system should be able to play SG-1000/Mark III cartridges with an adapter, and any Japanese card games without an adapter.
  View user's profile Send private message Visit poster's website
  • Joined: 14 Apr 2013
  • Posts: 429
Reply with quote
Post Posted: Wed Feb 25, 2015 12:49 pm
Maxim wrote
I did a very preliminary disassembly to compare 1.3 to 2.0...

https://github.com/maxim-zhao/smsbioses

Notes so far:

- v2 drops an unnecessary di at line 169
- Data at $1a7 ($1a6 in v1) is the 2.0/1.3 tilemap data
- v1.3 seems to have more data, pushing all the labels along by 8 bytes. I amended some of the label names in v2 to match, but far from all of them.
- Emulicious's disassembly didn't detect the code in RAM:
   ld hl, $0288
   ld de, $C700
   ld bc, $00D9
   ldir
   call $C700   ; Possibly invalid

- The RAM-resident code is quite different between the two, but I didn't go into the details yet. I remember there were two distinct sets of code for the export BIOSes (albeit very similar) but I don't remember exactly how. I guess I lost that work from 9 years ago.

I've immediately improved the disassembler to disassemble code like that as well and just released the update. :)
  View user's profile Send private message Visit poster's website
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Fri Feb 27, 2015 7:38 am
Bock wrote
Could it be then that in spite of the numbering, 2.0 came before 1.3 ?

This seems unlikely, especially given that 2.0 contains unused code which is left over from 1.3.

Maxim wrote
Maybe this was intended to be the Japanese BIOS? Only existing Japanese (and SG-1000) games need this lenient check.

It is possible that this is some form of prototype Japanese BIOS. However, I would expect such a prototype to be on an EPROM rather than a production-style mask ROM.

Another possibility is that this BIOS was intended for release in a Western country where SMS buyers might already own SG-1000/SC-3000 games. Perhaps the plan was to sell a cartridge adapter? If this is the case, it seems we can narrow down the location to somewhere in Europe, based on the source of this particular system and the country code on its base ("Use 3025-18 AC Adaptor Only").

Bock wrote
It's interesting because it means this system should be able to play SG-1000/Mark III cartridges with an adapter, and any Japanese card games without an adapter.

I have confirmed using Kega Fusion that this BIOS allows the use of Japanese games. Have you been able to test this on the system itself?
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Wed Mar 04, 2015 10:40 am
I've tested a card game and it worked. I haven't tested a cartridge game but I assume which a custom cartridge adapter they would work.
  View user's profile Send private message Visit poster's website
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Wed Mar 04, 2015 11:21 am
The ROM is now available here:
http://www.smspower.org/forums/15334-SMSBIOS20JangPungIISMSKRSkyJaguarCloverSMSK...
  View user's profile Send private message Visit poster's website
  • Joined: 29 Jan 2014
  • Posts: 77
  • Location: Brasilia, Brazil
Reply with quote
Post Posted: Sat Mar 07, 2015 5:49 pm
Paul Baker wrote
This compares to MPR-11124 for the Japanese BIOS v2.1. Unfortunately, I do not believe that an MPR number for BIOS v1.3 is known (the chips are generally marked "SONY CXK3864").


Now it is:

SMS BIOS 1.3 Sharp MASK ROM

I took that out from a 1988 USA SMS I modded for a friend (FM + USA/JPN bios) a year ago. I kept the chip because I thought it could be something of importance. Seems like I was right.

Edit: SHA1 is C315672807D8DDB8D91443729405C766DD95CAE7
DSC02468.JPG (34.43 KB)
SMS BIOS 1.3 mask rom
DSC02468.JPG

  View user's profile Send private message
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Sun Mar 08, 2015 9:22 pm
l_oliveira wrote
SHA1 is C315672807D8DDB8D91443729405C766DD95CAE7

That matches the good dump of BIOS v1.3, so confirms that its number is MPR-10052. As expected, this precedes v2.0's MPR-10883.

l_oliveira wrote
I kept the chip because I thought it could be something of importance. Seems like I was right.

Yes, this is useful information. Thanks.
  View user's profile Send private message Visit poster's website
  • Joined: 29 Jan 2014
  • Posts: 77
  • Location: Brasilia, Brazil
Reply with quote
Post Posted: Sun Mar 08, 2015 9:56 pm
Just mentioning, the date code on the Z80, the Gate Array and other parts at the system with the BIOS 2.0 suggest that the machine was assembled in the 1st half of 1987. Usually the newest part can give you a good idea.

For example the Z80 date code is 8722 (1987, week 22)
  View user's profile Send private message
  • Joined: 08 Dec 2005
  • Posts: 465
  • Location: Melbourne, Australia
Reply with quote
Post Posted: Mon Mar 09, 2015 4:31 am
Paul Baker wrote
It is a shame that the date stamped on the board simply reads "5 AUG" and is missing a year.

l_oliveira wrote
Just mentioning, the date code on the Z80, the Gate Array and other parts at the system with the BIOS 2.0 suggest that the machine was assembled in the 1st half of 1987.

We can conclude, then, that this machine was produced in August 1987.
  View user's profile Send private message Visit poster's website
  • Joined: 01 Oct 2014
  • Posts: 22
  • Location: Los Angeles
Reply with quote
Post Posted: Tue Mar 10, 2015 7:43 pm
I now have a full disassembly of BIOS 2.0, very similar to the 1.3 one; as with 1.3 it assembles to an exact binary copy of the dump.

You guys already found almost all the 1.3 <-> 2.0 differences, the only extra one I found was the removal of 6 bytes of data that was unused in 1.3 (under the label "MysteriousUnusedData" in my 1.3 disasm)

Once I'm done with the polish pass on 1.3 (add extra macros etc.) I will do the same for 2.0 and release the .asm file.

In the meantime, here is the full recap of 1.3 <-> 2.0 differences:
* Removed unnecessary di instruction after the call to the detection code in RAM
* In the instruction screen tile map, changed "V1.3" to "V2.0"
* Removed 6 data bytes that were unused in 1.3
* The BootGame code now zeroes the sprite palette
* The only major change is in the ROM detection code; in 2.0 the code copies the first 513 bytes of ROM into RAM and then simply checks that all 513 are not identical.
Interestingly they kept all the checksum and region check code (as well as the "TMR SEGA" string), and just wrote over the calls to these (as a result, the code copied to RAM is almost the same size as in 1.3)
  View user's profile Send private message
  • Joined: 01 Oct 2014
  • Posts: 22
  • Location: Los Angeles
Reply with quote
Post Posted: Wed Mar 11, 2015 8:31 am
Last edited by segmtfault on Mon Oct 05, 2015 8:18 pm; edited 2 times in total
And here is the disassembly file for BIOS 2.0.
Bios20.asm (144.76 KB)

  View user's profile Send private message
  • Site Admin
  • Joined: 19 Oct 1999
  • Posts: 11824
  • Location: London
Reply with quote
Post Posted: Wed Mar 11, 2015 9:09 am
Great, you're saving me the effort :) Can you do v1.0 next?
  View user's profile Send private message Visit poster's website
  • Joined: 01 Oct 2014
  • Posts: 22
  • Location: Los Angeles
Reply with quote
Post Posted: Wed Mar 11, 2015 5:58 pm
Maxim wrote
Great, you're saving me the effort :) Can you do v1.0 next?


Yes, that was my plan :)
  View user's profile Send private message
  • Joined: 01 May 2011
  • Posts: 371
Reply with quote
Post Posted: Sat Mar 14, 2015 9:52 pm
[quote="Paul Baker"]
Bock wrote
Another possibility is that this BIOS was intended for release in a Western country where SMS buyers might already own SG-1000/SC-3000 games. Perhaps the plan was to sell a cartridge adapter? If this is the case, it seems we can narrow down the location to somewhere in Europe, based on the source of this particular system and the country code on its base ("Use 3025-18 AC Adaptor Only").

Bock wrote
It's interesting because it means this system should be able to play SG-1000/Mark III cartridges with an adapter, and any Japanese card games without an adapter.

I have confirmed using Kega Fusion that this BIOS allows the use of Japanese games. Have you been able to test this on the system itself?


I think we can discount Germany, I have a 1986 launch version, It has a "TUV" (I guess some kind of German RF standard requirement) sticker on the base next to the model/serial sticker. I have also previously owned a German SMS II with the same sticker. According to the service manual these could be bought from Sega Japan for German systems, so it would seem that these were mandatory for German systems. Incidentally, "3025-18" seems to be that standard EU AC adapter (maybe because it released in Germany first but was later also compatible with other European countries). Also, the second digit of the serial number represents the year it was assembled (in this case 7=1987), although if a mainboard was manufactured at the end of a year then the actual assembly could occur in the following year.

Still, SC-3000 was never sold in Germany, mainly France and to a lesser extent Italy and Finland in Europe. The date from this console fits with French SMS launch, but French systems were RGB only, whereas this unit has RF out too. So we can rule out France and probably the SG-1000 adapter theory. Although with Sega's previous history of the Card Catcher in 1985 and Powerbase converter in 1989 that did seem like a realistic theory.

The country of origin could probably be rounded down by finding out which RF modulator it uses, but most of EU used B/G, UK: I.

So if we assume that this is a retail bios, is it possible that it was installed to the wrong model by mistake? That would seem like an easy mistake to make.

Check out this thread. A PAL 1988 Chinese system with JP cartridge slot but "Hang On game is built into the Powerbase". Unfortunately the owner sold it, so no way to check the bios. However, JP bios did not have Hang On, and Export bios with Hang On would have not been compatible with many JP carts, so as this console plays JP carts and not export ones then surely it must have a modified bios with similar changes to 2.0.

Obviously this is not the same bios (no Hang-On), but is it possible that the 1988 Chinese system with Hang On was not the first system released there, and another version with no game released the previous year based off of 1.3, but with the changes to 2.0 to allow it to play JP games?

Just speculation on my part, but we may get an idea if the 1988 Chinese bios ever gets dumped.
  View user's profile Send private message
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Sat Mar 14, 2015 9:58 pm
Good point on the Chinese SMS. Somehow I never noticed / make the connection that it had an Asian cartridge slot but not the other features of a Japanese SMS.
  View user's profile Send private message Visit poster's website
  • Joined: 01 May 2011
  • Posts: 371
Reply with quote
Post Posted: Sat Mar 14, 2015 10:02 pm
Also, 2.1 released in the second half of 1987, wheras 2.4+ released in the second half of 1988, what happened to 2.2 and 2.3? Is it possible that Chinese bios with Hang On is V2.2 or V2.3?
  View user's profile Send private message
  • Joined: 01 May 2011
  • Posts: 371
Reply with quote
Post Posted: Sat Mar 14, 2015 10:07 pm
Bock wrote
Good point on the Chinese SMS. Somehow I never noticed / make the connection that it had an Asian cartridge slot but not the other features of a Japanese SMS.


Yeah, no "3-D Glasses" port, so clearly a unique model rather than a re-boxed JP model.
  View user's profile Send private message
  • Joined: 29 Jan 2014
  • Posts: 77
  • Location: Brasilia, Brazil
Reply with quote
Post Posted: Sat Mar 14, 2015 10:18 pm
Didn't the South Korean hardware (Gam Boy?) also had such configuration ?

I don't think SEGA would put the Space Harrier bios with Japanese text on something they were selling back then in South Korea.

Because at the time the bad feelings about WW2 and the Japanese military campaign in Asia were still strong.

To the point that for example popular arcade fighting games from Capcom and SNK made for official release on those countries had Japanese text converted to English and voice overs for special moves replaced with grunts/shouts.
  View user's profile Send private message
  • Joined: 01 May 2011
  • Posts: 371
Reply with quote
Post Posted: Sat Mar 14, 2015 10:39 pm
A great article on South Korean gaming here, by someone who posts here. It does go into some of the issues you bring up. However, Gam*Boy released in 1989, so seems to post-date the Chinese system, maybe early systems have an undumped bios, but according to that article the ban on Japanese language in video games came much later. Also, early Korean systems are supposed to have FM capability, so maybe they were simply imported at first.

Still, I have a theory, 2.2=Hang On + no region check, 2.3=Hang On/Safari Hunt + no region check. Specific to to 1988 Chinese market, the only place we have seen PAL console with Asian cartridge port. Maybe 2.0 is the previous Chinese version of 1.3.

As to the reason why it was sold in China in the first place? Sega outsourced manufacturing, at first to Hong Kong based WKK who had factories in China. WKK also had a consumer sales division who sold the SMS in Hong Kong since the beginning in 1986, so I guess it was them who pushed for release in the mainland too.
  View user's profile Send private message
  • Joined: 01 May 2011
  • Posts: 371
Reply with quote
Post Posted: Sun Jun 07, 2015 3:16 pm
Here's a 1987 PAL-D (China) Master System with a Japanese cartridge slot (No FM, Rapid Fire, or 3D adapter port). Model: 3095-15-B. Bios doesn't include Hang On, just the maze game. Label has "Hiroshima Trading Co., LTD." on it. I guess this was the model that this bios was intended for.
img_0.jpg (105.17 KB)
img_0.jpg
img_1.jpg (106.33 KB)
img_1.jpg
img_x.jpg (102.63 KB)
img_x.jpg
img_x2.jpg (108.02 KB)
img_x2.jpg
img_x3.jpg (109.33 KB)
img_x3.jpg
img_x4.jpg (108.79 KB)
img_x4.jpg

  View user's profile Send private message
  • Joined: 09 Jan 2008
  • Posts: 14
  • Location: Australia
Reply with quote
Picked up a sms V2.0 from ebay australia
Post Posted: Thu Mar 09, 2017 11:28 pm
Hi Everyone,

I picked up a collection from ebay Australia a few weeks ago,

I went looking as the snail game has the distinct graphics bug

The unit came from victoria, the gent i bought it from said that it was from his childhood, a few of the games that came with it had receipts from local computer stores dated in the 80s which seem to support his claims,

If you want any photos or serial number etc just let me know,

Regards Dave
  View user's profile Send private message
  • Site Admin
  • Joined: 08 Jul 2001
  • Posts: 7688
  • Location: Paris, France
Reply with quote
Post Posted: Fri Mar 10, 2017 8:36 am
Photos and serial numbers would be nice :)
  View user's profile Send private message Visit poster's website
  • Joined: 09 Jan 2008
  • Posts: 14
  • Location: Australia
Reply with quote
Photo's of V2.0 found in australia
Post Posted: Sun Mar 12, 2017 6:21 am
The serial number is similar but quite a few between the other one,
77723371

The date stamp on the pcb is 7 Dec, no year unfortunately.

Hope this info is useful,

Dave
IMG_1188.JPG (1.25 MB)
Serial Number Label
IMG_1188.JPG
IMG_1186.JPG (1.46 MB)
Main PCB
IMG_1186.JPG

  View user's profile Send private message
  • Joined: 29 Jan 2014
  • Posts: 77
  • Location: Brasilia, Brazil
Reply with quote
Post Posted: Sun Mar 12, 2017 7:01 am
oliverthepig wrote
The serial number is similar but quite a few between the other one,
77723371

The date stamp on the pcb is 7 Dec, no year unfortunately.

Hope this info is useful,

Dave


Year is 1987 according to the chips datecodes.
  View user's profile Send private message
  • Joined: 01 May 2011
  • Posts: 371
Reply with quote
Post Posted: Tue Mar 14, 2017 6:55 pm
Neat, it's from the same batch (all PAL 1987 consoles come from this batch), but from towards the end (about 230,000 units manufactured in this batch), as the date stamp confirms. This should be a PAL-B(VV) console (only Australia had this standard), where as the other one should be PAL-G (most of mainland Europe except France).

After about 25,000 units or so they dropped the region code, which could have been a problem if for example Australian consoles got mixed up with European ones they wouldn't have been compatible with local televisions. They restored region codes after this batch, so maybe it resulted in some errors being made. So quite possibly a case of Chinese bios installed by error, but we don't have a Chinese bios dump to confirm.

I've been collating serial numbers. As this batch dropped region codes I noted which country the console showed up in (might not have originally been sold there).

First digit = Manufacturer (7 = Made in China, should be WKK).
Second digit = Year (7 = 1987)

77505652 3010-06
77511760 3010-20
77514788 3010-11
77520769 3010-05
77521369 3010-05
77521413 3010-05
77521520 3010-05
77522357 3010-05
77522413 3010-05
77522825 3010-05
77525669 3010-05
77529373 3010 (FR)
77541514 3010 (BE) (Bios 2.0!)
77542424 3010 (DE)
77543978 3010 (DE)
77542857 3010 (DE)
77544216 3010 (DE)
77544634 3010 (DE)
77544885 3010 (DE)
77545641 3010 (DE)
77547322 3010 (UK)
77551462 3010
77553394 3010 (DE)
77554809 3010 (DE)
77555349 3010 (DE)
77555425 3010 (DE)
77556558 3010 (PL)
77556977 3010 (DE)
77560925 3010 (DE)
77563886 3010 (UK)
77565067 3010 (UK)
77567493 3010 (DE)
77570880 3010 (DE)
77572419 3010 (DE)
77579019 3010 (DE)
77579285 3010 (DE)
77560586 3010 (DE)
77566720 3010 (DE)
77569188 3010 (DE)
77576362 3010 (FR)
77579285 3010 (DE)
77580270 3010 (DE)
77581861 3010 (PL)
77591792 3010 (UK)
77595986 3010 (FR)
77600008 3010 (UK)
77600892 3010 (UK)
77601581 3010 (UK)
77601998 3010 (UK)
77602845 3010 (DE)
77604211 3010 (UK)
77608096 3010 (IT)
77608211 3010 (PL)
77611823 3010 (FR)
77618441 3010 (FR)
77619762 3010 (FR)
77621530 3010 (FR)
77623258 3010 (FR)
77623472 3010 (FR)
77628547 3010 (UK)
77628709 3010 (UK)
77628909 3010 (UK)
77630232 3010 (UK)
77630344 3010
77630529 3010 (UK)
77631282 3010
77633719 3010 (UK)
77641076 3010 (FR)
77647777 3010 (FR)
77647813 3010 (FR)
77649932 3010 (UK)
77650949 3010 (UK)
77652349 3010 (UK)
77654171 3010 (UK)
77654550 3010 (UK)
77655080 3010 (UK)
77660193 3010 (UK)
77660519 3010 (UK)
77661546 3010 (UK)
77661998 3010 (UK)
77662917 3010 (UK)
77666713 3010 (FR)
77673412 3010 (FR)
77677842 3010 (HK)
77683115 3010 (DE)
77684797 3010 (DE)
77685010 3010 (DE)
77685917 3010 (DE)
77686530 3010 (DE)
77688990 3010 (DE)
77690487 3010
77694630 3010 (UK)
77696293 3010 (SE)
77697471 3010 (FR)
77706146 3010 (FR)
77707831 3010 (FR)
77715011 3010 (UK)
77710024 3010 (UK)
77716637 3010 (UK)
77720590 3010 (ES)
77722322 3010 (ES)
77722782 3010 (ES)
77723363 3010 (AU)
77723371 3010 (AU) (Bios 2.0!)
77723381 3010 (AU)
77727037 3010 (CN)
  View user's profile Send private message
  • Joined: 30 Jan 2007
  • Posts: 262
  • Location: San Jose, CA
Reply with quote
Post Posted: Tue Aug 08, 2017 10:22 pm
Just recently saw this thread again and I decided to replace the Boot Loader BIOS on my later model SMS (board revision 837-6629, the one with Hang-On/Safari Hunt built-in) with the v2.0 BIOS. It works perfectly but since it's 8K, it has to be padded to 32K before burning in order for it to be a drop-in replacement. Here's the padded file, simply burn it to a 27C256 EPROM and you're in business.

  View user's profile Send private message Visit poster's website
  • Joined: 27 Sep 2017
  • Posts: 2
Reply with quote
Post Posted: Mon Oct 02, 2017 11:25 am
ApolloBoy wrote
Just recently saw this thread again and I decided to replace the Boot Loader BIOS on my later model SMS (board revision 837-6629, the one with Hang-On/Safari Hunt built-in) with the v2.0 BIOS. It works perfectly but since it's 8K, it has to be padded to 32K before burning in order for it to be a drop-in replacement. Here's the padded file, simply burn it to a 27C256 EPROM and you're in business.


Thank you! :)
  View user's profile Send private message Visit poster's website
Reply to topic



Back to the top of this page

Back to SMS Power!