MNW: Difference between revisions

From MAMEDEV Wiki
No edit summary
No edit summary
Line 64: Line 64:


== [http://mamedev.org/source/src/mame/drivers/argus.c.html argus] ==
== [http://mamedev.org/source/src/mame/drivers/argus.c.html argus] ==
''' bombsa ''' -
''' bombsa ''' - Banking problems, Data roms won't pass ROM check.  Probably needs some checks done on the real hw (Guru has the PCB).




Line 72: Line 72:


== [http://mamedev.org/source/src/mame/drivers/atarigx2.c.html atarigx2] ==
== [http://mamedev.org/source/src/mame/drivers/atarigx2.c.html atarigx2] ==
''' motofren ''' -
All of these games suffer from some advanced protection that affects them in different ways. Through some magic accesses in memory, data can be decrypted using some special key sequences that are not entirely understood. It might be possible to find all possible data sources, run them through the decryption process on the real PCB, and then encode that information in the driver, but it is tedious work at best. Below is the status of each game:


''' motofrmd ''' -
''' motofren ''' - Has some obvious gameplay glitches. Not much work has been done to understand the protection on this one.


''' motofrft ''' -
''' spclords ''' - Has had some of its data decrypted, which is why the palette during attract mode looks ok. But in game there are many problems lurking.
 
''' motomdft ''' -
 
''' spclords ''' -
 
''' spclordb ''' -
 
''' spclorda ''' -
 
''' spclordg ''' -


''' rrreveng ''' -
''' rrreveng ''' -


''' rrrevenp ''' -




Line 143: Line 132:


== [http://mamedev.org/source/src/mame/drivers/cntsteer.c.html cntsteer] ==
== [http://mamedev.org/source/src/mame/drivers/cntsteer.c.html cntsteer] ==
''' cntsteer ''' -
''' cntsteer, zerotrgt ''' - Very old ROZ style hardware. Haze looked at it a few times, doesn't really make sense to him.
 
''' zerotrgt ''' -


''' gekitsui ''' -
''' gekitsui ''' -
Line 225: Line 212:


== [http://mamedev.org/source/src/mame/drivers/dblewing.c.html dblewing] ==
== [http://mamedev.org/source/src/mame/drivers/dblewing.c.html dblewing] ==
Heavy duty protection.
Heavy duty protection supplies jump addresses.




Line 385: Line 372:


== [http://mamedev.org/source/src/mame/drivers/gaelco2.c.html gaelco2] ==
== [http://mamedev.org/source/src/mame/drivers/gaelco2.c.html gaelco2] ==
''' aligator ''' - We have an unprotected version of Alligator hunt to attempt to simulate the protection in the protected version, but it isn't easy, looks like MCU may provide ROM patches.
''' touchgo ''' -
''' touchgo ''' -


Line 390: Line 379:


''' touchgoe ''' -
''' touchgoe ''' -




Line 517: Line 507:


== [http://mamedev.org/source/src/mame/drivers/hshavoc.c.html hshavoc] ==
== [http://mamedev.org/source/src/mame/drivers/hshavoc.c.html hshavoc] ==
State based encryption using PIC.  
Genesis hardware, but uses a PIC to control state based encryption.  All the code that matches the Megadrive version has been decrypted, but the extra code (startup code, coins etc.) appears to have some annoying extra encryption.




Line 591: Line 581:


== [http://mamedev.org/source/src/mame/drivers/kaneko16.c.html kaneko16] ==
== [http://mamedev.org/source/src/mame/drivers/kaneko16.c.html kaneko16] ==
Kaneko protection MCU, same type of chip as other 90s Kaneko games.  Awaiting Decap results.
Kaneko protection MCU, same type of chip as other 90s Kaneko games.  Awaiting Decap results. Afaik (Haze), SebV made some progress on it for the Kaneko 16-bit ones. No relationship has been found between the (encrypted?) data in the data rom, and the data obtained by trojans. See Bonk's Adventure protection simulation in the source for more info.
 


== [http://mamedev.org/source/src/mame/drivers/kinst.c.html kinst] ==
== [http://mamedev.org/source/src/mame/drivers/kinst.c.html kinst] ==
Line 1,480: Line 1,469:


== [http://mamedev.org/source/src/mame/drivers/turbosub.c.html turbosub] ==
== [http://mamedev.org/source/src/mame/drivers/turbosub.c.html turbosub] ==
Cannot progress without a dump of the video processor instruction PROMs.
Cannot progress without a dump of the 7 video processor instruction PROMs (AM29116DC).





Revision as of 16:48, 25 January 2008

This page is designed to allow for a quick look over all the drivers with a GAME_NOT_WORKING flag by giving, as much as possible, an idea on the amount of effort needed to fix them.


2mindril

Motion control?


39in1

The program ROM appears to be encrypted. Mame on ARM.


8080bw

astropal -


acefruit

starspnr -


acommand

acommand -


adp

backgamn -

quickjac -

skattv -

skattva -

fashiong -


aerofgt

pallavol -

aerfboot -


aleck64

11beat -

mtetrisc -

srmvs -

twrshaft -


alg

Laserdisc games.


alpha68k

goldmedb -


ampoker

sigma2k -


argus

bombsa - Banking problems, Data roms won't pass ROM check. Probably needs some checks done on the real hw (Guru has the PCB).


astrocde

tenpindx -


atarigx2

All of these games suffer from some advanced protection that affects them in different ways. Through some magic accesses in memory, data can be decrypted using some special key sequences that are not entirely understood. It might be possible to find all possible data sources, run them through the decryption process on the real PCB, and then encode that information in the driver, but it is tedious work at best. Below is the status of each game:

motofren - Has some obvious gameplay glitches. Not much work has been done to understand the protection on this one.

spclords - Has had some of its data decrypted, which is why the palette during attract mode looks ok. But in game there are many problems lurking.

rrreveng -


berzerk

moonwarp -


bfcobra

inquiztr - Missing floppy disk image and 6809 program ROM.


bfm_sc2

quintond -


bigfghtr

Undumpable protection MCUs.


bublbobl

tokio, tokiou - Protection MCU.


cham24

champbas

champb2a -


cherrym

cmv801 -


cherrym2

cm2v841 -

cm2841a -


cinemat

spaceftr -


cliffhgr

cliffhgr -

cliffhga -

goaltogo -


cntsteer

cntsteer, zerotrgt - Very old ROZ style hardware. Haze looked at it a few times, doesn't really make sense to him.

gekitsui -


coinmstr

trailblz -

supnudg2 -


comebaby

Game runs on a Pentium (I/II/III?) class machine running Windows 98!


coolridr

Skeleton driver.


cop01

mightguy - Protection not emulated.


couple

couple -

couplep -

couplei -


cowrace

cowrace -


cps1

kodb -

sf2m1 -

sf2m2 -

sf2m3 -


cps3

redeartn - Missing nocd bios dump.


cshooter

cshooter -

cshootre -

airraid -


csk

stellecu -


cubocd32

cndypuzl -

haremchl -

lsrquiz -

lsrquiz2 -

mgprem11 -

lasstixx -


cybertnk

Program ROMs (Japanese version) are bad. A dump of the US version is pending.


dblewing

Heavy duty protection supplies jump addresses.


ddealer

ddealer -


ddenlovr

quizchq -

quizchql -


ddz

ddz -


dec0

secretab -

midresb -


deco_mlc

stadhr96 -

stadh96a -


deco32

lockload -

locklodu -


decocass

ctislnd3 -

cexplore -

cgraplp2 -


djmain

bmclubmx -

bm7thmix -


dlair

Laserdisc games.


dmndrby

dmndrby -

dmndrbya -


drw80pkr

drw80pkr -


dynax

majrjhdx -

hjingi -


dynax

tenkai -

tenkai2b -

tenkaicb -

tenkaid -

tenkaie -


eolith

hidctch3 -


epos

catapult, dealer, revenger - Bad dumps.


equites

gekisou -


ertictac

poizone -


esh

Laserdisc game.


expro02

galsnew -

galsnewa -

galsnewj -


f1gp

f1gpb -


filetto

filetto -


firebeat

ppp -

ppd -

ppp11 -

kbm -

kbm2nd -

kbm3rd -

popn7 -


fortecar

fortecar -


freekick

freekick, countrun - Main program inside of custom CPU block.

countrb2 - Possible bad dump, or encrypted.


funworld

jolycdab -

royalcdc -

jokercrd -

monglfir -

soccernw -

snookr10 -

saloon -


gaelco2

aligator - We have an unprotected version of Alligator hunt to attempt to simulate the protection in the protected version, but it isn't easy, looks like MCU may provide ROM patches.

touchgo -

touchgon -

touchgoe -


galaxia

galaxia - Skeleton driver. It's a galaxian rip-off on a custom board with CVS-like hardware IIRC (Haze).


galaxian

supergx , hare - Bad dump.

dingoe - Probable bad dump and encryption.

trvchlng - No question rom dump.


galivan

youmab, youmab2 - Weird bootlegs, who knows.


galpani2

Kaneko protection MCU with internal rom, managing CPU comms. Decap should possible, should be the same for all games / sets.


galpani3

Kaneko protection MCU, same type of chip as other 90s Kaneko games. Decap should be possible.


gamecstl

gamecstl - 'Modern' PC Hardware running a MAME bootleg.


getrivia

m075 -

superbwl -

gepoker1 -


ghosteo

bballoon - Uses a fairly recent ARM based chip. Almost a skeleton driver.


gladiatr

ppking -


go2000

go2000 -


good

good -


gottlieb

mach3, cobram3, usvsthem - Laserdisc games.


gpworld

Laserdisc hardware.


gstriker

Tecmo MCU providing jump addresses etc. Has direct access to entire CPU bus, prevents code modification (MCU writes 'ROM ERROR' if you change ROM).


gticlub

thunderh -

slrasslt -

gticlub -

gticlubj -

hangplt -


gtipoker

gtipoker -


gumbo

mspuzzln -


gunpey

gunpey - Complex video chip, supports compressed graphics formats etc. Skeleton driver, work has been done, but no good progress made.


harddriv

harddrv1 -

racedrv2 -

racedrv1 -

racedrb1 -

racedrg1 -

steeltap -

hdrivaip -


hng64

hng64 - The I/O CPU is a protected MCU. There is some thought that the game uses this as a protection device.

fatfurwa, buriki, roadedge, sams64_2 - Fatal Fury Wild Ambition is the only game working well enough to derive video hardware behavior from. The ground ROZ layer and animating tilemaps have yet to be implemented, and can be implemented using only this game, but more games will need to be playable to completely figure out the video.

Samurai Showdown 64 takes a different path through the BIOS, buriki uses the video hardware in weird ways, etc. Making these boot and load the palette would be a great start.


homedata

mjikaga -


hornet

sscope -

sscopea -

sscope2 -


hshavoc

Genesis hardware, but uses a PIC to control state based encryption. All the code that matches the Megadrive version has been decrypted, but the extra code (startup code, coins etc.) appears to have some annoying extra encryption.


hyprduel

magerror -


igs_180

iqblocka -

iqblockf -

tjsb -


igs_blit

dbc -

xymg -


igs_m68

lhzb2 -

lhzb2a -

mgcs -

slqz2 -

sdmg2 -


igs_m027

Main program / boot code in (currently undumpable) MCU.


intrscti

intrscti - Probably missing code in epoxy block.


iqblock

cabaret -

pokerigs -


ironhors

farwest -


istellar

Laserdisc game.


jackpool

jackpool -

suprpool -


jalmah

urashima -


jalmah

daireika -


jchan

Kaneko protection MCU, same type of chip as other 90s Kaneko games. Decap should be possible.


kaneko16

Kaneko protection MCU, same type of chip as other 90s Kaneko games. Awaiting Decap results. Afaik (Haze), SebV made some progress on it for the Kaneko 16-bit ones. No relationship has been found between the (encrypted?) data in the data rom, and the data obtained by trojans. See Bonk's Adventure protection simulation in the source for more info.

kinst

kinst2k -


kinstb

konamigv

kdeadeye -

btchamp -

tokimosh -

tokimosp -


konamigx

racinfrc -

racinfru -

opengolf -

opengol2 -

ggreats2 -

le2j -

fantjour -

soccerss -

soccersj -

soccersa -

vsnetscr -

vsnetseb -

vsnetscu -

vsnetsca -

vsnetscj -

rungun2 -

slamdnk2 -

rushhero -


konamim2

polystar -

totlvice -

btltryst -

heatof11 -

evilngt -


kopunch

ksys573

ddrja -

ddrjb -

drmn -

ddr3mk -

ddr3mka -

ddr3ma -

ddr3mj -

ddrsbm -

ddrs2k -

ddrs2kj -

dsfdct -

drmn2m -

dncfrks -

dmx -

gtrfrk3m -

gtfrk3ma -

gtfrk3mb -

ddr3mp -

pcnfrk3m -

drmn3m -

gtrfrk4m -

ddr4m -

ddr4mj -

ddr4ms -

ddr4msj -

ddrusa -

ddr4mp -

ddr4mps -

dmx2m -

gtrfrk5m -

ddr5m -

dmx2majp -

gtrfrk6m -

gtrfrk7m -

ddrmax -

ddrmax2 -

dsem2 -

ddrextrm -

gtfrk11m -


laserbas

Jaleco-like protection device.


laserbat

catmousa -


legionna

Complex Seibu 'COP' protection device.


lgp

Laserdisc game.


liberate

prosoccr -

prosport -


littlerb

Annoying VDP-like chip controlling access to video devices. Commands not fully understood, correct readback of data just as important as writes as addresses etc. are stored and it affects future writes. Runs through attract mode with bad graphics, but no guarantees are made that the sprite-list it's currently processing is in the right format, or the right place as everything is written through the 'VDP' device.


lockon

Work in progress - nearly done.


lordgun

hfh -


ltcasino

ltcasinn -


lucky8

lucky8 -


m72

lohtb - The bootleg hardware is different to the original hardware.

lohtb2 - This set has the MCU dumped, we can use the simulation code from the original, but I (Haze) have chosen not to. The MCU should be emulated.


m90

dynablsb -

bomblord -

riskchal -

gussun -


m107

wpksoc -


macs

macsbios -

mac2bios -

kisekaem -

kisekaeh -

cultname -


magic10

magic102 -


malzak

malzak -

malzak2 -


mazerbla

mazerbla -

mzrblzra -


meadows

bowl3d -


megatech

Incorrect behavior at time out and they're sms based games which aren't yet fully supported.


merit

pitboss -

casino5 -

bigappg -

dodge -


meritm

pitboss2 -

spitboss -

pitbossm -

megat3 -

megat5 -

megat6 -


mermaid

mermaid -

yachtmn -


mcr

nflfoot -


micro3d

Lacking Am29000 core. Work in progress by Phil B.


midvunit

offroadc -


midzeus

crusnexo -

thegrid -

thegrida -


mediagx

a51site4 -


miniboy7

Bad dumps, pretty much no information available other than the dump, missing color prom.

mirage

Preliminary, almost skeleton, may be deco156-ish.

mirax

Skeleton driver.


missile

mcombat, mcombata - Bootlegs on different hardware.


mjsiyoub

Skeleton driver, maybe slight encryption, Mahjong.


mlanding

3D needs hooking up, wherever it is in the hardware/memory map. May have details in common with taitoair, it was advertised as taitoair-without-the-c25 anyway.


model1

swa, wingwar, wingwara - Guesswork incomplete on the math copro dsp functions and program impossible to dump.


model2

model3

moo

moobl -


mpatrol

alpha1v -


mpu4drvr

Very cranky hardware.


mquake

Preliminary driver.


ms32

f1superb - Extended MS32 board with additional video chips, however, I (Haze) suspect there is a v70 bug affecting game behavior as there are no corners and the camera is always placed at road level. MS32 cleanups are currently in progress, but haven't helped this so far.


namcona1

xday2 -


namcos2

finalap2 -

finalp2j -

bubbletr -

finalap3 -

finalp3j -


namcos10

mrdrilr2 -

gjspace -

mrdrilrg -

knpuzzle -

startrgn -

gamshara -


namcos11

souledge, -

souledga -

souledgb -

souledgc -


namcos12

soulclbr -

soulclba -

soulclbb -

soulclbc -

soulclbd -

kaiunqz -

mdhorse -

tektagt -

tektagta -

tektagtb -

tektagtc -

sws2000 -

sws2001 -


namcos21

winrun -

winrun91 -

driveyes -

aircombj -

aircombu -


namcos22

ridgera2 -

ridger2a -

ridger2b -

airco22b -

cybrcomm -


namcos23

timecrs2 -

gp500 -

finfurl2 -

finfrl2j -


naomi

Lots missing still. Very early.


nbmj8688

nightlov -

nbmj8991

av2mj1bb -

av2mj2rg -


neodrvr

kog -


nmk16

vandykeb -


nss

nwk-tr

racingj -

racingj2 -

thrilld -


nycaptor

cyclshtg - Missing (protection?) MCU dump.


oneshot

maddonnb - No program roms on this set. GFX have misplaced tiles when used with other program roms, so this is a different license / revision.


pacman

woodpeka - Missing and badly dumped program roms, which are tucked into an epoxy block.


pangofun

pangofun - PC based hardware, possibly bad / incomplete dump.


panicr

panicr - Capable of reading back the background layout ROMs for collision, readback method isn't properly understood, so the game doesn't play correctly.


paranoia

paranoia -


pgm

drgw2 -

drgw2j -

drgw3 -

drgw3k -

kovsh -

killbld -

olds -

olds100 -

olds100a -

kov2p -

ddp2 -

puzzli2 -

theglad -

dmnfrnt -

dmnfrnta -


phoenix

fenix - Bootleg, to be checked closer.

survival - Weird protection, see details in sources.


playch10

pc_pinbt -


plygonet

Dsp56k CPU emulation needs to be completed. Network interface needs to be worked out.


pntnpuzl

Skeleton-ish.

progolf

rabbit

tmmjprd -


raiden2

raiden2*, raidndx*, zeroteam*, nzerotea - Complex Seibu COP2 protection + banking (probably linked to the protection) + sprites incompletely decrypted.

r2dx_v33 - Complex Seibu COP3 protection + banking probably linked to the protection) + sprites incompletely decrypted.


rbmk

Skeleton, Mahjong.


rcorsair

Undumped program roms in epoxy block.


royalmah

mjtensin -

janoh -

mjvegas -

cafedoll -


sangho

pzlestar -

sexyboom -


sbugger

sbugger - Bad dump, different revision to working set.


scramble

conquer, skelagon, scrpiona - Bad dump.

monsterz - Incomplete protection emulation.


sderby

pmroulet - Protection MCU handles win rates etc. Correct win behavior is critical to this gambling game functioning as expected, so simulation probably doesn't make sense.


seattle

sfrushrk -


segac2

pclubj, pclubjv2, pclubjv4, pclubjv5 - Need camera and printer handling.


segag80r

astrob1 -


segahang

endurob2 - Bad dump.


segald

Laserdisc hardware.


segaorun

toutrun1 - Missing decryption key.

shangon1 - Bad dump.


segas16b

aceattac, altbeaj1 - Missing decryption key.


segas18

astorm - Missing decryption key.

pontoon -


segas24

sspirtfc - Missing floppy image.

sgmast - Missing decryption key.


segas32

kokoroj2 - Unemulated CD board.

f1lap - Protection + Needs a minimum of 2 boards.


segaxbd

gprider - Program roms not dumped.


seta

inttoote -


sfkick

sfkick, spinkick - Hacked MSX hardware, lots of strings blanked out in the BIOS etc. Boards contain large epoxy block, content unknown, but it might just be the MSX video hardware. Correct memory mapping not understood.


shanghai

kothello -


skychut

andromed - Bad dump (missing rom).

greenber - Bad dump (missing rom). Note this is not the same game as Konami's Green Beret.


skylncr

skylncr -


slapfght

Undumped 68705 protection MCU.


smstrv

Skeleton driver.


splash

Protection MCUs.


srmp5

Preliminary, Mahjong.


st0016

mayjinsn -


statriv2

quaquiz2 -


steaser

steaser - Skeleton driver. Board has 2x M68705s for protection.


stepstag

Incomplete frankendump.


strnskil

pettanp -

banbam -


stv

decathlt - Funky DMA/decompression protection.

elandore - Protection and vdp1 issues.

ffreveng - Black screen somehow.

findlove - Controls broken.

myfairld - Sound ram check breaks things, see source.

twcup98 - Missing tecmo logo.

stress - Needs printer handling.

vfremix - Texture upload issues in some cases, see source.

sfish2, sfish2j - CD handling broken.

magzun -


suna8

Protection / encryption (custom CPU modules containing Z80 + encryption logic).


supdrapo

Preliminary.


superdq

Laserdisc games.


superqix

sqixu - Incomplete dump.


suprgolf

Preliminary, may be missing proms.


system1

shtngmst -

shtngms1 -

shtngmsa -

chplft -

gardiab -

dakkochn -


system16

bayrtbl1 -

bayrtbl2 -

goldnabl -

goldnab2 -

passht4b -

tturfbl -


taito_z

racingb -


taitojc

Work in progress by Ville, 68040+68hc11+32051+taito own 3D.


taitowlf

Preliminary, PC+voodoo.


taitoair

Possible 320c25 bugs. Possible m68k-c25 communication issues. Not easy, the c25 code is hard to read, probably interesting.


tank8

tank8a -

tank8b -

tank8c -

tank8d -


tarzan

Skeleton, even the CPU is unsure.


tattack

Preliminary, maybe protection.


tcl

Skeleton, decryption incomplete.


tecmosys

Protection gives out code.


tetriunk

PC hardware, preliminary.


thayers

Laserdisc game.


thepit

zaryavos -


tmaster

tm -

tm3k -

tm4k -


tmnt

sunsetbl -


toaplan2

fixeight - Protection MCU supplies background data.


topshoot

Protection MCU handles inputs (and winning odds?).


toratora

Very strange, may be missing a rom, schematics available.


trvmadns

ttchamp

Skeleton-ish.


tumbleb

wondl96 - Undumped protection MCU.


turbosub

Cannot progress without a dump of the 7 video processor instruction PROMs (AM29116DC).


tx1

tx1, tx1a - Work in progress - almost complete (tx1 has corrupt sprites due to undumped ROMs).

buggyboy - ROM dump is incomplete.


vegas

roadburn -

sf2049 -

sf2049se -

sf2049te -

warfa -

nbashowt -

nbanfl -

cartfury -


viper

Work in progress by Ville, PPC+voodoo.


vsnes

smgolfb -

vsbbaljb -


wheelfir

wheelfir - Complex video blitter + raster effects for road.


williams

defndjeu, tornado2 - Bad dumps.


wldarrow

mdrawpkr -


wrally

Encrypted video RAM (like Splash / Thunder Hoop) not figured out. Also has Dallas MCU / Coprocessor for protection.


wwfsstar

wwfsstaj - Bad dump.


yumefuda

zn

glpracr2 -

glprac2j -

glprac2l -

1on1gov -

beastrzb -

primrag2 -

nbajamex -

jdredd -

jdreddb -

sfchamp -

sfchampj -

mgcldate -

ftimpact -

ftimpcta -


zr107

jetwave -