Sprinter/mame
2
0
Fork 0
mirror of https://github.com/holub/mame synced 2025-05-29 09:03:08 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

- Replaced the excessively large Quizard patch scheme with a much smaller 4-byte patch plus basic protection obfuscation simulation. [Harmony]

Browse Source 
- Found the appropriate patch values for Quizard 2.2 and promoted it to working. [Harmony]

New games added or promoted from NOT_WORKING status
---------------------------------------------------
Quizard 2.2 [Harmony]
This commit is contained in:
Ryan Holtz 2010-10-13 09:02:23 +00:00
parent eb90f8e5d4
commit 47448a6080
4 changed files with 172 additions and 82 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

65
src/mame/drivers/cdi.c
View File

@ -122,16 +122,8 @@ static INPUT_CHANGED( mcu_input )
if(send)
{
scc68070_uart_rx(field->port->machine, scc68070, 0x5a);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, 0x21);
scc68070_uart_rx(field->port->machine, scc68070, (UINT8)((FPTR)param & 0x000000ff));
UINT8 data = (UINT8)((UINT32)param & 0x000000ff);
scc68070_quizard_rx(field->port->machine, scc68070, data);
}
}
@ -199,13 +191,6 @@ static MACHINE_START( cdi )
scc68070_register_globals(machine, &state->scc68070_regs);
}
static DRIVER_INIT( quizrr41 )
{
scc68070_set_hack_base(0x267EA8);
scc68070_set_hack_value(0x004d);
scc68070_set_hack_ack(0x57);
}
static DRIVER_INIT( quizrd12 )
{
scc68070_set_hack_base(0x26F39C);
@ -215,17 +200,43 @@ static DRIVER_INIT( quizrd12 )
static DRIVER_INIT( quizrd17 )
{
scc68070_set_hack_base(0x264C42);
scc68070_set_hack_base(0x264B4A);
scc68070_set_hack_value(0x021f);
scc68070_set_hack_ack(0x5a);
}
static DRIVER_INIT( quizrd22 )
{
scc68070_set_hack_base(0x26D9C2);
// 0x2b1: Italian
// 0x001: French
// 0x188: German
scc68070_set_hack_value(0x188);
scc68070_set_hack_ack(0x59);
}
static DRIVER_INIT( quizrd32 )
{
scc68070_set_hack_base(0x266E28);
scc68070_set_hack_base(0x266D30);
scc68070_set_hack_value(0x00ae);
scc68070_set_hack_ack(0x58);
scc68070_set_secondary_hack(0xc000-0x7b76);
}
static DRIVER_INIT( quizrr41 )
{
scc68070_set_hack_base(0x267DB0);
scc68070_set_hack_value(0x011f);
scc68070_set_hack_ack(0x57);
}
static DRIVER_INIT( quizrr42 )
{
scc68070_set_hack_base(0x267DB0);
scc68070_set_hack_value(0x011f);
scc68070_set_hack_ack(0x57);
}
static MACHINE_RESET( cdi )
@ -402,14 +413,12 @@ ROM_END
// BIOS
GAME( 1991, cdi, 0, cdi, cdi, 0, ROT0, "Philips", "CD-i (Mono-I) BIOS", GAME_IS_BIOS_ROOT )
// Non-working
GAME( 1995, quizrd22, cdi, cdi, cdi, 0, ROT0, "TAB Austria", "Quizard 2.2", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1998, quizrr42, cdi, cdi, cdi, 0, ROT0, "TAB Austria", "Quizard Rainbow 4.2", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1998, quizrr41, cdi, cdi, cdi, quizrr41, ROT0, "TAB Austria", "Quizard Rainbow 4.1", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
// Partially working
GAME( 1996, quizard, cdi, cdi, cdi, quizrd32, ROT0, "TAB Austria", "Quizard 3.2", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1996, quizard, cdi, cdi, cdi, quizrd32, ROT0, "TAB Austria", "Quizard 3.2", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1998, quizrr41, cdi, cdi, cdi, quizrr41, ROT0, "TAB Austria", "Quizard Rainbow 4.1", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1998, quizrr42, cdi, cdi, cdi, quizrr42, ROT0, "TAB Austria", "Quizard Rainbow 4.2", GAME_NOT_WORKING | GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
// Working
GAME( 1995, quizrd12, cdi, cdi, cdi, quizrd12, ROT0, "TAB Austria", "Quizard 1.2", GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1995, quizrd17, cdi, cdi, cdi, quizrd17, ROT0, "TAB Austria", "Quizard 1.7", GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1995, quizrd12, cdi, cdi, cdi, quizrd12, ROT0, "TAB Austria", "Quizard 1.2", GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1995, quizrd17, cdi, cdi, cdi, quizrd17, ROT0, "TAB Austria", "Quizard 1.7", GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )
GAME( 1995, quizrd22, cdi, cdi, cdi, quizrd22, ROT0, "TAB Austria", "Quizard 2.2", GAME_IMPERFECT_SOUND | GAME_UNEMULATED_PROTECTION )

180
src/mame/machine/cdi070.c
View File

@ -63,12 +63,6 @@ static bool hack_active = false;
static UINT16 hack_value = 0;
static UINT32 hack_base = 0;
static UINT8 hack_ack = 0;
static UINT32 hack2_addr = 0;
void scc68070_set_secondary_hack(UINT32 address)
{
hack2_addr = address;
}
void scc68070_set_hack_ack(UINT8 ack)
{
@ -91,51 +85,17 @@ static void quizard_patch(running_machine *machine)
if(hack_active)
{
// Patch out:
// 00264C42: C0EE 86BE mulu.w (-$7942,A6), D0
// 00264C46: 2200 move.l D0, D1
// 00264C48: 41EE 86C0 lea (-$7940,A6), A0
// 00264C4C: 2008 move.l A0, D0
// 00264C4E: 6100 FE6A bsr $264aba
// 00264C52: 3400 move.w D0, D2
// 00264C54: 3017 move.w (A7), D0
// 00264C56: C0EE 86BE mulu.w (-$7942,A6), D0
// 00264C5A: 2200 move.l D0, D1
// 00264C5C: 41EE 86C0 lea (-$7940,A6), A0
// 00264C60: 2008 move.l A0, D0
// 00264C62: 6100 FE56 bsr $264aba
// 00264C66: B142 eor.w D0, D2
// 00264C68: 7000 moveq #$0, D0
// 00264C6A: 3002 move.w D2, D0
space->write_word(hack_base + 0x00, 0);
space->write_word(hack_base + 0x02, 0);
space->write_word(hack_base + 0x04, 0);
space->write_word(hack_base + 0x06, 0);
space->write_word(hack_base + 0x08, 0);
space->write_word(hack_base + 0x0a, 0);
space->write_word(hack_base + 0x0c, 0);
space->write_word(hack_base + 0x0e, 0);
space->write_word(hack_base + 0x10, 0);
space->write_word(hack_base + 0x12, 0);
space->write_word(hack_base + 0x14, 0);
space->write_word(hack_base + 0x16, 0);
space->write_word(hack_base + 0x18, 0);
space->write_word(hack_base + 0x1a, 0);
space->write_word(hack_base + 0x1c, 0);
space->write_word(hack_base + 0x1e, 0);
space->write_word(hack_base + 0x20, 0);
space->write_word(hack_base + 0x22, 0);
space->write_word(hack_base + 0x24, 0x203C);
space->write_word(hack_base + 0x26, 0x0000);
space->write_word(hack_base + 0x28, hack_value);
if(hack2_addr)
{
//space->write_byte(hack2_addr, 1);
}
space->write_word(hack_base ,0x7001);
space->write_word(hack_base + 2,0x7001);
}
}
void scc68070_set_hack_active(running_machine *machine, bool active)
{
hack_active = active;
quizard_patch(machine);
}
TIMER_CALLBACK( scc68070_timer0_callback )
{
cdi_state *state = machine->driver_data<cdi_state>();
@ -273,6 +233,120 @@ static void scc68070_tx_empty(running_machine *machine, scc68070_regs_t *scc6807
}
}
static UINT16 seeds[10] = { 0 };
static UINT8 g_state[8] = { 0 };
void scc68070_quizard_rx(running_machine *machine, scc68070_regs_t *scc68070, UINT8 data)
{
scc68070_uart_rx(machine, scc68070, 0x5a);
for(int index = 0; index < 8; index++)
{
scc68070_uart_rx(machine, scc68070, 0);
}
scc68070_uart_rx(machine, scc68070, data);
}
static void quizard_set_seeds(UINT8 *rx)
{
seeds[0] = (rx[1] << 8) | rx[0];
seeds[1] = (rx[3] << 8) | rx[2];
seeds[2] = (rx[5] << 8) | rx[4];
seeds[3] = (rx[7] << 8) | rx[6];
seeds[4] = (rx[9] << 8) | rx[8];
seeds[5] = (rx[11] << 8) | rx[10];
seeds[6] = (rx[13] << 8) | rx[12];
seeds[7] = (rx[15] << 8) | rx[14];
seeds[8] = (rx[17] << 8) | rx[16];
seeds[9] = (rx[19] << 8) | rx[18];
}
static void quizard_calculate_state(running_machine *machine, scc68070_regs_t *scc68070)
{
const UINT16 desired_bitfield = hack_value;
const UINT16 field0 = 0x00ff;
const UINT16 field1 = desired_bitfield ^ field0;
UINT16 total0 = 0;
UINT16 total1 = 0;
for(int index = 0; index < 10; index++)
{
if(field0 & (1 << index))
{
total0 += seeds[index];
}
if(field1 & (1 << index))
{
total1 += seeds[index];
}
}
UINT16 hi0 = (total0 >> 8) + 0x40;
g_state[2] = hi0 / 2;
g_state[3] = hi0 - g_state[2];
UINT16 lo0 = (total0 & 0x00ff) + 0x40;
g_state[0] = lo0 / 2;
g_state[1] = lo0 - g_state[0];
UINT16 hi1 = (total1 >> 8) + 0x40;
g_state[6] = hi1 / 2;
g_state[7] = hi1 - g_state[6];
UINT16 lo1 = (total1 & 0x00ff) + 0x40;
g_state[4] = lo1 / 2;
g_state[5] = lo1 - g_state[4];
}
static void quizard_handle_byte_tx(running_machine *machine, scc68070_regs_t *scc68070)
{
static UINT8 rx[0x100];
static UINT8 rx_ptr = 0xff;
static UINT8 state = 0;
static UINT8 ack_count = 0;
UINT8 tx = scc68070->uart.transmit_holding_register;
switch(state)
{
case 0:
if(tx == 0x56)
{
state++;
}
break;
case 1:
if(tx == hack_ack)
{
ack_count++;
if(ack_count == 1)
{
state++;
quizard_set_seeds(rx);
quizard_calculate_state(machine, scc68070);
scc68070_uart_rx(machine, scc68070, 0x5a);
for(int index = 0; index < 8; index++)
{
scc68070_uart_rx(machine, scc68070, g_state[index]);
}
}
}
else
{
rx_ptr++;
rx[rx_ptr] = tx;
}
break;
case 2:
if(tx == hack_ack)
{
state = 0;
}
break;
}
}
TIMER_CALLBACK( scc68070_tx_callback )
{
cdi_state *state = machine->driver_data<cdi_state>();
@ -283,6 +357,8 @@ TIMER_CALLBACK( scc68070_tx_callback )
if(scc68070->uart.transmit_pointer > -1)
{
scc68070->uart.transmit_holding_register = scc68070->uart.transmit_buffer[0];
quizard_handle_byte_tx(machine, scc68070);
verboselog(machine, 2, "scc68070_tx_callback: Transmitting %02x\n", scc68070->uart.transmit_holding_register);
scc68070->uart.transmit_pointer--;
for(int index = 0; index < scc68070->uart.transmit_pointer; index++)
@ -686,8 +762,6 @@ WRITE16_HANDLER( scc68070_periphs_w )
scc68070_uart_tx(space->machine, scc68070, data & 0x00ff);
scc68070->uart.transmit_holding_register = data & 0x00ff;
printf("%02x ", scc68070->uart.transmit_holding_register);
if((data & 0x00ff) == hack_ack)
{
count++;
@ -697,7 +771,7 @@ WRITE16_HANDLER( scc68070_periphs_w )
for(int index = 0; index < 9; index++)
{
scc68070_uart_rx(space->machine, scc68070, check_array[index]);
//scc68070_uart_rx(space->machine, scc68070, check_array[index]);
if(index > 0)
{
check_array[index]++;
@ -705,8 +779,8 @@ WRITE16_HANDLER( scc68070_periphs_w )
}
count = 0;
hack_active = true;
quizard_patch(space->machine);
//hack_active = true;
//quizard_patch(space->machine);
}
}
else

3
src/mame/machine/cdi070.h
View File

@ -247,6 +247,7 @@ extern void scc68070_register_globals(running_machine *machine, scc68070_regs_t
extern void scc68070_set_hack_value(UINT16 value);
extern void scc68070_set_hack_base(UINT32 base);
extern void scc68070_set_hack_ack(UINT8 ack);
extern void scc68070_set_secondary_hack(UINT32 address);
extern void scc68070_set_hack_active(running_machine *machine, bool active);
extern void scc68070_quizard_rx(running_machine *machine, scc68070_regs_t *scc68070, UINT8 data);
#endif // _MACHINE_CDI070_H_

6
src/mame/machine/cdislave.c
View File

@ -22,6 +22,7 @@ TODO:
#include "emu.h"
#include "cpu/m68000/m68000.h"
#include "machine/cdislave.h"
#include "machine/cdi070.h"
#include "includes/cdi.h"
#if ENABLE_VERBOSE_LOG
@ -351,6 +352,11 @@ void cdislave_device::register_write(const UINT32 offset, const UINT16 data, con
m_in_index = 0;
m_in_count = 0;
break;
case 0xc0: // SetAttn (used as hack for Quizard)
scc68070_set_hack_active(&m_machine, true);
m_in_index = 0;
m_in_count = 0;
break;
case 0xf0: // Set Front Panel LCD
verboselog(&m_machine, 0, "slave_w: Channel %d: Set Front Panel LCD (0xf0)\n", offset );
m_in_count = 17;