You can poke an operand but never poke an opcode. For example : In case of "jr z,$1234" on $1200 on Z80, you can change the jump address oneself but never directly change "jr z" to "jr", "jp" or "ret" etc. In 0.101u1 or earlier, enable full hacking though you need to note the different ROM region between opcode and operand. Several "Non-Encrypted" sets exists and enables full hacking in the latest MAME though.
A game based on encrypted Z80 CPU
Code: Select all
4dwarrio [system1.c]
astrofl [segasyse.c]
block, blockj, blockjoy, blockbl [mitchell.c]
blockgal [system1.c]
buckrog, zoom909 [turbo.c]
bullfgt, thetogyu [system1.c]
calorie, calorieb [calorie.c]
cclimber, ccimbrj, ccboot, ccboot2 [cclimber.c]
commando, commandu, commandj, sinvasn, sinvasnb [commando.c]
crush, maketrax, maketrxb, korosuke [pacman.c]
darkmist [darkmist.c]
dorodon, dorodon2 [ladybug.c]
flicky, flickyo [system1.c]
futspy [zaxxon.c]
gardia, gardiab [system1.c]
gigasb, oigas, gigasm2b [freekick.c]
hvymetal [system1.c]
imsorry, imsorryj [system1.c]
ixion [zaxxon.c]
kchampvs, karatevs [kchamp.c]
mrviking, mrvikngj [system1.c]
monster2 [segar.c]
mouser, mouserc [mouser.c]
pbactio3 [pbaction.c]
pengo, pengo2, pengo4, pengob, penta [pacman.c]
pitfall2 [system1.c]
raflesia [system1.c]
razmataz [zaxxon.c]
regulus, reguluso [system1.c]
robowres, robowrb [appoooh.c]
seganinj, ninja, nprinces, nprinco, nprincsb [system1.c]
sindbadm [segar.c]
spatter, ssanchan [system1.c]
spcpostn [angelkds.c]
sscandal, myherok [system1.c]
starfore [senjyo.c]
stinger, stinger2 [wiz.c]
suprloco [suprloco.c]
swat [system1.c]
szaxxon [zaxxon.c]
teddybb, teddybbo [system1.c]
toprollr [yamato.c] *Encrypted ROM is banked so that you can hack fully if a code on $c000-$ffff (See invincibility code)
treahunt [jack.c]
ufosensi [system1.c]
upndown [system1.c]
wmatch [system1.c]
wbml, wbmljo [system1.c]
wboy, wboyo, wboy2, wboy3, wboysys2 [system1.c]
yamato, yamato2 [yamato.c]
zaxxonb [zaxxon.c]
...Maybe encrypted CPU but non-working
dakkochn [system1.c]
fantzn2 [segasyse.c]
opaopa [segasyse.c]
Code: Select all
circusc, circusc2, circusc3, circuscc, circusce [circusc.c]
finalizr, finalizb [finalizr.c]
gyruss, gyrussce, venus [gyruss.c] *CPU2
hyperspt, hpolym84 [hyperspt.c]
jailbrek, manhatan [jailbrek.c]
junofrst, junofstg [junofrst.c]
megazone, megazona, megazonb, megazonc, megaznik [megazone.c]
roadf, roadf2 [hyperspt.c]
rocnrope, rocnropk [rocnrope.c]
sbasketb, sbasketo [sbasketb.c]
trackfld, trackflc, hyprolym, hyprolyb, atlantol [trackfld.c]
Code: Select all
btime, btime2, btimem, cookrace [btime.c]
lnc [btime.c]
brubber, bnj, caractn [btime.c]
disco, discof [btime.c]
shootout, shootouj, shootoub [shootout.c]
All deco cassette system games [decocass.c] *Enabled to hack ROM by poking a code loaded on RAM region.