The list for Encrypted CPU prevened from hacking ROM
Posted: Fri Apr 21, 2006 5:29 pm
On 0.101u1, the memory system update limited ROM hacking via cheat engine in several games used encrypted CPU. This is the list for encrypted CPU influenced ROM code.
You can poke an operand but never poke an opcode. For example : In case of "jr z,$1234" on $1200 on Z80, you can change the jump address oneself but never directly change "jr z" to "jr", "jp" or "ret" etc. In 0.101u1 or earlier, enable full hacking though you need to note the different ROM region between opcode and operand. Several "Non-Encrypted" sets exists and enables full hacking in the latest MAME though.
A game based on encrypted Z80 CPU
A game based on encrypted M6809 CPU
A game based on encrypted M6502 CPU
The above list is incomplete.
You can poke an operand but never poke an opcode. For example : In case of "jr z,$1234" on $1200 on Z80, you can change the jump address oneself but never directly change "jr z" to "jr", "jp" or "ret" etc. In 0.101u1 or earlier, enable full hacking though you need to note the different ROM region between opcode and operand. Several "Non-Encrypted" sets exists and enables full hacking in the latest MAME though.
A game based on encrypted Z80 CPU
Code: Select all
4dwarrio [system1.c]
astrofl [segasyse.c]
block, blockj, blockjoy, blockbl [mitchell.c]
blockgal [system1.c]
buckrog, zoom909 [turbo.c]
bullfgt, thetogyu [system1.c]
calorie, calorieb [calorie.c]
cclimber, ccimbrj, ccboot, ccboot2 [cclimber.c]
commando, commandu, commandj, sinvasn, sinvasnb [commando.c]
crush, maketrax, maketrxb, korosuke [pacman.c]
darkmist [darkmist.c]
dorodon, dorodon2 [ladybug.c]
flicky, flickyo [system1.c]
futspy [zaxxon.c]
gardia, gardiab [system1.c]
gigasb, oigas, gigasm2b [freekick.c]
hvymetal [system1.c]
imsorry, imsorryj [system1.c]
ixion [zaxxon.c]
kchampvs, karatevs [kchamp.c]
mrviking, mrvikngj [system1.c]
monster2 [segar.c]
mouser, mouserc [mouser.c]
pbactio3 [pbaction.c]
pengo, pengo2, pengo4, pengob, penta [pacman.c]
pitfall2 [system1.c]
raflesia [system1.c]
razmataz [zaxxon.c]
regulus, reguluso [system1.c]
robowres, robowrb [appoooh.c]
seganinj, ninja, nprinces, nprinco, nprincsb [system1.c]
sindbadm [segar.c]
spatter, ssanchan [system1.c]
spcpostn [angelkds.c]
sscandal, myherok [system1.c]
starfore [senjyo.c]
stinger, stinger2 [wiz.c]
suprloco [suprloco.c]
swat [system1.c]
szaxxon [zaxxon.c]
teddybb, teddybbo [system1.c]
toprollr [yamato.c] *Encrypted ROM is banked so that you can hack fully if a code on $c000-$ffff (See invincibility code)
treahunt [jack.c]
ufosensi [system1.c]
upndown [system1.c]
wmatch [system1.c]
wbml, wbmljo [system1.c]
wboy, wboyo, wboy2, wboy3, wboysys2 [system1.c]
yamato, yamato2 [yamato.c]
zaxxonb [zaxxon.c]
...Maybe encrypted CPU but non-working
dakkochn [system1.c]
fantzn2 [segasyse.c]
opaopa [segasyse.c]
Code: Select all
circusc, circusc2, circusc3, circuscc, circusce [circusc.c]
finalizr, finalizb [finalizr.c]
gyruss, gyrussce, venus [gyruss.c] *CPU2
hyperspt, hpolym84 [hyperspt.c]
jailbrek, manhatan [jailbrek.c]
junofrst, junofstg [junofrst.c]
megazone, megazona, megazonb, megazonc, megaznik [megazone.c]
roadf, roadf2 [hyperspt.c]
rocnrope, rocnropk [rocnrope.c]
sbasketb, sbasketo [sbasketb.c]
trackfld, trackflc, hyprolym, hyprolyb, atlantol [trackfld.c]
Code: Select all
btime, btime2, btimem, cookrace [btime.c]
lnc [btime.c]
brubber, bnj, caractn [btime.c]
disco, discof [btime.c]
shootout, shootouj, shootoub [shootout.c]
All deco cassette system games [decocass.c] *Enabled to hack ROM by poking a code loaded on RAM region.