MAMEWorld >> News
Previous thread Previous  View all threads Index   Next thread Next   Threaded Mode Threaded  

Pages: 1

Haze
Reged: 09/23/03
Posts: 5245
Send PM


Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
#378004 - 08/05/18 01:17 PM


By hooking up a bunch of hardware to the STV cartridge and hacking away at the program a bit Peter Wilhelmsen, Morten Shearman Kirkegaard and myself managed to get a bunch of decrypted data out of Decathlete. Morten managed to figure out the encryption / compression based on that, Samuel Neves then helped work out a few details to simplify things etc. and I got their code running in MAME.

Not marked it as working yet because performance is awful (STV driver issue) but the game is playable, protection / encryption figured out. I'll do a full write up later.













The same type of protection is used by the following games, provided by the listed protection chips

315-5838 - Decathlete (ST-V)
317-0229 - Dead or Alive (Model 2A) & Name Club / Name Club Ver 2 (ST-V) (NOT NAME CLUB 3)
317-0230 - Winnie The Pooh Vol 2 / Winnie The Pooh Vol 3 (ST-V)
317-0231 - Print Club Love Love / Print Club Love Love Ver 2 (ST-V)

Name Club / Name Club 2 have a large amount of compressed data, so it *might* be possible to figure those out without access to the actual chip (and as the chip label is the same as DOA, that should be the same encryption) They encrypt the data used for the printer, so it isn't obvious onscreen that they're protected while Dead or Alive encrypts a single short string in the dumbest possible use of the chip ever from a protection point of view.

317-0230 (Winnie The Pooh) and 317-0231 (Print Club Love Love) only seem to provide us with a small amount of data, a block of SH2 code used on startup, so it's likely we'll need access to the chips to get the proper algorithm.

AFAIK these are all DU dumps, so it shouldn't be an issue to get the carts in question to Peter. Since I'm not allowed to email Smit, I'm therefore using this place to put in the request, or at least a request to have them on standby.



agard
MAME Fan
Reged: 08/04/13
Posts: 332
Send PM


Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips new [Re: Haze]
#378009 - 08/05/18 02:47 PM


very good work ! Thanks to everyone involved



Foxhack
Furry guy
Reged: 01/30/04
Posts: 2409
Loc: Spicy Canada
Send PM


Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips new [Re: Haze]
#378020 - 08/05/18 10:40 PM


> By hooking up a bunch of hardware to the STV cartridge and hacking away at the
> program a bit Peter Wilhelmsen, Morten Shearman Kirkegaard and myself managed to get
> a bunch of decrypted data out of Decathlete. Morten managed to figure out the
> encryption / compression based on that, Samuel Neves then helped work out a few
> details to simplify things etc. and I got their code running in MAME.
>
> Not marked it as working yet because performance is awful (STV driver issue) but the
> game is playable, protection / encryption figured out. I'll do a full write up later.
>
>
> The same type of protection is used by the following games, provided by the listed
> protection chips
>
> 315-5838 - Decathlete (ST-V)
> 317-0229 - Dead or Alive (Model 2A) & Name Club / Name Club Ver 2 (ST-V) (NOT NAME
> CLUB 3)
> 317-0230 - Winnie The Pooh Vol 2 / Winnie The Pooh Vol 3 (ST-V)
> 317-0231 - Print Club Love Love / Print Club Love Love Ver 2 (ST-V)
>
> Name Club / Name Club 2 have a large amount of compressed data, so it *might* be
> possible to figure those out without access to the actual chip (and as the chip label
> is the same as DOA, that should be the same encryption) They encrypt the data used
> for the printer, so it isn't obvious onscreen that they're protected while Dead or
> Alive encrypts a single short string in the dumbest possible use of the chip ever
> from a protection point of view.
>
> 317-0230 (Winnie The Pooh) and 317-0231 (Print Club Love Love) only seem to provide
> us with a small amount of data, a block of SH2 code used on startup, so it's likely
> we'll need access to the chips to get the proper algorithm.
>
> AFAIK these are all DU dumps, so it shouldn't be an issue to get the carts in
> question to Peter. Since I'm not allowed to email Smit, I'm therefore using this
> place to put in the request, or at least a request to have them on standby.

I'm guessing that overlay on the photos, which looks like a skyline with clouds, is due to transparency and layer priority issues?

That said, the progress here is amazing. Hope the rest of the algorithm (and possibly direct data dumps) can be figured out in the future.



Haze
Reged: 09/23/03
Posts: 5245
Send PM


Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips new [Re: Haze]
#378030 - 08/06/18 01:31 PM


Team Europe got in touch about
Name Club 1 & 2
Print Club Love Love 1 & 2

so it's just either

Winnie the Pooh 2 or 3 that are likely going to be needed now.

> By hooking up a bunch of hardware to the STV cartridge and hacking away at the
> program a bit Peter Wilhelmsen, Morten Shearman Kirkegaard and myself managed to get
> a bunch of decrypted data out of Decathlete. Morten managed to figure out the
> encryption / compression based on that, Samuel Neves then helped work out a few
> details to simplify things etc. and I got their code running in MAME.
>
> Not marked it as working yet because performance is awful (STV driver issue) but the
> game is playable, protection / encryption figured out. I'll do a full write up later.
>
>
> The same type of protection is used by the following games, provided by the listed
> protection chips
>
> 315-5838 - Decathlete (ST-V)
> 317-0229 - Dead or Alive (Model 2A) & Name Club / Name Club Ver 2 (ST-V) (NOT NAME
> CLUB 3)
> 317-0230 - Winnie The Pooh Vol 2 / Winnie The Pooh Vol 3 (ST-V)
> 317-0231 - Print Club Love Love / Print Club Love Love Ver 2 (ST-V)
>
> Name Club / Name Club 2 have a large amount of compressed data, so it *might* be
> possible to figure those out without access to the actual chip (and as the chip label
> is the same as DOA, that should be the same encryption) They encrypt the data used
> for the printer, so it isn't obvious onscreen that they're protected while Dead or
> Alive encrypts a single short string in the dumbest possible use of the chip ever
> from a protection point of view.
>
> 317-0230 (Winnie The Pooh) and 317-0231 (Print Club Love Love) only seem to provide
> us with a small amount of data, a block of SH2 code used on startup, so it's likely
> we'll need access to the chips to get the proper algorithm.
>
> AFAIK these are all DU dumps, so it shouldn't be an issue to get the carts in
> question to Peter. Since I'm not allowed to email Smit, I'm therefore using this
> place to put in the request, or at least a request to have them on standby.



Haze
Reged: 09/23/03
Posts: 5245
Send PM


Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips new [Re: Haze]
#378034 - 08/06/18 07:35 PM


> Team Europe got in touch about
> Name Club 1 & 2
> Print Club Love Love 1 & 2
>

Tracked down who was in possession of the Winnie the Pooh cartridges too, so should have access to all known chips if needed (which IMHO they will be)



B2K24
MAME @ 15 kHz Sony Trinitron CRT user
Reged: 10/25/10
Posts: 2663
Send PM


Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips new [Re: Haze]
#378035 - 08/06/18 09:03 PM


Thanks for the write-up
https://mamedev.emulab.it/haze/2018/08/06/robin-banks-gets-you-nowhere/


Pages: 1

MAMEWorld >> News
Previous thread Previous  View all threads Index   Next thread Next   Threaded Mode Threaded  

Extra information Permissions
Moderator:  John IV, Robbbert, Tafoid 
2 registered and 294 anonymous users are browsing this forum.
You cannot start new topics
You cannot reply to topics
HTML is enabled
UBBCode is enabled
Thread views: 916