|
Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
#378004 - 08/05/18 01:17 PM
|
|
|
By hooking up a bunch of hardware to the STV cartridge and hacking away at the program a bit Peter Wilhelmsen, Morten Shearman Kirkegaard and myself managed to get a bunch of decrypted data out of Decathlete. Morten managed to figure out the encryption / compression based on that, Samuel Neves then helped work out a few details to simplify things etc. and I got their code running in MAME.
Not marked it as working yet because performance is awful (STV driver issue) but the game is playable, protection / encryption figured out. I'll do a full write up later.
The same type of protection is used by the following games, provided by the listed protection chips
315-5838 - Decathlete (ST-V) 317-0229 - Dead or Alive (Model 2A) & Name Club / Name Club Ver 2 (ST-V) (NOT NAME CLUB 3) 317-0230 - Winnie The Pooh Vol 2 / Winnie The Pooh Vol 3 (ST-V) 317-0231 - Print Club Love Love / Print Club Love Love Ver 2 (ST-V)
Name Club / Name Club 2 have a large amount of compressed data, so it *might* be possible to figure those out without access to the actual chip (and as the chip label is the same as DOA, that should be the same encryption) They encrypt the data used for the printer, so it isn't obvious onscreen that they're protected while Dead or Alive encrypts a single short string in the dumbest possible use of the chip ever from a protection point of view.
317-0230 (Winnie The Pooh) and 317-0231 (Print Club Love Love) only seem to provide us with a small amount of data, a block of SH2 code used on startup, so it's likely we'll need access to the chips to get the proper algorithm.
AFAIK these are all DU dumps, so it shouldn't be an issue to get the carts in question to Peter. Since I'm not allowed to email Smit, I'm therefore using this place to put in the request, or at least a request to have them on standby.
|
|
|
|
Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
[Re: Haze]
#378009 - 08/05/18 02:47 PM
|
|
|
very good work ! Thanks to everyone involved
|
|
|
Foxhack |
Furry guy
|
|
|
Reged: 01/30/04
|
Posts: 2409
|
Loc: Spicy Canada
|
|
Send PM
|
|
|
Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
[Re: Haze]
#378020 - 08/05/18 10:40 PM
|
|
|
> By hooking up a bunch of hardware to the STV cartridge and hacking away at the > program a bit Peter Wilhelmsen, Morten Shearman Kirkegaard and myself managed to get > a bunch of decrypted data out of Decathlete. Morten managed to figure out the > encryption / compression based on that, Samuel Neves then helped work out a few > details to simplify things etc. and I got their code running in MAME. > > Not marked it as working yet because performance is awful (STV driver issue) but the > game is playable, protection / encryption figured out. I'll do a full write up later. > > > The same type of protection is used by the following games, provided by the listed > protection chips > > 315-5838 - Decathlete (ST-V) > 317-0229 - Dead or Alive (Model 2A) & Name Club / Name Club Ver 2 (ST-V) (NOT NAME > CLUB 3) > 317-0230 - Winnie The Pooh Vol 2 / Winnie The Pooh Vol 3 (ST-V) > 317-0231 - Print Club Love Love / Print Club Love Love Ver 2 (ST-V) > > Name Club / Name Club 2 have a large amount of compressed data, so it *might* be > possible to figure those out without access to the actual chip (and as the chip label > is the same as DOA, that should be the same encryption) They encrypt the data used > for the printer, so it isn't obvious onscreen that they're protected while Dead or > Alive encrypts a single short string in the dumbest possible use of the chip ever > from a protection point of view. > > 317-0230 (Winnie The Pooh) and 317-0231 (Print Club Love Love) only seem to provide > us with a small amount of data, a block of SH2 code used on startup, so it's likely > we'll need access to the chips to get the proper algorithm. > > AFAIK these are all DU dumps, so it shouldn't be an issue to get the carts in > question to Peter. Since I'm not allowed to email Smit, I'm therefore using this > place to put in the request, or at least a request to have them on standby.
I'm guessing that overlay on the photos, which looks like a skyline with clouds, is due to transparency and layer priority issues?
That said, the progress here is amazing. Hope the rest of the algorithm (and possibly direct data dumps) can be figured out in the future.
|
|
|
|
Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
[Re: Haze]
#378030 - 08/06/18 01:31 PM
|
|
|
Team Europe got in touch about Name Club 1 & 2 Print Club Love Love 1 & 2
so it's just either
Winnie the Pooh 2 or 3 that are likely going to be needed now.
> By hooking up a bunch of hardware to the STV cartridge and hacking away at the > program a bit Peter Wilhelmsen, Morten Shearman Kirkegaard and myself managed to get > a bunch of decrypted data out of Decathlete. Morten managed to figure out the > encryption / compression based on that, Samuel Neves then helped work out a few > details to simplify things etc. and I got their code running in MAME. > > Not marked it as working yet because performance is awful (STV driver issue) but the > game is playable, protection / encryption figured out. I'll do a full write up later. > > > The same type of protection is used by the following games, provided by the listed > protection chips > > 315-5838 - Decathlete (ST-V) > 317-0229 - Dead or Alive (Model 2A) & Name Club / Name Club Ver 2 (ST-V) (NOT NAME > CLUB 3) > 317-0230 - Winnie The Pooh Vol 2 / Winnie The Pooh Vol 3 (ST-V) > 317-0231 - Print Club Love Love / Print Club Love Love Ver 2 (ST-V) > > Name Club / Name Club 2 have a large amount of compressed data, so it *might* be > possible to figure those out without access to the actual chip (and as the chip label > is the same as DOA, that should be the same encryption) They encrypt the data used > for the printer, so it isn't obvious onscreen that they're protected while Dead or > Alive encrypts a single short string in the dumbest possible use of the chip ever > from a protection point of view. > > 317-0230 (Winnie The Pooh) and 317-0231 (Print Club Love Love) only seem to provide > us with a small amount of data, a block of SH2 code used on startup, so it's likely > we'll need access to the chips to get the proper algorithm. > > AFAIK these are all DU dumps, so it shouldn't be an issue to get the carts in > question to Peter. Since I'm not allowed to email Smit, I'm therefore using this > place to put in the request, or at least a request to have them on standby.
|
|
|
|
Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
[Re: Haze]
#378034 - 08/06/18 07:35 PM
|
|
|
> Team Europe got in touch about > Name Club 1 & 2 > Print Club Love Love 1 & 2 >
Tracked down who was in possession of the Winnie the Pooh cartridges too, so should have access to all known chips if needed (which IMHO they will be)
|
|
|
B2K24 |
MAME @ 15 kHz Sony Trinitron CRT user
|
|
|
Reged: 10/25/10
|
Posts: 2663
|
|
|
Send PM
|
|
|
Re: Decathlete progress + Peter / Morten might need some of the carts the DU dumped for the protection chips
[Re: Haze]
#378035 - 08/06/18 09:03 PM
|
|
|
|