作者conpo (楽园にお连れ给う)
看板Emulator
标题[新闻] (WIP) Demon Front WIP
时间Thu Mar 22 12:42:21 2012
2012.03.22
魔域战线进入模拟阶段了,科科~
Haze got Demon Front working. Legendary!
http://smitdogg.mameworld.info/pics/d1.png
http://smitdogg.mameworld.info/pics/d2.png
http://smitdogg.mameworld.info/pics/d3.png
http://smitdogg.mameworld.info/pics/d4.png
http://smitdogg.mameworld.info/pics/d5.png
http://smitdogg.mameworld.info/pics/d6.png
http://smitdogg.mameworld.info/pics/d7.png
http://smitdogg.mameworld.info/pics/d8.png
http://smitdogg.mameworld.info/pics/d9.png
http://smitdogg.mameworld.info/pics/d10.png
http://smitdogg.mameworld.info/pics/d11.png
http://smitdogg.mameworld.info/pics/d12.png
http://smitdogg.mameworld.info/pics/d13.png
http://smitdogg.mameworld.info/pics/d14.png
http://smitdogg.mameworld.info/pics/d15.png
http://smitdogg.mameworld.info/pics/d16.png
http://smitdogg.mameworld.info/pics/d17.png
--
Give me all your demons / They don’t scare me now
The IGS027A chips are meant to be scary boxes of hell, and in most
cases they are.
** If used correctly **
I was looking at Demon Front and noticed something odd. Unlike ‘The
Gladiator’ and most of the other later type games the code in the
external ARM rom makes no reference to the internal ROM space. There
are no obvious jumps back to the internal code area anywhere.
So I did a quick mod, wrote some fake ARM code to set up the stack
pointer and then jump straight to the external area, and this happened.
https://www.youtube.com/watch?feature=player_embedded&v=pH_DD-CWERo
Now while I can’t guarantee this is perfectly emulated because it’s
possible the internal ARM code should be setting up some more things
before jumping to the external code it’s still a huge surprise, and
looks like a massive oversight when the game was developed. I guess
the biggest surprise is that it’s taken until now to notice, it’s
literally a 8-word patch.
My only theory is that maybe if this is the first game with an
‘Execute Only’ area IGS wanted to contain all the internal code in
that area to make it more secure, but it has the opposite effect. I
guess I should probe it a bit to see if there is anything interesting
there at all.
http://mamedev.emulab.it/haze/pics2012/dfront_1.png
http://mamedev.emulab.it/haze/pics2012/dfront_2.png
http://mamedev.emulab.it/haze/pics2012/dfront_3.png
http://mamedev.emulab.it/haze/pics2012/dfront_4.png
http://mamedev.emulab.it/haze/pics2012/dfront_5.png
http://mamedev.emulab.it/haze/pics2012/dfront_6.png
______________________________________________________________________________
来源:
http://0rz.tw/hbcOm
and
http://mamedev.emulab.it/haze/
--
ポーラステーション
http://perryt0517.wordpress.com/
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 59.115.182.193
※ 编辑: conpo 来自: 59.115.182.193 (03/22 12:48)
1F:推 jeff0811:鬼咧,连声音都有,MAME DEV真是怪物团队 03/22 14:09
2F:→ conpo:初步测试一下....几乎是完美运行了 03/24 15:21
3F:→ jeff0811:连蜂暴都弄出来了,保护问题解决了吗? 03/25 01:04
4F:→ jeff0811:两款都很OK,转眼间魔域也出了10年了 03/25 01:21
5F:→ conpo:有人说蜂爆後面会当,但我破过一次没什麽问题就是了 03/25 10:05