/*--- Pirates (c)1994 NIX (DEC 14 1994 17:32:29) displayed in cabinet test mode Genix Family (c)1994 NIX (MAY 10 1994 14:21:20) displayed in cabinet test mode driver by David Haywood and Nicola Salmoria TODO: - EEPROM doesn't work. I'm not sure what the program is trying to do. The EEPROM handling might actually be related to the protection which makes the game hang. See pirates_in1_r() for code which would work around the protection, but makes the game periodically hang for a couple of seconds; therefore, for now I'm just patching out the protection check. - Protection is the same in Genix Family ----- Here's some info about the dump: Name: Pirates Manufacturer: NIX Year: 1994 Date Dumped: 14-07-2002 (DD-MM-YYYY) CPU: 68000, possibly at 12mhz (prototype board does have a 16mhz one) SOUND: OKIM6295 GFX: Unknown CPU Roms at least are the same on the Prototype board (the rest of the roms probably are too) ----- Program Roms are Scrambled (Data + Address Lines) P Graphic Roms (Tilemap Tiles) are Scrambled (Data + Address Lines) S Graphic Roms (Sprite Tiles) are Scrambled (Data + Address Lines) OKI Samples Rom is Scrambled (Data + Address Lines) 68k interrupts (pirates) lev 1 : 0x64 : 0000 bf84 - vbl? lev 2 : 0x68 : 0000 4bc6 - lev 3 : 0x6c : 0000 3bda - lev 4 : 0x70 : 0000 3bf0 - lev 5 : 0x74 : 0000 3c06 - lev 6 : 0x78 : 0000 3c1c - lev 7 : 0x7c : 0000 3c32 - Inputs mapped by Stephh The game hanging is an interesting issue, the board owner has 2 copies of this game, one a prototype, on the final released version. The roms on both boards are the same, however the prototype locks up just as it does in Mame at the moment. The final board does not. It would appear the prototype board does not have the protection hardware correctly in place PCB Layout (Genix Family) (by Guru) ---------- |------------------------------------------------| | 0.31 6116 6116 3.72 | | M6295 6116 6116 4.71 | | 5.70 | | 6264 6116 6.69 | | 6264 6116 | | | | | | 93C46 Altera 24MHz Altera | | EPM7064 EPM7064 | | | | | | Altera Altera 7.34 9.35 | | EPM7064 EPM7064 8.48 10.49 | | | | PAL | | | | 68000 1.15 62256 6264 | | 32MHz 2.16 62256 6264 | | * | |------------------------------------------------| Notes: 68000 clock: 16.000MHz M6295 clock: 1.33333MHz, Sample Rate: /165 VSync: 60Hz HSync: 15.69kHz * : unknown IC (18 pin DIP, surface scratched off) ---*/ #include "driver.h" #include "machine/eeprom.h" #include "sound/okim6295.h" extern UINT16 *pirates_tx_tileram, *pirates_spriteram; extern UINT16 *pirates_fg_tileram, *pirates_bg_tileram; extern UINT16 *pirates_scroll; VIDEO_START(pirates); WRITE16_HANDLER( pirates_tx_tileram_w ); WRITE16_HANDLER( pirates_fg_tileram_w ); WRITE16_HANDLER( pirates_bg_tileram_w ); VIDEO_UPDATE(pirates); static const eeprom_interface eeprom_intf = { 6, /* address bits */ 16, /* data bits */ "*110", /* read command */ "*101", /* write command */ 0, /* erase command */ "*10000xxxx", /* lock command */ "*10011xxxx" /* unlock command */ }; static NVRAM_HANDLER( pirates ) { if (read_or_write) eeprom_save(file); else { eeprom_init(&eeprom_intf); if (file) eeprom_load(file); } } static WRITE16_HANDLER( pirates_out_w ) { if (ACCESSING_BITS_0_7) { /* bits 0-2 control EEPROM */ eeprom_write_bit(data & 0x04); eeprom_set_cs_line((data & 0x01) ? CLEAR_LINE : ASSERT_LINE); eeprom_set_clock_line((data & 0x02) ? ASSERT_LINE : CLEAR_LINE); /* bit 6 selects oki bank */ okim6295_set_bank_base(0, (data & 0x40) ? 0x40000 : 0x00000); /* bit 7 used (function unknown) */ } // logerror("%06x: out_w %04x\n",activecpu_get_pc(),data); } static CUSTOM_INPUT( prot_r ) { // static int prot = 0xa3; int bit; // logerror("%06x: IN1_r\n",activecpu_get_pc()); #if 0 /* Pirates protection workaround. It more complicated than this... see code at 602e and 62a6 */ /* For Genix, see 6576 for setting values and 67c2,d3b4 and dbc2 for tests. */ if (activecpu_get_pc() == 0x6134) { bit = prot & 1; prot = (prot >> 1) | (bit << 7); } else if (activecpu_get_pc() == 0x6020) bit = 0; else if (activecpu_get_pc() == 0x6168) bit = 0; else if (activecpu_get_pc() == 0x61cc) bit = 1; else #endif bit = 1; return bit; } /* Memory Maps */ static ADDRESS_MAP_START( pirates_readmem, ADDRESS_SPACE_PROGRAM, 16 ) AM_RANGE(0x000000, 0x0fffff) AM_READ(SMH_ROM) AM_RANGE(0x100000, 0x10ffff) AM_READ(SMH_RAM) AM_RANGE(0x300000, 0x300001) AM_READ_PORT("INPUTS") AM_RANGE(0x400000, 0x400001) AM_READ_PORT("SYSTEM") // AM_RANGE(0x500000, 0x5007ff) AM_READ(SMH_RAM) AM_RANGE(0x800000, 0x803fff) AM_READ(SMH_RAM) // AM_RANGE(0x900000, 0x903fff) AM_READ(SMH_RAM) AM_RANGE(0xa00000, 0xa00001) AM_READ(okim6295_status_0_lsb_r) ADDRESS_MAP_END static ADDRESS_MAP_START( pirates_writemem, ADDRESS_SPACE_PROGRAM, 16 ) AM_RANGE(0x000000, 0x0fffff) AM_WRITE(SMH_ROM) AM_RANGE(0x100000, 0x10ffff) AM_WRITE(SMH_RAM) // main ram AM_RANGE(0x500000, 0x5007ff) AM_WRITE(SMH_RAM) AM_BASE(&pirates_spriteram) // AM_RANGE(0x500800, 0x50080f) AM_WRITE(SMH_RAM) AM_RANGE(0x600000, 0x600001) AM_WRITE(pirates_out_w) AM_RANGE(0x700000, 0x700001) AM_WRITE(SMH_RAM) AM_BASE(&pirates_scroll) // scroll reg AM_RANGE(0x800000, 0x803fff) AM_WRITE(paletteram16_xRRRRRGGGGGBBBBB_word_w) AM_BASE(&paletteram16) AM_RANGE(0x900000, 0x90017f) AM_WRITE(SMH_RAM) // more of tilemaps ? AM_RANGE(0x900180, 0x90137f) AM_WRITE(pirates_tx_tileram_w) AM_BASE(&pirates_tx_tileram) AM_RANGE(0x901380, 0x902a7f) AM_WRITE(pirates_fg_tileram_w) AM_BASE(&pirates_fg_tileram) // AM_RANGE(0x902580, 0x902a7f) AM_WRITE(SMH_RAM) // more of tilemaps ? AM_RANGE(0x902a80, 0x904187) AM_WRITE(pirates_bg_tileram_w) AM_BASE(&pirates_bg_tileram) // AM_RANGE(0x903c80, 0x904187) AM_WRITE(SMH_RAM) // more of tilemaps ? AM_RANGE(0xa00000, 0xa00001) AM_WRITE(okim6295_data_0_lsb_w) ADDRESS_MAP_END /* Input Ports */ static INPUT_PORTS_START( pirates ) PORT_START("INPUTS") /* 0x300000.w */ PORT_BIT( 0x0001, IP_ACTIVE_LOW, IPT_JOYSTICK_UP ) PORT_PLAYER(1) PORT_BIT( 0x0002, IP_ACTIVE_LOW, IPT_JOYSTICK_DOWN ) PORT_PLAYER(1) PORT_BIT( 0x0004, IP_ACTIVE_LOW, IPT_JOYSTICK_LEFT ) PORT_PLAYER(1) PORT_BIT( 0x0008, IP_ACTIVE_LOW, IPT_JOYSTICK_RIGHT ) PORT_PLAYER(1) PORT_BIT( 0x0010, IP_ACTIVE_LOW, IPT_BUTTON1 ) PORT_PLAYER(1) PORT_BIT( 0x0020, IP_ACTIVE_LOW, IPT_BUTTON2 ) PORT_PLAYER(1) PORT_BIT( 0x0040, IP_ACTIVE_LOW, IPT_BUTTON3 ) PORT_PLAYER(1) PORT_BIT( 0x0080, IP_ACTIVE_LOW, IPT_START1 ) PORT_BIT( 0x0100, IP_ACTIVE_LOW, IPT_JOYSTICK_UP ) PORT_PLAYER(2) PORT_BIT( 0x0200, IP_ACTIVE_LOW, IPT_JOYSTICK_DOWN ) PORT_PLAYER(2) PORT_BIT( 0x0400, IP_ACTIVE_LOW, IPT_JOYSTICK_LEFT ) PORT_PLAYER(2) PORT_BIT( 0x0800, IP_ACTIVE_LOW, IPT_JOYSTICK_RIGHT ) PORT_PLAYER(2) PORT_BIT( 0x1000, IP_ACTIVE_LOW, IPT_BUTTON1 ) PORT_PLAYER(2) PORT_BIT( 0x2000, IP_ACTIVE_LOW, IPT_BUTTON2 ) PORT_PLAYER(2) PORT_BIT( 0x4000, IP_ACTIVE_LOW, IPT_BUTTON3 ) PORT_PLAYER(2) PORT_BIT( 0x8000, IP_ACTIVE_LOW, IPT_START2 ) PORT_START("SYSTEM") /* 0x400000.w */ PORT_BIT( 0x0001, IP_ACTIVE_LOW, IPT_COIN1 ) PORT_BIT( 0x0002, IP_ACTIVE_LOW, IPT_COIN2 ) PORT_BIT( 0x0004, IP_ACTIVE_LOW, IPT_SERVICE1 ) PORT_SERVICE_NO_TOGGLE( 0x0008, IP_ACTIVE_LOW ) PORT_BIT( 0x0010, IP_ACTIVE_HIGH,IPT_SPECIAL ) PORT_CUSTOM(eeprom_bit_r, NULL) // EEPROM data PORT_BIT( 0x0020, IP_ACTIVE_HIGH, IPT_UNKNOWN ) // seems checked in "test mode" PORT_BIT( 0x0040, IP_ACTIVE_HIGH, IPT_UNKNOWN ) // seems checked in "test mode" PORT_BIT( 0x0080, IP_ACTIVE_HIGH,IPT_SPECIAL ) PORT_CUSTOM(prot_r, NULL) // protection /* What do these bits do ? */ PORT_BIT( 0x0100, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x0200, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x0400, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x0800, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x1000, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x2000, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x4000, IP_ACTIVE_HIGH, IPT_UNKNOWN ) PORT_BIT( 0x8000, IP_ACTIVE_HIGH, IPT_UNKNOWN ) INPUT_PORTS_END static const gfx_layout charlayout = { 8,8, RGN_FRAC(1,4), 4, { RGN_FRAC(3,4), RGN_FRAC(2,4), RGN_FRAC(1,4), RGN_FRAC(0,4) }, { 7, 6, 5, 4, 3, 2, 1, 0 }, { 8*0, 8*1, 8*2, 8*3, 8*4, 8*5, 8*6, 8*7 }, 8*8 }; static const gfx_layout spritelayout = { 16,16, RGN_FRAC(1,4), 4, { RGN_FRAC(3,4), RGN_FRAC(2,4), RGN_FRAC(1,4), RGN_FRAC(0,4) }, { 7, 6, 5, 4, 3, 2, 1, 0, 15,14,13,12,11,10, 9, 8 }, { 0*16, 1*16, 2*16, 3*16, 4*16, 5*16, 6*16, 7*16, 8*16, 9*16,10*16,11*16,12*16,13*16,14*16,15*16 }, 16*16 }; static GFXDECODE_START( pirates ) GFXDECODE_ENTRY( "gfx1", 0, charlayout, 0x0000, 3*128 ) GFXDECODE_ENTRY( "gfx2", 0, spritelayout, 0x1800, 128 ) GFXDECODE_END /* Machine Driver + Related bits */ static MACHINE_DRIVER_START( pirates ) MDRV_CPU_ADD("main", M68000, 16000000) /* 16mhz */ MDRV_CPU_PROGRAM_MAP(pirates_readmem,pirates_writemem) MDRV_CPU_VBLANK_INT("main", irq1_line_hold) MDRV_NVRAM_HANDLER(pirates) MDRV_GFXDECODE(pirates) MDRV_SCREEN_ADD("main", RASTER) MDRV_SCREEN_REFRESH_RATE(60) MDRV_SCREEN_VBLANK_TIME(ATTOSECONDS_IN_USEC(0)) MDRV_SCREEN_FORMAT(BITMAP_FORMAT_INDEXED16) MDRV_SCREEN_SIZE(36*8, 32*8) MDRV_SCREEN_VISIBLE_AREA(0*8, 36*8-1, 2*8, 30*8-1) MDRV_PALETTE_LENGTH(0x2000) MDRV_VIDEO_START(pirates) MDRV_VIDEO_UPDATE(pirates) MDRV_SPEAKER_STANDARD_MONO("mono") MDRV_SOUND_ADD("oki", OKIM6295, 1333333) MDRV_SOUND_CONFIG(okim6295_interface_pin7low) MDRV_SOUND_ROUTE(ALL_OUTPUTS, "mono", 1.0) MACHINE_DRIVER_END /* Rom Loading */ ROM_START( pirates ) ROM_REGION( 0x100000, "main", 0 ) /* 68000 Code (encrypted) */ ROM_LOAD16_BYTE( "r_449b.bin", 0x00000, 0x80000, CRC(224aeeda) SHA1(5b7e47a106af0debf8b07f120571f437ad6ab5c3) ) ROM_LOAD16_BYTE( "l_5c1e.bin", 0x00001, 0x80000, CRC(46740204) SHA1(6f1da3b2cbea25bbfdec74c625c5fb23459b83b6) ) ROM_REGION( 0x200000, "gfx1", 0 ) /* GFX (encrypted) */ ROM_LOAD( "p4_4d48.bin", 0x000000, 0x080000, CRC(89fda216) SHA1(ea31e750460e67a24972b04171230633eb2b6d9d) ) ROM_LOAD( "p2_5d74.bin", 0x080000, 0x080000, CRC(40e069b4) SHA1(515d12cbb29bdbf3f3016e5bbe14941209978095) ) ROM_LOAD( "p1_7b30.bin", 0x100000, 0x080000, CRC(26d78518) SHA1(c293f1194f8ef38241d149cf1db1a511a7fb4936) ) ROM_LOAD( "p8_9f4f.bin", 0x180000, 0x080000, CRC(f31696ea) SHA1(f5ab59e441317b02b615a1cdc6d075c5bdcdea73) ) ROM_REGION( 0x200000, "gfx2", 0 ) /* GFX (encrypted) */ ROM_LOAD( "s1_6e89.bin", 0x000000, 0x080000, CRC(c78a276f) SHA1(d5127593e68f9e8f2878803c652a35a1c6d82b2c) ) ROM_LOAD( "s2_6df3.bin", 0x080000, 0x080000, CRC(9f0bad96) SHA1(b8f910aa259192e261815392f5d7c9c7dabe0b4d) ) ROM_LOAD( "s4_fdcc.bin", 0x100000, 0x080000, CRC(8916ddb5) SHA1(f4f7da831ef929eb7575bbe69eae317f15cfd648) ) ROM_LOAD( "s8_4b7c.bin", 0x180000, 0x080000, CRC(1c41bd2c) SHA1(fba264a3c195f303337223a74cbad5eec5c457ec) ) ROM_REGION( 0x080000, "oki", 0) /* OKI samples (encrypted) */ ROM_LOAD( "s89_49d4.bin", 0x000000, 0x080000, CRC(63a739ec) SHA1(c57f657225e62b3c9c5f0c7185ad7a87794d55f4) ) ROM_END ROM_START( genix ) ROM_REGION( 0x100000, "main", 0 ) /* 68000 Code (encrypted) */ ROM_LOAD16_BYTE( "1.15", 0x00000, 0x80000, CRC(d26abfb0) SHA1(4a89ba7504f86cb612796c376f359ab61ec3d902) ) ROM_LOAD16_BYTE( "2.16", 0x00001, 0x80000, CRC(a14a25b4) SHA1(9fa64c6514bdee56b5654b001f8367283b461e8a) ) ROM_REGION( 0x200000, "gfx1", 0 ) /* GFX (encrypted) */ ROM_LOAD( "7.34", 0x000000, 0x040000, CRC(58da8aac) SHA1(bfc8449ba842f8ceac62ebdf6005d8f19d96afa6) ) ROM_LOAD( "9.35", 0x080000, 0x040000, CRC(96bad9a8) SHA1(4e757cca0ab157f0c935087c9702c88741bf7a79) ) ROM_LOAD( "8.48", 0x100000, 0x040000, CRC(0ddc58b6) SHA1(d52437607695ddebfe8494fd214efd20ba72d549) ) ROM_LOAD( "10.49",0x180000, 0x040000, CRC(2be308c5) SHA1(22fc0991557643c22f6763f186b74900a33a39e0) ) ROM_REGION( 0x200000, "gfx2", 0 ) /* GFX (encrypted) */ ROM_LOAD( "6.69", 0x000000, 0x040000, CRC(b8422af7) SHA1(d3290fc6ea2670c445731e2b493205874dc4b319) ) ROM_LOAD( "5.70", 0x080000, 0x040000, CRC(e46125c5) SHA1(73d9a51f30a9c1a8397145d2a4397696ef37f4e5) ) ROM_LOAD( "4.71", 0x100000, 0x040000, CRC(7a8ed21b) SHA1(f380156c44de2fc316f390adee09b6a3cd404dec) ) ROM_LOAD( "3.72", 0x180000, 0x040000, CRC(f78bd6ca) SHA1(c70857b8053f9a6e3e15bbc9f7d13354b0966b30) ) ROM_REGION( 0x080000, "oki", 0) /* OKI samples (encrypted) */ ROM_LOAD( "0.31", 0x000000, 0x080000, CRC(80d087bc) SHA1(04d1aacc273c7ffa57b48bd043d55b5b3d993f74) ) ROM_END /* Init */ static void pirates_decrypt_68k(running_machine *machine) { int rom_size; UINT16 *buf, *rom; int i; rom_size = memory_region_length(machine, "main"); buf = malloc_or_die(rom_size); rom = (UINT16 *)memory_region(machine, "main"); memcpy (buf, rom, rom_size); for (i=0; i>8, 1,4,7,0,3,5,6,2); rom[i] = (vr<<8) | vl; } free (buf); } static void pirates_decrypt_p(running_machine *machine) { int rom_size; UINT8 *buf, *rom; int i; rom_size = memory_region_length(machine, "gfx1"); buf = malloc_or_die(rom_size); rom = memory_region(machine, "gfx1"); memcpy (buf, rom, rom_size); for (i=0; i bra } static READ16_HANDLER( genix_prot_r ) { if(!offset) return 0x0004; else return 0x0000; } static DRIVER_INIT( genix ) { pirates_decrypt_68k(machine); pirates_decrypt_p(machine); pirates_decrypt_s(machine); pirates_decrypt_oki(machine); /* If this value is increased then something has gone wrong and the protection failed */ /* Write-protect it for now */ memory_install_read16_handler(machine, 0, ADDRESS_SPACE_PROGRAM, 0x109e98, 0x109e9b, 0, 0, genix_prot_r ); } /* GAME */ GAME( 1994, pirates, 0, pirates, pirates, pirates, 0, "NIX", "Pirates", 0 ) GAME( 1994, genix, 0, pirates, pirates, genix, 0, "NIX", "Genix Family", 0 )