See below some links of some "special" versions of Warzard/Red Earth.
http://tinypic.com/view.php?pic=vhcos4&s=5
http://tinypic.com/view.php?pic=nr0i2g&s=5
http://tinypic.com/view.php?pic=208xyxc&s=5
http://tinypic.com/view.php?pic=21b56z8&s=5
http://tinypic.com/view.php?pic=15n5c8n&s=5
http://tinypic.com/view.php?pic=kcymur&s=5
http://tinypic.com/view.php?pic=6efakn&s=5
http://tinypic.com/view.php?pic=2rw45j4&s=5
The new version of the tool (coming soon) will let you choose the target country code of the ISOS generated. They will work independently of the country code of the cartridge.
@Ian: It will support Warzard country code.
Woah, nice work! Extremely fast progress, I can barely keep up! ;)
ReplyDeleteThis will be excellent news for owners of Asia 3rd Strike carts, if the tool can recreate 3S -> 3S ISO but switch only the region. That way, the game can run as a region other than Asia, with full speech samples (no more "huh" instead of "hadouken").
One of the next things on the list I guess will be fixed ROM checksums in the test menu. :)
This comment has been removed by the author.
ReplyDeleteLooks like you have not found the secret cart
ReplyDeletere-programming menu? That's probably a better
way to proceed rather than hacking the code
just re-program a dead cart with the security
data which will probably be in the flashrom in
the cart.
While your method is impressive the main problem remains which is dead security carts. Finding a
way to solve the dead security cart issue should
be the main task.... and Capcom have provided it
with the secret menu. You just need to find a way
to unlock it.
Mamedev found the secret menu by forcing a jump
in the BIOS code (IIRC) but the method to access
the menu on real hardware was not found.
Guru
http://guru.mameworld.info
@Guru, I was looking for that routine and I couln't find it. I even discussed the issue with Elsemi. Can you please point to the person who found this menu? If this exists, I commit to find the combinations to get there!
ReplyDeleteI'm not even certain that the secret menu is present in the carts for all games is it? I know 3rd Strike has it, but I'm not sure the others do. Please correct me if I'm mistaken.
ReplyDeleteSECURITY CASSETTE UTILITY MENU Ver 2.00
1. FLASH MEMORY
2. DISK & FILES
3. GAME BOOT
4. EXIT
SELECT = 1P UP or DOWN
START = 1P SHOT1
2 . D I S K & F I L E S
VOLUME LABEL:
PATH:
ENTRIES
EXIT = 1P START & SHOT1
1. DISK DUMP
2. EJECT MEDIUM
3. DEVICE INFORMATION
1. EXECUTE AS MACRO
2. WRITE TO FLASH MEMORY
3. CHECKSUM
4. FILE DUMP
5. LOAD AS MS-BITMAP
1. ONBOARD
2. SIMM1
3. SIMM2
4. SIMM3
5. SIMM4
6. SIMM5
7. SIMM6
8. SIMM7
START OFFSET = 00000000
E X E C U T E M A C R O
FILENAME SIMM OFFSET RESULT
CANCEL = 1P START
D I S K D U M P
BLOCK = XXXXXXXX BLOCK SIZE = XXXXXXXX
OFFSET +0 +2 +4 +6 01234567
DEVELOPER'S SECURITY CASSETTE UTILITY Ver 2.00a
PROPERTIES
GAME: UNKNOWN
CODE:
STATUS:
1P START = NEXT MODE
BOARD
SIMM1
SIMM2
SIMM3
SIMM4
SIMM5
SIMM6
SIMM7
FUJITSU
Intel/SHARP
HITACHI
MXIC
ERASED
WRITTEN
Ehem, ehem....do you mean this???
ReplyDeletehhttp://tinypic.com/view.php?pic=sy448y&s=5
http://tinypic.com/view.php?pic=fla6nt&s=5
http://tinypic.com/view.php?pic=2dtvgjq&s=5
You can make many things from there, even copy content from one SIMM to another, but definitely, you can't bring back to life a cartridge, as the menu itself is in the cartridge and needs to be decrypted.
The only way I see to solve this, is by checking if there is real traffic going on between SH2<-->BIOS and SH2<-->CPSIII Board.
Me lazy, will eventually set the signal analyzer setup one day and bring will hopefully some light to this....
Some more pics here....
ReplyDeletehttp://tinypic.com/view.php?pic=14j12qt&s=5
http://tinypic.com/view.php?pic=116kyuw&s=5
http://tinypic.com/view.php?pic=9sfi3c&s=5
For the curios ones, this is how you go to the "special menu". Notice that the menu code is being run from the BIOS.
ReplyDeletehttp://tinypic.com/view.php?pic=29egfw9&s=5
To be honest, I doubt that it is possible to re-write the security data on to carts using normal CPS3 hardware. It's likely that specific servicing hardware is required for this task.
ReplyDeleteThis was certainly the case for CPS2 boards, for example:
http://ctx.me/l
http://ctx.me/m
Agree!
ReplyDeleteAnother nice pic of the developer's menu, even better than windows :)
ReplyDeletehttp://tinypic.com/view.php?pic=dm5u6d&s=5