It is currently Wed May 24, 2017 12:52 am

All times are UTC - 7 hours





Post new topic Reply to topic  [ 490 posts ]  Go to page Previous  1 ... 29, 30, 31, 32, 33
Author Message
PostPosted: Sun Apr 23, 2017 6:23 pm 
Offline

Joined: Sun Apr 13, 2008 11:12 am
Posts: 5682
Location: Seattle
... actually, I have a terrible idea.

Where's the exact program (exe) you're having him run?

(p.s. IDA free is adequate for my terrible idea)


Top
 Profile  
 
PostPosted: Sun Apr 23, 2017 9:22 pm 
Offline

Joined: Thu Feb 23, 2017 2:27 pm
Posts: 29
I think he's just running the latest anago.exe paired with anago_wx.exe, grabben of the Kazzo site in the unagi_client_windows_062_GUI folder...

...........wait...... you thinking what I'm thinking? :)

also:
Quote:
I fear that FCEUmm's source shuffles the 1KiB slices around, so even this won't be a match, even if it's closer to what's on the physical ROM.

I don't think that's true? According to the commit logs, the mask ROM for the Kaiser version was verified long ago, regardless of the comments in KS7030.c...
Quote:
new UNIF board for "Yume Koujou Doki Doki Panic (FDS Conversion)(Kaiser)(KS7030)[U][!] <---

What makes you think the 1K bit goes last instead of first?


Top
 Profile  
 
PostPosted: Sun Apr 23, 2017 11:31 pm 
Offline

Joined: Sun Apr 13, 2008 11:12 am
Posts: 5682
Location: Seattle
I can't trivially test this, but try this:
Original file: anago_wx.exe, 658944 bytes, crc32: e6e94fef, md5sum: 3d63754d378d2cabbe6e3353475a8dee
This patch should dummy out the lower bound check.
Attachment:
anago_wx.ips [15 Bytes]
Downloaded 7 times


Quote:
What makes you think the 1K bit goes last instead of first?
It doesn't, but the offset math in FCEUmm looked wrong to me. The lower 12 bits of the address lines should be unchanged before and after banking.


Top
 Profile  
 
PostPosted: Mon Apr 24, 2017 2:07 pm 
Offline

Joined: Thu Feb 23, 2017 2:27 pm
Posts: 29
lidnariq wrote:
I can't trivially test this, but try this:
Original file: anago_wx.exe, 658944 bytes, crc32: e6e94fef, md5sum: 3d63754d378d2cabbe6e3353475a8dee
This patch should dummy out the lower bound check.
Attachment:
anago_wx.ips


Doesn't work, still spouts the "address range" error. :( Looks like I need to resort to figuring out how to actually compile this crap.


Top
 Profile  
 
PostPosted: Mon Apr 24, 2017 3:12 pm 
Offline

Joined: Sun Apr 13, 2008 11:12 am
Posts: 5682
Location: Seattle
That's really weird.

Here's another possible couple patches that might help?

patch #2 should change the specific value for the lower bound check, changing it from 0x8000 to 0x4100.
Attachment:
anago_wx2.ips [14 Bytes]
Downloaded 4 times


patch #3 should disable the upper bounds check. I don't see how this could be relevant, but applying both #1 and #3 should make it impossible for the bounds check to trigger... should.
Attachment:
anago_wx3.ips [15 Bytes]
Downloaded 4 times


It's not like testing these actually require the cartridge; just a physical Kazzo (which I don't have :/ )


Top
 Profile  
 
PostPosted: Mon Apr 24, 2017 3:33 pm 
Offline

Joined: Thu Feb 23, 2017 2:27 pm
Posts: 29
Alright, the guy has to test the patch tomorrow, so I'll keep tight on how this goes. Man, all this trouble for one cart.


Top
 Profile  
 
PostPosted: Tue Apr 25, 2017 4:28 am 
Offline

Joined: Tue Feb 14, 2017 9:50 am
Posts: 2
Hey, figured I'd drop by since I had just noticed this was discussed here. It's my cartridge lol.

The anago_wx.exe I have matches the given MD5.
I tried each IPS patch (with Lunar IPS), checked MD5 (if it was different after patching & checked consistency) as well each time with CertUtil -hashfile anago_wx.exe MD5. Each time it was still giving the 0x8000->0x10000 address error.

I'll try to recompile it on my old computer as well, might be able to… or not…

I'd like to be much more around but the studies are eating my time, plus the fact I don't have knowlegde in Famicom emulation.

Anyway, I'm also currently pushing the guy who has the dump to release it might be hopeless but I thought it was worth a try as well. I don't want to bother you guys too much for just one cartridge… But at least it's good to see that anago will get a flaw like that removed (at least in custom builds).


Top
 Profile  
 
PostPosted: Wed Apr 26, 2017 11:33 pm 
Offline

Joined: Thu Feb 23, 2017 2:27 pm
Posts: 29
After a day of libusb errors and stretching around with Squirrel 2 on a slow computer, I've managed to get anago to dump the cart! Success!


Attachments:
yeessss.png
yeessss.png [ 75.62 KiB | Viewed 177 times ]
Top
 Profile  
 
PostPosted: Wed Apr 26, 2017 11:36 pm 
Offline

Joined: Sun Apr 13, 2008 11:12 am
Posts: 5682
Location: Seattle
yeessss indeed!


Top
 Profile  
 
PostPosted: Sat Apr 29, 2017 12:32 pm 
Offline

Joined: Thu Feb 23, 2017 2:27 pm
Posts: 29
...but it doesn't look like I can successfully emulate it in MAME anyways. The bank at 0x7000 appears to be the extra "BANK 0" that is mentioned within the comments. I combined the main 32K PRG chunk from the NROM readout, put the 32k and 64k chunks first, and the main 32K PRG chunk last to hopefully create a representation of what is in the actual mask ROM. The startup looks to be okay, but after a couple of bankswitches, the emulation freaks out and jumps to data.

:(


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 490 posts ]  Go to page Previous  1 ... 29, 30, 31, 32, 33

All times are UTC - 7 hours


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group