Previous 199869 Revisions Next

r33671 Thursday 4th December, 2014 at 08:47:30 UTC by Olivier Galibert
New NOT WORKING:
 House of the Dead 4 (Export)             [soyandroid, Guru]
 Virtua Fighter 5 (Export)                [soyandroid]
 After Burner Climax (Export)             [soyandroid]
 Let's Go Jungle (Export)                 [soyandroid]
 Outrun 2 SP SDX                          [soyandroid]
 Power Smash 3 / Virtua Tennis 3 (Export) [soyandroid]
 Virtua Tennis 3 (Japan)                  [Guru]
 Initial D4 (Rev D)                       [Guru]
 Initial D4 (Rev C)                       [Guru]
 Sega Race-TV (Export)                    [soyandroid, Guru]
 House of the Dead EX (Japan)             [soyandroid]
 Rambo (Export)                           [soyandroid, Guru]
 Hummer Extreme                           [soyandroid]
 VBios updater                            [Guru]
[src/mame]mame.lst
[src/mame/drivers]lindbergh.c

trunk/src/mame/drivers/lindbergh.c
r242182r242183
2424On this red box the CPU is a Celeron D at 2.8GHz. RAM is 512M DDR PC3200
2525The box has Sega number 845-0001D-02
2626
27
28Security
29--------
30
31The security seems to work in multiple steps.  The information there
32is a combination of our research and things found on the internet.
33
34- At boot, the bios unlocks the CF card through an IDE 0x82 command
35  with a currently unknown key.  There is also a hardware heartbeat
36  signal on the IDE bus to avoid hotswapping.
37
38- The system boots on the CF which holds a customized Montavista linux.
39
40- The CF system can either install the game (from the DVD) or start it (on the HD)
41
42- The DVD is decrypted (probably on-the-fly with aesloop) using a
43  fixed system key (all the dvd images start identically).
44
45- The PIC includes an AES-CBC engine and has as data an IV, a key,
46  some game-specific identification information, and two pre and
47  post-whitening values.  Everything but the key is dumpable through
48  commands, but the key seems well-protected.  It's not realistic to
49  decrypt very large amounts of data through it though, the bandwidth
50  would be way too low.
51
52- The HD is probably unlocked by the CF and bootstrap code is
53  decrypted through the PIC.  That code in turn loop-decrypts/mounts all the
54  data needed from the partition (probably /usr, /X11R6 and /home).
55
56Currently, we do not have access to the CF image, making it impossible
57to do a complete boot/install.
58
59
2760Lindbergh Game List
2861-------------------
2962                                               Security
r242182r242183
371404   MCFG_AC97_ADD(                    ":pci:1f.5",      0x808625a6, 0x02, 0x103382c0)
372405MACHINE_CONFIG_END
373406
407#define LINDBERGH_BIOS \
408   ROM_REGION32_LE(0x100000, ":pci:1f.0", 0) /* PC bios, location 3j7 */ \
409   ROM_SYSTEM_BIOS(0, "bios0", "6.0.0010 alternate version") \
410   ROMX_LOAD("6.0.0010a.bin", 0x00000, 0x100000, CRC(10dd9b76) SHA1(1fdf1f921bc395846a7c3180fbdbc4ca287a9670), ROM_BIOS(1) ) \
411   ROM_SYSTEM_BIOS(1, "bios1", "6.0.0009") \
412   ROMX_LOAD("6.0.0009.bin",  0x00000, 0x100000, CRC(5ffdfbf8) SHA1(605bc4967b749b4e6d13fc2ebb845ba956a259a7), ROM_BIOS(2) ) \
413   ROM_SYSTEM_BIOS(2, "bios2", "6.0.0010") \
414   ROMX_LOAD("6.0.0010.bin",  0x00000, 0x100000, CRC(ea2bf888) SHA1(c9c5b6f0d4f4f36620939b15dd2f128a74347e37), ROM_BIOS(3) ) \
415\
416   ROM_REGION(0x400000, ":pci:1e.0:03.0", 0) /* Baseboard MPC firmware */ \
417   ROM_LOAD("fpr-24370b.ic6", 0x000000, 0x400000, CRC(c3b021a4) SHA1(1b6938a50fe0e4ae813864649eb103838c399ac0)) \
418\
419   ROM_REGION32_LE(0x10000, ":pci:01.0:00.0", 0) /* Geforce bios extension (custom or standard?) */ \
420   ROM_LOAD("vid_bios.u504", 0x00000, 0x10000, CRC(f78d14d7) SHA1(f129787e487984edd23bf344f2e9500c85052275)) \
421
374422ROM_START(lindbios)
375   ROM_REGION32_LE(0x100000, ":pci:1f.0", 0) // PC bios, location 3j7
376   ROM_SYSTEM_BIOS(0, "bios0", "6.0.0010 alternate version")
377   ROMX_LOAD("6.0.0010a.bin", 0x00000, 0x100000, CRC(10dd9b76) SHA1(1fdf1f921bc395846a7c3180fbdbc4ca287a9670), ROM_BIOS(1) )
378   ROM_SYSTEM_BIOS(1, "bios1", "6.0.0009")
379   ROMX_LOAD("6.0.0009.bin", 0x00000, 0x100000, CRC(5ffdfbf8) SHA1(605bc4967b749b4e6d13fc2ebb845ba956a259a7), ROM_BIOS(2) )
380   ROM_SYSTEM_BIOS(2, "bios2", "6.0.0010")
381   ROMX_LOAD("6.0.0010.bin", 0x00000, 0x100000, CRC(ea2bf888) SHA1(c9c5b6f0d4f4f36620939b15dd2f128a74347e37), ROM_BIOS(3) )
423   LINDBERGH_BIOS
424ROM_END
382425
426ROM_START(hotd4)
427   LINDBERGH_BIOS
383428
384   ROM_REGION(0x400000, ":pci:1e.0:03.0", 0) // Baseboard MPC firmware
385   ROM_LOAD("fpr-24370b.ic6", 0x000000, 0x400000, CRC(c3b021a4) SHA1(1b6938a50fe0e4ae813864649eb103838c399ac0))
429   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0427 / 317-0427-COM
430   ROM_LOAD("317-0427-com.bin", 0, 0x2000, CRC(ef4a120c) SHA1(fcc0386fa708af9e010e40e1d259a6bd95e8b9e2))
386431
387   ROM_REGION32_LE(0x10000, ":pci:01.0:00.0", 0) // Geforce bios extension (custom or standard?)
388   ROM_LOAD("vid_bios.u504", 0x00000, 0x10000, CRC(f78d14d7) SHA1(f129787e487984edd23bf344f2e9500c85052275))
432   DISK_REGION("dvd")
433   DISK_IMAGE_READONLY("dvp-0003a", 0, SHA1(46544e28735f55418dd78bd19446093874438264))
389434ROM_END
390435
391GAME(1999, lindbios, 0, lindbergh, 0, driver_device, 0, ROT0, "Sega Lindbergh", "Sega Lindbergh Bios", GAME_IS_SKELETON)
436ROM_START(vf5)
437   LINDBERGH_BIOS
438
439   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0438 / 317-0438-COM
440   ROM_LOAD("317-0438-com.bin", 0, 0x2000, CRC(9aeb15d3) SHA1(405ddc44b2b40b72cfe2a081a0d5e43ceb9a380e))
441
442   DISK_REGION("dvd")
443   DISK_IMAGE_READONLY("dvp-0008e", 0, NO_DUMP)
444ROM_END
445
446ROM_START(abclimax)
447   LINDBERGH_BIOS
448
449   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0440 / 317-0440-COM
450   ROM_LOAD("317-0440-com.bin", 0, 0x2000, CRC(8d09e717) SHA1(6b25982f7042541874115d33ea5d0c028140a962))
451
452   DISK_REGION("dvd")
453   DISK_IMAGE_READONLY("dvp-0009", 0, NO_DUMP)
454ROM_END
455
456ROM_START(letsgoju)
457   LINDBERGH_BIOS
458
459   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0442 / 317-0442-COM
460   ROM_LOAD("317-0442-com.bin", 0, 0x2000, CRC(b706efbb) SHA1(97c2b65e521113c5201f0b588fcb37a39148a637))
461
462   DISK_REGION("dvd")
463   DISK_IMAGE_READONLY("dvp-0011", 0, NO_DUMP)
464ROM_END
465
466ROM_START(outr2sdx)
467   LINDBERGH_BIOS
468
469   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0452 / 317-0452-COM (to verify, may be the one for OutRun 2 Special Tours)
470   ROM_LOAD("317-0452-com.bin", 0, 0x2000, CRC(f5b7bb3f) SHA1(6b179b255b3d29e5ce61902eeae4da07177a2943))
471
472   DISK_REGION("dvd")
473   DISK_IMAGE_READONLY("dvp-0015a", 0, NO_DUMP)
474ROM_END
475
476ROM_START(psmash3)
477   LINDBERGH_BIOS
478
479   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0434 / 317-0434-COM
480   ROM_LOAD("317-0434-com.bin", 0, 0x2000, CRC(70e3b202) SHA1(4925a288f937d54529abe6ef467c9c23674e47f0))
481
482   DISK_REGION("dvd")
483   DISK_IMAGE_READONLY("dvp-0005a", 0, NO_DUMP)
484ROM_END
485
486ROM_START(vtennis3)
487   LINDBERGH_BIOS
488
489   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0506 / 317-0506-JPN
490   ROM_LOAD("317-0506-jpn.bin", 0, 0x2000, NO_DUMP)
491
492   DISK_REGION("dvd")
493   DISK_IMAGE_READONLY("dvp-0005c", 0, SHA1(1fd689753c4b70dff0286cb7f623ee7fd439db62))
494ROM_END
495
496
497ROM_START(initiad4)
498   LINDBERGH_BIOS
499
500   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0486E / 317-0486-COM
501   ROM_LOAD("317-0846-com.bin", 0, 0x2000, NO_DUMP)
502
503   DISK_REGION("dvd")
504   DISK_IMAGE_READONLY("dvp-0030d", 0, SHA1(e43e6d22fab4eceb81db8309e4634e049d9c41e6))
505ROM_END
506
507ROM_START(initiad4c)
508   LINDBERGH_BIOS
509
510   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0486E / 317-0486-COM
511   ROM_LOAD("317-0846-com.bin", 0, 0x2000, NO_DUMP)
512
513   DISK_REGION("dvd")
514   DISK_IMAGE_READONLY("dvp-0030c", 0, SHA1(b1919f28539afec4c4bc52357e5210a090b5ae32))
515ROM_END
516
517ROM_START(segartv)
518   LINDBERGH_BIOS
519
520   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0504 / 317-0504-COM
521   ROM_LOAD("317-0504-com.bin", 0, 0x2000, CRC(ae7eaea8) SHA1(187e417e0b5543d95245364b547925426aa9f80e))
522
523   DISK_REGION("dvd")
524   DISK_IMAGE_READONLY("dvp-0044", 0, SHA1(914aa23ece8aaf0f1942f77272b3a87d10f7a7db))
525ROM_END
526
527ROM_START(hotdex)
528   LINDBERGH_BIOS
529
530   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0550 / 317-0550-JPN
531   ROM_LOAD("317-0550-jpn.bin", 0, 0x2000, CRC(7e247f13) SHA1(d416b0e7742b32eb31443967e84ef93fc9e56dfb))
532
533   DISK_REGION("dvd")
534   DISK_IMAGE_READONLY("hotdex", 0, NO_DUMP)
535ROM_END
536
537ROM_START(rambo)
538   LINDBERGH_BIOS
539
540   ROM_REGION(0x2000, ":pic", 0) // PIC security 253-5508-0540 / 317-0540-COM
541   ROM_LOAD("317-0540-com.bin", 0, 0x2000, CRC(fd9a7bc0) SHA1(140b05573e25a41c1237c7a96c8e099efbfd75b8))
542
543   DISK_REGION("dvd")
544   DISK_IMAGE_READONLY("dvp-0069", 0, SHA1(1f3401b652c45db2b843360aff9cda862c2832c0))
545ROM_END
546
547ROM_START(hummerxt)
548   LINDBERGH_BIOS
549
550   ROM_REGION(0x2000, ":pic", 0) // PIC security id unknown
551   ROM_LOAD("hummerextreme.bin", 0, 0x2000, CRC(524bc69a) SHA1(c79b6bd384196c169e40e623f4c80c8b9eb11f81))
552ROM_END
553
554ROM_START(lbvbiosu)
555   LINDBERGH_BIOS
556
557   DISK_REGION("dvd")
558   DISK_IMAGE_READONLY("dvp-0021b", 0, SHA1(362ac028ba19ba4762678953a033034a5ee8ad53))
559ROM_END
560
561GAME(1999, lindbios,         0, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Sega Lindbergh Bios",                      GAME_IS_BIOS_ROOT)
562GAME(2005, hotd4,     lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "House of the Dead 4 (Export)",             GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
563GAME(2005, vf5,       lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Virtua Fighter 5 (Export)",                GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
564GAME(2006, abclimax,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "After Burner Climax (Export)",             GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
565GAME(2006, letsgoju,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Let's Go Jungle (Export)",                 GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
566GAME(2006, outr2sdx,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Outrun 2 SP SDX",                          GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
567GAME(2006, psmash3,   lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Power Smash 3 / Virtua Tennis 3 (Export)", GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
568GAME(2006, vtennis3,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Virtua Tennis 3 (Japan)",                  GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
569GAME(2007, initiad4,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Initial D4 (Rev D)",                       GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
570GAME(2007, initiad4c, initiad4, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Initial D4 (Rev C)",                       GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
571GAME(2007, segartv,   lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Sega Race-TV (Export)",                    GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
572GAME(2008, hotdex,    lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "House of the Dead EX (Japan)",             GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
573GAME(2008, rambo,     lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Rambo (Export)",                           GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
574GAME(2009, hummerxt,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "Hummer Extreme",                           GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
575GAME(200?, lbvbiosu,  lindbios, lindbergh, 0, driver_device, 0, ROT0, "Sega", "VBios updater",                            GAME_NOT_WORKING|GAME_UNEMULATED_PROTECTION|GAME_NO_SOUND)
trunk/src/mame/mame.lst
r242182r242183
51025102
51035103// Sega Lindbergh games
51045104lindbios
5105hotd4
5106vf5
5107abclimax
5108letsgoju
5109outr2sdx
5110psmash3
5111vtennis3
5112initiad4
5113initiad4c
5114segartv
5115hotdex
5116rambo
5117hummerxt
5118lbvbiosu
51055119
5106
51075120// Deniam games
51085121// they run on Sega System 16 video hardware
51095122logicpro        // (c) 1996 Deniam

https://github.com/mamedev/mame/commit/c941b34eafc608a43e58e217bf7547b9dc938b6d

Previous 199869 Revisions Next

© 1997-2024 The MAME Team