Difference between revisions of "FD1094"
From Sega Retro
(Created page with "{{sub-stub}} The '''FD1094''' (also labeled '''FD1089'''; the differences are unknown) is a MC68000 clone manufactured by Hitachi for use in Sega arcade games. The...") |
("capcom pre-CPS games") |
||
| Line 1: | Line 1: | ||
{{sub-stub}} | {{sub-stub}} | ||
| − | The '''FD1094''' (also labeled '''FD1089'''; the differences are unknown) is a [[MC68000]] clone manufactured by [[Hitachi]] for use in [[Sega]] arcade games. The FD1094 is one of the earliest and most infamous examples of a battery being used in a copy protection chip. | + | The '''FD1094''' (also labeled '''FD1089'''; the differences are unknown) is a [[MC68000]] clone manufactured by [[Hitachi]] for use in [[Sega]] arcade games. The FD1094 is one of the earliest(?) and most infamous examples of a battery being used in a copy protection chip. |
In the FD1094, opcodes and opcode data are encrypted individually, and regular opcodes and opcodes in interrupt vectors are also encrypted differently. The encryption is done using battery-backed SRAM stored within the chip — the lowest RAM locations are used for decryption, while the rest store the encryption key. There is no protection from opening the chip; merely removing the battery or letting it die will kill the SRAM contents, rendering the game unbootable. | In the FD1094, opcodes and opcode data are encrypted individually, and regular opcodes and opcodes in interrupt vectors are also encrypted differently. The encryption is done using battery-backed SRAM stored within the chip — the lowest RAM locations are used for decryption, while the rest store the encryption key. There is no protection from opening the chip; merely removing the battery or letting it die will kill the SRAM contents, rendering the game unbootable. | ||
Revision as of 13:43, 31 December 2012
This teeny-tiny article needs some work. You can help us by expanding it.
The FD1094 (also labeled FD1089; the differences are unknown) is a MC68000 clone manufactured by Hitachi for use in Sega arcade games. The FD1094 is one of the earliest(?) and most infamous examples of a battery being used in a copy protection chip.
In the FD1094, opcodes and opcode data are encrypted individually, and regular opcodes and opcodes in interrupt vectors are also encrypted differently. The encryption is done using battery-backed SRAM stored within the chip — the lowest RAM locations are used for decryption, while the rest store the encryption key. There is no protection from opening the chip; merely removing the battery or letting it die will kill the SRAM contents, rendering the game unbootable.
There are multiple possible encryption modes freely selectable by the game; they are selected with the opcode
cmpi.l #$00xxFFFF,d0
where xx is the encryption state.
It is possible for someone who owns a FD1094-based game to replace the battery, and several decrypted versions of games exist. As decryption is determined during program execution, it is difficult to decrypt games without analyzing the code.
List of Boards and Games
- TODO