I've written Z80 code on the Spectrum and written a few pokes for games on the Speccy.
I've disassembled the MAME ROMS for Mouser using z80dasm and I am worried that the code may be partially encrypted.
There are many places where the disassembler can't decode the undocumented instructions:
defb 0fdh,062h,00eh ;illegal sequence
I think that should be:
LD IYH,D
NOP
Altering the code statically might be a problem and MAME will complain that the checksums don't match what they expect but you can start it on the command line with: mame mouser
That'll ignore the checksum error.
Debugging with: mame -debug mouser
I put a breakpoint on the next vertical blank and that starts at memory address 66. That seems to be the main game loop.
Can MAME debugger poke read only memory? I tried maincpu@66 = c9 and nothing happens. Certain byte sequences don't appear in the ROMS so I'm not sure if Mouser uses that Encrypted Z80 by VLSI. I don't know much about that.
Which version of MAME will you be using to play the game?
mlynn2021-02-13 13:51:51