Game runs checksum routine during logo then. Takes 3-4 seconds to verify!
That picture tries to run piracy splash and game internally fails.
Let me try some other idea to follow up on this.. use sloppy brute-force.
edit: Wait. Tested with English patch? I was using straight Japan. Let me check what AGTP did. Could collision.
==> likely none
upd1: Asking for Gun Hazard again.https://www.sendspace.com/file/wa2v44
wake2 = sloppy method to verify continue loading.
crash2 = Your picture clued me in possibly on important Canoe finding. If game boots, pass. If error picture, it'll probably say EFFFCx. Remote chance I crashed Gun Hazard and squaresoft caught it. Hoping here.
Nosferatu tells us it's writing correct OBJ MSB bits. Which leaves:
- game overwriting later
- game putting sprites wrong location
- mystery ppu setting cause sprites to wrap around
Mickey's Adventures. Maybe spc bug. Or unusual cpu opcode. Green screen though. Waiting on GH crash2.
Little Magic. Following up on own theory about spc sync. Going to try small kludge.
Augusta 3. Very very strange. Sa-1 keeps decoding same $40:0000 data over and over. Back thought.
Did some GH simulations. If a BRK or COP gets thrown, square pushes error message. If screen is on though (logo time).
So you may get black instead. But no boot = cpu error. Normally this could throw C7 or black elsewhere.
Theory: BNE $00 triggered GH crash in above picture. Cpu Canoe bug! Just waiting on no boot verification. Sadly not Nosferatu as it wrote correct $55 to OAM.
And this may be perfect test game to assault Canoe crashes!!
upd3: Not so sure about this anymore. But why did GH crash around there?