SpaceCadetPinball

Summary

Reverse engineering of 3D Pinball for Windows - Space Cadet, a game bundled with Windows.

How to play

Place compiled executable into a folder containing original game resources (not included).
Supports data files from Windows and Full Tilt versions of the game.

Known source ports

Platform	Author	URL
PS Vita	Axiom	https://github.com/suicvne/SpaceCadetPinball_Vita
Emscripten	alula	https://github.com/alula/SpaceCadetPinball Play online: https://alula.github.io/SpaceCadetPinball
Nintendo Switch	averne	https://github.com/averne/SpaceCadetPinball-NX
webOS TV	mariotaku	https://github.com/webosbrew/SpaceCadetPinball
Android (WIP)	Iscle	https://github.com/Iscle/SpaceCadetPinball
Nintendo Wii	MaikelChan	https://github.com/MaikelChan/SpaceCadetPinball
Nintendo 3DS	MaikelChan	https://github.com/MaikelChan/SpaceCadetPinball/tree/3ds
Nintendo Wii U	IntriguingTiles	https://github.com/IntriguingTiles/SpaceCadetPinball-WiiU
MorphOS	BeWorld	https://www.morphos-storage.net/?id=1688897
AmigaOS 4	rjd324	http://aminet.net/package/game/actio/spacecadetpinball-aos4
Android (WIP)	fexed	https://github.com/fexed/Pinball-on-Android
Web	stech11845	https://github.com/stech11845/SpaceCadetPinball-web

Platforms covered by this project: desktop Windows, Linux and macOS.

Source

• pinball.exe from Windows XP (SHA-1 2A5B525E0F631BB6107639E2A69DF15986FB0D05) and its public PDB
• CADET.EXE 32bit version from Full Tilt! Pinball (SHA-1 3F7B5699074B83FD713657CD94671F2156DBEDC4)

Tools used

Ghidra, Ida, Visual Studio

What was done

• All structures were populated, globals and locals named.
• All subs were decompiled, C pseudo code was converted to compilable C++. Loose (namespace?) subs were assigned to classes.

Compiling

For Wii U

1. Install devkitPro, then install the wiiu-dev, wiiu-sdl2_mixer, and wiiu-cmake packages.
2. git clone --recurse https://github.com/IntriguingTiles/SpaceCadetPinball-WiiU && cd SpaceCadetPinball-WiiU
3. If you're not using Aroma, compile and install libromfs-wiiu.
4. • For Aroma, run mkdir build && cd build && $DEVKITPRO/portlibs/wiiu/bin/powerpc-eabi-cmake -DCMAKE_BUILD_TYPE=Release ..
   • For other environments, run mkdir build && cd build && $DEVKITPRO/portlibs/wiiu/bin/powerpc-eabi-cmake -DCMAKE_BUILD_TYPE=Release -DUSE_ROMFS=yes ..
5. Drop the pinball game data in res and run make.
6. To get music to play, convert PINBALL.MID to MP3.

Plans

• Decompile original game
• Resizable window, scaled graphics
• Loader for high-res sprites from CADET.DAT
• Cross-platform port using SDL2, SDL2_mixer, ImGui
• Misc features of Full Tilt: 3 music tracks, multiball, centered textboxes, etc.
• Maybe: Text translations
• Maybe: Android port
• Maybe x2: support for other two tables
  • Table specific BL (control interactions and missions) is hardcoded, othere parts might be also patched

On 64-bit bug that killed the game

I did not find it, decompiled game worked in x64 mode on the first try.
It was either lost in decompilation or introduced in x64 port/not present in x86 build.
Based on public description of the bug (no ball collision), I guess that the bug was in TEdgeManager::TestGridBox