|
|
|
IDENTIFICATION SERVEUR : 10.14.20.91 - CLIENT : 18.232.133.231 |
|
| Voir le sujet précédent :: Voir le sujet suivant |
| Auteur |
Message |
toinet
Site Admin
Inscrit le: 15 Juin 2007
Messages: 3055
Localisation: Le Chesnay, France
|
 Posté le: Mer 04 Sep 2019, 10:10 Sujet du message: International Hockey (Artworx Software, 1987) |
 |
|
#1021 - An interesting sports game that can be played with two players. A woz image provided by 4am.
The Locksmith view
. means sector is standard
A means non-standard address field
D means non-standard data field
| Code: |
THE LOCKSMITH 6.3 : II-IIGS
2 V $27 TRACKS
FAST DISK BACKUP
.****.***********.*****************
0000000000000000111111111111111122222222
0123456789ABCDEF0123456789ABCDEF01234567
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
.AAAA.AAAAAAAAAAA.AAAAAAAAAAAAAAAAA
[ ] PRESS [RESET] TO EXIT.
|
Disk structure
Normal tracks: T0, T5, T11
Change of markers:
- address: D5AAAD/DEAAEB instead of D5AA96/DEAA
- data: D5AA96/DEAAEB instead of D5AAAD/DEAA
There is no extra track.
Protection type
Apart from the disk structure, an analysis with the nibble editor of Copy II Plus, T6 seems standard (though empty) apart from two nibbles on S0 but it is displayed as non-standard with Locksmith Fast Disk Backup. Weird!
How to copy
With Advanced Demuffin v1.4
1. Copy T0, T5, T11
2. Enter the monitor and perform the following changes and
B8FD:AD -> 96
B96A:96 -> AD
3. Copy T1-T4
4. Copy T7-T10
4. Copy T12-T22
Weird, T6 cannot be copied. It is an empty track but two ED on S0
How to normalize
With Disk Fixer v4
T0/S2/45:96 -> AD
T0/S2/CD:0C -> 00
T0/S9/1F:AD -> 96
We reboot and it does not run.
Where on the disk is Carmen Secondcheck?
Search for AD EC C0 => nada
Search for BD 8C C0 => on T7
After analysis...
How to bypass the second check (still with Disk Fixer)
T7/S0/00:20 32 3B -> A9 00 EA
T7/S6/D2:AD -> 96 (might not be mandatory as we bypass the call)
T7/SD/0C:AB -> AA (might not be mandatory as we bypass the call)
The disk image is available at http://www.brutaldeluxe.fr/crack/
Reboot and... enjoy,
LoGo
9/2019
Dernière édition par toinet le Mer 04 Sep 2019, 10:20; édité 1 fois |
|
| Revenir en haut de page |
|
 |
toinet
Site Admin
Inscrit le: 15 Juin 2007
Messages: 3055
Localisation: Le Chesnay, France
|
| Posté le: Mer 04 Sep 2019, 10:18 Sujet du message: |
|
|
What is fun with the second check is that the code is relocated. The disassembly below shows code at $6000+ but, the real address is $3B00+.
That is the protection check on T7.
| Code: |
0000:A5 27 LDA $27
0002:18 CLC
0003:20 F7 62 JSR $62F7
0006:B9 0F 64 LDA $640F,Y
0009:20 F3 63 JSR $63F3
000C:E6 26 INC $26
000E:D0 C3 BNE $FFD3
0010:20 F3 63 JSR $63F3
0013:18 CLC
0014:AD 28 64 LDA $6428
0017:29 03 AND #$03
0019:2A ROL
001A:0D 07 60 ORA $6007
001D:AA TAX
001E:BD 80 C0 LDA $C080,X
0021:AE 07 60 LDX $6007
0024:60 RTS
0025:A0 20 LDY #$20
0027:88 DEY
0028:D0 03 BNE $002D
002A:4C 7C 63 JMP $637C
002D:BD 8C C0 LDA $C08C,X
0030:10 FB BPL $002D
0032:CD 0D 60 CMP $600D
0035:D0 F0 BNE $0027
0037:BD 8C C0 LDA $C08C,X
003A:10 FB BPL $0037
003C:CD 0E 60 CMP $600E
003F:D0 F1 BNE $0032
0041:BD 8C C0 LDA $C08C,X
0044:10 FB BPL $0041
0046:CD 0F 60 CMP $600F
0049:D0 E7 BNE $0032
004B:EA NOP
004C:A0 54 LDY #$54
004E:A9 00 LDA #$00
0050:BD 8C C0 LDA $C08C,X
0053:10 FB BPL $0050
0055:EA NOP
0056:88 DEY
0057:D0 F7 BNE $0050
0059:BD 8C C0 LDA $C08C,X
005C:10 FB BPL $0059
005E:EA NOP
005F:C8 INY
0060:D0 F7 BNE $0059
0062:BD 8C C0 LDA $C08C,X
0065:10 FB BPL $0062
0067:A4 2A LDY $2A
0069:D0 05 BNE $0070
006B:CD 03 60 CMP $6003
006E:D0 2C BNE $009C
0070:BD 8C C0 LDA $C08C,X
0073:10 FB BPL $0070
0075:A4 2A LDY $2A
0077:D0 05 BNE $007E
0079:CD 04 60 CMP $6004
007C:D0 1E BNE $009C
007E:BD 8C C0 LDA $C08C,X
0081:10 FB BPL $007E
0083:EA NOP
0084:EA NOP
0085:EA NOP
0086:BD 8C C0 LDA $C08C,X
0089:10 FB BPL $0086
008B:CD 10 60 CMP $6010
008E:D0 0C BNE $009C
0090:BD 8C C0 LDA $C08C,X
0093:10 FB BPL $0090
0095:CD 11 60 CMP $6011
0098:D0 02 BNE $009C
009A:18 CLC
009B:60 RTS
009C:38 SEC
009D:60 RTS
009E:A0 FC LDY #$FC
00A0:84 26 STY $26
00A2:C8 INY
00A3:D0 04 BNE $00A9
00A5:E6 26 INC $26
00A7:F0 68 BEQ $0111
00A9:BD 8C C0 LDA $C08C,X
00AC:10 FB BPL $00A9
00AE:CD 08 60 CMP $6008
00B1:F0 04 BEQ $00B7
00B3:C9 D5 CMP #$D5
00B5:D0 EB BNE $00A2
00B7:BD 8C C0 LDA $C08C,X
00BA:10 FB BPL $00B7
00BC:CD 09 60 CMP $6009
00BF:F0 04 BEQ $00C5
00C1:C9 AA CMP #$AA
00C3:D0 E9 BNE $00AE
00C5:A0 03 LDY #$03
00C7:BD 8C C0 LDA $C08C,X
00CA:10 FB BPL $00C7
00CC:CD 0A 60 CMP $600A
00CF:F0 04 BEQ $00D5
00D1:C9 96 CMP #$96 ; was AD
00D3:D0 D9 BNE $00AE
00D5:A9 00 LDA #$00
00D7:85 27 STA $27
00D9:BD 8C C0 LDA $C08C,X
00DC:10 FB BPL $00D9
00DE:2A ROL
00DF:85 26 STA $26
00E1:BD 8C C0 LDA $C08C,X
00E4:10 FB BPL $00E1
00E6:25 26 AND $26
00E8:99 29 00 STA $0029,Y
00EB:45 27 EOR $27
00ED:88 DEY
00EE:10 E7 BPL $00D7
00F0:A8 TAY
00F1:D0 1E BNE $0111
00F3:BD 8C C0 LDA $C08C,X
00F6:10 FB BPL $00F3
00F8:CD 0B 60 CMP $600B
00FB:F0 04 BEQ $0101
00FD:C9 DE CMP #$DE
00FF:D0 10 BNE $0111
0101:BD 8C C0 LDA $C08C,X
0104:10 FB BPL $0101
0106:CD 0C 60 CMP $600C
0109:F0 04 BEQ $010F
010B:C9 AA CMP #$AA ; was EB
010D:D0 02 BNE $0111
010F:18 CLC
0110:60 RTS
0111:38 SEC
0112:60 RTS
0113:A2 11 LDX #$11
0115:CA DEX
0116:D0 FD BNE $0115
0118:E6 2D INC $2D
011A:D0 02 BNE $011E
011C:E6 2E INC $2E
011E:38 SEC
011F:E9 01 SBC #$01
0121:D0 F0 BNE $0113
0123:60 RTS
0124:00 BRK
0125:00 BRK
0126:00 BRK
0127:01 30 ORA ($30,X)
0129:28 PLP
012A:24 20 BIT $20
012C:1E 1D 1C ASL $1C1D,X
012F:70 2C BVS $015D
0131:26 22 ROL $22
0133:1F @@@
0134:1E 1D 1C ASL $1C1D,X
|
|
|
| Revenir en haut de page |
|
|
|
|
Vous ne pouvez pas poster de nouveaux sujets dans ce forum
Vous ne pouvez pas répondre aux sujets dans ce forum
Vous ne pouvez pas éditer vos messages dans ce forum
Vous ne pouvez pas supprimer vos messages dans ce forum
Vous ne pouvez pas voter dans les sondages de ce forum
|
|
FAQ 
Rechercher 
Liste des Membres 
Groupes d'utilisateurs
S'enregistrer
Profil 
Se connecter pour vérifier ses messages privés 
Connexion 
