|
|
IDENTIFICATION SERVEUR : 10.14.20.36 - CLIENT : 3.221.159.255 |
|
Voir le sujet précédent :: Voir le sujet suivant |
Auteur |
Message |
toinet Site Admin
Inscrit le: 15 Juin 2007 Messages: 3062 Localisation: Le Chesnay, France
|
Posté le: Dim 21 Juil 2019, 16:44 Sujet du message: Un repas francais (DC Heat, 1984) |
|
|
#1015 - A disk imaged by 4am at Kansasfest 2019. Thank you for the disk images. It is an eduware to learn French using food and friends.
Disk structure
It appears to be two single-sided DOS 3.3 16-sec disk. T22 cannot be read. The usual VTOC on T11/S0 is on T16/S0. The catalog is on T11/SF (and that is normal)
Protection type
A deeper analysis with the nibble editor of Copy II Plus shows that:
- T22 is formatted with FF nibbles only, its length is less than $1000 bytes
- T23 is formatted with AA nibbles only, its length is less than $1000 bytes
A perfect place for nibble or nibble length on-disk protection check.
How to copy
Boot my copy disk. Launch Advanced Demuffin 1.4. Press P to bypass boot.
Format a disk on D2.
Convert 16-sec disk from T0/S0 to T21/SF of both sides.
An alt. way is to use Locksmith Fast Disk Backup to copy both sides.
Is there a protection check?
With Disk Fixer, we search for BD 8C C0 on the two sides.
We find a couple of answers on T1/SC, and that is not normal, so there's a protection check here! Standard uses of BD 8C C0 is on T0.
The protection check is described later in the thread.
We understand from the code that it lies at $AD37.
It is called at $AD2B on T1/SC.
But $AD2B is not called.
So, there is a protection check but I see no call to it.
As the call may happen later in the eduware, we'll patch the entry point.
How to normalize
On side 1, using Disk Fixer
On side 2, there are no actions to perform.
The disk images are available at http://www.brutaldeluxe.fr/crack/
Reboot and... enjoy,
LoGo
7/2019
Dernière édition par toinet le Lun 22 Juil 2019, 19:51; édité 1 fois |
|
Revenir en haut de page |
|
 |
toinet Site Admin
Inscrit le: 15 Juin 2007 Messages: 3062 Localisation: Le Chesnay, France
|
Posté le: Dim 21 Juil 2019, 16:44 Sujet du message: |
|
|
The on-disk protection check on T1/SC
Code: |
0037:A5 FD LDA $FD
0039:48 PHA
003A:A5 FE LDA $FE
003C:48 PHA
003D:20 E3 03 JSR $03E3
0040:84 FD STY $FD
0042:85 FE STA $FE
0044:A0 04 LDY #$04
0046:A9 22 LDA #$22 ; go to T22
0048:91 FD STA ($FD),Y
004A:A0 0C LDY #$0C
004C:A9 00 LDA #$00
004E:91 FD STA ($FD),Y
0050:A9 60 LDA #$60
0052:8D 4D BE STA $BE4D
0055:20 E3 03 JSR $03E3
0058:20 D9 03 JSR $03D9
005B:A9 BD LDA #$BD
005D:8D 4D BE STA $BE4D
0060:B0 65 BCS $00C7
0062:BD 8C C0 LDA $C08C,X ; read
0065:10 FB BPL $0062
0067:48 PHA
0068:68 PLA
0069:C9 D5 CMP #$D5
006B:D0 F5 BNE $0062
006D:A0 00 LDY #$00
006F:8C D1 AD STY $ADD1 ; counter
0072:BD 8C C0 LDA $C08C,X
0075:10 FB BPL $0072
0077:C9 D5 CMP #$D5
0079:F0 0F BEQ $008A
007B:C9 F7 CMP #$F7
007D:D0 01 BNE $0080
007F:C8 INY
0080:18 CLC
0081:6D D1 AD ADC $ADD1
0084:8D D1 AD STA $ADD1
0087:4C 72 AD JMP $AD72
008A:98 TYA
008B:F0 E0 BEQ $006D
008D:BD 8C C0 LDA $C08C,X
0090:10 FB BPL $008D
0092:48 PHA
0093:68 PLA
0094:C9 FF CMP #$FF
0096:F0 F5 BEQ $008D
0098:C9 D5 CMP #$D5
009A:F0 36 BEQ $00D2
009C:A0 05 LDY #$05
009E:BD 8C C0 LDA $C08C,X
00A1:10 FB BPL $009E
00A3:48 PHA
00A4:68 PLA
00A5:88 DEY
00A6:D0 F6 BNE $009E
00A8:BD 8C C0 LDA $C08C,X
00AB:10 FB BPL $00A8
00AD:48 PHA
00AE:68 PLA
00AF:C9 FF CMP #$FF
00B1:F0 F5 BEQ $00A8
00B3:C9 D5 CMP #$D5
00B5:D0 1B BNE $00D2
00B7:BD 8C C0 LDA $C08C,X
00BA:10 FB BPL $00B7
00BC:C9 FF CMP #$FF
00BE:D0 12 BNE $00D2
00C0:AD D1 AD LDA $ADD1
00C3:C9 10 CMP #$10
00C5:D0 0B BNE $00D2
00C7:68 PLA ; we're good
00C8:85 FE STA $FE
00CA:68 PLA
00CB:85 FD STA $FD
00CD:BD 88 C0 LDA $C088,X
00D0:60 RTS
00D1:00 BRK ; counter
00D2:A2 A0 LDX #$A0 ; we have a copy
00D4:8A TXA
00D5:99 FF FF STA $FFFF,Y
00D8:C8 INY
00D9:D0 FA BNE $00D5
00DB:EE D7 AD INC $ADD7
00DE:CA DEX
00DF:D0 F4 BNE $00D5
00E1:A0 17 LDY #$17
00E3:B9 F7 AD LDA $ADF7,Y
00E6:49 BB EOR #$BB ; decypher
00E8:99 07 07 STA $0707,Y
00EB:88 DEY
00EC:10 F5 BPL $00E3
00EE:AD 54 C0 LDA $C054
00F1:AD 51 C0 LDA $C051
00F4:78 SEI
00F5:30 FE BMI $00F5
The code is followed by a string of chars:
THIS IS A DEFECTIVE DISK
|
|
|
Revenir en haut de page |
|
 |
|
|
Vous ne pouvez pas poster de nouveaux sujets dans ce forum Vous ne pouvez pas répondre aux sujets dans ce forum Vous ne pouvez pas éditer vos messages dans ce forum Vous ne pouvez pas supprimer vos messages dans ce forum Vous ne pouvez pas voter dans les sondages de ce forum
|
|