|
|
IDENTIFICATION SERVEUR : 10.14.20.115 - CLIENT : 3.238.186.43 |
|
Voir le sujet précédent :: Voir le sujet suivant |
Auteur |
Message |
toinet Site Admin
Inscrit le: 15 Juin 2007 Messages: 3074 Localisation: Le Chesnay, France
|
Posté le: Mer 22 Juil 2020, 21:14 Sujet du message: Intermediate Algebra (The Math Lab, 1985) |
|
|
#1034 - The Math Lab - Intermediate Algebra is a math eduware by Charles W. Avery and Charles B. Barker, from Cupertino, California, published in 1984/1985.
What is pretty funny is that I was telling DiskBlitz about my current crack. He asked which title it was. I answered and he then asked if I was using his .a2r file for my crack. It was not: while DiskBlitz was imaging his copy, I was cracking the title from my own original disk.
Disk structure
The disk seems to be a DOS 3.3 double-sided disk. When one boots it, the sound is familiar. An analysis with Locksmith Fast Disk Backup shows that the disk is on-disk protected.
Protection type
An analysis with the bitcopier of Copy II + shows that the protection lies in a change of the epilog markers of the address field: D5AA96 ABFF (instead of DEAA)
A further analysis shows data on T23. An extra disk? A nibble count or check? Let's see...
How to copy
Boot my copy disk.
Launch Advanced Demuffin 1.4
Press P to bypass boot
Enter the monitor
B98B:18 60 EA
Press ctrl-Y to return
Copy both sides
How to crack
The boot program is XMGPRT on both sides. The file contains the check of the nibbles on disk. If the disk is an original one, it launches the HELLO file, otherwise it crashes.
Boot my copy disk
Launch Copy II Plus
Change boot program from XMGPRT to HELLO on both sides.
The disk images are available at http://www.brutaldeluxe.fr/crack/
Reboot and... enjoy,
LoGo
7/2020 |
|
Revenir en haut de page |
|
 |
toinet Site Admin
Inscrit le: 15 Juin 2007 Messages: 3074 Localisation: Le Chesnay, France
|
Posté le: Mer 22 Juil 2020, 21:18 Sujet du message: |
|
|
That is the XMGPRT file where the on-disk check lies:
Code: |
----------- DISASSEMBLY MODE -----------
0004:20 E3 03 JSR $03E3
0007:85 FB STA $FB
0009:84 FA STY $FA
000B:A9 C5 LDA #$C5
000D:48 PHA
000E:A9 00 LDA #$00
0010:85 FC STA $FC
0012:A2 03 LDX #$03
0014:BC 4C 90 LDY $904C,X
0017:91 FA STA ($FA),Y
0019:CA DEX
001A:10 F8 BPL $0014
001C:8A TXA
001D:48 PHA
001E:20 3C 90 JSR $903C
0021:A0 01 LDY #$01
0023:B1 FA LDA ($FA),Y
0025:AA TAX
0026:20 6B 90 JSR $906B ; check disk
0029:68 PLA
002A:68 PLA
002B:A0 00 LDY #$00
002D:84 FE STY $FE
002F:B9 50 90 LDA $9050,Y
0032:09 80 ORA #$80
0034:20 39 90 JSR $9039
0037:A4 FE LDY $FE
0039:C8 INY
003A:4C 29 90 JMP $9029
003D:6C 36 00 JMP ($0036)
0040:20 E3 03 JSR $03E3
0043:20 D9 03 JSR $03D9
0046:A9 00 LDA #$00
0048:85 48 STA $48
004A:90 03 BCC $004F
004C:4C FA 90 JMP $90FA
004F:60 RTS
0050:08 PHP
0051:04 0C TSB $0C
0053:03 @@@
0054:04 52 TSB $52 ; RUN HELLO
0056:55 4E EOR $4E,X
0058:20 48 45 JSR $4548
005B:4C 4C 4F JMP $4F4C
005E:20 20 20 JSR $2020
0061:20 20 20 JSR $2020
0064:20 20 20 JSR $2020
0067:20 20 20 JSR $2020
006A:20 20 20 JSR $2020
006D:0D 00 ORA $00
006F:BD 89 C0 LDA $C089,X
0072:A9 56 LDA #$56
0074:85 FD STA $FD
0076:A9 08 LDA #$08
0078:C6 FC DEC $FC
007A:D0 04 BNE $0080
007C:C6 FD DEC $FD
007E:F0 7E BEQ $00FE
0080:BC 8C C0 LDY $C08C,X
0083:10 FB BPL $0080
0085:C0 FB CPY #$FB
0087:D0 ED BNE $0076
0089:F0 00 BEQ $008B
008B:EA NOP
008C:EA NOP
008D:BC 8C C0 LDY $C08C,X
0090:C0 08 CPY #$08
0092:2A ROL
0093:B0 0B BCS $00A0
0095:BC 8C C0 LDY $C08C,X
0098:10 FB BPL $0095
009A:C0 FF CPY #$FF
009C:D0 D8 BNE $0076
009E:F0 EB BEQ $008B
00A0:BC 8C C0 LDY $C08C,X
00A3:10 FB BPL $00A0
00A5:84 FC STY $FC
00A7:C9 0A CMP #$0A
00A9:D0 CB BNE $0076
00AB:BD 8C C0 LDA $C08C,X
00AE:10 FB BPL $00AB
00B0:38 SEC
00B1:2A ROL
00B2:25 FC AND $FC
00B4:49 FF EOR #$FF
00B6:D0 46 BNE $00FE
00B8:DD 88 C0 CMP $C088,X
00BB:A0 03 LDY #$03
00BD:B9 D8 90 LDA $90D8,Y
00C0:99 2E B9 STA $B92E,Y
00C3:88 DEY
00C4:D0 F7 BNE $00BD
00C6:A0 03 LDY #$03
00C8:B9 D8 90 LDA $90D8,Y
00CB:99 8A B9 STA $B98A,Y
00CE:88 DEY
00CF:D0 F7 BNE $00C8
00D1:A0 1E LDY #$1E
00D3:B9 DB 90 LDA $90DB,Y
00D6:99 DE BC STA $BCDE,Y
00D9:88 DEY
00DA:D0 F7 BNE $00D3
00DC:60 RTS
00DD:4C DF BC JMP $BCDF
00E0:BD 8C C0 LDA $C08C,X
00E3:10 FB BPL $00E0
00E5:C9 AB CMP #$AB
00E7:F0 06 BEQ $00EF
00E9:C9 DE CMP #$DE
00EB:F0 02 BEQ $00EF
00ED:38 SEC
00EE:60 RTS
00EF:BD 8C C0 LDA $C08C,X
00F2:10 FB BPL $00EF
00F4:C9 FF CMP #$FF
00F6:F0 04 BEQ $00FC
00F8:C9 AA CMP #$AA
00FA:D0 F1 BNE $00ED
00FC:18 CLC ; original disk
00FD:60 RTS
00FE:A8 TAY
00FF:DD 88 C0 CMP $C088,X ; we have a copy
0102:68 PLA
0103:68 PLA
0104:99 00 90 STA $9000,Y
0107:C8 INY
0108:C0 00 CPY #$00
010A:D0 F8 BNE $0104
010C:60 RTS
|
|
|
Revenir en haut de page |
|
 |
|
|
Vous ne pouvez pas poster de nouveaux sujets dans ce forum Vous ne pouvez pas répondre aux sujets dans ce forum Vous ne pouvez pas éditer vos messages dans ce forum Vous ne pouvez pas supprimer vos messages dans ce forum Vous ne pouvez pas voter dans les sondages de ce forum
|
|