105 lines
3.6 KiB
Erlang
105 lines
3.6 KiB
Erlang
|
|
***************************************
|
|
* *
|
|
* *
|
|
* KRAKOWICZ'S KRACKING KORNER IV *
|
|
* *
|
|
* *
|
|
* *
|
|
* *
|
|
* *
|
|
* THE ARCADE MACHINE *
|
|
* *
|
|
* *
|
|
* *
|
|
* WITH NOTES ON NMI AND IDSI'S JUGGLER*
|
|
* *
|
|
* *
|
|
* *
|
|
***************************************
|
|
|
|
|
|
|
|
|
|
AFTER A NINE-MONTH DELAY, BR0DERBUND HAS FINALLY RELEASED THE ARCADE MACHINE
|
|
(A.M.). THE PROTECTION SCHEME IS A NEW CHALLENGE FOR COPIERS, SINCE IT USES
|
|
THE TECHNIQUE KNOWN AS SPIRALING OR QUARTER-TRACKING, AS WELL AS THE STANDARD
|
|
BR0DERBUND SYSTEM OF A NEW ADDRESS MARKER FOR EACH TRACK. AN ATTEMPT TO COPY
|
|
THE DISK WITH A CONVENTIONAL NIBBLE COPIER QUICKLY REVEALS THAT TRACKS 0 AND
|
|
3-11 ARE EASILY COPIED WITH AN ADDRESS MARKER OF D5 AA 96, WHILE THE REST OF
|
|
THE TRACKS ARE A MYSTERY. PROBING INTO THE LOADER REVEALS THE FOLLOWING
|
|
INFORMATION ABOUT TRACK USAGE:
|
|
|
|
TRACK CONTENTS
|
|
----- --------
|
|
|
|
T0/S0 PRELOADER --> 800-8FF
|
|
(AS ALWAYS)
|
|
/S1-5 LOADER --> 300-7FF
|
|
|
|
T1-2 HIRES SPLIT "BR0DERBUND"
|
|
LOGO AND PROGRAM
|
|
|
|
T12-20 MAIN PROGRAM WHICH LOADS
|
|
INTO 800-BFFF
|
|
|
|
T12-13.5 FOUR HALFTRACKS USED FOR
|
|
QUARTER-TRACKING
|
|
|
|
T3-4 #1 SHAPE CREATOR
|
|
|
|
T5-6 #2 PATH CREATOR
|
|
|
|
T7-8 #3 GAME OPTIONS
|
|
|
|
T9-A #4 LEVEL OPTIONS
|
|
|
|
TC-D #5 BKGD/TITLE CREATOR
|
|
|
|
TE-F #6 LOAD/SAVE GAME
|
|
|
|
T10-11 #7 CREATE GAME DISK
|
|
|
|
(OPTION #8 JUMPS TO 0800
|
|
TO RUN THE GAME)
|
|
|
|
|
|
THE APPROACH TO KRACKING THIS TYPE OF PROGRAM SEEMS STRAIGHTFORWARD:LOAD THE
|
|
PROGRAM INTO MEMORY, RESET IT, AND SAVE IT OUT TO DISK AS A BINARY FILE, WITH
|
|
THE APPROPRIATE MEMORY MOVES. HOPEFULLY, YOU'LL LOCATE THE STARTING ADDRESS
|
|
AND BE ABLE TO RUN THE BINARY FILE AT WILL. IF YOU WISH TO INCLUDE ALL OF THE
|
|
ADVERTISING FOR BR0DERBUND AT THE BEGINNING, THIS WORKS. IF YOU TRY TO DELETE
|
|
THE DUAL BANNER, IT CRASHES. THE REASON IS THAT MODULE SWITCHING IS VIA THE
|
|
STACK--THEY PUSH THE CORRECT LOCATION ONTO THE STACK AND DO AN RTS. SO, UNLESS
|
|
YOU HAPPEN TO KNOW THE VALUE OF THE PROGRAM COUNTER (THAT IS, EXACTLY WHAT THE
|
|
ADDRESS WAS WHEN YOU STOPPED), THE STACK POINTER (S) AND THE PROCESSOR STATUS
|
|
WORD (P), AND RESTORE THEM EXACTLY AS THEY WERE BEFORE THE RESET, THE PROGRAM
|
|
PROBABLY WON'T RUN. ANYONE WHO TRIED TO BREAK JUGGLER FOUND THIS TO BE
|
|
FRUSTRATING IN THE EXTREME, SINCE SOMETIMES THE GAME WOULD RUN ALL THE WAY
|
|
THROUGH THE FIRST LEVEL BEFORE CRASHING - THE SAME TECHNIQUE WAS USED THERE,
|
|
BUT WITH EVEN MORE PROTECTION.
|
|
|
|
THERE IS A HARD WAY AND AN EASY WAY TO DO EVERYTHING, AND IF YOU ARE
|
|
COMPLETELY RESTRICTED TO SOFTWARE DEVICES, IT IS STILL POSSIBLE TO BREAK ARCADE
|
|
MACHINE. REFERRING TO THE NIBBLE ALTERATION TECHNIQUES DESCRIBED IN THE
|
|
PREVIOUS EPISODE, IT IS POSSIBLE TO LOCATE AND ALTER THE GAME LOADER SO THAT IT
|
|
HALTS WITH CONDITIONS WELL DEFINED AFTER THE ENTIRE PROGRAM IS IN MEMORY. IF
|
|
IT IS YOUR PURPOSE IN LIFE TO LEARN AS MUCH AS YOU POSSIBLY CAN ABOUT DISK
|
|
PROTECTION SCHEMES AND THE CIRCUMVENTION THEREOF (ONLY A FEW REALLY CRAZY
|
|
PEOPLE ARE SO INCLINED), THIS IS REWARDING. IF YOU ARE INTERESTED IN PREPARING
|
|
AN UNPROTECTED VERSION OF THE GAME WITH MINUMUM ADVERTISING AND MINIMUM EFFORT,
|
|
HOWEVER, THERE IS AN EASIER WAY.
|
|
|
|
THIS SOLUTION IS ELEGANT, BUT REQUIRES A VISIT TO THAT GOD OF THE UNDERWORLD
|
|
=>HARDWARE<=. B
|
|
|
|
PLEASE PLACE ANY NEW KRAKING TIPS
|
|
OR TECNIQUES ON THE KRACKING BOARD.
|
|
|
|
|
|
[\/][\/][\/][\/][\/][\/][\/][\/][\/]
|
|
|
|
USS ENTERPRISE I
|
|
318-367-8860
|
|
|
|
|