rapid1337.com

Future Basketball

2004-12-20 · [ security ] · by staff

You will need following:

<-- Advanced Destroyer | [ Security ]

[ read in diskmag ]


Future Basketball ? Hewson You will need following:

  1. Original game ? find on emunova.net

  2. An Amiga or WINUAE

  3. Action Replay or ROM image

  4. Pencil and paper

Start by making a copy of original game disk. This is to determine type of protection.

You?ll notice an error on track 0. This is some type of a disk based protection, where you can?t duplicate a specially written track, probably a copylock.

When you boot copy of game, it almost crashes instantly. This might be an encrypted boot block. If the copylock passes, it decrypts and executes a new boot block.

Insert original game and enter AR immediately after boot. Copylock starts with a ? PEA $$$$ ?, search for the opcodes:

F 48 7A. AR returns two addresses with $10 between, a typically sign for a copylock.

1.gif

See copylock with N 59E8 and hit enter a few times. Lot?s of encrypted code?

Exit AR and wait for the game to continue to load. When that happens, enter AR again and see address 59E8 with N 59E8 + enter. Looks like a new boot block appeared…

2.gif

Transfer boot block to address 70000: TRANS 59E8 5DE8 70000.

Correct boot block checksum, or game won?t boot: BOOTCHK 70000.

3.gif

Write new boot block back: WT 0 1 70000.

4.gif

Rob

#amiga #cracking #track-protection


<-- Advanced Destroyer | [ Security ] | Assassin -->