hackzapple

The protection routine at $1500. A standard desynchro from Epyx... *---------------------------------------------------------* * Disassembled with The Flaming Bird Disassembler * * (c) Phoenix corp. 1992,93 - All rights reserved * *---------------------------------------------------------* TYP BIN O...

The boot1 code, which needs to be stopped at $0839. I have to admit I don't remember if the opcode at $839 was $20 (JSR) or $4C (JMP) on the original I played with, sorry... * * Thank you, The Flaming Bird Disassembler * SOFTEV EQU $03F2 PWREDUP EQU $03F4 TXTSET EQU $C051 TXTPAGE1 EQU $C054 ROMIN2 E...

Another Epyx, another desynchro, another great game with a poor protection. A special crack for the FTA Wormz Party 2010 :-) PROTECTION TYPE On a standard DOS 3.3 diskette: - Change of end markers (D5 AA 96, FF FF EB, D5 AA AD, FF FF EB) - Desynchro on track 0 How do I check the marker values? I use...

The following routine, let's call it "patch" is to be entered in the monitor: B700: 20 A0 B9 A0 04 B1 48 A8 B9 00 F8 29 42 D0 02 A9 42 09 B5 8D FC B8 60 BE8B: 4C 00 B7 That patch takes the track number from the IOB table, moves the value in Y, reads the corresponding value from ROM and cal...

Now the data markers per track: MARKER TRACK F7 00 F7 01 F7 02 F7 03 F5 04 F7 05 F7 06 B7 07 F7 08 B7 09 F5 0A F5 0B F7 0C B7 0D F7 0E B7 0F F5 10 F7 11 F7 12 B7 13 F5 14 B7 15 F7 16 B7 17 F5 18 F7 19 F7 1A F5 1B F5 1C F7 1D F7 1E F7 1F F5 20 F7 21 B7 22 And, now, for something completely different,...

Another D&D game from TSR HOBBIES. PROTECTION TYPE On a standard DOS 3.3 diskette with a standard RWTS: - Change of markers: D5 AA 96, DE AA, D5 AA xx where xx depends on the track number, - Change of sync nibble. Instead of FF, the sync nibble is DD. DISK COPY - Launch Advanced Demuffin 1.4 - I...

* Check the PRODUCT.INFO file * if there's something interesting there * then bypass the protection (any ideas ?) JSR L10D8 BCC L0F9E * Check the blocks or call the protection JSR L0FDB BCS L0FA5 * If I am here, then I have an original (ahem) L0F9E _DrawMenuBar The objective of our change from BCC ...

* * Segment 6 (init) * L0F94 * Check the PRODUCT.INFO file * if there's something interesting there * then bypass the protection (any ideas ?) JSR L10D8 BCC L0F9E * Check the blocks or call the protection JSR L0FDB BCS L0FA5 * If I am here, then I have an original (ahem) L0F9E _DrawMenuBar L0FA5 JS...

In a series of 3, MECC provided students with a great desktop interface program to create books from the title page to the last page. Inclusion of pictures and several other elements (e.g. borders) is possible. Nevertheless, each program is protected and displays an alert message "Please insert...

* * ENTRY POINT * * L0FB7 is the quit flag (true or false) L57CE STZ L0FB7 PHA PHA PEA ^L5AB1 PEA L5AB1 _GetNewModalDialog PLA STA L5AAD PLA STA L5AAD+2 JSR L5874 L57EB PHA PEA $0000 PEA $0000 _ModalDialog PLA CMP #$0001 BNE L57EB JSR L5A22 STZ L5904 LDA L5AAD+2 PHA LDA L5AAD PHA PEA $0003 PEA $000...