-----------World Atlas Action---------- A 4am crack 2015-05-12 --------------------------------------- Name: World Atlas Action: Map Activities Genre: educational Year: 1985 Authors: - Jerry Chaffin - Bill Maxwell - Barbra Thompson - Allen Colebank - Educational Information Systems Publisher: Developmental Learning Materials (DLM) Media: single-sided 5.25-inch floppy OS: Diversi-DOS (T02,S02 has the string "C1983 DSR" backwards) Other versions: uncredited crack on Asimov Identical cracks: Freddy's Puzzling Adventures (4am crack no. 288) ~ Chapter 0 In Which Various Automated Tools Fail In Interesting Ways COPYA immediate disk read error Locksmith Fast Disk Backup unable to read any track EDD 4 bit copy (no sync, no count) works Copy ][+ nibble editor all tracks use standard prologues (address: D5 AA 96, data: D5 AA AD) but modified epilogues (address: AA DE EB, data: AA DE EB) Disk Fixer ["O" -> "Input/Output Control"] set Address Epilogue to "AA DE EB" set Data Epilogue to "AA DE EB" Success! All tracks readable! T00 -> looks like a DOS 3.3 RWTS T11 -> DOS 3.3 disk catalog T01,S09 -> startup program is "HELLO" Why didn't COPYA work? modified epilogue bytes (every track) Why didn't Locksmith FDB work? modified epilogue bytes (every track) Next steps: 1. AUTOTRACE to capture RWTS 2. Advanced Demuffin to convert disk to standard format 3. Post-Demuffin Patcher to patch the RWTS (if necessary) ~ Chapter 1 In Which We Attempt To Use The Original Disk As A Weapon Against Itself [S6,D1=original disk] [S6,D2=blank disk] [S5,D1=my work disk] ]PR#5 CAPTURING BOOT0 ...reboots slot 6... ...reboots slot 5... SAVING BOOT0 CAPTURING BOOT1 ...reboots slot 6... ...reboots slot 5... SAVING BOOT1 SAVING RWTS ]BRUN ADVANCED DEMUFFIN 1.5 ["5" to switch to slot 5] ["R" to load a new RWTS module] --> At $B8, load "RWTS" from drive 1 ["6" to switch to slot 6] ["C" to convert disk] --v-- ADVANCED DEMUFFIN 1.5 (C) 1983, 2014 ORIGINAL BY THE STACK UPDATES BY 4AM =======PRESS ANY KEY TO CONTINUE======= TRK:................................... +.5: 0123456789ABCDEF0123456789ABCDEF012 SC0:................................... SC1:................................... SC2:................................... SC3:................................... SC4:................................... SC5:................................... SC6:................................... SC7:................................... SC8:................................... SC9:................................... SCA:................................... SCB:................................... SCC:................................... SCD:................................... SCE:................................... SCF:................................... ======================================= 16SC $00,$00-$22,$0F BY1.0 S6,D1->S6,D2 --^-- ]PR#5 ]CATALOG,S6,D2 C1983 DSR^C#254 024 FREE B 006 H B 004 BOXES.PAC B 002 WONAME B 015 CWORLD.PAC T 003 WORLD.NAMES B 003 RENAME B 008 USE.OBJ0 B 017 RUNTIME B 005 INTABLE B 003 CWORLD.COR B 024 SCTABLE B 002 SYMBOLS.PAC T 005 HT B 017 SC.SCR B 013 PLOTCON1 B 003 CONAME B 003 REFILE0 B 003 COFILE0 B 013 PLOTCON2 B 029 SAVER.OBJ B 004 START.OBJ B 010 USMENU.OBJ B 009 CONSEL.OBJ B 013 PLOTCON3 B 002 EISK B 012 PLOTCON4 B 010 OPP.OBJ T 002 RENAMES B 003 WOFILE1 B 056 EDIT.OBJ B 015 RESCRNS2 B 008 RESCRNS3 B 009 LOGO2.SCR B 015 RESCRNS1 B 009 LIB B 054 GAME.OBJ B 008 USRMAT.OBJ B 005 EBOOT.OBJ B 003 COFILE1 B 003 REFILE1 B 003 WOFILE2 B 003 WOFILE4 B 003 REFILE2 B 003 REFILE3 B 003 REFILE4 B 003 REFILE5 B 003 COFILE5 B 003 WOFILE3 B 003 COFILE2 B 004 WOFILE5 B 003 COFILE3 B 003 COFILE4 T 005 CON.NAMES A 002 HELLO ]RUN HELLO ...works... [S6,D1=demuffin'd copy] ]PR#6 ...grinds... ~ Chapter 2 In Which We Remove All Traces Of Copy Protection Using An Automated Tool That I Wrote For Just Such An Occasion [S6,D1=demuffin'd copy] [S5,D1=my work disk] ]PR#5 ]BRUN PDP T00,S03,$91 change AA to DE T00,S03,$9B change DE to AA T00,S03,$35 change AA to DE T00,S03,$3F change DE to AA T00,S06,$AE change AA to DE T00,S06,$B3 change DE to AA T00,S02,$9E change AA to DE T00,S02,$A3 change DE to AA ]PR#6 ...works... Quod erat liberandum. --------------------------------------- A 4am crack No. 307 ------------------EOF------------------