1795 lines
52 KiB
Plaintext
1795 lines
52 KiB
Plaintext
+-----------------------------------------------------------------------+
|
|
| |
|
|
| -=| Apple IIgs cracks by Brian A. Troha |=- |
|
|
| |
|
|
| All the following cracks were done by me and fully tested. |
|
|
| |
|
|
| The goals for these cracks are (were): |
|
|
| |
|
|
| 1. Don't allow disc based protection to actually read the |
|
|
| disc. This allows for greater hard disk compatibility. |
|
|
| 2. Don't allow any signs of keyword based protection. |
|
|
| 3. Actually work :-) |
|
|
| |
|
|
| This information is presented to allow for the preservation of |
|
|
| Apple IIgs software through back-ups or through emulation. |
|
|
| |
|
|
| NOTE: These cracks were designed for copies of ORIGINAL disks, thus |
|
|
| the Block, Byte, From and To will match up exactly or you have |
|
|
| a different version of the program. |
|
|
| |
|
|
| These edits might not match up with the 2MG images used for |
|
|
| emulation due to issues like disc modification to allow for |
|
|
| self booting or the addition / removal of crack screens. |
|
|
| |
|
|
+-----------------------------------------------------------------------+
|
|
|
|
|
|
|
|
4th & Inches (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$72 $86 20 B5 EA AD B5 EA
|
|
$9A $40 20 B5 EA AD B5 EA
|
|
|
|
|
|
|
|
4th & Inches Team Construction (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
on the original 4th & Inches game disk
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$168 $80 20 55 EC AD 55 EC
|
|
$190 $77 20 55 EC AD 55 EC
|
|
|
|
|
|
|
|
Adventures of Sinbad (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$47A $103 A2 21 80 2C
|
|
|
|
|
|
All About America (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$4E9 $17A A2 21 80 2C
|
|
|
|
|
|
Aesop's Fables (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$349 $B6 A2 21 80 2C
|
|
|
|
|
|
|
|
Ancient Land of Ys (Broderbund)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3BF $64 22 6F 65 00 AF 6F 65 00 <-- Kill call to the check
|
|
$6C 64 E0 A5 E0 64 E0 E6 E0 <-- One = pass in memory flag
|
|
$71 F0 03 EA EA <-- Kill branch to "failed"
|
|
|
|
|
|
|
|
Arkanoid (Taito)
|
|
|
|
Protection: Excessive zero bit detection after D5 CC AA header
|
|
reads zero bits and stores compared matches. Matches
|
|
must be less the #$0D
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$20C $5B 22 73 09 00 AD 73 09 00 <-- Kill call to the check
|
|
$63 22 A3 09 00 AD A3 09 00 <-- Kill call to the check
|
|
$253 $9D 22 89 0C 00 AF 89 0C 00 <-- Kill call to the check
|
|
$A3 2A 2A 85 66 18 EA 64 66 <-- Store a "pass" value
|
|
$3FD $AF 0C 07 03 09 04 04 04 00 <-- Implant passable results
|
|
|
|
|
|
|
|
|
|
Arkanoid II: Revenge of Doh (Taito)
|
|
|
|
Protection: Excessive zero bit detection after D5 CC AA header
|
|
reads zero bits and stores compared matches. Matches
|
|
must be less the #$0D
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$32A $69 22 73 08 00 AD 73 08 00 <-- Kill call to the check
|
|
$73 22 A3 08 00 AD A3 08 00 <-- Kill call to the check
|
|
$A5 22 B6 08 00 AD B6 08 00 <-- Kill call to the check
|
|
$A9 90 09 80 09 <-- Force branch to "pass"
|
|
$3DC $92 0C 07 03 09 04 04 04 00 <-- Implant passable results
|
|
|
|
|
|
|
|
Bard's Tale II (Electronic Arts)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$42E $2F 22 00 A0 00 AF 00 A0 00
|
|
$3E F0 2B 80 2B
|
|
|
|
|
|
|
|
Battle Chess (Interplay)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3D8 $FF 20 DE AA 9C 08 B9 <-- Overwrite call to CP routine with store "pass" value
|
|
|
|
|
|
|
|
Blockout (California Dreams / Logical Designs)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$2B8 $1FB 22 DD 5A 00 AF DD 5A 00
|
|
|
|
|
|
|
|
Bubble Ghost (Accolade)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$17C $174 AD 00 00 9C 00 00 <-- Store a "pass" value
|
|
$177 F0 2E 80 2E <-- Force branch to "pass"
|
|
$1A2 22 00 00 00 AF 00 00 00 <-- Kill call to the check
|
|
|
|
|
|
Calender Crafter (MECC)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$602 $113 20 B5 08 AD B5 08
|
|
|
|
|
|
|
|
California Games (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$D2 $92 20 FB 51 AD FB 51
|
|
$95 90 03 80 03
|
|
|
|
|
|
|
|
Captain Blood (Mindscape)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$AE $87 22 F6 05 06 AF F6 05 06
|
|
$C3 22 2D 06 06 AF 2D 06 06
|
|
$CF 22 F6 05 06 AF F6 05 06
|
|
$D9 22 AD 04 06 AF AD 04 06
|
|
$E4 22 F6 05 06 AF F6 05 06
|
|
$F0 22 2D 06 06 AF 2D 06 06
|
|
$FC 22 F6 05 06 AF F6 05 06
|
|
$106 22 AD 04 06 AF AD 04 06
|
|
$120 22 E3 00 00 AF E3 00 00
|
|
$142 22 4B 03 08 AF 4B 03 08
|
|
$160 22 D7 02 08 AF D7 02 08
|
|
$189 F0 03 82 5A EA EA 82 5A
|
|
|
|
|
|
|
|
Chess Master 2100 (The Software Toolworks)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
For version 1.01 on disk one:
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$4E5 $2C 22 00 00 00 AF 00 00 00
|
|
$61 D0 08 EA EA
|
|
$C5 22 00 00 00 AF 00 00 00
|
|
$118 D0 08 EA EA
|
|
$185 22 00 00 00 AF 00 00 00
|
|
$1D8 D0 08 EA EA
|
|
|
|
For version 1.1 on disk one:
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$304 $1EB 22 00 00 00 AF 00 00 00
|
|
$305 $20 D0 08 EA EA
|
|
$84 22 00 00 00 AF 00 00 00
|
|
$D7 D0 08 EA EA
|
|
$144 22 00 00 00 AF 00 00 00
|
|
$197 D0 08 EA EA
|
|
|
|
|
|
|
|
Club Backgammon (California Dreams / Logical Designs)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$13 $10E 22 01 3E 00 AF 01 3E 00
|
|
|
|
|
|
Cobra Cavern (BPI Software)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$235 $1DE 22 82 7C 00 AF 82 7C 00
|
|
$1E2 C9 0B 00 F0 A9 0B 00 80
|
|
$3F3 $1F 22 82 7C 00 AF 82 7C 00
|
|
$23 C9 0B 00 F0 A9 0B 00 80
|
|
|
|
|
|
|
|
Cribbage / Gin king (The Software Toolworks)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$14E $8D 22 BE CF 00 AF BE CF 00
|
|
$99 D0 03 EA EA
|
|
$2A9 $FD 85 CC EA EA
|
|
$2F5 $1DA 22 BC 8F 00 AF BC 8F 00
|
|
|
|
|
|
|
|
Crystal Quest (Cassidy & Greene)
|
|
|
|
Protection: None really, just asks at every boot "Is this a legal copy"
|
|
Crack: None really, but remove the pop-up question at boot
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$30F $146 20 7A 72 AD 7A 72
|
|
$149 B0 0A EA 18
|
|
|
|
|
|
|
|
Deja-Vu (Mindscape)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$D $55 22 55 E7 00 AF 55 E7 00
|
|
$59 CD BB BE AD BB BE
|
|
$5C F0 08 80 08
|
|
$E $153 22 55 E7 00 AF 55 E7 00
|
|
$157 CD BB BE AD BB BE
|
|
$15A F0 08 80 08
|
|
$23 $142 22 55 E7 00 AF 55 E7 00
|
|
$146 CD BB BE AD BB BE
|
|
$149 F0 08 80 08
|
|
$24 $32 22 55 E7 00 AF 55 E7 00
|
|
$36 CD BB BE AD BB BE
|
|
$39 F0 08 80 08
|
|
$AD 22 55 E7 00 AF 55 E7 00
|
|
$B1 CD BB BE AD BB BE
|
|
$B4 F0 08 80 08
|
|
$189 22 55 E7 00 AF 55 E7 00
|
|
$18D CD BB BE AD BB BE
|
|
$190 F0 08 80 08
|
|
$27 $1EA 22 55 E7 00 AF 55 E7 00
|
|
$1EE 90 70 EA 38
|
|
$1F0 CD BB BE AD BB BE
|
|
$1F3 D0 6B EA EA
|
|
|
|
|
|
|
|
Deja-Vu II (Mindscape)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$14 $188 22 00 00 02 AF 00 00 02
|
|
$18C CD 20 60 AD 20 60
|
|
$18F F0 08 80 08
|
|
$35 $8A 22 00 00 02 AF 00 00 02
|
|
$8E CD 20 60 AD 20 60
|
|
$91 F0 08 80 08
|
|
$185 22 00 00 02 AF 00 00 02
|
|
$189 CD 20 60 AD 20 60
|
|
$18C F0 08 80 08
|
|
$36 $00 22 00 00 02 AF 00 00 02
|
|
$04 CD 20 60 AD 20 60
|
|
$07 F0 08 80 08
|
|
$DD 22 00 00 02 AF 00 00 02
|
|
$E1 CD 20 60 AD 20 60
|
|
$E4 F0 08 80 08
|
|
$39 $16B 22 00 00 02 AF 00 00 02
|
|
$16F B0 70 EA 18
|
|
$171 CD 20 60 AD 20 60
|
|
$1F4 D0 6B EA EA
|
|
|
|
|
|
|
|
Defender of the Crown (Cinemaware Inc.)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$258 $14 20 E3 17 AD E3 17
|
|
|
|
|
|
|
|
Deluxe Paint (Electronic Arts)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$412 $165 22 00 00 00 AF 00 00 00
|
|
$169 A8 F0 02 80 EA EA EA 80
|
|
|
|
|
|
|
|
Designer Puzzles (MECC)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$2B3 $79 20 EC 0A AD EC 0A
|
|
$7C 90 05 80 03
|
|
$7E 20 D1 09 AD D1 09
|
|
$81 B0 07 EA 18
|
|
|
|
|
|
|
|
Destroyer (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Control CP flow and skip over nibble counts (there are 10!!)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3D $5D E2 30 80 38
|
|
$97 B0 0C C2 30
|
|
$267 $1D1 A2 20 80 32
|
|
$268 $05 B0 0C C2 30
|
|
$26E $B9 A2 20 80 32
|
|
$ED B0 0C C2 30
|
|
$272 $131 A2 20 80 32
|
|
$165 B0 0C C2 30
|
|
$273 $13D A2 20 80 32
|
|
$171 B0 0C C2 30
|
|
$278 $7C A2 20 80 32
|
|
$B0 B0 0C C2 30
|
|
$27D $1D3 A2 20 80 32
|
|
$27E $07 B0 0C C2 30
|
|
$284 $128 A2 20 80 32
|
|
$15C B0 0C C2 30
|
|
$28A $64 A2 20 80 32
|
|
$98 B0 0C C2 30
|
|
$295 $119 A2 20 80 32
|
|
$14D B0 0C C2 30
|
|
|
|
|
|
|
|
Downhill Challenge (Broderbund)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$5C8 $9D 08 60 <-- Overwrite start of CP with RTN
|
|
$5CC $AA 00 00 40 1E <-- Implant "pass" value
|
|
|
|
|
|
|
|
Draw Plus v1.0 (Activision)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Branch past copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$516 $34 D0 23 80 21
|
|
|
|
|
|
|
|
Fast Break (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$0A $1E0 22 29 50 02 AF 29 50 02 <-- Kill call to the check
|
|
$1E4 AD 26 00 9C 26 00 <-- Zero = pass in memory flag
|
|
$1E7 F0 04 80 04 <-- Skip over "failed"
|
|
|
|
|
|
|
|
Final Assault (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3BC $D2 22 8B 07 01 AF 8B 07 01 <-- Kill call to the check
|
|
$447 $1A2 AD 97 00 9C 97 00 <-- Zero = pass in memory flag
|
|
$1A5 D0 14 80 1A <-- Branch down to "pass"
|
|
|
|
|
|
|
|
Gauntlet (Mindscape)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$17C $199 22 00 90 00 AF 00 90 00 <-- Kill call to the check
|
|
$19D C9 02 00 A9 02 00 <-- Load "pass" value
|
|
$1A0 D0 03 EA EA <-- Fall through to continue code
|
|
$1A5 D0 FE 80 FB <-- Redirect infinite loop to continue code
|
|
|
|
|
|
|
|
GBA Championship Basketball (Activision)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$240 $13F 20 9D 30 9C 8C 5E <-- Overwrite call to CP with store "Pass" value
|
|
|
|
|
|
|
|
Geometry v1.0 (Broderbund)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines
|
|
|
|
On Disk #2
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$408 $8B 22 00 00 00 AF 00 00 00
|
|
$93 22 8E 0D 00 AF 8E 0D 00
|
|
|
|
On Disk #3
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$E7 $1C6 22 00 00 00 AF 00 00 00
|
|
$1CE 22 8E 0D 00 AF 8E 0D 00
|
|
|
|
|
|
|
|
Gnarly Golf (Britannica)
|
|
|
|
Protection: Read specially formatted block $63F
|
|
Crack: Force CP routine to jump down to "passed" code
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$14F $12A A0 AC 07 4C B5 1F
|
|
|
|
|
|
|
|
Graphics Studio v1.0 (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Set memory locations to "pass" and skip over copy protection
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$31 $14 AD 98 00 9C 98 00 <-- Zero out one memory location
|
|
$17 D0 03 EA EA <-- Fall through to next opcode
|
|
$19 82 D3 00 A9 01 00 <-- Overwrite branch with load "A" with a "pass" value
|
|
$1C A5 F0 85 F0 <-- Store "A" in memory
|
|
$1E F0 03 EA EA <-- Fall through to "continue"
|
|
$4C D0 42 80 35 <-- Branch down to pass & exit
|
|
$98 $1A8 A2 20 80 2C <-- Skip over disc read
|
|
|
|
|
|
|
|
Graphicwriter (DataPak)
|
|
|
|
Version 1.0R
|
|
Protection: Check for bad block on blocks $C - $17
|
|
Crack: Branch past copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$168 $FB F0 03 4C 80 4F 4C
|
|
|
|
Version 1.1R
|
|
Protection: Check for bad block on block $634
|
|
Crack: Branch past copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$45C $FC F0 03 4C 80 51 4C
|
|
|
|
Version 2.0
|
|
Protection: Check for bad block on block $634
|
|
Crack: Branch past copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$471 $79 F0 03 4C 80 50 4C
|
|
|
|
|
|
|
|
Grand Prix Circuit (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------F E9 B1 04
|
|
|
|
|
|
|
|
Hacker II (Activision)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3D3 $7D F0 13 EA EA
|
|
$3D8 $3C 22 EA B7 00 AF EA B7 00
|
|
$43 D0 06 EA EA
|
|
$451 $7D F0 13 EA EA
|
|
$456 $3C 22 EA B7 00 AF EA B7 00
|
|
$43 D0 06 EA EA
|
|
|
|
Later version compatible with the GS 03 rom:
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3BC $7D F0 13 EA EA
|
|
$3C1 $3C 22 EA B7 00 AF EA B7 00
|
|
$43 D0 06 EA EA
|
|
$454 $7D F0 13 EA EA
|
|
$459 $3C 22 EA B7 00 AF EA B7 00
|
|
$43 D0 06 EA EA
|
|
|
|
|
|
|
|
Hostage (Accolade)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine & force branch to pass
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$1B6 $57 22 41 21 05 AF 41 21 05 <-- Kill call to the check
|
|
$1ED $16F F0 0C 80 0C <-- Force branch to "passed"
|
|
|
|
|
|
|
|
Instant Music (Electronic Arts)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$111 $5E 22 00 00 00 AF 00 00 00
|
|
$62 A8 F0 02 80 EA EA EA 80
|
|
|
|
|
|
|
|
Imposible Mission 2 (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine & force code
|
|
to store a "pass" value in memory
|
|
|
|
Version 1.0 - On Disk #2
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3A6 $105 70 03 80 0D <-- Redirect branch to force pass value
|
|
$3AE $3A 22 D8 4A 00 AF D8 4A 00 <-- Kill call to the check
|
|
|
|
|
|
|
|
Jack Nicklaus' 18 Holes of Major Championship Golf (Accolade)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$92 $7F F0 04 80 04 <-- Branch over CP routine
|
|
$1B6 $81 22 BA 03 00 AF BA 03 00 <-- Kill call to the check anyways
|
|
|
|
|
|
|
|
Jigsaw! (Britannica Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$26 $130 A2 21 80 2C
|
|
|
|
|
|
|
|
Kinderama (Unicorn Software)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routine & branch to pass code
|
|
|
|
On disk one:
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$220 $21 22 5B 33 00 AF 5B 33 00
|
|
$24 B0 07 80 07
|
|
$224 $4A 22 CF 2F 00 AF CF 2F 00
|
|
$225 $6C 22 48 38 00 AF 48 38 00
|
|
$77 D0 03 80 0D
|
|
|
|
On disk two:
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$4E2 $21 22 5B 33 00 AF 5B 33 00
|
|
$24 B0 07 80 07
|
|
$4E6 $4A 22 CF 2F 00 AF CF 2F 00
|
|
$51E $6C 22 48 38 00 AF 48 38 00
|
|
$77 D0 03 80 0D
|
|
|
|
|
|
|
|
King of Chicago (Cinemaware Inc.)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$508 $1DF AD 26 00 9C 26 00 <-- Zero = pass in memory flag
|
|
$1E2 F0 39 80 39 <-- Skip down to end of CP
|
|
$573 $10D 0B 6B <-- Overwrite start of CP with RTL
|
|
$627 $1B4 22 54 01 01 AF 54 01 01 <-- Kill call to the check
|
|
|
|
|
|
|
|
King's Quest 1 (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$A0 $B7 22 00 00 00 AF 00 00 00
|
|
|
|
|
|
King's Quest II (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routines
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$25F $17B 22 00 00 00 AF 00 00 00
|
|
$267 $166 22 00 00 00 AF 00 00 00
|
|
$2ED $BF 22 00 00 00 AF 00 00 00
|
|
|
|
|
|
|
|
Leisure Suit larry (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$A5 $159 22 00 00 00 AF 00 00 00
|
|
|
|
|
|
|
|
Magical Myths (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$1EE $14D A2 21 80 2C
|
|
|
|
|
|
|
|
Marble Madness (Electronic Arts)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Overwrite call to copy protection routine + set carry flag
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$381 $F3 20 00 37 EA EA 38
|
|
|
|
|
|
|
|
Math Blaster Plus (Davidson)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routines & store "pass" value
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$9 $1BD 20 6F 02 AD 6F 02
|
|
$1C2 9D 34 00 9E 34 00
|
|
|
|
|
|
Math Wizard (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$4F8 $0B A2 21 80 2C
|
|
|
|
|
|
|
|
Mavis Beacon Teaches Typing (Software Toolworks)
|
|
|
|
Protection: Check for bad block on block $63A-$63F
|
|
Crack: Never call copy protection routine
|
|
|
|
Version 1.2
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$4B9 $197 22 8E 6C 03 AF 8E 6C 03
|
|
|
|
Version 1.5
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$142 $18F 22 AF
|
|
|
|
|
|
|
|
Mini-putt (Accoldae)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & branch control
|
|
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$7 $11B 22 62 03 00 AF 62 03 00 <-- Kill call to the check
|
|
$11F B0 03 EA 18 <-- Clear carry and continue
|
|
Optional:
|
|
$7 $1DA 22 62 03 00 AF 62 03 00 <-- Kill call to the check
|
|
$11F 90 02 80 C8 EA EA EA 18 <-- Clear carry and continue
|
|
$3A $1A9 A2 20 80 20 <-- Branch over CP to end
|
|
$1CD 38 18 <-- Clear carry for "pass"
|
|
|
|
|
|
Monte Carlo (BPI Software)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$E4 $58 22 AF
|
|
$5C C9 0B 00 F0 A9 0B 00 80
|
|
|
|
|
|
|
|
Multiscribe IIgs (Styleware)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
For v3.01c
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$538 $DC 22 9E 03 00 AF 9E 03 00 <-- Kill call to the check
|
|
$E1 90 12 80 26 <-- Reroute branch
|
|
$109 AD 2A 01 9C 2A 01 <-- Force a store of a "pass" value
|
|
$10C D0 19 EA EA <-- Allow code to fall through and continue
|
|
|
|
|
|
|
|
Music Construction Set (Electronic Arts)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines & branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$43E $CA 20 00 BF C5 EA EA EA EA
|
|
42 49 20 C2 EA EA EA EA
|
|
A4 90 18 80
|
|
|
|
|
|
|
|
Neuromancer (Interplay)
|
|
|
|
Protection: Key-word / codewheel
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$109 $FE 20 FC 74 AD FC 74
|
|
|
|
|
|
|
|
Pipe Dreams (Lucusfilm)
|
|
|
|
Protection: Key-word / codewheel
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$19D $1F6 20 C6 47 AD C6 47
|
|
$19E $C5 20 A8 37 AD A8 37
|
|
|
|
|
|
|
|
Qix (Taito)
|
|
|
|
Protection: Excessive zero bit detection after D5 CC AA header
|
|
reads zero bits and stores compared matches. Matches
|
|
must be less the #$0D
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$4D5 $77 22 73 02 00 AD 73 02 00 <-- Kill call to the check
|
|
$81 22 A3 02 00 AD A3 02 00 <-- Kill call to the check
|
|
$AC 22 B6 02 00 AD B6 02 00 <-- Kill call to the check
|
|
$B0 90 09 80 09 <-- Force branch to "pass"
|
|
$5B4 $DC 0C 07 03 09 04 04 04 00 <-- Implant passable results
|
|
|
|
|
|
|
|
Read and Rhyme (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
-------------------------------------------
|
|
$38A $6F A2 21 80 2C
|
|
|
|
|
|
|
|
Sea Strike (BPI Software)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$58E $0B 22 F1 02 00 AF F1 02 00
|
|
$0F C9 0B 00 F0 A9 0B 00 80
|
|
|
|
|
|
|
|
Serve & Volley (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch past copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$DD $E1 A2 20 A0 01 80 10 A0 01
|
|
|
|
|
|
|
|
Shadowgate (Mindscape)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$D $55 22 55 E7 00 AF 55 E7 00
|
|
$59 CD BB BE AD BB BE
|
|
$5C F0 08 80 08
|
|
$E $153 22 55 E7 00 AF 55 E7 00
|
|
$157 CD BB BE AD BB BE
|
|
$15A F0 08 80 08
|
|
$23 $142 22 55 E7 00 AF 55 E7 00
|
|
$146 CD BB BE AD BB BE
|
|
$149 F0 08 80 08
|
|
$24 $32 22 55 E7 00 AF 55 E7 00
|
|
$36 CD BB BE AD BB BE
|
|
$39 F0 08 80 08
|
|
$AD 22 55 E7 00 AF 55 E7 00
|
|
$B1 CD BB BE AD BB BE
|
|
$B4 F0 08 80 08
|
|
$189 22 55 E7 00 AF 55 E7 00
|
|
$18D CD BB BE AD BB BE
|
|
$190 F0 08 80 08
|
|
$27 $1EA 22 55 E7 00 AF 55 E7 00
|
|
$1EE 90 70 EA 38
|
|
$1F0 CD BB BE AD BB BE
|
|
$1F3 D0 6B EA EA
|
|
|
|
|
|
|
|
Shanghia (Activision)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Ver 2 "START" dated 20 Jan 87
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$243 $1E4 A0 00 00 A0 01 00 <-- Load "Y" with a pass value
|
|
$1E7 22 74 78 00 AF 74 78 00 <-- Kill call to CP routine
|
|
$1EB 8D 09 5D 8C 09 5D <-- Store "Y" in memory
|
|
|
|
Shanghia [Newer] (Activision)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Ver 3 "START" file dated 15 Sept 87
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$243 $51 A0 00 00 A0 01 00 <-- Load "Y" with a pass value
|
|
$54 22 7A 78 00 AF 7A 78 00 <-- Kill call to CP routine
|
|
$58 8D 0F 5D 8C 0F 5D <-- Store "Y" in memory
|
|
$267 $145 C9 01 00 F0 A9 01 00 80
|
|
|
|
|
|
|
|
Showoff (Broderbund)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Allow copy protection routine to store a "pass"
|
|
value in memory before it actually reads the
|
|
disk and then force it to return
|
|
|
|
Version 1.0 - On Disk #2
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$17C $70 08 E2 30 A2 60 E2 30 A2
|
|
|
|
Version 1.1 - On Program disk
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$17D $70 08 E2 30 A2 60 E2 30 A2
|
|
|
|
|
|
|
|
Silpheed (Sierra)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine, store a
|
|
pass value & branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$1AA $126 22 00 00 00 AF 00 00 00 <-- Kill call to the check
|
|
$12A AD 00 00 EE 00 00 <-- Store "pass" value
|
|
$12D D0 03 80 03 <-- Branch down to continue code
|
|
|
|
|
|
|
|
Skate or Die (Electronic Arts)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$9 $3D 22 00 10 00 AF 00 10 00
|
|
|
|
|
|
|
|
Space Quest v2.2 (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routines
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$9E $177 22 00 00 00 AF 00 00 00
|
|
|
|
|
|
|
|
Space Quest 2 (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routines
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$34C $178 22 82 1F 00 AF 82 1F 00
|
|
$354 $166 22 3A 1A 13 AF 3A 1A 13
|
|
$3AB $93 22 75 16 0D AF 75 16 0D
|
|
|
|
|
|
|
|
Stikybear GS Talking series (Optimum Resources)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routines
|
|
|
|
Talking Alphabet on disk 1
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$F4 $14F 20 B6 18 AD B6 18
|
|
|
|
Talking Opposites
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$EC $15D 20 07 3A AD 07 3A
|
|
|
|
Talking Shapes
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$EC $183 20 7A 2E AD 7A 2E
|
|
|
|
|
|
|
|
Street Sports Soccer (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$24 $00 20 3C 20 AD 3C 20
|
|
|
|
|
|
|
|
Superstar Ice Hockey (Accolade)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine & branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$9 $5F 20 A3 1A AD A3 1A
|
|
$B $04 D0 13 EA EA
|
|
$0C D0 0B EA EA
|
|
$C $11A D5 00 D4 00
|
|
$38 $B7 D0 12 80 38
|
|
$A6 $B7 D0 12 80 36
|
|
|
|
|
|
|
|
Tales from the Arabian Nights (Unicorn Software)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Branch over nibble count
|
|
|
|
Block Byte From To
|
|
-------------------------------------------
|
|
$553 $1BD A2 21 80 2C
|
|
|
|
|
|
|
|
Test Drive II: The Duel (Accolade)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routines
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$169 $19B 22 E3 C4 03 AF E3 C4 03 <-- Kill call to the check
|
|
$1F3 22 E3 C4 03 AF E3 C4 03 <-- Kill call to the check
|
|
$191 $1D8 22 E3 C4 03 AF E3 C4 03 <-- Kill call to the check
|
|
$199 $125 F0 16 80 16 <-- Allow any master to read data disk
|
|
|
|
|
|
|
|
Tetris IIgs (Spectrum Holobyte)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routines & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
-----------------------------------------
|
|
$2B $51 20 CE 57 AD CE 57 <-- Kill call to the check
|
|
$54 AD B7 0F 9C B7 0F <-- Zero = pass in memory flag
|
|
$57 D0 03 EA EA <-- Kill branch to "failed"
|
|
|
|
|
|
|
|
The Last Ninja (Activision)
|
|
|
|
Protection: Check for bad block on block $63F
|
|
Crack: Branch past copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$CD $16B C2 30 9C EF 80 65 9C EF
|
|
|
|
|
|
|
|
Thexder [Newer version / Joystick control] (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$7 $5A 22 8D 0A 00 AF 8D 0A 00
|
|
|
|
|
|
Thexder [Original release] (Sierra On-line)
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$55C $55 22 42 0F 00 AF 42 0F 00
|
|
|
|
Recover the alt version of Thexder called "Othexder"
|
|
from the original release disk.
|
|
|
|
Use Copy II Plus and "undelete" OTHEXDER (also protected):
|
|
|
|
Protection: Check for bad block on block $634
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$7 $5A 22 62 0F 00 AF 62 0F 00
|
|
|
|
|
|
|
|
Three Stooges (Cinemaware)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Branch past the copy protection
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$13 $12F D0 03 80 3B
|
|
|
|
|
|
|
|
Top Draw v1.01A (Styleware)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Store a "pass" value in memory & fall through to pass code
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$393 $E AD C2 42 9C C2 42 <-- Set memory flag to "pass"
|
|
$11 D0 13 EA EA <-- Fall through to pass code
|
|
$520 $154 AD C2 42 9C C2 42 <-- Set memory flag to "pass"
|
|
$157 D0 13 EA EA <-- Fall through to pass code
|
|
|
|
|
|
|
|
Tower of Myraglen (BPI Software)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$58C $84 22 E1 00 00 AF E1 00 00
|
|
$88 C9 0B 00 F0 A9 0B 00 80
|
|
|
|
|
|
|
|
TrianGO (California Dreams / Logical Designs)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$14 $1D9 22 A5 22 00 AF A5 22 00 <-- Kill call to the check
|
|
$203 $FE 22 AF A5 00 AF AF A5 00 <-- Kill call to the check
|
|
$1CE D0 06 80 06 <-- Force branch to "pass"
|
|
|
|
|
|
|
|
Tunnels of Armageddon (California Dreams / Logical Designs)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Allow any answer OR kill entire CP routines
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$2B $96 F0 05 A9 00 EA EA EA EA
|
|
00 80 03 EA EA EA
|
|
|
|
This allows for the built in cheat answer "kacper"
|
|
to still work or accept any answer.
|
|
|
|
Completely disable the check and forfeit the cheat ADD:
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$39 $FC A2 04 91 A2 04 90
|
|
$10C A9 01 00 82 4E 03
|
|
$3B $1D0 B7 D4 97 D0 EA EA EA EA
|
|
88 88 10 F8 EA EA EA EA
|
|
A7 D4 87 D0 EA EA EA EA
|
|
$3C $C1 B0 03 A9 00 EA 18 82 48
|
|
00 02
|
|
|
|
|
|
Uninvited (Mindscape)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$D $55 22 55 E7 00 AF 55 E7 00
|
|
$59 CD BB BE AD BB BE
|
|
$5C F0 08 80 08
|
|
$E $153 22 55 E7 00 AF 55 E7 00
|
|
$157 CD BB BE AD BB BE
|
|
$15A F0 08 80 08
|
|
$23 $142 22 55 E7 00 AF 55 E7 00
|
|
$146 CD BB BE AD BB BE
|
|
$149 F0 08 80 08
|
|
$24 $32 22 55 E7 00 AF 55 E7 00
|
|
$36 CD BB BE AD BB BE
|
|
$39 F0 08 80 08
|
|
$AD 22 55 E7 00 AF 55 E7 00
|
|
$B1 CD BB BE AD BB BE
|
|
$B4 F0 08 80 08
|
|
$189 22 55 E7 00 AF 55 E7 00
|
|
$18D CD BB BE AD BB BE
|
|
$190 F0 08 80 08
|
|
$27 $1EA 22 55 E7 00 AF 55 E7 00
|
|
$1EE 90 70 EA 38
|
|
$1F0 CD BB BE AD BB BE
|
|
$1F3 D0 6B EA EA
|
|
|
|
|
|
|
|
USA Geography v1.0 (MECC)
|
|
|
|
Protection: Check for bad block on block $7
|
|
Crack: Never call copy protection routine & force conditional branches
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$445 $E2 20 52 0B AD 52 0B
|
|
$E5 90 05 80 03
|
|
$E7 20 5C 0A AD 5C 0A
|
|
$EA B0 23 18 EA
|
|
|
|
|
|
|
|
Vegas Craps (California Dreams / Logical Designs)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$12B $1C6 22 FE 7F 00 AF FE 7F 00 <-- Kill call to the check
|
|
$1CA 85 C3 64 C3 <-- Zero = pass in memory flag
|
|
$1CE D0 03 EA EA <-- Kill branch to "failed"
|
|
|
|
|
|
|
|
Vegas Gambler (California Dreams / Logical Designs)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routine & set memory flag to "pass"
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$24 $1C9 22 A8 76 00 AF A8 76 00 <-- Kill call to the check
|
|
$1CD 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$1F0 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$25 $6 22 A8 76 00 AF A8 76 00 <-- Kill call to the check
|
|
$A 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$2D 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$43 22 A8 76 00 AF A8 76 00 <-- Kill call to the check
|
|
$47 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$6A 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$80 22 A8 76 00 AF A8 76 00 <-- Kill call to the check
|
|
$84 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
$A7 8D 84 00 9C 84 00 <-- Zero = pass in memory flag
|
|
|
|
|
|
|
|
Where in the USA is Carmen Sandiego? (Broderbund)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: The program uses token values for each step of the game.
|
|
Change the token of CP question routine to "Good Job..."
|
|
thus bypassing the protection all together
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$223 $17 A9 96 05 A9 A0 05
|
|
|
|
|
|
|
|
Where in the World is Carmen Sandiego? v1.0 (Broderbund)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
On Disk #2
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$69 $20 22 84 04 00 AF 84 04 00
|
|
|
|
|
|
|
|
Windwalker (Origin)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routines + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$190 $C7 22 84 28 03 AF 84 28 03
|
|
$D9 22 B1 25 03 AF B1 25 06
|
|
$103 22 12 1E 03 AF 12 1E 03
|
|
$114 22 E3 18 03 AF E3 18 03
|
|
$11A 22 8F DA 00 AF 8F DA 00
|
|
$11E 22 79 26 03 AF 79 26 03
|
|
$122 22 79 26 03 AF 79 26 03
|
|
$17F F0 02 80 23 EA EA 80 23
|
|
|
|
|
|
|
|
Winter Games (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$61E $65 20 60 00 AD 60 00 <-- Kill call to the check
|
|
$423 $C4 D0 FC EA EA <-- Kill infinite loop
|
|
|
|
|
|
|
|
World Games (Epyx)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$7 $65 20 5D 00 AD 5D 00 <-- Kill call to the check
|
|
$3E $23 D0 FC EA EA <-- Kill infinite loop
|
|
|
|
|
|
|
|
World Geography (MECC)
|
|
|
|
Protection: Check for bad block
|
|
Crack: Never call copy protection routine + branch control
|
|
|
|
For v1.0:
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$68 $F5 20 3B 0B AD 3B 0B
|
|
$F8 90 05 80 03
|
|
$FA 20 3C 0A AD 3C 0A
|
|
$FD B0 23 EA 18
|
|
|
|
For v1.1:
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$9 $173 20 3E 0B AD 3E 0B
|
|
$176 90 05 80 03
|
|
$178 20 46 0A AD 46 0A
|
|
$17B B0 23 EA 18
|
|
|
|
|
|
|
|
World Tour Golf (Electronic Arts)
|
|
|
|
Protection: Key-word - Manual / Letter check
|
|
Crack: Never call copy protection routines
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$17D $141 0B 3B 38 E9 6B 3B 38 E9
|
|
$188 $74 22 AF
|
|
|
|
|
|
|
|
Xenocide (Micro Revealtions)
|
|
|
|
Protection: Check for Mac "tag bytes" on block $4E1 and stores
|
|
the value $1E46 at 02/62DB if it passes
|
|
Crack: Never call copy protection routines and insert the pass
|
|
value directly on the disk & prevent memory flag overwrite.
|
|
|
|
The game program file is 128 blocks, dated 23-JUL-89 11:35, 64996 bytes long
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$7 $150 22 6F 09 00 AF 6F 09 00 <-- Kill call to copy protection
|
|
$154 90 0C 80 0A
|
|
$156 22 6F 09 00 AF 6F 09 00 <-- Kill call to copy protection
|
|
$15A 90 06 80 04
|
|
$15C 22 81 1D 00 22 81 1D 00 <-- Kill call to copy protection
|
|
$160 80 EE EA 18
|
|
$44 $E2 00 00 46 1E <-- Implant "pass" value
|
|
$E7 A9 00 00 A9 46 1E <-- Don't ZERO out memory flag
|
|
$45 $0B 22 6F 09 00 AF 6F 09 00 <-- Kill call to copy protection
|
|
$0F 90 0C 80 0A
|
|
$11 22 04 00 00 AF 04 00 00 <-- Kill call to copy protection
|
|
$15 90 06 80 04
|
|
$17 22 81 1D 00 AF 81 1D 00 <-- Kill call to copy protection
|
|
$1B 80 EE EA 18
|
|
$4B $15F F0 01 60 EA EA EA
|
|
$62 $172 22 04 00 00 AF 04 00 00 <-- Kill call to copy protection
|
|
$176 90 0C 80 0A
|
|
$178 22 04 00 00 AF 04 00 00 <-- Kill call to copy protection
|
|
$17C 90 06 80 04
|
|
$17E 22 81 1D 00 AF 81 1D 00 <-- Kill call to copy protection
|
|
$182 80 EE EA 18
|
|
$6A $17C D0 27 EA EA
|
|
$63D $65 8F 06 00 00 AF 06 00 00 <-- Read instead of store memory flag
|
|
|
|
The game program file is 129 blocks, dated 13-APR-89 19:18, 65085 bytes long
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$8 $155 22 72 09 00 AF 72 09 00 <-- Kill call to copy protection
|
|
$159 90 0C 80 0A
|
|
$15B 22 72 09 00 AF 72 09 00 <-- Kill call to copy protection
|
|
$15F 90 06 80 04
|
|
$161 22 8B 1D 00 22 8B 1D 00 <-- Kill call to copy protection
|
|
$165 80 EE EA 18
|
|
$44 $FC 00 00 46 1E <-- Implant "pass" value
|
|
$101 A9 00 00 A9 46 1E <-- Don't ZERO out memory flag
|
|
$45 $25 22 72 09 00 AF 72 09 00 <-- Kill call to copy protection
|
|
$29 90 0C 80 0A
|
|
$2B 22 04 00 00 AF 04 00 00 <-- Kill call to copy protection
|
|
$2F 90 06 80 04
|
|
$31 22 8B 1D 00 AF 8B 1D 00 <-- Kill call to copy protection
|
|
$35 80 EE EA 18
|
|
$4B $179 F0 01 60 EA EA EA
|
|
$5F $18C 22 04 00 00 AF 04 00 00 <-- Kill call to copy protection
|
|
$190 90 0C 80 0A
|
|
$192 22 04 00 00 AF 04 00 00 <-- Kill call to copy protection
|
|
$196 90 06 80 04
|
|
$198 22 8B 1D 00 AF 8B 1D 00 <-- Kill call to copy protection
|
|
$19C 80 EE EA 18
|
|
$67 $1B4 D0 27 EA EA
|
|
$634 $9D 8F 06 00 00 AF 06 00 00 <-- Read instead of store memory flag
|
|
|
|
|
|
|
|
Zany Golf (Electronic Arts)
|
|
|
|
Protection: Nibble count on tracks $20 & $21 (IE: 32 & 33)
|
|
Crack: Never call copy protection routine
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$5D $111 D0 04 80 04 <-- Branch over CP routine
|
|
$113 22 00 36 00 AF 00 36 00 <-- Kill call to the check
|
|
|
|
|
|
|
|
|
|
+-----------------------------------------------------------+
|
|
| |
|
|
| The following cracks were NOT done or tested by me, but |
|
|
| are provided as an alternate method for back-ups. |
|
|
| |
|
|
| They may leave portions of the CP intact like the actual |
|
|
| disc read routines and force them to pass at the lowest |
|
|
| levels or simply ignore the results after the read. |
|
|
| |
|
|
+-----------------------------------------------------------+
|
|
|
|
|
|
|
|
|
|
|
|
816 Paint (Baudville)
|
|
|
|
For v2.0
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$273 $11D 30 03 0E 80 03 0E <-- Remove CP from Paint 320
|
|
$2D8 $DF 30 03 0E 80 03 0E <-- Remove CP from Paint 640
|
|
|
|
For v3.1
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$2A2 $124 30 03 0E 80 03 0E <-- Remove CP from Paint 320
|
|
$30A $E6 30 03 0E 80 03 0E <-- Remove CP from Paint 640
|
|
|
|
|
|
|
|
California Games (Epyx)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$FC $66 22 93 53 00 AF 93 53 00
|
|
$77 90 03 80 03
|
|
$88 22 93 53 00 AF 93 53 00
|
|
$9C 90 03 80 03
|
|
$B9 90 1D 80 18
|
|
or
|
|
$FC $58 E2 30 80 77
|
|
$D1 B0 05 E2 30
|
|
|
|
|
|
|
|
Deluxe Paint (Electronic Arts)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$291 $1B3 08 C2 30 8B 6B C2 30 8B
|
|
|
|
|
|
|
|
Dungeon Master (FTL)
|
|
|
|
For version 2.0
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$104 $110 18 38
|
|
$114 38 18
|
|
|
|
For version 2.1
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$E6 $110 18 38
|
|
$114 38 18
|
|
|
|
|
|
|
|
Dream Zone (Baudville Inc)
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$1B7 $A9 22 DB C4 00 AF DB C4 00
|
|
$DF 22 DB C4 00 AF DB C4 00
|
|
$1BC $F6 22 DB C4 00 AF DB C4 00
|
|
$12C 22 DB C4 00 AF DB C4 00
|
|
|
|
|
|
|
|
Grand Prix Circuit (Accolade)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$112 $138 EA 30 80 3A
|
|
|
|
|
|
|
|
Great Western Shootout (Britannica)
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$159 $128 20 00 BF EA EA EA
|
|
80 10 27 EA EA EA
|
|
$166 $C9 D9 99
|
|
$CC D0 08 EA EA
|
|
|
|
or
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$596 $1B B0 1D EA 18
|
|
$2F D0 08 EA EA
|
|
|
|
|
|
|
|
Keef The Thief
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$3B8 $167 F0 03 82 80 03 82
|
|
$175 D0 0D 22 80 0D 22
|
|
|
|
|
|
|
|
King's Quest III (Sierra On-line)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$2D1 $D8 22 00 00 00 AF 00 00 00
|
|
$24A $15A AD 00 00 18 6B 00 00 18
|
|
|
|
|
|
|
|
Mavis Beacon Teaches Typing (Software Toolworks)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3E $10C 22 00 00 00 AF 00 00 00
|
|
$3E $113 D0 12 80 12
|
|
|
|
|
|
|
|
Mean 18 Golf (Accolade)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$29C $174 8D DB 0D AD DB 0D
|
|
$506 $174 8D 9A 13 AD 9A 13
|
|
|
|
|
|
|
|
Mini-putt (Accolade)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$3A $1CF C2 30 18 6B
|
|
|
|
|
|
|
|
Music Studio v1.0 (Activision)
|
|
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$44D $0D 22 ?? ?? ?? AF ?? ?? ??
|
|
$14 F0 03 80 03
|
|
$16 82 82 00 EA EA EA
|
|
|
|
|
|
|
|
Paintworks Plus v1.0 (Activision)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$291 $1D8 22 ?? ?? ?? AF ?? ?? ??
|
|
$1CF D0 12 EA EA
|
|
$1E0 D0 01 EA EA
|
|
|
|
or
|
|
|
|
$2B0 $2B 20 6A 09 AD 6A 09
|
|
|
|
|
|
|
|
Sea Strike (BPI Software)
|
|
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$5B4 $144 C9 00 00 D0 C9 00 00 80
|
|
|
|
|
|
|
|
Serve & Volley (Accolade)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$DD $E1 A2 20 A0 01 A9 00 18 60
|
|
|
|
|
|
|
|
Shanghai (Activision)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$267 $145 C9 01 00 F0 A9 01 00 80
|
|
$27D $168 18 FB C2 30 A9 01 00 6B
|
|
|
|
alt earlier version of Shanghai:
|
|
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$27D $162 18 FB C2 30 A9 01 00 6B
|
|
|
|
|
|
Alt version:
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$27C $168 18 FB C2 30 A9 01 00 6B
|
|
|
|
|
|
|
|
Skate or Die (Electronic Arts)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$7 $4F 22 00 00 00 AF 00 00 00
|
|
$F0 22 00 00 00 AF 00 00 00
|
|
|
|
|
|
|
|
Slide Show (Broderbund)
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$2B $1BA A9 60
|
|
|
|
|
|
|
|
Top Draw (Styleware)
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$394 $1E2 D0 1D 80 1A
|
|
|
|
|
|
|
|
Tower of Myraglen (BPI Software)
|
|
|
|
Block Byte From To
|
|
------------------------------------------
|
|
$40F $72 22 CB 1B 00 AF CB 1B 00
|
|
|
|
|
|
|
|
Where in Time is Carmen Sandiego? (Broderbund)
|
|
|
|
Block Byte From To
|
|
-------------------------------------
|
|
$32B $19C 20 00 96 90 EA EA 18 80
|
|
|
|
|