? Hewson
You will need following:
1. Original game ? find on emunova.net
2. An Amiga or WINUAE
3. Action Replay or ROM image
4. Pencil and paper
Start by making a copy of original game disk. This is to determine type of protection.
You?ll notice an error on track 0. This is some type of a disk based protection,
where you can?t duplicate a specially
written track, probably a copylock.
When you boot copy of game, it almost crashes instantly. This might be an encrypted
boot block. If the copylock
passes, it decrypts and executes a new boot block.
Insert original game and enter AR immediately after boot. Copylock starts with a
? PEA $$$$ ?, search for the opcodes:
F 48 7A. AR returns two addresses with $10 between, a typically sign for a copylock.
See copylock with N 59E8 and hit enter a few times. Lot?s of encrypted code?
Exit AR and wait for the game to continue to load. When that happens, enter AR again
and see address 59E8 with
N 59E8 + enter. Looks like a new boot block appeared…
Transfer boot block to address 70000: TRANS 59E8 5DE8 70000.
Correct boot block checksum, or game won?t boot: BOOTCHK 70000.
Write new boot block back: WT 0 1 70000.
Rob
Publication author
