DjayBee

Look here: http://atariage.com/forums/topic/192052-atr-tools/page-5?hl=%20atrtools It has most of what you asked for.

It allows reading from RAM, but it NAKs reads above $1380. It does only work with 5.x software. Find attached a RespeQt Log (D1=RespeQt with Happy 5.2 image, D2=Happy810) of boot Happy 5.2 load diagnostics do an enhancement diagnostic happy810log.txt

The pure number sounds bigger than the real effort was. First the publishers are quite lazy and often reuse the same protection for several titles. Since most protections are much less complicated than EA's, there is a fair chance to find a byte-sequence to search for in a hex-editor and just replace it. Second cracking with Altirra's debug features is a breeze compared to back then when you had to step through the whole loading sequence. Today I look at the disk trace for unusual entries (bad, duplicates, ...) and then set a sector break point with the interesting sector's number. And yes, I also (still) have fun searching through the haystack of code for the single byte that I have to change which makes it work.

I own a fully wire-wrapped (pirated) Happy 810. So I guess that this one does not have any protection inside. If someone writes a program which dumps the ROM via SIO then I could run it the next time that I connect the drive.

My third batch which brings the whole close to 350 titles. Original Epyx-releases of Ballblazer and Rescue on Fractalus with their load-screens Dropzone Catch-up with July-torrent from Farb (Adv. Intl., Broderbund, Datasoft, MicroProse, some more) New publishers: Artworx, Atari, Cosmi, Gebelli, SSI, Main Street Publishing (re-releases), Value-U-Line (re-releases) and the following educational publishers: Carousel, Davka, DLM, JMH, Learning Company, MECC, Milliken, Mindscape, Scarborough, Scholastic, Unicorn Have fun ATXcracks03.zip

No problem for me. My comments about bad dumps are just guesses based on some sort of "anomaly" which cannot always be spot-on. Thanks for verifying.

I don't remember what I saw concerning Telly Turtle. Sorry. DId you verify all bad sectors of MS Basic since the ones in tracks 20 and 21 are actually the copy protection? I was talking about tracks 31, 32 and 39. Sorry for not being specific in the first place.

With an ATX loaded I can change all the "sector status" flags and click on any of the "sector options" and "track options", but I cannot find anything that actually changes a bit on the image. Am I just blind or has this not yet been enabled?

ATR Tools shows a strange behaviour on my machine. If I start it while Libre Office is running, then it takes veeeery long (20 sec up to more than a minute) until ATR Tools show up.

1:0 Kr0tki But then consequently the Atari version, which currently is named 1981, should be renamed to 1982. It came later and also has the 1982 copyright on box and manual. => 1:1

In my case the "plain data file" is an ATR of a DOS formatted disk which contains XEX files. Ominvore only(!) shows each DOS file as a segment and no other segments. So for multi-segment files inside an image I have to select each segment manually and then set the origin of this segment. It would be nice to be able to select a (XEX-)file inside the image and have Omnivore process it like a XEX file directly loaded by Omnivore.

Like most of my posts in this thread, some errors and findings for the latest torrent. Pitstop (1983)(Epyx)(US)(Side A) might be Value-U-Line because 1. identical disk layout to the other V-U-L titles 2. V-U-L Pitstop at Atarimania has indentical content except for some "numbers" in the unformatted tracks 3. according to Atarimania the Epyx release is cart-only My First Alphabet (1982)(APX)(US)[bASIC] rename: copyright 1981 Factory, The (1982)(HesWare)(US) rename: The file inside the archive is named ATR but actually is an ATX Computer Quarterback v2.0 (1981)(SSI)(US) No ATX in archive but it is a protected disk (similar to the Microprose and SSI titles below) U.S.A.A.F. v1.1 (1985)(SSI)(US) 1. game disk is missing "U.S.A.A.F. v1.1 (1985)(SSI)(US)(Side B)" 2. probably "technically" a bad dump, but bad sector 611 is located inside a deleted file Battlecruiser (1987)(SSI)(US)(Disk 1 of 2 Side A)(WWI Scenarios) bad dump: sector 42 is only "crc error" instead of "weak bits". Disk fails to run Wargame Construction Set v1.1 (1986)(SSI)(US)(Disk 1 of 2 Side A)(Editor) bad dump: sector 42 is only "crc error" instead of "weak bits". Disk fails to run Remove the ATR from these archives because the disks are protected. Unfortunately the alignment protection is not effective in emulation and with track-buffered disk drives, so the games will run there without protection. Conflict in Vietnam (1986)(MicroProse Software)(US) Crusade in Europe (1985)(MicroProse Software)(US) Colonial Conquest v1.0 (1985)(SSI)(US) Computer Ambush v1.2 (1984)(SSI)(US) Field of Fire v1.00 (1984)(SSI)(US)(Side A)(Game & Editor)[!] Gemstone Warrior (1985)(SSI)(US) Six-Gun Shootout v1.0 (1985)(SSI)(US)[!] Wizard's Crown v1.0 (1986)(SSI)(US)(Disk 1 of 2 Side A)(Game Disk) Suspected bad dumps with errors in probably unused sectors: Telly Turtle (1983)(Carousel Software)(US)[!] 1st sector in track 23 bad instead of missing Microsoft BASIC (1981)(Atari)(US) 3 bad sectors in used area

I finally got around playing around with Omnivore and immediately found something to ask: Is there a way to define the starting point for the disassembler? If I open a binary load file, it starts disassembling with the file header and most of the time gets "out of sync" with the commands. Thanks

Here is the list of what I found so far: Battalion Commander (1985)(SSI)(US) Battle of Antietam v1.3 (1985)(SSI)(US)(Side A)(Scenario Disk) Colonial Conquest v1.0 (1985)(SSI)(US) Computer Ambush v1.2 (1984)(SSI)(US) Field of Fire v1.00 (1984)(SSI)(US)(Side A)(Game & Editor)[!] Gettysburg - The Turning Point v1.2 (1986)(SSI)(US)(Side A)(Scenarios) Imperium Galactum v1.0 (1984)(SSI)(US)(Side A)[p] Imperium Galactum v1.1 (1984)(SSI)(US)(Side A)[p] Kampfgruppe v1.0 (1985)(SSI)(US)(Side A)(Scenario) Mech Brigade v1.0 (1985)(SSI)(US)(Side A)(Scenario) NAM v1.0 (1985)(SSI)(US)(Side A)(Game) Operation Market Garden v1.0 (1985)(SSI)(US)(Side A) Panzer Grenadier (1985)(SSI)(US)(Side A)(Game) Shiloh - Grant's Trial in the West (1987)(SSI)(US)(Side A) Six-Gun Shootout v1.0 (1985)(SSI)(US)[!] Warship (1986)(SSI)(US)(Side A)(Scenario Disk) Wizard's Crown v1.0 (1986)(SSI)(US)(Disk 1 of 2 Side A)(Game Disk) Air Rescue I (1984)(MicroProse Software)(US)[Chopper Rescue re-release] Conflict in Vietnam (1986)(MicroProse Software)(US) Crusade in Europe (1985)(MicroProse Software)(US)[!] Decision in the Desert (1985)(MicroProse Software)(US) F-15 Strike Eagle (1984)(MicroProse Software)(US) Solo Flight (1983)(MicroProse Software)(US) Top Gunner Collection (1986)(MicroProse Software)(US)(Side B)(Mig Alley Ace + Air Rescue)[!] And in a similar way but with its own SIO-implementation: Gemstone Warrior (1985)(SSI)(US)

You can extend this article by roughly 15 titles published by SSI which have the exact same protection - even code-wise. Let me know if you want the list.

If you happen to find your MECC-originals and dump them you might bring a happy face to Kevin Savetz and Allan. This is the same as the MicroProse titles I cracked. If you look inside the ZIP in post #57 you can see the code fragment on how it is working.

You're my hero for today. The empty ATX solved my problem. Finally the plain sector copy crashes and my crack still works. Concerning your disks I believe that the solution does not lie in a properly skewed ATX but the opposite. Remove every trace of timing from the code and hardcode the expected values. I had the same problems with timed duplicate/multiple sectors where the same sector for a certain number of times has to be read within an expected time frame. Typically they do the following: LDA #0 STA RTCLOK+2 ... read same sector n times LDA RTCLOK+2 CMP #<expected value> Each time i changed the number of reads or the CMP-value to anything then it failed under certain conditions SInce then I do it this way: LDA #0 STA RTCLOK+2 ... read same sector n times LDA #<value_from_ATX> CMP #<expected value> I guess that something similar should work for skewing as well.

I cracked some MicroProse games which seem(!) to be protected by a modified track alignment. What stumped me is the fact that I cannot FAIL the protection in emulation. The routine reads one sector from each of five consecutive tracks; once in ascending order and then in descending order. The time needed to do this may only vary by one jiffy. Since standard emulation does not take time to wait for rotational delays, it will never fail. But after copying the whole disk image to an ATX which was created from a plain standard formatted disk (with no specific alignment) the games still load. Could anyone write the attached dumps to a real floppy and try to load them? My expectation is that the files ending in "orig" have to crash and the ones without "orig" will run. Some info about the protection can also be found inside the attached archive. MicroProseAlignment.zip

You are right - one should never answer just OTOH. Electrician has a bad CRC which is not verified. Dimension X and NYC both have weak bits which are verified and "defeated" by my cracks.

Thanks. Documentation will follow, I just did not have the time to go ahead with this recently. Concerning NYC and Electrician I must admit that these cracks were done quit "lazy". I did not really crack them but found out that the disks have chained sectors (similar to Atari DOS, but obfuscated) and I only altered the chaining to no longer use duplicate sectors but new locations. There seems to be no real "protection" beside this chaining and the fact that they have lots of tracks with more than 18 sectors (all of these contain needed data).

Some findings I made about the latest torrent: Space Eggs (1981)(Sirius Software)(US)[!] vs. Space Eggs (1981)(Sirius Software)(US)[a1] dumps are identical except the filler byte for unused sectors: [!] has $1a and [a1] has $00 Mercenary - The Second City (1985)(Datasoft)(US) not a dump of Second City, but a bad dump of Mercenary - Escape from Targ United States Adventure (1984)(First Star Software)(US) rename: needs [bASIC] FileManager+ (1981)(Synapse Software)(US) rename to FileManager 800+ Floyd of the Jungle (1982)(MicroProse Software)(US)[a1] rename: needs [bASIC][OS-B] Free Trader (1983)(Avalon Hill)(US).atr rename (only ATR): needs [bASIC] I suspect these to be (technically) bad dumps with gone-bad sectors in unused areas of the disk: Blue Max (1983)(Synapse Software)(US)[OS-B] Factory, The (1982)(HesWare)(US)[bASIC] M-ss-ng L-nks (1984)(HesWare)(US)[bASIC][OS-B] Picnic Paranoia (1982)(Synapse Software)(US) Protector II (1982)(Synapse Software)(US)[OS-B] Spy vs. Spy II - The Island Caper (1985)(First Star Software)(US) Survivor (1982)(Synapse Software)(US) The bad sector of these dumps contains data but is not read during initial loading of the game: Blue Max 2001 (1984)(Synapse Software)(US) 33/$21 Drelbs (1983)(Synapse Software)(US) 693/$2b5 I believe that the bad sector actually contains data (which can be retrieved from/compared to Atarimania's (cracked) dump): Sands of Egypt, The (1982)(Datasoft)(US)[OS-B] 489/$1e9

*Argh* I must have switched this on sometime in the past and forgotten about it. While testing yesterday I changed every setting related to speed and acceleration but overlooked this submenu. Thanks and sorry for bothering you

I found it some time ago somewhere on the net and submitted it to Farb. The latest torrent does contain the dump. I have no unsubmitted disks. The cracks are mostly dumps from Farb's torrent. Sometimes Atarimania has dumps which differ from these; I then submit them to Farb for inclusion. Take care and good luck with your health. *fingers-crossed*

Sid Meier's Formula One seems to no longer work with Altirra 2.80. It works fine with 2.70. I tried several combinations of OS and BASIC and it always crashes some time after reading sector 4. DISK: Reading vsec= 43 (1/1) (trk=2), psec= 42, chk=99, rot=44.60 >> 0.20 >> 0.60. DISK: Reading vsec= 4 (1/1) (trk=0), psec= 3, chk=40, rot=49.98 >> 0.59 >> 0.98 (w/CRC error). Breakpoint 0 hit (1979:257, 97) A=0C X=10 Y=A5 S=FB P=31 ( C) 19B1: 20 56 E4 JSR CIOV [$E456] = $4C Altirra> .iocb CIO IOCBs: # Dev Cd St Bufr PutR BfLn X1 X2 X3 X4 X5 X6 ZP 03 A5 0000 0001 0000 04 00 01 00 10 04 0 00 00 0000 0000 0000 00 00 00 00 00 00 1 0C A5 0000 0001 0000 04 00 00 00 00 00 2 00 00 0000 0000 0000 00 00 00 00 00 00 3 00 00 0000 E4C0 0000 00 00 00 00 00 00 4 00 00 0000 E4C0 0000 00 00 00 00 00 00 5 00 00 0000 E4C0 0000 00 00 00 00 00 00 6 00 00 0000 E4C0 0000 00 00 00 00 00 00 7 00 00 0000 E4C0 0000 00 00 00 00 00 00 Altirra> g CPU: Illegal instruction hit: 01EC (1982:158,107) A=00 X=10 Y=92 S=F5 P=33 ( ZC) 01EB: 92 KIL The exact address differs but it always happens inside CIO: E689: A0 92 LDY #$92 E68B: 20 93 E6 JSR $E693 E693: AA TAX E694: A5 2D LDA ICAX4Z E696: 48 PHA E697: A5 2C LDA ICAX3Z E699: 48 PHA E69A: 8A TXA E69B: A6 2E LDX ICAX5Z E69D: 60 RTS Formula 1 Racing (1982)(Acorn Software)(US)BASICOS-B.zip

By intention I do only remove the code related to copy protection. My primary goals are to make the program run on SIO2PC / SIO2SD and to change as few as possible related to the program's run. Therefore Dimension X still tries to format the disk. Since I have no mega-speedy I cannot verify the behavior of Pharao's Curse. Did you try the version from the 1st or 2nd ZIP? The 2nd one should not depend on any timing, the 1st one still does a little.