-----------The Astronomy Disk---------- A 4am crack 2015-10-24 --------------------------------------- Name: The Astronomy Disk Genre: educational Year: 1984 Authors: Sheridan A. Simon Publisher: Prentice-Hall, Inc. Media: single-sided 5.25-inch floppy OS: DOS 3.3 with custom bootloader Previous cracks: none ~ Chapter 0 In Which Various Automated Tools Fail In Interesting Ways COPYA immediate disk read error Locksmith Fast Disk Backup unable to read any track EDD 4 bit copy (no sync, no count) no read errors, but the copy just grinds and crashes Copy ][+ nibble editor the nibbles are pretty noisy (the sync bytes between sectors are not a pretty pattern of $FF), but the nibble editor is pretty sure this is a 16-sector disk with modified prologues and epilogues --v-- COPY ][ PLUS BIT COPY PROGRAM 8.4 (C) 1982-9 CENTRAL POINT SOFTWARE, INC. --------------------------------------- TRACK: 03 START: 22FF LENGTH: 1852 2460: D3 B3 AF CE D3 D3 D3 D3 VIEW 2468: D3 D3 D3 D3 D3 F4 96 96 2470: 96 96 ED AA EB FF FF FF ^^^^^^^^ data epilogue 2478: 95 FF F4 EB AF ED FF DB 2480: B7 AD BF D7 AB AA D5 AB <-2485 ^^^^^^^^ address prologue 2488: FF FE AB AB AA AB FE FE ^^^^^ ^^^^^ ^^^^^ ^^^^^ vol trk sec chksm 2490: DE AB EE EE EE B5 CF E5 ^^^^^ address epilogue 2498: E9 D6 AF ED FF DB AA D5 ^^^^^ data prologue 24A0: EB D9 DF AD B7 B7 ED BF ^^ --------------------------------------- A TO ANALYZE DATA ESC TO QUIT ? FOR HELP SCREEN / CHANGE PARMS Q FOR NEXT TRACK SPACE TO RE-READ --^-- Disk Fixer T00,S00 is readable, but nothing else on track $00 ["O" -> "Input/Output Control"] set Address Prologue to "AA D5 AB" set Address Epilogue to "DE AB EB" set Data Prologue to "AA D5 EB" set Data Epilogue to "ED AA EB" T01+ readable! T01-T02 -> full DOS 3.3 T11 -> DOS 3.3 catalog T01,S0D -> startup program is "HELLO" Why didn't COPYA work? modified prologues (every track) Why didn't Locksmith FDB work? modified prologues (every track) Next steps: 1. Trace the boot to capture the RWTS 2. Advanced Demuffin to convert the disk to a standard format 3. Replace tracks $00-$02 with a standard copy of DOS 3.3 4. Declare victory(*) (*) take a nap ~ Chapter 1 In Which We Can Do This All Day [S6,D1=original disk] [S5,D1=my work disk] ]PR#5 ... ]CALL -151 *9600 At $B6, load "BOOT1 B600-BFFF" from drive 1 ["6" to switch to slot 6] ["C" to convert disk] --> CHANGE DEFAULT VALUES? Y ADVANCED DEMUFFIN 1.5 (C) 1983, 2014 ORIGINAL BY THE STACK UPDATES BY 4AM ======================================= INPUT ALL VALUES IN HEX SECTORS PER TRACK? (13/16) 16 START TRACK: $01 <-- change this START SECTOR: $00 END TRACK: $22 END SECTOR: $0F INCREMENT: 1 MAX # OF RETRIES: 0 COPY FROM DRIVE 1 TO DRIVE: 2 ======================================= 16SC $01,$00-$22,$0F BY1.0 S6,D1->S6,D2 Now press RETURN to start the copy... --v-- ADVANCED DEMUFFIN 1.5 (C) 1983, 2014 ORIGINAL BY THE STACK UPDATES BY 4AM =======PRESS ANY KEY TO CONTINUE======= TRK: .................................. +.5: 0123456789ABCDEF0123456789ABCDEF012 SC0: .................................. SC1: .................................. SC2: .................................. SC3: .................................. SC4: .................................. SC5: .................................. SC6: .................................. SC7: .................................. SC8: .................................. SC9: .................................. SCA: .................................. SCB: .................................. SCC: .................................. SCD: .................................. SCE: .................................. SCF: .................................. ======================================= 16SC $01,$00-$22,$0F BY1.0 S6,D1->S6,D2 --^-- ]PR#5 ]CATALOG,S6,D2 C1983 DSR^C#254 093 FREE A 009 HELLO A 007 MENU A 013 EARTH SATELLITE A 007 STELLAR EVOLUTION A 019 MULTI-STAGE ROCKET A 011 TRANSFER ORBIT A 018 SPECTRAL TYPES A 021 STARSHIP A 014 BINARY STARS A 012 SOLAR SYSTEM B 034 PIC A 003 HREND A 010 SPIRAL GALAXY A 009 FREEZE-FRAME A 007 SINGLE EVOLUTION A 010 CLUSTER EVOLUTION T 013 EVOLDATA T 006 POLYDATA T 002 WAVELENGTHS T 005 LINESTRENGTHS A 010 JOVIAN MOONS A 017 SATELLITES A 010 ELLIPTICAL ORBIT A 031 BUILD-A-WORLD A 011 TEMPERATURE AND COLOR T 004 SSDATA A 012 INSIDE STARS A 016 COMETS T 004 SSLABELS A 010 INSIDESPT2 T 002 SSTEMP A 012 SSPT2 T 003 COMETDATA A 017 COMETSPT2 T 002 COMETTEMP A 008 SINGLEPT2 T 004 SINGLEDATA ]RUN HELLO ...works... Using Copy ][+, I can "copy DOS" from a freshly initialized DOS 3.3 disk onto the non-working copy. This function of Copy ][+ just sector-copies tracks 0-2 from one disk to another, but it's easier than setting that up manually in some other copy program. [S6,D1=demuffin'd copy with T01+] [S6,D2=newly formatted DOS 3.3 disk] Copy ][+ --> COPY --> DOS --> from slot 6, drive 2 --> to slot 6, drive 1 ...read read read... ...write write write... ]PR#6 ...works... Quod erat liberandum. --------------------------------------- A 4am crack No. 475 ------------------EOF------------------