+—————————————————————————-+
| KRACK |
| April 1986 |
| Volume 1 Number 1 |
+—————————————————————————-+
You are reading KRAK, the official Kracking Textfile. This file is put
out by the Cellar Elite. Captain Quazmo is the Head editor.
If you wish to submit articals to KRACK just upload a Text file in IBM
PC format to one of the official KRACK boards. Krack is for all type of computers. Apple and C/64-128 users let's get going.
+—————————————————————————-+
| Cracking NewsRoom |
| IBM-PC format |
| Captain Quazmo |
+—————————————————————————-+ There are a couple of unprotects going around for this piece of software. This one is rather short but others make you change 51 other bytes that seem to be unneeded. You will need DEBUG for you dos diskette and a Copy (doesn't matter if it works) of NewsRoom.
At Dos: A> Ren nwsrm.exe nwsrm.zap
A> Debug nwsrm.zap
-E 691A EB 41
-E 6973 90 90
-E 6977 EB 25 90
-W
-Q
A> Ren nwsrm.zap nwsrm.exe
A> Debug nwsrm1.ovl
-E 05db 8B 46 04 89 46 FE 3B 46 04
-W
-Q
A> Debug nwsrm22.ovl
-10C6 B8 05 43
-W
-Q
You now have a working copy of newsroom. The only not is that all file most reside on drive A:. Assign can be use to allow this program to work on a hard drive.
+—————————————————————————-+
| Defeating Prolock |
| from the Locksmith Procedures manual |
+—————————————————————————-+ You will need: Dos DEBUG
A formatted Blank diskette
A non working copy of the program
This tutorial show how defeat prolock on dBASE III but can be used for most prolocked disks.
A> Debug DBASE.exe
-R
You will now see whats in the registers. Record the values
-U
-U
Look for a LOOP instruction. The next instruction will be a XCHG.
Using the Address in the first column [091B:XXXX 92 XCHG DX,AX]
enter -G XXXX
-S 100 3000 83 c4 08
Some address will be listed. Take the last address 091b:XXXX and
-A XXXX
XOR AX,AX
RET
Press Return twice until the "-" prompt. enter
-S 100 3000 C0 45 F8
This will display a single value [091B:XXXX]. use it and enter
-E XXXX 0B 46
-M 0:c f 0:200
Prolock will test for the original diskette enter
-R BX
0001
-R CX
When prompted enter the original value of CX
-N TEMP
-S 100 3000 4D 5A
Several values will be displayed. Remove the program disk and
insert the black disk and type
-W 1A50
-Q
A> Ren temp dbase.exe
+—————————————————————————-+
| LockSmith Instructions |
| IBMpc Format |
+—————————————————————————-+
Locksmith is in my oppion the BEST copy program for the IBMpc. Using
Special Parameters Locksmith can copy almost anything. I hope to explain to all you PC Pirates how to use this great program. This is first in a 2 part series on the use of locksmith.
LOCKSMITH MAIN SCREEN
Status Line Drives: A: > B: DRIVE TRACK SECTOR OPTIONS MISC QUIT Locksmith/PC Ver. 0.0 ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ¿
TRACK: 0000000000000001111111111111112222222222 ³ Sector: 00 ³
123456789ABCDEF012345678ABCDEF0123456789 ³ T H S N Stat % ³
Head 0: ................Window #1............... ³ ³
Head 1: ........................................ ³ 00 0 1 2 0000 09 ³
ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ´ 00 0 2 2 0000 09 ³ [0000] 0 1 2 3 4 5 6 7 8 9 A B C D E F³ 00 0 3 2 0000 11 ³ 0000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 4 2 0000 -11 ³ 0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 5 2 0000 12 ³ 0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 6 2 0000 14 ³ 0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 7 2 0000 00 ³ 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 8 2 0000 -02 ³ 0050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 9 2 0000 11 ³ 0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ 00 0 A 2 0000 29 ³ 0070 W i n d o w # 3 ³ ³ 0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³ 0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³ 00A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³ 00B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³ 00C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ Window #2 ³ 00D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³ 00E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³ 00F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00³ ³
Status Line - This line show all messages from Locksmith. I give discriptions
In the main and secondary menu modes.
Drives: A: > B: - The first letter [A:] is the Source drive and the second
letter is the Target drive
Drive - Change Drive information
Letter - Change the Source & Target drives
Controller - Change the FDC control codes
Track - Track Utilitys
Analyze - Analyze the selected track showing their N value and
any Errors.
Backup - Copy selected track from Source to Target drives
Format - Format selected track in Regular/IrRegular formats
Erase - Erase selected track to the Fill Byte
Hidden - Search for irregular sector sizes and number
Read - Read in a selected track
Write - Write out a selected track
Compare - Compare tracks with information in BUFFER
Print - Print out Track Buffer
Secoter - Sector Utilitys
Backup - Fast copy [35 sec.]
Read - Read in sectors
Write - Write out sectors
Compare - Compare sectors with memory
Options - Set up Locksmith's parameters
Misc - Misc. Functions
Reset - Reset all information to Default
PrintSetup - Redefine the print tables
Search - Define a string to Search for
Quit - Quit to DOS [A>]
Window #1: Current Track Window. This window is used for selecting what
Tracks are to be used. To get to this window press the [F1] key.
If a number (Track) has a "." under it then it is to be used.
The SPACEBAR is used to toggle a single Track. The "+" key is
used to toggle the whole side of a disk. Left and Right Arrows
keys are used to move the cursor.
Window #2: This is the Sector window. Here you will find the Size (N) and
the Error in the sector if any and the percent of the track taken up
by that sector. By examine the sector's number you can find out how
how the sectors are really numbered because some protection schemes
use abnormal sector numbering. HOME will take you to the top of the
screen to the Number of sectors [SECTORS: 00] prompt. This is used
in creating your own protection schemes which will be explained in
the next issue of KRACK: [F2] get this window
Window #3: The data window can be used to examine, edit and create data to
be written out to the disk. So protection schemes need certain
bytes to be changed. [F3] get you here while [F9] toggle Ascii/Hex
display. If a search string has been entered then [F10] will start
the search.
Copying something with locksmith is pretty easy. If the disk is unprotected then use the BACKUP in the SECTOR utilitys. If the disk is protected then you must use the BACKUP in the TRACK utilitys. The best way to copy a protected diskette is the first to Slow Copy the whole disk [TRACK utilitys] then write down any odd tracks (more sectors than the other errors etc.). Use Fast copy [SECTOR utilitys] to copy similar track then use Slow copy to copy the Fuckup tracks.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-LockSmith Parameters-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Lotus 123: Slow Copy Side 0 tracks 3,7 and Side 1 track 4. Fast copy the rest Harvard Project Manager v 1.1: Fast Copy all track the Analyze side 1 track 1A
Edit buffer and change address 0F46 to 01
Office Writer: Fast copy all track. Copy tracks 28,29 both sides Super Cala: Fast Copy all Tracks Infocom: Slow copy all tracks WordStar 2000: Fast copy all tracks XYWrite II: Fast copy all tracks
+—————————————————————————-+
| Official KRACK Boards |
+—————————————————————————-+ Do you want your board to be an official Krack board. Just leave a message on one of the current Krack Boards.
Spectrum 007 [24 hours]………………………………….[914]-338-8837 Outer Limits [24 hours]………………………………….[914]-462-0363 Thief World [Midnight-6am]………………………………[914]-462-2256
Comming Next Month….
Locksmith Tutorial Part 2
Beating SoftGuard
Cracking Strip Poker and PrintShop
Plus: More Locksmith paramters
Building a Black Box
Cap' Quazmo