Looking for synchro video protection sources/explains.

All 680x0 related coding posts in this section please.

Moderators: simonsunnyboy, Mug UK, Zorro 2, Moderator Team

hakkuh
Atari User
Atari User
Posts: 37
Joined: Tue Jun 07, 2005 6:35 pm

Looking for synchro video protection sources/explains.

Postby hakkuh » Sat Jul 02, 2005 11:56 pm

Hi !

I'm looking for synchro video protection sources/explains.

Thanks
:D

User avatar
Zorro 2
Administrator
Administrator
Posts: 2194
Joined: Tue May 21, 2002 12:44 pm
Location: Saint Cloud (France)
Contact:

Postby Zorro 2 » Mon Jul 04, 2005 8:15 am

Overscan left-right border or top-bottom border or maybe twice ???
Member of NoExtra Team

hakkuh
Atari User
Atari User
Posts: 37
Joined: Tue Jun 07, 2005 6:35 pm

Halliao!

Postby hakkuh » Mon Jul 04, 2005 9:09 am

8) 8) 8)

Hum, not overscan, not border remover. It's a protection used in conjunction between $ffff8209.w & data encrypt/decrypt. You cannot stop the decode in progress as it works with a counter. Funny ?

I don't really remind if it was explicated in on a ST Mag issue.

8) 8) 8)

terence
Atari nerd
Atari nerd
Posts: 46
Joined: Fri Jul 01, 2005 11:36 am

Postby terence » Mon Jul 04, 2005 9:14 am

mcoder did a protection like this, for the ovr demos.
so you can have a look in those one
i think i also used it in transbeauce 2, so i must have the source somewhere on my HD (in the roof of the house...)

if anybody from overlanders or mcoder himself just passes by here, and says it is ok to spread it, i will do so.

Zippy
Obsessive compulsive Atari behavior
Obsessive compulsive Atari behavior
Posts: 137
Joined: Sun Feb 01, 2004 1:58 am

Postby Zippy » Mon Jul 04, 2005 9:30 am

Here's the front end of my sync/trace encryption code, the important bit is the "trace" routine, which ran on the trace exception (so it was executed after each instruction to decrypt the next one).

A0 point to $ffff8209 (the video address pointer low byte, which is constantly changing as the code is being executed). It even adds in the status register to the decryption (twice!), which will change depending on what the next decrypted instruction does with the flags.

And just to make it really tricky (time consuming) to calculate the values by hand it has a DBF loop based on the video pointer low byte as well!

Once the setup is done execution is jumped to "tracer" (all the dc.l stuff) which is the encrypted code.

Code: Select all

start   bra atex
   dc.b "* LITTLE PROTECTION NUMBER 2.06 BY GL! *"
atex   lea (start-$100)(pc),a6
   lea (super+2)(pc),a5
   move.l sp,(a5)
   move.w sr,d0
   btst #$d,d0
   bne super
   clr.l -(sp)
   move.w #$20,-(sp)
   trap #1
   move.l d0,(a5)
   bra super
setup   move.l a6,$43a.w
   lea saved(pc),a0
   move.b $fffffa07.w,(a0)+
   move.b $fffffa09.w,(a0)+
   move.l $70.w,(a0)+
   move.b #2,$ffff820a.w
   move.w #$2700,sr
   clr.b $fffffa07.w
   clr.b $fffffa09.w
   lea int(pc),a0
   move.l a0,$70.w
   lea trace(pc),a0
   lea super(pc),a1
   lea $77000,a2
.1   move.w (a0)+,(a2)+
   cmp.l a1,a0
   bne.s .1
   rts
trace   add.w (sp),d7
   sub.b (a0),d7
   move.l $24.w,a1
   lea super(pc),a2
.1   move.w (a1)+,d0
   eor.w d0,d7
   ror.l #3,d7
   add.l a0,d7
   add.l a2,d7
   sub.l a3,d7
   add.l a4,d7
   move.l a1,d1
   eor.l d1,d7
   eor.l d0,d7
   eor.l d2,d7
   eor.l d3,d7
   eor.l d4,d7
   eor.l d5,d7
   eor.l d6,d7
   not.l d7
   cmp.l a2,a1
   bne.s .1
   add.l $10.w,d6
   eor.l d6,d7
   rol.l #7,d6
   eor.l d6,$10.w
   eor.l d7,d6
   eor.l d7,d5
   eor.l d7,d4
   eor.l d7,d3
   eor.l d7,d2
   eor.l d7,d1
   eor.l d7,d0
   add.l d7,a3
   sub.l a3,a4
   sub.b (a0),d0
   and.w #$ff,d0
.2   dbf d0,.2
   eor.l d7,(a5)
   ror.l #7,d7
   move.l 2(sp),a6
   add.b (a0),d7
   move.w sr,d0
   eor.b d0,d7
   eor.l d7,(a6)
   move.l a6,a5
int   rte
super   lea 0,sp
   bsr setup
   move.l #$77000,$24.w
   move.l #$12345678,$10.w
   movem.l regs(pc),d0-a6
   stop #$2300
   stop #$2300
   move.w #$2700,sr
wp   move.b (a0),d1
   beq.s wp
   sub.b d1,d0
   lsl.b d0,d0
   lea super(pc),a5
   move.w #$a700,sr
   bra.s tracer
regs   dc.l $10,'ENJO','Y TH','E TR','ACE/','SYNC'
   dc.l ' ROU','TINE',$ffff8209,'AND ','HAVE'
   dc.l 'A NI','CE D','AY!!','*GL*'
tracer   dc.l $d3a3a2ef,$09b8e923,$24d0d210,$7ba80828
   dc.l $9abba91b,$0732bbf8,$a5abad01,$027a0247
   dc.l $a73b5768,$10fa556f,$3ab83a03,$bde93fa5
   dc.l $f8e2319e,$5a45f8a2,$490df9c9,$41220d6a
   dc.l $a8a81c43,$5bb9cb38,$8ae83eb5,$d61cbea7
   dc.l $11573290,$5b6c398b,$c79cc0a1,$43b1a8b7
   dc.l $28a31fd3,$704a35fb,$3048704c,$c1865baa
   dc.l $ebb0bb7b,$704258d8,$e5ebfa29,$2cd61013
   dc.l $701602e5,$55e16a26,$e4b57044,$19077c76
   dc.l $37344169,$c6495dae,$5a833fe0,$74a3e3ef
   dc.l $dff33bc5,$76234251,$071b6508,$c38ee84c
   dc.l $620385f2,$55cad363,$80d9c07c,$16251da0
   dc.l $c50db123,$8e425afe,$7094bbe6,$1c42aaf3
   dc.l $90b6b87e,$1659c023,$efa3ad9c,$05a0be21
   dc.l $40614dab,$a1dded5b,$e31650c8,$a0f8a73c
   dc.l $a1d57f73,$8eb83eb0,$0f59338d,$aad5af83
   dc.l $9e62e1d8,$8fdb045a,$45f89879,$eb7e1628
   dc.l $4708ec69,$f90281ed,$80a7e8cc,$628fc9af
   dc.l $ddce07f4,$aebb1a3a,$cfdd4efe,$76dfef3b
   dc.l $23413e78,$c0dc1d4e,$187c449c,$3196917f
   dc.l $ce855b73,$2657513e,$74c44e69,$3bf96bf6
   dc.l $094f5571,$07f49458,$9b2cd9a8,$a1fd39f8
   dc.l $0fdd089d,$f71d7795,$6b9f523a,$56bf78d5
   dc.l $40d3ea18,$5fb895b2,$b157c45b,$cf1535ed
   dc.l $f48099d1,$ffd612f3,$7f78e665,$aaa22859
   dc.l $adf62384,$8230a812,$0ffea911,$1f317abc
   dc.l $a931cb0f,$2246a818,$23489ac9,$0a19fecb
   dc.l $8416f31b,$9ac6601d,$891dde80,$a81ad945
   dc.l $453819ac,$bce8af50,$a9f5e632,$c5a09d71
   dc.l $9a83a8cb,$c8ea944a,$9a7bce42,$338a3bc0
   dc.l $516c6abe,$92710c1b,$018bcd7a
   dc.w $912c

User avatar
ggn
Atari God
Atari God
Posts: 1180
Joined: Sat Dec 28, 2002 4:49 pm

Postby ggn » Mon Jul 04, 2005 12:23 pm

Hmm, the included text in the routine reminds me of some demos bootsectors. Was it used there?
is 73 Falcon patched atari games enough ? ^^

hakkuh
Atari User
Atari User
Posts: 37
Joined: Tue Jun 07, 2005 6:35 pm

Good ! Thanks !

Postby hakkuh » Mon Jul 04, 2005 1:26 pm

:?:

Leonard's demos also use?

Thanks for the explains, I'm really interested in trace mode too as "many" cryptors use this technics (Antibitos...). If someone know how work/pass/code the <R.al> one (use on "Batman the movie", no sync lock if I remind), welcome.

:?:

User avatar
illegal
Atari Forever
Posts: 55
Joined: Sat Dec 06, 2003 12:53 pm

antibitos & co

Postby illegal » Mon Oct 31, 2005 3:00 pm

i'm surprised that my antibitos is still interesting people...
by the way it is interesting to notice that the first trace routine protected with syncro was on the legendary tcb'c cuddly demos;

unfortunately for them they put too many nops in their trace routine
instead of this, they should have used a "unsused" register in the code

User avatar
leonard
Moderator
Moderator
Posts: 640
Joined: Thu May 23, 2002 10:48 pm
Contact:

Postby leonard » Thu Nov 03, 2005 9:59 am

Leonard's demos also use?


I love ST, I love demos, and I love protections :-) I used the trace routine several times. (ex in the "Flip-o-Demo").
My biggest protection is in the "O-Demo" (using a "conway game of life", I guess that one is quite hard to crack)

by the way it is interesting to notice that the first trace routine protected with syncro was on the legendary tcb'c cuddly demos


I heard this too. But anyway some time ago in another thread (about floppy disk protection), the famous "Rob Norhten" protection was discussed and it seems he used a "trace routine" to hide some code to the cracker. Does anyone know if it's older than Cuddly demo ? (I suppose).
Leonard/OXYGENE.

terence
Atari nerd
Atari nerd
Posts: 46
Joined: Fri Jul 01, 2005 11:36 am

Postby terence » Fri Nov 04, 2005 2:21 pm

leonard wrote:
Leonard's demos also use?


I love ST, I love demos, and I love protections :-) I used the trace routine several times. (ex in the "Flip-o-Demo").
My biggest protection is in the "O-Demo" (using a "conway game of life", I guess that one is quite hard to crack)

by the way it is interesting to notice that the first trace routine protected with syncro was on the legendary tcb'c cuddly demos


I heard this too. But anyway some time ago in another thread (about floppy disk protection), the famous "Rob Norhten" protection was discussed and it seems he used a "trace routine" to hide some code to the cracker. Does anyone know if it's older than Cuddly demo ? (I suppose).


i don't think that Rob Northen used synchro, only a trace routine.
i'm not sure that synchro is really 100% always the same on all ST

User avatar
Cyrano Jones
Atari Super Hero
Atari Super Hero
Posts: 662
Joined: Wed May 28, 2003 8:28 pm

Postby Cyrano Jones » Fri Nov 04, 2005 3:50 pm

Rob.N used a trace routine - no sync protection.

Maybe i'll put the protection shell for Apathetic Games online for everyone to look at sometime....

It plain and simple does not run in steem :)

ijor
Hardware Guru
Hardware Guru
Posts: 3294
Joined: Sat May 29, 2004 7:52 pm
Contact:

Postby ijor » Fri Nov 04, 2005 4:29 pm

Cyrano Jones wrote:Maybe i'll put the protection shell for Apathetic Games online for everyone to look at sometime....

It plain and simple does not run in steem :)


Some months ago, I checked a demo with a sync protection that Steem couldn't run. As I mentioned on the relevant thread, the problem was the timing of a DIV instruction.

So now that the timing of DIV is solved, next version of Steem hopefully will run that demo.

User avatar
Cyrano Jones
Atari Super Hero
Atari Super Hero
Posts: 662
Joined: Wed May 28, 2003 8:28 pm

Postby Cyrano Jones » Fri Nov 04, 2005 4:55 pm

Yes, I believe I had a DIV in my sync/trace routine amongst other things.

Maartau
Fuji Shaped Bastard
Fuji Shaped Bastard
Posts: 2607
Joined: Thu Dec 15, 2005 2:15 am
Location: France

Postby Maartau » Tue Jan 31, 2006 3:20 pm

Cyrano Jones wrote:Rob.N used a trace routine - no sync protection.

Maybe i'll put the protection shell for Apathetic Games online for everyone to look at sometime....

It plain and simple does not run in steem :)



Yes please... Will be very happy :wink: :wink: :wink:

Maartau
Fuji Shaped Bastard
Fuji Shaped Bastard
Posts: 2607
Joined: Thu Dec 15, 2005 2:15 am
Location: France

Re:

Postby Maartau » Wed Jul 22, 2015 12:32 am

terence wrote:mcoder did a protection like this, for the ovr demos.
so you can have a look in those one
i think i also used it in transbeauce 2, so i must have the source somewhere on my HD (in the roof of the house...)

if anybody from overlanders or mcoder himself just passes by here, and says it is ok to spread it, i will do so.


Any news about the source ? :cheers:


Social Media

     

Return to “680x0”

Who is online

Users browsing this forum: No registered users and 1 guest

cron