Their Finest Hour by The Underground Council (UGC)
64 of 5,748 files
cracktro or intro
-
This download is an executable MS-DOS program that will not run on a modern computer.
It needs a DOS emulator such as DOSBox-X, Staging;
or a virtualized MS-DOS or FreeDOS system.
Browsers may flag this download as unwanted or malicious. If unsure, scan it with VirusTotal. -
Last modified Oct 12, 1991 11:52:38 PM
MD5 checksum 9ccbecc7c1c35b18c2f64765b75b7307
Mime type Zip archive data
Download BOBUGC1.ZIP
Size 183 kB
1989 October 20
- Zip - DOS / Cracktro or intro
- Black Star, writer credits
- Black Star, Sam Brown, program credits
19 items in the archive
- ADLIBSFX
- INSTALL.BAT
- INSTALL4.BAT
- RUNME.BAT
- BOB.EXE
- GMAT.GOB
- GOBS.GOB
- READ.ME
- AIR4.PAC
- AIR4S.PAC
- AIRFX1.PAC
- AIRFX1S.PAC
- INTRO.PAC
- SHIPV1.PAC
- SHIPV1S.PAC
- WTR2.PAC
- WTR2S.PAC
- WTRFX1S.PAC
- SFX.SFX
-----------
Cracked by Black Star and Sam Brown
Many thanks to Warlord and Malignant Growth (SysOps of Fungus Land) for
supplying us this game!
Well, this one LOOKED difficult, but once we got started in it, it was pretty
straighforward. The game requires that you "tune" your radio to a specific
three digit number -- and each digit can be red, white, or blue. Pretty nasty
doc check. Anyway, I loaded up the BOB.EXE file into EMS (using Turbo Debugger
386) and executed it. I have TD set so the Alt-SysRq key is an unconditional
break at the current CS:IP. I executed until I hit the doc check window and
Alt-SysRq'd. Then, I traced through the routines until I found a RET or RETF.
Actually, this is intuitive -- a combination of paging down the through the
code and tracing. When you break, you're usually in a mouse/keyboard/video
routine, very low level, and have to trace up to the calling routine. This one
required 12 traces to get to what looked like a nice high level. Anyway, you
write all these addresses down where the calls originate. Then step over the
calls -- see what each one does. Find the one that pulls up the doc check
window and look at what memory bytes it changes in the global data area
(usually DS). Then check for compares against that address and reverse the
subsequent branch -- eg, JNE to JE. Killed the routine that pulls up the
window and played it. It still says "Tune your radio!" but it no longer
pulls up the window or restricts any flying function. Hmm... Sam checked and
found another flag and showed me the instruction to reverse. Tryed it and it
worked perfectly. Modified some of the text in the program to brag a bit,
tested the thing for about 3-4 hours, and wrote this text file.
Black Star