Kingsoft Protection - Revision history

Enigma at 00:30, 17 April 2021

2021-04-17T00:30:38Z

← Older revision		Revision as of 00:30, 17 April 2021
Line 58:		Line 58:
	whereas this is the actual read data.		whereas this is the actual read data.

	Of course this only works because we map here the faster clocked speed zone 3 to the slower clocked speed zone 0.		Of course this only works because we map here the faster clocked speed zone 3 to the slower clocked speed zone 0. Please note that the speed zone 3 byte pattern can as well be different and still decode to the correct GCRs at speed zone 0.

Enigma at 22:03, 13 April 2021

2021-04-13T22:03:54Z

← Older revision		Revision as of 22:03, 13 April 2021
Line 8:		Line 8:
	[[File:quiwi_flux_plot.png\|thumb\|Flux plot of track 1]]		[[File:quiwi_flux_plot.png\|thumb\|Flux plot of track 1]]

	Track 1 Sector 20 decoded at speed zone 3. Notice the ~~wrong~~ data block.		Track 1 Sector 20 decoded at speed zone 3. Notice the data block area that is incorrect with decoding at speed zone 3.
	sync 31		sync 31
	; header		; header

Enigma at 21:47, 13 April 2021

2021-04-13T21:47:21Z

← Older revision		Revision as of 21:47, 13 April 2021
Line 48:		Line 48:
	This signature is the same for Side 0 and Side 1 of [[Quiwi]].		This signature is the same for Side 0 and Side 1 of [[Quiwi]].

	==== The Emulator G64 Speed Zone Problem ====		==== The Emulator G64 'Variable Speed Zone on the same track' Problem ====

	~~Now another problem comes up.~~ When using G64 as image format the tracks speed is purely determined by the track length in bytes in the emulators. The track ~~length rotates~~ virtually every 200ms ~~and~~ is decoded ~~once more~~ with the set speed zone. Thus, this ~~simplification of~~ the ~~G64 format prevents putting sectors with different~~ speed ~~zones into~~ a track in the ~~G64~~.		When using G64 as image format the tracks speed is purely determined by the track length in bytes in the emulators. The emulator rotates the track data virtually every 200ms. It is decoded again with the set speed zone. Thus, a previously decoded flux based stream with speed zone 3 is identical in the emulator when it is again decoded at a speed zone 3 setting. For this specific case we have the advantage that speed zone 3 uses a faster clock than speed zone 0 that we need for sector 20. Thus, if the track length of track 1 corresponds to speed zone 3 (default) and sector 20 is present as if the actual speed zone 0 data is encoded at speed 3 then in emulation set at speed zone 0 the data should be decoded with GCRs c4 48 ... etc.

	~~Now specifically for~~ this ~~protection a~~ trick can be exploited. In the D64 emulation the speed zone setting is basically ignored as only the data is read. Thus, after the 127 GCRs signature, that consists of valid GCRs the sector can simply be filled with any data. As the protection check ignores the checksum, we can set a valid data block checksum as well and get an error free D64.		So we save as track data in speed zone 3:
			bytes d9 71 d8 ...
			which is decoded in emulation when read as speed zone 0:
			gcr c4 49 45 53 ...
			whereas this is the actual read data.

			Of course this only works because we map here the faster clocked speed zone 3 to the slower clocked speed zone 0.


			Another trick can be exploited when targeting D64 format. In the D64 emulation the speed zone setting is basically ignored as only the data is read. Thus, after the 127 GCRs signature, that consists of valid GCRs the sector can simply be filled with any data. As the protection check ignores the checksum, we can set a valid data block checksum as well and get an error free D64.

	Thus for our D64 only:		Thus for our D64 only:
Line 67:		Line 76:
	gcr 0f		gcr 0f
	bytes 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 57		bytes 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 57

	~~==== Summary ====~~

	~~With the above considerations the image converted to D64 works properly. The same image as G64 does not work, since emulators do not emulate different speed zones within a track properly.~~

	For [[Quiwi]] on starting up the game the signature on side 0 is not checked. When disk is flipped the signature is checked on side 1. It is not verified if the signature on side 0 is checked later in the game.

	==== Pages that refer to this protection ====		==== Pages that refer to this protection ====

	{{Special:Whatlinkshere/Kingsoft Protection}}		{{Special:Whatlinkshere/Kingsoft Protection}}

Enigma at 17:26, 13 April 2021

2021-04-13T17:26:38Z

← Older revision		Revision as of 17:26, 13 April 2021
Line 71:		Line 71:

	With the above considerations the image converted to D64 works properly. The same image as G64 does not work, since emulators do not emulate different speed zones within a track properly.		With the above considerations the image converted to D64 works properly. The same image as G64 does not work, since emulators do not emulate different speed zones within a track properly.

			For [[Quiwi]] on starting up the game the signature on side 0 is not checked. When disk is flipped the signature is checked on side 1. It is not verified if the signature on side 0 is checked later in the game.

	==== Pages that refer to this protection ====		==== Pages that refer to this protection ====

	{{Special:Whatlinkshere/Kingsoft Protection}}		{{Special:Whatlinkshere/Kingsoft Protection}}

Enigma at 10:08, 13 April 2021

2021-04-13T10:08:53Z

← Older revision		Revision as of 10:08, 13 April 2021
Line 34:		Line 34:
	bits 1		bits 1

	~~Just the~~ data block decoded at speed zone 0 returns a block with a correct start and correct GCR 07 as data block id:		The same data block decoded at speed zone 0 returns a block with a correct start and correct GCR 07 as data block id:
	sync 31		sync 31
	; data		; data

Enigma at 10:06, 13 April 2021

2021-04-13T10:06:15Z

@@ Line 1: / Line 1: @@
-Descriptions needs to be done.
+This protection appears on various games by Kingsoft.
 ==== Pages that refer to this protection ====
 {{Special:Whatlinkshere/Kingsoft Protection}}

Enigma: Created page with "Descriptions needs to be done. ==== Pages that refer to this protection ==== {{Special:Whatlinkshere/Kingsoft Protection}}"

2021-04-13T09:28:25Z

Created page with "Descriptions needs to be done. ==== Pages that refer to this protection ==== {{Special:Whatlinkshere/Kingsoft Protection}}"

New page

Descriptions needs to be done.

==== Pages that refer to this protection ====

{{Special:Whatlinkshere/Kingsoft Protection}}