Home » Personal collection » Acorn ADFS disks » Electron_User_Group » EUG_28.ADF » L/+Belis2

L/+Belis2

This website contains an archive of files for the Acorn Electron, BBC Micro, Acorn Archimedes, Commodore 16 and Commodore 64 computers, which Dominic Ford has rescued from his private collection of floppy disks and cassettes.

Some of these files were originally commercial releases in the 1980s and 1990s, but they are now widely available online. I assume that copyright over them is no longer being asserted. If you own the copyright and would like files to be removed, please contact me.

Tape/disk: Home » Personal collection » Acorn ADFS disks » Electron_User_Group » EUG_28.ADF
Filename: L/+Belis2
Read OK:
File size: 13FE bytes
Load address: 2B206576
Exec address: 696C6542
File contents
Reply to Rob Sprowson RE: Thrust Hardware Scrolling Routine
      to everyone : Hacking Tips

Thanks for the tip in EUG26 Rob.

(For everyone's benefit) My objective is to save a memory dump of THRUST,
in order to extract routines for my own games etc..., especially the
hardware scrolling routine which THRUST uses - the screen scrolls by a
fixed amount when your ship reaches a set distance from the edge of the
screen.

I had the usual problems, in that as with most games, the author uses
EORing routines to make life difficult for hackers.  In the case of
THRUST, there is more than one EORing routine, as well as the code and
data relocation routines.  Previous attempts to decypher the code after
running one EORing routine have yielded mostly gibberish, so I was looking
for another method of getting the decoded game onto a disk.

Following Rob's tip in EUG26 of causing an IRQ by pulling the NIRQ pin
of the 1MHz bus low (by shorting pin 7 to pin 8 with a screwdriver) and
trapping the interrupt in a sideways RAM image with service call &05, I
have managed to save most of the game to disk in decoded form. (The parts
which remain are &D00 to &DFF - the NMI workspace - as I decided that
saving to tape was too laborious, being used to disk systems with instant
file access; and &700 to &780 - the CLI buffer - which is corrupted by
*SAVEing the contents of memory to disk).  Attempts to *SAVE to memory
from the sideways RAM image failed.  I shall save the missing bits later,
using a memory relocation routine in the sideways RAM image.

The machine configuration was as follows for the successful save:

Master 128 with double DSDD 5.25" drive.
Important *configure parameters:   Mode 128 - important not to wipe
                                   main memory when break is pressed.
                                   File 9 - ADFS
                                   No Directory
                                   No Boot - autoboot would be a
                                   nuisance.

The program THHACK was used to create a ROM image in sideways RAM which
would intercept the unrecognised interrupt and disable the wipe-on-break
function of *FX200,3.  This program is on the disk.

The following is a record of what happened:

*FX151,78,127          disable all IRQs

<CTRL-BREAK>           reset machine.  Since the IRQs are disabled, the
                       machine is reset to its power-on state.  This
                       technique will clear even the mysterious ROM-not-
                       found-even-when-it-wasn't-*UNPLUGged errors (see
                       later).

*DIR $.THRUST          Move to ADFS directory containing THHACK and
                       THRUST.

CHAIN"THHACK"          Run hacking program.

PRINT ~O%              Get location of end of source code (O% is used on
e.g. 944               the Master series to enable code to be set to run
                       elsewhere in memory - in this case at &8000)

*SAVE THHACK? 900 945 8000     save the RAM image.

*SRLOAD THHACK? 8000 4 Q       load RAM image into SWRAM bank 4.

<CTRL-BREAK>           reset to ADFS, Mode 128 and install RAM image.

*DIR $.THRUST          go to THRUST directory.

*THRUST                run THRUST game.

lift computer, ready to interrupt the game.

short pins 7-8 of 1MHz bus with a screwdriver.

                       the machine locks up, as the error stack has filled
                       up, due to "switch bounce" on the 1MHz bus pins,
                       and has begun to overwrite the stack.

                       N.B. - I noticed that THRUST intercepts the IRQ1V
                       vector - if it had masked all the IRQs it didn't
                       use (by returning with RTI instead of exiting via
                       the old contents of the vector), then it might not
                       have permitted the MOS to pass the 1MHz bus
                       interrupt round the paged ROMs for the THHACK ROM
                       to intercept it.

<CTRL-BREAK>           This is safe, as the ROM code has disabled the
                       wipe-on-break with *FX200,0

                       the machine is reset to mode 128 and BASIC, but
                       ADFS is nowhere to be found!

<CTRL-D-BREAK>         Try DFS instead.

grab a DFS disk

*SAVE MEM 0 8000       Save memory to disk (no point saving mamory above
                       &8000 as it will contain the DFS ROM, workspace and
                       the MOS)

*SAVE MEM2 E00 8000    Save a block of memory which can be reloaded
                       (attempting to reload a file over MOS variables or
                       NMI workspace will cause a crash)

*DUMP MEM <CTRL-N>     look through memory dump for messages such as
                       "Game over" or "Press space to start", and
                       note their locations in memory (in some games the
                       messages appear backwards - note the location of
                       the last letter or trailing null byte in this
                       case).

And so the process continues...

00000000  52 65 70 6c 79 20 74 6f  20 52 6f 62 20 53 70 72  |Reply to Rob Spr|
00000010  6f 77 73 6f 6e 20 52 45  3a 20 54 68 72 75 73 74  |owson RE: Thrust|
00000020  20 48 61 72 64 77 61 72  65 20 53 63 72 6f 6c 6c  | Hardware Scroll|
00000030  69 6e 67 20 52 6f 75 74  69 6e 65 0d 20 20 20 20  |ing Routine.    |
00000040  20 20 74 6f 20 65 76 65  72 79 6f 6e 65 20 3a 20  |  to everyone : |
00000050  48 61 63 6b 69 6e 67 20  54 69 70 73 0d 0d 54 68  |Hacking Tips..Th|
00000060  61 6e 6b 73 20 66 6f 72  20 74 68 65 20 74 69 70  |anks for the tip|
00000070  20 69 6e 20 45 55 47 32  36 20 52 6f 62 2e 0d 0d  | in EUG26 Rob...|
00000080  28 46 6f 72 20 65 76 65  72 79 6f 6e 65 27 73 20  |(For everyone's |
00000090  62 65 6e 65 66 69 74 29  20 4d 79 20 6f 62 6a 65  |benefit) My obje|
000000a0  63 74 69 76 65 20 69 73  20 74 6f 20 73 61 76 65  |ctive is to save|
000000b0  20 61 20 6d 65 6d 6f 72  79 20 64 75 6d 70 20 6f  | a memory dump o|
000000c0  66 20 54 48 52 55 53 54  2c 0d 69 6e 20 6f 72 64  |f THRUST,.in ord|
000000d0  65 72 20 74 6f 20 65 78  74 72 61 63 74 20 72 6f  |er to extract ro|
000000e0  75 74 69 6e 65 73 20 66  6f 72 20 6d 79 20 6f 77  |utines for my ow|
000000f0  6e 20 67 61 6d 65 73 20  65 74 63 2e 2e 2e 2c 20  |n games etc..., |
00000100  65 73 70 65 63 69 61 6c  6c 79 20 74 68 65 0d 68  |especially the.h|
00000110  61 72 64 77 61 72 65 20  73 63 72 6f 6c 6c 69 6e  |ardware scrollin|
00000120  67 20 72 6f 75 74 69 6e  65 20 77 68 69 63 68 20  |g routine which |
00000130  54 48 52 55 53 54 20 75  73 65 73 20 2d 20 74 68  |THRUST uses - th|
00000140  65 20 73 63 72 65 65 6e  20 73 63 72 6f 6c 6c 73  |e screen scrolls|
00000150  20 62 79 20 61 0d 66 69  78 65 64 20 61 6d 6f 75  | by a.fixed amou|
00000160  6e 74 20 77 68 65 6e 20  79 6f 75 72 20 73 68 69  |nt when your shi|
00000170  70 20 72 65 61 63 68 65  73 20 61 20 73 65 74 20  |p reaches a set |
00000180  64 69 73 74 61 6e 63 65  20 66 72 6f 6d 20 74 68  |distance from th|
00000190  65 20 65 64 67 65 20 6f  66 20 74 68 65 0d 73 63  |e edge of the.sc|
000001a0  72 65 65 6e 2e 0d 0d 49  20 68 61 64 20 74 68 65  |reen...I had the|
000001b0  20 75 73 75 61 6c 20 70  72 6f 62 6c 65 6d 73 2c  | usual problems,|
000001c0  20 69 6e 20 74 68 61 74  20 61 73 20 77 69 74 68  | in that as with|
000001d0  20 6d 6f 73 74 20 67 61  6d 65 73 2c 20 74 68 65  | most games, the|
000001e0  20 61 75 74 68 6f 72 20  75 73 65 73 0d 45 4f 52  | author uses.EOR|
000001f0  69 6e 67 20 72 6f 75 74  69 6e 65 73 20 74 6f 20  |ing routines to |
00000200  6d 61 6b 65 20 6c 69 66  65 20 64 69 66 66 69 63  |make life diffic|
00000210  75 6c 74 20 66 6f 72 20  68 61 63 6b 65 72 73 2e  |ult for hackers.|
00000220  20 20 49 6e 20 74 68 65  20 63 61 73 65 20 6f 66  |  In the case of|
00000230  0d 54 48 52 55 53 54 2c  20 74 68 65 72 65 20 69  |.THRUST, there i|
00000240  73 20 6d 6f 72 65 20 74  68 61 6e 20 6f 6e 65 20  |s more than one |
00000250  45 4f 52 69 6e 67 20 72  6f 75 74 69 6e 65 2c 20  |EORing routine, |
00000260  61 73 20 77 65 6c 6c 20  61 73 20 74 68 65 20 63  |as well as the c|
00000270  6f 64 65 20 61 6e 64 0d  64 61 74 61 20 72 65 6c  |ode and.data rel|
00000280  6f 63 61 74 69 6f 6e 20  72 6f 75 74 69 6e 65 73  |ocation routines|
00000290  2e 20 20 50 72 65 76 69  6f 75 73 20 61 74 74 65  |.  Previous atte|
000002a0  6d 70 74 73 20 74 6f 20  64 65 63 79 70 68 65 72  |mpts to decypher|
000002b0  20 74 68 65 20 63 6f 64  65 20 61 66 74 65 72 0d  | the code after.|
000002c0  72 75 6e 6e 69 6e 67 20  6f 6e 65 20 45 4f 52 69  |running one EORi|
000002d0  6e 67 20 72 6f 75 74 69  6e 65 20 68 61 76 65 20  |ng routine have |
000002e0  79 69 65 6c 64 65 64 20  6d 6f 73 74 6c 79 20 67  |yielded mostly g|
000002f0  69 62 62 65 72 69 73 68  2c 20 73 6f 20 49 20 77  |ibberish, so I w|
00000300  61 73 20 6c 6f 6f 6b 69  6e 67 0d 66 6f 72 20 61  |as looking.for a|
00000310  6e 6f 74 68 65 72 20 6d  65 74 68 6f 64 20 6f 66  |nother method of|
00000320  20 67 65 74 74 69 6e 67  20 74 68 65 20 64 65 63  | getting the dec|
00000330  6f 64 65 64 20 67 61 6d  65 20 6f 6e 74 6f 20 61  |oded game onto a|
00000340  20 64 69 73 6b 2e 0d 0d  46 6f 6c 6c 6f 77 69 6e  | disk...Followin|
00000350  67 20 52 6f 62 27 73 20  74 69 70 20 69 6e 20 45  |g Rob's tip in E|
00000360  55 47 32 36 20 6f 66 20  63 61 75 73 69 6e 67 20  |UG26 of causing |
00000370  61 6e 20 49 52 51 20 62  79 20 70 75 6c 6c 69 6e  |an IRQ by pullin|
00000380  67 20 74 68 65 20 4e 49  52 51 20 70 69 6e 0d 6f  |g the NIRQ pin.o|
00000390  66 20 74 68 65 20 31 4d  48 7a 20 62 75 73 20 6c  |f the 1MHz bus l|
000003a0  6f 77 20 28 62 79 20 73  68 6f 72 74 69 6e 67 20  |ow (by shorting |
000003b0  70 69 6e 20 37 20 74 6f  20 70 69 6e 20 38 20 77  |pin 7 to pin 8 w|
000003c0  69 74 68 20 61 20 73 63  72 65 77 64 72 69 76 65  |ith a screwdrive|
000003d0  72 29 20 61 6e 64 0d 74  72 61 70 70 69 6e 67 20  |r) and.trapping |
000003e0  74 68 65 20 69 6e 74 65  72 72 75 70 74 20 69 6e  |the interrupt in|
000003f0  20 61 20 73 69 64 65 77  61 79 73 20 52 41 4d 20  | a sideways RAM |
00000400  69 6d 61 67 65 20 77 69  74 68 20 73 65 72 76 69  |image with servi|
00000410  63 65 20 63 61 6c 6c 20  26 30 35 2c 20 49 0d 68  |ce call &05, I.h|
00000420  61 76 65 20 6d 61 6e 61  67 65 64 20 74 6f 20 73  |ave managed to s|
00000430  61 76 65 20 6d 6f 73 74  20 6f 66 20 74 68 65 20  |ave most of the |
00000440  67 61 6d 65 20 74 6f 20  64 69 73 6b 20 69 6e 20  |game to disk in |
00000450  64 65 63 6f 64 65 64 20  66 6f 72 6d 2e 20 28 54  |decoded form. (T|
00000460  68 65 20 70 61 72 74 73  0d 77 68 69 63 68 20 72  |he parts.which r|
00000470  65 6d 61 69 6e 20 61 72  65 20 26 44 30 30 20 74  |emain are &D00 t|
00000480  6f 20 26 44 46 46 20 2d  20 74 68 65 20 4e 4d 49  |o &DFF - the NMI|
00000490  20 77 6f 72 6b 73 70 61  63 65 20 2d 20 61 73 20  | workspace - as |
000004a0  49 20 64 65 63 69 64 65  64 20 74 68 61 74 0d 73  |I decided that.s|
000004b0  61 76 69 6e 67 20 74 6f  20 74 61 70 65 20 77 61  |aving to tape wa|
000004c0  73 20 74 6f 6f 20 6c 61  62 6f 72 69 6f 75 73 2c  |s too laborious,|
000004d0  20 62 65 69 6e 67 20 75  73 65 64 20 74 6f 20 64  | being used to d|
000004e0  69 73 6b 20 73 79 73 74  65 6d 73 20 77 69 74 68  |isk systems with|
000004f0  20 69 6e 73 74 61 6e 74  0d 66 69 6c 65 20 61 63  | instant.file ac|
00000500  63 65 73 73 3b 20 61 6e  64 20 26 37 30 30 20 74  |cess; and &700 t|
00000510  6f 20 26 37 38 30 20 2d  20 74 68 65 20 43 4c 49  |o &780 - the CLI|
00000520  20 62 75 66 66 65 72 20  2d 20 77 68 69 63 68 20  | buffer - which |
00000530  69 73 20 63 6f 72 72 75  70 74 65 64 20 62 79 0d  |is corrupted by.|
00000540  2a 53 41 56 45 69 6e 67  20 74 68 65 20 63 6f 6e  |*SAVEing the con|
00000550  74 65 6e 74 73 20 6f 66  20 6d 65 6d 6f 72 79 20  |tents of memory |
00000560  74 6f 20 64 69 73 6b 29  2e 20 20 41 74 74 65 6d  |to disk).  Attem|
00000570  70 74 73 20 74 6f 20 2a  53 41 56 45 20 74 6f 20  |pts to *SAVE to |
00000580  6d 65 6d 6f 72 79 0d 66  72 6f 6d 20 74 68 65 20  |memory.from the |
00000590  73 69 64 65 77 61 79 73  20 52 41 4d 20 69 6d 61  |sideways RAM ima|
000005a0  67 65 20 66 61 69 6c 65  64 2e 20 20 49 20 73 68  |ge failed.  I sh|
000005b0  61 6c 6c 20 73 61 76 65  20 74 68 65 20 6d 69 73  |all save the mis|
000005c0  73 69 6e 67 20 62 69 74  73 20 6c 61 74 65 72 2c  |sing bits later,|
000005d0  0d 75 73 69 6e 67 20 61  20 6d 65 6d 6f 72 79 20  |.using a memory |
000005e0  72 65 6c 6f 63 61 74 69  6f 6e 20 72 6f 75 74 69  |relocation routi|
000005f0  6e 65 20 69 6e 20 74 68  65 20 73 69 64 65 77 61  |ne in the sidewa|
00000600  79 73 20 52 41 4d 20 69  6d 61 67 65 2e 0d 0d 54  |ys RAM image...T|
00000610  68 65 20 6d 61 63 68 69  6e 65 20 63 6f 6e 66 69  |he machine confi|
00000620  67 75 72 61 74 69 6f 6e  20 77 61 73 20 61 73 20  |guration was as |
00000630  66 6f 6c 6c 6f 77 73 20  66 6f 72 20 74 68 65 20  |follows for the |
00000640  73 75 63 63 65 73 73 66  75 6c 20 73 61 76 65 3a  |successful save:|
00000650  0d 0d 4d 61 73 74 65 72  20 31 32 38 20 77 69 74  |..Master 128 wit|
00000660  68 20 64 6f 75 62 6c 65  20 44 53 44 44 20 35 2e  |h double DSDD 5.|
00000670  32 35 22 20 64 72 69 76  65 2e 0d 49 6d 70 6f 72  |25" drive..Impor|
00000680  74 61 6e 74 20 2a 63 6f  6e 66 69 67 75 72 65 20  |tant *configure |
00000690  70 61 72 61 6d 65 74 65  72 73 3a 20 20 20 4d 6f  |parameters:   Mo|
000006a0  64 65 20 31 32 38 20 2d  20 69 6d 70 6f 72 74 61  |de 128 - importa|
000006b0  6e 74 20 6e 6f 74 20 74  6f 20 77 69 70 65 0d 20  |nt not to wipe. |
000006c0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
*
000006e0  20 20 6d 61 69 6e 20 6d  65 6d 6f 72 79 20 77 68  |  main memory wh|
000006f0  65 6e 20 62 72 65 61 6b  20 69 73 20 70 72 65 73  |en break is pres|
00000700  73 65 64 2e 0d 20 20 20  20 20 20 20 20 20 20 20  |sed..           |
00000710  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000720  20 20 20 20 20 20 20 20  46 69 6c 65 20 39 20 2d  |        File 9 -|
00000730  20 41 44 46 53 0d 20 20  20 20 20 20 20 20 20 20  | ADFS.          |
00000740  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000750  20 20 20 20 20 20 20 20  20 4e 6f 20 44 69 72 65  |         No Dire|
00000760  63 74 6f 72 79 0d 20 20  20 20 20 20 20 20 20 20  |ctory.          |
00000770  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000780  20 20 20 20 20 20 20 20  20 4e 6f 20 42 6f 6f 74  |         No Boot|
00000790  20 2d 20 61 75 74 6f 62  6f 6f 74 20 77 6f 75 6c  | - autoboot woul|
000007a0  64 20 62 65 20 61 0d 20  20 20 20 20 20 20 20 20  |d be a.         |
000007b0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
000007c0  20 20 20 20 20 20 20 20  20 20 6e 75 69 73 61 6e  |          nuisan|
000007d0  63 65 2e 0d 0d 54 68 65  20 70 72 6f 67 72 61 6d  |ce...The program|
000007e0  20 54 48 48 41 43 4b 20  77 61 73 20 75 73 65 64  | THHACK was used|
000007f0  20 74 6f 20 63 72 65 61  74 65 20 61 20 52 4f 4d  | to create a ROM|
00000800  20 69 6d 61 67 65 20 69  6e 20 73 69 64 65 77 61  | image in sidewa|
00000810  79 73 20 52 41 4d 20 77  68 69 63 68 0d 77 6f 75  |ys RAM which.wou|
00000820  6c 64 20 69 6e 74 65 72  63 65 70 74 20 74 68 65  |ld intercept the|
00000830  20 75 6e 72 65 63 6f 67  6e 69 73 65 64 20 69 6e  | unrecognised in|
00000840  74 65 72 72 75 70 74 20  61 6e 64 20 64 69 73 61  |terrupt and disa|
00000850  62 6c 65 20 74 68 65 20  77 69 70 65 2d 6f 6e 2d  |ble the wipe-on-|
00000860  62 72 65 61 6b 0d 66 75  6e 63 74 69 6f 6e 20 6f  |break.function o|
00000870  66 20 2a 46 58 32 30 30  2c 33 2e 20 20 54 68 69  |f *FX200,3.  Thi|
00000880  73 20 70 72 6f 67 72 61  6d 20 69 73 20 6f 6e 20  |s program is on |
00000890  74 68 65 20 64 69 73 6b  2e 0d 0d 54 68 65 20 66  |the disk...The f|
000008a0  6f 6c 6c 6f 77 69 6e 67  20 69 73 20 61 20 72 65  |ollowing is a re|
000008b0  63 6f 72 64 20 6f 66 20  77 68 61 74 20 68 61 70  |cord of what hap|
000008c0  70 65 6e 65 64 3a 0d 0d  2a 46 58 31 35 31 2c 37  |pened:..*FX151,7|
000008d0  38 2c 31 32 37 20 20 20  20 20 20 20 20 20 20 64  |8,127          d|
000008e0  69 73 61 62 6c 65 20 61  6c 6c 20 49 52 51 73 0d  |isable all IRQs.|
000008f0  0d 3c 43 54 52 4c 2d 42  52 45 41 4b 3e 20 20 20  |.<CTRL-BREAK>   |
00000900  20 20 20 20 20 20 20 20  72 65 73 65 74 20 6d 61  |        reset ma|
00000910  63 68 69 6e 65 2e 20 20  53 69 6e 63 65 20 74 68  |chine.  Since th|
00000920  65 20 49 52 51 73 20 61  72 65 20 64 69 73 61 62  |e IRQs are disab|
00000930  6c 65 64 2c 20 74 68 65  0d 20 20 20 20 20 20 20  |led, the.       |
00000940  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000950  6d 61 63 68 69 6e 65 20  69 73 20 72 65 73 65 74  |machine is reset|
00000960  20 74 6f 20 69 74 73 20  70 6f 77 65 72 2d 6f 6e  | to its power-on|
00000970  20 73 74 61 74 65 2e 20  20 54 68 69 73 0d 20 20  | state.  This.  |
00000980  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000990  20 20 20 20 20 74 65 63  68 6e 69 71 75 65 20 77  |     technique w|
000009a0  69 6c 6c 20 63 6c 65 61  72 20 65 76 65 6e 20 74  |ill clear even t|
000009b0  68 65 20 6d 79 73 74 65  72 69 6f 75 73 20 52 4f  |he mysterious RO|
000009c0  4d 2d 6e 6f 74 2d 0d 20  20 20 20 20 20 20 20 20  |M-not-.         |
000009d0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 66 6f  |              fo|
000009e0  75 6e 64 2d 65 76 65 6e  2d 77 68 65 6e 2d 69 74  |und-even-when-it|
000009f0  2d 77 61 73 6e 27 74 2d  2a 55 4e 50 4c 55 47 67  |-wasn't-*UNPLUGg|
00000a00  65 64 20 65 72 72 6f 72  73 20 28 73 65 65 0d 20  |ed errors (see. |
00000a10  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000a20  20 20 20 20 20 20 6c 61  74 65 72 29 2e 0d 0d 2a  |      later)...*|
00000a30  44 49 52 20 24 2e 54 48  52 55 53 54 20 20 20 20  |DIR $.THRUST    |
00000a40  20 20 20 20 20 20 4d 6f  76 65 20 74 6f 20 41 44  |      Move to AD|
00000a50  46 53 20 64 69 72 65 63  74 6f 72 79 20 63 6f 6e  |FS directory con|
00000a60  74 61 69 6e 69 6e 67 20  54 48 48 41 43 4b 20 61  |taining THHACK a|
00000a70  6e 64 0d 20 20 20 20 20  20 20 20 20 20 20 20 20  |nd.             |
00000a80  20 20 20 20 20 20 20 20  20 20 54 48 52 55 53 54  |          THRUST|
00000a90  2e 0d 0d 43 48 41 49 4e  22 54 48 48 41 43 4b 22  |...CHAIN"THHACK"|
00000aa0  20 20 20 20 20 20 20 20  20 20 52 75 6e 20 68 61  |          Run ha|
00000ab0  63 6b 69 6e 67 20 70 72  6f 67 72 61 6d 2e 0d 0d  |cking program...|
00000ac0  50 52 49 4e 54 20 7e 4f  25 20 20 20 20 20 20 20  |PRINT ~O%       |
00000ad0  20 20 20 20 20 20 20 47  65 74 20 6c 6f 63 61 74  |       Get locat|
00000ae0  69 6f 6e 20 6f 66 20 65  6e 64 20 6f 66 20 73 6f  |ion of end of so|
00000af0  75 72 63 65 20 63 6f 64  65 20 28 4f 25 20 69 73  |urce code (O% is|
00000b00  20 75 73 65 64 20 6f 6e  0d 65 2e 67 2e 20 39 34  | used on.e.g. 94|
00000b10  34 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |4               |
00000b20  74 68 65 20 4d 61 73 74  65 72 20 73 65 72 69 65  |the Master serie|
00000b30  73 20 74 6f 20 65 6e 61  62 6c 65 20 63 6f 64 65  |s to enable code|
00000b40  20 74 6f 20 62 65 20 73  65 74 20 74 6f 20 72 75  | to be set to ru|
00000b50  6e 0d 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |n.              |
00000b60  20 20 20 20 20 20 20 20  20 65 6c 73 65 77 68 65  |         elsewhe|
00000b70  72 65 20 69 6e 20 6d 65  6d 6f 72 79 20 2d 20 69  |re in memory - i|
00000b80  6e 20 74 68 69 73 20 63  61 73 65 20 61 74 20 26  |n this case at &|
00000b90  38 30 30 30 29 0d 0d 2a  53 41 56 45 20 54 48 48  |8000)..*SAVE THH|
00000ba0  41 43 4b 3f 20 39 30 30  20 39 34 35 20 38 30 30  |ACK? 900 945 800|
00000bb0  30 20 20 20 20 20 73 61  76 65 20 74 68 65 20 52  |0     save the R|
00000bc0  41 4d 20 69 6d 61 67 65  2e 0d 0d 2a 53 52 4c 4f  |AM image...*SRLO|
00000bd0  41 44 20 54 48 48 41 43  4b 3f 20 38 30 30 30 20  |AD THHACK? 8000 |
00000be0  34 20 51 20 20 20 20 20  20 20 6c 6f 61 64 20 52  |4 Q       load R|
00000bf0  41 4d 20 69 6d 61 67 65  20 69 6e 74 6f 20 53 57  |AM image into SW|
00000c00  52 41 4d 20 62 61 6e 6b  20 34 2e 0d 0d 3c 43 54  |RAM bank 4...<CT|
00000c10  52 4c 2d 42 52 45 41 4b  3e 20 20 20 20 20 20 20  |RL-BREAK>       |
00000c20  20 20 20 20 72 65 73 65  74 20 74 6f 20 41 44 46  |    reset to ADF|
00000c30  53 2c 20 4d 6f 64 65 20  31 32 38 20 61 6e 64 20  |S, Mode 128 and |
00000c40  69 6e 73 74 61 6c 6c 20  52 41 4d 20 69 6d 61 67  |install RAM imag|
00000c50  65 2e 0d 0d 2a 44 49 52  20 24 2e 54 48 52 55 53  |e...*DIR $.THRUS|
00000c60  54 20 20 20 20 20 20 20  20 20 20 67 6f 20 74 6f  |T          go to|
00000c70  20 54 48 52 55 53 54 20  64 69 72 65 63 74 6f 72  | THRUST director|
00000c80  79 2e 0d 0d 2a 54 48 52  55 53 54 20 20 20 20 20  |y...*THRUST     |
00000c90  20 20 20 20 20 20 20 20  20 20 20 72 75 6e 20 54  |           run T|
00000ca0  48 52 55 53 54 20 67 61  6d 65 2e 0d 0d 6c 69 66  |HRUST game...lif|
00000cb0  74 20 63 6f 6d 70 75 74  65 72 2c 20 72 65 61 64  |t computer, read|
00000cc0  79 20 74 6f 20 69 6e 74  65 72 72 75 70 74 20 74  |y to interrupt t|
00000cd0  68 65 20 67 61 6d 65 2e  0d 0d 73 68 6f 72 74 20  |he game...short |
00000ce0  70 69 6e 73 20 37 2d 38  20 6f 66 20 31 4d 48 7a  |pins 7-8 of 1MHz|
00000cf0  20 62 75 73 20 77 69 74  68 20 61 20 73 63 72 65  | bus with a scre|
00000d00  77 64 72 69 76 65 72 2e  0d 0d 20 20 20 20 20 20  |wdriver...      |
00000d10  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000d20  20 74 68 65 20 6d 61 63  68 69 6e 65 20 6c 6f 63  | the machine loc|
00000d30  6b 73 20 75 70 2c 20 61  73 20 74 68 65 20 65 72  |ks up, as the er|
00000d40  72 6f 72 20 73 74 61 63  6b 20 68 61 73 20 66 69  |ror stack has fi|
00000d50  6c 6c 65 64 0d 20 20 20  20 20 20 20 20 20 20 20  |lled.           |
00000d60  20 20 20 20 20 20 20 20  20 20 20 20 75 70 2c 20  |            up, |
00000d70  64 75 65 20 74 6f 20 22  73 77 69 74 63 68 20 62  |due to "switch b|
00000d80  6f 75 6e 63 65 22 20 6f  6e 20 74 68 65 20 31 4d  |ounce" on the 1M|
00000d90  48 7a 20 62 75 73 20 70  69 6e 73 2c 0d 20 20 20  |Hz bus pins,.   |
00000da0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000db0  20 20 20 20 61 6e 64 20  68 61 73 20 62 65 67 75  |    and has begu|
00000dc0  6e 20 74 6f 20 6f 76 65  72 77 72 69 74 65 20 74  |n to overwrite t|
00000dd0  68 65 20 73 74 61 63 6b  2e 0d 0d 20 20 20 20 20  |he stack...     |
00000de0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000df0  20 20 4e 2e 42 2e 20 2d  20 49 20 6e 6f 74 69 63  |  N.B. - I notic|
00000e00  65 64 20 74 68 61 74 20  54 48 52 55 53 54 20 69  |ed that THRUST i|
00000e10  6e 74 65 72 63 65 70 74  73 20 74 68 65 20 49 52  |ntercepts the IR|
00000e20  51 31 56 0d 20 20 20 20  20 20 20 20 20 20 20 20  |Q1V.            |
00000e30  20 20 20 20 20 20 20 20  20 20 20 76 65 63 74 6f  |           vecto|
00000e40  72 20 2d 20 69 66 20 69  74 20 68 61 64 20 6d 61  |r - if it had ma|
00000e50  73 6b 65 64 20 61 6c 6c  20 74 68 65 20 49 52 51  |sked all the IRQ|
00000e60  73 20 69 74 20 64 69 64  6e 27 74 0d 20 20 20 20  |s it didn't.    |
00000e70  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000e80  20 20 20 75 73 65 20 28  62 79 20 72 65 74 75 72  |   use (by retur|
00000e90  6e 69 6e 67 20 77 69 74  68 20 52 54 49 20 69 6e  |ning with RTI in|
00000ea0  73 74 65 61 64 20 6f 66  20 65 78 69 74 69 6e 67  |stead of exiting|
00000eb0  20 76 69 61 0d 20 20 20  20 20 20 20 20 20 20 20  | via.           |
00000ec0  20 20 20 20 20 20 20 20  20 20 20 20 74 68 65 20  |            the |
00000ed0  6f 6c 64 20 63 6f 6e 74  65 6e 74 73 20 6f 66 20  |old contents of |
00000ee0  74 68 65 20 76 65 63 74  6f 72 29 2c 20 74 68 65  |the vector), the|
00000ef0  6e 20 69 74 20 6d 69 67  68 74 20 6e 6f 74 0d 20  |n it might not. |
00000f00  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000f10  20 20 20 20 20 20 68 61  76 65 20 70 65 72 6d 69  |      have permi|
00000f20  74 74 65 64 20 74 68 65  20 4d 4f 53 20 74 6f 20  |tted the MOS to |
00000f30  70 61 73 73 20 74 68 65  20 31 4d 48 7a 20 62 75  |pass the 1MHz bu|
00000f40  73 0d 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |s.              |
00000f50  20 20 20 20 20 20 20 20  20 69 6e 74 65 72 72 75  |         interru|
00000f60  70 74 20 72 6f 75 6e 64  20 74 68 65 20 70 61 67  |pt round the pag|
00000f70  65 64 20 52 4f 4d 73 20  66 6f 72 20 74 68 65 20  |ed ROMs for the |
00000f80  54 48 48 41 43 4b 20 52  4f 4d 0d 20 20 20 20 20  |THHACK ROM.     |
00000f90  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00000fa0  20 20 74 6f 20 69 6e 74  65 72 63 65 70 74 20 69  |  to intercept i|
00000fb0  74 2e 0d 0d 3c 43 54 52  4c 2d 42 52 45 41 4b 3e  |t...<CTRL-BREAK>|
00000fc0  20 20 20 20 20 20 20 20  20 20 20 54 68 69 73 20  |           This |
00000fd0  69 73 20 73 61 66 65 2c  20 61 73 20 74 68 65 20  |is safe, as the |
00000fe0  52 4f 4d 20 63 6f 64 65  20 68 61 73 20 64 69 73  |ROM code has dis|
00000ff0  61 62 6c 65 64 20 74 68  65 0d 20 20 20 20 20 20  |abled the.      |
00001000  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00001010  20 77 69 70 65 2d 6f 6e  2d 62 72 65 61 6b 20 77  | wipe-on-break w|
00001020  69 74 68 20 2a 46 58 32  30 30 2c 30 0d 0d 20 20  |ith *FX200,0..  |
00001030  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00001040  20 20 20 20 20 74 68 65  20 6d 61 63 68 69 6e 65  |     the machine|
00001050  20 69 73 20 72 65 73 65  74 20 74 6f 20 6d 6f 64  | is reset to mod|
00001060  65 20 31 32 38 20 61 6e  64 20 42 41 53 49 43 2c  |e 128 and BASIC,|
00001070  20 62 75 74 0d 20 20 20  20 20 20 20 20 20 20 20  | but.           |
00001080  20 20 20 20 20 20 20 20  20 20 20 20 41 44 46 53  |            ADFS|
00001090  20 69 73 20 6e 6f 77 68  65 72 65 20 74 6f 20 62  | is nowhere to b|
000010a0  65 20 66 6f 75 6e 64 21  0d 0d 3c 43 54 52 4c 2d  |e found!..<CTRL-|
000010b0  44 2d 42 52 45 41 4b 3e  20 20 20 20 20 20 20 20  |D-BREAK>        |
000010c0  20 54 72 79 20 44 46 53  20 69 6e 73 74 65 61 64  | Try DFS instead|
000010d0  2e 0d 0d 67 72 61 62 20  61 20 44 46 53 20 64 69  |...grab a DFS di|
000010e0  73 6b 0d 0d 2a 53 41 56  45 20 4d 45 4d 20 30 20  |sk..*SAVE MEM 0 |
000010f0  38 30 30 30 20 20 20 20  20 20 20 53 61 76 65 20  |8000       Save |
00001100  6d 65 6d 6f 72 79 20 74  6f 20 64 69 73 6b 20 28  |memory to disk (|
00001110  6e 6f 20 70 6f 69 6e 74  20 73 61 76 69 6e 67 20  |no point saving |
00001120  6d 61 6d 6f 72 79 20 61  62 6f 76 65 0d 20 20 20  |mamory above.   |
00001130  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00001140  20 20 20 20 26 38 30 30  30 20 61 73 20 69 74 20  |    &8000 as it |
00001150  77 69 6c 6c 20 63 6f 6e  74 61 69 6e 20 74 68 65  |will contain the|
00001160  20 44 46 53 20 52 4f 4d  2c 20 77 6f 72 6b 73 70  | DFS ROM, worksp|
00001170  61 63 65 20 61 6e 64 0d  20 20 20 20 20 20 20 20  |ace and.        |
00001180  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 74  |               t|
00001190  68 65 20 4d 4f 53 29 0d  0d 2a 53 41 56 45 20 4d  |he MOS)..*SAVE M|
000011a0  45 4d 32 20 45 30 30 20  38 30 30 30 20 20 20 20  |EM2 E00 8000    |
000011b0  53 61 76 65 20 61 20 62  6c 6f 63 6b 20 6f 66 20  |Save a block of |
000011c0  6d 65 6d 6f 72 79 20 77  68 69 63 68 20 63 61 6e  |memory which can|
000011d0  20 62 65 20 72 65 6c 6f  61 64 65 64 0d 20 20 20  | be reloaded.   |
000011e0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
000011f0  20 20 20 20 28 61 74 74  65 6d 70 74 69 6e 67 20  |    (attempting |
00001200  74 6f 20 72 65 6c 6f 61  64 20 61 20 66 69 6c 65  |to reload a file|
00001210  20 6f 76 65 72 20 4d 4f  53 20 76 61 72 69 61 62  | over MOS variab|
00001220  6c 65 73 20 6f 72 0d 20  20 20 20 20 20 20 20 20  |les or.         |
00001230  20 20 20 20 20 20 20 20  20 20 20 20 20 20 4e 4d  |              NM|
00001240  49 20 77 6f 72 6b 73 70  61 63 65 20 77 69 6c 6c  |I workspace will|
00001250  20 63 61 75 73 65 20 61  20 63 72 61 73 68 29 0d  | cause a crash).|
00001260  0d 2a 44 55 4d 50 20 4d  45 4d 20 3c 43 54 52 4c  |.*DUMP MEM <CTRL|
00001270  2d 4e 3e 20 20 20 20 20  6c 6f 6f 6b 20 74 68 72  |-N>     look thr|
00001280  6f 75 67 68 20 6d 65 6d  6f 72 79 20 64 75 6d 70  |ough memory dump|
00001290  20 66 6f 72 20 6d 65 73  73 61 67 65 73 20 73 75  | for messages su|
000012a0  63 68 20 61 73 0d 20 20  20 20 20 20 20 20 20 20  |ch as.          |
000012b0  20 20 20 20 20 20 20 20  20 20 20 20 20 22 47 61  |             "Ga|
000012c0  6d 65 20 6f 76 65 72 22  20 6f 72 20 22 50 72 65  |me over" or "Pre|
000012d0  73 73 20 73 70 61 63 65  20 74 6f 20 73 74 61 72  |ss space to star|
000012e0  74 22 2c 20 61 6e 64 0d  20 20 20 20 20 20 20 20  |t", and.        |
000012f0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 6e  |               n|
00001300  6f 74 65 20 74 68 65 69  72 20 6c 6f 63 61 74 69  |ote their locati|
00001310  6f 6e 73 20 69 6e 20 6d  65 6d 6f 72 79 20 28 69  |ons in memory (i|
00001320  6e 20 73 6f 6d 65 20 67  61 6d 65 73 20 74 68 65  |n some games the|
00001330  0d 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |.               |
00001340  20 20 20 20 20 20 20 20  6d 65 73 73 61 67 65 73  |        messages|
00001350  20 61 70 70 65 61 72 20  62 61 63 6b 77 61 72 64  | appear backward|
00001360  73 20 2d 20 6e 6f 74 65  20 74 68 65 20 6c 6f 63  |s - note the loc|
00001370  61 74 69 6f 6e 20 6f 66  0d 20 20 20 20 20 20 20  |ation of.       |
00001380  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
00001390  74 68 65 20 6c 61 73 74  20 6c 65 74 74 65 72 20  |the last letter |
000013a0  6f 72 20 74 72 61 69 6c  69 6e 67 20 6e 75 6c 6c  |or trailing null|
000013b0  20 62 79 74 65 20 69 6e  20 74 68 69 73 0d 20 20  | byte in this.  |
000013c0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
000013d0  20 20 20 20 20 63 61 73  65 29 2e 0d 0d 41 6e 64  |     case)...And|
000013e0  20 73 6f 20 74 68 65 20  70 72 6f 63 65 73 73 20  | so the process |
000013f0  63 6f 6e 74 69 6e 75 65  73 2e 2e 2e 0d 0d        |continues.....|
000013fe
L/+Belis2.m0
L/+Belis2.m1
L/+Belis2.m2
L/+Belis2.m4
L/+Belis2.m5