computist scan 33

For The Serious User Of Apple ][ Computers COMPUTIST July 1986 Issue No. 33 $3.75 Word Juggler Sundog v2.0 Summer Games II Thief Instant Pascal Epyx Software Tink! Tonk! Chipwits The Mapping of Ultima IV How to be the Sound Master BULK RATE U.S. Postage COMPUTIST PAID ee | Tacoma, WA Permit No. 269 Many of the articles published in COMPUTIST detail the removal of copy protection schemes, from commercial disks or contain information on copy protection and backup methods mn general. We also print bit copy parameters. tips for adventure game advanced playing techniques (APT's) for arcade yame fanatics and any other information which may be of use to the serious Apple user COMPUTIST also contains a special CORE section which focuses on information not dircetly related to copy protection. Topics may include. but are not limited to’ tutorials, hardware’software product reviews and application and utility programs. eee What Is A Softkey Anyway? Sofikey is a term sshich we coined to describe a procedure thal removes or at least cireumvents. any copy protection on a particular disk. Once w softkey procedure has beet performed, the resulting disk can usually be copied by the use of Apple’s COPY A program (on the DOS 3.3 System Master Disk) Commands And Controls: ty ny anicle appearing in COMPU LIST. commands whieh a reader ty required W perform ure set apart frome normal text by being indented andl bok, An example is PR#6 Follows this with the RETURN key. The RETURN key Uist be pressed at the end of every such command unless: atherwise: speettied Control charaeters are indieuted by emg boxed. An evanple iy 6B) To complete this command. you must first type the number 6 and then place one finger on the CTRL. key and one finger on the P key Requirements: Most of the programs and softkeys Which appear in COMPUTIST require one al the Apple I[ series uF computers and at least one disk drive with DOS 3.3. Occasionally. some programs and provedures have specu requirements. The Ueprotection techniques or prograiny will always be listed iw jhe heginning of the amticle under the “Requirements, heading Software Recommendations: grams (or similar ney) ate strongly recommended For readers who Wish to oblain the most benefit fons yur articles prerequisites for The following pro: 1) Applesoft Program Editor such as Global Pru Line Balitor (GPLE) Editor such as DiskEdit. ZAP trom Bag ot Tricks or Tricky Dick from The CIA 3) Disk Search Utility such ay The Inypectin. [he Traver from The CLA or The CORE Disk Searcher 4) Assembler such ity the $-C Assembler or Merlin’ Big Ma 5) Bit Copy Program such as Copy J Plus. Locktnith or The Essential Dati Duplicator 6) Text Editor capable of producing normal sequential lest Liles such ay Applewriter |]. Magic Window J} or Sercenwriter |} You will alse find COPYA, FID and MUPPIN from the DOS 3.3 System Master Disk usclul, Super TOR: this program has most recently appeared in COMPUTIST Nu, 22. Several softkey procedtires will nmake use of a Super JOB controller. a smalt program that must be keyed into the muklle of Super JOB. The controller changes Super JOB se that it eat copy different disks. To get the latest versione uf this program, you may order COMPUTIST No. 22 ay a back issue or order Program Library Disk No. 22 RESET Into The Monitor: Some sottkey pro cedures require that the user he able w enter the Apple’s system monitor during the execution of « copy protected, program, Cheek the following hist 19 see what hardware You will need to obtain this ability Apple J Plus - Apple //e- Apple compatibles: |) Place an Integer BASIC ROM card in one of the Apple slots. 2) Use a notimaskable interrupt (NMI) card. such as Replay or Wildcard Apple II Plus - Apple with a moditied RE: nnpatihtes: | ) Install an FS ROM vector on the computer's article article motherboard as detailed in the uf COMPUTIST No. 6 or the in COMPUTIST No, 19. Apple //e - Appt Install a modified CD ROM on the computer's motherboard. Cluy Harrell’s company Box 43234 Ren Cen Station-HC aware doview that will Making this modification ty aut anity Init the inereayed ability ‘Muxlilaed ROMS Dual ROM’s Aine W Femove copy protection may justify it fe will void its wan Recommended Literature: The Apple jf Reference Manual and DOS 3.3 manual are musts tor any serious Apple user. Other helptul hooks include: Beneath Apple DOS. Don Worth and Picter Lect. Quality Soltware. S19.99: Assembly Tanguage For The Applesolt Pragrummer, Roy Meyers ant CW, Funley, Addison Wesley. $16.95: and: What's Where hn The Apple. Lubert, Micro Ink.. $24.95 ft Programs: BASIC programs W this Format. you must first understand the 1 LIST feature of Apples n illustration If you strtke 1 a program will be stored in the computer's memory Strangely. this program will nor have a LIST that is exactly ay vou typed it, Instead, the LIST will look like this W HOME ; REM CLEAR SCREEN Programs «lout usually LIST the same as they were keyed in because Applesoft inserts spaces inte a pm listing bel every command word or mathematical operator. These spaces usually. don’t pose 4 problem except in line numbers which contain REM oF DATA command words. The space inserted after these command wouls can be misleading. For example, if yout want a program to have a list like thiy 10 DATA 67,45,54,52 you would have to oniit the space sdinvctly after the DATA command word. If you were to key in the space directly the DATA corm word. the LIST of the program wotld look Tike this: 10 DATA 67.45.54.52 This LIST is different from the LIST you wanted ‘The humber ol spaces you key after DATA and REM command words is very important All of this brings us to the COMPUTIST LiSTing format, In a BASIC LISTing, there are two types of spaces. spaces thu don’t matter whether they are keved ‘or not and spaces that must be keyed. be keyed in are primed as delta characters (4), All other spaces in a COMPUTIST BASIC listing are put there for and it doesn't matter whether you type them or not There is one exception: If you want your checksums, (See “Computing Checksumns” section) ta match up, vou nnust nor key in any spaces after a DATA command word ha Keying In Hexdumps: Machine language programs are printed in COMPUTIST as both source code and hexdumps. Only one of these formats need be keyed in n. Hexdumps are the jest format to type in To key att hexdumps, you must first enter the monitor: CALL -151 Now key in the hexdump exactly as it appeurs in the ne ignoring the four-iyit checksum at the end ch line (a “Sand four digits). If you heara beep. att ee aml shortest and e: maga, you oil know that you have typed somethis incorrectly nt must vets pe thal Tine When finished. returs to BASIC with a EOORG Remember 10 BSAVE the prog filename. aslaress ancl length parameters as given in an sith the cuiager the Keving In Soure portion of mite only 1 better explain the program's operation. [you wish (© key iL in. You will need wn assembler. The S-C Assembler iy used 0 generate all suurey vole printed in COMPL TST. Withaut this stssembler you will have to transkute pices of the sonrve vice ler will unulerstanal A}ves just for this purse MIST No, 17. To translate you will peed ty understand the i Code the source enite awe prngram is proy ideal into semetlung veur ase table ofS © Assembler din way printed! in COMPL yoniree code directives. of awembler and convert the directives used in the suusce euile Ising te similar | Uirecuves tied hy Your assembler Computing Chechstuns Cheeksuy site iui adveinal numbers which verty whither ar Hu) ewe There ate wo 1s pes nf checksums created by the CHECKIN: program (oi inachine kangowse proigrunis) and the other created by the CHECKSOFT program (or BASH programs), Both prograins ajipeuteal in COMPL TIS No. | und The Best of Hardcore Computing, AW update to CHECKSOF f appeared » COMPL TIS] No 18 [the checksums these programy create (1) your computer ratel he checksums aceompunying the program in the magazine, then you keyed an the program correctly, 1 not. the progean iy incorrect au the Tine Where the: first checksum dilfers 1) To compute CHECKSOFT checksum: LOAD filename BRUNCHECKSOFT Get the Cheehsuiis with: & And orrect the progseata where thy ebcksuns «Ret 2) To compute CHECKIN checksums CALL, -1S1 BLOAD filename Install CHECKBIN at an out of the way plave BRUN CHECKBIN,A$6000 Got the checksums by typing the starting alaliess file totlowed by ed a pee in COMPLTIST Jy iL yay printed And corteet the fines at which the cheeksuinis Uitte Coping with COMPUTIST Welcome to COMPUTIS) devoted to the serions user of Apple || and Apple ][ compatible computers. Our magazine contains information you are not likely (o find in any of the other major journals dedicated to the Apple market. Our editorial policy is that we do NOT condone software piracy, but we do believe that honest users are entitled to backup commercial disks they have purchased. In addition to the security of a backup disk, the removal of copy protection gives the user the option of modifying application programs to meet his or her needs. New readers are advised (0 read this page carefully to avoid frustration when attempting to follow a softkey or when entering the programs printed in this issue. EDITORIAL ‘We were afraid it would come to this. COMPUTIST is feeling the bite of piracy. It seems that a good portion of our readers don’t actually buy COMPUTIST for themselves. Instead, they get an issue after someone else is done reading it. Five (or more) readers per issue is not unheard of. Some get one issue and photocopy it for a whole user's group. We've even received reports of our articles found word for word on BBS systems. The result of all this is that our subscribership is dwindling while the number of readers is not. That's not very healthy for a magazine. Most magazines support themselves with the money they get from advertising. We try not to, You may have noticed that COMPUTIST’s subscription price is slightly higher than other 32-page magazines Perhaps the foremost reason for this “high” subscription price is that we are dedicated to our subscribers, COMPUTIST is a magazine with a more specific focus than ADVERTISEMENT FREE COMPUTIST other magazines, that of educating the reader about the inner workings of the Apple // and, of course, software deprotection. We feel that you would rather see information packed issues rather than pages of ads. Last summer, at the risk of losing some subscribers (which we did), we tried to make up for the increased costs of production by raising our rates. One year later, we are still looking for answers. It's nice to see that so many people love their COMPUTIST. We would love to see more of that. Which brings up the point of all this. If you are reading someone else’s issue, PLEASE get your own subscription. You will have an issue of your very own every month and we will be better able to serve you by having the money to do so. Tell us whose issue you're reading (he must be a current subscriber) and he will get two free issues. Ifyou are letting others read your issue of COMPUTIST, urge them to get their own subscriptions. In fact, just to get you to do this, we are offering a bounty. That's right, a bounty. For each new subscriber you get for us, you will recieve two free issues of COMPUTIST added to your own subscription. Just make sure they mention you as the recipient of the free issues. Remember, this is for generating new subscribers only, This won’t work for renewals. If we can get enough subscribers, it will cost us less to print COMPUTIST and we will be able to reduce the subscription rates a little. To illustrate exactly what we mean, at 8,000 subscribers we are barely, if at all, breaking even, while at 16,000 subscribers we will be able to reduce the rates to $15 per 6 issues. That's why we need more subscribers. We'll be better able to serve you, and it will cost less to do so, ed. a You Get 2 FREE ISSUES for every NEW subscriber that you sign up. We'll extend your current subscription by 2 issues for every new paid subscription you get to fill out the subscriber forms below. BUT...First Class subscribers MUST recruit First Class subscriptions to receive the 2 extra issues, This rule (same mailing class) also applies to Foreign rates. Standard US subscribers can recruit any new subscriptions and extend their standard subscriptions. US funds drawn on US bank. Send check/money order to: COMPUTIST PO Box 110846-T Tacoma, WA 98411 Add two issues to this subscription [ Renew my subscription. Payment is enclosed. CURRENT SUBSCRIBER 1 US: S20, US First Class: $24 ‘CaniMex: S34 Name Address, __ ee State Country 4 Phone ze Signature CURRENT SUBSCRIBER Add two issues 0 this subscription. Renew my subscription. Payment is enclosed. Other Foreign: $60 US: $20 US First Class: $24 1 Can/Mex: $34 Other Foreign: $60 Ibe Name. bh E Address = City ___ Seis aie, Country Phone ceeeereareraaene Exp. — ze Fxp. _ ——— P33 Signature ___ P33, If you let your subscription expire. you are considered a NEW subscriber ‘and are NOT cligible for the free issues NEW SUBSCRIBER Yes, I want to subscribe to your fine publication If you let your subscription expire, you are considered a NEW subscriber und are NOT eligible for the free issues. NEW SUBSCRIBER Yes, I want to subscribe to your fine publication a ey Exp. Signature P33 ‘US; $20 US First Class: $24 [1 Can/Mex: $34 Other Foreign: $60 $20 US First Class: $24 Can/Mex: $24 Other Foreign: $60 Name bee oe ee e a St Address __ Address = State__Zip —— State Zip. Phone Phone “ Signature. P33 Ign’t it Time You Graduated..? to the Senior PROM Version 2.0 Allows your Apple //c or //e to halt a program and: Instantly swap between two different 64k programs. * Enter the Monitor at any time, from any program. * Examine where in memory the program was running. Disassemble, view or save memory, even $00—-7FF. * Examine the Stack for return subroutine addresses. * Alter any memory to examine running effects. The program may then be restarted exactly where it was interrupted or at any other location, or be saved to disk in normal B-files and later restarted. Also includes a sophisticated Sector Editor and Memory/Disk Detective, and operating system with disk copy, format, edit, and protected disk utilities, all without booting DOS first! Assembly Language utilities include Step & Trace, an Assembler, & more. All the Senior PROM?s vtilities are in ROM, instantly available when needed. Undetectable by any soft- ware or hardware, does not use a peripheral slot! Extensive documentation 4 guide to copy protection. Economically priced at $79.95 for prepaid orders vith check or money order. Credit card orders available for $88.95. Please specify 7c, or 22 Standard or Enhanced ROMs. Nutting ~dge “Snterprises DISC COMMANDER: © DISK COMMANDER is a disk editing system for DOS 3.3 or DOS 3.3 w/Pronto-DOS Enhance- ment ¢ 4 Editors © 13 Sub- editors * Completely menu driven * 1 or 2 drive opera- tions « INSTRUCTORIALS and TECHNICAL INFORMA- TION on disk ® Sort catalog Create multiple heading * Create multi-column ign lock/unlock and type sy ices. columns. calalog heading and program titles 10 any combination of NORMAL, FLASH, INVERSE, LOWER CASE or CONTROL + Rename all OOS commands + 0 DISC COMMANDER DICONIX O FREE CATALOG $1.50 SHIP & HANDLE 10221 Slater Fountain Valley JCONIX ICONIX is a graphics and animation editor for the APPLE II series of computers. @ It utilizes a unique toggleable magnitica- tion and panning movement to edit a hi-res image direct! from the keyboard, and a soe technique to capture and compile icons from a section of hi-res screen. Once you have i it anywhere on a $29.95 $29.95 $00.00 FOREIGN $4.00 CA. 6% Suite 103 CA 92708 Box 43234 Ren Cen Station Detroit, MI 48243 ror —— 317-743-4041, 10-5 EST. or 313-349-2954 Modem 24 hrs. not intended for illegal use. —_ SO WHAT SOFTWARE 10221 Slater Ave. Suite 103 Fountain Valley,Ca.92708 Foun Disk® EDD Version 4 is the most powerful copy program available for backing up “uncopyable” or “copy-protected” disks. Ill In addition to backing up disks, EDD 4 also features a hi-resolution graphic DISK SCAN option to help you locate information on a disk, a CERTIFY DISK option for certifying blank disks, and since it's very important that your disk drives are running properly (especially when copying disks), we have also included an EXAMINE DISK DRIVE option. I Even though EDD 4 has been preset to copy the broadest range of copy-protections possible, EDD 4 can be modified” to back up almost any disk that runs on your Apple! ll For the dedicated user, in addition to EDD 4, we are offering an EDD 4 PLUS version that includes ‘a specially designed hardware card which allows EDD to copy EVERY bit of information from each track accurately! You can bet that if EDD 4 PLUS: ‘can't copy it, nothing will! Il EDD 4 runs on an Apple Il, I! Plus (including most compatibles, Ile, IIc, and Ill (using emulation mode), and is priced at $79.95. ll EDD 4 PLUS runs on Apple Il, I! Plus (including most com- patibles), and Ile, and is priced at $129.95 (duodisk/unidisk 5.25 owners must add $15 for a special cable adapter). Ask for EDD at your local Gealer, or to order direct, include $3 ($6 foreign) shipping/handling for EDD 4, or include $5 ($8 foreign) for EDD 4 PLUS. Mi Mastercard and Visa accepted. All orders must be prepaid. ll If you have an earlier version of EDD, you can update to EDD 4 or EDD 4 PLUS ata reduced price. Send your EDD disk to us, and deduct $50 from your order. EDD is sold for the sole purpose of making archival copies ONLY! ESSENTIAL DATA DUPLICATOR 4 UTILICO MICROWARE 3377 SOLANO AVENUE / SUITE 352 / NAPA, CA 94558 / 707-257-2420 Michael Johnston & Doug Sharp - inc. ~ COPYRIGHT @ 1985 DISCOURSE, [[lnfermat ion | in yn This month's cover Graphics from Mindscape’ Tusk! Tonk? Address all advertising inquiries to COMPUTIST, Aaventising Vepartment, PO Bux 110816, Tacoma, WA 98411. Mail : fo: Writer's Guides to COMPUTIST. PO ma, WA 98411 Fietura postage must accompany all manuscripts, drawings, photos, disks, oF tapes Il they are ta be retuned. Unsolicited maniuscripls will be returned anly it adequate return postage is included Entire contents copyright 1986 by SoftKey Publishing All fights reserved. Copying done lor other than personal o¢ internal ‘reference (williwul exprass written permission from the publisher) is prohibited The editorial stalf assumes no lability or responsibility for the products advertised in the ilayuzine. Any opinions expressed by the authors are nut necessarily those of COMPUTIS] magaane or SoltKey Publishing ‘Apple usually refers to an Apple || computer and is a tradermsare ‘at Apple Computers, Inc SUBSCRIPTIONS: Rates (for |ssues): U.S. $20, US. Ist Class $24, Canada & Mexico $34, Foreign $60. Direct inquiries tn COMPUTIST, Subscription Department, PO Box 1108467, Tacoma, WA 98411. Please include address label with correspondence, DOMESTIC DEALER RATES: Call (208) 474-5750 for more information Change Of Address: Please allow 4 weeks tor change of address tn take effect On postal torm 3576 supply your new address and your most recent address label. Issues missed due to non-receipt of change of address may be acquired at the Teguiar back issue rate COM PUTIST Publisher/Editor: Charles R Haight Managi Technical Editor: Robert Knowles Circulation: Mic Advertising: (206) 474-5750 Printing: COMPUTIST 1s published monthly by SofiKey Publishun Phone: (206) 474 Editur; Ray Darrah rank, Debbie Holloway Inc., Seattle. WA, $232. Washington, Tacoma, WA 98400, 50 softkeys: 10 wora Juggler by John Nice 12 Tink! Tonk! by Pete Ashdown 14 sundog v2.0 by Marc Lirette 22 Gi. Joe & Lucas Film’s Eidolon by Larry Rando 23 Summer Games II by Matt Evans 24 Thief by Paul Wilson 26 Instant Pascal by Jonathan Maiara and Jeff Lucia 28 World’s Greatest Football Game by Charles 8. Taylor feature: 20 How to be the Sound Master If you've ever wanted to have better control over the noise your Apple makes, then this is the article for you, With this article you can add a volume control to your speaker, add an external speaker jack and add a line-level output that you can hook to your stereo without Worrying about blowing its inputs. by William Wingfield Jr. core: 16 The Mapping of Ultima IV With this article and the programs accompanying it, you can map edit the entire mainland of Ultima IV. by Jim S. Hart and Ray Darrah departments: 4 Input 6 Most Wanted List 6 Bugs 28 Adventure Tips Z Readers’ Softkey & Copy Exchange Adventure International's Graphic Adventure #1 by Edward Hauff, Sensible Software’s Sensible Grammar & Extended Bookends by Charles Taylor, Brainpower Inc.'s Chipwits by David Kirsch, Accolade’s Hardball by Jeff Lucia, Sierra On-Line’s King’s Quest I by Larry Rando, Epyx’s The World’s Greatest Baseball Game by Doni G. Grande Please address letters to: COMPUTIST Editorial Department PO Box 110846-K Tacoma, WA 98411 Include your name, address and phone number. Correspondence appearing in the INPUT section may be edited for clarity and space requirements. In addition, because of the great | number of letters that we receive and the small size of our staff, a response to each letter is not guaranteed. Our technical staff is available for phone calls between 1:30 pm and 4:30 pm (PST) on Tuesdays and Thursdays only. Double ROMs Revisited Following your articles on 32K ROM in COMPUTIST No. 19, and the letter from Wesley Felty in COMPUTIST No, 24, I would like to make a couple of comments. First, the mods are far simpler to make on the 16K language card. There are two jumper pads marked ‘*2716"", one at the top which has to be joined, and one at the bottom which has to be cut with a razor knife. That's all you have to do to run EPROMS instead of the FS ROM that the card comes with. Clone cards will usually be okay as they are. One more modification is to cut the trace on the underside that runs from pin #21 to isolate that pin. Solder wires from the back of the board, pin #21, to the center of a SPDT switch, and from pins #12 and #24 to the outside two contacts of the switch. The switch can he mounted on the back edge on the same side as the chips, just above the ROM socket, This is then accessible through the slot in the back of the Apple. This card can be used in other computers that you own if you wish, you don’t have to dismantle your Apple, or risk damage to the motherboard. The 32K EPROM works just like it's supposd to, since the F8 on the 16K has preference over the one on the motherboard (in fact you can remove the one on the motherboard if you want). T have to say this is the best softkey device Thave ever used, and recommend anyone who was afraid of modifying the motherboard, to do this alteration instead. The results are unreal! One nice **bug’” I've found is with my lower case chip, I already have the flashing underline prompt which of course is still there when in the normal F8, but when I go to the other F8. the prompt changes to a flashing chessboard. 50 its easy to see which F8 you're using T love hardware mods like this. Keep them coming! Docs anyone have any idcas on using 64K EPROMS, 2764 to hold bigger stuff such as DOS or Copy JI Plus Utilities? 1 also have 4 couple deprotection hints. Lifesaver deprotects easily with Copymaster Il copycard, but the load is very slow. I tried to boot trace it, but I'm not good enough at assembler yet. This new F8 should help though. Microzine 3.1.5A deprotects easily with the following. Init a new disk with regular or fast DOS by typing INIT HELLO and then DELETE HELLO. BLOAD FID from the system master and type: CALL -151 B942:18 N 8039 and FID all the files to the new disk, by using ** the wildcard file name. That's all there is to it! Both sides work the same way, and are then listable on COPYA, Finally, a suggestion; How about some tutorials on finding nibble counts. I can usually copy disks to regular DOS, but I have lots of trouble from then on! Mike Basford B.C. Canada Double ROMs Update Just a follow-up on my letter on the 32K ROM Mod. If pin #6 (or the trace to it) on chip #5, a 74LS20 at the top of the row next to the ROM, is isolated from the rest of the circuit, either by bending the pin out, or better yet cutting the trace to pin #6, and a wire soldered to the pin or pin-side; run it to a simble on-off switch, and connect a wire to ground (edge connector 26) from the other side. This then allows you to select either the F8 on the motherboard or the onc on the 16K card. This is all you have to do if the switch is on the card, but | mounted minc at the front of the case near the keyboard, and the extra length of the wire required caused timing problems, which 1 solved by mounting a 74L$74 on the spare pad at the front of the main board, as described on 4 COMPUTIST No. 33 pg. 6-19 of ‘Understanding the Apple ||"" by Jim Satter Also while your soldering iron is hot, run wires from pins 29 and 26 through a 100 ohm resister and momentary push-button switch to give you a NMI. As you can see, there is lots of potential in the 16K card. and I’m now playing with a couple of language (EPROM) curds. If'unyone has had any luck using these to load RWTS automatically on boot-up, I'd love to hear from you Now for another softkey, I use COPYB, but T'm sure Super IOB with swap controller would work, Milliken Comprehension Series, twelve disks, has a very annoying protection, and the fact that you can’t write protect them means that they are susceptible to damage. However the softkey is easy. Initialize twelve disks with a fast DOS using BOOT as a HELLO program. Delete the file ‘‘Boot’’ on all of them, Then boot anyone of the Milliken disks. Reset into the monitor with any Non-Autostart F8 ROM and move the RWTS out of the way: 8000<B700.BFFFM Now boot COPYB and answer all the prompts Copy tracks 3-34 with error checking off. Don't let the program re-initialize the disk. Copy all the series the same way Then load your favorite sector editor and edit tracks $11 Sector $00 Byte $01 from $FI to $11. Although this is the same on all the disks, the rest of the sector is different, so make sure you read from each disk, do the sector edit, and write back to the same disk. Thats all there is! Keep up the good work. Mike Basford B.C. Canada A Bit of History Thave a program | would like added to the Most Wanted List, but first some background, AppleWorks from Apple Computer, Inc., is the biggest selling program for the Apple in history. No other program, including VisiCalc. (which was responsible for the tremendous growth of the popularity of Apples in the early days) ever dominated the Apple software sal charts the way AppleWorks has done over the past few months. The point of all this is that AppleWorks is a completely unprotected piece of software. Now comes along another wonderful piece of software for the Apple || series of computers, also from Apple Computer Inc. The program is Apple Instant Pascal, and with this version of Pascal, even I may be able to learn Pasi after trying for these many years. Apple Instant Pascal uses the Macintosh environment on Apple |{ computers. with pull down menus and either mouse control or keyboard control of the cursor. This environment is so spectacular and easy to use (hat ufter using the program for a few days, T am seriously considering the purchase of a Macintosh. If Apple Instant Pas ‘an make a confirmed Apple ][ user like me consider dumping five years of accumulated software and data for an entirely different computer, and assuming Apple Computer Inc, wants to sell Macintosh computers, I would think they would want as many copies of Apple Instant Pa: in the hands of Apple // users as possible. Now the problem, despite the success of the unprotected AppleWorks, Apple Computer Inc. decided to issue Apple Instant Pascal on, God Help Us, protected disks. Not only protected disks, but disks that must be used on both sides. 1 have two Apple |[ drives that are both over five years old, They have never had one bit of maintenance and I have never had one minute of trouble with them. T have never used both sides of disks, except lo copy material from the back side of a program disk onto a single-sided disk. I realize the argument continues as to the use of both sides of disks, but for Apple Computer, Inc. to force me to use both sides with a protected program is outrageous. Thus, 1 would like to request that Apple Instant Pascal, a super program for learning Paseal, be placed on the Most Wanted List. When will software producers understand that copy protection only frustrates and annoys honest users and in no way even slows down professional pirates. If anyone doubts this, just luke u look at the hundreds of **protected’* program available on unprotected disks from Reliant Software in Hong Kong Thomas E, Militello, M.D. Rancho Palos Verdes, CA Mr Militello: We think you'll be pleased with the urticle on page 26 of this magazine. Another Windham Classic Alter seeing Allan J. Migdal’s softkey for Windham classics in COMPUTIST No. 29, I realized that while we were deprotecting the same program we were dealing with two different protection schemes. My version, tested only on Alice in Wonderland, has the following files: Hello, Windham, Game, and Gmae (a deleted file) In my version, there is no program data on track 2, To make a deprotected disk copy both sides of Alice with COPYA and add a normal DOS to side one. That's all! Finally, yours is easily the best Apple magazine on the market. Without it I'd have given up long ago on understanding this machine. Keep it up! John Della Pia Bolling AFB, DC Unjamming Eddie’s Hatch Enclosed, please find my check for another six issues. Again I thank and commend you for publishing the finest magazine on Apple computers to be found anywhere. Keep up the good work. I read Rob Muscoby’s Wizardry APT in COMPUTIST No. 29 and have an answer for his question regarding the Hitchhiker's Guide to the Galaxy 1) Take all objects offered to you during the game and keep them if possible. 2) Things fit well in something that you don't know what it is. This is not necessurily true for fluff. 3) Hungry? Fat whatever you might grow during your travels. Consult the Guide about fluff. 4) If the Hatch is jammed by a robot, why not ask a very sulky one to open it for you? After all, he is programmed to be a servile domestic. He may ask you for something you don’t have. In that case, you either blew it or lost it and have to start somewhere carlicr to get it. 5) ‘Things have a bad habit of disappearing. 6) A flippy gives more room to save to disk the various parts of the game 7) Don't Panic. In other words, keep all the tools and weird stuff you find in the game. Put it all in the thing your aunt gave you that you don’t know what it is. Sometimes as the game progresses, things will disappear. Inventory your goods frequently, Save to disk frequently. Invariable, the tool or bit of fluff that you need will disappear unless you keep track of it. When you get all four bits of fluff, plant them in the flower pot that you find in the whale. When the plant sprouts, enter the sauna and then examine the plant. It will have a fruit. Eat the fruit. You will have a revelation wherein you will see Marvin and he asks you for a tool. You better have the tool in your inventory or you will have to restart somewhere in the game to get it. Go to the Screening Door and show it Tea and No Tea simultaneously. You better get thirsty about here. Drink the tea, as it will cheer you up. Enter and Marvin to open the Hatch. Begrudgingly, he will acquiesce. Enter the access space and wait for Marvin to shuffle in. When he asks for the tool, give it to him. The Hatch will open. Leave the Heart of Gold and stand on the surface of Mugrathea John Gubbins, Aurora, CO. A Pirate Speaks Out Tam writing this letter in reply to the "Holy man’, Mr. Donald G. Moses (COMPUTIST No. 28). Face it, copying is in! (to quote the Black Rose). Anyone who insists on buying originals is an idiot. Mr. Moses should check with current economic policies of the world. Demand for programs is great. therefore, the criminals running the software companies will raise their prices. To compete directly with this. my “heroes’” in Asia are selling programs at approximately 1/1@ of the price. The demand for the Software Companies’ goods at large prices will decrease. while demand for the Asian product will increase. Anyone looking for programs should write « Hong Kong. Singapore, or Malaysia. Tthink you are di ing (and demented) if you think the public will buy originals rather than copies. It's not a matter of stealing, but supply and demand! Whereas the consumers can find cheaper substitute goods, he will - the basis of our “free enterprise’ system All I can say is that most software companies charge sometimes hundreds of dollars for programs worth 1/10 of that! Now that is criminal! The Agent Soviet Software COMPUTIST No. 33 5 The American Challenge Here is a softkey L have recently completed. ‘The program is The American Challenge. a sailing simulation. Here is the cookbook method The American Challenge 1) Load COPYA and hit (30) when it asky you for the slot and drive numbers 2) Delete line 70, a) 3) Enter the monitor. CALL-I51 4) Change $B942 from $38 to $18 so that COPYA will ignore any errors. B942318 5) Re-enter Basie. 3D0G 6) Run COPYA and copy the disk. 7) With a sector editor, tind the sequence 4C 00 C6 on track , sector B, Change these to 4C DB 43 und you ure done. John Cotter Bay City, MI Robotron APT cre is an APT for Robotron 2084 by isoft. With this APT, you can get infinite men (1 think). First, obtain a cracked Robotron. (The softkey in COMPUTIST No. 8 will work.) Then do the following 1) Boot up standard DOS. 2) Load the broken Robotron file BLOAD ROBOTRON 3) Enter the monitor and modify Robotron for infinite men, CALL -151 326A:99 3) Start up the game 2DFDG To make the last human family move much faster, substitute 3208:99 in place of 326A:99 in step 3 Mad Max & The Fool Where in the World is Murder by the Dozen I have found that Ronald Wilson's softkey for "Where in the World is Carmen Sandiego?** (COMPUTIST No. 25) did not work on my //e (with absolute reset into monitor) due to nothing in memory at location $2000 (step 3), 1 preceded this step with 2000<0000.07FFM and it worked perfectly. I have also found that Randy Ramirez’s softkey for ‘*Murder by the dozen’? (COMPUTIST No. 29) does not work as written. Whenever I try to copy files using FID (step 3), | always get a “‘No Files Selected"* message. HELP! I find your magazine very helpful and informative. Thank you Robert Hall APO New York. NY Mr Hall: To copy every file using FID, you should select option | (the copy files option) and then use "=" as the filename. If you still get a "No Files Selected" message then you have « different version of this program. __bugs _ COMPUTIST No. 32: Revisiting Musice Construction Set: The sector edits under step 2 should read: From To Track Sector By 1) F 36 20 «18 D F 37 oo 68 6 COMPUTIST No, 33 Most Wanted List Need help backing-up a particularly stubborn program? Send us the name of the poyram and F manufacturer and we'll add st :0 our Most Wanted List, a column (updated each issue) Which helps to keep COMPUTIST readers informed of the programs for which soltkeys aw MOST needed Send your requests to COMPUTIST Wanted List PO Box 110846-K Tacoma, WA 98411 It you know how to deprotect unlock, or modify any of the programs below, let us know, You'll be helping your fellow COMPUTIST readers and earning MONEY at the same time. Send the information to us in article form on a DOS 3.3 diskette Mouse Cale Apple Campnicr Apple Business Graphics Apple Computer Arkuonies Visiblend Migrolaty Catalyst Quark. Ine Gutenbury Jr. & Sr. Mivromarion ETD Prime Plotter Priniesull Cor ‘The Handlers Silicon Valley Systems The Apple's Chi Parts 1-3) The Protessor Fun Buneh Unicorn Willy Byte... Panu Trek Cyelod Sinus Suttwure Adventure Mignosall Cranston Manor Sivrn On-Line Snoggle rode hind Robot War Muse ABM Muse Mychess I Datamost E-Z Learner Siliwon Valley Systems ary Tree Schilastic Mt TSA. Scholastiv Handicapping System Sports Judge Dollars & Sense Monograni Ke Great Cross Country Road Plus Agranat Systmes Activision Raster Blaster Budge Inv GATO VL Spectrum Hulobsie Odin Questa Mabel’s Mansion Datunast in Bank Skeletal Systemty readers’ softkey & copy exchange Edward Hauff's antique softkey for... Charles Taylor’s softkey for... Graphic Adventure #1 Sensible Grammar & Extended Bookends Adventure International P.O. Box 3435 Longwood, FL 32750 Requirements: FID. A blank disk Adventureland from Adventure International, while being an older graphic adventure-type program, is still one of the best made. It can be easily copied with FID, however the first time you try to pick something up. the program does a check for the original disk. After this one check. no other checks are made unless a previously saved game is played, in which ease it will do it on the first pickup of that session This would seem to mean that a flag byte is used as a reference for the check. I compared the bytes in the game save area just before and right after disk access to sce which bytes were changed. Only a few were changed, and as 1 awed them one by one with their original values. Location $4165 which was changed from SFF to $00. caused a disk check to be reinvoked, The program ~‘M2."" which is responsible for drawing all the rooms, keeping track of where you ure und what you are doing. saves all its information in the area where the saved games are loaded. A LDA $FF followed by a STA $4165 was found at $6R16 of the M2 program. Changing the SFF to $00 prevents the disk check from occurring In short: 1) INIT both sides of a disk with the name HELO (or was it HELLO?) and delete that program 2) Enter the monitor and disable DOS" error checking CALL-I51 B942:18 3) Get FID started and copy all files on both les. BRUN FID 4) Load M2 trom the boot side 5) Enter the monitor and change byte $6B17 CALL -151 6B17:00 6) Save the program back to disk, BSAVE M2,A$6860,LS0DF0 = x Sensible Sofiware, Inc. 6619 Perham Drive West Bloomfield, MI 48033 Requirements: COPYA A sector editor A disk searcher A blank disk Sensible Grammar goes one step beyond proof-reading documents for correct spelling. It checks your manuscripts for correct punctuation and searches for commonly misused phrases to find pompous, informal, cliche, vague, wordy, repetitive, and sexist phrases. It finds all uses of apostrophes, right or wrong, so you had better know how to use apostrophes for posessive use Extended Bookends makes full use of a 128K Apple. Sensible Software hus come full circle from very difficult copy protection to very simple protection. (Sensible Grammur can be copied by the ‘sector copy”’ from Copy || Plus.) Both programs are readily deprotected by the Mr. Grande’s method in COMPUTIST No. 27, page 8. I found the offending code for Sensible Grammar on track 4, sector 4, and for Extended Bookends on track 0, sector $F. In summary, 1) Copy the original disks with COPYA 2) Search for the byte sequence BD 8C C0 10 FB 49 DS DO F7. Change the final byte ($F7) to $56 and write it back to the disk, ra David Kirsch’s softkey for... Chipwits Brainpower, Inc. 24009 Ventura Bivd. Calabasas, CA 91302 Requirements: Apple IL Super [OB 1.5 A blank disk Chipwits are computerized robots you program to fend for themselves in eight different adventure environments. You can teach a Chipwit to do just about anything: move in any direction. avoid enemies, attack enemies, search for food using different senses, even sing songs! The Protection The first thing I do when I realize that a program will be writing to the disk is attempt to copy that disk. Afier getting this game that is what I tried to do, Copy IT Plus 6,0 was no. help, neither with parameters nor manual bit copy. Although it told me that tracks 0 - $21 were standard format I still couldn't copy track $22. Atrack monitor (a hardware device that tells you what track your disk drive is on) can come in handy sometimes. A while back COMPUTIST ran ads tor one that sold for $99.00. T thought that $99.00 was a litle wo expensive. so T built one for about $25.00. Back to Chipwits: while booting the program the head first goes to track @ then to $B and goes backward from $B to 1, jumps back to $B, then to the infamous track $22. Track $B looked like a likely spot 10 look to see if the copy- protection could be bypassed. Using the sector editor in Copy II Plus I found a strange routine on sector SD that even included the “*hang’* routine that branched to itself after writing out a disk error message. At this point I felt that | was very close and that maybe in a few days I would have it bypassed. I tried bypassing the thang" routine, but that didn't work, and after looking further I realized that it couldn't have worked, Just for fun I puta RTS ($60) at the beginning of the sector and booted the disk Hurrah! It worked just fine and booted faster because the track $22 check is now completely taken out. Procedure 1) Type in the controller below into Super JOB 15 2) Start the program and let it format the blank disk with a volume number of 254. 3) Use it to copy tracks @-S21 of Chipwits Super IOB will do the sector edit for you 4) And there you have a copyable Chipwits that each of your children can play with without destroying cach other's robots. or copying cach other's logic panels 5) Lalmost forgot. The write protect nuich must NOT be covered to run the program, sinee even simple things such as changing robots write to COMPUTIST No. 33 7 readers’ softkey & copy exchange rz Michael Johnston @ Doug Sharp 2) Get out your sector editor and change side 1, track $11. sector SOF, byte S05. from SA9 to $60. 3) Write it back out to the disk: That's it! Ee Doni G. Grande’s softkey for... |The World’s Greatest | Baseball Game COPYRIGHT () 1965 the disk so that the next time you boot up, the program is just us you last left it controller 1000 REM CHIPWITS CONTROLLER LOLA TK=8 /LT=34 iS) =15 :LS=15 :CD=NR :FAST sl 1020 GOSUB 49@ : GOSUB 610 :T1=TK : TK =PEEK (TRK ) = 1: RESTORE ; GOSUB 310 :TK = T1 1030 GOSUB 490 : GOSUB 610° IF PFEK (TRK ) = LT THEN 1050 1940 TK=PEEK (RK) :ST=PEEK (SCT ) 1058 HOME . PRINT "COPYDONE” . END 1100 DATA 1° CHANGES .11 13 .0 .96 Larry Rando’s softkey for... | King’s Quest II GOTO 1020 Sierra On-Line Coarsegold, CA 93614 $35.95 Requirements: 128K Apple //e or /ie Fast copy program Sector editor This is the sequel to Sierra On Line’s King’s Quest which uses three-dimensional double hi- DISCOURSE, Inc. res graphics and has animated characters that you control with cither keyboard or joystick Sicrra On-Line is known for putting out terrific animated graphic adventures and the first adventure game that utilizes double hi-res on the 128K Apple //c or //c. If you liked the first King's Quest you will enjoy this one Procedure: 1) Copy sides 1-5 with any fast copier of COPYA. (Sides 2-5 are not copy-protected) za Epyx 1043 Kiel Court Sunnyvale, CA 94089 Requirements: 48K Super [OB 1.5 A blank disk This program allows you to select from twenty-five classic baseball teams and pit them against one another, You can select the line-up and manage your team’s strategy, You can manage and control the players or just manage the team and let the computer statistically determine how cach player plays. The Super IOB controller below will make a COPY Aable version of the World's Greatest Ueveeesueapeeescoenreny i rineriieaan o 8 COMPUTIST No. 33 readers’ softkey & copy exchange Baseball Game, Just install it into Super 1OB v1.5 and copy the disk. That's all there is to it! controller 1000 REM WORLD'S GREATEST BASEBALL GAME 1018 TK=0 -LT=35 ST=15 LS=15 :CD=WR FAST el 1015 POKE 47405 ,24 : POKE 47406 .96 : POKE 47497 24; POKE 47498 .96 ; REM IGNORE EPILOGS 1020 GOSUB 490 ; GOSUB 610 :T1=TK :TK=PEEK (TRK )-1 1025 RESTORE : GOSUB 310 :TK = T1 1030 GOSUB 490 ; GOSUB 610 ; |F PEEK (TR) =LT THEN 1050 1040 TK= PEEK (TRK) :ST=PEEK (SCT) 105@ HOME ; PRINT “COPY DONE” : END 5000 DATA 1* CHANGES SB1O DATA® 5,172 24 GOTO 1020 controller checksums 1000 - $356B 1030 - $6B89 1018 - $2544 1046 - $9C15 115 - S7A56 1050 - SA6C6 1020 SEEO4 5000 - SCC10 1025 - $6367 9010 - S2L1E Jeff Lucia’s softkey for... Hardball Accolade, Inc. 20863 Stevens Creek Blvd., B-S/E Cupertino, CA 95014 Requirements: COPY, A disk search utility A sector editor A blank disk Hardball (or other Accolade program) Accolade is a new company founded in 1985 by a group of Activision veterans (namely Bob Whitehead and Alan Miller) Accolade’s programmers must be given credit. The authors take the time and effort to get their programs on the market. Since Accolade is a new company, many people have not yet been given the chance to see the quality and enjoyment that Accolade’s programs bring. Hardball has got to be the best computer baseball game I've ever seen (it gets my vote for game of the year)! Its graphics and realism just cannot be beaten by any other baseball game on the market Because Accolade is producing high quality programs like Hardball, they want to make their disks extremely hard to back up. However, it’s not that hard. The Protection Accolade’s main protection is quarter tracking, Upon booting the program, the disk will check for a series of quarter-tracks. While checking for the quarter-tracks, it scans for certain byte patterns. Because of this, Copy II Plus, EDD III, Locksmith 6.0 and Nibbles Away IL will have trouble making a backup Because I'm always concerned about my original disks, I decided to defeat Accolade’s protection. The following code came from Hardball: B268- CLC B261- BCC $8272 clear carry flag branch if carry clear B272- SEC B273- BCS $B2F3 set the carry flag branch if carry is set This is the tricky part. The code is intentionally clearing the carry flag. Then the program will jump to other locations that set and clear the carry flag. this is their way of making it harder to follow. (Note that the branches shown here will always be taken.) Finally, after following their branches, you will tind the main protection. Although the location of this code will be different from program to program, it is the start of the routines that will check the disk for quarter tracks. The way to defeat this is simple. We will insert code that will clear the carry and return to the calling subroutine. Once this is done, the disk will be deprotected The Fix 1) Use Copy II Plus (or whatever copy program you have) and copy the disk 2) Start your disk searcher and look for the byte sequence $A 09 BO. 3) Use your sector editor to replace them with $18 60 B9 and write the sector back to the disk, and youre all done I have tested this method on Dam Busters, Law of the West, and Hardball. Usually, if the same protection is on three or more disks, the company is using it for all their programs (that’s Just a theory). Some companies use a protection ‘on two to four disks and then change it z iii COMPUTIST No. 33 9 softkey for Word Ju by John Nice Quark, Inc. 2525 West Evans, Suite 220 Denver, CO 80219 (303) 934-2211 List price $189 Requirements: Apple //e ProDOS User's Disk DOS 3.3 48K slave disk 1 blank disk Word Juggler //e In my opinion Word Juggler is, by far, the best word processor for the Apple //e. It has several features that are not matched by any other program on the Apple line, Its most unique feature is the keycap replacements. When you purchase Word Juggler, you recieve a plastic tray holding 19 new keycaps to put on your //c keyboard. These keys have the function words on the fore front, This allows you to get typing right away. You don’t have to read and re-read, then look at the quick reference chart, to see what the command is to ‘‘delete a block’* of text. You simply look at the keyboard. And, as most people, | do that a lot! The simple commands aren't the only neat feature either. Word Juggler is actually a system, not just a word processor. Included with the package is an extensive spelling checker. You can either check the whole document for misspelled words or choose the Word Guess function. This function looks for the word in the dictionary that the cursor is on. A good feature for quick documents. Another neat accessory is a telecommunications puckage included. It’s accessible with a two key combination (Closed- ‘Apple ‘*5’’) like the other extra functions in the Word Juggler package. Now, the communications software couldn’t compete with a dedicated package, like ASCII Express, but it’s a nice feature anyway. Before this turns into a review, why am I writing a softkey for this product? The answer is simple, I am writing this softkey because of Quark’s total lack of adherence to the ProDOS standard, unneccesary copy protection, Word Juggler’s load speed, and diskette replacement costs. I don’t usc any of the original disks I purchase because of the possibility of bomb the enhanced resale value, and the general one- sidedness of commercial products, On bombing, Quark charges $10 to $15 (up to $25 for Lexicheck, the spelling checker) to replace or repair the disk. If I ever wish to sell a used piece of software, a thrashed-upon original would definitely lower the prospective price. Another reason is the supplied disks from Quark are all one sided. That means you need two of their disks just to operate the word processor. A double-sided disk works just fine and doesn’t clutter up my desk The boot process on a backup disk bit copied with Copy ][ Plus, ranges into the minute-plus category. The cracked version loads in seconds. Quark copy protected this package even though the protection isn’t needed. With the keycap replacement, the command strip, and the quick reference triangle, any use of this software on the machine it wasn’t sct up on is nearly impossible. I have even tried to use Word Juggler on another machine, and have found it troublesome to remember the commands. Since they are usually right in front of my face, when I am writing seriously, I don’t try to remember them. The biggest reason for the crack is because of ProDOS itself. A big goal of Apple Computer in rewriting its disk operating system was to make it device independent. You shouldn't need to worry about what DOS to have in the machine to access each specific drive you have. If you have a hard drive and a floppy, you can access them all in a similar method. This is what I wanted to do with Word Juggler. I want to put my word processor on my hard drive and stop fiddling with these floppies. Word Juggler requires at least 2 disks to operate, because of the sheer size of this package. On a hard drive I wouldn't have to worry about flipping the disk before I want to scan my document with LexiCheck. The Protection The protection on Word Juggler is not too extensive. When I booted up my /USERS.DISK and CAT’ed the Word Juggler disk, I got a complete directory listing. When | examined the catalog listing I saw some unusual things. The first was that the Word Juggler program wasn’t the startup system file (the first SYS in the catalog). So, this signaled that they put on the copy protection after Word Juggler had been written a good sign. If Word Juggler was-the startup application it would probably have 10 COMPUTIST No. 33 ler demanded an extensive dissembly to find the special loading routines. Next, I got Filer up und compared the ProDOS system file, on the Word Juggler disk, to a known normal ProDOS system file. This turned out OK (it's a good thing too, as Apple Computer says modifying ProDOS is an extreme no-no unless it’s for driver installation) Then I scanned for bad blocks on the disk and found out that tracks | & 2 (blocks 8-23) were bad. Next I tried to copy the WJ2E,2.8.3 file and WJ2E.SYSTEM file to another disk (since ProDOS doesn’t have w verify command like DOS 3.3, you have to use a roundabout method of checking for corrupted file formats), Well, as it turned out the WJ2E.2.8.3 w: bad (copy protected) file and the WJ2E.SYSTEM file was OK. This made sense as the first *xxx.SYSTEM’ file ProDOS comes across during the booting process is the file used to initialize the system, If this file was bad, the ProDOS would have had to be modified to read its special format but I knew that ProDOS was intact and unaltered, I then copied the rest of the files to test them out too. All of them copied perfectly. That left WJ2E.SYSTEM as the file to disassemble. T knew that WJ2E.SYSTEM would have to load the protected Word Juggler application file, which was partly on tracks | & 2, After an extensive and fun dissembly I determined the main logic of WJ2E.SYSTEM to flow as follows: a) Figure out what the load address is (for Word Juggler //e this is $2000). b) Copy this loader to upper RAM (from $2000-$26FF to $B000-SB6FF). ¢) Determine if the computer is a //e. d) Redirect RESET, BRK, and ProDOS System death pointer to go to. a memory wipe handler. ¢) Initialize the system hardware to alternate character set, text mode, and 4@ columns f) Clear the screen using quick clear method, g) Print the introduction screen. Then a jump is taken to the relocated code section in upper RAM. This code makes up the routines that load in the special sectors of the WI2E.2.8.3 file. ‘The logic continues as such: h) Set some Word Juggler system variables slot#16, drive index, etc.) i) Make sure it’s in a //e, otherwise rebuke the booter, then kill the system. 3) Check for an Apple 80 column card, Whether it is or not, continue on. (The requirement that only Apple's 80 column card be used was dropped, so this code was invalid. It is now never used.) k) Set some more variables and pointers. 1) Read in the key block at $00/$0F (Track/Scctor). (All this information about WJ2E.2.8.3 is ignored by WJ2E.SYSTEM. This read is mainly to position the disk arm to track 0) m) In a roundabout way compute the number of sectors (not blocks!) to read for the WI2E.2.8.3 file. This is all just code protection. {It could have easily been done with an immediate load. n) Read in a sector using RDSCT ($B21B) routine (see below). 0) Combine a checksum of a page of the loader (WJ2E.SYSTEM) with a checksum of the sector just read Pp) Bump the block (thus the t/s) number and butter pointer, q) Loop back to (n) until done. r) When done, read in one more sector ($00/$00) to ensure there was no fiddling with the loader code, s) Jump to the start of WJ2E.2.8.3. The RDSCT routine logic starts by turning ‘on the drive and seeks the correct track and sector, When the data field is loaded in, the sector is decoded using the physical sector number EOR'ed with $6B. While this is done, a checksum is computed that will be used in another checksum of the entire file. The other noteworthy code in WJ2E.SYSTEM is in the RDADDR (read address) routine and the SEEK (seek disk arm to proper track) routine. The code in RDADDR checks to see if it’s reading a sector in on tracks 1 or 2, and jumps to a special read address section if true; otherwise it reads the address field in as a normal one. This confirms the BAD BLOCK detections by the Filer utility earlier. The SEEK routine contains some logic to bomb the program if certain conditions aren’t met. ‘These are, that the carry is set whenever the RDSCT routine is called. If it isn’t, then that is supposed to be the last call to the RDSCT routine, so the file checksum is tested. In all cases, if an error is detected a section of code will print an error message. Then some clear memory code is moved to the Zero Page and loops until a Reset forces a reboot. The Crack: The first thing to do in cracking this program, is to get an image of the main file into memory To do this we must modify a copy of WJ2E.SYSTEM. The modifications will tell the loader code to ignore any checksum errors, and redirect the jump to the start of Word Juggler ta go to the system monitor instead. After this is done, it can be executed from memory and it will load in the main Word Juggler code. After the boot we will have an image of WJ2E.2.8.3 in memory. Then we have to get it to disk. Unfortunately, ProDOS can’t be booted around a file as large as Word Juggler, so a 48K DOS 3.3 slave disk must be booted to save the file to disk. A slave disk boots in such a way that it won't disturh most of main memory. After DOS 3.3 is booted, you can BSAVE the Word Juggler file image to disk. Once we have a copy of the file on DOS 3.3, we must CONVERT it over to a ProDOS disk. Then, we must change it from an application file to a system file. To do this we will CREATE a system type file culled WJ.SYSTEM, then BLOAD the Word Juggler image into memory and BSAVE it to the system file we just created. Now we need to make a disk with Word Juggler as the boot system file. Just format a blank ProDOS disk using Filer, then copy ProDOS as the first file on the disk. Copy WJ.SYSTEM as the 2nd, and the rest of the utility files on the original WJ disk (especially the parameter files!!) to the newly created disk and you have yourself a cracked version of the best word processor on the market. Step By Step The following is a step-by-step method for cracking Word Juggler v2.8.3. Write-protect your original disk and follow along. 1) Format a blank 48K DOS 3.3 slave disk and delete the HELLO program. 2) Boot ProDOS and get the Filer utility running. 3) Format a blank ProDOS disk with a volume name of /WJ. 4) Copy “‘ProDOS” to /WJ. 5) Quit Filer back to /USERS.DISK/BASIC. SYSTEM (that is, get BASIC up and running). 6) Create a system file on your new disk to save the Word Juggler main program to later. CREATE /WJ/WJ.SYSTEM,TSYS 7) Insert the original disk and load in the Word Juggler loader. BLOAD /WORD.JUGGLER/ WJ2E.SYSTEM, TSYS,A$2000 8) Drop into the monitor to modify the loader. CALL-151 9) Patch the exit of the loader to turn off the language card and jump to the monitor rather than to the start of the program. (STA $C081; IMP $FFS9). 21F0:8D 81 C@ 4C 59 FF 10) Kill the code in the SEEK routine that will reboot if the file checksum isn’t O (use 12 NOPs). 242C:EA EA EA EA EA EA EA EA EA EA EA EA 11) Execute the loader. The program will load and then drop into the monitor. 2000G 12) Insert a 48K DOS 3.3 slave disk into the drive und reboot. 6G) 13) Save the Word Juggler application to the DOS 3.3 disk. BSAVE WJ.BINARY,A$2000,L $6900 14) Insert /USERS.DISK and boot it. 15) Select Convert from the Startup menu. 16) Convert WJ.BINARY on DOS 3.3 to /WI/WI.BINARY (move the binary file from BOS 3.3 to ProDOS on your new /WJ disk). 17) Quit back to BASIC.SYSTEM on your /USERS. DISK and hit B to go to BASIC from the Startup menu, 18) At this point you should have PRODOS, the empty file WJ.SYSTEM, and the file WJ.BINARY on your new disk. Now copy the code from WJ.BINARY to WJ.SYSTEM, BLOAD /WJ/WJ.BINARY,A$2000 BSAVE /WJ/ WJ.SYSTEM, TSYS,A$2000,L$6900 19) Delete the binary file. DELETE WJ.BINARY 20) Insert your /USERS.DISK and use the “Smart RUN" command to enter FILER. -FILER 21) Copy all the files except PRODOS, WJ2E.2.8.x, and WJ2E.SYSTEM from the original disk to your new disk /WJ Summary You now have a cracked version of Word Juggler //e v2.8. You should probably clean up the directory by formatting another disk and copying only the needed files (PRODOS, WJ.SYSTEM, WJ.CONSOLE, WJ.PARAMS, TS.PARAMS, all EXT files, and your single printer driver file), With this all done your word processor will boot in seconds, instead of the minute it took on the original, Another pressing problem is the #9 option (QUIT) from Word Juggler’s main menu. The normal quit procedure for ProDOS applications seems to have been ignored by the people at Quark. I don’t know if it's because they need the quit code space ($D100-$D3FF in 2nd bank of the language card) for Word Juggler code, or that they just want to keep protecting until the end. I'll be proceeding to wade through the K's of ML code disassembling like a maniac to see if this is true. Ihave only encountered one minor problem with the cracked version of this program. It involves ProDOS pretixes. You have to make sure the prefix is ‘WORD.JUGGLER (or what ever your disk’s volume name is) before you run WJ.SYSTEM. If you don’t, then WJ.SYSTEM won't be able to find your parameter files! Thave NOT tested it using WJ.SYSTEM on a hard drive. So, if you put it on your hard drive, be careful. Make sure you have as much as possible backed up. just in case. & COMPUTIST No. 33 11 softkey for... Tink! by Pete Ashdown Tonk! in the land of Buddy-Bots Mindscape, Inc. 3444 Dundee Road Northbrook. IL 60062 Requirements: Super IOB 1.5 A disk searcher A sector editor A blank disk Working for teachers has certain advantages The main advantage | have found is that the teachers buy lots of protected software. This allows me to deprotect their software when they receive it. Unfortunately, most of the software is carly-age cducational. But it is. still educational for crackers! One day, I was handed **Tink! Tonk!: Tonk in the Land of Buddy-Bots’’. The title didn't sound very appealing, but the protection did Mindscape has been putting out some very good protections recently. So I set out to deprotect it I tried to bit copy the disk first. When I booted the copy, it would just reboot continually without loading any further tracks. This is a tip- off to the fact that there was a check on track @. Looking at the disk with a nibble viewer shows normal address and data headers, with the trailers changed from DE AA to FF FP Turning the disk into a normal format in this case can be as easy as turning off the error- checking in DOS and using COPYA. This is the first thing that should be tried in deprotecting any disk. You would be surprised at just how many programs can be converted in this way. Change the SEC ($38) at $B942 to a CLC ($18). CALL-I51 B942:18 or POKE 47426,24 Now use COPYA or another sector copier to copy the original disk to the blank disk. 1 used Super IOB and a modified controller. There was 12 COMPUTIST No. 33 @ longer routine in Super 1OB 1.0 for this purpose, I wanted to use the new fast copy feature in Super IOB 1.5 so I simply inserted the POKE in my controller The protection gets a little bit tricky from here. I tried booting the disk I had just copied and found that it just continually rebooted like the bit copy, What needed to be done was what 1 like to call the ‘*Simplest Boot Trace.’" It involves pressing Reset during the boot. It can usually be done with no problem on continual reboots. But some programs will change the Reset vector to point to a freeze routine or clear & reboot. You would have to use a definite way into the monitor for these, *‘Tonk** was not one of these, however, ‘To do it. insert the original disk and boot it PR#6 Now listen for the drive head to move past track @, then inumediately hit Reset. If you found yourself in BASIC, enter the monitor with CALL-151 The Boot ROM on the drive controller card loads track O sector 0 into page $08 ($0800) This is what is called a **hootstrap loader”. This loader loads the other tracks, Thus pulling the program up “‘by its own bootstraps’*, Upon inspection of page $08 I found it was pretty normal. It loaded in the rest of Track @ then did an indirect JMP to the address at $08FD Location $08FD contained a $00 and $08FE contained a $B7. This meant that the indirect IMP went to $B700. I listed $B700. The first thing I found was a JSR to $BB0O, So on a hunch, I NOP‘ed the JSR. B700;EA EA EA I then inserted the normal copy T had made previously into the drive and started the routine B700G The rest of the disk loaded just fine and the program worked perfect. This meant that the only check was at SBBOO. So I used the Core Disk Searcher to find the JSR $BBQ@0. This done by searching for the hex string “*2000BB I searched the whole disk just to be safe and found only one on track @ Sector 1 at byte 00. T then used a sector editor to remove it me 0 5 * rab Fron’ Te oe GOSUB 490 : GOSUB 610 : IF is The 57 bias SUB 310 t) 1 $00 $20 SEA 1030 POKE 47426 GOSUB 490 : GOSUB 610 : IF 0 1 $01 $00 SEA PEEK (TRK ) THEN 1050 9 1 $02 $BB SEA 1040 TK = PEEK (TRK) :ST=PEEK (SCT) : GOTO 1020 That's it! You now own a deprotected copy ‘1050 HOME . PRINT "COPYDONE” . END of Tonk in the Lund of Buddy-Bots."” Itis 1199 DATA 3* CHANGES possible that the other “Tink! Tonk!"* programs ithe. 40 ak ure protected in a simikir manner. Tknow of 111” P ‘ three more of them right now; ‘Tuk Goes to 1120 DATAQ .1 1 ,234 Town,” “*Tink’s Adventure” and ““Tinka's 1139 TAQ <1 .2 .234 Mazes"’, | have not tried this procedure on them, so this is only a thought Below is the controller for Super IOB 1.5 controller checksums It does everything needed to deprotect the disk 1900 - $3568 1050 - $0582 controller 1010 - $2544 1 ~ $4668 1920 - $297C 1110 - $02AB si 1030 $A469 1120 $2c24 100 REM BUDDY -BOTS CONTROLLER 1049 - $8406 1130 - SE422 tis) 1010 TK=0 :LT=35 :ST=18 :LS=15 :0D = mor "rr AR Sie a3 ir Hg . Ht Ht gre ene ee at Rpt, "ir h RE ree RR Fs tae fa Li ae Reg tee, ‘3 ies A344 =2 ER gh F i ma ERE ger eo 3 a a pA a Me OS COMPUTIST No. 33 13 softkey for.. Sundog by Mare Lirette FIL Games 7907 Ostrow Street, Suite F San Diego, CA 92111 $39.95 Super IOB 1.5 Original SunDog v2.0 2 blank disks (or front and back of one) SunDog is a fantastic action/strate: adventure game. It has sharp, realistic, quality graphics which makes it attractive to play. It invalves strategy and creates excitement as you play. Your mission is to build a city and transport frozen colonists to your city. This may sound easy, but is becomes tricky when space pirates try to steal your money or your valuable >. The worst thing that could happen to a person playing the game is to have the disk “crash”, This not only costs money to replace, but also puts your mission on hold for a month or two. That is the reason I decided to a COPY Aable version of my disk The Protection The first thing I did when trying to unprotect SunDog was to try to copy the disk. I used Locksmith’s fast disk backup because it tells me which tracks and sectors are protected and which are not. Much to my surprise, I found that the front side actually copied without any problems. I then tried the back side of the disk. and found that it too was unprotected except for track $22 Instantly I came to the conclusion that track $22 SunDog™ Frozen pegaea Version 2.0 foparisht Co)? 19384 by FIL G anes, Inc. All rights reserved Press either joystick button to begin 14 COMPUTIST No. 33 must be a nibble count or nibble search track After taking my disk drive apart and booting the copy I had made, I found that my conclusion was correct. Shortly after inserting the back side of the disk. the program went to track $22. After not being able to find the correct sequence of bytes, the disk arm recalibrated and moved over to track $23. After not finding the correct sequence of bytes again, it reculibrated and the arm moved over to track $22. It did this a few times, stoppod, and put me into no man’s land I concluded that track $23 was suppos identical to track $22 and was pul there as a backup system in case track $22 failed to read properly ed to he Satisfied that track $22 was the nibble search track. I got out TRAX, from Bag of Tricks, and examined the raw dump of track $22. The dump reveuled the following sequence of bytes: DS D7 FF E7. The Search Well, now that I knew what the prog searched for, I searched for the program Uat did the search. I first used ZAP. from Bag of Tricks, and searched for a routine that read the disk and compared with D5 D7 FF £7. I Searched both sides of the disk for the sequence BD 8C CO 10 FB C9 D7 (LDA CO&C,X; BPL.; CMP #$D7) which would be part of the nibble search routine, but 1 did not find any, I then booted the original disk and waited for it to do its nibble scarch. As soon as it went to track $22, 1 pressed Reset until the drive stopped Then | entered the monitor and started to search memory for a nibble search routine, Afier a little searching, 1 found it in memory around location $1000. I wrote down a sequence of bytes and searched the disk for them, but I was not able to find them on either side of the disk Tcame to the conclusion that the program was stored on the disk in a coded form. After a lot ot hard.work and countless hours of searching. I found that the coded program lay on track $18, sectors $01-$05. SOF on the front and also another on track $05, sectors $09-OD on the back. Both of these programs are nibble search routines. Gur objective is to defeat these nibble search routines. am v2. The Procedure After examining the program, I found that When it wanted to perform a nibble search, it would jump to location $0F40. Fortunately when I searched the disk for this routine, it was not coded and was found on track $13, sector $07. To disable the routine, I puta ReTurn from Subroutine (RTS, or $60) in byte $00 of track $13. sector $07. This defeated the nibble search routine and let me play the game except I could not LIFTOFF. Every time I tried to liftoff, it would tell me: ake Lift cle: #&& due to p After some more searching, I found that a successlul nibble search would store the letters SHIP in locations $1801-$1804. So to defeat the nibble scarch routine, we make it store the letters SHIP in locations $1801-$1804 and return to the rest of the game ince denied + ate activity sae The Controller The controller is set up to copy both sides of the disk and asks you which side you wish to copy. While copying the front side of the disk, iL will copy tracks $00-$22 and sector edit track $13. sector $07 starting at byte $00, changing from 68 85 00 68 85 01 68 85 02 68 85 03 AS O1 48 AS 0 48 AD 08 BI to AQ 53 8D OL 18 AQ 48 8D G2 18 A9 49 80 03 18 Ad §0 8D 04 18 60 While copying the back side, it will copy tracks $00-$21. ignoring the unreadable nibble search tracks. Step by Step 1) Install the controller at the end of this article into Super IOB v1.5 2) Cupy both sides of the disk. specifying Front or Back when the program asks 3) Enjoy your unprotected version of SunDog ¥2.0! controller 1000 REM SUNDOG V2 CONTROLLER LOIOHONE .AS = "FRONT" OR® BACK?” ; GOSUB 450 GET IS 1020 |F IS <> °F" AND |$.<> "8" THEN 1010 1030 TK=0 5 = is COD=WR : FAST 1040 IF IS ="B 1050 GOSUB 490 1060 IF IS = "F" TI 1: RESTORE 1070 GOSAUB490 ; GOSUB 610 THEN 1898 1080 TK = PEEK (TRK) :ST 1090 HOME : PRINT "COPY* DONE" » END 5000 DATA CHANGES 5010 DATA 19 .7 8 ,169 19 ,7 1 83,19 ,7 2 14L 5020 DATA 19 ,7 5030 DATA 19 7 TK = PEEK (TRK ) - 0:TK=Tl \F PEEK (TRK ) =LT PEEK (SCT ) : GOTO 1050 SB40DATALD 7,9 24 19.7 10.169 .19 711 73 5O5QDATAL9 ,7 12 141 19,7 ,13,3,19.7 14 24 5060 DATA 19 7,15 169,19 .7,16 80.19.77 141 5070 DATA 19 18 419.719 24 19 7 20 96 controller checksums 1008 - $3568 1090 SFDC 1910 - $107A 5000 - $25D2 1020 - SB7E1 5010 - $8051 1030 - SE091 5026 - $0120 1040 SCABC 5030 - $5754 1050 $6026 5040 SEB5A 1060 $3586 9050 - SAIFS 1070 ~~ $44A2 5060 - $0049 1080 - S7E43 5070 - $0270 COMPUTIST No. 33 15 The Mapping of. Ultima IV By Jim S, Hart and Ray Darrah Requirements: DOS 3.3 The new release in the Ultima series is finally out and it is an excellent game. I have had the chance wo play it and would definitely recommend it to anyone who enjoys D&D style games, The object of the game is to become enlightened in the eight vir of the Avatar in your quest to destroy the Abyss of Evil. Along the way you pick up companions, solve quests, explore deep dungeons, and generally learn of the virtues needed to win the game. There are limes, however, when going through an elaborate sequence of moves to get somewhere may not be your cup of tea, Maybe it’s just that you want ta ‘*customize”’ the world to fit your needs or possibly you want to see what the world map of Ultima IV really looks like (without having to map it by hand), Fear not bold adventurers for here are two programs to help you out. The first program, “‘Ultimainland Editor IV" allows the editing of the entire world map. The second program, “Ultimapper 1V"" will print out a map of the entire Ultima IV world on your printer. These programs arc only limited by what you choose to use them for! Keying in the Programs 1) Type in the first BASIC listing and save it SAVE ULTIMAINLAND EDITOR IV 2) Type in the second BASIC program and save it SAVE ULTIMAPPER IV in the first hex code using the instructions on the inside front cover of this magazine and save it BSAVE SECTOR.ZAP, A$300, L$21 4) Key in the second hex code and save it BSAVE OBJ.IV,A$300,L$C6 5) Make sure w put these four programs on the same disk! Using The Programs To use the printer program, ready your printer with at least 16 sheets of paper, RUN the program and insert the Britannia disk when prompted. The program will then proceed to print out, in four sections, the entire Ultima IV world map. This process will take over one hour. When the program is finished, tape the four sections together from left to right and viola’. there is your map! ‘The mainland editor is almost just as easy to use. First, RUN it and insert your Britannia disk when prompted. Table 1 shows all of the possible things that can be on the surface and if the editor supports the manipulation of that character. Note: some printers will not printthe delete character (ASCH 127) so an ampersand was substituted in/its place in the Ultimapper IV program. Movement and Editing To move your cursor about in the editing window, type the usual’ **L,J,K,M" escape characters. Note that on //e’s the cursor will not flash when atop lava. Directly below the editing window, you should see a line of the characters that you can add to the map. Under one of these characters there should be a carat ‘*~'' which is highlighting the current character. By pressing return, the current character will be placed on the map where the cursor is. Pressing the left and right arrow keys will highlight a different character or you can press the key of the 16 COMPUTIST No. 33 character you wish to highlight, For example. pressing the percent key will instantly highlight the percent character. ‘The Ultimainland Editor divides the map that the Ultimapper IV program makes into four quadrants, They are numbered as follows: You may read from the disk or write to the disk one of these quadrants by pressing "R"” for read and **W"" for write, Hopefully these two programs will make the Ultima IV game more enjoyable. For you hackers out there I suggest looking at the three unprotected disk sides with a program such as Copy ]{ Plus and see what you can find, Believe me, there is a lot of information to look at, much of it NOT in file form, and decipher, Happy adventuring!! Ultimainland Editor 19 REM * -------. 20 REM * ULTIMA IV 30.REM * MAINLAND EDITOR 40 REM %* BY : RAY DARRAH 78 REM SET UP CONSTANTS 80 HIMEM: 8191 : CLEAR 90 IF PEEK ( ea 169 OR PEEK Hatt <> 7 THEN PRINT CHRS (4) “BLOAD* O} 100X=5 :Y=1 5B, <6 B2=32 "iRk neh SCT 7085 -TK=0 :ST=0 :CC=1 ;RW= 47092 :Q 110 DIMC(27 ) : FORA= 17027 :C$ =CS+CHRS ( PEEK (938+A)-128) :C(A) = PEEK (911 + A) : NEXT 120 KS = "| JKM" + CHR$ (13 ) ) + CHRS (27 ) + “RW” 130 REWSET UP SCREEN DISPLAY 140 TEXT : HOME ; POKE 48 32° VLIN@ 33 AT3 VLIN@ ,33AT 36! INVERSE : HTABS : VTAB 17 PRINT SPC( 32) ; NORMAL 150 VTAB 19 ; HTAB8 : PRINT C$ ; GOSUB 370 : VTAB 20. HTABS : PRINT“ ; : HTAB 36: PRINT “" 160 REM GET iNT|AL QUADRANT +CHRS (8) + CHRS (21. 17QVTAB 23 . HTABL . PRINT" INSERT* BRITANN|A* D|SK* AND* PRESS* RETURN” 189 WAIT - 16384 128 - GET A$: IFAS <> CHR (13 ) AND AS <> CHRS (27 ) THEN 180 190 |F AS - CHRS (27) THEN HOME : END 200 VTAB 23 _ HTAB 1 . PRINT SPC( 39) 210 REM READ IN NEW 16K AREA 220 POKE RW 1 230 POKE TRK .TK ; POKE SCT .ST : POKE 47093 .0 POKE 47083 0 : CALL 768 248 REM PUT COMMANDS ON SCREEN 250 VTAB 22 ; HTAB 1 : CALL 64578 : PRINT "1, J.K.M® -* MOVEMENT" TAB( 23) "RETURN* =* PUT* CHAR" 260 VTAB 24 ; PRINT "R* =* READ* QUADRANT" TAB( ) "W* =" WRITE* QUADRANT" ; 270 REM PRINT CURRENT MAP 280 POKE 252 .B1 ; POKE 253 .B2 : CALL 833 290 REM WAIT FOR COMMAND 300 VTAB Y ; HTABX : GET AS 310 FOR A=1TOLEN (KS) = IFAS <>MIDS (KS A 1) THEN NEXT ; GOTO 340 320 ON A GOTO 39@ ,490 530 440 578 600 620 190 640 660 330 REM TEST FOR MAP CHAR 340 FORA = 1 TOLEN (CS): IFAS <>MIDS (CS A v1) THEN NEXT : GOTO 300 350 0G =A GOSUB 370 GOTO 300 360 REM HIGHLIGHT CURRENT CHAR 370 VTAB 20» HTABB PRINT SPC( 27); © HTABCC +7 PRINT "*" : RETURN 38 REN MOVE CURSOR UP 390 |F Y= 1 AND Bl = @ AND B2/ 8= INT (B2/8) THEN 300 400 Y=Y-1: IF Y>@ THEN 300 410Y=8 :Bl=B1- 128: IF Bl >- 1 THEN 280 420 B1 = 128 .B2=B2-1 , GOTO 280 430 REN NOVE CURSOR DOWN 440 |F Y= 16 ANDB1 =@ AND (B2-7) / 8= INT ((B2 ~7)/8) THEN 300 450Y=Y41: IFY<17 THEN 300 460Y=9 Bl=B1+ 128: IF Bl < 256 THEN 280 470 Bl =0 :B2=B2+1 ; GOTO 280 480 REM MOVE CURSOR LEFT 490 |F X= 5 AND B2 < 40 THEN 300 500 X=X-1: IF X>4 THEN 300 510X= 20 .B2= 82-8 . GOTO 280 520 REM MOVE CURSOR RIGHT 530 |F X = 36 AND B2 > 79 THEN 300 $40 X=X+1. 1F X< 37 THEN 300 560 X= 21 :B2=B248 » GOTO 280 560 REM PUT CHAR ON MAP 57QPRINTMIDS (C$.CC.1). : (FX> 20 THENPOKE Bl +B? * 256-X=-(Y-1) % 1642027 CxCC ) GOTO 300 580 POKE Bl + Bi 256+ X-55(¥-1) #16 CCC) : GOTO 300 59@ REM MOVE POINTER LEFT 608 CC =CC-(CC>1) | GOSUB 370 ; GOI0 300 610 REM MOVE POINTER RIGHT 620 CC=CC + (CC < 27) . GOSUB 370 . GOTO 300 630 REM READ NEW QUADRANT 640 POKE RW 1 :AS = "READ" » GOTO 680 650 REM WRITE NEW QUADRANT 660 POKF RW 2 :A$ = "WRITE" 670 REM GET NEW QUADRANT NUMBER 680 VTAB 22 : HTAB 1 ; CALL 64578 : PRINT “QUADRANT* TO* " AS “* (8-3)*" QCHRS (8) 690.GET BS . iF (BS < “0” ORBS > "3" ) AND BS <> CHRS (13 } AND BS < >CHRS (27 } THEN 690 700 |F AS = CHRS (27 ) THEN 250 TAM A=VAL (BS) . IF BS = CHR$ (13 ) THENA=Q Source Code for OBJ.IV B7FS- ERROR .£Q $B7F5 B7ED- SECTOR .EQ SB7ED B7EC- TRACK EQ SB7EC BFL BUFMSB -EQ $B7FL FOFO- COUT EQ SFOFO DOS ERROR CODE DOS SECTOR NUMBER DOS TRACK NUMBER WHERE THE SECTOR GOES OR COMES FRON PRINT QUT ROUTINE IN MONITOR 20- LFTMAR .EQ $20 LEFT MARGIN OF TEXT WINDOW Tabie 1: 344 | Green fire ae! Surface character representations $45 | Biue fire ¥ 12 Byte {Len edit? Char $46 ! Orange fire yg ne a = $47! Red fire tN of $00 Deep water Hh $48! Solid wal! TN SOL! Regular water 1y $49! Secret brick wal| tN! 302 ! Shallow water ne} S4A Dungeon altar IN $03 ‘Swamp Yie $48 Campfire {No $04 Grass Cd Sac Lava 1 delete $05 Brush = $40 | Dungeon eyebal! tN! $06! Forest Yd S4E -4F ! Attack shots 1h! $07! Hills 1 ¥ $50-31 | Guard tN! $08 ! Wountains i Bed $52-53 | Merchant IN $09 ! Dungeon 1¥io0 $54-55 |! Bard Int SOA! City {¥ 1 i $56-57 | Jester INI $0B ! Castle LW & $58-59 | Begear 1 iN $0c ! Village Iv v $5A- 5B ! Child IN! $0D ! L.Side of Main Castle | ¥! [ $9C-5D | Bul! INI $0E | Middle of Main Castle! Y ! @ SOE-DF ! Lord British 1 Nl SOF |! R Side of Wain Castle ! Y ! J $60-79 ! Alphabet A zo Z VN $10 ! Boat left 18a S7A ! Parallel lines IN! $1 ! Boat up Nad $7B ! Shape of ']' {Nt $12 ! Boat right {Nat sic ! Shape of ‘[' 1 Wel $13 ! Boat down L WET $70 ! Window YN $14! Horse left Tia S/E | Dark space Wesaae $15 ! Horse right {Nt $7F ! Brick wall INS $16! Spider web INt $80-83 | Pirate Ship INI $17! Bridge {¥d = $84-85 | Nixie iN! $18 | Balloon 'V¥I% $86-87 ! Squid 1 Nd $19! Top of bridge TN! $88-89 | Sea serpent Ni $1A | Bottom of bridge WI $8A-88 | Seahorse et SIB! Up ladder t Nid $8C-8D ! Whirlpoo! Nu $1C ! Down ladder INI $8E-8F | Tornado ‘WI $iD ! Wagincla ic Be | $90-93 ! Rat Nd $1E | Shrine {vis $94-97 ! Bat N! SIF! Ranger N! $98-98 | Spider Ni! $20-21 ! Character ‘A’ IN} $9C-9F ! Ghost Nt $22-23 ! Character ‘B’ tN SAQ-A3! S| ime Np $24-25 | Character 'C NI SA4-A7 ! Troll! Ni! $26-27 | Character ‘0' NI SAB-AB | Gremlin tN! $28-29 ! Character 'E' nt SAC AF ! Treasure chest 1h S2A-2B ! Character 'F’ N! $80-83 | Reaper IN $2C-20 | Character ‘G' N! $84-B7 | Insects !N S2E-2F ! Character 'H' N! $88-BB | Eyebal| UN $30 Stone pillar Nt SBC-BF | Phantom iN $31 Bottom left diagonal | N ! $CO-C3 | Ore 'N $32 Bottom right diagonal | N | SC4-C7 : Skeleton int $33 | Upper left diagonal | N! SC8-CB | Rogue UN S34 Upper right diagonal | N | SOC-CF ! Snake tN $35 ! Ship mast Nt $00-D3 | Etrin 1h! $36 | Ship cross NI SD4-D7 | Headless IN $37. | Rock Yi $D8-DB | Cyclops {Nd $38 ! Sick character N! SOC DF ! Wisp i Nol $39 ! Stone fence N! SEQ-E3 | Mage INI S3A ! Locked door No! St4-E7 | Skull IN $38 ! Open door Ne SE8-EB | Lava lizard {N14 $3C | Chest yrs SEC-EF | Zorn iwi $30 | Ankh IN SFQ-F3 | Daemon 1h $3E | Brick Floor IN SF4-F7 | Three headed Dragon | N ! $3F ! Middle of bridge 1 SF8-FB ! Dragon ING $40-43 | Woongate INd SFC-FF | Balron INI COMPUTIST No. 33 17 720Q-A:TK=8* (A>1) :ST=8 * (A/2< > INT (A/2)) : HTABL : CALL 64578 730 PRINT. PRINT LEFTS (AS .4)"NG* QUADRANT® "§ : GOTO 230 Ultimainland Editor checksums 18 - $BADD 388 © - $9C32 20 - $9B13 390 - $A264 30 ~ $4038 490 $19E7 40 ~ SAD92 410 - $4434 50 - $0899 420 - $B8EO 60 - SFF65 430 - SARMB 70 SABF 4400 - SO4AF 80 ~ $6468 4500 - SFFEE 30 ~ SEC83 460 = - S$O3A3 100 ~ S5BFY. 4/9 - SF612 116 - $A345. 480 = - SDA62 120 ~ $4088 490 - S2CC8 130 - $75F3 500 $BA53 140 -- SFESA 510 $7349 160 - $E9D6 520 - $0222 160 ~ $F428 §30 - $0820 170 - SF791 540 - S6EF5 180 - S7FAC 550 ~ $0999 190 © SFCCRS5GD ($4220 200 © - SBCA 570 = - $4ABD 210 - $88bC 588 0 - $F137 220 - SBEAS 398 - SEC3B 230 - $8006 600 = - $38DD 24g - SCh74 «G10 $5640 250 $2516 620 - $DEB2 260 © - $317B 630 © - SESCE 270 ©- $9700 «= 64D — $724 280 - SCE8F 650 =- SDB44 290 - SFR65 «= 660. ~ S300C 300 $A1D0 670 = - $7340 3100 - $FEF7 680 $4397 320 - $8580 © 690 SOFOC 330) - S30F8 100 ~ $B187 340 - $12DA 710 - SEO97 350 © - $4A59 720 ~ $2838 360 © - S7DEC 738 - $63F9 370 - $24cc Ultimapper IV 1/REW --annnnnnannnnneneooe * 20 REM %* ULTINA IV * 3Q REM * MAINLAND PRINTER = 35 REM * BY JIM S. HART * 40 REM * — me 50 REW 60 REM % ---~---------=—=--— % 70 REM %& SET UP VARIABLES 89 Riese es —# 90 REW 190 HIMEW: 38144 110 IF PEEK (768) <> 169 OR PEEK (769) <> 3 THEN PRINT : PRINT CHRS (4 ); "BLOAD* SECTOR. ZAP, AS300" 120 CLEAR :BUF 38143 : WTS - 768 -SEC-@ : DIM LOC(16 ,256) .V(27) .V8(27 ) 130 HOME DS = CHRS (4) POS =DS + "PRHO" .PIS = DS + "PRA1” 140 FOR | =1 7027 ; READV(| ) J :V$(1) =CHRS (J): NEXT © 1VS = "ULTIMAS IV" 150 REM hs, eer * 170 REM PRINT OUT TITLE SCRN= 18@ REM % ------—---------____ * 190 REM 2- Cy £Q $25 CURRENT LINE ON TEXT WINDOW FE- CNTR1 EQ SFE GENERAL STORAGE FF- CNTR2 EQ SFF ‘SAWE Fe- SECTi EQ SFC FIRST SECTOR iS POINTED TO BY SFC FD OR $300 TF OBJ. 1V A % * READ OR WRITE 16K OF DATA ie iio ee s 0306: AS 07 LDA 47 READ OR WRITE 8 TRACKS 0302. 85 FE STA CNTRI 0304: A 58 LDA #$58 FIRST SECTOR GOES AT $5800 9306; 8D Fl 87 STA BUFMSB 0309: AD FD 87 RWI LDA SECTOR @30C: 85 FF STA CNTR2 SAVE ENDING SFCTOR NUMBFR O30E, 18 cle O30F; 69 07 ADC #7 GO BACKWARDS FOR SPEED @311; 8D ED 87 STA SECTOR 0314: A9 B7 RW2 LDA #$B7 READ OR WRITE A SECTOR O316. AG ES LOY #SE8 9318: 20 D9 03 ISR $309 0318: AD ED B7 LDA SECTOR DONE? O31E: CS FF CMP CNTR2 9320: FO OE BFQ NXTTRK YES, 00 NEXT TRACK 0322, CE ED 87 DEC SECTOR GET NEXT SECTOR 0325: AD Fl 87 LOA BUFMSB NEXT SECTOR 1S STORED 8 PAGES LESS 0328: 38 SEC 0329; £9 08 SBC #8 @32B: 80 Fl 87 STA BUFMSB O32E. BO E4 BCS RW2 ALWAYS, 0330: EE EC B7 NXTTRK INC TRACK = NEXT TRACK NUMBER 0333: AD Fl B7 LDA BUFMSB 0336: 18 CLC 0337. 69 39 ADC. #$39 NEXT SECTOR 1S HERE 0339: 8D Fl 87 STA BUFUSB @39C: C6 FE DEC CNTR1 DONE WITH ALL THE TRACKS? 033E: 10 C9 BPL RIL NOPE, CONTINUE 0340. 60 RTS er ee ee * * PRINT CURRENT STUFF ON SCREEN * a a ar ee ee neti * 0341: AS 04 LDA #4 CHANGE TEXT WINDOW 0343: 85 20 STA LFTMAR 0345: AS FF PRINTS LDA #$FF START AT TOP OF SCREEN 0347: 85 25 STA CV 0349. AD 00 LOY #0 START WITH FIRST BYTE 0348. AQ OF LDA #15 SIXTEEN LINES/SECTOR 34D; 85 FF STA CNTR2 D0 256 BYTES O34F; AQ 8D PRINTL LDA #$8D GO TO LEFT EDGE OF NEXT LINE 200 HOME : INVERSE 210 VTAB 10 : PRINT "* ULTIMA* IV* MA|NLAND* PRINTER® " 220 NORMAL : VTAB 20 230 PRINT “Insert® Britannia* & Press* [RETURN]" 240 PRINT” ("; SPC(9): "[ESC]* to* exit” ; SPC( 5), PSs 250 GET AS : ON (AS < >CHRS (13 ) ANDAS <>CHRS (27) ) GOTO 250 260 PRINT AS - |F AS =CHRS (27 ) THEN TEXT : HOME END 270 HOME : VTAB 10 : INVERSE 280 PRINT "* THIS* WILL* TAKE* ABOUT” 1“ HOUR, *" 299 NORMAL 300 REM 18 COMPUTIST No. 33 310 REM + 320REW * TURN ON PRINTER AND > 330 REM %* PRINT OUT MAINLAND 3 340) REM s¢ —————————-—_______ 350 REM 360 PRINT PIS : PRINT CHRS (9); “80N" 370 PRINT IVS 380 POKE 790 ,1 : POKE 791 0 390 FOR LOOP = 0 10 15 400 FOR $1 = SEC TO (SEC +3) 410 POKE 782 , LOOP - POKE 783 SL : POKE 791.0 CALL RWTS - POKE 72 0 420 FOR J = 170256 :LOC(SL ,J ) = PEEK (BUF 4 J ) NEXT J 430 NEXT S1 440 FOR | =@ 7015 a 20 ~ $9B13 340 - $6FID 30 — $4038 350 SD9A2 0351. 20 FO FD JSR COUT = z 0354: A9 OF LOA #15 SIXTEEN BYTES/LINE a 2 ean a 7 ae 0356: 85 FE STA GNTRL 50 - SAIS] «380 S60c? 358. B1 FC PRINT2 LOA (SECTL),Y GET A BYTE FROM FIRST SECTOR 60 - $5r3a = «390s 7402 O35A: AZ 1A LOX #26 27 (TEMS TO COMPARE WITH 70 - SBA? «= 400 «S5A3D 935: DD 90 03 CMP1 CMP |TEMS,X MATCH? 80 — $1389 410 - $0956 O35F. FO 07 BEQ GOT.IT YES. TRANSLATE AND PRINT 90 «= SIFED © 420 sBaaA 0361; CA vex NEXT ITEM 100 - $3688 «= «430 saga 0362: 10 F8 BPL CHPL 119 - $9A92 440 - SRDAQ 0364. AQ BF LDA #SBF ANYTHING ELSE |S A QUESTION MARK 120 - $iCcl 450 SE1DD 0366. 00 03 BNE SKIP] SKIP THE LDA BELOW 130 - S8B6F = 469 - S2E28 9368. BO AB U3 GOT. IT LDA TRANSL.X TRANSLATE INTO PRINTABLE CHARACTER 140 - SOOFD «= «470—SSDB5F 0368: 20 FO FD SKIP] JSR COUT © PRINT IT 150 SE384 480 - SDUGE 036E C8 INy NEXT BYTE 160 - SBEAE 490 © - SADCE 036F: C6 FE DEC CNTRI DONE WITH LINE? 170 - SFCC2 «500 - $0103 0371: 10 E5 BPL PRINT2 NOPE CONTINUE 1800 - $4863 510 - $7244 0373. C6 FF DEC CNTR2 — DONE WITH SECTOR 199 - SF55¢ 520 - SEA47 0375, 10 D8 BPL PRINT! NOPE, DO NEXT LINE 200 - $CC25 «530 S8EES 210 SOB40 540 - $FFCI 0377 AS 20 LDA LFTWAR ALREADY PRINTED SECOND SECIOR? 220 - SFSEC = 550 - $57DA 0379. C9 14 CHP #20 230 - SF844 560 - $7016 0378: FO OE BEQ EXIT YES, WERF DONE 240° = S8CCA. «= 870 - S03 0370; Ad 14 LOA #20 250 - S750F 580 - $7008 Q37F 85 20 STA LFTMAR 260 = - $8AD3 585 - $0250 0381, AS FO UDA SECTI+1 NEXT SECTOR TO PRINT 1S +8 270 - $0082 = 890 ~ $3640 0383; 18 cic 280 - SC77E = 600 - «$2729 0384° 69 08 ADC #8 290 - $A93D «= 610 - SDE2B 0386. 85 FD STA SECTI41 300 - SBIFl = 620 - S0E73 0388; 4C 45 03 JMP. PRINTS 310 ~ S@5E8 630 S1COF 320 SDOBD «640 SALT 0388: A900 © EXIT LUA #0 FIX TEXT WINDOW 0380 STA LFTWAR 5 038r a oe RTS Sector.Zap Hexdump Hah BU ee 0300. A9 03 AO 9A 2009 03 60 $6050 393° 03 04 05 0308: 00 00 01 60 0) 00 00 00 s37AD Hees: Be 7 Ni 0310: 18 03 90 95 00 00 01 00 soBD4 0399; 09 OA 0B ; 0390: OC 0D ITEMS HS 00 01 02 03.04 05 06.07.08.09,0A.08.0c..00 ae . Iie) ies 0396 OE OF 17 O3AL: 18 1D 1E 03M: 37 30 44 ars ipaear OBJ.IV Hexdump O3AA, 40 HS E.OF..17,18.1D.1E.37.30.44.45.46.47 4¢ pias 2 TES) SER anid O3AB. FE AQ DE TRANSL .HS FE. AO DE 0308: B/ AD ED 87 8 FF 18 69 $70C6 O3AE: A3 AE AD 0310; 07 80 ED 87 AD B7 AD EB 50102 0381: AR AF AA 9318: 20 D9 03 AD ED.B7 CS TF 4634 0384. C4 E3 C3 0320: FO OE CE FD B7 AD FL.B7 $2750 038/. 06 DB CO 0328. 38 £9 08 8) FL 87 BO E4 $1644 038A. DD BD AS 0330. EE EC B7 AD Fl 87 18 69 $0905 380: CD 03 BA 0338, 29 80 FL 87 C6 FE 10 C9 $685 0300. Ad BL B2 0340: 60 AQ 04 85 20 A9 FF 85 Sda7E 03¢3: 83 B4 AS -"#, -+/*DeCV[4] INS. $1234" 0348; 25 AO 00 A9 OF 85 TF AD $9980 03¢5- FF HS FF 0350, 8D 20 FO FD A9 OF 85 FE = $F9G4 0358: Bl FC A2 1A DD 90 U3 HO $4386 570 REM 3% — = rm) Sofas we ona Phi Heeb) Teds 585 REM * CHR REPRESENTATION 3 0370; FE 10 E5 C6 IT 10 DBAS $8270 470 FOR K = 1 10.27 590 REW ¥ —————-—_-- * 0378: 20.69 14 FO OF A 14 85 SDOCE 480 IFLOC(S) J+ (16 * |) )=V(K) THEN PRINT 600 REM 0380 20 AS FD 18 69 08 85 FD S0CEL YS(K), .K= 28) NEXT K : GOTO 500 G1ODATAD 126.1 ,32,2,94,3.35.4 46.5 45 0388. 4C 45 03 A900 85 20 60 $8032 490 NEXT K ; PRINT "?" 6.43.7 47 8 42 0390; 00 01 02 03 04 05 06 07 $B092 500 NEXT J 6200ATAD 68.10 99.11 ,67 12,86 ,13.91,14 0398. 08 09 OA OB OC 00 OE OF $5092 bLONEXT SI. PRINT “** 64.15 93 SENET | 630 DATA 23 61 24.37 ,29,.77 3083.55 58 O3A0- 17 18 10 1E 37 30.44.45. SCOFS 530 NEXT LOOP a Bee 2 85-5 Fh RGN HE O3A8: 46 47 4C FE AQ DE A AE $1201 540 |F SEC-<> 12 THEN PRINT CHRS (12) SEC=SEC i me - ee Ee ee sa +4 > GOTO 370 Ultimapper IV checksums 9300: AS Bl B2 B3 B4 FE S1A5B 550 TEXT . HOME . PRINT POS : END 560 REW 10 = $BADD «330 — $4588 b: 4 COMPUTIST No. 33 19 Sound Master by William Wingfield Jr. Requirements: Low-wattage soldering iron Small gauge hook-up wire Audio Jack (RCA or 1/8" type) 500k potentiometer and 10 ohm resistor Phillips Head screwdriver Impedance transformer (optional) Note: The procedure described below requires modification of your computer and may void any warranty, COMPUTIST will not be held responsible for any damages incurred while following this procedure, This procedure involves taking apart your computer, If you are new at this, you should read the entire article carefully before doing anything and then read it a second time while fyllowing the procedure Have you ever noticed just how loud that litle speaker that's inside your Apple can be when you're playing your favorite g When there are people trying to sleep? To remedy the situation. you hit and when this works, you find playing without sound to just not be the same Perhaps you have a musi¢ program or two and would like to hear your creations on something besides that litle speaker in your Apple. Or maybe you've decided connect your Apple to your sterco and then someone mentions that duc to the way the Apple drives its speaker you may blow the inputs on your stereo. What do you do? This article will tell you how to add a yolume control. external speaker or stereo-level output to your Apple at very little cost, You'll be able tw play your favarite games with sound at night ne late at night that only you can hear or blast it out your stereo so that the neighbors down the street can hear. Adding the External Speaker ‘As it comes, the Apple simply has a speaker hooked to the motherboard with a two conductor connector. To add an external speaker all that's needed is a jack to plug it into, 1 recommend the closed-circuit type (the type that are used for carphone jacks on radios). Closed-circuit earphone jacks automatically turn off the computer's speaker when the external speaker is plugged in. This way the internal speaker is still there and ready if you disconnect the external one About the Volume Control A 500 ohm potentiometer (pot) and 10 ohm. resistor are all that are needed to make a good volume control. The resistor provides a load for the sound output from the Apple when the volume is turned completely down (this prevents shorting which could damage your Apple). Although audiophiles would probably reccomend an audio taper pot because it is more adjusted to your hearing, it really doesn’t matter whether you use a linear or audio taper pot. A 1000 ohm pot may be used also. Getting Your Feet Wet If you intend to mount the volume control or speaker jack I recommend removing the body shell from the chassis first. Remove the power cord, open your case and remove everything that’s not your Apple (cards, game controllers. etc). Turn the computer over and remove the screws that attach the body shell to the chassis from the bottom of the computer, refer to Fig. 1. Take care not to remove any other screws such as those that hold the power supply or the motherboard in place. Holding the body shell to the bottom, turn the computer back upright and lift the shell up 20 COMPUTIST No. 33 a few inches, Look under the keyboard and you will see a jumper connecting the keyboard (o the motherboard and a small two-pin connector that attaches the speaker to the motherboard Unplug the jumper and the speaker connector and remove the shell. If you haven't cleaned the inevitable dust off of your motherboard for a while, this is a perfect opportunity to do so. You should now decide where you want the external speaker jack and yolume control located, I put my jack in the back of the computer out of the way and the volume control to the top left af the keyboard, If you decide to mount the jack in the case of your computer it may be necessary to connter-sink the mounting hole due to the thickness of the v: If you are going to mount the jack or volume control, do so now. Of course you can add just the jack or just the volume control by skipping the connections to the one you omit Solder Time Solder the 10 ohm resistor to the CCW terminal, or the low volume side of the pot Next remove the leads from the speaker in the computer and solder une to the free end of the 1 ohm resistor and the other to the wiper terminal of the pot. This should be the center terminal if they aren't marked on your pot Refer to fig. 2 for u schematic or fig. 3 for a wiring diagram Now cut two lenghits of wire long enought to reach from the pot to the output jack, Solder ‘one of these to the 10 ohm resistor along with the lead that came off of the speaker, Solder the other to the remaining terminal of the pot. the CW or high volume side. Now look closely at the audio jack, you should see three terminals, Two of the leads normally make a connection through the jack so that the internal speaker will get current but when a plug is inserted the circuit is opened and the internal speaker is cut off, We ll call the one that makes contact with the tip of the plug terminal #1, The one that becomes disconnected is terminal #2. The last of these is the connection to the ring part of the jack. this is the ground connection, we will call this terminal #3, Solder the lead from the CW terminal of the pot to the #1 terminal of the jack. Attach the lead from the resistor to the #3 terminal of the jack. don’t solder it yet Now cut two more Ienghts of wire long enough to reach from the jack to the speaker Solder one to terminal #2 of the jack (the one not yet used) and the other to terminal #3 along with the wire from the resistor. Now check over all of your work, reassemble your computer and get ready to test out the modification. Turn the volume control to the middie of its rotation and turn on your computer. It should beep as usual, just not as loud, ‘Turn the volume up and hit reset, the beep should be at normal volume, Turn the volume down and hit reset again, the sound should be completely off. If the volume control works backwards then you have the CW and CCW leads reversed on the pot Now plug in the external speaker, It should now work just as the internal speaker did and the internal speaker should be off. If the internal speaker didn’t work but the external one does then you probably have leads #1 and #2 reversed on the jack. Going All the Way If you would like to keep the case so that it is easily removable from the chassis you should use a connector between the output jack and the speaker rather than soldering directly to the speaker terminals on the motherboard. Any two-conductor connector will do for this. If you want to hook your Apple audio into your stereo system you'll need to isolate the Output jack trom the Apple with a transformer. An 8 ohm to 8 ohm isolation transformer installed as shown in fig. 2 will allow the use of an external speaker or the option of plugging into the auxiliary input of your stereo, Tf you want-a dedicated output for your stereo an 8 ohm to 2000 ohm impedance transformer can he used, Connect the leads from the pot to the 8 ohm side and the 2000 ohm side to the output jack, Note that the internal speaker isn’t used in this configuration, You may want to use an RCA type connector for an output dedicated to your stereo since this is the standard stereo type connector, The volume control isn't needed in this configuration but it will allow you to adjust the volume being put out by your stereo from your Apple, A third option is ta use a 2000 ohm to 2000 ohm isolation transformer in parallel with the speaker, see fig. 4, The speaker in the Apple and the high-impedanee output will always be active Which ever way you decide to configure your sound I'm sure you'll find it to be an improvement over the simple speaker that your computer came with, Now you're ready to blast away with Skyfox even if you don’t have a SPKR. REMOVE THESE SCREWS ONLY Fig. 1 SPRKR. Apple Conneclor From Potenfiometer or Audio Jack, Mockingboard, ® COMPUTIST No. 33 21 softkey for Epyx’s... G.I. Joe & Lucas Film’s Eidolon by Larry Rando Epyy 1043 Kiel Court Sunnyvale, CA 94089 ements: COPYA trom the DOS 3.3 master Sector editor Disk searcher (optional) Gul, Joe Like the typical Epyx protection scheme. you have to first disable the DOS error checking routine in order (o get the disk into a COPYA format. When I booted the disk I noticed it rebooted after sitting there a few seconds, just like the Winter Games protection (COMPUTIST No, 29). I then got out COPY IT Plus and went into its sector editor in which Lused the search function to search for $4C 00 C6 UMP $C600, the boot ROM), which T found on track @. sector 1. I temporarily replaced JMP $C600 with a JMP $FF59 (jump to monitor). 1 booted the disk, got into the monitor and searched the boot code before the IMP SC600 (where [had a hunch the protection was), After examining the boot code further, I noticed a bunch of b going lo the same location in memory. The code all these branches went to was indeed the main part of the protection. Snooping through the boot code I found the main loader of G.1. Joe, in which I would have to insert a little routine to disable the protection check where it would be appropriate, but not interfere with the boot process. To sum it all up | NOPed out anything that went to $992 then I inserted my routine that loaded in the rest of the program. I replaced a BNE $918 that was of no use to the program/boot, but part of the protection, with a IMP $D476 1) Boot normal DOS 3.3 2) Enter the monitor and disable DOS's read error checking routine. CALL-151 B942:18 3) RUN COPYA. Copy both sides. 4) Get out your sector editor and make the following changes to the boot side. TRACK SECTOR BYTE FROM TO $00 $O1 SIA SFO SEA $1B $76 SEA SIF $80 SEA $20 $71 SEA $25 soa sac $26 SF1 $76 $27 SAO $04 $2F SFO SEA $30 $61 SEA $30 SFO SEA S$3F $53 SEA S4A $00 SEA $48 $46 SEA $53 $00 SEA $54 $3D SEA $62 SFO SEA $63 $2E $EA $71 $00 SEA $72 $1F SEA $96 Sac SEA $97 $00 SEA $98 $C6 SEA 5) Write the sector back out Lucas Film’s Eidolon To deprotect this one I used the same procedure as in G.I. Joe to find the protection I searched for $4C 00 C6 and found it on track $1, sector $F so by snooping through the code that was executed before the IMP $C600, 1 found the routine (nibble count, in this case) that went to the JMP $C600 after it was executed. So, by NOPing out the nibble count it went on to work perfectly. 1) Boot normal DOS 3.3 2) Enter