Skip to main content

computist scan 59

  • PublicationApple Periodicals
  • Pages48
  • Sourcecomputist-scan-59.pdf
← Magazines computist scan 59
/ 48
Source: Internet Archive — Aggregated Apple-era periodicals, 1981–2012.
Page 1
Loading…
Text content (OCR)
For The Serious User Of Personal Computers Issue 59 September 1988 USA $3.75 Canada & Mexico $7.00 All Others $8.75 @ REX FPeatsavzocs- Boot IIc Utilities on any compatible—sy Jim Gallagher Help with Ultima V—By Les Minaker Convert Printmaster graphics into Print Shop graphics—py Jerry Mulder The Invincible Bard (III)—By Thomas V. Rapheld The Deprotection Game—by Gerald E. Myers Patching ProDOS 1.1.1—By Gerald E. Myers The Product Monitor—By Jeff Hurlburt AppleWorks and the ImageWriter II—by Dr. Frank Lowney @ REX Softkeys:- APBA Major League Players Baseball ¢ Better Working: Spreadsheet # Better Working: Word Processor ¢ Beyond Pinball BoulderDash Construction Kit # Calendar # Calendar Crafter ¢ California Games ¢ Championship Baseball ¢ Clip Art Collection vol 1 ¢Cours Et Gagne v1.0 @Dazzle Draw #Everbody's Planner #GATO v1.3 éGoldFinger ¢ Jumpman King’s Quest ¢ Management Edge # Movie Monster Game # MultiScribe v3.0 # Negotiation Edge # Nightmare Gallery @Patchworks @Picture Phonics #Printographer @ Reader's Treasure Chest #Real Math Sea Strike ¢Shifty Sam Simulation Construction Kit ¢Snoopy's Reading Machine #Snoopy’s Skywriter Scrambler # Snoopy to the Rescue @SongWriter # Spell It! # Stickybear Reading Comprehension ¢ Super BoulderDash | 1BM | RDESES = softkey: WChartmaster v6.04 WClout v1.0 WCopywrit WGraphwriter WSignmaster v5.04 | BULK RATE COMPUTIST | U.S. Postage PO Box 110846-T PAID Tacoma, WA 98411 Tacoma, WA - 7 Permit No. 269 You have a LEGAL RIGHT to an unlocked backup copy of your commercial software Our editorial policy is that we do NOT condone software piracy, but we do believe that users are entitled to backup commercial disks they have purchased. In addition to the security of a backup disk, the removal of copy-protection gives the user the option of modifying programs to meet his or her needs. Furthermore, the copyright laws guarantee your right to such a DEPROTECTED backup copy: ...“It is not an infringement for the owner of a copy of a computer program to make or authorize the making of another copy or adaptation of that computer program provided: 1) that such a new copy or adaptation is created as an essential step in the utilization of the computer program in conjunction with a machine and that it is used in no other manner, or 2) that such new copy or adaptation is for archival purposes only and that all archival copies are destroyed in the event that continued possession of the computer program should cease to be rightful. Any exact copies prepared in accordance with the provisions of this section may be leased, sold, or otherwise transferred, along with the copy from which such copies were prepared, only as part of the lease, sale, or other transfer of all rights in the program. Adaptations so prepared may be transferred only with the authorization of the copyright owner.” United States Code title 17, §117 COMPUTIST Se Editor: Charles R. Haight Circulation: Karen Fitzpatrick Advertising, call: (206) 474-5750 Publisher: SoftKey Publishing Printing: Valco Graphics & Printing @ Address all advertising inquiries to: COMPUTIST; Advertising Department; PO Box 110816; Tacoma, WA 98411 @ Mail all RDEX letters to: COMPUTIST Apple-RDEX or —_IBM-RDEX PO Box 110846-K Tacoma, WA 98411 @ COMPUTIST does NOT purchase editorial material. The entire editorial content consists of information submitted to COMPUTIST for publication in the shared interests of all COMPUTISTs. @ Unsolicited material (manuscripts, letters to the editor, softkeys, A.P.T.s, playing tips, questions, etc., are assumed to be submitted as letters-to-the-RDEX-editor for publication with all and exclusive rights belonging to COMPUTIST. © Entire contents copyright 1988 by SoftKey Publishing. Alll rights reserved. Copying done for other than personal or internal reference (without express written permission from the publisher) is prohibited. @ The volunteer and paid editorial staff assume no liability or responsibility for the products advertised in the magazine. Any opinions expressed by the authors are not necessarily those of COMPUTIST magazine, its staff or SoftKey Publishing. @ Apple® is a trademark of Apple Computers. IBM® is the IBM trademark. SUBSCRIPTIONS: Rates (for | 2 issues): US.—$32 US. Ist Class—$45 Canada/Mex.—$45 Other Foreign—$75 @ Send subscription inquiries to: COMPUTIST; Subscription Department; PO Box 110846-T; Tacoma, WA 98411 © For Domestic Dealer rates: Call (206) 474.5750 for more information. ©@ Change Of Address: Please allow 4 weeks for change of address to take effect. On postal form 3576 supply your new address and your most recent address label. © Issues missed due to non-receipt of change of address may be acquired at the regular back issue rate. COMPUTIST #59 Attention Apple-users: Why type those |-o-n-g listings when you can just Upgrade your present sub. to a Mag/5%4"'Disk Combo @ subscription Ml You may upgrade your current subscription to a magazine & disk combination by sending $5.50 ($6.50 foreign) per remaining issue. Time to renew? @ Check your mailing label to see if you need to renew your subscription. CO. Use the order form on this page to renew, and don’t forget to send your most current mailing label to help expedite your renewal Moving soon? If you’re moving, let us know at least 30 days in advance. I Issues missed due to non-reciept of Change-of-Address may be acquired at the regular back issue rates. @ Remember, the Post Office does not forward third class mail unless requested. r ) COMPUTIST is not responsible for replacing issues lost while forwarding order is in effect. mest sees eens eee e == seeeeeee==4 I Yes, I want to subscribe to COMPUTIST. Enclosed are funds for an annual (12 issue) subscription. 1am... 0 A new subscriber D Renewing my current subscription Name ID# CO Changing my address (please include last mail label) | have..C an Apple lle, {lgs or Ile computer Address C an IBM computer City State Zip Apple—IBM subscription... O us. - $32 Country. Phone. © US./Canada/Mexico First Class - $45 po 1 All other Foreign - $75 pe s - Exp. Apple mag-disk combination subscription... C US./Canada/Mexico First Class plus Library Disk - $100 CD All other Foreign plus Library Disk - $140 u S. Funds drawn on U.S. bank. Allow 4—8 weeks for first issue. Mail to: COMPUTIST PO Box 110846-T Tacoma, WA 98411 (206) 474-5750 LJ Signature CPS! [ September COMPUTIST #59 3 | Notes ’n things...... It’s been an interesting month. Submissions are way up and most of you are sending your material on disk. I really appreciate that, it makes the work go a lot faster. In fact, I figure we have enough material for another complete issue so we're going to try to finish #60 ahead of schedule and see if we can't get Paul D. Dillon... .. it out to you a little sooner. Harold Mike Egnotovich . . . . We've got a couple of long articles in this issue. Gerald E. Myers tells the beginner how to get started on disk deprotection. Some good advice of the **Do as I say and not as I did’* variety. He makes a good point about careful and complete notes. All of us should listen to that. Then Dr Frank Lowney goes into some detail about how to convince AppleWorks to send escape sequences to your printer so that you can take advantage of all the features of your printer. That includes printing mousetext characters for those of you using an ImageWriter II. Jim Gallagher Stephen George . Kearney J. Gravis . Les Minaker returns with more game information. This time it’s Ultima V. Jeff Hurlburt Lots of tips and, of course, a detailed APT. He tells you where it is, what it is and how to give it all to you character. You might want to exercise a little restraint in how powerful you make you characters. Les’s pages are the hardest Klaus Iden. to layout. There are so many charts and tables. ‘ While you're into Ultima V, don’t miss Jeff Hurlburt’s note on using *‘visit Bill Jetzer Spies : oe ieee monitor’’ to APT your way out of tight spots. Paul A. Johnson : We had something of a collision on Bard's Tale II. Four readers sent in information at the same time. I tried to combine the lists of items and character Dr. Frank Lowney attributes but some errors may have crept in. Not all of the lists agreed on all points. I used the democratic method to decide any conflicts. Majority rules. tons: “Whinaker aoe But the majority isn’t always right, so if there are any errors, they are probably mine and I would appreciate a postcard with the corrections. I'll leave some space ery Mules in the next issue so get them to me quick. Gerald E. Myers . Jack R. Nissel Piff Thomas V. Rapheld Leigh Rowan-Kelly . Brian Symonds Edward Teach IBM RDEX Contributors The A.S.P David Kaszuba ..... Doesn't anyone have any complaints about errors? COMPUTIST #59 September COMPUTIST Table Of Contents *59 © Sobtkeys: APBA Major League Players PHD ssc aniewtieesd ae 17 Better Working: Spreadsheet...7 Better Working: Word Processor . Beyond Pinball. BoulderDash Constructi Kit Calendar . Calendar Crafier. California Games. Championship Baseball... .2 Clip Art Collection vol 1. Cours Et Gagne v1.0... Dazzle Draw Everbody's. Planner. G2 Cocco nuagensalt GoldFinger .. Jumpman... Rbtg's Questo ccrn hese at 007 Management Edge 16 Movie Monster Game 10 MultiScribe v3.0... Negotiation Edge. Nightmare Gallery..........26 Patchworks .... Picture Phonics Printographer Reader's Treasure Ches Real Math Sea Strike... Shifty Sam... Simulation Construction Kit. .27 Snoopy's Reading Machine. ..27 €AP.T.: Bard's Tale Ill........... 18,20,36 Super BoulderDash........6.006+ 9 NOREEN eA cance it B @ Playing Tipo: Alternate Reality...........+++++ Z Auto Duel..... Ultima V... Where in the World is Carmen Sandiego ........0s+00+5 37 © Notes: A copy-protected COMPUTIST?...30 IBM Seftheys: Editorial..... Most Wanted Softkeys...........664++37 @ Features: Boot IIc Utilities on any compatible... 10 Here's how to make your Ic utility disk boot on a non Ic computer. Help with Ultima V... An inside look at character data and items, w From Printmaster to Print Shop.......15 Convert your Printmaster graphics into Print Shop compatible graphics. The Invincible Bard (Ill).............18 Give your Bard’s Tale III characters a boost. The Deprotection Garo... oe ee A beginners eye view of copy-protection and how to go about removing it. Patching ProDOS 1.1.1.........066..29 Fixing an infamous bug that destroys track $00 on your diskettes. Snoopy’s Skywriter Scrambler.27 Charmaster v6.04. «| The Product Monitor... 30 Snoopy to the Rescue “ae, Sharsib ee 4 GUI Rls «coh a ES COBIWIE: <s wninis sna geaesn aes sat’ Stickybear Reading Graphwriter...s--.-----------4° | AppleWorks and the ImageWriter II... 32 Comprehension .........27 Signmaster v5.04.........2+4+ A Hees ‘ _ ie es are the features of the ImageWriter II (or other) printer Super BoulderDash.......... 8 2 £ I | September Bi COMPUTIST #59 5 New COMPUTIST readers using Apple IIs are advised to read this page carefully to avoid Frustration when attempting to follow a softkey or entering the programs printed in this issue. What is a softkey, anyway? Softkey is a term which we coined to describe a Procedure that removes, or at least circumvents, any copy- Protection on a particular disk. Once a softkey procedure has been performed, the resulting backup copy can usually be copied by the normal copy programs (for example: COPYA, on their DOS 3.3 System Master disk). Commands and control keys In any article appearing in COMPUTIST, commands which a reader is required to perform are set apart by it boldface and on a separate line. The key must be pressed at the end of every such command unless otherwise specified. Control characters are specially boxed. An example of both is: 6(GP) Press C1 Next, place one finger on the =) key and then press ial Remember to enter this command line by pressing (RETURN) . Other ial_combination keyy s include or GORESET). in the former, press and hold down G=) then press (RESET) In the latter, press and hold down both @=9 and (SJ) then press Special requirements Special prerequisites for COMPUTIST articles, programs and softkeys are usually listed at the start under: @ Requirements: Software recommendations (2 Applesoft program editor such as Global Program Line Editor (GPLE).. & Sector-editor such as DiskEdit (in the COMPLITIST Starter Kit) or ZAP from Bag of Tricks. O® Disk-search utility such as The Inspector, the CIA or the Core Disk Searcher (in the COMPUTIST Starter Kin). Assembler such as the 5-C Assembler from $-C software or Merlin/Big Mac. (% Bit-copy program such as Copy Il Plus, Locksmith or Essential Data Duplicator (EDD). (® Text-editor (that produces normal sequential text files) such as Applewriter Il, Magic Window I or Screenwriter Il. (2 COPYA, FID and MUFFIN from the DOS 3.3 System Master disk are also useful. Super IOB and Controllers This powerful deprotection utility {in the COMPUTIST Starter Kit) and its various Controllers are used in many softkeys. (It is also on each Super IOB Collection disk.) Reset into the Monitor Softkeys occasionally require the user to stop the execution of a copy-protected program and directly enter the Apple's system monitor. Check the following list to see what hardware you will need to obtain this ability. Apple II +, //e, compatibles: |) Place an Integer BASIC ROM card in one of the Apple slots. 2) Use a non- ‘maskable interrupt (NMI) card such as Replay or Wildcard. Apple I+, compatibles: 1) Install an F ROM with a modified reset-vector on the computer's motherboard as detailed in the Modified ROM’s article (COMPUTIST #6 or Book Of Softkeys III ) or the Dual ROM’s article (COMPUTIST #19). Apple //e, //c: Install a modified CD ROM on the computer's motherboard. Cutting Edge Ent. (Box 43234 Ren Cen Station-HC; Detroit, MI 48243) sells a hardware device that will give you this important ability but it will void an Apple //e warranty. Recommended literature: (& Apple I Reference Manual DOS 3.3 manual (Beneath Apple DOS, by Don Worth and Pieter Lechner, from Quality Software Assembly Language For The Applesoft Programmer, by Roy Meyers and C.W. Finley, from Addison Wesley Keying in Applesoft programs: BASIC programs are printed in a format that is designed to minimize errors for readers who key in these programs. If you type: 1@HOME:REMCLEAR SCREEN The LIST will look like: 1 HOME : REM CLEAR SCREEN ...because Applesoft inserts spaces into a program listing before and after every command word or mathematical ‘operator. These spaces usually don't pose a problem except in line numbers which contain REM or DATA commands. There are two types of spaces: those that have to be keyed and those that don’t. Spaces that must be typed appear in COMPUTIST as delta characters (°). All other spaces are there for easier reading. NOTE: If you want your checksums (See Computing checksums) to match up, you must key ONLY the “spaces after DATA statements. Keying In Hexdumps Machine language programs are printed in COMPUTIST as hexdumps, sometimes also as source code. Hexdumps are the shortest and easiest format to type in. You must first enter the monitor: CALL -151 Key in the hexdump exactly as it appears in the magazine, ignoring the four-digit checksum ($ and four digits) at the end of each line. A beep means you have typed something that the monitor didn’t understand and must, therefore, retype that line. ‘When finished, return to BASIC with: 3D0G BSAVE the program with the filename, address and length parameters given in the article. The source code is printed to help explain a program's operation. To key it in, you will need the $-C Assembler ‘or you will have to translate pieces of the source code into something your assembler will understand (see table of $:C Assembler directives in COMPUTIST #17. Computing checksums Checksums are 4-digit hexadecimal numbers which tell if you typed a program exactly as it appears in COMPUTIST. There are two types of checksums: one created by the CHECKBIN program (for machine language programs) and the other created by the CHECKSOFT program (for BASIC programs). Both appeared in COMPUTIST #1 and The Best of Hardcore Computing. An update to CHECKSOFT appeared in COMPUTIST #18. If the published checksums accompanying program listings and hexdumps do not match those created by your computer, then you typed the program incorrectly. The line where the first checksum differs has an error. CHECKSOFT instructions: LOAD filename BRUN CHECKSOFT Get the checksums with: C&) and correct the program line where the checksums differ. CHECKBIN instructions: CALL -151 BLOAD filename Install CHECKBIN at an out of the way place BRUN CHECKBIN, A$6000 Get the checksums by typing the Starting address, a period and the Ending address of the file followed by a (Gy). 58S. EEE(GY) Correct the lines at which the checksums differ. RADAR ELA DRR HER RESO RDEXed [6 COMPUTIST #59 September | when writing a letter to... Apple RDEXed RDEX stands for: Reader's Data EXchange That means that when you send in articles, softkeys, APTs, etc., you are submitting them for FREE publication in this magazine. RDEX does NOT purchase submissions nor do we verify data submitted by readers. We will print it and it is the responsibility of the readers to send in responses when anything is wrong. @ Remember that your letters or parts of them may be used in RDEX even if not addressed to the Apple-RDEX editor. Correspondence that gets published may be edited for clarity, grammer and space requirements . © Because of the great number of letters we receive and the ephemeral and unpredictable appearance of our part- time staff, any response to your queries will appear only in Apple-RDEX, so it would be more appropriate for you to present technical questions to the readers and ask for their responses which will then be placed in the Apple-RDEX. Send your articles and letters on DOS 3.3 standard text files When we get your letter-article in a standard DOS3.3 text file, it is immediately uploaded into the most current RDEX file. Conventional letters must be typed in by us...when we have the time. © Address your letters, articles, to: COMPUTIST Apple RDEX Editor PO Box 110846-K Tacoma, WA 98411 Leigh Rowan-Kelly Softkey for... Sea Strike * The music that accompanies each life form provides clues to his personality. The more omnious the music, the more evil an adversary. © If you are broke and hit-Point poor, head for Northern City Wall in the NW quadrant. The water is free and Packets and Flasks don’t come cheaper! Playing Tips for... [4] Copy the disk with any straight copier, ignoring the Bad Block Error on Block $007. [2] Sector edit. Block Byte(s) From To $584 $144-148 C9 00000066 C900 80 80.06 This effectively kills the branching routine there and allows the program to run. Softkey for... King's Quest I Sierra On-Line Auto Duel Origin In the beginning of the game...before you have bought a car or anything, enter Joe’s bar and sell courier tasks. You should now see thick dots in the place of what should be a blank space to put the name of tasks in. Select those dots to sell (1-3) and you should get a bundle for ‘em. Note: This might only work on my version because it might have some sort of A.P.T. on it. Ionly just received my updated IIgs version from Sierra On-Line today. I must certainly recommend their policy of updating the older Tle version to the newer IIgs version for only $10. I wish more companies had the same generous attitude! Copy with any standard copier ignoring the Bad Block Error on Block $634 [22] Sector edit. Block Byte(s) From To SAD $B7-Cl_ 22 00.00.00 22 22 00 00 00 AF 00 00 00 AE 90 00 00 AE 00 00 00 09 You will note the similarity to the Leisure Suit Larry and Space Quest I cracks although the address is different. Keep up the good work and keep those cracks coming! Playing Tips for... Alternate Reality DataSoft © Eerie music often indicates you're near a secret door. © The only way to kill a wraith is to charm him. Softkey for... Better Working: Spreadsheet Spinaker Tam writing to tell you how much I enjoy your magazine. I am a fairly recent addition to your list of subscribers (Feb. 88 was my first issue) so I don’t really understand the fuss by other readers about the format change. Personally, I like the way the magazine is put together, and I don’t know of any others that instruct their readers on how to overcome the hated demon ‘‘copy-protection’’. The instructional value of the softkeys and accompanying articles are literally priceless. Also, I have an Apple Ile Pro and a Franklin Ace 1000+ at home, but use an IBM PCXT clone at work. I appreciate the IBM Softkeys but haven't found as much use for them as I have for the Apple software. Speaking of softkeys, I would like to share a simple one for the Spinnaker Better Working ‘*Spreadsheet"’ and it may work for the others in this series: [J Initialize a blank disk. Use a fast DOS if you want, or use Diversi-DOS as the program works with text files. INIT HELLO COMPUTIST #59 [£2] Boot the ‘‘Spreadsheet"” disk and immediately press [GC] to break out of the Applesoft start up program. ([3_] Remove the Better Working disk, insert a DOS 3.3 System Master and run the FID program. BRUN FID [4] Copy all the files on the Better Working disk to the previously initialized disk. That's all it takes to deprotect this program! Thave also installed this program on a RAMdisk to speed up it’s operation with no problems. Thanks to the readers and contributors of COMPUTIST for all the fine softkeys. Without their help, I would still be struggling with my EDD IV Plus trying to make copy protected backups, when a better way exists. Keep up the good work, and keep them coming. Brian Symond: Softkey for... Cours Et Gagne v1.0 Sam Girgis @ Requirements O Two blank disks O Way to reset into the monitor O Super IOB or COPYB O Sector editor or FID A friend of mine asked me to make a back up copy of this French vocabulary game disk for him, as it would not copy with a copy program. So, I copied it with my EDD 4 Plus card, and winced when the copy wouldn't boot, even though the disk seemed to copy perfectly. In my experience this usually means some sort of disk check routine. I have a meager knowledge of machine language and usually, when this situation occurs, I am unable to copy a disk. So I dug out my Bag of Tricks, and discovered that only the first 9 sectors of the disk could be read. On the basis of the information that the EDD 4 program and Bag of Tricks gave me, it appeared that this disk had a modified DOS (also when the disk was booted the familiar BASIC prompt appeared). Using a Senior PROM card and memory snooping, I discovered the following: (a) Modified address prologue bytes of EF XX oD. (b) Modified address epilog bytes of CB B7. (c) Modified data prologue bytes of B9 B9 AB. (d) Modified data epilogue bytes of B2 EAE9. (e) Modified volume number. (f) A modified checksum and on checking further, 14 bytes were modified in the nibble translate table (and a similar number of course in the byte translate table). (g) Track $11 would read with the modified address and data markers but not with the modified translate table and it was completely blank. (h) At $ACO1 was a 23 meaning that the catalog track was on track $23. With a modified DOS such as this it becomes more of a chore to write a controller for SIOB than to try to capture the RWTS with a monitor reset and then use the swap controller or COPYB to copy the disk (don’t forget the disk has a track $23). By using a monitor reset with my Senior PROM card, and both of these methods, I was able to copy the disk (I like to use two methods and then compare the copies to see if any sectors did not copy properly). Once the disk was copied, I copied track $23 to track $11 (the usual catalog track) and the disk worked perfectly. However, when the disk was copied using a fast copy program ignoring track $23, the disk would not boot, meaning of course that I had to either modify the catalog track on track $11 to change $23 to $11, or to use FID to move the files to a normally formatted DOS 3.3 disk (using ProntoDOS to speed up the boot up of course). When I used FID to move the files to a normal disk, the disk worked perfectly, and could be copied with any copy program including COPYA. STEP-BY-STEP [4] You need to INIT a disk with $23 tracks (decimal 36). I used the method described in OPEN-APPLE Vol 1, No.3, pg. 31. This article also gives a program to determine the maximum track capacity of your own disk drives. To make this disk, boot a standard DOS 3.3 disk, press to get the BASIC prompt, type NEW, remove the disk from the disk drive, insert your blank disk, then type the following lines, (‘‘T’’ should be the number of tracks in decimal, in this case 36); POKE 48894,T POKE 44725,T+4 POKE 46063,T INIT HELLO You now have a DOS 3.3 disk with $23 tracks. [227 You now need to capture the protected disk’s RWTS. To do this, boot the protected disk, and when the BASIC prompt appears, reset into the monitor by your favourite method. Then move the RWTS to a protected area ($8000 for COPYB, $1900 for SIOB). BSAVE the RWTS to your SIOB or COPYB disk. [3] Now run SIOB with the swap controller, or COPYB, and copy tracks $03 to $10, and $12 to $23 onto the blank disk you made in step 2. Because track $11 on the protected disk was not written with the protected RWTS's translate tables, SIOB or COPYB will not be able to copy it - but no matter since all the sectors are conveniently blank. [4] On the disk you have just made, if you now copy track $23 to track $11 (remember normal DOS uses $11 as the catalog track) you will have a bootable disk but it will have $23 tracks which is a pain to copy with most fast copy programs such as Locksmith Fast Copy (OPEN-APPLE gives a method for modifying COPYA to copy more than $22 tracks). ([5_] Now INIT a normally formatted DOS 3.3 disk, and then run FID (or use Copy I Plus) to copy the files from the disk with $23 tracks to the normally formatted DOS 3.3 disk (you could also use a sector editor to change $23 to $11 on track $11 in the catalog and the VTOC). You can now add your favorite fast DOS, and you are finished. Bonne Chance! If you wish to write a controller for SIOB to read the original disk, then it helps to have an index (for example an Appleworks database) of your COMPUTIST magazines with protection and deprotection methods for the programs listed - you can search for articles that have controllers that overcame similar problems (in this case there are at least 16 programs that have similar protection schemes, with a good discussion being given for the Ultima series). Since Larry Newby’s letter and my letter in COMPUTIST about indexes, I have had several requests for a copy of my index, but no one other than Larry Newby has sent me a copy of their index. You send me yours, and T'll send you mine! Softkey for... Super BoulderDash Electronic Arts i Requirements OA whole disk copier that ignores errors OA sector editor O Blank disk O Super BoulderDash original I noticed that a few people had trouble with their unprotected copies of Super BoulderDash. When they ran them, the graphics would screw up. Well, this crack should keep your madness from increasing. When I first cracked it, I had the same problems (with the graphics) and decided to live with them for a while. After [8 COMPUTIST #59 September | about 5 minutes of playing the game, I decided that I had already lived with them too long. I decided to nuke the protection completely. [2] Copy the disk (both sides). [2] Perform the following sector edits: Trk Sct Byte(s) From To $01 $06 $08 93 62 $0B $83 8A 60 $0C $00 4C 69 05 EAEAEA Remember that these may not be in the same spot on your copy. Verify the fact that you are changing the correct byte before you make the change. A.P.T. for... Super BoulderDash To make your Super BoulderDash into a trainer do the following sector edits. For Side One: Keep timer from counting down: Trk Sct Byte(s) From To $00 $0D SFC-FD C6 1B D0 EA EA 88 Keep men from being decreased: Trk Sct Byte(s) From To $OE $07 $1A-1B D628 EAEA The hexadecimal value for the right arrow: Trk Sct Byte(s) From To SOE $08 $14 93 95 The hexadecimal value for the left arrow: Trk Sct Byte(s) From To $OE $08 $20 Ag 88 Jump ahead or back a cave by increasing or decreasing $2A: Trk Sct Byte(s) From To SOE $08 $2F-30 A5 4D 80 2B $58-65 7? E6 2A 80 CC AS 2A 2A C9 00 FO AQ C6 2A 80 C2 Keep some old subroutines from being performed: Trk Sct Byte(s) From To SOE $08 $66-79 ? AIL EA's These allow you to choose any level on any cave at the beginning of the game: Keep men from being added at every 500 points: Trk Sct Byte(s) From To SOE SOC SCF-DB F628 EAEA When the disk is booted a message asks if you will use an Apple Joystick or the Joyport. Tf you are tired of typing in your response every time perform the following sector edits and the correct one will always be chosen for you. Make sure that the correct number is substituted for xx so the joystick that you use will always be chosen. To select the Joyport: xx=$CA. To select the Apple Joystick xx=$C1. Trk Sct Byte(s) From To SOE $OA $64-68 7? EAEAEAEAEA EAAQ xx For Side Two: Keep time from counting down: Trk Sct Byte(s) From To $OD $8C $36 C6 1B 08 EA EA 80 Go ahead a cave when the right arrow is pressed: Trk Sct Byte(s) From To $0E $06 $17 ADAZ19C9_—«E6 2A BB CC Keep men from being decreased: Trk Sct Byte(s) From To $0E $06 $D9 06 28 EAEA The hexadecimal value for the right arrow: Trk Sct Byte(s) From To $0E $07 $D3 93 95 The hexadecimal value for the left arrow: Trk Sct Byte(s) From To SOE $07 SEB AD 88 Go back a cave when the left arrow is pressed: Trk Sct Byte(s) From To $OE $07 $EE q AS 2A C9 00 FO CB C6 2A 80 EF These allow you to choose any level on any cave at the beginning of the game: Trk Sct Byte(s) From To SOE $08 $8A 03 05 $E8 93 05 SFC 03 05 For the joystick edit (see above). Make sure that the correct number is substituted for xx so the joystick that you use will always be chosen. To select the Joyport: xx=$CA. To select the Apple Joystick xx=$C1. Trk Sct Byte(s) From To $OE $09 $E7 ? EA EA EAEAEA EA AQ xx These edits allow several things. You may want to use all of them or part of them. If you use them all here is what you get, what you lose, and what you still have. What You Will Get * Unlimited men and time. © By pressing the right arrow key, you can go ahead one cave. * By pressing the left arrow key, you can go back one cave. (If you're on a bonus level, it won't go back, you'll just start the bonus level over.) Also, if you decide to do these sector edits, make sure that you also do the ones that keep the men from being decreased because this routine is jumped to when you press one of the arrow keys. You no longer have to enter which joystick you want to use. You can now choose any level (from 1-5) on any cave. The original package only let you go up to level 3 except on cave A. What You Will Lose © You can’t pause the game with the spacebar any longer but it is not necessary because the time doesn’t count down. * You can’t turn the sound off and on with any longer. What You Still Have . to restart the game. ¢ (ESC) to restart the cave you are on if a man is trapped. Softkey for... MultiScribe 3.0 Styleware @ Requirements © MultiScribe original (version 3.0) O Blank disk Oi Whole disk copier G Sector editor I recently purchased this program because I wanted to create nicer documents than could be done on just a “‘regular’’ word processor. After getting MultiScribe home, the first thing I did was make a copy. Since the program was around $70.00 I hoped that it might not be protected. I used Copy II Plus to copy it and got no errors so I assumed that there was no protection. It booted up fine and got to the part where it asks if a mouse will be used and then says to turn the disk over for side two. When Trk Sct Byte(s) From To SOE $09 $07 03 05 $65 93 05 $79 93 05 [ September COMPUTIST #59. 2] T turned it over, side two wouldn’t load. The program just kept asking for me to put in side two. Putting two and two together, I figured that they must be using a nibble count routine. A nibble count is done by loading $CO8C (reading a byte off the disk) into the accumulator and then comparing it with what is supposed to be on the original disk. If it differs, the program either crashes or acts as if the program disk is not in the drive. I searched the disk with the Copy II Plus sector editor (I used the sector editor even though it is ProDOS) for BD 8C CO (LDA C@8C,X) and found what I was looking for on track $OF, sector $OC. If you want to know what a nibble count looks like, list this one from @1 - 4D (with the sector editor). You'll see a lot of compares (CMP’s). If one of these compares is false, the program branches to the ‘‘crash’’ at $4E. If you look at address $4A (of the same track) you'll see what happens if all the compares are true (if the original is in the drive). By putting these commands (the commands at $4A) ahead of all the compares, you can circumvent the protection and side two will load fine. This is how it’s done: [J Copy both sides onto the blank disk. [2] Using your sector editor, read in track SOF, sector $OC, side one of the copy and make the following sector edits: Trk Sct Byte(s) From To $OF $0C $01 BD8CCO19 = —-A9 0 18 60 [J Write the sector back to the copy. Softkey for... The Movie Monster Game California Games BoulderDash Construction Kit Epyx pressed it would reboot, But I was I inserted side one and pressed (RETURN) and it loaded the program. I figured that this would do for a backup for the time being. I used it that way for about six months. It got to be quite tedious putting in side two and flipping the disk every time I wanted to play the game so I decided that a ‘‘real’’ crack was in order. I read in track $00, sector $00 with my Copy II Plus sector editor. I noticed (as mentioned in the softkey for California Games in COMPUTIST #52, pages 18-19) a jump GMP) to $BBOO (4C 00 BB) at address $4A. $BBQ0 is track $00, sector $05. This is where the protection is checked. With a simple sector edit that puts the correct values in the correct locations, it loaded. As to why it works, on some programs (quite a few from Epyx) the disk is checked for certain bytes (signature check) that assure the disk in the drive is an original and not a copy. This is done by reading the byte off the disk and comparing (CMP) it with what it is actually supposed to be. If it isn’t the same, the program will crash. A question may arise as to how the copy Program won't copy the correct bytes from the original. One way this is done is to write all the originals at a certain drive speed. If the program is copied at another speed then it won’t write it correctly. There are other methods such as synchronizing the start of every track to the same place. On a circular disk, there is no beginning or end of a track (just as there is no beginning or end of a circle). Certain protection schemes will use a drive that writes all the tracks starting at the same place. When the program is run, it is checked to see if the beginnings and/or endings of the tracks all match up. If they don’t the program won’t load or will crash. A regular disk copier can usually copy these disks but it won’t place all the track beginnings at the same place. That is why it won't load. By removing the check (or checks) you can get around any protection. @ Requirements Ci The Movie Monster Game original O Blank disk O COPYA O Sector editor When I bought The Movie Monster Game JL assumed that since it was an Epyx product it would be protected in the ‘‘usual’’ Epyx manner. I got out COPYA and poked 47426,24 and copied both sides. Naturally it copied. Naturally it wouldn’t boot. I messed around with it for a while and was about to give up for the day when I discovered something odd about it. When I booted side two, a message came ‘on the screen telling me to insert side one and press (RETURN). I assumed that as soon as I [4] Boot your DOS 3.3 system disk. [2] Tell DOS to ignore errors and use COPYA to copy both sides of the disk. POKE 47426,24 RUN COPYA [73] Using your sector editor, write the following onto side one of the copy. Trk Sct Byte(s) From To $00 $05 $00 7 AQ EE 85 Fl 85 F2 85 F5 AQ FC 85 FO 85 F3 85 F6 AQ E7 85 F4 85 F7 A2 03 AQ 00 AB 85 F8 AQ B7 85 FO B5 FO 51 FB 91 F8 88 0G F7 E6 F9.CA 10 F2 AG 2B 6C FD 08 18 60 The same softkey works for California Games with no changes and it works for Boulder Dash Construction Kit with the only change being in step one. You only need to copy the front side. Softkey for... GoldFinger Mindscape 1 Requirements CO The GoldFinger original disk O COPYA O Sector editor GoldFinger has an easy protection to remove. All that’s needed is a quick run of COPYA without checking the errors and a single sector edit. If you look on track $00, sector $OC you'll the protection at $90. At $90 there is a branch to $C6OO. This is to reboot the computer. By placing a RTS (similar to BASIC’s RETURN) the rest of the program will be loaded. [1] Poke out some error checks and use COPYA to copy the disk. POKE 48712,24 POKE 47426,24 RUN COPYA (2, ] Use your sector editor to change the branch to an RTS. Trk Sct Byte(s) From To $08 $0C $90 C6 60 Boot Ilc Utilities on any compatible @ Requirements C. System Utilities original O Blank disk O Whole disk copier, such as Copy II Plus A note to Larry D. Hough about forcing the System Utilities to load on his Franklin Ace (or any Apple compatible, non Ic computer) here’s how it’s done: [47] Copy the original onto the blank disk. [2] Boot the copy and press (Ge). {[3—] Make some changes to the hello program and save it. UNLOCK STARTUP 1100 GOTO 2000 SAVE STARTUP LOCK STARTUP [10 COMPUTIST #59 September | If the screen is garbled or the text doesn’t look good, it’s because you need mouse-text. Try putting a PRINT CHRS(17) on line 1040 and see if that works. If that doesn’t work then try a PRINT CHRS$(18) on line 1040. One note for Apple IIc users. I discovered that location $CO6O (49248) is the location that tells whether the 80/40 column switch is in or out. I don’t know if that is common knowledge or not but I had never seen it anywhere. If you look at this location with a PEEK(49248) you will get a value either greater or less than 127. If it is greater than 127 then the 80/40 switch is in. If is 127 or less, then the 80/40 switch is out. ©) I have a program called Repton by Sirius Software that I just can’t crack. Can anyone help me. And, one last request. I also have Cyclod by Sirius and I noticed that the softkey was printed in COMPUTIST #38. Since it hasn't been printed in a while, is their any possiblity of a reprint of that. I can’t get that one cracked either. & COMPUTIST offers data pages. If you would like to give Karen a call, or send her a letter, letting her know what previous softkey you need. She'll send it out to you. The cost is $1.00 plus 10 cents for each page copied. The softkey for Cyclod is two pages. racindetenece abaonzesecenensnaensnannnsmansnasuntengect RDEXed Softkey for... Dazzle Draw Broderbund @ Requirements O 64k (to deprotect it, 128k to use it) O One blank disk CO ProDOS disk containing the files PRODOS and BASIC.SYSTEM (© Super IOB 1.5 O Sector Editor Dazzle Draw is a powerful double hi-res drawing tool that allows even a novice to produce artistic creations. It is very user friendly, with pulldown menus and a help feature which explains any option you choose. In fact, the program is outstanding in every respect but one: it’s protected. The Protection Older versions of Dazzle Draw let the user make one backup copy, but the version I have (released in January, 1987) didn’t even do that. format, only using altered epilog bytes as protection. Tracks $1F-$22, however, were a different story. There is nothing on these tracks that even resembles sectors, but they contain code which is vital to the program. The Plan Obviously, tracks $1F-$22 couldn’t be COPYA’d, since they don’t contain sectors. The code from those tracks had to somehow be placed into memory so that the program could continue to load. The only alternative seemed to be to convert the code into a system file that would automatically be executed after ProDOS. The Softkey To deprotect Dazzle Draw, follow these steps: (4_] Type in the controller at the end of the article and save it to disk. Install it into Super IOB 1.5 and run it. It will copy tracks $00-$1E. [2] Use your sector editor to make the following patch to the copy. Trk Sct Byte(s) From To $00 $00 $43 1 0608 $06 7 AQE3 8D 2A 60 AQ 08 8D 2B 60 4C 00 60 A9 08 8D 2A 60 A9 64 8D 2B 60 A2 80 B5 08 9D 00 6C E8 DD F8 4C 59 FF [3] Boot the copy and wait for the drive arm to stop moving (about a second after the screen clears). [4] While the drive is still running, remove the copy and insert the original Dazzle Draw disk. The above patch will load all of the code from the abnormal tracks, move the contents of the zero page to a safe place, and jump to the monitor. [5] Now you need to make several patches to the program in memory. After the deprotection process, ProDOS will be executed before the Dazzle Draw code instead of after it, so you can save some loading time by making the code jump over the routine that loads ProDOS. 6404:23 65 Add some code to turn on the disk drive. 602C:BD 8A CO BD 89 CO 18 60 Lastly, a new routine must be constructed to save the printer/input device/file system information. This information was originally saved onto one of the abnormal tracks, which can't be done after Dazzle Draw is deprotected. 7120:71 OO 20 O@ 11 2F 44 44 ‘7128:2F 44 41 5A 5A 4C 45 2E 7130:53 59 53 54 45 4D @2 00 7138:18 07 00 04 OO FO 66 05 7140:00 00 00 01 00 7403:20 00 BF C8 1E 7408:71 BO 12 AD 23 71 8D 37 7410:71 8D 3C 71 8D 44 71 20 7418:00 BF CE 36 71 60 [£6] Insert your ProDOS disk and boot it. C6006 DO NOT It will destroy some of the code. [7] Get back into the monitor: CALL-151 [[8_] Since ProDOS system files are executed at $2000, we have to construct a relocator for the contents of the zero page and the code from tracks $1F - $22. 2000:A9 28 85 3C 85 3E A9 20 2008:85 3D A9 3D 85 3F A9 OO 2010:85 42 AD 60 85 43 AO 00 2018:20 2C FE A2 00 BD 00 6C 2020:95 00 E8 DO FB 4C 00 60 [3] Move the Dazzle Draw code to its new location: 2028<6000.7CFFM Save the code to your ProDOS disk: BSAVE DAZZLE.SYSTEM, AS2000, LS1D28 (47) Start up your sector editor (you may have to reboot if your sector editor is under DOS 3.3) and copy the ProDOS boot loader blocks (blocks $000 and $001) onto the copy by reading sectors $0C, $OD, and $OE of track $00 from the ProDOS disk and writing them to the copy. Now read sector $00 of track $00 from the ProDOS disk and make the following changes: Trk Sct Byte(s) From To $00 $00 $87 a 08 SAT t oc Write the sector back to the copy. The first change tells the boot loader to load in 8 ProDOS blocks (16 DOS 3.3 sectors) instead of just 6. The second tells it to keep looking for the file PRODOS, which is in the eighth block loaded. [42] Now, have the copy mark the blocks on tracks $1F - $22 as free; DAZZLE. SYSTEM will occupy some of these blocks. Read in track $00, sector $03, make the following changes, and write the sector out to the copy: Instead, you can buy another copy from 710F:20 Trk Sct Byte(s) From To Broderbund for the low, low price of $10! 7110:00 BF CB 3B 71 BO 06 20 300 $03 SIF ? FF FFF FF Tracks $0O-S1E were in a semi-normal 7118:00 BF CC 43 71 60 03 24 $ September COMPUTIST #59 11 [43] The next change will make the Dazzle Draw copy execute the ProDOS quit command instead of rebooting when exiting the program or when is pressed. (This step may be skipped if you so desire.) Trk Sct Byte(s) From To $14 SOF $80 7 20:00 BF 65 8603 0400 50 00 00 00 00 This changes the quit message that appears when you exit Dazzle Draw to inform you that you are quitting to ProDOS instead of rebooting. Trk Sct Byte(s) From To $13 $0A $33 2-72.65 70 61 72 65 20 74 GF 20 6C 65 61 76 65 20 44.61 7A 7A 6C 65 20 44 72 6177 20 2D 20 Ag 52 4 43 6C 69 63 6B 20 4F 68 61 79 26 74 6F 2071 75 69 74 20 74 6F 20 50 72 6F 44 4F 53 26 20 AD You are now ready to put DAZZLE.SYSTEM on the copy. First, boot your ProDOS disk and load DAZZLE. SYSTEM. BLOAD DAZZLE.SYSTEM,AS2000 Insert the copy and save the file: CREATE DAZZLE.SYSTEM,TSYS BSAVE DAZZLE.SYSTEM,A$2000,L$1D28,TSYS You now have a deprotected program disk! The demo side of the disk can be copied with any whole disk copier like COPYA, so make a backup of that and you’re all done. Extra Features Dazzle Draw uses an old version (1.0.2) of ProDOS. You may want to use a more current version or one with a more friendly quit code on the copy. All you have to do is copy your version of ProDOS over Dazzle Draw’s version in the /DD/UTILITIES subdirectory. In the /DD/UTILITIES subdirectory, there are two slide show programs: SLIDEI. SYSTEM, which it uses for 5.25 inch slide show disks, and SLIDE2.SYSTEM, which I assume it uses for 3.5 inch slide show disks. Idon’t have a 3.5 inch disk drive, so that’s only a guess. Whichever slide show program you use, you might want to make it more user friendly by making it quit to ProDOS instead of rebooting. Here is the procedure to follow for SLIDE1.SYSTEM (you must be using ProDOS when making the changes to the slide show programs): [4] Load the file into memory: PREFIX/DD/UTILITIES BLOAD SLIDE1.SYSTEM,A$2000,TSYS (2J Enter the monitor: CALL-151 [3] Change a few quit messages: 229C:F4 EF AQ DO 22A0:F2 EF C4 CF D3 AO 2698:D1 D5 C9 D4 A@ AO [4] Add the quit routine and the routine to set up the reset vector: 2F83:20 00 BF 65 89 2F88:17 04 00 00 00 00 00 00 2F90:A9 83 8D F2 03 A9 17 8D 2F98:F3 03 4C 6F FB [3] Change the address that gets JuMPed to when you quit: 26AD:4C 83 17 [6_] Make the reset vector patch: 21F0:20 90 17 EA EA EA [7] Save the file: UNLOCK SLIDE1.SYSTEM BSAVE SLIDE1.SYSTEM,A$2000,TSYS LOCK SLIDE1.SYSTEM To make the same patches to SLIDE2.SYSTEM, follow this procedure: _ [4] Load the file: PREFIX/DD/UTILITIES BLOAD SLIDE2.SYSTEM,A$2000,TSYS [2] Get into the monitor (if you’re not already there): CALL-151 [737] Change a few quit messages: 29:F4 EF AQ DO F2 EF C4 298:CF D3 AO 26C5:D1 D5 C9 26C8:D4 A® AO [4] Add the quit routine and the routine to set up the reset vector: 35FD:20 00 BF 3600:65 03 1E 04 00 00 00 00 3608:00 00 A9 FD 8D F2 03 A9 3610:1D 8D F3 @3 4C 6F FB [5] Change the address that gets JuMPed to when you quit: 26DA:4C FD 1D [6_] Make the reset vector patch: 21B4:20 OA 1E EA EA EA (C7) Save the file: UNLOCK SLIDE2.SYSTEM BSAVE SLIDE2.SYSTEM,A$2000,L$1617,TSYS LOCK SLIDE2.SYSTEM A Few Final Notes Normally, the RAM disk drivers are overwritten with the execution of the copy of ProDOS resident on the Dazzle Draw disk. However, if you have a large RAM disk (such as Applied Engineering's RAMworks) which resides in some place other than slot 3, drive 2 (you can use the SLOTCHANGER program included with RAMworks to change the emulated slot and drive), the first patch in step 5 will leave the RAM drive intact. To take advantage of this, keep a copy of DAZZLE.SYSTEM in your RAM disk. Just prior to executing it, put the Dazzle Draw copy in slot 6, drive 1. Upon execution, DAZZLE.SYSTEM will read code from it. When you're done using Dazzle Draw, quit and your RAM disk will still be intact. If you do keep DAZZLE.SYSTEM in a RAM disk, and you try to save the setup, it will be saved onto the copy in slot 6, drive 1. You must then recopy DAZZLE.SYSTEM to your RAM disk. Controller 10900 REM DAZZLE DRAW CONTROLLER 1019 TK = O:LT = 31:ST = 15:LS = 15:CD = WR: FAST el 1020 POKE 47426, 24: GOSUB 498: GOSUB 610 1030 POKE 47426, 56: GOSUB 498: GOSUB 610 1040 IF PEEK (TRK) = LT THEN 1060 1950 TK = PEEK (TRK) : ST = PEEK (SCT) : GOTO 1020 1060 HOME ; PRINT “COPY*DONE" ; END Checksums 1000 - $3568 1040 - SE8BD 1010 - SOFOO 1950 - $0803 1020 - $B5F9 1960 - $20C6 1030 - $6E9F Softkey for... SongWriter Scarborough, Inc. @ Requirements Ci Apple Il Plus, Ile or Ic Ci Super IOB v1.5 This music program is modeled after the old player piano. You can write music, though not sophisticated, and play around with sounds and songs. You can save your creations for later use and you can incorporate them in your own programs. For its price its a good buy and can be a lot of fun to use by adults as well as children. [ 42 COMPUTIST #59 September | Although designed for users ages 5 - adult, the disk is copy protected, a practice that does not encourage unsupervised use by little hands. The protection technique involves altering the data prologs from D5 AA AD to D5 AA97 and the use of constantly changing epilogs. The controller below, takes c f both of these. When you lize data disks from within the unprotected program, you will also have DOS added (unlike the original). Therefore before booting up a data disk, delete the file “‘H" from it and add your own hello program (just remember to call it ‘*H’’). The documentation mentioned that ‘you can add music to your own programs written in BASIC’’, however nowhere could I find a description of how to do this. For this reason, 1 present the following which should get you started. When you initialize a data diskette from the program, a binary file “‘PLAYER”’ is transferred to your data disk. After the softkey, you can transfer this directly off your program disk. The code is relocatable (that means you can put it anywhere in memory). The songs are loaded into high memory (from $9898 - down), therefore only one DOS buffer is allowed and your program must start with a “MAXFILES 1°" statement. Songs can be up to 1000 bytes in length, so the ‘‘PLAYER"’ code must be loaded below the longest song you intend to use. A good safe place would be 32768 ($8000). A typical BASIC program might be: 19 PRINT CHR$ (4) "MAXFILES*1" : REM CLEAR SPACE FOR YOUR SONG 2G PRINT CHRS (4) "BLOAD*PLAYER ,“A32768" 30 PRINT CHRS (4) "BLOAD*FIRST. SONG” Your Program Goes Here From Line 31-239 240 CALL 32768: REM START THE MUSIC 250 PRINT CHRS (4) "BLOAD*SECOND. SONG” 260 CALL 32768: REM PLAY IT Checksums 10 - S9FA3 240 - SSEFD 20 - $D7F6 250 - SFBEB 30 - SAF72 260 - S6BAB Step by Step [17] Boot up a disk, preferably with a fast DOS. Drop into the monitor, make a slight change to the DOS, and initialize a blank disk. CALL -151 ‘A3A1:A3 A3 INIT HELLO [2] Install the Songwriter controller into Super IOB v1.5, and use the resulting program to copy Songwriter. [[2] Enjoy your COPYA-able disk! Controller 1000 REM SONGWRITER CONTROLLER 1010 TK = 3:LT = 35:ST = 15:LS = 15:CD = WR: FAST =1 1920 GOSUB 490: RESTORE : GOSUB 210: POKE 47426 , 24: GOSUB 610 1030 GOSUB 499: GOSUB 230: GOSUB 610: IF PEEK (TRK) = LT THEN 1050 1840 TK = PEEK (TRK) :ST = PEEK (SCT) : GOTO 1020 1050 HOME : PRINT "FINISHED" : END 5000 DATA 213,170,151 Checksums 1000 - $3568 1040 - SAE64 O10 - $2445 1050 - $D87F 1020 - $7890 5000 - S1DAO 1030 - $2ABB 9 - $0000 Les B. Minaker Let me take this opportunity to endorse COMPUTIST’s reason for being and the increased information that the expanded format allows. It is very hard to find a magazine that will even discuss copy protection much less publish methods of circumventing it! I do, however, feel that the IBM section is worthless. If there was sufficient interest in that type of magazine, I am certain that it would have been started a long time ago. I suggest that Softkey Publishing begin a separate publication if there is enough interest or publish the IBM RDEX only every other month. This would allow more space for us Apple users (so I’m a little greedy)! Don’t get the wrong idea, I think that IBM machines are decent, high power devices. They however, find there biggest audience in offices not homes (I can hear the IBM users protesting now!) and, because of this, I think that space in a hobbyist magazine is wasted on IBM articles. ‘Anyways, keep up the good work. bP. FoR. Ultima V Origin Systems @ Requirements CU Apple II series computer (that includes the TI Plus) CO ProEdit or similar ProDOS block editor CA backup of the Brittania disk - easily made with Locksmith Fast Copy 6.0 Introduction and Review As most of you out there in magazine land have likely realized, Ultima V_ is here! Published by Origin Systems (who else?), it is one awesome game. The game is an elaborate extension of Ultima IV, so keep your old maps (you know, the ones you made with Ultimapper TV and Ultima IV Towne Mapper) and notes. Although the layout is not exactly the same, it’s close enough to allow you to use your old maps and stuff. Here the purpose of the game is to rescue Lord British from the Shadowlords. The explanation of how he managed to get himself captured is explained in the documentation. ‘As usual the graphics and playability are fantastic. The Ultima series has set the standard for playable fantasy games. This one is no exception. There have been a number of new commands added to the game. Some of these are: (P)ush-allows you to move chairs and tables; you can select an active player to perform all lock (J)immying etc.; you can (Q)uit and save almost anywhere; sound is now toggled by to exit the scene of combat you simply press [sels and, for those with Iigs machines the [GIT] will toggle between 1 and 3.5 MHz. Lord British has also added a few new means of transportation. Namely skiffs and magic carpets. The advent of ‘true night’ has also been added to the game. When it gets dark, it gets REAL dark! All in all, this game is amazingly amazing! Hi-Res Screen Images For those who are interested in trapping Hi- Res pictures; I have found that many of the screens can be trapped by hitting (RESET). I should caution you, however, that it doesn’t always work. There is no pattern, but two things usually occur. The first is a complete lock out of the keyboard after reset. That means your computer just sits there with garbage on the screen. The other possibility I have found is the re-booting of the machine upon reset. If this occurs insert your favorite graphic trapping program (I use Graphic Grabber because I like to employ the images I trap to create new graphics for The Print Shop) and let the machine re-boot. You should now have the screen image on page 1 and garbage on page 2. On to the good stuff. The Sector Edits The character data for Ultima V can be found on block $1D. Using the below charts the attributes can be found and altered to suit your desires. Because the game is written on ProDOS disks, I used COMPUTIST’s own ProEdit to perform these edits. You could use DiskWorks or some similar program but, since DiskWorks requires open and closed Apple commands, which my trusty I+ does not have, [_ September COMPUTIST #59 13 | and using a joystick to activate commands is a royal pain, I found that ProEdit was much more suited to my needs. (That’s just a little plug for the software published in COMPUTIST over the years!) ‘There seems to be 16 characters, including the player’s character, available for gaming. However, I haven’t been able to insert any of the characters beyond Jaana (#6) into my party. I suspect it has something to do with who is still Some valid bytes to use when stuffing your characters Sex: male - $3E, female - $3F Status: not present - $FF, present - $00 Health: good - $C7, dead - $C4, poisoned - $DO, sleeping - $D3 Class: avatar - $C1, bard - $C2, fighter - $C6, mage - $CD Other important locations in block $01D alive or something to that effect. If any $180-$181 food $IFO shard of falsehood $IF7 skull keys industrious reader can figure out why this | $182-$183 gold $IFL shard of hatred SIF8 Lord British’s amulet happens, I would appreciate if you could sent) $184 keys SIF2 shard of cowardice | $IF9. Lord British’s crown a note to the RDEX editor. stigh’: ‘The data is stored in a decimal format. That $185 gems S$IF3 spyglass SIFA Lord British’s sceptre is, the data has maximum values of 99. If two | $186 torches SIF4 HMS Cape plans SIFB black badge bytes are used to represent the data the $187 grappling hook SIFS sextants SIFC woden box maxioum value is 9,999. If this looks familiar, $188 magic carpets $1F6 pocket watch it is! Character data from block $01D name player Shamino Tolo Mariah Geoffrey Jaana Julia Dupre status $80 $90 $AO $BO $co $D0 SEO $FO sex $81 $91 SAL $B1 SCl $D1 SE1 SFL class $82 $92 $A2 $B2 $c2 $D2 SE2 $F2 health $83 $93 $A3 $B3 $C3 $D3 $E3 $F3 strength $84 $94 SA4 $B4 $c4 $D4 SE4 SF4 intelligence $85 $95 $AS SBS $C5 $D5 SES SPS dexterity $86 $96 $A6 $B6 $C6 $D6 SE6 SF6 magic points $87 $97 $A7 $B7 $C7 $D7 SE7 SF7 current hit points $88-$99 $98-$99 $A8-SA9 $B8-SB9 $C8-$C9 $D8-§D9 $E8-SE9 SF8-SF9 maximum hit points $8A-$9B $9A-$9B SAA-$AB SBA-$BB $CA-SCB SDA-$DB SEA-SEB $FA-SFB experience points $8C-$9D $9C-$9D SAC-SAD SBC-$BD $CC-$CD $DC-SDD $EC-$ED $FC-$FD experience level $8E $9E SAE SBE $CE SDE SEE SFE name Katrina Sentri Gwenno Johne Gorn Maxwell Toshi Saduj status $100 $HO $120 $130 $140 $150 $160 $170 sex $101 $i $121 $131 $141 $151 $161 $171 class $102 $12 $122 $132 $142 $152 $162 $172 health $103 $3 $123 $133 $143 $153 $163 $173 strength $104 $il4 $124 $134 $144 $154 $164 $174 intelligence $105 S15 $125 $135 $145 $155 $165 $175 dexterity $106 $116 $126 $136 $146 $156 $166 $176 magic points $107 $7 $127 $137 $147 $157 $167 $177 current hit points $108-$109 | $118-$119 $128-$129 $138-$139 $148-$149 $158-$159 $168-$169 $178-$179 maximum hit points $IOA-$1OB| $1IA-S1IB | $12A-$12B | SI3A-$13B | $I4A-$14B_ | SISA-S1SB_| $16A-S16B__| $17A-$17B experience points $1OC-S1OD| $11C-$1ID | $12C-$12D | $13C-$13D | $14C-$14D | $ISC-$1SD_| $16C-$16D_| $17C-$17D experience level $10E S9E $I2E $13E SI4E $ISE S16E SITE © The name of a Shadowlord gives you power Shadowlords Earthly Fortess. Ultima IV? Look there again for Blackthorn's over him assuming you can figure out how to © The runes for scrolls represent the spell they fortress. use it. Two of them are named Nosfentor and can cast. © So you want a magic carpet, eh? Perhaps if Astaroth. I leave you to discover the third one. © Need a grappling hook? Seek out Lord you tell Bandii where you found Smith the © If you've lost your Ultima IV notes, the Michael and simply ask him for it! Talking horse he'll give you one. mantras are as follows: © The sextant only works at night and it can If you find the Resistance, it is most useful Sacrifice: Cah Spirituality: Om be gotten from David. to remember ‘‘dawn’’. Summ Humility: Lum Beh Valor: Ra Lum —_ Compassion: Mu © Lord British’s Septre is held in the © Words of power are very useful. Three of * Looking for the Earthy focus of the these are (no particular order): Uvilis, Malum, shadowlords? Try asking Sir Sean of Inopia. “stonegate”’. ¢ Remember where you found the skull in © Wishing for a horse works in only two places. 14 COMPUTIST #59 September | The weapons, armour, reagents, readied spells, potions, and scrolls are stored on block $OO1F. $O0-$2F armour and weapons | $AO sulphur ash SA3 spider silk $A6 nightshade $40-S6F readied spells SAL ginseng SA4 blood moss $A7 mandrake $70-$7F potions and scrolls $A2 garlic $A5 black pearl Specific item locations » Armour club $12 | magic axe $26 | Rel Hur $48] in Zu $5C Serolls leather helm $00 | flaming oil $13 | glass sword $27) InWis $49| Rel Tym $5D} VL $70 chain coif $01 | main gauch $14 | jewel sword $28 | Kal Xen $4A| InVas Por Yiem $5E| RH $71 iron helm $02 | spear $15 | mystic sword $29 | Vas Lor $4B| Quas An Wis $5F) IS $72 spiked helm $03 | throwing axe $16 Magic Items Vas Flam $4C| In An $60 IA $73 small shield $04 | short sword $17 | invisibility ring $2A) In Xen Man $4D| Wis An Ylem $61) 1QW $74 spiked shield $05 | mace $18 | protectionring $2B| In Flam Grav $4E) An Xen Ex $62] KXC $75 large shield $06 | morning star $19 | regeneration ring $2C | In Nox Grav $4F| Rel Xen Bet $63) IMC $76 shield magic $07 | bow $1A | amulet of turning $2D| In Zu Grav $50| Sanct Lor $64) AT $77 shield jewel $08 | arrows $1B | spirit collar $2E | In Por $51} Xen Corp $65 Potions cloth $09 | crossbow $1C | ankh $2F | An Grav $52| In Quas Xen $66) blue $78 leather armour — $@A | quarrels $1D Spells In Sanct $53) In Quas Wis $67| yellow $79 ring mail $0B | long sword SIE} In Lor $40 | In Sanct Grav $54| In Nox Hur $68) red $78 scale armour $@C | 2H hammer SIF j Grav Por $41 | Uus Por $55] In Quas Corp $69) green $78 chainmail $0D | 2H axe $20 | An Zu $42 | Des Por $56| InMani Corp $6A] orange $7C plate mail $OE | 2H sword $21 | An Nox $43 | Wis Quas $57| Kal Xen Corp $6B) purple $70 mystic armour SOF | halberd $22 | Mani $44 | In Bet Xen $58) InVasGravCorp $6C| black $7E ‘Weapons chaos sword $23 | An Ylem $45 | An Ex Por $59) In Flam Hur $60) white $7F dagger $10 | magic bow $24 | An Sanct $46 | In Ex Por $5A| Vas Rel Por $6E sling $11 | silver sword $25 | An Xen Corp $47 | Vas Mani $5B} An Tym SOF * You can move moongates by searching directly below a waning gate. You should find a stone that you can then rebury any place you like. © A skull key will open any door. They can be bought from a lady in Serpent’s Hold or found in a tree in Minoc. © Search a tree stump in Paws for an item of interest. * If you’re both broke and wounded journey VERY quickly to Minoc where, in the Healer’s Mission, you can receive free medical aid. © There are pleny o’ items on the first level of Moonglow. Ok, that should be more than enough to get you well on your way to saving Lord British. Good luck and kill an Ore or two for me. Jerry Mulder Convert PrintMaster Graphics into Print Shop Graphics @ Requirements (I Apple PrintMaster DOS 3.3 Program Disk, from Unison World/Berkeley Softworks © Broderbund’s Print Shop Companion program disk (or other compatible Print Shop graphics ‘‘capture’’ program) C Two initialized floppy disks (or one flippy disk) for storage The following information is not a softkey, but will allow one to convert Apple PrintMaster graphics so they'll work with Broderbund’s Print Shop and Print Shop Companion programs. Unison World's Apple PrintMaster is a Print Shop lookalike, and has some rather nice graphics, which are not directly usable with Print Shop, nor with Print Shop Companion. When one is using PrintMaster, saving the graphics to a separate data disk results in binary files which are 3 SECTORS long, rather than Print Shop's 4, and as mentioned previously , they seem to be incompatible for use with the Print Shop. Upon closer examination of the PrintMaster program disk, one will soon discover that all graphics are stored in several rather large binary files, and are accessed in “‘bunches”” of 12 at a time. As such, I came up with a somewhat inelegant, but very effective, procedure for converting the graphics one at a time so that they will be compatible with Print Shop. The resultant graphics are in very nice proportion, and usable immediately ‘‘as is’’ after conversion. In case you have lots of spare time, staying up until the wee hours of the morning will be required to convert the entire collection of approximately 122 graphics. . I chose to convert about 25 graphics at a sitting, since the task is rather tedious. PrintMaster is a slow booting (though not copy- protected) program; enhancing it with a fast DOS causes it to crash early on into the boot. Step By Step (4_] Boot Apple PrintMaster in drive 1. [2{] From the Main Menu, select Editor. [2] From Graphic Editor Menu, choose Graphic: By Picture. [4] With your graphic selection highlighted, press P to preview graphic. ([3_] With the desired graphic visible at the right side of the screen, remove the PrintMaster program disk from drive 1. [[6_] Insert the Print Shop Companion program disk in drive 1, and warm boot by the most convenient method. [27] From Print Shop Companion Main Menu, select Graphic Editor+. [87] Press to “GET graphic’’. [9] At the next screen, select From Screen Memory. If everything went well, your monitor should at this time display the entire last Apple September COMPUTIST #59 15 | PrintMaster HI-RES screen intact, including the representation of the graphic you selected. NOTE: If the (Apple Te, Ic) method of warm-booting produced a snowy or garbled HI-RES screen, try the following changes in step 6: A. Insert Print Shop Companion program disk into drive 1, and press mEsEN). B. If BASIC prompt (J) appears, enter: PRIG C. If monitor prompt (*) appears, enter: [41] The Print Shop Companion Graphic Editor +’s capture box is just large enough to enclose the entire PrintMaster graphic within its confines, generally with little or no room to spare. If there is anyone out there who has a faster way to convert these graphics, please submit your ideas, since this method is rather SLOW! Softkey for... [2] Boot your DOS 3.3 master disk: PREG (2 Initialize two blank disks: INIT ALLO [23] Change the instruction at $B942 from SEC ($38) to CLC ($18) so that any read errors are ignored: POKE 47426,24 [4] Place a copy of Demuffin Plus in Drive 1: BRUN DEMUFFIN PLUS ([5—] Place the original Better Working program disk (notch covered with write-protect tab for safety) in Drive 1, and one of the previously initialized disks in Drive 2. Using the ‘wildcard’ option (=), copy all files from Drive 1 to Drive 2. Answer ‘N’ when asked if you want prompting. G_] Repeat this same procedure with the Better Working Better Working Software (Spinnaker) @ Requirements O Better Working word processor disk CO Apple II (48K Minimum) O Two blank disks O Demuffin Plus Better Working is a medium to high powered word processor, with window-like features, as well as having a comprehensive spelling checker on the backside of the disk. Once accustomed to this word processor, it may well be one of the better processors for the Apple II, with effective functions for: SEARCH, REPLACE, MOVE or COPY blocks of text, COUNT the words in your document, CUSTOMIZING your print format, MAIL MERGE, DISPLAY of text on screen in 40 or 80 columns, as well as the ability to use INSERT or OVER-WRITE mode (a very nice option to have). Furthermore, the program produces standard ASCII Text files. Unfortunately, the program is copy- protected. With that in mind, since my son likes using this word processor, I needed back-up copies, and as far as I could determine from the packaging or any of the enclosed documentation, Spinnaker does not make a back-up available. My attempts to copy the disk with several utilities were futile (copy would not boot after several tries), so it fit the criteria for total de- encryption. Both the program disk, as well as the flipside with the spelling checker, may be de-encrypted using the following procedures: SPELLING CHECKER on the flipside of the program disk. That's it! When all files are transferred, you have a completely COPYA-able version of Better Working. My attempt to install a speed-up DOS (iversi-DOS) on the COPYA-able version was unsuccessful, do to the fact that the speed-up DOS interfered with some of the printing functions of this program. Other speed-up DOS’s may work. One last item of interest— this program shows true underlining (underscoring) on screen on 40 or 80 columns, and accounts for some of the slowness. The following has not been tried, but there is a reasonable possibility, that other programs from Spinnaker, such as File & Report and Spreadsheet may be unlocked, using this same procedure. If anyone would like to talk to me, I can be reached at (206)764-2036 between 7:00 a.m. and 3:30 p.m. Mike Egnotovich Softkey for... Patchworks Random House Softkey for... Negotiation Edge Management Edge Human Edge Software @ Requirements CO COPYA © Blank Disk Oi Super IOB v1.5 O Fast DOS (e.g. DiversaDOS) First of all, many thanks for the contributions in your previous issues of COMPUTIST. Particular thanks to Jim Hart (COMPUTIST #46, page 12), and Ed Teach (COMPUTIST #50, page 38). Without their softkeys I would not have been able to provide the following: What to look for: Can the disk be cataloged? Does COPYA copy the disk? If neither of these are successful, this usually means that there are format alterations to the RWTS (Read Write Track Sector) sections of the DOS on the disk (IE: an altered DOS - a very common protection scheme). The easiest way to deprotect these disks is to use the Swap or New Swap Controller and Super IOB (contained on the COMPUTIST Starter Kit). To make this scheme work, however, we have to have the perverted RWTS captured and in our possession somehow. Here’s how its done: [4] Boot up with a normal DOS and enter the monitor. CALL-151 [2] Move the disk controller card ROM (also known as Boot) into RAM so that it can be modified: 9600<C600.C6FFM (37) Fix the code so that it stops after loading Boot!. ‘96FA:98 N 9801:AD E8 CO 4C 59 FF ([4_] Put the original disk (write-protected) into Drive 1 and boot it with the following command: 9600G [3] The drive will turn for a while, rattle, beep and then stop and you will be in the monitor (* instead of ]). Note: if the drive fails to stop and won't take you into the monitor after any **xxxxG"" command, then the disk cannot be deprotected by this method. We first have to move the BOOT code (which loads in the RWTS) to a safe spot. Next we have to modify BOOT! so it will load in the RWTS and then go into the monitor again: 9800<800.8FFM 980E:90 984A:4C 00 93 9300:AD E8 CO 4C 59 FF [16 - COMPUTIST #59 September | Execute the modified boot one more time: 9600G [7] When the computer beeps you will have the RWTS in memory at $B800-BFFF. All that has to be done now is to move it to a safe place so that a subsequent boot won't erase it: 1900<B800.BFFFM [£8_] Boot a normal DOS 3.3 disk and save the RWTS that you just captured: C600G BSAVE RWTS.PROG,AS$1900,L$800 (2 Install the New Swap Controller into Super IOB. (For Negotiation Edge you must use the Swap Controller, the New Swap won’t work - timing problems or something). Follow the Super IOB instructions here - contained on the COMPUTIST Starter Kit disk. Add these two lines to the merged program: 1015 TK=3 10010 PRINT CHRS(4); “BLOAD RWTS.PROG,AS1900"" Place the DOS-formatted disk containing RWTS.PROG into Drive 1. AT] Start Super 10B. RUN (42 When prompted, place the COMPUTIST (Super IOB) disk in Drive 1. [43] Select the appropriate slot and drive numbers, place the original disk to be copied into the appropriate drive, and follow the Super IOB prompts. When you're done, it’s a good idea to use Copy II Plus’ option to Copy DOS. Use a fast DOS like DiversaDOS. This places DOS on tracks $00-O2. Now all you have to do is boot and go. That should do it. You should now have a deprotected copy that can be cataloged and packed (if you followed Super IOB’s prompts correctly). Sometimes there are deleted files on the disk that you deprotected that contain info on the protection scheme or even contain the scheme itself. You can catalog with Copy II Plus to see what these files are. Sometimes these files will prevent you from booting the protected disk and will cause you to crash into the monitor, What you should do in any event, if your deprotected disk won't boot, is to use Copy II Plus to copy all files to another DOS- formatted disk (using File Copy). The deleted files won't transfer and the resulting disk should boot OK. Softkey for... Everybody's Planner Abracadata @ Requirements © COPYA O Blank disk CO Protected disks for the above Thanks to COMPUTIST #51, page 34 for this one. It was listed for Intrigue by Spectrum Holobyte, but also deprotects the Everybody's Planner four-disk series, Flowcharts, Schedules and Reports (the fourth, Data Disk is COPY A- able as it is). [2] Boot your DOS 3.3 system disk. [[27] Change DOS and run COPYA. CALL-151 B954:4A C9 6A DO EF BOBB:18 60 RUN COPYA That’s all there is. The copies are deprotected. I have also used this technique with Spectrum Holobyte’s GATO v1.3, with limited success. I was able to capture the PASCAL version 1.3 files in readable format but the disk won’t boot. It seems that there is a nibble count in addition to the initial protection. This count is different than that listed in earlier COMPUTISTS (e.g., #30, page 6, where the sequence AD E9 C0 A9 is supposed to be changed to A9 G1 DO 67). That sequence doesn’t exist on my version of GATO. If any readers have suggestions, I’d be interested to hear. Softkey for... On my version of the master disk these were found on block $0108. Replace the string with EAEA EA EA EA EA EA EA and write the block back out to disk. That's all there is to it. The other four sides can be disk-copied using PASCAL (#4 to #5, etc.) or your bit copier. + Softkey for... GATO Version 1.3 Spectrum Holobyte @ Requirements O COPYA O Blank disk O Protected GATO v1.3 Disk O Locksmith v6.0 or 7.0, with ABT OA sector or block editor (Copy II Plus or Blockworks) My version of this program is apparently not the same as that discussed in COMPUTIST #38, nor do the softkeys listed for other GATO versions (COMPUTISTS #23, #30, #36, and #42) work. This version is a UCSD Pascal v1.3-based implementation. Numerous attempts to bit copy this program all failed (EDD 4, Copy II Plus (versions 6 thru 8), Locksmith v6.0 or v7.). None was able to read the disk. Rummaging through back issues of COMPUTIST, I was able to find a softkey for other Spectrum Holobyte software that allowed me to copy and even catalog the disk, using PASCAL's Filer program. The resulting copy would not boot, however, and the drive would continue to whirr without ever finding anything to display. The softkey rendering this listable but not bootable copy is contained on page 34 of COMPUTIST #51 and is as follows: [£47] Boot your DOS 3.3 system disk. APBA Major League Players Baseball Random House @ Requirements O Blank disk CO Copy II Plus or Locksmith O Block editor that can read PASCAL (e.g. Block Work 3.9) O UCSD PASCAL version 1.1 or higher (optional) O Protected disks for the above This is a five disk series of the famous statistical game that is implemented in PASCAL 1.3. The files can be read but when copied will not boot. This indicates some kind of nibble count. It is proven, indeed, to be the case. Make a copy of the protected disks using your favorite bit copy program. Scan for the string 1 FB C9 D5 FO F4 DO FO. {[2-] Change DOS and run COPYA. CALL-151 B954:4A C9 GA DO EF B98B:18 60 RUN COPYA The resulting copy was subjected to the Automatic Boot Trace (ABT) function of Locksmith. I found the trace to enter a continuous loop with the following disassembly. (+ signifies that the branch was executed in Locksmith ABT; - signifies that it was not). GAA LSR A QAGB CMP #6A QAGD BNE O9FE + OOFE INY QOFF BNE QAQ5 + @A05 LDA CO8C, X (C@8C,X = the infamous clue to the existance of a Nibble Count) QAO8 BPL OAQ5 - QADA LSR A September COMPUTIST #59 17 QAQB CHP #6A GABD BNE Q9FE + Q9FE INY OFF BNE @AQ5 + and the loop continues. Interestingly, as we will see later, when I cataloged the disk with PASCAL Filer’s DIR command, the copied disk indicated 261 blocks used, 19 unused and 13 in the largest. Having no luck trying to RTS or NOP around the 8C C@ code, I then formatted a new disk with PASCAL and then copied (using the PASCAL Filer’s Transfer function) each file one at a time to the new disk. Transferring the entire directory (i.e., T(rans) #4: -> #5:) would be no different than using a copy program and would provide me with an exact duplicate of the first copy that wouldn’t boot. When I cataloged this new disk copy, interestingly it showed that 261 blocks were used and 19 unused. However this time it showed that 19 blocs were in the largest! Where did the 6 phantom blocks come from and why did both copies show 19 unused? Even more interesting, when I booted the second disk, I progressed further into the boot process than I did with the first copy. The screen full of ““@”’ symbols appeared, the-drive made a grinding noise once trying to continue the load, and then the following message was displayed: “Insert boot disk with SYSTEM.PASCAL. on it, then press RETURN”. Needless to say that the asked for file was on the Directory, indicating that the protection code resides either in that file or in the SYSTEM.STARTUP file. I then tried Locksmith’s ABT on the second copy and that did progress much farther into the boot before I again found myself in a never- ending 8C CO-related loop. OA25 STA 27 GA27 LDA CO 8C, X QA2A BPL A27 - QA2C ROL A GA2D STA 26 GA2F LDA CO 8C, X QA32 BPL QA2F - BA34 AND 26 BA36 STA 9020, Y 9A39 EOR 27 GA3B DEY BA3C BPL @A25 + That is as far as I was able to progress in deprotecting the PASCAL 1.3 version of GATO. I feel that I am on the right track but am unable to make further headway. I would appreciate it if any other readers can see something in what I have done so far to provide a hint as to where I should go next. Perhaps, take their own versions of this program and come up with a deprotection scheme of their own, based on clues that I have provided. Paul A. Johnson T would like to say that J like the new format for the magazine. I think it is beneficial to have repeated softkeys, just in case one version doesn’t work on a particular system or version of the software. I also like the bold boxes around the software titles. It makes them easier to pick out when scanning for a particular softkey. @®) Does anybody out there have the time, expertise, and writing skills to put together a good tutorial on boot code tracing? T think that there are a good many readers who would like to learn more about this aspect of disk cracking, and I am one of them. I have tried to figure it out on my own using articles on particular softkeys, but the article just tells what is needed for that crack and I need something more general in order to learn. @ 1 recently purchased The Newsroom by Springboard Software, Inc. and I wanted to deprotect it. I dug out my back issues and found a softkey in issue 23 on page 18. I tried this softkey and it didn’t work. The problem was because track 3 is unreadable on my disk. The disk does have modified address epilog bytes like in the article, but that is where the article stopped giving me useful information. I tried copying the files over to another disk with COPYA with it ignoring the epilogs, then inserting a fast DOS, but that failed, too. By searching the disk, I found what appears to be the protection code on track 2, sector 6. The code was as follows: 1928- BOOB BCS $1135 192A- AQ1D LOA #810 102C- 48 PHA 1920- AS FF LDA #SFF 192F- 48 PHA 1030- A911 LDA #$11 1932- 4CD99D JMP $9DD9 1935- 4C A8 BF JMP $BFA8 The JuMP to $9DD9 is to the area of DOS that continues with the booting process by either coldstarting or warmstarting BASIC, depending on the contents of $9DD1. I thought that maybe this jump was encountered after a successful nibble count, so I changed it so that the program would jump to $9DD9 even after an unsuccessful nibble count. This seemed to get me past the protection, because the greeting program (B.NEWS START) was loaded into memory at $80@. After this, the program beeped, checked to see if I had a second drive, and then died a loud death. It rang the bell continuously until I hit reset. Also, according to the article in issue 23, the clip art disk is supposed to have normal epilogs, but my clip art disk has modified epilogs like the program disk. This is as far as I’ve gotten, and I am lost. If anybody has cracked The Newsroom, or would just like to take on the challenge of cracking it, I would certainly appreciate your help. I hope that the information I have provided will help. I would also like to see The Newsroom added to the Most Wanted list until somebody does come up with a softkey. Thanks. As long as you keep printing, I'll keep reading. Thomas V. Rapheld The Invincible Bard Bard’s Tale II (BT3) is out and it is not copy protected. As with Wizardry IV, the protection scheme is based upon comparing numbers provided in the game with numbers found on a ‘wheel-of-fortune’ type Code Wheel provided with the game. Because I do not ‘pirate’ software, but instead I copy software that I have bought, I believe these new external protection schemes are great. Now that we can all backup Bard's Tale TH, let's get down to the problem at hand, creating a super character or better yet an INVINCIBLE BARD. First, create six characters with the games ‘create a member’ option. Next, get out your best sector editor and look at track $22 of your Character Disk. (View ASCH, not Hex.) You should be able to find the name of each of your characters starting at either byte $0 or byte $8O on one of the sectors of track $22. All future discussion regarding changes to the disk will be listed with two bytes. The first byte listed will be for changes to the character on the top part of the sector (starting at byte $0), while the second byte listed will be for changes to the character on the bottom part of the sector (starting at byte $80). All changes should be made in hex numbers. The game will convert the hex numbers to decimal ($@O-FF = Q-255). Be careful when assi number as an attribute. First, the attribute number that shows up on the monitor during the game will probably be significantly smaller because the game screen limits the number of digits available for each attribute. Second, if you've chosen an attribute that grows with game play, you could push the attribute back to zero (OO). However, you can always re-enter with a sector editor. Starting at byte $3@ for the character on the top of the sector editor screen and $CO for the character on the bottom of this screen are the weapons, armor, and miscellaneous items carried by each character. Each item carried uses three bytes. The first byte indicates whether the item is equipped (01), not usable { 18 COMPUTIST #59 September | (@2), unknown (03), or unequipped (04). The 5E Pipes of Pan 9E Shadelance DE Cli Lyre #0 EF x second byte indicates which item (OO-FF) is 5F Power Ring 9F Black's Arrows #2 OF Youth Potion FO Mthr Suit being carried. The third byte (I believe) 60 Song Axe AQ Werra's Shield Ee x FL Titan Suit indicates how many times the item can be used. 61 Trick Brick Al Strifespear El x F2 Mages Gloves If it is an item that does not have a limited use 62 Dragon Fgn A2 Sheetmusic 2! & F3. Flare Crystal then the third byte should be FF. For example, 63 Mage Fgn #0 AZ Right Key £3 x F4 Holy Missile #0 if you change bytes $30-32 to G1 05FF, your 64 Troll Ring Ad Left Key 4 x F5 God's Blade character's first item carried will be anequipped 65 Aram's Knife AS Lever —5 x Fé Hunter Blade dagger that does not have a limited life span. 66 Angra's Eye AG Nut f6 x F7 Staff of Gods Bytes $33-35 will be the next item carried, and 67 herb Fen AT Bolt #0 E7 x F8_ Horn of Gods so on... There are 256 possible items (less a 68 Master Wand A8 Spanner —8 x FQ x few items that are left blank) that can be used. 69 Brothers Fgn AQ Shadowhook E9 x #0 FA x Some of the items are supposed to be found 6A Dynamite AA Shadow Door EA x FB x during the game play. It is advisable that you 6B Thor's Hanmer AB Misericorde —B x FC x do not add an item that is not familiar to you. 6C Stoneblade AC Holy Avenger EC x FO x 6D HolyHandgrenade AD Shadowshiv ED x FE x Weapons, Armor, And Misc Items 6E Masterkey AE Kali’sGarrote EE x FF x #0 6F Haspin Ring AF Flame Knife 00 Empty Pockets 2F Hawkblade oi Tbe a0; ‘Ade Sacrd 70 Crystal Lens BO Red Stiletto & nny agrees with another lst by Brian @2 Lamp 31 Admt Shield 71 Smokey Lens Bl Heartseeker Symonds in all but a few items. We decided to 03 Broadsword 32 Admt Helm 72 Black Lens B2 x #0 combine the lists to save space. The following items 94 Shortsword 33 Admt Gloves 73 Sphere of Lanati B3_ x are in question; $A9 may be "shadow lock", $C2 05 Dagger 34 Pureblade 74° Wand of Power Ba x may be “galvanic Blade" and $D3 may be "the 96 War Axe 35 Boomerang 75 Acorn 85 Dmnd Scale Book". Write and let us know which is correct. 07 Halbard 36 Ali's Carpet 76 Wineskin 86 Holy TNT Also, the attributes list on page 20is the combined 08 Long Bow 37 Luckshield 77 Nightspear #0 87 _Eternal Torch work of three authors. Again, we combined the 09 Staff 38 Dozer Fgn 78 Tslotha’s Head B8 Oscon's Staff lists to save space. A Buckler 39° Admt Chain 79 Tslotha'sHeart B9 Angel’SRing. cece RDEXed 08 Tower Shield 3A Death Stars 7A Arefolia. BA Deathhorn OC Leather Armor 3B Admt Plate #9 7B Valarian's Bow BB Staff of Mangor Those items shown with a ‘#0’ have a @D Chain Mail 3C Admt Bracers 7 Arws of Life BC Testa Ring limited useful life where the @ is the number GE Scale Armor 3D Slayer Fen 7D Canteen 80 Omnd Bracers #0 of uses left. As of this writing, I have not QF Plate Armor 3E Pure Shield 7E Titan Plate BE Death Fan completely investigated all the sector locations. 10 Robes 3F Mage Staff 7F Titan Shield BF Thunder Sword As stated previously, I believe that the third byte IL Helm 40 War Staff 8@ Titan Helm CB Poison Dagger location for each of the items carried is the byte 12 Leather Gloves 41 Thiet Dagger 81 Fire Spear #0 Cl Spark Blade that indicates how many uses are left of these 13. Gauntlets 42 Soul Mace 82 Willow Flute C2 Galvanic Oboe limited life items. In addition, for the THIEF, 14 Mandolin 43 Ogrewand 83 Firebrand C3 Hamonic Gem bytes $64-66/SE4-E6 (depending on if Thief is 15 Spear 44 Kato's Bracer 84 Holy Sword C4 Tung Shield on the top of the sector editor's screen or the 16 Arrows 45 Sorcer Staff #a 85. Nand of Fury C5 Tung Plate bottom of the screen) determine the special 17 Mthr Sword 46 Galt's Flute 86 Lightstar C6 MinstrelsGloves thieving attributes. If you change these bytes 18 thr Shield 47 Frost Horn 87 Crown of Truth C7. Hunters Cloak your Thief can have attributes at 100%. 19 Mthr Chain 48 Ag's Arrows 88 BeltofAlliria C8 Death Hanmer #0 I did not investigate the locations for the 1A Mthr Scale 49° Dmnd Shield 89 Crystal Key C9 Blood Mesh Robe different type of spells nor the number of songs 18 Giant Fen 4h Bard Bow 8A Tao Ring CA Soothing Balm available to the Bard. To increase the spell IC Mthr Bracers 4B Onnd Helm 8B Stealth Arrows #8 CB Mages Cloak casting capablilities of your magic caster 1D Bardsword 4C Elf Boots 8C Yellow Staff CC Familiar Fen increase their Experience Points and Gold and 1E Fire Horn 4D Vanquisher Fgn 82 Steady Eye CD Hourglass then go visit the Review Board. Increase spells IF Litewand 4E Conjurstatt 8E DivineHaibard CE Thieves Hood known until at a maximum for a particular class. 20 thr Dagger 4F Staff of Lor aa SF Incense CF Surehand Amulet then change class. Class change will reduce 21 Mthr Helm 50 Flame Sword 90 I-ching 06 Thieves Dart Experience Points to a minimum so you will 22 Mthr Gloves 51 Powerstaff 91 White Rose DL Shril| Flute have to go back to camp, save your characters, 23° Mthr Axe 52 Breath Ring 92 Blue Rose D2 Angel's Harp and then, once again, increase their Experience 24 Shuriken 53 Dragonshield 93 Red Rose D3. The Boole #9 Points. Continue this procedure until all spells 25 thr Plate 54 Omnd Plate 94 Yellow Rose D4 Troth Lance are known. Remember to have at least two spell 26 Molten Fgn 55 Wargloves 95 RainbowRose #@ 05 Dmnd Suit casters because one will have to become a 27 Spell Spear 56 Wizheim 96 Magic Triangle D6 Omnd Flail Chronomancer and that character will forget all 28 Shield Ring 87 Dragonwand on ik O7 Purple Heart other spells. 29 Fin's Flute 58 Deathring 98 Hanmer of Wrath D8 Titan Bracers Now that you have an INVINCIBLE 2A Kael's Axe 59 Crystal Sword #0 99 Ferofist'sHelm 09 Eelskin Tunic BARD you can go kick some #@%*&. 2B thr Arrows 5A Speedboots 9A x DA Sorcerer's Hood However, be careful you don't over develop 2C Dayblade 58 Flame Horn 98 x OB Dmnd Staff your character or he/she will turn into the 2D Shield Staff 5C Zen Arows 9C Helm of Justice OC Crystal Gem BIGGEST BORE in Skara Brae. 2E Elf Cloak 5D Deathdrum 9D Sceaclu'sCloak DD Wand of Force May your adventures always be profitable. | September COMPUTIST #59 19 A.P.T. for... Thief of Fate (Bard’s Tale III) Thaven’t played the first two games in the “Bard” series, but when I read the cover of Thief of Fate and noted that the graphics were so “real you’ll want to tickle the dragon's chin” and that the game was unprotected, I couldn’t resist buying it. I have finished the Phantasie series, and Might and Magic, and didn’t loose interest in these games as a lot of time wasn't taken up dealing with random monster attacks but when my patience had run out with Thief of Fate, I decided to see if I could speed the game up. Previous articles in COMPUTIST (#36, #47, #51, and #55) dealt with the first Bard’s Tale program. Thief of Fate comes on ProDOS disks with ProDOS version 1.4 (I’m not sure if companies are allowed to provide disks with a patched (as suggested in Open-Apple magazine) version of ProDOS). The program is encrypted (or perhaps compiled?) however so that you can not read the disks. The character disk can be changed to modify your characters so that you can deal with monster attacks quickly. Joe Montano’s article in COMPUTIST #36, page 16 (The Bard's Dressing Room) does not strictly apply because of the different operating system used for this version, but there are many similarities. All of the characters you create are stored on track $22 of the character disk you make by copying the character disk supplied (the original disks had these on track $0). They are stored two per sector starting at sector $OE and going down to sector $0@. When you save a game, the characters are stored on track $21. In each character sector, bytes $0@ and $80 begin the name of the character or party, and as far as I can tell, you can modify each character directly without having to worry about the checksum routine mentioned in Joe Montano’s article. While the game instructions state that there is a ‘‘starter dungeon’’ to ‘‘bring you up to speed’’, I believe that tl formation coupled with the use of a sector editor will take you over the speed limit! The following attribute list is the combined work of Thomas Rapheld, Brian Symonds and Harold Day. Since their letters were close to identical, we decided not to print separate lists. Any errors are probably my typos. Combined list - Attribute Locations 90-OF 80-8F Name of Character 16 90 = Strength Wo 91 Intelligence (10) 1292 Dexterity 13° 93 Constitution 14 94 Luck 15-18 95-98 Experience 19-1C 99-9C Gold 1D-1E 9D-9E Current Level 1F-20 9F-AG Max Level Attained 21-22 Al-A2 Hit Points 23-24 A3-Ad Condition 25-26 A5-A6 Current Spel| Points 27-28 A7-A8 Max Spel| Points 29° AQ Class: 80=Warrior, Ol = Wizard, 02 = Sorcerer, 03 = Conjurer, 04= Magician, 05 = Rogue, 06 = Bard, 07 = Paladin, 08 = Hunter, 09 =Monk, OA = Archmage, OB = Chronomancer, OC = Geomancer, #0 = Monster, BE = tl lusion Race: 00 = Human, 01 =Elf, 02 = Dwarf, 03 = Hobbit, 04 =\-Elf, 95 = \-Orc, 06 = Gnome Sex: 08 = Male, 01 = Female Character's Picture: 21 =Male Fighter, 30= Female fighter, 36 =Male Wizard, 37 = Female Wizard. (There are many pictures to pick from. Enter Hex #'s from @O-FF to experiment. This byte will not affect the playability. Have fun by randomly changing the Byte.) Health: 00 = Good, @1 = Poisoned, 02 = Old, 03 = poisoned, 04 = dead, 05 = dead and go to Adventurers Heaven anny Armor Class (lowers the initial armor class of the character before normal armor is worn). 38-53 BO-D3 Items carried_the 12 items that each character can carry are Stored in groups of three bytes with the first byte meaning unequipped ($00), equipped ($1), can't use ($82), or special characteristics (for example $08 means the enchanted water of life), the second byte giving the item itself, and the third byte giving the number of times the item can be used. 54-5D D4-DD Known Spells (Archmage) 5E-60 DE-E@ Known Spells (Chronomancer) 61-63 E1-E3 Known Spells (Geomancer) 64 £4 Critical Hits (Hunter) 64-66 E4-£6 Rouge Abilities 67-68 E7-E8 ? $69 $£9 Multiple Attacks 2A AA 2B AB 2 OAC 20. AD 2E AE 2F AF Harold Day @® I have a question for John Wiegley, in his A.P.T. for Wizardry III. 1 couldn't get my party to load in the tavern after I made the edits. Do you have any suggestions? A.P.T. for... Bard's Tale IIT Electronic Arts @ Requirements O Bard's Tale Ill, and Character Disk G Sector Editor (1 used Copy II Plus) T've been visiting the ‘*back side’’ of my character disk for Bard’s Tale III, Thief of Fate, and have determined the location of the attributes and other good to know things. The Bard's Tale III is an entertaining game and hopefully this will help you enjoy it. If you have filled all character positions on the disk your character names begin on track $21. Search with your sector editor until you find your character’s name. (See combined list of attribute locations.) Experience points are written backwards and I’m not sure of the formula used to get the needed results. Gerald y' Thave subscribed to COMPUTIST for six months, and vowed not to write until I had my first crack to contribute. As it turned out, my first crack was the Ic Utilities Disk to work on my Laser 128, and I considered it too trivial to send in (although it was a good learning exercise), because almost any other Utility is far superior to this one. Then, lo and behold, Larry Hough requested this very information in COMPUTIST #54 (Page 29), so I have run out of excuses! But first, a few words regarding other miscellaneous items. Miscellany #1 COMPUTIST #54 arrived the same day as another magazine I subscribe to called R/C Soaring (Radio Controlled Model Gliders), and the Editorial was about the same thing as COMPUTIST’s - lousy mail service and customers not receiving issues that had been sent. Maybe the raise in Postal rates will improve service. (Just kidding!) At any rate, I was really struck by the identical editorials in two very different publications (except both are bulk-mailed monthly), and just wanted you COMPUTIST #59 September to know you are not alone - not that it helps when an irate customer is on your case about magazines *‘not mailed’’! Isn't that the truth. We had a First Class subscription that kept being returned as undeliverable. It took a trip to the local Post Office along with some already delivered mail for that subscriber to convince the postal service that he was real and so was his address. Miscellany #2 Your little note on ProDOS to DOS 3.3 for sending material to you (COMPUTIST #54, pg. 26) should be put in the “When Writing a Letter to Apple RDEXed”” in each issue - I have also been holding off writing because I don’t have a DOS 3.3 word processor - dumb! Of course I can convert a ProDOS text file to DOS 3.3 with good old Copy II Plus. I am happy to be one of your volunteers! Twenty years ago, I was a systems analyst on a mainframe, left the city to return to the country and only got back to computers a year and a half ago with a Laser 128 at home and a llc at the community center office. (Interesting sidelight - the Laser, IIc and any other 128K machine has as much ‘core’ storage as the IBM 360-65 that I worked with as part of a large staff.) The first year with a home computer, I read A+ and Nibble and those types of magazines. Then, I discovered Scarlett, Open- Apple, and COMPUTIST, and can let the subscriptions to the others go by-by. Last Miscellany I frequently see letters or bits of articles in COMPUTIST where someone is complaining or requesting a different ‘mix’ of articles - i-e. more beginner's stuff or less beginner's stuff; more stuff on hardware or stop taking up space with hardware articles; etc. ad nauseum. | think you have a pretty good mix - I would prefer more stuff on application software and less on games (though I play games, too) and more Reviews, but I have finally got the drift that COMPUTIST is very much reader-written. So if I want more of ‘my’ kind of stuff, T can probably start by writing and sending some in to sort of get the ball rolling. One thing I hope very much works out is the IBM RDEX. To those ‘*8-bit forever’’ Apple freaks who have expressed displeasure at this development I would say, “Lighten up". Granted, the IBM world of poor mis-guided souls is stuck with the most vicious ‘user- fiendly’ interface (MS-DOS) ever invented by the mind of man (and the man who invented it is America’s youngest self-made billionaire - proving how many masochists there really are in the IBM world), and granted it is a different world than the one in which we, Apple and Apple clone people, dwell. However, we have everything to gain and nothing to lose with an IBM RDEX, because if it takes off, COMPUTIST will be a much healthier magazine for it, and WE will benefit. The ‘Apple hacker crowd is of limited size - adding the IBM hacker crowd will provide enough subscriber base to keep COMPUTIST economically healthy and in business (hopefully), and our favorite magazine will continue to survive. (Besides, my oldest son in grad school is stuck with an IBM Clone!) Non Miscellany Right up front now, COMPUTIST is the single best ‘textbook’ I have come across for helping me understand this neat tool called a home computer. If you can spare the space, I would like to thank some of my favorite and most helpful teachers. Thank you Greg Poulos and Clay Harrell for many clear articles, Joseph Weeks for his explanation of boot code tracing in COMPUTIST #32, Ray Darrah for Super IOB and explanation of same, Peter Rongays for his really excellent explanation of his crack of the ProDOS version of Sensible Speller in COMPUTIST #16, and last but certainly not least, Jim Hart for his many articles AND his (Gy) “absolute reset’’ for the Laser 128. The (GM) tip is, for me, worth the price of a year’s subscription all by its little ol’ self - the rest of the stuff is gravy! It doesn’t work every time, but it works often enough to be one of the best learning tools I have on my Laser. Thanks Jim, and the rest, for being my teachers. And thanks, too, to James Mahr and his crack for Award Maker Plus, which is the one that finally worked to produce a back-up copy for me (COMPUTIST #52). No need to apologize for the lack of ‘de-protection’ sir - most of us are looking to protect our software investment with a working copy, while the original is stored in a safe place. What a running epic Baudville’s Award Maker Plus has had in COMPUTIST. Jim Hart's offering in COMPUTIST #48 (copy your ProDOS to new disk and copy off files on'side A); followed by Jon Bernhardt’s sector edit crack in COMPUTIST # 5; followed by Edward Teach’s ‘Those cracks didn’t work but this sector-edit will’’ in COMPUTIST #52. None of those cracks worked for me, either, and I was really able to sympathize with Bud Myers (no relation that I know of) and his ‘cranky letter’? - with reprise in COMPUTIST #54. Meanwhile, Baudville announces that as of January of this year, they are no longer going to copy-protect their application programs, including Award Maker Plus! Much sound and fury ending in a whimper,

Showing the first 100000 of 269697 characters.

mp.ls