9A4C. Start by disassembling $84C0 < D 84C0 > and inspecting the
         code below that address. If the code is clean, it is not what we
         are looking for. Inspect all the returned addresses and look for
         programming that has code beneath it that does not disassemble
         properly (usually you'll find a lot of ?????). You'll find that
         $9626 fits the bill exactly. Here you'll find the decrypter with
         about a sector of encrypted code beneath it.

         3) Because of the no directory files problem, this break
         poses a slight inconvenience. We will have to search the disk for
         the proper place to lay down the break code. This type of loader
         uses a Track & Sector method of loading. You'll find that each
         page in memory occupies its own sector on the disk. Because the
         break code is between $9600 and $9800, we need to record the
         first 5 or 6 bytes from $9600 and $9700 to make it easier to
         locate these on the disk. (Remember these will be the first
         bytes in the sectors they occupy.) Using the Memory command,
         inspect and record the first few bytes in each: $9600= 96 4C E0
         97 4C FB 97/$9700= 40 ED 84 99 01 99 74. Again disassemble
         memory at the decrypter and use the cursor key to scroll down
         through memory < D 9626 >. You must scroll down at least a full
         sector ($9726) and a bit more, until you see clean code again.
         At $9736 you'll find a JUMP to $9744 (4C 44 97). Record this
         information for later reference.

         Working with your original:

         4) Power off and on again to clear memory. Load the original
         disk until the game has started up and again hit the reset button.
         From the Utility Disk, again load and activate the $C000 monitor
         as before. Start disassembly at $9626 < D 9626 >. You'll find
         new code has replaced the previous encrypted code. The key to
         breaking this type of protection is to replace the encrypted
         code with this new code. Disassemble again at $9626 and cursor
         down through memory. At $9736, you'll find the same three bytes
         as we recorded earlier: 4C 44 97. This tells us that the code
         from here on is the same as it was in the unrun and encrypted
         state. Place your formatted work disk in the drive and save the
         new code < S "BLOCK",08,9626,9738 >

         Working with your backup:

         5) Our task now is to transfer the code in the BLOCK file to
         the backup disk in the proper location. Here's the procedure. Power
         off and on again. Load the Disk Dr from the Utility Disk and RUN
         it < LOAD "DISK DOCTOR",8,1 >. Using the - command from Disk
         Dr., search from Track 18/Sector 0 backwards one sector at a
         time. You'll be looking for the Sector that contains 96 4C E0 97
         4C FB 97 as it's first seven bytes ($9600 in Memory) and 40 ED
         84 99 01 99 74 as it's first seven bytes ($9700 in Memory). This

            K.J. REVEALED TRILOGY    PAGE [59]     (C)1990 K.J.P.B.