$97 is in fact zero. If the branch does take place, it will
             cause a jump around the instruction at $0369 which is a JMP
             ($FFFC). This instruction is actually a Jump to a Kernal
             routine that does a system reset, which in turn will crash
             the load process.

          B) The break is now quite simple. We can jump around the whole
             protection check. All that is necessary is to replace the JSR
             C800 with a JUMP around the reset code to $036C. We will
             replace the 20 00 C8 with 4C 6C 03 (JMP 036C). Remember, we
             don't want to allow any protection check because if the
             protection is not in place, the drive hangs up and goes into
             an endless spin. Let's make our changes with Disk Doctor.

          C) Using the converter in Hesmon, find the decimal equivalent
             to 4C 6C 03. In a clear work space type <$ 004C>. The
             decimal value 76 will be returned. The same procedure for
             006C and 0003 will return 108 and 03 respectively. Power
             down and remove Hesmon. From the Utility disk, load Disk
             Doctor and again insert the backup into the drive. At
             Track 18/Sector 1, position 34, you'll find the Prg byte
             for the GM1 file. Place the cursor on the Track pointer at
             position 35 and press  to Jump to Link. You'll be taken
             to Track 17, Sector 1. Starting at position 0 cursor along
             and look for the hex bytes 20 00 C8 (JSR C800) pattern. At
             position 48 you'll find the first byte of that pattern. Use
             the @ key to change three bytes starting at position 48 to
             76, 108, 03 (decimal equivalent). Hit the  key to
             rewrite the sector and then  for yes. Your title is now
             free from all protection and may even be file copied if
             desired.



        COMPUTER SCRABBLE : LEISURE GENIUS

        Procedure:

        Loading the directory of the original disk reveals the GMA
        symbol. A fast copy when booted, locks up the drive and sends it
        into an endless spin. Before starting, make a fast copy using our
        C-64 Fast Copy. Repair the directory according to the step one
        instructions. Be sure to validate the disk and do a log the disk
        as a part of your preparation.

        Working with your backup:

        1) Load Disk Doctor from the Utility Disk, and inspect Track
        18/Sector 1. You should find this sector to be normal. Use the -
        key to go to Track 18 ) Sector 0. You'll find the NAME and ID


            K.J. REVEALED TRILOGY    PAGE [70]     (C)1990 K.J.P.B.

<<previous page - next page>>