26) Type < D 550E > and cursor-down a few bytes. You should see a
dongle-check routine that looks like:
550E LDA $01
AND #$30
ORA #$8C
STA $3A4E
The byte we changed using the DISK DOCTOR on track 20, sector 1
changed the "AND #$30" instruction to "AND #$20". This
permanently masks out the dongle-bit to a "0" value, so the
computer "thinks" that the dongle is actually in place.
27) Type < D 575D > and cursor-down a few bytes. You should see:
575D LDA $01
LSR
STA $A01F
AND #$0F
STA $A027
The byte we changed on track 20, sector 2 changed the "AND
#$0F" instruction to "AND #$07". This also masks out the dongle
bit from location $01 to appear to be on (0 bit).
28) After all changes have been made, your Tenth Frame disk is
completely broken and the dongle is no longer necessary.
< < < RAPIDLOK PROTECTION REVEALED > > >
Most Commodore users are aware of the standard format that the
1541/71 disk drives read. We can load and save programs, directory
the disk, and perform a variety of other commands. The program
code that knows how to execute all these functions is stored within
the ROM's of the disk drive. Most Disk-Drive Operating Systems are
called "DOS". RapidLok is a recent protection scheme that has
appeared on the disks of some recent big-name producers (Accolade,
Avalon Hill, Microprose...), and uses its own "DOS" system to load
files. RapidLok disks will usually have only track 18 standard
formatted, the rest of the tracks being formatted in the RapidLok
manner. The RapidLok DOS resides in an encoded format on track 18,
sectors 18, 15, 12, 9, 6, and 3. Each time a file is loaded through
RapidLok, a short machine-language auto-boot file loads the
RapidLok DOS from track 18 and stores it in the disk-drive memory
from $0300-07FF. Currently, we know of 6 different versions of
RapidLok DOS. Each relies on the same basic track formatting, but
K.J. REVEALED TRILOGY PAGE [87] (C)1990 K.J.P.B.
<<previous page -
next page>>