o o ;:o o o 00: -a ~ c: ! ~ :::I (j ~ I ~ .ilia o :ro ...0) cc Canada & Mexico $7 u.s.$3.75 ..CD --- Contents' RDEX Contributors •.•...••.•.•..• 23 Chemistry: Balancing Equations 10 PaJ)CrPlane Pilot , 12 . , Chemistry: The Periodic Table 10 PattenlS 12 ·Most Wanted Softkeys •••••••••••23 Cleanwater Detectives 10· PiCtlJJ"eChompers 12 linClassifieds .•.••.•...•..•••..•.•.••... 23 Clock ~ 20 Probability Lab ! •••••••••••••••••••••••••••••••••••••• ~12 ComInunikeys ~ 10 Problem-Solving With Nim 12' The Product Monitor Conquering Decimals (+,-) 10 Rings of Saturn It;) ~ , , Re~iews Conquering Decimals (X,/) 10 Space Station Freedom 12 Quest for Clues III 5 Conquering Fractions (+t-) 10 Spell It 20 ~ ~..~.g I '£ i · i f I Wing C~mmanderII: Conquering Fractions (X,f) lO Spellevator ~.' '12 e ~ ~ 10 Conquering Math Worksheet Generator .. 10 Spelling Puzzles and Tests.~ 12 1 ~ losaO·~c::3 Special Operations 1 u u 4 10 ~ Ii: §VJ I Vengeance of the Kilrathi ~.~ 4 , Conquering Percents Spelling Series ToolKit 12 I~ Cog I Fast Frames, Updates, Etc. Conquering Ratios & Proportions 10 Star Maze .•...... : 15 Coordinate Math h ~ 10 Sun & SeasOIlS ' 12 ~~ Apple Materials ~ : 5 l:::t I Decimal Con.cepts ' lO Teaching Scientific Inquiry .: 12 en llgs Disk Fixer ~.'1••••••••••• 5 =.:S~ ~ I l -I Platter Plague? 6 Dungeon Master's Assistant vol2 12 Time Navigator e ••••••••••• 1,2 I w g ; I Tunn.els and Trolls 5 )Early Skills (2 diskettes) 20 Time Navigator Around The World 12

Eq,uation Math...~...... •. 10 Time Navigator Leaps Back 12 I ~ ~ ~ I Tunnels and'Troll~Tavern Talk 6 Estimation Quicksolve I 10 To PreservetProtect & Defend 12 .1 !::l ~~ I ,Vendors •••••••••••••••••••••••••••••••••••••••••••10 Estimation Quicksolve II 10 Type Attack .....•...... 19 \ ,. 1m' ~~ I Bugs: Estimation Strategies 10 W~eds,To Trees ~ 12 I 0 ~..,. I ~ Bug in Captain Goodnight Softkey 15 Exploring Gas Laws ~ lO What's First? WhaCs Next'! 20 / ~ 1:2 6' I Bug in Gorgon Softkey 15 Five-Star-Forecast ·..- 10 Wo

Bill Budgets SpaceAlbum 18 ~ I ~ I Mystery Matter 12 F-15 22 m I Borg 18, 19 Wherein U.S.A. is CarmenSandiego? 22 I ~I I Mystery Objects o. 12 ~..; ...... •..~ Software recommendations "Assembler". Most of the source code in older sending source code files, and you are not using issues is in S-C Assembler format. If you use a the S-C Assembler, send them as normal text TheStarter Kitcontains mostofthe programs different assembler, you will have to translate files. that you need to "Get ~tart~d". In addition, we portions of the source code into something your recommend that you acquire the following: assembler will understand. When to include a printed letter Charles R. Haight Editor - Applesoft program editor such as "Global Don't include hardcopy (printout) unless: Jeff Hurlburt Reviews Program Line Editor (GPLE)". Dave Goforth BBS -Assembler such as "Merlin/Big Mac". a. You are writing aboltt"a bug or other printing -Bit-copy program such as "Copy IT Plus", error. COMPUTIST is published by· SoftKey "Locksmith" or "Essential Data Duplicator". b. You are writing to ask for help. Publishing. Address all inquiries to: -Word-processor (such as AppleWorks). c. You are answering another readers help re.. COMPUTIST -"COpyA", "FlD" and "MUFFIN" from the quest. 33821 East Orville Road DOS 3.3 System Master disk. Eatonville,·WA 98328-9590 d. You are writing about your. subscription or (206) 832-3055 Super lOB and Controllers sending an order for back issues or software. - COMPUTIST does NOT purchase editorial This powerful deprotection utility (in the Bugs, requests for help and answers to re.. material. The entire editorial contentconsists COMPUTIST Starter Kit) and its various Con­ quests for help are bwnped to the head ofthe line of information submitted to COMPUTIST trollers are used in many softkeys. (It is also on and go in the very next issue. All other l~tters are for publication in the shared interests of all ea~h Super lOB Collection disk.) printed in the order· that we receive them. COMPUTISTs. - Unsolicitedmaterial (manuscripts, letters to Reset into the Monitor Writing to get help the editor, softkeys, A.P.T.s, playing tips, questions, etc.) are assumed to be submitted Softkeys occasionally require the user to stop When writing to request help, be sure to as letters-to-the-RDEX-editorfor publication the execution of a -copy-protected program and include ALL relevent information. The more with all and exclusive rights belonging· to directly enterthe Apple'ssystemmonitor. Check information you include" the easierit is to find a COMPUTIST. the following list to see what hardware you will solution. There's an old saying ·tbat goes "A - Entire contents copyright 1990 by SoftKey need to obtain this ability. properly framed question includes 90% of the 'Publishing. Allrights reserved.Copyingdone Laser 128: Your ROM includes a forced answer". for other than personal or internal reference jump to the monitor.. Press ctrl return reset. (withoutexpress written permission from the Apple n+, lie, compatibles: 1) Place anInte­ How·to get mail publisher) is prohibited. ' ger BASIC ROM card in one of the Apple slots. If you are interested in receiving mail from -TheSoftKeyPublishing assumesnoliability or responsibility for the products advertised 2)Use a non-maskable interrupt(NMI)card-such Correct the lines where the checksums differ. other readers, be sure that we have a current in this newsletter. Although we are usually as Replay or Wildcard. address. If you .use a pen name and want to pretty much in agreement, any opinions Apple 11+, compatibles: 1)· Install an F8 Writing to the RDEX editor receive mail, we need to have your address. Our ROM with amodified reset-vector on the com­ readers privacy is important, so we will not print expressed by the authors are not necessarily RDEX (are-decks) stands for: Reader's Data those ofCOMPUTIST magazine or SoftKey puter's motherboard as detailed in the"Modified your address unless you specific;lly say too. ' EXchange. We priilt what you write. When you Publishing. ROM's" article (COMPUTIST #6 or Book Of send in articles, softkeys, APTs, etc., -you are SoftkeysIII)orthe"DualROM's"article(COM­ How to write to RDEX authors SUBSCRIPTIONS: Rates (for 8 issues): submitting the~ forfree publicationinthismaga­ PUTIST #19). U.S $24 CanadalMexico .. $34 zine. RDEX does not purchase submissions nor When writing to one ofthe RDEX authors. Apple lie, Ilc: Install a modifiedCD ROM on U.S. 1st Class .. $34 Other Foreign ..... $54 do we verify data submitted by readers. If you Write your letter and seal it in an envelope. Put the computer's motherboard that changes the your return address, the authors name (as it • Subscriptions are sold by number of issues discover any errors, pleaseletus know sothat we' open-apple ctrl reset vector to point to the moni­ appears inRDEX) andthe correctpostage onthe and not by month or year. An 8 issue may inform our other readers. tor. (This will void an Apple IIc warranty since envelope. Putthis envelopeintoanotherandsend subscription means that you will recieve 8 Remember that your letters or parts of them you must open the case to install it.) it to RDEX. We will put the correct address on issues before you need to renew. It's when maybeusedinRDEXevenifnotaddressedto the Apple Ilgs: Ifyou have the2.x ROM, there is you will receive each issue that we're a little RDEX editor. Correspondence that gets pub­ your letter and mail it for you. Check to the right a hidden Classic Desk Accessory (CDA) that erratic about. lished may be edited for clarity, granunar and ofthe authors name to see ifthe author is writing allows you to enter themonitor. Inorderto install -from a foreign CO\Ultry and include the proper - Domestic Dealerrates: Call (206) 832-3055 space requirements. the new CDA, you should enter .the monitor for more information. BecauSe of the great number of letters we postage. (CALL -lSI) before running any protected pro-, - Change Of Address: Let the U.S. Postal receive apd the ephemeral and unpredictable grams and press # return . This will tum on two Serviceknow thatyou are moving. Tell them . appearance of our vohmteer staff, any response HelpLine hiddenCDAs, Memory Peeker and Visit Moni.. that you want your mail forwarded. If your to your queries will appear only in RDEX, so it tor. Thereafter press openapple ctrl esc to go to These r.eaders have volunteered their tnne to issue does not come to you in an envelope would be more approPriate for you to present the DeskAccessoriesmenu. SelectVisitJAonitor help you. Please call only within the given time then you have a regular subscription and you technical questions to the readers and ask for musttell the USPS to forward your third class and there you are. Use ctrl Y to exit. frames (corrected for your time zone). Nocollect their responses which will then be placed in the mail. Notify us as soon as youknow yournew calls. (You can write anytime!) Apple-RDEX. address. When we receive your notice of Recommended literature Jack Nissel (Disk Protection, 7-1OPM EST) change of address, we will send you an -Apple n Reference Manual (or II~, nc, etc.) How to get a free library disk (215) 365-8160 acknowledgement card. Ifyoudo notreceive -DOS 3.3 & ProDOS manual Marc Batchelor,6025 Coker St., Cocoa, FL the acknowledgement card after 2 weeks, Whenever possible, send everything on Ap... -Beneath Apple DOS & Beneath Apple Pro.. 32927 send another notice or call us direct pIe fonnat (5.25" - DOS/ProDOS or 3.5" - Pro­ DOS, by Don Worth and Pieter Lechner, from Rich Etarlp, 824William Charles Ct #2, Green DOS) orIBMformat (3.5") disks. Other formats Issuesmisseddue tonon-receiptofchange Quality Software Bay, WI 54304-4018 ofaddress may be acquired at the regular areacceptablebuttheremay be somedelay as we back issue rate. Typing Applesoft programs look for someone to translate it for us. (Ifyo", use TheBBS We are not responsiblefor missing issues a 5.25" disk, when we print your letter,we will (Bulletin Board System) 90 days after mailing date. If you do not BASIC programsare printed in a format that return your disk with the current'library disk, receive an issueatthe usualtime each month, . is designed to minimize errors for readers who copiedontoit.) Use whatevertexteditoryou like, Dave Goforth is the sysop for the Computist please call or write. key in these programs. If you type: but tell us which one. Puta label on the disk with BBS. The number is: (206) 581 ..9292. If you Apple~ is • trademark of Apple Compu.tcn. IBM~ is the IBM lOHOME:REMCLEAR SCREEN your name (o~ pseudonym) and address (if you ,already have a User ION and password, sign-on trademark. want to receive mail). Don't reformat any pro.. using the User ION. Ifyou are anew user, itmay The LIST will look like: grams or include them in the text of your letter. take a day or so to validate your new 10# and 10 HOME: REM CLEAR SCREEN Send Applesoft programs as normal Applesoft password. Readers Data EXchange Applesoft inserts spaces into a program list.. ' files·and machine·language programs as nonnal ing befote and after every command word or binary files. We have programs to convert them New COMPUTIST readers using mathematical operator. These spaces don't pose to the proper fonnat for printing. If,you are Apple lIs are advised !o read this page a problem except when they are inside ofquotes ., carefully to avoidfrustration when at­ or after a DATA'command. There are two types ofspaces: those that,have to be key~ and those tempting tofollow a softkey or entering that don't. Spaces that must be typed appear in You have a LEGA~ RIGHT the programs printed in this issue. COMPUTISTas special characters (0). All other spaces are there for easier reading. What is a softkey, anyway? NOTE: Ifyouwantyourchecksumsto match, to an unlocked backup copy

Sofikey is a term which we coined to describe only type spaces within quotes or after DATA \ a procedurethatremoves, oratleastcircumvents, statements if they are shown as (0) charactors. any copy-protection on a particular disk. Once a SAVE theprogramatperiodic intervals using the of yopr commercial software. softkey procedure has been performed, the re­ name given in the articl~. All characters after a sulting backupcopycan usually becopiedby the REM are notchecked by the checksum program normal copy programs (for example: COpyA, so typing them is.optional. Our editorialpolicy is that we do NOT condone software piracy. but we do believe that users on the DOS 3.3 System Master disk). are entitled to backup commercial disks they have purchased. In addition to the security ofa Typing Hexdumps backup disk, the removal ofcopy-protection gives the user the option ofmodifying programs to Commands and control keys , Machine language programs are, printed in meet his or her needs. Furthermore, the copyright laws guarantee your right to such a DEPROTECTED backup copy: Commands which a reader is recfbired to COMPUTIST118 hexdumps, sometimes also as perform are setapart by being inboldface andon source code. ..."It is not an infringement for the owner of a copy of a computer program to make or authorize a separate line. The return key must be pressed Hexdumps are the shortest and easiest format' the making of another copy or adaptation of that computer program provided: at the end of every such command unless other­ to type in. You must first enter the monitor: wise specified. Control characters are preceeded CALL -151 • 1)thatsuch anewcopyoradaptationiscreatedas anessentialstepin theutilizationofthe computer by "ctrl". An example of both is: Key in the hexdump exactly as it appears in program in conjWlction with a machine and that it is used in no other manner, or ' 6etrl P the magazine, ignoring the four-digit checkswn Type 6. Next, place one finger on the ctrlkey ($ and four dig_its) at the ~d ofeach line. When 2) that such new copy or adaptation is for archival purposes only and that all archival copies are and then press P. Don't forget to press the return" finished, return to BASIC with: destroyed in the event that continued possession ~fthe computer program should cease to be key. 3DOG rightful. Otherspecialcombinationkeypresses include BSAVE the program with the filename, ad- ctrl reset and open-apple ctrl reset. In the dress and length parameters given in the article. "Any exact copies prepared in accordance with the provisions of this section may be leased, sold, former, press and hol~ down the ctrl key then or otherwise transferred, along with the copy from ~hich such copies were prepared', only as part press the 'reset key. In the latter, press and hold Typing Source·Code of the lease,sale, or other transfer af all rights in the program(. Adaptations so prepared may be down bothctrl and open-apple then press reset. transferred only with the authorization of the copyright owner.tt The source code is printed to help explain a program's operation. To enter it, you need an upited States Code title 17, §117

2 Readers Data Exchange COMPUTIST #84 Features, Notes & such: Math Facts Tracker 16 Measureworks · 12 A fix for "Putting... Super Boulder Dash MECC 3.5" ProDOS disks 10 on a Hard Disk· 8 • MECC Outliner 12 C/) An ELITE Craft without NMI 6 • Miner's Cave 14 :::) Boot code tracing Star Maze 15 Minotaur 20 .EZ APT's with Compare Disk program 14 Money ~ 20 . Notes on Hacker II 7 Mystery Matter 12 . Run MECC On Hard Disk 10 Mystery Objects 12 Super Boulderdash APT Explanation 7 Paper Plane Pilot 12 The Basics of](rackingPart 10 10 Patterns 12 WindwalkerGS Editor 20 Picture Chompers.. ~ ~ : 12 Advanced Playing Techniques: Probability Lab 12

Problem-SolvIng With Nim 0.. 12 Eidolon ~ ' 7 Rings of Saturn ~ 16 Elite 6 Space Station Freedom 12 Super Boulderdash APT Explanation 7 Spell It · 20 Bitkeys: Spellevator : 12 Spelling Puzzles and Tests 12 MECC Copy System/Label Utility 12 Spelling Series ToolKit ~ 12 Midwest Software 22 Star Maze 15 Sun & Seasons ; 12 Softkeys: Teaching Sciep.tific Inquiry 12 ~ Alge - Blaster Plus 20 Time Navigator H · 12 Arcade Machine (The) 10 . Time Navigator Around The World 12' Axis Assassin ~ 16 Time Navigator Leaps Back ~ 12 Backyard Birds 10 To Preserve, Protect & Defend 12 Bandits ...... •...... 17 Type Attack 19 Bill Budg'e's Space Album 18 Weeds-Co Trees 12 lJorg ~ ~.18, 19 What's First? What's Next? 20 . . . ~ ,.. Chemistry: Balancing Equations ~ 10 Wood Car Rally 12 Chemistry: The Periodic Table 10 Wooly Bounce : 12 . Cleanwater Detectives ~~ ~ lO . Clock ~ 20 Playing Tips: Communikeys ~ 1.0 Gemstone Healer 7 ...... _ . (;Qnquering Decimals (+,-) 10 Table of Contents Conquering Decimals (X,/) 10 IBM Softkeys: ·.~ Conquering Fractions (+,-) 10 Battle Chess II .22 Conquering Fractions (X,I) 10 Carrter · Comman d ...... •...... 22 RDEX Contributors...... •... 23 Conquering Math Worksheet Generator ...10 • .22 ,Colonel'sBequest . Most Wanted Softkeys 23 Conquering Percents 10 Cont·Inuum . .22 Conquering Ratios & Proportions 10 Crime Wave 22 unClassifieds 23 Coordinate Math 10 C· 1 1 22 nmewave v . Decimal Concepts ~ 10 C f th A' B d 22 urse 0 e· zure on s . The Product Monitor Dungeon Master's Assistant vol2 12 Dragon's Lair 22 ~ Reviews Early Skills (2 diskettes} 20 D'L·ragon s aIr II .22 Quest for Clues III 5 Equation Math 10 EarI ,1.1.yyeaver , s·Baseball v..1 5 .."22 Wing Commander II: Estimation Quicksolve I 10 Earthrise 22 ~ Special Operations 1 4 Estimation Quicksolve" II 10 EFHscape rom e·11 .22 . Wing Commander II: Estimation Strategies 10· F-15 22 Vengeance of the Kilrathi 4 Exploring Gas Laws 10 . Where In· USA.. . IS·Carmen. Sand·lego?...... 22 Fast Frames, Updates, Etc. Five-Star-Forecast ~ 10 Apple Materials 5 Flip Out ...... •...... 19 Ilgs Disk Fixer ~ 5 Fossil Hunter 10 Platter Plague? 6 Fraction Concepts, Inc' 12 Tunnels and Trolls 5 Fraction Practice Unlimited 12 Tunnels and Trolls Tavern Talk 6 Grammar Gazzette 12 Vendors ~ ...... •....•..... ~ 10 Grammar Toy Shop ;...•...... 12 Instant Survey 12 Bugs: Insiant Survey Sampler 12 Another bug in AppleWorks 3.0 22 Invisible Bugs 12 Bug in Captain Goodnight Softkey 15 Keyboarding Klass 16 Bug in Gorgon Softkey 15 Kinder Koncepts 20 ~ Bugs in "Where In The USA Is Carmen LittleTown Zoo 12 Sandiego GS" 22 Living Cell (The) ! 12 Lunar Greenhouse ~ 12 Mastertype's Writer 20

COMPUTIST #84 Readers Data Exchange 3 Once you're in, you're in for the The stakes are high; and the Navy Jeff Hurlburt Wing Commander II: TX duration. For.starters (in the best WWII does its best to see you get the right craft Vengeance of the Kilrathi flick tradition) you have 'something to for each assignment. Even so, in the T'~":"he,~.. prove'. When your old ship, the "TCS thick of some combats you will swear ....:., ., .:' ., :'.:.'.:.: Tiger Claw" was destroyed, you (one of that whoever ordered Ferrets (or Epees, $79.95 for****EGA-VGA 640K PC the few survivors) were held to be partly or whatever) for this mission had to be responsible. The Court Martial fmding crazy! Mainly, you will be assigned a P'RO:DU·C·T· Origin and demotion to captain were, ofcourse, medium orheavy fighter like the Rapier AdLib, Sound Blaster, or Roland unjust; but you could not establish that or Sabre. Sometimes, you'll draw the M:ONIT·O~R. sound, joystick, & 512K Expanded you were delayed by an eticounter with Broadswordheavy bomberand, in 'Spe­ Memory recommended cloakedenemy fighters. (No one in Navy cial Operations 1 you put the Navy's command believes Kilrathi "steaith super secret Crossbow attack bornberto RATINGS fighters" exist!) Some fellow pilots con­ the ultimate test. Occasionally, you fly Wing Commander II: sider you a coward and the Admiral solo; but, .mostly, "you'll have one or Superb Special Operations 1 makes no secret ofhis distrust- which more shipmates as wingmen. Getting ***** explains why you, aflying ace respected the most from their presence is part of Excellent **** by the enemy, are stuck with patrol duty the challenge-sometimes abiggerpart Very Good *** on a behind-the-lines space platfonn. than you imagine. These are people with fo~ $39.95 ****EGA-VGA 640K PC It turns out the 'lines' are closer than abilities, prejudices, and problems which Good ** Origin anyone thought! Soon, you gelto show can produce some real surprises. In­ Fair * you've still got the right stuffand win a deed, so can ~nemy aces like Prince. Poor ® Requires Wing Commander II transferto the "TCS Concordia'\ Great! Thakrath and Admiral Khasra. Bad If- No question about it, defending the because '" Concordia" becomes the Almost always, several outcomes are Defective fledgling Terran-Confederation ofPlan­ prime target in an escalating Kilrathi possible besides outright-success orfail­ + ets (human, nice, peace-loving) from threat to the critical Enigma Sector. ure. Forinstance, avoiding an encounter the sprawling militarist Kilrathi Empire Betteryet, your squadron commanderis with a large fighter group might im­ GD 301: Spring Seminar (tigers, mean, warlike) qualifies as a Colonel Jeanette "Angel" Deveraux! prove your chances of completing the (1IAM session) worthy occupa~on. It's too bad the first ,All business' ·in squad room briefings, mission's main objective, but make for Good morning, students. Despite an­ Wing Commander spends so·little pro­ the beautiful Jeanette still regards you a rougher challenge later on (when the ticipations of impending frolics, I trust gram space upon the story and" support- with an affection which grows even as fighters reappear). Going for an attack we are all prepared for tQday's topics. on a capital ship no one expected ·to First, as scheduled, "EveryGame Needs encounter could make fmishing a mis­ It". sion impossible; yet, pottingitmay great-· Toward the end ofour last meeting, I ly improve the strategic situation for asked you to tum in one or two ideas as Earth. Part of the realism and excite­ to what "if' is. According to my tally, ment ofplay comes with the freedom to "Good graphics and sound", and "user make risky command decisions which friendliness" were the big 'vote-getters', can.affect othercharacters, the course of followed closely by "good documenta­ the war, and story content. A yery bad tion". Alas, while these-features, along decision, getting yourself killed, or too with "speed", "attractive packaging", many non-fatal failures in arow ends the etc., are frequently important, we can game. You;will get to see the awful easily come. up with exceptions. For result (e.g. the "'Concordia"isdestroyed, instance, mostofyou enjoyed Infocom 's the Kilrathi sweep on to victory, etc.); text-only "Enchanter" trilogy. then, you must restore a saved position The closest response was "Meaning­ (one ofup to eight) or restart. fulness"- decidedly ambiguous, but," I Happily' for newco~erst the game think, you have the right idea. What does not assume W~l experience or, every game needs is "Purpose", some­ ing characters. As a TCP Navy pilot, disaster looms and each mission be­ even, any particular combat simexper­ thing you find in the game which makes you mainly just fly one mission after comes more perilous. tise. Nor must you pour over the "Play playing 'feel' worthwhile. Hot-sticking .another-sort oflike stringing together The clincher is that the feeling is Manual" or study your copy of"Joan's arcades, for example, employ the oldest all of the Briefmg Room and combat mutual. When, in the briefing for what Fighting Spacecraft" before getting into trick in the book: they teach. We all takes from a WWII carrier war flick, promises to be a particularly dangerous action. The games'sdesignersknow you enjoy learning-really, we do; it's only pretty dry stuff. I can not really blame battle, Jeanette announces that, due to a won't anyway; so, the first mission is when classroom instruction, etc. fails to Baywoof, who bought WC 1(before the shortage·of pilots, she is going to be easy enough to finish withbarelyaglance help us learn and develop that we start to review appeared), for bailing out after flying and as your wingman-well, you at the controls "Reference Card". Later believe that "learning" is boring. Well only four missions. will feel like telling her to stay on board missions reflect a similar willingness to designed arcades teach all kinds ofcoor­ Wing Commander II' does it right. and do 'squadron commander stuff'. 'ease off' a bit when the player pilots a dination skills; and, in fact, practically Instea,.d of 'a space combat game play­ You won't; (you have no direct control new craft, first attacks a capital ship, every decent game exercises a host of er', you become a space combat pilot. It of the dialogue); besides, she's right etc.. problem-solving abilities:Ifyou'rechal­ starts with a 256-color movie-style in­ about needing every available pilot, and It's an approach that works. Wing lenged by a puzzle, a maze, a combat troduction-- you see and hear the Kil­ Jeanette is one ofthe best. Rivalries and Commandercombatsavvy is 20% quick­ situation, or whatever, it's a cinch that rathi emperor announcing his detenni- . friendships, the presence ofan unknown stickingcoordination and 80% 'smarts'. success means you have learned some­ nationto crush the upstarthumans, com­ Kilrathi sympathizer, sabotage, a dead-­ Mission after mission, both areas get a thing. plete with speech and stirring back­ ly struggle for power among the Kil­ good workout so that getting used to People play games for fun. Overc

4 Reade,s Data Exchange COMPunST184 the 3-Dimages ofships,missiles, (aster- gram, about 15MB plus another one or get, complete and thoroughly annotat­ will be supported by users much like oids, mines, etc.) are continually updat- two MB for the SOl supplement; but, ed. The same goes fOfcharts and tables, classic automobiles. We'll be here to edtopresentthe rightsize and angle vis- there is no excuse for such an un-fun whether it's "Space,Rogue'''s Places, ~elp the Apple II community in any \Yay a-vis the player. start to such a finegamihg experience. People, and Items, Spells and ingredi- we can...." Combat sound effects rate "pretty (Incidentally, when installing you do ents for "Keef''', or "'Magic Candle" good"; there's plenty ofroom formore not select the "Save Space". unpack- Teleporter Combinations and Chants. Dgs Disk Fixer variety and 'sock'. The same applies to during-play option- play is far too QFC 'delivers the goods"and, with il- Speaking of "classics", our trusty,. weapons visuals. Your silvery mass slow.) Detennined to avoid a repetition lustrations plus good use of font sizing "Woz" edition IIgs still gets plenty of balls, lavender plasma bolts, etc. s~l incasereinstallationshouldbe required, and grey-bar highlighting, does it in a use. However, it developed a severe into targets and 'splash' the shields; but I· saved the hard disk files, using PK~ handsome, easy-on-the-eyes package. 'fuel line problem' some weeks back, you- never actually see a hit munch a Ware's "PKZip" ~tility to do the com- 'The book does not claim to supplant when one ofits two 3.5" drive's refused . wing or hole the fuselage. (Ship explo- pression, and got everything onto seven game manuals. Itdoesn't; thoughitwill, to read diskettes. This time, popping in sions, however, are quite gratifying- diskettes. Loading the game from these often, prove a valuable addendum even. a Head Cleaner diskette did not restore lots -of churning fire and debris.) diskettes (including 'unpacking) takes' when you are not especially looking for functioning. After five years.of faithful Throughout, insults traded with enemy about fifteen minutes! hintS. Forexample,justkeeping trackof selVice, the heads were gone. (I tempo­ pilots add to the fun; and, via an SOl Wing Commander_II is unique. An "Neuromancer'''s Database lo.cations, rarily swapped in the head assemqly editor utility, you can' now create your objective outsider might easily walk by codes, passwords, andcontents is amajor from the 'good' drive to verify the prob­ owntaunts. As for the music score skill- a trade show both, watch someone play, cho~. QFC organizes everything -in a lem. Sure enough, now the "bad' drive fully threaded through botl] combat and for a while, and walk away certain that' handy one-page table and adds three . worked fine.) story segments, it ,rates an unqualified he orshe had the game 'pegged': "Obvi- pages ofcharts listing AI strengthlevels Checking around to obtain the re­ "excellent"! ously, the attraction is, the combat ar- and weaknesses, ICE Breaker ratings placementrevealed achallengeofgreater All in all, 'leading edge' stuff; and cade. Themusic and story stu" a nice with locations, and functions of Chips, magnitude than first anticipated. Evi­ that usually means it's time for cfspeed fnll.Too bad there's no scoring orHigh Objects, and other Software! dently, nobody sells Apple IIgs (Sony) check! Origin recommends "16MHz Scores roster." You will know better. As a game buying guide, QFC rates, 3.5" head assemblies, certainly ,not to minimum"; odd, because the number is Thecombat'works' becausethescenm:- at best, fair. One intro/review observes individuals. Apple'sown"NatienalParts bound "to scare off some 12MHz ma:- io'works'andvice-versa.AHighScores that Some '''Azure Bonds" encounters Supplier" tried to help; but it soon be­ chineowners. Yet, 16MHzisso farfroll) ~ster wouldlook silly! Your WC2 and "tak~ hours"- maybe, if you take a came clear ~at the notion of selling being fast enough to show WCcombat SOl encounters are realistic, addictive, 'breakfor lunc~ and recommends it Apple partsto Apple users remains dan­ at its best that 4MHz one way or the fun because combatgraphics and sound for"adventurerswholovewargames"!? .gerous~ynovel,notthesortofthingYou other scarcely "matters. Baywoof, for 'get the job done', the challenge never ~ While most of the sketches are-more just spring on someone over the phone. example, noticed some slowness on his falters, AND because you must win. accurate, criticism i~ unifonnlysubdued 'The usual "repair" for any IIgs 3.5" unit . 25MHz '386. Even on the three or four occasions or, simply, .absent. You can get some consists of replacing the entire drive Mainly, ~ere are two effects: Ob- whendefeatscanforcefive,ten,ormore id'easforgamestocheck'out; but, that's assembly.Around$180-$200seemsto jectssuchasenemyshipsmaymoveless atte~pts-when 'the joy ofcombat' is about it. Remember, the Qook is pub- be a typical "good deal" for the job. smoothly;.and, you may notice delays in wearingprettythin--you'tlsay"There's lished by a majorgame producer. Then, It is fortunate that I dumped the prob­ control response. Displays forthe story- NO WAY to win this thing!" and then too. do you really expect to read "this lem onto the local "Club Apple" BBS. line, take-offs and landings, etc. are not go back for more. Earth, peace-loving game is anearly unplayable, boring tur- Within a day, the sysop (Glynne Tolar) notably affectedbecausethese are all in- Kilra.thi. rebels, your shipmates, and key"justl>efore severalpages are devot- came back with two shops he thought the-can anim~ted sequences. Mostcom- Jeanette are counting onyou., (And, that ed to the game's maps and hints? mightfix the drive: one for $104, anoth­ batimages are generatedon-the-fly. The Prince Thakrath guy is' REALLYarro- Noproblem,. TheBIGreasonyoubuy er for about $75. I called the second more active objects displayed (like gant!)Natunilly, winningthetougitones QFCis"the clues"; and, as claimed, you place. ConnectIt quoted a price of$79; shups. missiles. mines. imd asteroids) is them9st fun oiall.. . ..get'Vl\a!amo~LOa whole collection and.ZAPPO.,the drive was in the mail. and th~ closerthey approach, the longer In a recent radio ·talk·Show ·appear-·~i. of Que Bo.oks. >Someti~s-- SSI is a Within two weeks it was back, checked it takes to process the images. Of the ance (Doug Johnson Show, KP~C).I ':'goodexample-·.themalCer'sbookssup- out 'good as new'; and our IIgs is once testers who have givenWingCommand- mentioned the ,new Wing Commander ply notably moredetail.Someti~es, as more. 'hitting on all fours'! er II a try, only one reported "no prob- . as an actio~ entertainment 'good,bet'. with "Wizardry V~",no Clue Book is How come Connect It got the job lem" with speed in combat. He was "Well,". Doug interjected, "I cantell by. available! Whateverthealternatives, you donefor So muchless? I called againand 'running the game on a 33MHz '486 the way your eyes lightup,ihat you like can count upon QFC for more than spoke with a repairman. He explained system. Yet, I enjoyed the battles play- it. Itmust be a pretty great game." Not a enough coverage to get the job. done. that their approach is to try to fix only ing on a 12MHz '286! Clearly, there is badsummary. Getinto WingCommand- Even if you neeWwant help with just a what is wrong. (Gosh! Whata neat idea. aBIG differe~cebetweenspeedrequire- er II. Expect·a software masterpiece, few ofthe forty games, Quest for Clues No wondertheirprices werelower; they ments for obtaining umaximum'~ and hours of challenging fun, and genuine· III ranks among the best bargains in were practically cheating!) $79 is the "good enough" realism. involvement in "a pretty great game"! adventure gaming. qsual price for replacing the head as- All large games have bugs. With one sembly. (By the way, when your 3.5" exception. the few you encounter in Quest for Clues III . Fast Frames, Updates, etc. drive bombs. the problem is virtually WingCommanderII and its first supple- certain to be dirty or worn'out heads.) ment are minor. For example. on one **** Apple Materials When I asked where/how they got the occasion, an overlay is misplaced in a head assemblies, the CI spokesman de- story segment. On another, I got multi- $24.,.99 8 5" x 11'".softcover, Recently, I called Jessa Vartanian, cIne1· d to be specific. He said' they buy Apple's APDAcontact, tofmdoutabout th b th pIe-exposure. images ofmy craft during 198. pages em y e case; but, that, sometimes, new support products. She quickly re- a landing. The· exception 'hangs' the they are kind ofhard to find. Origin turned a copy o~ the current "APDA game just before la~ding. In a total of Ie· Tunnels and Trolls tho rk h d d·· (. Need helpwith"DragonWars","Cir- Too s atalog"Justcrammed withAp- ** some Ing I e a un re mISSIOns In- pIe and third-p'arty Macintosh products cluding retries after defeats) I ran into cuit's Edge". "Starflight" 1 or 2? What Okay. Onthe one hand I have. gener- this bugjustthree orfour times. Onone about "Usurper.... "Windwalker". or (e.g. Data Access Language 1.3. SCSI· ally.enjoyedNewWorld·sUltima-style encounter. Ihappenedto add"Fl"tomy I'Space Quest III"? Ifit's a major '88- Development Package. CD-ROM De- swords & sorcery adventure ($49.95 for key-press recovery attempts and, voila! '89 vintage adventure. the odds are the veloper'sLab....). Obviously. ifyou are CGA-EGA 640KPC). Setonthe 64 x 96 a Mac user, APDA has a lot to offer. Drag'on Conti·nent seas and l·sles T&T instead ofhaving to re-boot, 1was back solution iS'in Origin's Quest for Clues " ., There were also some IIgs listings; so, I sendsyourdauntless foursome onaquest in the game! Origin believes I may have III. ' gotten a diskette with a badly copied Each ofthe forty entries begins with asked for review copies of two GS/OS to squash an evil wizard. free an en- file. (They mailed a free set of replace- abriefoverview/mini-review;but.from references. Tessa forwarded my request tombed arch mage. and toppl~ a demo­ ment diskettes.) Perhaps. In any case. I then on. format is tailored to fit the . to Apple's PR ace. Keri Walker, who ness named Lerotra·hh. The game of- . fOlWarded it to Tom Weishaar at Re- ~ers an s all · h · f·· t continued play with the original instal- game. Sometimes, as in "Loom'''s sec- 11 unu u ync ffilXO mlnl-ques s lation and never encountered the bug tion. you'Ugetvirtuallya 'walkthrough'; source Central! and personages spanning several cities. again. while. for "Wizardry V'''. the emphasis Tom mailed the references along with castles. dungeons.. and mines., In 640 x Thebiggest"bug"isnotreallyabug is upon puzzle-busting; and '''Azure a cover letter: "... As you may have 40016-colorEGA.yourpartyshowsas heard, Resource Central is now the offi- a sl·ngle hero figure' on the partl·al per arall; it's a design flaw. For some rea- Bonds" coverage highlights key events -- son. WC2 supports both VGA and 16- and encounters. You can expect clear. cial distributor ofApple's Apple II ma- spective. top-downdisplay used for city color EGA; this. despite the fact that easy-reading descriptions throughout terialsthatwereformerlysoldbyAPDA. and maze explorations. When moving VGAhasbeen'standardstuff' for some with. as usual. simple alphabet-shift Inaddition.wehavevirtuallyeverybook between cities. exploring the country­ time. (Besides. playing the game inany- encodingofcriticalwords to avoidinad- in print about the Apple II (and we have side. etc. you 'guide a dot on the terrain thing but 256-color VGA is unthink.- vertent spoilage of puzzle challenges. the last remaining stock of books that map. Fully a third of the screen is re':' able.) As a result, installation must both (The code-b = a, ..., a :;: z-is listed in willbe 'outofprint' when ourstocks are served for displaying the well-written, unpack and process files to lmid the the book.) gone)., -unusuallyverboseprosepassageswhich game to hard disk; an ordeal spanning As owners of earlier QFC's can at- "We think. Apple II's will be used in accompany the numerous special situa- ,eight 3.5" HD diskettes and well over test. coverage goes far beyond mere America'seducationsystemforyeaisto tions you encounter. Other notable fea­ two HOUrs! Granted. this is a large pro- clues. Ifmapswill help. it's maps you come. They are classic machines and fures include full self-mapping. quick

COMPUT1ST#84 Readers Data ExcHange 5 Save!Restore, decent monster variety, Then you move on toward the east wall optimistic. If your 'old' drive starts to Michael A. Horton WA fairly good weapons system, some clev­ S-E-E-N-E-E-E-E-S-E-S-S. Next, you act funny, don't be too shocked. Get er ideas for magical artifacts, ·adequate go westward W-W-N-W-W-S-S-W-S­ ready to invest in a new unit and, prob­ ® Does anyone out there have the PC sound, ·an attractive manual, and a S.Then, back east E-E-N-E~E-S-S-E-S ably, a new controller board. instructions for KORONIS RIFf? My colorful fold-out map. . and, viola, you're in the treasure room! set got lost one ofthe times Imoved and On the other hand, the -game is beset "Yeah, that was Gorbash. He, Igmo, Next I really need some instructions. by decidedly alien-looking hero pic art­ and the rest ofhis bunch were up around SSI's Pools of. Darkness is guaran: work, numerous potions and artifacts Level 12 when Gorbash figures 'Why teed PLUS exclusivehints forthe game's An ELITE Craft .•. with vaguely defined properties, amag­ not head north and clean up on the dire ultra-difficult Final Showdown battle! without NMI ic system padded with many spells you wolves?' Damn things just kept com­ Then, too, .... will never use, cramped single-screen ing; and Experience kept climbing! Igmo tactical combat, and cumbersome ter­ claims everybody gained four or five rain map movement To which you can Levels!!" add swarms 'of non-fatal bugs. For in­ "Ain'tnobody ever gon.e wrong buy­ stance, you will encounter occasional in' a round for old Yurdlin (slurp!). text over-scrolling which hides useful Now, you're a new bunch, itchin' for infonnation; the Red Orc mini-quest questin' but short of 'das geld', right? which, if you first meet the chief after The place to gc;> is the Gull sewers; the rescuing his daughter, permits ripping one to see is the Wraith. He plays dice hi/ off endless quantities of gold; a glitch 10 and pays off in gems (and Experi­ which delays journeys past Castle Over­ ence)! You can ·play game after game kill, even after it's liberated; items in­ and build up quite a tidy- bankrQIl. correct!y identified as "useless"; and a 'Course, losin' is fatal; but, a savvy good "Dreams ofthe Dragon"clue book bunch like yours should be able to figure ($19.95) with numbered references to a way around that. (slurp, glub) Later, Jeey locations but no numbers on the once you've got to where you can swat maps!? wolves like flies, head for the Arena in Aside from boosting Experience and Khazan and signeveryone up for the 10­ character attributes, much of what you combats contract. If you don't walk out Vendors Advanced Playing Technique for... can accomplish (good deeds, rescues, with a couple hundred thousand denars, di~ct Elite missions, etc.) will have no bear­ my name's not ..." APDA: Apple Computer ing on your quest to rid the lands of MS 75-2C ? Platter Plague? Lerotra'hh. Yet, some achievements are 20525 Mariani Avenue When I saw the APr for ELITE in critical; and telling one from the other is "Mean Time ·Before Failure" num­ Cupertino, CA 95014 issue #70 I was happy, but as I readltmy not always so simple. This 'looseness', bers for the average hard disk would atten: Jessa Vartanian, (408-974-0091, happiness began to fade. I soon found and a relatively modest tactical chal­ seem to guaranteed. useful operation for orders: 800-282-2732) outthis APrrequired some waytoenter lenge' mean you have to enjoy mini­ several years. Why J then, do I keep APPLE COMPUTER the monitor while the program is exe­ quest do-gooding, note-taking, and ex­ running into users with failing 2-3 year­ MS 48-1 cuting. I have no way to do this so I ploration a lot to get the most from old drives? 20525 Mariani Avenue couldn'tuse the APT the way itwas, but Tunnels & Trolls. The most frequent complaints are Cupe,rtino, CA -95014 it did give me a nice place (and some Tunnels and Trolls Tavern Talk motor-related, beginning with notably atten: Keri Walker (408-974-2042) good incentive) to start. more noisy operation. Our own· 40MB Rumor-wise, your stop at ''The Tun­ CLUB APPLE Since Jeff Hurlburt didn't list any of MFM drive has begunto produce squeals P.O. Box, 5338 the code at the locations he was modify­ neling Troll" has produced surprisingly after barely 18 months. Annoying, but picki~gs. Pasadena, TX 77508-5338 ing Ihad to look for myself. I got ELITE slim Everyone seems content we're still better offthan users whoJlip with small talk and swilling the fine Attn: Glynne Tolar .(713-476-9998) booted up and running. Well, I have an on the power and find that .!he drive Rock Dwarfbeer. You'reonthe way out CONNECfIT Apple lIe and no way to enter the mon­ simplyfails to start.(i.e.."Itdon'twork!") itor, so Ihave to reboot and then reset the (to try things over at ''The Dragon's Apparently,- temperature makes· a dif­ 2026 W. Pioneer Parkway, Suite B-7 Dream") when, at last, you overhear computer. I do this by pfessing the fol­ ference- good to know if you need to Arlington, TX 76013 something of interest... Attn: PR/Mktg. (817-461-9400) lowing keys: control, open apple, reset. back-up your stuck drive prior to re­ I then release the reset key and then.the "All you new guys make the same placement. Baywoof has noticed that DOUG JOHNSON SHOW other'two keys. Then I must press the assumption; but, around here, staffs are his failing PC drive (60MB RLL) is KPRCRadio control and reset keysto reset the com­ for spellcasting, wands are spelled; least­ more likely to 'click-on' when the ~oom P.O. Box 2222 puter. To some this may seem cumber~ wise, the good .. ones are. You use 'em is warm. The same was true ofthe h~rd Houston, TX 77252 some, but if you don't have NMI capa­ like swords. Now, this. one (whoosh, drive he used with his Ilgs. (Some users Attn: Doug Johnson bility itsure gives you a way to look at ELECfRONIC ARTS mQst ofthe program's code. OOl FROGSOHGI ~t HA\tlKSDAY 11=15 1450 Fashion Island Blvd. Warning: Using the above procedure For untold Hears it has cOillanded the San Mateo, CA 94404 will change the value~ ofsome memory northern end of the Khazan Pass. There are Attn: Marci Galea (415-571-7171/ or­ locations. So the program ~ay or may

stories told of the hundreds of assaul ts ders 800-245-4525) f not be restartable from memory. You that it has repu1sed. In"'hispered voices they call this CastleOVERKILLI However NEW WORLD COMPUTING can al\\iays reboot the program. stormy the castlels recent history, it is 203Q1 Ventura Blvd., Suite 200 Note: The program names have a ctrl -now cOlimanded by astrong and steady Woodland Hills, CA 91364 E character buried in them. The ctrl E is ruler, awarrior of lIony c.paigns and a deadly foe of the death goddess. You are Attn: Scott McDaniel (818-999~0607) not printed to the screen, (it is invisible), told by those at the castle that although dist. Electronic Arts but it must be typed to load the pro­ you are we Ic.e to us, their servicse here grams. ·they cannot guarantee your safetH north ORIGIN SYSTEMS of the Great EscarPilent. 110~ild Basin Road, Suite 330 The boot program (the first program Austin, TX 78746 thatis executed afterDOS is in memory) Attn:Wayrte Baker (800-999-4939) is called E ctrl-E LITE. It is written in BASIC. It runs another progr~ called PKWARE E ctrl-E LA. This program executes and 7545 NorthPort WashingtonRoad, Suite s~:::~::~. ~::~::r ~T:::~:~~Z ~:::~·::I then returns control to ELITE which .i.. .. 205 I'llllli then runs aprogram called S ctrl-E EC3. Glendale WI 53217 whoosh) is your standard two-handed report that giving the case a good solid I have stopped the program after ELA Attn: PR/Mktg. (414-352-3815)' Wizard's Wand. THIS little jewel I call tap helps.) Other complaints include has run. I put the screen in text mode 'Black Beauty' (whish), a genuine one- crashes (e.g. a head becomes glued to a RESOURCE CENTRAL (TEXT), dropped into the monitor handed -<- Death Wand. The Wizard' is platter) and "forgetfulness". The latter P.O. Box 11250 (CALL -151) and checked for the code goodforasolidhitinapinch;butonetap may produce program bombing, or Overland Park, KS 66207' I found at the locations mentioned by from 'Beauty here plants 'em where the 'merely' excessively tithe-consuming Attn: .Tom Weishaar (913-469'-6502) _ Jeff Hurlburt. The code I found when sun don't shine. Now, a young. magic re-reads. Some blocks are· weak, but STRATEGIC SIMULATIONS INC. the program was running was not there, user like yourself needs ... 'work' enough of the time to escape 675 Almandor Ave ' so SEC3 must create it. Following this H ... maze in Castle Overkill isn't fa- being marked "Bad" during nonnal Sunnyvale, CA 94086 thought, I loaded ¥ SEC3 into memory tal, it's just that any wrong step sends checks. A~tn: Kathleen Watson (408-737-6800) (BLOAD _S ctrl-E EC3) to look at i~. you back to the start-·darn, sure wish I Logically, MBTF numbers for the distElectronic Arts SEC3 starts in memory at $2000. Here is had apencil. Look, just remember these last (pre-IDE) generation ofsmall com-' what I saw: directions: E, that's "east", gets you -puter hard disks had to be estimates. It's 2000- 20 07 24 JSR $2407 onto the first square in the maze room. beginning to look like these were overly

6 R!aders Data Exchange COMPUTIST #84 2003- 20 7C 24 JSR $247C 110 FLASH : PRINT "0" STA $459E store nin Elhe so that Elhe following five sets heals one part ofthe 2006- 20 DC 23 JSR· $23DC NORMAL will run our patcher gemstone. I hope this will help some PLA get the old Ace. value off 2009- 20 9B 24 JSR $249B 120 POKE - 16368,0 people complete the game. 130 A = PEEK (- 16384) the stack . 2OOC- 20 50 24 JSR $2450 JMP $4000 run some more of EIRe 140 IF A < 128 ~HEN 130 Set#! 2OOF- 20 DC 23 JSR $23DC INSERT.PATCH 150 IF A < > 177 AND A < > PHA push Ace. value on the South 2012- 4C 00 40 JMP $4000 178 THEN 120 stack so we can get I back Earth The jump to $4000 look like a good 160 VTAB 14: HTAB 17: PRINT later Hand place to drop into the monitor from. So CHR$ (A - 128) TYA transfer Y-register to Ace. 1! The Five Plus . I changed the jump to $4000 to jump to 170 POKE - 16368,0 PHA push Ace. value on the Positive the monitor. 180 IF A = 177 THEN PRINT stack, we just put what was ,2013:59 FF ' CHR$ (4) "RUNOCHEATOELITE" in the Y-register on the . Set #2 190 IF A = 178 THEN PRINT '. stack I started SEC3 running. CHR$ (4) :"RUNOSTANDARD LDA #$FF load Ace. whh 255 decimal North 2000G OELITE" STA $6FOE make light-year fuel, when Fire' SAVE ELITE bought equal 25.5, notice Eye It loaded some stuff into memory the similarity wlh 255 The Five Square then dropped into the monitor. I look at Checksums LOY #$00 set index at 0 for the code again but it still wasn't .2 LOA NEW.COOE,Y get abyte of the Negative 10-$FB33 80-$AB71 150-$4A15 there, so SEC3 must need to run a little patch 20-$038F 90-$7FAC 160-$lFOO Set #3' 'further. I began to look at $4000. It BEQ .1 are we at the end of the 30-$5566 100-$2E69 170-$E926 -patch (00) if we are then go Orientation contained a jump to $4560. 40-$8250 .110-$0309 180-$24CC to .1 Air 4000- 4C 60 45 JMP $4560 50-$7709 120-$6C45 190-$203A STA $6BAF,Y store the bYte in Elbe INY . increment the index Foot I really didn't see anything interest­ 60-$557B' 130-$A3A7 The Five Circle 70-$930F 140-$1CEA BN E .2 branch back to .2 if index is ing until $4592t, -not 0 Emitter 3. Type in the 2nd program and save it as .1 4592- A9 30 . LOA #$30 PLA get the value off the stack 6 "STANDARD.ELITE". and put hin Ace. Set #4 4594- 80 42 83 STA $8342 10 PRINT CHR$ (4) "BRUNOE" TAY transfer Acc. to V-register, West 4597-~EA NOP CHR$ (5) "LA" we just. got the old Y- ' Water 4598- EA NOP (egister back 20 PRINT CHR$ (4) "BRUNOS" Ear 4599- 20 OF 96 JSR $960F PLA L get the old Ace. value off CHR$ (5) "EC3" , the stack The Five X 459C- 4C B9 7EJMP $7EB9 SAVE STANDARD.ELITE JMP $7EB9 run the rest of Ells Collector The jump at $459C looked like an­ Checksums NEW.COOE othergood place to stop the program. SO LOX #$FF Set#S I change it to drop into the monitor. 10-$450F 20-$EAi5 STX $02BC East 459D:59 FF 4. INX Type in the 3rd program and saveitas NOP Elements I then started SEC3 back up. "CHEAT.ELITE". NOP Soul 4000G 10 PRINT CHR$ (-4) "BRUNOE" NOP , The Five Unite CHR$ (5) "LA" STX $02C3 Transfonner It dropped into the monitor after a 20 PRINT eHR$ ( 4) "BLOAD¢ .HS 00 flash. I then looked for the code and this, CHEAT. CODE" , Super Boulderdash APT, time I found it. Now comes a slight 30' PRINT CHR$ (4) "BLOADOS" Notes on HackerI'I problem, the code at $456D is not there CHR$ (5) "EC3" Explanation ~ Here is something for those of you when SEC3 is loaded but gets there· 40 POKE 8212, 1: CALL 8192 who 'play HA~KER II. When you reach Ibootedup SuperBoulderdash(Front when it is executed. I like to write APTs .. SAVE CHEAT.CODE th~, "LOGON PLEASE:";\prompt~ type side,Boulderdash I) and then rebooted that are "clean" so the APT doesn't Checksums in one ofthe following phrases. and reset the computer.I then entered the cause problems with the· program. If I TITLE H2SC monitor. re-write something from aprogram I try 10-$450F 30-$1E48 I knew from playing the game that 20-$7C4C 40-$CA3F tit1~ to have it mimic the original code. This takes you to the page ofthe when you press the 'ESC' key the game Now all I had to do was. write the 5. Enter .the monitor, type the binary game. kills your current Rockford and start the APT. FirSt, I rewrote the BASIC portion program 'and save it. COVERH2SC cave over again. This is used ifyou get of ELITE. The BASIC portion is the CALL·151 This takes you to the "Rolling Stone" trapped and don't want to sit there and same except it'loads in CHEAT.CODE 0100:48 A9 OF 80 90 45 A9 01 $F50E magazine cover as ifyou com,pleted the wait for time to expire. I .. figured this and SEC3 The BASIC program then 0108:80 9E 45 68 4C 00 40 48 $30F1 game. would be a good place to start since .the modifie's thejumpat $2012 so that it will 0110:98 48 A9 FF 80 OE 6F AO ,$OB12 DEMOH2SC game changes the number ofRpckfords jump to $0100 (pOKE 821~,I).Then it 0118:00 B9 30~01 FO 06 99 AF $A6B5 'This is my personal favorite, what it you have. So I started to see how they runs SEC3 (CALL 8192). I like using 0120:6B C8 DOF5 80 84 5A 80· $1809 does is it gives you unlimited MRUs. were looking at the keyboard. the very bottom of the stack because 0128:09 7B 68 A8 68 4C B9 7E $7DE3 You start with 3MRUs, when your first COOO

COMPUTIST #84 Readers Data Exchange 7 155F-10 03 BPL $1564 clear routine that clears both hi-res pag­ button is being pressed,'it will jump to BSAVE BOULDER DASH I,A$7FD,L$7903 1561-4C C916 JMP $16C9 es but the routines take up 205 bytes. It the nonna! ESC routine (kill Rockford You have BoulderDash I in file fonn 1564-AO 00 CO LOA $COOO **** .stretc.hes from $9FE to $ACA. I'm sor­ and restart cave). The back'side is just and it takes up 21 sectors less. 1567-10 ED BPL $1556 ry, but to me that is way to long for a slightly different but the logic is still the' Boulder Dash IIis very similar. Here 1569-80 10CO STA $C010 screen clear routine. Sure it runs a little same. I hope this helps someone out are the steps that are different. 156C-C9 C1 CMP #$C1 faster thaD mine but who notices a few there. 4. Scanthe disk for4C53 16 and change milliseconds?! So now I have to write a 156E-FOOB BEQ$157B them to 4C 59 FF. new.- screen clear routine and I will have A fix for "Putting.•• 157o-C9 CA CMP #$CA 6. When the program drops into the 1572-00 E2 BNE $1556 the space I need for an APT. The sCreen Super Boulder Dash clearroutine belowmodifies itselfsightly monitor, enter the modification and At $1564 the accumulator is being on a hard disk" to conselVe space and not use any zero then move memory from $800-$8FF loaded from the keyboard location. So page locations. The hi-res pages are I liked Marc Batchelor's article about to $4000. most ~ikely the program will compare from $2000-$3FFF for page 1 and changing Super Boulder Dash to file 809:20 7D OA 4C 53 16 the value in the accumulatorto the value $4000-S5FFF for page 2. fonn in issue #53. It was nice but there 4000<800.8FFM ofthe 'ESC' key'($9B). The command 09FE:A9 20 LOA #$20 Load the MSB{Most were someproblems withit. Besi<;les the 11. Save the resulting memory. to do this would look like. . BSAVE BOTTOM.PART.A,A$5970,L$490 significant byte) of the ones mentioned in the article, you never xxxx- C9 9B CMP #$9B BSAVE BOTTOM.PART.B,A$5EOO,L$200 , address of Page 1 see the title screens again. Well I have To look for this in memory we will OAoo:80 OE OA STA $OAOE Store bin xx fixed all those problems and made the 13. Move memory from $8600-$9DFF use the'monitor search command. The file shorter. Huh?! Did you say you OA03:A9 40 LOA #$40 Load the MSB of the to $2600. search command will find a 1 or 2-byte fixed the problems and madeitshorterat , address of Page 2 2600<8600.9DFFM sequence inmemory. The vallJ.e we must the saine time? Yes and no, the saved OA05:80 11 OA STA $OA11 Store bin yy 16.. Load "MEMORY", BOTIOM search fot is 9BC9. The 9B must come file is shorter but when unpacked into OA08:AO 00 . LOY #$00 Load the index w~h 0 .PART, APT files into memory. first because it is stored in the higher memo"ry it takes up more room. I would OAOA:A9oo LOA '$OO.Load the accumulator BLOAD MEMORY.SOO.II,. memorylocation(mostsignificantbyte). like to thank Marc forlaying the ground wbh 0the value we BLOAD MEMORY.2000.11 The C9 comes last because it is stored in work for this article. are clearing the BLOAD MEMORY.A7e.11 • the lower memory location(least signif­ screen to. Step-by-step BLOAD BOrrOM.PART.A,A$2170 icant byte). OAOC:99oo xx STA $xxoo,YStore Rin ~ge 1 BLOAD BOTTOM.PART.B,A$3EOO 9BC9<0.BFFFS 1. Create a slave disk with no hello BLOAD APT.II 0042- OAOF:99 00 yy STA $yyoo,YStore bin page 2 program. 0044- OA12:C8 INY Increment the index INITHELLO 18. Ifyou wish to have the APTs listed 1724- . OA13:00F7 BNE $OAOC Branch if the index is DELETE HELLO in issue #50 type in the following notOtoAOC modification. Ifnot,justskipthis step. I started looking at memory at$1718. 2. Type in the programs.atthe end ofthis OA15:EE OE OA INC $OAOE Increment xx 18E8:60 OA 1718L article and save them on the slave OA 18:EE 11 OA INC $OA 11 Increment yy disk. 19. Save the game. 1718-92 ??? OA1B:AO 11 OA LOA $OA 11 Load the accumulator BSAVE BOULDER DASH II, A$7FD, 1719-0009 BNE $1724 from yy 3. Copy the deprotected Super Boulder L$7E03 171 B-A9 01 LOA #$01 Dash (issue #38) disk to a new disk. OA1E:C9 60 CMP #$60 see if Rhas reached You willneed totypeinthe programs 1710-85 E8 STA $E8, the end of Page 2 '4. Scan the disk for 4C DD_ 14 and below and save them to disk before 171F-85 EE STA $EE change them to 4C 59 FF. OA2O:00 E8 BNE $OAOA if bhasn't then beginning to make a file copy ofSuper 1721-4C 7018 JMP $1870 branch to AOA 5. Boot the disk (Super Bould~r Dash BoulderDash. Also the programs with a 1724-C9 9B CMP #$9B ***** OA22:AO 54 CO LOA $C054. tum on page 1 copy). ".I'? and a ".11" at the end oftheir names 1726-00 03 BNE $172B OA25:60 RTS return to caBer 6etrl-P are for BoUlder Dash ,I and Boulder', 1728-4C 1818 JMP $1818 Now we need to write an APT and 6. When the program drops into the Dash II, respectively. This is because 172B-e9 AO CMP#$AO place it after the screen clear, routine. monitor,enter the modification and ' there are small differences between the 1720.00 B8 BNE $16E7 Branch to beginning Well I wanted something I could imple­ then move memory from'$SOO~S8FF two versions ofthegame (BoulderDash of the keyboard ­ mentsimplyandseleetbetween the APTs to $4000. 1&11). routine or have both at once. So I changed the 809:20 43 OA 4C DD 14 The fue, MEMORY.A42.I, moves a Apparently ifthe accumulatoris equal 'ESC' key jump to jumptp my APT 4000<800.8FFM copyofpage2downfrom$AOO<>-SBFFF to ·$9B then the computer will jump to code. 7.- Boot the slave disk you created earli­ to page 1 and page 2 and then restores $1818. I then looked at $1818. Was: er. the' bottom part ofpage 1 from $9970­ 1818L $9FFF~ 1728-4C 1818 JMP $1818" , 8. Enter the monitor. 1818-A626 LOX $26 Escape routine OA42: 00' A9 20 80 5C OA $F20F Now: CALL-151 181A-D6 28 DEC $28,X Decrement number of OA48:A9 40 80 59 OA A9 AO 80 $768B , 9. Move the memory back to $800 and Rockfords 1728-4C 26 OA JMP, $OA26 save it. " OA50:56 OA AO 00 B9 00 00 99 $E067 181e-A507 LOA $07 My idea oftwo good APTs are: 800<4000.40FFM OA58:00 00 99 00 00 C8 DO F4 $0284 181E-00 1F BNE $183F $8~CD Add more Rockfords whenever you BSAVEMEMORY.800.I,A$800,L$1 00 OA60:EE 560A EE 5C OA EE 59 182Q-A626 LOX $26 Advance to next cave like OA68:0A AD 59' OA C9 60 DO 'E4 $92B2 10. 'Load and execute CREATE.BOT routine OA70:A9 99 80 8F OA A9 00 A2 $4EE8 Advance to the next cave TOM.PART 1822-A527 LOA $27 OA78:70 8042 OA AC 42 OA B9 $I>28C Well the joystick happens to have BLOAD CREATE.BOTTOM.PART 1824-1003 BPL $1829 OA80:2A 03 80 92 OA B9 00 03 $371C two buttons, what if we use those to 801G 1826-4C 00 08 JMP $0800 Jump to clear screen OA88:8D 91 'OA AO 00 BD 00 00 $B079 select which APT to execute. and reload title 11. Save the resulting memory. OA90:99 00 00 E8 DO 03 EE 8F $35F2 screens OA26:AO 61 CO LOA $C061 Get Button 0 BSAVE BOTTOM.PART,A$5970,L$690' OA98:0A C8 CO 28 DO EF EE 42 $E494 OA29:10 04 BPL $OA2F If ,not pressed goto At $181A, there is a decrementcom­ 12. Boot the copy of Super Boulder OAAO: OA AD 42 OA C9 2A DO 04 $333,0 A2F mand (~ubtract 1from something). This Dash. OAA8:60 $3B83 OA2B:A626 LOX $26 What.player number happens, to decrement the number of 13. Move'memory from $SlOO-$996F BSAVE MEMORY.A42.1,L$A42,L$67 hav~. OA20:F6 28 INC $28,X Add 1to the Rockfords that you Looking at the to $~lOO. The file, MEMORY.2000.I, puts the code, 1was curious as to why the accu­ Rockfords 21 00<81 OO.996FM OA2F:AO 62 CO LOA $C062 Get Button 1 hi-res locations that MEMORY.A42.I mulator was being loaded from $07 and 14. Boot the slave disk. needs at$300, moves $2100-$396Fback ifit wasn't 0 then it branched to $IS3F. OA32:10 03 BPL $OA37 If not pressed branch 15 Enter the monitor. to its original position at $8100-S996F, So Iscanned the disk for A6 26 D6 2S. toA37 OA34:4C 20 18JMP $1820 Jump to advance a 16. Load "MEMORY", BOTIOM copies the created bottom part ofpage 1 Ifound it at Track $OE SectorS07. Ithen to $9970-$9FFF and copies page 2 to changed the IF to a 00 so that if it cave routine .PART, APT files into memory. OA37:AO 61 CO LOA $C061 Get Button 0 BLOAD MEMORY.BOO.I $AOOO-$BFFF. It also turns on the hi­ branched it would go to the next instruc­ res graphics and page 1. tion. After writing the sectorback to the OA3A:10 03 BPL $OA3F If not pressed branch BLOAD MEMORY.2000.1 disk, I booted up Boulderdash I. When I toA3F BLOAD MEMORY.A42.1 2000:AO 53 89 2C 20 99 00 03 $E507 pushed the 'ESC' key I lost a Rockford OA3C:4C E716JMP $16E7 Jump to beginning of BLOADBOTTOM.PART,A$3970 2008:88 10 F7 AO 00 B9 00 21 $3C12 and ADVANCED TO THE NEXT the keyboard routine , BLOAD APT.I 2010:99 00 81 C8 DO F7 EE OF $EBFE CAVE! Wow! Now that is a surprise! ~A3F:4C 1818 JMP $1818, Jump to normal ESC 17. Put a jump·at the beginning of the 2018:20 EE 12 20 AD 12 20 C9 $4567 I thought maybe I could write some­ routine program to jump to our code. 2020:CO DO EA AD 57 CO AD 52 $C8AA 2028:CO 4C 00 08 50 50 DO DO $F068 thing to add Rockfords and/or advance In order to activate this APT y~)u 7FD:4C 00 20 to the next cave. Only one problem, must press and hold the correct jo)'stic,k IS. I.f you wish to have theAPTs listed 2030:00 DO DO DO DO DO 50 50 $F068 where to putitinmemory? Well Ilooked button then press the 'ESC' key. Ifbut- in, issue #50 type in the following 2038:50 50 50 50 50 50 DO DO $F068 through the program and found 'a 'great ton 0is being pressed, it will add 1to the modification. Ifnot, justskip this step. 2040:00 DO DO DO DO DO 50 50 $F068 place and something- I think is ·Stupid. Rockfords. Ifbutton 1 is being pressed, 1729:26 OA 2048:50 50 50 50 50 50 DO DO $F068 They (the authors) wrote a hi-res page it will advance to thenext.cave. ,If no 19. Save the game. 2050:00 DO DO DO DO DO 39 3D $7B37

8 Read.,... Data Exchange COMPUllSTII84 2058:21 25 29 20 31 35 39 3D $B3CF The file,·MEMORY.A7C.II, moves LlNE.NUMBER 2060:'22 26 2A 2E 32 36 3A 3E $AB37 a copy of page 2 down from $A~- .HS 00 MOVE.SCREEN.DOWN ­ 2068:22 26 2A 2E 32 36 3A 3E $334F , $BFFF to p~ge 1 and'page 2 and then LOA #$20 2070:23 27 2B 2F 33 37 3B 3F $C3DF restores the bottom part ofpage 1 from ' STA DESTINATION2 2078:23 27 2B 2F 33 37'3B 3F $334F $370-$7FF and $9EOO-$9FFF. LOA #$40 BSAVE MEMORY.2000.l, A$2000, L$80 OA7C:OO A9 20 80 $64A2 STA DESTINATION LQA #$AO ~A Thefile, CREATE.BOITOM.PART, OA80:96 OA A9 40 80 93 A9 $2AOE STA SOURCE takes the first byte at line 150.on hi-res OA88:AO 80 90 OA AO 00 B9 00 $5702 LOY #$00 page 1 and stores it at $5970. It 'then OA90:0099 00 00 99 00 00 C8 $CA8D LOOP takes then second byte and stores it at OA98:DO F4 EE 90 OA EE 96 OA $41B1 .HS B900 SOURCE $5971. It continues this process until it OAAO:EE 93 OA AD 93 OA C9 60 $A033 .HS 00 reaches the end of the line and then it OAA8 ': DO E4 «A9 03 80 C9 OA A9 $62AC .HS 9900 goes down to,the ne,xt line (line 151). It OABO:OO A? 70 80 7C OAAC 7C $DF58 DESTINATION - keeps doing this until it reaches the OAB8:0A B9 2A 03 80 CC OA B9 $376C .HS 00 bottom ofthe screen. The whole reason OACO:OO 03 80 CB OA AO 00 BD $D1C9 .HS 9900 for this is that there are no differences DESTINATION2 OAC8:00 00 99 00 00 E8 DO OF $CSE7 .HS 00 between page 1 and page 2 above line OADO:EE C9 OA AD C90A C9 08 $58E4 INY 150. So not savejustthe panthat is why OAD8:DO 05 A9 9E aD C9 OA C8 '$E337 BNE LOOP different? INC SOURCE OAEO:CO 28 DO E3 EE 7C OAAD $5BOC INC DESTlNATION2 0800:00 A9 59 80 23 08 A9 00 $AD75 OAE8:7C OA C9 2A DOC8 60 $4163 INC DESTINATION 0808:A2 70 80 00 08 AC 00 08 $D4AE BSAVE MEMORY.A7C.II, A$A?C, L$73 LOA DESTINATION 0810:B9 64 08 80 20 08 B9 3A $F183 The file, APT.II, clears both hi-res CMP#$60 0818:08 80 1F 08 AO 00 B9 00 $9FF1 BNE LOOP screens and performs, the APTs. For CHANGE.BOTTOM.SCREEN1 0820:00 9000 00 E8 DO 03 EE $3331 some reason the advance to next cave LOA #$03 0828:23 08 C8 CO 28 DO EF EE $652C does not function on level 5. STA SOURCE.POINTER 0830:00 08 AD 00 08 C9 2A DO $t)1C5 LOA #$00 OA38:A9 20 so 48 OA A9 40 80 $A9EE 0838:04 60 50 50 DO DO DO DO $7300 LOX #$1{) OA40:4B OA AO 00 A9 00 99 00 $2E56 0840:00 DO DO DO 50 50 50 50 $4300 STA LINE.NUMBER OA48:40 99 00 60 C8 DO F7 EE $0080 LOOP2 0848:50 50 50 50 DO DO DO DO $7300 OA50:A8 OAEE 4B OA'AD '4B OA $4118 LOY LINE.NUMBER LOA HLRES.HIGH.Y 0850:00 DO DO DO 50 50 50 50 $4300 OA58:C9 60 DO E8 AD 54 CO 60 $838A STA SCREEN.POINTERt1 0858:50 50 50 50 DO DO DO DO $7300 OA60:AD 61 CO 10 04 A6 26 F6 $7F53 LOA. HLRES.LOW.Y 0860:00 00 DO DO 39 3D 21 25 $F5DF OA68:28 AD 62 CO 10 03 4C OF $AF71 STA SCREEN-POINTER 0868:29 20 31 35 39 3D 22 26 $19A5 OA70:19 AD 61' CO 10 034C,A6 $601\9 LOY #$00 LooP3 0870:2A 2E 32 36 3A 3E 22 26 $6170 OA78:18 4C Q7 19 $5160~ 0878:2A 2E 32 36 3A 3E 23 27 $9A24 .HS Booo BSAV·E APT.II, A$A38, L$4E SOURCE.POINTER 0880: 2B 2F 33 37 3B 3F23 27 ..$7A44 .~SOO 0888:2B ~F 33 37 3B 3F $4210 MEMORY.A42.I.SOURCE .HS 99 BSAVE CREATE.BOTTOM.PART,A$800, .OR $A42 SCREEN.POINTER L$8E .TF MEMORY.A42.1 .HS 0000 HI.RES.LOW .EO $300 INX I, The file, APT. clears both hi-res HI.RES.HIGH .EO $32A BNE .1 screens and perfonns the API's. LINE.NUMBER INC SOURCE.POINTER LOA SOURCE.POINTER 09FE:A9 20 $B2CC .HS 00 CMP#$08 OAOO:8D OE OA A9 40 80 11 OA $2944 . MOVE.SCREEN.DOWN LOA #$20 BNE .1 OA08:AO·00 A9 00 99 00 40 99 $1-200 STA DESTlNATI0N2 LOA#$9E OAIO:OO 60 C8 DO F7 EE OE OA $C09D. LOA ~ STA SOURCE.POINTER OA18:EE 11 OA AD 11 OA C9 60 $A446 sTA DESTINATION .1 INY LOA #$AO CPY #$28 0A20: DO E8 AD 54 CO 60 AD 61 $8IA4 STASOURCE BNE LooP3 0A28:CO 10 04 A6 26 F6 28 AD $8BF6 LOY #$00 LooP2 INC LINE.NUMBER OAJO:62 CO 10 03 4C 20 18 AD $EA55 LOOP LOA LINE.NUMBER OA38:61 CO 10 03 4C E7 16 4C $6DC4 .HS B900 CMP#$2A BNE LooP2 OA40:18 18 $F58A SOURCE RTS BSAVE APT.I, A$9FE, L$44 .HS 00 .HS 9900 Thefile, MEMORY.2000.11, putsthe DESTINATION MEMORY.2000.II.SOURCE LooP3 locations thatMEMORY.A7C.II .HS 00 .OR $2000 , hi-res .HS B9 needs at $300, moves $2600-$3DFF .HS 9900 .TF MEMORY.2000.11 DESTlNATION2 SCREEN.POINTER back to its original position at $8600­ HI.RES.POINTERS .EO $300 .HS 00 , .HS 0000 $9DFF, copies.the created bottpm part .HS- 9000 START INY LOA #$26 of page 1 to $0370-$7FF and $9EOO- . BNELOOP SOURCE.POINTER .HS 00 STA SOURCEAOORESS $9FFF, and copies page 2 to $AOOO~ INC SOURCE LOA· #$86 INC OESTINATION2 INX $BFFF. It also turns onthe hi-res graph­ BNE :1 STA TARGET.ADDRESS j, _ INC DESTINATION ics and page 1. INC SOURCE.POINTER LOA #$CO LOA DESTINATION STA END.TARGET;ADORESS 2000:A9 26 80 3D 20 A9 8680 $4E03 CMP#$60 .1 INY CPY #$28 JSR MEMORY.MOVER 2008:40 20 A9 CO 80 38 20 20 SDE57 BNE LOOP LOA #$21 CHANGE.BonOM.SCREEN1 BNE LOOP3 2010:39 20 A9 21 80 3D 20 A9 $5BE6 INC LlNE.NUMBER . STA SOURCEADDRESS LOA #$99 . LDA#$03 2018: 03 80 40 20 A9 08 80 38 .$A3E3 LOA LINE.NUMBER STA SOURCE.POINTER STA TARGETADDRESS 2020:20 20 39 20 AO 53 B9 53 $3DE1 LOA #$00 CMP#$2A BNE LOOP2 LOA #$08 2028:20 99 00 03 88 10 F7 AD $372B LOX #$70 RTS STA END.TARGET.AODRESS 2030:57 CO AD 52 CO 4C 00 08 $E2B4 STA LINE.NUMBER JSR MEMORY.MOVER . . LOOP2 HI.RES.LOW 2038:00 AO 00 B9 00 00 99 00 $1109 .HS 5050 LOY #$53 LOY LINE.NUMBER .1 LOA HI.RES.STUFF.Y 2040:00 C8 DO F7 EE 3D 20 EE $3AD9 LOA HI.RES.HIGH.Y .HS 0000000000000000 .HS 5050505050505050 STA HI.RES.POINTERS.Y 2048: 4020 AD 40 20 CD 38 20 $4794 STA SCREEN.POINTER+1 .HS ooDOooooooooOODO DEY LOA HI.RES.LOW.Y BPL .1 2050:00 E9 60 50 50 DO DO DO $7E1A STA SCREEN. POINTER .HS 5050505050505050 .HS 0000000000000000 LOA $C057 2058:00 DO DO DO DO 50 50 50 $1EFA LOY #$00 LOA $C052 2060:50 50 50 50 50 DO DO DO' $7E1A LOOP3 HI.RES.HIGH .HS 3930 JMP $0800 2068:00 DO DO DO DO 5050 50 $1EFA .HS Booo ENO.TAAGET.ADDRESS SOU RCE.POINTER . .HS 2125292031353930 2070:50 50 50 50 50 DO DO DO $7E1A .HS 22262A2t32363A3E .HS 00 .HS 00 MEMORY.MOVER 207~:00 DO DO DO DO 39 30 21 $2649 .HS22262A2E32363A3E .HS 99 LOY #$00 2080:25 29 20 31 35 39 3D 22 $AD20 SCREEN.POINTER ...... HS 23272B2F33373B3F .HS 23272B2F33373B3F LOOP .HS B900 2088:26 2A 2E 32 36 3A 3E 22 $8598 .HS 0000 SOU RCEAOORESS INX 2090:262A 2E 32 36 3A 3E 23 $2CAO MEMORY.A7C.ll.SOURCE .HS 00 BNE .1 2098:27 2B 2F 33 37 3B 3F 23 $BCFO .HS 9900 INC SOURCE.POINTE,R .OR $A7C TARGETADDRESS 20AO:27 2B 2F 33 37 3B 3F $3160.1 INY .TF MEMORY.A7C.l1 .HS 00 BSAVE MEMORY.2000.1I, A$2000, L$A8 CPY #$28 HI.RES.LOW .EO $300 INY BNE LOOP3 HI.RES.HIGH .EO $32A BNE LOOP

COMPUllST #84 Reade,. Data Exchange 9 INC SOURCEADDRESS and do an RTS. So, unless you happento This "program" stores the first value wherethe stackis stored. Sincethestack INC TARGETADDRESS know the value ofthe program counter ofthe stack pointer in the accumulator, pointer is always one less than the last LOA TARGETADDRESS CMP END.TARGET.ADDRESS (that is, exactly what the address was JSR'S to three places, stores the final . location stored into, you should have no BNE LOOP when you stopped), the stackpointer(S) value of the stack pointer in"the X­ trouble identifying the correct value of RTS and the processor status word (P), and register, and then halts. (We have to PC and P. After saving the game, with HI.RES.STUFF restore them exactly as they were before neglect for the moment that Apple's memory moves ifrequired, setthe stack .HS 5050 the reset, the program probably won't monitor does. some weird things to the pointerto the locationofthe status word­ .HS DODODODODODODODO th~ 1 (use"LDX #NN, TXS), and do RTI .HS 5050505050505050 run. Anyone who tried to break JUG- stack after "BRK"). ·Ifwe examine an .HS DODODODODODODODO GLER found this to be frustrating in the the stack m~mory betweenthe locations instruction. The program will start right .HS 5050505050505050 extreme, since sometimes· the game in the ACe, and X-reg, we will find the backup as ifithad neverbeeninterrupt­ .HS DODODODODODODODO would run all the way through the fi~t values listed above. Although we speak ed. Be sure that your memory relocate .HS 3930 level before crashing - the same tec~- of the stack as a "push-down" (also routine inROMsavesthevalueofthe A, .HS 2125292031353930 res~res .HS 22262A2E32363A3E nique was used there, but with even "LIFO" for Last-In, First:Out) stack, X, and Y registers, and the .HS 22262A2E32363A3E more protection. what actually happens is that the valu:e correct values before the RTI. .HS 23272B2F3337383F There is a hard way and an easy way of the stack pointer is decremented, so One final caution, - some games .HS 2327282F33373B3F to do everything, and if you are com- that it points to a location one less than (like JUGGLER) require that you have Ifanyonewishestocorrespond (loca­ pletely restricted to software devices, it itwas.Thesubroutine addressestowhich an unmodified.ROM in the F8 socket­ tion doesn'tmatterto me evenifyou are is still possible to break Arcade Ma- the program would return· (if it were this requires alittlemoreassistance from ' in another country), my address is: chine. Referring to the nibble alteration given an "RTS") are stored in nonnal the god of hardware, and will be dealt Michael A. Horton techniques described in the previous ~ fashion of low byte, high byte, at a withina future episodedescribingother 2500 East 4th Plain #204 episode, it is possible to locate and alt~r locationone higherthan the value ofthe applications ofthe NMI te,chnique. Vancouver, Wa 98661 the game loader so that it halts with stackpointer. TheRTS instructiontrans­ Returning to the A.M. Krack, you conditions well defined after the entire fers these numbers into the program Ifyoudo writepleaseinclude a phone" ~ now can boot the disk and· get to the program is in memory. If it is your counter,incrementsthe'stackpointerby number if possible and a .time to call mainmenu. DotheNMItrickbyclosing purpose i,n life to learn as much as you· two, increments the low byte by one, (Example: 5 p.m. to lOp.m.PST). Don't a switch wired between pins 29 and 26 possibly can about disk protection and starts the program executing again forge,t to include the area code. of any peripheral card, and move the schemes and the circumvention thereof at the l~cation of the program counter. excess memory to $2000-$3FFF (the (only a few really crazy people are so The stack pointer now points to (one Norwegian nurds were nice enough to Krakowicz NY inclined), this is rewarding. If you are below) the next subroutine. return ad­ leave us ~i-Res page one open-tak!), interested in preparing. an unprotected dress, and the next "RTS" instruction. Including $O-$8FF and $B600-$BFFF. The Basics of Kracking version-of the game with minimum ad- encountered in the program will return Add the appropriate memory move rou­ vertising and minimum effort, however, to that address. Notice that the final tines as well as the registerrestore, stack there is an easier way. location of the stack pointer can have Part 10 pointer adjust, and RTI, then boot a anything in it, since it, points to the The Arcade Machine Non-Maskable Interrupt slavediskandBSAVEthememoryfrom location where the next byte will be· $900~$9600. with notes on NMI This solution is elegant, but requires stored,notwherethelastonewasstored. Copy tracks $3-$11 from the original a visit to that god of the underworld The data pairs "22,10", "12,10", and and IDSI's Juggler A.M. ~ith your favorite cop.ier, and tell Hardware. By now everyone is (or "04, 10" correspond to the subroutine the VTOC that those tracks·are occu­ Softkey for... . should be) familiar with the term NMI, return addresses $1023, $1013, and pied. Save the file onto any tracks above thanks to an oversold card which uses $1005 for the program, each one being The.Arcade Machine 11, and,-using the boot modifier de­ this technique to replay single-load one les~ than the actual return point. Broderbund games from.disk.·NMI stands for Non­ scribed in the KKK III on WAY OUT, Thatdigression was intended to clar­ This Broderbund protection. scheme Maskable Interrupt, oneoffourtypes of load in the m~n program as part ofthe ify the stack structure that results from is a challenge for copiers, since it uses interrupt available o~ the 6502 (the otJi~ bOot You should now be off and run­ an NMI signal: thetechniqueknownasspiralingorquar- _ ers are reset, break, and· the IRQ or ning with yourownfreshly broken copy tet-tracking, as well as ·the standard interrupt request). As the name .of this Stack pointer:· (anything) of Arcade Machine. Broderbund system of a new address oneimplies,itis aninterruptwhichmust ,, S+1 status word (P) It'snotreally as liard as itsounds, and marker for each track. An attempt to be attended, regardless ofwhateverelse S+2 .ProgramCtrLow(pCL) if you really like to program your own copythediskwitha conventionalnibble the CPU had in mind to do next. This S+3 Program Ctr Hi (PCR) lefi~right shoot-ern-ups without learn­ copier quickly reveals that tracks 0 and line comes directly from pin 6 of the This was set up to allow an external ing to program, the result is worth the $3-$11 are easilycopiedwithan address CPU chip, is held at 5 volts (logic 1) by device.to interrupt the Apple, and then effort. marker of D5 AA 96, while the rest of a lKresistor, and run outto pin29ofthe to resume the interrupted program ex­ the tracks are a "mystery. Probing into peripheral connectors. Connecting this actly where it was before the interrupt The Guardian FL the loader reveals the following infor- pin momentarily to ground (pin 26) be­ occurred. The instruction that makes it . mation about track usage: gins a small microprogram within the all happen 1s "RTI", which obligingly Run MECC On Hard Disk ~ Contents 6502 which stores the program counter puts the processor status word back, TO/SO Preloader -> $800-$8FF ('PC',two bytes) and then the processor· restores theoriginalvalueofthePC, and for.~. (as always) status word ('P', one byte) on the stack, cranks up the program just.as it was Softkey TO/S1-5 loader-> $300-$7FF and jumps to the address stored in loca­ before the NMI line was yanked. MECC 3.5" ProDOS disks TI-2Hires split "Broderbund" tions $FFFA and $FFFB intheF8 ROM. The practical implementation ofthis MECC logo ~d program The Stack ($l00.lFF) trickinKrackingrequires a minimum of T12-20 Main program which loads "two things: an altered F8ROM and a Softkey for... into $800-$BFFF This business of pushing onto the switch. A nonnalF8 ROM has $FB $03 TI2-13.5 Four half tracks used for stack is a little obscure, so let's spend a at $FFFA-$FFFB, which means that an Backyard Birds quarter-tracking few moments describing the stackstruc- NMI signalwill execute the instruction Chemistry: Balancing Equations T3-4 #1 shape creator ture. We all know that the stack is in at $'03FB. Prudent software publishers Cleanwater Detectives T5-6 #2 path creator page o.ne ofmemory ($I00-$lFF), and will put there either ajumpto the begin­ Chemistry: The Periodic Table T7-8 #3 game options thatsomething called a stackpointer(S) ning ofthe game or a reboot: 4C 00 C6. Communikeys T9-A #4 level options points to an address withinthat range. If To get around the problem, the F8 ROM Conquering Decimals (+,-) TC-D ~5 bkgd/title creator the following program were run, the must be modified. Since most serious Conquering Decimals (X,I) stack would look .like as shown below: " Krackists already have a KrakROM or TE-F #6 load/save game Conquering Fractions (+,-) TI0-l1 #7 crea~ game disk 1000: TSX Lockbuster, etc., which relocates $0- , Conquering Fractions (X,f) (option #8 jumps to $0800 1001: TXA $7FF memory when reset is pressed, Conquering Math Worksheet 1002: JSR $1010 this is not a major problem. You should to run the game) . Generator 1005: put the starting address of the memory The approach to Kracking this type Conquering Percents 1010: JSR $1020 move routine in locations $FFFA­ ofprogram seems straightfolWard: load Conquering Ratios & Proportions the program into memory, reset it, and $FFFB, and burn a new 2716 EPROM. 1020: JSR $1030 After this PROM is installed in the F8 save it out to disk as a binary file, with Coordinate Math the appropriate memory moves. Hope­ 1030: TSX socket, activating the NMIline will save Decimal Concepts fully, you '11 locate the starting address BRK all ofthe volatile memory as well as the Equation Math ~ and be able to run the binary file at will. PCand,P. Estimation Quicksolve I Ifyou' wishtoinclude all ofthe advertis­ Final stack pointer location> xx(3fiy) (A wordofcaution- ifyou don'thave Estimation Quicksolve II ing for Broderbund at the beginning, i~ a solid-state switch on the NMI line, Estimation Strategies this works. Ifyou try to delete the dual 12 you'llstore some additional garbage on Exploring Gas Laws banner, it crashes. The reason is that 10 the stack, butthe system will still work). Five-Star-Forecast module switching is viathe stack-they 04 .Each time you use the' NM.I ROM, Fossil Hunter push the correct location onto the stack First stack pointer location> 10 you '11 have to examinethe memory area

10 Readers .Data Exchange COMPunST #84 Hail and well met, Eamon adventurer. COMPUTIST ·has news of great import for Tom Zuchowski is the editor and driving force behind it. The loyal supporters ofEamon andmembers in good newsletteris printed on 8·.5 ft x 11 ft bond, double sided with dot matrix type. It is non-profit (it's his hobby) and Tom's avowed purpose is to standing at the Main Hall. There is· a newsletter \ maintain a single point collection and clearing .house for Eamon for Eamon Adventure Buffs. Adventures. He also intends.to fix all known bugs in these adventures. , ~ ~ _., This is a grand concept worthy of support. We·highly recommend I .Yes! I want to support Eamon adventure and encourage new adventures to be I that you subscribe. This ne\ysletter will help you keep in touch with 1 written. Sign me up for a one year subscrition. I otherEamon adventurers. Butmore important, it will improve the state 1 0 US & Canada: $7.00 0 Foreign: $12.00 (U.S. funds) I ofEamonadventures andencouragenew adventures to be written. Tom .1 I also want to order some back issues at $1.75 each for 1-5 issues and $1.25 each I has accomplished a greatdeal along these lines already, notonly fIXing 1 for 6 or ~ore issues. I ~bugs but also improving the Eamon Main program an"d authoring the 1 0 Jun'88 0 Sep'8~ 0 Dec'88 0 Mar'89 0 Jun'89 0 Sep'89 1 version 7.0 Dungeon Designer Disk. I 0 Dec'89 0 Mar'90 0 Juo'90 0 Sep'90 0 Dec'90 . 0 Mar'91 I The)"Guild" is printed quarterly. A 1 year subscription is: I 0 Jun'91 0 Sep'91 0 Dec'91 I 1 Total enclosed I US & Canada: $7.00 Foreign: $12.00 (U.S. funds) I~ I The Eamon Adventurer's Guild I. I 1 Address .. ' I 7625 Hawkhaven Dr. 1 I Clemmons, NC 27012 I I (919)766-7490 1 City .'. .. . State Zip 1 '-•••·•••••••••••••.•••••·•••1 EarnonAdventurefor: only $1 (or less) .each, ~ ~ I...... •...... •...... 0 1 Main Hall &. Beginners Cave 076 The Search for Yourself .0 147A The Oark Brotherhood 0 190 Shift'Change at Grimmwax . I Adventure Gaming doesn't have to o 2 The Lair of the Minotaur 0 77 Temple ofthe Trolls .. . 0 147B The Oark Brotherhood ,0 191 Enhanced Beginners's Cave I 03 The Caveofthe Mind 078 The Prince's Tavern 0 148 JOIJmey to lotunheim 0 192 Mean Streets . I "cost a lot. The Eamon Adventure ID4TheZyphurRiverventure D79TheCastleofCountFuey o 149AElementalApocalypse o 193 TheCreatureofRhyl I Gaming .system was ,created by ~ OS Castle of Doom - 0 80 The Search for-the Key. 0 149B Elemental Apocalypse 4' 194 Attack ofthe Kretons I Donald B-rown and plac·ed. 1·nto the l o 6 The Death Star 0 81 The Rescue Mission 0 149C Elemental Apocalypse' u 195 The Training Grounds ... ' I 07 TheDevil's Tomb 0 82 Escape from M~si I~land 0 1490 Elemental Apocalypse 0 196 The House of Horrors I public domain. Since then it has 08 The Abduetor's Quarien 083 The Twin Castles 0 150 Walled City ofOarkness 0 197 Star Wan - Tempest One I" . . I o 9 Assault QIl the Clonemaster 0 84 Castle ofRlveneta 0 151 &monS.A.R.-!(Deneb Raid) 0 198 Revenge of the Bookwonn beenupdatedandImprovedby game 1010 The Magic Kingdom 085 The Time Portal 0152 The Computer Club ofFear 0 199 Quest of the'Crystal Wand I players allover the world. Take a I .0 11 The Tcmb ofMolinar 0 86 Castle Mantru. .... 0 153 Lost!... . . 0 200 The ~st Isle, . . I I k h $1 ·11 b (G fr • 0IZTheQuestforTrezore.. 087CavesofHo!1owMOIDltaJll 0154ATnptoFortScou OZOlTheCavemsofVanavara. ooatw at WIUY. et ee Shoppina~a{l.. o 13 Caves ofTreasure Island 0 88Th,e j... C] 1,55 Tomb. of the Vampire .0202 The,Plain of Srevi games tOO.) I 0 14~Furioso . 089Super Fortress oflin Wang'. 0 156 The Lake .. .. ,. 0 203~'s Masterpiece 1 '[. ...'. . . • ,0 IS Heroes·Castle ·090liheDoomsdayCloclt 0IS7Pa:lheticHideoutofMr,R. O:w4ASanctual)' II.; • Note. Some Adventures are multz- ·.016JDeCavesofMQDdamerl ,D91~utureQuestn DI58Th~LairofMrEd .!. D204Bsanctuary.. . . partandtake morethan one disk. Be I 0 17 Merlin's Castle 092 The Fugitive 0 159 The Bridge ofCatzad-Dum 0>205 Utterly OutrageoUs' ,I '-. • 0 18 Hogarth Castle 093 Flying Circus 0160Monty Python &:Holy Grail 0 W6 Curse of lheHellsbla4e • sure you have selected all of the ·0 19, Death Trap·. °94 Blood Feud 0.161A Operation Endgame q207.EamonRt21eg~e Oub I disks. I o 20, The Black Death .. 0 95 The Mazeof.Quasequeton 0 161B Operation Endgame 0 208 Assualt on' Helstar .. •. I 021 The Quest for Marron 0 96 The, Chamberof the Dragons 0 161C Operation Endgame 0 209 Apocalypse2021 I TheEamon Master dIsk (#1) IS re- I ·Cl22 TheSenator's Chambers 0 97 The House'Of SecretS D 162 Eamon 7.0 Demo Adventure 0 2,10 Return.of Ngurct 1 quired Ito play'most adventures Ii 023 The Temple of Ngurct 0 98 Slave Pits of Kzorland . 0 163 The SandsofMars 0 211 Lair of the Marauders I 024 Black Mountain 099 In the ClutehesofTorrik 0164 A RetI CliffHanger 0212 HaWlted Keep I I 025 Nuclear Nightmare 0 100 Sorceror's Spire O~ 165A Animal Fann 0213 Dernongate I

• g~~:~:~~~e~~e~ ~~~~~~~~d g:~=ali:ea:'er o DurigeonDesignerDiskettev7.0 • I 028 The Tower of London 0 103 Top secret' 0 166BStonn Break~r 0 Multi..Disk Supplement (0007.0) I 1 029 The Lost Island of Apple 0104 The Lost World 0 166C Stonn Bre~er 0 Eamon Utilities Diskette I Free 'I 0 30 The Underground City 0 105 The Strange Resort 0 167 Ex~tiOll to the Darkwoods 0 Graphics Main Hall I o 31 The Gauntlet 0 U16 Camp Eamon 0 168 The High School of Horrors 1 032 House of ill Repute 0 101 The LastOragon 0 169 The Black Phoenix I 0 33 The Orb of Polaris 0 108 The Mines of Moria :g 170 Ragnarok Revisited '1 Adventures I o 34 Death's Gateway 0 109 The Forest of Fear 0 171 The Pyramid ofCheops 1 0 35 The Lair ofMutants 0 110 Fire Island 0 172 The Mountain of-1he Master ·1 Use the total number of adventures ordered 1 0 36 The Citadel of Blood .0'·111 A Vacation inBurope 0 ·173 The House thatJadc Buill 1 to determine how many free adventures youget. 0 37 Quest for the Holy Grail 0 112 Hills of HistOl)' . '. . 0 174.Escape frpm Granite Hall I 1 o 38 City in the Oouds 0 113 The Life-Q$ of Mevtrelek 0 175 Anatomy ofthe Body Be sure and check the. boxes of your free 1 039 Museum of Unnatural History 0 114 Thror's Rittg 0 176 ~e Trix's¥ad Mau I disks that you. want but do not include free ~figuring I 040 Daemoo's Playground 0 115 The Ring of Doom 0 177 Smwe·ofFooles 1 disks when total'number of disks o 41 Caverns of Lanst 0 116 The.Iron Prison 0 178 The Alien Intmder ordered. I. 042AltemateBeginnenCave o 117 Dungeon of Doom (40 col) o 179 The Wizard's Tower I I 043 PriestsofXimI o 117 DungeooofDoom(80col) o 180Ganuna 1 1 «of djska at $1 «of Free djska 1 0 44 Elcapefrom the On: Lair 0 118 Pittfall 0 181 The Eamon Sewer System 1 1-9 o -D45SwonlQuest 0 119A GruneWal.de 018ZFannerBrown'sWoodi I 10-19 '2 1046 Lifequest ' 0 119B Gnmewalde 0 183 The Boy and tJte Bard 20-29 5 I 047 FutureQoest 0 120 Orb ofMy Life 0 ·184 Quest for Orion . ,I 30-39 9 ..•.... 048 Picnic in ~radise . 0 121 Wrenhold's Secret Vigil 0185 The.Body Revisited I 40-49 14 1 0,49 The Castle K~ 0.122 The Valley of Death 0 186 Begmners Cave H 50-59 20 I 0 5elkbirMI the "".;~. .l:J1Z3)Viwdof the Spheres 0 187 Batmanl 1 60-69 27 '. ··.·<1· q,~l,~."< . ''''i;~;i:·,:::.,·;'·IJWf, .. ,S!:;~~;Ass.tIlt ~ DoIni Keep 0 188 EnCOUD~r: The Bookwonn I 70-79 ' 35 :-:.~=.., ',~~=of~ 80-89 44 "\\'; 'j"., . o 189 The Rums ofBe1fast • 90-99 54 ,.~ ,,'"~lZ7 The Hunt for the Ring 0 Send me the Complete set of Eamon for: $125,00. 100-109 65 .0.... ;,,;. "' ..., ... 110-119 g:::~~ ·;,J·g~i:~~:;re~~ 77 •. TotalnumberofAdventuredisks __xSI each = 1 120-129 90 I 057The~,"'~'i::C \ 0 129B Return to Moria erA IV\ I 130-139 104 I 0 S8 The~·~",... 0 130 Haradwaith Add only.if total 1# of disks ordered is less than 10: -~ I 0 S9I.....:OfViebUlm· 0 131 Nucleu~~ of the Ruby Washington State residents only add 7.8% sales tax. 1 I o 60 11ieSiwers f1 Chicago 0 132 Rhadshur Warrior 1 061 The Maapy ClouI 0 133 The Final Frontier Name 1 Complete set of Eamon I 0 62 The ~ ofDoedt 0134 Pyramid of the Ancients I •~. =~.. ·'~~~fJ'-t' g~~~: ~~E~r:ess Address I All232disks (includesalladventures " • 0 6S The ,.,~:af.~w':" 0131 The Ruins of Ivory Casde 1- plus desi~r and utility disks.)$IZ5 'Itit,~~,a~'S~!E~~~ss ~~:tty Ph~:te __ZiP i • p'.> . - . 014Z The Beenneister's Brewery Visa • '. 071">: ": (J 143 The AltemateZone Me Exp __. I 0 12. H~,~r~:':<'>;'~T.:., .. ,.,,~J';' '. / 0 144 G@rtin Manor .1 COMPUTIST D73The·~:9':"t:·<.·.. I 014SA Buccaneer! SIgnature . I 33821 Orville Rd. E ·. 0 74 Dh~·•.•.'..... ': ..... '.. •... . []145B Buccaneerl COMPUTIST, 33821 Orville Rd. E, Eatonville WA 98328-95901 I 075 Temple of..,OuiiJct,· 0 146 The House of Horrors . Eatonville WA 98328·9590 ~ ...... •' , , COMPUllST #84 Readers Data Exchange 11 Fraction Concepts, Inc. This turns out not to be the critical as possible and include as much sector Softkey for... Fraction Practice Unlimited pattern as described in issue #77. In­ infonnation as possible when sending Miner's Cave stead the critical pattern appears to be: an article in. Grammar Gazzette MECC Grammar Toy Shop 20 XX XX . Partial Bitkey for... Instant Survey 90 03 4C xx xx 60 This title (listed in the MECCcatalog as not networkable) fits the pattern in Instant Survey Sampler Note: The 90 03 4C,pattern appears MECC; COpy SYSTEM several times on the disk. The only time /LABEL UTILITY issue #77. Search block C for 60 2C 78 Invisible Bugs 11 3091 38 60 and change the 38 to 18. LittleTown Zoo it is important is when it is preceded by MECC 20 xx xx. This will make the disk boot and work - The Living Cell I recently was able to obtaina copyof from harddisk but the quit fQutine caus­ The 20 XX XX seems to set up a JSR Lunar Gfeenhouse the 1991-1992. MECC Copy System! es your computer to restart. for the protection scheme and the 90 03 Measureworks Label Utility 3.5 fonnat. I was unable to 4C XX XX 60 carries it out. By chang­ Step-by-step copy it using disk copy. I used the man­ MECC Outliner ing the 90 03 4C XX XX to a. CLC and ual bit copy on Copy!I Plus 9.0 and got 1. Use COPYA to make a copy of the Mystery Matter EA's the protection scheme is skipped. no errors. Thecopy would partiallyboot disk. Mystery Objects The XX's are different on some of the and give a booterrormessage. I decided POKE 47397,24 Paper Plane Pilot disks but the pattern remains the same. to examine the disk for the bytes 90 03 POKE47398,96 Patterns Change the 90 03 4C XX· X;X to 18 4C and found the following pattern: RUNCOPYA Picture Chompers EA EA EA, EA. Now you can ron the Probability Lab disks from yourharddisks witheaseand 20 48 3E JSR 3E48 2. Make the edit as above. Problem-Solving With Nim no more damaged disks from students. 18 CLC Space Station Freedom Again,changefrom 90034C XX XX 60 60 RTS Michael S. Pollock CA to 18 EA EA EA EA 60. C980 CMP#80 Spellevator ® I purchased a used lIe system with Spelling Puzzles and Tests Here are the patterns and locations for some ofthe disks: an early Duodisk drive (serial #676­ Spelling Series ToolKit Iilk Block ~ 102). This drive has trashed the 0 sector Sun & Seasons Estimation Quicksolve I 002B 20 29 21 90 03 4C XX XX 60 of disks under certain conditions. The Teaching Scientific Inquiry Invisible Bugs 0032 202921 9003 4C XX XX 60 fix is to cut offtwo capacitors, I am told. Time Navigator _ Lunar·Greenhouse 002C 20 02 21 90 03 4C XX XX 60 Thequestionis wpichtwo? Italsoseems Time Navigator Leaps Back Measureworks 0058 202A 21 9003 4C·XX XX 60 to be unable to read disks after repeated Time Navigator Around The World The Living Cell OOOC 20 XX XX 90 03 4C 02 82 60 disk access. It would seem to be a ther­ To Preserve, Protect & Defend Grammar Gazette 002C, 20 XX XX·90 03 4C 77 91 60 mal problem but where? ® I came across anAppleROMCard Weeds To Trees ,Estimation Strategies 002C 20 XX XX 9003 4C El 88 60 without Instructions. Am I correct in Wood Car Rally Little Town Zoo 002C 20 XX XX 90 03 4C 71 8A 60 Paper Plane Pilot 002C 20 XX XX 90 03 4C D2 86 60 assuming it was used to switch between Wooly Bounce MECC Outline ,0039 20 XX XX 90 03 4C 72 OE 60 integer and Apple BASIC? MECC _Estimation Qulcksolve II 002C 202921 '9003 4C XX XX 60 Teachers, ~w would you like to use Exploring Gas Laws 0011 2003 21 9003 4C XX XX 60 Eric W Taylor CA halfofthe MECC library (54 titles) on BackYard Birds xxxx 20 Fl OF 90 03 4C XX XX 60 your hard disk without having to use Spelling Press 0093 20 ED 08 90 03 4C XX XX 60 Softkey for... theircrossloader? Itis possible with the Weeds To Trees 002C 204E A9 90 03 4C XX XX 60 help of B. Brett "Computist #53", Time Navigator Leaps Back /002C 2029 219003 4C XX XX 60 Dungeon Master's Assistant vol2 M.E.C.C. software (1987) and Momma Time Navigator OOOC 20.4E 21 9003 4C XX XX 60 SSI "Computist #77", M.E.C.C. 3.5" Disks Spelling Puzzles & Tests 005A 20 ED 08 90 03 4C XX XX 60 Requirements: (1990). Spellevator 0033 202921 90-034C XX XX 60 Apple JIgs I was using these softkeys to make Probability Lab 002C 20 29 21 90 03 4C XX XX 60 1 Blank Disk backup copies of my 5'.25" ProDOS Picture Chompers OOA3 20 02 21 90 03 4C XX XX 60 Any Fast Disk Copier disks and to transfer them to 3.5" disks. Patterns 0012· 20 EF 20 90 03 4C XX XX 60 Any Sector/Block Editor AfterI finished I wonderedifthey would Moneyworks 0049 20 EE 20 9003 4C XX XX 60 This article will show how to softkey work onmy hard disk. No! The softkey Instant SUlVey 002C 20 FO 40 90 03 4C XX XX 60 the D&D-Master As&istant vol 2 that is in issue #77 would make bootable cop­ Grammar Toy Shop 002C 20 29 21.90 03 4C XX XX 60 on the Apple Most Wanted list. I have ies that worke'd fine on 3.5" disks but Five Star Forecast OOOC 20 29 21 90 03 4C XX XX 60 . had this softkey done .for quite some they would give error messages when Fossil Hunter OODA 202921 90 03 4C XX XX 60 time butdid nothave the energy-to write iaunched from my hard disk. That is all Wooly Bounce 002C 200221 9003 4C A2 91 60 in. Now that the editor put out a call for except forTo Preserve, Protect and De­ Time Navigator Around The World, 202921 9003 4C 4B 75 60 articles I decided once again to contrib­ fend. Problem Solving With Nim 20 29 21 90 03 4C 17 80 60 ute to the only Apple magazine I sub­ I beganto search for the difference in Space Station Freedom 20 42 18 90 03 4CAl 87 60 scribe to. thedisks. I hadused issue #77 instead of Cleanwater Detectives 2002 21 90 034C·AE 89 60 In issue #79I read the softkey forthis issue #53 to softkey To Preserve, Pro­ Teacher Option Organizer 20 XX XX 90 03 4C 85 19 60 tect and Defend. I remembered that Pre­ same program by Terry Waskowich. Thi~ method wUI work for any 3.5" 90 03 BeC f1A4 {+O3} serve, Protect and Defend had,the same Although his softkey is quite close to ProDOS disk from MECC. Strangely, it 4C 43 22 'JMP 2243 pattern as the disks inissue #53 butthey what I <;tid and both softkeys should ,will not work on the 5.25" ProDOS C9 18 #18 werethreebytesoff. Soinsteadofchang­ work perfectly well, I went abQut my di~ks. Use the method in issue #77 or DO 02 8NE 11AA{+02} ing the 38 to 18 I NOPed ouJ all' of the softkey in a much different way than he #53 for 5.25 disks. 38 SEC , bytesstartingwith9003 4CXX XX and' did. This article will show that there are You can copy a.5.25" MECC Pro- 60 RTS many ways to complete a commontask. the disk booted and worked. I did not DOS disk by using COpyA. ..· think anything else about ituntil I start­ POKE 47397 24 They looked SUSpICIOUS. I wondered Terry's approach was one of top down ed trying to launch the programs from POKE 47398:96 what would happen.ifI ~hanged the.38 while mine is one ofbottom up. I think nard disk. RUN COPYA to 18 or CLC. I tned It and the dIsk the way I softkeyed this disk is general I thenNOPed outthe same patternon booted and worked· perfectly. enough that it can be applied in many Then copythe files overto a ProDOS theotherMECCdisks as I haddone with The disk still has .a Nibble count rou­ situations. To Preserve, Protect and Defend and fonnatted 3.5" disk and make the-above tine that prevents it from being copied Dungeon Master's Assistant is in­ they worked perfectly. As a matter of sectoredits and it work work onthe 3.5" nonnally but a manual bitcopy and two deed wordprotected. I hate wordprotec­ fact I no longer had to search for the disk. Itwill not work ifyou copythefiles sector edits makes a working copy. If tion because I am lazy and do not want pattern of: back to the 5.25" disk. someon~else can help ~move the Nib­ to be constantly searching for the man- It will not work with many ofthe 3.5 20 00 BF ble count routine, we will have a 8Oft­ ual to look lip a word or page number. 80 disks thathave recently beentransferred keyed MECC Copy System. This type of protection is especially 11 22 overfrom 5.25" Dos disks. MECCseems To make a backup copy of the 3.5" annoying after you are familiar with the - BO 98 to have used somethingsimilarto Unidos MECC 1991-1992 COpy SYSTEM! program and no longerneed the manual 18 onthese disks which means evenifthey LABEL UTILITY follow these steps: by yourside when you run the program. are softkeyed they will ~ot work,on a This softkey removes all traces of the 60 Step-by-step 2C E5 21 hardisk under ProDOS. word protection from the disk and al­ 30 91 I can notstress how important it is to 1. M3;ke a copy using a good manual bit lows foreasy archive copies to be made. 38 give as much infonnation as possible copy system that will ignore errors. For those of you who do not want to 60 when submitting an article. None ofthe 2. Sector Edit: know what I did go ahead and jump above softkeys would be possible if it straight to the cookbook instructions. were not for the infonnation from the BIk .em Enm 12 I started by making a copy of the OOF2 09F 00 0238 60 00 0218 00 othertwoarticles. Pleaseexplainas much 016A 09F 00023860 00021860 original disk to perfonn the softkey on.

12 Readers Data Exchange COMPUllST #84 This can easily be accomplished by us­ \20 98 AE\

COMPUTIST #84 Readers Data Exchange 13 that ifthe correct word is entered values 2. Search for 20 74 19 AD 00 lA'CD 67 Track Increment 1 to·35 .1 350 IF SL < 1 OR SL > 6 OR' are stored at locations $A89A and 18. (I found mine starting at block Now lets suppose you have 2 disk SL < > INT (SL1 THEN 340 360 PRINT,D$ "PR#" ;SL . $A89B. Ifthese values are not inserted $IB, byte $51 (track $3, s~ctor $C, drives in slot 6 and wish to make the into the code bad things will happen byte $51).. 370 POKE ,AD + 10,255 program remember that you want it to 380 CALL AD when it is run. 3. Replace the 2074 19 AD 00 lA with use both disk drives, answer the ques­ 390 PRINT D$ "PR#O" The question still remained as to 20 13 IA 4C 5C 18. • tions and when the computer asks ifthis 400 PRINT "COMPARISONOISO where the password check routine was ~ This replaces the call to the word is correct, ,type control-S-and.now these DONE." called from. Using the same technique I protection check and the loading ofthe are saved on the disk. So all you have to 410 END explained earlierI rebooted and inserted password number with a call·to insert do is BRUN the compare disks file and 420 POKE - 16368,0 a 68 AA 68 00 at 10cation$IAID. This 'the necessary code when the password it will use the new parameters without 4~0 A = PEEK (- 16384) replaced the code 602000A8. I allowed is correct in, the word protection check you having to enterthem in each time. If 440 IF A < 12~ THEN 430 the code to continue running and typed and a jump over the password number you modify DOS, the BASIC program 450, RETURN in the password when I was prompted check to the code where the other vital might not be ableto save the new param­ Checksums for il.Afterentering the carriage return code is inserted into memory). eters to disk. _ 10-$9E93 160-$5EE6 310-$030A the cqde crashed as expected and the A 4. Write the edits back.to the copy and, Ifyou need to modify DOS inorderto 20-$C~15 170-$88B2 320-$C704 register contained a 18 and the X regis­ hide your original disk. compare the protected .disk, first you 30-$832C 180-'$lFB5 330-$E685 ter contained a 53. Adding on~ implies must set the parameters and save them if 40-$B400 190-$BBOE 340':"$BF8B the next instruction will be executed at they are different. Exittheprogram (ctrl­ 50-$B674 200-$0192 350-$1503 location $1854. This implies the call to Michael A. Horton WA e). Bload compare disks. Make your 60-$B031 210-$C8BO 360-$87E6 the word protection check routine oc­ modifications. Start Compare Disks 70-$5BA9 220-$306F 370-$~79E curred at location $1851. Listing the EZ APT's with (DOOG). 80-$9A18 230-$35E7 380-$AA55 code (*184EL) around this location re­ 90-$lBF4 240-$76EC 390-$7840 Compare Disk program Onefinal note: to·get a print out by 100-$5122 250-$14B1 400-$261A vealed the following. BRUNing Compare Disks type in PR# *184EL Computist readers] have a few ques­ 110-$C04D 260-$0308 410-$A8B2 (the slot number that the printer is in 1­ 270-$A3C5 420-$8183 tions for you. Do you like games that can 120-$EAEA l=ml=xl=LCb~nk{O/l} 6) and then BRUN the fue. Don'tforget 130-$A140 280-$FACO 430-$8395 save the game ·to disk to be continued OO/184E:20 78 18 JSR 1878 Puts up the text to turn the printer'Qff by typing PR#O 140-$1CIA 290-$4403 440-$5ECA later? Have you been unable lofind the credh page after you are done. Good luck to all of 150-$2087 300-$OFA1 450-.$A90E saved game data? Would you like a 00/1851:20 7419 JSR 1974 Runs the word you out there and I· hope you fmd this .. program that can point it out for you on Compare Disks protection check program useful, I knQw I nave. OO/1854:AD 00 1A LOA 1AOD Load password almost any game? 0000:4C 23 00 60 01 60 ~l 00 $B923 Sounds too good to be.true, right?! COMPARE TWO· DISKS number required 0008:'i22 01 00 00 00 AD, 03 00. $46f8 Wrong! !! Now you will be a.~le to find OO/1857:CD 67 18 CMP 1867 Compare to 10 D$ = CHR$ (4)# 0010:CO 05 00 00 OB AD 04 00 $1EIB that saved data easily and ~~tll very little 20 PRINT D$ "BLOADOCOMPARE password number 0018:CO 06 00 DO 03 A9 00 60 $B463 effort. ODISKS" entered 0020 :A'9 FF 60 A9 00 85 01 8'5 $AE88 There is actually avery simple way to 30 HOME : VTAB·2 00/185A:DO 08 BNE 1864 {+08} Branch if 0028:03 20 00 00 FO 06 20 58 $OAA5 find this saved data on adisk. All you do' 40 INPUT "ORIGINALOS.LOTOOO:" password number 0030:FC 20 68 OE AD 07 00 85 $CC01 is make aback-up copy ofthe save dis~, JOS f 0038:00 A9 07 80 OC 00 20 00 $43F8 not correct play the game until "something" chang­ 50 IF OS < 1 OR OS > 60R OS 00/185C:A9 C4 ' LOA Password correct < > INT (OS) THEN 40 0040:00 DO 06 20 58 FC 20 4E $B496 #C4 es such as losing a few hit points, save. 60 INPUT "ORr"GINALODRIVEOO:" 0048:0E A5 00 80 79 OF A9 10 $6440 00/185E:85 50 STA 50 Store vital code the game and then compare the two into memory JOD 0050:80 43 OF 20 44 OF AD 79 $24EC disks. Saving the game again afterjust1 70 IF 00 < > -1 AND 00 <, > 2 OO/1860:A9 07 LOA '07 Password correct 0058:0F 18 60 09 00 8D 79 OF $B8C3 thing, changes: makes rmding it easier., THEN 60 00/1862:85 51 STA 51 Store vital code ~S·CD ,$I?~. This techni9~··works· because once' 80 PRINT -: INPUT "COMPARISON 0060:C9 24 BO 08 00 FO into memory . 00~8:02BO something in the game changes the data OSLOTO:" iCS OE AD 43 OF1869 $A5B6 00/1864:4C 99 A8 JMP A899 Jump to continue , that is :sav.ed is different. We can then 90 IF CS < 1 ORCS > 60R CS 0070:10 80 43 OF CE OC 00 DO $B305 program compare it to the starting data and the < > INT (CS) THEN 80' 0078: OA A9 10 85 02 A9 07 .80 $061E: 00/1867:00 11 BRK ·.·11 ' differences will be the infonnation that 100 INPUT "COMPARISONODRIVE 0080:0C 00 20 0000 DO 0620 $8107 00/1869:11 09 ORA (09),Y has changed in the game. One nice thing :" j CD 0088: 58 FC 20 5B OE A5 00 80 $312E 110 IF CD < > 1 AND CD < > 2 00/186B:OA ASL about this is that it can be don&Over and 0090: 79 OF A9 80 80 43 o~ )35 $00A8 THEN 100 00I186C:OF OF 07 OF ORA OF070F 0098:04 20 44 OF AO 00 B1 01 $BDEE over until you discover all the locations 120 PRINT PRINT OQ/1870:oo 03 BRK 03 that you need. Using tllistechnique 130 INPUT "FIRSTOTRACKOOOOO:" OOAO:Dl 03 FO 03 20 07 OE C8 $C526 00/1872:04 07 ISB. 07 makes APTing a game a. breeze'~· I did jFT ODA8:00 F4 AD.OB.OO FO OB A9 $lADE 00/1874:08 PHP - this in orderto get the locations] needed 140 IF FT < 0 OR FT> 35 OR 00BO:80 20 EO FD 20 EO FO 20 $C069 00/1875:0B PHD to createthe Alternate Reality Character FT < > INT (FT) THEN 130 00B8:75 OE A9 00 80 OB 00 E6 $8D3A 00/1876:00 OF A2 ISB A20F Editor in issue #55. Apparently some 150 INPUT "LASTOTRACKOOOOOO:" 00CO:02 E6- 04 AS 04 C9 99 00 $28F1 li~ting jLT 00/1879:00 BE BRK 8E errors crept into the ofthe charac­ 00C8:05 AD 79 OF 18 60 09 00 $C469 ter editor. On lines 760, 1010, 1050, 160 IF LT < 0 OR LT > 35 OR Examiningthe above code showsthat 0000:80 79 OF C924 BO 2'7 CO $9198 1140"1150the number sign should be a LT < > INT (LT) THEN 150 once the password has been entered:and . 170 IF LT < FT THEN 130 0008:08 00 FO 02 B020 CE OC $C1E1 its number has been detennined the ac­ raised to a power sign (cnange # to 1\). 180 INPUT "TRACKOINCREMENT OOEO:OO DO AF AS 00 18 A007 $347E tual password the code wants to see is Now the comparison pI'()gtalncomes 0 :" ; TI ODE8:60 09 00 88 DO FA 85 00 $57A8 loaded and it is compared against the, in two parts. One is the mochine lan- 190 IF TI < 0 OR TI > 35 OR 0f>Fo:d9 24 BO OA CD 08 00 FO $6BEE .password number the, user entered. As guage file (Compare Disks) that does TI < > INT (TI) THEN 180 00F8: 02 BO 03 4C 39 00 AD OA $22EE. in the word prot~ction check .routine if the actual com~ari~g and the other is a 200.PRINT : PRINT "AREOTHESE OEOO:OO FO 01 69 4C DO 03 84 $BB7B the passwords do not match then vital BASIC file (Compare Two. Disks) that OCORR$CT (yIN)" code is not inserted into memory (in this allows you to modify th~parameters of 210 AD= 'PEEK ( 43634) + PEEK OE08: 07 AD OB 00 DO 33 A9 FF $FBEE. ,case the code that allows the initialize thecomparisonprograman4'~~,d1ose (43635) * 256 OEI0:8Q OB 00 A9 27 85 05 A9 $5679 modificationsifyOUWisfter~~ OE18:0F 85 06 20 8E OE AD 79 $E53C disk option to operate). .••.,. out 220 LE = PEEK (43616) + PEEK ;i'·':::';>,:"F',is,~· '·~43~.1'7l* That is all the analysis that must be the differences. Compare' 256 OE20:0F 200A FD A9 2F 85 OS $AAC2 "stand alone" propun.• y" ....• Z.30.~~·~~o OE28:A9 OF 85 06 20 8E OE AS $BFCF done for this softkey. The softkey Js to, ·2~~x.)!~)~::=:>Z06 THEN POKE ­ OE30:02 29 OF 20 OA FO A9 39 $197B make the code think it passed the word, BRUN it and it wile" '~')~~)8{~J>G()TO 30 OE38:85 05 A9 OF 85 06 20 8E $7379 protection check. The code that is in­ disks according to the ~'1V~4 2$!;,~,~~'0~> 2.1 7 ,AND A < > serted at location $A89A and $A898 parameters. This pro~)):~UDderl)4?THEN 2 30 OE40:0E A5 07 20 DA FD A9 AO $4t4F must still be inserted. Also the code that DOS 3.3 only. Ify'->U til08iI,!~;~,' 'P. 260 POKE AD + 3, OS: POKE AD OE48:20 ED FO A4 07 60 AO 00 $9095 is inserted at $50and $51 mustbe insert­ read "protected, disksntbe~ .,d1is pro- + 4,00 OE50:B9 9B OE FO 20 99 A8 05 $08BC .00. The ~asiestway to accomplish this is gram can compare protected ·disks too. 270 POKE AD + 5, CS: POKE AD OE58 : C8 DO FS AO 00 B9 Cl OE $ACCD to replace the call that runs the word Compare Two Disks was made to allow + -6,CO OE60:FO 20 99 A8 ~5 C8 DO FS $FCCF protection check with a call to insert the the user to easily change theeornpare 280 POKE AD + 7, FT: POKE AD OE68:AO 00 B9 E9 OE FO 13 99 $32C1 the~ifferenees. code ,at locations $A89A and $A89B. parameters or print out + 8,LT OE70:A8 05 C8 DO F5 AO 00 B9 $A088 The limits allowed are : !C',,_, 290 .POKE AD + 9, TI Then afterthatcall is donejumpoverthe OE78:0C OF FO 06 99 DO 07 C8 $389C H,;.; '~i;H:"'iJ'C' 14?,~~N PRINT 0$ ,;''':~',' , code that.compares the password num­ >:;:," ISK$·, A" OE8D': DO F5 80 10 CO AD 00 CO $aGaI ber to where the code is inserted at St';GOTO .230 OE88: 10 FB 20 58 FC 60 AO od $E71A and ,:.,.~~~t{~ locations $50 $51. "DOOyOUO OE90:B1 05 FO 06 20 ED FO C8 $6971 .:);,(.:.""Ji~ooi' (yIN) '1 Step-by-step "·';,.:&\~,i1.:32:e"60's;UB .. '420' OE98:00 F6 60 C9 CE 03 C502 '$C020 OEAO:D4 AO CF 02 C9 C7 C9 CE $94EO 1. Make acopy ofthe original disk using 330 IF A = 20,6 THEN 370 OEA8:C1 CC AO C4 C9 D3 CB AO $C2B1 any fast copier.. 340 INPUT "SLOTOtOFOROPRINT ER:" rSL OEBO:C1 CE C4 AO 00 02 C5 03 $OB02

14 Readers Exchange COMPUllST #84 OEB8 : D3 AO Cl AO CB C5 D9 AE $BCFD CMP LASt.TRACK .HS 01 COMMAND (01 = READ, BEQ.3 02 = WRITE) OECO:OO C9 CE 03_ C5 02 D~ AO $754C BGE READ.2ND.DISK ERROR .HS 00 WHAT ERROR OC­ OEC8:C3 CF CO DO Cl D2 C9 03 $F411 .3 LOA PAGE CURRED OEDO:CF CE AO C4 C9 D3 CB AO $955C CLC .HS 00 OED8:Cl CE C4 AO DO D2 C5 03 $BC2F ADC #$10 .HS 60 LAST SLOT # USED STA PAGE .HS '01 LAST DRIVE' USED OEEO: D3 AO C1 AO CB C5 D9 AE $EBlO DEC TRACKS.TO.READ OCT .HS 00 OEE8:00 C9 CE D3 C5 D2 D4 AO $12B1 BNE .2 .HS 01 PHASES PER TRACK- OEFO:C2 CF D4 C8 AO C4 C9 03 $F57E READ.2ND.DISK .HS D8EF TIME ON COUNT OEF8:CB D3 AO C1 CE C4 AO DO $1F86 LOA #$10 ERROR.TABLE OFOO:D2 C5 D3 D3 AO Cl AO CB' $7593 STA POINTER+1 - .HS 00000 000 LOA #$07 OF08:C5 D9 AE 00 DO D2 C503 $2A53 .HS 00000 000 .. STA TRACKS.TO.READ .HS OF10:D3 AO C1 CE 09 AO CB C5 $7'OAO 00000 000 JSR IS.DRIVE.SAME .HS 00000 000 OF18: 09 AO 04 CF AO C3 CF CE $9AF9 BNE .1 OF20:04 C9 CE D5 C5 AE 00 04 $091F JSR CLEAR.SCREEN OF28:02 Cl C3 CB AO A4 00 AO $20F9 JSR PRINT.COMP Rich Etarip . WI .1 LOA BASE.TRACK OF30:03 C5 C3 04 CF D2 AO A4 $ADOF STA TRACK' OF38:00 AO C2 09 04 C5 A8 03 $61~0 .2 LOA #$80 .Bug in Gorgon Softkey OF40:A9 BA 00 10 A9 OF 80 7A $6208 STA PAGE Inissue#82, page10,column4, near STA POINTER2+1 OF48:0F 18 60 43 OF 80 7E OF $EC59 JSR READ.TRACK the end of paragraph 4, it says "If you OFSO:20 65 OF AC 7A OF AD 82 $BEB1 · LOY #$00 have the right sector you'll see $00 $~O OF58:0F 99 8A OF CE 7E OF CE $3244 .3 LOA (POINTER),Y $FB $27.". It should read "$04 $20 $FB OF60:7A OF 10 EC 60 A9 OF AO $A616 CMP (POINTER2),Y $27". BEQ.4 OF68:75 18 20 09 03 BO 05 A9 $F03B ~ JSR DIFFERENT Bugs in Captain Goodnight OF70:00 80 82 OF 60 01 60 01 $526C .4 INY OF78:00 00 00 86 OF 00 20 00 $27CE BNE .3 Softkey ,LOA DIFFERENT.FLAG OF80:00 01 00 00 60 01 00 01 $328E I hav~ discovered, two bugs in the BEQ.S OF88:08 EF 00 00 00 00 00 00 $EFOB LOA #$80 softkey proce<;lure: OF90: 00 00 00 00 00 00 00 00 $5FFB JSR CHAR.OUT Page 15, column 4, the 6 line hex OF98:00 00 $55C5 JSR CHAR.OUT listing for 9400: the 5thline should start JSR PRESS.KEY with 18not 18. ~ COMPARE DISKS.SOURCE .5 LDA #$00 Page 16, column 1, the 14 line hex STA DIFFERENT.FLAG .OR $0000 INC POINTER+1 listing for 8000: the 12th line should .TF COMPARE DISKS INC POINTER2+1 start with 60 8D FF BFnot 60 BD FF DOS.EXIT .EO $0300 LOA POINTER2+1 BF. RWlS .EO $0309 CMP#$90 KEYBOARD .~O $COOO The softkey refers to listing 1 & 2" J3NE .3 neitherofwhich were printed. They are CLR.KEYBOARD .EO $CO10 . LDA TRACK CLEAR.SCREEN .EO $FC58 CLC notnecessarybutjustthereforverifying HEX.OUT .EO $FODA . ADC TRACKJNCREMENT the assembly listing after keying in the CHAR.OUT .EO $FDED STA TRACK hexdump. BASE.TRACK .EO $00 CMP#$24 POINTER .EO $01,02 BGE DOS Boot code tracing Star Maze POINTER2 .EO $03,04 CMP LAST.TRACK . MESSAGE ,.EO $05,06 BEQ.8 BYTE .EO $07 BGEDOS Softkey for... START JMP START1 .8 DEC TRACKS.TO.READ Star Maze SOURCE.SLOT .HS 60 BNE •.2 SOURCE.DRIVE .HS 01 LOA BASE.TRACK .HSOO Sir-Tech TARGET.SLOT .HS 60 OlC . TRACK.MESS Here is another Most Wanted List TARGET.DRIVE .HS 01 LOY #$07 .AS_ e-"TRACK $. ADC TRACKJNCREMENT . protecte~ STARTING.TRACK .HS 00 .HS 00 Softkey. Star Maze is well as LAST.TRACK .HS 22 DEY farasthe diskfonnat. Thedatais encod­ SECTOR.MESS TRACKJNCREMENT .HS 01 BNE .6 .AS ." SECTOR $. ed in4+4, contains asixbytedataheader AMJ.BEING.CALLED .HS 00 STA BASE.TRACK .HS 00 and itloadssimilartotheSierraOn-Line DIFFERENT.FLAG .HS 00 CMP#$24 TRACKS.TO.READ .HS 00 BGE DOS BYTE.MESS spiradisc protection. However, the boot CMPLAST.TRACK .AS ." BYTE(S):" code is very' simple to trace and the IS.DRIVE.SAME .HS 00 LOA SOURCE.SLOT BEQ.7 program canbe captured as a single file. BGE DOS CMPTARGET.SLOT PAGE :HS 1.0 .7 JMP LOOP Beginthe bootcode trace byentering­ BNE .1 READ.TRACK DOS LDA AM.l.BEING.CALLED the monitor. LOA SOURCE.DRIVE LOA #$OF BEQ .1 CMPTARGET.ORIVE STA SECTOR CALL-151 RTS BNE .1 CLC As always, the DOS boot routine .1 JMP DOS.EXIT LOA #$00 AOCPAGE must me moved to RAM to modify. DIFFERENT RTS STABUFFER 9600

COMPUllST #84 Readers Data Exchange 15 easily be changed to jump to the moni­ track 0 is copied, run your sectoreditor.' l030-$F390 l080-SeF3C ed a large portion ofthe program. There tor. The following edits will cause the boot The first changes to be made to the are two ways to deal with this problem. 861:59 FF code to read Track $16 S~ctor $0 into disk are in the EOA loaderso itreads the The easiest way would be to patch a . Boot 0 at $9600 is still exiting into $200 and JMP to it. nonna! format. Don't forget to re-write little routine at the start of the program $9801 so change it to go to.$801 where :fJi sa.ana.Enm 12 the sector. to make the two modifications before our modified boot 1 is at. At this point, $00 $01 EC ED ?? ?? 1600 IrK ~.ana EIlm IQ startingthe game, but, being as stubborn the bo~t code is ready to load in the FO F1 ???? 0002 $00 $09 $39 B8 AA as I am, I decided to hunt down the game. ' F4?? 01 $00 $09 $43 CF AD encoded memory and change it right on 96FA:08 Atbyte 0 ofthis same sector, enterthe At this point you could~ boot the disk th~ disk. It would take pages to explain 9600G following: .. and it would work up to a point. Then the entire process offinding and decod­ The game is now in memory and it's Irk ~.em EIlm IQ you would get a -beep- and the wonder­ ing the memory but here is a quick run , down of what I did. I interrupted the time to reboot DOS so it can be saved. $00 !OO 1 $00 ?? A9 B7 NJ E8 20 ful. message' 'ERR'. This is EOA's sec­ Insert a slave disk with NO HELLO ?? B5 B74C 00 02 ondary protection hard at work. It was boot code at a point where the memory down~the program for saving but fi~t, move page Then rewrite the sector. The entry· time to firid the,diskcheck and disable it. was still encoded and marked $8 to safe memory. After rebooting, point for the Rings ofSaturn Rwrs is I started by patching a JMP $FF59 into values inthelocations lneededto change. enter the monitor and move page $8 $B603. Instead of searching the disk the boot code so it would give me con­ Then I booted the disk, entering the back. and changing every JSR $B6D3 ~o JSR trol once the loader was in memory. By monitor when the game was loaded ,in SOOO<800.8FFM $B7B5, there isamuchsimplermethod. listing through the code and examining and checked the values in the decoded C600G Since Track $0 Sector $0' isloaded into it closely, I found some- thi~g suspi­ fonn. Byhaving the value inits encoded CALL·151 $B600 at boot, and there is nothing cious in the $BBOO area. It was reading as well as decoded forril, I was able to SOO<8000.80FFM important at $B603 in this sector, sim- from the disk, comparing memoryloca­ arrive atthe Exclusive-OR value used to ,ply write a JMP $B7B5 at $B6D3 and it tions, and branching conditionally...all encode each byte. I then took the values The game is almost ready to be saved I needed for disabling the check routine but a few-changes must be made first. will work just fine. Read Track $0 Sec­ ofthe ingredients for a disk check reci­ and used the encoding value to get the The game accesses the disk for high tor$0 and at byte $D3enter '4C B5 B7' pe. This appeared to be what I was and write the sector back to the'disk. lookingforso I beganmakingmodifica­ proper result. Here are the final sector scores so these routines must be dis­ edits: . abled. Pot an RTS at the start of each Ids ~.em EIlm 12 tions. At the tail end of, the routine ~.em routine. $00 .$00 D3?? 4C 85 B7 ($BBE3), two values are pulled offthe Ilk EIlm IQ $08 $04 $2E 13 D3 That's all there is to it. Now, you can stack followed by an RTS. This is where 3003:60 $07 $OC $E9 M= 47 3E50:60 scratch Rings of Saturn from the Most it appears to go upon a successful disk check. Otherwise, at $BBAO, it returns That's it! Your working copy ofAxis The high score buffer is at $AECO Wanted List. without pulling the two values off the Assassin. All total, it took about six and itshouldbeclearedbecausethe high Softkey for... stack and because the stack detennines hours of work to arrive at ten minutes scores will 'no longer be read from the the RTS address, it returns s~mewhere worth of Softkey procedure. Until next disk. Otherwise, the.high scores will Axis Assassin else. To bypass, this problem, always time...Keep Cracking! comeup as 'garbage'. There is already a Electronic Arts pullthe two values from the Stack before .routine in the program at $3E4Fto clear I first expected Axis Assassin to be returning and it will work. The changes Softkey for... the buffer'so at $7FA we'll call this protected much like Archon" Skyfox, must be made to $BBOO and it can be Keyboarding Klass . routine and thenjumpto $5FDO to start and many other Electronic Arts (BOA) found on Track 0, Sector 2. Math Facts Tracker the game. games, but it is not. The disk fonnat is T,.a, CI'I D".o Cf'IV\'\ T~ '7FA:20 4F 3E 4C DO 5F .J.Ln ~.w.JJI'.I..U4U...ut Mastery Develonment rather basic afld somewhat consistent $00 $02 $AD 00 68 r BSAVE STAR ~E,A$7FA,L$7406 with the' other EOA games but the sec- $AE ~ . 68 ThisSoftkeywillinstructyouonho~ All done! ondary protection is extensive. That $AF 00 00 todeprotect two disks released by Mas- might be why it's on the Most Wanted Now if you were to boot the disk' it tery Development Both disks contain Softkey for... List The only two nonnal tracks on the would boot completely and the game the same fOllIlat and the protection is

Rings ofSaturn disk are tracks 0 and 21 and track'21 is r would start...BUT...There is yetanother . similar. Tracks0-2 are nonnalandtracks ? blank so it need not be copied. Tracks disk check between each level of the 3-22 have the address/data prologue Requirements: $01 to $lFhavethe typicalEOA altered gamesothismustbedisabled.Isearched bytes flipped. Where D5 AA AD is, . datamarksofD5BBCF.Notethattl}ere the disk for accesses to the disk read nonna! for data, they changed it to Locksmith FastDisk Backup (or a copy D5 may be other versions ofAxis Assassin address ($COEC or $C08C,X' depend- AA 96 which is nonnal for address and program that bypasses errors) Any copy program that copies select with different protection. ing onhow they use it) and found sever- vice-versa. tracks The first step in cracking this disk is al onTrack $OE. Aftersome examining, This Softkey was done on the demo Sector editor copying the disk onto a nonna! fonnat. the main check routine is onTrack $OE, copies ofthese games and I cantt guar­ Super lOB will work for this purpose. Sector$05, byte $14. This· is just a disk antee that it will work on -the actual Even though Rings of Saturn was. a Install the provided Axis Assassin con- check and does not return with a check_manufacturer disk. It's very likely, tin:i~ 1981 release, Gust about the I was troller into Super lOB and proceed to sum to the call routine. This means that though,thatthey are protected the same. learning aboutdeprotection) the protec- copy the disk. When the copy isfUl- it can be disabled with an RTS. Both disks are formatted the same . tion is still enough to keep the average ished, reboot DOS and run your sector Ilk ~ .em' EIlm IQ way so you can copy them both with the person stuibped. In my first several at- editor. SuperlOB could have been wtit- ~E ~5 $14 20 '00 SuperlOB controllerlisted atthe end of tempts to crack this disk I came up ten toperfonn thesectoredits but I will After this modification I bOoted the the article. Once the copy-is made, a few empty. Tracks 3 through 22 are nonnal be explaining each sector edit as we go disk and crossed my fing~rs Wh th sector edits must be done. . with the exception ofsectors $E and $F along so it will be more easily under- game loaded in and the title 'pagee~: Eyen though the disk (original) has on track $13 and $14. Tracks ~1 and $2 standable. up, it rebooted. This meant one two tOllIlats, ~ey use the same RW!S contain typical 6+2 data however, only CONTROLLERthing...secondary-secondaryprotection. !orthe whole dIsk and they self-modIfy sector 0 has an address headeJ.. This Inother words, checking the disk check It de~nding on w~at partofthe diskitis would cause some difficulty in reading 1000 REM IJAXISASSASSIN routine to make sure ithasn'tbeentam-· readmg. As mentIoned abOve, the only ~ these tracks. However, ·by further ex­ 1010 TK' = O:ST'= O:LT pered with. This is common with EOA address/data mark changed was the $96 amination, I concluded that tracks $1 32:CD = WR software. The check routine shouldn't to $AD and vice versa. and $2 only containthe DOS ofthe disk 1020 T1 = TK: GOSUB 490 which will notbeneeded forthe finished 1025 IF ~K= 1 ~HEN GOSUB 210 be too hard to find because it happens MATH, FACTS TRACKER product. Therewould bequite abitmore . 1030 GOSUB 430: GOSUB 100:ST rightatthe start ofthe program. I started Ilk ~ S)m.Enm 12 involved ifthese tracks were needed but =ST+1:IF ST

16 . Reader. Data Exchange ' COMPUllST184 - , 1010 TK=O:ST=O:LT= 35:CD= WR processmaybeabittimeconsumingbut movethediskann, youhave tomultiply 'LOADER' whichwesavedearlier. The 1020 T1 = TK: GOSUB 490 maybeworthittoyou. Besuretofollow the track by two before calling it. The program should load into $6400. 1025 IF TK > 2 THEN POKE the procedure VERY CAREFULLY. Bandits datais writtenonhalf-tracks so Four sections must be taken from 47356,150: POKE 47466,17.3 One minormistake couldlead to a non- track 1.5 times 2 equals 3. Track 2.5 DOS. They are: 1030 GOSUB 430: GOSUB 100:ST wodting copy and a lot of worle gone times2equals5,andsoonandsoforth... =ST+1:IF ST< DOS THEN 1030 Read address routine $B944 down the drain. The· first step (as men- Location $437 is for the end track. 1040 IF BF THEN 1060 Read data routine $B8DC 1050 ST = O:TK = TK + 1: IF tionedabove)isgettingourhandsonthe Whenthe loadersteps to the next track, Post-nibble routine sa8C2 TK < LT THEN 1025 game loader. itINCrements $57 twice and then com- Read translate'table .$BA96 CALL-151 paresittoS437. If$437 contains$FF, it 1060 GOSUB 230: GOSUB 490:TK Enterthemonitorand·move the DOS = T1:ST = 0 96OOcC600.C&FFII reads to the end of the disk. Location routines into the loader area. 1070 GOSUB 430: GOSUB 100:ST 96FA:98 N9801':AD E8 CO 4C 59 FF $34is simplythe slotnumbertimes SI0 CALL-151 =ST+1:IF ST< DOS THEN 1070 9600G and should be $60. 1080 ST= O:TK= TK +1: IF .BF= 64B8cB8C2.B99FM 98OO<800.aFFII We're ready for the first read pass so 6596cBA96.BAFFM o AND TK < LT THEN 1070 982F:64 execute $BOOO. The text screen will fill 1090 IF TK < LT THEN 1020 9859:68 withclutterandlo-resgmphics will tum The DOS" 6+2 encoding requires 2 1100 HOME : PRINT "DONEOWITH buffers for the decoding. We will use Ocopyn : END 986D:59 FF on but don't be alanned because it's 9600G supposed to do that. The disk drive will $600,. for one and the destination buffer (address is stored in $3E and S3F) for Checksums By following the above steps, the also recaIi"rate as ifitwere booting but theother. Severalmodificationsmustbe 1000-$3568 1030-$4978 1070-$BF01 loadershouldbe inmemory at$6400. It it is just seeking track 0 so the loader made to these relocated DOS routines 1010~$3266 1040-$7727 1080-$A8BD nonnaIly loads into·$400 but you can't knows where it is. for them to work with Bandits. Type 1020-$CllA 1050-$C27D 1090-$76E6 worle with.it in the text page. Reboot a BOOOG VERY carefully... 102S-$5F79 1060-$8704 "1100-$61FO slave disk and save the loader for safe Tracks $1.5 to $8.5 are now in at 64BF:B1 3E EA keeping. (thediskyoubootMUSTcon- $1000-SFFF. TheRwrs should still be 64C4:06 Softkey for... tain a nonnal Apple RWfS) intact and we're going to use it to write Bandits C600G outthe diskdata. Themulti-sectorread! 64C8:06 64CD:EAEA Sirius BSAVE LOADER,A$6400,L$400 writeroutine is at$B'793 butwe'll ad~ a few loads and stores to it so we don't 64F9:41 "They said it couldn't be done..." Youwillneed a blankinitializeddisk have to keep entering the same lOB 6501:05 quoting the anonymous cmckist, sup­ for the copy so initialize a disk if you infOlmation every time we call it 6503:41 posedly the first to cmck BANDITS by haven'talready. TheninsetttheBandits B77C:20 00 B6 A900 aD 4704 . 6506:06 Sirius Software. This disk had heenoD disk and enter the moriitor. :A90F SO ED 87A9 80 8D 650A:41- the Most Wanted List for quite some CALL-151 :E1 87 A9 8F 8D F1 87 6512:05 time back in the SO's but, for some Wewillbeusingmemoryfrom$l000 Cause the RwrS to exit tothemon- 6514:41 91 3E EA reason,nolongeris. Banditsisaboutthe to $9FfF for reading the disk so move itor reset routine after writing. '6538:18 toughest crack I've done to date, but theloaderto$800,disconnectDOS,and B79A:OO BD 653D:41 with a good amountofwork, itCANbe clearmemory. - B7B4:4C 59 FF 6542:41 . done. That's what'this long .awaited 8OO<64OO.67FF11 Now enter the remaining lOB data. 6565:EA EA Softkeyarticlewillshowyouhowtodo. FF59G Thetracks, sectors, andpageswillall be 656E:41 Someofthe procedureisquiteinvolved 1000:00 N1oo1c1ooo.9FFFM written backward. 6575:41 and may be hard to understand, but if A fewmodificationsmustbemadeto B7EB:OO 08 Write a routine at $6700 to call the you have the ability to follow instnlc­ the loader so it returns to the monitor B7FO:OO DOS routines to read in a track, then tions carefully, this will lead you to a and doesn't check forerrors. B7F4:02 enter the sector skew at $67E9. Com­ cracked copy of Bandits. I will try my, 965:2C Jnsert the copy disk and ~$B77C pare $6700 with listing 1. best to explain the" Softkey procedure B22:2C towrite itOnceagainthediskdrivewill 6700:20 3A05 A4 2D 89 E9 07 buttotrulyunderstandpartsofit,ittakes B29:59 FF sound lilc.e, itis rebooting butjusttoseek :C5 42 DO F4 AgOG 85 3E a col1...'idemble knowledge of DOS. I At $BC6 ($7C6) is a $22 byte table track O. :A5 30 85 3F 20 D2 04 20 always recommend the book' 'Beneath 'that specifies where in ~emory,to load B77CG :88 04 C6 30 A2 60 C6 42 Apple DOS'. each track. We will be reading 8 tracks Insert the Bandits disk again ,~den- :10 DE 60 EA EA To explain things a bit, the Bandits ata timeso~tableshould ~ll ittoread ter the next nmge oftracks. 67E9:OO 07 OE 06 OD 05 OC 04 disk is encoded in4+4 (whatSiriusdisk into $1~through$8FFF.Track 1uses 801 E:t3' , :OB 03 OA 0209 0108 OF isn't?). The data is not split intose~rs thevaluein$BC7,track2 t$esthevalue 8022:22 The main section of the loader must but could' be considered as one'large in $BCS, and etc. BOOOG be altered to call ourtmck read routine. sector that is $(l)() bytes long after de­ BC7:10 20 30 40 50 60' 70 80 10 20 30 Insert the Copy disk... How this part works is rather simple. It coding. To make things worse, the data :40 50 60 7080 1020 30.4050 60 B7EC:10 comparesthecurrenttrnck(location$57) is not directly encoded in 4+4. What I :70 80 10 20 30 .40:50 6070 80 90 B77CG totheendtrack($437). Ifgreaterthanor mean by this is that the data is byte Enterthis data continuously without Insert Bandits... equal, ,it turns off the drive and exits. encoded by means of Exclusive- OR pressing return. until you've typed the 801 E:23 Otherwise, itcalls the trackseekroutine before it is nibble encoded on the disk. lastbyte. You'll mtice at the end there ($72B) and then the track load routine Plus, there are several checksum bytes 8022:32 ($700). Finally, it increments the track stuckinthe mwdiskdataalongthe way. is a 90. That's because inthe final copy 8000G pass we willbe reading 9 ttaeks instead Insert the copy disk... and jumps back to the'beginning. Even though Bandits is a 1981 release, of 8. H we were to read 4 passes of 8 87EC:18 · 643C:C&57 I've yettofind a bitcopierthat cancopy ....ld be I ft B77CG 643Ec648C.64A6M it A long look at the.'Bandits main tracks, one stray track WOW" e to copy. Now enter a small routine that, Insert Bandits... 644A:EA EA loader proved it to be quite a complex moves the loader to its proper place,' 801 E:33 6455:25 loading process. I never came to fully specifies the track, and calls the loader. .8022:FF 6459:18 69 OB 85 30 A9 DB 85 understandexactlyhowtheloaderworks BOOO:A2 00 BD 00 08 9D 00 04 BOOOG :42 AS 57 A6 34 20 2B 07 but with a lotofsnooping around, I w~ :BD 00 09 9D 00 05 BD 00 Insert the copy disk... :20 00 07 E6 57 E6 57 4C able to figure out how to use it to read :OA 900006 BD 00 DB 9D B7EC:21 :3E04 any desired nmge oftracks. This made :00 07 E8 DO E5 A9 03 85 B78A:90 downloading the disk data to a normal The loaderis complete so save it to a :57 A912 aD 37 04 A960 B78F:9F disk quite possible. It's almost ironic slave disk (not the Bandits copy) to be :85 34 20 00 B& 20 00 04 B77CG thatSiriusmadethediskfonnatso com~ safe. :4C 59· FF Ifyouhave gottenthis far, thecopyis BSAVE LOADER2,A$6400,L$400 plex butmade theloaderso easy to use. B6OOcC600.C&FFM complete! Now that the. game is on a We can copy the disk but first we have nonnaIdiskformat, theirloadermustbe Thenext step is to write the loaderto 8654:60 track 0 of the Bandits copy. This is to get our hands on the loader. reconstructed to read this fonnat. This is accomplished by doing a par­ We will be using part·of the $C600 technically the 2nd stage boot loader. tial bOot code trace. Then using their boot program to recaIibrate the drive Writing the DOS 3.3 Insert the copy disk. We will use the loader to read, and the RWTS to write, arm to track 0 so the Bandits loadercan BANDITS loader multi-sectorroutine again to write to the we will do a manual copy ofthe entire seek the correct trclck. It will aIso be Unfortunately, as mentioned earlier, disk. First, ent~r the correct lOB infor­ disk onto a nonnal fonnat. From there, canedbeforewritingtothe monaldisk. the Rwrs area is occupied by program mation: we will write a compact loader for the Theroutinewasmovedto$B6OO andan data. This'is quite an inconvenience. In B7EB:OO 00 04 disk using some ofthe Rwrs routines. RTS placed,in the routine so it returns such a situation,.one must either relo­ B7FO:006700 0002 In most cases, you can·use the nonnal afterthe disk ann is moved. cate the Rwrs when space pennits, or 87E1:04 RWfS right where it is butin this case, If you list the routine at $BOOO, it is writea compactedDOS.Thisiswhatwe This tells the loader to write to track the RWfS areais oc~upiedby data. We storing in locations $57, $437 and $34.' are going to have to do. Startby reboot­ osector4 and write 4 pages ofmemory. havejustthetextpagearea($400-$7Ff) Location$57holdsthestarttrack,times inga slavediskandloadingtheprogram It's ready to write so call the routine~ to work with for the loader. The entire 2. When using the track seek routine to 8793G

COMPUlIST184 R••d.... Data Exchange 17 Now run your· sector editor for the because you can't just easily replace Now enter the lOB infonnation to tine, it was most likely encoded some­ final Step ofthe Softkey. Track 0 sector their DOS with a nonnal size RWTS. write the data the same way it was read where on the disk. In an attempt to find o(boot 1) has to be modified to read in Fortunately, theirRWTS (orRTS) lives in. the routine· in memory or a decoding the loader. Forsome reason, ifyou read at $7600 and the nonnal RWTS area is 76EB:OO 00 01 routine, I beganto look at the boot code. the loader directly into $400 from the not used by the program. What we are 76F1 :10 On track 0" sector 1 I found a JMP disk, it takes about 10 times as long to going to do is read in the disk data F6:60 . $7000so I patched in a JMP $FF59 and read in, so instead, read itinto $2400 and manually using their loader, and write it 7D59G . (write pass 1) "booted the dislc. Then looking at $7000, move itdown to $400 before jumping to .backoutusingnonnalOOS. Eventhough 76F1:80 I immediately found something suspi­ it the loader at $7600 is an obstacle in this F6:2F cious. A small routine at $7006 decod­ Ids ~ _ frgm Ia. process, all of the disk data can still be 7D59G (write pass 2) ed a large portion ofpage $7D. I c~ed fOO fOO $4A?? 4C 80 read in at one time because only Tracks Even though we won't be using their this routine so I could then look at the fOO fOO $FE?? 23 04 -$O-$B are used' and there are only 13 DOS to read from the copy, there is quite memory in the decoded fonn. At $705F The boot stage is now jumping to' ($C) sectors per track. abit ofprogram code in the loader area. there was yet anotherdecode routine for $8BO which is where we will enter the Begin by booting a nonnal DOS 3.3 Plus, their lOB will still be used with the pages $7E-$A6. following routine to turn on hi-res page disk and freshly initializins the target nonnal RWTS so the loader must be The encoding. was done by Exclu­ 2, memory move the loader from $2400 disk" for the copy. written to disk. On the original, it is on sive-ORringeach byte with the byte downto $400, and, JMP to $41F to load INIT HELLO - track O.but Our track 0 contains the before it. After calling this routine I was the game. Begin entering at byte $BO. Now, without tumingoff the com­ nonnal RWTS. The next available track able to search through all ofthe decoded AD 50 CO AD 57 CO AD 52 puter, insert the Space Album disk and is SOC. Before writing it, several modi­ memory and right at the end in page $A6 CO AD 55 CO AO 00 B900. boot it with aPR#6 command. When the fications must be made, so it works with Ifound the disk a:ccess I was looking for. 24 99 00 04 B9 00 25 99 title screen appears, press RESET sev­ the normal RWTS. Ifitdoesn't find what it's looking for, it 00 05 89 00 27 99 00 07 eral times until thee prompt(}) appears. 7658:8587 goes to $A69A which clears memory C8 DO EB 4C 1F04 Then, enter the monitor. 763E:2C and reboots. Ioriginally patched an RTS Finally, rewrite the sector....and there CALL ·151 7CE4:49A1 at the beginning of the disk routine to skip it but found out that it didn't work. . you have it! The cracked copyable ver­ The first thing we'll do is call their 7CEB:49 A1 My next thought was to put an RTS-at , sion of BANDITS! Hopefully every­ loader to read 60 sectors into $1000 .7CF2:20 00 79 the beginning ofthe reboot routine so it thing works correctly for you. Ifnot,·you through $7000. Their lOB is at $76E8 7900:A9 A1 85 48 4C BC FE would return from the routine instead of may have possibly made en error along and to be tricky, they 'flip-flopped' the The lOB already points to track SOC reboot and this worked. When dealing the way which is easy to do in a long track and sectorlocations. Where $76EC sector$00 but itstill must be set to write with encoded memory, you wanttomake procedure such as this,. The boot process is nonnally track, $76EC ~s sector and $8 pages from $7600. as few byte changes as possible because will take abitlongerthan on the original $76ED is track. Also, location $F6 spec:­ 76F1:76 for every byte, you have to find its disk because nonnal sectorized loading ifies the n~ber of pages to be read or F6:08 encoded equivalent. I wanted t get out a sector editor and read Track 670E- STA $3E byte of destination buffer 91 BO A904g0 27 lOB already points to the next track and $lA, Sector $6. At byte $9A change 6710- LOA $30 Take high order byte of BE4C 00 76 from $F8 to $31 and write the sector . sector to be·read. fOO $01 $SF . C8~ destination buffer from backto the disk. The fmal process is that 6712- STA $3F $30 and store in $3F for 76F1:80 fOO SD1 $AC EE F6:2F simple. Mabel's Mansion is now easily the read routines fOO SD1 $E1 08 7D59G, copyable. 6714- JSR $0402 Read data field from disk fOO $01 $EB OOOCOO .fOO $01 $F1 . 76000001 IrK ~ _ ErQm IQ 6717- JSR $04B8 Decode the nibblized data At this point, the entire disk contents are in memory (yes, they are small pro­ fOO$09$B9 02 04 06 08 OA OC OE $1A $06 $9A F8 31 into buffer 01 0305 0709 OB 00 $30 Decrement buffer (data is grams) and the orfginal disk is no·longer 671A- DEC Always remember write the sector Softkey for..-. read backward) needed. Insert the initialized copy disk., back to the disk after editing....and Bill and w~h Ifyou have followed everything cor­ Mr Robot His Robot Factory 671C- LOX #$60 Re-k)ad X disk slot Budge's Space Album is deprote.cted. times $10 rectly, the nonnal RWTS should still be Datamost be That's all for now. 671E- DEC $42 Decrement sector until ~ is in memory at $B800. We will using Requirements: negative number it to write the data to the normal disk but Locksmith Fast Disk Backup or any using the same lOB at $76E8. Modify Softkey.for... 6720- BPL$67oo If number is not negative. nonna! D9S copier that will bypass ,the RWTS to read the interchangedtrack Mabel's Mansion read another sector the read errors on Track 1 and sector locations in the lOB. 6722- RTS Finished reading track. Datamost Sector Editor B091:05 Return to caller BE27:04 The· first thing I do when attempting Mr. Robot contains 'a rather common to copy a protected disk is to run the type of protection. The entire, disk is The sectors on the 3.2disk read in Softkey for... are Locksmith Fast Disk Backup over the nonnal except forTrack.l which even a Bill Budge's Space Album' ascending orderfor faster loading speed disk to see ifthere are any nonnal tracks. bit copier has a hard time copying. This and there is no sector skew. However, To my surprise, all tracks except 1 and usually means that somewhere during California 'Pacific when reading this way in DOS 3.3, the ,20 are nonnal. What this usually means the loading process, the protected track loading is quite slow. That's what sector Although this California Pacific re­ is dealing with a nibble count routine or is checked. Once you find the. routine skewing is for...to maximize speed. (see lease is 11 years old and the games are some othersortofsecondary protection. that checks the disk, disabling it is not Beneath Apple DOS) Instead of going quite simple, breaking through protec­ The fitst thing I did was copy the disk too much ofa problem. through the trouble ofchangingthe load­ tion is always a bit of a challenge. For and boot it. At first it appears to work but Ofcourse, on Mr. Robot, this routine er to read the sectors in reverse order, a those of you who may still have" this when you attempt to 'play the game, it is 'hidden' on the disk in an encoded antique disk, this article. will explain Pascal skew will solve the ,problem. reboots. Obviously there is adisk check fonn. It can be found on Track 9, Sector Changing the skew is~not absolutely how to convert it to nonnal DOS. Being somewhere. The problem is finding it in 6 and it. loads into $1900. At the begin- necessary but the disk will load in at from 1980, the disk is. in a DOS 3.2 th:e program code. . ning ofthe sector is a small routine that least five times faster. fonnat but will also boot on the 3.3 The best way to locate a disk access decodes tile rest ofthe page so it can be BFB8:00 02 04 0608 OA OC OE 01 03 05 07 system. In most cases, this would in­ routine iSlO use adisk search utility and .read. After, decoding it, I was able to 0908000F volve a simple swap-DOS copy and look for accesses to the disk drive read modify the routine to bypass the disk installing a 3.3 RWTS. However, the Continuing on, change.theirloaderto address, ($C08C). The only ones I found check. RWTS on this disk could actually ·be go to the RWTS entry point at $BDOO. were in the loaderand boot routine which There is also a checksum routine on called an RTS (ifit hadn'talready been Also, tell the lOB to write. . were loading with a nonnal fonnat. I Track 0; Sector 1 that causes a reboot if used) because it is a scrunched version 705F:BD was hoping to find something a little the disk.check routine is altered. ofthe RWTS with no write capability. 76F4:02 more suspicious looking but to no avail. This makes thi~gs a little more difficult If there was an actual nibble count rou-

18 R!aders Data Exchange COMPUTIST #84 Step~by.ste.p Softkey for... 1040 POKE BU, PEEK (BU) + tion scheme foiled and another copy­ Borg 15: IF PEEK (BU) = > MB able disk. 1. Use any normal DOS copier that will THEN 1060 bypass the read errors on Track 1 and Sirius 1050 TK = TK + 1: IF TK = 12 Softkey for... make a copy of Mr. Robot. Yes, it's time. to crack yet another THEN 1050 10'55 IF TK < LT THEN 1030 Type Attack . 2 . Run a sector'editor and make the .Sirius product and at the same time, following changes to 'the copy: 1060 GOSQB 490:TK = T1:ST Sirius wipe another disk off the Computist 0: POKE 48581,68: POKE Ids .sa.am Erm1 IQ Most Wanted List! This is not an easy 48582,185: POKE 48354,0 What makes Type Attack more diffi­ too SD1 $AS 4C 20 08 EA EA EA crack ifyou don't have a decent knowl­ 1070 GOSUB 430: GOSUB 100:ST cult to crack than most Sirius disks is fOO SOO $1A 04 21 edge of disk formatting and encoding. = ST + 1: IF ST < DOS THEN that it goes backto the disk for eachlevel fOO SOO $41 AS D3 C9 NJ Borg is encoded in a straight 4+4 .and 1070 . and allows you write your own lessons And Mr. Robot is no -longer copy can be read into memory without too 1080 ST = O:TK = TK+ 1: IF to·the disk. With a little time and ambi­ protected! ' much trouble. We will be making a few TK = 12 THE~ 1080 . tion, the game and its levels can be alterations to the RWTS so it will read 1085 IF BF, = 0 }\.ND TK < LT copied down to a nonna! disk. Begin by THEN 1070 Softkey for... the 4+4 format but still write out in the freshly INITializing a slave disk and 1090 IF TK < LT THEN 1020 label it 'TYPEAITACK COpY". Then, Flip Out nonnal 6+2. Then we will use Super 1100 HOME : PRINT Sirius lOB with aspecial controllerto copy the "COPyOCOMPLETE!" : END enter the monitor. Borg disk with this DOS. Before doing CALL-151 Yes, another Sirius game, another that though, freshly. INITialize a.blank Checksums Insert the Type Attack disk; We need boot code trace. Unlike some Sirius disk. Make sure you format it with nor- ' 1000-$356B 1040-$A908 1080-$BD75 to get their DOS into memory from ' games, Hip Outdoes not access the disk mal Apple DOS. 1010-$B094 1050-$D2ED 1085-$Bl18 Track 0 by boot code tracing. after loading and there is nothing tricky· INITHELLO 1015-$34EB 1055-$C96B 1090-$75B3 9600

COMPUl1ST #84 Reade,s' Data Exchange 19 19FC:DO 986C:A9 2C 8064 04 A9 59 80 34 07 A9 FF MD 2. Scan disk for 20 C8 OA FO D9 AD 98 . C_h_an_e~y 19FF:AO 00 84 DO A9 OC 85 D2 8035074C1F04 _A_lan__ _ BF. 1A07cB971.B97FM 9600G The softkey that I am about to give, 3. Change D9 to 00 and write sector .1A16:91 DO C8 DO EC E6 D1 C6 3. When you hear the 'beep', the game were given before in issue #61 by Mr. back to copy. :02 DO E6 BO 88 CO 68 68 will be completely inmemory. Hi-res Jim Bancroft and issue #68 by Mr. Jo­ 4. Copy the ether 3 sides of program :281860 page 1 ($2000-3FFF) is blank. We seph P. Karwoski. Their keys involved . with any copier. In case ofan error, you may want to need to save the zero page so move it turning off the error checking in. DOS You may think that I get to the point save this to a di.sk. ·DON'T use the Type into $2000. (B942:38 to 18). Now don't hold me to a little to fast? Well all I see IS the point. Attack copy disk. 2000 MB read or write a specified number of Sector Editor becauseIcouldn'tfind theplace at which THEN 1060 to install the patch (I guess! am not a 1050 TK = TK + 1: IF TK < LT sectors. $B7E1is the numberofpages . Copy disk or diskettes depending on rocket scientist after all). But his article THEN 1030 to read orwrite. Executethis routine at theprogram, withthemethod youchoose in issue #70 page 14 gave me enough 1060 GOSUB 490~TK = T1:ST $B793. 0: POKE 48581,68: POKE B7EC:OAOF FB B7 00 7F 00 00 02 . to ignore epilog errors. Scan disk with a infoto softkey the program anotherway. 48582,185 B7E1 :78 sector editor for C9 DA and change to Thank you sir. ' C9DE , Both changes should be .in \c 1070 GOSUB 430: GOSUB 100:ST Step-by-step = ST + 1: IF ST < pOS THEN B793G sector 03 on Track 00. The two changes 7. ·Once again, the disk must be boot 1070 represent the corrections to the address 1. Copy all 23 tracks ofthe original. 1080 ST O:TK TK + 1 code traced so memory from $8000 to and data epilog bytes and the end ofthe = = 2. Replace the ProDOS on the disk (op­ 1085 -IF BF = 0 AND TK < LT AOFF can be saved. You should still protection. Both ofthe Early Skills dis- . tional). THEN 1070 be in the monitor so repeat steps 1~6 kettes must be deprotected due. to the . 1090 IF TK < LT THEN 1020 from above. fact thatboth disk have their own DOS­ 3. Scan for 20 AF 10 DO 01· 60 00 AD 1100 HOME : PRINT "DONE¢WITH 8. The memory we're saving must be to Boot up or start up with. These pro­ 4. Change 00 to 60 and write sectorback ¢COpy" : END moved so it is notoyerwrittenbyDOS grams are for kids in grades K-3. to·copy. Checksums when we reboot.'Insert the Minotaur Note: Iwas going tochange thebranch Softkey f~r... 1000-$356B 1040-$CAEA 1085-$B035 copy disk. 01 to 00 that way you can return also. 1010-$E114 1050-$230F 1090-'$EEDE 2000c8000.AOFFM ~nder Koncepts Butafterlookingfurther back (50bytes), 1015-$35E9 1060-$50C6 1100-$0998 C600G Queue-­ I found at least' 5- branches to address 1020-$5340 1070-$55C3 AA4A, which is the 00 byte. Thanks 9. At $8294 (which is now at $2294) is Requirements: 1030-$6F46 1080-$E6EE again everyone for allowing meto work a JSR $0400. This is where it goes to COpyA or any program th~t can ignore When the copy is complete, Type in this organization. the disk for verification of the origi­ epilog errors Attack should be ready to boot and play. nal. Overwrite this command with· 3 Sector Editor Have fun!!! Naps. Softkey for... CALL-151 Copy disks with the method you Spell It Softkey for... 2294:EA EA EA choose·.to ignore epilog "errors. Scan Etisk with a sector editor for C9 DF and Davidson & Associates Minotaur 10. This time we will be writing this change to C9 DE. Changes must be Requirements: Sirius memory from track $B, sector 0 to· made on all 3 diskettes. The change is to 1 Blank 3.5 disk Track $0, sector O. the data epilog byte only. I hope some­ Sector Editor Minotaurhas almost the same identi­ B7EC:00 00 FB B7 00 40 00 00 02 Band~ts, one understands thi~ article. Any copy program cal protection and fonnat as but B7E1 :21 ., fortunately, the lengthy Bandits Softkey B793G Spell it shows an error on .block 308 procedure need not be used to deprotect Softkey for... when you copy with Copy II Plus fast this game. Once the game program is in 11 .. The entire game is now written to the Aige - Blaster ~Ius copy. But after reading Mr. Jim Ross's memory, nothing more is done with the disk. All that is left is to change boot a~cle in issue #74 page 11, Somehow I Run~your Davidson & Associates disk except for a disk check· which can stage 2 to load in the game. knew! could defeatthis errorandgetthe Requirements: be disabled easUy. Most single load pro­ sector editor and read Track 0, Sector program up and running. The edit Mr. -2 Blank 5.25" disks grams can be downloaded into a single 1. Beginning at byte $00, enter the Ross ·found for his program were on Copy program that can ignore errors BRUNable fue butMinotauruses mem­ following routine: bloc15IDDonmyprogram. His softRey Sector Editor ory from $800 to $BFFF with only HI­ 2093 B7 A200 BD 00 e7 involved noping out 12 bytes to get to res page 1 open. The game could be 9D 00 03 E8 DO F7 4C 11 - The bit copy of Alge-Blaster also the right code, I just changed the code Alge-Blas~er saved as two files where the first file 03 BD 00 21 90 00 A1 E8 - works on Plus (See Mr. tllat the program branches to ifnot cor~ reads in the second but that is almost DO F7 EE 13 03 EE 16 03 Gerald E. Myers article inissue # 64). I rect, to the code that the program is more trouble than it's worth. It's much AD 1603 C9 CO DO EA BD think I· understand the meaning of the looking for (A9 00 to A9 FF). Without easier to just write the game directly to 0020900000 E8 DOF7 saying "a little knowledge can be dan­ Mr. Ross's article this could not have the disk using the RWTS and read itinto 4C F80F gerous". I would be glad when someone happened. My style is scan for bytes,- so memory when the disk boots. The above routine loads into $B700, mails me my little knowledge, so 1 can here we go. ~oves . be dangerous. Well, so much for my 1. To begin, initialize a disk for the itselfto $300 and jumps to $311. wishes. Lets get cracking. Step-by-step deprotected copy. From there it moves $2000 to the zero Because the program quits to the Pro­ INITHELLO page and $2 IOO-3FFF to $AIOO-BFFF 1. Copy disk wIth any fast copier. DOS screen shortly after booting the DELETE HELLO and finally jumps to the start of the 2. Scan the copy for DO 04 A9 00 85 FF program at $FF8. J copy, I searched for the ProDOS quit 2. The Minotaur disk must be boot code 68. 12. At byte $EB, enter the correct lOB code 20 00 BF 65 and looked for any traced twice to capture all ofthe mem­ branch to the code. Ichanged the branch 3. Change 00to FF and write sectorback 0ry. Enter the monitor ,and type the infonnation·to load in the game. to copy. 00 00 00 FB B7 00 AOOO 00 01 from D9 to 00so it would continue on its following. way to the game. That's it! CALL-151 13. And finally, enter a $99 at byte $EI 9600cC600.C6FFM tospecify the number ofpages to read Ste.p-by-step Aaron Culliney HI 96FA:98 N9801 :AO E8 CO 4C 59 FF in. Re-write this sector-and you're all 1. Copy progtam side with program to 9600G finished!! ignore errQrs. . WindwalkerGS Editor 9800c800.8FFM Windwalker is a neat game, but like -most games i~ can be frust.rating to play

20 :J~1..dersDataExch8n08 -COMPUnSTI#84 at times. Most of my frustration was 190 HOME : REM CERTAIN ITEMS 640 IF YY = 20 THEN POKE 1020 DATA NUBIAOSCROLL,95, over unclear documentation on how to LIST1 (BUF + 89),NN LANGUAGEOSCROL,96,ASTRONMY cast spells. Specifically, the gam,e asks 200 PRINT "ITEMS (LIST2) :" , 650 IF YY = 21 THEN POKE OS,CROL, 97 , SURVIVALOSCROL you to "Speak the mantra" when you "CONDITION:" (BUF + 90),NN , 98 attempt to invoke magic. I found out 210 FOR X = 1 TO 20: READ 660 GOTO 330 1030 DATA IDOLATRYOSCROL,99, E$: READ F: IF PEEK (BUF + 670 IF YY = 2 THEN NP = (aUF WARLORDOSCROLL,lOO,ALCHE muchlaterthat for mantras to work, they F) > 0 THEN PRINT E$, + 53) : 't.EM POKE CERTAIN MSTOSCROL,101,SHAMANO must be typed using all lower-case let­ "HAVEOIT" ITEMS1 SCROLL, 102 ters. This was in contrast to the part of 220 IF PEEK (~UF + F) = 0 680 IF YY > 2/ AND YY < 7 1040 DATA FENGOSHUOSCROL,103 the game listing all the mantras with THEN PRINT E$,' "DONTOHAVE THEN NP (BUF + 50 + (YY ,LUOSHANGOSCROL,104,DIAHNO upper-case first letters. I went through OIT" + 3» JONOSCRL,105,APTHECRY almost the whole game without using 230 NEXT 690 IF YY > 6 AND YY < 11 OSCROL,106 magic because the mantras that I typed 240 ED = 2: GOSUB 320 THEN NP (BUF + 60 +YY) 1050 DATA JAILEROSCROLL,107 250 HOME : REM CERTAIN ITEMS 700 IF YY > 10 AND YY < 15 in using upper-case first letters were not Checksums accepted. So, on the verge of calling LIST2 THEN NP (BUF + (84 - (17 ORIGIN and inquiring about the prob­ 260 PRINT "ITEMS (LIST3) :" , - YY) * 2» 0-$2366 340-$AA14 680-$350A "CONDITION:" 710 IF YY = 15 THEN NP 10-$7CAB 350-$A209 690:$0000 lem, I whipped out a copy of the Pro­ 270 FOR X = 1 TO 17: READ (BUF + 79) 20-$0521 360-$2281 700-$A149 DOS block editor from Computist #55 G$: READ H: IF PEEK (BUF + 72~ IF YY > 15 AND YY < 22 30-$47B9 370-$1044 710-$062B and· did some snooping around. I dis­ H) > 0 THEN,PRINT G$, THEN NP = (BUF + 70 + (YY 40-$77B4 380-$6160 720-$lA1C covered the mystery ofthe mantras, and "HAVEOIT" - 4» 50-$A667 390-$07F9 730-$B283 was finally able to cast spells. Unfortu­ 280 IF PEEK (BUF + H) = 0 730 IF PEEK (NP) a THEN 60-$894F 400-$B3A2 740-$30CB nately in-game magic alone would not THEN PRINT G$, "DONTOHAVE POKE NP,1: VTAB YY: HTAB 70-$9145 410-$E6BC 750-$0761 move my character away from: the mar­ OIT" 17: PRINT "HAVEOITOOOOO" 80-$2BOE 420-$3ADO 760-$3811 ginofutterdeath; going through awhole 290 NEXT GOTO 330 - 90-$9F6A 430-$0300 770-$7F6B game without use ofspells had depleted 300 ED = 3: GOSUB 320 740 IF PEEK (NP) > 0 THEN 100-$1E1F 440-$293B 780-$BE5C the KARMA. From these beginnings 310 RESTORE : GOTO 780 POKE NP,O: VTAB YY: ·HTAB 110-$E23B 450-$1006 790-$3537 320 PRINT "U/DOARROW-MOVEI 17:'PRINT "DONTOHAVEOIT" 120-$A591 460-$5B47 800-$ECBO the idea and reality ofasimple character SPACE-EDITfRETURN-NEXT" GOTO 330 130-$1194 470-$BB47 810-$FBF1 editor for Windwalker GS developed. :PTR$ = ">" :YY = 2: REM 750 NP.= (BUF + 90 + (YY ­ 140-$063E 480-$D8AB 820-$02AC The reading and writing machine code GET INPUT 1»: REM POKE CERTAIN 150-$3A4F 490-$6412 830-$81EE routine for the Windwalker GS charac­ 330 VTAB YY: HTAB 16: PRINT ITEMS2 160-$50C5 500-$E52A 840-$OBEO ter editor is taken directly from the Pro­ PTR$ 760 IF PEEK (NP) = 0 THEN 170-$0300 510-$7820 850-$4EA3 OOS Block Editor by Bob Bergstrom 340 VTAB 22: GET IP$ POKE (NP),l: VTAB YY: HTAB 180-$EE74 520-$7E62 900-$914B and modified by Rene Gaudet, Comput­ 350 IF IP$ = CHR$ (10) THEN 17: PRINT "HAVEOITOOOOO" 190-$2043 530-$96A4 910-$50C4 ist #55. In fact the WIND.OBJ program VTAB YY: HTAB 16: PRINT GOTO 330 200-$323C 540-$OC71 920-$41BA is just a modified OBJ.PROEDIT pro­ "0" :YY = YY + 1: GOTO 410 770 IF PEEK (NP) > 0 THEN 210-$4271 550-$E456 930-$0400 360 IF IP$ = CHR$ (11) THEN POKE (NP),O: VTAB YY: HTAB 220-$1243 560-$B6EO 940-$A4A3 gram from the same article inComputist VTAB YY: HTAB 16: PRINT 17: PRINT "DONTOHAVEOIT" 230-$C522 570-$723~ 950-$FA8C #55. WIND.OBJismodifiedtoreadand "0" :YY = YY - 1: GOTO 410 GOTO 330 240-$DEC9 580-$5A74 960-$0948 write block $038 only, where the char- 370 IF IP$ CHR$, (13) THEN 780 TEXT : HOME : PRINT 250-$0001 590-$58C2 970-$B108 ,acter data resides. RETURN "WINDWALKER-GSOCHARACTER 260-$A386 600-$6404 980-$8B42 This is a simple editor but it allows 380 IF IP$ CHR$ (27) THEN OEDITOR" 270-$F219 610-$lF3C 990-$BEE1 editing of character statistics, (BODY/ RESTORE : GOTO 780 790 IF PEEK (774) < > 32 280-$439F 620-$BF33 1000-$8AB2 SPIRIT/HONOR/KARMA) and items, 390 IF IP$ -= "0" THEN GOTO THEN PRINT : PRINT CHR$ , 290-$F364 630-$190B 1010-$'29E9 (health elixirs, magic talismanS,the an­ 460 (4) "BLOADWIND.OBJ,A$0300" . 300-$2079 640-$09E4 1020-$3F42 . 400 GOTO 330 800 PRINT : PRINT "l)OEDITO 310-$3F04 650-$7001 1030-$42BO tidote, etc). The program loads th~ char­ t acter data onto memory page $9000. 410 IF YY < 2 THEN YY =2: CHARACTER" : PRINT "2)OSA 320-$AA6D 660-$FCE7 1040-$B40F GOTO 330: REM DETERMINE VEOCHANGES" : PRINT 330-$90B4 670-$0449 1050-$A942 Entering the code: POINTER OUT-OF-BOUND "?)OQUIT" 420 IF ED -= 0 AND YY > 5 810 PRINT: PRINT n(Esc)OWI WIND.OBJ 1. Enterthe BASIC program and~ave it. THEN YY 5: GOTO 330 LLOSHOWOTHISOMENU" : PRINT 0300:01 00 00 00 2F 00 20 OC $6F39 SAVE WlNDWALKGS.EDIT 430 IF' ED 3 AND YY > 18 "WINDWALKEROB/COMUSTOBEOIN 0308:03 DO 08 60 20 OOJBF 80 $OBS7 THEN YY 18: GOT0330 OSLOT50DRIVE1" 2. Enter the machine code and save it. 0310:1A 03 60 80 04 03 20 3A $43E8 440 IF YY > 21 THEN YY = 21: 820 GET Q BSAVE WIND.OBJ, A$0300, L$A5 0318 :FF 60 03 50 00 90 38 00 $73j6 GOTO 330 ~30 IF Q = 1 THEN GOTO 90 WINDWALKGS.EDIT 450 GOTO 330 840 IF Q = 2 THEN POKE 0320:AD 03 03 4C 30 03 AD 03 $61A6 o BUF = 36864: GOTO 780 460 IF ED = 0 THEN GOTO 500: 783,129: CALL 774: GOTO 0328:03 AE 00 03 EO 02 FO 04 $739A 10 REM WINDWALKER GS REM DIFFERENT EDITS FOR 780 0330:20 OA FO 60 09 80 20 ED $AE2D CHARACTER EDITOR DIFF CHARACTER DATA 850 END 0338:FO 60 A9 01 85 25 20 22 $7695 20 REM BY AARON CULLINEY 470 IF ED 1 THEN GOTO 530 900 DATA BODY, 41,SPIRIT,42, 0340:FC A9 00 85 24 80 02 03 $C11E 30 REM WIND.OBJ PROGRAM 480 IF ED = 2 THEN GOTO 670 HONOR, 43, KARMA, 44, 0348:A900 80 01 03 A9 AO 20 $4081 MODIFIED FROM 490 IF ED = 3 THEN GOTO 750 910 DATA FOOD,51,MONEY,52, 40 REM OBJ.PROEDIT PROGRAM 500 VTAB YY: HTAB 16: INPUT COMMONOINCENSE,54,BLESSED 0350:EO FO AE 02 03 BO 00 90 $A706 COMPUTIST #55 NN: REM POKE CHARACTER OI~CENSE,55,HEALTHOELIXIR 0358:AE 00 03 EO 02 FO OB 20 $85EA 50 REM THANKS TO RENE STATS , 60 0360:0A FO A9 AO 20 ED FO 4C $822C GAUDET/BOB BERGSTROM 510 IF NN < 0 OR NN > 10 920 DATA SPIRITOELIXIR,61, 0368:8B 03 09 80 C9 AO 10 OE_$OAB1 60 REM NO FRILLS, BUT IT THEN GOTO 500 XALOXEOPASTE,62,OBECALPOFO 0370:AE 05 03 EO 00 FO 05 E9 $7E8F 520 POKE (BUF + 40 + (YY ­ OYU, '63,RATOBLADDERS, 64 WORKS ... 0378:80 4C 7E 03 A9 AE 20 ED $AF02 l»,NN: GOTO 330 930 DATA·STONEHEADOSYRUP,65~ 70 REM *** 0380:FO A9 AO 20 ED FO A9 AD $B570 80 REM IF BUFFER ~MPTY, READ 530 VTAB YY:'HTAB 16: INPUT EYESOOFOF"IRE,66 0388:20 ED FO EE 02 03 ~O 08 $OEDO IN BLK $38 NN: REM POKE MULTIPLE 940 DATA HERONOFEATHERS,71, 90 IF PEEK (36864) = 0 THEN ITEMS OF A KIND BLINDOMANSOSHOE,73, BEETLE 0390:CE 01 0300 BO 4C 48 03 $020F POKE 783,128: CALL 774 540 IF NN < 0 OR NN> 99 OJAW,75,DRAGONOSCALE,77 0398:20 9C FC E6 25 20 22 FC $213B 100 HOME : REM DISPLAY NAME/ THEN GOTO 530 950 DATA GREENOTURTLE,80, 03AO:A9 16 85 22 60 1E 00 00 $AFe6 550 IF'YY = 2 THEN POKE (BUF STRIPEDOTURTLE., 81, PARCH EDIT STATS 03A8:00 1F 00 00 20 21 00 22 $B978 + 51),NN MENTS,88,QUILLOPEN,89,INK 110 FOR X = 0 TO 15:FV .03BO:23 24 25 26 27 28 00 00 $B9DC PEEK (aUF + X): VTAB 1: 560 IF.YY = 3 THEN POKE (BUF OHORN,90 03B8:00 00 00 29 2A 2B 00 2C $4460 HTAB X + 1: PRINT CHR$ + 52),NN 960 DATA STRAWOMAT,53,PROVIN (FV): IF PEEK (BUF + X) 570 IF YY = 4 THEN POKE (BUF CEOMAP,56,EXPLORERSOMAP,57 03CO:20 2E 2F 30 31 32 FF FF $8110 o THEN GOTO 130 + 54),NN ,SEXTANT, 58, ROBE/STAFF, 59 03C8: 33 34 35 36 37 38 FF 39 $418F ­ 120 NEXT 580 IF YY = 5 THEN POKE (BUF 970 DATA PRISONOKEY,67,WARL 0300:4C 00 BE 4C 00 BE 80 08 $1815 130 FOR X= 1 TO 4: READ A$: + 55),NN ORDSOKEY,68,FENGOSHUSOKEY 0308:CO B5 42 80 09 CO 95 42 $7F78 READ B: PRINT A$, PEEK 590 IF YY > 5 AND ~Y < 13 ,69~BRASSOKEy,70 03EO:CA 10 F3A9 28 38 80 08 $3CBE THEN POKE (BUF + 60 + (YY (BUF + B): NEXT 980 DATA LEVITATION,72,INVIS 03E8:CO 60 25 FD 00 00 00 00 $25F1 140 PRINT :ED = 0: GOSUB 320 - 6»,NN IBILITY,74,WALKOONOWATER, 150 HOME : REM MULTIPLE 600 IF YY > 12 AND YY < 17 76, INVULNERABLE, 78 03FO:59 FA. 00 BE 1B 4C 03 BE $6FC1 ITEMS OF A KIND THEN POKE (BUF + (79 - (17 990 DATA IDOLOOFOSTONE,79, 03F8:4C 00 BE 4C 59 FF EB BF $4FC 160 PRINT "ITEMS (LIST1) :" , - YY) *2»,NN RHINOOHORN,82 "VALUE:" 610 IF YY= 17 THEN POKE 1000 DATA JASMINE¢FLOWER,83, 170 FOR X = 1 TO 20: READ (BUF + 80),NN JADE, 84, GOLDODUST, 85,PEACH C$: READ D: PRINT C$, PEEK 620 IF YY = 18 THEN POKE OSEED,86,ANTIDOTE,87 .(BUF + D): NEXT (BUF + 81),NN 1010 DATASHRINEOSCROLL,i1, . 180 ED = 1: GOSUB 320 630 IF YY = 19 THEN POKE RELIGIONOSCROL,92,PROPHE' (BUF + 88),NN CYOSCROL,93,MOEBIUSOSCROLL , 94 ... COMPUllST 184 Reade,. Data Exchange 21 mM mM mM mM IBM IBM E3CD7 04 90 90 90 IBM Softkey fo'r... check asks about some monsters whose E3CEC909O Dragon~s Lair II tiny pictures appear in the manual. Don Westcott E3EAA EB 05 Since the portion to be altered is not co ? W in the first segment ofthe file you will InCOMPUTIST#76onpage22 Mike Q Here'sasure fire solutionthat worked hav~ to use Norton, or another good from Canada submitted a method for REN CARMEN.ZAP CARM~.EXE for me. Hopefully you have a TEXT! editor. DEBUG won't work, unless bypassing password protection. Mostof HEX editor (I used· PCfOOLS.) You should be able to run CARMEN someone knows how to firid where the IBM games I have use this protec­ Search DL2DISK2.DAT (ondisk #2) from hard disk, or any other disk with­ DEBUG loads additional segments. tion so I tried this method on all ofthem for 75 01 CB 8C D3 and replace the 75 out the master disk in drive A. Now you Below is alistofoffsetS ofthe byte to but it only worked on one: 01 with 90 90. The screen will still be ,canbecome the detectiveyou've always change in the fue ESCAPE.EXE. Go to there, just enter any 5 digit number and the following offsets one by one and IBM Softkey for... wanted to be. you're on your way change the bytes 75 05 at each offset to Battle Chess II IBM Softkey for... 9090 IBM Softkey for... Interplay Colonel's Bequest ~ From To Dragon's Lair The copy protection for this game is Sie"Q 14DFC 75 05 90 90 ? 14E3A . 7~ 05 90 90 having to lookup a chess move from the This softkey will cause the finger­ Use Norton utils, PCtools etc and 14E78 75 05 90 90 manual. The first move listed in my print to be Celie's all the time, so when search for the following byte patterns 14EB6 75 05 90 90 manual is: C2HS So I used the PC itlight'supjusthitenter! UsePCtoolsor SHELL ofPC TOOLS 6.0 to do a Text and replace them as shown. 14EF3 75 05 90 90 other program and edit SaV.EXE..Go 14FIE 75 05 90 90 Search for this s~ng. I found it in Rel­ to sector68, offset223, and change 75 to Search for Reglace with There are six possible types ofques­ ative sector 48 ofthe fue SETUP.EXE. EB. That's ii! 32 04 74 07 B8 32 04 EB 07 B8 All the other chess moves follow the 7E 00 73 07 7E 00 EB 07 tions the game can ask about a character first one ~ the same order that they IBM Softkey for... 3B C3 74 14 3B C3 EB 14 andeachhasit'sownroutine.The above appear in the manual. will fix all ofthe routines. Continuum , That's it! Enjoy!" The C2HS in hex is: 43 32 48 35 The Data East IBM Softkey for... - moves are separated by OD OA so I IBM Softkey for... changed the moves to OO's. It ended up To softkey Continuum, you _need -a Dragon's Lair 'Earl Weaver's Baseball vl.5 looking like this: OD OA 00 00 00 00 00 hex string search utility program,- such ? OA 00 00 00 00 OD OA... through all of as the Norton Utilities. The code that ? Be sure to backup your the program the moves. Write them back to the file. needs to be changed is in the file. Use PCfOOLS orotherprogram and disk before starting and use the back up Then when asked to enter amove justhit PROGS.CC1 (filesizeanddatestampare edit GAME.EXE. Go to Sector 29, off­ for the softkey. Modify only backup the enter key. 163539 11-29-90 12:00p). There are set 3andchangeCD21 to 9090. Go to the copy! three hex strings you will need to find sector29, offset 1oand change CD 21 to Perhaps the other games have some­ REN WEAVER.EXE WEAVER and change. 90 90. Go to sector 29, offset 18 and how encoded their passwords because I DEBUG WEAVER Load program' into Search for: 75 11 BF AB 24 2E 8B change 74 to EB. Go to sector 29, offset couldn't find any ofthem. Most of Ac­ DEBUG Replace with: 9090 BF .24 2E 8B 33 and change 73 to EB. Go to sector29, colade's games use a code wheel with AB S 0000 FFFF 74 E3Search!or 1stprotec­ ~o numbers insteadofwords. Microprose's Search for: 75 11 BF D5 24 2E 8B offset45 and change 74 EB. That's it! tion pattern Ml TANK PLATOON uses password Replace with: 90 90 BF 05 24 2E 8B IBM Softkey for... xxxx:yyyy AND key disk protection. Search for: 7511 BF AB 24·2E 1B Earthrise The search will return one address. If Replace with: 9090 BF AB 24 2E IB ~ more than one is returned this softkey ? Unknown That's it ! Any four symbols entered may not work. . during the ID sequence will start· the Well it looked like -another simple Eyyyy SO' 90Edit the contents ofthe re­ IBM Softkey for... game. doc check, but these guys are a little turned address sneaky. The game program actually be­ Carrier Command S 0000 FFFF 75 00 3B Search/or 2nd IBM Softkey for... gins in the file SOL.EXE, but it is set up protection pattern ? Crime Wave to exit to DOS .if you try to run it. You xxxx:yyyy Well, another doc check. A~ least must run EARTHRIS.EXE which then Access Again, the search will return one ad­ they were explicit .about it. It can be ,runs SOL.EXE. EARHTRIS.EXE was dress. If more than one is returned this removed like most by a small change. To remove questions use PCtools or designed to make you think this is the softkey may not work. For NortOn users search the file otheredit program to edit CW.EXE. Go program to tamper with. It overrides Eyyyy EB 04Edit the contents ofthe re- CARRIER.EXE for the byte pattern C2 to sector 7, offs'et 307, and change CD INT 3 and give you a "Mind your own turned address 00 74 AB and change the 74 AB to 90 21 to 9090. Thentosector7,offset31,4, business. It's a wild goose chase any­ W Writing XXXX bytes 90. and change CD -21 to 90 90. Then to way" message. There is adecisive jump Q DEBUG method. DEBUG is assumed sector7, offset 416, and change 75 OD to in EARTHRIS.EXE for the DOS exit REN WEAVER WEAVER.EXE to be in the current path or dire . 90 90~ That's all there is to it. routine, but altering the program at this Now try to run the new (Hopefully) REN CARRIER.EXE CARRIER.ZAP pointmakes a"Security Violation"mes­ unprotected version of Earl Weaver's DEBUG CARRIER.ZAP IBM~ Softkey for... sage appear upon playing. Also the pro­ Baseball. JustpushENTER when asked EFBB990 90 Ctimewave vl.1 gram uses a JMP to decide your answer, for secret codes. W Access not a JZ or JNZ or anythfng like that as Q shown below. It calls a routine which IBM Softkey for... REN CARRIER.ZAP CARRIER.EXE Search (a copy of) CW.EXE for 75 then uses a JMP to exitinstead ofaRET. ODand change it to .9090. That's all .But by eliminating the "you are wrong F-15 J there is to it. Now when it asks you for IBM Softkey for... jump" in SOL.EXE this game is at your ? a password, just hit return. Where in the U.S.A. is feet. - Requirements: For Norton users, search SOL.EXE Carmen Sandiego? IBM Softkey for... . DEBUG.COM (found on your DOS for the byte patternE9 28 FD and change Broderbund disk) Curse of the Azure BOD.ds these numbers to 90 90 90. 1. Start up DEBUG. This ftle will tell you how to remove DEBUG users follow the steps be- . ? DEBUG the copy protection 'from CARMEN/. R• t low. DEBUG is assumed to be in the · "Wh · th USA ·C equlremen s: ·EXEIn ereln e.. .IS annen NU ·1·· (· il ) current path or dire 2. At the DEBUG prompt (-), insert your S d· ?" b Brod rb d orton tlltles or Slm ar program an lego. y e un. A copy of the ftle START.EXE from' REN SOL.'EXE SOL.ZAPDEBUG cannot copy of F-15 into drive A: and enter 1. Copy all the ftles to anew subdirecto- your Azure Bonds disk A save .EXE the following command lines: DEBUG SOL.ZAP LO 0 2A 1 rye First load START.EXE into Norton. F99 L 1020 ~ E33AC 90 90 90 2. Copy DEBUG.COM to the new sub- Then search for the string 80 3E CC. W002A1 directory. This should .take you to file offset 9BA W to save it Q to quit DEBUG Q 3. Patch CARMEN.EXEusing DEBUG. hex. Go back to 9B5 hex this should be REN· SOLZAP SOLEXE When asked for your code just hit REN CARMEN.EXE CARMEN.ZAP 9A (the first machine language code for ENTER! To check your copy, after hit­ DEBUG CARMEN.ZAP a far call). Change the values of the Okay, you're all set. Just hit return ting ENTER for the~ code prompt, try to E3C7C 90 90 bytes from 9B5-9B9 hex to 90's. Save . when the doc check appears. switch between weapons (try pressing E3C7F EB 05 the changes. 'M'). E3C99 90 90 Now the program will skip the part IBM Softkey for... E3C9C EB 05 where Jt asks for code letter, you now Escape From Hell E3CA5 04 can put away that annoying code disk ? E3CC4 90 90 until needed for decoding messages in Better grab a microscope if you're E3CC7 90 90 90 90 90 EB 07 the game. haven't got a cracked version. This doc

22 Readers Data -Exchange COMP'UTlST #84

~ ~~::;';"~~~;~~''.',;;;,ff0t-~, "~' '-'.:,. 75 Clue Master Detective Leisure Genius 63 Rocket Ranger (lIgs) Cinemaware unClassifieds Wanted 63 Cosmic Relief Datasoft 69 Roundabout Datamost Photocopies of instruction manuals for 65 Crime &Punishment Imagic 75 Russki Duck SOftsmith How to place an these Beagle Bros programs, now in the 81 Crosscountry USA SChool Edition. Didatech 63 S.O.l. (lIgs) Cinemaware UnClassified Ad public domain: Beagle BASIC, DOS 69 Crossword Magic v4.0 ? 62 Sea Stalker Broderbund Boss, Fatcat, A~x Type,FontMechanic, 69 Cybernation Nexa Corp. 67 Serpentine Broderbund Send a typed sample copy with ap­ 74 Decimal Dungeon Unicorn 74 Seven Cities of Gold Electronic Arts . Frame Up, Shape Mechanic and Utility propriate instructions. (Ifpossible, send 74 Decisions Decisions: Colonization v1.0 68 Skeletal System Brainbank City. text on a 5.25" Apple fonnat disk.) Use : Tom Snyder Productions 63 Sky Shark Taito W~gner up to 40 .. characters per line,. we will Jeffrey K. > 69 Delta Squadron Nexa Corp. 63 Sound Song & Vision Advanced Software adjust word wrap. . Firelands C-ollege 67 Desecration Mind Games . 67 Space Ark Datamost ~.Nibble ~ Special GraphicsInstructions:The 901 Rye Beach Road 66 Disk Optimizer System Notch 62 Spare Change h Broderbund 65 [)ondra Spectrum Holobyte 67 Spectre Datamost first three words of the first line are Huron,-OH44839 69 Dragon Eye Epyx 62 Speedy Spides ' Readers Digest printed in boldforfree. Ifyou wantother 69 Dueling Digits Broderbund 67 Star Cruiser Sirius words bolded, use 5 characters less'per 99¢ IBM Shareware 68 O&D-Master Assistant vol2 SSI 63 StickyBear Math: Add & Subtract line. Use 10 characters less per line if .. 62 OROl Sroderbund ...... Optimum Resources ,you have a lot ofuppercase bold letters. 100's oftitles to choose from! Send $1 67 Epoch Sirius 68 Sticky~ar GS Versions 3.5 Xerox Boldletters are widerthannonnal. Ifthe for catalog, double refunded with first 74 Exploring Tables &Graphs Level 2(SU) 67 Succession Piccadilly . typed copy does not show bold, circle order! ...... Weekly Reader 65 Superstar Ice Hockey Mindscape the words you want bolded and, on the UnKnown.Shareware 67 Evolution Sydney 61 Superstar Indoor Sports Mindscape 67 Falcons Piceadilly 74 Surveys Unlimited Mindscape , side, write BOLD. If you want a line 9944-A.Belle Fourche Ave centered, write CENTER next to that 68 Factastics Trivia Oaystar 68 Talking Text Writer GS : Scholastic Ellsworth AFB SD 57706 75 Final Frontier Softsmith 68 Tangled Tales Origin Systems line. There is no charge. for centering ~ Why Pay More? ? ? 73 Fisher's Cove Tom Snyder Productions 81 Test Drive lie Accolade any line. 69 Fit Wars Sirius 69 Tetris (lie) Spectrum, Holobyte You must check your ad for errors, 74 Fraction Action Unicorn 72 Theatre Europe PSI the firSt time it runs. Errors on our part Apple Stuff 69 Gemstone Healer SSI 74 The Other Side v2.0 will be corrected, then, for free. ~rrors . 73 Geometric Supposer (the) Sunburst .. Tom Snyder Productions orchanges on your part will be charged Lots ofApple Software and books. Send 66 GEOS \ Berkley Softworks 81 Think Quickf v1.2 Leaming Company a $5 processing fee. SASE for list to: 72 Galactic Gladiators ~ SSI 65 Thunder Chopper ? 63 Gladiator Taito 63 Ticket to -Washington D.C. **** New Rates (per line) Brent Michalski 73 Goodell Diamond Caper ...... Blue Lion Software 9944-A Belle Fourche Ave' ...... Tom Snyder Productions .74 Time Explorers ~ Gameco Computist club****member 25¢ Ellsworth AFB SD 57706 66 GradeBuster 1 23 Grade Busfer 74 Time-liner v1.1 Tom Snyder Productions 61 Gutenberg Sr. .. Micromation LTD. 68 Tomahawk (lIgs) Datasoft Ali others 35¢ 65 Halls of Montezuma Electronic Arts 69 Track Attack Broderbund The minimum order is $5. 67 High Orbit Softsmith 68· Triad Thunder Mountain 67 Horizon V Softsmith 72 Triango (lIgs) California Dreams' • Ourliability for errors or omissions is 75 Hunt for Red October GS Datasoft 68 Trinity Infocom limited to the cost of the ad. . 69 Impossible Mission Epyx 73 Unicorn 5.25- software Unicorn • We reserve the right to refuse any ad. 62 IndoofSports Mindscape 73 Vincent's Museum Tom Snyder Productions • Washington state residents add 7.8% 68 Infocomics Infocom 68 Volcanoes v1.8 .Earthware·Comp. Services sales tax. 66 Jane· ' '? 66 War in the Middle Earth Melboume '. Send a check or money order (funds RDEX Contributors 63 Joker Poker Mindscape 67 Wayout ;:~ Sirius drawnonUS bankonly)fortheentire Aaron Culliney 20 72 Kabul Spy Sirius 63 Wings of Fury ~ ~: Broderbund amount to: Alan Chaney 20- 68 Kingdom of Facts 63 Wizardry:Return of Werda Sir-Tech. ~~ -- -Santa BarbaralThunder Mountain 68 Word Attack Plus (lIgs) Davidson Rich Etarip 15 COMPUTIST unCLASSIFIEDS 75 Kobayashi Alternative (The) 65 Works (the) First Star Software 33821 East Orville Road The Guardian 10 ...... Simon & SChuster 67 Zenith Softsmith Eatonville, WA 98328 Michael A. Horton 6, 14 72 lane Mastodon Infocom Jeff Hurlburt 4 67 Lancaster ~ SVS IBM Most Wanted KralCowicz 10 72 Laser Force (1Igs) - : Britannica 81 The Last Ninja (lie) · Activision 84 Ace of Aces Accolade WANTED Michael S. Pollock 12 75 l.A.. land Monopoly Softsmith 84 Bar Games Accolade Eric W Taylor ~ 12 66 legacy of the Ancients Electronic Arts 84 Colony Mindscape "Most Wanted List" Unknown 22 65 Lost Tomb Oatasoft 84 Don't Go Alone Accolade Don Westcott 22 81.M-ss-hig L-nks: Classics old &new 75 Empire Intersil Software ...... •...... Sunburst 84 Final Orbit Innerprise 74 Mammals - Reptiles &Amphibians 72 GBA Championship Football Need help to deprotect a disk ..; Focus Media ...... Electronic M$ Softkeyhobbistis interestedinacquiring 65 Manhunter New York IIgs SierraOn Line 68 Graphitti ...... George Best Phillips Academy 65 Mavis Beacon Teaches Typing (gs) 63 Heros of the Lance SSI copy protected software to deprotect. ' Software Toolworks 84 Hardball II : Accolade Good track record, many successful 73 McGraw-Hili Problem-Solving Lvt 5&6 84 Harmony Accolade attempts. Original disk will be returned ...... Tom Snyder Productions 84 Hat Trick Capcom along with softkey for COMPUTIST. 67 Microwave Cavalier 84 Heatwave Accolade Especially interested in older software Apple Most Wanted 73 Mind castle I MCE Inc. 84 Ishido Accolade (pre-1988) but will give any disk a shot. 63 Modem MGR MGR Software 84 Jetfighter ~ V~locity I'm especially interested in: ~ 65 Airheart : Broderbund 68 Mr. Pixel's Cartoon Kit Mindscape 84· John Elway's Quarterback 63 Alcon Taito _73 Mystery of Hotel Victoria ...... Melbourne House Drol -- Broderbund 74 Algebra Shop Scholastic ...... Tom Snyder Productions 72 Kings Quest III Sierra Serpentine -- Broderbund 63 Alien Mind PBI Software 63 National Inspirer Tom Snyder Productions 84 M1 Tank Platoon Microprose Spare Change -- Broderbund 73 American History Explorer Series 75 Neptune Softsmith 84 Monty Python'S Flying Circus Wings ofFury -- Broderbund ...... Mindscape 66 Observatory (The) Mindscape •••••••••••••••••• I •••••••••••••• Mastertronic Star Cruiser -- Sirius 75 Anchorman Virginia Reel 74 Ocean Life Focus Media 72 Operation Wolf Taito Space Eggs -- Sirius 74 Animals of the Past Focus Media 66 ·Odin Odessta 8.4 Outrun Sega Falcons -- Picadilly 72 Ankh Datamost 63 Operation Wolf Taito 84 Phantasm ~ Exocet Microwave -- Cavalier 73 Ant Farm Sunburst 68 Pensate Datasoft/Softdisk 84 Powerdrome Electronic Arts 67 Aquatron Sierra 69 Phantasie·U SSI 72 Radio Baseball Electronic Arts System: Apple lIe, 128K. Send disk to: 63 Bad Street Brawler Mindscape 67 Phantoms 5 Sirius 84 Sim City Maxis Rich Etarip 73 Bank Street Beginner's Filer Sunburst 67 Pig Pen -' Datamost 84 Space Harrier Sega 824 William Charles, Apt #2 73 Bank Street School Filer Sunburst 74 Plants &Animals of the DesertFocus Media 84 Stormovik Electronic Arts Green Bay, WI 54304 63 Beyond Zork Infocom 75 Prince of Persia (5.25") Broderbund 84 Test Drive III: The Passion Accolade 65 Bilestoad Oatamost 67 Project: Space Station Avantage 84 Third Courier Accolade 69 Blue Powder - Grey Smoke ..: Grade 75 PrQmethean Prophecy (The) 84 Troika Paragon Buy/Rent IIgs Software 74 Birds - Trees &Flowers Focus Media ...... ~ ..- Simon &SChuster 84 Wayne Gretzky Hockey 2 Bethesda Most Rentals $5 63 Border Zone Infocom 67 Pulsar II Sirius 84 World's Greatest Baseball Game 67 Bouncing Kamungas ~ Penguin ...... EpyxlKeypunch Average Sale Price $15 68 Pure Stat Basketball ? 66 Boxing ? 62 Quadratic Equations II Over 200 titles (none public domain) 65 Bureaucracy Infocom ... Olympus Educational Software Send $5 for catalog and membership 67 C'est La Vie Adventure International 81 Quarter Mile lie ? GSoft 69 Caverns of Callisto Origin 63 Questron 11. Electronic Arts 425 Loch Devon Drive 69 Checker ~ Odesta 68 Rails West · SSI Lutz, FL 33549 69 Chess 7.0 0desta 63 Renegade Taito 81 Chessmaster 2100 lie .. Software Toolworks 67 Rescue Raiders · Sir Tech

COMPUllST #84 Readers Data Exchange 23 #79-TheProductMonitor-Bitkeys:Kab­ Ianversion 1.02-OverVue·PageMaker­ Puzzle Maker- Monsters and Make Be­ Shop- Instant Survey- Micro Typewrit­ ul Spy- Softkeys: ABM- Algebra 1-6­ PageMaker 1.0- Pensate-PFS-PFSFilel lieve vI.l- Pipe Dream- Pipe Dreams­ er v4.0- Murphy's Minerals- Patterns­ Cause and Effect- Chemistry: Series I­ Report· PFS version A.03- Real Poker­ Rear Guard-Rendezvous with· Rama­ PictureChompers-ProbabilityLab-Pro­ ComputerGenerated Mathematics Vol. Rogue- Sargon III- SkyFox· Smooth Same or Different- Teacher's Tool RJt­ fessor AI's Seque~cingLab- Stickybear 2- Cribbage- Designer Puzzles- Dun­ Talker·The Quest- ThinkTank- Think­ Teacher's Tool Kit (IIc)- War of the Shapes (ProDOS 1.5)- Studymate (the geon Master Assistant Vol. 2- Econom­ Tank 1.1- ThinkTank·128- ThinkTank Lance- Where in the USA is Carmen -grade booster)- Sun and Seasons- The ics-Genesis-GinKing- Go-Graphmas­ 512-Transylvania-TriplePlay 1.0-Triv­ Sandiego?-WindwalkerGS- Windwalk­ Duel: Test Drive II- Time Navigator­ ter- Hard Hat Mack- Hi Res Computer ia Arcade- Trivia Fever- Typing in­ er lIe- APTs: Space Rogue- Wizardry Tomahawk-Windwalker-APTs:Where Golf- Integer Arcade- Laser Bounce­ trigue- Ultima ][- Ultima III- Vid~­ 111-· Playing Tips: Countdown- Space inEurope is Carmen Sandiego?- Where Mammals Reptiles and Insects- Master oWorks 1.0- WellTris- Winter Games­ Rogue-IBM Softkeys: Serve and Vol­ intheUSA isCarmenSandiego?- Where Grades- Mickey's Crossword Puzzle Xyphus- Features, Notes & such: ley- Welltris in the World is CannenSandiego?­ Maker- Mind Benders- Missing Links­ COpyA-able Questron II-Howto make #81- The Prodl;lct Monitor- Bitkeys: Where in Time is Carm~n Sandiego?­ Non-Western Cultures- RoboCPP- Sa­ Thiefinto a BRUNable file- How to run Micro Typewriter- Softkeys: Backyard Playing,Tips: Windwalker- IBM Soft­ fari Search- SAT Score Improvement Task Force on your hard drive- Making Bir~- Balance of Power- Chemistry: keys: Crime Wave- Gauntlet II- Stunt Series- Special Product and Algebraic Genesis into a single BRUNabie file· Balancing Equations- Chemistry: The Driver- Thexder II- Wing Commander· Factors- Stickybear GS Talking series Making Hard Hat Mack into a single Periodic Table- Chuck Yeager's AFf­ IBM Reader Review: Copyright- Talking Alphabet-Talking Opposites­ BRUNable file- Making PLATO soft­ EquationMath-Estimation: QuickSolve and much more••• Talking Shapes- Task Force- Teacher's ware run on the Enhanced lIe- Multi­ I- ~stimation: Quick Solve II- Five-Star For a complete back issue list, send a Toolkit version'3.1- The Great Knowl­ Column Print Utiljty (MCP)- Notes on .- Forecast- Fossil Hunter-,GrammarToy 75¢ stamp to Computist. edge Race-The History 9fEurope-The Battle Chess- Notes on Sileot Service SolarSystem-TIleTimeTunnel-Thief­ GS, Notes on Wildcard II card- Object TrianGO-·US History- Wasteland­ Module Fonnat (OMF)-. ORCA/Disas­ Waterand Weather- Who Am I?- Word sembler Scripts- ORCA/Disassembler Special Software Sale Problems for Algebra- Worksheet Gen­ utilities- Other Notes- Running Teach­ erator- Writing Chemical Formulas­ er's Toolkit v3.l (3.5") on a Laser 128- (while, they last) YourBody-,YourBody: Series II- Play­ .Task Force on a hard drive and Wings' ing Tips: BanefulTales-Elite-Mac Fea­ byVitesse-TheBasicsofKracking(part These software packages are NEW (shrink-wrapped except for the one tures:Mac HardDiskEjectionFix-Mac 5): DeprotectionofModified DOS disks­ copy ofSound Master that Iopened in order to find out ~hat it was). They're So/tkeys and other Patches: ABCBase· The·Basics of Kracking Part 6: Mating software packages that someone ordered and then canceled and. we were Animation Toolkitl- AztecC 1.0· Az­ Zone & Nibblizing Mysteries- Update unable to return. ~ tec C version I.DOc· Championship on theSilent Service GS v925.01 crack­ Boxing- Chart· Checkminder· ·Cut­ Xtemal Commands for BASIC: CWO SubLogic Scenery Dis·k 2 throats- Cutthroats alternate- Deja Vue (Change Working Directory)- ONLINE­ EIP~so) Desk Toppers- Dollars & Sense· Dol­ #80- The Product Monitor- Features, - (Phoenix, Albquerque & lars & Sense alternate- Electric Check­ Notes & such: Add Copy II Plus file SubLogic book- Excel- Excel alternate fix- Fact handlingtoyourBASICprogram-Com­ Finder 1.0- Factfinder- Farenheit 451­ ments onthe Beginner's Book- Format­ (All Apple II's) $5.00 Feathers & Space- File- FileMaker- Fi­ ting 720K disks as ·l.44M HD- How to For use with Jet andlQf Flight Simulator v2.0. Each scenery disk covers levision- Filevision alternate- Forecast­ SAVB hexdumps as CDA's- Logging a geographical region ofthe country and includes maj~r airports, radio-nav Frogger- FunPak- Oa1O- Grid Wars­ ProDOS Drives- The Basics of Krack­ aids, cities, highways, nvers and lakes located in that region. Enough detail Griffm Tenninal-·Haba-Co~·- Haba- ing (part 7)- The Basics of Kracking a~ailable .Comrri alternate-HabaCheckMinder­ (pat:t 8)-Bitkeys: BlackMagic- Guild of is for either visual or intrumental cross-country navigation. Habadex 1.1- Harrier S~ke Mission­ 1lrleves-(junslinger-RJng's(2uestSe­ Hayden Speller- Hayden Speller alter­ ries.--Leisure\Suit Larry- Man Hunter: ·SoundQuest CZ Master nate- Hippol\C Levell- Hitchhiker's New York- Police Qu~st- Realms of Sound Quest In alternate- Hitchhiker's Guide to the Darkness- Saracen- Sierra Boot Disks-' Galaxy- Hol1!e Accountant- Legacy­ Silicon Dre~s- Space Quest Series­ (Commodore Amiga) $10.00 ~ LodeRunner- Mac Fortran-Macattack­ Ultima V- Wizardry Series· Xyphus­ For use with the Casio CZ-IOl, CZ-lOOO, CZ-3000, CZ-5000 and other MacChkrs/Rvrsi-MacCommand-Mac­ Softkeys:' Ancient Art of War· Battle compatable synthesizers. Included are file management and bank editing Draft 1.0-MacDraft 1.1- MacGammon/ Chess- Bridg~ 6.0· Captain Blood GS­ Cribbage- MacJack/Poker II- MacLa­ Dinosaur Days vl.O- Em·pire- Fahren­ features, patch mixing and random voice generation features. Compose and beller- MacMateh- MacPascal.(version heit 451- Fay's Word Rally- GATO mix your own music using many of the package options available. 1.0)- MacPoker- MacType- Master v1.3- Greeting Card Maker- Hostage­ Type- Master Type alternate- Mouse Keef The Thief- Magic Spells v2.0­ Send or(Jers to Computist at. the address listed on the Back Stampede- Multiplan alternate- Multip- Magic'Spellsv2.1- Mickey's Crossword issue order form below.

~------~------~------,)~ .I.... J:iIII,.. MIl Dia JIIuI Mag DiIk Ju&I Me DiM C•.....··...... ·•...·•..•. ·· •.·.•..;·::.:I m y .!r~~~:~~ ~ ~:::::g ~ ~:::::~ ~ ;r:::::~ ~ _.. .··BacklssueOrcJerFor ! Core20 0 25 .....0 0 49 .....0 0 73 .....0 0 Back Issue and Li.~raryDiskRates • Number of back issues. . $ 1 I 3 0 26 0 0 50 0 0 74 0 0 14 0 27 0 0 51 0 0 75 0 0 US, Canada AlI- I ICore3D 0 28*.. 0 0 52 0 0 76 0 0 Quantity &Mexico others Number ofZox back issues. $ I 15 0 29 0 0 5 Back issues ...... ·..s·· 5 or less $4.75 $8.75 I ...... 3 ..... 0 O· 77 ..... 0 0 6 to 9 $3.75 - $6.00 16 ...... 0 0 30 0 0 54 0 0 78 0 0 10 or more $3.00 $5.00 Number of Jibrary Disks. $ ~ 1 17 ...... 0· 31 00 55 0 0 79 0 0 Zox back·ISsues* ... any qty. $4·75. $8.7·5 1 8 .. ~ 0 32 0 0 56 0 0 80 0 0 $5.50 Washington state residents add 7.8% tax $ 1 1 9 00 33 00 57 00 81.. 00 Librarydisks ...... ~:~ess :~:~ I 10 0.0 34 0 0 58 0 0 82 0 0 0 $4$.00 $. Total enclosed $ - 1 or more 3.00 5.00 -----1 111 0 0 35 0 0 59 0 0 83 .....0 0 - 112 0 0 36 0 0 • 60 0'0 1 Not(!: Total backissue and library disk orders to get Name I I 13 0 0 37 0 0 61 0 0 quantity discounts. (i.e. Ordering 5 back issues and 5 114 0 0 38 0 0 62 0 0 librarydisksmeansthatyoupaythethequantitylOprice I 115 00 39 00 63 00 of$~eachforboth.) . Addft:ss 'I 116*.. 00 40 00 64 00 . *DuetothetimeandeffortinvolvedinmakingZox .1 117 0 0 41.. 0 0 65 .0 0 copies,their price will remain at $4.75 each/or US, I 18 0 D. 42 0 0 66* 0 0 Canada & Mexicqand at $8.75 for all other Foreign. City State __Zip I 119'tr.. 0 0 43 0 0 67 0 0 Shipping is included in all the prices shown. 120.. ~ ..D 0 44 0 0 68 0 D 1 ~ ~------I 21..... 0 0 45 ..... 0 0 69 ..... 0 0 What's a library disk? VISA --- I

: A library disk is a 51/. inch floppy diskette that· Me ---- . -----Exp. I

Some disks appl.y·to more than... one issue and are contains programs that wouldnonnally have to be typed 84 II I ~~~u~~~c~m~~n~e~hli~~d~cm ~~-----~------~~ I shown as taller boxes. be found in the corresponding issue. . • US funds drawn on US bank. • Most orders shipped within 5 working days.1 I -Library disks are availablefor all issues of COM- however please allow up to 4 weeks delivery for some orders. - Large orders are I * Limited supply - flfst-come-first-serve oasis. PUT/ST. shipped UPSsoplease use a street address. -Offergood while supply lasts. -Call 1 0 Out-of-print-only "Zeroxed" copies for sale. . For a complete back issue list. send a 75¢ stamp to (206) 832-3055 to use a credit card or send check/money order to: I 1 IL..* Issue 66 is laser printed on 8 / 2 by 11 paper..... Computist. COMPUnST .__33821~E Orville Road Eatonville WA 98328 ...II

24 ReadefS Data Exchange COMPunST #84