----------Managing for Success---------
----------Personal Development---------
A 4am crack                  2015-07-06
---------------------------------------

Name: Managing for Success: Personal
  Development
Genre: productivity
Year: 1983
Authors: Thoughtware, Inc.
Publisher: CBS Software
Media: 3 single-sided 5.25-inch discs
OS: DOS 3.3
Other cracks: none

The disks are numbered and labeled.

1. Assessing Your Management Potential
2. Understanding What Managers Do
3. Planning Your Personal Development

All three are bootable and appear to be
independent of each other. I'll start
with disk 1.

                   ~

               Chapter 0
 In Which Various Automated Tools Fail
          In Interesting Ways


COPYA
  immediate disk read error

Locksmith Fast Disk Backup
  unable to read any track

EDD 4 bit copy (no sync, no count)
  works

Copy ][+ nibble editor
  modified address and data epilogues
  ("DF AB EB" instead of "DE AA EB")

Disk Fixer
  ["O" -> "Input/Output Control"]
    set Address Epilogue to "DF AB EB"
    set Data Epilogue to "DF AB EB"
  all tracks readable
  T00 -> looks like a DOS 3.3 RWTS
  T11 -> DOS 3.3 disk catalog
  T01,S09 -> startup program is "CBS"

Why didn't COPYA work?
  modified epilogue bytes (every track)

Why didn't Locksmith FDB work?
  modified epilogue bytes (every track)

EDD worked. What does that tell us?
  no half or quarter tracks
  almost certainly no nibble check
  (just structural changes to epilogue)

Next steps:

  1. capture RWTS with AUTOTRACE
  2. convert disk to standard format
     with Advanced Demuffin
  3. patch RWTS to read standard format

                   ~

               Chapter 1
In Which We Attempt To Use The Original
    Disk As A Weapon Against Itself


[S6,D1=original disk]
[S6,D2=blank disk]
[S5,D1=my work disk]

]PR#5
CAPTURING BOOT0
...reboots slot 6...
...reboots slot 5...
SAVING BOOT0
CAPTURING BOOT1
...reboots slot 6...
...reboots slot 5...
SAVING BOOT1
SAVING RWTS

]BRUN ADVANCED DEMUFFIN 1.5

["5" to switch to slot 5]

["R" to load a new RWTS module]
  --> At $B8, load "RWTS" from drive 1

["6" to switch to slot 6]

["C" to convert disk]

                 --v--

ADVANCED DEMUFFIN 1.5    (C) 1983, 2014
ORIGINAL BY THE STACK    UPDATES BY 4AM
=======PRESS ANY KEY TO CONTINUE=======
TRK:...................................
+.5:
    0123456789ABCDEF0123456789ABCDEF012
SC0:...................................
SC1:...................................
SC2:...................................
SC3:...................................
SC4:...................................
SC5:...................................
SC6:...................................
SC7:...................................
SC8:...................................
SC9:...................................
SCA:...................................
SCB:...................................
SCC:...................................
SCD:...................................
SCE:...................................
SCF:...................................
=======================================
16SC $00,$00-$22,$0F BY1.0 S6,D1->S6,D2

                 --^--

]PR#5
...
]CATALOG,S6,D2

C1983 DSR^C#254
114 FREE

 A 007 CBS
 A 002 HELLO
 B 008 C01$SUN.SCR
 B 011 PCPIGIC
 B 009 C01$CBS.SCR
 A 002 C01$QRES.SUB
 B 002 C01$LOGO.SCR
 T 008 C01$MENU.DAT
 T 032 C01$UN1C.DAT
 T 004 C01$FLOW.DAT
 T 028 C01$MSTR.OCM
 A 005 C01$EVL2.SUB
 A 017 C01$BGRP.SUB
 A 010 C01$EVA3.SUB
 A 012 C01$EVA2.SUB
 T 001 AAAAAAAA.DAT
 A 014 C01$NAME.SUB
 A 011 C01$OPEN.SUB
 A 013 C01$FLOW.SUB
 A 012 C01$LEAD.SUB
 T 003 USER.DAT
 B 003 C01$HOUS.SCR
 T 064 C01$UN1A.DAT
 A 025 C01$CMND.SUB
 T 057 C01$UN1B.DAT
 T 001 C01$MENU.COM
 B 011 QPCPIGIC
 T 008 C01$INIT.DAT
 T 002 ANSWERS.DAT

]RUN CBS
...works...

[S6,D1=demuffin'd copy]

]PR#6
...grinds...

My copy can't read itself yet. This is
not unusual.

                   ~

               Chapter 2
 In Which We Remove All Traces Of Copy
Protection Using An Automated Tool That
   I Wrote For Just Such An Occasion


[S6,D1=demuffin'd copy]
[S5,D1=my work disk]

]PR#5
...
]BRUN PDP

T00,S03,$91 change DF to DE
T00,S03,$9B change AB to AA
T00,S03,$35 change DF to DE
T00,S03,$3F change AB to AA
T00,S06,$AE change 00 to DE
T00,S06,$B3 change 00 to AA
T00,S02,$9E change DF to DE
T00,S02,$A3 change AB to AA

(Just undoing the RWTS modifications.)

Disks 2 and 3 use identical protection.

Quod erat liberandum.

---------------------------------------
A 4am crack                     No. 359
------------------EOF------------------