For the record, the protection routine is at $B600 (located on track 1, sector 1) and there are two jumps to $B600: on track 1, sector 0 and on track 3, sector 2.

Two options: you change the JSR $B600 to BIT $B600 or, as you do not know if the second call to $B600 (on track 3, sector 2) calls the protection, it is safer to edit track 1, sector 1. At offset 0, change A2 with EA. That's fun because the second byte is #$60, the opcode for RTS whereas it was used as an index to slot 6 :-)

1. Get a disk copier (there's one on brutaldeluxe.fr)
2. Format a target disk
3. Copy tracks $0 to $F then $11 to $22 (nothing on track $23)
4. Sector edit T1/S1, offset $0: EA.