WIZARDPLUS

WIZPLUS.CAL:
the calculator chip is used in a 010x board & requires 018x sn# & keys to
be installed in the unit.
install the calc. chip in an authorized box and make sure the unit is
decoding audio, press setup 8, then 9....record the keys, press setup 7, 8,
9....record the keys [these are for the next period].

WIZPLUS.RAM
this chip prepares the ram for the wizplus.run chip, it writes, among other
things, the working keys in the u20.
key 0 in the ram chip is the key the unit will operate on upon initial lockup.
keys 1 - 8 are the audio banks.

WIZPLUS.RUN
this is the run chip, operation is quite straight forward.
setup 7 displays the available audio banks and allows switching of banks.
setup 8 allows the entering of a new working key to the audio banks.
SPECIAL NOTE: there is a "bomb" in the program!!....hit setup 5,5,5.
the security code appears to be the 3rd & 4th bytes of the units sn# xor'd.
when looking at the code with a simulator, i found the area where the security
code is entered....it seems to have a "bug" in that it doesn't add the last
two bits together [ex. 9+1=a]....hence only boxes with a security code ending
in 9 or less may be entered.
the security code is stored at 6656, i think we could just change the reset
vector [trap 0] and add code that would xor 6637 & 38 and store the value at
6656....by placing this routine at trap 0 this routine would be executed every
time the vc locks up.

             ±±±±±±Ü ±±±±±±Ü ±±±Üܱ±±Ü ±±±±±±±±±±Ü ±±±±±±Ü ±±Ü  ±±Ü
             ±±Ûßßßß ±±Ûß±±Û ±±Û±±Û±±Û     ±±Ûßßßß ±±Ûßßßß ±±Û ±±Û
             ±±Û     ±±Û ±±Û ±±Û ßß±±Û     ±±Û     ±±±±±Ü  ±±±±±ßß
             ±±Û     ±±Û ±±Û ±±Û   ±±Û     ±±Û     ±±Ûßßß  ±±Ûß±±Ü
             ±±±±±±Ü ±±±±±±Û ±±Û   ±±Û     ±±Û     ±±±±±±Ü ±±Û  ±±Û
              ßßßßßß  ßßßßßß  ßß    ßß      ßß      ßßßßßß  ßß   ßß
                               BBS 1200-N-8-1
                                402-223-2999
Downloaded From P-80 International Information Systems 304-744-2253