Category : Unprotects for Games and Such
Archive   : SU25-UNP.ZIP
Filename : SU25.UNP

 
Output of file : SU25.UNP contained in archive : SU25-UNP.ZIP
UNPROTECT FOR SU-25 STORMOVIK

EA wasn't very imaginative with their copy protection for this one - basically,
it's the same scheme that's used for LHX Attack Chopper. I guess this isn't too
surprising, since SU-25 is based on the same formula that LHX was.

Anyway, here's the unprotect.......it's pretty much the same unprotect that
"Tony the Terrible" did for LHX (thanks Tony!). I searched with Norton
Utilities for the bytes after the "31 C0" patch in LHX, and then searched
SU25.EXE with Norton Utilities until I found the same bytes. I then backed up
two bytes and changed the "75 0F" to "31 C0" and tried it - it removed the copy
protection. I noted the offset in bytes of the patch from Norton, and after a
few moments calculation figured out the segment and offset to use with debug.
I reloaded the program from the original disks and tried the same patch with
DEBUG to make sure it worked properly (it did). Total time: about 15 minutes
tops. Anyway, enuff b.s. - here 'tis:

PS: Remember to make backups of before you do this. You have the original
program disks, so this isn't a problem, right?

METHOD 1: NORTON UTILITIES

1. Search SU25.EXE for the following string:

75 0F 89 76 FE 0E

2. Change the "75 0F" to "31 C0" and save

That's it. Now, when the copy protection quiz comes up on the screen, just
type in anything and press enter. You have to type in something - just
hitting ENTER doesn't work!


METHOD 2: DEBUG

If you don't have Norton Utilities, do this.....

1. Check the SU25.EXE file and make sure it matches this:

SU25.EXE 250363 8-31-90 11:59p

The file size should be the same, or this patch may not work!

2. Make sure that DEBUG is in your path.

3. Copy the SU25.EXE file to SU25.ZAP.

4. Type DEBUG SU25.ZAP

5. Type a "d" and press ENTER.

6. The first line will have a segment and offset. For example,
on my system it looks like this:

1060:0100 4D 5A FB 01 E9 01 00 00-20 00 02 05 FF FF FA 41 MZ...... ......A
1060:0110 80 00 00 00 12 00 D2 3B-1C 00 00 00 00 00 00 00 .......;.........
1060:0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .................
1060:0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .................
1060:0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .................
1060:0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .................
1060:0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .................
1060:0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .................

Grab the first number to the left of the colon (in this case, 1060). Add
21D9 hex to it and write it down.

6. Now, enter the following command, substituting XXXX with the number you
got in step 5:

E XXXX:0101 31 C0

For example, using the example from my system in step 5, we would type:

E 3239:0101 31 C0

...and press ENTER.

7. Now type "W" and press enter. You should see "Writing XXXX bytes" and then
the "-" prompt.

8. Type "q" and press enter.

9. Copy SU25.ZAP to SU25.EXE.

Now, when you run SU25, just type in anything (you have to type SOMETHING, don't
just hit ENTER) at the copy protection and you're in.

Enjoy!
Scott



  3 Responses to “Category : Unprotects for Games and Such
Archive   : SU25-UNP.ZIP
Filename : SU25.UNP

  1. Very nice! Thank you for this wonderful archive. I wonder why I found it only now. Long live the BBS file archives!

  2. This is so awesome! 😀 I’d be cool if you could download an entire archive of this at once, though.

  3. But one thing that puzzles me is the “mtswslnkmcjklsdlsbdmMICROSOFT” string. There is an article about it here. It is definitely worth a read: http://www.os2museum.com/wp/mtswslnk/