Category : Unprotects for Games and Such
Archive   : TD3UNP.ZIP
Filename : TD3.UNP

 
Output of file : TD3.UNP contained in archive : TD3UNP.ZIP
Unprotect for Test Drive III

Tired of looking up protection codes for that expensive program you bought.
Well we can do something about that nasty protection scheme.

Use the Norton editor (or a similar hex editor) on the hard disk copy of
TD3.EXE (as always it is inadvisable to modify your original). Search for
the following bytes:

83 7E E8 00 74 32 (this should be found around 43A2)

Now make the following changes:

Original: 83 7E E8 00 74 32 2B
| |
Changes: C7 46 00 EB 31


Write the file out and you are done! Enter any number when it asks you the
question.

For reference this is the dump of the part of the program we are changing.

First the original:

-u4490

1471:4490 83C408 ADD SP,+08
1471:4493 B80B00 MOV AX,000B
1471:4496 50 PUSH AX
1471:4497 2BC0 SUB AX,AX
1471:4499 50 PUSH AX
1471:449A 9AA106DC0B CALL 0BDC:06A1
1471:449F 83C404 ADD SP,+04
1471:44A2 837EE800 CMP WORD PTR [BP-18],+00 ;Change to MOV
1471:44A6 7432 JZ 44DA ;Change to JMP
1471:44A8 2BC0 SUB AX,AX
1471:44AA 8946E8 MOV [BP-18],AX
-q


Now the unprotected file:

-u4490

2625:4490 83C408 ADD SP,+08
2625:4493 B80B00 MOV AX,000B
2625:4496 50 PUSH AX
2625:4497 2BC0 SUB AX,AX
2625:4499 50 PUSH AX
2625:449A 9AA106DC0B CALL 0BDC:06A1
2625:449F 83C404 ADD SP,+04
2625:44A2 C746E80000 MOV WORD PTR [BP-18],0000
2625:44A7 EB31 JMP 44DA
2625:44A9 C0 DB C0
2625:44AA 8946E8 MOV [BP-18],AX
-q


Courtesy of Bad Bob



  3 Responses to “Category : Unprotects for Games and Such
Archive   : TD3UNP.ZIP
Filename : TD3.UNP

  1. Very nice! Thank you for this wonderful archive. I wonder why I found it only now. Long live the BBS file archives!

  2. This is so awesome! 😀 I’d be cool if you could download an entire archive of this at once, though.

  3. But one thing that puzzles me is the “mtswslnkmcjklsdlsbdmMICROSOFT” string. There is an article about it here. It is definitely worth a read: http://www.os2museum.com/wp/mtswslnk/