Category : Unprotects for Games and Such
Archive   : UNPROT2.ZIP
Filename : 123UNP.HLP

Output of file : 123UNP.HLP contained in archive : UNPROT2.ZIP
LOTUS 1©2©3, version 2
©© Additional Information ©©
Rick Hellewell

Many people have called me because they are having problems with the
Lotus deprotection article contained in the December issue of ”Sacra
Blue•. This article will give you additional information and help in
deprotecting ”your• own copy of Lotus 1©2©3. This information is
provided as a public service for users to remove the copy protection
from their own legitimate copies of Lotus 1©2©3, and is not provided
so that users can make unauthorized copies of Lotus 1©2©3.

The procedure for deprotecting 1©2©3 was originally provided by the
Lone Victor, a user on the Atlanta (GA) BBS system (404©437©0062).
Many other procedures for deprotecting programs can also be found on
that bulletin board ©© and on the local BBS systems.

The December article detailed this procedure, including the DEBUG
instructions. Since many are having difficulties with that
procedure, this article will expand on that information, giving
specific steps to follow. Note that this procedure will only work on
Lotus 1©2©3 Release 2, with the 123.COM file (on System Disk # 1)
dated 9©25©85, 1:23 AM. Other file dates may or may not work.

Also note that we have eliminated the need of using the ALTER
commands on the hidden files as described in the December issue. I
suspect that that has helped muddle the waters a bit.

The procedure is comprised of five basic steps:
1. Copy all files into the hard disk subdirectory.
2. Use the Lotus COPYON program.
3. DEBUG the Lotus 123.COM program in the subdirectory.
4. Save the DEBUG'd program as 123.COM.
5. Use the Lotus COPYOFF program.
ÌRename 123.BIN as 123.COM (deleting the original 123.COM file.Þ

How the Protection Scheme Works
In order to help you understand what the protection scheme is and how
it works, the following information might be helpful. With 1©2©3
installed on the hard disk by COPYON, three files are placed in the
”root •directory with specific file attributes:
CML0203A.HCL ©© Read©Only, Hidden, System file
VDF0203A.VDW ©© Read©Only, Hidden, System file
123.L2C ©© Hidden file
In addition, 123.COM is put in the subdirectory that you have put all
the other Lotus files.

The first two files are used by the Softguard protection scheme.
123.L2C is the actual 1©2©3 program, in an encrypted form. 123.COM
(in the subdirectory) is the program that loads and un©encrypts
123.L2C , the actual 1©2©3 program. If the hidden files are not inÜjÜ the root directory, the program will not load.

(This is why Lotus says that you have to use the RESTORE /P command,
NOT restoring hidden files if you expect 1©2©3 to work after a
RESTORE. And a COPYOFF is required before you re©format the hard
disk. Of course, the only reason we would re©format the hard disk is
in case it was unusable, in which case COPYOFF wouldn't work anyhow.
Clever of them, eh?)

The deprotection scheme uses DEBUG to run the 123.COM program to the
point where it loads the actual 1©2©3 program (123.L2C) and
unencrypts it. It also removes the sections of the program code that
looks for the hidden files. The net result is a file (eventually to
be called 123.COM, that is the equivalent of the unencrypted, loaded
123.L2C. (In fact, the 123.COM file size is different before and
after the COPYON procedure because of this protection scheme.)

How To Do It
Here, then, are the detailed instructions for performing this bit of
magic. You should have your copy of the article from the December
1985 issue of ”Sacra Blue•, that shows the DEBUG sequence.

”Copying files from the Lotus Master disks into your subdirectory:•
Following the instructions in the Lotus "Getting Started" book (page
12), make a subdirectory for all your Lotus program files. Follow
the instructions as shown on pages 12©14. You do not need to go
through the INSTALL program to install the device drivers at this
time. (You will have to do it later if you haven't already).

”Use the Lotus COPYON program•”: •This program installs 1©2©3 on your
hard disk so that you can start it without putting your system disk
in drive A ©© the "key disk" scheme. Follow the instructions in the
Lotus booklet "How to Start 1©2©3 Directly from a Hard Disk". The
procedure starts on page 3. (If you have an AT, use COPYHARD ©© see
page 2.) Read through this booklet so that you understand what is
happening. Do steps 1©10 for the program for your computer.

At this point, you can run 1©2©3 without using the key disk scheme.
(You can try it if you want.) Then on to the next step.

”Debug the 123.COM program:• Make sure that your DOS prompt is the
subdirectory (for instance \123) that you copied the Lotus files to.
You will also need to have DEBUG.EXE in that directory, in the A
drive, or accessible by the DOS PATH command. (The PATH option is
recommended: if DEBUG is in the DOS subdirectory, the command would
be PATH = C:\DOS .) We will now run the DEBUG program, modifying
the file 123.COM ”in the \123 subdirectory•.

A Word From Our Sponsor

œA few words about what DEBUG is and how to use it. A knowledge of
Assembly language (the basic programming language used by the PC) is
not required to understand what is happening. But an understandingÜjÜ of the different DEBUG commands is helpful.

DEBUG allows us to modify a program, actually changing how the
program works by changing the assembly language program. Several
commands are used in this procedure:
ÌPrint (show) the Registers contents ©© a series of holding areas
for values used by the program.Þ

G Run (Go) the program. G 100 starts the program at address 100.
ÌTrace (execute one program "line") and stop, showing the contents
of the registers and the program code for that instruction.Þ

E Edit (change) a specific part of the program code.
A Assemble (translate) statements to their program code equivalent.
N Give the program a name.
W Write the program to disk.
Q Quit, and return to the DOS prompt.

A few other hints: several times during this procedure we will use
the "E" command. It displays the current value (hexadecimal, or base
16 numbering system. Hex numbering system uses 1©9 for decimal 1©9,
and A©B©C©D©E©F for numbers 10©15. So the Hex "number" C is the
equivalent of decimal 12.) For example, the command
”e cs:107• will give us this line on the screen:
”xxxx:0107 8e.•
(We have used lower case here to eliminate confusion between numbers
and letters: there is a difference between zeros and the letter "O",
ones and "L", etc.)

If we type in a Hex value, that program instruction changes. Several
times we are typing in a "90", which is an instruction that says "do
nothing" ©© a no©operation or NOP (pronounced NO©OP). If we press
the space bar, we will get the next Hex program code, resulting in:
”xxxx:0107 8e.90 4f. • displayed on the screen. We can keep on
typing in hex values and hitting the space bar to change individual
Hex values, or press the RETURN key to finish the Edit command.

So when you see, in the DEBUG instructions, these lines:
e cs:200
e8.90 ff.90 03.90 here are the keys that you type:
Type ”e cs:200• press RETURN, type ”90•, hit the space bar, type ”90•, hit
the space bar, type ”90•, hit the RETURN key. Now you are back at the
"©" prompt. (All commands are entered from the dash prompt. Press
the return key again if you don't see it.)

If you type in the wrong values, just do the E command again. Or if
you are not sure, just type Q, and start DEBUG all over.

Ready to Debugœ

So here we go, ready to DEBUG 123.COM. You are in the ”\123•
subdirectory, right? And you have DEBUG.EXE available through the
PATH command, right? From your DOS prompt, type:
”DEBUG 123.COM• and press the RETURN key.
The screen will show a "©", which is the DEBUG prompt. Now type ”R•
(we will assume that you know to press the RETURN key). This willÜjÜ show you three lines of numbers, the one we are interested in is the
DS value. Write this number down, you will need it later.

Now, follow the instructions in the December issue of ”Sacra Blue•.
You should see the same numbers on your screen (with the exception of
the DS number) as in the article. If you don't, type ”Q• to Quit
DEBUG, and start this step over. Go ahead, I'll wait for you to get

”Saving the DEBUG'd program as 123.BIN•: Now that you have DEBUG'd your
way though the December article to the ”N 123.BIN• command, finish up
with the "N" , "W" and "Q" commands. You should now be at your DOS
prompt. And you have a new file called 123.BIN that is the actual
decoded 123.COM program. Almost done now !

”Use the Lotus COPYOFF program•: Following the instructions in the
Lotus "How to Start.." book, COPYOFF (or COPYHARD /U if you have an
AT). This will remove the hidden files, and will change the 123.COM
program to a different one (if you do a DIR 123.COM before and after
the COPYOFF program, you will see different file sizes).

We now have two files that will start 1©2©3: 123.COM, which now
requires the "key disk", and 123.BIN, which behaves as if you had
never done COPYOFF. 123.COM is wasting space on our hard disk drive,
so ...

”Rename 123.BIN to 123.COM•: Erase the 123.COM file with the command:
ERASE \123\123.COM (we specified the \123 subdirectory just in
case), and then rename 123.BIN with the command
RENAME \123\123.BIN 123.COM

Congratulations! You now have an unprotected version of 1©2©3.
Verify that it works by starting 1©2©3 with the command "123". You
will notice that 123.COM (the new one) looks on drive A for the key
disk and serial number, but doesn't find it ... and doesn't care that
it is found. In fact, you can leave a disk out of the A drive, and
it will still start up.

For Your Computer Onlyœ

Now, remember that as a good user, don't give a copy of 1©2©3 to your
friends (that's illegal, and not very nice). We just did this on our
own legal copy to get rid of the inconvenience (read: irritation) of
putting the key disk in the A drive every time we start 1©2©3. And
if our hard disk fails (heaven forbid!), we will be able to use 1©2©3
after we RESTORE our files to the new hard disk (you do make backups,
don't you?).

I hope that this helps those of you that want to unprotect your own
copies of 1©2©3. I am sure it works, having done it several times on
my computer just to make sure. And now that you have successfully
completed a session with DEBUG, you can easily go on and unprotect
other programs.
Üj܌I just wish that we didn't have to hassle with these irritating copy
protection schemes.


FILE LISTING OF LOTUS 1©2©3 Release 2 System Disk # 1 (before COPYON)

Volume in drive A has no label
Directory of A:\

LOTUS COM 5817 9-25-85 1:23a
123 CMP 133848 9-25-85 1:23a
123 COM 2048 9-25-85 1:23a
123 HLP 114366 9-25-85 1:23a
123 CNF 265 9-25-85 1:23a
123 SET 32935 9-25-85 1:23a
6 File(s) 32768 bytes free

  3 Responses to “Category : Unprotects for Games and Such
Archive   : UNPROT2.ZIP
Filename : 123UNP.HLP

  1. Very nice! Thank you for this wonderful archive. I wonder why I found it only now. Long live the BBS file archives!

  2. This is so awesome! 😀 I’d be cool if you could download an entire archive of this at once, though.

  3. But one thing that puzzles me is the “mtswslnkmcjklsdlsbdmMICROSOFT” string. There is an article about it here. It is definitely worth a read: