************************** Managing Your Money version 1.52 **********

I have seen unprotection schemes for "Managaing Your Money" operating
under DOS 3.0. I don't know why there should be a difference between
that scheme and what is should be like under DOS 2.x. However in trying
to unprotect this program in order to exercise my full legal rights of
making backup copies, I found significant differences between the DOS
3.0 scheme floating around that BBS's and the one that eventually worked
for me under MS-DOS 2.11.
        Try the following to unprotect version 1.52 of ANDREW TOBIAS's
"Managing Your Money":

(assumption: your are familiar with DEBUG)
rename MYM.EXE to something else (i.e. MYM.TMP)
DEBUG MYM.TMP
e 0701
fill location 701,702, anl 703 with NOP's (byte 90)
e 7B71
fill location 7971,7972, and 7973 with NOP's (byte 90)
W       write to disk
Q       quit

the first series of NOP's eliminates the call to Drive A:
the second eliminates checks to see if the right info was read:

                =============Lee Mowatt===============

************************** Managing Your Money **********

          UNPROTECT MANAGE YOUR MONEY - ALL REVS
                              Courtesy of Rolling Stone

There are many patches that allow you to backup or run Manage Your Money
from a hard disk. The ones I've seen are dependent on Rev 1.50 (i.e. they
won't cut it on 1.52). The follow should work for almost all revs.

Needless to say, this should be used for backups and hard disks. MYM is a
good program, and deserves to be paid for. Use it for piracy, and I will
seek you out, and cut your bells (control-g, ascii 7) off.


A>ren mym.exe mym.pgm

A>debug mym.pgm

-s 0 L ffff cd 13
0914:4ADE     {note the 4ADE}
     ^^^^

-u 4aae       {this is about hex 30 less than the 4ADE}
0914:4AAE 07            POP     ES
0914:4AAF 80C330        ADD     BL,30
0914:4AB2 BE6E07        MOV     SI,076E
0914:4AB5 881C          MOV     [SI],BL
0914:4AB7 56            PUSH    SI
0914:4AB8 8A9FC402      MOV     BL,[BX+02C4]
0914:4ABC 53            PUSH    BX
0914:4ABD E82DFB        CALL    45ED
0914:4AC0 83C406        ADD     SP,+06
0914:4AC3 C3            RET                  {note the address after the RET}
0914:4AC4 E82B8A        CALL    D4F2
     ^^^^
0914:4AC7 B80001        MOV     AX,0100
0914:4ACA 50            PUSH    AX
0914:4ACB E80086        CALL    D0CE

-a 4ac4          {this is the address after the RET}
0914:4AC4 ret    {you type the 'ret'}
0914:4AC5        {type a newline}

-u
0914:4ACE 1E            PUSH    DS
0914:4ACF 07            POP     ES
0914:4AD0 BB9640        MOV     BX,4096     {note the address part}
            ^^^^
0914:4AD3 B95B0B        MOV     CX,0B5B
0914:4AD6 33D2          XOR     DX,DX
0914:4AD8 BF0500        MOV     DI,0005
0914:4ADB B80102        MOV     AX,0201
0914:4ADE CD13          INT     13
0914:4AE0 0AE4          OR      AH,AH
0914:4AE2 7425          JZ      4B09
0914:4AE4 4F            DEC     DI
0914:4AE5 75F4          JNZ     4ADB
0914:4AE7 B80002        MOV     AX,0200
0914:4AEA 50            PUSH    AX
0914:4AEB E8E085        CALL    D0CE

-s 0 L ffff 96 40    {search for it}
0914:4AD1
0914:5063            {note this address}
     ^^^^

-u 5053              {use about 10 less than it}
0914:5053 0075D5        ADD     [DI-2B],DH
0914:5056 8346F803      ADD     WORD PTR [BP-08],+03
0914:505A 832E5C4909    SUB     WORD PTR [495C],+09
0914:505F EBB3          JMP     5014
0914:5061 803E964053    CMP     BYTE PTR [4096],53
0914:5066 74C6          JZ      502E               {note this instruction}
                        ^^^^^^^^^^^^
0914:5068 E983FA        JMP     4AEE               {note this address}
     ^^^^
0914:506B 8BF4          MOV     SI,SP
0914:506D 8B7402        MOV     SI,[SI+02]
0914:5070 A0B601        MOV     AL,[01B6]

-a 5068              {use the address}
0914:5068 jmp 502e   {and the instruction}
0914:506A            {newline}

-u 5053              {just checking}
0914:5053 0075D5        ADD     [DI-2B],DH
0914:5056 8346F803      ADD     WORD PTR [BP-08],+03
0914:505A 832E5C4909    SUB     WORD PTR [495C],+09
0914:505F EBB3          JMP     5014
0914:5061 803E964053    CMP     BYTE PTR [4096],53
0914:5066 74C6          JZ      502E
0914:5068 EBC4          JMP     502E
0914:506A FA            CLI
0914:506B 8BF4          MOV     SI,SP
0914:506D 8B7402        MOV     SI,[SI+02]
0914:5070 A0B601        MOV     AL,[01B6]

-w
Writing F5B0 bytes

-q

A>ren mym.pgm mym.exe


************************** Managing Your Money version 2.0 **********



               HOW TO RUN "MANAGING YOUR MONEY(tm)" FROM A
                  HARD DISK WITHOUT THE "KEY" DISK AND
                      WITHOUT PROGRAM MODIFICATIONS

         If you wish to run "Managing Your Money" (including version
     2.0) from a hard disk, but are annoyed by the requirement for
     having the original disk 1 in drive A, then read on....

         Part of this ARC file is the program "MYMFIX.COM".  All you have to
     do is to include this program in your "autoexec" file when running
     Managing Your Money.  For instance, your "autoexec.bat" might look like
     this:

         DATE
         TIME
         MYMFIX  (to install "MYMFIX")
         MYM
         MYMFIX  (to uninstall "MYMFIX")

         That's all there is to it.  MYM will no longer look for the key
     disk in drive A.  If you are using version 2.0 of MYM, when the
     request is made to put the key disk in drive A, simply proceed as
     though you had actually inserted the disk.

     A request:

         If you find this program of value and wish to encourage the
     availability of similar programs in the future, then you may wish
     to contribute $10 to the author at the address below:

                 Herbert Sorock
                 2241 Thornwood Avenue
                 Wilmette, IL  60091

     ------------------------------------------------------------------------
     "Managing Your Money" is a registered trademarks of Micro Education
     Corporation of America.



************************** Managing Your Money version 4.00 **********

    Unprotect for MANAGING YOUR MONEY version 4.00 by MECA...
       by Mary Burkoff
       Assembly Language Guru

    2/1/88

    Sorry this one took so long, but it's hard to get the damn
      program to "trigger" and ask for an "authenticity check".
    This unprotect works for MYM.EXE dated 11-24-87  6:06pm
      It may work for other version 4.0's. It's worth trying.

    This removes all copy protection from the program. You'll never get
      another "authenticity check", otherwise there's no difference
      to the user.

    We will use DOS DEBUG for this:
      MMMM,XXXX,YYYY,ZZZZ = HEX numbers you'll encounter in this adventure.

    from the DOS prompt:

    REN MYM.EXE DICK <return>
    DEBUG DICK <return>

      (now you're in DEBUG)

    -S 0000 FFFF E9 49 FC <return>
      (you should get a hex number) XXXX:YYYY
      (if not, wrong version of MYM, please tell me if a new version 4.0)

    SUBTRACT 5 FROM YYYY (REMEMBER THIS IS HEX!)... ZZZZ = YYYY - 5
       (for example if YYYY = E512, then ZZZZ = E50D etc.)

    -U DS:ZZZZ L5 <return>
      (you should get)
     XXXX:ZZZZ   9AMMMM0000    CALL    0000:MMMM (exact MMMM doesn't matter)
      (if not, wrong version of MYM, please tell me if a new version 4.0)

    -E DS:ZZZZ E9 4E FC <return>

    -W <return>
       Writing 1BB11 bytes (may not be 1BB11 if different release)

    -Q <return>

      (Now you're back in DOS)
    REN DICK MYM.EXE <return>

      (All done)


            Comments, Suggestions, Thanks appreciated.

               Mary Burkoff
               Atlanta PCUG
               1-404-433-0062 (Data)
 