Fifa 07 TNTANAL no-CD patch does not apply to Reloaded's crack

[jodoformica]

I've downloaded "File Archive #1 [1.8 MB] - RELOADED" and "File Archive #2 [6 KB]" for FIFA 07 but when I try to apply the no-dvd patch on the reloaded fixed exe I get the following error message:

filesize ok!
CRC32 check failed!
nothing patched!

to start the game I have to mount the iso image in daemon e start fifa with reloaded fixed exe.
where is the problem with the no-dvd patch by TNTANAL?

Thanks...

Jodoformica

[southstar]

Just like me. It is not a NODVD. It doesn't work. It is saying " CRC32 Check Failed "

[Joe Forster/STA]

(Thread moved to proper forum, title edited to something with more meaning.)

Confirmed, the TNTANAL no-DVD patch is not for (this copy of) the Reloaded crack, it should be removed. (Does the crack need an additional no-DVD patch at all? Reloaded's NFO on NFOrce says nothing about the need of mounting an image or using a backup DVD!)

[jodoformica]

Yes... you need to load the dvd iso in daemon to use reloaded fixed exe cause it removes safedisc 4 protection but not the cd check protection... that's the big problem...

[Stiouf]

Yes, the nodvd patch doesn't work....

Not a big problem, change this byte and all is alright.

offset, byte to change.
1F0C34 74 to 75
1F0C56 75 to 74
1F0C67 75 to 74

[Joe Forster/STA]

Could you, please, make a patch (e.g. with APATCH (http://www.ibsensoftware.com)) and upload it to GCW (http://ul.gamecopyworld.com)? Thanks!

[Stiouf]

A new patch exist...don't see it when i try to crack it...
I could make a patch but i don't know if i'll do it because there is one work.:rolleyes:

Edit : a new crack too now

[Muji-FightR]

I like patches that just swith the JE to JNE or JZ to JNZ...
This means if no CD is present, it will jump over the nag which tells you to insert the CD.
But if it IS present, it will tell you to insert the CD even tho it is inside -.-

Why can people not assemble a JMP, making sure it will ALWAYS jump :(

[TippeX]

or hit the damned proc, not the conditionals... sigh, the state of cracking these days is atrocious ;p

[Joe Forster/STA]

Not the state of cracking, that of coding in general! Reliability is not an issue anymore...

[Stiouf]

But if it IS present, it will tell you to insert the CD even tho it is inside -.-

No, it will jump too.
You prefer i replace by nop because the game don't have to jump at this byte.

[DABhand]

Find out what address is used before the conditional jumps and change it there, so you dont have to change jump ops.

[Muji-FightR]

Or change the setting of the byte which is always the best ;)
Often it's
Call IsCDInserted
Test EAX, EAX
Blah Blah

You can just patch the "CALL IsCD" into "MOV EAX, 1"
which a) perfectly works (unless there's an additional check based on booleans -> bytes)
and b ) eliminates the CD check phyisically, hence it starts earlier than normal as it doesnt need to search for drives, checks etc.

[TippeX]

if you can patch the call to the proc, then you can also patch the proc it calls, which is a LOT better.. esp. if the proc is indirectly xreffed later on, then your work is in vain.. patch the proc, then its more probable it will work...
and sometimes its weird, patching mov eax,1 does not work, however patching xor eax,eax.. inc eax does (most likely due to flags), so thats also worth paying attention to...

[Joe Forster/STA]

Call IsCDInserted
Test EAX, EAX
Blah Blah

You can just patch the "CALL IsCD" into "MOV EAX, 1"


You gotta be careful with this one! There may be some relocation (or whatever; Hacker's View greys it out) on the address of the call. If you replace the call with something completely different, the bytes of that instruction (or its operands) will be changed by the relocator (or whatever) in the memory, before the program is started, and the code will crash. I've run into this a few times and now I'm not doing this anymore... ;)

[TippeX]

naw, relocs are only applicable to dlls, in exe, it will load at the base address specified in the pe header.. so exe's don't need reloc's

hiew had a bug in the older versions where for e8 calls it always added on the base address and screwed things up.. that could be the reason for the grayed output..

relocs are only applicable for certain situations and e8 calls are not one of them.. the e8 call is relative to the va its called from e8 xx xx xx xx -> va+ xxxxxxxx +5..

relocs apply to such things like

ff 15 xx xx xx xx (where only the xx xx xx xx will be updated by adding on the 'new runtime base)

ff 25 xx xx xx xx, ff 35 xx xx xx xx

and code like

mov eax,[12345678]
mov [12345678], eax

etc, where only the 12345678 part is updated.. if in doubt, process the reloc table and double check your patch area

[Joe Forster/STA]

Yup, FF 15, that's the one! :) I rather change it to a neutral 90 B8 (NOP; MOV EAX, <call address>) instead or jump over it (if there's enough room in front of it).

[TippeX]

90 E8 i hope ;p. considering mov eax,<call address> will never actually call the function and/or screw the stack if the proc uses params.. regardless though, ff 15 in an exe shouldn't matter really for reloc's, as the exe loads at the base address from the pe header, only dlls get relocated

[Joe Forster/STA]

No, I mean, the CD check (or whatever) is completely skipped this way! :) Ehhh, never mind me... :o

[acal3000]

Sorry if this a bit offtopic but tnt ANAL? wtf for a a cracking scene group is that ?

[Joe Forster/STA]

They don't like TNT, I guess. :)

[DABhand]

Probably some other group that TNT didnt give a nice score in their stupid Monthly scene review.

They even once marked me for 0, cheeky gits lol


Doesnt matter though, when I do trainers, about 95% of the time they will work always. Unlike some *cough* TNT trainers *cough* that may work alot but not that well.

Earth 2006 was a good example, wow they managed to get hero's invulnerable, but what about the other forces in your army, sure invulnerable but so was the rest of the enemies also.

What a useless trainer it was :P

[TippeX]

heh or they like them very much or want to be 'in' the group in a special way ;p

[Hody]

Still no NoDVD Crack for the 1.1 version available?!