Morrowind:Tribunal v1.3.1029 NO-CD /w Video Redirection?

Dopefish84 · #1 12-12-2002, 23:24

I legally own copies of both Morrowind and Tribunal, but the game crashes every 5 minutes unless I use a NO-CD crack!

I've downloaded the Bughunter patched exe from Megagames, but in the process of removing CD checks it also skips all the videos... Back in the 1.2.0.722 version Myth had created a fixed exe that retargeted the videos after you copied the directory from the CD. I was just wondering if anybody could create or direct me to a similar crack for the 1.3.1029 version?

It's really not a big deal, but seeing as this is a game that you invest hundreds of hours in, it would be kinda anti-climatic if I didn't even get to see the ending sequence!

Thx

RincewindTheWiz · #2 13-12-2002, 04:14

Your best bet is to make a CloneCD image of the original Morrowind cd1 and mount that using Daemon Tools. AFAIK the expansion requires the original Morrowind cd in the drive, and that cd is protected with safedisc 2. Or you could wait and hope that someone someday goes to the extra trouble of re-enabling the video. Your choice, really.

schlaufer · #3 13-12-2002, 05:53

One way is to download RAD Video Tools and view the videos (.bik-files) with them.

eloj · #4 13-12-2002, 17:24

I've created such a patch for myself.

Comparing files Morrowind-cracked.exe and MORROWIND-VERSION-TRIBUNAL-ORIGINAL.EXE
00016BC3: 90 75
00016BC4: 90 29
00016D39: 90 75
00016D3A: 90 25
00024592: 55 50
0036EC24: 2E 25
0036EC25: 5C 73
0036EC26: 4D 41
0036EC27: 6F 75
0036EC28: 72 74
0036EC29: 72 6F
0036EC2A: 6F 52
0036EC2B: 77 75
0036EC2C: 69 6E
0036EC2D: 6E 4D
0036EC2E: 64 6F
0036EC2F: 2E 72
0036EC30: 65 72
0036EC31: 78 6F
0036EC32: 65 77
0036EC33: 00 69
0036F830: 2E 25
0036F831: 5C 73
0036F832: 56 3A
0036F833: 69 5C
0036F834: 64 56
0036F835: 65 69
0036F836: 6F 64
0036F837: 5C 65
0036F838: 25 6F
0036F839: 73 5C
0036F83A: 00 25
0036F86C: 2E 25
0036F86D: 5C 63
0036F86E: 56 3A
0036F86F: 69 5C
0036F870: 64 56
0036F871: 65 69
0036F872: 6F 64
0036F873: 5C 65
0036F874: 25 6F
0036F875: 73 5C
0036F876: 00 25

If you want a patched executable you'll have to give me somewhere to dump it.

eloj · #5 13-12-2002, 17:31

I should add that this is against the "iMMERSION" version. I have no idea if this is the same as the one distr. on the original. I'd assume so.

md5sums to 4608b747c0ec4d736bc40081661cc087

eloj · #6 14-12-2002, 07:55

Might as well bump this with some more info so people can reapply this fix to future versions more easily.

The first fix is to make sure all kinds of drives are checked for the needed files.

Code:

.00416BBA: FF15F4E07300  call  GetDriveTypeA
.00416BC0: 83F805        cmp   eax,005
.00416BC3: 7529          jne   .000416BEE
.00416BC5: 57            push  edi

 (.. and again at ..)

.00416D30: FF15F4E07300  call  GetDriveTypeA
.00416D36: 83F805        cmp   eax,005
.00416D39: 7525          jne   .000416D60   --
.00416D3B: 57            push  edi

We simply nop (90 hex) the jne instructions to let the test fall through.

What they're trying to do is to locate the file "AutoRunMorrowind.exe" in the root of a CD-ROM (type 5) and then try to read the Videos off that drive, but we'll change that to instead scan for the file Morrowind.exe in the current directory. Once we'd patched the code to not care about the media type (see above), we'll have to look for the string "%sAutoRunMorrowind.exe",0 and replace that with ".\Morrowind.exe",0

The only problem after that is the loading of the movies. To fix this we first patch the string "%c:\Video\%s",0 to ".\Video\%s",0

The last thing to deal with is the expansion the string. Since we've in effect removed the first parameter to be expanded ("%c") we'll have to patch the code to send in the pointer to "%s" first instead.

We do that here:

Code:

.0042458E: 0FBEC0        movsx eax,al
.00424591: 55            push  ebp
.00424592: 50            push  eax
.00424593: 686CF87600    push  00076F86C
.00424598: 57            push  edi
.00424599: FF1574E27300  call  sprintf

Where we patch the "push eax" to instead push ebp again (opcode 55).

Done. Works for me. All this must be done after the executable is unwrapped, of course, if it happened to be SafeDisc'ed -- but SD often disappears in later patches because of costs and problems so this shouldn't be a problem.

RincewindTheWiz · #7 14-12-2002, 08:10

Nice work, eloj. Any plans of submitting your nocd to GCW/Megagames ? Your version works with 1.3.1029, right ? I'll send you a pm with my email address. If you send a patched exe to me, I'll mail it to anyone asking for it here. In the past, the tribunal cracks have been problematic to get on crack sites. I sent out the original Tribunal gimpsRus nocd to over 50 people, but of course that version was without movies

Edit : eloj has kindly sent me his cracked executable. If anyone here wants eloj's crack, send me a pm with a valid email address, you need at least 1.2 Mb of free space in your account. I'm going to do this until one of the main crack sites like GCW puts it up.

RincewindTheWiz · #8 15-12-2002, 05:17

First batch is sent. KiwiCom, bl8ent and rwdrex : you've got mail. Let me know if it works. All others : if you want it, send me a pm with a valid email address that has at least 1.2Mb free space. If you want to thank anyone for this nifty little crack, it should be eloj who made it.

rwdrex · #9 15-12-2002, 11:26

It works perfectly!

Thanks eloj and The Wiz!

RincewindTheWiz · #10 16-12-2002, 08:48

Second batch launched... Stealth2002, bloodrayne, Pocoboy, Deadeye66 and Fila : You've got mail.

Remember if you want it, send your email address BY PM to me, and make sure that you've got at least 1.2Mb of free space in your mailbox.

eloj · #11 16-12-2002, 09:28

Rince, I've PM'ed you about an (updated/repackaged) generic patcher. It's at the same page where you got the patched executable.

Much smaller and it'll probably work on several different versions, maybe even the german ones.

bloodrayne · #12 17-12-2002, 03:03

by the way, do you know where to get the 1.3.1029 official patch? i looked everywhere with no success!

eloj · #13 17-12-2002, 04:56

I don't think there is one (haven't looked either). They're probably using the new journal-feature and other fixes as an incentive for people to -buy- the Tribunal expansion. In effect, the fixes are worth more than the new areas to some, and hence sellable.

Maybe they'll release one at a later date.

Dopefish84 · #14 18-12-2002, 01:58

Oh wow! This is the first forum I've been to where people are friendly, intelligent, and even put up with my noobness!

I was gone for a week and expected this thread to just disappear, but you guys own!

I have to admit that your assembly instructions are leagues above my head... I need to learn more about programing myself, but I'd have to get my ass in gear and stop playing all these games first! (Like Morrowind :-/ )

Thx for being cool Eloj... I'll try to be like you in a few years

P.S: Rince I'll send you a PM and hopefully I can make the third batch?

[Edit]: Thanks for pointing out RAD video tools Schlaufer. Just dled it and watched a few biks! Don't want to spoil the game by watching the 2 plot critical videos though...

bloodrayne · #15 18-12-2002, 04:45

so eloj this cracked nocd is based on the original exe of tribunal ? o patch to apply first?