Thief ver 1.33 NO CD

[Waterdust]

I never said I'd upload it here, that'd violate rules clearly, hence why I was wondering
about doing so elsewhere which does not violate the rules hence as it is not hosted here.

Perhaps someone will go off an say more about how even the very mention of it is a no-no.

Lets move past that.. my bad.. thanks for the no ban for the iso idea.

[TippeX]

@WaterDust - have you got a hex editor? if so, i can give you some file offsets in the exe to change and see if it works.. it saves having to upload / download etc for simple patches...

the first one is..

Offset       Original    Change to
0010E0A3:    75            90
0010E0A4:    07            90

NOTE: (aw fuck, caps.. oh well).. you may need to copy most of the content of the cd/dvd to the installation folder (movies if i remember is definately one)...

oh a good free(ish) hex editor -> www.bpsoft.com (just in case you haven't got one.. also if its the first time using one please read its manual carefully about hex editing and making sure you are in overwrite mode)..

give it a shot, see what happens, who knows, it might work...

[Waterdust]

Nice to see your helping again Tippy, glad to see we could work things out.



----------

But I'm afraid I'm no good with hex editing.. I get lost there sadly.

For cow - http://www.2shared.com/file/10780946...22c/Thief.html there ya go.

[Cowsheep]

My thief came 8 years ago on the cover cd of a gaming magazine.
Your exe is new to me.

What i did:
Patches, item 0
Address=004156BC
Size= 5.
State=Active
Old=CALL Thief.0050EC90
New=MOV EAX,1
(That call is also patched in tutorial for v1.14 by r!sc that i read afterwards.)

004156B9   |.  83C4 08                  ADD ESP,8
004156BC       B8 01000000              MOV EAX,1
004156C1   |.  85C0                     TEST EAX,EAX
004156C3   |.  75 0B                    JNZ SHORT Thief.004156D0
004156C5   |.  50                       PUSH EAX
004156C6   |.  6A 01                    PUSH 1
004156C8   |.  E8 138E1100              CALL Thief.0052E4E0
004156CD   |.  83C4 08                  ADD ESP,8
004156D0   |>  E8 EB020000              CALL Thief.004159C0
004156D5   |.  8D5424 40                LEA EDX,DWORD PTR SS:[ESP+40]
004156D9   |.  C74424 40 03000000       MOV DWORD PTR SS:[ESP+40],3

CALL Thief.0050EC90 calls disc check, failed disc check means eax = 0, jnz not taken,
CALL Thief.0052E4E0 leads to function that terminates process.

Thief1.rar

Patched this exe, too.
Please post your gamepath so i can fix install.cfg for you.
Your crash happens always when the fonts are loaded.


@Tippex: Disc check is still present.
Patches, item 1
Address=0050ECA3
Size= 2.
State=Active
Old=JNZ SHORT Thief.0050ECAC
New=NOP

0050EC90    $  6A 00                    PUSH 0
0050EC92    .  6A 00                    PUSH 0
0050EC94    .  68 08F96000              PUSH Thief.0060F908                                ;  ASCII "test_copy_protect"
0050EC99    .  E8 42B70300              CALL Thief.0054A3E0
0050EC9E    .  83C4 0C                  ADD ESP,0C
0050ECA1    .  84C0                     TEST AL,AL
0050ECA3       90                       NOP
0050ECA4       90                       NOP
0050ECA5    .  B8 01000000              MOV EAX,1
0050ECAA    .  EB 21                    JMP SHORT Thief.0050ECCD
0050ECAC    >  6A 00                    PUSH 0
0050ECAE    .  6A 00                    PUSH 0
0050ECB0    .  68 1CF96000              PUSH Thief.0060F91C                                ;  ASCII "only_check_path"
0050ECB5    .  E8 26B70300              CALL Thief.0054A3E0
0050ECBA    .  83C4 0C                  ADD ESP,0C
0050ECBD    .  84C0                     TEST AL,AL
0050ECBF    .  75 07                    JNZ SHORT Thief.0050ECC8
0050ECC1    .  E8 CAFEFFFF              CALL Thief.0050EB90
0050ECC6    .  EB 05                    JMP SHORT Thief.0050ECCD
0050ECC8    >  E8 13FFFFFF              CALL Thief.0050EBE0
0050ECCD    >  85C0                     TEST EAX,EAX
0050ECCF    .  74 05                    JE SHORT Thief.0050ECD6
0050ECD1    .^ E9 6AFBFFFF              JMP Thief.0050E840
0050ECD6    >  33C0                     XOR EAX,EAX
0050ECD8    .  C3                       RETN

Test_copy_protect is inactive by default, only_check_path is active.
First, it pushes cd_path from install.cfg on stack (like C:\programs\Thief), checks if files are present, then it pushes a second patch on stack (C:\ is replaced with the first letter that returned 5 in eax for getdrivetypea), now it looks for the files on Y:\programs\Thief. C:... is the data_path, Y:... check_path. If files not there bad boy msg called. It never touches my second drive Z:

[Waterdust]

As is shown in the jpg I made for ya cow, F:\Games\Thief

but it'd be nice to have a standard C: default-based one as well if you don't mind please.


Oh and I'm sure this other error is because of that cfg not being changed yet but just incase.


Faulting application thief1.exe, version 1.9.0.0, faulting module thief1.exe, version 1.9.0.0, fault address 0x001203aa.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 74 68 69 ure thi
0018: 65 66 31 2e 65 78 65 20 ef1.exe
0020: 31 2e 39 2e 30 2e 30 20 1.9.0.0
0028: 69 6e 20 74 68 69 65 66 in thief
0030: 31 2e 65 78 65 20 31 2e 1.exe 1.
0038: 39 2e 30 2e 30 20 61 74 9.0.0 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 31 32 30 33 61 61 001203aa
0050: 0d 0a ..

[DABhand]

What OS are you using.

And have you tried to run the crack in compatibility mode (Since its old you probably be best to run in either windows 98/2000 mode). You can do this by right clicking the .exe file and goto properties and check the compatibility tab.

I forgot if you said the game works fine with the original? If so you could make a mini-image of the disc, its probably the best way to go. Because the exe file from your original is obviously not the same from other older patched up versions of thief.

[Waterdust]

As posted before, Win XP Pro SP3 frequently updated as possible thru MS.

All compatibility modes have been used on the most recent fix by cow, same
error on each attempt at the same address.

According to Tippy I'm not allowed to make any form of iso small or big. Sorry.
The game works fine so long as the cd is used with the original exe it installs with.

As stated before the version of the Thief 1 cd I have is "Thief - Platinum Edition 1.33"

Hope that helps.

[DABhand]

I didnt say for you to make a full image of the game, but a mini-image you can mount on daemon tools to fool the protection the game is in a drive. There is a FAQ sticky on this part of the forum with hints and tips.

This way you can play without the disc.

[Cowsheep]

install.rar
Here, new install.cfg, copy also all files from disc to gamedir, but DO NOT overwrite existing ones.

I have also Win XP Sp 3 and no problems.

[TippeX]

ok, here goes.. time for waterdust to learn how to use a hexeditor... this is an adaptation of the crack i made for a different version.. it should work if you do it right..

.50E840 - patch area 1 - file offset 10DC40 - patch with 33 C0 40 C3 90 90
.50EB96 - patch area 2 - file offset 10DF96 - patch with 01
.50E89A - patch area 3 - file offset 10DF9A - patch with 33 C0 40 C3 90

now, our next part.. we need to edit up some files...

the install.cfg file is the important one...

mine looks like this...

cd_path .\
install_path d:\Thief
language english
resname_base d:\Thief+.\
load_path d:\Thief+.\
script_module_path d:\Thief+.\
movie_path d:\Thief\movies+.\movies
?

so try and make yours look similar (d:\thief is where i installed the same, so you will probably have to change this - note the '?' character at the end is actually a 1A character, im not sure if this is important or not..

that *SHOULD* do the trick - you will also need to launch it with oneprocessorlaunch (or similar) because the game
doesn't like systems with > 1 processor...

so, try it out and let us know

oh yeh, and copy all the files from the cd/dvd to the install folder too like cowsheep said..

[Waterdust]

Sorry cow, same error. Followed instructions, changed afinity (which didn't seem preset anymore that used to be) used compatibility modes even.

However the cd didn't appear to bring any new files with it btw.


*stares at tippys hex code an gets lost.. however understands the cfg code below.. mostly*

Sorry I'm not a programmer of sorts.. its why I came here =/

*does however continue to stare at the hex code in wonder..*

[TippeX]

well being a programmer is 0 to do with using a hex editor, its just like using notepad

0. make a backup copy of thief.exe (incase you make a mistake)
1. install hex workshop (www.bpsoft.com) - trial version and simple to use
2. open thief.exe with hex workshop
3. look at the bottom right of the status bar in the main window, make sure OVR is on (not gray) - if its off then press the INS key
4. press ctrl+g, select 'hex' and 'beginning of file'
5. type in 10DC40 and click the 'GO' button
6. in the hex window (the one thats blue) your area should be already highlighted
7. press the TAB button, it'll put you at the hex window
8. type in 33 C0 40 C3 90 90
9. you should see the bytes change but NONE of the other bytes 'move' - if they move you have OVR mode turned off
10. repeat the step for each of the 3 patches
11. save the exe
12. do the install.cfg stuff (and make sure you copied the files from the cd/dvd too)
13. try running the exe, see what happens (it should work, it does here)

3 patches, simple task, lets see how you get on..

[Waterdust]

Followed steps indicated by you, same error was the result.

If you don't believe that I did what you said then I can upload the exe for you.

Oh and before you ask, yes all 3 areas you said were modified with the editor not just
the one.

Additionally before anyone else asks, affinity was set & compatibility modes also tested.

---------

Faulting application thief1.exe, version 1.9.0.0, faulting module thief1.exe, version 1.9.0.0, fault address 0x001203aa.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 74 68 69 ure thi
0018: 65 66 31 2e 65 78 65 20 ef1.exe
0020: 31 2e 39 2e 30 2e 30 20 1.9.0.0
0028: 69 6e 20 74 68 69 65 66 in thief
0030: 31 2e 65 78 65 20 31 2e 1.exe 1.
0038: 39 2e 30 2e 30 20 61 74 9.0.0 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 31 32 30 33 61 61 001203aa
0050: 0d 0a ..

[TippeX]

think you did something wrong, i'll upload my exe, it definately works here, so i suspect you typed in the 33 c0 40 c3 etc in the right most window (its meant to be in the blue one..)

http://rapidshare.com/files/33956613..._nocd.rar.html

if this works, then you messed up.. if it doesn't work then you've messed up in some other way (probably the install.cfg or not copying all the files from the cd/dvd to the folder..)... lets see

[Waterdust]

Same error, sorry. Maybe I'm not being detailed enough with what happens..

I launch, the game menu shows full screen, click on start new game, an crash!
Doesn't matter if you start a new game with training or use skip training.

Once more, affinity set, modes tested, same problem.

-----------

Faulting application thief_nocd.exe, version 1.9.0.0, faulting module thief_nocd.exe, version 1.9.0.0, fault address 0x001203aa.

0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 74 68 69 ure thi
0018: 65 66 5f 6e 6f 63 64 2e ef_nocd.
0020: 65 78 65 20 31 2e 39 2e exe 1.9.
0028: 30 2e 30 20 69 6e 20 74 0.0 in t
0030: 68 69 65 66 5f 6e 6f 63 hief_noc
0038: 64 2e 65 78 65 20 31 2e d.exe 1.
0040: 39 2e 30 2e 30 20 61 74 9.0.0 at
0048: 20 6f 66 66 73 65 74 20 offset
0050: 30 30 31 32 30 33 61 61 001203aa
0058: 0d 0a ..