Yikes, I'm back with a new tut for ya

Target game: Rollcage

Useful thingies:
Hiew 6.04
W32Dasm89
Drink... My choice this time is... Pepsi (not Max)

Dodiih... Let's do something =)

My english is not perfect... so just try to hang on...

Ok... at first you must (of course) install Rollcage. My pick was Medium installation (dammit, 
i should buy a new HD)... After the install is finished... throw the cd away (not literally =) 
and start Rollcage without a cd. An error message pops-up: "Please insert the Rollcage cd"... 
you can get through this by pressing ok... but that's meant only for a multiplayer game. 
No solo games available...

Make two backups of rollcage.exe (rollcage.bak and rollcage.w32). Then load rollcage.w32 on 
W32Dasm. Go to Strn Ref and find the error message. You found it? Way cool! 
This is how it looked on my computer (should be same with yours too)

:00474980 E87B250000            call 00476F00
:00474985 83C404                add esp, 00000004
:00474988 85C0                  test eax, eax
:0047498A 5B                    pop ebx
:0047498B 7472                  je 004749FF   <--- Hmm... could it be this one?
:0047498D 6A09                  push 00000009

* Possible StringData Ref from Data Obj ->"PC_ERROR_MESSAGES"
                                  |
:0047498F 6864004B00            push 004B0064
:00474994 8D4C2410              lea ecx, dword ptr [esp+10]
:00474998 6804010000            push 00000104
:0047499D 51                    push ecx
:0047499E E82D9DFBFF            call 0042E6D0
:004749A3 8A442418              mov al, byte ptr [esp+18]
:004749A7 83C410                add esp, 00000010
:004749AA 84C0                  test al, al
:004749AC 7511                  jne 004749BF
:004749AE B90D000000            mov ecx, 0000000D

* Possible StringData Ref from Data Obj ->"Please insert the Rollcage CD "
                                        ->"into the CD ROM drive."

So... because I'm just a newbie I don't fully understand all that asm code, but I somehow 
managed to figure out what's happening there.  You probably saw (what?... you didn't?.. 
look again) my reference up there, so it shouldn't be hard to guess what to do with that.

So let's just change the jump from je to jne... easy huh?  So, move on to referenced line on 
W32Dasm and check out the @offset code: 7498B. Exit W32Dasm and load up Hiew. Goto decode 
mode and to line 7498B. Press F3 and change 74 ->  75. That was easy. 
Now as you start Rollcage you see that the messagebox has disappeared and you can choose league 
mode in the start. Kewl!... U did it! If you have any problems later in the game, try the full 
installation... my version worked fine...

"hmm... that was third already"

-C_DKnight

For any remarks... send me an e-m@il at c_dknight@iobox.com
or find me from Kiss' chat (www.kiss.fi/chatropol/town/playstation
Greetz to: My friends (IRL and at chat)... tKC and dAvId nIgHtMaRe

If you happen to have any problems with my crack, please let me know.

Written 25th of May 1999