The Cracking Answer
-------------------

Author : Bug Error
-------------------

Target : Unreal 2.09 No CD
---------------------------

Toolz that you'll need
-----------------------

- Soft-Ice 3.23 or higher
- W32dasm 8.93 or higher
- hiew 6 or higher


- Initial Notes
----------------

- Install the game (full)
- Please be sure that you don't have the cd into your drive



First Approach
---------------

- Press CTRL + D to go in Soft-Ice
- Set a nreakpoint on messageboxa : BPX MessageBoxA
- Press CTRL + D to go back in windows
- Run Unreal, and after a few seconds, you're back in Soft-Ice
- Press F11 and click on OK in the messageboxa, you're back in Soft-Ice again :))
- Now, let's take a look on this :

0177:0040208d call [USER32!MessageBoxA]
0177:00402093 cmp eax,02  => You're here

- Ok, nothe nothe the adress, you'll need this (00402093)


Disassembling our target
-------------------------

- Run W32dasm and open "unreal.exe"
- Click on "Goto" and "Goto Code Location"
- Enter the address that you've found in Soft-Ice : 00402093
- You must see this :


* Reference To: USER32.MessageBoxA, ord:0195h

:0040208d ff1560754000      call dword ptr [00407560]
:00402093 83f802            cmp eax, 00000002
:00402096 759f              jne 00402037



- Scroll up to find the last test, and you'll find this :


:0040205c 85c0 test eax, eax
:0040205e 7f4e jg 004020ae     => Here it is :))

- Please be sure that you're on "0040205e" and take a look on the task, and you'll see
  the @offset, here it is 0000145e

- Note this offset, you'll need this


Let's gonna crack :))
---------------------

- Run Hiew and open "x:\unreal\system\unreal.exe"
- Press F4 and choose "Decode"
- Press F5 and enter 0000145e
- Press F4 and choose "Hex"
- Press F3 and enter EB
- Press F9 to update the file


Run the game
------------

- Wouaw, unreal 2.09 runs without the CD, you've cracked the game :))
  You're the best, and maybe, you'll be a TCA's memberz :))