The Cracking Answer
-------------------

Author : Bug Error
-------------------

Toolz :
-------

- W32Dasm 8.93 or higher
- Hiew 6.0 or higher


Initial Notes
--------------

- When you run the game without cd and click on new game, it prompts you to insert the cd.
- Please be sure that the cd is not in the drive, you'll crack it :))



Disassembling HL.EXE
---------------------

- Run W32dasm and open "hl.exe"
- Click on "Strn Ref" and find "valve.ico" reference, and double click on it
- You must see this :

* Referenced by a CALL at Addresses:
:0043eb3e   , :0043eb7d  => Ahah, the two's fucker caller


:0041ed60  mov eax, 00001218
:0041ed65  call 00477e80
:0041ed6a  mov [esp+04], 00000007
:0041ed72  push ebx
:0041ed73  push esi
:0041ed74  push edi
:0041ed75  push ebp
:0041ed76  call 0041f030
:0041ed7b  lea eax, dword ptr [esp+10]
:0041ed7f  push 00001266
:0041ed84  mov [esp+14], 00000000


* Possible StringData Ref from Data Obj ->"valve.ico"

:0041eb8c  push 004bd2ec     => You're here :))
:0041eb91  push eax
:0041eb92  call 0041ec80
...


- Click on "goto" and "goto code location" and type 0043eb3e
- You must arrived here :

:0043eb3e  call 0041ed60

- Take the offset, and note it, this is 0003DF3E
- Click on "goto" and "goto code location" and type 0043eb7d
- You must arrived here :

:0043eb7d  call 0041ed60

- Take the offset, and note it, this is 0003DF7D


Let's gonna crack
------------------

- Run Hiew and open "hl.exe"
- Press F4 and choose "decode"
- Press F5 and type 0003df3e
- Press F4 and choose Hex
- Press F3 to edit, and enter : 9090909090
- Press F4 and choose "decode"
- Press F5 and type 0003df7d
- Press F4 and choose Hex
- Press F3 to edit, and enter : 9090909090 

Why 90 ??
---------

- 90 is the hexadecimal code of Nop.
- Nop is a mnemonic's code in assembler's language
- Nop means "no operation"
- Nop code is used here to bypass the cd-check, and like that, you can
  play without cd :))


- Yeah, you've cracked it :))


For questions, infos, or teletubbies' photos : bugerror@hotmail.com