CrackMe® Practices for Newbies
PROJECT 8: Conquer by MisterE

Battle 3 explained
Friday, 19-Mar-99 01:40:27

    As someone has already posted the answer to Battle 3, I thought I'd
    post an explanation for it.

    If you bpx on isdlgbuttonchecked and then hit the 'Try this combination'
    button, you'll pop into sice in the windows call. Hit F12 and back
    you go to conquer.exe right after the first checkbox is looked at.

    If you look at it, you'll see that it's ID is 12D. Follow down and
    you'll find a dozen more checks that go in sequence 12F 136 133
    130 131 12F 132 12E 135 134 132. You'll also notice that some of
    the return values are OR'd while some of them are compared to 01.
    You'll also notice that after some of the decisions, EBX is set to
    01.

    If you run W32dasm, you'll find that the numbers above correspond
    to the ID's of the button controls in the resource list at the start.

    Starting to get close. Reshuffle all the ID's so they're in the
    right order, ignore the duplicates for now - they're to deternine win
    death combination, and note down which are CMP 01 and which are OR's

    Notice that there does not seem to be a check for checkbox 136.

    Check the ones with the CMPs, and play about a bit with the duplicates
    and you're there.


    Still haven't solved Battle 2 yet.

    Zap!


    Zap!


Message thread:

Zap!s thread (Zzzap@bigfoot.com) (18-Mar-99 17:01:57)

Back to main board