# [Original writeup](https://bigpick.github.io/TodayILearned/articles/2020-04/wpictf_writeups#remys-epic-adventure-2-electric-boogaloo)


The given `.zip` file is a folder for a Windows `.exe` game and it’s supporting files.

I played through the game once compleletely without any modifications to see what it was. Playing the game (`Game.exe`) file, we see it looks like a RPG type game. We start off in an overworld, and have to go to “**Da Town**” first to pick up another character to our party. Then, we can proceed to the "main" dungeon, the Illuminati HQ, where we pick up another character. This character is the key to winning the game.

At the end of the dungeon, is the “brainwashed Illuminati”, which when attacked get’s 0 damage and does** a lot** to us.

So, we need some sort of weapon or modifier to be able to defeat it. In the overworld before the dungeon, there’s a seller which has a “**DNS Resolver**” which gives one of our characters, Adrian, an ability to connect to his media server. The problem is that it costs **999,999 **Vimcoins, which would be impossible to obtain.

Initially I tried looking through things with Cheat Engine while the game was running, but that was not successful (not a 1337 gamer :( ). After talking with the author, he mentioned I should try one of the only things which I had not looked at yet, which was modifying some of the supporting source files directly.

I did a `grep -r 999999 .` from the main folder root. My thought was to just reduce the price of the resolver to 0 and buy it for free. It led me to the `www/data/Map001.json` file. There, we can see what looks to be the DNS resolver item, and noticeably, its price:

```
cat Map001.json| jq '.events[] | select(.id == 8) | .pages[].list[] | select(.code == 605)'
...
{
"code": 605,
"indent": 0,
"parameters": [
0,
5,
1,
999999
]
}
```

I changed that `999999` value to `0`, and also modified some of the values in `Enemies.json` too so that the Zoomers only had 1 health (and for good measure, put the Brainwashed illuminati to 0 as well):

```
“name”: “Zoomer”,
“note”: “”,
“params”: [
1,
0,
0,
0,
0,
0,
0,
0
]
…
“name”: “Brainwashed Illuminati”,
“note”: “”,
“params”: [
1,
1,
0,
0,
0,
0,
0,
0
]
```

Then, starting a new game with these files, was able to obtain the DNS Resolver for 0 coins.

And then beat the boss to get to the flag. I also modified the experience gained for defeating an enemy to be huge (for max rank immediately) and also made the zoomer’s health to 1 for easier kills as well. The following GIF shows (see the link to original writeup):

equipping the DNS resolver that we got for free
Beating zoomers with 1 health
The max level experience gained from it
Defeating the boss via the free DNS

Once the boss is defeated, we get transported to the end stage, which spells out the flag (see the link to original writeup):

Flag is `WPI{JrPGZ_r_SUGOI}`.

(sorry for the shaky GIFs -- hand recorded bc Mac and CTF was almost over and didn't have time to figure out screen record)

Afterwards, I talked with the author as I was curious if it was possible to just wrong-warp to the end world but:

> **gp**
>
> Nice! Now I’m kinda curious if you could just like wrong warp straight to the flag world if you messed with the other stuff
>
> **Justin**
>
> People have tried but I put a LOT of false win screens in the game
>
> **gp**
>
> lmao

So, sorry to those people :) I guess I didn’t even need the DNS resolver either since I just made the end boss’ health 1 like the Zoomer’s as well? Nope, that would have been wrong too:

> **Justin**
>
> You do actually need to kill the illuminati with the free software song to win.
>
> Otherwise the game calls you out and game overs
>
> Or rather, having the free software song in your arsenal