00401F91 cmp dword_40B1B0, 6
00401F98 jle short loc_401FA1 ; if no: jump and increment the
value of the byte pointed by 40B1B0
00401F9A mov byte_40B1BA, 1
00401FA1 inc dword_40B1B0
interesting! if you take a closer look in the disasm you'll find that
these piece of code is processed when you click on the terminal's bitmap
in the main window.
ok, click on the bitmap for 7 times and...the packman is now enable,
ready to eat ghosts:)))
he's waiting for the command: START PATROL
now the patrol started but we have another problem: the packman is
frozen by a spell:(
004018C7 cmp byte_40B1BF, 0 ; 40B1BF is 0 and...
004018CE jnz short loc_4018F4 ; no jump:(
004018D0 cmp byte_40B1BE, 0
004018D7 jnz short loc_4018F4
004018D9 mov byte_40B1BE, 1
004018E0 push 30h
004018E2 push offset aDamn ; "Damn !"
004018E7 push offset aUrPacmanIsFroz ; "Ur pacman is frozen by a spell :( Break"...
004018EC push dword ptr [ebp+8]
004018EF call j_MessageBoxA
像以前一样，看40B1BF：

00401FFD cmp dword_40B1DC, 4
00402004 jle short loc_40200D
00402006 mov byte_40B1BF, 1
0040200D inc dword_40B1DC
40B1BF指出的字节将被1如果你点击Pacman的
点阵图为至少5倍！
OK，我们packman对法术保护！！
所以在此任务结束的命令之前键入“启动巡”
使机器人和抵御法术。后“开始巡逻”
命令BOT会吃