-
Good job! You finally solved it! I told you it wasn't that hard! I wonder when chris will release his new challenge... About that error, did you make sure that when you assemble, no other lines are overwritten? If you want to eliminate that nag screen called by the About menu item, look for the event...
-
Thanks chris! I learned a lot of tricks from this challenge, more please! ;) I'm working on one, but this will take a while. So, why not post yours to further delay mine? Hahaha!
-
I think I found a crucial part of the code; 004012DF LEA EAX,DWORD PTR DS:[404175] ; eax contains the correct number 004012E5 MOV EDX,DWORD PTR DS:[EAX] ; the first 4 digits are copied to edx 004012E7 MOV ECX,DWORD PTR DS:[EAX+4] ; the last 4 digits to ecx 004012EA LEA EAX,DWORD PTR DS:[40407D] ; our...
-
This things giving me a headache. Rolvin, how's your solution doing? Have we found the same routine?
-
By the way, I think this will help you -- you're already in that "important proc" (The one you pointed in the screen) -- just look for the call to that proc and you'll get what I mean.
-
Instruction at 004011AC is "a" key, there are 2 more. The real problem is that you have the key, but you don't have the lock. Hehehehe. Arguments can be modified by simply assembling ( press space on the instruction ) .
-
Yes, you're close. But try considering the "CALLS" and the "ARGUMENTS" -- then see what they compare in the proc that was called. *hint hint hint*!
-
Hmmm... these are my findings, I'm not yet finished though... Still a little confused on what is being compared to trigger the fail/success codes. :( Am I close to solving this? :D mov ecx , 8 ; i'm sure it checks for 8 characters/numbers jmp @ CheckZero @CheckChar: LODS BYTE PTR DS:[ESI] ; read...
-
What do the numbers represent? :D
-
Hay! I found where the magic number is being computed, don't know what to do with it though. Hahahaha!