Get it while it's hot. :D Fetch the update files @ the WinAsm site. Please take note that you need the full package before updating to 5.1.7.0.

Thanks chris! I learned a lot of tricks from this challenge, more please! ;) I'm working on one, but this will take a while. So, why not post yours to further delay mine? Hahaha!

I think I found a crucial part of the code; 004012DF LEA EAX,DWORD PTR DS:[404175] ; eax contains the correct number 004012E5 MOV EDX,DWORD PTR DS:[EAX] ; the first 4 digits are copied to edx 004012E7 MOV ECX,DWORD PTR DS:[EAX+4] ; the last 4 digits to ecx 004012EA LEA EAX,DWORD PTR DS:[40407D] ; our...

This things giving me a headache. Rolvin, how's your solution doing? Have we found the same routine?

By the way, I think this will help you -- you're already in that "important proc" (The one you pointed in the screen) -- just look for the call to that proc and you'll get what I mean.

Instruction at 004011AC is "a" key, there are 2 more. The real problem is that you have the key, but you don't have the lock. Hehehehe. Arguments can be modified by simply assembling ( press space on the instruction ) .

Hmmm... these are my findings, I'm not yet finished though... Still a little confused on what is being compared to trigger the fail/success codes. :( Am I close to solving this? :D mov ecx , 8 ; i'm sure it checks for 8 characters/numbers jmp @ CheckZero @CheckChar: LODS BYTE PTR DS:[ESI] ; read...

cvega is correct -- some anti-virus reports infection in the archive. I've experienced those false positives under AVG and AVAST.

What do the numbers represent? :D

Hay! I found where the magic number is being computed, don't know what to do with it though. Hahahaha!