Craftie
My answers
Wed Dec 9 17:01:09 1998


4.)
Okay, I assigned the value FFFFFFFF to the 4D dword key. Then I went into W32DASM to find what I could...I went to the string data reference "4D", and started scrolling down...These are the things that caught my attention (Is there any way to Copy text from W32DASM so I don't have to type so much? :)
:00403A2A 82F6 test esi,esi <---This is near an :00403A2C 7407 je 00403A35 interesting string, so I assume something of interest is being compared here...

**********Further down in the Dead Listing*****************

:00403A35 E806000000 call 00403A40 <---This is the call to generate the serial and make sure its the right length.

I traced through that call and found that basically what it did was moved FFFFFFFF (The value I entered to the 4D key) to ECX. Then after the call was exited, it was moved to ESI.

5.) I believe that in order to find the serial number, look for the location where the serial is being moved to a register in W32DASM, and set a breakpoint in Soft-ICE on that location...Then simply display the register its in...That's my theory...I hope this isn't too revealing moderators....(Though I'm probably wrong anyways :)