CraftieMy answersWed Dec 9 17:01:09 1998 4.)Okay, I assigned the value FFFFFFFF to the 4D dword key. Then I went into W32DASM to find what I could...I went to the string data reference "4D", and started scrolling down...These are the things that caught my attention (Is there any way to Copy text from W32DASM so I don't have to type so much? :):00403A2A 82F6 test esi,esi <---This is near an :00403A2C 7407 je 00403A35 interesting string, so I assume something of interest is being compared here... **********Further down in the Dead Listing*****************:00403A35 E806000000 call 00403A40 <---This is the call to generate the serial and make sure its the right length.I traced through that call and found that basically what it did was moved FFFFFFFF (The value I entered to the 4D key) to ECX. Then after the call was exited, it was moved to ESI.5.) I believe that in order to find the serial number, look for the location where the serial is being moved to a register in W32DASM, and set a breakpoint in Soft-ICE on that location...Then simply display the register its in...That's my theory...I hope this isn't too revealing moderators....(Though I'm probably wrong anyways :)