PedroThe answers for Sandman (GO in this thread)Mon Dec 7 12:35:15 1998 Question 1. Where in the System Registry does this program store it's default program settings?.I always use Techfacts to monitor an installion for a program that I am about to crack as it gives very good information on what hidden little files get installed as well as what registry keys are set. No sneaky little files where put in when installed but the registry changes showed me that HKEY_LOCAL_MACHINESoftware4Developers is where the settings for the program are stored. Question 2. Where does this program store it's 'days left..' counter?.I ran the program with techfacts once again monitoring what was happening. From that I found it creates a file c:WINDOW W.D98The interesting thing is that this rcw.d98 file is hidden AND contains the exact same number as the value in the registry key below.HKEY_LOCAL_MACHINESoftwareCLASSE WValue="729649"Either one of these would be the counter I think. Question 3. What are the Main protection systems employed by this program? Example, is it protected with:- Nag screens,Serial protected,hidden Registration Screen, crippled/restricted functions,Time Limited,Indirect Code Addressing,Self-Modifying Code,Dongle etc etc.Well it asks for a serial and displays unregistered in the top of the window. Im just going to set the date forward to see if its time limited as well.Hmm ok its time protected as well:)It has a trial period of use. I don't know how long cause I set the clock forward a year. Ok its not very smart because I just set the clock back and it runs again. This time I see it says a 30 day trial version. Question 4. What (if any) 'interesting' files are used by this program?. Ignore the normal windows system files such as .DLL's, .SYS etc.I guess the interesting file would be the hidden file in the windows directory that contains the number that is the same as in the registry.Another thing I found of interest was if you change the value within the hidden file it comes up with the "you have expired" message and wont run, but the next time you run it, it works again. I checked the hidden file and it rewrote the correct value back into it.It must be getting this value from the registry. So it looks like that the registry contains the counter for days left.Pedro.