Heh, heh. Why does this sound so familiar to me?
I went over this quite a while back at BlackB's forum with someone - DaKrazySniper I think - (change your name Thrawn?

Could've been someone else)
The s/n routine was pretty much standard serial sniffing, lot's of passing to other memory locations.
The only reason I bother dredging this up again (I was sort of ignoring the post

is that the keymanager file *was* a little bit different. My memory's hazy, but if you run Regmon on it you'll see it's looking to create a couple of reg entries. If you create those entries it will do something - unpack the keymanager correctly, kick up the reg box, or something like that.
Read the command line help that's given and there's some switches to set as well. Scope out what filemon and regmon tell you and post the results, maybe my memory will come back
Or check out BlackB's discussion forum at
http://beam.to/cracking
the original thread may still be there near the bottom.
Kayaker