Serial Number = 8731977705SE Security Administrator V1.3 ------------------------------ Time 1.5 hours (Newbie)!!! Tools Used: Softice+Wdasm :0046CCE7 E8346FF9FF call 00403C20 :0046CCEC 83F80C cmp eax, 0000000C -->Length of S/N (must be 12) :0046CCEF 0F8599000000 jne 0046CD8E :0046CCF5 8B45FC mov eax, dword ptr [ebp-04] :0046CCF8 803838 cmp byte ptr [eax], 38 -->38h=8 char :0046CCFB 0F858D000000 jne 0046CD8E :0046CD01 8B45FC mov eax, dword ptr [ebp-04] :0046CD04 80780233 cmp byte ptr [eax+02], 33 -->33h=3 char :0046CD08 0F8580000000 jne 0046CD8E :0046CD0E 8B45FC mov eax, dword ptr [ebp-04] :0046CD11 80780331 cmp byte ptr [eax+03], 31 -->31h=1 char :0046CD15 7577 jne 0046CD8E :0046CD17 8B45FC mov eax, dword ptr [ebp-04] :0046CD1A 80780439 cmp byte ptr [eax+04], 39 -->39h=9 char :0046CD1E 756E jne 0046CD8E :0046CD20 8B45FC mov eax, dword ptr [ebp-04] :0046CD23 80780830 cmp byte ptr [eax+08], 30 -->30h=0 char :0046CD27 7565 jne 0046CD8E :0046CD29 8B45FC mov eax, dword ptr [ebp-04] :0046CD2C 80780935 cmp byte ptr [eax+09], 35 -->35h=5 char :0046CD30 755C jne 0046CD8E :0046CD32 8B45FC mov eax, dword ptr [ebp-04] :0046CD35 80780A53 cmp byte ptr [eax+0A], 53 -->53h=S char :0046CD39 7553 jne 0046CD8E :0046CD3B 8B45FC mov eax, dword ptr [ebp-04] :0046CD3E 80780B45 cmp byte ptr [eax+0B], 45 -->45h=E char :0046CD42 754A jne 0046CD8E well look at this we only have 8 chars but we need 12, but if we look at eax its missing chars so we can just make them up. ie eax-Pos-00-38-8 eax-Pos-01- eax-pos-02-33-3 eax-pos-03-31-1 eax-pos-04-39-9 eax-pos-05- eax-pos-06- eax-pos-07- eax-pos-08-30-0 eax-pos-09-35-5 eax-pos-0a-53-S eax-pos-0b-45-E My Serial Number = 8731977705SE just fill in the blanks with any number!!