thanks Satyric0n, is this somthing you have encountered before? It seems like all of the ascii that I see for the window messages are created in memory:
$-1AEC > 00424710 /CALL to GetDlgItem from BC878DE0.0042470A
$-1AE8 > 005C03A0 |hWnd = 005C03A0 ('Software Registration',class='#32770',parent=008F018C)
$-1AE4 > 000003FE \ControlID = 3FE (1022.)
$-1AE0 > 00428DA1 RETURN to BC878DE0.00428DA1 from BC878DE0.004246FC
$-1224 >|003A5F38 ASCII "
[email protected]"
$-1220 >|003A5B78 ASCII "1212121212"
$-121C >|003A56C8 ASCII "jdogrulz"
$-1218 >|003A5E98 ASCII "User Name:"
$-1214 >|003A5858 ASCII "Email:"
$-1210 >|003A5DA8 ASCII "Registration Key:"
$-120C >|0012EAB0 Pointer to next SEH record
$-1208 >|0042B3E1 SE handler
$-B18 > 0012FB98 ASCII "ac2cbb51-7846-4c5f-ba52-e4d5405f1d1f"
$-7A4 > 00A70478 ASCII "This copy will expire in 10 days. To try Visual Pipes, click the 'Continue' button.
$-7A0 > 003A5678 ASCII "Evaluation period: 3/19/2004 to 3/29/2004."
$-79C > 003A5D08 ASCII "PRODUCT ID: 17124-2274-26267"
$-50 >|003A6168 ASCII "Software Registration"
$-48 >|003ACB20 ASCII "uh019h9c514u6bb"
$-44 >|003ACBC0 ASCII "12kz"
$-38 >|003A58A8 ASCII "PRODUCT ID: "
$-34 >|003A5948 ASCII "Evaluation period: d1 to d2."
$-30 >|003AA808 ASCII "YOUR EVALUATION PERIOD HAS EXPIRED! You must register this copy to continue..."
$-2C >|003AA898 ASCII "TRIAL SUSPENDED: recent changes to system clock detected. Please try again after reboot or contact"
$-28 >|003A59E8 ASCII "&Info"
$-24 >|003A5A88 ASCII "&Continue..."
$-20 >|003A5B28 ASCII "&Register"
$-1C >|003A5BC8 ASCII "User Name:"
$-18 >|003A5C68 ASCII "Email:"
$-14 >|003A5DA8 ASCII "Registration Key:"
$-10 >|003A5E48 ASCII "OK"
$-C >|003A5EE8 ASCII "Cancel"
$-8 >|003A5F88 ASCII "Software Registration"
$-4 >|003A6450 ASCII "Registration Failed - your registration key has not been accepted. You may have typed it incorrectly. If you continue to receive this error, please contact technical support.
$ ==> >|00A70478 ASCII "Thank you for choosing , the industry's most user-friendly software!
This copy will expire in 10 days. To try , click the 'Continue' button.
If you have purchased , unlo"...
$+4 >|003A4F98 ASCII "C:\DOCUME~1\jdog\LOCALS~1\Temp\7248A087.DLL"
I have all of this neat info here but have no clue how to trace it!!