Cel:	ToolKey 1.0
Opis:	Tool Key to program umoliwiajcy wprowadzenie nowych
	klawiszw skrtw wywoujcych okrelon akcj
Gdzie:	PC Shareware 5/99
Toolz:	W32dsm

1.Uruchamiamy program, klikamy lewym klawiszem myszki na jego ikon w
pasku systemowym, potem "I must register my Tool Key"
2.Program prosi o wpisanie wycznie numeru seryjnego wi wpisujemy
byle co i klikamy ok.Pojawia si msgbox z textem Bad Key
3.Uruchamiamy W32dsm i adujemy do niego nasz program Tool Key.exe.
Gdy proces deasemblacji dobiegnie koca sprawdzamy String References
i szukamy tam cigu Bad Key

:00432225 8B45FC                  mov eax, dword ptr [ebp-04] <--ADRES NASZEGO S/N

* Possible StringData Ref from Code Obj ->"361-99-45" <--CIEKAWE CO TO????????
                                  |
:00432228 BA28234300              mov edx, 00432328
:0043222D E87E18FDFF              call 00403AB0
:00432232 7506                    jne 0043223A <--SKOK DO BAD S/N--------------\
:00432234 837DFC00                cmp dword ptr [ebp-04], 00000000             |
:00432238 752C                    jne 00432266 <--SKOK DO GOOD S/N-------------|-----\
                                                                               |     |
* Referenced by a (U)nconditional or (C)onditional Jump at Address:            |     |
|:00432232(C)                                                                  |     |
|                                                                              |     |
:0043223A 6A00                    push 00000000 <------------------------------/     |
:0043223C 668B0D34234300          mov cx, word ptr [00432334]                        |
:00432243 B201                    mov dl, 01                                         |
                                                                                     |
* Possible StringData Ref from Code Obj ->"Bad key" <--TEXT GDY S/N JEST NIEPOPRAWNY |
                                  |                                                  |
:00432245 B840234300              mov eax, 00432340                                  |
:0043224A E805B4FFFF              call 0042D654                                      |
:0043224F 6A00                    push 00000000                                      |
:00432251 668B0D48234300          mov cx, word ptr [00432348]                        |
:00432258 B202                    mov dl, 02                                         |
                                                                                     |
* Possible StringData Ref from Code Obj ->"If you want register Tool Key "           |
                                        ->"send me 15z"                              |
                                  |                                                  |
:0043225A B854234300              mov eax, 00432354                                  |
:0043225F E8F0B3FFFF              call 0042D654                                      |
:00432264 EB67                    jmp 004322CD                                       |
                                                                                     |
* Referenced by a (U)nconditional or (C)onditional Jump at Address:                  |
|:00432238(C)                                                                        |
|                                                                                    |
:00432266 6A00                    push 00000000   <----------------------------------/
:00432268 668B0D48234300          mov cx, word ptr [00432348]
:0043226F B202                    mov dl, 02

* Possible StringData Ref from Code Obj ->"Thanks for register Tool Key."

4.Jak wynika z deadlistingu s/n to 361-99-45
5.Patch

.00432225: BA28234300                   mov       edx,000432328 <--EDX adres poprawnego s/n
.0043222A: 8BC2                         mov       eax,edx	<--EAX=EDX
.0043222C: 90                           nop
.0043222D: E87E18FDFF                   call     .000403AB0
.00432232: 7506                         jne      .00043223A

EOF