【破文标题】:FlashSaverV5.1的破解
【破文作者】:zhao[OCN]
【作者邮箱】:ocnzhao@126.com
【软件名称】:FlashSaverV5.1
【软件大小】:3.03 MB
【软件类别】:国外软件 / 共享软件 /
【整理时间】:2005-07-20
【下载地址】:中国共享软件中心
【软件简介】:Flash Saver is designed to fulfill your requirement of saving Flash animations from web browser to your hard disk by a simple click. It can not only save Flash animations from the current web page you are surfing, but also it can search from local cache files and list all Flash files that was viewed recently. You can preview flash files before download. Moreover, you can classify downloaded Flash animations into different categories like Game, Cartoon, MTV, Fun, Movies, etc.
【保护方式】:时间限制 + 提示框
【加密保护】:无壳
【调试环境】:WinXP、PEiD、Ollydbg
【破解日期】:2005-07-20
【作者声明】:初学Crack,只是感兴趣,没有其他目的。失误之处敬请诸位大侠赐教!
―――――――――――――――――破解过程――――――――――――――――
0052BFAB |. 68 6AC05200 push flashsav.0052C06A
0052BFB0 |. 64:FF30 push dword ptr fs:[eax]
0052BFB3 |. 64:8920 mov dword ptr fs:[eax],esp
0052BFB6 |. 8D55 F0 lea edx,dword ptr ss:[ebp-10]
0052BFB9 |. 8B45 FC mov eax,dword ptr ss:[ebp-4]
0052BFBC |. 8B80 F4020000 mov eax,dword ptr ds:[eax+2F4]
0052BFC2 |. E8 A540F2FF call flashsav.0045006C
0052BFC7 |. 8B55 F0 mov edx,dword ptr ss:[ebp-10]---注册名
0052BFCA |. A1 A8845400 mov eax,dword ptr ds:[5484A8]
0052BFCF |. 8B00 mov eax,dword ptr ds:[eax]
0052BFD1 |. 8B80 A8040000 mov eax,dword ptr ds:[eax+4A8]
0052BFD7 |. E8 FC84F9FF call flashsav.004C44D8
0052BFDC |. 8D55 F8 lea edx,dword ptr ss:[ebp-8]
0052BFDF |. 8B45 FC mov eax,dword ptr ss:[ebp-4]
0052BFE2 |. 8B80 FC020000 mov eax,dword ptr ds:[eax+2FC]
0052BFE8 |. E8 7F40F2FF call flashsav.0045006C
0052BFED |. 837D F8 00 cmp dword ptr ss:[ebp-8],0---注册码是否为0
0052BFF1 |. 75 1C jnz short flashsav.0052C00F
0052BFF3 |. 6A 00 push 0
0052BFF5 |. 68 78C05200 push flashsav.0052C078------"Registration Error"
0052BFFA |. 68 8CC05200 push flashsav.0052C08C --------ASCII "Invalid Serial Number! Please recheck it or contact us for help."
0052BFFF |. 8B45 FC mov eax,dword ptr ss:[ebp-4]
0052C002 |. E8 85A9F2FF call flashsav.0045698C
0052C007 |. 50 push eax
0052C008 |. E8 83BCEDFF call <jmp.&user32.MessageBoxA> \MessageBoxA
0052C00D |. EB 3D jmp short flashsav.0052C04C
0052C00F |> A1 A8845400 mov eax,dword ptr ds:[5484A8]
0052C014 |. 8B00 mov eax,dword ptr ds:[eax]
0052C016 |. 8B80 A8040000 mov eax,dword ptr ds:[eax+4A8]
0052C01C |. 8B55 F8 mov edx,dword ptr ss:[ebp-8]---注册码入EDX
0052C01F |. E8 3480F9FF call flashsav.004C4058
0052C024 |. 84C0 test al,al
0052C026 |. 6A 00 push 0
0052C028 |. 68 D0C05200 push flashsav.0052C0D0 ASCII "Information"
0052C02D |. 68 DCC05200 push flashsav.0052C0DC ASCII "Thanks for your registration, reopen this program to validate your serial!"
0052C032 |. 8B45 FC mov eax,dword ptr ss:[ebp-4]
0052C035 |. E8 52A9F2FF call flashsav.0045698C
0052C03A |. 50 push eax
0052C03B |. E8 50BCEDFF call <jmp.&user32.MessageBoxA> \MessageBoxA
*****************************************************************
****************************************** call flashsav.0045006C
*****************************************************************
0045006C /$ 53 push ebx
0045006D |. 56 push esi -------flashsav.00475EE0
0045006E |. 57 push edi
0045006F |. 8BFA mov edi,edx
00450071 |. 8BF0 mov esi,eax
00450073 |. 8BC6 mov eax,esi
00450075 |. E8 66FFFFFF call flashsav.0044FFE0---- 计算注册码位数
0045007A |. 8BD8 mov ebx,eax
0045007C |. 8BC7 mov eax,edi
0045007E |. 8BCB mov ecx,ebx
00450080 |. 33D2 xor edx,edx
00450082 |. E8 B149FBFF call flashsav.00404A38
00450087 |. 85DB test ebx,ebx
00450089 |. 74 0C je short flashsav.00450097
0045008B |. 8D4B 01 lea ecx,dword ptr ds:[ebx+1]
0045008E |. 8B17 mov edx,dword ptr ds:[edi]
00450090 |. 8BC6 mov eax,esi
00450092 |. E8 59FFFFFF call flashsav.0044FFF0
00450097 |> 5F pop edi
00450098 |. 5E pop esi
00450099 |. 5B pop ebx
0045009A \. C3 retn
*********************************************************************
************************************************call flashsav.004C4058
004C4058 /$ 55 push ebp
004C4059 |. 8BEC mov ebp,esp
004C405B |. 33C9 xor ecx,ecx
004C405D |. 51 push ecx
004C405E |. 51 push ecx
004C405F |. 51 push ecx
004C4060 |. 51 push ecx
004C4061 |. 51 push ecx
004C4062 |. 51 push ecx
004C4063 |. 51 push ecx
004C4064 |. 53 push ebx
004C4065 |. 56 push esi
004C4066 |. 57 push edi
004C4067 |. 8955 FC mov dword ptr ss:[ebp-4],edx
004C406A |. 8BD8 mov ebx,eax
004C406C |. 8B45 FC mov eax,dword ptr ss:[ebp-4]
004C406F |. E8 840DF4FF call flashsav.00404DF8
004C4074 |. 33C0 xor eax,eax
004C4076 |. 55 push ebp
004C4077 |. 68 BC414C00 push flashsav.004C41BC
004C407C |. 64:FF30 push dword ptr fs:[eax]
004C407F |. 64:8920 mov dword ptr fs:[eax],esp
004C4082 |. B2 01 mov dl,1
004C4084 |. A1 48BC4100 mov eax,dword ptr ds:[41BC48]
004C4089 |. E8 9AFAF3FF call flashsav.00403B28
004C408E |> 8BF8 mov edi,eax
004C4090 |. 8BC7 mov eax,edi
004C4092 |. 8B10 mov edx,dword ptr ds:[eax]
004C4094 |. FF52 44 call dword ptr ds:[edx+44]
004C4097 |. 8D45 F4 lea eax,dword ptr ss:[ebp-C]
004C409A |. 8B4B 34 mov ecx,dword ptr ds:[ebx+34]
004C409D |. BA D8414C00 mov edx,flashsav.004C41D8-------ASCII "i love "
004C40A2 |. E8 B50BF4FF call flashsav.00404C5C----------连接字符串函数
堆栈 ss:[0012F5D8]=00D1809C, (ASCII "i love Flash Saver V4.5")
004C40A7 |. 8B55 F4 mov edx,dword ptr ss:[ebp-C]
004C40AA |. 8BC7 mov eax,edi
004C40AC |. 8B08 mov ecx,dword ptr ds:[eax]
004C40AE |. FF51 38 call dword ptr ds:[ecx+38]
004C40B1 |. C645 FB 01 mov byte ptr ss:[ebp-5],1
004C40B5 |. B2 01 mov dl,1
004C40B7 |. A1 A46E4700 mov eax,dword ptr ds:[476EA4]
004C40BC |. E8 E32EFBFF call flashsav.00476FA4
004C40C1 |. 8BF0 mov esi,eax
004C40C3 |. BA 01000080 mov edx,80000001
004C40C8 |. 8BC6 mov eax,esi
004C40CA |. E8 752FFBFF call flashsav.00477044
004C40CF |. 8D45 F0 lea eax,dword ptr ss:[ebp-10]
004C40D2 |. 8B4B 34 mov ecx,dword ptr ds:[ebx+34]
004C40D5 |. BA E8414C00 mov edx,flashsav.004C41E8 ; ASCII "\Software\"
004C40DA |. E8 7D0BF4FF call flashsav.00404C5C
004C40DF |. 8B55 F0 mov edx,dword ptr ss:[ebp-10]
004C40E2 |. B1 01 mov cl,1
004C40E4 |. 8BC6 mov eax,esi
004C40E6 |. E8 BD2FFBFF call flashsav.004770A8
004C40EB |. 84C0 test al,al
004C40ED |. 0F84 9F000000 je flashsav.004C4192
004C40F3 |. 8D4D EC lea ecx,dword ptr ss:[ebp-14]
004C40F6 |. BA FC414C00 mov edx,flashsav.004C41FC ; ASCII "version"
004C40FB |. 8BC6 mov eax,esi
004C40FD |. E8 8E31FBFF call flashsav.00477290
004C4102 |. 8B45 EC mov eax,dword ptr ss:[ebp-14]
004C4105 |. BA 0C424C00 mov edx,flashsav.004C420C ; ASCII "cbyx"
004C410A |. E8 450CF4FF call flashsav.00404D54*****跟进
004C410F |. 75 06 jnz short flashsav.004C4117
004C4111 |. C645 FB 01 mov byte ptr ss:[ebp-5],1
004C4115 |. EB 7B jmp short flashsav.004C4192
004C4117 |> 8D55 E8 lea edx,dword ptr ss:[ebp-18]
004C411A |. 8BC3 mov eax,ebx
004C411C |. E8 1B010000 call flashsav.004C423C----------计算CALL
004C4121 |. 8B55 E8 mov edx,dword ptr ss:[ebp-18]---"109D320FA5C6C089"
004C4124 |. 8B45 FC mov eax,dword ptr ss:[ebp-4]-----试练码28230439
004C4127 |. E8 280CF4FF call flashsav.00404D54*******跟进
004C412C |. 75 4F jnz short flashsav.004C417D
004C412E |. B9 0C424C00 mov ecx,flashsav.004C420C------"cbyx"
004C4133 |. BA FC414C00 mov edx,flashsav.004C41FC -----"version"
004C4138 |. 8BC6 mov eax,esi
004C413A |. E8 2531FBFF call flashsav.00477264
004C413F |. 68 FF000000 push 0FF /BufSize = FF (255.)
004C4144 |. 68 10A15400 push flashsav.0054A110
004C4149 |. E8 D232F4FF call <jmp.&kernel32.GetSystemDir>--GetSystemDirectoryA
004C414E |. 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
004C4151 |. BA 10A15400 mov edx,flashsav.0054A110
004C4156 |. B9 00010000 mov ecx,100
004C415B |. E8 600AF4FF call flashsav.00404BC0
004C4160 |. 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
004C4163 |. BA 1C424C00 mov edx,flashsav.004C421C -- --- "\sysfsaver.dat"
004C4168 |. E8 AB0AF4FF call flashsav.00404C18
004C416D |. 8B55 E4 mov edx,dword ptr ss:[ebp-1C]
004C4170 |. 8BC7 mov eax,edi
004C4172 |. 8B08 mov ecx,dword ptr ds:[eax]
004C4174 |. FF51 74 call dword ptr ds:[ecx+74]
004C4177 |. C645 FB 01 mov byte ptr ss:[ebp-5],1
004C417B |. EB 15 jmp short flashsav.004C4192
004C417D |> B9 34424C00 mov ecx,flashsav.004C4234----- ASCII "welcome"
004C4182 |. BA FC414C00 mov edx,flashsav.004C41FC -------ASCII "version"
004C4187 |. 8BC6 mov eax,esi
004C4189 |. E8 D630FBFF call flashsav.00477264
004C418E |. C645 FB 00 mov byte ptr ss:[ebp-5],0
004C4192 |> 8BC6 mov eax,esi
004C4194 |. E8 BFF9F3FF call flashsav.00403B58
004C4199 |. 33C0 xor eax,eax
004C419B |. 5A pop edx
004C419C |. 59 pop ecx
004C419D |. 59 pop ecx
004C419E |. 64:8910 mov dword ptr fs:[eax],edx
004C41A1 |. 68 C3414C00 push flashsav.004C41C3
004C41A6 |> 8D45 E4 lea eax,dword ptr ss:[ebp-1C]
004C41A9 |. BA 05000000 mov edx,5
004C41AE |. E8 B907F4FF call flashsav.0040496C
004C41B3 |. 8D45 FC lea eax,dword ptr ss:[ebp-4]
004C41B6 |. E8 8D07F4FF call flashsav.00404948
004C41BB \. C3 retn
***************************************************************
**************************************call flashsav.00404D54
****************************************************************
00404D54 /$ 53 push ebx
00404D55 |. 56 push esi
00404D56 |. 57 push edi
00404D57 |. 89C6 mov esi,eax
00404D59 |. 89D7 mov edi,edx
00404D5B |. 39D0 cmp eax,edx
00404D5D 0F84 8F000000 je flashsav.00404DF2
00404D63 |. 85F6 test esi,esi
00404D65 |. 74 68 je short flashsav.00404DCF
00404D67 |. 85FF test edi,edi
00404D69 |. 74 6B je short flashsav.00404DD6
00404D6B |. 8B46 FC mov eax,dword ptr ds:[esi-4]
00404D6E |. 8B57 FC mov edx,dword ptr ds:[edi-4]
00404D71 |. 29D0 sub eax,edx
00404D73 |. 77 02 ja short flashsav.00404D77
00404D75 |. 01C2 add edx,eax
00404D77 |> 52 push edx
00404D78 |. C1EA 02 shr edx,2
00404D7B |. 74 26 je short flashsav.00404DA3
00404D7D |> 8B0E /mov ecx,dword ptr ds:[esi]
00404D7F |. 8B1F |mov ebx,dword ptr ds:[edi]
00404D81 |. 39D9 |cmp ecx,ebx
00404D83 |. 75 58 |jnz short flashsav.00404DDD
00404D85 |. 4A |dec edx
00404D86 |. 74 15 |je short flashsav.00404D9D
00404D88 |. 8B4E 04 |mov ecx,dword ptr ds:[esi+4]
00404D8B |. 8B5F 04 |mov ebx,dword ptr ds:[edi+4]
00404D8E |. 39D9 |cmp ecx,ebx
00404D90 |. 75 4B |jnz short flashsav.00404DDD
00404D92 |. 83C6 08 |add esi,8
00404D95 |. 83C7 08 |add edi,8
00404D98 |. 4A |dec edx
00404D99 |.^ 75 E2 jnz short flashsav.00404D7D
00404D9B |. EB 06 jmp short flashsav.00404DA3
00404D9D |> 83C6 04 add esi,4
00404DA0 |. 83C7 04 add edi,4
00404DA3 |> 5A pop edx
00404DA4 |. 83E2 03 and edx,3
00404DA7 |. 74 22 je short flashsav.00404DCB
00404DA9 |. 8B0E mov ecx,dword ptr ds:[esi]
00404DAB |. 8B1F mov ebx,dword ptr ds:[edi]
00404DAD |. 38D9 cmp cl,bl
00404DAF |. 75 41 jnz short flashsav.00404DF2
00404DB1 |. 4A dec edx
00404DB2 |. 74 17 je short flashsav.00404DCB
00404DB4 |. 38FD cmp ch,bh
00404DB6 |. 75 3A jnz short flashsav.00404DF2
00404DB8 |. 4A dec edx
00404DB9 |. 74 10 je short flashsav.00404DCB
00404DBB |. 81E3 0000FF00 and ebx,0FF0000
00404DC1 |. 81E1 0000FF00 and ecx,0FF0000
00404DC7 |. 39D9 cmp ecx,ebx
00404DC9 |. 75 27 jnz short flashsav.00404DF2
00404DCB |> 01C0 add eax,eax
00404DCD |. EB 23 jmp short flashsav.00404DF2
00404DCF |> 8B57 FC mov edx,dword ptr ds:[edi-4]
00404DD2 |. 29D0 sub eax,edx
00404DD4 |. EB 1C jmp short flashsav.00404DF2
00404DD6 |> 8B46 FC mov eax,dword ptr ds:[esi-4]
00404DD9 |. 29D0 sub eax,edx
00404DDB |. EB 15 jmp short flashsav.00404DF2
00404DDD |> 5A pop edx
00404DDE |. 38D9 cmp cl,bl
00404DE0 |. 75 10 jnz short flashsav.00404DF2
00404DE2 |. 38FD cmp ch,bh
00404DE4 |. 75 0C jnz short flashsav.00404DF2
00404DE6 |. C1E9 10 shr ecx,10
00404DE9 |. C1EB 10 shr ebx,10
00404DEC |. 38D9 cmp cl,bl
00404DEE |. 75 02 jnz short flashsav.00404DF2
00404DF0 |. 38FD cmp ch,bh
00404DF2 |> 5F pop edi
00404DF3 |. 5E pop esi
00404DF4 |. 5B pop ebx
00404DF5 \. C3 retn
****************************************************************
******************************************call flashsav.004C423C
****************************************************************
004C423C /$ 55 push ebp
004C423D |. 8BEC mov ebp,esp
004C423F |. 83C4 E0 add esp,-20
004C4242 |. 53 push ebx
004C4243 |. 56 push esi
004C4244 |. 33C9 xor ecx,ecx
004C4246 |. 894D E8 mov dword ptr ss:[ebp-18],ecx
004C4249 |. 894D E0 mov dword ptr ss:[ebp-20],ecx
004C424C |. 894D E4 mov dword ptr ss:[ebp-1C],ecx
004C424F |. 894D FC mov dword ptr ss:[ebp-4],ecx
004C4252 |. 8BF2 mov esi,edx
004C4254 |. 8BD8 mov ebx,eax
004C4256 |. 33C0 xor eax,eax
004C4258 |. 55 push ebp
004C4259 |. 68 DE424C00 push flashsav.004C42DE
004C425E |. 64:FF30 push dword ptr fs:[eax]
004C4261 |. 64:8920 mov dword ptr fs:[eax],esp
004C4264 |. 8D45 FC lea eax,dword ptr ss:[ebp-4]
004C4267 |. 8B53 3C mov edx,dword ptr ds:[ebx+3C]
004C426A |. E8 7107F4FF call flashsav.004049E0
004C426F |. 8B43 3C mov eax,dword ptr ds:[ebx+3C]
004C4272 |. E8 9909F4FF call flashsav.00404C10
004C4277 |. 8945 EC mov dword ptr ss:[ebp-14],eax
004C427A |. DB45 EC fild dword ptr ss:[ebp-14]
004C427D |. DD5D F0 fstp qword ptr ss:[ebp-10]
004C4280 |. 9B wait
004C4281 |. 8D55 E4 lea edx,dword ptr ss:[ebp-1C]
004C4284 |. 8B43 38 mov eax,dword ptr ds:[ebx+38]
004C4287 |. E8 7854F4FF call flashsav.00409704
004C428C |. 8B55 E4 mov edx,dword ptr ss:[ebp-1C]
004C428F |. 8D4D E8 lea ecx,dword ptr ss:[ebp-18]
004C4292 |. 8B45 FC mov eax,dword ptr ss:[ebp-4]
004C4295 |. E8 EEFAFFFF call flashsav.004C3D88
004C429A |. 8B45 E8 mov eax,dword ptr ss:[ebp-18]----"109D320FA5C6C089"
004C429D |. 50 push eax
004C429E |. DD45 F0 fld qword ptr ss:[ebp-10]
004C42A1 |. 83C4 F4 add esp,-0C
004C42A4 |. DB3C24 fstp tbyte ptr ss:[esp]
004C42A7 |. 9B wait
004C42A8 |. 8D45 E0 lea eax,dword ptr ss:[ebp-20]
004C42AB |. E8 F86DF4FF call flashsav.0040B0A8 ;
004C42B0 |. 8B4D E0 mov ecx,dword ptr ss:[ebp-20]
004C42B3 |. 8BC6 mov eax,esi
004C42B5 |. 5A pop edx
004C42B6 |. E8 A109F4FF call flashsav.00404C5C
004C42BB |. 33C0 xor eax,eax
004C42BD |. 5A pop edx
004C42BE |. 59 pop ecx
004C42BF |. 59 pop ecx
004C42C0 |. 64:8910 mov dword ptr fs:[eax],edx
004C42C3 |. 68 E5424C00 push flashsav.004C42E5
004C42C8 |> 8D45 E0 lea eax,dword ptr ss:[ebp-20]
004C42CB |. BA 03000000 mov edx,3
004C42D0 |. E8 9706F4FF call flashsav.0040496C
004C42D5 |. 8D45 FC lea eax,dword ptr ss:[ebp-4]
004C42D8 |. E8 6B06F4FF call flashsav.00404948
004C42DD \. C3 retn
*************************************************************
注册名:zhaoocn
SN: "109D320FA5C6C0893"
*************************************************************
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课