再论FISH精美屏保（VER:0.99G)暴力破解---WD32ASM893版,请高手们给提点意见！！！ (2千字)
再论FISH精美屏保（VER:0.99G)暴力破解---WD32ASM893版,请孙锋给提点意见！！！先用WD32ASM8.93超级中文版进行反汇编，然后查找，会看到：
* Possible StringData Ref from Data Obj ->"SOFTWARE\Sachs\SachsAquarium"
|
:004042F2 68D4024200 push 004202D4
:004042F7 8D4DA0 lea ecx, dword ptr [ebp-60]
:004042FA 51 push ecx
:004042FB E800DB0000 call 00411E00
:00404300 83C408 add esp, 00000008
:00404303 C7057020420000000000 mov dword ptr [00422070], 00000000
改：C7057020420003000000 mov dword ptr [00422070], 00000003
:0040430D 8D5590 lea edx, dword ptr [ebp-70]
:00404310 52 push edx
:00404311 683F000F00 push 000F003F
:00404316 6A00 push 00000000
:00404318 8D45A0 lea eax, dword ptr [ebp-60]
:0040431B 50 push eax
:0040431C 6802000080 push 80000002
:
:
:
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404485(C)
|
:00404491 833D7020420000 cmp dword ptr [00422070], 00000000
:00404498 740E je 004044A8
:0040449A C605C9FD410001 mov byte ptr [0041FDC9], 01（第二条）
:004044A1 C605CAFD410001 mov byte ptr [0041FDCA], 01（第三条）
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404498(C)
|
:004044A8 6A03 push 00000003
:004044AA E861F3FFFF call 00403810
:004044AF 83C404 add esp, 00000004
:004044B2 85C0 test eax, eax
:004044B4 7434 je 004044EA （不nop掉只有三条鱼）
改：90 nop
90 nop
:004044B6 C7057020420003000000 mov dword ptr [00422070], 00000003
:004044C0 C605C9FD410001 mov byte ptr [0041FDC9], 01 （第二条）
:004044C7 C605CAFD410001 mov byte ptr [0041FDCA], 01 （第三条）
:004044CE C605CBFD410001 mov byte ptr [0041FDCB], 01 （第四条）
:004044D5 C605CCFD410001 mov byte ptr [0041FDCC], 01 （第五条）
:004044DC C605CDFD410001 mov byte ptr [0041FDCD], 01 （第六条）
:004044E3 C605CEFD410001 mov byte ptr [0041FDCE], 01 （第七条）至于第一条吗？你想想吧！！！
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404477(C), :004044B4(C)
|
:004044EA 833D7020420003 cmp dword ptr [00422070], 00000003
:004044F1 0F8511010000 jne 00404608
:004044F7 8D459C lea eax, dword ptr [ebp-64]
:004044FA 50 push eax
:004044FB 6880324200 push 00423280
:00404500 8D4D88 lea ecx, dword ptr [ebp-78]
:00404503 51 push ecx
:00404504 6A00 push 00000000
