AcProtect 1.41 外壳分析[5]

word ptr ds:[57cb2d] 00591a3d ff35 2dcb5700 push dword ptr ds:[57cb2d] 00591a43 890424 mov dword ptr ss:[esp],eax 00591a46 891c24 mov dword ptr ss:[esp],ebx 00591a49 c70424 609f4b00 mov dword ptr ss:[esp],004b9f60 ; push 4b9f60 *********** 00591a50 53 push ebx 00591a51 890424 mov dword ptr ss:[esp],eax 00591a54 891424 mov dword ptr ss:[esp],edx 00591a57 57 push edi 00591a58 60 pushad ...... 00591c1b 61 popad 00591c1c c70424 89c85700 mov dword ptr ss:[esp],0057c889 00591c23 8f05 01cb5700 pop dword ptr ds:[57cb01] 00591c29 8b15 01cb5700 mov edx,dword ptr ds:[57cb01] 00591c2f 890a mov dword ptr ds:[edx],ecx 00591c31 8f05 a5c95700 pop dword ptr ds:[57c9a5] 00591c37 ff35 a5c95700 push dword ptr ds:[57c9a5] 00591c3d 5a pop edx 00591c3e ff35 89c85700 push dword ptr ds:[57c889] 00591c44 c70424 602f4b00 mov dword ptr ss:[esp],004b2f60 ; push 4b2f60 ********* 00591c4b 64:a1 00000000 mov eax,dword ptr fs:[0] ; mov eax,dword ptr fs:[0] ************** 00591c51 56 push esi 00591c52 8f05 a9c85700 pop dword ptr ds:[57c8a9] 00591c58 ff35 a9c85700 push dword ptr ds:[57c8a9] 00591c5e 891c24 mov dword ptr ss:[esp],ebx 00591c61 8935 91c85700 mov dword ptr ds:[57c891],esi 00591c67 90 nop 00591c68 90 nop 00591c69 60 pushad ...... 00591e1b f7f3 div ebx ; 除0异常 00591e1d 90 nop 00591e1e 64:8f05 0000000>pop dword ptr fs:[0] 00591e25 83c4 04 add esp,4 00591e28 61 popad 00591e29 ff35 91c85700 push dword ptr ds:[57c891] 00591e2f c70424 a1ca5700 mov dword ptr ss:[esp],0057caa1 00591e36 8f05 69c95700 pop dword ptr ds:[57c969] 00591e3c ff35 69c95700 push dword ptr ds:[57c969] 00591e42 5b pop ebx 00591e43 8903 mov dword ptr ds:[ebx],eax 00591e45 8b1c24 mov ebx,dword ptr ss:[esp] 00591e48 8f05 b1ca5700 pop dword ptr ds:[57cab1] 00591e4e ff35 a1ca5700 push dword ptr ds:[57caa1] ; push eax ************ 00591e54 64:8925 0000000>mov dword ptr fs:[0],esp ; mov dword ptr fs:[0],esp ******** 00591e5b 83ec 68 sub esp,68 ; *************** 0