1. 00457050 E9 38B80A00 JMP Ebenezer.0050288D
   
2. 
   
3. 
   
4. 0050288D 8A47 08 MOV AL,BYTE PTR DS:[EDI+8]
   
5. 00502890 84C0 TEST AL,AL
   
6. 00502892 75 1B JNZ SHORT Ebenezer.005028AF
   
7. 00502894 50 PUSH EAX
   
8. 00502895 51 PUSH ECX
   
9. 00502896 A1 9CBD5200 MOV EAX,DWORD PTR DS:[52BD9C]
   
10. 0050289B 8B4D 0C MOV ECX,DWORD PTR SS:[EBP+C]
    
11. 0050289E 8B3488 MOV ESI,DWORD PTR DS:[EAX+ECX*4]
    
12. 005028A1 8B45 10 MOV EAX,DWORD PTR SS:[EBP+10]
    
13. 005028A4 8B4D 0C MOV ECX,DWORD PTR SS:[EBP+C]
    
14. 005028A7 8945 0C MOV DWORD PTR SS:[EBP+C],EAX
    
15. 005028AA 894D 10 MOV DWORD PTR SS:[EBP+10],ECX
    
16. 005028AD 59 POP ECX
    
17. 005028AE 58 POP EAX
    
18. 005028AF 8A47 09 MOV AL,BYTE PTR DS:[EDI+9]
    
19. 005028B2 3C 01 CMP AL,1
    
20. 005028B4 ^E9 9C47F5FF JMP Ebenezer.00457055
    
21. 
    
22. 
    
23. 0045728C E9 33B60A00 JMP Ebenezer.005028C4
    
24. 
    
25. 
    
26. 005028C4 8A47 08 MOV AL,BYTE PTR DS:[EDI+8]
    
27. 005028C7 84C0 TEST AL,AL
    
28. 005028C9 75 0C JNZ SHORT Ebenezer.005028D7
    
29. 005028CB 8B45 10 MOV EAX,DWORD PTR SS:[EBP+10]
    
30. 005028CE 8B4D 0C MOV ECX,DWORD PTR SS:[EBP+C]
    
31. 005028D1 8945 0C MOV DWORD PTR SS:[EBP+C],EAX
    
32. 005028D4 894D 10 MOV DWORD PTR SS:[EBP+10],ECX
    
33. 005028D7 68 80000000 PUSH 80
    
34. 005028DC ^E9 B049F5FF JMP Ebenezer.00457291
    
35. 
    

复制代码

1397不是  sohu  linux 么？？我记错了？

是的``