debug011:0018FB08 ; ---------------------------------------------------------------------------
debug011:0018FB08 xor ebx, ebx
debug011:0018FB0A push ebx
debug011:0018FB0B push offset unk_74736577
debug011:0018FB10 push offset unk_6C696166
debug011:0018FB15 mov eax, esp
debug011:0018FB17 push ebx
debug011:0018FB18 push eax
debug011:0018FB19 push eax //现在单步到这里
debug011:0018FB1A push ebx
debug011:0018FB1B mov eax, offset user32_MessageBoxExA
debug011:0018FB20 call eax ; user32_MessageBoxExA
debug011:0018FB22 nop
debug011:0018FB23 nop
debug011:0018FB24 sub al, 0FBh
debug011:0018FB25 sti
debug011:0018FB26 sbb [eax], al
debug011:0018FB26 ; ---------------------------------------------------------------------------
debug011:0018FB27 db 0
debug011:0018FB28 db 0
debug011:0018FB29 db 0
debug011:0018FB2A db 0
debug011:0018FB2B db 0
debug011:0018FB2C db 66h ; f
debug011:0018FB2D db 61h ; a

debug011:0018FB08 ; ---------------------------------------------------------------------------
debug011:0018FB08 xor ebx, ebx
debug011:0018FB0A push ebx
debug011:0018FB0B push offset unk_74736577
debug011:0018FB10 push offset unk_6C696166
debug011:0018FB15 mov eax, esp
debug011:0018FB17 push ebx
debug011:0018FB18 push eax
debug011:0018FB19 push eax
debug011:0018FB1A push ebx //现在单步到这里
debug011:0018FB1B mov eax, offset user32_MessageBoxExA
debug011:0018FB20 sub al, 0FBh //call eax ; user32_MessageBoxExA 没了...
debug011:0018FB22 sbb [eax], al
debug011:0018FB23 add [ebx+edi*8], ch
debug011:0018FB24 sub al, 0FBh
debug011:0018FB25 sti
debug011:0018FB26 sbb [eax], al
debug011:0018FB26 ; ---------------------------------------------------------------------------

debug011:0018FB08 ; ---------------------------------------------------------------------------
debug011:0018FB08 xor ebx, ebx
debug011:0018FB0A push ebx
debug011:0018FB0B push offset unk_74736577
debug011:0018FB10 push offset unk_6C696166
debug011:0018FB15 mov eax, esp
debug011:0018FB17 push ebx
debug011:0018FB18 push eax
debug011:0018FB19 push eax
debug011:0018FB1A push ebx
debug011:0018FB1B mov eax, 0 //单步到这里，mov eax, offset user32_MessageBoxExA 没了...为什么？？？
debug011:0018FB20 sub al, 0FBh
debug011:0018FB22 sbb [eax], al
debug011:0018FB23 add [ebx+edi*8], ch
debug011:0018FB24 sub al, 0FBh
debug011:0018FB25 sti
debug011:0018FB26 sbb [eax], al
debug011:0018FB26 ; ---------------------------------------------------------------------------

[注意]看雪招聘，专注安全领域的专业人才平台！