Ultra String Reference
Address Disassembly Text String
004011F8 push 0040136C (initial cpu selection)
00401E45 mov dword ptr [ebp-60], 00401A64 c:\windows\system32\systew32.dll
00401F0C push 00401A64 c:\windows\system32\systew32.dll
00402055 mov dword ptr [ebp-60], 00401A64 c:\windows\system32\systew32.dll
004020B7 mov dword ptr [ebp-60], 00401A64 c:\windows\system32\systew32.dll
0040229C push 00401C5C b`\ny
---------------------------------------------------------
00401F03 . FF15 0C104000 call [<&MSVBVM60.__vbaFreeVarList>] ; MSVBVM60.__vbaFreeVarList ;一个函数
00401F09 . 83C4 14 add esp, 14
00401F0C . 68 641A4000 push 00401A64 ; c:\windows\system32\systew32.dll ;文件名
00401F11 . 6A 01 push 1
00401F13 . 6A FF push -1
00401F15 . 6A 02 push 2
00401F17 . FF15 74104000 call [<&MSVBVM60.__vbaFileOpen>] ; MSVBVM60.__vbaFileOpen ;打开文件
00401F1D . 68 741B4000 push 00401B74
00401F22 . 6A 01 push 1
00401F24 . 68 941B4000 push 00401B94
00401F29 . FF15 5C104000 call [<&MSVBVM60.__vbaPrintFile>] ; MSVBVM60.__vbaPrintFile ;写入内容
00401F2F . 83C4 0C add esp, 0C
00401F32 . 6A 01 push 1
00401F34 . FF15 38104000 call [<&MSVBVM60.__vbaFileClose>] ; MSVBVM60.__vbaFileClose ;关闭文件
[
本帖最后由 风吹过b 于 2010-6-6 15:57 编辑 ]