Ultra String Reference
Address
    Disassembly
                               Text String
004011F8
   push
    0040136C
                          (initial cpu selection)
00401E45
   mov
     dword ptr [ebp-60], 00401A64
      c:\windows\system32\systew32.dll
00401F0C
   push
    00401A64
                          c:\windows\system32\systew32.dll
00402055
   mov
     dword ptr [ebp-60], 00401A64
      c:\windows\system32\systew32.dll
004020B7
   mov
     dword ptr [ebp-60], 00401A64
      c:\windows\system32\systew32.dll
0040229C
   push
    00401C5C
                          b`\ny
---------------------------------------------------------
00401F03
   .
  FF15 0C104000 call
    [<&MSVBVM60.__vbaFreeVarList>]
   ;
  MSVBVM60.__vbaFreeVarList
                  ;一个函数
00401F09
   .
  83C4 14
       add
     esp, 14
00401F0C
   .
  68 641A4000
   push
    00401A64
                         ;
  c:\windows\system32\systew32.dll
           ;文件名
00401F11
   .
  6A 01
         push
    1
00401F13
   .
  6A FF
         push
    -1
00401F15
   .
  6A 02
         push
    2
00401F17
   .
  FF15 74104000 call
    [<&MSVBVM60.__vbaFileOpen>]
      ;
  MSVBVM60.__vbaFileOpen
                     ;打开文件
00401F1D
   .
  68 741B4000
   push
    00401B74
00401F22
   .
  6A 01
         push
    1
00401F24
   .
  68 941B4000
   push
    00401B94
00401F29
   .
  FF15 5C104000 call
    [<&MSVBVM60.__vbaPrintFile>]
     ;
  MSVBVM60.__vbaPrintFile
                    ;写入内容
00401F2F
   .
  83C4 0C
       add
     esp, 0C
00401F32
   .
  6A 01
         push
    1
00401F34
   .
  FF15 38104000 call
    [<&MSVBVM60.__vbaFileClose>]
     ;
  MSVBVM60.__vbaFileClose
                    ;关闭文件
[
 本帖最后由 风吹过b 于 2010-6-6 15:57 编辑 ]