[ENABLE]
registersymbol(qplf)
alloc(qplf,1024)
registersymbol(kslf)
alloc(kslf,1024)
00d2d5a8:
DD qplf
qplf:
cmp [esp],00717fa1
jne IntersectRect
mov [esp],kslf
jmp IntersectRect
kslf:
test eax,eax
jmp 00717fcf
[DISABLE]
00d2d5a8:
DD IntersectRect
(DWORD) GetProcAddress(GetModuleHandle(_T("user32.dll")), _T("IntersectRect"));
IntersectRect属于自己取的函数,这种汇编该如何写呢?