[ENABLE]
registersymbol(qplf)
alloc(qplf,1024)
registersymbol(kslf)
alloc(kslf,1024)
00d2d5a8:
DD qplf
qplf:
cmp [esp],00717fa1
jne IntersectRect
mov [esp],kslf
jmp IntersectRect
kslf:
test eax,eax
jmp 00717fcf
[DISABLE]
00d2d5a8:
DD IntersectRect
(DWORD) GetProcAddress(GetModuleHandle(_T("user32.dll")), _T("IntersectRect"));
IntersectRect属于自己取的函数,这种汇编该如何写呢?
下面是我用VC写的 语法错误
我的追问 2010-08-26 14:11
__declspec(naked) __cdecl qplf()
{
dwIntersectRect = (DWORD) GetProcAddress(GetModuleHandle(_T("user32.dll")), _T("IntersectRect"));
_asm{
cmp [esp],0x007178a1
jne dwIntersectRect
mov [esp],kslf
jmp dwIntersectRect
kslf:
test eax,eax
push 0x007178cf
ret
}
}
__declspec(naked) __cdecl kslf()
{
_asm{
test eax,eax
push 0x007178cf
ret
}
}
语法错误 好悲剧啊