.code GetPEB proc mov rax, qword ptr gs:[60h] ret GetPEB endp BeingDebugged proc xor eax, eax call GetPEB movzx eax, byte ptr [rax+2h] ret BeingDebugged endp end