15 lines
170 B
NASM
15 lines
170 B
NASM
.code
|
|
|
|
GetPEB proc
|
|
mov rax, qword ptr gs:[60h]
|
|
ret
|
|
GetPEB endp
|
|
|
|
BeingDebugged proc
|
|
xor eax, eax
|
|
call GetPEB
|
|
movzx eax, byte ptr [rax+2h]
|
|
ret
|
|
BeingDebugged endp
|
|
|
|
end |