blob: d16cbc95b1949714a9cf142723e2220aea64c89c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
[SECTION .text]
global _start
_start:
; Set a var to 1, let PS known exe is exiting
mov rbx, 0x4141414141414141
mov [rbx], byte 0x01
; Call exitthread instead of exitprocess
sub rsp, 0xc0
and sp, 0xFFf0 ; Needed for stack alignment
mov rbx, 0x4141414141414141
call rbx
|