Files
DuckSandboxDetect/ConsoleApplication1/duck.asm

26 lines
435 B
NASM
Raw Normal View History

2021-07-03 16:02:37 +08:00
.code
asm_pg_single_step proc
pushfq
mov rax,0
or dword ptr [rsp], 0100h
mov eax, 0FFFFFFFFh
popfq
mov rax,1 ;<3B><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,<2C><><EFBFBD><EFBFBD>Ǵ<EFBFBD><C7B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˵<EFBFBD>
nop
ret
asm_pg_single_step endp
asm_pg_KiErrata361Present proc
mov ax,ss
pushfq
or qword ptr[rsp],100h
popfq
mov ss,ax
db 0f1h ;icebp
pushfq
and qword ptr[rsp],0FFFFFEFFh
popfq
ret
asm_pg_KiErrata361Present endp
end