Files
pcileech/pcileech_shellcode/wx64_common_a.asm
2016-07-31 12:59:27 +02:00

36 lines
582 B
NASM

; wx64_common_a.asm : assembly to receive execution from stage3 exec command.
; Compatible with Windowx 64.
;
; (c) Ulf Frisk, 2016
; Author: Ulf Frisk, pcileech@frizk.net
;
; -------------------------------------
; Prototypes
; -------------------------------------
main PROTO
EXTRN c_EntryPoint:NEAR
; -------------------------------------
; Code
; -------------------------------------
.CODE
main PROC
PUSH rsi
MOV rsi, rsp
AND rsp, 0FFFFFFFFFFFFFFF0h
SUB rsp, 020h
CALL c_EntryPoint
MOV rsp, rsi
POP rsi
RET
main ENDP
GetCR3 PROC
MOV rax, cr3
RET
GetCR3 ENDP
END