mirror of
https://github.com/thomasxm/BOAZ_beta
synced 2026-06-06 16:54:29 +00:00
6d1983c7d1
EAT IAT, SYSCALL hooking detector and new proxysyscall incoming.
35 lines
675 B
NASM
35 lines
675 B
NASM
global _NtAllocateVirtualMemory_stub
|
|
global _NtWriteVirtualMemory_stub
|
|
global _NtCreateThreadEx_stub
|
|
global _NtWaitForSingleObject_stub
|
|
|
|
section .text
|
|
|
|
_NtAllocateVirtualMemory_stub:
|
|
mov r10, rcx
|
|
mov eax, 0x18
|
|
syscall
|
|
ret
|
|
|
|
|
|
_NtWriteVirtualMemory_stub:
|
|
mov r10, rcx
|
|
mov eax, 0x3A
|
|
syscall
|
|
ret
|
|
|
|
_NtCreateThreadEx_stub:
|
|
mov r10, rcx
|
|
mov eax, 0xC7
|
|
syscall
|
|
ret
|
|
|
|
_NtWaitForSingleObject_stub:
|
|
mov r10, rcx
|
|
mov eax, 0x4
|
|
syscall
|
|
ret
|
|
|
|
|
|
|