PowerSploit/CodeExecution/Invoke-ReflectivePEInjectio.../Shellcode/x64/ExitThread.asm

15 lines
280 B
NASM

[SECTION .text]
global _start
_start:
; Set a var to 1, let PS known exe is exiting
mov rbx, 0x4141414141414141
mov [rbx], byte 0x01
; Call exitthread instead of exitprocess
sub rsp, 0xc0
and sp, 0xFFf0 ; Needed for stack alignment
mov rbx, 0x4141414141414141
call rbx