We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent ad70151 commit a151547Copy full SHA for a151547
_posts/2024-11-10-x64 Assembly & Shellcoding 101 - Part 5.md
@@ -47,7 +47,7 @@ and rsp, 0xFFFFFFFFFFFFFFF0
47
xor rcx, rcx ; RCX = 0
48
mov rax, [gs:rcx + 0x60] ; RAX = PEB
49
mov rax, [rax + 0x18] ; RAX = PEB->Ldr
50
-mov rsi,[rax+0x10] ; PEB.Ldr->InMemOrderModuleList
+mov rsi,[rax+0x10] ; PEB.Ldr->InLoadOrderModuleList
51
mov rsi, [rsi]
52
mov rsi,[rsi]
53
mov rbx, [rsi+0x30] ; kernel32.dll base address
0 commit comments