Files
overlord/Overlord-Client/cmd/agent/plugins/teb_amd64.s
T
2026-04-15 20:16:12 -05:00

10 lines
259 B
ArmAsm

#include "textflag.h"
// func currentTEB() uintptr
TEXT ·currentTEB(SB),NOSPLIT,$0-8
// mov rax, gs:[0x30] — read the TEB self-pointer
BYTE $0x65; BYTE $0x48; BYTE $0x8B; BYTE $0x04; BYTE $0x25
LONG $0x00000030
MOVQ AX, ret+0(FP)
RET