From ad3c042df22a9423f745d1f4adb01cc1b7666347 Mon Sep 17 00:00:00 2001 From: Silent Date: Tue, 6 Oct 2020 21:30:58 +0200 Subject: [PATCH] Add a new rdtsc pattern based on NASCAR Heat 2002 logs New pattern detects the following: rdtsc mov address, eax --- src/core/kernel/init/CxbxKrnl.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/core/kernel/init/CxbxKrnl.cpp b/src/core/kernel/init/CxbxKrnl.cpp index 53c50b970..79307447b 100644 --- a/src/core/kernel/init/CxbxKrnl.cpp +++ b/src/core/kernel/init/CxbxKrnl.cpp @@ -487,7 +487,8 @@ const uint8_t rdtsc_pattern[] = { 0xEB, 0xF6, 0xA1, - 0x01 // one false positive in Group S Challenge [1.05] .text E8 0F 31 01 00 + 0x01, // one false positive in Group S Challenge [1.05] .text E8 0F 31 01 00 + 0xA3 }; const int sizeof_rdtsc_pattern = sizeof(rdtsc_pattern);