8 Oct
2020
8 Oct
'20
12:48 p.m.
It turns out that newer Windows versions rotate the cookie and the pointer right by an amount specified by the first 31/63 bits before XORing them.
... by an amount specified by the *first 5/6 bits (&31/&63, modulo 32/64)