From b2e8762bfd793430928cb4c3c868b00c4c5c4633 Mon Sep 17 00:00:00 2001 From: notscimmy Date: Tue, 4 Sep 2018 02:13:54 -0700 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 2686dd4..50c18a9 100644 --- a/README.md +++ b/README.md @@ -104,7 +104,7 @@ If CR4.SMEP = 1, software operating in supervisor mode cannot fetch instructions Basically, SMEP is a CPU mitigation that prevents the kernel from executing code that lives in the virtual address space of a usermode process. Going back to the exploit, we see that before the function defined by our input buffer is called, we call ```sub_10788```. It is not unreasonable to guess that this function does something to ```CR4.SMEP```. -``` +```cpp unsigned __int64 __fastcall sub_10788(unsigned __int64 *a1) { unsigned __int64 v1; // rax@1