You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

11 lines
495 B

4 years ago
# i am writing this atm so come back later
4 years ago
# badeye
4 years ago
<img src="https://imgur.com/5MjFoHg.png"/>
4 years ago
4 years ago
# lsass.exe/csrss.exe
4 years ago
This section will go into detail about what exactly is going on here. csrss.exe/lsass.exe have handles to all processes and since battleye strips the R/W access of the handle that these processes have
4 years ago
to the game it can cause system instability. Thus bedaisy writes two pages of shellcode to both processes and inline hooks `NtReadVirtualMemory` and `NtWriteVirtualMemory`.