From 4923eb7c72f521986e9824e418ddb15e7c822c6d Mon Sep 17 00:00:00 2001 From: xerox Date: Wed, 22 Jul 2020 19:49:29 +0000 Subject: [PATCH 1/2] Update README.md --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index b23c670..eaf66e5 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,4 @@ # BEDaisy -reverse engineering of bedaisy.sys (battleyes kernel driver) \ No newline at end of file +reverse engineering of bedaisy.sys (battleyes kernel driver). By registering on image load callbacks and IAT hooking BEDaisy's `MmGetSystemRoutineAddress` we can simply hook any imports +we want and have control flow over subsequent functions. \ No newline at end of file From a3c49c482d00909858aabc7bebc35ad49433af48 Mon Sep 17 00:00:00 2001 From: xerox Date: Wed, 22 Jul 2020 20:02:13 +0000 Subject: [PATCH 2/2] Update README.md --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index eaf66e5..7b86e86 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,6 @@ # BEDaisy reverse engineering of bedaisy.sys (battleyes kernel driver). By registering on image load callbacks and IAT hooking BEDaisy's `MmGetSystemRoutineAddress` we can simply hook any imports -we want and have control flow over subsequent functions. \ No newline at end of file +we want and have control flow over subsequent functions. + + \ No newline at end of file