Update README.md

4 years ago · f66b6ef6f2
parent 2d977498c7
commit f66b6ef6f2
1 changed files with 3 additions and 1 deletions
--- a/README.md
+++ b/README.md
@ -27,4 +27,6 @@ the handle to the driver we can start sending IOCTL's to BattlEye. The IOCTL dat
 # limitations

 Now that we can ask BEDaisy to read/write for us, what are the limitations? Well first off you cannot use this to read/write the process that battleye is protecting but you can use
-this to read/write any other process you can open a simple handle too. `Rust`, `Valorant`, you name it, just open a `PROCESS_QUERY_LIMITED_INFORMATION` handle and pass it to `BEDaisy`.
+this to read/write any other process you can open a simple handle too. `Rust`, `Valorant`, you name it, just open a `PROCESS_QUERY_LIMITED_INFORMATION` handle and pass it to `BEDaisy`. The reason
+this works is two fold, firstly BattlEye assumes that the handle already has this access, secondly BattlEye only uses the handle to get the `EPROCESS` so they can call `MmCopyVirtualMemory`. You can see
+this in my runtime logs of `BEDaisy`.