BE-Shellcode
Code for Battleyes shellcode
- Exception handler that checks for return addresses that match report criteria
- find hidden system threads by checking kernel time delta
- detect hooks that want to catch exceptions (KiUserExceptionDispatcher)
- detect blacklisted dlls (+checks for import etc) + backlisted drivers
- check integrity of important functions
- check all threads in local process and find RIPs that match report criteria
- find blacklisted signatures