Wednesday at 03:32 AM2 days Catch the exit and/or terminate process routine(s) (I assume the PE is auto-exiting when tampered with). And walk the stack back until you find the logic that controls the check(s).
Create an account or sign in to comment