12 hours ago12 hr Catch the exit and/or terminate process routine(s) (I assume the PE is auto-exiting when tampered with). And walk the stack back until you find the logic that controls the check(s).
Create an account or sign in to comment