GhouLSec
Mar 12, 2023

--

There should have fs:[30] (PEB->BeingDebugged) which mess out the memory before reach that function.

You can try to negate the jump condition to prevent that.

Have fun!

--

--

GhouLSec
GhouLSec

Responses (1)