GhouLSec·FollowMar 12, 2023--1ListenShareThere should have fs:[30] (PEB->BeingDebugged) which mess out the memory before reach that function.You can try to negate the jump condition to prevent that.Have fun!