| Nice one ,I think i found a creative but simple solution ,I changed the suspend count of the thread , so , it wont launch when you create it , until suspend count =0; |
==> |
| I know this is not the intended solution ,I have patched the binary to jump into corona function ,and then store the return in the rbp-0x4, with noping the input storage , now the cmp compares the return with itself . |
==> |