Root is ez pz once you figure out what’s going on. My advice is to poke and prod at the binary that you think is suspect (throw it some commands, etc.). Take the time to read the output it produces and examine its behavior! I had a eureka moment once I realized what was going on.