I used x32dbg. Not sure if the Scylla hide feature was needed but I checked several boxes anyway.
Hint: Find the beginning of the actual program and JUMP there… The rest is basic RE analysis.
I used x32dbg. Not sure if the Scylla hide feature was needed but I checked several boxes anyway.
Hint: Find the beginning of the actual program and JUMP there… The rest is basic RE analysis.