Thanks for the suggestions. I was able to find what I need to, by using PostExitMessage, and have since completed reversing the protection scheme.