Here's a script by Keegan Ryan for sending a custom public key in a certificate, which on a backdoored system will reach the hooked function. gist.github.com/keeganryan/a...

#souvenirs

3 tops? how is that supposed to work?

they have breached the tree

the arbornauts are suiting up to enter the spruce #3arbornauts1tree

instead, he's abusing an almost certainly undocumented (contrary to what he says) implementation detail of a dead scripting engine that's actually used by malware as the 'obvious solution' to the undocumented implementation detail workaround he doesn't like and ascribes to malware ad hominem.