neonprimetime security , just trying to help

try setting breakpoint on    kernel32.dll      CreateProcessInternalA      CreateProcessInternalW because those are one of lowest level...