Re:Reverse Engineering a Software Crack
by chc4 on Tuesday April 23, 2024 @07:22PM
(#40138538)
CreateProcess the victim with CREATE_SUSPENDED, do whatever code patching, then ResumeThread it. Pretty sure you can even CreateRemoteThread into the victim for DLL injection, since it just suspends the primary thread, and then patch "yourself" in DllMain instead of having to do remote memory calls.
[ Parent
| on HN ]