Scale Posted June 23, 2006 Posted June 23, 2006 (edited) I have a program which checks if u have passed your trail if not u get a screen saying u passed your trail time and that u can buy.If not u can run the game now i know it start a new process which runs as blabla.dll in the folder it also looks like a dll, but if u rename it to .exe it gets the game icon but it crashes on launch.Now my question what API calls can be used to start a new process,becuase i cant find where the program start the other program.list of API calls:Calls.txt: http://www.ewa-clan.co.uk/calls.txt Edited June 23, 2006 by Scale
Ziggy Posted June 23, 2006 Posted June 23, 2006 I don't see a CreateProcess api in your list but it may be in a dll. If there is a new process being started, FileMon (from sysinternals) should show the name of the executable file being loaded and help you track down where the process is being created. Z
Scale Posted June 24, 2006 Author Posted June 24, 2006 I don't see a CreateProcess api in your list but it may be in a dll. If there is a new process being started, FileMon (from sysinternals) should show the name of the executable file being loaded and help you track down where the process is being created. Z The writeprocceser memory wrote 2 more writeprocceser memory's and one of those wrote the createprocess. Only checked for createproccess after running the frist writeproccess didnt check for a new one Thanks for the help ziggy
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now