I have a program which checks if u have passed your trail if not u get a screen saying u passed your trail time and that u can buy.

If not u can run the game now i know it start a new process which runs as blabla.dll in the folder it also looks like a dll, but if u rename it to .exe it gets the game icon but it crashes on launch.

Now my question what API calls can be used to start a new process,

becuase i cant find where the program start the other program.

list of API calls:

Calls.txt: http://www.ewa-clan.co.uk/calls.txt

Edited June 23, 200619 yr by Scale

I don't see a CreateProcess api in your list but it may be in a dll.

If there is a new process being started, FileMon (from sysinternals) should show the name of the executable file being loaded and help you track down where the process is being created.

Z

I don't see a CreateProcess api in your list but it may be in a dll.

If there is a new process being started, FileMon (from sysinternals) should show the name of the executable file being loaded and help you track down where the process is being created.

Z

The writeprocceser memory wrote 2 more writeprocceser memory's and one of those wrote the createprocess.

Only checked for createproccess after running the frist writeproccess didnt check for a new one

Thanks for the help ziggy