module version v1.02
asm:
1000C927 52 PUSH EDX
1000C928 E8 73FBFFFF CALL 175Prote.1000C4A0
1000C92D 83C4 04 ADD ESP,4
1000C930 84C0 TEST AL,AL
1000C932 75 09 JNZ SHORT 175Prote.1000C93D
1000C934 5E POP ESI
1000C935 83C4 0C ADD ESP,0C
1000C938 ^E9 A39DFFFF JMP 175Prote.100066E0
code:
DWORD Address = 0x1000C932;
BYTE PokeValue = 0xEB;
DWORD NumberOfBytes = 1;
DWORD Write=0;
HWND HLwnd=FindWindow(NULL, "Counter-Strike");
DWORD ThreadId =GetWindowThreadProcessId(HLwnd, &HLProcessId);
HANDLE HandleWindow = OpenProcess(PROCESS_ALL_ACCESS, FALSE, HLProcessId);
WriteProcessMemory(HandleWindow, (LPVOID)Address, &PokeValue, NumberOfBytes, &Write);
Need bypass CRC check !