#include "stdafx.

h"
#include "iostream";
#include "atlstr.h";
#include <windows.h>
#include <TlHelp32.h>
#include <stdio.h>
#include <psapi.h>
using namespace std;

#pragma comment(lib, "Psapi.lib")

PROCESS_INFORMATION CreateVProcess();
void TryToCrack(PROCESS_INFORMATION processInfo);

//
// 85 c0 0f 84 9e 00 00 00
// 85 c0 0f 85 9e 00 00 00
// First offset 34EC7, do 34EC8
//
// second offset 34F03
// 74 2E
// EB 2E

int main()
{
cout << "Launching Application" << endl;
PROCESS_INFORMATION processInfo = CreateVProcess();
cout << "Trying to crack..." << endl;
TryToCrack(processInfo);
return 0;
}

PROCESS_INFORMATION CreateVProcess()
{
LPCTSTR path = L"NameOfAppHere.exe";

// additional information
STARTUPINFO si;
PROCESS_INFORMATION pi;

// set the size of the structures

ZeroMemory(&si, sizeof(si));
si.cb = sizeof(si);
ZeroMemory(&pi, sizeof(pi));

CreateProcess(
path,
NULL, // Command line
NULL, // Process handle not inheritable
NULL, // Thread handle not inheritable
FALSE, // Set handle inheritance to FALSE
0, // No creation flags
NULL, // Use parent's environment block
NULL, // Use parent's starting directory
&si, // Pointer to STARTUPINFO structure
&pi // Pointer to PROCESS_INFORMATION structure (removed
extra parentheses)
);
 return pi;
}

void TryToCrack(PROCESS_INFORMATION processInfo)

{
Sleep(500);

HANDLE targetProcess = OpenProcess(STANDARD_RIGHTS_WRITE, 0,

processInfo.dwProcessId);
void* hSnap = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE,
processInfo.dwProcessId);
MODULEENTRY32 mod32;
mod32.dwSize = sizeof(MODULEENTRY32);
Module32Next(hSnap, &mod32);

DWORD modHandle = (DWORD)mod32.modBaseAddr;

unsigned char mem1 = 0x85;

unsigned char mem2 = 0x75;

for (int i = 0; i < 100000; i++)

{
WriteProcessMemory(processInfo.hProcess, (LPVOID)(modHandle +
0x034EC8), &mem1, 1, NULL);
WriteProcessMemory(processInfo.hProcess, (LPVOID)(modHandle +
0x034F02), &mem2, 1, NULL);
}
}