Cheat Engine

[slippppppppp]

Is there anyway to hook an api without dll injection.
For example, on my speed hack, it get's injected into a process and that process hooks the api's so it enables the speed hack.
But what im wondering is if it's possibile to have a standalone application that makes another process hook the apis. meaning, could i make a speed hack for a seperate process without dll injection?..

[tombana]

Is it for a game with anti-cheat stuff like gameguard?
If it is not, I think you can write the redirecting jmps with WriteProcessMemory, and you will have to Write a small routine (the routine which you normally have in you're dll which gets called instead of the original api) to the proces s too. (So the jumps point to them).
Still, it's much easier with a dll.

If the game has cheating protection stuff you might try it with a kernel mode driver with you're own WriteProcessMemory functions like CE does.

[atom0s]

Rewrite the bytes yourself as the DLL would. Alloc space for your new function, write the bytes, and have the API jump to your 'codecave' instead.