[pjc50]

Next week: pthread_attach().

Over the coming months, OP will gradually discover all the techniques that cheat/anticheat people have used for decades.

[eqvinox]

> Next week: pthread_attach().

I think you meant PTRACE_ATTACH, there is no pthread_attach ;)

The newer process_vm_readv() is easier btw, for the implied function of reading from the target process' memory.