First of all:
Fuck you for shoving this in general's face.
Second of all, niggah it totally depends on how it was protected. With that said though, you can prolly just place a detour on writeprocessmemory, because I am lazy, I'd probably just do a kernel-level breakpoint to avoid any of the user-land protection methods used.