[Помогите!] Xtrap Bypass х32

[kazol12]

Парни на елите вышел байпасс но как им пользоваться?

[Ссылки могут видеть только зарегистрированные пользователи. ]

и код

//win xp
[ENABLE]
Process32First:
ret 000c
[DISABLE]
Process32First:
mov edi,edi
//
Code:
//win 7 32 bit
[ENABLE]
EnumProcesses+6:
jmp enumProcesses+2
[DISABLE]
EnumProcesses+6:
jmp PSAPI.EnumProcesses+D
//
Code:
//win 8 32 bit
[ENABLE]
K32EnumProcesses+6:
jmp K32EnumProcesses+2
[DISABLE]
K32EnumProcesses+6:
jmp Kernel32.K32EnumProcesses+D
//
Code:
///win 7 64 bit
[ENABLE]
////
"XTrapVa.dll"+1D0C2A:
add [ebx],al
pop eax
push esp
jb XTrapVa.dll+1D0C91
////
Kernel32.K32EnumProcesses:
ret 000c
push kernel32.K32EnumProcesses+63
call kernel32.WaitForMultipleObjects+1F
mov esi,00008000
mov [ebp-1C],esi
push esi
push 00
mov edi,[kernel32.dll+10BC8]
call edi
mov ebx,eax
mov [ebp-20],ebx
//je K32EnumProcesses
[DISABLE]
"XTrapVa.dll"+1D0C2A:
add ss:[ebx+59],dl
push ebx
////
Kernel32.K32EnumProcesses:
push 1c
push kernel32.K32EnumProcesses+63
call kernel32.WaitForMultipleObjects+1F
mov esi,00008000
mov [ebp-1C],esi
push esi
push 00
mov edi,[kernel32.dll+10BC8]
call edi
mov ebx,eax
mov [ebp-20],ebx
Code:
///win 8 64 bit
[ENABLE]
////
"XTrapVa.dll"+1D0C2A:
add [ebx],al
pop eax
push esp
jb XTrapVa.dll+1D0C91
////
Psapi.EnumProcesses:
ret 000c
push Psapi.EnumProcesses+63
call kernel32.WaitForMultipleObjects+1F
mov esi,00008000
mov [ebp-1C],esi
push esi
push 00
mov edi,[kernel32.dll+10BC8]
call edi
mov ebx,eax
mov [ebp-20],ebx
//je K32EnumProcesses
[DISABLE]
"XTrapVa.dll"+1D0C2A:
add ss:[ebx+59],dl
push ebx
////
Psapi.EnumProcesses:
push 1c
push Psapi.EnumProcesses+63
call kernel32.WaitForMultipleObjects+1F
mov esi,00008000
mov [ebp-1C],esi
push esi
push 00
mov edi,[kernel32.dll+10BC8]
call edi
mov ebx,eax
mov [ebp-20],ebx
Code:
//admin HGW_Kick
[ENABLE]
00CC3319:
nop
nop
nop
nop
nop
00CFA71F:
nop
nop
00CFA698:
nop
nop
00CFA68A:
nop
nop
00CFA698:
nop
nop
00CFA637:
nop
nop
00CFA645:
nop
nop
00CFA5CA:
nop
nop
nop
nop
nop
00CFA4AE:
nop
nop
nop
nop
nop
00CC33F9:
nop
nop
nop
nop
nop
00CFA74F:
nop
nop
00CFA75D:
nop
nop
00CFA645:
nop
nop
00CFA5F7:
nop
nop
nop
nop
nop
[DISABLE]
00CC3319:
call S4Client.exe+9CB710
00CFA71F:
jne S4Client.exe+8FA743
mov edx,[S4Client.exe+10A5350]
00CFA698:
je S4Client.exe+8FA6E8
mov [ebp-00002614],0000EA97
00CFA68A:
jne S4Client.exe+8FA6E8
mov eax,[ebp-00005A70]
00CFA698:
je S4Client.exe+8FA6E8
mov [ebp-00002614],0000EA97
00CFA637:
jmp S4Client.exe+8FA674
mov ecx,[ebp-00005A70]
00CFA645:
jne S4Client.exe+8FA674
push S4Client.exe+EDE9A4
00CFA5F7:
call S4Client.exe+8B42C0
00CFA5CA:
call S4Client.exe+889640
00CFA4AE:
call S4Client.exe+889100
00CC33F9:
call S4Client.exe+9CB710
00CFA74F:
jne S4Client.exe+8FA7B3
mov eax,[ebp-00005A70]
00CFA75D:
je S4Client.exe+8FA7B3
mov [ebp-00002628],0000EA97

Добавлено через 17 минут
А лучше сделайте туториал плс

[Карикатуро]

nop