[Release] Xtrap Bypass

[Only registered and activated users can see links. Click Here To Register...]

Hay Epvp,

today I want to release my bypass created for a game labeled S4 League. This is not a complete Bypass but with this bypass you can use Cheat Engine without getting a HTD ;)

_______

Required

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

_________

How to use

- Download the rar file and extract it
- Start the "Injector.exe" with admin rights
- Now you should see something like this:

[Only registered and activated users can see links. Click Here To Register...]

- Start S4 League now
- After S4 exists, the message is hidden, now you should see something like this:

[Only registered and activated users can see links. Click Here To Register...]

- Klick okay and enjoy it ;) You can use now Cheat Engine or an other detected Memoryscanner

_______

Virustotal

[Only registered and activated users can see links. Click Here To Register...]

[Only registered and activated users can see links. Click Here To Register...]

_______________________________________

That's all. Regards Kiramox ;*

_____________________________________
If you're interested in my Injector Sourcode:

Spoiler

Code:

#RequireAdmin

#include <WinAPI.au3>

_SEDEBUG()

FileInstall("Bypass.dll", "Bypass.dll", 1)

SplashTextOn("Waiting", "Waiting for S4 League! / By Applecode", 300, 50, -1, -1)

$ProcessID = ProcessWait("S4Client.exe")
SplashOff()
Sleep(250)
_InjectDll($ProcessID, @ScriptDir & "\Bypass.dll")
Exit

Func _SEDEBUG()
	Local $tagLUIDANDATTRIB = "int64 Luid;dword Attributes"
	Local $count = 1
	Local $tagTOKENPRIVILEGES = "dword PrivilegeCount;byte LUIDandATTRIB[" & $count * 12 & "]"
	Local $call = DllCall("advapi32.dll", "int", "OpenProcessToken", "hwnd", _WinAPI_GetCurrentProcess(), "dword", 0x20, "int*", "")
	Local $hToken = $call[3]
	$call = DllCall("advapi32.dll", "int", "LookupPrivilegeValue", "str", "", "str", "SeDebugPrivilege", "int64*", "")
	Local $iLuid = $call[3]
	Local $TP = DllStructCreate($tagTOKENPRIVILEGES)
	Local $LUID = DllStructCreate($tagLUIDANDATTRIB, DllStructGetPtr($TP, "LUIDandATTRIB"))
	DllStructSetData($TP, "PrivilegeCount", $count)
	DllStructSetData($LUID, "Luid", $iLuid)
	DllStructSetData($LUID, "Attributes", $SE_PRIVILEGE_ENABLED)
	$call = DllCall("advapi32.dll", "int", "AdjustTokenPrivileges", "hwnd", $hToken, "int", 0, "ptr", DllStructGetPtr($TP), "dword", 0, "ptr", "", "ptr", "")
EndFunc

Func _InjectDll($ProcessId, $DllPath)
    $Kernel32 = DllOpen("kernel32.dll")
    $DLL_Path = DllStructCreate("char[255]")
    DllCall($Kernel32, "DWORD", "GetFullPathNameA", "str", $DllPath, "DWORD", 255, "ptr", DllStructGetPtr($DLL_Path), "int", 0)
    $hProcess = DllCall($Kernel32, "DWORD", "OpenProcess", "DWORD", 0x1F0FFF, "int", 0, "DWORD", $ProcessId)
    $hModule = DllCall($Kernel32, "DWORD", "GetModuleHandleA", "str", "kernel32.dll")
    $lpStartAddress = DllCall($Kernel32, "DWORD", "GetProcAddress", "DWORD", $hModule[0], "str", "LoadLibraryA")
    $lpParameter = DllCall($Kernel32, "DWORD", "VirtualAllocEx", "int", $hProcess[0], "int", 0, "ULONG_PTR", DllStructGetSize($DLL_Path), "DWORD", 0x3000, "int", 4)
    DllCall("kernel32.dll", "BOOL", "WriteProcessMemory", "int", $hProcess[0], "DWORD", $lpParameter[0], "str", DllStructGetData($DLL_Path, 1), "ULONG_PTR", DllStructGetSize($DLL_Path), "int", 0)
    $hThread = DllCall($Kernel32, "int", "CreateRemoteThread", "DWORD", $hProcess[0], "int", 0, "int", 0, "DWORD", $lpStartAddress[0], "DWORD", $lpParameter[0], "int", 0, "int", 0)
    DllCall($Kernel32, "BOOL", "CloseHandle", "DWORD", $hProcess[0])
    DllClose($Kernel32)
EndFunc