Quote:
Originally Posted by K1ramoX
nop, there's a cmp like cmp eax, 02... if eax is 2 the client gets hidden but if its 1 it doesnt hide the client, you have to go to the adress of eax and change it to dword 1
|
well yes thts for hiding the client u can find it if u trace the func (there is other ways to get it) but i'm right this will call the (func i said) and the func load xcrap drivers which hide s4 so u can just detour the func instead of looking for this addy
P.S: i sent u dat addy in a PM just to prouve tht its not hard to get it but didn't cc it cause i don't need
Quote:
Originally Posted by Neeya Nanaa
No this is only the check if XTrap should load the driver or not.
|
^^