i see. i try...
but for xtrap updater, i run and auto download all file.
where to put that file?
You need to put those files on your own xtrap update server..
btw.. modifying xtrap update server url need some guts..
There are 2 methods to modify xtrap update url
1. Brute-force the strings after cabalmain finished generate. x30 did it.. (Easiest way I guess)
2. Manual edit the encrypted strings one by one. I did it my self.. (The hardest way I bet)
I cannot tell you how to brute force the string because I don't have Idea how to do it.. lol obvious!
I can only tell the way how I edit manually the strings..
You need ollydbg and hex editor to do this..
Open cabalmain.exe v374 on hex editor find string 0F7D04245246E41FB1670C4E95 this is
You must be registered to see links
.
after 0F7D04245246E41FB1670C4E95 edit it with hex and put 0 until the end.
save it and be sure u have backup..
Next:
Delete XPva03.dll and XTrap folder then open the edited cabalmain.exe with the start param default husky and put breakpoint to 00A0912B
press F9 on ollydbg it will stop on the 00A0912B and you will see "http://xtrap."
Let's start the input value..
Open the edited cabalmain on hex editor go the strings where u deleted some of it.. after 95 put a 5F then save.
re-open edited main on olly press F9 and you will see in the breakpoint it just added letter c.
Just repeat the process until you complete your domain