Bypass Script

loadlibrary(BlackCipher\BlackCall.aes)
loadlibrary(TobyBypass.dll)
alloc(SonOfTheBlack,64)

BlackCall.aes+2289F:
jmp SonOfTheBlack
nop
nop
nop

SonOfTheBlack:
call CreateProcessW
add esp,04
jmp BlackCall.aes+228AF