help with ollydbg bypass GG

[ongjx]

Hi,
recently Ive been focusing on using Ollydbg to try and bypass blackshot GG so that i can search for memory address etc.
But i need some help on how to actually do so.
firstly, Do i need to dump/ unpack blackshot to get the addresses. If i need to, can someone teach me how to dump blackshot using olly? I already have the plugins downloaded!
secondly, everytime i open Blackshot using Olly, i always get a failure sort of message. how do i solve it? As shown in attatchment below

Thirdly, I really hope someone can guide me along on how to bypass Blackshot.

Thanks!!

[Ch40zz-C0d3r]

They are using an old version of themida, get some olly plugins and simply run the game in olly.
Wait for GG splash to popup and pause the process, take a look at callstack and nop the init clal of gameguard.
Manipulate the JE to JMP so no error pops up and then fix the 5 switch-cases which check gameguard state when you enter the loading screen.
It will run for 3 minutes, then the server will kick you for wrong heartbeat

[ongjx]

@Ch40zz-C0d3r , Ive tried downloading different types of debuggers but everytime i load blackshot through the debugger and hit F9, it tells me that the programme has terminated and the GG splash dont appear. Any idea how to solve this problem?

[COD3RIN]

@Ch40zz-C0d3r , Ive tried downloading different types of debuggers but everytime i load blackshot through the debugger and hit F9, it tells me that the programme has terminated and the GG splash dont appear. Any idea how to solve this problem?

Try to use undetected olly dbg....

[ongjx]

Try to use undetected olly dbg....

not able to work.. ive downloaded many different modifications of olly searched and download undetected olly but i always get the termination.

[COD3RIN]

not able to work.. ive downloaded many different modifications of olly searched and download undetected olly but i always get the termination.

Use IDA pro instead of olly dbg

[Ch40zz-C0d3r]

@Ch40zz-C0d3r , Ive tried downloading different types of debuggers but everytime i load blackshot through the debugger and hit F9, it tells me that the programme has terminated and the GG splash dont appear. Any idea how to solve this problem?

Hm works fine for me, you need following plugins:
- Advanced Olly
- OllyDump (only for dumping it later)
- OllyWow64
- Stealth64

If it still wont work pause the game with a process manager and dump it with PE Tools and look at it on IDA

[ongjx]

Hm works fine for me, you need following plugins:
- Advanced Olly
- OllyDump (only for dumping it later)
- OllyWow64
- Stealth64

If it still wont work pause the game with a process manager and dump it with PE Tools and look at it on IDA

May i know which version of olly you are using? Cos everytime i load up BlackShot, i only am able to load up the module but GG doesnt appear.. Or do i have to manually start BS, then suspend it with process hacker and then attatch it to Olly?

- - - Updated - - -

P/S, ive created a video showing the problems that im facing in OLLY. Please have a look and advice me on what i should do! Thanks

https:/tu.be/Q-D3IT6447s

[Ch40zz-C0d3r]

lol dude I suggest you to ignore ALL exceptions in ollydbg.
A packer creates LOADS of exceptions. If you have problems setting up ollydbg take a look at lena151 reversing tutorials.
They are pretty old but expained very well

[ongjx]

@Ch40zz-C0d3r, Ive been through some of Lena's tutorial on rev engineering but i dont really understand how to apply it on Blackshot. Is it possible for you to guide me with some screenshots? ill be really grateful for that!

- - - Updated - - -
@COD3RIN , is the video that u posted to dump/bypass blackshot still working? Cos i have tried that method but even with plugins installed, it keeps crashing on the 2nd time i press Shift+F9. Any advice?

[Ch40zz-C0d3r]

@Ch40zz-C0d3r, Ive been through some of Lena's tutorial on rev engineering but i dont really understand how to apply it on Blackshot. Is it possible for you to guide me with some screenshots? ill be really grateful for that!

- - - Updated - - -
@COD3RIN , is the video that u posted to dump/bypass blackshot still working? Cos i have tried that method but even with plugins installed, it keeps crashing on the 2nd time i press Shift+F9. Any advice?

No sorry I dont have time for that.
Keep learning, you will get it working

[COD3RIN]

@Ch40zz-C0d3r, Ive been through some of Lena's tutorial on rev engineering but i dont really understand how to apply it on Blackshot. Is it possible for you to guide me with some screenshots? ill be really grateful for that!

- - - Updated - - -
@COD3RIN , is the video that u posted to dump/bypass blackshot still working? Cos i have tried that method but even with plugins installed, it keeps crashing on the 2nd time i press Shift+F9. Any advice?

I dont know if still working I never try that again

[[MPGH]Jim Morrison]

No response after two days, assuming solved.
/Closed