GGbypass Beta SEA Tutorial
1 - Remove the files from the GameGuard folder ...
D: \ BlackShot_SEA \ BlackShot \ system \ GameGuard
GameGuard.des
GameGuard.ver
GameMon.des
GameMon64.des
Exclude ControlSetting_ files
comments:
Remove GameGuard.des from the system folder
2 - Enter your game, on a fake account, avoid ban account !!!
As soon as you enter it will generate the error >>> NPGAMEMON_ERROR: 153
........................................ "[nProtect GameGuard Error Report]" .. ..................................
We will open the Cheat Engine and put the process in BlackShot.exe> Open
> Scroll to Memory View
> Go to view
> Go to Referenced String and click yes, check the Include system module
3 - Let's look at Referenced String:
>>> NPG we will find the >>> NPGAMEMON_ERROR: // From a double Click on their respective Address: 0042E151
Je // aleterar to jmp, double-click and change and OK
Push
Read
Mov
Call
Mov
Push
Read
Push
Mov
Call
Or
Read
Call
Xor
Jmp
From a Go To Address, copy Address 0042E14F and OK.
>>> Add Address Manualy
After adding our Address Address changed, still in the same location
Just scroll the scroll bar down ...
We will locate our base reference
>> In opcode and Comment:
Opcode: Comment
Cmp eax, 00000755 1877
Je // jmp >> E OK.
Push
Push
Xor
Mov
Call dword ptr [BlackShot.exe-> multiplay_sq.CBlackShotDataFile :: GetFileLocation
Mov
Push
We will change our "JE" to "JMP"
From a Go To Address, copy Address 0042E253 and OK.
>>> Add Address Manualy
After adding our Address Address changed, still in the same location
Just scroll the scroll bar up ...
We will locate our base reference
>> In opcode and Comment:
Je BlackShot.exe + 2E249 // jne
Xor
Jmp
Call
Cmp eax, 00000755 1877
Je
Push
Push
Xor
Mov
Call dword ptr [BlackShot.exe-> multiplay_sq.CBlackShotDataFile :: GetFileLocation
Mov
Push
...
We will change our "JE" to "JNE"
From a Go To Address, copy Address 0042E243 and OK.
>>> Add Address Manualy
4 - Let's look at Referenced String: GameExit
After finding a double click on the first Address on the right: 0055D414
Roll the scroll bar up a bit !!!
We will locate our base reference
>> In opcode and Comment:
Je BlackShot + 15D4FD // Here we will change "JE" to "JNE" Address: 0055D3BB
Dec
Je
Dec
Je
sub
Je
sub
Je
sub
Je
sub
Je BlackShot.exe + 5291A8 // Here we will change "JE" to "JNE" Address: 0055D3E9
Push
Read
Push
Push
Call
Add
Read
Push
Jmp
Call
Cmp
Push BlackShot.exe + 52919C ["GameExit"]
From a Go To Address, copy Address 0042E243 and OK.
>>> Add Address Manualy
Address: 0055D3BB Value: 20743439
>>> Add Address Manualy
Address: 0055D3E9 Value: 2370903413
Virus Scan
https://www.virusimmune.com.br/#/fe33...d46a702349e328
https://www.virustotal.com/pt/file/5...is/1503732349/
https://virusscan.jotti.org/pt-BR/fi...job/k3qc01s5hj
Crédits : Snow_FLAKES = GuilhermSoraz = CLAYTON = Anonymous
Last edited by DangeBlazer; 08-26-2017 at 01:27 AM.
Oh Thank you very much!!! I've been trying to find it but its so hard.. huhu. Thanks alot!
DangeBlazer (08-26-2017)
File clean, thread approved.
DangeBlazer (08-26-2017)
@Minerva Patch Close Post Thanks
Tangerina123 (05-22-2023)