GGBypass / TotalItem / Abnormal Tutorial 2014

I made ​​this tutorial for a long time now, have not posted at the time by choice, but now I see more trouble. 
initially be a video, but did not like how the final video quality prints even decided to leave. 

This tutorial will show how to get the adress and ggbypass totalitem, so you do not teram problems updating it. Of course 
it depends on the game updates and depends on you knowing analyze changes. I use almost the same method 
for 7 months and I believe that can always be done so .. I see no basis to post only the adress .. even with 
. useful, it definitely does not teach anything to anybody 



Below Content Thread: 

1 - Starting the game normally without GameGuard (Error Bypass Launcher). 
2 - Bypassing the verification of GameMon (GameMon Error Check Bypass). 
3 - Dodging the Abnormal Action (Action Abnormal Error Bypass) error. 
4 - TotalItem "Bypass" (being born by a different name or different location). 
5 - Entering the server with TotalItem edited (Bypass File Error). 
6 - There will be taught to beat the DC of the game until I found out why not and do not intend 
to try to do it now .. dealing as a bypass hack any _.. 



What is needed to create your Bypass: 

- Cheat Engine, OllyDbg or other program of its kind to get the adress: Yes 
- Advanced knowledge about Cheat Engine / OllyDbg: No. 
- Advanced knowledge of programming / Assembly: No 
- Basic knowledge and thinking Hacker: Absolutely.

Remember that to run the game with. Exe edited by OllyDbg you need to bypass the error that occurs in char or find a way to use it edited .. So, the tutorial will be using only the Cheat Engine Process Hacker also the only to suspend the process. 


Tutorial - Error Bypass Launcher 


1.1 Open your BlackShot suspend the process by Process Hacker. 



1.2 then open your Cheat Engine select the process of BlackShot, open the memory view at the top click View -> Referenced Strings. 



1.3 Finished scan, logic would search for "Launcher Error" but as the error in the current game is hidden will leave a print that will serve as a reference. 



1.4 Search and then click "DisplaySplash .." then the adress that appears in the window next door. You must be open with the memory view to view. 




1.5 For the memory view, at the top we see the assembly structure. The "Launcher Error" is a bit above the "DisplaySplash .." 
Then scroll upwards until you find a conditional jump JE. that's where we make a JMP (unconditional). Click on the edit for JE to JMP. 



1.6 To get the adress after edited, click on the button with direct adress -> Go to Adress copy, go to cheat engine> Add Adress Manually. 



So we got the expected result, "Launcher Error "cheated, below the adress and value (4bytes) for those who can not: 


Adr / Value (4bytes) 

0040B4BC / 905 918 699 


Remembering you should terminate the process or delete the GameGuard GameGuard.des BlackShot file / folder system to function.



Tutorial - GameMon Check Error Bypass 


2.1 Resuman the process of BlackShot with the "Launcher Error" cheated (JMP) go up in char. Close the Cheat Engine open again, again look for 
referenceds strings (strings reference) locate and click on CheckNPGameMon fail then 610 in the adress of the window beside. 




2.2 We will see assembly structure in memory view. We can do in different ways. In the print will be showing two possibilities 
First editing for JE -> JNE or changing mov eax, 00000262 to -.> mov eax, 00000755 



2.3 Follow the same procedure as "Launcher Error" to get the adress and value. If you prefer or find it easier to get the adress 
006102EE (mov eax, 00000755) go on cheat engine -> Add Adress Manually -> Browse this memory region .. 
Edit the bytes 62 to 02 -> 55 or 07 simplestemente edit the value of the adress Next -> 006102EF to -.> 1877 (4bytes) 



Adr / Value (4bytes) 

006102EF / 1877 

Using JNE 

006102B4 / 1583286901 




Tutorial - Error Abnormal Action Bypass 

3.1 yet with BlackShot open look in referenceds strings again, now by "GameExit" Click the following string and 
adress side of the window. In memory view scroll up until you find the following structure: 



3.2 Will we see a JE that must be edited to JNE. Done that save the edited adress and the value following the procedure 1.6. 



3.3 For those who do not get the adress and the value will thus be: 

Adr / Value (4bytes) 

004D3816 / 21,464,335 





Tutorial - TotalItem Bypass 


4.1 Always Referenceds Strings and click on search -> / CSV / TotalItem.bsv 



4.2 In memory view you will see the original site where it is loaded -> / CSV / TotalItem.bsv 



4.3 No secret because BlackShot only checks the site and the original file and not the file which is actually loaded. 
then you will only need to change the strings for it to be loaded by another file, eg / CSV / TotalHack.bsv 
So will load your TotalHack.bsv, remembering that you need to leave the original in the original folder TotalItem.bsv . 



4.4 You may edit to the name you want and the location that best suits their needs, I usually only edit one letter then only 
need to edit one byte in memory and ready (;. difficulties for those who have the following adress where it starts to load 

00814A78 




Tutorial - File Error bypas 

5.1 To enter he edited the server can do in 2 ways, by editing the string back to the original file -> / CSV / TotalItem.bsv 
or bypassing the server error that will show you how to locate -> TotalItem BSV Invalid Version, click on the string and the adress on the side. 



5.2 You will see the following error structure with well in evidence. 



5.3 Let us again make a JE JMP, so the error is bypassed. 



5.4 All done. Who does not get the adress and get the value correctly follows 

Adr / Value (4bytes) 

004C60D4 / 3429382123 



was it personal .. I will not go into detail about editing files TotalItem. nif or how to spend it all to 
some programming language, it I'll leave it up to you because I know they are more than capable. 
Besides that there will be very content about where you can search. 

Obs: The old Nutella always been used in dc is giving BS because updates made ​​in 
chars, so it is necessary for you to edit the new bodys.nif.