My main probles is that I can't keep gameguard running, since it'll detect itself and not launch the game, and if I kill it totally I need to trick the game in thinking the gamemon still running. If you have any other tips I could use to bypass this I'll appreciate. Lets say the game runs A.dll, if I could create a dll, B.dll, with my code and that calls A.dll I could name B.dll as A.dll and the game would run it naturally.
#Known nprotect gameguard error process .dll#
dll that uses a precompiled dll as resource, if there is a way for doing so I could use the DLL - I know the game runs some specific dlls. dll - I could not find a way to create a. Removing the system handles over the bin file, so I can use a modified one after the game launchewr patches the bin - I could remove the handles from the bin file, however I failed modifying the bin with hex editor (guess I screwed up somewhere) please appoint if is possible for me to change the bin hex codes and sucessfully run the game. dll I found, so I can use them somehow to modify the running assembly code (which is easy if gamemon is not running) My best guess was trying to modify the DLL that closes the game, but I could not find any pratical ways of doing so, since I don't own their source code, just the compiled. I can't hex edit the game bin, since the launcher updates it before launching the game. bin in memory, since I can change the assembly code, but I can't do that with gameguard running, since it protects the game, and I have not enough time to change the code on the fly because the game closes after a few seconds. If it uses heartbeat I'll have to bypass this later. I guess the game isn't using a server heartbeat, since the game closes almost instantly when gamemon is dropped. Virtual machines are not a option, since I tried many bypasses and all of those failed. I cannot keep s (nprotect gameguard main process) running, because gamemon can't have multiple instances of itself running. So I already found the subroutine that checks if the gameguard is up, since only subroutine does this check, I can easily bypass this by changing o conditional jump in the assembly code,
#Known nprotect gameguard error process update#
Philippines to run and Im using OS New windows10 I tried to run the game but on the game ' Client has been terminated by Game Guard' or 'Error update Game Guard (Error Code: 114)' This thread is locked. Those 2 functions are usually used to check if a process is running. I have a problem with my installed game that requires nProtect Game Guard ELSWORD etc. A particular one evokes the WaitForSingleObject function and next it evoke the terminateProcess (from kernel32.dll) after analyzing a timeout.
bin with IDA Pro I managed to find a few subroutines that call the Kernell32.dll terminateProcess function.
My first thought was that gameguard was using a heartbeat, but heartbeats usually take a few minutes to kick one from the game. After a few seconds the game display a error message and closes itself. However, those DLL's close the nProtect Gameguard. dll files that allow me to open multiple launcher instances. I'm currently playing a MMO that doesn't allow me to run multiple clients at same machine.