-
NP error hack
CRC efficacy data of NP in the game, I want a way to crack the NP error analysis to'' GameGuard reset error'' I would like to direct blasting everyone to help me find
Code:
0042A160 - 55 - push ebp
0042A161 - 8B EC - mov ebp,esp
0042A163 - 83 E4 F8 - and esp,F8
0042A166 - 81 EC B80F0000 - sub esp,00000FB8
0042A16C - A1 007BA000 - mov eax,[00A07B00] : [ECDE977B]
0042A171 - 33 C5 - xor eax,ebp
0042A173 - 89 84 24 B40F0000 - mov [esp+00000FB4],eax
0042A17A - 8B 45 08 - mov eax,[ebp+08]
0042A17D - 56 - push esi
0042A17E - 8B 75 0C - mov esi,[ebp+0C]
0042A181 - 05 17FCFFFF - add eax,FFFFFC17
0042A186 - 83 F8 12 - cmp eax,12
0042A189 - 57 - push edi
0042A18A - 0F87 A3000000 - ja 0042A233
0042A190 - 0FB6 80 70A24200 - movzx eax,byte ptr [eax+0042A270]
0042A197 - FF 24 85 50A24200 - jmp dword ptr [eax*4+0042A250]
0042A19E - 56 - push esi
0042A19F - 68 E8129300 - push 009312E8 : [""GameGuard reset error : %lu""]
0042A1A4 - 68 70DA2C01 - push 012CDA70 : [00000000]
0042A1A9 - FF 15 24169200 - call dword ptr [00921624] : [MSVCR71.swprintf]
0042A1AF - 83 C4 0C - add esp,0C
0042A1B2 - EB 21 - jmp 0042A1D5
0042A1B4 - 68 BC129300 - push 009312BC : [""Speed hack is found.""]
0042A1B9 - EB 0C - jmp 0042A1C7
0042A1BB - 68 94129300 - push 00931294 : [""Game hack is found.""]
0042A1C0 - EB 05 - jmp 0042A1C7
0042A1C2 - 68 38129300 - push 00931238 : [""Either Game or GameGuard has been modulated.""]
0042A1C7 - 68 70DA2C01 - push 012CDA70 : [00000000]
0042A1CC - FF 15 24169200 - call dword ptr [00921624] : [MSVCR71.swprintf]
0042A1D2 - 83 C4 08 - add esp,08
0042A1D5 - C7 05 F01FA200 01000000 - mov [00A21FF0],00000001
0042A1DF - C7 05 98E3A100 90010000 - mov [00A1E398],00000190
0042A1E9 - 33 C0 - xor eax,eax
0042A1EB - 5F - pop edi
0042A1EC - 5E - pop esi
0042A1ED - 8B 8C 24 B40F0000 - mov ecx,[esp+00000FB4]
0042A1F4 - 33 CD - xor ecx,ebp
0042A1F6 - E8 725B4E00 - call 0090FD6D
0042A1FB - 8B E5 - mov esp,ebp
0042A1FD - 5D - pop ebp
0042A1FE - C2 0800 - ret 0008
0042A201 - 8D 4C 24 08 - lea ecx,[esp+08]
0042A205 - E8 E6D6FFFF - call 004278F0
0042A20A - 8B 4E 04 - mov ecx,[esi+04]
0042A20D - 89 4C 24 14 - mov [esp+14],ecx
0042A211 - 83 C6 08 - add esi,08
0042A214 - B9 E8030000 - mov ecx,000003E8
0042A219 - 8D 7C 24 18 - lea edi,[esp+18]
0042A21D - 68 B00F0000 - push 00000FB0
0042A222 - 8D 54 24 0C - lea edx,[esp+0C]
0042A226 - F3 A5 - repe movsd
0042A228 - 52 - push edx
0042A229 - B9 F0A56401 - mov ecx,0164A5F0 : [00995BF4]
0042A22E - E8 FD3A3800 - call 007ADD30
0042A233 - 8B 8C 24 BC0F0000 - mov ecx,[esp+00000FBC]
0042A23A - 5F - pop edi
0042A23B - 33 CD - xor ecx,ebp
0042A23D - B8 01000000 - mov eax,00000001
0042A242 - 5E - pop esi
0042A243 - E8 255B4E00 - call 0090FD6D
0042A248 - 8B E5 - mov esp,ebp
0042A24A - 5D - pop ebp
0042A24B - C2 0800 - ret 0008
0042A24E - 8B FF - mov edi,edi
0042A250 - D5 A1 - aad A1
0042A252 - 42 - inc edx
0042A253 - 00 B4 A1 4200BBA1 - add [ecx+*4-5E44FFBE],dh
0042A25A - 42 - inc edx
0042A25B - 00 9E A14200C2 - add [esi-3DFFBD5F],bl
0042A261 - A1 420033A2 - mov eax,[A2330042]
0042A266 - 42 - inc edx
0042A267 - 00 01 - add [ecx],al
0042A269 - A2 420033A2 - mov byte ptr [A2330042],al
0042A26E - 42 - inc edx
0042A26F - 00 00 - add [eax],al
0042A271 - 00 07 - add [edi],al
0042A273 - 07 - pop es
0042A274 - 07 - pop es
0042A275 - 07 - pop es
0042A276 - 07 - pop es
0042A277 - 07 - pop es
0042A278 - 07 - pop es
0042A279 - 07 - pop es
0042A27A - 01 02 - add [edx],eax
0042A27C - 02 03 - add al,[ebx]
0042A27E - 04 07 - add al,07
0042A280 - 07 - pop es
0042A281 - 05 06CCCCCC - add eax,CCCCCC06
0042A286 - CC - int 3
0042A287 - CC - int 3
0042A288 - CC - int 3
0042A289 - CC - int 3
0042A28A - CC - int 3
0042A28B - CC - int 3
0042A28C - CC - int 3
0042A28D - CC - int 3
0042A28E - CC - int 3
0042A28F - CC - int 3
0042A290 - 81 EC 04010000 - sub esp,00000104
0042A296 - A1 007BA000 - mov eax,[00A07B00] : [ECDE977B]
0042A29B - 33 C4 - xor eax,esp
0042A29D - 89 84 24 00010000 - mov [esp+00000100],eax
0042A2A4 - 8B 84 24 0C010000 - mov eax,[esp+0000010C]
0042A2AB - 83 C0 BA - add eax,BA
0042A2AE - 3D CB000000 - cmp eax,000000CB
0042A2B3 - 56 - push esi
0042A2B4 - 8B B4 24 0C010000 - mov esi,[esp+0000010C]
0042A2BB - 0F87 26010000 - ja 0042A3E7
0042A2C1 - 0FB6 80 14A44200 - movzx eax,byte ptr [eax+0042A414]
0042A2C8 - FF 24 85 04A44200 - jmp dword ptr [eax*4+0042A404]
0042A2CF - 8D 4C 24 04 - lea ecx,[esp+04]
0042A2D3 - 68 48139300 - push 00931348 : [""http://billcash.sbs.co.kr/cashFrameWin.asp?cashinfo=07-1-00&...""]
0042A2D8 - 51 - push ecx
0042A2D9 - 89 35 58DA2C01 - mov [012CDA58],esi
0042A2DF - FF 15 507CA000 - call dword ptr [00A07C50]
0042A2E5 - A1 00D82C01 - mov eax,[012CD800] : [003FD910]
0042A2EA - 8B 50 04 - mov edx,[eax+04]
0042A2ED - 8B 80 7C010000 - mov eax,[eax+0000017C]
0042A2F3 - 83 C4 08 - add esp,08
0042A2F6 - 6A 00 - push 00
0042A2F8 - 52 - push edx
0042A2F9 - 6A 00 - push 00
0042A2FB - 50 - push eax
0042A2FC - 68 C8010000 - push 000001C8
0042A301 - 68 DD010000 - push 000001DD
0042A306 - 6A 64 - push 64
0042A308 - 6A 64 - push 64
0042A30A - 68 00000088 - push 88000000
0042A30F - 8D 4C 24 28 - lea ecx,[esp+28]
0042A313 - 51 - push ecx
0042A314 - 68 30139300 - push 00931330 : [""WebCtrl32""]
0042A319 - 6A 00 - push 00
0042A31B - FF 15 E47BA000 - call dword ptr [00A07BE4]
0042A321 - 8B 15 00D82C01 - mov edx,[012CD800] : [003FD910]
0042A327 - 8B 0D 58DA2C01 - mov ecx,[012CDA58] : [00000000]
0042A32D - 6A 00 - push 00
0042A32F - A3 5CDA2C01 - mov [012CDA5C],eax
0042A334 - 8B 42 04 - mov eax,[edx+04]
0042A337 - 8B 15 24C19D00 - mov edx,[009DC124] : [00000258]
0042A33D - 50 - push eax
0042A33E - A1 20C19D00 - mov eax,[009DC120] : [00000320]
0042A343 - 68 A6080000 - push 000008A6
0042A348 - 51 - push ecx
0042A349 - 6A 1E - push 1E
0042A34B - 6A 5A - push 5A
0042A34D - 83 C2 D8 - add edx,D8
0042A350 - 52 - push edx
0042A351 - 83 C0 9C - add eax,9C
0042A354 - 50 - push eax
0042A355 - 68 00000050 - push 50000000
0042A35A - 68 28139300 - push 00931328 : ["Close"]
0042A35F - 68 20139300 - push 00931320 : ["button"]
0042A364 - 6A 00 - push 00
0042A366 - FF 15 48189200 - call dword ptr [00921848] : [USER32.CreateWindowExA]
0042A36C - 8B 0D 24C19D00 - mov ecx,[009DC124] : [00000258]
0042A372 - 8B 15 20C19D00 - mov edx,[009DC120] : [00000320]
0042A378 - 6A 00 - push 00
0042A37A - 51 - push ecx
0042A37B - 52 - push edx
0042A37C - 6A 00 - push 00
0042A37E - 6A 00 - push 00
0042A380 - 56 - push esi
0042A381 - A3 C4084E01 - mov [014E08C4],eax
0042A386 - FF 15 44189200 - call dword ptr [00921844] : [USER32.MoveWindow]
0042A38C - A1 58DA2C01 - mov eax,[012CDA58] : [00000000]
0042A391 - 6A 05 - push 05
0042A393 - 50 - push eax
0042A394 - FF 15 40189200 - call dword ptr [00921840] : [USER32.ShowWindow]
0042A39A - 8B 0D 58DA2C01 - mov ecx,[012CDA58] : [00000000]
0042A3A0 - 6A 01 - push 01
0042A3A2 - 6A 00 - push 00
0042A3A4 - 51 - push ecx
0042A3A5 - FF 15 3C189200 - call dword ptr [0092183C] : [USER32.InvalidateRect]
0042A3AB - B8 01000000 - mov eax,00000001
0042A3B0 - 5E - pop esi
0042A3B1 - 8B 8C 24 00010000 - mov ecx,[esp+00000100]
0042A3B8 - 33 CC - xor ecx,esp
0042A3BA - E8 AE594E00 - call 0090FD6D
0042A3BF - 81 C4 04010000 - add esp,00000104
0042A3C5 - C2 1000 - ret 0010
0042A3C8 - 66 81 BC 24 14010000 A608 - cmp word ptr [esp+00000114],08A6
0042A3D2 - 75 13 - jne 0042A3E7
0042A3D4 - 6A 01 - push 01
0042A3D6 - 56 - push esi
0042A3D7 - FF 15 38189200 - call dword ptr [00921838] : [USER32.EndDialog]
0042A3DD - C7 05 58DA2C01 00000000 - mov [012CDA58],00000000
0042A3E7 - 8B 8C 24 04010000 - mov ecx,[esp+00000104]
0042A3EE - 5E - pop esi
0042A3EF - 33 CC - xor ecx,esp
0042A3F1 - 33 C0 - xor eax,eax
0042A3F3 - E8 75594E00 - call 0090FD6D
0042A3F8 - 81 C4 04010000 - add esp,00000104
0042A3FE - C2 1000 - ret 0010
0042A401 - 8D 49 00 - lea ecx,[ecx+00]
0042A404 - E7 A3 - out A3,eax
0042A406 - 42 - inc edx
0042A407 - 00 CF - add bh,cl
0042A409 - A2 4200C8A3 - mov byte ptr [A3C80042],al
0042A40E - 42 - inc edx
0042A40F - 00 E7 - add bh,ah
0042A411 - A3 42000000 - mov [00000042],eax
0042A416 - 03 03 - add eax,[ebx]
0045DB08 - 8D 4C 24 28 - lea ecx,[esp+28]
0045DB0C - 51 - push ecx
0045DB0D - FF D3 - call ebx
0045DB0F - 85 C0 - test eax,eax
0045DB11 - 74 76 - je 0045DB89
0045DB13 - 6A 00 - push 00
0045DB15 - 6A 00 - push 00
0045DB17 - 6A 00 - push 00
0045DB19 - 8D 54 24 24 - lea edx,[esp+24]
0045DB1D - 52 - push edx
0045DB1E - FF 15 087CA000 - call dword ptr [00A07C08] : [USER32.GetMessageW]
0045DB24 - 85 C0 - test eax,eax
0045DB26 - 0F84 60010000 - je 0045DC8C
0045DB2C - 8D 44 24 18 - lea eax,[esp+18]
0045DB30 - 50 - push eax
0045DB31 - FF D6 - call esi
0045DB33 - 8D 4C 24 18 - lea ecx,[esp+18]
0045DB37 - 51 - push ecx
0045DB38 - FF D7 - call edi
0045DB3A - 81 7C 24 1C 01010000 - cmp [esp+1C],00000101
0045DB42 - 75 4E - jne 0045DB92
0045DB44 - 83 7C 24 20 2C - cmp dword ptr [esp+20],2C
0045DB49 - 75 47 - jne 0045DB92
0045DB4B - A1 80F1A100 - mov eax,[00A1F180] : [00000000]
0045DB50 - 85 C0 - test eax,eax
0045DB52 - 76 1F - jna 0045DB73
0045DB54 - 68 40060000 - push 00000640
0045DB59 - 6A 00 - push 00
0045DB5B - 68 FF000000 - push 000000FF
0045DB60 - 6A 00 - push 00
0045DB62 - 68 6C2C9400 - push 00942C6C : [""Please try again later.""]
0045DB67 - B9 70258901 - mov ecx,01892570 : [00000000]
0045DB6C - E8 7FCB3800 - call 007EA6F0
0045DB71 - EB 1F - jmp 0045DB92
0045DB73 - C7 05 7CF1A100 01000000 - mov [00A1F17C],00000001
0045DB7D - C7 05 80F1A100 90010000 - mov [00A1F180],00000190
0045DB87 - EB 09 - jmp 0045DB92
0045DB89 - E8 42E4FDFF - call 0043BFD0
0045DB8E - 85 C0 - test eax,eax
0045DB90 - 74 0D - je 0045DB9F
0045DB92 - A1 F01FA200 - mov eax,[00A21FF0] : [00000000]
0045DB97 - 85 C0 - test eax,eax
0045DB99 - 0F84 61FFFFFF - je 0045DB00
0045DB9F - B9 08764E01 - mov ecx,014E7608 : [00000000]
0045DBA4 - E8 67870D00 - call 00536310
0045DBA9 - 8B 0D E0A02C01 - mov ecx,[012CA0E0] : [0B62A3D8]
0045DBAF - E8 AC86FAFF - call 00406260
0045DBB4 - 8B 0D E0A02C01 - mov ecx,[012CA0E0] : [0B62A3D8]
0045DBBA - 85 C9 - test ecx,ecx
0045DBBC - 74 06 - je 0045DBC4
0045DBBE - 8B 11 - mov edx,[ecx]
0045DBC0 - 6A 01 - push 01
0045DBC2 - FF 12 - call dword ptr [edx]
0045DBC4 - B9 F0A56401 - mov ecx,0164A5F0 : [00995BF4]
0045DBC9 - E8 A2BB3400 - call 007A9770
0045DBCE - B9 F8A67401 - mov ecx,0174A6F8 : [009A1100]
0045DBD3 - E8 B8423600 - call 007C1E90
0045DBD8 - E8 5331FFFF - call 00450D30
0045DBDD - A1 BCA02C01 - mov eax,[012CA0BC] : [00005278]
0045DBE2 - 85 C0 - test eax,eax
0045DBE4 - 8B 35 E8119200 - mov esi,[009211E8] : [kernel32.CloseHandle]
0045DBEA - 74 03 - je 0045DBEF
0045DBEC - 50 - push eax
0045DBED - FF D6 - call esi
0045DBEF - A1 C0A02C01 - mov eax,[012CA0C0] : [0000527C]
0045DBF4 - 85 C0 - test eax,eax
0045DBF6 - 74 03 - je 0045DBFB
0045DBF8 - 50 - push eax
0045DBF9 - FF D6 - call esi
0045DBFB - A0 8AE5A100 - mov ax,[00A1E58A] : [0001]
0045DC00 - 84 C0 - test al,al
0045DC02 - 75 07 - jne 0045DC0B
0045DC04 - 8B 44 24 0C - mov eax,[esp+0C]
0045DC08 - 50 - push eax
0045DC09 - FF D6 - call esi
0045DC0B - 8B 0D 1C12A200 - mov ecx,[00A2121C] : [0E329660]
0045DC11 - 51 - push ecx
0045DC12 - E8 C9793200 - call 007855E0
0045DC17 - 83 C4 04 - add esp,04
0045DC1A - 66 83 3D 70DA2C01 00 - cmp word ptr [012CDA70],00
0045DC22 - 74 1F - je 0045DC43
0045DC24 - 8B 15 00D82C01 - mov edx,[012CD800] : [003FD910]
0045DC2A - 8B 82 7C010000 - mov eax,[edx+0000017C]
0045DC30 - 6A 00 - push 00
0045DC32 - 68 442C9400 - push 00942C44 : [""nProtect GameGuard""]
0045DC37 - 68 70DA2C01 - push 012CDA70 : [00000000]
0045DC3C - 50 - push eax
0045DC3D - FF 15 247CA000 - call dword ptr [00A07C24]
0045DC43 - A1 C4A02C01 - mov eax,[012CA0C4] : [003FC158]
0045DC48 - 85 C0 - test eax,eax
0045DC4A - 8B F0 - mov esi,eax
0045DC4C - 74 0E - je 0045DC5C
0045DC4E - E8 2D214A00 - call 008FFD80
0045DC53 - 56 - push esi
0045DC54 - E8 DD204B00 - call 0090FD36 : [->MSVCR71.operator delete]
0045DC59 - 83 C4 04 - add esp,04
0045DC5C - 8B 0D 00D82C01 - mov ecx,[012CD800] : [003FD910]
0045DC62 - 85 C9 - test ecx,ecx
0045DC64 - 74 06 - je 0045DC6C
0045DC66 - 8B 11 - mov edx,[ecx]
0045DC68 - 6A 01 - push 01
0045DC6A - FF 12 - call dword ptr [edx]
0045DC6C - A0 15BA9D00 - mov ax,[009DBA15] : [FF01]
0045DC71 - 84 C0 - test al,al
0045DC73 - C7 05 00D82C01 00000000 - mov [012CD800],00000000
0045DC7D - 74 05 - je 0045DC84
0045DC7F - E8 7C0DFBFF - call 0040EA00
0045DC84 - 6A 01 - push 01
0045DC86 - FF 15 80199200 - call dword ptr [00921980] : [winmm.timeEndPeriod]
0045DC8C - 8B 74 24 20 - mov esi,[esp+20]
0045DC90 - 8D 4C 24 3C - lea ecx,[esp+3C]
0045DC94 - E8 77FEFAFF - call 0040DB10
0045DC99 - 8D 8C 24 90020000 - lea ecx,[esp+00000290]
0045DCA0 - E8 0B143700 - call 007CF0B0 : [->ws2_32.WSACleanup]
0045DCA5 - 8D 8C 24 80000000 - lea ecx,[esp+00000080]
0045DCAC - E8 DF6D2600 - call 006C4A90
0045DCB1 - 8B 8C 24 BC0D0000 - mov ecx,[esp+00000DBC]
0045DCB8 - 5F - pop edi
0045DCB9 - 8B C6 - mov eax,esi
0045DCBB - 5E - pop esi
0045DCBC - 33 CD - xor ecx,ebp
0045DCBE - 5B - pop ebx
0045DCBF - E8 A9204B00 - call 0090FD6D
0045DCC4 - 8B E5 - mov esp,ebp
0045DCC6 - 5D - pop ebp
0045DCC7 - C2 1000 - ret 0010
What good suggestions please tell me
-
-
GG?
Stable until tomorrow？
---------- Post added at 08:28 PM ---------- Previous post was at 08:22 PM ----------
I want to do a long-term solution, but before that the first face of NP GG can be stable for a long time, I will change the program！
-
I can see the layout so that the client can open without no GG though only briefly
