[Release] Dragon Nest (SEA): Game Protect Kit patch/remover

antifoo · 02/15/2012, 14:51

This patch disables GPK (anticheat rootkit) for Dragon Nest SEA (Cherry Credits client).
It works by replacing the Game Protect Kit DLL.

I wrote it and thought I'd share it in case anyone is interested.

Advantages over game executable patch:
Game .exe does not need to be repatched after updates.

(GPK can be disabled easily by patching the game executable, but I thought this is a nicer way and a longer term solution. Seems this DLL doesn't get updated so often.)

Usage:

Make a backup of your GPKitClt.dll just in case.
Replace the current GPKitClt.dll with my patched version.
Enjoy the game without GPK.

Note: You would probably also want to remove the GPK driver. This patch only prevents it from being used.

Code:

File: GPKitClt.dll
Size: 3072 B
CRC-32: cc46e781
MD5: 44cfe63d51b766ae5d99bc4964f2040d
SHA-1: fd36ac794bdffae0fc43bc28a288d20c42d24410

Code:

Detection ratio:	0 / 42
Analysis date:	 2012-02-15 13:34:24 UTC

Download:

Source:

Code:

#include "stdafx.h"

// Compile with /Zl
EXTERN_C BOOL WINAPI _DllMainCRTStartup(HINSTANCE hInstDll, DWORD fdwReason, LPVOID lpvReserved){
	return TRUE;
}

/*
dumpbin /exports "c:\Games\Dragon Nest\GPKitClt.dll"

File Type: DLL

  Section contains the following exports for GPKitClt.dll

    00000000 characteristics
    4B0E44B2 time date stamp Thu Nov 26 10:04:50 2009
        0.00 version
           1 ordinal base
           2 number of functions
           0 number of names

    ordinal hint RVA      name

          1      000010F0 [NONAME]
          2      00001020 [NONAME]

  Summary

        5000 .data
        4000 .data0
        C000 .data1
       A7000 .data2
       13000 .rdata
        1000 .reloc
       90000 .rsrc
       4A000 .text
*/


__declspec(dllexport) void API_init();
__declspec(dllexport) void API_unused();


void func3arg();
void func1arg();


typedef struct{
	void* link;
	void* func3a;
	void* unknown;
	void* func3b;
	void* func1;
} data;


data d;
data *dp;


__declspec(naked dllexport) void API_init()
{
	__asm{
		pop eax
		add esp, 8
		push eax
	}

	dp = &d;
	d.link = &(d.func3a);
	d.func3a = func3arg;
	d.func3b = func3arg;
	d.func1 = func1arg;

	//MessageBoxA(NULL, "API init", "GKP Patch", MB_OK);

	__asm{
		mov eax, dp
		retn
	}
}


__declspec(naked dllexport) void API_unused()
{
	__asm{
		pop eax
		//add esp, 12
		push eax
	}

	//MessageBoxA(NULL, "GPK patch: An unknown/unused GPK API function was called. This will probably cause an error.", "GKP Patch", MB_OK);

	__asm{
		mov eax, 1
		retn
	}
}



__declspec(naked) void func3arg()
{
	__asm{
		pop eax
		add esp, 12
		push eax
		mov eax, 1
		retn
	}
}


__declspec(naked) void func1arg()
{
	__asm{
		pop eax
		add esp, 4
		push eax
		mov eax, 1
		retn
	}
}

__________________________________________________
Offtopic:

This game still disables all hot keys while it is focused (like the winkey, global hotkeys set in other applications, etc).
Any tips on how to disable that? I'd like to control my music player while playing the game. :P

//;

zainxion · 02/15/2012, 17:08

hm.. can you explain it literally of use of this app.

antifoo · 02/15/2012, 17:50

Quote:

Originally Posted by zainxion

hm.. can you explain it literally of use of this app.

Not sure what your question is, but if you're asking what this does, then:
It completely disables "Game Protect Kit" (GPK). Which is some anticheat "protection" that Dragon Nest uses. With this patch GPK is never even loaded.

iamazril · 02/16/2012, 20:38

thanks, but do u have any idea how to hack? im using cheat engine and it didnt work.

d33k40 · 02/26/2012, 01:13

thanks for the patch, i use for the game Eligium, now i can explore posibilities

Overflow · 02/29/2012, 21:20

Working fantastic i pmed you about it, we need to chat

if ya want thanks

overflow

sadly server disconnect me after 10sec

joshua119 · 03/01/2012, 14:59

sir can u give a back up on this kind of file...
i think ive deleted my original >.<

antifoo · 03/02/2012, 13:36

Quote:

Originally Posted by d33k40

thanks for the patch, i use for the game Eligium, now i can explore posibilities

It works for other games too? That's great. :-)

Quote:

Originally Posted by Overflow

Working fantastic i pmed you about it, we need to chat if ya want thanks

I didn't get any PMs.

Quote:

Originally Posted by joshua119

sir can u give a back up on this kind of file...
i think ive deleted my original >.<

Also made a patcher with GUI @

:

zinser20 · 03/20/2012, 05:34

is this still working?

antifoo · 03/22/2012, 04:14

Quote:

Originally Posted by zinser20

is this still working?

Yes, works with new DN SEA version 57 (both the DLL and the patcher).

jhaymharvin · 03/22/2012, 08:08

any gold hack for DN SEA?

buen08 · 03/23/2012, 08:53

is this tue? not a keylogger? and please can post a video of working dual client..

antifoo · 03/23/2012, 09:27

Quote:

Originally Posted by buen08

is this tue? not a keylogger?

Does it matter what I answer to this?

If you want to be sure, run the patcher in a VM/sandbox and path the EXE. Then diff the pathed and the original EXE and see what is changed (in a disassembler preferably). It only does minor changes (couple of bytes in a couple of places). And if you are happy with the changes, use the patched EXE.

The GPK DLL is replaced completely with a dummy that does nothing. Source code for it is available here so you can review the code and compile the DLL your self to make sure.

Quote:

Originally Posted by buen08

and please can post a video of working dual client..

No. Feel free to make one your self.

Sandboxie is a good sandbox:

legendaryhaxor · 03/23/2012, 16:39

Sorry to ask but, Is there a working No Cool Down Skill Hack on DN SEA? It seems I can't find any :/ and Btw, I tested it and it works perfectly. Now I just need to find a working source code.

antifoo · 03/24/2012, 08:30

Quote:

Originally Posted by legendaryhaxor

Sorry to ask but, Is there a working No Cool Down Skill Hack on DN SEA? It seems I can't find any :/ and Btw, I tested it and it works perfectly. Now I just need to find a working source code.

Depends on what you mean with "working". You can disable the client side cool down check, but you only see the skills on your client, nothing happens server side. It didn't really work with any skill I have tired, not even dash (you see the running animation, but the speed you move at is exactly the same as before).

So my answer: no, there is no working no cool down hack because it's all checked server side (afaik).