-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
5 changed files
with
111 additions
and
15 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,40 @@ | ||
# Denuvo | ||
|
||
Aside from obfuscating select game functions, generally Denuvo is | ||
surprisingly the least intrusive modern DRM solution as far as loading mods is concerned. | ||
|
||
All the pain is transferred to those making mods, be it waiting 30 hours for static analysis | ||
to finish, or obfuscating the random game function. | ||
|
||
That said, unlike something like SecuROM or SafeDisc, the original game isn't totally wrecked | ||
all over the place. | ||
|
||
## Detection | ||
|
||
!!! info "Denuvo has an 'offline activation portal', in case your PC cannot connect to their servers." | ||
|
||
This is a failsafe in case the game cannot connect to the Denuvo servers to verify the license. | ||
|
||
By signature scanning for the domain `support.codefusion.technology` (usually UTF-16), you can verify | ||
a game as Denuvo protected. | ||
|
||
!!! note "Some extra optional steps" | ||
|
||
After that URL you get 4 bytes (unknown purpose) and (in all my samples) `01 00 00 00 66 66 66 2E 0F 1F 84 00 00 00 00 00`. | ||
|
||
Following that is another null terminated string which contains the specific product ID. For example, in `Persona 5 Royal`, this is `P5R_9AG4H12`. | ||
|
||
Combine the two, you get `https://support.codefusion.technology/P5R_9AG4H12`. | ||
|
||
## Anti-Debugging Measures | ||
|
||
!!! question "Some Denuvo titles have Anti-Debugging Measures" | ||
|
||
However it is unclear whether it is an optional Denuvo component or additional DRM from the publisher. | ||
|
||
!!! info | ||
|
||
Some SEGA games circa 2017 featuring Denuvo also have an anti-debug measure where `ntdll.DbgUiRemoteBreakin` will | ||
constantly be rewritten with `ret` (0xC3) on a background thread to prevent debugging. | ||
|
||
It is usually easy to patch. Known affected titles include Sonic Forces and Puyo Puyo Tetris. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,43 @@ | ||
# SafeDisc | ||
|
||
!!! error "These games cannot be played on Wine or Windows 7+" | ||
|
||
SafeDisc is not supported on Windows 7 and later, or on Wine. | ||
|
||
This is due to the fact that SafeDisc requires a driver. Wine won't run kernel drivers, | ||
and Windows 7 (with updates) and later have blacklisted the driver. | ||
|
||
## Detection | ||
|
||
### SafeDisc V1 | ||
|
||
Unknown. | ||
|
||
### SafeDisc V2, V3, V4 | ||
|
||
Search for string `BoG_ *90.0&!! Yy>`. | ||
Should usually be after Section Headers in PE header. | ||
|
||
After this magic string, you can also extract version (if you feel like it). | ||
It comes as set of `u32` integers right before section end. | ||
|
||
Verified this to work with following games: | ||
|
||
- SafeDisc V3 Confirmed with `Sims 2` | ||
- SafeDisc V4 Confirmed with `Assasin's Creed` & `Sonic Heroes` | ||
|
||
!!! tip "If you feel adventurous, you can also check for section named `stxt371`." | ||
|
||
## Mitigation Strategies | ||
|
||
Tell the user to get a DRM free version of the game.<br/> | ||
This may either be a DRM-free release from the publisher (if possible), or a cracked version. | ||
|
||
That's all. | ||
|
||
!!! warning | ||
|
||
Please do not distribute or post linked to cracked EXE files. | ||
|
||
Binary diffs (e.g. xdelta, VCDiff) patches that convert legal installs to community preferred | ||
game version(s) are ok, but not redistribution of unmodified game files. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters