-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Current Steam binary seems to not match any SHAs of known NA binaries #13
Comments
Even weirder: downloading a depot manually via Steam console gives me a binary with a known SHA256:
It's indeed not the issue with 2BHook then, but still weird. |
Steam is replacing the binary on startup. Odd. |
Doing |
nvm i actually do have a definition for the steam packed w/ steam drm. So it crashes if it doesn't know the sha? Actually that makes a bit of sense cause the offsets & sigs might change. |
Crashing is linux-specific behaviour, Proton doesn't support windows bcrypt API fully and always tries to dereference one of the arguments that can be either a pointer or a special constant. It only crashes later because I removed the check altogether. I assume on Windows it just doesn't load further if the sha check fails. |
If you mean my SHA256 thing i still let you load it all that changes is it would say NieR:Automata (Unknown Version) in the debug console but if a critical sig isn't found it would probably crash for that i just warn |
The binary I downloaded in my Steam has this sha256sum:
This does not match any sums in
Utils.h
. Moreover, I can't seem to find at least one of the patterns inFindSteamOffsets
, forg_pGraphics
. I opened the binary in Cutter and didn't find48 85 db 0f 84
anywhere in the exe. Same goes for patterns inFindDenuvoSteamOffsets
.This is very confusing since steamdb claims that the binary has not changed in 2 years. I am on Linux, but the game runs via Proton so I'd expect the executable to be the same as in Windows. I have no idea where the issue lies, but maybe this report will be useful.
Also a note on symptoms:
bcrypt
functions, that's because Proton has them stubbed out and always dereferences the handle as a pointer. After rebuilding the dll with the hash check removed, the crash happens near the end ofFindSteamOffsets
. Presumably becauseg_pGraphics
search returns nullptr, which is then dereferenced.The text was updated successfully, but these errors were encountered: