mirror of
https://github.com/atom0s/Steamless.git
synced 2024-12-19 23:07:41 +01:00
8c88ba51c3
- Fixed issue with header size not unpacking properly for certain files. - Fixed issue with TLS callbacks not being unpacked properly when present. Steamless.Unpacker.Variant30.x64 - Added support for 64bit version of SteamStub Variant 3.0. Steamless.Unpacker.Variant31.x64 - Added support for 64bit version of SteamStub Variant 3.1
75 lines
No EOL
4 KiB
C#
75 lines
No EOL
4 KiB
C#
/**
|
|
* Steamless - Copyright (c) 2015 - 2017 atom0s [atom0s@live.com]
|
|
*
|
|
* This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.
|
|
* To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-nd/4.0/ or send a letter to
|
|
* Creative Commons, PO Box 1866, Mountain View, CA 94042, USA.
|
|
*
|
|
* By using Steamless, you agree to the above license and its terms.
|
|
*
|
|
* Attribution - You must give appropriate credit, provide a link to the license and indicate if changes were
|
|
* made. You must do so in any reasonable manner, but not in any way that suggests the licensor
|
|
* endorses you or your use.
|
|
*
|
|
* Non-Commercial - You may not use the material (Steamless) for commercial purposes.
|
|
*
|
|
* No-Derivatives - If you remix, transform, or build upon the material (Steamless), you may not distribute the
|
|
* modified material. You are, however, allowed to submit the modified works back to the original
|
|
* Steamless project in attempt to have it added to the original project.
|
|
*
|
|
* You may not apply legal terms or technological measures that legally restrict others
|
|
* from doing anything the license permits.
|
|
*
|
|
* No warranties are given.
|
|
*/
|
|
|
|
namespace Steamless.Unpacker.Variant31.x64.Classes
|
|
{
|
|
using System.Runtime.InteropServices;
|
|
|
|
/// <summary>
|
|
/// SteamStub DRM Variant 3.1 x64 Header
|
|
/// </summary>
|
|
[StructLayout(LayoutKind.Sequential)]
|
|
public struct SteamStub64Var31Header
|
|
{
|
|
public uint XorKey; // The base xor key, if defined, to unpack the file with.
|
|
public uint Signature; // The signature to ensure the xor decoding was successful.
|
|
public ulong ImageBase; // The base of the image that was protected.
|
|
public ulong AddressOfEntryPoint; // The entry point that is set from the DRM.
|
|
public uint BindSectionOffset; // The starting offset to the .bind section data. RVA(AddressOfEntryPoint - BindSectionOffset)
|
|
public uint Unknown0000; // [Cyanic: This field is most likely the .bind code size.]
|
|
public ulong OriginalEntryPoint; // The original entry point of the binary before it was protected.
|
|
public uint Unknown0001; // [Cyanic: This field is most likely an offset to a string table.]
|
|
public uint PayloadSize; // The size of the payload data.
|
|
public uint DRMPDllOffset; // The offset to the SteamDrmp.dll file.
|
|
public uint DRMPDllSize; // The size of the SteamDrmp.dll file.
|
|
public uint SteamAppId; // The Steam application id of this program.
|
|
public uint Flags; // The DRM flags used while protecting this program.
|
|
public uint BindSectionVirtualSize; // The .bind section virtual size.
|
|
public uint Unknown0002; // [Cyanic: This field is most likely a hash of some sort.]
|
|
public ulong CodeSectionVirtualAddress; // The code section virtual address.
|
|
public ulong CodeSectionRawSize; // The code section raw size.
|
|
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x20)]
|
|
public byte[] AES_Key; // The AES encryption key.
|
|
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x10)]
|
|
public byte[] AES_IV; // The AES encryption IV.
|
|
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x10)]
|
|
public byte[] CodeSectionStolenData; // The first 16 bytes of the code section stolen.
|
|
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x04)]
|
|
public uint[] EncryptionKeys; // Encryption keys used to decrypt the SteamDrmp.dll file.
|
|
|
|
[MarshalAs(UnmanagedType.ByValArray, SizeConst = 0x08)]
|
|
public uint[] Unknown0003; // Unknown unused data.
|
|
|
|
public ulong GetModuleHandleA_Rva; // The rva to GetModuleHandleA.
|
|
public ulong GetModuleHandleW_Rva; // The rva to GetModuleHandleW.
|
|
public ulong LoadLibraryA_Rva; // The rva to LoadLibraryA.
|
|
public ulong LoadLibraryW_Rva; // The rva to LoadLibraryW.
|
|
public ulong GetProcAddress_Rva; // The rva to GetProcAddress.
|
|
}
|
|
} |