SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-02-03 21:29:23 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

[Protection] Steam CEG #181

New Issue
Open
opened 2026-01-29 21:06:52 +00:00 by claunia · 2 comments
claunia commented 2026-01-29 21:06:52 +00:00
Owner
Copy Link

Originally created by @TheRogueArchivist on GitHub (Nov 5, 2024).

We currently detect some forms of Steam, but not Steam CEG specifically. It worked by modifying Steam game executables to customize the protection on a per-computer basis.

Originally created by @TheRogueArchivist on GitHub (Nov 5, 2024). We currently detect some forms of Steam, but not Steam CEG specifically. It worked by modifying Steam game executables to customize the protection on a per-computer basis.
claunia commented 2026-01-29 21:06:52 +00:00
Author
Owner
Copy Link

@Morlit55 commented on GitHub (Oct 3, 2025):

This can apparently be detected by a "steamstart" string inside the executable. On http://redump.org/disc/111636/ it's present at around line 0212F060. STEAM_DRM_IPC might also be related

On Redump it seems to currently be called Valve CEG. Should be found in Steam games released between 2009 and 2014.

Image Image
@Morlit55 commented on GitHub (Oct 3, 2025): This can apparently be detected by a "steamstart" string inside the executable. On http://redump.org/disc/111636/ it's present at around line 0212F060. STEAM_DRM_IPC might also be related On Redump it seems to currently be called Valve CEG. Should be found in Steam games released between 2009 and 2014. <img width="831" height="598" alt="Image" src="https://github.com/user-attachments/assets/50f09fc3-fce0-4d2f-99b9-61e7a1474a41" /> <img width="912" height="645" alt="Image" src="https://github.com/user-attachments/assets/b2ccf2a0-4804-49b6-a353-a65439892bf0" />
claunia commented 2026-01-29 21:06:53 +00:00
Author
Owner
Copy Link

@Morlit55 commented on GitHub (Oct 3, 2025):

Same game as above but now activated using Steam (and my account). The STEAMSTART and STEAM_DRM_IPC info is located inside the .rdata portion of the exe

Image Image
@Morlit55 commented on GitHub (Oct 3, 2025): Same game as above but now activated using Steam (and my account). The STEAMSTART and STEAM_DRM_IPC info is located inside the .rdata portion of the exe <img width="690" height="831" alt="Image" src="https://github.com/user-attachments/assets/8b383a48-3a7c-4452-bbc9-0fb92ad284d5" /> <img width="717" height="744" alt="Image" src="https://github.com/user-attachments/assets/c26efd88-5fc6-4f10-b235-19551cb8092f" />
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
enhancement
help wanted
pull-request
Mirrored from GitHub Pull Request
 question
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
claunia
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SabreTools/BinaryObjectScanner#181
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?