2 ms·

I wonder how the DRM used in some video games that calls Windows system calls directly handles these changes. We know that some of it uses windows system calls

by ryao 1y ago

I wonder how the DRM used in some video games that calls Windows system calls directly handles these changes. We know that some of it uses windows system calls directly because both Linux and Wine had to be patched to support it: https://docs.kernel.org/admin-guide/syscall-user-dispatch.html https://docs.kernel.org/admin-guide/syscall-user-dispatch.ht... If I recall correctly, Jurassic World Evolution’s DRM is one of those that needed this to work.

e4m2 1y ago
There's a million and one ways to do it, here's just some of the ones I remember: - https://www.mdsec.co.uk/2022/04/resolving-system-service-numbers-using-the-exception-directory https://www.mdsec.co.uk/2022/04/resolving-system-service-num... - https://klezvirus.github.io/RedTeaming/AV_Evasion/NoSysWhisper https://klezvirus.github.io/RedTeaming/AV_Evasion/NoSysWhisp... - https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusing-veh-to-bypass-edrs https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusin... Though I'm not sure which of these techniques, if any, would be most favored by a game DRM as I've never looked into it.