Currently I got curious and wanted to break down CEMU to see any trace of how it works...

Currently I got curious and wanted to break down CEMU to see any trace of how it works. A few things that seems to have changed in time is. Patreon builds of CEMU comes with serial.bin. Previously during debugging we could see the software kind of connected to winsock to check for validation somehow. I kind of guess that they discovered that this could be patched, so I am very convinced there is some kind of protection now on the patreon builds.

This suspicion comes from strings not being found as easily right now as in earlier builds (quick trick for this is store all information in variables and just type out the variables instead of hardcoded text).

I also wanted to point out that I ran it with Protection-ID to scan any common packer, but came out with nothing. Guess it is protected by some homemade software protection.

What have you come up with upon debugging CEMU?

Other urls found in this thread:

reddit.com/r/CemuPiracy/comments/5ytmt2/cemu_patreon_build_megathread/
twitter.com/SFWRedditVideos

At least 1.7.3 is protected as fuq

I just now I can't launch patreon versions anymore, they just close on me, 1.7.2 still works.

This is related to the validation of your CEMU version. A temporary fix until I come up with some patch is to disable your internet connection, delete settings.bin and start the emulator.

A patch would be just right. We need to punish these motherfuckers for releasing new public builds one week after the patreon builds.

Off topic but any of you know if it's possible to edit axis values so I can move my character through things? I've done all the shrines except stasis and magnesis and I want to get out of this beautiful prison.

Just get a save file.
Oh thanks a lot user, I guess I can block it on the firewall too.

I've been working on cracking it too bro. They can't get away with stealing from Nintendo. I'm getting pretty close to having hard evidence that they used illegal documentation and once I have that I will send it to Nintendo which I am already in talks with and they will begin their legal action which is already being planned. These PC retards are gonna get so BTFO hahahahaha.

Yeah, you could try that. Recommend to try using a third party firewall though. Windows shitty firewall didnt seem to do the trick.

They are not doing anything illegal. Nintendo just have a sore ass

>DRM on a fucking emulator
how can anyone defend this?

>Not waiting 1 week for DRM free emulator
how can anyone defend this?

I'd rather have a closed source emulator play a game than an open source emulator load a game's main menu at 5fps before crashing.

It is not about that. It is about the principle of releasing public and patreon builds at the same time. Do you really think that if they did so, all patreons would stop supporting their work?

it says unverified build / slow on the status bar any way to fix this?

Literally cocksucking pirates that are too retarded to understand just how fucking cancerous a goddamn closed source emulator is.
They could easily sit their raking in $10k a week easily getting it working, then tell all their backers to fuck off as they sell the final product for $99 plus a weekly subscription to use it and if anyone else even tried to make a free competitor they'll steal all their code and bury them with shills.

It's ultimately free, you can just pay to get it a little earlier.
>Do you want one marshmallow now, or two 10 seconds later?

I just want these useless cunts to include resolution options. I mean, how fucking hard is it?

use the graphic packs mate

WELL LOOKS LIKE I AM THE USELESS CUNT!

Yeah, emulation has always been a hobby-ish thing to do and should remain that way. Also, by open sourcing it, others could get to know how it works and kind of boost the knowledge of emulation a bit, because lets admit, it is pretty fucking impressive so far.

Its their fucking software they can do whatever they want, you are not entitled to play it for free.
Also if they sold a perfectly working WiiU emulator at 20 or 40 bucks I'll buy it, but it would get cracked in no time.

Open source "please pay us and we may get around to some sort of progress eventually" emulation work has gotten jack shit done for a long time. It's more important that we get actual games running than learning about how one could potentially maybe figure out how to get games running in the not so near future.

This isn't a fucking learning experience, it's an opportunity to fix a problem. With the success of this, by the way, the people behind the PS3 and Xbox emulators have finally gotten off their ass because they've actually been incentivized. As long as it plays the games, why the fuck does it matter if it's closed source?

If they sold the software for that instead, would it be justifiable to crack it and get it for free? That is basically what they are doing now. 5$ or whatever a month is usually meh, but keep adding that for a year and you would pay more for this then from an actual one-time product payment. And these other products that costs 20$ are okay to crack and share? Jesus help me

What the fuck are you even talking about

The paid version becomes the free version and paying is optional

What are you seriously going on about

How do I get started using CemU? I probably can't run anything on it and I don't really want any wii u games but fuck it I'm curious

Everything is okay to crack and share, the only people that dont think that way are salty children that dont want anyone else to play with their toys.
Internet has always been about sharing, piracy is a wonderful thing, think about it, giving the chance to people that doesnt have the money to enjoy something, improve their lives, and no one suffers from that, anyone that thinks Cemu affect Nintendo sales in any way is too young or too ignorant to understand how a company like Ninty works.

Post speccy, also some Wii U has some really nice games that everybody can appreciate.

Download the public build, setup controls and load your game.

Yeah, and as before, Nintendo are just salty that they cant boost their WiiU sales because people emulate shit. How fucking far off from this world are you to get to that conclusion? I used to emulate Wii games and still bought a fucking Wii. Softmodded it though, but that is beside the point.

>post speccy
I can't because I'm posting from my phone but I can tell you a little bit: gtx 750 ti and an Intel i3 4130 at 3.40 gHz

look at sub_1400577E0

cemu.exe (1.7.3a)

thats the subroutine that validates the drm. im too lazy to check the rest out.

Should be good enough.

Alright. The website says it only supports a few controllers and partial kb+m support, is that true or does it work with other stuff? I have a GameCube controller if that works

you know you set it as your name and not the subject right

It's the same person why not just quote him once

Do you have any offset adress? Entry point starts at 00007FFF8FAD34E1 on 1.7.3

Cemu is far too complex for the general public to use, hell I had to download several versions of Zelda, and use a decryption program via console to get the game, how many people will do that?
Also Nintendo probably makes more money selling Mario themed toys and plushes that with hardware sales, hell I have an amiibo and my last Nintendo console was a Gamecube, still Sup Forumsirgins like to scream that a different company is going bankrupt every week.

Yeah, but you only have to manually decrypt it until someone releases their decrypted version publically. Nintendo probably earns shitloads in Japan on merch.

GOD I LOVE COCKS, THERY'RE SO TASTY

Because it won't play them forever.
Eventually CEMU will be abandoned and lose support and past that new software and OS versions will break it. Inevitably we'll reach a point where it doesn't work on current computers anymore and since it's closed source nobody can get through all the DRM bullshit to use or update it and nobody else cares about the Wii U so long after the fact to make another proper emulator.
And thus we get a future where stuff like Wonderful 101 and Xenoblade X are lost to time never to be played by anyone ever again.

I live in spain and there is Nintendo merchandise everywhere, the other day I saw a mario kart themed scalextric (dunno if you people know it) in my relatively small village mall.

Yeah, it's not like they are running on empty.

to make fun of his samefagging

shut up, I'm the OP here. I've tasted big dongs in the past but I prefer fresh boipussi.

Compared 1.7.3 with an earlier version now. For those who are into it:

OEP: 0x77FF72BD99624

Function to check serial with winsock cannot be found in referenced text strings.

1.7.3 Patreon leak stopped working for me today. I think I used it first time yesterday and did couple of tests. Today I tried to run it, it just disappears without starting. 1.7.2 works.

It's very shady because I was very paranoid about it being keylogger or something. We should be more careful about which software to run anyway...

Can the homemade drm just be blocked via firewall rule? I can't run 1.7.3 any longer so I can't try...

you can but the game will run slow

Not sure about the firewall. Try a third party firewall, Windows Firewall didn't block the serial check.

start by checking the structs

>Pirate software has DRM

You literally cannot make this shit up. And people are paying for it. This is Sup Forums now. Paying to pirate.

Yeah that's the issue because Windows firefall didn't display that allow/deny dialog. It's shit. That made me think what other damn backdoors I have in my system. I use W10 Privacy to block the telemetry and shit.

Offtopic - which one is good firewall software? (free one..)?

Open task manager, sort the processes by CPU usage and see how random things start and stop working all the time, I have given up on the botnet.

Hey you stupid fucks.

How am I supposed to develop this software without my 350z and condo in florida?
That's right, I can't.

Pay up or quit bitching.

Used to run Black Ice back in the days. Not sure if it has been discontinued today though.

>You should only get what you need to do your job! water and bread is enough!
This is what capitalism does to your brain

Exactly. Supply and demand.
Redit and Sup Forums are both stupid enough to support us. Why wouldn't we want to exploit it to its fullest potential.

It just called my post spam because I typed Redit. Weird.

>Black Ice
That sounds what hacker known as Sup Forums would use.

It's discontinued but I guess I need to look something. I hate this shit - I already have 3 scanners and 2 malware removal tools. Then 2 anti-telemetry software on top of that.

First and foremost, eventually games will stop coming out for the Wii U, meaning that development can stop after a certain point. With that in mind, the developers are clearly making a shitload of money off of this, and will continue to work on it as necessary. If they want to continue to make money off of this, they will make it work on newer machines.

Also, it's fucking software. It currently works on Windows 7 so there's nothing stopping you from running it on a Windows 7 virtual machine. If it means that much to you, go through the effort of learning what they have and create your own open source emulator. It's clearly lucrative.

>Paying 5 bucks to some guys that are making possible to play the newest Zelda that everyone is praising on PC at 4k
>Stupid
I mean I didnt donated shit because I'm a cheap fuck but I dont see how you get so freaked out by the of supporting a project.

Should not even bother with Cemu until they get the physics and water going in BoTW. Not like you can do anything besides run around, fight and pick up items.

To be totally honest, I'd be happy to live on bread and water if I got it for free. Bread is expensive

if you love open source so much, go support decaf give them your neetbux

>Bread is expensive
What the fuck

Also, what the license check in CEMU does it probably compares your hostid to the license string and sends it to their server as encrypted string.

Something similar to what the flexlm license did back in the day but the license server in that case was always local (and thus needed to be cracked).

So the option remains to;

Sure it can compare how much it want, but we need to make it skip over the sending part. Or just simply the part where the software locks up if the key is invalid.

Key can be invalid too, but to just find the function where the software locks itself should be the golden part.

In it's current state as Cemu is single executable it should be very straightforward to track how it does it. You need to have debugger and wireshark to see the network requests.

I'm not a coder myself but I have an understanding of these things on some level.

>I'm not a coder

Currently I am checking out some function where it is writing the settings.bin file. I think I am getting closer. If I get it to work, it will probably follow the same pattern of validating the key upon later builds.

>cemu is at like 13k/mo
>rpcs3 is at like 500/mo
i'm slightly sad about this, since there are far more ps3 games i want to play than wii u games and i already own a hacked wii u and don't own a hacked ps3

Software Engineer, mongoloid.

how's that patch going?

>Software Engineer
big title for a useless pencil pushing ass kisser

>emulator with drm

Nice breads, is that real? Well what is your contribution to this thread?

Currently trying to find the offset where it breaks the software. If I find this, it could be very easy to patch it, grab correct key, and more. It is not packed.

They have hidden all strings related to "serial.bin" as a shitty encryption technique, so finding any relation to it is a pain.

In the meantime, I found something called "shareddata.bin", anyone recognize that?

Publicity is a big thing. BoTW is brand new and they're riding that as hard as they can. RPC3 just did a bunch of fanfare to announce they, and by they I mean the one person working on it, are working on Demon's Souls in the hope of gaining some traction considering a lot of people assume PS3 emulation is dead in the water.

I dont know what the fuck are you exactly doing user but check this reddit.com/r/CemuPiracy/comments/5ytmt2/cemu_patreon_build_megathread/

Yeah, basically you could simply grab an upload and disconnect from internet to run it. Or do as they do over there, mess around with them hosts.

If you're going to be paying to play the game atleast pay the people who fucking developed the game you retarted fucking cuck!

Try harder, man

But it will run in 'unverified'/slow mode, which gives like a tenth the FPS in games

CEMU is borderline privacy. It is not made to actually preserve historical computing but they are riding with the release of Zelda and generating money off it. The fact it has drm means the future is very uncertain for it anyway.

Look at Mame. It's a wonderful piece of software and wouldn't happen without genuine interest of the people who made it. Because the developers we have the games still available after most of the arcades have been gone forever and pcbs trashed etc.

But for CEMU, I think they are unethical. I'm not Nintendo fan boy. In fact, I hate Nintendo and Nintendo fans.

Yeah, I'll try to see if I can do something about it.

>privacy
piracy, bootlegging

>It is not made to actually preserve historical computing
Yeah but it does anyway. Are you saying something less effective would be better so long as there are better intentions behind it?

I actually took 5 minutes to load it up in IDA and this shit is obfuscated as fuck. you're gonna need a network capture tool. theres literally 10000 lines of code just for that stupid DRM part.

>I'm not Nintendo fan boy. In fact, I hate Nintendo and Nintendo fans.
>t. falseflagging Nintendo fan

Yeah, the only thing interesting would be when Wireshark is sending data and stuff to check the key. Unfortunatily, it is next to impossible to link that part to the offest adresses in IDA or x64dbg, which is what I am interested about. Because if you could patch that, then I would upload a patched copy of 1.7.3 here that works for everyone.

So far I have found that shareddata.bin part. Investigating all the calls to functions in that region of the code.

Godspeed user.

I just bought BOTW off eshop for Wii U. 60 pounds. Imagine the money they are making with the title. 60 pounds for a fucking 720p game with no anti-aliasing and 20 fps frame rate.

dude its simple

ctrl+f12 for strings, search for "verified" or "unveriried" and go to xrefs, youll land into the main function. the call to drm is literally the first one before everything else. its like 20000 lines of code or some shit

Can anyone tell me something.

When you run a legit patreon copy, does it say "Verified" or does it just say "Patreon Build - " etc?

Can you just bypass it with patching? Jump over the drm check.

Yeah, it would be logical. At some point, you stumble upon the online verification part. I am trying to find that function and just patch it.

It says verified if legit, otherwise unverified/slow
in the title bar

thats why you start with the "verified" string then go from there

KILL ALL THOSE WHO OPPOSE NINTENDO!

Yeah, I know, but the it does not automatically mean the verification function lies around there. It can also mean that it is just storing the strings there. And since they hid the "serial.bin" strings so hard, that would kind of make sense of them to do.

It says this

it's not there, but check the xref, it goes into the main function, the drm one (which uses the winsock api) is the first one lol