Question about the EncryptedAppTicket and AppOwnershipTicket

[legomanster]

Hello, I have a question, I wanted thank you for continuing the legacy of this emulator since I use it a lot in my projects

I wanted to ask how I could modify the EncryptedAppTicket and AppOwnershipTicket functions to load ticket files that I obtained from SteamLite.

For context, this work is for using tickets obtained from another steam account to generate a Denuvo Token directly using Goldberg, without going through steam at all.

[Detanup01]

In here you read from the file and set the out stuff instead of generating one.

gbe_fork/dll/steam_user.cpp

Line 761 in 6fc33ce

bool Steam_User::GetEncryptedAppTicket( void *pTicket, int cbMaxTicket, uint32 *pcbTicket )

Same but inside other ticket functions

[legomanster]

Thank you for your input, it really helps for my project.

So, from what I understand, this line you highlighted in steam.user.cpp is for reading the EncryptedAppTicket as a file which I obtained from SteamLite

In that case, for the AppOwnershipTicket, do I have to edit this line the same way inside the appticket.cpp before it starts to read the provided ticket and obtain a Denuvo Token? Or is modifying the AppOwnershipTicket not needed altogether?

gbe_fork/dll/appticket.cpp

Line 260 in 6fc33ce

uint32 Steam_AppTicket::GetAppOwnershipTicketData( uint32 nAppID, void *pvBuffer, uint32 cbBufferLength, uint32 *piAppId, uint32 *piSteamId, uint32 *piSignature, uint32 *pcbSignature )

I apologize for all of these questions as I am still a beginner at this, thank you again for taking your time to help here!

[Detanup01]

No idea what denuvo games, steamlite call for ticket and stuff like it.

[BERWINXD]

I downloaded the steam lite to see how it works, but I guess it doesn't work.

any progress?

[Relax0535]

I managed to get this working for Denuvo in DD2

First of all, you ONLY need the encrypted app ticket, that's all that is needed for activation.

This is all very rough initial attempt just to see if it can work, but this is what I modified the EncryptedAppTicket section in steam_user.cpp to be

STEAM_CALL_RESULT(EncryptedAppTicketResponse_t)
SteamAPICall_t Steam_User::RequestEncryptedAppTicket(void* pDataToInclude, int cbDataToInclude)
{
    PRINT_DEBUG("%i %p", cbDataToInclude, pDataToInclude);
    std::lock_guard<std::recursive_mutex> lock(global_mutex);
    EncryptedAppTicketResponse_t data;
    data.m_eResult = k_EResultOK;

    // Static test path
    const std::string ticket_path = "C:\\AppTicketTest\\encrypted_app_ticket.bin";
    PRINT_DEBUG("Attempting to read ticket from: %s", ticket_path.c_str());

    // Read ticket directly from filesystem
    std::ifstream file(ticket_path, std::ios::binary | std::ios::ate);
    if (!file.is_open()) {
        PRINT_DEBUG("Failed to open ticket file");
        data.m_eResult = k_EResultFileNotFound;
    }
    else {
        std::streamsize size = file.tellg();
        file.seekg(0, std::ios::beg);
        PRINT_DEBUG("Ticket file size: %lld bytes", size);

        if (size <= 0) {
            PRINT_DEBUG("Empty ticket file");
            data.m_eResult = k_EResultIOFailure;
        }
        else {
            encrypted_app_ticket.resize(size);
            if (!file.read(encrypted_app_ticket.data(), size)) {
                PRINT_DEBUG("Failed to read ticket data");
                encrypted_app_ticket.clear();
                data.m_eResult = k_EResultIOFailure;
            }
            else {
                PRINT_DEBUG("Successfully read %lld bytes from ticket file", size);
            }
        }
        file.close();
    }

    auto ret = callback_results->addCallResult(data.k_iCallback, &data, sizeof(data));
    callbacks->addCBResult(data.k_iCallback, &data, sizeof(data));
    return ret;
}

bool Steam_User::GetEncryptedAppTicket(void* pTicket, int cbMaxTicket, uint32* pcbTicket)
{
    PRINT_DEBUG("%i %p %p", cbMaxTicket, pTicket, pcbTicket);
    uint32 ticket_size = static_cast<uint32>(encrypted_app_ticket.size());

    // Always return size first
    if (pcbTicket) {
        *pcbTicket = ticket_size;
        PRINT_DEBUG("Ticket size query: %u bytes", ticket_size);
    }

    // Buffer size query
    if (cbMaxTicket <= 0) {
        PRINT_DEBUG("Size-only query successful");
        return true;
    }

    // Validate output buffer
    if (!pTicket) {
        PRINT_DEBUG("Null output buffer");
        return false;
    }

    if (ticket_size == 0) {
        PRINT_DEBUG("No ticket data available");
        return false;
    }

    if (ticket_size > static_cast<uint32>(cbMaxTicket)) {
        PRINT_DEBUG("Buffer too small: Need %u, Got %i", ticket_size, cbMaxTicket);
        return false;
    }

    memcpy(pTicket, encrypted_app_ticket.data(), ticket_size);
    PRINT_DEBUG("Successfully copied %u byte ticket to buffer", ticket_size);
    return true;
}

Once you have a compiled version of this take an encrypted app ticket from steamlite (or anywhere else you get one from) and save it to the exact path of C:\AppTicketTest\encrypted_app_ticket.bin

It's possible the ticket needs to be generated from the same IP that you activate on, I haven't tested with different IP addresses, if someone does, let me know how it goes.

You need to make sure that account_steamid in configs.user.ini matches the steamid for the account that generated the ticket

this was my configs.main.ini:

[main::general]
new_app_ticket=1
gc_token=0
crash_printer_location=crashes.txt

[main::connectivity]
disable_lan_only=1
disable_networking=0
offline=0

[DogancanYr]

In here you read from the file and set the out stuff instead of generating one.

gbe_fork/dll/steam_user.cpp

Line 761 in 6fc33ce
bool Steam_User::GetEncryptedAppTicket( void *pTicket, int cbMaxTicket, uint32 *pcbTicket )

Same but inside other ticket functions

Can you create a folder called AppOwnershipTickets in the steam_settings file and read the file inside?

[DogancanYr]

😃😃https://cs.rin.ru/forum/viewtopic.php?p=2762061#p2762061

I managed to get this working for Denuvo in DD2

First of all, you ONLY need the encrypted app ticket, that's all that is needed for activation.

This is all very rough initial attempt just to see if it can work, but this is what I modified the EncryptedAppTicket section in steam_user.cpp to be

STEAM_CALL_RESULT(EncryptedAppTicketResponse_t)
SteamAPICall_t Steam_User::RequestEncryptedAppTicket(void* pDataToInclude, int cbDataToInclude)
{
    PRINT_DEBUG("%i %p", cbDataToInclude, pDataToInclude);
    std::lock_guard<std::recursive_mutex> lock(global_mutex);
    EncryptedAppTicketResponse_t data;
    data.m_eResult = k_EResultOK;

    // Static test path
    const std::string ticket_path = "C:\\AppTicketTest\\encrypted_app_ticket.bin";
    PRINT_DEBUG("Attempting to read ticket from: %s", ticket_path.c_str());

    // Read ticket directly from filesystem
    std::ifstream file(ticket_path, std::ios::binary | std::ios::ate);
    if (!file.is_open()) {
        PRINT_DEBUG("Failed to open ticket file");
        data.m_eResult = k_EResultFileNotFound;
    }
    else {
        std::streamsize size = file.tellg();
        file.seekg(0, std::ios::beg);
        PRINT_DEBUG("Ticket file size: %lld bytes", size);

        if (size <= 0) {
            PRINT_DEBUG("Empty ticket file");
            data.m_eResult = k_EResultIOFailure;
        }
        else {
            encrypted_app_ticket.resize(size);
            if (!file.read(encrypted_app_ticket.data(), size)) {
                PRINT_DEBUG("Failed to read ticket data");
                encrypted_app_ticket.clear();
                data.m_eResult = k_EResultIOFailure;
            }
            else {
                PRINT_DEBUG("Successfully read %lld bytes from ticket file", size);
            }
        }
        file.close();
    }

    auto ret = callback_results->addCallResult(data.k_iCallback, &data, sizeof(data));
    callbacks->addCBResult(data.k_iCallback, &data, sizeof(data));
    return ret;
}

bool Steam_User::GetEncryptedAppTicket(void* pTicket, int cbMaxTicket, uint32* pcbTicket)
{
    PRINT_DEBUG("%i %p %p", cbMaxTicket, pTicket, pcbTicket);
    uint32 ticket_size = static_cast<uint32>(encrypted_app_ticket.size());

    // Always return size first
    if (pcbTicket) {
        *pcbTicket = ticket_size;
        PRINT_DEBUG("Ticket size query: %u bytes", ticket_size);
    }

    // Buffer size query
    if (cbMaxTicket <= 0) {
        PRINT_DEBUG("Size-only query successful");
        return true;
    }

    // Validate output buffer
    if (!pTicket) {
        PRINT_DEBUG("Null output buffer");
        return false;
    }

    if (ticket_size == 0) {
        PRINT_DEBUG("No ticket data available");
        return false;
    }

    if (ticket_size > static_cast<uint32>(cbMaxTicket)) {
        PRINT_DEBUG("Buffer too small: Need %u, Got %i", ticket_size, cbMaxTicket);
        return false;
    }

    memcpy(pTicket, encrypted_app_ticket.data(), ticket_size);
    PRINT_DEBUG("Successfully copied %u byte ticket to buffer", ticket_size);
    return true;
}

Once you have a compiled version of this take an encrypted app ticket from steamlite (or anywhere else you get one from) and save it to the exact path of C:\AppTicketTest\encrypted_app_ticket.bin

It's possible the ticket needs to be generated from the same IP that you activate on, I haven't tested with different IP addresses, if someone does, let me know how it goes.

You need to make sure that account_steamid in configs.user.ini matches the steamid for the account that generated the ticket

this was my configs.main.ini:

[main::general]
new_app_ticket=1
gc_token=0
crash_printer_location=crashes.txt

[main::connectivity]
disable_lan_only=1
disable_networking=0
offline=0

The EncryptedAppTicket created by SteamLite (or any other tool which can handle the request) is valid for 30 minutes. You can share the ticket with others but be careful because AFAIK it includes information about IP / SteamID etc.

But it is possible to use this method to generate token and share with your friend, yes. Easier implementation would be to utilize a encoded ticket which you can include in the steam_settings ;)

I've created a pull request that adds token functionality. This allows you to compile your own experimental steam_api64.dll with support for pre-generated encrypted app tickets.

The implementation works by reading a Base64 encoded token from configs.user.ini and using it for the EncryptedAppTicket. I've tested this successfully with Hi-Fi RUSH, which requires a valid encrypted ticket to launch.

PR for implementation details: #274

Direct file if anyone wants to try it:
https://github.com/Detanup01/gbe_fork/actions/runs/15064544375/artifacts/3138259436

Any updates are appreciated 👍