Merge pull request #313 from 0x80000003/master

Denuvo Signature Update

Author: DosX-dev

db/PE/Denuvo.2.sg

@@ -2,13 +2,13 @@
 // Author: deadmau5 <[email protected]>
 // Updated: DosX (@DosX-dev)
 // Updated 2: Nitr0-G (@Nitr0-G) (16.05.2025)
-
+// Updated 3: 0x80000003 (@0x80000003) (20.09.2025)
 meta("protector", "Denuvo");
 
 function detect() {
     if (PE.isNet()) return; // Native code only
 
-    if (PE.isSectionNamePresent(".arch") || PE.isSectionNamePresent(".edata") || PE.isSectionNamePresent(".srdata") || PE.isSectionNamePresent(".xpdata") || PE.isSectionNamePresent(".xdata") || PE.isSectionNamePresent(".xtls")) {
+    if (PE.isSectionNamePresent(".arch") || PE.isSectionNamePresent(".edata") || PE.isSectionNamePresent(".xtext") || PE.isSectionNamePresent(".srdata") || PE.isSectionNamePresent(".xpdata") || PE.isSectionNamePresent(".xdata") || PE.isSectionNamePresent(".xtls")) {
         if (PE.is64()) {
             // Mad Max, Metal Gear Solid: TPP, Rise of the Tomb Raider
             if (PE.compareEP("51 52 41 50 41 51 4C 8D ?? ?? ?? ?? ?? 4C 8D ?? ?? ?? ?? ?? 4D 29 C1")) {
@@ -39,22 +39,29 @@ function detect() {
             else if (PE.compareEP("4D 8D ?? ?? ?? ?? ?? ?? ?? ?? ?? 48 89 ?? ?? ?? ?? ?? 48 8D ?? ?? 48 89 ?? 48 89 ?? 48 89")) {
                 sVersion = "3.0b";
                 bDetected = true;
-            } else if (PE.findSignature(0, PE.getSize(), "64 65 6E 75 76 6F 5F 61 74 64 00 00 00 00 00 00") !== -1) {
+            } 
+			else if (PE.findSignature(0, PE.getSize(), "64 65 6E 75 76 6F 5F 61 74 64 00 00 00 00 00 00") !== -1) {
                 bDetected = true;
             }
-
+			
+			// Hello Kitty : Island Adventure / Unity
+			else if (PE.compareEP("47 61 6D 65 41 73 73 65 6D 62 6C 79 44 65 6E 75 76 6F 44 72 6D 2E 64 6C 6C")) {
+                sOptions = "Unity"; // The actual game exe won't show up as Denuvo because it only loads the GameAssembly.dll which is the one protected by Denuvo
+                bDetected = true;
+			}
+			
             // Check if steam_api64.dll present
             if (PE.isLibraryPresent("steam_api64.dll")) {
                 sOptions = "Steam";
                 bDetected = true;
             }
-
             // Check if eossdk-win32-shipping.dll present
             if (PE.isLibraryPresent("eossdk-win64-shipping.dll")) {
                 sOptions = "Epic Game Store";
                 bDetected = true;
             }
-
+			
+			
         } else {
             // Pro Evolution Soccer 2017, Champions of Anteria
             if (PE.compareEP("55 89 E5 8D ?? ?? ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ?? E8 ?? ?? ?? ??")) {
@@ -113,4 +120,4 @@ function detect() {
     }
 
     return result();
-}
+}