Bruteforce KLicense Tools Discussion

[opoisso893]

@Aldostools
I tried the latest version of bruteforce and i can confirm that scetool v2.0.9 is better.

With scetool v2.0.9 the --np-app-type modifies the "App Type" value in "control Info" field :
--np-app-type=EXEC ---> App Type = 0x00000001
--np-app-type=SPRX ---> App Type = 0x00000000
--np-app-type=UEXEC ---> App Type = 0x00000021
--np-app-type=USPRX ---> App Type = 0x00000020

So in your last bruteforce you must change the encryption of npdrm Self/Sprx files to use USPRX and change the encryption of the EBOOT.BIN to use UEXEC.
EXEC and SPRX are only used for games files, not for updates.

[deank]

I have a stumper.. I'm trying to decrypt the Street Fighter 3 OE 1.02 update like I did with MKAK,
and scetools doesn't look at it as npdrm locked (I have an unlock edat too). It skips decrypt, no errors, hex edits the eboot with binmay and encrypts to 3.41, but doesn't work. Asks for update.. It's 3.60 keys.. I ran the scetools decrypted eboot in deank's ebootmod in command mode and it reads proc_sys, does the run percentage and errors out at stack.dump.etc.

This is were I'm stuck. Anyone have an idea what the problem is?

Thanks

I tried the update and all seems to extract/pack just fine. I don't have the game, but if you wish I can upload what I've got so you can test.

[deank]

Here is what I did - let me know if [1] or [2] works:

Update used: UP0102-NPUB30301_00-SF32011040100001-A0102-V0100-PE.pkg (I hope this is the correct one)

NPUB30301_TEST.rar (31.38MB) -> Link

RAR contents:
===============
sf3.elf (decrypted and properly processed eboot.bin)

1\EBOOT.BIN_01
1\UP0102-NPUB30301_00-SF32011040100001.pkg

2\EBOOT.BIN_02
2\UP0102-NPUB30301_00-SF32011040100001.pkg
===============

I used different tools to create eboot_01 and eboot_02, so hopefully it will work with one (or both or neither)

Dean

p.s. Sorry for the off-topic.

[MOST Hated]

@deank

It's the same thing when I decrypted it.
It boots up but for some reason reverts back to trial mode although I have the unlock edat.

When I decrypted the mortal kombat arcade 1.02 patch,
I had a rap file and everything went fine in scetools.
Mortal kombat arcade never had a demo / trial download.

This SF3 1.02 patch also serves as a trial game and I thinks that's the problem.
I been running the eboot through aldos brute force tool on an old compaq armada m300 (haha).
So hopefully it finds something at some point.

Thanks for giving it a shot though. It's appreciated.

My last resort will be to edit the self in the duplex crack to read the three new files that
came with the update patch.

[deank]

Ah, I thought you couldn't make it start, but it is not the case.

I guess activation is different for this game. I never used PSN and needless to say I never bought anything nor activated any content so I really can't help.

[aldostools]

removed post

[opoisso893]

The tool now first checks the current app type of each SELF/SPRX/EBOOT, then use it for resign the file.
I also rearranged a bit the options.

Do you check the current Version of each SELF/SPRX/EBOOT, then use it for resign file with the --self-app-version option of scetool v2.0.9. Or do you always use --self-app-version=0001000000000000 ?

PS : In my script i check the version in the param.sfo file.

[aldostools]

removed post

[kilkip]

hi, noticed there's an added key --self-app-version=0001000000000000 , apoligy for the noob question...

after resigning them with rightclick> resign+356 its coming up as FW3.40 and 10.10?
after edit the batch it simply puts it back in place, resign again as "10.10 / 3.40"

this -self-app-version=0001000000000000 is making it 10.10?

the old way?, if one would like to resign for 3.55 instead personally, normally 2 values are needed >"0A and 355" was enough to make proper file, sorry if i may missed this, the added key is required(-self-app-version=0001000000000000)?, or better yet whats the value for 3.55 instead?

360 gamedisc - resigned for 3.55
scetool.exe --sce-type=SELF --compress-data=FALSE --skip-sections=TRUE --key-revision=0A --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=APP --self-fw-version=0003005500000000 --np-license-type=FREE --np-content-id=%CID% --np-app-type=EXEC --np-real-fname=EBOOT.BIN --encrypt fixed.elf EBOOT.BIN

360npdrm update resigned for 3.55:
scetool.exe --sce-type=SELF --compress-data=FALSE --skip-sections=TRUE --key-revision=0A --self-auth-id=1010000001000003 --self-add-shdrs=TRUE --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003005500000000 --np-license-type=FREE --np-content-id=%CID% --np-app-type=EXEC --np-real-fname=EBOOT.BIN --encrypt fixed.elf EBOOT.BIN

thx!

[andreus]

kilkip, if you sign with the first key revision (01) it will work on all ps3 systems since all files signed with this revision have to work on 3.55 cfw or else old games wouldn't work.