Thanks JuanNadie, do so many good works .
as I know, many peoples working hard for the scene, some release it, some not.
FF13 CFW fix -- 100% exploited trueblue LV2, with VM step tracing bldr1&2
act.dat&rif algo -- someone has got it few years ago --from PSP
here is some step debugging code
loc_19C: # CODE XREF: scePspNpDrmInitFromGameIdMs4+94j
jal sceNpDrmVerifyAct
move $a0, $a1
bltz $v0, loc_288
move $a1, $v0
jal sceNpDrmVerifyRif
move $a0, $s0
bltz $v0, loc_288
move $a1, $v0
lui $a2, (KeyMac_2310 >> 16)
addiu $a1, $sp, 0x40+var_30
addiu $a0, $s0, 0x40
la $a2, KeyMac_2310
jal DecryptDataWithHashMac
# End of function RotR4Byte
# Segment type: Pure data
.data # .rodata
KeyHash_22D8: .word 0x9D9E3D07, 0x2F3BFDA8, 0x2E931863, 0x64A657F8 # 0
# DATA XREF: scePspNpDrmInitFromGameIdMs4+15Co
HashVrAct_22E8: .word 0xAB02762, 0xB06F8502, 0x67870841, 0x18A0E019 # 0
# DATA XREF: sceNpDrmVerifyAct+8o
# sceNpDrmVerifyAct+14o ...
.word 0xB9EE9132, 0xBF6A736E, 0xE90EF781, 0xDE0D1B16 # 4
.word 0x1A7626B0, 0x5BC87BFF # 8
KeyMac_2310: .word 0x5E4B7DDA, 0x534F9A49, 0x4AA1C1B1, 0x3B448474 # 0
# DATA XREF: scePspNpDrmInitFromGameIdMs4+C4o
# scePspNpDrmInitFromGameIdMs4+D4o
KeyVdoHash_2320:.word 0xCD5B20E8, 0x30355711, 0x16ED8DBE, 0xF66A9382 # 0
# DATA XREF: sceNpDrmVideoKey_driver_77743584+DCo
# sceNpDrmVideoKey_driver_77743584+E0o
aFlash2Act_dat: .ascii "flash2:/act.dat"<0>
# DATA XREF: sceNpDrmVideoKey_driver_77743584+48o
byte_2340: .byte 0x5E # DATA XREF: DecryptWithPsID+8o
# DecryptWithPsID+40r
|