DLC/Act.dat experimentation thread

[gundamwfan]

I don't know if this should be in the discussion forum or the development forum, but me and another forum member by the name of C* have been discussing possible ways to activate unlicensed DC by exchanging amongst ourselves the act.dat file, .rif files for rock band, and a few great new ideas mentioned not long ago by another forum member, phdeez.

I know that not everyone here is fond of "piracy" talk, but I figured we need a unified thread to exchange ideas on how to make these things work even if it is a bit taboo. I know that like other things, piracy can be an integral part of a cycle of discovery. Sometimes homebrew efforts inevitably lead to piracy, but in the reverse attempts at piracy can in effect lead to better homebrew.

So with this thread, unless they are removed by a moderator, I will be attaching my own act.dat (Whatever the risks of that may be), and later perhaps the eboot.bin files of my games as well as a repository of .rif files. I need a securely accessible place to link the files to you guys, so I'll look into that.

For all intents and purposes, this thread is entirely dedicated to figuring out the possibility of using an act.dat file concurrently with already purchased content, and possibly finding ways to use activated DLC with other consoles and maybe decoding the strings in order to find commonalities that can lead us to running unlicensed content. The attached .rar file contains my act.dat, a few rif files, and some sort of MLN file. Don't know what it contains.

Piracy? Perhaps. But this is a rare case where I wouldn't have minded plunking down money for the rich DLC content of the PSN, but I can't because I've been blocked. As a great man once said, the first time software was pirate/stolen on a PS3, was firmware 3.21.

[Foxy1990]

i agree and i have spent hundreds of pounds on games, singstar and loads of raockband songs which are useless now (as use my old (previously broken) ps3 for the 3.41 jailbreak! would love to restore back my rockband stuff

[l_oliveira]

Nobody have bothered with sharing PSP activation files (they have that same name) because they're bound with the console's ID Storage certificate and obviously will only work with the console they were made for.

Also, some data was stored on the PSP device registry so having the act.dat file was not enough to activate.

I suppose that the act file could be also protected/device specific on the PS3.

Anyway good luck with your research.

[Jon Salat]

Bear in mind that both the act.dat and .rif files contain information about your account id.

I have five accounts on my PS3, some with lots of DLC, others with not so much, yet all the act.dat files are exactly the same size (4152 bytes), so I think it would be a case of ammending rather than appending. The .rif files are pretty basic.

rif file;

00 00 00 01 00 00 00 02
xx xx xx xx xx xx xx xx (User account)
xx xx xx xx xx xx xx xx (DLC name)
xx xx xx xx xx xx xx xx (DLC name)
xx xx xx xx xx xx xx xx (DLC name)
xx xx xx xx xx xx xx xx (DLC name)
xx xx xx xx xx xx xx xx (DLC name)
xx xx xx xx xx xx xx xx (DLC name)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
00 00 01 xx xx xx xx xx (Unknown)
00 00 00 00 00 00 00 00
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)
xx xx xx xx xx xx xx xx (Unknown)

act.dat starts;

00 00 00 01 00 00 00 01
xx xx xx xx xx xx xx xx (User account)

PS3Hax Network - Playstation 3 Hacks and Mods - View Single Post - Possible Way Of Reactivating PSN games On Jailbroken PS3

[Jon Salat]

and some sort of MLN file. Don't know what it contains.

Edit: About Marlin | Marlin - the content sharing platform for consumer devices and multimedia services

Some kind of key, here's the start of it;

<Bundle xmlns="http://www.octopus-drm.com/profiles/base/1.0">◙<ContentKey uid="urn:marlin:organization:sne:licensesign:1:con tent-key-1075751806">◙ <SecretKey uid="urn:marlin:organization:sne:licensesign:1:sec ret-key-1075751806">◙ <KeyData encoding="xmlenc" format="RAW">◙ <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">◙ <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>◙ <dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">◙ <dsig:KeyName>urn:marlin:organization:sne:registsi gn:1:8pususer:000db7eb:scuba:secret:sharing</dsig:KeyName>◙ </dsig:KeyInfo>◙◙ <xenc:CipherData>◙ <xenc:CipherValue>bMSpo0SpBrYMO/MjOiZbolUu2IiUtfGTj56OOQz/DWDxzN3Mphy2KPfvjaG6C9ww</xenc:CipherValue>◙ </xenc:CipherData>◙ </xenc:EncryptedData>◙ </KeyData>◙ </SecretKey>◙</ContentKey>◙<Protector uid="urn:marlin:organization:sne:licensesign:1rotector-1346208981">◙ <ContentKeyReference>◙ <Uid>urn:marlin:organization:sne:licensesign:1:con tent-key-1075751806</Uid>◙ </ContentKeyReference>◙ <ProtectedTargets>◙ <ContentReference>◙ <Uid>urn:marlin:organization:sne:content-a-0:UV0001-NPVA25418_CN-187199</Uid>◙ </ContentReference>◙ </ProtectedTargets>◙</Protector>◙<ContentKey uid="urn:marlin:organization:sne:licensesign:1:con tent-key-621154">◙ <SecretKey uid="urn:marlin:organization:sne:licensesign:1:sec ret-key-621154">◙ <KeyData encoding="xmlenc" format="RAW">◙ <xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#">◙ <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>◙ <dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">◙ <dsig:KeyName>urn:marlin:organization:sne:registsi gn:1:8pususer:000db7eb:scuba:secret:sharing</dsig:KeyName>◙ </dsig:KeyInfo>◙◙ <xenc:CipherData>◙ <xenc:CipherValue>iF+IJYnYlRT7v0QS+NrhCUP1/eJ7yQ4X20vKLIC4VSXDkeTY+3N4lmCDNLtRfp8G</xenc:CipherValue>◙ </xenc:CipherData>◙ </xenc:EncryptedData>◙ </KeyData>◙ </SecretKey>◙</ContentKey>◙<Protector uid="urn:marlin:organization:sne:licensesign:1rotector-1618042752">◙ <ContentKeyReference>◙ <Uid>urn:marlin:organization:sne:licensesign:1:con tent-key-621154</Uid>◙ </ContentKeyReference>◙ <ProtectedTargets>◙ <ContentReference>◙ <Uid>urn:marlin:organization:sne:content-v-0:UV0001-NPVA25418_CN-187199</Uid>◙ </ContentReference>◙ </ProtectedTargets>◙</Protector>◙<Control Id="control" uid="urn:marlin:organization:sne:licensesign:1:con trol-714431553">◙ <ControlProgram protocol="http://www.octopus-drm.com/specs/scp-1_0">◙ <CodeModule type="http://www.octopus-drm.com/specs/pkcm-1_0">

[l_oliveira]

Maybe this help you guys:


The name of the DRM engine/protocol the PSN uses is "Marlin"
Marlin (DRM) - Wikipedia, the free encyclopedia

While the wikipedia article mostly focus on it's use for Audiovisual contents, it's easy to assume that they use a variation of the same DRM system for game contents.

[Jon Salat]

Yeah, I just found that;

About Marlin | Marlin - the content sharing platform for consumer devices and multimedia services

This must be just for a specific DLC (Rockband?), I have none of those files on my PS3, so probably not worth wasting time on.

[gundamwfan]

Hmm..Well, I backed up all 3 of my devflashes before reformatting so I should have all of these files somewhere still, in addition to the drm folder which I also backed up. When I find the files, I'll post them.

[[C*]]

Good thread gundamwfan, hopefully our mortal minds put together can be just as good as the true scene devs.

Maybe this help you guys:


The name of the DRM engine/protocol the PSN uses is "Marlin"
Marlin (DRM) - Wikipedia, the free encyclopedia

While the wikipedia article mostly focus on it's use for Audiovisual contents, it's easy to assume that they use a variation of the same DRM system for game contents.

Ahhh interesting, I notice a marlin file on my PS3 yesterday and thought it was a developer just leaving their name in or something

I think it is possible to get pass the PSN requirement. It just seems unfeasible that we won't be able to get these games running, with all their files on our PS3, and the only stepping stone is activation. Another way we could step passed it is by decryption of the EBOOT.BIN right? Since I assume it's the EBOOT.BIN that is calling for activation confirmation? Obviously this won't be easy, but our quarrel isn't necessarily with the act.dat or marlin files.

[rbf351]

i just tried for shits and giggles to use the act.dat file in the first post, and replace the first line with the account info in my .rif files. it didn't work, but i figured it was worth a shot

i also noticed all of the DLC rockband songs have an .edat file location in the song directory. if you open that file with winhex it shows the .rif file name