What's new
By:

The only thing on System 246/256 that cannot be currently duplicated/reset/remade: The Soul Calibur II conquest mode memory card

l_oliveira

l_oliveira

Grand Master
Joined
Jun 26, 2015
Messages
580
Reaction score
664
Location
Brazil
What is it? A common, retail PS2 memory card which comes with custom (encrypted) data in it that we cannot duplicate nor move to a different memory cards.

What I suspect it is doing? I believe this game uses the cryptographic engine embedded into the card MCU to encrypt/decrypt the data before storing it on the card.
The same mechanism used to encrypt/decrypt the portion of the boot.bin file which can't be moved out of a card.

What is the rationale? This cryptographic engine use a key that is unique per card to encrypt/decrypt, meaning that anything you encrypt with a given card cannot be decrypted properly on another,.

I want to research this, but I don't have ideas on how to proceed.
 
Have you tried or I don't know if you have tried, unpack the CXD3740R chip from the COH-10020 dongle and compare it with a normal PS2 memorycard chip or do some reverse engineering? 🤔
 
Don't tamper with the conquest mode card until we understand what it is doing. At most it should be alright to make images of it. Absolutely don't try to write on it.
And please if you image it, use the 2021 version of PS3-MCA, the one which make images that PCSX2 can read.
nem said:
Do we have good dumps from these cards? I can erase mine to factory state and dump it with a MCA if needed.
Click to expand...
 
have we recorded the data going into/out of the card from the 256 and compared against two separate cards to confirm that it matches and the differences only exist inside the card?
 
Well, I meant erasing it from the system menu, so it's in factory state. Anyway, I can do both. Before and after.
 
目前并没有可行性相关转储和复制，它应该是另外一种南梦宫与索尼之间的街机协议加密，就好比Konami Bemani Python 2街机游戏和 Namco System 246两者之间有一定的交集，它是基于ps2街机加密狗协议，而且 Namco System 246和Konami Bemani Python 2街机大多数还能通用。
magicgate 密钥： https: //archive.org/details/Magicgate
以上言论纯属想象，并未进行过相关实践。仅供参考。
 
andymage said:
目前并没有可行性相关转储和复制，它应该是另外一种南梦宫与索尼之间的街机协议加密，就好比Konami Bemani Python 2街机游戏和 Namco System 246两者之间有一定的交集，它是基于ps2街机加密狗协议，而且 Namco System 246和Konami Bemani Python 2街机大多数还能通用。
magicgate 密钥： https: //archive.org/details/Magicgate
以上言论纯属想象，并未进行过相关实践。仅供参考。
Click to expand...

There is nothing in common between System 246 and Python2. Python2 use a retail PS2, the hdd is protected with HDD-DNAS, a DRM protection SONY developed for consumer products and is completely unrelated to MAGIC GATE...
http://www.system16.com/hardware.php?id=976

Python1 is related to System 246, uses a dongle card for boot.
http://www.system16.com/hardware.php?id=586


Unlike what went on with System573, there is no such thing as "Bemani Python" or "Bemani Python2". All Python and Python2 boards are identical. What change are add-ons connected to the boards externally.
 
我认为2x6就是一台PS2 LINUX，所以很多文件在windows系统上无法兼容或者无法被读取。不能读取并不代表它被加密，它只是一种不同于PS2记忆卡和2x6加密狗的文件，避免游戏被代理商或者黑客克隆，但是无法进行跟踪和识别，无法统计正确的销售数量，它虽然是一个保护文件，但并没有被加密，它仅仅用于销量统计，出库统计或者区域代码？
PS2主机可以进行软件破解，程序员利用PS2的游戏开发机模式进行了破解，我不确定2x6机器是否可以借鉴这个原理。https://github.com/MechaResearch/Me...仍然是一个强大的街机，该街机有不同的游戏厂商提供游戏，我认为可能也存在游戏开发机器的方式。
 
Last edited:
andymage said:
我认为2x6就是一台PS2 LINUX，所以很多文件在windows系统上无法兼容或者无法被读取。不能读取并不代表它被加密，它只是一种不同于PS2记忆卡和2x6加密狗的文件，避免游戏被代理商或者黑客克隆，但是无法进行跟踪和识别，无法统计正确的销售数量，它虽然是一个保护文件，但并没有被加密，它仅仅用于销量统计，出库统计或者区域代码？
PS2主机可以进行软件破解，程序员利用PS2的游戏开发机模式进行了破解，我不确定2x6机器是否可以借鉴这个原理。https://github.com/MechaResearch/Me...仍然是一个强大的街机，该街机有不同的游戏厂商提供游戏，我认为可能也存在游戏开发机器的方式。
Click to expand...
There is no need to hack anything, we can modify the files already. What is the problem is that a lot more research is necessary to be able to do that much. There is no longer any need to make hardware modifications, now everything boils down to analyze the software and the encryption protections and once that is done everything can be edited. The thing is that the protections are different for each game.
 
You must log in or register to reply here.
Back
Top