Final Fantasy XIII-2 Asia version cannot decrypt properly

Question

Final Fantasy XIII-2 Asia version cannot decrypt properly

eric14142004 opened this issue 2 years ago · 21 comments

eric14142004 commented 2 years ago

I am trying to decrypt, apply cheats and resign the Final Fantasy XIII-2 Asia version [BCAS20224], but it ends up corrupting the save file.
It seems like the APP.DAT is not decrypted properly and failed the checksum.
Tested in both ver 1.7.4 and 1.8

Here is the log:
[2023-03-12 09:56:27] Loaded 1187 codes
[2023-03-12 09:56:38] Applying SFO patches '/dev_hdd0/home/00000001/savedata/BCAS20224-00/PARAM.SFO'...
[2023-03-12 09:56:38] PARAM.SFO was patched successfully
[2023-03-12 09:56:38] Applying cheats to 'FINAL FANTASY XIII-2'...
[2023-03-12 09:56:38] Active code: [Read Encryption KEY.DAT (Required)]
[2023-03-12 09:56:38] Decrypting 'KEY.DAT'...
[2023-03-12 09:56:38] (KEY.DAT) fsize = 16 / aligned fs = 16
[2023-03-12 09:56:38] Bruteforce Save Data Code
[2023-03-12 09:56:38] Applying [Read Encryption KEY.DAT (Required)] to '/dev_hdd0/home/00000001/savedata/BCAS20224-00/KEY.DAT'...
[2023-03-12 09:56:38] Var name = key
[2023-03-12 09:56:38] [key]:read(0x0 , 0x10) = B997E833
[2023-03-12 09:56:38] Active code: [Decrypt APP.DAT (Required)]
[2023-03-12 09:56:38] Decrypting 'APP.DAT'...
[2023-03-12 09:56:38] Error: can't find 'APP.DAT' in PARAM.PFD
[2023-03-12 09:56:38] Error getting AES keys
[2023-03-12 09:56:38] Bruteforce Save Data Code
[2023-03-12 09:56:38] Applying [Decrypt APP.DAT (Required)] to '/dev_hdd0/home/00000001/savedata/BCAS20224-00/APP.DAT'...
[2023-03-12 09:56:38] RANGE = 0 (0x0) - 560736 (0x88E60)
[2023-03-12 09:56:38] FFXIII Type=2 Encryption Key= [key]
[2023-03-12 09:56:38] [*] Total Decrypted Size Is 0x88E60 (560736 bytes)
[2023-03-12 09:56:38] [!] Decrypted data did not pass file integrity check. (Expected: 2B502E38 Got: 5D13FF00)
[2023-03-12 09:56:38] Encrypting 'KEY.DAT'...
[2023-03-12 09:56:38] Check (KEY.DAT) fsize = 16 / PFD fsize = 16
[2023-03-12 09:56:38] (KEY.DAT) fsize = 16 / aligned fs = 16
[2023-03-12 09:56:38] Encrypting 'APP.DAT'...
[2023-03-12 09:56:38] Error: can't find 'APP.DAT' in PARAM.PFD
[2023-03-12 09:56:38] Error updating PARAM.PFD details
[2023-03-12 09:56:38] Resigning save 'FINAL FANTASY XIII-2'...

Answer 1 · 2023-03-12T11:33:54.000Z

As mentioned in #108 , a bug was recently added to the FFXIII encryption on the ps3.

If you want, I suggest to try older versions. For example the first version with FFXIII decryption support to compare: https://github.com/bucanero/apollo-ps3/releases/tag/v1.5.5

But in any case, to properly test and fix this for the next version, I'll need the original XIII-2 save that you are using, before applying any changes or hacks. (I need the original working save)
Use Apollo to export the original non-modified save to ZIP and attach the exported zip to this issue so I can review it properly.

Answer 2 · 2023-03-12T19:35:08.000Z

Tested again with v1.5.5, see the same error message in log, and save file corrupted.

Here is the original save file: BCAS20224

Answer 3 · 2023-03-12T20:32:53.000Z

I have tested again in v1.5.5 with another region of FFXIII-2 [BLUS30776], and the decryption seems to work fine.
Maybe the issue only occurs in [BCAS20224]?

Here is the original save file I tested: BLUS30776

Answer 4 · 2023-03-12T21:12:02.000Z

thanks for sharing the zips for the saves.

Interesting, so the XIII-2 decryption works fine on BLUS, but fails on BCAS.
🤔 Maybe there's something different between regions, like encryption keys depending on region?

Btw, if you want to do further testing, you could try using PC tools to decrypt the BCAS data. My suggestion would be using "Bruteforce Save data" tool, and then the original FFXIII decrypt tool by Jappi88.

The PC decryptor tool can be downloaded here: https://github.com/bucanero/ps3-save-decrypters/raw/master/ff13-decrypter/samples/ffx13-encryptor.rar

I can't remember right now, but I think that Jappi88 decryptor actually handles the PS3 encryption too, so you might not need Bruteforce Savedata, unless you want to apply cheats. But to test the decryption, you can check that PC tool.

When I take a look I'll also share my findings.

Answer 5 · 2023-03-12T21:27:39.000Z

Thanks for sharing Jappi88's encryptor! However, it seems like this tool does not support BCAS20224:

I saw someone reported to Jappi88 for the same issue around 9 years ago, not sure if there's an updated version of this tool or not 🤣

I also tested another tool you made from https://github.com/bucanero/ps3-save-decrypters, also getting the same "integrity check" error message:

Look forward for you finds! Big thanks!

Answer 6 · 2023-03-13T17:18:32.000Z

Thanks for sharing Jappi88's encryptor! However, it seems like this tool does not support BCAS20224:

I saw someone reported to Jappi88 for the same issue around 9 years ago, not sure if there's an updated version of this tool or not 🤣

oh if Jappi's decrypt tool also fails then I'm not sure there's an easy fix around, since his tool was meant to be "universal" and it could even decode Xbox360 saves too. But clearly, BCAS20224 saves are using something different, either a key or seed is different from the regular XIII-2 saves.

I also tested another tool you made from https://github.com/bucanero/ps3-save-decrypters, also getting the same "integrity check" error message:

Look forward for you finds! Big thanks!

My tool and the code in Apollo are based on Jappi88's tool, so I'm inheriting any error or limitation from the original tool. (As noted on your screenshots, both tools are reporting the "data did not pass integrity check" 😓 )

Answer 7 · 2023-03-13T21:29:48.000Z

That make sense then!

Any good suggestions about how to find the correct key or seed of BCAS20224 saves?

Answer 8 · 2023-04-07T09:38:23.000Z

This tool can
https://www.360haven.com/forums/downloads.php?do=file&id=773

Answer 9 · 2023-04-07T13:36:55.000Z

This tool can https://www.360haven.com/forums/downloads.php?do=file&id=773

I don't own BCAS20224 so I can't say, but I'm not sure if that tool by Jappi88 will work with this issue.
The "FF13-2 save editor" was released on 2012, and the "Multi-FF13-encryptor" by Jappi88 was released on 2013.

maybe @eric14142004 can test out this save editor and confirm if it was able to edit the save and the game loaded it properly or not.

Answer 10 · 2023-04-07T17:56:42.000Z

@gfhhhg @bucanero
Just tested with my BCAS20224 save, and unfortunately, that tool does not work.

Answer 11 · 2023-04-07T20:05:09.000Z

@gfhhhg @bucanero Just tested with my BCAS20224 save, and unfortunately, that tool does not work.

Thanks for testing. I assumed that this wouldn't work. (the "save editor" by Jappi was older than the multi-decrypter by the same Jappi88).
I'll leave this ticket open for reference, but unless the EBOOT.BIN from BCAS20224 is reversed and decompiled, I guess this Asia region save will remain encrypted.

Answer 12 · 2023-04-08T06:06:11.000Z

@gfhhhg @bucanero Just tested with my BCAS20224 save, and unfortunately, that tool does not work.

I also have the game BCAS20224, which I successfully modified many years ago using this tool. Today, I tested it again and still successfully modified it. Did you make any mistakes in the operation there

Answer 13 · 2023-04-08T06:11:47.000Z

Well, this is interesting, because I was able to modify my save with this tool, but I cannot read the save file when I upload it back to my PS3. Could you please try if you can?

Answer 14 · 2023-04-08T06:21:04.000Z

Well, this is interesting, because I was able to modify my save with this tool, but I cannot read the save file when I upload it back to my PS3. Could you please try if you can?

I don't have any issues here. Has your game updated to 1.06? If not, please update to 1.06
before saving and trying to modify it

Answer 15 · 2023-04-08T06:32:41.000Z

I think this is the resolution! My save data was before v1.06, I have tested again after creating a new save file in v1.06 and it's working now!
Thank you so much for sharing!

Answer 16 · 2023-04-08T10:08:43.000Z

I think this is the resolution! My save data was before v1.06, I have tested again after creating a new save file in v1.06 and it's working now!

Thank you so much for sharing!

As a final test, could you check if the 1.06 save can be also decrypted with the other decrypt tool by Jappi or my tools? it also gives errors?

Answer 17 · 2023-04-08T13:46:58.000Z

I think this is the resolution! My save data was before v1.06, I have tested again after creating a new save file in v1.06 and it's working now!
Thank you so much for sharing!

As a final test, could you check if the 1.06 save can be also decrypted with the other decrypt tool by Jappi or my tools? it also gives errors?

FF13 encryption and apollo-ps3 are both invalid for BCAS20224 and can damage the archive. I have tested both and only Final Fantasy XIII-2: Save editor can be used

Answer 18 · 2023-04-08T15:01:57.000Z

FF13 encryption and apollo-ps3 are both invalid for BCAS20224 and can damage the archive. I have tested both and only Final Fantasy XIII-2: Save editor can be used

Thanks for testing. So, a quick summary:

BCAS20224 save, v1.06

Final Fantasy XIII-2 Editor by Jappi88 = OK ✅
Final Fantasy XIII Encryptor by Jappi88 = Error 🛑
Apollo = Error 🛑

could you upload a working sample v1.06 save-game? at least to test on my side and check what could the editor be doing with the save. All the other editions work fine, so I still wonder if it's just a different key.

Answer 19 · 2023-04-15T10:16:52.000Z

FF13 encryption and apollo-ps3 are both invalid for BCAS20224 and can damage the archive. I have tested both and only Final Fantasy XIII-2: Save editor can be used

Thanks for testing. So, a quick summary:

BCAS20224 save, v1.06

Final Fantasy XIII-2 Editor by Jappi88 = OK ✅

Final Fantasy XIII Encryptor by Jappi88 = Error 🛑

Apollo = Error 🛑

could you upload a working sample v1.06 save-game? at least to test on my side and check what could the editor be doing with the save. All the other editions work fine, so I still wonder if it's just a different key.

The reason was found that the original Secure File ID was incorrect. This is the correct Secure File ID: 070BB2ADBCA037B32AD3BF41C90644BB. Replacing the incorrect Secure File ID in games.conf can solve the problem

Answer 20 · 2023-04-15T11:55:51.000Z

The reason was found that the original Secure File ID was incorrect. This is the correct Secure File ID: 070BB2ADBCA037B32AD3BF41C90644BB. Replacing the incorrect Secure File ID in games.conf can solve the problem

Oh, that explains the problem! thanks for sharing the info and the correct secure file-id. 👍
I'll be running a final test and update the files to fix this issue.

Answer 21 · 2023-04-18T19:09:40.000Z

Fixed in bucanero/apollo-patches@423b9d9

Tested with the correct secure file-id provided by @gfhhhg , and the decrypter works ok 👍

./ff13-ps3save-decrypter -d -2 APP.DAT

ff13-ps3save-decrypter 0.1.0 - (c) 2021 by Bucanero

[*] Total Decrypted Size Is 0x88E60 (560736 bytes)
[*] Decrypted File Successfully!

Users need to update the games.conf file to solve this issue:

if the PS3 has network access: go to Settings, and select Update Application data. Apollo will download the latest patch and games.conf from the official repository.
if PS3 is offline, download and copy the file manually: https://github.com/bucanero/apollo-patches/raw/main/PS3/games.conf