4.21 EBOOT Resigner

[Windfall]

Whoever doesn't have the new Rogero CFW is smart, there is no need to rush for an beta CFW that seems to be bricking most of the PS3.

[cannibal20]

Whoever doesn't have the new Rogero CFW is smart, there is no need to rush for an beta CFW that seems to be bricking most of the PS3.

agreed.

also, the guy who said why not sign everything for 3.55 obviously doesnt know that weve been stuck on 3.55 forever, and playing unpatched backups is far better. (every eboot or files ive ever replaced in my backups was kept on hand in case i could eventually play 1:1 backups. which is obviously superior in 10 years when u can play ps3 on any systems similar to how we can play nes on like everything, and yo u have to rerip the games that probably are unreadable or lost or something. while mine sit untouched in a box.

i dont even have a working dreamcast/saturn atm, and the games are stashed away... but i figure if i keep 1:1 backup copies around eventually i can play them on ps3 or something.

[tonyph33r]

can anyone tell me where to get my NPDRM please

[xinku]

Hi,



Have the same issue here. Any help someone ?

Have a nice day,

Slander

EDIT : I figured it out. In fact you have to use "NPDRM" option instead of "Disk Backup"... Works perfectly if you manage to grab the content-id of your PSN game.

your method work's fine BTW PSN is DOWN

[DEREKTROTTER]

im guessing this rogero cfw cant access psn since the update?

[JonJonB]

Hi,



Have the same issue here. Any help someone ?

Have a nice day,

Slander

EDIT : I figured it out. In fact you have to use "NPDRM" option instead of "Disk Backup"... Works perfectly if you manage to grab the content-id of your PSN game.

How could an ignorant slob like myself discover these content ids? I don't even know where to begin resigning PSN stuff because it's all just labelled as letters and numbers

[rimi]

it just uses 3.55 Keyset with APP vesion set to 3.60. There's no real 3.60 signing here.

@JonJonB

you can know the content ID by extracting the eboot and view the eboot info using scetool, its not that hard anyway. Also, you can use ALdo's tool ContentID viewer.

[JonJonB]

Thanks. I still can't figure out where to extract from in the first place though, where would Code Veronica HD PSN version (to use the earlier example) be stored on the hdd itself??

EDIT: managed to find out the folder by googling the pkg fix I originally installed (though if there's a database of PSN folder IDs I'd love to know about it) already fixed a couple, working fine, great tool.

[yes159]

Ok my uneducated guess. This tool is useful for people that made eboot to be played on 3.55 and now the game doesn't work on 4.21, this remedy to the problem. You don't have to redownload for the correct eboot, you just need to use this tool.

That makes sense. It would save time resign the old eboots instead of ripping the whole game over again

I dont think everyone understands that 3.55 is old news now. Its 4.21cfw time to rule. Now everyone is focusing on 4.21 so this tool takes our 3.55 patched eboots and signs them back to the way they were. But im also waiting for v2 to come out i dont want to brick my never yold cecha01

sucks my e3 flasher doesnet work with nand

I realize that 3.55 is old now, but i think i misread something in the tutorial for this program. When it said "extract", i thought it ment to extract the eboot, but i clearly see now that it is about extracting/unpacking the .zip file It also makes sense to resign the old 3.55 eboots instead of ripping the whole game over again.

[codone]

What i do not understand is -- why 3.55 eboots need to be resigned for 4.21. For instance, I can play an older game that is signed for say, 2.42, on 3.55 just fine... so why can't we load 3.55 on 4.21 ? I thought it was just that you can't play the newer versions on the lower versions... unless 3.55s are signed with some blacklisted key?

[oakhead69]

What i do not understand is -- why 3.55 eboots need to be resigned for 4.21. For instance, I can play an older game that is signed for say, 2.42, on 3.55 just fine... so why can't we load 3.55 on 4.21 ? I thought it was just that you can't play the newer versions on the lower versions... unless 3.55s are signed with some blacklisted key?

3.55 homebrew EBOOTs are not signed using the same private key as Sony use for 3.55 EBOOTs. Geohot created his own private key based on the information found by failoverflow. The hole that failoverflow found in Sony's security which allowed this was fixed by Sony in later F/Ws.

[charliedflea]

3.55 homebrew EBOOTs are not signed using the same private key as Sony use for 3.55 EBOOTs. Geohot created his own private key based on the information found by failoverflow. The hole that failoverflow found in Sony's security which allowed this was fixed by Sony in later F/Ws.

hey just a quick couple of questions, does anyone know if the new rogero 4.21 is patched for use with reactpsn? if so can this software be used to resign reactpsn for use on the 4.21 firmware?

thanks for your time in advance.

[oakhead69]

hey just a quick couple of questions, does anyone know if the new rogero 4.21 is patched for use with reactpsn? if so can this software be used to resign reactpsn for use on the 4.21 firmware?

thanks for your time in advance.

I do not think the vsh.self is already patched we would have to patch it ourselves. Not sure this is possible with the current tools, do we have the keys to unself and rebuild the vsh.self? Does MultiMan support read/writing from/to dev_flash on 4.21?

To give you an idea this is the outline process needed to patch the vsh.self:

=================patch 8byte in vsh.self for reActPSN==========================================
version addr old data new data function
3.55retail 0x30b230 4b cf 5b 45 -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.55retail 0x30ac90 48 31 b4 65 -> 38 60 00 00 // fixed act.dat missing after reboot
3.55debug 0×312308 4b ce ea 6d -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.55debug 0x311d68 48 31 b7 d5 -> 38 60 00 00 // fixed act.dat missing after reboot
3.41retail 0x305dc4 4b cf af b1 -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.41retail 0×305824 48 31 43 ad -> 38 60 00 00 // fixed act.dat missing after reboot
3.41debug 0x30cedc 4b cf 3e 99 -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.41debug 0x30c93c 48 31 47 1d -> 38 60 00 00 // fixed act.dat missing after reboot

==============patch vsh.self by youself for new CFW=====
run dev_blind
copy /dev_blind/vsh/module/vsh.self to d:/vsh/vsh.self.0
cd d:/vsh
unself vsh.self.0 vsh.self.elf
hexedit vsh.self.elf
if *(addr)==old data then *(addr)=new data
only 2 addr, 8byte data fixed in one vsh.self.elf
self_rebuilder vsh.self.elf vsh.self vsh.self.0
copy vsh.self to /dev_blind/vsh/module/vsh.self

As to the second part of your question, I do not see why we could not use this software to resign reactpsn for use on the 4.21 firmware.

I think you would have to be a very brave man to attempt it or have a H/W flasher.

I am still on 3.55 so can not try this.

EDIT:

Looks like somebody has already done the resigning for reActPSN v2.25 and it is available on another well know site (hax, cough). Still do not see how it will work unless the vsh is patched!!!

[MarcusRaven]

Okay, just did the update to 4.21CFW successfully. Using this, would my next course of action be attempting to load everything I have, and patching the things that don't load? (Homebrew, PSN games, and Backup games alike?)

[franzke]

if u dont wanna update that means ur a p#ssy not smart haha... im on 4.21 cfw now and the only bugs are some other games doesnt work like saints row 3 cause it was patched to work on the old kmeaw 3.55 i know if i changed it to the original eboot it will work fine.. well its not even a bug and showtime doesnt work it also need to be signed with 4.21 keys but this firmware doesnt have bugs like some of u are saying its almost like the early 3.55 firmware like kakarotos or somethng it just needs few patches but atleast i can finally play new games

[b33kewl]

What does this mean? I need to retrieve my games that I have saved on my hdd and move it to my portable hdd and then put the Eboot from this app in X 3.55 game, correct?

[blueplanet]

if u dont wanna update that means ur a p#ssy not smart haha

Please don't try to make people feel inferior because they haven't updated to rogeros beta cfw, its already been proven that it can brick consoles.

Don't feel pressured into updating peeps.
Especially with a more stable release coming very soon

[JOshISPoser]

i'm not a cat...i actually have a cat that is pretty ballsy. he rolls, rubs up next to, etc. my decent sized dog (about 90 pounds or a bit more).

so, i guess watch that clearly bashing statement. not everyone bricked their console, but it's still not smart even if your console didn't brick. according to reports, i could probably get on the cfw but the gamble is just stupid when a better version should be released sometime soon. whoop-di-doo, you get it a few days, maybe a week before other people...

[JonJonB]

Looks like somebody has already done the resigning for reActPSN v2.25 and it is available on another well know site (hax, cough). Still do not see how it will work unless the vsh is patched!!!

I resigned reactpsn today myself and it quit back to XMB saying "unknown CFW".

[charliedflea]

I do not think the vsh.self is already patched we would have to patch it ourselves. Not sure this is possible with the current tools, do we have the keys to unself and rebuild the vsh.self? Does MultiMan support read/writing from/to dev_flash on 4.21?

To give you an idea this is the outline process needed to patch the vsh.self:

=================patch 8byte in vsh.self for reActPSN==========================================
version addr old data new data function
3.55retail 0x30b230 4b cf 5b 45 -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.55retail 0x30ac90 48 31 b4 65 -> 38 60 00 00 // fixed act.dat missing after reboot
3.55debug 0×312308 4b ce ea 6d -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.55debug 0x311d68 48 31 b7 d5 -> 38 60 00 00 // fixed act.dat missing after reboot
3.41retail 0x305dc4 4b cf af b1 -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.41retail 0×305824 48 31 43 ad -> 38 60 00 00 // fixed act.dat missing after reboot
3.41debug 0x30cedc 4b cf 3e 99 -> 38 60 00 00 // fixed allow unsigned act.dat *.rif
3.41debug 0x30c93c 48 31 47 1d -> 38 60 00 00 // fixed act.dat missing after reboot

==============patch vsh.self by youself for new CFW=====
run dev_blind
copy /dev_blind/vsh/module/vsh.self to d:/vsh/vsh.self.0
cd d:/vsh
unself vsh.self.0 vsh.self.elf
hexedit vsh.self.elf
if *(addr)==old data then *(addr)=new data
only 2 addr, 8byte data fixed in one vsh.self.elf
self_rebuilder vsh.self.elf vsh.self vsh.self.0
copy vsh.self to /dev_blind/vsh/module/vsh.self

As to the second part of your question, I do not see why we could not use this software to resign reactpsn for use on the 4.21 firmware.

I think you would have to be a very brave man to attempt it or have a H/W flasher.

I am still on 3.55 so can not try this.

EDIT:

Looks like somebody has already done the resigning for reActPSN v2.25 and it is available on another well know site (hax, cough). Still do not see how it will work unless the vsh is patched!!!

hey,
just wanna say thanks for this fantastic respone!! its appriciated and very kind of you to spend the time writing it!
also thanks for the hint cough lol! got it!