Asure/Aldo's KLicense Tool Updated - Make You Own 3.60 Game Patches for 3.41/3.55

Published on 08-14-2012 10:51 PM

36 Comments

Aldostools has recently updated his and Asure's KLicense Tool. With this tool, in conjunction with SCETool, allow you to create your own 3.60 game patches for 3.41/3.55 JB/CFW PS3 consoles. This is by far the best tool to use for making your own patches, and is even better than some of the patches currently floating around out on the internet. But don't just take my word for it...

Here is what aldostools had to say about this release, here at PSX-Scene:

It seems that some here have missed this:
Asure/Aldo's KLicense Tool Discussion - Page 18

Originally Posted by aldostools

http://aldostools.org/temp/klics.txt (2kb)

00000000000000000000000000000000 No_klic
72F990788F9CFF745725F08E4C128387 NP_klic_free
00000000000000000000000000000000 BATTLEFIELD 3 (1.05) [BLES01275]
AF0A8F0A8909F09234091AFADF909AF0 Call of Duty: Blackops (1.13) [BLES01031] [BLES01032] [BLUS30591]
496E66696E697479576172644B657900 Call of Duty: Modern Warfare 3 [BLES01428] [BLES00687] [BLUS30838]
D84D248D58EEA66FAC705893E7C0865D Champion Jockey: G1 Jockey & Gallop Racer [BLES01235]
3E5A737B7D7D6F242D3F305873647153 Deus Ex Human Revolution (1.01) [BLES01150]
CBB2EAB0E2925A89DF06A843B7F2221B Dragons Age II (1.05) [BLUS30645] [BLUS30645]
B608E78018A335E494B972A6B717A166 Metal Gear Solid HD (1.01) [BLES01419] [BLUS30847] [BLJM61001]
6F46772AC2C84BA59484A73BB13B26BB NBA 2K12 (1.05) [BLES01418] [BLUS30830] [BLJS10136]
19089CBAF948487F9530832BF477B369 Portal 2 (1.01) [BLES01222] [BLUS30732]
58A4BADB96035258C54DDE01F210CBDD Rage (01.01) [BLES01377]
729A4F5EE376794650782D0CCD7DCB72 Red Dead Redemption (1.07) [BLES00680] [BLUS30418]
90394BD86C745DA84D0E4209F073E100 Sniper Ghost Warrior (1.01) [BLES01286]
08727DF80102030431C855B900000101 SOCOM 4 US Navy SEALs (1.05) [BCUS98135]
15454864315343513216315346265612 Test drive unlimited 2 (1.06) [BLUS30527] [BLES00884]
C0A3B7641C2AD1EF20133A28A3E15FE3 Tom Clancy Splinter Cell Trilogy HD (1.01) [BLES01146]
007BAD666BED00BABE00B0B05AD0B173 Tour de France 2011 (1.01) [BLES01296]
7FE7048BC7E4299916881A3A0E08CD73 WWE 12 (1.02) [BLES01439]

BTW: Notice that same klic is used in different regions.

It is a scetool-brute force tool, with heuristic algorythms to help to reduce the time finding the klicensee.
Just copy the EBOOT.BIN, self/sprx and PARAM.SFO to the folder and let the program fix them.
If the klicense is already known (currently 16 known klicensees), it will take only 3 seconds to resign/fix your game using 3.40 or 3.55 keys.
If the klicense is unknown, it could take some minutes or hours to find it. eg. WWE 12's took 1 hour 7 mins 37 secs to find it.

The tool is based on Asure's brute force batch script, but improved a lot with the help and ideas of several devs/users @ crunch (see the credits).

Here is what PSX-Scene's own BahumatLord had to say about the update:

It will brute force the klicense from game updates so that self and sprx files can be decrypted and resigned correctly. It will also apply a hex patch to prevent error 8001003C. I've been using it the last couple days and it is hands down the best tool to use for making your own patches.

Sadly a lot of the patches that have been uploaded to PS3SceneFiles and elsewhere just don't work because the self/sprx files weren't resigned or the people that uploaded just didn't bother to test the games

This works in combination with SCE Tool. There's a download link there that has SCE Tool included or you can just download the klicense BruteForce tool if you already have SCE Tool.

Instructions on use

Install your 3.60 game updates
if it just uses an eboot, copy that eboot into the program directory and run eboot_fix.bat
if it has self and/or sprx files too copy the eboot and all sprx/self files into the directory and run BruteForce.EXE. It has some klicense files stored already and will decrypt and resign everything automatically. If it doesn't have the klicense stored it will bruteforce the klicense for you. It can take anywhere from a couple minutes to over an hour - It just depends on how long it takes to find the klicense
After everything is resigned copy/ftp the newly resigned eboot/sprx/self files to the proper place in dev_hdd0/game/**GAMEID**/...

Downloads:

exe only 1.7.5: http://aldostools.org/temp/BruteForce.exe (62kb)
full archive: http://aldostools.org/temp/scetool_0.2.8_bruteforce.7z (204kb)

Source: aldostools@PS3Crunch

Thanks to aldostools and BahumatLord for the news!

PSX-SCENE: The Pinnacle Scene Xenocracy

● Latest News ● Report News ● Search Forums ● Hall of Fame ●
● Facebook.com/PSXScene ● RSS ● Twitter.com/psx_scene ●

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

deank, RUT Dark Ronin, Nathan_r32_69 and 10 others like this.

Categories:

_{Tags :

3.41,

3.55,

3.60,

aldostoools,

asure,

brute force,

fix,

klicense,

patch,

ps3,

scetool}

36 Comments

wanted - 08-16-2012, 02:43 AM
- Reply
Thanks for this. Finally got a working english Disgaea 4 using it. So happy

ahou - 08-16-2012, 10:51 AM
- Reply
Originally Posted by RandomUser

Is it normal for this tool to run for 10 hours and not find the klicensee? I have this tools running for ten hours and still counting and it has not found the license. Perhaps I am trying to find the lic for a game that requires firmware higher then 3.60 and that's the reason it is running for so long without result? I am currently trying the tool on Ratchet and Clank All for One and have it signed to Firmware version 3.41.
I think that is the reason why, but dunno for sure.

What cpu are you running it on? Considering the article cited a time of over an hour for one, i can definitely see it taking that long on a cheap/older cpu.

Originally Posted by wanted

Thanks for this. Finally got a working english Disgaea 4 using it. So happy

Disgaea 4 jp has had an english patch (translation taken directly from the official english version) for long time now.

aldostools - 08-16-2012, 12:22 PM
- Reply
Some interesting statistics from andreus (who has contributed a lot with the development of the tool)

Originally Posted by andreus

Some interesting statistics. Of all the klic found so far - 17 (if we remove battlefield 3)
Aligments:
- 9 could be found with the default section aligment
- 16 could be found with the 4 section aligment
- 1 (Portal 2) only could be found with a section aligment of 1

Found at section:
- section 12: 6
- section 13: 2
- section 14: 2
- section 16: 1
- section 19: 1
- section 25: 2
- section 26: 2
- section 27: 1

Pattern skipping:
- Skip all patern: 16
- Do not skip *0000*: 1 (Socom)

fivee - 08-16-2012, 02:56 PM
- Reply
Originally Posted by aldostools

yes and *no*

The tool is mainly a klicensee finder. It uses scetool by naehrwert/flatz and brute force attack strategy to decrypt the npdrm eboot/sprx/self found in updates. It also uses some heuristic algorythms to try to *guess* the klicensee faster.

Once the klicensee is found, it resigns the EBOOT with 3.55/3.40 keys like deank's tool.

Thanks, and to Madri2 as well

its the SELF's that have that extra layer, i just "joined" then in my head as PSN content, and thought they had the same encription.
up till now i never had a reason to go poking in pkg's, if there was an uptade signed to 3.55 i used that, if there wasnt then i was out of luck.

Now with the 3.60 keys i'll have to take a look at what newer patches signed for 3.60.

Again thanks and good work.

RandomUser - 08-16-2012, 05:30 PM
- Reply
Originally Posted by ahou

What cpu are you running it on? Considering the article cited a time of over an hour for one, i can definitely see it taking that long on a cheap/older cpu.

My Computer was not cheap when I built it but its probably is now , and it is an older Xeon Clovertown clocking at 2.33 Ghz with eight cores. I currently have 64GB of RAMs in this machine and it runs great! Another thing I realized it took so long is the fact that it failed to find the license for the game.

Attachment 37132
I realize this pic does not show the full 10 Hours, I basically started where I left off in the pic above.

In case your wondering, I am currently building a computer that going to have 40 hyper-threaded cores, so it will appear as 80 Cores to Windows, and it will be capable of having 1TB of RAM. That's a lot of cores, in fact Windows Ultimate will not be enough to access all the cores due to the license, I would need to use a server version of Windows.

I got the game to work on 3.41 using a BLES (PAL) patch from the article here.

Sm0Ke - 08-16-2012, 07:08 PM
- Reply
after trying the dirt 3 fix from the post that listed the new "49 games patched" earlier this month and that not working, I tried this tool. Let it run for over 1 day and came up with this Tried: 1312844 klic keys - nothing found 119740.299 secs.
Has anyone successfully got a working fix for dirt 3?

aldostools - 08-16-2012, 10:02 PM
- Reply
DiRT 3 [BLES01287] update 1.01 is working fine for me.
It only needs the EBOOT.BIN fixed and install_patch.nfs and patch.nfs.

Did you try fixing it using my latest PS3 Tools? Extract the PKG (right click and select Extract to current folder...), go to USRDIR, press Ctrl+Enter on the EBOOT.BIN to resign it, then return to the folder next to the PKG (the folder should look like a Content ID). Then right click on the folder and select Make PKG...

Sm0Ke - 08-16-2012, 10:44 PM
- Reply
Thanks for the prompt reply aldos
I've had no luck in compiling something that is currently working. I'm still receiving the same error 3.60 needed msg on the ps3 when I try to launch dirt 3. Its the only game I'm still having issues with.

aldostools - 08-16-2012, 11:00 PM
- Reply
Did you check the PARAM.SFO of the game update ? It must be changed to 3.55 or 3.40

Try deleting the Game Data and test again. Some PARAM.SFO values are cached in the PS3 database, even when the physical file has other values.

You can also try rebuilding the database through Recovery.

adolfomantis - 08-17-2012, 09:15 AM
- Reply
HI guys. Thanks Aldo (muito obrigado). I tried you eboot.bin decrypt/fix/resign batch, but that one resigns for 3.55, not for 3.41. I modified your batch file, tried with a eboot.bin (only one) and works,

Modified Batch for 3.41 is: eboot_fix.bat download for free on file share letitbit.net

please if you could, check it. Thanks in advance.

lamirjk - 08-17-2012, 04:04 PM
- Reply
Aldostools thank you very much for this work.

Sm0Ke - 08-19-2012, 02:05 AM
- Reply
got it to work after following your guidance aldos, It was a simple directory output location that was throwing me. Up and running now, thanks for the help and time you've spent compiling this awesome program.

mad3d - 08-19-2012, 05:08 PM
- Reply
aldostool your tool is great but could you add an option to keep/generate decrypted .elf once k_license is found ?

Funtimez - 08-30-2012, 02:13 PM
- Reply
where do the new files go? i put my eboot and self files in the main dir but it changes all the files to original but i dont see the new modded files.

aldostools - 08-30-2012, 08:34 PM
- Reply
@mad3d
If you install my latest PS3 Tools Collection 2.0.25, you can decrypt any supported EBOOT.BIN/SELF/sprx at any moment just pressing Shift+Enter on the file. So that option is not needed.

Or you can make copy of the ELF in another safe place after you launch the BruteForce.

BTW the BruteForce 2.0.2 was released with support for scetool 0.2.9

Jay-Jay - 11-01-2012, 06:56 PM
- Reply
I've also notice that if we right click an eboot we have some tools in the menu. I'd like to know how to use them properly? Will it overwrite the original eboot or will it make a backup before anything?

Here is a right click snapshot of an eboot:

Attachment 39107