Previously Unplayable 3.50 Games Rebuilt to Run on 3.41

Published on 01-03-2011 09:22 AM

68 Comments

Veritas?, of PSX-Scene, has written a handy guide, on getting previously unplayable 3.50 games, to work on 3.41 consoles. Games such as Tales of Graces, Need For Speed, Gran Tursimo, which previously did not work, are now functioning on 3.41 firmware. Prebuilt EBOOT's with the patches applied, are floating around the net, but we personally will not link to them. The video below, shows a console running the modified 3.41 Gran Turismo EBOOT.

Posted by Veritas?:

I've actually written this a few times and promptly lost it due to browser instability. Oops.

Anyway, this guide requires you to have some knowledge of how the SELF and ELF file formats are laid out. I don't have a quick tool to do this for me, but it takes maybe 5 minutes of my time to do it by hand.

Open EBOOT.BIN in a hex editor of your preference.
In EBOOT.BIN, look at the SELF control info, if you see anything resembling the game titleid, it's an NPDRM SELF and this guide won't work, give up.
Use readself on EBOOT.BIN to get information about the encrypted metadata sections.
unself EBOOT.BIN eboot.elf
Open eboot.elf in a hex editor of your preference.
In eboot.elf, go to every encrypted metadata section (now decrypted), copy its data, and replace the encrypted data in EBOOT.BIN.
In EBOOT.BIN, change SELF header to indicate it's FSELF.
In EBOOT.BIN, change SELF section headers that are marked as encrypted to say they are not encrypted.
If the game is a newer SDK version (like GT5, which is 3.50), in EBOOT.BIN, find the .sys_proc_param segment and change the SDK version to something earlier, such as 3.41. This will probably cause crashes in games that actually use newer SDK features that are not available in earlier SDK versions.
Save EBOOT.BIN
Cross fingers, run game, hope it works.

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

Categories:

Tutorials

68 Comments

theruler-PSG - 01-03-2011, 09:41 AM
- Reply
NFS HP *confirmed working* EBOOT.BIN for 3.41 - http://www.multiupload.com/5PUVRZWO28

CREDIT: "Veritas?"

varun037 - 01-03-2011, 09:45 AM
- Reply
thanks for the decryted eboot.bin

kindly up the decrypted eboot files for GT5 and other unplayable games... have been waiting for this for such a long time....

thanks once again.....

KaMi SaMa - 01-03-2011, 09:52 AM
- Reply
Originally Posted by varun037

thanks for the decryted eboot.bin

kindly up the decrypted eboot files for GT5 and other unplayable games... have been waiting for this for such a long time....

thanks once again.....

i found this laying around, try it out GT5 US version, that's wht it said :P

http://loadfiles.in/5xw0ql5x5j6g/BCU...[test].zip

varun037 - 01-03-2011, 09:54 AM
- Reply
thanks for fast update... i cannot expect a faster reply

Flores Ismael - 01-03-2011, 09:54 AM
- Reply
is their any sign of playing back ups os3up:n ps3 firmware 3.55

straith - 01-03-2011, 09:56 AM
- Reply
Originally Posted by varun037

thanks for the decryted eboot.bin

kindly up the decrypted eboot files for GT5 and other unplayable games... have been waiting for this for such a long time....

thanks once again.....

Well it has nothing to do with decrypt-encrypt. Eboot.bin was just modified with an hex editor. It could have been done before all those key were released.

Correct me if i wrong

daudi - 01-03-2011, 09:58 AM
- Reply
hey can you tell a little about this ps3 hack,,? i am a newbie in it. will appreciate..

grandy - 01-03-2011, 09:58 AM
- Reply
Originally Posted by straith

Well it has nothing to do with decrypt-encrypt. Eboot.bin was just modified with an hex editor. It could have been done before all those key were released.

Correct me if i wrong

Thats incorrect they're getting data from the decrypted eboots and putting them into the encrypted ones.

straith - 01-03-2011, 10:19 AM
- Reply
Originally Posted by grandy

Thats incorrect they're getting data from the decrypted eboots and putting them into the encrypted ones.

I see

Thanks all developers for the great work

JohnnyCage2008-PSG - 01-03-2011, 10:33 AM
- Reply
Harry Potter And The Deathly Hallows: Part 1 - BLES00931
http://www.fileserve.com/file/8JszRUB

Gran Turismo 5 - BCUS98114 - Veritas
http://www.fileserve.com/file/4EcN5ZP

Need For Speed: Hot Pursuit - BLUS30566 - (All Versions) - Veritas
http://www.fileserve.com/file/9mfMW3H

Tales Of Graces F - BLJS10093 - Veritas
http://www.fileserve.com/file/dk2xGbV

bone - 01-03-2011, 10:36 AM
- Reply
I can confirm that the new eboot for hot pursuit works with PAL EUR version BLES00949 I have just tested it myself on firmware 3.41 jailbreak. All you have to do is swap the old eboot for this one http://www.multiupload.com/5PUVRZWO28 I think its USA eboot but it works on my PAL console.

KaMi SaMa - 01-03-2011, 10:41 AM
- Reply
"SCEkrit, a tool for obtaining private Sony keys!" damn too much stuff is coming out
already.... (lol that doesn't sound right ,does it ?) anywayz. brilliant stuff keep up the good
work ppl ^^,

Heden - 01-03-2011, 10:52 AM
- Reply
Originally Posted by straith

Well it has nothing to do with decrypt-encrypt. Eboot.bin was just modified with an hex editor. It could have been done before all those key were released.

Correct me if i wrong

It's wrong.
In order to modify the SDK version used, you need to decrypt the SELF.
Then, the guy creates a F(ake)SELF where data are not encrypted.
In brief:
EBOOT.BIN (signed/encrypted) -> GAME.BIN (unsigned/decrypted) -> SDK change -> EBOOT.BIN (Fake signed)
It only works (at the moment) because the game is not a real 3.50 game (using the SDK 3.50) nor DRM'ed.
Anyway great works ! ;-)

indecks-PSG - 01-03-2011, 01:15 PM
- Reply
Any chance of getting Splatterhouse's eBoot posted?

Thanasis Xrisantzas - 01-03-2011, 01:21 PM
- Reply
What about the EU GT5?I used the USA eboot but it doesn't work for the EU game...

jon - 01-03-2011, 01:26 PM
- Reply
Any chance someone gets Red Dead Redemption Undead Nightmare retail version working? I brought this game and it's been catching dust since I can't play it

coltsfan4life-PSG - 01-03-2011, 01:29 PM
- Reply
I hope someone finds a way to modify game updates so we can actually update our games fully. I assume you just have to edit the update pkg file to make it run on 3.41 since most newer updates are created with the latest sdk. If I have some free time after work today, I might mess around with it to see if i can get it working lol.

Oh, and could someone post Prince of Pursia (remix/ps3 updated) games? Thanks

Anjaana Anil - 01-03-2011, 01:37 PM
- Reply
can anyone pls give me decrypted eboot of prince of persia trilogy coz its getting me black screen im a newbie here dont know much pls help guyz !!!!

Rage-PSG - 01-03-2011, 01:55 PM
- Reply
Is that a bluray led I see? Is it even possible to boot the jailbreak with a BR-Disc? So fare with mine its a nono.