PSX-SCENE Forum Discussion for Sony PlayStation/PsOne/PS2/PS3/PSP/PS VITA
  • PS3 3.60 Keys Leaked

    First it seemed as if it was just a rumor or perhaps fake. But euss has confirmed that they are indeed real. The day I'm sure all of you have been waiting for. The release of some PlayStation 3 keys (lv1ldr, lv2ldr, isoldr, appldr) have been leaked to the masses allowing you to patch 65 additional games. You will need a few tools in order to patch the SFO of your games. Or not. Word is Rogero says a new custom firmware will be made available. So those of you who don't want to decrypt and encrypt files should just wait a little longer.


    eussNL Comments:
    If you post keys in a random topic, you will fast enough be
    marked as a troll. When posting keys, please do it in proper
    format, so it can be easily debunked/proven
    greetz, eussNL
    KaKaRoTo Comments:
    3.60 keys Update:

    Q: recently 3.60 keys surfaced (lv1ldr, lv2ldr, isoldr, appldr), what does this mean for this release and the future?
    A: That is actually a multiparted answer:

    Now that several binairies (Iso module + CoreOS minus the loaders that are inside lv0) can be decrypted, more investigation can be done in them, which give a new boost in (unrelated to the HeN) other targets, like:
    • Hardwareless downgrades : Downgrading with PSgrade Dongle (lv1.self)
    • QA Flagging / systemtokens (spu_token_processor.self) and usertokens (spu_utoken_processor.self)
    • PS2 compatibility (mc_iso_spu_module.self , me_iso_for_ps2emu.self , sv_iso_for_ps2emu.self)
    • Getting per_console_root_key_1 / EID_root_key on 3.56+/slim3K (lv1.self , aim_spu_module.self)
    • Backsigning applications for <=3.55 and patch sys_proc_param_version (appldr.self , lv2_kernel.self)

    Q: So does this mean a future release would be sooner?
    A: Only God knows But it can also be that because of the above, it would become meaningless/surpassed by better progress. So lets all hope for the best
    I will be adding to this article as I learn more. Just wanted to rush this news to you asap.

    UPDATE: Use Deank's EBOOT Fix Tool 0.5 to convert the EBOOTS for you. Just download the keys add them to EBOOT Fix Tool's ps3 folder. (Download below includes the keys, so no need to download them unless using other methods)

    Quote Originally Posted by deank
    They also posted my ebootFIX/ebootMOD tools prepackaged with the keys in .ps3 folder, so it is ready to be used like in the old 3.41/3.55 days.

    Have in mind that some games (like Sniper Ghost Warrior) have additional .self/.sprx files and it is better to use ebootFIX by dragging the PS3_GAME folder to it - it will find and fix all necessary files. If you use ebootMOD you'll have to search for these files yourself and 'fix' them one by one.
    UPDATE 2: Another Method
    Use SCETool to Decrypt a PS3 3.60 EBOOT.BIN File:
    For those of you who want to decrypt a 3.60 EBOOT.BIN use scetool. Download scetool_0.2.7.zip unzip it to C:\scetool. Create a new folder inside scetool and name it data and download these files here:

    1. keys: ps3devwiki.com/files/devtools/scetool/data/keys
    2. ldr_curves: ps3devwiki.com/files/devtools/scetool/data/ldr_curves
    3. vsh_curves: ps3devwiki.com/files/devtools/scetool/data/vsh_curves


    Put them inside data folder. Put your EBOOT.BIN file in scetool folder. Go to start - run - cmd and cd to the folder were scetool is. For example "cd C:\scetool". Then type this command to decrypt the EBOOT.BIN: "scetool -d EBOOT.BIN EBOOT.ELF" and use this one to encrypt it to 3.41: C:\scetool>scetool -0=SELF -5=APP -6=0003004100000000 -e EBOOT.elf EBOOT.BIN
    Download: Deank's EBOOT Fix Tool 0.5 - UPDATED LINK

    Source: elotrolado via ps3crunch via ps3devwiki via ps3news

    Thanks to deeptrap for the awesome news tip!

    PSX-SCENE: The Pinnacle Scene Xenocracy
    Comments 343 Comments
    1. YoYoBalls's Avatar
      YoYoBalls -
      Quote Originally Posted by BahumatLord View Post

      Edit: I tried it with my TB patched copy and I get a spinning yellow warning sign. I'm going to try to redump the game clean and try again. I've never seen that warning logo. It's not a Sony one, so they might be junk patches

      I have only seen that image with portal 2 trying to run it disc-less. It maybe a dev error for portal 2 - who knows
    1. BahumatLord's Avatar
      BahumatLord -
      I just checked a clean/untouched copy of Portal 2 with the PSFR33 update patch and it still gives that error symbol. They're junk patches.
    1. JOshISPoser's Avatar
      JOshISPoser -
      i have noticed in comments sections that people aren't getting them to work. idk if i can report the patches on a site i use, but i shall try so people don't pull out their hair.
    1. BahumatLord's Avatar
      BahumatLord -
      most patches work fine that just needed the Eboot patched, but some like Portal 2 that needed SPRX + Sdat files patched are problematic. If you've got the names of working patches for games like that it would be a big help. Just no download links. I'm pretty sure everybody knows how to use google
    1. oakhead69's Avatar
      oakhead69 -
      Quote Originally Posted by BahumatLord View Post
      @YoYouBalls - yes that's exactly it

      @oakhead69 - Would you mind sharing the script you're using to brute-force the klicense? I get what you're saying but I don't want to get into doing a base-16 number generator if you've already got a working method
      Hi BahumatLord, at the bottom of this post is the code I have written to brute force the klicense. Sorry it is C source code not a script, I hope you can make use of it. Sorry no comments unlike my script as I was not expecting any body else to be interested in it. Not sure if I am allowed to post the .exe

      Examples to test it with are

      Rage (BLES01377) offset 0x1978b20 into eboot.elf for 58a4badb96035258c54dde01f210cbdd
      Deus Ex (BLES01150) offset 0x0df07c0 into eboot.elf for 3e5a737b7d7d6f242d3f305873647153

      Rage is working fine for me but I am struggling to get Deus Ex working it locks up the PS3 when I try to launch a single player game.

      Some other scripts that I have written that might help are.

      I use this to re-encrypt the self and sprx files, this has the klicense for Deus Ex in it you will need to replace this.
      Code:
      @echo off
      %~d0
      cd %~p0
      
      IF "%1"=="" (set filename=EBOOT.BIN) ELSE (set filename=%1)
      echo fn is %filename%
      
      FOR /F "tokens=*" %%A IN ('scetool -i "%filename%" ^| find "ContentID"') DO SET contentID=%%A
      set contentID=%contentID:~13%
      echo contentID is "%contentID%"
      
      if filename==EBOOT.BIN (scetool -d "%filename%" "%filename%.ELF") ELSE (scetool -l 3e5a737b7d7d6f242d3f305873647153 -d "%filename%" "%filename%.ELF") 
      
      
      IF NOT EXIST "%filename%.ELF" goto decryptFailed
      
      rem Search and Replace 3.6 with 3.4
      gsar.exe -x18 -o -s:x24:x13:xbc:xc5:xf6:x00:x33:x00:x00:x00:x36 -r:x24:x13:xbc:xc5:xf6:x00:x33:x00:x00:x00:x34 "%filename%.ELF"
      
      scetool.exe -l 3e5a737b7d7d6f242d3f305873647153 --sce-type=SELF --compress-data=FALSE --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004000000000 --np-license-type=FREE --np-content-id=%contentID% --np-app-type=EXEC --np-real-fname=%filename% --encrypt "%filename%.ELF" "fixed-%filename%"
      del /Q "%filename%.ELF"
      scetool -i "fixed-%filename%" > "fixed-%filename%.txt"
      goto eof
      :decryptFailed
      echo Decrypt failed look in %filename%.txt
      scetool -i "%filename%" > "%filename%.txt"
      :eof
      pause
      Updated version of my re-encrypt script that also uses gsar (Google for it) to replace the 2413bcc5f600330000036 with 2413bcc5f600330000034. i.e. 3.6 to 3.4 in the EBOOT.BIN. It also has a pause in the script before the pkg repack allowing you to fix any self or sprx files.
      Code:
      rem @echo off
      
      rem Move to the current directory if pkg file drag and dropped.
      %~d0
      cd %~p0
      
      SETLOCAL ENABLEEXTENSIONS
      SETLOCAL DISABLEDELAYEDEXPANSION
      
      rem check that PARAM_SFO_Editor.exe
      IF NOT EXIST PARAM_SFO_Editor.exe goto noSFOEditor
      
      rem check that pkgview.exe
      IF NOT EXIST pkgview.exe goto nopkgview
      
      rem check that old EBOOT.BIN does not exist
      IF EXIST EBOOT.BIN goto ebootbin
      
      rem check parameter is a pkg file and it exists
      IF NOT "%~x1" == ".pkg" goto notpkg
      IF NOT EXIST %1 goto nofile
      
      rem get the pkg extraction folder name
      set pkgfolder=%~n1
      echo pkgfolder is "%pkgfolder%"
      
      rem get the package version needed later to repack to package
      FOR /F "tokens=*" %%A IN ('psn_package_npdrm %1 ^| find "PackageVersion"') DO SET PackageVersion=%%A
      set PackageVersion=%PackageVersion:~19% 
      echo PackageVersion is "%PackageVersion%"
      
      rem Extract the package file
      call PkgView.exe -ex %1
      
      rem check that it has extracted correctly
      IF NOT EXIST "%pkgfolder%" goto nopkgfolder
      
      cd "%pkgfolder%"
      
      rem get the game ID needed later to repack to package
      FOR /F "tokens=*" %%A IN ('dir /b /ad') DO SET gameId=%%A
      echo gameId is "%gameId%"
      
      cd "%gameId%"
      
      rem check that PARAM.SFO exists
      IF NOT EXIST PARAM.SFO goto noPARAMSFO
      
      rem patch the PARAM.SFO file to firmware v3.4 from v3.6
      ..\..\PARAM_SFO_Editor.exe PARAM.SFO --out=PARAM.SFX
      ren PARAM.SFX PARAM.TMP
      call ..\..\replace 03.6000 03.4000 PARAM.TMP >> PARAM.SFX
      del /Q PARAM.SFO
      ..\..\PARAM_SFO_Editor.exe PARAM.SFX --out=PARAM.SFO
      del /Q PARAM.TMP
      del /Q PARAM.SFX
      
      cd USRDIR
      
      rem check that EBOOT.BIN exists and move to the root
      IF NOT EXIST EBOOT.BIN goto noEBOOTBIN
      move EBOOT.BIN ..\..\..
      cd ..\..\..
      
      rem get the ContentID from the EBOOT.BIN
      FOR /F "tokens=*" %%A IN ('scetool -i EBOOT.BIN ^| find "ContentID"') DO SET contentID=%%A
      set contentID=%contentID:~13%
      echo contentID is "%contentID%"
      
      rem is the EBOOT.BIN compressed TBD
      set compressed=FALSE
      
      rem decrypt the EBOOT.BIN
      call scetool.exe --decrypt EBOOT.BIN EBOOT.ELF
      
      rem Search and Replace 3.6 with 3.4
      gsar.exe -x18 -o -s:x24:x13:xbc:xc5:xf6:x00:x33:x00:x00:x00:x36 -r:x24:x13:xbc:xc5:xf6:x00:x33:x00:x00:x00:x34 EBOOT.ELF
      
      rem recypty the EBOOT.ELF
      call scetool.exe --sce-type=SELF --compress-data=%Compressed% --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004000000000 --np-license-type=FREE --np-content-id=%contentID% --np-app-type=EXEC --np-real-fname=EBOOT.BIN --encrypt EBOOT.ELF EBOOT.BIN
      del /Q EBOOT.ELF
      
      rem move the EBOOT.BIN back to the USRDIR
      move EBOOT.BIN "%pkgfolder%\%gameId%\USRDIR"
      
      rem Create the config file for the pkg packer.
      echo Content-ID=%contentID% > "reencrypt.txt"
      echo k_licensee=0x00000000000000000000000000000000 >> "reencrypt.txt"
      echo DRM_Type=Free >> "reencrypt.txt"
      echo Content_Type=GameData >> "reencrypt.txt"
      echo PackageType=DiscGamePatch >> "reencrypt.txt"
      echo PackageVersion=%PackageVersion% >> "reencrypt.txt"
      
      echo Fix and self/ sprx files now and press a key to continue
      pause
      
      rem Temp rename the original pkg file
      ren "%pkgfolder%.pkg" "%pkgfolder%-o.pkg"
      
      rem Create the new pkg
      rem psn_package_npdrm reencrypt.txt "%pkgfolder%\%gameId%"
      FOR /F "tokens=*" %%A IN ('psn_package_npdrm reencrypt.txt "%pkgfolder%\%gameId%" ^| find "Generate Package"') DO SET PackageOutputName=%%A
      set PackageOutputName=%PackageOutputName:~20,-1%
      echo PackageOutputName is "%PackageOutputName%"
      
      rem Rename the output from the package to the start as the original with -3.4 on the end.
      ren "%PackageOutputName%" "%pkgfolder%-3.4.pkg"
      
      rem Restore the original pkg file name
      ren "%pkgfolder%-o.pkg" "%pkgfolder%.pkg"
      
      rem cleanup
      del /Q reencrypt.txt
      rmdir /S /Q "%pkgfolder%"
      goto end
      
      :ebootbin
      echo Please delete/move the old EBOOT.BIN from %~dp0 as it will be overwrtitten
      goto errorend
      :noEBOOTBIN
      echo Could not find EBOOT.BIN in %~dp0
      goto errorend
      :noPARAMSFO
      echo Could not find PARAM.SFO in %~dp0
      goto errorend
      :noSFOEditor
      echo PARAM_SFO_Editor.exe must be in the current directory
      goto errorend
      :nopkgfolder
      echo Could not find the extracted folder %pkgfolder%
      goto errorend
      :nopkgview
      echo PkgView.exe must be in the current directory
      goto errorend
      :nofile
      echo File %1 does not exist
      goto errorend
      :notpkg
      echo Please specifiy a pkg file
      goto errorend
      :end
      echo Finished
      :errorend
      cd %~p0
      pause
      Code:
      #include <stdio.h>
      #include <ctype.h>
      #include <stdlib.h>
      #include <conio.h>
      #include <time.h>
      
      #include "windows.h"
      
      //#define FALSE (1 == 0)
      //#define TRUE (!FALSE)
      
      #define KEY_LENGTH 16
      
      static int hexKey(char *hexString, const unsigned char *key) 
      {
          int i;
          int ok = FALSE;
      
          for (i = 0; i < KEY_LENGTH; i++)
          {
              if (*key != 0)
              {
                  ok = TRUE;
              }
              sprintf(hexString, "%02x", *key++);
              hexString +=2;
          }
      
          return ok;
      }
      
      int main(int argc, char* argv[])
      {
          char *pElfFilename;
          char *pSelfFilename;
          char elfTestFilename[512];
          unsigned char keystr[(KEY_LENGTH * 2) + 1] ="01020304050607080910111213141516";
          char command[1024];
          FILE *pElfFile;
          char * buffer;
          int found = FALSE;
          size_t startOffset = 0;
          size_t endOffset;
          size_t i = 0;
          size_t fileLength;
          size_t length;
          HANDLE h = GetStdHandle(STD_OUTPUT_HANDLE);
          time_t startTime;
          double diff;
          double rate = 10;
          int display;
          int remaining;
          COORD coord;
      
          coord.X = 0; 
          coord.Y = 0;
      
          if (argc >= 3 && argc <= 5)
          {
              pElfFilename = argv[1];
              pSelfFilename = argv[2];
      
              if (argc >= 4)
              {
                  startOffset = atol(argv[3]);
              }
      
              sprintf(elfTestFilename, "%s.elf", pSelfFilename);
              
              pElfFile = fopen(pElfFilename, "rb");
              if (pElfFile == NULL)
              {
                  exit(0);
              }
      
              fseek(pElfFile, 0L, SEEK_END);
              fileLength = ftell(pElfFile);
              fseek(pElfFile, startOffset, SEEK_SET);
      
              if (argc == 5)
              {
                  endOffset = atol(argv[4]);
                  if (endOffset > fileLength - 1)
                  {
                      printf("End offset to large\n");
                      exit(0);
                  }
              }
              else
              {
                  endOffset = fileLength - 1;
              }
      
              length = endOffset - startOffset;
      
              buffer = (char*)malloc(length);
              if (buffer == NULL)
              {
                  printf("Can not allocate %d: try smaller chunk\n", length);
                  exit(0);
              }
      
              if (fread(buffer, 1, length, pElfFile) != length)
              {
                  printf("Read failed\n");
                  fclose(pElfFile);
                  exit(0);
              }
      
              fclose(pElfFile);
      
              if (length < KEY_LENGTH)
              {
                  printf("Search range too small\n");
                  exit(0);
              }
      
              length -= KEY_LENGTH;
      
              startTime = time(0);
              system("cls");
      
              for (i = 0; !found && i < length; i++)
              {
                  /* 0.5 second updates */
                  if (((int)rate) < 2 || (i % (((int)rate) / 2)) == 0)
                  {
                      display = TRUE;
                  }
                  else
                  {
                      display = FALSE;
                  }
      
                  if (display)
                  {
                      SetConsoleCursorPosition(h, coord);
      
                      diff = difftime(time(0), startTime);
      
                      rate = i / diff;
                      if (rate == 0)
                      {
                          rate = 1;
                      }
                      remaining = (int)((length - i) / rate);
                  }
      
                  if (hexKey(keystr, buffer + i))
                  {
                      if (display)
                      {
                          printf("%03.03f %02d:%02d:%02d %06x: %02d%%: %s    \n", rate, remaining / 3600, (remaining % 3600) / 60, remaining % 60, startOffset + i, (i * 100) / length, keystr);
                          sprintf(command, "scetool -l %s -d %s %s", keystr, pSelfFilename, elfTestFilename);
                      }
                      else
                      {
                          sprintf(command, "scetool -l %s -d %s %s > nul", keystr, pSelfFilename, elfTestFilename);
                      }
                      if (system(command) != 0)
                      {
                          printf("ERROR at offset 0x%x in %s: key:%s   \n", startOffset + i, pElfFilename, keystr);
                          system("pause");
                          system("cls");
                      }
                      if (fopen(elfTestFilename, "rb") != NULL)
                      {
                          printf("Found it at offset 0x%x in %s: key:%s   \n", startOffset + i, pElfFilename, keystr);
                          found = TRUE;
                      }
                  }
                  else
                  {
                      if (display)
                      {
                          printf("%03.03f %02d:%02d:%02d %06x: %02d%%: Skip\n", rate, remaining / 3600, (remaining % 3600) / 60, remaining % 60, startOffset + i, (i * 100) / length);
                      }
                      i+=7;
                  }
              }
              if (!found)
              {
                  printf("Not Found it between 0x%x and 0x%x in %s\n", startOffset, endOffset, pElfFilename);
              }
          }
          else
          {
              printf("brute elfFile selfFile optionalStartOffset optionalEndOffset\n");
          }
          free(buffer);
          system("pause");
          return 0;
      }
      I hope some of this maybe useful to somebody, I am still investing what we are missing to get all the self/sprx file working correctly.

      EDIT:

      One last thing if you are re-encrypting a sprx then use
      --np-app-type=SPRX
      and not
      --np-app-type=EXEC
      Sorry the sprx/self re-encrypt script was a personal script and I need to update it more to allow for this and the specification of the klicense.
    1. oakhead69's Avatar
      oakhead69 -
      Quote Originally Posted by Matsumot0 View Post
      oakhead69 Thank you so much for this such information, i make a pkg for the lasted patch of Black Ops 1.13 for 3.55

      but i have a problem, multiplayer side doesn't work... i have a blackscreen and i don't know why!...
      Solo and Zombie seems to work without bugs. I've tested uncompressed selfs too... doesn't working :x
      I don't know what to do else.

      Klicense BLES01031 Blackops Patch 1.13: AF0A8F0A8909F09234091AFADF909AF0
      i can send the pkg in PM if you want inspect my work, i can't post link i'm new member...

      Tested on cfw 3.55 TB v2
      Thanks in advance

      PS: Sorry for my bad english
      The only idea I have is, did you re-encrypt the self files with the klicence?

      I have looked at the elf file of the selfs in the original update pkg and the SDK is already 3.4 so no change required there.

      If you PM the pkg file/ link I will look at it, but I am going on holiday early tomorrow so it will have to be today.


      On an aside, do you live in Matsumoto or is it your name? Nice city been there quite a few times in the past visiting Seiko Epson.
    1. BahumatLord's Avatar
      BahumatLord -
      @oakhead69 - thanks man. that will save me a lot of time. I should be able to compile it with Sharp Develop. If not I can find something on Sourceforge. I don't see the harm in posting a compiled version for others since it's just an automation script but others might see it differently so I'd be careful about it
    1. BahumatLord's Avatar
      BahumatLord -
      @oakhead69 - It compiled without issues and without having to have C installed with LCC-Win found here LCC-Win: A free compiler system for Windows Operating Systems by Jacob Navia so there's no need to post a compiled version and take any chances with the legal system

      Thanks again - this was a big help
    1. oakhead69's Avatar
      oakhead69 -
      Quote Originally Posted by BahumatLord View Post
      @oakhead69 - It compiled without issues and without having to have C installed with LCC-Win found here LCC-Win: A free compiler system for Windows Operating Systems by Jacob Navia so there's no need to post a compiled version and take any chances with the legal system

      Thanks again - this was a big help
      No problem, it is only a single threaded program as such if you have a multi-core PC you need to run at least 1 instance per core for optimum performance. I would run 2 per core but this then make the machine quite unresponsive to anything else. Multiple instances will run with the same self, elf and scetool instances, just when one finds a match they think they all have and you have to figure out which one it is the real match.

      The start and end offset for the range have to be decimal not hex.

      One last tip for speeding up finding the klicense. So far for me it has tended to be a little before where all the semi-human readable data is in the elf (string tables etc). This toward the end of the file.

      Good luck.
    1. Matsumot0's Avatar
      Matsumot0 -
      Quote Originally Posted by oakhead69 View Post
      The only idea I have is, did you re-encrypt the self files with the klicence?

      I have looked at the elf file of the selfs in the original update pkg and the SDK is already 3.4 so no change required there.

      If you PM the pkg file/ link I will look at it, but I am going on holiday early tomorrow so it will have to be today.


      On an aside, do you live in Matsumoto or is it your name? Nice city been there quite a few times in the past visiting Seiko Epson.
      Thanks for your answer

      I'm sure, i re-encrypt the self file with the klicense, as defined in your explanations.
      But I noticed if i want re-decrypt my new self, i don't need the klicense! as an eboot :O
      maybe the problem is here, i don't see -> "[*] Warning: Could not decrypt header" as before.

      And no i don't live in Matsumoto regrettably, it's just my nickname, but i trust you, if you tell me is a wonderful city, like this country where her is :P

      Edit: it's ok i've solved my problem for: maybe the problem is here, i don't see -> "[*] Warning: Could not decrypt header" as before.
      bad batch >_< i remove just a little synthax > "scetool -l AF0A8F0A8909F09234091AFADF909AF0 -v --sce-type=SELF" wtf xD
      and the warning appears again! I don't know where does this -v lol
    1. aldostools's Avatar
      aldostools -
      It seems that some here have missed this:
      Asure/Aldo's KLicense Tool Discussion - Page 18

      It is a scetool-brute force tool, with heuristic algorythms to help to reduce the time finding the klicensee.
      Just copy the EBOOT.BIN, self/sprx and PARAM.SFO to the folder and let the program fix them.
      If the klicense is already known (currently 16 known klicensees), it will take only 3 seconds to resign/fix your game using 3.40 or 3.55 keys.
      If the klicense is unknown, it could take some minutes or hours to find it. eg. WWE 12's took 1 hour 7 mins 37 secs to find it.

      The tool is based on Asure's brute force batch script, but improved a lot with the help and ideas of several devs/users @ crunch (see the credits).
    1. Matsumot0's Avatar
      Matsumot0 -
      Thank for updated your tool aldo

      NBA 2K12 update 1.05 BLES01418-BLUS30830-BLJS10136: 6F46772AC2C84BA59484A73BB13B26BB
      Metal Gear Solid HD 1.01 BLES01419-BLUS30847-BLJM61001: B608E78018A335E494B972A6B717A166


      Can you make an autoupdate db? when you add new data in klics txt at launch of tool?
    1. mojamoja's Avatar
      mojamoja -
      Quote Originally Posted by mojamoja View Post
      Same as me. I'm at HERMES 341
      NPDRM signed patched eboot returns to xmb (8001003C)
      if using SELF (not NPDRM) from ebootfix/mod, endless GT logo
      if using NPDRM from ebootfix/mod output eboot, endless GT logo
      an update to say that it finally worked fine with HERMES firmware

      just be sure to:
      - patch PKG's PARAM SFO to 341
      - patch manually EBOOT ELF as described earlier in the thread "24 13 bc c5 f6 00 33 00 00 00 36"
      (don't use ebootmod)
      - sign it as NPDRM also as described using scetool (oakhead's messages)
      (make_self_npdrm will produce an EBOOT ELF able to start, but will hang at GT logo)
      - make the pkg

      i updated successfully to 113
    1. Quakes69's Avatar
      Quakes69 -
      @ aldostools, Nice tool set thanks! TDU2 works great. hehehe

      I have a side Question. Does it matter if you make a pkg of the fixed files with the same KLicense?
    1. aldostools's Avatar
      aldostools -
      @Quakes69

      The release of pkgs with the fixed files is irrelevant. You can make the package yourself with few clicks:

      1. Install my PS3 Tools
      If you don't have cygwin installed in System32, you may need to copy the cygwin dlls and the ps3 keys to the ".\tools" folder
      These files are required by the psn_package_npdrm.exe

      2. Start PS3 Game Updates and download the game update for the game (if the 3.60 version is not available, try using Google)
      3. Go to the downloaded folder and right click on the PKG, select "Extract to current folder..." (or press Shift+ENTER on the PKG)
      4. Go to the extracted USRDIR and press Ctrl+ENTER on the EBOOT.BIN. Double click (or press ENTER) on the EBOOT.BIN to confirm it was signed with 3.55 key.
      5. Press Ctrl+Enter on the self/sprx files. Double click (or press ENTER) on the self/sprx files to confirm they are signed with 3.55 key.
      6. Delete the _ORIGINAL backup files.
      7. Return to the extracted folder (the one that looks like a Content ID), right click on it and select Make PKG...
      8. Install the new PKG on your PS3 and play!!

      I think that it cannot be easier...

      Other tips:
      - to convert a retail PKG into a debug (DEX) PKG, just press Ctrl+Shift+ENTER on a PKG.
      - to view the content id of a PKG, press Ctrl+ENTER on a PKG
      - other files associated are to viewer a are: PUP, PKG, BIN, edat, self, sprx, thm, md5, sfo, sfx
    1. Quakes69's Avatar
      Quakes69 -
      @ aldostools;

      So can I with my Make Package NPDRM GUI. Or have you forgot

      I was just wondering if one had actually repack the pkg with the same KLicense is all. BTW, I run my GUI with out the cygwin' with psn_package_npdrm

      To understand how to setup the GUI for Repackage is

      Open the GUI.
      Select the path that the PKG's are.
      Click on the File you want. IE: TDU2 1.06 update pkg
      Click the Second button. Drops down Settings
      Tick --check
      Click the Third button. Drops down Config
      Make sure Package.conf is NOT Ticked/Checked at this time.
      Click the Forth button. Drops down File/Target
      Tick File
      Hit Execute
      Results:
      Code:
      "I:\******\psn_package_npdrm.exe" --check "I:*******\TDU2\UP0182-BLUS*****_00-TDU2000000000106-A0106-V0100-PE.pkg"
      
      checking package validity:    %  100
      
      Checker Revision : 1732
      Package Filename : I:\PS3-DLC-PATCHES-PACKS\TDU2\UP0182-BLUS*****_00-TDU2000000000106-A0106-V0100-PE.pkg
      ContentID        = UP0182-BLUS*****_00-TDU2000000000106
      DRMType          = Free
      ContentType      = GameData
      PackageType      = DiscGamePatch
      PackageFlag      = RenameDirectory (during install for consistency)
      PackageVersion   = 01.00
      # APP_VER        : 01.06
      # TARGET_APP_VER : 01.05
      # PS3_SYSTEM_VER : 03.6000
      # PackageSize    : 19,934,512 bytes
      # QA_Digest      : 0x********************************
      #                : This is a digest of packaged files and attributes.
      # PackageDigest  : 0x********************************
      #                : This is sha1 digest of package without last 32 bytes.
      # Packaged by    : MODDED V1.0 - Original Rev. 1732
      Notice: Patch package should be same ID and types with the original package.
          please double check it because it can violate DRM protection.
      This file was finalized: "I:\********\TDU2\UP0182-BLUS*****_00-TDU2000000000106-A0106-V0100-PE.pkg"
      Take a mental note of the BOLD settings used for the Previous pkg. Or just leave the Output window open

      Repack:
      Click on first button - Collapses File viewer
      Untick --check / Tick -output - Click the right most button to select the output directory you wanna save your New PKG
      Tick Package.conf
      With the Original file selected it would have put it in the ContentID. Remove the last "-A0106-V0100-PE" Click OK
      Example:
      ContentID = UP0182-BLUS*****_00-TDU2000000000106
      DRMType = Free
      ContentType = GameData
      PackageType = DiscGamePatch

      Untick File and Tick Target-Dir change the Target-Dir to the folder with the fixed Files.
      Example:
      I:\DLC-PATCHES\TDU2\BLUS*****

      Click Execute. Install on PS3 all seems long but it's all just clicks and done.

      All I wanted to know if it was Necessary to repack with the same KLicense...

      Thanks,

      Quake
    1. aldostools's Avatar
      aldostools -
      Quote Originally Posted by Quakes69 View Post
      @ aldostools;

      All I wanted to know if it was Necessary to repack with the same KLicense...
      Sorry I misread your question...

      I always repack all my PKGs using the free klic 72F990788F9CFF745725F08E4C128387 and I haven't had any issue.
    1. Quakes69's Avatar
      Quakes69 -
      Quote Originally Posted by aldostools View Post
      Sorry I misread your question...

      I always repack all my PKGs using the free klic 72F990788F9CFF745725F08E4C128387 and I haven't had any issue.
      OK, That's all I wanted to know. I was using that one too for a while.

      I think I should put in a Menu option or a Drop down for KLicenses. Or maybe load up your klics.txt to a Menu/Drop down select.



      Quake

      Edit: Then again, What's the sense. If it doesn't matter for the PKG itself then there would no sense on doing that. Oh well...
    1. Matsumot0's Avatar
      Matsumot0 -
      Finally i've solved my problem... for black ops patch 1.13 it's just a f*cking... --skip-sections=TRUE to FALSE... omg

      Scetool docs: -s, --skip-sections TRUE(default)/FALSE Whether to skip sections or not.
    1. dewitman's Avatar
      dewitman -
      I can't extract the pkgs on my PC (SHIFT + ENTER, etc). What do I need to install or do to be able to do this?
      what are the dlls en files for the ps3 keys that I have to put in the /tools folder?

      Thanks in advance
  • Daily Digest


    Want to receive the latest PSX info in your email?

    Sign up for our Daily Digest!



    Want to learn more about the team keeping you up to date with the latest scene news?

    Read about them now!

    Check out our Developer bios, too!

  • Recent Threads

    michellefland

    hello i am search code no random battle pal french code work please for suikoden 4 and 1 help my please thanks in advance

    Thread Starter: michellefland

    hello

    i am search code no random battle pal french code work please for suikoden 4 and 1 help my please thanks in advance

    Last Post By: michellefland Today, 07:27 AM Go to last post
    BahumatLord

    Showtime metadata is being read incorrectly

    Thread Starter: BahumatLord

    I use the movie db plugin for showtime that pulls up artwork and info on every movie. Most of the time it identifies movies correctly and will display

    Last Post By: BahumatLord Today, 06:49 AM Go to last post
    uaeboss616

    help me with turn off automatically:(

    Thread Starter: uaeboss616

    hello guys my problem is my ps3 turn off automatically after i downgrade my ps3 by e3 flasher and jailbroken my ps3 turn on 10 sec then turn off automatically

    Last Post By: fq360 Today, 07:17 AM Go to last post
    nova89

    Is it possible on ps3 add a radio station ?

    Thread Starter: nova89

    So I'm bored of the eflc sound track since massive b was removed I now only listen to electro choc and ever since gta iv was released I wanted msx fm

    Last Post By: ribonucleic Today, 07:34 AM Go to last post
    arsenal553

    CXD2973GB Heatspreader

    Thread Starter: arsenal553

    Hello everyone,

    I have a launch model PS3 i got for a bargain because the owner said it overheated every 3 min. He was right so i decided

    Last Post By: arsenal553 Today, 01:44 AM Go to last post
    pelvicthrustman

    PS2 Controller Remapper

    Thread Starter: pelvicthrustman


    PS2 Controller Remapper




    PS2 Controller Remapper is a tool designed to arbitrarily remap a PS2 game's controls

    Last Post By: pelvicthrustman Yesterday, 10:05 PM Go to last post
  • Recent Comments

    bitsbubba

    {Guide} Install multiMAN Themes via a PKG File

    me neither really, isn't this a step backwards, I thought thm was a package file. why switch thm to... Go to last post

    bitsbubba Today 02:47 AM
    tnh531

    Fan Control Utility v1.7 Relased CFW 4.41 Supported!!

    Can anyone help, which setting is best for my phat ps3. i am a little confuse about the modes. Go to last post

    tnh531 Today 12:52 AM
    condorstrike

    {Guide} Install multiMAN Themes via a PKG File

    also, that was one of the tricks I used, to make Solar run by itself on a timer without user input... Go to last post

    condorstrike Yesterday 11:57 PM
    STLcardsWS

    {Guide} Install multiMAN Themes via a PKG File

    BahumatLord
    That what i usually use.

    Yea my bad its not the eboot, but there are requirements.... Go to last post

    STLcardsWS Yesterday 11:57 PM
    condorstrike

    {Guide} Install multiMAN Themes via a PKG File

    I've been doing this for years, no... Eboots are not needed, I always did my stuff manually in... Go to last post

    condorstrike Yesterday 11:52 PM
    makaveli07

    PSChannel v1.10 Released - Added Language Support

    so i finally figured out that i had to get it signed for 4.40 rogero and after doing that it is... Go to last post

    makaveli07 Yesterday 11:48 PM
    BahumatLord

    {Guide} Install multiMAN Themes via a PKG File

    EBOOTs aren't needed to make a pkg. You should never include an eboot unless you need to replace... Go to last post

    BahumatLord Yesterday 11:47 PM
    makaveli07

    Fan Control Utility v1.7 Relased CFW 4.41 Supported!!

    hey guys my ps3 Phat LED changed yellow is that normal what does it indicate ? the CPU temp is... Go to last post

    makaveli07 Yesterday 11:44 PM
    STLcardsWS

    {Guide} Install multiMAN Themes via a PKG File

    condorstrike

    Wont the Package fail to make if no eboot is present? Or are there tools im over... Go to last post

    STLcardsWS Yesterday 11:43 PM
    condorstrike

    {Guide} Install multiMAN Themes via a PKG File

    ic :), also that's the reason I never used Eboots on these types of Pkgs, there's no need for it. ;) Go to last post

    condorstrike Yesterday 09:58 PM