PS3 v3.50 Game EBOOT's Rewritten for v3.41!

[The Central Scrutinizer]

Finally after only just over a month of waiting those owning still a v3.41 Jailbroken PS3 console, can finally fully enjoy both worlds of playing their own "homebrew" and still being able to enjoy the latest and hottest of the recently released PS3 Games that were originally complied by Sony only to work on later non-Jailbreakable v3.50 PS3 consoles.

It didn't take long after the original flood of released appldr keys as our valued PSX-SCENE members when right away to work after the now famous release PS3 Root key by Geohot, and in less then a day Veritas? started a re-birth of the PS3 Scene, that some claimed was DEAD or DRY by releasing fully decrypted and re-coded and working v3.50 EBOOT's for those dusty old v3.41 consoles.

So dust off your dongle, dig up the latest payloads, rush out to your local game store, pick up some of the latest greatest titles, like Tales of Graces, Need For Speed, Gran Tursimo, and fire up your v3.41 console, press the now famous POWER then EJECT, watch your dongle LED's blink away, and sync up your PS3 controller, and enjoy some Video Gaming Action!

But don't forgot, to come back and check up on all the latest and hottest action here on PSX-SCENE, and please remember to thank the talented developers here for all their help in supporting the PS3 Scene!

[Veritas?]

Tales of Graces F, confirmed working on 3.41.

[Veritas?]

Need for Speed: Hot Pursuit (BLUS30566), confirmed working on 3.41. Probably works for other regions too.

[Veritas?]

Gran Turismo 5 (BCUS98114), for 3.41 [test]. Working for some.
Gran Turismo 5 (BCES00569), for 3.41 [test]. Working for some.

[Veritas?]

I've actually written this a few times and promptly lost it due to browser instability. Oops.

Anyway, this guide requires you to have some knowledge of how the SELF and ELF file formats are laid out. I don't have a quick tool to do this for me, but it takes maybe 5 minutes of my time to do it by hand.

1. Open EBOOT.BIN in a hex editor of your preference.
2. In EBOOT.BIN, look at the SELF control info, if you see anything resembling the game titleid, it's an NPDRM SELF and this guide won't work, give up.
3. Use readself on EBOOT.BIN to get information about the encrypted metadata sections.
4. unself EBOOT.BIN eboot.elf
5. Open eboot.elf in a hex editor of your preference.
6. In eboot.elf, go to every encrypted metadata section (now decrypted), copy its data, and replace the encrypted data in EBOOT.BIN.
7. In EBOOT.BIN, change SELF header to indicate it's FSELF.
8. In EBOOT.BIN, change SELF section headers that are marked as encrypted to say they are not encrypted.
9. If the game is a newer SDK version (like GT5, which is 3.50), in EBOOT.BIN, find the .sys_proc_param segment and change the SDK version to something earlier, such as 3.41. This will probably cause crashes in games that actually use newer SDK features that are not available in earlier SDK versions.
10. Save EBOOT.BIN
11. Cross fingers, run game, hope it works.

[obscured]

This is a edited and resigned eboot?

Tales of Graces F, confirmed working on 3.41.

[Zoned]

Hmm if Tales works, I would assume the Sly Collection would work also. Anyone care to take a stab at the eboot and try it out?

[MRDOCA]

Need for Speed: Hot Pursuit (BLUS30566), confirmed working on 3.41. Probably works for other regions too.

thanks will test with my bles version shortly.

[PupaPowlo]

Will test that now Veritas?

NB. Im running 3.41 with 3.50 spoof

[Zoned]

Need for Speed: Hot Pursuit (BLUS30566), confirmed working on 3.41. Probably works for other regions too.

Awesome. Got one for Prince of Persia Collection or Sly Collection?