[Viral Doom]

Originally Posted by longhornx you have to use the content id inside of original eboot.bin, just read it with scetool -i eboot.bin %CID% -<is returned from scetool -i blabal.self(bin) = content id %~1 is the value inputed in from batch, eg: mybatch.bat value2input value2input will be a var called %1 (%~1=without quotes)

thanks man, I have noted right now doing some testes, I mode my script by adding:

echo -----------------------------------------------
echo ContentID: %CID%
echo -----------------------------------------------

Now, it shows:

-----------------------------------------------
ContentID: UP9000-BCUS98135_00-S4PATCH000000001
-----------------------------------------------

I still have the question about revision, I'm using right now:

--key-revision=0004

************* [ - Post Merged - ] *************

Originally Posted by longhornx EDIT: can someone try to decrypt 2 self files inside of this MW2 (BLES00683) patch? eboot.elf has only 69.6KB i used this batch without success[/URL]

Key: 496e66696e697479576172644b657900

took like 5 min bro

[longhornx]

Originally Posted by Viral Doom thanks man, I have noted right now doing some testes, I mode my script by adding: echo ----------------------------------------------- echo ContentID: %CID% echo ----------------------------------------------- Now, it shows: ----------------------------------------------- ContentID: UP9000-BCUS98135_00-S4PATCH000000001 ----------------------------------------------- I still have the question about revision, I'm using right now: --key-revision=0004

this is what opoisso893 said:

Originally Posted by opoisso893 With scetool v0.2.8 : --key-revision=000A => SDK 3.55 --key-revision=0004 => SDK 3.40 http://www.ps3devwiki.com/wiki/Revision_versus_Version %CID% or %~1 depend of your script.

************* [ - Post Merged - ] *************

Originally Posted by Viral Doom Key: 496e66696e697479576172644b657900 took like 5 min bro

can you post your batch code? or its the same?

EDIT: i cannot decrypt the dafault.self (and probably the other..)

command: scetool -d default.self dec.elf -l 496e66696e697479576172644b657900
key: 496e66696e697479576172644b657900
ansi key: InfinityWardKey. (seriously?)

EDIT2: forget the edit above: http://www.ps3hax.net/showpost.php?p...&postcount=218
************* [ - Post Merged - ] *************
to encrypt I'm doing it right?

scetool.exe --sce-type=SELF --compress-data=TRUE --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004100000000 --np-license-type=FREE --np-content-id=EP0002-BLES00683_00-MW2P000000000013 --np-app-type=EXEC --np-real-fname=default.self -l 496e66696e697479576172644b657900 --encrypt default.elf default_enc.self

[Vallachia]

Like Asure said in an earlier post, the order of arguments to Scetool DOES matter. So in this case you need:

scetool -l 496e66696e697479576172644b657900 -d default.self dec.elf

instead of

scetool -d default.self dec.elf -l 496e66696e697479576172644b657900

[Viral Doom]

Originally Posted by longhornx this is what opoisso893 said: Originally Posted by opoisso893 With scetool v0.2.8 : --key-revision=000A => SDK 3.55 --key-revision=0004 => SDK 3.40 http://www.ps3devwiki.com/wiki/Revision_versus_Version %CID% or %~1 depend of your script.

I know "opoisso893" say it, but some times (just some) I'm kind of noob haha, I was typing at console using the FOR %CID%:

script.bat ConsoleID

Originally Posted by longhornx can you post your batch code? or its the same?

the same I guess, I just edit some value names:

@Echo

 off
for %%S in (EBOOT.ELF) do SET /a LAST_OFFSET=%%~zS-16
for %%S in (EBOOT.ELF) do SET /a MAX_OFFSET=%%~zS-16
:START
set CUT=8
if %LAST_OFFSET% gtr 1000000 (
set /a CUT+=1
)
rem echo Cut val: %CUT%
FOR /F "tokens=*" %%i in ('"od -j%LAST_OFFSET% -N16 -w16 -t x1 EBOOT.ELF | cut -c %CUT%- |sed 's/ //g'"') do SET KEY=%%i
if %KEY% == 00000000000000000000000000000000 (
echo Skipped 10 bytes of blank/useless key at %LAST_OFFSET%
set /a LAST_OFFSET-=10
) else (
ECHO Trying Key: %KEY% from decimal offset: %LAST_OFFSET% / %MAX_OFFSET%
scetool.exe -l %KEY% -d self_ori.self self_out.elf -l %KEY% >nul
set /a LAST_OFFSET-=1
)
IF EXIST self_out.elf GOTO END
goto START
:end
echo Done! Key used was: %KEY%

Originally Posted by longhornx EDIT: i cannot decrypt the dafault.self (and probably the other..) command: scetool -d default.self dec.elf -l 496e66696e697479576172644b657900 key: 496e66696e697479576172644b657900 ansi key: InfinityWardKey. (seriously?) hahaha who guess xD EDIT2: forget the edit above: http://www.ps3hax.net/showpost.php?p...&postcount=218

Originally Posted by longhornx to encrypt I'm doing it right? scetool.exe --sce-type=SELF --compress-data=TRUE --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004100000000 --np-license-type=FREE --np-content-id=EP0002-BLES00683_00-MW2P000000000013 --np-app-type=EXEC --np-real-fname=default.self -l 496e66696e697479576172644b657900 --encrypt default.elf default_enc.self

Yup, I'm using the "same" script:

echo off
FOR /F "tokens=1,2 delims= " %%A IN ('scetool.exe -i EBOOT.BIN') DO (
if [%%A]==[ContentID] set CID=%%B
)

echo Be sure to have "EBOOT.BIN" in the same folder to get "ContentID"
echo -----------------------------------------------
echo ContentID: %CID%
echo -----------------------------------------------
pause
scetool.exe --sce-type=SELF --compress-data=TRUE --skip-sections=TRUE --key-revision=0004 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004100000000 --np-license-type=FREE --np-content-id=%CID% --np-app-type=EXEC --np-real-fname=self_out.self --encrypt self_out.elf self_out.self
del /Q self_out.elf
scetool -i self_out.self
pause

[longhornx]

Originally Posted by Viral Doom I know "opoisso893" say it, but some times (just some) I'm kind of noob haha, I was typing at console using the FOR %CID%: script.bat ConsoleID Yup, I'm using the "same" script ^^

lol, you've the devwiki with all the stuff (or almost..)

script.bat ConsoleID

in this case ConsoleID is going to be the %~1

I'm going now to try if MW2 now works from external hdd (hope so )

[Viral Doom]

Originally Posted by longhornx lol, you've the devwiki with all the stuff (or almost..) script.bat ConsoleID in this case ConsoleID is going to be the %~1

That's right %~1, that was my noob question xD

Originally Posted by longhornx I'm going now to try if MW2 now works from external hdd (hope so )

Please let me know, cuz SOCOM 4 is not working for me
************* [ - Post Merged - ] *************
if anyone need the Call of Duty - Black Ops v1.13 [BLES01031] self_key:

af0a8f0a8909f09234091afadf909af0

[Meiklz]

okay, looks like a nice TUT... but got problem with the last step:
"psn_package_npdrm.exe package.conf BLES01286" (in my case it's "Sniper: G.W.")

this is what stands in the cdm window after the last step i do which causes an error:

PAPAM.SFO: overwrite VERSION to 1.04 (from 1.00)
[PARAM.SFO Check]: TitleID BLES01286 differs from BLES01287(@ContentID).
Illegal Package: PARAM.SFO check fail.

Registration error.

i didn't know what that mean?? differs from BLES01287???? that's the example for Dirt, but i got an other game and thats ID is BLES01286!!!

any suggestions or anyone knows what i did wrong???

[DEFAULTDNB]

Wow this thread is coming along nicely @Asure & co thank you for all the info.

[Niorgio]

Hi, sorry for my english but I test of decrypt MW3 SELF with the key 496E66696E697479576172644B657900 but when I compare with the fix in "scetool.exe -i %~1 pause" I just have the line "Digest 2" and "Random Pad" different.


Where is my error ?

[deeptrap]

I changed the 2 bat files to let them work together and clean up after creating the PKG
As example i used cod mw3

eboot updates.bat

@Echo
 off
cd /d %~dp0\TOOLS>nul

move ..\update-pkg\PARAM.SFO ..\
move ..\update-pkg\ICON0.PNG ..\
move ..\update-pkg\usrdir\*.bin ..\
move ..\update-pkg\usrdir\*.self ..\
pause 
if exist ..\workdir rd /s /q ..\workdir >nul
if exist ..\output rd /s /q ..\output >nul
if exist ..\Tools\Package.conf del ..\Tools\Package.conf
md ..\workdir
REM grabbing the content ID
FOR /F "tokens=1,2 delims= " %%A IN ('scetool.exe -i ..\EBOOT.BIN') DO (
if [%%A]==[ContentID] set CID=%%B
)
echo ContentID for NPDRM-Self is: %CID%
echo.
echo Decoding EBOOT.BIN...
scetool.exe --decrypt ..\EBOOT.BIN ..\workdir\DECRYPTED.ELF >nul
copy ..\EBOOT.BIN ..\workdir\SOURCE_EBOOT.BIN >nul
echo.
rem rename EBOOT.BIN SOURCE_EBOOT.BIN >nul
echo.
echo Doing ebootfix...
rem .
rem Usage: ebootMOD.exe SELF MODDED_SELF [DECRYPTED_ELF]
rem Example: ebootmod.exe x:\EBOOT.BIN x:\EBOOT_MOD.BIN
rem Example: ebootmod.exe x:\EBOOT.BIN x:\EBOOT_MOD.BIN x:\EBOOT_TEST.ELF
rem .
ebootmod ..\workdir\SOURCE_EBOOT.BIN ..\workdir\MODDED_EBOOT.BIN ..\workdir\DECRYPTED.ELF
copy ..\workdir\DECRYPTED.ELF ..\eboot.ELF
cd ..
call bruteforce-1ed.bat
cd tools
rem .
rem Ebootmod makes a new eboot, but it's not nprdrm, so we decrypt that again, then run it thru scetool..
rem .
rem We also create two versions, one is compressed, the other is not. (Sometimes the compressed one doesn't work.)
rem .
scetool.exe --decrypt ..\workdir\MODDED_EBOOT.BIN ..\workdir\FIXED.ELF
md ..\output\Usrdir\
move ..\update-pkg\*.* ..\output\
move ..\update-pkg\usrdir\*.* ..\output\usrdir\


scetool.exe --sce-type=SELF --compress-data=FALSE --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004100000000 --np-license-type=FREE --np-content-id=%CID% --np-app-type=EXEC --np-real-fname=EBOOT.BIN --encrypt ..\workdir\FIXED.ELF ..\output\USRDIR\EBOOT.BIN
scetool.exe --sce-type=SELF --compress-data=FALSE --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004100000000 --np-license-type=FREE --np-content-id=%CID% --np-app-type=EXEC --np-real-fname=default.self --encrypt ..\workdir\default.ELF ..\output\USRDIR\default.self
scetool.exe --sce-type=SELF --compress-data=FALSE --skip-sections=TRUE --key-revision=0001 --self-auth-id=1010000001000003 --self-vendor-id=01000002 --self-type=NPDRM --self-fw-version=0003004100000000 --np-license-type=FREE --np-content-id=%CID% --np-app-type=EXEC --np-real-fname=default_mp.self --encrypt ..\workdir\default_mp.ELF ..\output\USRDIR\default_mp.self

rem del /Q EBOOT.ELF > NUL
rem scetool -i EBOOT.BIN
gsar.exe -x16 -s03.6000 -r03.4100 ..\Param.sfo ..\Param.sfo
move ..\Icon0.* ..\Output\
move ..\Param.* ..\Output\
echo Content-ID = %CID% > ..\Tools\Package.conf
echo k_licensee = 0x00000000000000000000000000000000 >> ..\Tools\Package.conf
echo DRM_Type = Free >> ..\Tools\Package.conf
echo Content_Type = GameData >> ..\Tools\Package.conf
echo PackageType = DiscGamePatch >> ..\Tools\Package.conf
echo PackageVersion = 01.00 >> ..\Tools\Package.conf

psn_package_npdrm.exe Package.conf ..\output
xcopy ..\Tools\%CID%*.* ..\output\%CID%*.* /Y
del ..\Tools\%CID%*.*
echo.
echo ContentID for NPDRM-Self is: %CID%
echo Done!

echo remove elf files in root
cd ..
del *.elf 
del *.bin
del *.self
echo done

brute force bat

SET OFFSET=54301
:START
FOR /F "tokens=*" %%i in ('"tools\od -j%OFFSET% -N16 -w16 -t x1 eboot.ELF | tools\cut -c 8- |tools\sed 's/ //g'"') do SET KEY=%%i
if %KEY% == 00000000000000000000000000000000 (
echo Skipped 10 bytes of blank/useless key at %OFFSET%
set /a OFFSET+=10
) else (

ECHO Trying Key: %KEY% from decimal offset: %OFFSET%
tools\scetool.exe -l %KEY% -d default.self selfout.elf >nul
set /a OFFSET+=1
)
IF EXIST selfout.elf GOTO END
goto START
:end
echo Done! Key used was: %KEY%
tools\scetool.exe -l %KEY% -d default_mp.self selfout_mp.elf 

copy selfout.elf workdir\default.elf
copy selfout_mp.elf workdir\default_mp.elf

Tnx to ASure
Tnx to _D_S_ (Post http://www.ps3hax.net/showpost.php?p...&postcount=100)

Download

http://www65.zippyshare.com/v/82445893/file.html

Only have to find out how it would be possible to detect which self files there must be decrypted, and encrypt automatically.