PSP Game Decrypter - Play New Games on Old PSP Firmware

In 6.30 firmware Sony has add two new types of PRX to protect their executable. But we only spend one day to crack that. Currently there is only psp phat key, but it should be enough though.

Key detail:
/* 6.30 phat kernel s_code 0x43 type 3 */
u8 key_4c9484f0[16] = {
0x36, 0xB0, 0xDC, 0xFC, 0x59, 0x2A, 0x95, 0x1D,
0x80, 0x2D, 0x80, 0x3F, 0xCD, 0x30, 0xA0, 0x1B,
};

/* 6.30 phat kernel-2, s_code 0x5b type 3 */
u8 key_457b80f0[16] = {
0xd4, 0x35, 0x18, 0x02, 0x29, 0x68, 0xfb, 0xa0,
0x6a, 0xa9, 0xa5, 0xed, 0x78, 0xfd, 0x2e, 0x9d
};

/* used by vshmain.prx, s_code 0x5a, type 3 */
u8 key_380280f0[16] = {
0x97, 0x09, 0x12, 0xD3, 0xDB, 0x02, 0xBD, 0xD8,
0xE7, 0x74, 0x51, 0xFE, 0xF0, 0xEA, 0x6C, 0x5C,
};

DecryptPRX2 cannot handle these new "type 3" prx, so I imported PSPCipher kprx_decrypt function to make this psardumper to work. After decrypting, a new game key (0xd91680f0) is found in mesg_led_01.prx. It is likely we kicked sony's ass again.

Credit: tpu dumped the IPL, and I found out what happened to the IPL decryptor.

Note: this source has been already covered by GPLv3 becuase of the usage of PSPCipher source.

2010-06-30: newpsardump-630-1.zip
A minor update to understand files tables of 6.30
- 100X/200X/300X: new tables for 07g and 09g
- go: uses the same table key as 100X/200X/300X
No 6.30 keys are added, files from 6.30 can only be extracted in encrypted form.
Also I have just updated the source code and compile, the program has not been tested.

A comprehensive ISO / CSO file manipulation tool for PSP. Allows decryption of EBOOT.BIN files, repack ISOs, and/or convert ISOs to CSO format.

Many of you will remember who you had the CFW 5.00 M33-6 how annoying it was to activate or deactivate version.txt that would change the options to speed up the memory stick. Well our good friend on her day DAX took a mini patch that solved this little bug, but not brought to light not to be as important and not make too much however it is now necessary to enter the Store with PSNLover of must have seen the light of this Mini Patch.

This mod of psardumper can decrypt individual firmware modules from retail firmwares and modules from retail games PRXs, and it can decompress M33 custom firmware modules.

The keys for the tag 0xD91613F0 has been successfully decrypted. Includes source code. Can decrypt/decompress/extract:

- firmware modules from official firmwares, for both old-style PSP and PSP Go
- updater modules from official updaters, including some obfuscated ones
- official updater DATA.PSP
- reboot.bin and reboot_02g.bin from all retail firmwares
- EBOOT.BIN and modules from retail games, and some nonretail/debug EBOOT.BIN files
- M33 custom firmware modules
- RLZ files
- KL3E/KL4E files
- meimg.img and me_sdimg.img
- some demos and game sharing DATA.PSP files
- index.dat
- 1SEG.PBP

PSARDumper is used to decrypt and extract all files contained in an EBOOT from official update. Includes source code and keys for almost all 6.x firmwares including official firmware 6.35 by coyotebean.

PSPgo 5.70 & 6.X kernel key added
Added missing key for vshmain in PSPgo 6.X

Updated psardumper with support for PSPgo update.

Some keys are updated.

There is no keys to decrypt PSPgo kernel prx.

It's a completely rewritten prx decryptor based on 6.20 mesg_led_02g.prx. Right now there is only a POC version, but it already can decrypt 0x2e5e10f0, the key tag which pspdecrypt.prx failed to handle with. It also means you can decrypt PBOOT.PBP (game patch) since many patches use 0x2e5e10f0 to encrypt themselves.

Usage:
Use unpack-pbp to unpack a PBOOT.BIN.
Rename DATA.PBP to EBOOT.BIN and move to ms0:/enc/.
Run PSPCipher, the EBOOT.BIN will be decrypted.
Replace original ISO with new EBOOT.BIN and PARAM.SFO. If you use Prometheus module then EBOOT.OLD instead.

Right now, God Eater 1.01 patch and Idol Master SP patch are tested.

Install LPB Update v2.05 on any CFW:
1) Extract DATA.PSP from PBOOT.PBP and rename it to EBOOT.BIN;
2) Copy EBOOT.BIN to "ms0:\ENC\";
3) Run PSPCipher and decrypt EBOOT.BIN;
4) Patch decrypted EBOOT.BIN with EDecrypt (one version check);
5) Replace original EBOOT.BIN from LBP.ISO with decrypted and patched EBOOT.BIN from update file;
6) Create "UCES01264" in "ms0:\PSP\GAME\";
7) Copy dlc0003.arc and patch.arc from update to "UCES01264" folder;
8) Copy generated LBP.ISO (with decrypted and patched EBOOT.BIN) to memstick;
9) Run the game and enjoy update installation
10) DON'T DELETE corrupted data after succesful installation!