How to Decrypt PS3 EBOOT.BIN or SELF Files in Windows

[Randactyl]

Same here. Ideas? Need different keys maybe?

[plzletmejoin]

Man I downloaded a Naughty Bear eboot and the gu who patched it put his name on the game, and I don't want that showing up when I play online. I get the

invalid type: 00000008
perror: No error

Edit: I typed in:
unself eboot.bin eboot.elf
unself EBOOT.bin eboot.elf
unself EBOOT.BIN eboot.elf
unself eboot.self eboot.elf

and other various ways, NOTHINGS WORKING!

[caleb4god]

this is a no go on my end as well. I get self decrypt header failed... perror: no error.. paths are right, keys are placed.

[SixShooter]

invalid type: 00000008
perror: No error

You can't decrypt NP-DRM EBOOT'S.

[Red 13]

Hey. I have been playing around with geohots update.pup. (it's not really an update, but an exploit using PS3update to run a self file, patching game_category.xml)

Made som modifications, and no i am trying to put it back together. Repacking the pup is no problem, but i am not able to sign the ps3swu.self correctly...

I have been using the win32 version of makeself (not make_self). It has most options.

This is the command i have been trying

makeself app 355 3.55.00 01000002 10700003ff000001 1 ps3swu.elf ps3swu.self

The pup loads on the PS3, but insted off restarting the ps3, and beeping 10 times, it just returns to the XMB.

What am i doing wrong? What key did geohot use to sign the file? (I have tryied just to unself the original file, and repacking it with makeself, with no sucsess)

This is the "readself" of the original file.

SELF header
  elf #1 offset:  00000000_00000090
  header len:     00000000_00000980
  meta offset:    00000000_000003a0
  phdr offset:    00000000_00000040
  shdr offset:    00000000_0000f2d0
  file size:      00000000_00041f18
  auth id:        10700003_ff000001 (Unknown)
  vendor id:      01000002
  info offset:    00000000_00000070
  sinfo offset:   00000000_00000260
  version offset: 00000000_00000340
  control info:   00000000_00000350 (00000000_00000070 bytes)
  app version:    3.55.0
  SDK type:       Retail
  app type:       application

Control info
  control flags:
     40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  file digest:
     62 7c b1 80 8a b9 38 e3 2c 8c 09 17 08 72 6a 57 9e 25 86 e4
     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Section header
    offset             size              compressed unk1     unk2     encrypted
    00000000_00000980  00000000_00009311 [YES]      00000000 00000000 [YES]
    00000000_00009ca0  00000000_00000361 [YES]      00000000 00000000 [YES]
    00000000_0000a010  00000000_00004f6e [YES]      00000000 00000000 [YES]
    00000000_0000ef80  00000000_000003ae [YES]      00000000 00000000 [YES]
    00000000_0000f330  00000000_00000008 [YES]      00000000 00000000 [YES]
    00000000_0000f340  00000000_00000008 [YES]      00000000 00000000 [YES]
    00000000_0000f350  00000000_00000008 [YES]      00000000 00000000 [YES]

Encrypted Metadata
  Key:            a8 0c 7e 37 19 84 ac 4b b2 84 9a 01 ea c0 f4 fd
  IV :            24 18 47 de 16 ee 03 90 2e 09 c2 53 0f 5c c5 99
  Signature end   00000920
  Sections        7
  Keys            56

  Sections
    Offset            Length            Key IV  SHA1
    00000000_00000980 00000000_00009311 006 007 000
    00000000_00009ca0 00000000_00000361 014 015 008
    00000000_0000a010 00000000_00004f6e 022 023 016
    00000000_0000ef80 00000000_000003ae 030 031 024
    00000000_0000f330 00000000_00000008 038 039 032
    00000000_0000f340 00000000_00000008 046 047 040
    00000000_0000f350 00000000_00000008 054 055 048

  Keys
    Idx  Data
    000  6c 46 71 e8 44 c3 be aa 7b 29 91 d9 fa 7a 6d 67
    001  09 bb 32 d5 00 00 00 00 00 00 00 00 00 00 00 00
    002  5b 88 d7 82 e8 b4 5d 75 34 10 ec 2c 7c 80 62 83
    003  e3 cb 9c e7 84 84 1b f6 13 73 c8 b9 e7 2b 9d 0f
    004  c7 2b 5a 59 f1 cb 1f 93 f5 b8 c3 1c 19 b9 2a 54
    005  ea a0 6b c5 6f 8f 06 c4 72 0a 4f 1c 6c 57 95 dd
    006  d1 43 3c c2 2d 16 b5 bf 3a c1 71 af ee c0 9e 47
    007  d5 15 c4 c0 e6 80 b9 e3 7a a5 39 aa 42 d4 77 7b
    008  11 1e c5 5d 2d c2 64 6f b5 af 8c 98 f3 c6 4e d6
    009  6a d2 fd c9 00 00 00 00 00 00 00 00 00 00 00 00
    010  7d c8 61 ae b4 fd 89 e6 b6 a1 83 33 5d 9e b0 7c
    011  34 c5 7d ee 2a 68 fe f1 9b 05 95 a3 02 c2 27 af
    012  1e 61 d3 ff 95 61 65 f3 7d 41 29 bc 7a 5c da de
    013  8f 3a 42 79 05 15 a4 b9 c0 25 c2 1a 9e 09 92 6d
    014  f6 dc c3 24 71 de 59 94 94 71 e4 c8 f2 48 79 41
    015  00 6e 66 16 74 6c a2 a9 c2 d5 10 96 ff cf 83 e0
    016  80 3a 8e 3d b7 86 90 30 26 a7 58 35 49 86 e4 e0
    017  19 5e d9 f1 00 00 00 00 00 00 00 00 00 00 00 00
    018  e4 e8 89 81 37 5e 39 f5 f8 d1 a1 52 40 c4 f4 be
    019  b7 63 43 80 82 ea b6 44 08 6d 8c 32 de 06 47 3d
    020  b4 b2 19 21 b3 2a 5c c3 e6 46 85 0c ff 4b fa fa
    021  87 42 60 e1 f1 40 ea 92 0a c4 1c e6 36 4b 63 d2
    022  40 3f 4a aa 70 e1 5d ad 78 47 ce bd 8d 54 70 ab
    023  8f 90 39 c1 c4 8d 5b 98 95 1b 72 99 eb 00 a9 68
    024  ae 56 6d ce 3d 62 a1 5e 89 82 63 9f 38 e4 0c 94
    025  95 1e c9 6f 00 00 00 00 00 00 00 00 00 00 00 00
    026  74 f2 63 80 87 d8 c2 3c 88 e9 36 d8 ea eb e9 39
    027  a4 3a e6 03 6d 0c 59 0d 19 57 66 18 cc 8d 4f 71
    028  56 75 3f 94 07 1e 50 8a fc e1 20 f9 95 72 40 b6
    029  6c 4d 96 72 16 72 8a c4 2a 8f f9 3b ec 44 0b 2a
    030  b1 cf 8f da 6a 88 71 49 92 22 89 21 f4 e1 be 52
    031  88 32 58 b8 e6 78 51 22 88 ef 96 77 cd 30 ca 95
    032  85 2d aa 7a 60 98 98 5d c8 57 2d b6 0d f0 81 ae
    033  60 21 2b 8b 00 00 00 00 00 00 00 00 00 00 00 00
    034  39 25 27 e9 3b 5f df 5b f9 c7 ba 2f e9 5d 21 f4
    035  9c 92 50 8c 44 bc f7 ae fa 75 73 be 8c 61 65 e7
    036  18 23 56 b4 a6 1d dd a6 5f db 76 7d b9 f0 33 63
    037  31 1e 21 44 3f f7 e0 11 37 8f 05 c6 40 bb 7c 1d
    038  f7 30 a3 1a 43 d2 ce 6d e9 b7 c5 88 74 4c 34 7d
    039  5d 25 22 af 56 4c 49 05 db 37 cd b5 d1 a7 be 2e
    040  44 00 69 01 ff c6 30 88 16 30 de 57 8e 9e d1 86
    041  b0 af bb 04 00 00 00 00 00 00 00 00 00 00 00 00
    042  fd a0 ee d3 d6 92 20 7a 3e 97 ac 7b d7 99 ef 4b
    043  b8 b8 00 ea 1a bc a3 dc 93 b8 4a f5 ab ec 3d d0
    044  1e 0b 7b 2a de 17 cc c5 36 f4 da 9f 68 7c 89 52
    045  95 50 f6 78 9a d2 23 51 e4 d2 24 25 82 ee f3 7c
    046  1b ec dc 1a f9 e4 b6 52 61 53 fe 99 6d ad 13 8e
    047  1a 59 f3 f3 dd c0 27 17 19 29 f9 31 f6 ab 83 f0
    048  65 65 22 cc e1 0c 23 92 48 83 25 7a 37 e1 7b 39
    049  a9 6d 13 33 00 00 00 00 00 00 00 00 00 00 00 00
    050  d0 2c 9a a1 2e 25 36 92 65 1a 22 19 f9 86 8a 80
    051  ce 63 52 1b 44 a9 5d 45 ea b0 26 e3 5e 39 d9 0d
    052  22 0c 59 20 ea 0e a0 8e 34 64 f4 90 59 ed 8d 3d
    053  e2 1e c2 02 e9 54 0c b3 4a 41 21 45 ed b0 b7 f5
    054  45 65 fa 74 9c 30 ae 6e f2 8f 42 f2 90 87 4d 1c
    055  d4 d8 25 3e 40 15 69 43 27 dd 3c 0e 1b ca 2f 04


ELF header
  type:                                 Executable file
  machine:                              PowerPC64
  version:                              1
  phdr offset:                          00000000_00000040
  shdr offset:                          00000000_00041a18
  entry:                                00000000_00030030
  flags:                                00000000
  header size:                          00000040
  program header size:                  00000038
  program headers:                      7
  section header size:                  00000040
  section headers:                      20
  section header string table index:    19

Program headers
    type  offset            vaddr             paddr
          memsize           filesize          PPU  SPE  RSX  align
     LOAD 00000000_00000000 00000000_00010000 00000000_00010000
          00000000_00011fa8 00000000_00011fa8 r-x  ---  ---  00000000_00010000
     LOAD 00000000_00020000 00000000_00030000 00000000_00030000
          00000000_00001890 00000000_00001890 rw-  ---  ---  00000000_00010000
     LOAD 00000000_00030000 00000000_10000000 00000000_10000000
          00000000_000079f8 00000000_000079f8 r--  r--  ---  00000000_00010000
     LOAD 00000000_00040000 00000000_10010000 00000000_10010000
          00000000_00061a30 00000000_00001968 rw-  rw-  ---  00000000_00010000
     LOAD 00000000_00041968 00000000_00000000 00000000_00000000
          00000000_00000000 00000000_00000000 rw-  rw-  rw-  00000000_00010000
    ????? 00000000_00000000 00000000_00000000 00000000_00000000
          00000000_00000000 00000000_00000000 r--  ---  ---  00000000_00000008
    ????? 00000000_00000000 00000000_00000000 00000000_00000000
          00000000_00000000 00000000_00000000 ---  ---  ---  00000000_00000008

Section headers
  [Nr] Name            Type      Addr              ES Flg Lk Inf Al
       Off                       Size
  [00] <no-name>       NULL      00000000_00000000 00     00 000 00
       00000000_00000000         00000000_00000000
  [01] <no-name>       PROGBITS  00000000_000101c8 00 wa  00 000 08
       00000000_000001c8         00000000_00000030
  [02] <no-name>       PROGBITS  00000000_000101f8 00 wa  00 000 08
       00000000_000001f8         00000000_00011d88
  [03] <no-name>       PROGBITS  00000000_00021f80 00 wa  00 000 08
       00000000_00011f80         00000000_00000028
  [04] <no-name>       PROGBITS  00000000_00030000 00  a  00 000 04
       00000000_00041968         00000000_00000000
  [05] <no-name>       PROGBITS  00000000_00030000 00  a  00 000 04
       00000000_00041968         00000000_00000000
  [06] <no-name>       PROGBITS  00000000_00030000 00  a  00 000 04
       00000000_00020000         00000000_00000004
  [07] <no-name>       PROGBITS  00000000_00030008 00  ae 00 000 08
       00000000_00020008         00000000_00000010
  [08] <no-name>       PROGBITS  00000000_00030018 00  ae 00 000 08
       00000000_00020018         00000000_00000010
  [09] <no-name>       PROGBITS  00000000_00030028 00  ae 00 000 08
       00000000_00020028         00000000_00000008
  [10] <no-name>       PROGBITS  00000000_00030030 00  ae 00 000 08
       00000000_00020030         00000000_00000f78
  [11] <no-name>       PROGBITS  00000000_00030fa8 00  ae 00 000 08
       00000000_00020fa8         00000000_00000528
  [12] <no-name>       PROGBITS  00000000_000314d0 00  ae 00 000 08
       00000000_00041968         00000000_00000000
  [13] <no-name>       PROGBITS  00000000_000314d0 00  ae 00 000 08
       00000000_000214d0         00000000_000003c0
  [14] <no-name>       PROGBITS  00000000_10000000 00  a  00 000 08
       00000000_00030000         00000000_000079d0
  [15] <no-name>       PROGBITS  00000000_100079d0 00  a  00 000 01
       00000000_000379d0         00000000_00000028
  [16] <no-name>       PROGBITS  00000000_10010000 00  ae 00 000 08
       00000000_00040000         00000000_00001968
  [17] <no-name>       NOBITS    00000000_10011968 00  ae 00 000 08
       00000000_00041968         00000000_000600c8
  [18] <no-name>       PROGBITS  00000000_00000000 01     00 000 01
       00000000_00041968         00000000_00000011
  [19] <no-name>       STRTAB    00000000_00000000 00     00 000 01
       00000000_00041979         00000000_00000099

[rsa84]

$ unself EBOOT.SELF EBOOT.ELF
open EBOOT.SELF
perror: No such file or directory

same error here, typed eboot. elf and eboot.bin help please? or can anyone decrypt the eboot for me? it's the eu assassins creed i can upload it.. but rather have app up and runing so e can do the same to any other eboot i might want.. thanks.

[WTFsandwich]

I'm also getting the self_descrypt_header error trying to decrypt an EBOOT.BIN

It's a shame there's so much unsupported information floating around.

[apexcore]

I followed the guide, but when I clicked Cygwin.bat the dos window just flash for less then a second then closes. I tried it with both Win7 and XP, does anyone know what's the problem? Thanks.

[shummyr]

try running it in compatability mode and admin mode.