RFOM Exploit possible?

[turulo]

Originally Posted by pocyion I stated this earlier in this thread, but apparently it went unnoticed. PS3 (PAL) Resistance Fall of Man (PAL) System Firmware 1.60 (PAL) Oblivion (PAL) I used RFoM to boot into Oblivion, so I can confirm this does work on a PAL ps3 with firmware 1.60 with PAL RFoM.

Same here everything is PAL but using fw 1.54.

There is just one curious thing, i have played oblivion for two weeks under 1.54 firmware, but if i load the game trough RFoM trick, the game wouldn't let me load my old save games :?? I havent tried to start a new game and save it.

I have multiple user accounts at my ps3, looks like after the trick the info about current logged user is lost or something.....

[TuRDMaN]

Originally Posted by PS3ua full auto 2 also has Exploit -press pause in game -replace the blue ray by another game (wait few seconds) -press quit to main menu PS3 model : japan PS3 firmware version 1.50 game full auto2 usa

I also did this with a US 1.50 ps3, but I don't have a 1.50+ game to test it with. However, it did boot the other game I swapped in right away once I chose quit to main menu. Once I get a game requiring 1.50+, I'll test it again.

[turulo]

Originally Posted by turulo Same here everything is PAL but using fw 1.54. There is just one curious thing, i have played oblivion for two weeks under 1.54 firmware, but if i load the game trough RFoM trick, the game wouldn't let me load my old save games :?? I havent tried to start a new game and save it. I have multiple user accounts at my ps3, looks like after the trick the info about current logged user is lost or something.....

After some more looking i found that saves done trough this trick will use BCES0001 name which in this case is my Spainish PAL copy of RFoM.

For example a normal save from F.E.A.R is named BLES0035, anyway loading F.E.A.R trough RFoM trick would end on a BCES0001 named save game. Renaming an old BLES0035 to BLES0001 to load an original save trough RFoM isn't working, gameid must be also saved and encrypted into the save file.

Also game system files stored into the HD (while using RFoM trick), such as the network update from RFoM are also installed into the RFoM system files folder. Ej. after loading F.E.A.R using this trick, the RFoM system files shown in the XMB have grown up to 782mb or so... One more funny thing here, the static icon is from RFoM but if you wait a bit, then starts the animated icon from F.E.A.R lol. Anyway i haven't observed any problem here about overwriting system files more than the system files folder icon.

This probes that PS3 thinks the inserted title is RFoM, so maybe backuped blue-rays would work.

Also save games would be a unique combination from the gameid at the game used for the trick (RFoM, F1) and the game finally loaded.

NOTE: Saving into F.E.A.R loaded trough RFoM works fine for me, but if i reboot and load the game again trough RFoM, the save game wont load, anyway it shows me the continue option, which wasn't available before... really bad thing. So would be nice if people would let know if their save games are working fine when using this trick.

Also would be nice to hear from someone with a blue-ray burner

[Mycroft9x]

Tried the F1 trick, with a BD backup (Virtua Fighter 5) and no go, but not suprising as my PS3 is a US with the latest FW (1.7) It basically just goes back to the XMB and no disc even shows up under Game.

Just a question for those who have gotten the F1 swap to work with legit games. When you press the key to exit back to the main menu, what exactly happens at that point? Does it just load the game you put in, or does it go back to XMB with the game showing up under the Games option, then letting you boot into the swapped game from there?

As I said before, I'm pretty positive it's not working on mine because of the latest fw and being a US PS3. But still curious.

Last edited by Mycroft9x; 05-16-2007 at 08:59 PM. Reason: Automerged Doublepost

[turulo]

Nice to hear from someone with a BD backup, first of all you should try using original games, and when you get the method, then try with backup. About what happens after exiting, i can let you know what happens when using RFoM.

Using RFoM and the latest network patch, after the exit you get a black dead screen and nothing happens. Ps3 needs to be turned off/on to work again. Deleting network update and using stock RFoM, then just after exiting game, the new one boots up, skipping ps3 boot logo.

So maybe there is a network update at F1 such as RFoM has, you can try deleting it if exists.

[pally22]

Ya doubt it will load any backups. I tried it with ps2 backups and it didnt work. I'm sure the media check is the last check they do before loading the game. This is just good for prolonging the inevitable..

[turulo]

Taken from news here, says its working on 1.7

Formula 1 EU swap BUG Yes, this is another SWAP bug for update firmware bypass. This is with a Formula 1 EUROPE PAL version: 1-Put your F1 pal a go to MULTIPLAYER menu. 2- In multiplayer menu press "back" ("X" on my sixaxis) 3-When game answer for confirm back to F1 main menu, eject F1 to any game. 4-Confirm (O) exit of multiplayer game and your swaped game now work. Confirmed PS3 JAP, firm 1.7 and F1 PAL Spain

Well as multiplayer is used in this game trick, maybe deleting network update has no sense, if it is redownloaded again automatically.

Originally Posted by pally22 Ya doubt it will load any backups. I tried it with ps2 backups and it didnt work. I'm sure the media check is the last check they do before loading the game. This is just good for prolonging the inevitable..

I dunno too but is worth trying... Anyway as i said before PS3 thinks is still running BCES0001 after the swap, and during gameplay, so it would expect a ps3 BD game.

Last edited by turulo; 05-16-2007 at 09:41 PM. Reason: Automerged Doublepost

[sniper78]

Well maybe since it's blu-ray it's only reading that and the laser is in a different mode? Is there a way to do this with a ps2 game? All swap magic did was get past the layer check. If a ps2 game is past it's layer check couldn't we boot that?

[y2kgt]

It works!

NTSC 1.32 PS3
Spiderman 3
confirmed working rfom method

Nice Work Man! Just think I was about to update my PS3... Not anymore!

[Xis]

Just confirming, it works in the following conditions:

PS3 PAL version 1.5
Resistance Fall of Man PAL version
Virtua Tennis PAL version (game used to swap)

Good job in finding this bug, lets hope it gets us to anything more interesting