Sponsored Links

Sponsored Links

Damage Inc Pacific Squadron WWII PS3 3.55 / 3.41 EBOOT Fix Out


Sponsored Links
107w ago - This weekend we received word from a PlayStation 3 developer who wishes to remain anonymous news of a Damage Inc Pacific Squadron WWII (Firmware 4.11) PS3 EBOOT fix for 3.55 and 3.41 Custom Firmware (CFW) users.

Download: [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (Mirror #2) / [Register or Login to view links] (Mirror #3) / [Register or Login to view links] by [Register or Login to view links]

From the author on the release: Hello, I want to share an unreleased EBOOT with everybody but I want to be anonymous.

The EBOOT is for the game Damage Inc Pacific Squadron WWII (FW 4.11) and works on 3.41 / 3.55 CFW.

Everybody with a DECR and extra hardware to dump the RAM can get his hands on those decrypted EBOOTs.

Greetz

Below is a brief guide from [Register or Login to view links], as follows:

This is great news, I just think there are other ways also to do it like full game debugging. I research this option myself, and I can see also there are ways to to obtain the decrypted eboot several ways. I really played around today, and I manages to get full game debugging.. also on the PS3 you can play the game under debugger mode.

Since EBOOTs stays in ram to the next is loaded the entire game can be debugged, so there for only the EBOOT have to be decrypted and not the SPRX if the Game OS needed off that.. when the debugging starts you can sniff with "software."

Even works on 4.11 games but prepare for huge files like 1GB when sniffing, so hope for any good suggestions. Funny that you can debug both TB and Cobra this way, all the updates an dongle updaters, just wised that DEX was around before

  • First reset in debugger mode
  • Locate the eboot.bin decrypt it, and resign with Fself one
  • Then in target manager set app_home to the BLES or BLUS folder
  • Reset target
  • Then load executable then locate the eboot.bin
  • Load it
  • Then open Tuner from the SDK
  • Then load executable there also
  • When you do this you get kicked to the ps3 debugger
  • Then in debugger you press go under options
  • Congrats you are debugging full game

So of course you say why debug the game:

1) Well the debugged of the game is done by decrypting and fself the EBOOT. Not the other files sSPRX/SELF ones they can still be signed with higher keys. This method also allowed full coredump from ram.

2) Other way i found is simply sniff with wireshark on local network, the game can be either set up as emu or just app_home.

Just sniff then load game. then in the log of the sniffer, the binary is there (HEX) still some testing.

So basically my theory is load 4.1 games with the update trick, load it in the debugger, when game is running make full dump with ram.
This should work since EBOOTs are stored in ram till the next is loaded.. still you need some kind off debug info in the EBOOT, for the debugger to load the EBOOT.

All the cobra and TB updates all the way up to the last can be debugged. Its pretty easy to do, just decrypt the updates and fself them. Run them in the debugger easy peacy. Just remember to make an folder PS3_GAME and put the USR dir inside+ set app_home to the dir where PS3_folder is.

Regarding the games all games is possible to debug. only the eboot have to be an fself one, then it dosen't matter if the other files are signed with greater keys. The challenge is to build an fself that launch the higher eboots 3.61+ ones, but still there are many ways.
can be if then game have an 3.60 patch but the rest is 4.21, then it should be apple to get some info there. No exact answer here.

Haven't tried yet on the nodrm games since I don't have any off those.. so if any have those try it out. I've made an small video that shows how to debugg the dongle updates I don't have any dongle attach... all updates and apps made can be done this way.





Also made this one about how to sniff the game, minus is that you get huge files, but you get the EBOOT decrypted.. so of course the next is to sniff emu/iso games. Also I'm on dex 4.21(affraid to downgrade, since I broke one console) If any on 3.55 can try sniffing the 4.21 emu games there and give some feedback.





Another thing i noticed is when running different EBOOTs. Is that the EBOOTs depends on many different files mostly sprx one, from dev flash from the console. So they also show in the debugger, decrypted or in the core dump.

Now i have many thought og doing this, one is maybe debug an game while it patches an game online.. not sure. Best is if we could build an debug self that runs the actuall eboot. Not unlike the eboots thats runs the signed files from console.those get decrypted. Remember if loaded from the debugger insteed of the target there is an nice little function called force coredump.

If you haven't figured it out yet you can debugg patches also .Like nodrm ones, or games. When you get the patches. you have to set the folders strait.

Make Ps3_Game folder, copy the USRDIR inside ,put the app_home ,then debug as normal. the nodrm patch would show up as any other patch for an game. (remember to Fself the EBOOT) if you want redump as nodrm did it, rebuild eboot.elf the elf would get decrypted right this time.and off coause this eboot work on any rip games.

I managed to dump sdat packed files also:

[Register or Login to view code]

Now first when i debugged the patched the target was looking for game.psarc.sdat it gave an error since it wasn't there. so i replaced the game.psarc.sdat with files that was finallyzes encrypted, just rename the files i wanted to game.psarc.sdat then in debugger, do core dump extract the sdat decrypted.

And to math flags explaination, that you cant dump files without prober flags. I haven't come across and game or app that i havent been able to dump yet, maybe you can elaborate on that, since maybe the core isn't visible but, if stepping one by one into memory you are able to just dump the last executable one.

I've made an video sometime ago on another topic, but this would go for all the sdk.. new quick video:





I was looking at the sequence from make self, making fself, making E/Adat to examine the different algorythms. This is the way to debug and reverse it in ida pro, now this stuff is to hard for me to calculate the algorythm. now i highlight on video on right mouse what to look for, so if you get the video you get the point.

I admit this is to hardcore for me.. actually you would need some one like math to calculate the sequence, even with it being wide open.

The games that needs to run as emu, actually don't. After you build the emu in ps3gen, press verify. Then select emu you just build. then select all files and folders, then decrypt. Now in Target manager set app _home. to the folder you created. IN release mode play via XMB.

From Abkarino: You do not need all this steps to just decrypt SDAT files. You can use this application (asmodean.reverse.net/misc/_/extttdpk.zip) to do this. Also you can look at this article it take about SDAT decryption and this code is tested and work fine. You can build your app to decrypt any SDAT files and run it in any DEX or CEX with CFW console.

From RangerRus (via forum.xentax.com/viewtopic.php?f=21&t=7610): sdat files (PlayStation 3) decryption method:

Hello. Today we'll talk about .sdata encrypted files and HOW to decrypt and then "encrypt" them back.

First, i've to say about why we should know about this. There are many games which included such file types on ps3, many of them not supported another languages (ie. russian). And for their translation we need to decrypt this type of files (for example Red Dead Redemption or Demon's Souls).

Second, here is some information about encryption. Even if .sdata files encrypted, we can create .sdata file without encryption from decrypted file and it will work in a game. For this purpose you should use a standart SDK programm "make_sdata.exe". This (and other files we will talk about) here, in sdata-archive: * snip

Next, about how to decrypt them. Well, this is hard - you need: 1) jailbroken ps3 for real tests (or smbd. who got it) 2)SONY PS3 SDK (I think, you should take DUPLEX 3.40 version) 3) an encrypted file (examples in my sdata-archive). When the SDK would be downloaded, make all preparations to work with it and go next part:

To decrypt this files we should create a special "game" and run it from game manager, like Multiman. The question is how to build eboot.bin file we need it for. Well, some part of the answer is here: asmodean.reverse.net/pages/extttdpk.html

Let's try to understand what is this all in extttdpk.zip (included in my sdata-archive). First, we should to read SDATA-Overview_e.pdf (take it from my sdata-archive). It says that decryption of this file can be proceed by a function cellFsDataOpen() and other functions, which must be used when you create a game, i.e. EBOOT.BIN.

Ok, let's open extttdpk.zip:

1) extttdpk_v1.exe, extttdpk_v2.exe, extttdpk.cpp are files we no need in them.

folder decrsdat:

2) decrsdat.cpp - source C file we will need to create EBOOT.BIN
3) PS3_GAME folder: it's done folder of our "game"
4) decrsdat.conf & decrsdat.build we no need to modify - it have to use while compiling EBOOT.BIN with decrsdat.cpp.

folder game -> usrdir:

5) decrsdat.lst - simple file where we write about what file we need to decrypt (open with Notepad++). Example:

[Register or Login to view code]


Here we need to decrypt file "datadkh.sdat" (which have placed in /dev_hdd0/game/LAUN12345/GAMEZ/BLJM60166/PS3_GAME/USRDIR/) and place decrypted copy "datadkh" of it in /dev_usb/ (ie. external HDD).

So, here is instruction:

1) Make eboot.bin with SDK & decrsdat.cpp & decrsdat.conf & decrsdat.build.
2) Edit decrsdat.lst with what files you want to decrypt.
3) Place compiled EBOOT.BIN in PS3_GAME\USRDIR
4) Place PS3_GAME folder on internal HDD
5) Run "game" and catch decrypted files on ext.HDD.

From Mathieulh: You need to understand a few things:

1. Coredump is by design, meant not to trigger when a process flagged as "not debuggable" (that's a capability flag in the EBOOT's metadata) is running.

2. It's easy to run an actual disc eboot in debug mode, it usually doesn't require anything more than using a static path for the eboot (and to have the original disc in the drive because the self is flagged with "discbind" capabilities), the thing is if it is flagged as not debuggable, even though you can run it, you cannot attach to the process and thus dump it, and coredump will be disabled.

3. The only thing that can trigger a coredump on a not debuggable process is an exception, but to have any process flagged as not debuggable copied to ram, you need to run it (you cannot load and not start a process flagged as not debuggable, unlike ones issued from fself or regular processes)

The issue is that once the said process is running, since it's obviously loaded from a signed and encrypted executable, you do not have any control of what runs there, you also cannot have your own process running on the background while this one gets started because all the sprx/processes you would have had loaded get unloaded as soon as the new executable starts (they don't have the proper cflags to stay loaded)

This means you cannot trigger the exception on your own, you have to rely on an existing bug in the actual game code (good luck with that)

Finally I don't see what wireshark has to do with this. For your intel, all 2.20+ game selfs are flagged as "not debugable" Oh ! and even on DECR-1000A, if you are running a process as "not debugable" the foot switch coredump will not work/trigger. Sorry to dissappoint you all.

Finally, if any other anonymous PlayStation 3 developers out there wish to have us share your work feel free to Contact Us or PM Me and we will be happy to do so of course!




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 8885 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

nicoblog's Avatar
#8885 - nicoblog - 5d ago
I wonder if this games were posted?

PSN CLassic: Megaman X4 - NPUJ00561
PSN CLassic: Megaman X5 - NPUJ01334

tapuPS3's Avatar
#8884 - tapuPS3 - 1w ago
Other games from PSN :

Fibbage - online required
Full Game - NPUB31572 : [Register or Login to view links]
Fix 421+ : [Register or Login to view links]

Fairy Fencer F + DLC - (First Aid Pack For Newbie Fencers, Beginner's Synthesis Pack)
Full Game - 421+
NOTES:
Direct link not provided since most of or entire game files needed patched, so full fixed game must be uploaded.
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

Dark Souls II + DLC + 1.07 Patch - (Crown Of The Sunken King, Crown Of The Old Iron King, Black Armor Weapons Pack)
Full Game - NPUB31358 : [Register or Login to view links]
patch 1.07 : [Register or Login to view links]
Fix 421+ : [Register or Login to view links]

Full Game - NPEB01853 : [Register or Login to view links]
Patch 1.07 : [Register or Login to view links]
Fix 421+ : [Register or Login to view links]

Update: Fifa 15 Resigned

Fifa 15 resigned eboot and param. original 4.60 now minimum 4.53 by tm4

Download: [Register or Login to view links]

Enjoy

PS3 News's Avatar
#8883 - PS3 News - 2w ago
Below are some more PS3 3.41 / 3.55 / 4.21+ Fixes by opoisso893 as well (Password: opoisso893.fr)

NARUTO SHIPPUDEN: Ultimate Ninja STORM Revolution - BLAS50700 / BLES02014 - 1.01

[Register or Login to view code]


Sniper Elite 3 - BLES01981 / BLUS31401 - update 1.03

[Register or Login to view code]


Gran Turismo 6 - BCAS25018 / BCES01893 / BCUS98296 - update 1.12

[Register or Login to view code]


Destiny - BLES01857 / BLUS31181 - update 1.03

[Register or Login to view code]


Diablo III Reaper of Souls Ultimate Evil Edition - BLES02035/ BLES02036 /BLJM61197 /BLUS31437 - update 1.02

[Register or Login to view code]


Thief - BLUS30801 - update 1.02

[Register or Login to view code]


Plants vs Zombies Garden Warfare - BLUS31410 - update 1.01

[Register or Login to view code]


Dead or Alive 5 Ultimate - BLES01907 / BLJM61085 - update 1.07

[Register or Login to view code]


Shin Koihime Musou Otome Taisen Sangokushi Engi - BLJM61101 - update 1.04

[Register or Login to view code]


The Last Of US - BCAS20270 / BCES01584 / BCES01585 / BCUS98174 - update 1.09

[Register or Login to view code]


Grid Autosport - BLES02038 / BLUS31452 - update 1.02

[Register or Login to view code]


Yakuza 1 & 2 HD - BLJM60471 - update 1.01

[Register or Login to view code]


Dark Souls II - BLAS50640 / BLES01959 / BLJM61113 / BLUS41045 - update 1.07

[Register or Login to view code]


Madden NFL 15 - BLUS31428 - update 1.01

[Register or Login to view code]


Watch_Dogs - BLES01854 / BLUS31176 - update 1.03

[Register or Login to view code]


Little Big Planet Karting - BCAS20205 / BCES01422 / BCJS30085 / BCUS98254 - update 1.20

[Register or Login to view code]


GRAND THEFT AUTO V - BLES01807 / BLUS31156 - update 1.16

[Register or Login to view code]


Lost Dimension - BLJM61166 - update 1.01

[Register or Login to view code]


Call Of Duty GHOSTS - BLES01945 / BLES01948 / BLUS31270 - update 1.15

[Register or Login to view code]


SUPER STREET FIGHTER IV - BLES00770 / BLUS30453 - update 1.09

[Register or Login to view code]


SUPER STREET FIGHTER IV Arcade Edition - BLUS30793 - update 1.09

[Register or Login to view code]


Diablo 3 - BLES01921 / BLES01922 / BLJM61136 / BLUS31188 / BLUS31221 - update 1.04

[Register or Login to view code]


Ultra Street Fighter IV - BLUS31218 - update 1.09

[Register or Login to view code]


Risen 3 – Titan Lords - BLUS31432 - update 1.01

[Register or Login to view code]


NASCAR ‘14 - BLUS31378 - update 1.03

[Register or Login to view code]


Musou Orochi 2 Ultimate - BLJM61084 - update 1.06

[Register or Login to view code]


Mugen Souls Z - BLES02022 - update 1.01

[Register or Login to view code]


Lego Marvel Super Heroes - BLES01831 - update 1.03 / Lego Marvel Super Heroes - BLUS31161 - update 1.04

[Register or Login to view code]


Gran Turismo 5 - BCES00569 / BCAS20108 / BCUS98114 - update 2.17

[Register or Login to view code]


Winning Post 8 - BLJM61119 - update 1.03

[Register or Login to view code]


MLB 14 The Show - BCUS99195 - update 1.17

[Register or Login to view code]


Kamenrider Battride War 2 - BLJS10262 / BLJS10263 - update 1.02

[Register or Login to view code]


Terraria - BLES01938 - update 1.05

[Register or Login to view code]


NAtURAL DOCtRINE - BLJS10268 - update 1.06

[Register or Login to view code]


Borderlands 2 (& Goty) - BLES01684 / BLUS30982 - update 1.13

[Register or Login to view code]


Mobile Suit Gundam: Side Stories - BLAS50710 - update 1.01

[Register or Login to view code]


Lost Planet 3 - BLES01685 / BLUS31020 - update 1.02

[Register or Login to view code]


Arcana Heart 3 Love Max!!!!! - BLJS10274 - update 1.02

[Register or Login to view code]


BATTLEFIELD 4 - BLAS50588 / BLES01832 / BLUS31162 - update 1.12

[Register or Login to view code]


AFL Live 2 - BLES01875 - update 1.02

[Register or Login to view code]


LEGO The Hobbit - BLES01998 / BLUS31392 - update 1.02

[Register or Login to view code]


Professional BaseBall Spirits 2014 (プロ野球スピリッツ2014) - BLJM61148 - update 1.08

[Register or Login to view code]


Phantom Breaker Extra - BLJM61098 - update 1.03

[Register or Login to view code]


Super Heroine Chronicle Chou Heroine Senki - BLJS10244 - update 1.01

[Register or Login to view code]


Payday 2 - BLES01902 - update 1.03

[Register or Login to view code]


WWE'12 - BLES01439 - update 1.02

[Register or Login to view code]


Uncharted3 Drake’s Deception - BCUS98233 - update 1.19

[Register or Login to view code]


FIFA 14 - BLES01876 / BLES01877 / BLUS31189 / BLUS31190 - update 1.05

[Register or Login to view code]


Ducktales: Remastered - BLUS31368 - update 1.01

[Register or Login to view code]


Wolfenstein The New Order - BLUS31220 - update 1.01

[Register or Login to view code]


Terraria - BLES01938 - update 1.04

[Register or Login to view code]


CALL OF DUTY Black OPS II - update 1.18

[Register or Login to view code]


Tom Clancy's Splinter Cell Trilogy HD - BLES01146 - update 1.01

[Register or Login to view code]


Watch Dogs - BLES01854 - update 1.01

[Register or Login to view code]


SOUTH PARK: THE STICK OF TRUTH - BLES01731 - update 1.02

[Register or Login to view code]


Wolfenstein The New Order - BLES01909 / BLES01910 - update 1.01

[Register or Login to view code]


Uncharted3 Drake’s Deception Game Of The Year - BCAS25014 / BCES01670 - update 1.19

[Register or Login to view code]


Uncharted3 Drake’s Deception - BCES01175 / BCES01176 - update 1.19

[Register or Login to view code]


Drakengard 3 - BLUS31197 - update 1.01

[Register or Login to view code]


BlazBlue ChronoPhantasma - BLJS10226 - update 1.04 / BlazBlue ChronoPhantasma - BLUS31213 - update 1.01

[Register or Login to view code]


Red Faction: Armageddon - BLES00991 - update 1.01

[Register or Login to view code]


Birds Of Steel - BLUS30831 - update 1.01

[Register or Login to view code]


tapuPS3's Avatar
#8882 - tapuPS3 - 2w ago
A new big Release :

FIFA 15 PS3-iMARS

[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

enjoy

FIFA15
BLUS31443 - 3.41/3.55/4.21+ - Opoisso893 , thx for the hard work
links : [Register or Login to view links]

and the PSN version with DLC for : Destiny + DLC + 1.03 Patch - (online multiplayer only)

Full Game - NPUB31202
[Register or Login to view links]
fix 4.21+
[Register or Login to view links]

Full Game - NPEB02021
[Register or Login to view links]
fix 4.21+
[Register or Login to view links]

thx ZigoTundra for sharing with us

enjoy

pspfrank4U's Avatar
#8881 - pspfrank4U - 3w ago
Thanks tapups3 for the dlc's for saints row 2

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News