Sponsored Links

Sponsored Links

Damage Inc Pacific Squadron WWII PS3 3.55 / 3.41 EBOOT Fix Out


Sponsored Links
105w ago - This weekend we received word from a PlayStation 3 developer who wishes to remain anonymous news of a Damage Inc Pacific Squadron WWII (Firmware 4.11) PS3 EBOOT fix for 3.55 and 3.41 Custom Firmware (CFW) users.

Download: [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (Mirror #2) / [Register or Login to view links] (Mirror #3) / [Register or Login to view links] by [Register or Login to view links]

From the author on the release: Hello, I want to share an unreleased EBOOT with everybody but I want to be anonymous.

The EBOOT is for the game Damage Inc Pacific Squadron WWII (FW 4.11) and works on 3.41 / 3.55 CFW.

Everybody with a DECR and extra hardware to dump the RAM can get his hands on those decrypted EBOOTs.

Greetz

Below is a brief guide from [Register or Login to view links], as follows:

This is great news, I just think there are other ways also to do it like full game debugging. I research this option myself, and I can see also there are ways to to obtain the decrypted eboot several ways. I really played around today, and I manages to get full game debugging.. also on the PS3 you can play the game under debugger mode.

Since EBOOTs stays in ram to the next is loaded the entire game can be debugged, so there for only the EBOOT have to be decrypted and not the SPRX if the Game OS needed off that.. when the debugging starts you can sniff with "software."

Even works on 4.11 games but prepare for huge files like 1GB when sniffing, so hope for any good suggestions. Funny that you can debug both TB and Cobra this way, all the updates an dongle updaters, just wised that DEX was around before

  • First reset in debugger mode
  • Locate the eboot.bin decrypt it, and resign with Fself one
  • Then in target manager set app_home to the BLES or BLUS folder
  • Reset target
  • Then load executable then locate the eboot.bin
  • Load it
  • Then open Tuner from the SDK
  • Then load executable there also
  • When you do this you get kicked to the ps3 debugger
  • Then in debugger you press go under options
  • Congrats you are debugging full game

So of course you say why debug the game:

1) Well the debugged of the game is done by decrypting and fself the EBOOT. Not the other files sSPRX/SELF ones they can still be signed with higher keys. This method also allowed full coredump from ram.

2) Other way i found is simply sniff with wireshark on local network, the game can be either set up as emu or just app_home.

Just sniff then load game. then in the log of the sniffer, the binary is there (HEX) still some testing.

So basically my theory is load 4.1 games with the update trick, load it in the debugger, when game is running make full dump with ram.
This should work since EBOOTs are stored in ram till the next is loaded.. still you need some kind off debug info in the EBOOT, for the debugger to load the EBOOT.

All the cobra and TB updates all the way up to the last can be debugged. Its pretty easy to do, just decrypt the updates and fself them. Run them in the debugger easy peacy. Just remember to make an folder PS3_GAME and put the USR dir inside+ set app_home to the dir where PS3_folder is.

Regarding the games all games is possible to debug. only the eboot have to be an fself one, then it dosen't matter if the other files are signed with greater keys. The challenge is to build an fself that launch the higher eboots 3.61+ ones, but still there are many ways.
can be if then game have an 3.60 patch but the rest is 4.21, then it should be apple to get some info there. No exact answer here.

Haven't tried yet on the nodrm games since I don't have any off those.. so if any have those try it out. I've made an small video that shows how to debugg the dongle updates I don't have any dongle attach... all updates and apps made can be done this way.





Also made this one about how to sniff the game, minus is that you get huge files, but you get the EBOOT decrypted.. so of course the next is to sniff emu/iso games. Also I'm on dex 4.21(affraid to downgrade, since I broke one console) If any on 3.55 can try sniffing the 4.21 emu games there and give some feedback.





Another thing i noticed is when running different EBOOTs. Is that the EBOOTs depends on many different files mostly sprx one, from dev flash from the console. So they also show in the debugger, decrypted or in the core dump.

Now i have many thought og doing this, one is maybe debug an game while it patches an game online.. not sure. Best is if we could build an debug self that runs the actuall eboot. Not unlike the eboots thats runs the signed files from console.those get decrypted. Remember if loaded from the debugger insteed of the target there is an nice little function called force coredump.

If you haven't figured it out yet you can debugg patches also .Like nodrm ones, or games. When you get the patches. you have to set the folders strait.

Make Ps3_Game folder, copy the USRDIR inside ,put the app_home ,then debug as normal. the nodrm patch would show up as any other patch for an game. (remember to Fself the EBOOT) if you want redump as nodrm did it, rebuild eboot.elf the elf would get decrypted right this time.and off coause this eboot work on any rip games.

I managed to dump sdat packed files also:

[Register or Login to view code]

Now first when i debugged the patched the target was looking for game.psarc.sdat it gave an error since it wasn't there. so i replaced the game.psarc.sdat with files that was finallyzes encrypted, just rename the files i wanted to game.psarc.sdat then in debugger, do core dump extract the sdat decrypted.

And to math flags explaination, that you cant dump files without prober flags. I haven't come across and game or app that i havent been able to dump yet, maybe you can elaborate on that, since maybe the core isn't visible but, if stepping one by one into memory you are able to just dump the last executable one.

I've made an video sometime ago on another topic, but this would go for all the sdk.. new quick video:





I was looking at the sequence from make self, making fself, making E/Adat to examine the different algorythms. This is the way to debug and reverse it in ida pro, now this stuff is to hard for me to calculate the algorythm. now i highlight on video on right mouse what to look for, so if you get the video you get the point.

I admit this is to hardcore for me.. actually you would need some one like math to calculate the sequence, even with it being wide open.

The games that needs to run as emu, actually don't. After you build the emu in ps3gen, press verify. Then select emu you just build. then select all files and folders, then decrypt. Now in Target manager set app _home. to the folder you created. IN release mode play via XMB.

From Abkarino: You do not need all this steps to just decrypt SDAT files. You can use this application (asmodean.reverse.net/misc/_/extttdpk.zip) to do this. Also you can look at this article it take about SDAT decryption and this code is tested and work fine. You can build your app to decrypt any SDAT files and run it in any DEX or CEX with CFW console.

From RangerRus (via forum.xentax.com/viewtopic.php?f=21&t=7610): sdat files (PlayStation 3) decryption method:

Hello. Today we'll talk about .sdata encrypted files and HOW to decrypt and then "encrypt" them back.

First, i've to say about why we should know about this. There are many games which included such file types on ps3, many of them not supported another languages (ie. russian). And for their translation we need to decrypt this type of files (for example Red Dead Redemption or Demon's Souls).

Second, here is some information about encryption. Even if .sdata files encrypted, we can create .sdata file without encryption from decrypted file and it will work in a game. For this purpose you should use a standart SDK programm "make_sdata.exe". This (and other files we will talk about) here, in sdata-archive: * snip

Next, about how to decrypt them. Well, this is hard - you need: 1) jailbroken ps3 for real tests (or smbd. who got it) 2)SONY PS3 SDK (I think, you should take DUPLEX 3.40 version) 3) an encrypted file (examples in my sdata-archive). When the SDK would be downloaded, make all preparations to work with it and go next part:

To decrypt this files we should create a special "game" and run it from game manager, like Multiman. The question is how to build eboot.bin file we need it for. Well, some part of the answer is here: asmodean.reverse.net/pages/extttdpk.html

Let's try to understand what is this all in extttdpk.zip (included in my sdata-archive). First, we should to read SDATA-Overview_e.pdf (take it from my sdata-archive). It says that decryption of this file can be proceed by a function cellFsDataOpen() and other functions, which must be used when you create a game, i.e. EBOOT.BIN.

Ok, let's open extttdpk.zip:

1) extttdpk_v1.exe, extttdpk_v2.exe, extttdpk.cpp are files we no need in them.

folder decrsdat:

2) decrsdat.cpp - source C file we will need to create EBOOT.BIN
3) PS3_GAME folder: it's done folder of our "game"
4) decrsdat.conf & decrsdat.build we no need to modify - it have to use while compiling EBOOT.BIN with decrsdat.cpp.

folder game -> usrdir:

5) decrsdat.lst - simple file where we write about what file we need to decrypt (open with Notepad++). Example:

[Register or Login to view code]


Here we need to decrypt file "datadkh.sdat" (which have placed in /dev_hdd0/game/LAUN12345/GAMEZ/BLJM60166/PS3_GAME/USRDIR/) and place decrypted copy "datadkh" of it in /dev_usb/ (ie. external HDD).

So, here is instruction:

1) Make eboot.bin with SDK & decrsdat.cpp & decrsdat.conf & decrsdat.build.
2) Edit decrsdat.lst with what files you want to decrypt.
3) Place compiled EBOOT.BIN in PS3_GAME\USRDIR
4) Place PS3_GAME folder on internal HDD
5) Run "game" and catch decrypted files on ext.HDD.

From Mathieulh: You need to understand a few things:

1. Coredump is by design, meant not to trigger when a process flagged as "not debuggable" (that's a capability flag in the EBOOT's metadata) is running.

2. It's easy to run an actual disc eboot in debug mode, it usually doesn't require anything more than using a static path for the eboot (and to have the original disc in the drive because the self is flagged with "discbind" capabilities), the thing is if it is flagged as not debuggable, even though you can run it, you cannot attach to the process and thus dump it, and coredump will be disabled.

3. The only thing that can trigger a coredump on a not debuggable process is an exception, but to have any process flagged as not debuggable copied to ram, you need to run it (you cannot load and not start a process flagged as not debuggable, unlike ones issued from fself or regular processes)

The issue is that once the said process is running, since it's obviously loaded from a signed and encrypted executable, you do not have any control of what runs there, you also cannot have your own process running on the background while this one gets started because all the sprx/processes you would have had loaded get unloaded as soon as the new executable starts (they don't have the proper cflags to stay loaded)

This means you cannot trigger the exception on your own, you have to rely on an existing bug in the actual game code (good luck with that)

Finally I don't see what wireshark has to do with this. For your intel, all 2.20+ game selfs are flagged as "not debugable" Oh ! and even on DECR-1000A, if you are running a process as "not debugable" the foot switch coredump will not work/trigger. Sorry to dissappoint you all.

Finally, if any other anonymous PlayStation 3 developers out there wish to have us share your work feel free to Contact Us or PM Me and we will be happy to do so of course!




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 8883 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

Natepig's Avatar
#813 - Natepig - 142w ago
I played Call Of Duty Classic on ofw a while ago, its one of those ones that is for online so not much to miss there.

Hissatsu's Avatar
#812 - Hissatsu - 142w ago
Ellow,

No problem m8, i FIX these for people like me who are still on FW 3.41 (so be my guest and upload/link them, where they are needed).

As for the two games you mentioned, i haven't gotten to them yet.

One question, is linking to Sony servers (coded offcourse) allowed here?

As i can post the notepad file i have, that has all the PSX games (from Sony servers) with fixes (multiupload)...

Hissatsu

pr0p0sitionJOE's Avatar
#811 - pr0p0sitionJOE - 142w ago
Hissatsu, I'm on 3.55. Just asking cos lots of people asked for 3.41 fixes. So wanna help out.

All the games work for me, except CALL OF DUTY CLASSIC, CUBIXX HD (ask updating 3.60)

Hissatsu's Avatar
#810 - Hissatsu - 142w ago
Quote Originally Posted by bearmon2010 View Post
Hi.. Does it work for Castlevania USA version ? Thanks.

Ellow,

I believe its possible, BUT you will have to:
- Install bouth DLCs for EUR v. (doesn't matter which order)
- Install the FIX
- Install the 1.03 update (you can use the USA one)

Than copy the content of BLES01047 folder (it was created when you installed the DLCs ,and has the DLC files and the licence in it) over to your update folder (or right in to your game folder) of the US version (whatever the BLUSXXXXX folder is), and overwrite...

Thats what i read somewhere (its untested by me)... As DLC doesnt include any EBOOT.BIN, same with the FIX (so it should work)...

Correction on PixelJunk Encore game:
1. Install the whole game from Install Package Files option.
2. Play the game.

Hissatsu
Quote Originally Posted by pr0p0sitionJOE View Post
PS. Is there any chance of fixing CALL OF DUTY CLASSIC (for both 3.41/3.55) and CRYSIS for (3.41)

Ellow,

Allready Fixed Crysis:
Crysis 1 (PSN) FW 3.41 FIX (FIX ONLY):
Game ID: NPUB30302
FIX: [Register or Login to view links]

1. Get the game installer (you know where to get it), install from Install Package Files option.
2. Install the FIX PKG from Install Package Files option.
*Say YES to overwrite the existing folder notice.
3. Play the game.

Enjoy.
Hissatsu

oVERSoLDiER's Avatar
#809 - oVERSoLDiER - 142w ago
Some more games (lots of PSX) to share, of course from EXEtrimALL.

Release: Resident Evil Trilogy PSX-PSN
Platform: PS3
Size: 1429 MB
Group: N/A

Resident Evil - a super-slick, realistically mapped, and ultra-violent Alone in the Dark - is at the top of the heap in cinematic 3-D adventure games.

The story: A police special tactics and rescue squad (S.T.A.R.S.) vanishes in a remote location recently plagued by bizarre disappearances and deaths. Its sister team lands to investigate and is quickly set upon by creatures who force them to run for "shelter" in - you guessed it - a Creepy Old Mansion. Sure, we've all seen this movie before... but this time, we get to play it. And like a movie, Resident Evil deserves, almost demands, to be experienced in the dark.

The fix to unlock full game was done by EXEtrimALL and all the credit goes to him!

1) install the game
2) install the Fix
3) Play

Edit : Rename UP9000-NPUJ00747_00-FIX0000000000000 To UP9000-NPUJ00747_00-FIX0000000000000.PKG

Resident Evil 2, known as Biohazard 2 in Japan, is a survival horror video game originally released for the PlayStation in 1998. Developed by Capcom as the second installment in the Resident Evil series, its story takes place two months after the events of the first game, Resident Evil. It is set in Raccoon City, a Midwestern American mountain community whose residents have been transformed into zombies by the T-virus, a biological weapon developed by the pharmaceutical company Umbrella. In their escape from the city, the two protagonists, Leon S. Kennedy and Claire Redfield, encounter other survivors, and are confronted by William Birkin, the mutated creator of the even more powerful G-virus, a variation of the T-Virus.

As usual all credit to EXEtrimALL.

1) install the game
2) install the Fix
3) Play

The game begins on September 28, 1998. The player takes control of former Special Tactics And Rescue Service (STARS) member Jill Valentine in her attempt to escape a ruined and zombie-infested Raccoon City. On her way to the Raccoon City police station, she runs into Brad Vickers, who is killed by Nemesis for being part of the STARS, since Umbrella believes that the STARS members know about their operations in the Arklay Mountains, and will reveal Umbrella to the world.

Later on, she encounters three surviving members of the Umbrella Biohazard Countermeasure Service (UBCS): Carlos Oliveira, Mikhail Victor and Nicholai Ginovaef. Nicholai is soon presumed dead after an encounter with zombies as Jill gets parts for the cable car. Mikhail sacrifices himself to save Jill and Carlos from the Nemesis, a bio-organic weapon. The cable car that the three were in bursts into flame and Jill and Carlos are separated.

Jill and Carlos meet up later in a clock tower where Carlos has said a rescue helicopter will arrive. Jill summons the helicopter by ringing the clock tower's bell. Nemesis destroys the helicopter, and infects Jill with a virus. Jill temporarily defeats Nemesis, Carlos finds her in a state of weakness, and she blacks out. During this period, Carlos searches for the vaccine to Jill's infection, as, unknown to either of them, Leon S. Kennedy and Claire Redfield (Resident Evil 2) make their way into Raccoon City.

Install note:

1.Copy files to FAT32 USB Key/USB Disk
2.Install Resident Evil 3 Nemesis.pkg
3.Install fix UP9000-NPUJ00923_00-FIX0000000000000.pkg
4.Run from XMB and enjoy in great classic!!

[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

Release: Crash Bandicoot Trilogy PSX-PSN
Platform: PS3
Size: 679 MB
Group: N/A

Crash Bandicoot is a series of platform video games published by Activision after first being developed by Naughty Dog and published by Sony Computer Entertainment. Initially created by Andy Gavin and Jason Rubin, the series was developed for its first four years by the video game company Naughty Dog. Since then, the series has been given to numerous developers. The series spans 18 games as of 2010.

The games are mostly set on the fictitious Wumpa Islands, an archipelago situated to the south of Australia, although other locations are common. The main games in the series are largely platformers, but several are spin-offs in different genres. The protagonist of the series is an Eastern Barred Bandicoot named Crash, whose quiet life on the Wumpa Islands is often interrupted by the games' main antagonist, Doctor Neo Cortex, who created Crash and now wants nothing more than his demise. It's usually up to Crash to defeat Cortex and foil any world domination plans he might have.

The Crash Bandicoot series has been a commercial success, selling approximately 50 million units worldwide.

[1] As of August 31, 2011, the Crash Bandicoot franchise has celebrated 15 years.

1. Install Game.
2. Install Crack.
3. Boot from XMB.

Note: Install PKG's via the "Install Packages" menu from root of USB or mount them into same menu via Multiman file manager feature from any other location.

[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

Release: Dino Crisis 1&2
Platform: PS3
Size: 569 MB
Group: N/A

Dino Crisis (Japanese: ??? ????? Hepburn: Dino Kuraishisu?) is a survival horror video game by Capcom, originally released in 1999 for the PlayStation and later ported to Microsoft Windows and Dreamcast in 2000. It was directed and produced by Resident Evil creator Shinji Mikami, and developed by a team of staff members that would later become part of Capcom Production Studio 4.

In the game, a special forces team must find a way to survive in a secret government facility that has been infested with dinosaurs. It features survival horror gameplay similar to the Resident Evil series and was promoted by Capcom as "panic horror".

It was followed by two sequels, Dino Crisis 2 and Dino Crisis 3, and a light gun-based spinoff in Capcom's Gun Survivor series, known as Dino Stalker. A Game Boy Color version of Dino Crisis was planned by UK developer M4, but the port was apparently cancelled.

1. Install Game.
2. Install Crack.
3. Boot from XMB.

Note: Install PKG's via the "Install Packages" menu from root of USB or mount them into same menu via Multiman file manager feature from any other location.

[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]
[Register or Login to view links]

Source : splitter.MyFTP.biz

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News