PS2 How do you decrypt the .VOB ELFs from the SUDC v3 & v4 discs?

They have the ELF header but when loaded up on the disc they show as being MagicGate protected, the DVDELF from the extracted slimline erom also don't work after being decrypted with kelftool you have to repack them to make it a valid ELF.

We did it years ago but I can't remember how, something like Neme's debug tool, transplant fmcb kc kcbit from osdmain, sign as dirtykelf then decrypt to get the unencrypted elf, reinsert back into the iso with CDMage.
 
A reply to How do you decrypt the .VOB ELFs from the SUDC v3 & v4 discs?

Kevstah2004 said:
They have the ELF header but when loaded up on the disc they show as being MagicGate protected, the DVDELF from the extracted slimline erom also don't work after being decrypted with kelftool you have to repack them to make it a valid ELF.

We did it years ago but I can't remember how, something like Neme's debug tool, transplant fmcb kc kcbit from osdmain, sign as dirtykelf then decrypt to get the unencrypted elf, reinsert back into the iso with CDMage.
Click to expand...

The .VOB files on SUDC4 are plain ELFs:
RES/0/*.VOB, these are subprograms that install DVD Player updates. They're meant to be run from the parent program that is also a plain (but recompressed to save disc space) ELFs RES/4/XXXX_###.##.

The remaining stuff that's still MG encrypted is the HDD software files on PAK files and DVD Player installable files.

If you want to inject, let's say 3.11 files in the disc, you'll need to find a way to disable the installer's update files unpacker or pack and sign your own update package.

Not sure what you're trying to achieve, but if you just need DISK signed copies of the original DVD Player updates, or decrypted files, you may find them on pastebin Nt4kS4cu
 
Ok does TwinSigner also change the install folder?
Browser 2.0 restores the missing dvdplayer path with BIEXEC-DVDPLAYER as the Japanese player, can I sign the decrypted
DVD Player version 2.14 (North America)
with
DVD Player version 3.04 (Japan)
otherwise it means patching the path in both dvdplayer.elf & hosdsys.elf as well.

pcsx2 just seems read it as a DEX signed elf with the kc & kcbit zeroed out afterwards to bypass MagicGate.
 
So I found the pcsx2 build that supports Magicgate but for some reason the memory cards won't mount on the ps3 netemu or a developer / dex bios, the closet I can get is booting into browser 2.0 from hosdmenu.elf but it formats the card with a ps1 icon instead of ps2 then just states 0bytes left.
I can't use uLE to run the HowlingWolfHWC/OSDSYS-Launcher to load osdmain.elf from mc0:/BIEXEC-SYSTEM even with a premade card as it won't even mount the card.

With the CEX bios of ps3 softemu I can get it to install fmcb no problem an it returns the following signed keys with kelfbinder, the dvdplayer will install but not show up in system configuration list, it seems unless the path is already in the original osdsys of the bios it won't list it or attempt to boot it when you insert a disc, ps2bbl also shows the dvdplayer path as being blank, I think it only lists it from the erom?
Softemu_Memory Card key.jpg
 
Last edited:
So I have the decrypted dvdplayer.elf running from memory card with both ps3 netemu & softemu using uLE to boot it from the memory card.

Progressive Hack v3.11J - English Translated in the Japanese install folder
BIEXEC-DVDPLAYER which loads with the extracted v3.04 dvdplayer.irx from SUDC4
but on netemu the screen appears like 4:3 letterboxed, you can press stop & enable progressive scan which will stretch out the screen but it's still wrong & it breaks the .nvm file to only output sound, no display next time you boot the dvdplayer so you have to recreate the .nvm again from scratch using the browser.
In softemu if you leave the setting alone it'll display in 16:9 interlaced not progressive scan, you can change the option to playback in 16:9 progressive scan but again it breaks the .nvm the same so it's useless next time you run the dvdplayer :-(

The RGB/Component option has no impact on the setting in the dvdplayer it's a seperate place in the .nvm
IMG_20260213_080749~3.jpg
Left .nvm working, Right .nvm broken.
IMG_20260213_094827.jpg


https://archive.org/details/experiment_dvd
 
Last edited:
So Softemu returns the error
"DVD Player is not set up."
because it can't find
Code: 
rom1:DVDID
the string is in OSDSYS.
I renamed & reused the .rom1 from
scph-50001
scph-50004
scph-39004
an the dvdplayer runs as normal, so rom1 isn't region bound.
 
You must log in or register to reply here.

Similar threads

Back
Top