PSN Liberator

PS3 PSN Liberator 1.1

I really appreciate your answer, due to your reply and a little search of pkgripper (because my directory didn't have this file) I found another thread here where you said it is blocked by AVs.. and that's just what happened to me.. Windows Defender silently put the file on quarantine... now it is working.

BUT.. I'm a very lucky guy who chose the exactly a game that has a custom klicense and could not find on internet.
Does anyone have the klicense for NPUB31468? (Syberia 1)

I tried bruteforce but failed.
If you suceed dumping the klicense, please leave some tips for this method.
I haven't tried this method yet.
 
I think that a klicense can be derived from a .rap key too. (So, if you had the .rap for a content, you could get the Klic.)

from flatz's code:
Code:
static int rap_to_klicensee(u8 *rap_key, u8 *klicensee);
http://web.archive.org/web/20141118183317/http://pastie.org/private/pmnmsnqg6zbfnk9xactbw

Yes, a rap is basically an encrypted klicense (aka rifkey). They can be converted back and forward using flatz's tools.

The rifkey is the klicensee used to decrypt npDRM files like EBOOT, SELF or SPRX.

BTW there is a another key named developer klicense (or dev_klicensee) that has a similar name but used by PS3 developers to access encrypted content (like EDAT/SDAT/SELF/SPRX) from their applications. Here is an article about it:
https://wololo.net/talk/viewtopic.php?f=67&t=40656
 
Last edited:
I tried bruteforce but failed.
If you suceed dumping the klicense, please leave some tips for this method.
I haven't tried this method yet.

bruteforce will fail if the edat is dummy. I've seen some sprx with a klicense, but only once or twice out of dumping many using the system. if the edat is dummy, rename the edat without .edat extension to something like .e, then try to run the game. if it works, it's most likely a dummy file. klicense dumping on the system will not record it as well if it's dummy. only about 5-10% of games are this way from my experience.
 
link works for me including the zippyshare on inside (just tested it):

upload_2021-4-6_11-14-59.png
 
Need a little help here.. So we got to place these isos in the internal hdd right? cause I tried booting from external usb and froze my console. Where do we put it, PS3ISO folder or GAME folder?
 
Open it in a hexeditor, and search for the string:
Code:
/dev_hdd0/game/%s/USRDIR
Replace it by (note is 1 byte longer... but it works):
Code:
/dev_bdvd/PS3_GAME/USRDIR

How did you find the string dev_hdd0/game/%s/USRDIR in the eboot? I can't find it, I'm using HxD.
 
How did you find the string dev_hdd0/game/%s/USRDIR in the eboot? I can't find it, I'm using HxD.
Press keys CTRL+F, and in the dialog box click in "search text string" and paste it
Or... just search for "USRDIR"

If you cant find it maybe is because is not decrypted ?, this needs to be made with scetool.exe, but if you are not used to it you can do it with the filemanager of managunz by selecting the file (with square button), then press triangle to see the options, there is an option to decrypt it... and another option to encrypt it
 
@sandungas
Im trying to convert my purchased copy of Street Fighter 3: Online Edition into an iso - with dlc. I Followed your instructions where I used psn liberator to make disc folder. Next I used scetool to decrypt the liberated eboot.bin. The problem is the /dev_hdd0/game/%s/USRDIR text string is not present, when using hex editor. Any help would be appreciated.
 
@sandungas
Im trying to convert my purchased copy of Street Fighter 3: Online Edition into an iso - with dlc. I Followed your instructions where I used psn liberator to make disc folder. Next I used scetool to decrypt the liberated eboot.bin. The problem is the /dev_hdd0/game/%s/USRDIR text string is not present, when using hex editor. Any help would be appreciated.
Try to search for dev_hdd0 inside the EBOOT, post the paths here and we will try to figure his purpose

The problem i explained in the previous page of the thread happens because the EBOOT is trying to load some of the game files from the internal hdd (instead of loading them from our "bluray disc image", either ISO or JB formats)
 
Hi Thanks for the response. I attached a pic of hex editor.
wAeQozb
Thats the only apparence of dev_hdd0 ?... Try to replace it by dev_bdvd (so the EBOOT will have the name dev_bdvd repeated 2 times)
Then encrypt it with the "t" (template) option of scetool and try
 
Hi sandungas. I used the
scetool.exe -t EBOOT_liberated.BIN -0 SELF -e EBOOT_liberated_fixed.ELF EBOOT_liberated_fixed.BIN
but i get the following error.
d4rqiY3
 
Hi sandungas. I used the
scetool.exe -t EBOOT_liberated.BIN -0 SELF -e EBOOT_liberated_fixed.ELF EBOOT_liberated_fixed.BIN
but i get the following error.
d4rqiY3
Copy all the files (EBOOT_liberated.BIN and EBOOT_liberated_fixed.ELF) to the same directory where is located scetool.exe and run the command again
 
I forgot to change the file name to EBOOT_liberated_fixed.ELF. So I did that and it encrypted. I placed the the newly created eboot.bin
in the liberated disc folder and used ps3 iso tools to create the iso. The iso boots, but none of the dlc shows up. How can I fix this ?
 

Similar threads

Back
Top