Post: How to Mod TROPTRNS.DAT - Modding Trophy Files
01-13-2013, 07:44 PM #1
Sonoro
I like anteaters
(adsbygoogle = window.adsbygoogle || []).push({});
CFW ONLY


Note: consoleid in global.conf can be all "00" , so enter the "00" byte 16 times for it to work (32 0 total)


You must login or register to view this content.What is this?You must login or register to view this content.


This is basically the method to hack every trophy on Playstation 3, from editing the TROPTRNS.DAT, the file that is installed, everytime you run a game, and it's basically the files that actually stores the trophy status and unlock date.



Difference between TROPTRNS.DAT and TROPUSR.DAT


The difference between the two files is:

TROPTRNS.DAT: Actually stores trophy unlocks and status
TROPUSR.DAT: Stores trophy timestamps and displays them in the trophy collection (XMB)


Occurrent:


• Trophy Modding Toolkit:
    [URL="https://www.mediafire.com/download.php?8gy8yj33zku8ey6"]Click Here for Download[/URL]


• HxD
    [URL="https://mh-nexus.de/en/hxd/"]Download HxD[/URL]


• Ps3 Timestamp Generator
    [URL="https://www.mediafire.com/download.php?1nked1p1p9lp5ix"]Download Ps3 Timestamp Generator[/URL]




Steps:


• Step 1: Download the folder and modify the global.conf as stated. (New update includes already made global.conf)


• Step 2: Take your NPWR0XXXX_00 from your Ps3 (dev_hdd0/home/000000XX/trophy/)


• Step 3: Put your NPWR Folder in (C:\) in your Computer.

You must login or register to view this content.




• Step 4: Open TRNS Tool.exe , and input "d" to decrypt, then you will be asked to insert you NPWR folder name, stored in C:\.

You must login or register to view this content.




• Step 5: Now your TROPTRNS.DAT will be decrypted. Open it in HxD and look for Offset 0x2C0, this is the trophy installation date , you will se two timestamps, first timestamps is Block 2C1-2C7, second is block 2C9-2CF , as you can see each timestamps is composed by 7 bytes. You do not need to modify these timestamps.

You must login or register to view this content.




• Step 6: First trophy is block 340-3EF , to unlock it you are going to change these bytes:

Offset: 357 is the status, for each trophy block , the status is located at second line, seventh coloumn. To unlock the trophy, change it to "02" , it means the trophy is unlocked

Offset: 373 is the trophy id, you can see id's in the TROPCONF.SFM file, stored in the NPWR folder, the first trophy in the Hex (first block) is going to be the 2nd trophy cause the Platinum is going to be the last one with id "00" , to set the id at Offset 373, just copy the byte that is over this one example:

You must login or register to view this content.


Block: 377-37A is the trophy type, its gonna be:

    [LEFT]Bronze: 04 00 00 10[/LEFT] [LEFT]Silver: 03 00 00 10[/LEFT] [LEFT]Gold: 02 00 00 10[/LEFT] [LEFT]Platinum: 01 00 00 10[/LEFT]


Now you will have to look at TROPCONF.SFM and see which trophy has the ID you set and print the bytes for the trophy type. You can do the same thing since copying the byte that is over.


You must login or register to view this content.


Offset: 380 Here you will have to print your 2 timestamps. In a legit earned TROPTRNS.DAT the 2 timestamps are different (milliseconds difference) , but now you can put the same for both entries, so generate it with Ps3 timestamp generator and paste it. See Step 5 for positions and blocks.


You must login or register to view this content.


Each Trophy Block starts with:

    00 00 00 04 00 00 00 A0 00 00 00 ID 00 00 00 00


and ends with:


    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00



• Step 7: First trophy is unlocked. Now repeat this action for all trophies. Then look for these positions:

Offset: 110 Here is stored your Sen ID , if you're using a TROPTRNS.DAT from a user where you already did access Sen, there will be bytes with your sen ID, otherwise they will be nulled.

Offset: 167 Here is stored the number of total entries, to determinate this, you will have to insert the number of trophies you unlocked , +1 , for example: You unlocked 51 trophies. In Hex: 51 = 33. So you will put 34.


• Step 8: To unlock the platinum trophy or the one with ID 00 (Games without plat) , you will have to insert it at the end, as last trophy.

• Step 9: When you're done editing your TROPTRNS.DAT, save it and open TROPTRNS Tool.exe again, input "e" and your NPWR Folder. Upload it to your Ps3 , log in your SEN account and Sync the trophies.


FAQ:

Q: Your tool is not working for me, how can i fix it?
A: If my tool is not working for you just use these commands on pfdtool to decrypt:
    Encryption: -g NPWR*****_00 -e (your Path) TROPTRNS.DAT

    Decryption: -g NPWR*****_00 -d (your Path) TROPTRNS.DAT


Q: Timestamp generator wont generate my hex value, what can i do?
A: Make sure you did add all values in textboxes.


Credits:


• BuC-ShoTz: Helping me with structure
• DEREKTROTTER: Trophy type and other useful help
• flatz: Pfdtool developer
(adsbygoogle = window.adsbygoogle || []).push({});

The following 156 users say thank you to Sonoro for this useful post:

_Nightwing, -Nathan-, Day, RAB, ℳaTiCz, ⓙω мσ∂z, $$$ DANGER $$$, 007bond, 631, A000_demons_000, ady, Aegon Targaryen, Alfred974, Amarildo88, amigaman2005, AsianModds, boub, braindead, Bry 1/992, BuC-ShoTz, C-J, YouAppreciateMe, chaosx6, CODHoster1337_, CoDyMoDz1000XD, CoOoL_BoY, Crunk, D-one, D3cH, dbzkamehameha, Dishonor, Disslzit, DonGiuliiano, DonPorno, Ducky 559, DylanOc1, EliteHackzPS3, ExceptionHell, FAKA_ELITE, Farva, fasooole, Fer, Fideo Kojima, Fly Away, Fuser, Gabberhard, Ali D Killer, ghost63, Gian_, GJx, gnat_, Gotham_Shadow, gowhawx, Gus Fring, hack73, Hatchet Harry, HaXingInc, Herrkulez, hess47, Sheldon Cooper, hotsauce_mm, Beats, IcyDose, II Dave II, IIUniversal, iLLy-i, iSebastianMoDz, zL_j8hnb, jabber, jambalaia00, JaMbO, ResistTheJamsha, Jared, Joel, joury070, Kendrick Lamar, TheMightyMoJo, KoS_Riitalo, kosy, LaughTracks, LTBadBoy, Lukastim80, Machine, machinistm1, Mad Scientist, mAdlax, Major Meat Bone, malachit75, manh2, mark1, User23434, Mello999, mithosyggdrasil, MOHN, Monster-Energy, mosiko6, Mr Grumpy, Mr.Alfredo, Mw2-_-Beast-, and 56 other users.

The following 12 users groaned at Sonoro for this awful post:

19willy74, Cloud, ALJOKER, Alpenjodel61, crischevelle572, DEREKTROTTER, GreenTea101, iiReFuZee, jedt, smithy2009, StarWave, riggstq
01-27-2013, 11:20 AM #623
plat
Elite member
I did some plat easyly with this tuto, it work fine.


I want to know what are the offset 0170 to 020F, it seem different with each games:

[ATTACH=CONFIG]21815[/ATTACH]
01-27-2013, 11:26 AM #624
cheetahh
Do a barrel roll!
Originally posted by plat View Post
I did some plat easyly with this tuto, it work fine.
I want to know what are the offset 0170 to 020F, it seem different with each games:
[ATTACH=CONFIG]21815[/ATTACH]

It is a signature and its also different for the same game on different consoles (console_ids). The signature itself has a size of 160 bytes. It contains a header of 12 bytes which contains 4 bytes of a magic (0xB9DDE13B) then a version (0x0100) and a padding of 6 zero bytes. There is the SHA1-HMAC hash after the header and RSA signature of 128 bytes. A RSA signature uses the SHA1 hash as a message. Padding scheme is PKCS#1. A SHA1-HMAC after the signature header and SHA1 hash from the decrypted signature should be equal to the corresponding computed hashes.
01-27-2013, 01:51 PM #625
Sonoro
I like anteaters
Originally posted by cheetahh View Post
It is a signature and its also different for the same game on different consoles (console_ids). The signature itself has a size of 160 bytes. It contains a header of 12 bytes which contains 4 bytes of a magic (0xB9DDE13B) then a version (0x0100) and a padding of 6 zero bytes. There is the SHA1-HMAC hash after the header and RSA signature of 128 bytes. A RSA signature uses the SHA1 hash as a message. Padding scheme is PKCS#1. A SHA1-HMAC after the signature header and SHA1 hash from the decrypted signature should be equal to the corresponding computed hashes.


You must login or register to view this content.


-Ps3DevWiki
01-27-2013, 03:41 PM #626
i don't know if this is normal but i noticed something:
when i wanted to unlock some trophies of a game that i played and unlocked some trophies from.
i saw something interesting on the first trophy block

00 00 00 04 00 00 00 A0 00 00 00 01 <= this is the first trophy block.

but when i checked the offset 373: it was 20 (trophy 32)

could someone explain to me what this means?

(it's because i always used the same number i saw on the "00 00 00 04 00 00 00 A0 00 00 00", does it matter if i did it like this or do need to do it differently)
01-27-2013, 04:48 PM #627
Originally posted by dbzkamehameha View Post
i don't know if this is normal but i noticed something:
when i wanted to unlock some trophies of a game that i played and unlocked some trophies from.
i saw something interesting on the first trophy block

00 00 00 04 00 00 00 A0 00 00 00 01 <= this is the first trophy block.

but when i checked the offset 373: it was 20 (trophy 32)

could someone explain to me what this means?

(it's because i always used the same number i saw on the "00 00 00 04 00 00 00 A0 00 00 00", does it matter if i did it like this or do need to do it differently)


20 is the hexadecimal value of the decimal number 32. You can convert it with this (or calculators, or your brain :P):

You must login or register to view this content.

The following user thanked neminis7 for this useful post:

Smexeh
01-27-2013, 05:18 PM #628
Originally posted by neminis7 View Post
20 is the hexadecimal value of the decimal number 32. You can convert it with this (or calculators, or your brain :P):

You must login or register to view this content.


i think you got me wrong, i know about the hex and all, but my question was what is the "00 00 00 04 00 00 00 A0 00 00 00
00 00 00 01 00 00 00 02 00 00 00" part?

because i usually copy the same number is see after it.

e.g.:

00 00 00 04 00 00 00 A0 00 00 00 01 00 00 00 00
00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 20 00 00 00 04 00 00 10 00 00 00 00 00
"what do the underlined numbers mean?

i haven't synced my trophies yet but did it differently like this

00 00 00 04 00 00 00 A0 00 00 00 01 00 00 00 00
00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 01 00 00 00 04 00 00 10 00 00 00 00 00

(i just copy the number i see above)

is this wrong or still good?
01-27-2013, 05:44 PM #629
Originally posted by cheetahh View Post
It is a signature and its also different for the same game on different consoles (console_ids).


I think it's a per-game static signature/block (maybe a second identifier so PSN knows which game this TropTrns is assigned to) and it doesn't change if you start the game on different consoles or user accounts. Ive found out that this 160 byte sized block is also present in the decrypted eboot.bin (eboot.elf) of the corresponding game. As far as I know the eboot.bins of games are static for each game and they're the same no matter from which disc they come. It has to be correct Game ID, though. Maybe Im wrong since I've got only one PS3 and cant compare TropTrns installations that way but then I don't know why it changes.

---------- Post added at 12:44 PM ---------- Previous post was at 12:29 PM ----------

Originally posted by dbzkamehameha View Post
i think you got me wrong, i know about the hex and all, but my question was what is the "00 00 00 04 00 00 00 a0 00 00 00
00 00 00 01 00 00 00 02 00 00 00" part?

Because i usually copy the same number is see after it.

E.g.:

00 00 00 04 00 00 00 a0 00 00 00 01 00 00 00 00
00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 20 00 00 00 04 00 00 10 00 00 00 00 00
"what do the underlined numbers mean?

I haven't synced my trophies yet but did it differently like this

00 00 00 04 00 00 00 a0 00 00 00 01 00 00 00 00
00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 01 00 00 00 04 00 00 10 00 00 00 00 00

(i just copy the number i see above)

is this wrong or still good?


00 00 00 04 00 00 00 a0 00 00 00 01 00 00 00 00
00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 20 00 00 00 04 00 00 10 00 00 00 00 00

Green: List Entry Number of TropTrns.dat /Don't change that

Blue: "Sync Flag" - 00=not synced to PSN | 01=allready synced - leave it to 00 if you want to sync that trophy entry

Red: Trophy ID - You can get it from TROPCONF.SFM (but change the decimal value to hex before inserting)

Pink: Trophy Type - You can get it from TROPCONF.SFM

Orange: Account Type - 10=connected to PSN Account | 20=never connected to a PSN Account before

Also I emphasize everyone who wants to edit their Trophies to search this thread for cheetahh's posts. He explained the structure of the Trophy files very well and everything for a perfect modified sync without errors is allready said.
01-27-2013, 06:21 PM #630
Originally posted by xSonoro View Post
You must login or register to view this content.


-Ps3DevWiki


xsonoro can you make a video tutorial how to make platinium or transfert tophies to new account in the same console plz because my english is bad :( i don't understand the tutorial.. help me
01-27-2013, 06:44 PM #631
cheetahh
Do a barrel roll!
Originally posted by neminis7 View Post
I think it's a per-game static signature/block (maybe a second identifier so PSN knows which game this TropTrns is assigned to) and it doesn't change if you start the game on different consoles or user accounts. Ive found out that this 160 byte sized block is also present in the decrypted eboot.bin (eboot.elf) of the corresponding game. As far as I know the eboot.bins of games are static for each game and they're the same no matter from which disc they come. It has to be correct Game ID, though. Maybe Im wrong since I've got only one PS3 and cant compare TropTrns installations that way but then I don't know why it changes.

You are probably right, I remembered it incorrectly. What changes all the time is 20 byte signature in TROPUSR.DAT thats also in TROPSYS.DAT.

Copyright © 2026, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo