No, sorry. I'm not good with this, and I prefer the community to help out with that. I find developing PS2 software already so taxing, so I like others to help me with the other stuff. Yes. Although I didn't actually try it myself. I know that it works in theory, but I'm not sure whether offset 0x28 is really the right offset or not because I've long stopped relying on such hackish methods, ever since I had my own SECRMAN module to sign stuff for me (but it doesn't work here because the retail PS2 does not accept stuff for the PSX). This method was originally thought of by l_Oliveira. On a side note, please take note that this method only works here because of the tool that was used to create the FMCB binaries. It may not work in other cases.