The project goes on... I've hacked a bunch of other versions.
56BCF746
543C456E
309E48E8
6CB0660E
2CF9C101
No release/upload for now, because I should receive a pack of demos in a few days, and will have to identify their menu.
Crypto stuff of earlier demos (2000-2003, with CONFIG.DD2, FRAMES.IPU, GRAPHICS.DDP) is stronger. Future "accidentaly" leaked a crypter/decrypter for the config file. It's called
Demo Disc Config Tool. So, decrypting and building a CONFIG.DD2 is not difficult, but hacking the ELF is.
I counted 15 different versions of the SCEE Demo Disc Menu (based on their original CRC32), including earlier versions. Generally, differences are minor graphic changes, module updates or option implementations (like the very useful "NOINTROMOVIE").