Sponsored Links

Sponsored Links

Page 1 of 3 123 LastLast
Results 1 to 10 of 24



  1. #1
    Registered User maxdb1984's Avatar
    Join Date
    Oct 2010
    Posts
    19
    Sponsored Links

    Graf Chokolo Decrypts PS3 NPDRM SELF Data from Sonic 4 Game

    Sponsored Links
    Update: PS3 hacker Graf_Chokolo has now shared news of a PlayStation 3 GameOS Hypervisor exploit (quoted below) and released a NPDRM Decryption Payload ([Register or Login to view links]) for developers while JU57FL1P has decrypted an [Register or Login to view links].

    PlayStation 3 developers were previously unable to decrypt NPDRM EBOOT.BIN's (like those in PKG files) as the PS3's NPDRM encryption differed, but today Graf_Chokolo has figured out how to use appldr to decrypt NPDRM encrypted data from Sonic 4.

    For those who haven't been following, prior to this PS3 hacking update Graf_Chokolo was working on porting the LV1 Exploit to GameOS mode.

    Graf_Chokolo said the following, to quote: "Dumped appldr arguments for NPDRM decryption on 3.41. Iím able now to decrypt NPDRMs with appldr on 3.41. Thanks to Jack for his support.

    Here is a snippet from Sonic 4 NPDRM decrypted on 3.41: [Register or Login to view links]
    Code:
    Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F
    
    00283470   4C 4F 47 4F 00 00 00 00  66 72 61 6D 65 20 3A 20   LOGO....frame : 
    00283480   25 64 00 00 00 00 00 00  45 46 5F 51 55 41 4B 45   %d......EF_QUAKE
    00283490   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 32   ........Boss0_02
    002834A0   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
    002834B0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 32   ........Boss1_02
    002834C0   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
    002834D0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 34   ........Boss1_04
    002834E0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 33   ........Boss1_03
    002834F0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 35   ........Boss1_05
    00283500   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 31   ........Boss1_01
    00283510   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
    00283520   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
    00283530   00 00 00 00 00 00 00 00  45 6E 65 6D 79 00 00 00   ........Enemy...
    00283540   42 6F 73 73 34 5F 30 33  00 00 00 00 00 00 00 00   Boss4_03........
    00283550   42 6F 73 73 34 5F 30 32  00 00 00 00 00 00 00 00   Boss4_02........
    00283560   42 6F 73 73 34 5F 30 34  00 00 00 00 00 00 00 00   Boss4_04........
    00283570   42 6F 73 73 34 5F 30 31  00 00 00 00 00 00 00 00   Boss4_01........
    00283580   42 6F 73 73 30 5F 30 32  00 00 00 00 00 00 00 00   Boss0_02........
    00283590   53 4E 4D 20 53 59 53 00  46 69 6E 61 6C 42 6F 73   SNM SYS.FinalBos
    002835A0   73 32 31 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s21.....FinalBos
    002835B0   73 30 35 00 00 00 00 00  42 6F 73 73 30 5F 30 32   s05.....Boss0_02
    002835C0   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
    002835D0   00 00 00 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   ........FinalBos
    002835E0   73 30 33 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s03.....FinalBos
    002835F0   73 31 37 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s17.....FinalBos
    00283600   73 30 36 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s06.....FinalBos
    00283610   73 31 38 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s18.....FinalBos
    00283620   73 30 31 00 00 00 00 00  42 6F 73 73 30 5F 30 31   s01.....Boss0_01
    00283630   00 00 00 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   ........FinalBos
    00283640   73 31 35 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s15.....FinalBos
    00283650   73 31 32 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s12.....FinalBos
    00283660   73 31 30 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s10.....FinalBos
    00283670   73 30 38 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s08.....FinalBos
    00283680   73 32 30 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s20.....FinalBos
    00283690   73 31 31 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s11.....FinalBos
    002836A0   73 31 34 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s14.....FinalBos
    002836B0   73 30 34 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s04.....FinalBos
    002836C0   73 30 37 00 00 00 00 00  42 6F 73 73 30 5F 30 31   s07.....Boss0_01
    002836D0   00 00 00 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   ........FinalBos
    002836E0   73 31 33 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s13.....FinalBos
    002836F0   73 31 31 00 00 00 00 00  42 6F 73 73 32 5F 30 33   s11.....Boss2_03
    00283700   00 00 00 00 00 00 00 00  42 6F 73 73 32 5F 30 31   ........Boss2_01
    00283710   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 32   ........Boss0_02
    00283720   00 00 00 00 00 00 00 00  42 6F 73 73 32 5F 30 32   ........Boss2_02
    00283730   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
    00283740   00 00 00 00 00 00 00 00  42 6F 73 73 32 5F 30 35   ........Boss2_05
    00283750   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
    00283760   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 32   ........Boss0_02
    00283770   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
    00283780   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
    00283790   00 00 00 00 00 00 00 00  43 61 73 69 6E 6F 31 00   ........Casino1.
    002837A0   48 61 6C 6F 67 65 6E 00  42 6F 73 73 32 5F 30 33   Halogen.Boss2_03
    002837B0   00 00 00 00 00 00 00 00  4B 61 6D 61 00 00 00 00   ........Kama....
    002837C0   53 4E 4D 20 53 59 53 00  4B 61 6E 69 00 00 00 00   SNM SYS.Kani....
    002837D0   53 74 69 6E 67 00 00 00  53 70 72 61 79 00 00 00   Sting...Spray...
    002837E0   45 6E 65 6D 79 00 00 00  53 74 69 6E 67 00 00 00   Enemy...Sting...
    002837F0   42 6F 73 73 32 5F 30 33  00 00 00 00 00 00 00 00   Boss2_03........
    00283800   47 4D 5F 4C 4F 41 44 5F  42 42 00 00 00 00 00 00   GM_LOAD_BB......
    00283810   47 4D 5F 4C 4F 41 44 00  47 5F 43 4F 4D 2F 45 4E   GM_LOAD.G_COM/EN
    00283820   45 2F 45 4E 45 5F 48 41  52 49 5F 4D 44 4C 2E 41   E/ENE_HARI_MDL.A
    00283830   4D 42 00 00 00 00 00 00  47 5F 43 4F 4D 2F 45 4E   MB......G_COM/EN
    00283840   45 2F 45 4E 45 5F 48 41  52 49 5F 54 45 58 2E 41   E/ENE_HARI_TEX.A
    00283850   4D 42 00 00 00 00 00 00  47 5F 43 4F 4D 2F 45 4E   MB......G_COM/EN
    00283860   45 2F 45 4E 45 5F 48 41  52 49 5F 4D 54 4E 2E 41   E/ENE_HARI_MTN.A
    00283870   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   MB......G_ZONE1/
    00283880   45 4E 45 2F 45 4E 45 5F  4D 4F 54 4F 52 41 5F 4D   ENE/ENE_MOTORA_M
    00283890   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   DL.AMB..G_ZONE1/
    002838A0   45 4E 45 2F 45 4E 45 5F  4D 4F 54 4F 52 41 5F 54   ENE/ENE_MOTORA_T
    002838B0   45 58 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   EX.AMB..G_ZONE1/
    002838C0   45 4E 45 2F 45 4E 45 5F  4D 4F 54 4F 52 41 5F 4D   ENE/ENE_MOTORA_M
    002838D0   54 4E 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   TN.AMB..G_ZONE1/
    002838E0   45 4E 45 2F 45 4E 45 5F  47 41 42 55 5F 4D 44 4C   ENE/ENE_GABU_MDL
    002838F0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   .AMB....G_ZONE1/
    00283900   45 4E 45 2F 45 4E 45 5F  47 41 42 55 5F 54 45 58   ENE/ENE_GABU_TEX
    00283910   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   .AMB....G_ZONE1/
    00283920   45 4E 45 2F 45 4E 45 5F  47 41 42 55 5F 4D 54 4E   ENE/ENE_GABU_MTN
    00283930   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   .AMB....G_ZONE1/
    00283940   45 4E 45 2F 45 4E 45 5F  53 54 49 4E 47 5F 4D 44   ENE/ENE_STING_MD
    00283950   4C 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 31 2F   L.AMB...G_ZONE1/
    00283960   45 4E 45 2F 45 4E 45 5F  53 54 49 4E 47 5F 54 45   ENE/ENE_STING_TE
    00283970   58 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 31 2F   X.AMB...G_ZONE1/
    00283980   45 4E 45 2F 45 4E 45 5F  53 54 49 4E 47 5F 4D 54   ENE/ENE_STING_MT
    00283990   4E 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 31 2F   N.AMB...G_ZONE1/
    002839A0   45 4E 45 2F 45 4E 45 5F  4D 45 52 45 4F 4E 5F 4D   ENE/ENE_MEREON_M
    002839B0   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   DL.AMB..G_ZONE1/
    002839C0   45 4E 45 2F 45 4E 45 5F  4D 45 52 45 4F 4E 5F 52   ENE/ENE_MEREON_R
    002839D0   5F 4D 44 4C 2E 41 4D 42  00 00 00 00 00 00 00 00   _MDL.AMB........
    002839E0   47 5F 5A 4F 4E 45 31 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE1/ENE/ENE_
    002839F0   4D 45 52 45 4F 4E 5F 54  45 58 2E 41 4D 42 00 00   MEREON_TEX.AMB..
    00283A00   47 5F 5A 4F 4E 45 31 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE1/ENE/ENE_
    00283A10   4D 45 52 45 4F 4E 5F 4D  54 4E 2E 41 4D 42 00 00   MEREON_MTN.AMB..
    00283A20   47 5F 5A 4F 4E 45 31 2F  42 4F 53 53 2F 42 4F 53   G_ZONE1/BOSS/BOS
    00283A30   53 30 31 2E 41 4D 42 00  47 5F 5A 4F 4E 45 32 2F   S01.AMB.G_ZONE2/
    00283A40   45 4E 45 2F 45 4E 45 5F  47 41 52 44 4F 4E 5F 4D   ENE/ENE_GARDON_M
    00283A50   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 32 2F   DL.AMB..G_ZONE2/
    00283A60   45 4E 45 2F 45 4E 45 5F  47 41 52 44 4F 4E 5F 54   ENE/ENE_GARDON_T
    00283A70   45 58 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 32 2F   EX.AMB..G_ZONE2/
    00283A80   45 4E 45 2F 45 4E 45 5F  47 41 52 44 4F 4E 5F 4D   ENE/ENE_GARDON_M
    00283A90   54 4E 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 32 2F   TN.AMB..G_ZONE2/
    00283AA0   45 4E 45 2F 45 4E 45 5F  48 41 52 4F 5F 4D 44 4C   ENE/ENE_HARO_MDL
    00283AB0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   .AMB....G_ZONE2/
    00283AC0   45 4E 45 2F 45 4E 45 5F  48 41 52 4F 5F 54 45 58   ENE/ENE_HARO_TEX
    00283AD0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   .AMB....G_ZONE2/
    00283AE0   45 4E 45 2F 45 4E 45 5F  48 41 52 4F 5F 4D 54 4E   ENE/ENE_HARO_MTN
    00283AF0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   .AMB....G_ZONE2/
    00283B00   42 4F 53 53 2F 42 4F 53  53 30 32 2E 41 4D 42 00   BOSS/BOSS02.AMB.
    00283B10   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283B20   4D 4F 47 55 5F 4D 44 4C  2E 41 4D 42 00 00 00 00   MOGU_MDL.AMB....
    00283B30   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283B40   4D 4F 47 55 5F 54 45 58  2E 41 4D 42 00 00 00 00   MOGU_TEX.AMB....
    00283B50   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283B60   4D 4F 47 55 5F 4D 54 4E  2E 41 4D 42 00 00 00 00   MOGU_MTN.AMB....
    00283B70   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283B80   55 4E 49 44 45 53 5F 4D  44 4C 2E 41 4D 42 00 00   UNIDES_MDL.AMB..
    00283B90   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283BA0   55 4E 49 44 45 53 5F 54  45 58 2E 41 4D 42 00 00   UNIDES_TEX.AMB..
    00283BB0   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283BC0   55 4E 49 44 45 53 5F 4D  54 4E 2E 41 4D 42 00 00   UNIDES_MTN.AMB..
    00283BD0   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283BE0   55 4E 49 55 4E 49 5F 4D  44 4C 2E 41 4D 42 00 00   UNIUNI_MDL.AMB..
    00283BF0   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283C00   55 4E 49 55 4E 49 5F 54  45 58 2E 41 4D 42 00 00   UNIUNI_TEX.AMB..
    00283C10   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283C20   55 4E 49 55 4E 49 5F 4D  54 4E 2E 41 4D 42 00 00   UNIUNI_MTN.AMB..
    00283C30   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283C40   42 55 4B 55 5F 4D 44 4C  2E 41 4D 42 00 00 00 00   BUKU_MDL.AMB....
    00283C50   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283C60   42 55 4B 55 5F 54 45 58  2E 41 4D 42 00 00 00 00   BUKU_TEX.AMB....
    00283C70   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
    00283C80   42 55 4B 55 5F 4D 54 4E  2E 41 4D 42 00 00 00 00   BUKU_MTN.AMB....
    00283C90   47 5F 5A 4F 4E 45 33 2F  42 4F 53 53 2F 42 4F 53   G_ZONE3/BOSS/BOS
    00283CA0   53 30 33 2E 41 4D 42 00  47 5F 5A 4F 4E 45 34 2F   S03.AMB.G_ZONE4/
    00283CB0   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 4D   ENE/ENE_T_STAR_M
    00283CC0   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   DL.AMB..G_ZONE4/
    00283CD0   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 54   ENE/ENE_T_STAR_T
    00283CE0   45 58 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   EX.AMB..G_ZONE4/
    00283CF0   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 4D   ENE/ENE_T_STAR_M
    00283D00   54 4E 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   TN.AMB..G_ZONE4/
    00283D10   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 4D   ENE/ENE_T_STAR_M
    00283D20   41 54 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   AT.AMB..G_ZONE4/
    00283D30   45 4E 45 2F 45 4E 45 5F  4B 41 4E 49 5F 4D 44 4C   ENE/ENE_KANI_MDL
    00283D40   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
    00283D50   45 4E 45 2F 45 4E 45 5F  4B 41 4E 49 5F 54 45 58   ENE/ENE_KANI_TEX
    00283D60   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
    00283D70   45 4E 45 2F 45 4E 45 5F  4B 41 4E 49 5F 4D 54 4E   ENE/ENE_KANI_MTN
    00283D80   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
    00283D90   45 4E 45 2F 45 4E 45 5F  4B 41 4D 41 5F 4D 44 4C   ENE/ENE_KAMA_MDL
    00283DA0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
    00283DB0   45 4E 45 2F 45 4E 45 5F  4B 41 4D 41 5F 54 45 58   ENE/ENE_KAMA_TEX
    00283DC0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
    00283DD0   45 4E 45 2F 45 4E 45 5F  4B 41 4D 41 5F 4D 54 4E   ENE/ENE_KAMA_MTN
    00283DE0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
    00283DF0   42 4F 53 53 2F 42 4F 53  53 30 34 2E 41 4D 42 00   BOSS/BOSS04.AMB.
    00283E00   47 5F 5A 4F 4E 45 46 2F  42 4F 53 53 2F 42 4F 53   G_ZONEF/BOSS/BOS
    00283E10   53 30 35 2E 41 4D 42 00  47 5F 43 4F 4D 2F 52 49   S05.AMB.G_COM/RI
    00283E20   4E 47 2F 52 49 4E 47 5F  4D 44 4C 2E 41 4D 42 00   NG/RING_MDL.AMB.
    00283E30   47 5F 43 4F 4D 2F 52 49  4E 47 2F 52 49 4E 47 5F   G_COM/RING/RING_
    00283E40   54 45 58 2E 41 4D 42 00  47 5F 43 4F 4D 2F 43 50   TEX.AMB.G_COM/CP
    00283E50   49 54 2F 43 50 49 54 5F  4D 41 49 4E 2E 41 4D 42   IT/CPIT_MAIN.AMB
    00283E60   00 00 00 00 00 00 00 00  47 5F 43 4F 4D 2F 50 4C   ........G_COM/PL
    00283E70   59 2F 53 4F 4E 5F 4D 44  4C 2E 41 4D 42 00 00 00   Y/SON_MDL.AMB...
    00283E80   47 5F 43 4F 4D 2F 50 4C  59 2F 53 4F 4E 5F 54 45   G_COM/PLY/SON_TE
    00283E90   58 2E 41 4D 42 00 00 00  47 5F 43 4F 4D 2F 50 4C   X.AMB...G_COM/PL
    00283EA0   59 2F 53 53 4F 4E 5F 4D  44 4C 2E 41 4D 42 00 00   Y/SSON_MDL.AMB..
    00283EB0   47 5F 43 4F 4D 2F 50 4C  59 2F 53 53 4F 4E 5F 54   G_COM/PLY/SSON_T
    00283EC0   45 58 2E 41 4D 42 00 00  47 5F 43 4F 4D 2F 50 4C   EX.AMB..G_COM/PL
    00283ED0   59 2F 53 4F 4E 5F 4D 54  4E 2E 41 4D 42 00 00 00   Y/SON_MTN.AMB...
    00283EE0   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00283EF0   31 31 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   11_MAP.AMB......
    00283F00   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00283F10   31 5F 4D 2E 41 4D 42 00  47 5F 5A 4F 4E 45 31 2F   1_M.AMB.G_ZONE1/
    00283F20   4D 41 50 2F 5A 4F 4E 45  31 5F 54 2E 41 4D 42 00   MAP/ZONE1_T.AMB.
    00283F30   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00283F40   31 5F 41 54 54 52 2E 41  4D 42 00 00 00 00 00 00   1_ATTR.AMB......
    00283F50   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00283F60   31 5F 4D 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   1_M_M.AMB.......
    00283F70   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00283F80   31 5F 4D 5F 56 2E 41 4D  42 00 00 00 00 00 00 00   1_M_V.AMB.......
    00283F90   47 5F 5A 4F 4E 45 31 2F  4D 41 50 46 41 52 2F 5A   G_ZONE1/MAPFAR/Z
    00283FA0   4F 4E 45 31 5F 4D 41 50  46 41 52 2E 41 4D 42 00   ONE1_MAPFAR.AMB.
    00283FB0   47 5F 5A 4F 4E 45 31 2F  44 45 43 4F 2F 44 45 43   G_ZONE1/DECO/DEC
    00283FC0   4F 5F 5A 4F 4E 45 31 2E  41 4D 42 00 00 00 00 00   O_ZONE1.AMB.....
    00283FD0   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00283FE0   31 32 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   12_MAP.AMB......
    00283FF0   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
    00284000   31 33 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   13_MAP.AMB......
    00284010   47 5F 5A 4F 4E 45 31 2F  4D 41 50 46 41 52 2F 5A   G_ZONE1/MAPFAR/Z
    00284020   4F 4E 45 31 33 5F 4D 41  50 46 41 52 2E 41 4D 42   ONE13_MAPFAR.AMB
    00284030   00 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   ........G_ZONE1/
    00284040   4D 41 50 2F 5A 4F 4E 45  31 42 4F 53 53 5F 4D 41   MAP/ZONE1BOSS_MA
    00284050   50 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 32 2F   P.AMB...G_ZONE2/
    00284060   4D 41 50 2F 5A 4F 4E 45  32 31 5F 4D 41 50 2E 41   MAP/ZONE21_MAP.A
    00284070   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
    00284080   4D 41 50 2F 5A 4F 4E 45  32 5F 4D 2E 41 4D 42 00   MAP/ZONE2_M.AMB.
    00284090   47 5F 5A 4F 4E 45 32 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE2/MAP/ZONE
    002840A0   32 5F 54 2E 41 4D 42 00  47 5F 5A 4F 4E 45 32 2F   2_T.AMB.G_ZONE2/
    002840B0   4D 41 50 2F 5A 4F 4E 45  32 5F 41 54 54 52 2E 41   MAP/ZONE2_ATTR.A
    002840C0   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
    002840D0   4D 41 50 2F 5A 4F 4E 45  32 5F 4D 5F 4D 2E 41 4D   MAP/ZONE2_M_M.AM
    002840E0   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   B.......G_ZONE2/
    002840F0   4D 41 50 2F 5A 4F 4E 45  32 5F 4D 5F 56 2E 41 4D   MAP/ZONE2_M_V.AM
    00284100   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   B.......G_ZONE2/
    00284110   4D 41 50 46 41 52 2F 5A  4F 4E 45 32 5F 4D 41 50   MAPFAR/ZONE2_MAP
    00284120   46 41 52 2E 41 4D 42 00  47 5F 5A 4F 4E 45 32 2F   FAR.AMB.G_ZONE2/
    00284130   44 45 43 4F 2F 44 45 43  4F 5F 5A 4F 4E 45 32 2E   DECO/DECO_ZONE2.
    00284140   41 4D 42 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   AMB.....G_ZONE2/
    00284150   4D 41 50 2F 5A 4F 4E 45  32 32 5F 4D 41 50 2E 41   MAP/ZONE22_MAP.A
    00284160   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
    00284170   4D 41 50 2F 5A 4F 4E 45  32 33 5F 4D 41 50 2E 41   MAP/ZONE23_MAP.A
    00284180   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
    00284190   4D 41 50 2F 5A 4F 4E 45  32 42 4F 53 53 5F 4D 41   MAP/ZONE2BOSS_MA
    002841A0   50 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 33 2F   P.AMB...G_ZONE3/
    002841B0   4D 41 50 2F 5A 4F 4E 45  33 31 5F 4D 41 50 2E 41   MAP/ZONE31_MAP.A
    002841C0   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   MB......G_ZONE3/
    002841D0   4D 41 50 2F 5A 4F 4E 45  33 5F 4D 2E 41 4D 42 00   MAP/ZONE3_M.AMB.
    002841E0   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
    002841F0   33 5F 54 2E 41 4D 42 00  47 5F 5A 4F 4E 45 33 2F   3_T.AMB.G_ZONE3/
    00284200   4D 41 50 2F 5A 4F 4E 45  33 5F 41 54 54 52 2E 41   MAP/ZONE3_ATTR.A
    00284210   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   MB......G_ZONE3/
    00284220   4D 41 50 2F 5A 4F 4E 45  33 5F 4D 5F 4D 2E 41 4D   MAP/ZONE3_M_M.AM
    00284230   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   B.......G_ZONE3/
    00284240   4D 41 50 2F 5A 4F 4E 45  33 5F 4D 5F 56 2E 41 4D   MAP/ZONE3_M_V.AM
    00284250   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   B.......G_ZONE3/
    00284260   4D 41 50 46 41 52 2F 5A  4F 4E 45 33 5F 4D 41 50   MAPFAR/ZONE3_MAP
    00284270   46 41 52 2E 41 4D 42 00  47 5F 5A 4F 4E 45 33 2F   FAR.AMB.G_ZONE3/
    00284280   44 45 43 4F 2F 44 45 43  4F 5F 5A 4F 4E 45 33 2E   DECO/DECO_ZONE3.
    00284290   41 4D 42 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   AMB.....G_ZONE3/
    002842A0   47 4D 4B 2F 47 4D 4B 5F  57 41 54 45 52 5F 53 46   GMK/GMK_WATER_SF
    002842B0   5F 4D 44 4C 2E 41 4D 42  00 00 00 00 00 00 00 00   _MDL.AMB........
    002842C0   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
    002842D0   33 32 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   32_MAP.AMB......
    002842E0   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
    002842F0   33 33 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   33_MAP.AMB......
    00284300   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
    00284310   33 42 4F 53 53 5F 4D 41  50 2E 41 4D 42 00 00 00   3BOSS_MAP.AMB...
    00284320   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    00284330   34 31 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   41_MAP.AMB......
    00284340   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    00284350   34 5F 4D 2E 41 4D 42 00  47 5F 5A 4F 4E 45 34 2F   4_M.AMB.G_ZONE4/
    00284360   4D 41 50 2F 5A 4F 4E 45  34 5F 54 2E 41 4D 42 00   MAP/ZONE4_T.AMB.
    00284370   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    00284380   34 5F 41 54 54 52 2E 41  4D 42 00 00 00 00 00 00   4_ATTR.AMB......
    00284390   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    002843A0   34 5F 4D 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   4_M_M.AMB.......
    002843B0   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    002843C0   34 5F 4D 5F 56 2E 41 4D  42 00 00 00 00 00 00 00   4_M_V.AMB.......
    002843D0   47 5F 5A 4F 4E 45 34 2F  44 45 43 4F 2F 44 45 43   G_ZONE4/DECO/DEC
    002843E0   4F 5F 5A 4F 4E 45 34 2E  41 4D 42 00 00 00 00 00   O_ZONE4.AMB.....
    002843F0   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    00284400   34 32 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   42_MAP.AMB......
    00284410   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    00284420   34 33 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   43_MAP.AMB......
    00284430   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
    00284440   34 42 4F 53 53 5F 4D 41  50 2E 41 4D 42 00 00 00   4BOSS_MAP.AMB...
    00284450   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
    00284460   46 42 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   FB_MAP.AMB......
    00284470   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
    00284480   46 5F 4D 2E 41 4D 42 00  47 5F 5A 4F 4E 45 46 2F   F_M.AMB.G_ZONEF/
    00284490   4D 41 50 2F 5A 4F 4E 45  46 5F 54 2E 41 4D 42 00   MAP/ZONEF_T.AMB.
    002844A0   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
    002844B0   46 5F 41 54 54 52 2E 41  4D 42 00 00 00 00 00 00   F_ATTR.AMB......
    002844C0   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
    002844D0   46 5F 4D 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   F_M_M.AMB.......
    002844E0   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
    002844F0   46 5F 4D 5F 56 2E 41 4D  42 00 00 00 00 00 00 00   F_M_V.AMB.......
    00284500   47 5F 5A 4F 4E 45 46 2F  4D 41 50 46 41 52 2F 5A   G_ZONEF/MAPFAR/Z
    00284510   4F 4E 45 46 5F 4D 41 50  46 41 52 2E 41 4D 42 00   ONEF_MAPFAR.AMB.
    00284520   47 5F 5A 4F 4E 45 46 2F  44 45 43 4F 2F 44 45 43   G_ZONEF/DECO/DEC
    00284530   4F 5F 5A 4F 4E 45 46 2E  41 4D 42 00 00 00 00 00   O_ZONEF.AMB.....
    00284540   2F 62 62 2F 67 6D 73 74  61 67 65 2E 62 62 00 00   /bb/gmstage.bb..
    00284550   47 5F 53 53 2F 4D 41 50  2F 53 53 31 5F 4D 41 50   G_SS/MAP/SS1_MAP
    00284560   2E 41 4D 42 00 00 00 00  47 5F 53 53 2F 4D 41 50   .AMB....G_SS/MAP
    00284570   2F 53 53 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   /SS_M.AMB.......
    00284580   47 5F 53 53 2F 4D 41 50  2F 53 53 5F 54 2E 41 4D   G_SS/MAP/SS_T.AM
    00284590   42 00 00 00 00 00 00 00  47 5F 53 53 2F 4D 41 50   B.......G_SS/MAP
    Guys, if someone has NPDRMs to test please upload it. Thanks.

    Uploaded my new stuff: NPDRM, SYSCON, HV exploit from GameOS and other thinsg.

    With NPDRM payload you wonít be able to decrypt all NPDRMs.

    I Ďm already able to decrypt dev_flash by using HV calls only.

    HV uses ENCDEC device to do storage device encryption/decryption. Iím currently working on reversing of this peripheral. I have full HV access now and can control it So expect more nice stuff in the future

    And thanks for all NPDRMs, guys. I will test them and will let you know which one decrypted.

    Guys and be careful with store_file_on_flash.c and replace_lv2.c payloads. With store_file_on_flash.c iím able to store a new file on FLASH memory where CORE OS files are stored from PUP. If you do not know what that means then donít play with this, it could brick your PS3, but itís safe to use when you know what you do.

    With both of those payloads iím able to boot a patched lv2_kernel.self from FLASH without flashing PUP, i just store a second lv2_lernel.self on FLASH, then patch System Manager in HV which is reponsible for booting GameOS and boot custom LV2 kernel from 3.41. You donít need NOR flasher if something goes wrong, just reboot HV and your original lv2_kernel.self will be booted again

    The same way you could boot lv2_kernel.self from dev_flash. Just patch path to lv2_kernel.self in System Manager and point it to lv2_kernel.self stored on dev_flash

    Theoretically, yeah, you could run what ever OS you want It has just to support Cell arch Today i will try to boot PS2 soft EMU instead of LV2 kernel. Linux would be nice of course and it would have all the rights of GameOS.

    Iím reversing currently HDD, BD and FLASH encryption/decryption, trying to understand how HV does it. The key to understanding of it is the ENCDEC peripheral device which iím currently working with. As soon as i have some good results which can be used by other developers i will make it public and let you know. Are you also reversing this part of HV currently ?

    Booting PS2 EMU didnít work, i could boot ps2_emu.self but the screen was black. PS2 Soft EMU ps2_softemu.self didnít boot at all, HV shuts down. You have to patch also LAID in System Manager and not only file path or else lv2ldr wontít decrypt the PS2 kernel.

    otheros.self is not a kernel like LV2 or Linux, itís gameOS application, you cannot boot it like a OS kernel on PS3. But i see no problems to boot Linux kernel instead of LV2. To boot Linux kernel image instead of LV2 kernel, you have to store Linux image on CORE OS flash, patch GameOD System Manager and point kernel path to Linux image, then patch System Manager so it wonít use lv2ldr to load the Linux image, just memcpy Linux image to memory of GameOS.

    HV procs cannot read USB devices because there is no USB device driver in HV. USB device driver is implemnted only in gameOS kernel and without some kind of USB device driver in HV there is no way to boot a LV2 kernel from USB. I can only boot LV2 kernel from CORE OS flash or dev_flash."

    Graf Chokolo Decrypts PS3 NPDRM SELF Data from Sonic 4 Game

    More PlayStation 3 News...
    Attached Files Attached Files

  2. #2
    Senior Member Pcsx2006's Avatar
    Join Date
    Feb 2009
    Posts
    326
    Sponsored Links
    Sponsored Links
    Awesome work graf you're the man!

  3. #3
    Senior Member IndyColtsFan84's Avatar
    Join Date
    Apr 2010
    Posts
    471
    Sponsored Links
    Sponsored Links
    Indeed Pcsx2006, this is awesome news. I have 50+ PSN games i have been dying to share with everyone. Hopefully this is the key that will unlock that door & allow me to share them.

  4. #4
    Registered User Kiriller's Avatar
    Join Date
    Sep 2008
    Posts
    108
    Sweeet gotta love the scene and what it came to be thanks for the contribution graf!

  5. #5
    Forum Moderator PS3 News's Avatar
    Join Date
    Apr 2005
    Posts
    27,648
    Moved to the main page now, and +Rep maxdb1984 for the news!

  6. #6
    Registered User serial2305's Avatar
    Join Date
    Sep 2010
    Posts
    10
    good news, great work!

  7. #7
    Registered User jokr2k10's Avatar
    Join Date
    Sep 2010
    Posts
    55
    I *LOVE* Sonic 4. it's really the only thing I have missed on my Wii other than New Super Mario Bros. and the Guitar Hero games (yea, i know i can get the Guitar Hero games on PS3, but i already had the guitar for Wii ) LOL

  8. #8
    Senior Member Brian10122's Avatar
    Join Date
    Sep 2010
    Posts
    56
    So, what does this help? I'm truly confused.

  9. #9
    Toucan Sam CJPC's Avatar
    Join Date
    Apr 2005
    Posts
    2,174
    Well, simply put - up until now the way to decrypt NPDRM selfs (like, EBOOT.BIN's inside PKG files) has not been known. So, any DLC only games that are for newer FW's (among other reasons) will eventually be able to be decrypted using this method, then perhaps resigned and played on a lower firmware - and that is just to start!

  10. #10
    Senior Member clouduzz's Avatar
    Join Date
    Dec 2009
    Posts
    141
    this is awesome! Hopefully it'll be just as easy to sign as it is now, I have two ps3's but only one has my psn games, now hopefully soon I'll be able to copy them to my other one

 

Sponsored Links
Page 1 of 3 123 LastLast

Tags for this Thread

Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News