Update: PS3 hacker Graf_Chokolo has now shared news of a PlayStation 3 GameOS Hypervisor exploit (quoted below) and released a NPDRM Decryption Payload (https://github.com/grafchokolo/psgroove/tree/master/payload) for developers while JU57FL1P has decrypted an NCIS Eboot.
PlayStation 3 developers were previously unable to decrypt NPDRM EBOOT.BIN's (like those in PKG files) as the PS3's NPDRM encryption differed, but today Graf_Chokolo has figured out how to use appldr to decrypt NPDRM encrypted data from Sonic 4.
For those who haven't been following, prior to this PS3 hacking update Graf_Chokolo was working on porting the LV1 Exploit to GameOS mode.
Graf_Chokolo said the following, to quote: "Dumped appldr arguments for NPDRM decryption on 3.41. I’m able now to decrypt NPDRMs with appldr on 3.41. Thanks to Jack for his support.
Here is a snippet from Sonic 4 NPDRM decrypted on 3.41: http://pastie.org/1463230
Guys, if someone has NPDRMs to test please upload it. Thanks.Code:Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F 00283470 4C 4F 47 4F 00 00 00 00 66 72 61 6D 65 20 3A 20 LOGO....frame : 00283480 25 64 00 00 00 00 00 00 45 46 5F 51 55 41 4B 45 %d......EF_QUAKE 00283490 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 32 ........Boss0_02 002834A0 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 33 ........Boss0_03 002834B0 00 00 00 00 00 00 00 00 42 6F 73 73 31 5F 30 32 ........Boss1_02 002834C0 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 31 ........Boss0_01 002834D0 00 00 00 00 00 00 00 00 42 6F 73 73 31 5F 30 34 ........Boss1_04 002834E0 00 00 00 00 00 00 00 00 42 6F 73 73 31 5F 30 33 ........Boss1_03 002834F0 00 00 00 00 00 00 00 00 42 6F 73 73 31 5F 30 35 ........Boss1_05 00283500 00 00 00 00 00 00 00 00 42 6F 73 73 31 5F 30 31 ........Boss1_01 00283510 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 31 ........Boss0_01 00283520 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 33 ........Boss0_03 00283530 00 00 00 00 00 00 00 00 45 6E 65 6D 79 00 00 00 ........Enemy... 00283540 42 6F 73 73 34 5F 30 33 00 00 00 00 00 00 00 00 Boss4_03........ 00283550 42 6F 73 73 34 5F 30 32 00 00 00 00 00 00 00 00 Boss4_02........ 00283560 42 6F 73 73 34 5F 30 34 00 00 00 00 00 00 00 00 Boss4_04........ 00283570 42 6F 73 73 34 5F 30 31 00 00 00 00 00 00 00 00 Boss4_01........ 00283580 42 6F 73 73 30 5F 30 32 00 00 00 00 00 00 00 00 Boss0_02........ 00283590 53 4E 4D 20 53 59 53 00 46 69 6E 61 6C 42 6F 73 SNM SYS.FinalBos 002835A0 73 32 31 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s21.....FinalBos 002835B0 73 30 35 00 00 00 00 00 42 6F 73 73 30 5F 30 32 s05.....Boss0_02 002835C0 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 33 ........Boss0_03 002835D0 00 00 00 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 ........FinalBos 002835E0 73 30 33 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s03.....FinalBos 002835F0 73 31 37 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s17.....FinalBos 00283600 73 30 36 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s06.....FinalBos 00283610 73 31 38 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s18.....FinalBos 00283620 73 30 31 00 00 00 00 00 42 6F 73 73 30 5F 30 31 s01.....Boss0_01 00283630 00 00 00 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 ........FinalBos 00283640 73 31 35 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s15.....FinalBos 00283650 73 31 32 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s12.....FinalBos 00283660 73 31 30 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s10.....FinalBos 00283670 73 30 38 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s08.....FinalBos 00283680 73 32 30 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s20.....FinalBos 00283690 73 31 31 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s11.....FinalBos 002836A0 73 31 34 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s14.....FinalBos 002836B0 73 30 34 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s04.....FinalBos 002836C0 73 30 37 00 00 00 00 00 42 6F 73 73 30 5F 30 31 s07.....Boss0_01 002836D0 00 00 00 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 ........FinalBos 002836E0 73 31 33 00 00 00 00 00 46 69 6E 61 6C 42 6F 73 s13.....FinalBos 002836F0 73 31 31 00 00 00 00 00 42 6F 73 73 32 5F 30 33 s11.....Boss2_03 00283700 00 00 00 00 00 00 00 00 42 6F 73 73 32 5F 30 31 ........Boss2_01 00283710 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 32 ........Boss0_02 00283720 00 00 00 00 00 00 00 00 42 6F 73 73 32 5F 30 32 ........Boss2_02 00283730 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 31 ........Boss0_01 00283740 00 00 00 00 00 00 00 00 42 6F 73 73 32 5F 30 35 ........Boss2_05 00283750 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 33 ........Boss0_03 00283760 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 32 ........Boss0_02 00283770 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 33 ........Boss0_03 00283780 00 00 00 00 00 00 00 00 42 6F 73 73 30 5F 30 31 ........Boss0_01 00283790 00 00 00 00 00 00 00 00 43 61 73 69 6E 6F 31 00 ........Casino1. 002837A0 48 61 6C 6F 67 65 6E 00 42 6F 73 73 32 5F 30 33 Halogen.Boss2_03 002837B0 00 00 00 00 00 00 00 00 4B 61 6D 61 00 00 00 00 ........Kama.... 002837C0 53 4E 4D 20 53 59 53 00 4B 61 6E 69 00 00 00 00 SNM SYS.Kani.... 002837D0 53 74 69 6E 67 00 00 00 53 70 72 61 79 00 00 00 Sting...Spray... 002837E0 45 6E 65 6D 79 00 00 00 53 74 69 6E 67 00 00 00 Enemy...Sting... 002837F0 42 6F 73 73 32 5F 30 33 00 00 00 00 00 00 00 00 Boss2_03........ 00283800 47 4D 5F 4C 4F 41 44 5F 42 42 00 00 00 00 00 00 GM_LOAD_BB...... 00283810 47 4D 5F 4C 4F 41 44 00 47 5F 43 4F 4D 2F 45 4E GM_LOAD.G_COM/EN 00283820 45 2F 45 4E 45 5F 48 41 52 49 5F 4D 44 4C 2E 41 E/ENE_HARI_MDL.A 00283830 4D 42 00 00 00 00 00 00 47 5F 43 4F 4D 2F 45 4E MB......G_COM/EN 00283840 45 2F 45 4E 45 5F 48 41 52 49 5F 54 45 58 2E 41 E/ENE_HARI_TEX.A 00283850 4D 42 00 00 00 00 00 00 47 5F 43 4F 4D 2F 45 4E MB......G_COM/EN 00283860 45 2F 45 4E 45 5F 48 41 52 49 5F 4D 54 4E 2E 41 E/ENE_HARI_MTN.A 00283870 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 31 2F MB......G_ZONE1/ 00283880 45 4E 45 2F 45 4E 45 5F 4D 4F 54 4F 52 41 5F 4D ENE/ENE_MOTORA_M 00283890 44 4C 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 31 2F DL.AMB..G_ZONE1/ 002838A0 45 4E 45 2F 45 4E 45 5F 4D 4F 54 4F 52 41 5F 54 ENE/ENE_MOTORA_T 002838B0 45 58 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 31 2F EX.AMB..G_ZONE1/ 002838C0 45 4E 45 2F 45 4E 45 5F 4D 4F 54 4F 52 41 5F 4D ENE/ENE_MOTORA_M 002838D0 54 4E 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 31 2F TN.AMB..G_ZONE1/ 002838E0 45 4E 45 2F 45 4E 45 5F 47 41 42 55 5F 4D 44 4C ENE/ENE_GABU_MDL 002838F0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 31 2F .AMB....G_ZONE1/ 00283900 45 4E 45 2F 45 4E 45 5F 47 41 42 55 5F 54 45 58 ENE/ENE_GABU_TEX 00283910 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 31 2F .AMB....G_ZONE1/ 00283920 45 4E 45 2F 45 4E 45 5F 47 41 42 55 5F 4D 54 4E ENE/ENE_GABU_MTN 00283930 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 31 2F .AMB....G_ZONE1/ 00283940 45 4E 45 2F 45 4E 45 5F 53 54 49 4E 47 5F 4D 44 ENE/ENE_STING_MD 00283950 4C 2E 41 4D 42 00 00 00 47 5F 5A 4F 4E 45 31 2F L.AMB...G_ZONE1/ 00283960 45 4E 45 2F 45 4E 45 5F 53 54 49 4E 47 5F 54 45 ENE/ENE_STING_TE 00283970 58 2E 41 4D 42 00 00 00 47 5F 5A 4F 4E 45 31 2F X.AMB...G_ZONE1/ 00283980 45 4E 45 2F 45 4E 45 5F 53 54 49 4E 47 5F 4D 54 ENE/ENE_STING_MT 00283990 4E 2E 41 4D 42 00 00 00 47 5F 5A 4F 4E 45 31 2F N.AMB...G_ZONE1/ 002839A0 45 4E 45 2F 45 4E 45 5F 4D 45 52 45 4F 4E 5F 4D ENE/ENE_MEREON_M 002839B0 44 4C 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 31 2F DL.AMB..G_ZONE1/ 002839C0 45 4E 45 2F 45 4E 45 5F 4D 45 52 45 4F 4E 5F 52 ENE/ENE_MEREON_R 002839D0 5F 4D 44 4C 2E 41 4D 42 00 00 00 00 00 00 00 00 _MDL.AMB........ 002839E0 47 5F 5A 4F 4E 45 31 2F 45 4E 45 2F 45 4E 45 5F G_ZONE1/ENE/ENE_ 002839F0 4D 45 52 45 4F 4E 5F 54 45 58 2E 41 4D 42 00 00 MEREON_TEX.AMB.. 00283A00 47 5F 5A 4F 4E 45 31 2F 45 4E 45 2F 45 4E 45 5F G_ZONE1/ENE/ENE_ 00283A10 4D 45 52 45 4F 4E 5F 4D 54 4E 2E 41 4D 42 00 00 MEREON_MTN.AMB.. 00283A20 47 5F 5A 4F 4E 45 31 2F 42 4F 53 53 2F 42 4F 53 G_ZONE1/BOSS/BOS 00283A30 53 30 31 2E 41 4D 42 00 47 5F 5A 4F 4E 45 32 2F S01.AMB.G_ZONE2/ 00283A40 45 4E 45 2F 45 4E 45 5F 47 41 52 44 4F 4E 5F 4D ENE/ENE_GARDON_M 00283A50 44 4C 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 32 2F DL.AMB..G_ZONE2/ 00283A60 45 4E 45 2F 45 4E 45 5F 47 41 52 44 4F 4E 5F 54 ENE/ENE_GARDON_T 00283A70 45 58 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 32 2F EX.AMB..G_ZONE2/ 00283A80 45 4E 45 2F 45 4E 45 5F 47 41 52 44 4F 4E 5F 4D ENE/ENE_GARDON_M 00283A90 54 4E 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 32 2F TN.AMB..G_ZONE2/ 00283AA0 45 4E 45 2F 45 4E 45 5F 48 41 52 4F 5F 4D 44 4C ENE/ENE_HARO_MDL 00283AB0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 32 2F .AMB....G_ZONE2/ 00283AC0 45 4E 45 2F 45 4E 45 5F 48 41 52 4F 5F 54 45 58 ENE/ENE_HARO_TEX 00283AD0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 32 2F .AMB....G_ZONE2/ 00283AE0 45 4E 45 2F 45 4E 45 5F 48 41 52 4F 5F 4D 54 4E ENE/ENE_HARO_MTN 00283AF0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 32 2F .AMB....G_ZONE2/ 00283B00 42 4F 53 53 2F 42 4F 53 53 30 32 2E 41 4D 42 00 BOSS/BOSS02.AMB. 00283B10 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283B20 4D 4F 47 55 5F 4D 44 4C 2E 41 4D 42 00 00 00 00 MOGU_MDL.AMB.... 00283B30 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283B40 4D 4F 47 55 5F 54 45 58 2E 41 4D 42 00 00 00 00 MOGU_TEX.AMB.... 00283B50 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283B60 4D 4F 47 55 5F 4D 54 4E 2E 41 4D 42 00 00 00 00 MOGU_MTN.AMB.... 00283B70 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283B80 55 4E 49 44 45 53 5F 4D 44 4C 2E 41 4D 42 00 00 UNIDES_MDL.AMB.. 00283B90 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283BA0 55 4E 49 44 45 53 5F 54 45 58 2E 41 4D 42 00 00 UNIDES_TEX.AMB.. 00283BB0 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283BC0 55 4E 49 44 45 53 5F 4D 54 4E 2E 41 4D 42 00 00 UNIDES_MTN.AMB.. 00283BD0 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283BE0 55 4E 49 55 4E 49 5F 4D 44 4C 2E 41 4D 42 00 00 UNIUNI_MDL.AMB.. 00283BF0 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283C00 55 4E 49 55 4E 49 5F 54 45 58 2E 41 4D 42 00 00 UNIUNI_TEX.AMB.. 00283C10 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283C20 55 4E 49 55 4E 49 5F 4D 54 4E 2E 41 4D 42 00 00 UNIUNI_MTN.AMB.. 00283C30 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283C40 42 55 4B 55 5F 4D 44 4C 2E 41 4D 42 00 00 00 00 BUKU_MDL.AMB.... 00283C50 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283C60 42 55 4B 55 5F 54 45 58 2E 41 4D 42 00 00 00 00 BUKU_TEX.AMB.... 00283C70 47 5F 5A 4F 4E 45 33 2F 45 4E 45 2F 45 4E 45 5F G_ZONE3/ENE/ENE_ 00283C80 42 55 4B 55 5F 4D 54 4E 2E 41 4D 42 00 00 00 00 BUKU_MTN.AMB.... 00283C90 47 5F 5A 4F 4E 45 33 2F 42 4F 53 53 2F 42 4F 53 G_ZONE3/BOSS/BOS 00283CA0 53 30 33 2E 41 4D 42 00 47 5F 5A 4F 4E 45 34 2F S03.AMB.G_ZONE4/ 00283CB0 45 4E 45 2F 45 4E 45 5F 54 5F 53 54 41 52 5F 4D ENE/ENE_T_STAR_M 00283CC0 44 4C 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 34 2F DL.AMB..G_ZONE4/ 00283CD0 45 4E 45 2F 45 4E 45 5F 54 5F 53 54 41 52 5F 54 ENE/ENE_T_STAR_T 00283CE0 45 58 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 34 2F EX.AMB..G_ZONE4/ 00283CF0 45 4E 45 2F 45 4E 45 5F 54 5F 53 54 41 52 5F 4D ENE/ENE_T_STAR_M 00283D00 54 4E 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 34 2F TN.AMB..G_ZONE4/ 00283D10 45 4E 45 2F 45 4E 45 5F 54 5F 53 54 41 52 5F 4D ENE/ENE_T_STAR_M 00283D20 41 54 2E 41 4D 42 00 00 47 5F 5A 4F 4E 45 34 2F AT.AMB..G_ZONE4/ 00283D30 45 4E 45 2F 45 4E 45 5F 4B 41 4E 49 5F 4D 44 4C ENE/ENE_KANI_MDL 00283D40 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 34 2F .AMB....G_ZONE4/ 00283D50 45 4E 45 2F 45 4E 45 5F 4B 41 4E 49 5F 54 45 58 ENE/ENE_KANI_TEX 00283D60 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 34 2F .AMB....G_ZONE4/ 00283D70 45 4E 45 2F 45 4E 45 5F 4B 41 4E 49 5F 4D 54 4E ENE/ENE_KANI_MTN 00283D80 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 34 2F .AMB....G_ZONE4/ 00283D90 45 4E 45 2F 45 4E 45 5F 4B 41 4D 41 5F 4D 44 4C ENE/ENE_KAMA_MDL 00283DA0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 34 2F .AMB....G_ZONE4/ 00283DB0 45 4E 45 2F 45 4E 45 5F 4B 41 4D 41 5F 54 45 58 ENE/ENE_KAMA_TEX 00283DC0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 34 2F .AMB....G_ZONE4/ 00283DD0 45 4E 45 2F 45 4E 45 5F 4B 41 4D 41 5F 4D 54 4E ENE/ENE_KAMA_MTN 00283DE0 2E 41 4D 42 00 00 00 00 47 5F 5A 4F 4E 45 34 2F .AMB....G_ZONE4/ 00283DF0 42 4F 53 53 2F 42 4F 53 53 30 34 2E 41 4D 42 00 BOSS/BOSS04.AMB. 00283E00 47 5F 5A 4F 4E 45 46 2F 42 4F 53 53 2F 42 4F 53 G_ZONEF/BOSS/BOS 00283E10 53 30 35 2E 41 4D 42 00 47 5F 43 4F 4D 2F 52 49 S05.AMB.G_COM/RI 00283E20 4E 47 2F 52 49 4E 47 5F 4D 44 4C 2E 41 4D 42 00 NG/RING_MDL.AMB. 00283E30 47 5F 43 4F 4D 2F 52 49 4E 47 2F 52 49 4E 47 5F G_COM/RING/RING_ 00283E40 54 45 58 2E 41 4D 42 00 47 5F 43 4F 4D 2F 43 50 TEX.AMB.G_COM/CP 00283E50 49 54 2F 43 50 49 54 5F 4D 41 49 4E 2E 41 4D 42 IT/CPIT_MAIN.AMB 00283E60 00 00 00 00 00 00 00 00 47 5F 43 4F 4D 2F 50 4C ........G_COM/PL 00283E70 59 2F 53 4F 4E 5F 4D 44 4C 2E 41 4D 42 00 00 00 Y/SON_MDL.AMB... 00283E80 47 5F 43 4F 4D 2F 50 4C 59 2F 53 4F 4E 5F 54 45 G_COM/PLY/SON_TE 00283E90 58 2E 41 4D 42 00 00 00 47 5F 43 4F 4D 2F 50 4C X.AMB...G_COM/PL 00283EA0 59 2F 53 53 4F 4E 5F 4D 44 4C 2E 41 4D 42 00 00 Y/SSON_MDL.AMB.. 00283EB0 47 5F 43 4F 4D 2F 50 4C 59 2F 53 53 4F 4E 5F 54 G_COM/PLY/SSON_T 00283EC0 45 58 2E 41 4D 42 00 00 47 5F 43 4F 4D 2F 50 4C EX.AMB..G_COM/PL 00283ED0 59 2F 53 4F 4E 5F 4D 54 4E 2E 41 4D 42 00 00 00 Y/SON_MTN.AMB... 00283EE0 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00283EF0 31 31 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 11_MAP.AMB...... 00283F00 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00283F10 31 5F 4D 2E 41 4D 42 00 47 5F 5A 4F 4E 45 31 2F 1_M.AMB.G_ZONE1/ 00283F20 4D 41 50 2F 5A 4F 4E 45 31 5F 54 2E 41 4D 42 00 MAP/ZONE1_T.AMB. 00283F30 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00283F40 31 5F 41 54 54 52 2E 41 4D 42 00 00 00 00 00 00 1_ATTR.AMB...... 00283F50 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00283F60 31 5F 4D 5F 4D 2E 41 4D 42 00 00 00 00 00 00 00 1_M_M.AMB....... 00283F70 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00283F80 31 5F 4D 5F 56 2E 41 4D 42 00 00 00 00 00 00 00 1_M_V.AMB....... 00283F90 47 5F 5A 4F 4E 45 31 2F 4D 41 50 46 41 52 2F 5A G_ZONE1/MAPFAR/Z 00283FA0 4F 4E 45 31 5F 4D 41 50 46 41 52 2E 41 4D 42 00 ONE1_MAPFAR.AMB. 00283FB0 47 5F 5A 4F 4E 45 31 2F 44 45 43 4F 2F 44 45 43 G_ZONE1/DECO/DEC 00283FC0 4F 5F 5A 4F 4E 45 31 2E 41 4D 42 00 00 00 00 00 O_ZONE1.AMB..... 00283FD0 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00283FE0 31 32 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 12_MAP.AMB...... 00283FF0 47 5F 5A 4F 4E 45 31 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE1/MAP/ZONE 00284000 31 33 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 13_MAP.AMB...... 00284010 47 5F 5A 4F 4E 45 31 2F 4D 41 50 46 41 52 2F 5A G_ZONE1/MAPFAR/Z 00284020 4F 4E 45 31 33 5F 4D 41 50 46 41 52 2E 41 4D 42 ONE13_MAPFAR.AMB 00284030 00 00 00 00 00 00 00 00 47 5F 5A 4F 4E 45 31 2F ........G_ZONE1/ 00284040 4D 41 50 2F 5A 4F 4E 45 31 42 4F 53 53 5F 4D 41 MAP/ZONE1BOSS_MA 00284050 50 2E 41 4D 42 00 00 00 47 5F 5A 4F 4E 45 32 2F P.AMB...G_ZONE2/ 00284060 4D 41 50 2F 5A 4F 4E 45 32 31 5F 4D 41 50 2E 41 MAP/ZONE21_MAP.A 00284070 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F MB......G_ZONE2/ 00284080 4D 41 50 2F 5A 4F 4E 45 32 5F 4D 2E 41 4D 42 00 MAP/ZONE2_M.AMB. 00284090 47 5F 5A 4F 4E 45 32 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE2/MAP/ZONE 002840A0 32 5F 54 2E 41 4D 42 00 47 5F 5A 4F 4E 45 32 2F 2_T.AMB.G_ZONE2/ 002840B0 4D 41 50 2F 5A 4F 4E 45 32 5F 41 54 54 52 2E 41 MAP/ZONE2_ATTR.A 002840C0 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F MB......G_ZONE2/ 002840D0 4D 41 50 2F 5A 4F 4E 45 32 5F 4D 5F 4D 2E 41 4D MAP/ZONE2_M_M.AM 002840E0 42 00 00 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F B.......G_ZONE2/ 002840F0 4D 41 50 2F 5A 4F 4E 45 32 5F 4D 5F 56 2E 41 4D MAP/ZONE2_M_V.AM 00284100 42 00 00 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F B.......G_ZONE2/ 00284110 4D 41 50 46 41 52 2F 5A 4F 4E 45 32 5F 4D 41 50 MAPFAR/ZONE2_MAP 00284120 46 41 52 2E 41 4D 42 00 47 5F 5A 4F 4E 45 32 2F FAR.AMB.G_ZONE2/ 00284130 44 45 43 4F 2F 44 45 43 4F 5F 5A 4F 4E 45 32 2E DECO/DECO_ZONE2. 00284140 41 4D 42 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F AMB.....G_ZONE2/ 00284150 4D 41 50 2F 5A 4F 4E 45 32 32 5F 4D 41 50 2E 41 MAP/ZONE22_MAP.A 00284160 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F MB......G_ZONE2/ 00284170 4D 41 50 2F 5A 4F 4E 45 32 33 5F 4D 41 50 2E 41 MAP/ZONE23_MAP.A 00284180 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 32 2F MB......G_ZONE2/ 00284190 4D 41 50 2F 5A 4F 4E 45 32 42 4F 53 53 5F 4D 41 MAP/ZONE2BOSS_MA 002841A0 50 2E 41 4D 42 00 00 00 47 5F 5A 4F 4E 45 33 2F P.AMB...G_ZONE3/ 002841B0 4D 41 50 2F 5A 4F 4E 45 33 31 5F 4D 41 50 2E 41 MAP/ZONE31_MAP.A 002841C0 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 33 2F MB......G_ZONE3/ 002841D0 4D 41 50 2F 5A 4F 4E 45 33 5F 4D 2E 41 4D 42 00 MAP/ZONE3_M.AMB. 002841E0 47 5F 5A 4F 4E 45 33 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE3/MAP/ZONE 002841F0 33 5F 54 2E 41 4D 42 00 47 5F 5A 4F 4E 45 33 2F 3_T.AMB.G_ZONE3/ 00284200 4D 41 50 2F 5A 4F 4E 45 33 5F 41 54 54 52 2E 41 MAP/ZONE3_ATTR.A 00284210 4D 42 00 00 00 00 00 00 47 5F 5A 4F 4E 45 33 2F MB......G_ZONE3/ 00284220 4D 41 50 2F 5A 4F 4E 45 33 5F 4D 5F 4D 2E 41 4D MAP/ZONE3_M_M.AM 00284230 42 00 00 00 00 00 00 00 47 5F 5A 4F 4E 45 33 2F B.......G_ZONE3/ 00284240 4D 41 50 2F 5A 4F 4E 45 33 5F 4D 5F 56 2E 41 4D MAP/ZONE3_M_V.AM 00284250 42 00 00 00 00 00 00 00 47 5F 5A 4F 4E 45 33 2F B.......G_ZONE3/ 00284260 4D 41 50 46 41 52 2F 5A 4F 4E 45 33 5F 4D 41 50 MAPFAR/ZONE3_MAP 00284270 46 41 52 2E 41 4D 42 00 47 5F 5A 4F 4E 45 33 2F FAR.AMB.G_ZONE3/ 00284280 44 45 43 4F 2F 44 45 43 4F 5F 5A 4F 4E 45 33 2E DECO/DECO_ZONE3. 00284290 41 4D 42 00 00 00 00 00 47 5F 5A 4F 4E 45 33 2F AMB.....G_ZONE3/ 002842A0 47 4D 4B 2F 47 4D 4B 5F 57 41 54 45 52 5F 53 46 GMK/GMK_WATER_SF 002842B0 5F 4D 44 4C 2E 41 4D 42 00 00 00 00 00 00 00 00 _MDL.AMB........ 002842C0 47 5F 5A 4F 4E 45 33 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE3/MAP/ZONE 002842D0 33 32 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 32_MAP.AMB...... 002842E0 47 5F 5A 4F 4E 45 33 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE3/MAP/ZONE 002842F0 33 33 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 33_MAP.AMB...... 00284300 47 5F 5A 4F 4E 45 33 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE3/MAP/ZONE 00284310 33 42 4F 53 53 5F 4D 41 50 2E 41 4D 42 00 00 00 3BOSS_MAP.AMB... 00284320 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 00284330 34 31 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 41_MAP.AMB...... 00284340 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 00284350 34 5F 4D 2E 41 4D 42 00 47 5F 5A 4F 4E 45 34 2F 4_M.AMB.G_ZONE4/ 00284360 4D 41 50 2F 5A 4F 4E 45 34 5F 54 2E 41 4D 42 00 MAP/ZONE4_T.AMB. 00284370 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 00284380 34 5F 41 54 54 52 2E 41 4D 42 00 00 00 00 00 00 4_ATTR.AMB...... 00284390 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 002843A0 34 5F 4D 5F 4D 2E 41 4D 42 00 00 00 00 00 00 00 4_M_M.AMB....... 002843B0 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 002843C0 34 5F 4D 5F 56 2E 41 4D 42 00 00 00 00 00 00 00 4_M_V.AMB....... 002843D0 47 5F 5A 4F 4E 45 34 2F 44 45 43 4F 2F 44 45 43 G_ZONE4/DECO/DEC 002843E0 4F 5F 5A 4F 4E 45 34 2E 41 4D 42 00 00 00 00 00 O_ZONE4.AMB..... 002843F0 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 00284400 34 32 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 42_MAP.AMB...... 00284410 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 00284420 34 33 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 43_MAP.AMB...... 00284430 47 5F 5A 4F 4E 45 34 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONE4/MAP/ZONE 00284440 34 42 4F 53 53 5F 4D 41 50 2E 41 4D 42 00 00 00 4BOSS_MAP.AMB... 00284450 47 5F 5A 4F 4E 45 46 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONEF/MAP/ZONE 00284460 46 42 5F 4D 41 50 2E 41 4D 42 00 00 00 00 00 00 FB_MAP.AMB...... 00284470 47 5F 5A 4F 4E 45 46 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONEF/MAP/ZONE 00284480 46 5F 4D 2E 41 4D 42 00 47 5F 5A 4F 4E 45 46 2F F_M.AMB.G_ZONEF/ 00284490 4D 41 50 2F 5A 4F 4E 45 46 5F 54 2E 41 4D 42 00 MAP/ZONEF_T.AMB. 002844A0 47 5F 5A 4F 4E 45 46 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONEF/MAP/ZONE 002844B0 46 5F 41 54 54 52 2E 41 4D 42 00 00 00 00 00 00 F_ATTR.AMB...... 002844C0 47 5F 5A 4F 4E 45 46 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONEF/MAP/ZONE 002844D0 46 5F 4D 5F 4D 2E 41 4D 42 00 00 00 00 00 00 00 F_M_M.AMB....... 002844E0 47 5F 5A 4F 4E 45 46 2F 4D 41 50 2F 5A 4F 4E 45 G_ZONEF/MAP/ZONE 002844F0 46 5F 4D 5F 56 2E 41 4D 42 00 00 00 00 00 00 00 F_M_V.AMB....... 00284500 47 5F 5A 4F 4E 45 46 2F 4D 41 50 46 41 52 2F 5A G_ZONEF/MAPFAR/Z 00284510 4F 4E 45 46 5F 4D 41 50 46 41 52 2E 41 4D 42 00 ONEF_MAPFAR.AMB. 00284520 47 5F 5A 4F 4E 45 46 2F 44 45 43 4F 2F 44 45 43 G_ZONEF/DECO/DEC 00284530 4F 5F 5A 4F 4E 45 46 2E 41 4D 42 00 00 00 00 00 O_ZONEF.AMB..... 00284540 2F 62 62 2F 67 6D 73 74 61 67 65 2E 62 62 00 00 /bb/gmstage.bb.. 00284550 47 5F 53 53 2F 4D 41 50 2F 53 53 31 5F 4D 41 50 G_SS/MAP/SS1_MAP 00284560 2E 41 4D 42 00 00 00 00 47 5F 53 53 2F 4D 41 50 .AMB....G_SS/MAP 00284570 2F 53 53 5F 4D 2E 41 4D 42 00 00 00 00 00 00 00 /SS_M.AMB....... 00284580 47 5F 53 53 2F 4D 41 50 2F 53 53 5F 54 2E 41 4D G_SS/MAP/SS_T.AM 00284590 42 00 00 00 00 00 00 00 47 5F 53 53 2F 4D 41 50 B.......G_SS/MAP
Uploaded my new stuff: NPDRM, SYSCON, HV exploit from GameOS and other thinsg.
With NPDRM payload you won’t be able to decrypt all NPDRMs.
I ‘m already able to decrypt dev_flash by using HV calls only.
HV uses ENCDEC device to do storage device encryption/decryption. I’m currently working on reversing of this peripheral. I have full HV access now and can control itSo expect more nice stuff in the future
And thanks for all NPDRMs, guys. I will test them and will let you know which one decrypted.
Guys and be careful with store_file_on_flash.c and replace_lv2.c payloads. With store_file_on_flash.c i’m able to store a new file on FLASH memory where CORE OS files are stored from PUP. If you do not know what that means then don’t play with this, it could brick your PS3, but it’s safe to use when you know what you do.
With both of those payloads i’m able to boot a patched lv2_kernel.self from FLASH without flashing PUP, i just store a second lv2_lernel.self on FLASH, then patch System Manager in HV which is reponsible for booting GameOS and boot custom LV2 kernel from 3.41. You don’t need NOR flasher if something goes wrong, just reboot HV and your original lv2_kernel.self will be booted again
The same way you could boot lv2_kernel.self from dev_flash. Just patch path to lv2_kernel.self in System Manager and point it to lv2_kernel.self stored on dev_flash
Theoretically, yeah, you could run what ever OS you want
I’m reversing currently HDD, BD and FLASH encryption/decryption, trying to understand how HV does it. The key to understanding of it is the ENCDEC peripheral device which i’m currently working with. As soon as i have some good results which can be used by other developers i will make it public and let you know. Are you also reversing this part of HV currently ?
Booting PS2 EMU didn’t work, i could boot ps2_emu.self but the screen was black. PS2 Soft EMU ps2_softemu.self didn’t boot at all, HV shuts down. You have to patch also LAID in System Manager and not only file path or else lv2ldr wont’t decrypt the PS2 kernel.
otheros.self is not a kernel like LV2 or Linux, it’s gameOS application, you cannot boot it like a OS kernel on PS3. But i see no problems to boot Linux kernel instead of LV2. To boot Linux kernel image instead of LV2 kernel, you have to store Linux image on CORE OS flash, patch GameOD System Manager and point kernel path to Linux image, then patch System Manager so it won’t use lv2ldr to load the Linux image, just memcpy Linux image to memory of GameOS.
HV procs cannot read USB devices because there is no USB device driver in HV. USB device driver is implemnted only in gameOS kernel and without some kind of USB device driver in HV there is no way to boot a LV2 kernel from USB. I can only boot LV2 kernel from CORE OS flash or dev_flash."
More PlayStation 3 News...
13250 HeyManHRU
13207 PS3 News
11287 elser1
11119 oVERSoLDiER
9248 GrandpaHomer
8578 Tidusnake666
7968 saviour07
7340 condorstrike
7258 deank
6858 OGroteKoning
24993 PS3 News
5279 Starlight
2965 HeyManHRU
2173 CJPC
2129 elser1
1818 cfwprophet
1756 her0
1572 oVERSoLDiER
1291 GrandpaHomer
1080 barrybarryk
thanks for the contribution graf!
