Graf Chokolo Decrypts PS3 NPDRM SELF Data from Sonic 4 Game

Category: PS3 Hacks & JailBreak  By: maxdb1984 - (xorloser.com)
Tags: graf chokolo graf chokolo ps3 ps3 npdrm decryption ps3 self data sonic 4 ps3 games

122w ago - Update: PS3 hacker Graf_Chokolo has now shared news of a PlayStation 3 GameOS Hypervisor exploit (quoted below) and released a NPDRM Decryption Payload (GIT) for developers while JU57FL1P has decrypted an NCIS Eboot.

PlayStation 3 developers were previously unable to decrypt NPDRM EBOOT.BIN's (like those in PKG files) as the PS3's NPDRM encryption differed, but today Graf_Chokolo has figured out how to use appldr to decrypt NPDRM encrypted data from Sonic 4.

For those who haven't been following, prior to this PS3 hacking update Graf_Chokolo was working on porting the LV1 Exploit to GameOS mode.

Graf_Chokolo said the following, to quote: "Dumped appldr arguments for NPDRM decryption on 3.41. I'm able now to decrypt NPDRMs with appldr on 3.41. Thanks to Jack for his support.

Here is a snippet from Sonic 4 NPDRM decrypted on 3.41: http://pastie.org/1463230

Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F

00283470   4C 4F 47 4F 00 00 00 00  66 72 61 6D 65 20 3A 20   LOGO....frame : 
00283480   25 64 00 00 00 00 00 00  45 46 5F 51 55 41 4B 45   %d......EF_QUAKE
00283490   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 32   ........Boss0_02
002834A0   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
002834B0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 32   ........Boss1_02
002834C0   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
002834D0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 34   ........Boss1_04
002834E0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 33   ........Boss1_03
002834F0   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 35   ........Boss1_05
00283500   00 00 00 00 00 00 00 00  42 6F 73 73 31 5F 30 31   ........Boss1_01
00283510   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
00283520   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
00283530   00 00 00 00 00 00 00 00  45 6E 65 6D 79 00 00 00   ........Enemy...
00283540   42 6F 73 73 34 5F 30 33  00 00 00 00 00 00 00 00   Boss4_03........
00283550   42 6F 73 73 34 5F 30 32  00 00 00 00 00 00 00 00   Boss4_02........
00283560   42 6F 73 73 34 5F 30 34  00 00 00 00 00 00 00 00   Boss4_04........
00283570   42 6F 73 73 34 5F 30 31  00 00 00 00 00 00 00 00   Boss4_01........
00283580   42 6F 73 73 30 5F 30 32  00 00 00 00 00 00 00 00   Boss0_02........
00283590   53 4E 4D 20 53 59 53 00  46 69 6E 61 6C 42 6F 73   SNM SYS.FinalBos
002835A0   73 32 31 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s21.....FinalBos
002835B0   73 30 35 00 00 00 00 00  42 6F 73 73 30 5F 30 32   s05.....Boss0_02
002835C0   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
002835D0   00 00 00 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   ........FinalBos
002835E0   73 30 33 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s03.....FinalBos
002835F0   73 31 37 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s17.....FinalBos
00283600   73 30 36 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s06.....FinalBos
00283610   73 31 38 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s18.....FinalBos
00283620   73 30 31 00 00 00 00 00  42 6F 73 73 30 5F 30 31   s01.....Boss0_01
00283630   00 00 00 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   ........FinalBos
00283640   73 31 35 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s15.....FinalBos
00283650   73 31 32 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s12.....FinalBos
00283660   73 31 30 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s10.....FinalBos
00283670   73 30 38 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s08.....FinalBos
00283680   73 32 30 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s20.....FinalBos
00283690   73 31 31 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s11.....FinalBos
002836A0   73 31 34 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s14.....FinalBos
002836B0   73 30 34 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s04.....FinalBos
002836C0   73 30 37 00 00 00 00 00  42 6F 73 73 30 5F 30 31   s07.....Boss0_01
002836D0   00 00 00 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   ........FinalBos
002836E0   73 31 33 00 00 00 00 00  46 69 6E 61 6C 42 6F 73   s13.....FinalBos
002836F0   73 31 31 00 00 00 00 00  42 6F 73 73 32 5F 30 33   s11.....Boss2_03
00283700   00 00 00 00 00 00 00 00  42 6F 73 73 32 5F 30 31   ........Boss2_01
00283710   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 32   ........Boss0_02
00283720   00 00 00 00 00 00 00 00  42 6F 73 73 32 5F 30 32   ........Boss2_02
00283730   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
00283740   00 00 00 00 00 00 00 00  42 6F 73 73 32 5F 30 35   ........Boss2_05
00283750   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
00283760   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 32   ........Boss0_02
00283770   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 33   ........Boss0_03
00283780   00 00 00 00 00 00 00 00  42 6F 73 73 30 5F 30 31   ........Boss0_01
00283790   00 00 00 00 00 00 00 00  43 61 73 69 6E 6F 31 00   ........Casino1.
002837A0   48 61 6C 6F 67 65 6E 00  42 6F 73 73 32 5F 30 33   Halogen.Boss2_03
002837B0   00 00 00 00 00 00 00 00  4B 61 6D 61 00 00 00 00   ........Kama....
002837C0   53 4E 4D 20 53 59 53 00  4B 61 6E 69 00 00 00 00   SNM SYS.Kani....
002837D0   53 74 69 6E 67 00 00 00  53 70 72 61 79 00 00 00   Sting...Spray...
002837E0   45 6E 65 6D 79 00 00 00  53 74 69 6E 67 00 00 00   Enemy...Sting...
002837F0   42 6F 73 73 32 5F 30 33  00 00 00 00 00 00 00 00   Boss2_03........
00283800   47 4D 5F 4C 4F 41 44 5F  42 42 00 00 00 00 00 00   GM_LOAD_BB......
00283810   47 4D 5F 4C 4F 41 44 00  47 5F 43 4F 4D 2F 45 4E   GM_LOAD.G_COM/EN
00283820   45 2F 45 4E 45 5F 48 41  52 49 5F 4D 44 4C 2E 41   E/ENE_HARI_MDL.A
00283830   4D 42 00 00 00 00 00 00  47 5F 43 4F 4D 2F 45 4E   MB......G_COM/EN
00283840   45 2F 45 4E 45 5F 48 41  52 49 5F 54 45 58 2E 41   E/ENE_HARI_TEX.A
00283850   4D 42 00 00 00 00 00 00  47 5F 43 4F 4D 2F 45 4E   MB......G_COM/EN
00283860   45 2F 45 4E 45 5F 48 41  52 49 5F 4D 54 4E 2E 41   E/ENE_HARI_MTN.A
00283870   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   MB......G_ZONE1/
00283880   45 4E 45 2F 45 4E 45 5F  4D 4F 54 4F 52 41 5F 4D   ENE/ENE_MOTORA_M
00283890   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   DL.AMB..G_ZONE1/
002838A0   45 4E 45 2F 45 4E 45 5F  4D 4F 54 4F 52 41 5F 54   ENE/ENE_MOTORA_T
002838B0   45 58 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   EX.AMB..G_ZONE1/
002838C0   45 4E 45 2F 45 4E 45 5F  4D 4F 54 4F 52 41 5F 4D   ENE/ENE_MOTORA_M
002838D0   54 4E 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   TN.AMB..G_ZONE1/
002838E0   45 4E 45 2F 45 4E 45 5F  47 41 42 55 5F 4D 44 4C   ENE/ENE_GABU_MDL
002838F0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   .AMB....G_ZONE1/
00283900   45 4E 45 2F 45 4E 45 5F  47 41 42 55 5F 54 45 58   ENE/ENE_GABU_TEX
00283910   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   .AMB....G_ZONE1/
00283920   45 4E 45 2F 45 4E 45 5F  47 41 42 55 5F 4D 54 4E   ENE/ENE_GABU_MTN
00283930   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   .AMB....G_ZONE1/
00283940   45 4E 45 2F 45 4E 45 5F  53 54 49 4E 47 5F 4D 44   ENE/ENE_STING_MD
00283950   4C 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 31 2F   L.AMB...G_ZONE1/
00283960   45 4E 45 2F 45 4E 45 5F  53 54 49 4E 47 5F 54 45   ENE/ENE_STING_TE
00283970   58 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 31 2F   X.AMB...G_ZONE1/
00283980   45 4E 45 2F 45 4E 45 5F  53 54 49 4E 47 5F 4D 54   ENE/ENE_STING_MT
00283990   4E 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 31 2F   N.AMB...G_ZONE1/
002839A0   45 4E 45 2F 45 4E 45 5F  4D 45 52 45 4F 4E 5F 4D   ENE/ENE_MEREON_M
002839B0   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 31 2F   DL.AMB..G_ZONE1/
002839C0   45 4E 45 2F 45 4E 45 5F  4D 45 52 45 4F 4E 5F 52   ENE/ENE_MEREON_R
002839D0   5F 4D 44 4C 2E 41 4D 42  00 00 00 00 00 00 00 00   _MDL.AMB........
002839E0   47 5F 5A 4F 4E 45 31 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE1/ENE/ENE_
002839F0   4D 45 52 45 4F 4E 5F 54  45 58 2E 41 4D 42 00 00   MEREON_TEX.AMB..
00283A00   47 5F 5A 4F 4E 45 31 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE1/ENE/ENE_
00283A10   4D 45 52 45 4F 4E 5F 4D  54 4E 2E 41 4D 42 00 00   MEREON_MTN.AMB..
00283A20   47 5F 5A 4F 4E 45 31 2F  42 4F 53 53 2F 42 4F 53   G_ZONE1/BOSS/BOS
00283A30   53 30 31 2E 41 4D 42 00  47 5F 5A 4F 4E 45 32 2F   S01.AMB.G_ZONE2/
00283A40   45 4E 45 2F 45 4E 45 5F  47 41 52 44 4F 4E 5F 4D   ENE/ENE_GARDON_M
00283A50   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 32 2F   DL.AMB..G_ZONE2/
00283A60   45 4E 45 2F 45 4E 45 5F  47 41 52 44 4F 4E 5F 54   ENE/ENE_GARDON_T
00283A70   45 58 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 32 2F   EX.AMB..G_ZONE2/
00283A80   45 4E 45 2F 45 4E 45 5F  47 41 52 44 4F 4E 5F 4D   ENE/ENE_GARDON_M
00283A90   54 4E 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 32 2F   TN.AMB..G_ZONE2/
00283AA0   45 4E 45 2F 45 4E 45 5F  48 41 52 4F 5F 4D 44 4C   ENE/ENE_HARO_MDL
00283AB0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   .AMB....G_ZONE2/
00283AC0   45 4E 45 2F 45 4E 45 5F  48 41 52 4F 5F 54 45 58   ENE/ENE_HARO_TEX
00283AD0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   .AMB....G_ZONE2/
00283AE0   45 4E 45 2F 45 4E 45 5F  48 41 52 4F 5F 4D 54 4E   ENE/ENE_HARO_MTN
00283AF0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   .AMB....G_ZONE2/
00283B00   42 4F 53 53 2F 42 4F 53  53 30 32 2E 41 4D 42 00   BOSS/BOSS02.AMB.
00283B10   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283B20   4D 4F 47 55 5F 4D 44 4C  2E 41 4D 42 00 00 00 00   MOGU_MDL.AMB....
00283B30   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283B40   4D 4F 47 55 5F 54 45 58  2E 41 4D 42 00 00 00 00   MOGU_TEX.AMB....
00283B50   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283B60   4D 4F 47 55 5F 4D 54 4E  2E 41 4D 42 00 00 00 00   MOGU_MTN.AMB....
00283B70   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283B80   55 4E 49 44 45 53 5F 4D  44 4C 2E 41 4D 42 00 00   UNIDES_MDL.AMB..
00283B90   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283BA0   55 4E 49 44 45 53 5F 54  45 58 2E 41 4D 42 00 00   UNIDES_TEX.AMB..
00283BB0   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283BC0   55 4E 49 44 45 53 5F 4D  54 4E 2E 41 4D 42 00 00   UNIDES_MTN.AMB..
00283BD0   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283BE0   55 4E 49 55 4E 49 5F 4D  44 4C 2E 41 4D 42 00 00   UNIUNI_MDL.AMB..
00283BF0   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283C00   55 4E 49 55 4E 49 5F 54  45 58 2E 41 4D 42 00 00   UNIUNI_TEX.AMB..
00283C10   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283C20   55 4E 49 55 4E 49 5F 4D  54 4E 2E 41 4D 42 00 00   UNIUNI_MTN.AMB..
00283C30   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283C40   42 55 4B 55 5F 4D 44 4C  2E 41 4D 42 00 00 00 00   BUKU_MDL.AMB....
00283C50   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283C60   42 55 4B 55 5F 54 45 58  2E 41 4D 42 00 00 00 00   BUKU_TEX.AMB....
00283C70   47 5F 5A 4F 4E 45 33 2F  45 4E 45 2F 45 4E 45 5F   G_ZONE3/ENE/ENE_
00283C80   42 55 4B 55 5F 4D 54 4E  2E 41 4D 42 00 00 00 00   BUKU_MTN.AMB....
00283C90   47 5F 5A 4F 4E 45 33 2F  42 4F 53 53 2F 42 4F 53   G_ZONE3/BOSS/BOS
00283CA0   53 30 33 2E 41 4D 42 00  47 5F 5A 4F 4E 45 34 2F   S03.AMB.G_ZONE4/
00283CB0   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 4D   ENE/ENE_T_STAR_M
00283CC0   44 4C 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   DL.AMB..G_ZONE4/
00283CD0   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 54   ENE/ENE_T_STAR_T
00283CE0   45 58 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   EX.AMB..G_ZONE4/
00283CF0   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 4D   ENE/ENE_T_STAR_M
00283D00   54 4E 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   TN.AMB..G_ZONE4/
00283D10   45 4E 45 2F 45 4E 45 5F  54 5F 53 54 41 52 5F 4D   ENE/ENE_T_STAR_M
00283D20   41 54 2E 41 4D 42 00 00  47 5F 5A 4F 4E 45 34 2F   AT.AMB..G_ZONE4/
00283D30   45 4E 45 2F 45 4E 45 5F  4B 41 4E 49 5F 4D 44 4C   ENE/ENE_KANI_MDL
00283D40   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
00283D50   45 4E 45 2F 45 4E 45 5F  4B 41 4E 49 5F 54 45 58   ENE/ENE_KANI_TEX
00283D60   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
00283D70   45 4E 45 2F 45 4E 45 5F  4B 41 4E 49 5F 4D 54 4E   ENE/ENE_KANI_MTN
00283D80   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
00283D90   45 4E 45 2F 45 4E 45 5F  4B 41 4D 41 5F 4D 44 4C   ENE/ENE_KAMA_MDL
00283DA0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
00283DB0   45 4E 45 2F 45 4E 45 5F  4B 41 4D 41 5F 54 45 58   ENE/ENE_KAMA_TEX
00283DC0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
00283DD0   45 4E 45 2F 45 4E 45 5F  4B 41 4D 41 5F 4D 54 4E   ENE/ENE_KAMA_MTN
00283DE0   2E 41 4D 42 00 00 00 00  47 5F 5A 4F 4E 45 34 2F   .AMB....G_ZONE4/
00283DF0   42 4F 53 53 2F 42 4F 53  53 30 34 2E 41 4D 42 00   BOSS/BOSS04.AMB.
00283E00   47 5F 5A 4F 4E 45 46 2F  42 4F 53 53 2F 42 4F 53   G_ZONEF/BOSS/BOS
00283E10   53 30 35 2E 41 4D 42 00  47 5F 43 4F 4D 2F 52 49   S05.AMB.G_COM/RI
00283E20   4E 47 2F 52 49 4E 47 5F  4D 44 4C 2E 41 4D 42 00   NG/RING_MDL.AMB.
00283E30   47 5F 43 4F 4D 2F 52 49  4E 47 2F 52 49 4E 47 5F   G_COM/RING/RING_
00283E40   54 45 58 2E 41 4D 42 00  47 5F 43 4F 4D 2F 43 50   TEX.AMB.G_COM/CP
00283E50   49 54 2F 43 50 49 54 5F  4D 41 49 4E 2E 41 4D 42   IT/CPIT_MAIN.AMB
00283E60   00 00 00 00 00 00 00 00  47 5F 43 4F 4D 2F 50 4C   ........G_COM/PL
00283E70   59 2F 53 4F 4E 5F 4D 44  4C 2E 41 4D 42 00 00 00   Y/SON_MDL.AMB...
00283E80   47 5F 43 4F 4D 2F 50 4C  59 2F 53 4F 4E 5F 54 45   G_COM/PLY/SON_TE
00283E90   58 2E 41 4D 42 00 00 00  47 5F 43 4F 4D 2F 50 4C   X.AMB...G_COM/PL
00283EA0   59 2F 53 53 4F 4E 5F 4D  44 4C 2E 41 4D 42 00 00   Y/SSON_MDL.AMB..
00283EB0   47 5F 43 4F 4D 2F 50 4C  59 2F 53 53 4F 4E 5F 54   G_COM/PLY/SSON_T
00283EC0   45 58 2E 41 4D 42 00 00  47 5F 43 4F 4D 2F 50 4C   EX.AMB..G_COM/PL
00283ED0   59 2F 53 4F 4E 5F 4D 54  4E 2E 41 4D 42 00 00 00   Y/SON_MTN.AMB...
00283EE0   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00283EF0   31 31 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   11_MAP.AMB......
00283F00   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00283F10   31 5F 4D 2E 41 4D 42 00  47 5F 5A 4F 4E 45 31 2F   1_M.AMB.G_ZONE1/
00283F20   4D 41 50 2F 5A 4F 4E 45  31 5F 54 2E 41 4D 42 00   MAP/ZONE1_T.AMB.
00283F30   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00283F40   31 5F 41 54 54 52 2E 41  4D 42 00 00 00 00 00 00   1_ATTR.AMB......
00283F50   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00283F60   31 5F 4D 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   1_M_M.AMB.......
00283F70   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00283F80   31 5F 4D 5F 56 2E 41 4D  42 00 00 00 00 00 00 00   1_M_V.AMB.......
00283F90   47 5F 5A 4F 4E 45 31 2F  4D 41 50 46 41 52 2F 5A   G_ZONE1/MAPFAR/Z
00283FA0   4F 4E 45 31 5F 4D 41 50  46 41 52 2E 41 4D 42 00   ONE1_MAPFAR.AMB.
00283FB0   47 5F 5A 4F 4E 45 31 2F  44 45 43 4F 2F 44 45 43   G_ZONE1/DECO/DEC
00283FC0   4F 5F 5A 4F 4E 45 31 2E  41 4D 42 00 00 00 00 00   O_ZONE1.AMB.....
00283FD0   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00283FE0   31 32 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   12_MAP.AMB......
00283FF0   47 5F 5A 4F 4E 45 31 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE1/MAP/ZONE
00284000   31 33 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   13_MAP.AMB......
00284010   47 5F 5A 4F 4E 45 31 2F  4D 41 50 46 41 52 2F 5A   G_ZONE1/MAPFAR/Z
00284020   4F 4E 45 31 33 5F 4D 41  50 46 41 52 2E 41 4D 42   ONE13_MAPFAR.AMB
00284030   00 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 31 2F   ........G_ZONE1/
00284040   4D 41 50 2F 5A 4F 4E 45  31 42 4F 53 53 5F 4D 41   MAP/ZONE1BOSS_MA
00284050   50 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 32 2F   P.AMB...G_ZONE2/
00284060   4D 41 50 2F 5A 4F 4E 45  32 31 5F 4D 41 50 2E 41   MAP/ZONE21_MAP.A
00284070   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
00284080   4D 41 50 2F 5A 4F 4E 45  32 5F 4D 2E 41 4D 42 00   MAP/ZONE2_M.AMB.
00284090   47 5F 5A 4F 4E 45 32 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE2/MAP/ZONE
002840A0   32 5F 54 2E 41 4D 42 00  47 5F 5A 4F 4E 45 32 2F   2_T.AMB.G_ZONE2/
002840B0   4D 41 50 2F 5A 4F 4E 45  32 5F 41 54 54 52 2E 41   MAP/ZONE2_ATTR.A
002840C0   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
002840D0   4D 41 50 2F 5A 4F 4E 45  32 5F 4D 5F 4D 2E 41 4D   MAP/ZONE2_M_M.AM
002840E0   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   B.......G_ZONE2/
002840F0   4D 41 50 2F 5A 4F 4E 45  32 5F 4D 5F 56 2E 41 4D   MAP/ZONE2_M_V.AM
00284100   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   B.......G_ZONE2/
00284110   4D 41 50 46 41 52 2F 5A  4F 4E 45 32 5F 4D 41 50   MAPFAR/ZONE2_MAP
00284120   46 41 52 2E 41 4D 42 00  47 5F 5A 4F 4E 45 32 2F   FAR.AMB.G_ZONE2/
00284130   44 45 43 4F 2F 44 45 43  4F 5F 5A 4F 4E 45 32 2E   DECO/DECO_ZONE2.
00284140   41 4D 42 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   AMB.....G_ZONE2/
00284150   4D 41 50 2F 5A 4F 4E 45  32 32 5F 4D 41 50 2E 41   MAP/ZONE22_MAP.A
00284160   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
00284170   4D 41 50 2F 5A 4F 4E 45  32 33 5F 4D 41 50 2E 41   MAP/ZONE23_MAP.A
00284180   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 32 2F   MB......G_ZONE2/
00284190   4D 41 50 2F 5A 4F 4E 45  32 42 4F 53 53 5F 4D 41   MAP/ZONE2BOSS_MA
002841A0   50 2E 41 4D 42 00 00 00  47 5F 5A 4F 4E 45 33 2F   P.AMB...G_ZONE3/
002841B0   4D 41 50 2F 5A 4F 4E 45  33 31 5F 4D 41 50 2E 41   MAP/ZONE31_MAP.A
002841C0   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   MB......G_ZONE3/
002841D0   4D 41 50 2F 5A 4F 4E 45  33 5F 4D 2E 41 4D 42 00   MAP/ZONE3_M.AMB.
002841E0   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
002841F0   33 5F 54 2E 41 4D 42 00  47 5F 5A 4F 4E 45 33 2F   3_T.AMB.G_ZONE3/
00284200   4D 41 50 2F 5A 4F 4E 45  33 5F 41 54 54 52 2E 41   MAP/ZONE3_ATTR.A
00284210   4D 42 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   MB......G_ZONE3/
00284220   4D 41 50 2F 5A 4F 4E 45  33 5F 4D 5F 4D 2E 41 4D   MAP/ZONE3_M_M.AM
00284230   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   B.......G_ZONE3/
00284240   4D 41 50 2F 5A 4F 4E 45  33 5F 4D 5F 56 2E 41 4D   MAP/ZONE3_M_V.AM
00284250   42 00 00 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   B.......G_ZONE3/
00284260   4D 41 50 46 41 52 2F 5A  4F 4E 45 33 5F 4D 41 50   MAPFAR/ZONE3_MAP
00284270   46 41 52 2E 41 4D 42 00  47 5F 5A 4F 4E 45 33 2F   FAR.AMB.G_ZONE3/
00284280   44 45 43 4F 2F 44 45 43  4F 5F 5A 4F 4E 45 33 2E   DECO/DECO_ZONE3.
00284290   41 4D 42 00 00 00 00 00  47 5F 5A 4F 4E 45 33 2F   AMB.....G_ZONE3/
002842A0   47 4D 4B 2F 47 4D 4B 5F  57 41 54 45 52 5F 53 46   GMK/GMK_WATER_SF
002842B0   5F 4D 44 4C 2E 41 4D 42  00 00 00 00 00 00 00 00   _MDL.AMB........
002842C0   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
002842D0   33 32 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   32_MAP.AMB......
002842E0   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
002842F0   33 33 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   33_MAP.AMB......
00284300   47 5F 5A 4F 4E 45 33 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE3/MAP/ZONE
00284310   33 42 4F 53 53 5F 4D 41  50 2E 41 4D 42 00 00 00   3BOSS_MAP.AMB...
00284320   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
00284330   34 31 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   41_MAP.AMB......
00284340   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
00284350   34 5F 4D 2E 41 4D 42 00  47 5F 5A 4F 4E 45 34 2F   4_M.AMB.G_ZONE4/
00284360   4D 41 50 2F 5A 4F 4E 45  34 5F 54 2E 41 4D 42 00   MAP/ZONE4_T.AMB.
00284370   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
00284380   34 5F 41 54 54 52 2E 41  4D 42 00 00 00 00 00 00   4_ATTR.AMB......
00284390   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
002843A0   34 5F 4D 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   4_M_M.AMB.......
002843B0   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
002843C0   34 5F 4D 5F 56 2E 41 4D  42 00 00 00 00 00 00 00   4_M_V.AMB.......
002843D0   47 5F 5A 4F 4E 45 34 2F  44 45 43 4F 2F 44 45 43   G_ZONE4/DECO/DEC
002843E0   4F 5F 5A 4F 4E 45 34 2E  41 4D 42 00 00 00 00 00   O_ZONE4.AMB.....
002843F0   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
00284400   34 32 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   42_MAP.AMB......
00284410   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
00284420   34 33 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   43_MAP.AMB......
00284430   47 5F 5A 4F 4E 45 34 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONE4/MAP/ZONE
00284440   34 42 4F 53 53 5F 4D 41  50 2E 41 4D 42 00 00 00   4BOSS_MAP.AMB...
00284450   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
00284460   46 42 5F 4D 41 50 2E 41  4D 42 00 00 00 00 00 00   FB_MAP.AMB......
00284470   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
00284480   46 5F 4D 2E 41 4D 42 00  47 5F 5A 4F 4E 45 46 2F   F_M.AMB.G_ZONEF/
00284490   4D 41 50 2F 5A 4F 4E 45  46 5F 54 2E 41 4D 42 00   MAP/ZONEF_T.AMB.
002844A0   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
002844B0   46 5F 41 54 54 52 2E 41  4D 42 00 00 00 00 00 00   F_ATTR.AMB......
002844C0   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
002844D0   46 5F 4D 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   F_M_M.AMB.......
002844E0   47 5F 5A 4F 4E 45 46 2F  4D 41 50 2F 5A 4F 4E 45   G_ZONEF/MAP/ZONE
002844F0   46 5F 4D 5F 56 2E 41 4D  42 00 00 00 00 00 00 00   F_M_V.AMB.......
00284500   47 5F 5A 4F 4E 45 46 2F  4D 41 50 46 41 52 2F 5A   G_ZONEF/MAPFAR/Z
00284510   4F 4E 45 46 5F 4D 41 50  46 41 52 2E 41 4D 42 00   ONEF_MAPFAR.AMB.
00284520   47 5F 5A 4F 4E 45 46 2F  44 45 43 4F 2F 44 45 43   G_ZONEF/DECO/DEC
00284530   4F 5F 5A 4F 4E 45 46 2E  41 4D 42 00 00 00 00 00   O_ZONEF.AMB.....
00284540   2F 62 62 2F 67 6D 73 74  61 67 65 2E 62 62 00 00   /bb/gmstage.bb..
00284550   47 5F 53 53 2F 4D 41 50  2F 53 53 31 5F 4D 41 50   G_SS/MAP/SS1_MAP
00284560   2E 41 4D 42 00 00 00 00  47 5F 53 53 2F 4D 41 50   .AMB....G_SS/MAP
00284570   2F 53 53 5F 4D 2E 41 4D  42 00 00 00 00 00 00 00   /SS_M.AMB.......
00284580   47 5F 53 53 2F 4D 41 50  2F 53 53 5F 54 2E 41 4D   G_SS/MAP/SS_T.AM
00284590   42 00 00 00 00 00 00 00  47 5F 53 53 2F 4D 41 50   B.......G_SS/MAP


Guys, if someone has NPDRMs to test please upload it. Thanks.

Uploaded my new stuff: NPDRM, SYSCON, HV exploit from GameOS and other thinsg.

With NPDRM payload you won't be able to decrypt all NPDRMs.

I 'm already able to decrypt dev_flash by using HV calls only.

HV uses ENCDEC device to do storage device encryption/decryption. I'm currently working on reversing of this peripheral. I have full HV access now and can control it So expect more nice stuff in the future

And thanks for all NPDRMs, guys. I will test them and will let you know which one decrypted.

Guys and be careful with store_file_on_flash.c and replace_lv2.c payloads. With store_file_on_flash.c i'm able to store a new file on FLASH memory where CORE OS files are stored from PUP. If you do not know what that means then don't play with this, it could brick your PS3, but it's safe to use when you know what you do.

With both of those payloads i'm able to boot a patched lv2_kernel.self from FLASH without flashing PUP, i just store a second lv2_lernel.self on FLASH, then patch System Manager in HV which is reponsible for booting GameOS and boot custom LV2 kernel from 3.41. You don't need NOR flasher if something goes wrong, just reboot HV and your original lv2_kernel.self will be booted again

The same way you could boot lv2_kernel.self from dev_flash. Just patch path to lv2_kernel.self in System Manager and point it to lv2_kernel.self stored on dev_flash

Theoretically, yeah, you could run what ever OS you want It has just to support Cell arch Today i will try to boot PS2 soft EMU instead of LV2 kernel. Linux would be nice of course and it would have all the rights of GameOS.

I'm reversing currently HDD, BD and FLASH encryption/decryption, trying to understand how HV does it. The key to understanding of it is the ENCDEC peripheral device which i'm currently working with. As soon as i have some good results which can be used by other developers i will make it public and let you know. Are you also reversing this part of HV currently ?

Booting PS2 EMU didn't work, i could boot ps2_emu.self but the screen was black. PS2 Soft EMU ps2_softemu.self didn't boot at all, HV shuts down. You have to patch also LAID in System Manager and not only file path or else lv2ldr wont't decrypt the PS2 kernel.

otheros.self is not a kernel like LV2 or Linux, it's gameOS application, you cannot boot it like a OS kernel on PS3. But i see no problems to boot Linux kernel instead of LV2. To boot Linux kernel image instead of LV2 kernel, you have to store Linux image on CORE OS flash, patch GameOD System Manager and point kernel path to Linux image, then patch System Manager so it won't use lv2ldr to load the Linux image, just memcpy Linux image to memory of GameOS.

HV procs cannot read USB devices because there is no USB device driver in HV. USB device driver is implemnted only in gameOS kernel and without some kind of USB device driver in HV there is no way to boot a LV2 kernel from USB. I can only boot LV2 kernel from CORE OS flash or dev_flash."




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 23 Comments - Go to Forum Thread »

Quick Reply Quick Reply

  • Decrease Size
    Increase Size
  • Wrap [QUOTE] tags around selected text
PS3 News's Avatar
#23 - PS3 News - 79w ago
Reply
This is quite an old thread so I will close it, but you may want to check this article/thread if you haven't seen it already: http://www.ps3news.com/ps3-cfw-mfw/guide-to-compile-psn-npdrm-games-for-ps3-custom-firmware/

tranvanthien's Avatar
#22 - tranvanthien - 79w ago
Reply
Hi all !

Please make eboot patch 3.41 for resident evil 4 psn eu or us verion. i've already have patch for JPN version. thanks a lot. Could you tell me how to decrypt npdrm eboot?

BackHome's Avatar
#21 - BackHome - 122w ago
Reply
It would be nice if the Linux kernel could be patched to provide a GameOS like interface to Games.

This would make PS3 just like a Windows PC, running games!!

aries2k6's Avatar
#20 - aries2k6 - 122w ago
Reply
Great work Graf. It would be great if we could get all those updates going.

Thanks for all your efforts on the ps3.

PS3 News's Avatar
#19 - PS3 News - 122w ago
Reply
I have now updated the first post with Graf_Chokolo's NPDRM Decryption Payload and PS3 GameOS Hypervisor exploit news as well.

Page 1 of 5 12345›LAST »

Related PS3 News and PS3 CFW Hacks or JailBreak Articles

• PSPMinis / PS3Minis / Bite v1.5.1 Update for PS3 is Now Released
• PS3 Fan Control Utility v1.7 for PS3 CFW CEX 3.41 to 4.41 Arrives
• PSPMinis / PS3Minis / Bite v1.5 for PS3 with PSP Homebrew Support
• PS3 Fan Control Utility v1.6 for PS3 CFW CEX 3.41 to 4.40 Arrives
• OpenSCETool (OSCETool) v0.9.2 By SpacemanSpiff for PS3 is Released
• PUAD GUI v1.5 - PS3 PUP Unpacker, Repacker and Decrypter Out
Affiliates  NewsNow  Privacy  PS3 CFW & MFW  PS3 Hacks & JailBreak  PS3 Reviews  PS3 Videos  © 2013 PlayStation 3 News

PlayStation 3 Links

• Contact Us E-Mail
• PS3 Affiliates
• PS3 CFW & MFW
• PS3 Debug Firmware
• PS3 Decrypted PSN Links for CFW
• PS3 Downloads
• PS3 EBOOT.BIN Original File Links
• PS3 Firmware
• PS3 Game Releases List
• PS3 Guides & Tutorials
• PS3 Hacking Guides and Tutorials
• PS3 Hacks & JailBreak
• PS3 Help & Support
• PS3 JailBreak Game Compatibility List
• PS3 JB2 / True Blue (TB) Game Links
• PS3 multiMAN Updates
• PS3 News Forums
• PS3 News Site FAQ
• PS3 News Site Advertising FAQ
• PS3 News Site Posting FAQ
• PS3 News Site Privacy FAQ
• PS3 News Site Rules
• PS3 News Site Tag Cloud
• PS3 News Site Terms
• PS3 Resources
• PS3 Reviews
• PS3 Save Files Repository
• PS3 Themes
• PS3 Trophies List
• PS3 Videos
• PS Vita Trophies List

PlayStation 3 News Discussions
PS3 Unbricking and Downgrading Service - 26m ago

racer0018's Avatar
Quote I will offering dual booting mods for ps3 nands. I will do this by soldering in two more nands. Thanks....
By racer0018 with
 685 Comments »
Introductions: Hello Everyone, I'm New at PS3News.com! - 26m ago

braindammage's Avatar
Quote thx for the great info...
By braindammage with
 6990 Comments »
Introductions: Hello Everyone, I'm New at PS3News.com! - 3h ago

mcdeleonjr's Avatar
Quote Hello!...
By mcdeleonjr with
 6990 Comments »
GTA IV for Rogero 4.40 - 4h ago

Azrial's Avatar
Quote Game works fine via MultiMAN....
By Azrial with
 6 Comments »

Latest PlayStation 3 Trophies
 PixelJunk Monsters : Encore : Zero Carat
 PixelJunk Monsters : Encore : Wishing Well
 PixelJunk Monsters : Encore : Scrooge's Return
 PixelJunk Monsters : Encore : Black Flag

Latest PlayStation Vita Trophies
 Jacob Jones and the Bigfoot Mystery : Low Notes
 Jacob Jones and the Bigfoot Mystery : Unjammed
 Jacob Jones and the Bigfoot Mystery : Low Roller
 Jacob Jones and the Bigfoot Mystery : Quick Packer

Latest PlayStation 3 Releases
Muvluv Alternative Total Eclipse JPN PS3-HR - 05-17-2013
Skate 2 EUR PS3-Googlecus - 05-16-2013
The Walking Dead A Telltale Games Series PS3-COLLATERAL - 05-15-2013
The Cube PS3-ANTiDOTE - 05-14-2013

Latest PlayStation 3 Themes
 Wolverine Origins PS3 Theme - 05-19-2013
 Heavy Rain (Official) Dynamic PS3 Theme - 05-09-2013
 Wipeout HD Fury Dynamic PS3 Theme - 05-06-2013
 Batman Arkham City Dynamic PS3 Theme - 05-04-2013