Sponsored Links

Sponsored Links

JaicraB on Cobra USB JIG Protection RTOC Trick for PS3


Sponsored Links
167w ago - Today Spanish PlayStation 3 developer JaicraB has explained the Cobra USB JIG protection RTOC trick implemented for the PS3 against cloning the device.

To quote, roughly translated: Flynn sent me this text explaining this protective carrying the Cobra, I hope it will open the eyes of those interested in reversing the dumps.

EXPLAIN RTOC COBRA TRICK

The JIG Cobra has several protective measures to ensure that your code could not be used correctly even if your code could be dumped.

This trick RTOC in the registry is the first used for this purpose in addition to hinder analysis.
Registration is initially RTOC stored in the battery to keep the RTOC of lv2 and power it back later:

[Register or Login to view code]


At this point we have to explain that the OFFSET DELTA. DELTA OFFSET is a method used in the x86 in its original moments in the creation of computer viruses, to calculate the memory address in which we are in the sea of ​​bytes in RAM.

In the original time a computer virus when I did not know where he was pulled into an executable,
depending on the executable it could be an initial site or another, for it was invented DELTA OFFSET.

DELTA OFFSET can be used in any system, the procedure is:

  • Using the record that indicates the current execution address (or the next depending on the system)
  • Reducing the size of the previous code we use the value obtained from the registry.

Knowing this, and taking for example the x86 processor where the EIP register can not be read directly invented the trick make a call to a "subfunction" which is simply the following line to the call:

[Register or Login to view code]


X86 call instruction saves the top of the stack the address of the next instruction to itself. Thus using pop draw from the top of the stack this value, and stored in eax for example, and having the memory address where we only subtract the above would be missing and we have the exact calculation.

The PowerPC can use this trick using the BL instruction is equivalent (LINK BRANCH), which jumps to a "subfunction" but before you save LR in the record the following address to BL.

[Register or Login to view code]


At this point we see the trick used for the creation of the RTOC of charges at this time. If you look both r0 and RTOC are passed to 0:

[Register or Login to view code]


Subsequently, given the value 0x11DE0 to RTOC:

[Register or Login to view code]


A r0 is given the value 0x920:

[Register or Login to view code]


R0 is subtracted from the value of RTOC:

[Register or Login to view code]


Unlike the PowerPC x86 LR register can be read directly with mflr instruction, we put in RTOC the value obtained by the delta offset:

[Register or Login to view code]


To calculate the delta offset subtract final instructions executed before the delta offset, which were 4, or 16 bytes:

[Register or Login to view code]


Finally we add the value of r0 at the end of the delta offset RTOC, storing the result in the RTOC and this already takes RTOC suitable for this hook:

[Register or Login to view code]


It takes having the RTOC stored in the stack 3 arguments that the hook received:

[Register or Login to view code]


You call the function of the charges where the first argument will check for command 0x8202 (a special command to the usual):

[Register or Login to view code]


After making the necessary steps as charged, the battery recovers the original RTOC, like the arguments the hook received, it executes the original instruction that was overwritten in the syscall entry 379 (in this case) to have our hook, and call the original syscall lv2:

[Register or Login to view code]


Upon returning to retrieve the original LR from the stack and returns to the prompt

[Register or Login to view code]





Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 714 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

PS3 News's Avatar
#714 - PS3 News - 2w ago
10 - 9 - 2014: Cobra ODE News - Information

Team Cobra can now confirm that all Cobra ODE versions (v3/v4 and v5 hardware) are functional on OFW 4.65 whilst using Cobra 2.2 fw on 4k series consoles.

10 - 9 - 2014: Cobra ODE News - Information

Pictured below is the new DMC module for PHAT PATA, SATA PHAT, 2k, 2k5 and 3k consoles which enables use of all versions of Cobra ODE (3.xx/4.xx and 5.xx) on 4.60 OFW. A swap disc is required in line with current usage of Cobra ODE on OFW 4.60 and 4k consoles.


The DMC module has an Actel FPGA on board which controls the optical lens' units disc eject motor, thus enabling us to insert and remove discs without detection by the drive controller. The onboard FPGA is linked to a USB PHY which enables full reprogramming of the FPGA at any time via USB connected to your PC.

The Cobra DMC connects to the Cobra ODE (all models) via the JTAG 24 pin FFC port on the Cobra ODE and the "main" port on the Cobra DMC. All necessary cables are included.

The Cobra DMC can be mounted adjacent to the optical drive of your PS3. The module then connects to the eject motor inside your drive, without soldering via FFC cables.

The suggested retail price of the Cobra ODE DMC is USD 29.99 or less.

First shipments of Cobra DMC will be with resellers by September 30th latest. Please pre-order early to avoid disappointment.

The 5.1B and 5.3A Cobra ODE devices can also be purchased bundled with the DMC module for 20 USD extra approximately.

The Cobra Team is now testing the recently released 4.65 OFW to confirm compatibility, verification results will be posted soon.

Notes:

  • 4k consoles - CAN RUN BACKUPS ON OFW 4.60/4.65 WITHOUT THE DMC - BUT IT NEEDS THE SWAP DISK.
  • FAT, SLIMS 2K, 3K - THEY CAN NOT WORK ON OFW 4.60/4.65 (BACKUPS WILL SHOW ERRORS) UNLESS YOU BUY THE NEW DMC MODULE AND YOU WILL NEED A SWAP DISK. IT'S HIGLY RECOMENDABLE THAT YOU STAY ON OFW 4.55 - NO SWAP NEED
  • COBRA FIRMWARE - ALL USERS, REGARDLESS OF THEIR PS3 MODEL CAN UPDATE TO LATEST COBRA (PCB) (version 2.2) FIRMWARE AND ENJOY NEW FEATURES - WITHOUT THE SWAP DISK.
  • UNLESS THAT THEY UPDATE TO OFW 4.60/4.65 FOR FATS AND SLIMS 2K AND 3K, OR IF YOU OWN A 4K AND UPDATED TO 4.55 OR 4.60/4.65 YOU WILL ALSO NEED THE SWAP DISK.
  • You will just need DMC and swap disk ONLY ON older consoles (FAT, SLIMS 2K, 3K ) if you update to 4.60 or 4.65.

HCL - Humble Cobra Laucher v0.4 by Roor

Download: [Register or Login to view links]

Hi. As promised (again), here's the fourth weekly update of HCL (Humble Cobra Launcher).
This week I didn't have much spare time, and couldn't dedicate more than a couple of hours... so there's little I was able to add to HCL.

And I had even less time for beta-testing... I hope no "big" bugs were left in this version. Sorry for that...

HCL is a Cobra ODE manager. If you want to use it, just replace the original "cobra manager" (manager.iso) and make sure that your "cobra.cfg" is already set to use homebrew.

Here are the most important changes in this version (HCL V0.4):

  • Improved PKG Installer. Now you can install "cracks" and other stuff. Please read below for further info.
  • New Emulators Section. Here I will be adding emulators for different systems, so you will be able to run ROMS from any USB Stick.
  • NES/Famicom Emulator. I included a NES Emulator (Fceu), just select it from the "emulators" section, then just "browse" and select your .NES rom.
  • SNES/SuperFamicom Emulator. I included a SNES Emulator, just select it from the "emulators" section, then just "browse" and select your .SMC rom.
  • Sega Genesis Emulator. I included a Genesis/Megadrive Emulator, just select it from the "emulators" section, then just "browse" and select your .GEN rom.
  • Alternative Installation. If you do not want HCL to put stuff inside your internal HDD, you can place a USB stick into the zero USB Slot (the one to the right). If HCL detects a file named "hcl.cfg" inside it, it will use the Stick for storing datafiles instead.

Coming features (in following weekly updates):

  • Disc Ripper (present right now, but seems that doesn't work in ALL Cobra ODE, I'm still investigating the issue).
  • Better PKG Installer (support for game updates and DLC installs)
  • Param.sfo Viewer.
  • Image Viewers.
  • Better and more Emulators.
  • Sound Effects.

About EMULATORS:

I can't take credit for the emulators nor for Elleganz, nor for the bugs they may carry.
I'll try to make sure that HCL gets the best version available for each, and of course that they run fine with Cobra ODE.

I noticed, for example, that the "font size" for the NES one is "extremely" small, and so...
I'll try to work our these issues for next version, and "recompile" and modify the emulators from their latest source if necessary.

About PKG INSTALLER:

  • PKG Installer, for now, only allows you to install Games, Demos, Homebrews, and others. But it WILL NOT allow you to install Game Updates nor DLCs (nor PS1 games, nor PS2 games... ONLY PS3/PSN GAMES); Although now you can "overwrite" folders and files in order to install DLC, or cracks; HCL will tell you and ask if you want to "overwrite stuff". Take into consideration that everytime you overwrite something there's a chance you "break" the previously installe game.

  • The INSTALLER does not "crack" the games for you. Most PSN content, if not cracked before install, will just run in "demo mode" or not run at all.

  • The INSTALLER will NOT install PS1, PS2 classics content and others (only PS3 GAMES); this kind of packages cannot be installed with HCL yet (they might have crash HCL).

  • After installing a PKG, you need to enter into GAMEDATA TOOL menu of PS3, this will force XMB menu to update, and then it will display the icon to the stuff you just installed.

  • If you want to add more files to an already existing installation, I suggest to use the File Browser and copy the files as needed.

Please write feedback.

Cheers.

How to Update Cobra ODE VER 05.10B (v5p10B10.spi) Tutorial by alzaabi

This is only for Cobra Ode VER 05.10B with the chip of (v5p10B10.spi) By ALZAABI as the image shows...



After testing and testing several times, and i am sure of these steps to FIX

1- for those who could not update to FW2.2
2- for those who get errors when using swap disk

Try to update your Cobra Ode twice...

Download: [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links]

OR download from the attached files... You Should have a good flash drive... if you follow these steps you will be able to update your Cobra Ode with this chip (v5p10B10.spi) successfully without and problems and you will be able to play games without errors.

*Disconnect your ps3 from the Power and put the updates one by one... every update should finish with green Led... when it finish with green Led put the next update... and so on

1- FW_2.0(v5p10B10.spi)
2- Defective_Boards_Update_File(v5p10B10.spi)
3- v2.2_FIXED2(v5p10B10.spi)

Try to update your Cobra Ode twice with the steps above. When you turn on your PS3 with the correct setting in your HDD you will see Cobra Browser 2.2, and you will get rid of the errors

just, thank me.

evilpacer's Avatar
#713 - evilpacer - 2w ago
Hi, Is it possible with CFW Creator to generate a 4.65 MFW as a Firmware DB, with a cobra ode patch?

Like a merge with [Register or Login to view links] and [Register or Login to view links]

With:

Disabled ECDSA in LV0 loaders (Isoloader).
Disabled ECDSA in SPU PKG (spu_pkg_rvk_verifier).
No function for CFW'S enabled. So, no nothing Homebrew and Backup.
No QA FLAG Enabled.
Possible Downgrade.
Size of the PUP almost identical to that of OFW 4.65.
PATCHED LV2 TO DISABLE 4.60 ANTI-ODE MEASURES (NO SWAP DISC REQUIRED)

I'm sorry for my bad english
Thanks

makemind's Avatar
#712 - makemind - 2w ago
Hi guys, i'm new to this world and a friend has told me that i need showtime ...

How can i install it on mine PS3? What more can i install on it?

Thanks a lot

ABEDROOF's Avatar
#711 - ABEDROOF - 3w ago
i'm asking if i can use mfw to play on cobra ode with out swap disc ?

saito1234's Avatar
#710 - saito1234 - 3w ago
I'd like to install the 1.01 patch for Mugen Souls Z, which is a very important fix, otherwise the game freezes in different places.

After I install the patch for EUR version the game boots up, but I can't do anything, as an XMB system message comes up "You have to quit a game".

I also have the Japanese version of the game, and the japanese 1.01 patch, if I install that there's only a "black screen", while with the english patch at least there's an error message, though the difference isn't big.

Without installing the patch both versions work fine, while after installing the patch both of them are unplayable.

I heard this problem ONLY occurs on Cobra CFW (Rogero, Habib, etc.), and it works fine on "normal" CFW.

Does anyone have any idea if it's possible to fix it on Cobra?

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News