Graf Chokolo Releases his SELF decrypter payload!

[The Central Scrutinizer]

Graf_Chokolo, the HV master has done it again, he has now released his custom PSGroove payload that allows you to decrypt a SELF and send the results over the network port to your PC.

graf_chokolo says:
December 3, 2010 at 6:25 am

Guys, i promised to you to make my SELF decrypter public. I just uploaded it :-) Let me first explain how it works.

I used only HV calls in my code because i wanted to learn how to decrypt SELFs without GameOS. The decryption and decompression of SELFs is done by isolated module appldr which is prepared and loaded by lv1_undocumented_function_99. After appldr is loaded it sends a message and waits for your instructions to decrypt some encrypted segments. When the message arrives i pass encrypted segment data to appldr through shared memory and it decrypts the passed data. When the decryption is done the payload sends the decrypted data over network to my PC and i capture it with tcpdump :-)

I’m using IDA to analyze the decrypted code. First i extract the decrypted segments from pcap dump and load them at right addresses into IDA. I created a shell script to make segment extraction from pcap dumps easier. Virtual addresses of decrypted segments you will find in ELF header.

The target group of this release are again advanced programers among you. The goal of this release is not to give you a tool for SELF decryption but to show you how it can be done :-) So, feel free to ask me any questions about my code. I will support everyone who wants to port my code and create more user-friendly GameOS applications for SELF decryption because i do not intend to write any GameOS tools :-) I’m more interested in HV reversing :-)

My SELF decrypter is not able to decrypt games and NPDRMs yet but i’m working on it :-) I think you will have enough SELFs now to reverse :-)

graf_chokolo says:
December 3, 2010 at 6:28 am

I will document my findings about SELF decryption on my HV page in the next days.

News Source: https://github.com/grafchokolo/psgroove

[flare]

This is beautiful, thank you Graf. Ill get to this within the hour. Good luck with the project, and have fun

[trippingballs]

this is music to ears all around the world

thanks grafchokolo for frying his brain, and thanks to gary for being a top notch bastard and making this place my new homepage

[A$h x]

So this would be able to decrypt the 3.50 firmware package correct? This will hopefully put the scene in a better position to combat whatever counter-measures sony puts in place.

[theruler]

Graf, thank you!

[Dertyp]

Great work Graf!

[XeviouSV1910]

thanks graf for all your efforts

we really appreciate!

[ZoneTw0]

Thank you! Can someone compile this for iPhone (Just the .bin or .hex) Thanks

[Jon Salat]

If you can't compile the hex then it's probably not for you.

[tulla]

go go Graf, things get more interesting every day