[ben.ss7]

Hi,
I have been wondering and researching on this forum on how to extract the encrypted loaders such as (lv1ldr,lv2ldr,isoldr) from lv0.elf. I haven't been successful so I thought I would ask the experts. How can I extract the encrypted loaders from lv0.elf?

[xxmcvapourxx]

You need to split the lv0 into 6 parts and then use scetools find the gui version to find out what ones are the following appldr,isoldr,lv2ldr Hope that help's then you got to reverse engineer using IDA pro Look on ps3devwiki that will help you out more!!

[ben.ss7]

Hi,

Thanks for the help, but i don't quite understand what you mean by 6 parts could you please care to explain in more detail?

[enosrasun]

Originally Posted by ben.ss7 Hi, Thanks for the help, but i don't quite understand what you mean by 6 parts could you please care to explain in more detail?

in lvo there are loaders encrypted

with a hex editor find this SCE
and then search down one more until you will find again SCE ,before than your encrypted loader end,, save it and decrypt it with scetool

[ben.ss7]

thanks for your reply, what shall i save the output filename as and what file type shall i save it as?

[enosrasun]

Originally Posted by ben.ss7 thanks for your reply, what shall i save the output filename as and what file type shall i save it as?

filename ..... what you want
type ........ .self (secured elf )

[ben.ss7]

so that file will contain all the loaders or only one of them and then i will decrypt with scetool using metldr keys?

[ben.ss7]

Hi,

I have been able to extract all the loaders lv2ldr isoldr appldr and the .2 loaders for them 3 but I cant extract lv1ldr. Could someone teach me how to extract lv1ldr. I used the SCE technique through hex edit but there isn't an lv1ldr???

[tjhooker73]

Originally Posted by ben.ss7 Hi, I have been able to extract all the loaders lv2ldr isoldr appldr and the .2 loaders for them 3 but I cant extract lv1ldr. Could someone teach me how to extract lv1ldr. I used the SCE technique through hex edit but there isn't an lv1ldr???

You may need to add some keys to the tool
Here are the keys: http://www.ps3hax.net/showthread.php...989#post474989

[r07f1]

@ben.ss7

hey...
Simple algo...

1 - parse unencrypted lv0 like with a step of 0x4 bytes
2 - If magic == SCE_MAGIC read header (to find ldr size)
3 - Extract it

Oh and btw the ldr name can be found by looking @ the auth id...

http://www.ps3devwiki.com/wiki/SELF_...and_Decryption

and have a look @ f0f ps3tools