ultimovampiro escribió:No me creo que convierta un backup de PS2 a self y la PS3 se lo coma sin mas. La PS3 no ejecuta software de PS2 desde el disco duro, solo software de PS3. Es un fake claro y torpe. No va a salir ese Hello World, mucho menos un CF de todo esto.
en ningun momento dice nada de ningun backup....
lo que dicen es que pueden convertir un elf en un self y que gracias a un agujero de seguridad pueden ejecutar el self sin que se compruebe la firma.....
Momentan arbeiten wir verstärkt mit SELF Dateien. Hier mal ein paar unserer Ergebnisse:
0x0C - offset to last 4 bytes of unknown 20 bytes
0x10 - offset of encrypted and/or compressed elf
0x18 - length of decompressed elf
0x30 - offset of elf duplicated headers
0x40 - offset of elf segment header table
0x48 - start of encryption/compression offset and length data
0x50 - possibly offset to specifying whether elf is encrypted?
0x58 - possibly offset to whether header data is encrypted?
0x90 - usually start of duplicated elf header
(offset at 0x58) + 0x40 - 20 bytes are always the same (627CB1808AB938E32C8C091708726A579E2586E4), possibly public key?
(offset at 0x58) + 0x54 - sha1 hash of decompressed and/or decrypted elf
(offset at 0x58) + 0x70 to (offset at 0x10) - possibly a signature of elf
Each elf header is duplicated, once in the self header, and once at the beginning of the encrypted file
The segment header table is neither encrypted nor compressed. Although you can't modify it as you can't rehash the file.
The encryption/compression offset and length data in all non compressed elf's seems to be in the format:
00000000xxxxxxxx00000000yyyyyyyy
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
This is repeated for all the parts of the elf. xxxxxxxx is the offset, and yyyyyyyy is the length from the offset.
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz is whether that part is encrypted and/or compressed. we have these so far:
00000002000000000000000000000001 - compressed and encrypted
00000001000000000000000000000000 - unknown
00000001000000300000000000000001 - neither compressed nor encrypted (segment header table)
001E0001000000000000000100000000 - unknown (warhawk beta updates)
00210001000000000000000100000000 - unknown (resistance EBOOT.BIN)
00000001000000000000000000000002 - neither compressed nor encrypted (warhawk debug .self)
00000001000000000000000000000001 - encrypted but not compressed
There are exceptions to this in otheros.self and updater.sce (which are both compressed), but for most other .self's it is true.