PS2 HDD Support & Discless ELF Launching from PS3 XMB WIP


175w ago - Here is my WIP project on PS2 HDD support and discless ELF launching from the PS3 XMB. First off I'd like to thank w1zard0f07 for being able to at least try helping me out with this one.

Over the last month or so I have been working on a little trick for the Phat Model PS3s. In summary FFXI is PS2 title that requires PS2 HDD support which is added via this pkg ([NPIA00001] PS2 System Files).

From there a "PS2 partition is made", which translates to an IMAGE.DAT file being made to exactly 12GB (according to GameOS/FTP this file is 0kb large)

The contents of this HDD is listed in the attached "Blank PS2 HDD.txt" (The partition list is corrupted according to w1zard0f07, quote "APA partition table on your dump file is broken")

The XMB icon is not launchable by this point, and requires the PlayOnline Viewer to be installed. This undergoes a certificate process, and then continues to install PlayOnline viewer to the "PS2 HDD." It is after this point the XMB icon is launchable, and goes straight into the PS2 mode reading from PP.SCUS-97269.1000.POLVIEWER and launching "dnasload.elf" (Unfortunately access is denied to that partition due to some sort of key being used... I haven't done any research on it)


Currently I am doing my best to replace atok100.erx (an elf file it appears) with ULaunchELF, but something is also going wrong...

Anyways, if any one wants to help, or offer help, please do! (It all compresses to 95MB if anyone is interested in the IMAGE.DAT (PM me)... but only for those genuinely interested in doing the research)

IMAGE.DAT Content (Blank)


IMAGE.DAT Content (With PlayOnline/FFXI)


NOTE: Although initially FFXI was required to do the research, I do not believe it is necessary to continue, because the param.sfo and image.dat created should be "pkg compatible", also the "CATEGORY" is "2G" btw.

Also, that if a proper PKG were created with that param.sfo and IMAGE.DAT for "SLUS20071", it would add native HDD support to "Swap Magic Coder 3.8", which is able to launch any elf it desires, including just released OPL 0.8.




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 40 Comments - Go to Forum Thread »

Quick Reply Quick Reply

NTAuthority's Avatar
#5 - NTAuthority - 175w ago

First 130 bytes of IMAGE.DAT



That looks like a raw image... if there's any PC apps capable of reading a PS2 HDD's filesystem you might be able to do more with it than when trying to access it from PS2 applications (at least, I think the 'ps2hdd: PS2 APA Driver v1.1 (c) 2003 Vector' is a PS2 application, and that might be why certain partitions give a 'permission denied' error).

However, if it's actually a PC application, 'permission denied' might be some directory index not being read properly, but you'd need to check the source code of the application to find out what it actually is... I'd like to have the image so I could mess around with the partition index in it.

Haksam's Avatar
#4 - Haksam - 175w ago
more great news thanks!!

is this the same method as luckluka's?

hacked2123's Avatar
#3 - hacked2123 - 175w ago
One thing I'm wondering even more is how the XMB icon launches the PS2 'emulator' directly. Is it installed in the usual GAME folder? What files are in there? And is the 'PlayOnline Viewer' a program installed from the FFXI PS2 disc? I'm also wondering if (if NPDRM SELFs are already able to be decrypted) an existing SELF (if it doesn't use magic from the VSH) would contain strings to launch the specific PS2 emulator.

On-topic however, does the 'encrypted' image file start with any seemingly-useful header?

Well it works with the param.sfo categorizing it as 2G, which is "Playstation 2" in the XMB, and it gains its own blue icon. From there launching it is probably built into the XMB and it launches PS2emu.self, which loads IMAGE.DAT, and looks for "Your Saves" and finds BASCUS-97269POL, which tells the system it wants PP.SCUS-97269.1000.POL*/system.conf, which tells it to launch dnaloads.elf. All of this being speculation unfortunately...

PlayOnline Viewer is "Disk 2", in a matter of speaking, for Final Fantasy XI. There is only "/SLUS97269/PARAM.SFO", "/NPIA00001/PARAM.SFO", "/NPIA00001/USRDIR/IMAGE.DAT", and "/SLUS97269/USRDIR/IMAGE.DAT", so there is no NPDRM. I don't think anything is really encrypted per say either... not as extensively as the PS3 stuff is at any rate.

First 130 bytes of IMAGE.DAT



I'll link a youtube vid either tomorrow or Friday.

PS3 News's Avatar
#2 - PS3 News - 175w ago
I have now moved your WIP project to the main page and +Rep hacked2123. Long live the SuperSwapMethod too!

NTAuthority's Avatar
#1 - NTAuthority - 175w ago
One thing I'm wondering even more is how the XMB icon launches the PS2 'emulator' directly. Is it installed in the usual GAME folder? What files are in there? And is the 'PlayOnline Viewer' a program installed from the FFXI PS2 disc? I'm also wondering if (if NPDRM SELFs are already able to be decrypted) an existing SELF (if it doesn't use magic from the VSH) would contain strings to launch the specific PS2 emulator.

On-topic however, does the 'encrypted' image file start with any seemingly-useful header?













Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News