True Blue PS3 JailBreak 2 (JB2) Payload is Released for Free!

Category: PS3 Hacks & JailBreak  By: VenomusX - (ps3devwiki.com)
Tags: true blue payload true blue ps3 payload jailbreak 2 payload jb2 payload jb2 ps3 hacks

84w ago - Previously we reported that the PS3 JB2 True Blue Dongle was being reverse-engineered, and on this memorable day (11/11/11) PlayStation 3 scene developers have now released the True Blue PS3 JailBreak 2 Payload for free alongside an UnPKG'd / UnSelf'd version of the JB2 Dongle Updater PKG!

Download: True Blue PS3 JailBreak 2 (JB2) Payload / True Blue PS3 JailBreak 2 (JB2) Payload (Mirror) / True Blue Dongle Updater PKG / Plaintext Visible in the UnSelf'd EBOOT.BIN / True Blue Dongle Update 2.1 Disassembled by chazz

True Blue PS3 JailBreak 2 (JB2) Payload 2.1

SHA1: 43402D6FE2ECE43EBE91531EFA07C366D46DD121
MD5: BA5AFAB174BF6003D41AC8951301B822
CRC32: 248284D2
CRC16: 8C78

True Blue PS3 JailBreak 2 (JB2) Dongle Updater PKG 2.1

SHA1: 4066FFEFD723FAF08EB84A62F4AA38180C40129C
MD5: 0200689D58FCA0FC51F7B738C33A5DC9
CRC32: 4D72836
CRC16: 8A62

Plaintext visible in the UnSelf'd eboot.bin: http://pastebin.com/EFQczE2r (interesting note: it used /dev_hdd0/vsh/tmp.bin as temp for the payload)

PS3 JB2 True Blue Payload 2.1

located in unself'ed eboot.bin @ offset:

eboot      payload
  Offset(h)  Offset(h)  00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
  000084F0   00000000  09 02 12 00 01 00 00 80 FA 09 04 00 00 00 FE 01  .......��.�.
    ... 
  002084E0   001FFFF0  EB 3B 01 F7 6F A9 CF 3C B6 EB 89 82 7D E6 7D 3B  ë;.�<�뉂}æ};
For those who missed it, the PlayStation 3 JailBreak 2 (JB2) Pin-Outs and Schematics were also made available recently, and PS3 developers (some of whom already have the PS3 3.72 Keys) admit it won't be long before the dongle is completely reversed.

PS3 System Software

MFW 3.55-Dongle (Jailbreak2.CFW)
filedate: juli 13 2011 2:08:58
174639 KB
MD5: 43C522F8897D77B6165F95BCF3409090
SHA1: A64B010DB98996C7E53768D37D4D346F271D5950
CRC32: A32FDD1D
CRC16: 6420
HMAC_SHA1: 0x88EF9FEB9BB80ABE7CF68EB3BD76148F7AD6230C
Remarks: Needs JB2 dongle as DRM

PUP File Information

Package version: 1
Image version: 47517
File count: 7
Header length: 528
Data length: 178829542
PUP file hash : 88EF9FEB9BB80ABE7CF68EB3BD76148F7AD6230C
File 0
Entry id: 0x100
Filename : version.txt
Data offset: 0x210
Data length: 13
File hash : 8E533875E1B43B6CBAF5E91663EB7554107B5509
File 1
Entry id: 0x101
Filename : license.xml
Data offset: 0x21D
Data length: 267513
File hash : B77EFE54859738385DD803E88FB5E807FF1BC6AB
File 2
Entry id: 0x103
Filename : update_flags.txt
Data offset: 0x41716
Data length: 5
File hash : FD7C893936FDFC668922BE6D119A462111B2BBDB
File 3
Entry id: 0x200
Filename : ps3swu.self
Data offset: 0x4171B
Data length: 5661656
File hash : C61DDE12E75C2218214700D7D49006583F1B968B
File 4
Entry id: 0x201
Filename : vsh.tar
Data offset: 0x5A7AF3
Data length: 10240
File hash : D9B66E0D2845D71A67D76E7907AB06368CE61E08
File 5
Entry id: 0x202
Filename : dots.txt
Data offset: 0x5AA2F3
Data length: 3
File hash : 1AA4749D0EE0D0AE937FBF73BC4B9ACD352F732A
File 6
Entry id: 0x300
Filename : update_files.tar
Data offset: 0x5AA2F6
Data length: 172890112
File hash : 93A7A95BFCFC263DCB4A18477062FDCC72BE47A0
Upon examination by PS3 scene developers, the True Blue JB2 dongle appears to be (as suspected) using PS3 Debug EBOOT files which allow newer Firmware games to run on PlayStation 3 3.55 Custom Firmware with the JailBreak 2 Payload essentially being an NPDRM Debug EBOOT file.

The UnSelf'd EBOOT.BIN Visible Plaintext reads as follows: "After the process has completed, your PS3 will be running system software version 3.55. After the update, your PS3 will have new features available and will retain compatibility with all previous software, however, you will be unable to revert either your PS3 or the dongle to an earlier software version"...

This appears to be a warning to those seeking to change PS3 Custom Firmware versions, however, as an interesting note from the Wiki (linked above) it used /dev_hdd0/vsh/tmp.bin as temp.

Although there is more work to be done, including dumping newer JB2 versions with PS3 HDD and Blu-ray support and decrypting the Actel Chip's True Blue 2MB Payload so that it can be ported to other devices, calculators, phones and older USB dongles as PSJailBreak (via PSGroove) and PSDowngrade (via PSGrade) were it shouldn't be long with the combined effort of talented PS3 scene developers.

Update: The LV2 dump payload at 0x7f0000 has now been decrypted for those following!

lv2 dump (2.1)

payload decrypted @ LV2 dump 0x7f0000

http://pastebin.com/3VG76HQs

descriptors (2.1)

Start Offset 	End Offset 	descriptor 	Description
00000000 	00000FFF 	0x0 	3.41
00001000 	00001FFF 	0x1 	3.41
00002000 	00002FFF 	0x2 	3.41
00003000 	00003FFF 	0x3 	3.41
00004000 	00007FFF 	0x4 	
00008000 	00008FFF 	0x5 	
00009000 	0000BFFF 	0x6 	
0000C000 	0000CFFF 	0x7 	
0000D000 	0000DFFF 	0x8 	
0000E000 	0000FFFF 	0x9 	
00010000 	00013FFF 	0xA 	
00014000 	0001BFFF 	0xB 	
0001C000 	0001C00F 	0xC 	
0001C010 	0001C01F 	0xD 	
0001C020 	0001C03F 	0xE 	
0001C040 	0001C05F 	0xF 	
0001C060 	0001C06F 	0x10 	
0001C070 	0001C07F 	0x11 	
0001C080 	0001C09F 	0x12 	
0001C0A0 	001FFFFF 	0x13
000A1A80 	000B039F 	0x14 	
000B03A0 	001736FF 	0x15 	
00173700 	00189D5F 	0x16 	
00189D60 	001FFFFF 	0x17

descriptor 0x0
  00000000  09 02 12 00 01 00 00 80  fa 09 04 00 00 00 fe 01  
  00000010  02 00 00 00 00 00 00 00  fa ce b0 03 aa bb cc dd
  ...

  descriptor 0x1
  00000000  09 02 12 00 01 00 00 80  fa 09 04 00 00 00 fe 01  
  00000010  02 00 00 00 00 00 00 00  fa ce b0 03 aa bb cc dd
  ...

  descriptor 0x2
  00000000  09 02 12 00 01 00 00 80  fa 09 04 00 00 00 fe 01  
  00000010  02 00 00 00 00 00 00 00  fa ce b0 03 aa bb cc dd
  ...

  descriptor 0x3
  00000000  09 02 12 00 01 00 00 80  fa 09 04 00 00 00 fe 01  
  00000010  02 00 00 00 00 00 00 00  fa ce b0 03 aa bb cc dd
  ...

  descriptor 0x4
  00000000  09 02 16 00 01 01 00 80  01 09 04 00 00 00 fe 01  
  00000010  02 00 04 21 b4 2f fe b1  b2 11 81 84 f8 81 2e 2f
  ...

  descriptor 0x5
  00000000  09 02 4d 0a 01 01 00 80  01 09 04 00 00 00 fe 01  
  00000010  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000020  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000030  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000040  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000050  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000060  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000070  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000080  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000090  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000000a0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000000b0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000000c0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000000d0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000000e0  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  000000f0  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000100  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000110  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000120  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000130  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000140  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000150  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000160  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000170  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000180  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000190  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000001a0  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  000001b0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000001c0  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  000001d0  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  000001e0  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  000001f0  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000200  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000210  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000220  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000230  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000240  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000250  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000260  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000270  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000280  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000290  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000002a0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000002b0  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  000002c0  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  000002d0  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000002e0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000002f0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000300  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000310  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000320  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000330  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000340  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000350  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000360  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000370  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000380  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000390  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  000003a0  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  000003b0  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  000003c0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000003d0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000003e0  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  000003f0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000400  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000410  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000420  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000430  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000440  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000450  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000460  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000470  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000480  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000490  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  000004a0  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000004b0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000004c0  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  000004d0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000004e0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000004f0  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000500  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000510  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000520  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000530  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000540  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000550  04 00 00 00 fe 01 02 00  00 fe 01 02 00 09 04 00  
  00000560  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000570  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000580  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000590  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000005a0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000005b0  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  000005c0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000005d0  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  000005e0  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  000005f0  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000600  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000610  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000620  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000630  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000640  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000650  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000660  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000670  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000680  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000690  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  000006a0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000006b0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000006c0  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  000006d0  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  000006e0  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000006f0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000700  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000710  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000720  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000730  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000740  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000750  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000760  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000770  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000780  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000790  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000007a0  00 09 04 00 00 00 fe 01  00 00 00 fe 01 02 00 09  
  000007b0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000007c0  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000007d0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000007e0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000007f0  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000800  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000810  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000820  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000830  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000840  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000850  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000860  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000870  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000880  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000890  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  000008a0  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  000008b0  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000008c0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000008d0  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  000008e0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000008f0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000900  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000910  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000920  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000930  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000940  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000950  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  00000960  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  00000970  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  00000980  02 00 09 04 00 00 00 fe  01 02 00 09 04 00 00 00  
  00000990  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  000009a0  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  000009b0  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  000009c0  01 02 00 09 04 00 00 00  fe 01 02 00 09 04 00 00  
  000009d0  00 fe 01 02 00 09 04 00  00 00 fe 01 02 00 09 04  
  000009e0  00 00 00 fe 01 02 00 09  04 00 00 00 fe 01 02 00  
  000009f0  09 04 00 00 00 fe 01 02  00 09 04 00 00 00 fe 01  
  00000a00  fe 01 02 00 09 04 00 00  00 fe 01 02 00 09 04 00  
  00000a10  00 00 fe 01 02 00 09 04  00 00 00 fe 01 02 00 09  
  00000a20  04 00 00 00 fe 01 02 00  09 04 00 00 00 fe 01 02  
  00000a30  00 09 04 00 00 00 fe 01  02 00 09 04 00 00 00 fe  
  00000a40  00 fe 01 02 00 09 04 00  00 00 fe 01 02 88 37 f5  
  00000a50  49 4f df 9c 28 32 2f f0  14 cd 27 47 6a 23 81 75  
  ...

  descriptor 0x6
  0000000 09 02 4d 0a 01 01 00 80 01 09 04 00 00 00 fe 01
  0000010 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000020 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000030 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000040 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000050 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000060 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000070 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000080 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000090 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00000a0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00000b0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00000c0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00000d0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00000e0 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  00000f0 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000100 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000110 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000120 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000130 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000140 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000150 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000160 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000170 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000180 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000190 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00001a0 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  00001b0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00001c0 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  00001d0 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  00001e0 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  00001f0 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000200 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000210 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000220 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000230 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000240 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000250 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000260 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000270 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000280 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000290 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00002a0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00002b0 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  00002c0 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  00002d0 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00002e0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00002f0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000300 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000310 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000320 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000330 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000340 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000350 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000360 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000370 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000380 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000390 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  00003a0 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  00003b0 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  00003c0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00003d0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00003e0 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  00003f0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000400 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000410 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000420 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000430 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000440 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000450 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000460 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000470 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000480 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000490 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  00004a0 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00004b0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00004c0 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  00004d0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00004e0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00004f0 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000500 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000510 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000520 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000530 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000540 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000550 04 00 00 00 fe 01 02 00 00 fe 01 02 00 09 04 00
  0000560 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000570 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000580 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000590 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00005a0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00005b0 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  00005c0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00005d0 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  00005e0 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  00005f0 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000600 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000610 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000620 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000630 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000640 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000650 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000660 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000670 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000680 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000690 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  00006a0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00006b0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00006c0 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  00006d0 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  00006e0 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00006f0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000700 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000710 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000720 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000730 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000740 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000750 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000760 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000770 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000780 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000790 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00007a0 00 09 04 00 00 00 fe 01 00 00 00 fe 01 02 00 09
  00007b0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00007c0 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00007d0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00007e0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00007f0 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000800 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000810 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000820 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000830 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000840 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000850 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000860 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000870 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000880 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000890 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  00008a0 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  00008b0 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00008c0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00008d0 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  00008e0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00008f0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000900 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000910 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000920 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000930 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000940 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000950 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  0000960 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  0000970 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  0000980 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00
  0000990 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  00009a0 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  00009b0 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  00009c0 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00 00
  00009d0 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04
  00009e0 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00
  00009f0 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01
  0000a00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09 04 00
  0000a10 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02 00 09
  0000a20 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe 01 02
  0000a30 00 09 04 00 00 00 fe 01 02 00 09 04 00 00 00 fe
  0000a40 00 fe 01 02 00 09 04 00 00 00 fe 01 02 2e e3 7c
  0000a50 d5 9b 2c 40 0a 02 39 f6 68 6a 15 37 90 2e 38 86
  ...

  descriptor 0x7
  0000000 09 02 12 00 01 01 00 80 01 09 04 00 00 00 fe 01
  0000010 02 00 66 bc a5 34 64 68 d0 6e 31 4c 8e d5 cd 44
  ...

  descriptor 0x8
  0000000 09 02 00 00 01 01 00 80 01 09 04 00 00 00 fe 01
  0000010 02 00 db e9 f4 e4 8b c0 7e 8c 61 47 ab 71 1b 08
  ...

  descriptor 0x9
  0000000 09 02 30 00 01 01 00 80 01 09 04 00 00 00 fe 01
  0000010 02 00 3e 21 00 00 00 00 fa ce b0 03 aa bb cc dd
  ...

  descriptor 0xa
  0000000 09 02 20 00 01 00 00 80 01 09 04 00 00 02 ff 00
  0000010 00 00 07 05 02 02 08 00 00 07 05 81 02 08 00 00
  ...

  descriptor 0xb
  0000000 09 02 35 00 01 01 00 80 32 09 04 00 00 05 fe 01
  0000010 02 00 07 05 04 02 08 00 00 07 05 85 02 08 00 00
  ...

  descriptor 0xc
  00000000  09 02 00 0f 01 00 00 80  09 02 00 0f 01 00 00 80  

  descriptor 0xd
  00000000  09 02 00 0f 01 00 00 80  09 02 00 0f 01 00 00 80  

  descriptor 0xe
  00000000  09 02 16 00 01 01 00 80  23 97 93 9c 54 80 63 58  
  00000010  4d d0 de c2 81 e4 2b 0b  a9 d1 df 8b a6 86 03 3e  

  descriptor 0xf
  00000000  09 02 4d 0a 01 01 00 80  09 02 4d 0a 01 01 00 80  
  00000010  c4 ed 19 24 d6 5a d9 40  cc ba 88 95 1c 0b 51 9b  

  descriptor 0x10
  00000000  09 02 12 00 01 01 00 80  09 02 12 00 01 01 00 80  

  descriptor 0x11
  00000000  09 02 30 00 01 01 00 80  aa 47 64 8a ca d1 c2 e5  

  descriptor 0x12
  00000000  09 02 20 00 01 00 00 80  d5 77 77 85 62 ab 13 4a  
  00000010  aa 91 92 8c d9 96 c0 6e  eb 20 9d 9e 92 a7 38 df  

  descriptor 0x13
  00000000  09 02 35 00 01 01 00 80  8e 7f 3d 02 11 aa 2a fa  
  00000010  03 6b 2d 2c 45 d7 25 ff  aa 34 b1 a8 8b 5d a7 b3
Expect good things from this, hopefully soon it'll be open-sourced and implemented into a PS3 CFW or into multiMAN, for that matter.

WARNING! DO NOT PLAY WITH THIS IF YOU'RE A NOOB!

Cheers to Uncharted from PS3 ISO for being the first to break the news via: ps3iso.com/showpost.php?p=457591&postcount=1

Finally from chazz comes the True Blue Dongle Update 2.1 Disassembled (linked above) and also via pastebin:

http://pastebin.com/7nrSrQVU

ELF Header:
  Magic:   7f 45 4c 46 02 02 01 66 00 00 00 00 00 00 00 00 
  Class:                             ELF64
  Data:                              2's complement, big endian
  Version:                           1 (current)
  OS/ABI:                            CellOS Lv-2
  ABI Version:                       0
  Type:                              EXEC (Executable file)
  Machine:                           PowerPC64
  Version:                           0x1
  Entry point address:               0x2200f0
  Start of program headers:          64 (bytes into file)
  Start of section headers:          2166280 (bytes into file)
  Flags:                             0x0
  Size of this header:               64 (bytes)
  Size of program headers:           56 (bytes)
  Number of program headers:         8
  Size of section headers:           64 (bytes)
  Number of section headers:         28
  Section header string table index: 27

Section Headers:
  [Nr] Name              Type             Address           Offset
       Size              EntSize          Flags  Link  Info  Align
  [ 0]                   NULL             0000000000000000  00000000
       0000000000000000  0000000000000000           0     0     0
  [ 1] .init             PROGBITS         0000000000010200  00000200
       000000000000002c  0000000000000000  AX       0     0     4
  [ 2] .text             PROGBITS         0000000000010230  00000230
       00000000000079d8  0000000000000000  AX       0     0     8
  [ 3] .fini             PROGBITS         0000000000017c08  00007c08
       0000000000000024  0000000000000000  AX       0     0     4
  [ 4] .sceStub.text     PROGBITS         0000000000017c2c  00007c2c
       0000000000000640  0000000000000000  AX       0     0     4
  [ 5] .eh_frame         PROGBITS         000000000001826c  0000826c
       0000000000000004  0000000000000000   A       0     0     4
  [ 6] .rodata.sceReside PROGBITS         0000000000018270  00008270
       0000000000000070  0000000000000000   A       0     0     4
  [ 7] .rodata.sceFNID   PROGBITS         00000000000182e0  000082e0
       00000000000000c8  0000000000000000   A       0     0     4
  [ 8] .lib.ent.top      PROGBITS         00000000000183a8  000083a8
       0000000000000004  0000000000000000   A       0     0     4
  [ 9] .lib.ent.btm      PROGBITS         00000000000183ac  000083ac
       0000000000000004  0000000000000000   A       0     0     4
  [10] .lib.stub.top     PROGBITS         00000000000183b0  000083b0
       0000000000000004  0000000000000000   A       0     0     4
  [11] .lib.stub         PROGBITS         00000000000183b4  000083b4
       0000000000000134  0000000000000000   A       0     0     4
  [12] .lib.stub.btm     PROGBITS         00000000000184e8  000084e8
       0000000000000004  0000000000000000   A       0     0     4
  [13] .rodata           PROGBITS         00000000000184f0  000084f0
       0000000000201870  0000000000000000   A       0     0     8
  [14] .sys_proc_param   PROGBITS         0000000000219d60  00209d60
       0000000000000020  0000000000000000  WA       0     0     8
  [15] .sys_proc_prx_par PROGBITS         0000000000219d80  00209d80
       0000000000000040  0000000000000000   A       0     0     4
  [16] .ctors            PROGBITS         0000000000220000  00210000
       0000000000000008  0000000000000000  WA       0     0     4
  [17] .dtors            PROGBITS         0000000000220008  00210008
       0000000000000008  0000000000000000  WA       0     0     4
  [18] .jcr              PROGBITS         0000000000220010  00210010
       0000000000000004  0000000000000000  WA       0     0     4
  [19] .data.sceFStub    PROGBITS         0000000000220014  00210014
       00000000000000c8  0000000000000000  WA       0     0     4
  [20] .opd              PROGBITS         00000000002200e0  002100e0
       0000000000000060  0000000000000000  WA       0     0     8
  [21] .got              PROGBITS         0000000000220140  00210140
       0000000000000238  0000000000000000  WA       0     0     8
  [22] .tdata            PROGBITS         0000000000220378  00210378
       0000000000000004  0000000000000000 WAT       0     0     4
  [23] .tbss             NOBITS           000000000022037c  0021037c
       000000000000008c  0000000000000000 WAT       0     0     4
  [24] .data             PROGBITS         0000000000220408  00210408
       00000000000001a8  0000000000000000  WA       0     0     8
  [25] .bss              NOBITS           00000000002205b0  002105b0
       0000000000000d48  0000000000000000  WA       0     0     8
  [26] .sceversion       PROGBITS         0000000000000000  002105b0
       0000000000000743  0000000000000000           0     0     1
  [27] .shstrtab         STRTAB           0000000000000000  00210cf3
       0000000000000115  0000000000000000           0     0     1
Key to Flags:
  W (write), A (alloc), X (execute), M (merge), S (strings)
  I (info), L (link order), G (group), x (unknown)
  O (extra OS processing required) o (OS specific), p (processor specific)
  T (TLS: thread local storage)

There are no section groups in this file.

Program Headers:
  Type           Offset             VirtAddr           PhysAddr
                 FileSiz            MemSiz          Flg PPU/SPU/RSX Align
  LOAD           0x0000000000000000 0x0000000000010000 0x0000000000010000
                 0x0000000000209dc0 0x0000000000209dc0 R-E/R--/---  10000
  LOAD           0x0000000000210000 0x0000000000220000 0x0000000000220000
                 0x00000000000005b0 0x00000000000012f8 RW-/RW-/---  10000
  LOAD           0x00000000002105b0 0x0000000000000000 0x0000000000000000
                 0x0000000000000000 0x0000000000000000 R--/---/---  10000
  LOAD           0x00000000002105b0 0x0000000000000000 0x0000000000000000
                 0x0000000000000000 0x0000000000000000 RW-/---/---  10000
  LOAD           0x00000000002105b0 0x0000000000000000 0x0000000000000000
                 0x0000000000000000 0x0000000000000000 RW-/RW-/RW-  10000
  TLS            0x0000000000210378 0x0000000000220378 0x0000000000220378
                 0x0000000000000004 0x0000000000000090 R--/---/---  4
  LOOS+1         0x0000000000209d60 0x0000000000219d60 0x0000000000219d60
                 0x0000000000000020 0x0000000000000020 ---/---/---  8
  LOOS+2         0x0000000000209d80 0x0000000000219d80 0x0000000000219d80
                 0x0000000000000040 0x0000000000000040 ---/---/---  4

 Section to Segment mapping:
  Segment Sections...
   00     .init .text .fini .sceStub.text .eh_frame .rodata.sceResident .rodata.sceFNID .lib.ent.top .lib.ent.btm .lib.stub.top .lib.stub .lib.stub.btm .rodata .sys_proc_param .sys_proc_prx_param 
   01     .ctors .dtors .jcr .data.sceFStub .opd .got .tdata .data .bss 
   02     
   03     
   04     
   05     .tdata .tbss 
   06     .sys_proc_param 
   07     .sys_proc_prx_param
http://pastebin.com/GBP9mF0F

File: EBOOT.BIN.elf

memory address     size    file position       section or table name
----------------- -------- -----------------   -------------------------------
00010000-00219dbf  209dc0  00000000-00209dbf = [Prog Seg 0 PT_LOAD]
                   000040  00000000-0000003f | [Elf header]
                   0001c0  00000040-000001ff | [Program Header Table]
00010200-0001022b  00002c  00000200-0000022b | .init
                  (000004) 0000022c-0000022f | **Blank**
00010230-00017c07  0079d8  00000230-00007c07 | .text
00017c08-00017c2b  000024  00007c08-00007c2b | .fini
00017c2c-0001826b  000640  00007c2c-0000826b | .sceStub.text
0001826c-0001826f  000004  0000826c-0000826f | .eh_frame
00018270-000182df  000070  00008270-000082df | .rodata.sceResident
000182e0-000183a7  0000c8  000082e0-000083a7 | .rodata.sceFNID
000183a8-000183ab  000004  000083a8-000083ab | .lib.ent.top
000183ac-000183af  000004  000083ac-000083af | .lib.ent.btm
000183b0-000183b3  000004  000083b0-000083b3 | .lib.stub.top
000183b4-000184e7  000134  000083b4-000084e7 | .lib.stub
000184e8-000184eb  000004  000084e8-000084eb | .lib.stub.btm
                  (000004) 000084ec-000084ef | **Blank**
000184f0-00219d5f  201870  000084f0-00209d5f | .rodata
                   000020  00209d60-00209d7f | [Prog Seg 6 0x60000001]
00219d60-00219d7f  000020  00209d60-00209d7f | .sys_proc_param
                   000040  00209d80-00209dbf | [Prog Seg 7 0x60000002]
00219d80-00219dbf  000040  00209d80-00209dbf | .sys_proc_prx_param
                  (006240) 00209dc0-0020ffff = **Blank**
00220000-002212f7 <0012f8> 00210000-002105af = [Prog Seg 1 PT_LOAD]
00220000-00220007  000008  00210000-00210007 | .ctors
00220008-0022000f  000008  00210008-0021000f | .dtors
00220010-00220013  000004  00210010-00210013 | .jcr
00220014-002200db  0000c8  00210014-002100db | .data.sceFStub
                  (000004) 002100dc-002100df | **Blank**
002200e0-0022013f  000060  002100e0-0021013f | .opd
00220140-00220377  000238  00210140-00210377 | .got
00220378-00220407 <000090> 00210378-0021037b | [Prog Seg 5 PT_TLS]
00220378-0022037b  000004  00210378-0021037b || .tdata
0022037c-00220407 <00008c> 0021037c-0021037c || .tbss
                  (00008b) 0021037d-00210407 | **Blank**
00220408-002205af  0001a8  00210408-002105af | .data
00000000-00000000  000000  002105b0-002105b0 | [Prog Seg 2 PT_LOAD]
00000000-00000000  000000  002105b0-002105b0 || [Prog Seg 4 PT_LOAD]
00000000-00000000  000000  002105b0-002105b0 ||| [Prog Seg 3 PT_LOAD]
002205b0-002212f7 <000d48> 002105b0-002105b0 |||| .bss
                   000743  002105b0-00210cf2 = .sceversion
                   000115  00210cf3-00210e07 = .shstrtab
                   000700  00210e08-00211507 = [Section Header Table]






Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 860 Comments - Go to Forum Thread »

Quick Reply Quick Reply

  • Decrease Size
    Increase Size
  • Wrap [QUOTE] tags around selected text
PS3 News's Avatar
#860 - PS3 News - 33w ago
Reply
Recently and_fis reports that the PS3 Slim 3K series of PlayStation 3 consoles are surfacing on 3.55 Custom Firmware (CFW), leading to speculation of a new DRM-infected JailBreak Software Tanpa dongle or service from Indonesia.

To quote (via ps3crunch.net/forum/threads/5321-3K?p=58294&viewfull=1#post58294) on the (tokoteknologi.com/home/browse/25-consolemesin.html?sef=hc):

For some Indonesian rupies according to the site above you can purchase A 3K console with a Seri CFW 3.55 (RFW Version) installed! Which also comes with a JAILBREAK SOFTWARE TANPA DONGLE as they call it... If this site is real then someone has found a new exploit that allows 300X version ps3 consoles to downgrade to 3.55 cfw. They have also locked this to a new drm dongle... Let the games begin again!

Rp 3.700.000,00 or about $320 usa, for a base model 160 gb ps3

The only way this would be possiable is if they used hardware to somehow reflash the syscon. that is where the hash checks are that determine the lowest firmware you can have...or they were able to use a hardware flasher and a cfw that had all the hash checks removed.

Or changed and reflashed a cfw that the ps3 "thought" was the right firmware... IDK there is nothing on wiki about either processes

From Abkarino: I know this seller and i talked with him and have a deal 1 and half month ago, they offer me a pre-moded 3K console and they does not sell the modchip/method used to do that. Also he claim that this console uses a special modified CFW based on Rogero CFW.

Also they had used some kind of modchip/flasher to do that. Also he told me that there is a modchip under development for hacking 3K console and it must be released around this month, but till now no new news from him.

From and_fis: I found this info (lan.st/showthread.php?t=3313&page=2) from back in 2010 when 3.41 had alot of access and workings... So if it is true that syscon can be written to with a pkg BUT, it would have to be offically signed or a hardware flasher of some sorts would have to be used if a pkg could not. So in theory, it would be possiable to reflash a syscon from a factory install of 3.60 to 3.55

Quote He is talking about the syscon's eeprom, we can already (at least in private) read and write to it, in fact I am trying to find a way to contact graf_chokolo (he has been absent from irc lately) since he seems somewhat interested in it, at worse I'll add this the wiki's private sections. The syscon's eeprom doesn't seem to be touched on a debug console though, I dumped mine on 3.41, then downgraded to 3.40 and it was still untouched.

I don't know about retail though, I only have one and it's already on 3.41 so I rather not touch it, but I didn't see anything that looks like hashes. Flags are there though. (like the product mode flag, QA flag, debug support flag etc etc...) There are also factory informations stored in there (such as the first firmware flashed at factory) but no hash that I could see, though maybe I overlooked something.

Of course the bootloader wouldn't be in any eeprom, lv0 probably starts and talks to syscon through a vuart in order to read the eeprom content (if the hashes are there) and look at the hashes (to compare them to the digests from the other coreos selfs)


Thanks Abkarino I posted this at the same time you did.. So my suspicions were true about a hardware flasher.. Thank you for the info

From Abkarino: Yea may be they had found a way to reprogram Syscon EEPROM may be they had used an SPI Flasher since SysCon conect to Cell/BE using SPI Bus. I think that they had used a hardware method not a software (sure if this is legit and not a fake, until some one get this console and confirm this news).

PS3 News's Avatar
#859 - PS3 News - 40w ago
Reply
Below is a video from dantezteam (via twitter.com/dantezteam/status/244856386469638144) demonstrating what appears to be PSN back online for PS3 3.55 TB CFW using a ppoof method.

The video shows today's date (September 9, 2012) with him downloading files from Sony's PS Store while being connected to PlayStation Network using a new PSN passphrase that has surfaced in encrypted and decrypted format (via ps3devwiki.com/wiki/Online_Connections#Online_Connections).

3.55 / 3.56: saktdlMapxsbsghmq5dhlwrmtsicyijmzntqaLcpgd8ybbetdmsha=jm


09138F12484EA4F0D04CEDF4B82280E4
3CB588767503D5EFB170AA194D427D4F
CAD86C5A2BE0C38074228675105D4099
630138067959B9629653DD677D244FA3

3.60 / 3.61 / 3.65 / 3.66: c4ce4023bd7e0345feeb0dca80caf487a03b4545a8230a5d41fe9855

3.70 / 3.72 / 3.73 / 3.74 / 4.00: f81c4c14a0cd2c2dc566a885136fd5b51ca847cbb70fcc296b24ec20

4.10 / 4.11: 0e444f4dbd92145de39ab5bff3a23071f9d44db7bcf13e8c455c81f1


49E4B56D14FE48B9D1877FDF1CE0C621
A3742C45678B694D32C0DCD9404FB8F6
12E0603C37209D8B93716CD709C82021
D7E5246A36BEE099A10E8F400D8E0D95

4.20 / 4.21: t2wSyoqasqb_wndpmdmbhputnokghlupgtpighyrsygfbmrsectfkqOb


2D445C392753C85067B9B56ED883B27C
9E5C26973A949E4F4AA144B40483A0FC
A8F2069BD47F81FDEC413BBE4EF26573
9008294F6149FE5D6174D99FA8E59C9C

From Twitter: TB dongle is not needed works on rebug or kmeaw etc .. The method is turn on fake plus go to store and buy plus free games

From hellsing9: Games, PSTORE. (Someone signs out) Borderlands downloading. Closes PSSTORE.

He is on DEX, uses FAKE PLUS and points the finger showing is ON with a CFW (according to him) 3.55 TB spoof.

In short: He bought borderlands in the video via DEX with PLUS option ON... For me is just another attemp to troll or to give some life to TB, since he says he is using CFW TB 3.55 Spoof. And in the part description he says later I will add the Web.

So he avoided so far any download link and surveys because he knows what happens next: youtube.com/user/dantezteam

From dantezteam comes a FckPSN revision by Chinese developer Luckystar (via bbs.duowan.com/thread-28656355-1-1.html): http://www.multiupload.nl/40S5UPQYVH / http://www.putlocker.com/file/E62645DA4EE9339C (Mirror) / https://anonfiles.com/file/03cb21c25efd41bda59885fd2edfca51 (Mirror #2)

Here is the upstreams and video for those interested: ustream.tv/recorded/25308408 and ustream.tv/recorded/25328218





Finally, below is what redcfw claims is a real TB2 LV2 dump for those interested:

Download: http://www.sendspace.com/file/feuu9h

ALL TB2LV2 DUMPs posted before were FAKE!! tb2.51 lv2 dumped on Mar 2012. folks, feel free to study it.

some IDA list


pl2:8000000000528EFC getKeyV5_: # DATA XREF: pl2ff_8000000000539F78o
pl2:8000000000528EFC
pl2:8000000000528EFC .set var_358, -0x358
pl2:8000000000528EFC .set var_310, -0x310
pl2:8000000000528EFC .set var_308, -0x308
pl2:8000000000528EFC .set var_300, -0x300
pl2:8000000000528EFC .set var_2F0, -0x2F0
pl2:8000000000528EFC .set var_2E0, -0x2E0
pl2:8000000000528EFC .set var_2D0, -0x2D0
pl2:8000000000528EFC .set var_2BC, -0x2BC
pl2:8000000000528EFC .set var_264, -0x264
pl2:8000000000528EFC .set var_200, -0x200
pl2:8000000000528EFC .set var_1FC, -0x1FC
pl2:8000000000528EFC .set var_1F8, -0x1F8
pl2:8000000000528EFC .set var_1E8, -0x1E8
pl2:8000000000528EFC .set var_140, -0x140
pl2:8000000000528EFC
pl2:8000000000528EFC mflr r0
pl2:8000000000528F00 bl save_r24_r31r0
pl2:8000000000528F04 ld r30, off_8000000000538F08 # byte_8000000000537C88
pl2:8000000000528F08 .using byte_8000000000537C88, r30
pl2:8000000000528F08 stdu r1, -0x380(r1) # ver == 5 getkey
pl2:8000000000528F0C mr r31, r3 # r31 ptr = copy from sce+0x980 len =0x100
pl2:8000000000528F10 addi r29, r1, 0x240
pl2:8000000000528F14 mr r3, r30
pl2:8000000000528F18 mr r27, r4 # r4 = 0x100
pl2:8000000000528F1C mr r28, r5 # r5 qword_8000000000538670
pl2:8000000000528F20 mr r4, r30
pl2:8000000000528F24 li r5, 0x10
pl2:8000000000528F28 bl encKey # in byte_8000000000537C88:.byte 0x8A, 0x97, 0xB7, 0x2C, 0xC1, 0x10, 0x62, 0x22, 0x7B, 0x33, 0x39, 0xCB, 0x61, 0x2E, 0x80, 0xE9
pl2:8000000000528F28 # out 00000470h: 4C 79 E1 8F 34 A9 D6 7D 74 33 9C D7 5D 09 20 B7 ;
pl2:8000000000528F2C nop
pl2:8000000000528F30 mr r5, r29 # r1+0x240
pl2:8000000000528F34 mr r3, r30 # 4c 79 ..
pl2:8000000000528F38 li r4, 0x80
pl2:8000000000528F3C bl sub_800000000052F278
pl2:8000000000528F40 nop
pl2:8000000000528F44 mr r3, r30
pl2:8000000000528F48 mr r4, r30 # restore key
pl2:8000000000528F4C li r5, 0x10
pl2:8000000000528F50 addi r30, r31, 0x10 # in r3+0x10
pl2:8000000000528F54 bl encKey # 000007b0h: 4C 79 E1 8F 34 A9 D6 7D 74 33 9C D7 5D 09 20 B7
pl2:8000000000528F54 # 000007f0h: 8A 97 B7 2C C1 10 62 22 7B 33 39 CB 61 2E 80 E9
pl2:8000000000528F58 nop
pl2:8000000000528F5C addi r5, r27, -0x10 # r5 = 0x100 -0x10
pl2:8000000000528F60 mr r6, r29 # r1+0x240
pl2:8000000000528F64 mr r3, r30 # r30=byte_8000000000537C88
pl2:8000000000528F68 mr r4, r30
pl2:8000000000528F6C extsw r5, r5 # r5=0xf0
pl2:8000000000528F70 mr r7, r31 # in r3+0x10

how to hook decKey?


#####################patch tb2 lv2 plugin##########################
.set jb2pBASE, 0x8000000000700000
.set jb2pTOC , 0x7000
.set hookDNum, 0
.align 4
hookT:
#patchtbl
.quad jb2pBASE,hooks-hookT,hook_data-hooks
.quad 0x8000000000520568,pt520568-hookT,8
.quad 0x80000000005205e8,pt5205e8-hookT,8
.quad 0
pt520568:
bl pt520568+((hook_520568-hooks)+jb2pBASE-0x8000000000520568)
#.long 0x48000001 | ((hook_520568-hooks)+jb2pBASE-0x8000000000520568)
lwz r4, 8(r11)
pt5205e8:
bl pt5205e8+((hook_520568-hooks)+jb2pBASE-0x80000000005205e8)
#.long 0x48000001 | ((hook_520568-hooks)+jb2pBASE-0x80000000005205e8)
lwz r4, 8(r11)


#jb2pBASE
.align 4
hooks:
hookDNum_ptr:
.quad hookDNum
hook_data_ptr:
.quad hook_data-hooks+jb2pBASE

hook_encKey_ptr:
.quad 0x8000000000533470
hook_encKey_callin_ptr:
.quad 0x800000000052056C

hook_encKey_ptr_n0:
.quad 0x8000000000523f14
hook_encKey_ptr_n1:
.quad 0x8000000000524004
hook_encKey_ptr_n2:
.quad 0x8000000000523fc0 # newcode
hook_encKey_ptr_tl0:
.quad 0x80000000005243e4
hook_encKey_ptr_tl1:
.quad 0x8000000000524428

hook_TEA_dec_ptr:
.quad 0x8000000000533450
hook_encTEA2_dec_ptr:
.quad 0x8000000000533220

encKeySi:.string "encKeyI"
encKeySo:.string "encKeyO"
TEAdecS: .string "TEAdec "
encTEA2S:.string "encTEA2"

# secret prg run before
hook_520568:
lis r8,-0x8000
sldi r8, r8, 32
oris r8, r8,(jb2pBASE+jb2pTOC)@h
ori r8, r8,(jb2pBASE+jb2pTOC)@l

ld r10, (hook_data_ptr-hooks-jb2pTOC)(r8)
ld r9, (hookDNum_ptr-hooks-jb2pTOC)(r8)
add r10, r10, r9

lis r11,0xc #r11 0xc00000

cmpld cr7,r9,r11
bgt cr7,hook_520568_exit

ld r11, 0x70(r1)

.if 0 # dis all call
std r11, 0(r10)
addi r10,r10,8
addi r9,r9,8
b hook_520568_exit
.endif
#####################################################
hook_encKey:
ld r4, (hook_encKey_ptr-hooks-jb2pTOC)(r8)
cmpld cr7,r4,r11
bne cr7,hook_TEA_dec
.if 1
################dis normal
ld r4,(hook_encKey_ptr_n0-hooks-jb2pTOC)(r8)
ld r5,0xa0(r1)
cmpld cr7,r4,r5 #dont hook hook_encKey_ptr_n0
beq cr7,hook_TEA_dec
.if 1
ld r4,(hook_encKey_ptr_n1-hooks-jb2pTOC)(r8)
ld r5,0xa0(r1)
cmpld cr7,r4,r5 #dont hook hook_encKey_ptr_n0
beq cr7,hook_TEA_dec
.endif
.if 1
ld r4,(hook_encKey_ptr_n2-hooks-jb2pTOC)(r8)
ld r5,0xa0(r1)
cmpld cr7,r4,r5 #dont hook hook_encKey_ptr_n0
beq cr7,hook_TEA_dec
.endif

.endif
...
b hook_520568_exit
#######################################################
hook_TEA_dec:
ld r4, (hook_TEA_dec_ptr-hooks-jb2pTOC)(r8)
cmpld cr7,r4,r11
bne cr7,hook_encTEA2
# wname
...
b hook_520568_exit
############################################################
hook_encTEA2:
ld r4, (hook_encTEA2_dec_ptr-hooks-jb2pTOC)(r8)
cmpld cr7,r4,r11
bne cr7,hook_520568_exit
# wname
......
hook_520568_exit:
std r9, (hookDNum_ptr-hooks-jb2pTOC)(r8)
ld r11, 0x70(r1)
blr

.align 4
hook_data:
hookTe:

PS3 News's Avatar
#858 - PS3 News - 41w ago
Reply
Today /GriFFin reports that OxweB has apparently leaked the True Blue PS3 disc BCA codes (although curiously a source wasn't specified), however, they are now conveniently deemed useless as the DRM-infected USB dongle itself.

To quote: When the True Blue dongle first launched last year, it was originally using 'special' blu-ray discs to play games, instead of just DRMencoded eboots on the HDD.

But even after all the Paradox releases, there was a few games that only were available still on 'special' blu-ray discs. Over the course of last year, various groups try to figure out how to copy these discs, as they were sadly pirate stores that wish to sell them to their customers. Finally have much research the BD-Rom marks called 'BCA Codes' were figured out so they could by copied on normal blu-ray burner.

And now an person by the name 'OxweB' has leaked them onto the 'net, as basically they are useless now, but still it is part of sad scene PS3 history!

These are BCA codes off the TB discs (the barcode on the inner part of the disc).

You to can read them off the disc yourself with a scanner or magnifying glass, they are in binary format (skinny line = 0, Fat line = 1). Binary to HEX and there you go, a code almost ready to be stamped on to a BD-R.

*Note - It's not that simple for regular retail games as there is still the PIC Zone to contend with.
**Note - I realize these aren't overly useful but it's information which is all worth it in the long run.

RESISTANCE 3


041E1015D0001520
11030800364995AE
041E1015D0001520
11030800364995AE
FC42445201120100
0000000000000000
FC42445201120100
0000000000000000

DISGEA 4


041E1015D0001620
110308101021C054
041E1015D0001620
110308101021C054
FC42445201120100
0000000000000000
FC42445201120100
0000000000000000

FIFA2012


041E1015D0001620
110310005010EBD2
041E1015D0001620
110310005010EBD2
FC42445201120100
0000000000000000
FC42445201120100
0000000000000000

PES2012


041E1015D0001520
110309053550B929
041E1015D0001520
110309053550B929
FC42445201120100
0000000000000000
FC42445201120100
0000000000000000

XMEN DESTINY


041E1015D0001520
1103070035337952
041E1015D0001520
1103070035337952
FC42445201120100
0000000000000000
FC42445201120100
0000000000000000

BATMAN ARKHAN CITY


041E100D00000000
0000000000230611
FC42445201120100
0000000000000000
041E100D00000000
0000000000230611
FC42445201120100
0000000000000000

Finally, in related news from GoD]oF[WaR (via nextgenupdate.com/forums/playstation-3-exploits-hacks/583397-bca.html#post4685403) to quote:

I have done more research on BCA codes, they seem to be the new protection put on games, meaning with these values they can be cracked, and possibly pirated to even non-jailbroken systems.

For those unaware, BCA is the new protection utilized in newer games and with a future editor you can have the BCA codes to use with the a loader which can patch games to run without the needed keys.

There will be a patch released for each game, which is basically 64 bytes of BCA data in the form of a separate text file, that will come with the ISO file (this obviously only applies to scene releases)

IF you have access to a retail copy of the game, then you can obtain the BCA code yourself to patch the game.

Changelog, roughly translated:

• New IOS 38 base. dev/mload with powerful features and EHCI driver based in interruptions and more stable
• Support for DVD USB Devices: It can run only DVD backups from .iso (original don't work because DVD drivers don't support the Wii format). Remember you must insert a DVD to work at start the program.
• Support for BCA datas. You can add it from .ISO offset 0x100 (64 bytes). If this area is filled with zeroes it use one BCA by default (NSMB compatible).
• New ioctl 0xda function supported in dip_plugin and new option added for
• DVD mode to read the BCA Datas from the original DVD
• Support to load games from DVD with alternative DOL (press '2' without
• USB device or press the DVD icon from the upper-right corner in the selection game screen)
• Support for SD and USB FAT/FAT32: Now you can use cheats codes and loads alternative .dol from the USB 2.0 device (FAT partition is required)
• Added alternative dol loader (now support for 5+ dols) for games as Red Steel and othrers (see readme.txt) , New error 002 patch and videomode autodetection patch (for PAL2NTSC, NTSC2PAL and NTSC2PAL60 (use F. PAL60 for this))
• Added direct access for Dol Alternative selection
• You can load differents ehcmodule.elf from sd:/apps/uloader/
• Parental control added: by default the password is 00000 (the last 0 is the 'ENTER', so you can program as new password as XXXX0 ). You can change it from special menu pressing HOME. You can exits from the password box pressing B. Parental control list the last 8 games launched with date/time, enables the password box and fix a new password. Now 00000 disables the Parental Control
• Support for covers (less than 200KB 160x224). You can download from internet or adquire covers from the curren tfolder in the SD automatically
• Added one option to delete PNG icons/covers
• Some bugs fixed (bug with no modchip game instal, for examplel)
• Support for multiples WBFS partitions (max 4).
• Possiblity to use the alternative cIOS 223 (only to launch games)
• Added one option to rename games
• Added one option to record the cheats selected from txt files
• New usb code and more!

The above thread gives information on BCA codes for the Wii, which could also apply to PS3 games in the same way. Meaning these BCA codes could lead to easily pirating games on all consoles who utilize the BCA algorithm.

After further research, I am under the suspicion that these BCA codes are in fact a lead to playing pirated games (3.60+ games burned to BD/Launched via USB or external HDD - played on 3.55 WITHOUT CFW) possibly on current firmwares with a real developer at hand.

Basically these BCA codes could lead to playing these burned ISO images on 3.55 (No CFW; without 3.60+ keys) and possibly current firmwares.

The BCA codes that True Blue "leaked" are actually the codes to games that have been tested and work on 3.55 OFW. With the use of a new true blue dongle (JB2/Jailbreak2), games played off the BD without 3.60+ keys.

The games that have been tested are the ones listed below;

• Fifa 2012
• Pes 2012
• Driver san Fransisco
• God of war Origin
• X-men Destiny
• Sniper ghost warrior

Games that are in process of being tested;

• Resistance 2
• Disgaea 2
• Batman Arkham City

POC:





More PlayStation 3 News...

StanSmith's Avatar
#857 - StanSmith - 42w ago
Reply
I just tried V2 and it doesn't work.

I load up Multiman, select Ghost Recon FS and it goes backt o XMB like normal.
I try to run GRFS and it black screens and locks up.
I reboot and load up multiman and it also black screens and locks up.
I reboot WITHOUT the dongle and it finally loads MM.
I copy the file over to the PC, convert from ELF to BIN, put it in GRFS folder.
I reboot WITH the dongle. goto MM select GRFS go back to XMB.
I run GRFS from DVD. It loads up Multiman.

I tried this 3 times and each time its the dump of Multiman NOT GRFS. And the file DOESN'T go, 00, 01, 02 etc, there is only 1 file and its 00. At least v1 gave multiple files but I couldn't get GRFS to work without the tb patched files.

imajei's Avatar
#856 - imajei - 43w ago
Reply
Can you do ghost recon eboot? please

Page 1 of 172 123456789›LAST »

Related PS3 News and PS3 CFW Hacks or JailBreak Articles

• PS3 EDAT Devklic Bruteforcer v1.0 / v1.1 By JjKkYu is Released
• MAME 0125 (Multiple Arcade Machine Emulator) for PS3 Release 1 Out
• PS3 Game List by Nullptr PlayStation 3 Homebrew App is Released
• MultiMAN v04.40.00 PS3 Server and Showtime Edition Updates Out
• ScummVM 1.6.0 PlayStation 3 Emulator Updated, +4 to Engines
• PSN Tool v1.0 and PSN Tool Creator v1.0 to Combat PSN Bans Arrive
Affiliates  NewsNow  Privacy  PS3 CFW & MFW  PS3 Hacks & JailBreak  PS3 Reviews  PS3 Videos  © 2013 PlayStation 3 News

PlayStation 3 Links

• Contact Us E-Mail
• PS3 Affiliates
• PS3 CFW & MFW
• PS3 Debug Firmware
• PS3 Decrypted PSN Links for CFW
• PS3 Downloads
• PS3 EBOOT.BIN Original File Links
• PS3 Firmware
• PS3 Game Releases List
• PS3 Guides & Tutorials
• PS3 Hacking Guides and Tutorials
• PS3 Hacks & JailBreak
• PS3 Help & Support
• PS3 JailBreak Game Compatibility List
• PS3 JB2 / True Blue (TB) Game Links
• PS3 multiMAN Updates
• PS3 News Forums
• PS3 News Site FAQ
• PS3 News Site Advertising FAQ
• PS3 News Site Posting FAQ
• PS3 News Site Privacy FAQ
• PS3 News Site Rules
• PS3 News Site Tag Cloud
• PS3 News Site Terms
• PS3 Resources
• PS3 Reviews
• PS3 Save Files Repository
• PS3 Themes
• PS3 Trophies List
• PS3 Videos
• PS Vita Trophies List

PlayStation 3 News Discussions
Sony Unveils PlayStation Plus July 2013 Content Updates - 17m ago

PS3 News's Avatar
Quote Sony PlayStation Store and Plus Content Manager Chris Howe has unveiled the July 2013 PlayStation Plus content updates today, as follows: Hi ...
By PS3 News with
 0 Comments »
Sony PlayStation Store PS3 and PSN Updates for June 18, 2013 - 31m ago

elser1's Avatar
Quote our update is thursday aus time. it should be there though the usa and eu plus are different games often. we may get something else on occasions....
By elser1 with
 3 Comments »
Sony PlayStation Store PS3 and PSN Updates for June 18, 2013 - 53m ago

Renold's Avatar
Quote So the two D&D games are out. I spent a ton of money at the arcade for those games when I was a tyke......
By Renold with
 3 Comments »
Sony PlayStation Store PS3 and PSN Updates for June 18, 2013 - 2h ago

Brenza's Avatar
Quote I own a PLUS obtained with a voucher code, i activated the voucher one week ago but now i can't see Saints Row anywhere.. why? Is that because my a...
By Brenza with
 3 Comments »

Latest PlayStation 3 Trophies
 Dungeons & Dragons: Daggerdale: The Big Stick
 Dungeons & Dragons: Daggerdale: Four of a Kind
 Dungeons & Dragons: Daggerdale: Man at Arms
 Dungeons & Dragons: Daggerdale: Solid Gold

Latest PlayStation Vita Trophies
 Jak II (Vita): The Collectationator!
 Jak II (Vita): The Collectivist
 Jak II (Vita): The Collector
 Jak II (Vita): Head Master

Latest PlayStation 3 Releases
Le Tour De France 2013 PS3-STRiKE - 06-18-2013
MotoGP 13 PS3-COLLATERAL - 06-17-2013
Remember Me USA PS3-ANTiDOTE - 06-17-2013
The Last of Us ASiA MULTi3 PS3-Kirin - 06-14-2013

Latest PlayStation 3 Themes
 The Last of Us PS3 Theme - 06-14-2013
 God Of War 3 (Unofficial V1/V2) PS3 Theme - 06-12-2013
 Heavy Rain (Official) Dynamic PS3 Theme - 06-11-2013
 PlayStation Classic PS3 Theme - 06-11-2013