Sponsored Links

Sponsored Links

True Blue (TB) and Cobra PS3 JB2 DRM Dongle Payloads WIP


Sponsored Links
128w ago - Following up on the previous True Blue (TB) PS3 JailBreak 2 (JB2) DRM-infected dongle news comes a WIP update from Shadoxi on dumping and decrypting the TB and Cobra payloads below, as follows:

Download: [Register or Login to view links] (2.84 MB) / [Register or Login to view links] (2.84 MB - Mirror) / [Register or Login to view links] (2.84 MB - Mirror) / [Register or Login to view links] (172.19 MB)

I have figured out where the payload is located of the TB and Cobra dongles. You can find it at offset @360000 in lv2_kernel and 7f0000 in PS3 memory. According to the PS3 Developer Wiki (ps3devwiki.com/index.php/ReDRM_/_Piracy_dongles) the LV2 dump payload at 0x7f0000 has also been decrypted @ LV2 dump 0x7f0000 (pastebin.com/3VG76HQs)

Drag and drop payload in [Register or Login to view links] and load it in Binary file mode, Processor type PPC.Press "C" to convert in ASM code.

First of all you need to edit the header of lv2_kernel.self (from CFW TrueBlue) at offset 0x1D, replace 36 1A 00 by 4C FC F0. And decrypt it with unself tool from fail0verflow. Open lv2_kernel.elf with IDA Pro (in binary file mode), go to offset 360000 and press "C" to convert to asm code.

TrueBlue use some HVCALL:

  • lv1_insert_htab_entry
  • lv1_undocumented_function_114
  • lv1_undocumented_function_115
  • lv1_allocate_device_dma_region
  • lv1_map_device_dma_region
  • lv1_net_start_tx_dma
  • lv1_net_control
  • lv1_panic (shutdown ps3 when TB is unplugged)

This payload do some HVCALL:

  • lv1_insert_htab_entry (map lv1)
  • lv1_allocate_device_dma_region (?)
  • lv1_map_device_dma_region (?)
  • lv1_net_start_tx_dma (?)
  • lv1_net_control (?)
  • lv1_panic (shutdown ps3 when TrueBlue dongle is unplugged)
  • lv1_undocumented_function_114 (map lv1)
  • lv1_undocumented_function_115 (unmap lv1)

We needed to dump lv2 and lv1 memory when the dongle is plugged in, so I created a modified TB CFW with peek and poke syscall. It works fine !

Finally, from the MFW_TrueBLue.zip ReadMe file: Warning this mfw can brick your dongle !!!

  • First install PS3PEEKTEST.pkg
  • Install MFW TrueBlue firmware in recovery mode
  • Start ps3peektest

If Peek Result is equal to 10 and true blue light is green -> work.




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!

Comments 860 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles. Thanks!

Transient's Avatar
#825 - Transient - 102w ago
No offense, cfwprophet, but did you actually have a working example or just a theory? I don't doubt your ability, but you have to realize the whole DEX+coredump idea is over the heads of most readers here (non-developers).

It should come as no surprise then that Duplex is seen as heroes for providing patches that remove TB DRM. If you wanted the credit, you needed to provide a working example that the average reader can use.

racer0018's Avatar
#824 - racer0018 - 102w ago
This is good news. I just got one cause it was free but now I can tear it apart and see what I can do with it. Also i will be able to run another firmware, so that kicks butt. Good news but on the hand what I they don't release any more eboots, so I closing I hope he found a way to make all eboots work. Thanks

p0tsm0ke's Avatar
#823 - p0tsm0ke - 102w ago
all i have to say is if there is scene members using DRM as a profit then i hope they all burn in hell.

^ hope more info pops out. Great news for the people that own a PS3 still. Also great news for the scene

AGAIN BIG UPS TO THE TEAM KEEP THE WORK UP.

ASTRAL2k1's Avatar
#822 - ASTRAL2k1 - 102w ago
That's awesome news!

ZerotakerZX's Avatar
#821 - ZerotakerZX - 102w ago
Hehe, right. Use DEX you lazy bum.

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News