170w ago - I have just finished another (first is HERE) little 010 Editor script to search the Hypervisor Call Table on any PS3 Memory Dump.

Requirements: 010 Editor, script PS3MemDump_hv_call_table.bt and PS3_Memory_Dump.bin.

See also the source of the script in attachment.

Little how to for 010 Editor:

1. If you do not already have 010 Editor -> Download and install a free 30-day trial for Windows 7/Vista/XP/2000 of 010 Editor.
2. Unzip the archive (PS3MemDump_hv_call_table.zip) in attachement in your documents path for example C:/MyDocuments/SweetScape/010 Templates/
3. Start 010 Editor.
4. Click on shortcut Ctrl+O (menu File -> Open File...) and choose the file PS3_Memory_Dump.bin.
5. Click on shortcut Ctrl+F5 (menu...

170w ago - I have just finished a little 010 Editor script to display clearly HTAB PTE entries in PS3 Mem Dump HTAB at @0x00500000 like you can see below.

Requirements: 010 Editor, script PS3MemDump_HTAB_PTE.bt and PS3_Memory_Dump.bin.

See also the source of the script in attachment.

Little how to for 010 Editor:

1. If you do not already have 010 Editor -> Download and install a free 30-day trial for Windows 7/Vista/XP/2000 of 010 Editor.
2. Unzip the archive (PS3MemDump_HTAB_PTE.zip) in attachement in your documents path for example C:/MyDocuments/SweetScape/010 Templates/
3. Start 010 Editor.
4. Click on shortcut Ctrl+O (menu File -> Open File...) and choose the file PS3_Memory_Dump.bin.
5. Click on shortcut Ctrl+F5 (menu Templates -> Open Templates...) and choose the file PS3MemDump_HTAB_PTE.bt.
6. Click on shortcut F5 (menu Templates...

170w ago - Just a few days after kakarotoks released a kernel module to dump out the PS3 Hypervisor and Bootloader someone named Ps3 Memory Dump from GeoHot's blog did just that, and has leaked it publically as pictured below.

The included ReadMe file acknowledges is0mick's recent Atmega8 port, however, it curiously attempts to flame other PS3 News Devs despite using their code to make the HV dump... go figure, eh?

Preliminary examination of the leaked dump is currently underway by both Devs and end-users alike, with a few noteworthy findings thus far as follows:

From sapperlott:

• repos @ 0x2c00 - 0x43ff
• partition table @ 0x6000
• SELFs @ 0x20000, 0x37000, 0x55000, 0x1624bc, 0x6c25b4, 0x6d5470
• FSELFs (?) @ 0xa19a0, 0x12dea0, 0x369720
• other SCE files @ 0x35e100, 0x6c5ed4
• LPAR data @ 0x12a0a0

From Karl69:

• IDA entry point looks like 0x10190 is interesting address.

From ifcaro:

• Code starts at 0x00203000 according to my analysis....

279w ago - A quick update tonight with a few more details about the upcoming Eboot.bin Dumper utility. It dumps the Eboot.bin from your original PS3 Game disc, and strips the disc layer of encryption, so it is a less-encrypted SELF.

The program is simple to use: first install the package to a TEST/TOOL PS3. Then insert a memory stick in the PS3 and run the program. Upon completion, remove the memory stick and read it in a PC.

You now have an EBOOT.BIN that is void of the disc layer of encryption! There are still a few add-ons that can be made such as dumping to a PC, however that may be done down the road. Below is a picture of the BETA version of the XMB info screen for the utility.

Furthermore, we have noticed it's a bit easier to dump some of the system memory via GDB than our own custom code.

Why? Well check back on that, but we have already found a decrypted sprx in memory, and that was only after a few seconds of looking.. so some good things are to come soon!