PS3 Full Core Dump - Is This What True Blue Does?

Published on 08-22-2012 12:56 PM

27 Comments

Recent news regarding PsDev's Core_OS Dump brought the following to my attention. PS3 'scener' harryoke recently announced some information he got from an Anonymous source. While investigating ways to get a full core dump from his PS3, this Anon source shed some light on the subject while referencing some additional information he got from cfwprophet. Allot of speculation circles the subject but this does make one wonder, as the rumors suggest, if this is how True Blue modded their EBOOTS. Especially with all the fuss made regarding the leaked CEX2DEX method.

About Ps3 Core Dump POC:

hello there my friends...as you may or may not know i have been looking into the possability to get a full core dump from my ps3....a few hours ago i was sent a pm from ANON ... here it is....

Hey mate,

Yeh cfwprophet told something about the ram dump too. you can make a core dump on a dex.
here is a quote from him:

"I say it now for the last time: There is NO fself for new games !! TrueBlue use the CoreDump function and a RSX exception to dump the games like i told the scene for over a half year." Take MultiMan 04.02 which is a Retail NPDRM >> enable core dump function >> start MultiMan >> exit to XMB and be surprised. The Coredump function is a embended system of the debug FW and get handled of liblv2dbg. The send signal call aka send_signal_to_coredump_handler() and the trigger function are always running and CAN NOT be deactivated."

He also said that you will get one 250MB file. there you have to search the decrypted file(s). It would be pretty sure that they use this method, because newer games wouldnt have debug eboots or fselfs. If you open a tb eboot with a hex editor, you will see near at the end , that they stand right after the codes some passages with 'liblv2'. if you open a original eboot , you cant find passages with 'liblv2'. Like cfwprophet said, the core dump get handled of 'liblv2dbg' and you can find 'liblv2' passages in tb eboots. so they use coredump pretty sure.

But the problem is to trigger a crash or so. i really dont know. im not a dev and dont have an idea. I just wanted to tell you this infos because I saw your post about coredump.

I look forward to comments made by our resident developers. Additional SCE information can be found via the source.

*Please note that this proof of concept refers to those running DEX/Debug consoles. The above research is for information purposes for those wanting to learn.

Source: ps3crunch

PSX-SCENE: The Pinnacle Scene Xenocracy

● Latest News ● Report News ● Search Forums ● Hall of Fame ●
● Facebook.com/PSXScene ● RSS ● Twitter.com/psx_scene ●

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

Categories:

_{Tags :

cex to dex,

cex2dex,

cfwprophet,

harryoke,

ps3,

ps3 core dump,

ps3 debug firmware,

ps3 dex,

ps3 eboot,

tbjb 2,

true blue}

27 Comments

ahou - 08-24-2012, 01:02 PM
- Reply
I can't seem to mount dev_flash on 4.11 dex using mutliman. Anyone know why, or if there's an alternate way to do so?

mezcal - 08-24-2012, 01:10 PM
- Reply
Originally Posted by ahou

I can't seem to mount dev_flash on 4.11 dex using mutliman. Anyone know why, or if there's an alternate way to do so?

Maybe if you do it on 3.55 and then update to 4.11 and see if the file remains there and works?

ahou - 08-24-2012, 01:29 PM
- Reply
Originally Posted by mezcal

Maybe if you do it on 3.55 and then update to 4.11 and see if the file remains there and works?

It would obviously be overwritten when updating back to 4.11.

PsDev - 08-24-2012, 04:39 PM
- Reply
I wondered how long this would take. This feature is also on CEX and can work in any FW. Here a example of the Dump Core Dump

When you rar it, it really brings it down to around 3mb or something like that

Mitdog - 08-24-2012, 05:07 PM
- Reply
Originally Posted by PsDev

I wondered how long this would take. This feature is also on CEX and can work in any FW. Here a example of the Dump Core Dump

When you rar it, it really brings it down to around 3mb or something like that

How did you dump this I have dome the multiman dump but get diffrent files and are they stored some where

ahou - 08-24-2012, 08:26 PM
- Reply
Originally Posted by ahou

I can't seem to mount dev_flash on 4.11 dex using mutliman. Anyone know why, or if there's an alternate way to do so?

Using mfw to edit the 4.11 pup works fine, but when i tried it, i just got errors when trying to run anything (no homebrew or games worked, at all), and it didn't dump anything.

yaseensamiul - 09-01-2012, 08:21 PM
- Reply
Originally Posted by CS67700

Pretty amazing that such a "simple" thing was around for such a long time (+1 year) and no one even bothered to look into it until recently.

Pretty much tells you a lot about this scene ...

well if you think u can do thinks better faster and for free then go for it but dont put down the hard working devs that do this thing for free.
appreciate them