Editing ReDRM / Piracy dongles
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 1: | Line 1: | ||
=Description= | =Description= | ||
Dongle is DRM to make sure you have the dongle, the firmware 'special' functionality will not work without it. | |||
Contentdisc's contain fself'ed eboot.bin's | |||
== | == Debunking == | ||
* | * It does not play 3.6x+/3.7x+ original content (it does not have the keys for it). | ||
* It can only play such content which is re-encrypted/resigned with their donglekeys. | |||
** Such content will be limited to those already decryptable and debug eboot.bin's (atm, only 3 titles in the wild mentioned ((but untested by poster)) as working Dirt3, Portal2 and Rage)<!--// | |||
Rage WORKING TB READ NFO PS3-PARADOX | |||
* It can only play such content which is re-encrypted/resigned with | Dirt 3 WORKING TB READNFO PS3-PARADOX | ||
** Such content | Portal 2 WORKING TB READ NFO PS3-PARADOX //--> | ||
* Content for 3.55 and lower still work (after all, its just a MFW 3.55) | |||
* Needs the MFW (and cannot work on OFW's, that is why there is 'no power/eject trick') | |||
* Content for | * If you are using special firmwares now, they will not be compatible with this one. e.g. Incompatible with: | ||
* Needs the MFW (and cannot work on OFW's, that is why there is no | |||
* If you are using special | |||
** OtherOS++ | ** OtherOS++ | ||
** | ** Cobra | ||
** pre 3.50 etc. | ** pre 3.50 etc. | ||
Line 256: | Line 251: | ||
CLK for Actel <br /> | CLK for Actel <br /> | ||
==== AMS1117 2.851049 - Low Dropout Linear Regulator ==== | ==== AMS1117 2.851049 - Low Dropout Linear Regulator ==== | ||
Datasheet: | Datasheet: http://www.sltdigital.com/product/product_pdf/AMS1117.pdf / http://home1.cyber-labo.co.jp/board/goods/pdf/AMS1117.pdf <br /> | ||
[[:File:AMS1117 - SOT-223.png]] | [[:File:AMS1117 - SOT-223.png]] | ||
Line 285: | Line 278: | ||
|} | |} | ||
==== Winbond | ==== Winbond 25X16AVS1G (SPI Flash 16Mbit) ==== | ||
<div style="float:right">[[File:W25X16A - SOIC-8.png|200px|thumb|left|8-pin TSSOP<br />Winbond 25X16A<br />SOIC-8 pinout]]</div> | |||
<div style="float:right">[[File:W25X16A - SOIC-8.png|200px|thumb|left|8-pin TSSOP<br />Winbond 25X16A<br />SOIC-8 pinout]] | |||
<pre>W - Winbond | <pre>W - Winbond | ||
25X - SPI Flash | 25X - SPI Flash | ||
16 - 16Mbit / 2M-byte (Uniform 4Kbyte sectors/64Kbyte blocks) | |||
AVS1G - 100MHz (200Mbits/sec)</pre> | |||
datasheet: [http://www.multiupload.com/P2833U5SOW W25X16A.pdf (1.3 MB)] | |||
datasheet: [http://www. | |||
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;" | {| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;" | ||
|- bgcolor="#cccccc" | |- bgcolor="#cccccc" | ||
! Pin !! Usage | ! Pin !! Usage !! Remarks | ||
|- | |- | ||
| 1 || /CS | | 1 || /CS || Chip Select | ||
|- | |- | ||
| 2 || DO | | 2 || DO || Data output | ||
|- | |- | ||
| 3 || /WP | | 3 || /WP || Write Protect | ||
|- | |- | ||
| 4 || GND | | 4 || GND || Ground | ||
|- | |- | ||
| 5 || DIO | | 5 || DIO || Serial data input/output | ||
|- | |- | ||
| 6 || CLK | | 6 || CLK || Serial Clock | ||
|- | |- | ||
| 7 || /HOLD | | 7 || /HOLD || Hold | ||
|- | |- | ||
| 8 || VCC | | 8 || VCC || Vcc (min 2.7-max 3.6V) | ||
|- | |- | ||
|} | |} | ||
== | == Dongle 2.0 == | ||
Supposed to be massproduced instead of manually soldered like the 1.0 dongle. Not seen in the wild yet. | |||
==== | == Dongle Clones == | ||
... :P | |||
= Downloads = | = Downloads = | ||
== First release (1.0/2.1) == | == First release (1.0/2.1) == | ||
* MFW: [ | * MFW: [http://www.multiupload.com/O7SP26A83E Jailbreak2.CFW.rar (172.34 MB)]<!--//http://www.filesonic.nl/file/2688912531/Jailbreak2.CFW.zip (password: whyudie)//--> | ||
* Dongle Updater v2.1: [http://www.multiupload.com/9YPQX47G7F JB2.Dongle.Updater.rar (2.1 MB)]<!--//http://www.filesonic.nl/file/2689038911/JB2.Dongle.Updater.zip (password: whyudie)//--> | |||
* Dongle Updater v2.1: [ | |||
== Update 2.2 == | == Update 2.2 == | ||
* Dongle Updater v2.2: | * Dongle Updater v2.2: [http://www.multiupload.com/QU4XVYD4CF TrueBlueUpdate2_2.zip (544.2 KB)] | ||
== FW Info (1.0/2.1) == | == FW Info (1.0/2.1) == | ||
Line 772: | Line 384: | ||
Data length: 172890112 | Data length: 172890112 | ||
File hash : 93A7A95BFCFC263DCB4A18477062FDCC72BE47A0</pre> | File hash : 93A7A95BFCFC263DCB4A18477062FDCC72BE47A0</pre> | ||
=Content discs= | =Content discs= | ||
Line 849: | Line 456: | ||
== Paradox TB == | == Paradox TB == | ||
Note: Releases seen in the wild are full BD content prepatched for TrueBlue. We are only interested in documenting/reversing, so please don't post full links (only stripped). | Note: Releases seen in the wild are full BD content prepatched for TrueBlue. We are only interested in documenting/reversing, so please don't post full links (only stripped). | ||
* [ | * [http://www.multiupload.com/9A4DXVTXX9 portal_2_BLUS30732_TB.rar (78.04 MB)] | ||
=== EBOOT.BIN details === | === EBOOT.BIN details === | ||
Line 857: | Line 464: | ||
== FW Changes (1.0/2.1) == | == FW Changes (1.0/2.1) == | ||
Compared to OFW 3.55: | Compared to OFW 3.55: | ||
[ | [http://www.multiupload.com/LAIIB6IMX0 ofw-vs-jb2.rar (4.18 MB)] | ||
====EULA.xml==== | ====EULA.xml==== | ||
<pre> <str id="msg_updater_10">This update will install PS3 system software version 3.55, modified to support homebrew software and the disc dongle.</str> </pre> | <pre> <str id="msg_updater_10">This update will install PS3 system software version 3.55, modified to support homebrew software and the disc dongle.</str> </pre> | ||
Line 881: | Line 488: | ||
====lv2_kernel.self==== | ====lv2_kernel.self==== | ||
only 1 function change, and a section added <br /> | only 1 function change, and a section added <br /> | ||
sub_28fe30 is replaced | sub_28fe30 is replaced <br /> | ||
the new section is loaded at 0x80000000007f0000 (which is where those payloads are being loaded) | the new section is loaded at 0x80000000007f0000 (which is where those payloads are being loaded) <br /> | ||
http://pastie.org/private/onlbfdxjdtaddb9blu0sq | |||
===dev_flash_010.tar.aa.2010_11_27_051337=== | ===dev_flash_010.tar.aa.2010_11_27_051337=== | ||
Line 920: | Line 524: | ||
== 2.1 == | == 2.1 == | ||
Dongle is released with 1.0, this PKG is used to update the dongle to 2.1 | Dongle is released with 1.0, this PKG is used to update the dongle to 2.1 | ||
SHA1: 4066FFEFD723FAF08EB84A62F4AA38180C40129C // MD5: 0200689D58FCA0FC51F7B738C33A5DC9 // CRC32: 4D72836 // CRC16: 8A62 | SHA1: 4066FFEFD723FAF08EB84A62F4AA38180C40129C // MD5: 0200689D58FCA0FC51F7B738C33A5DC9 // CRC32: 4D72836 // CRC16: 8A62 | ||
Unpkg/unself'ed: [http://www.multiupload.com/XC00DAHUXP dongle-updater.pkg.out.rar (2.03 MB)] <br /> | |||
Plaintext visible in the unself'ed eboot.bin : http://pastebin.com/EFQczE2r (interesting note: it used /dev_hdd0/vsh/tmp.bin as temp for the payload)<br /> | Plaintext visible in the unself'ed eboot.bin : http://pastebin.com/EFQczE2r (interesting note: it used /dev_hdd0/vsh/tmp.bin as temp for the payload)<br /> | ||
Line 935: | Line 538: | ||
002084E0 001FFFF0 EB 3B 01 F7 6F A9 CF 3C B6 EB 89 82 7D E6 7D 3B ë;.÷o©Ï<¶ë‰‚}æ}; | 002084E0 001FFFF0 EB 3B 01 F7 6F A9 CF 3C B6 EB 89 82 7D E6 7D 3B ë;.÷o©Ï<¶ë‰‚}æ}; | ||
[ | [http://www.multiupload.com/PFC3IZZNNN TB_dongle_payload.bin (2 MB)] | ||
SHA1: 43402D6FE2ECE43EBE91531EFA07C366D46DD121 // MD5: BA5AFAB174BF6003D41AC8951301B822 // CRC32: 248284D2 // CRC16: 8C78 | SHA1: 43402D6FE2ECE43EBE91531EFA07C366D46DD121 // MD5: BA5AFAB174BF6003D41AC8951301B822 // CRC32: 248284D2 // CRC16: 8C78 | ||
Line 1,418: | Line 1,021: | ||
00000010 03 6b 2d 2c 45 d7 25 ff aa 34 b1 a8 8b 5d a7 b3 | 00000010 03 6b 2d 2c 45 d7 25 ff aa 34 b1 a8 8b 5d a7 b3 | ||
... | ... | ||
== 2.2 == | == 2.2 == | ||
True Blue Dongle Update v2.2 - Initial worldwide release | True Blue Dongle Update v2.2 - Initial worldwide release | ||
SHA1: 504D53CD6EDFA3382510CCB40CE49F802073FBD4 // MD5: A09CBCD5B3AEC31B07D974BEB4AC21FE // CRC32: 82F977CC // CRC16: 92D4 | |||
[ | Unpkg/unself'ed: [http://www.multiupload.com/NUILFATYL1 TrueBlueUpdate-2.2.pkg.out.rar (1018.2 KB)] <br /> | ||
=== Payload (2.2) === | === Payload (2.2) === | ||
Line 1,433: | Line 1,037: | ||
0007B588 00072EF0 99 0A 4C 65 2A CE DE D6 0D C8 D2 73 FC B3 85 E2 ™.Le*ÎÞÖ.ÈÒsü³…â | 0007B588 00072EF0 99 0A 4C 65 2A CE DE D6 0D C8 D2 73 FC B3 85 E2 ™.Le*ÎÞÖ.ÈÒsü³…â | ||
[ | [http://www.multiupload.com/KARELUPQRS payload2-2.bin (459.75 KB)] | ||
SHA1: 69953C9CF60E67E798A22C1016ABCB44A1D42CDF // MD5: F0826BA059B352BC6100647DB7EFDE5F // CRC32: 4B3C2132 // CRC16: 8181 | SHA1: 69953C9CF60E67E798A22C1016ABCB44A1D42CDF // MD5: F0826BA059B352BC6100647DB7EFDE5F // CRC32: 4B3C2132 // CRC16: 8181 | ||
Line 1,447: | Line 1,051: | ||
! Start Offset !! End Offset !! descriptor !! Description | ! Start Offset !! End Offset !! descriptor !! Description | ||
|- | |- | ||
| | | 00000000 || ... || 0x0 || - | ||
|- | |||
|- | |- | ||
|} | |} | ||