Hey Dean I been trying to find something relevant to how Cobra handles all these BD , DVD, PS2, etc and I found out some pieces that probably might not mean anything but maybe they could have some light.
First I was trying to decrypt the Cobra Manager EBOOT.BIN by using different methods but I was not able to, I was planning on looking with Hex editor for references to SDK functions, I know its not like decompiling, but just to get some ideas.
Then I decided to give a Hex look to the released Cobra v2.0 payload by Jaicrab, and if you check around offset "
002c17bc0" you can find stuff like this...
Code:
CELL_FS_SIMPLE..~MountInformation.......cellFsUtilChangePs2discLayer....lock_ps2disc....unlock_ps2disc..unlockAndReleaseMountpoint......cellFsUtilMount.cellFsUtilNewfs./.......getMountNumber..destroyFileSystemInstance.......get_ps2disc_lspinfo.....cleanup_request_signal..-PART_SIZE......-PART_OFFSET....-PART_ID........%s: cond_destroy failed[%#x]..../dev_ps2disc..../dev_ps2disc1...fs_vfs::%s: mutex_lock failed[%#x]......fs_vfs::%s: mutex_unlock failed[%#x]....before Unmount..after Unmount...-PLAYSTATION3...CELL_FS_HOSTFS..~MountInformation..[/QUOTE]
And around offset "002c30B0" I found some references to some kind of Virtual UDF Partition, and even reference to DVD Rewritable Volume...
[QUOTE]/dev_hdd0/tmp.../dev_hdd0/tmp/fs......../dev_hdd0/tmp/fs/iso9660.dat....-ISO9660_MULTI..%/@.....%/C.....%/E.....-HDDCACHE..............;...Z...x...—...µ...Ô...ó.......0...N....CD001...%08X%08X .......%c%c%c%c%c%c%c..%04d%02d%02d%02d%02d%02d%02d%c...OWNER NAME......Sony Computer Entertainment Inc. J......CONTACT INFORMATION.....$ Dvd Rewritable Volume $.......PSX Volume.....*UDF LV Info....*SONY...*OSTA UDF Compliant.....UDF_FEDesc::decRefCounter: fe->refc has minus value.....UDF_FEDesc::incRefCounter: fe->refc has minus value.....BAD BLOCK NUMBER........%s/%08d../tmp...DEV_LSP.UDF_List2#readFromFile(UDF_RandomAccess *)......UDF_List2#readFrom(u_char*, UDF_size_t).UDF_List2#readFrom(u_char*)......*UDF Virtual Partition..
When I saw the previous chunk of data I remembered about this (i think you know where I found it xD)...
File Systems for the Game Disc
For all physical media, the file systems are ISO 9660 Level 3, Joliet, and the UDF 2.50 Bridge format. Joliet
is prioritized by the Reference Tool in the recognition of file systems used on game discs.
|
Probably you have the payload by Jaicrab but here you have the link just in case:
http://www.megaupload.com/?d=NEP6CVW7 (Cobra Payload v2)
Hope you can find something useful, if not, then at least I tried LOL xD
PS: This guy at 'PS3-News' found some stuff from LV2 dump back on 2010 that looks like part of what Cobra have in their payload (
http://alturl.com/huvdc)
Code:
<storage_interface: unknown command: %08x
PS3 Emulator Image NoEnc bdemu function was called already image inserted. BDemulator: enabled with%s speed emulation
out BDemulator: enabled with invalid configuration
bdemu_insert was called by invalid situation. bdemu is not ready. bdemu_insert was called already image inserted. bdemu_insert was called by invalid index. bdemu_eject was called by invalid situation. bdemu_eject was called already image ejected. _storage_daemon disk_scheduler_mutex disk_scheduler_non_rw_queue boo initialize Bug CELL100004526 storage_connection sp-mutex storage_connection_list disk_scheduler_frame elevator_disk_scheduler ################################# fifo_disk_scheduler fifo_disk_schedulers_queue void iosys::infra::stack<object_type>::dump() [with object_type = iosys::storage::reportable*] virtual void iosys::storage::storage_device::report(iosys::storage::storage_request*, lv2::uint64_t) storage_device_mutex storage_driver_busy_queue int iosys::storage::storage_initialize() sys hw config ERROR: [Storage] Config Service NOT FOUND ERROR: [Storage] Config Event handler not installed registry-mutex storage_service_list @ pad_manager PAD_IOCTL_SET_PWM_FEEDBACK ps3_game_pad: Controller register version %x.%02x is old.
ps3_game_pad: Controller firmware version %x.%02x is old.
@ set_vfs_id_for_current_process set_vfs_id fs_process_finalize CELL_FS_ADMINFS: CELL_FS_DUMMY: CELL_FS_DUMMY:/ fs_loop_thread fs_test_5 fs_test_4 fs_test_3 fs_test_2 fs_test_1 CELL_FS_ADMINFS CELL_FS_UDF CELL_FS_ISO9660 CELL_FS_DUMMYFS CELL_FS_UFS /host_root %s: status[%#x], id[%#x], address[%p]
%s: unexpected is_closing for process_fd(%d), array[%p]
%s: set vfs_id[%#llx] for process_fd(%d) failed[%#x], array[%p]
PS2: he even mention he found this on a LV2 dump...
adress 00586aa0h - 00586ab0h
mabe set onff the PS2 emu?
Code:
ps2softemu:1
|
SeeYa!
^^