PS4 News on Facebook! PS4 News on Twitter! PS4 News on YouTube! PS4 News RSS Feed!

Home PS4 News - Latest PlayStation 4 and PS3 News

August 24, 2012 // 7:50 pm - Following up on the previous update, today I am releasing my True Blue USB dongle PS3 ELF dumper which works with any PlayStation 3 Firmware greater than 3.56 to dump the encrypted TB EBOOT / ELF files once they are loaded.

Download: True Blue USB Dongle PS3 ELF Dumper / True Blue USB Dongle PS3 ELF Dumper (Mirror) / True Blue USB Dongle PS3 ELF Dumper (Mirror #2) / True Blue USB Dongle PS3 ELF Dumper (Mirror #3) / True Blue USB Dongle PS3 ELF Dumper (Mirror #4) / True Blue USB Dongle PS3 ELF Dumper (Mirror #5) / True Blue USB Dongle PS3 ELF Dumper (Mirror #6) / True Blue USB Dongle PS3 ELF Dumper Source Code / True Blue USB Dongle PS3 ELF Dumper Source Code (Mirror) / UTEBOOT (DUMPEDBOOT.bin and DUMPEDBOOT1.bin) by arnes_king / Mass Effect 3 BLUS30853 RAMDUMP by gibson25 / TB ELF Dumper v2 (np_trp_prx.rar) / TB ELF Dumper v2 (Mirror) / DUMPEDBOOT PoC by mellss

Tested on:

  • Original 355 -> ok
  • True Blue CFW v2 -> ok
  • ...

There are some bugs (size of dump ...) but it works. It's ELF dumper from memory and it work with True Blue cfw v2 and any 3.55 firmware because it doesn't use lv2 peek/poke.

Warning: It will not brick your ps3. But I am not responsible for any damage.


  • Enable dev_blind with multiman
  • copy libsysutil_np_trophy.sprx from /dev_blind/sys/external/external to dev_hdd0/ and rename it "orignal_libsysutil_np_trophy.sprx"
  • copy my modified "libsysutil_np_trophy.sprx" to /dev_blind/sys/external/
  • load a True blue game from multiman
  • exit multiman
  • run your game
  • wait few minutes (if you get black screen after 3 minutes reboot ps3)
  • exit game
  • go to ftp
  • in dev_hdd0/ there are your decrypted DUMPEDBOOT.bin
  • copy and rename it with another name.

Howto uninstall patch - Two ways:

  • You could uninstall this patch by replacing modified libsysutil_np_trophy.sprx by orginal libsysutil_np_trophy.sprx
  • Or update in recovery mode

Thanks to: Ps3dev

Brief Guide:

1 - Install TB ELF Dumper first as stated in its readme file.
2 - Start Multiman, it will make a dump of multiman eboots, so you must delete it first by browsing to dev_hdd0 then delete all DUMPEDEBOOT.BIN files you found there.
3 - Back to multiman game selection then select any TB game then launch it.
4 - Start the game from XMB then wait for some times until game start.
5 - Exit game now then start multiman again then browse to dev_hdd0 and now you must found a decrypted game dump.

From PlayStation 3 developer deank (via comes a revision as follows:

Download: TB ELF Dumper v2 (np_trp_prx.rar) / TB ELF Dumper v2 (Mirror)

[Register or Login to view code]


  • Doesn't stop dumping when it reaches embedded ELF
  • Dumps 35MB of RAM in one write call (so it takes ~1 second)
  • Dumps are saved in /dev_hdd0/RAMDUMP-##.BIN where ## is from 00 to 99 for 100 sequential dumps
  • Doesn't really require the original sprx, since loading never succeeds anyway
  • Tested: dumps mM, Beyond Good&Evil HD PSN...
  • Rebuilding the original 'elf' takes few minutes if you know what you're doing

Finally, from mellss: I tested shadoxi patch, in ofw 3.55 dex and 3.55 cfw it work fine (but like he said some buggy with size of dump). And also let him time to dump all memory!!! (it take for me around ~10 - 20 min !!!)

Proof Of Concept:

I make a fself EBOOT.bin (4.11 dex) which load reencrypted (flself) shadoxi patch and YES his patch dump my eboot and also some 4.11 dex lib sprx !!! So if someone can run shadoxi or deank patch when a game is running we can get decrypted 4.xx EBOOT.

I think TB team load the decrypted eboot to another offset in memory, that's why some of people get ps3 crash when TB was plugged. But, We can get this new offset by editing shadoxi exploit and print the address of a variable (stack address) to get the new one.

True Blue USB Dongle PS3 ELF Dumper and Source Code Surfaces

True Blue USB Dongle PS3 ELF Dumper and Source Code Surfaces

Follow us on Twitter, Facebook and drop by the PS3 Hacks and PS3 CFW forums for the latest PlayStation 3 scene and PS4 Hacks & JailBreak updates with PlayStation 4 homebrew PS4 Downloads.

#832 - xiaNaix - August 15, 2012 // 6:00 pm
xiaNaix's Avatar
Z, you sank my battleship!

#831 - niwakun - August 15, 2012 // 5:41 pm
niwakun's Avatar
yeah, it's available already in newsgroup

#830 - matomato - August 15, 2012 // 5:28 pm
matomato's Avatar
New Fix DRM-Free Released by Team Duplex:

- Neverdead.Eboot.Patch.DirFix.PS3-DUPLEX
- Tiger.Woods.PGA.Tour.13.Eboot.Patch.PS3-DUPLEX
- PS3 Dirt.Showdown.Eboot.Patch.PS3-DUPLEX
- Devil.May.Cry.HD.Collection.Eboot.Patch.PS3-DUPLEX
- Sniper.Elite.V2.Eboot.Patch.PS3-DUPLEX
- Syndicate.Eboot.Patch.PS3-DUPLEX
- Twisted.Metal.Eboot.Patch.PS3-DUPLEX
- Snipers.Invisible.Silent.Deadly.Eboot.Patch.PS3-DUPLEX
- Assassins.Creed.Revelations.Eboot.Patch.PS3-DUPLEX

#829 - Hernaner28 - August 15, 2012 // 4:45 pm
Hernaner28's Avatar
Just a noobish question: will only TB patches become available for CFW 3.55 or will other games still unfixed get a fix? For example the Amazing spiderman... or any other game unplayable yet.

#828 - cfwprophet - August 15, 2012 // 4:25 pm
cfwprophet's Avatar
Transient I don't care about fame or credit's i just try to talk to peoples but it is a diff if you talk in public via forums or if you talk private via irc channel's and so on. I never made any mysterious about my finding's but i won't do it puplic any more. Anyway, i already told other's about my finding's in case of the core dump function. It's just thing's like that WHY i mainly don't talk puplic any more. I don't need to proof thing's to any one. If you wan't to know something ask me in private, then trie, and if it works....well you then will see for your self.

One last word about credit's... if i want to have credit's i would release stuff under my public name and not under a "anonymous" name

racer0018 You misunderstood me. I'm still there and do thing's and from time to time you will also see releases under my puplic name. But yea... those are 2 diff world's... the public scene and the underground scene. Really you can't imagine. Everything start underground. And sooner or later it get's public. But the real ongoing is in underground scene.

#827 - racer0018 - August 15, 2012 // 3:27 pm
racer0018's Avatar
That is the last thing that we need is for you to do that. Are we not working all for the same goal and that is to play newer games without the need for dongles. Just don't give in a go underground. Thanks

#826 - Transient - August 15, 2012 // 3:20 pm
Transient's Avatar
No offense, cfwprophet, but did you actually have a working example or just a theory? I don't doubt your ability, but you have to realize the whole DEX+coredump idea is over the heads of most readers here (non-developers).

It should come as no surprise then that Duplex is seen as heroes for providing patches that remove TB DRM. If you wanted the credit, you needed to provide a working example that the average reader can use.

#825 - racer0018 - August 15, 2012 // 12:20 pm
racer0018's Avatar
This is good news. I just got one cause it was free but now I can tear it apart and see what I can do with it. Also i will be able to run another firmware, so that kicks butt. Good news but on the hand what I they don't release any more eboots, so I closing I hope he found a way to make all eboots work. Thanks

#824 - p0tsm0ke - August 15, 2012 // 11:46 am
p0tsm0ke's Avatar
all i have to say is if there is scene members using DRM as a profit then i hope they all burn in hell.

^ hope more info pops out. Great news for the people that own a PS3 still. Also great news for the scene


#823 - ASTRAL2k1 - August 15, 2012 // 10:14 am
ASTRAL2k1's Avatar
That's awesome news!