• PS3 developer  an0nym0us  has released a tool called memdump. You can dump lv1, lv2, NAND/NOR Flash, and eEID from GameOS with one app now.

    Readme

    +===========================+
    | |
    | memdump v0.01 |
    | |
    +===========================+

    For all of you out there intereseted in, or already in the process of reverse engineering the
    PS3, this new tool will make your life a whole lot easier! Now you can dump LV1, LV2, NAND/NOR
    Flash and eEID from one tool! There have been methods in the past that accomplished the same
    goals, but certainly the ease of use and speed hindered many. Of course, none had such a
    beautiful user-interface either.

    Usage:
    ——
    Place the necessary pkg file in the root of an empty USB flash dongle, and install like any
    other pkg.

    1. Place pkg on USB flash dongle.
    2. Select “memdump” icon.
    3. Select type of dump to perform once loaded.

    The following buttons are mapped in the user interface:

    △ Dump LV1 memory
    ◯ Dump LV2 memory
    ✕ Dump FLASH storage
    ☐ Dump eEID storage

    SELECT cycle menus
    UP cycle menus
    DOWN cycle menus
    LEFT cycle menus
    RIGHT cycle menus

    START exit

    Requirements:
    ————-

    CEX or DEX PS3 fat or slim
    MFW 2.70 – 3.55 (with LV2 peek/poke and LV1 hvcall 114 patches)
    USB Flash drive (if no Flash drive is available, dumps will be stored in /dev_hdd0/tmp)

    Testing:
    ——–

    memdump is known to work on CEX or DEX PS3s running firmware versions above 2.70,
    with or without OtherOS++ patches.

    Bug Reports:
    ————

    To submit a report of a bug, please join #memdump on EFNet, and have the log file ready.
    You can find the log file where the files were dumped.

    Files:
    ——

    readme.txt
    memdump.self 5189ca393df77e06794f948c2921814267d54e02
    memdump.gnpdrm.pkg a28a23b7de3380c6917e12352de24cde93cdb817
    memdump.npdrm.pkg 520ec81f89b146926149ef33f2faab2946e2c020

    Download memdump v0.01

    Source PS3DevWiki

    UPDATE

    Form more information and what consoles this software works on, check this link:
    PS3 Dev Wiki

    UPDATE 2

    I created this video, showing the application in action and how extremely easy it is to use:

    All music in the video belongs to PS3HaX member DEFAULTDNB

    Discuss in Forums (35)


  • 35 Comments

    1. mcmrc1
      05-13-2012
      06:19 AM
      1

      Thx devs you keep this scene alive...

    2. zecoxao
      05-13-2012
      06:34 AM
      2

      I wonder if this makes a full 256 MB flash dump from NAND phats ...

    3. GregoryRasputin
      05-13-2012
      06:50 AM
      3

      Thanks [MENTION=141843]manster[/MENTION] for posting this, front paged

      Thanks [MENTION=69980]an0nym0us[/MENTION] for the tool

      Viva La PS3 Scene

    4. Pockets69
      05-13-2012
      06:53 AM
      4

      [MENTION=141843]manster[/MENTION] is back hell yeah!

      thanks [MENTION=69980]an0nym0us[/MENTION] for the tool, it will indeed come in handy i am sure of it...

    5. GregoryRasputin
      05-13-2012
      06:56 AM
      5

      Originally Posted by Pockets69 View Post
      [MENTION=141843]manster[/MENTION] is back hell yeah!
      Thats what i thought when i first seen this post, i miss manster posting PS3 stuff

    6. CrazyLinuxNerd
      05-13-2012
      06:57 AM
      6

      Nice tool! Thanks an0nym0us!

    7. euss
      05-13-2012
      07:09 AM
      7

      Now you guys know what I was doing when not on ps3devwiki.com past times...

      It took alot of sweat and debugging/testing, specifically because the bar was set high with full support for the lowest firmware that could be minimalistic patched with PS3 MFW Builder as is (it was always a dream of me to have all the firmwares dumped, thanks An0nym0us for making that partly possible since 2.70 up to 3.5x). And [MENTION=202964]sandungas[/MENTION] for making such nice graphics for the application!

      Originally Posted by zecoxao View Post
      I wonder if this makes a full 256 MB flash dump from NAND phats ...
      It unmasks lv1 onthefly and thus has bootldr with complete flash as ps3 handles it (the second bootldr is not referenced by the PS3 itself, it is (most likely) a backup file for Sony Repair). The rest is all blank (FF's).
      So to answer the next question: yes, this dump is valid enough to use as an input file for a hardware flasher. Only problem is that Flowrebuilder currently can only unpack partly the dump, as it extracts all files - except bootldr and does not warn the user that it is missing (but I already contacted the author which promised to push that fix into the next release of Flowrebuilder)

      So in short, this dumps:
      - flash_eEID_version$.bin = 64 KB
      - lv2_dump_version$.bin = 8192 KB
      - lv1_dump_version$.bin = 16384 KB
      - flash_stor_version$.bin = 245504 KB

    8. zecoxao
      05-13-2012
      07:51 AM
      8

      if that is so, then this is a MUST to have to every person who wishes to mess around with their flash

      libpatchutil/lv1_patches.c: patch_lv1_unmask():#442 :: patching lv1 unmask bootldr
      libpatchutil/lv1_patches.c: patch_lv1_unmask():#503 :: patched lv1 unmask bootldr
      just noticed, thanks for the explanation

    9. alienkid
      05-13-2012
      10:51 AM
      9

      Very nice.
      Big up an0nym0us and all involved.

    10. popsky
      05-13-2012
      02:04 PM
      10

      Merci

    11. bigo93
      05-13-2012
      02:13 PM
      11

      Does this mean I get cookies?!

    12. DEFAULTDNB
      05-13-2012
      02:14 PM
      12

      Yeah My Unicron Remix at the beginning of the video! Big ups [MENTION=7773]GregoryRasputin[/MENTION]!

    13. Blaz0r
      05-13-2012
      03:48 PM
      13

      Good job!

      But where does this lead us?

    14. gle80
      05-13-2012
      04:38 PM
      14

      Blaz0r: Good job! But where does this lead us?
      am not a dev, so this is only speculation

      this app would aid in customizing the XMB (dashboard) or build a new one

    15. WalangAlam
      05-13-2012
      05:02 PM
      15

      Thanks. Now I will be more confident to use my flashers and begin my long long set aside project of downgrading my ps3 :D

    16. smartymarty07
      05-13-2012
      07:01 PM
      16

      Thanks for this! this will come in really usefull to a few :-)

      Also [MENTION=224021]DEFAULTDNB[/MENTION] nice beats man!

    17. NTA
      05-13-2012
      07:51 PM
      17

      A custom XMB for the PS3 would definitely be a nice change. I liked it with the PSP and there's possibly more potential for the PS3's XMB if it's able to be customized in such a way.

    18. etertay
      05-13-2012
      08:25 PM
      18

      heh. another tool?? i mean im really gratefull for any sort of work being done but..its like all we see are "tools"

    19. ToMoBoBo
      05-13-2012
      10:58 PM
      19

      Isn't this all someone would need to dump and find out what's happening with 3.6+ dongles and cobra?

    20. svenmullet
      05-13-2012
      11:57 PM
      20

      No, it only works on FW with peek/poke.
      Also, these tools have been available for ages!

    21. euss
      05-14-2012
      12:07 AM
      21

      Originally Posted by svenmullet View Post
      No, it only works on FW with peek/poke.
      Also, these tools have been available for ages!
      Mind telling me what tool was available that has:
      - dynamic firmware detection
      - automatic patching on the fly
      - dumping of lv1, lv2, flash and other MMIO in one
      - works on USB stick, harddrive with these speeds
      - works on all consoles, NOR/NAND, but also other TargetID, like Debug/DEX, Tool/DECR, Kiosk/SEX, Retail/CEX etc.

      See? You cannot name even one.

    22. JOshISPoser
      05-14-2012
      12:20 AM
      22

      i'm speaking out of ignorance and disagreement with how sven said it, but he did say "tools".
      this is quite the handy tool and i think it's great but like he said, this stuff is available. i'm not gonna research it cause i'm not a dev and this stuff does not affect me directly. like i said though, i don't like how this stuff was shot down cause it is progress, but i think it is available in other forms.
      like you said, it's all available in one which is cool. i like when this stuff happens cause i feel someone is gonna do something soon that is gonna really help the scene that doesn't have a price tag

    23. svenmullet
      05-14-2012
      12:57 AM
      23

      Originally Posted by euss View Post
      Mind telling me what tool was available that has:
      - dynamic firmware detection
      - automatic patching on the fly
      - dumping of lv1, lv2, flash and other MMIO in one
      - works on USB stick, harddrive with these speeds
      - works on all consoles, NOR/NAND, but also other TargetID, like Debug/DEX, Tool/DECR, Kiosk/SEX, Retail/CEX etc.

      See? You cannot name even one.
      Okay, you got me
      I wasn't putting it down, BTW, it's nice to have something like this all in one package, and the tools of which I was referring to don't do the auto-patching, etc. So in that regard, it is a very good app, but I stand by my statement that all the tools (integrated into one in this) have been available separately (and less user friendly) for a long time.

      I hope version 0.02 includes "Dump Syscon" as well I could never get that to work (at least not on KMEAW)

    24. sandungas
      05-14-2012
      01:25 AM
      24

      Another important detail of this app, from the point of view of the graphic, is it uses some new features that i bet will be added to psl1ght to improve the graphics library

      Trying to summarize a bit the number of GUI features:
      ---------------------------------------------------
      -The whole interface uses a new method of autoscale to fit in all screen resolutions
      -It uses several threads to improve the dumping process (all the GUI is managed from specific threads that doesnt delays the main dumping thread)
      -There are 26 animated images, this images uses a "matrix" image with states:
      -----4 digits at the top (indicates the version)... each digit has 30 possible states
      -----16 leds (indicates activity, included the progress bar)... each led has 4 colors for a total of 20 possible states
      -----1 double dip swith (indicates on/off state)... each switch with 2 states... for a total of 4 states
      -----4 dualshock buttons at the right (indicates actions)... each with 2 states, for a total of 16 states
      -Also the blinking code for the leds has been improved several times
      -Probably lot of others code improvements that i ignore or i dont remember

      There are not much hombrews using a complex interface like this, but after improving the graphic library in psl1ght this will be easyer
      Im not a coder, i just did the graphics, but this is what most motivated me, and it was a fun (and long) process of brainstorming with an0nym0us like this (not a real example, but very accurate, heheh):

      <sandungas> take a look at this preview image... i added some digits at the top
      <an0nym0us> hmmm, looks good, i wonder if i can manage to animate them
      <sandungas> interesting... we can use this digits to place the version of the program
      <an0nym0us> good, this way there is no need to edit the image for the next versions
      <sandungas> i can add around 4 digits, there is not much space for the traces... 4 is ok ?
      <an0nym0us> 4 is perfect, im making some tests and it seems will work

      This was repeated lot of times during a lot of days, the interface has been redone like 20 times, the image has around 100 layers, and i must admit i never imagined the final result is much better than i thought

      But now im thinking in more additions, damn we will see for the next versions... editing this image can be (another) pain in the ass because there is no more space for copper traces but i like the final result
      And btw... the electrical circuit is realistic, some purist guy can point to some electrical problem (be benevolent, consider is a "multilayer" board and there are "hidden" traces), but also he will understand that most of the traces and components has a reason to be there, i must admit is geek but also a "techno-joke"

    25. CrashSerious
      05-14-2012
      09:51 AM
      25

      Originally Posted by etertay View Post
      heh. another tool?? i mean im really gratefull for any sort of work being done but..its like all we see are "tools"
      Then write a game.

    26. DEFAULTDNB
      05-14-2012
      09:56 AM
      26

      Originally Posted by CrashSerious View Post
      Then write a game.
      OT: whatever happened to that FPS engine touted ages back!(2011-07-20)
      http://blackbird.usask.ca/forum/viewtopic.php?id=48

      That could have lead to some fierce homebrew I recon....

    27. novadragon849
      05-15-2012
      05:48 AM
      27

      A really really noob question but does this lead us any closer to higher cfw?

    28. vgturtle127
      05-16-2012
      11:30 PM
      28

      Originally Posted by novadragon849 View Post
      A really really noob question but does this lead us any closer to higher cfw?
      Yes and no. It allows more people can easily to dump their LV1/LV2 memory, dump their eEID, and dump their flash. Which means it's much easier for everyone to do research instead of waiting for tools to finish or checking to make sure that the dumps are clean. So, yes, in terms of progress is progress. But no in terms of ACTUAL progress. You can use ancient command-line Linux tools, OR you can just install a package and run it! And just FYI, if there is a jailbreak for 3.60+ FW, you will hear about it EVERYWHERE. Not just in one place. So just wait patiently, keep checking here and other PS3 scene websites, browse the forums, join an IRC chat or two, maybe try Linux and programming, and by the time you know what's going on...BAM. 8.74 CFW!
      ************* [ - Post Merged - ] *************
      Originally Posted by etertay View Post
      heh. another tool?? i mean im really gratefull for any sort of work being done but..its like all we see are "tools"
      The more tools available that are easier and simpler to use, the more people can use them. Including developers. The more knowledge we have about the PS3 the more exploits we can find. The more exploits we find the better chance we have of unlocking the PS3. If we unlock the PS3, we win. And if we win, Linux and homebrew win. And if Linux and homebrew win, then I'm happy. Seriously, though. The more tools, the better I say. If you go on the fact that "the tools are already available", then we've had these tools since the PS3 came out. The easier all tools become though, the more people can research/develop for the PS3. And more makes it easier, makes it faster, makes it sooner. WIN WIN WIN. Positive attitude, dude. Plus if I have only one choice for a tool, I ONLY HAVE ONE CHOICE. But if I can choose between a QT4 GUI, wxWidgets GUI, and a CLI, then I can choose what's best for me. Just saying.

    29. Ada Love Lace
      06-11-2012
      11:59 AM
      29

      Which activity can affect when we have 2 differents dumps for lv1/lv2 (without mounting different LV2) and the period for that difference (only when reboot?)
      Purpose of this tool is for sure not for me but i still prefer to ask.
      Otherwise, graphic details are really nice.
      Thanks you for that tool and the people behind it.

    30. euss
      06-11-2012
      12:04 PM
      30

      well, if you have an app that pokes lv1/lv2 with certain patches, then those would show up in the diff of those dumps before and after.

      quick dumping makes tracing easy

    31. Ada Love Lace
      06-12-2012
      11:42 AM
      31

      Originally Posted by euss View Post
      well, if you have an app that pokes lv1/lv2 with certain patches, then those would show up in the diff of those dumps before and after.

      quick dumping makes tracing easy
      Thanks you for the answer.
      The "quick & tracing" took me 24 hours to understand...but i understand it was the best answer possible from my basic question.

      My main goal is to confirm on the wiki : dev_MCA is for memorycard adaptor.
      (only the name description, not even to really mount it with some patch)

      The differences i searched about the 2 dumps were about it. I dumped the Lv1/lv2 without memory card adaptor (with memory save inside) and after with.
      The second dump have infos such in this order:
      -Title of the save data & Identifier of an memory card save ( such BISLPS)
      -伐/dev_MCA
      -save data (with SC as "magic", identifier..)

      I read something similar for original ps1 save data and how save data were loaded, , such order to don t have to load everything but it s not really important.

      Is it enough to confirm the mount name description for dev_MCA?
      (to document more than that i don t think i m able right now)

    32. euss
      06-12-2012
      03:46 PM
      32

      It sounds perfectly reasonable to me

      /me slaps forehead, why didn't I think of that :P

    33. Ada Love Lace
      06-12-2012
      07:55 PM
      33

      Originally Posted by euss View Post
      It sounds perfectly reasonable to me

      /me slaps forehead, why didn't I think of that :P

      Thanks you for the wiki and the answer here, this "unknown" for dev_mca was something since fews weeks i was wondering (even before you linked this page fews days ago)

      I ll try to understand and retrace a little more (libmcadpt on LV2 and other basic things) but there are not so much more i can get at my level.

      I suppose Dev_System is: when the ps3 is connected to sony server for semi debug conversion? edit: or when connecting hard drive for restore-export/ formatting or when toogle for otherOS or why not the fews ps2 games who can be installed (2G)?

      This MemDump 0.1 is really useful & fast, and if it wasn t release i was not going for the previous pkg to dump Lv1 so thanks you for it and others devs.

      I have a lot of others questions about sub class like usb-psp/atrac or MCA-PocketStation but at this stage i need to read more.

      Thanks you.

    34. Ada Love Lace
      06-14-2012
      04:31 AM
      34

      Little feedback:
      Memdump didn t like the Sony walkman (NW-S764), (USB class:08, sub class:06, usb protocol: 50) with WM port. Reboot, de sync controller, back to xmb, or loading time too long or writing dump too long.
      It s not important problem and i don t know which infos can be really useful in this case for an0nym0us.
      I m enjoying a lot this apps at my level (and the best i can do was just the name for dev_MCA), finding the dead face or any others things i can not understand but it s entertaining, thanks you a lot.
      Can we expect MemDump 0.2 in near future?

      Edit: it can be because of the cheap HUB USB i use and when with the Walkman device the protocol for ATRAC device on PS3 but other than that perfect.

    35. Deafmobil
      07-15-2012
      05:25 PM
      35

      hello guys, ps3-tools.de and pspking.de says PS3 NAND Console bricked!

      http://www.ps3-tools.de/thread.php?p...831#post448831