[Asure]

Originally Posted by DEFAULTDNB @Asure , when you downgraded did you lose your data off your internal HDD? did it get affected in anyway?

Everything (all 400+GB) was still there. Including the Asbestos LDR and Memdump apps, accounts, edat files etc.

Probably not all apps/games would run, but at least Asbestos and Memdump ran perfectly, they seem to be signed with keys that work on 3.41/3.55 (geohot fake npdrm?). Or it might have been an option in MFW builder to allow unsigned eboots to run..i checked every option to allow peek/poke/unsigned code execution hehehe..

If you have everything set up before hand, the downgrade and dump doesn't take long, and then you finally have that coveted key. Also you don't need to re-use memdump again if you already did that and have metldr file. I wasted ~14 minutes or so to dump the whole nand/lv/eid stuff again on 3.41 but it wasn't needed, the extracted metldr file was the same from both dumps (duh!).

I'm wondering still what we can do with the SDK and live debugging over network, won't that get us keys?

[Hannibal1471]

Originally Posted by haz367 hehe..spot on...must be my poor engrish..can't blame the dutch..it must be me doing flemish scool back in the day j/k so yeah @Hannibal1471 ...another dutchy here..ur flemish right?

Yeah, a flemish one over here. I recognised binnepretje ;d

[haz367]

hehe..i bet he did but we don't give up so easely right
anyone ported to 3.55? can't seem to get it working..any tips on compiling..gonna look into that..need to setup PS1LIGHT in cygwin if thats even possible....if anyone have info/links pls do post

[MakinaCore]

this even right ? got it from cex2dex by gunner


- Loading Flash Dump...
- METLDR Address : 0x00000817
- METLDR Size : 0x0000E920


flash_eEID_35500.bin << got that from memdump ? this correct

[lamaboy]

can some1 write their connection settings plz
i'm on 3.41 hermes and can connect to ftp server but still no results with this program

[spectlze]

Originally Posted by MakinaCore this even right ? got it from cex2dex by gunner - Loading Flash Dump... - METLDR Address : 0x00000817 - METLDR Size : 0x0000E920 flash_eEID_35500.bin << got that from memdump ? this correct

If you have a NOR console and the total size of the flash equals 16,777,216 bytes i think your good to go. metldr file should be 59 kb in size.

[pSydeFX]

Originally Posted by AsSiTcH I dumped mine and Im on 3.55kmeaw

how ??????????

[ovhaum]

Originally Posted by lamaboy can some1 write their connection settings plz i'm on 3.41 hermes and can connect to ftp server but still no results with this program

Yeah, i want to know that too. I have tryed everything and still no unicorns. The problem must be on my internet network*... it HAVE to be!!

[zizoux]

My router has only one ethernet port, so i connected my ps3 to the pc but it didn't work.

[JayDee78]

Short tut on how i did it.

On PC:

Extract the dump_rootkey.7z (or the precompiled dump_rootkey modifie par Attila) to c:

Put the metldr in the c:\dump_rootkey\data folder (read below on how you get this file)

PS3:

Get your flash dump with memdump_0.01-FINAL, and extract the metldr with cex2dex etc etc etc, and put it in the data folder on the pc as i explained earlier

Install the asbestos_ldr.g.pkg from Naehrwert´s original download (dump_rootkey.7z)

As i was on 3.55 kmeaw and could downgrade i just got the 3.41 OFW (just google "ofw 3.41 download" and you will find it fast) and ran it through mfw builder 0.2

The settings i used:

Patch LV1 hypervisor
Patch LV2 kernel
Patch package installer
Patch application launcher


Went into recovery on the ps3 and flashed the mfw 3.41

Started the asbestos loader after boot up and then started dump_rootkey on my pc with the right ip and as promised: UNICORNS!

[INFO] Connecting to '192.168.2.186'...ok.
[INFO] Ping...ok.
[INFO] VAS ID = 0x000000000000000B
[INFO] map_lpar_memory_region(data): res = 0
[INFO] Copying files out...done.
[INFO] Constructing SPE...done. (res = 0)
[INFO] priv2 0x00004C0001260000
[INFO] problem 0x00004C0001240000
[INFO] LS 0x00004C0001200000
[INFO] shadow 0x0000300000025000
[INFO] ID 0x0000000000000002
[INFO] Setting up SPE...done.
[INFO] map_lpar_memory_region(shadow) : res = 0
[INFO] map_lpar_memory_region(problem) : res = 0
[INFO] map_lpar_memory_region(priv2) : res = 0
[INFO] map_lpar_memory_region(ls) : res = 0
[INFO] set_spe_privilege_state_area_1_register : res = 0
[INFO] Starting SPE in isolation mode...done.
[INFO] Interrupt status (2, application) = 0x0000000000000011
[INFO] -> SPU mailbox threshold interrupt
[INFO] -> mailbox interrupt
[INFO] Mailbox value = 1
[INFO] -> Dumper loaded.
[INFO] Transferring eid_root_key to buffer...finished.
[INFO] Dumping eid_root_key...done.
[INFO] SPU status = 0x00000081
[INFO] Requesting SPE isolation exit and stop.
[INFO] Destructing SPE...done.
[INFO] Press any key to exit...

Hope this helps some of you (atleast you that CAN downgrade)