[JayDee78]

Posted in linux section as it uses asbestos_ldr, but it is not needed to install anything other then the ldr...




This tutorial is no more dangerous then the others, AS LONG as you READ, and follow it to the letter.
The only part where things *could* go wrong, is if you downgrade, past the fw version your PS3 came with.

THIS IS YOUR RESPONSIBILITY TO KNOW/CHECK BEFORE CONTINUING!

Writing the dex EIDO to the flash should be as safe as on linux, as the posted version of multiman, can flash these in the same way as the dd command does.


!!!!UPDATE!!!!!

Get THIS tool and follow instructions.
EIDO (rootkey/unicorns) should be yours VERY fast!

Howto ----- * install package and run it * It will then black screen (no GUI) and restart the console automatically * FTP (other otherwise) retrieve your eid_root_key / PCK1 from /dev_hdd0/tmp/eid_root_key

THIS IS FOR YOU THAT

A: CAN DOWNGRADE TO 3.41.

B: HAVE A NOR PS3.

C: HAVE YOUR PC->PS3 WIRED VIA ROUTER (NO WIFI!!!) OR CAN SETUP A PC->PS3 NETWORK! Check this post for some instructions on PC->PS3 setups

D: IF YOU SCREW UP, YOU WONT COME AND BLAME ME. NO ONE IS FORCING YOU TODO THIS... IF YOU FEEL UNCERTAIN ABOUT SOMETHING: REFRAIN FROM USING THIS TUTORIAL.
I HAVE TRIED TO "n00b" PROOF IT, AND MADE IT AS SIMPLE AS POSSIBLE, SO IF YOU FEEL THIS IS STILL TO MUCH WORK, WELL, THEN YOU ARE "SOL" FOR THE TIME BEING!


Here goes:

Tools/Files you MIGHT (very likely) need:
(unless you have a faster or other way to downgrade)

Fastest downgrade method is to have a QA flagged console that have cfw 3.55.

Toggle QA | Codename: REBUG
When you are on cfw 3.55 run this and wait for the two beeps. QA flag is now set.
Activate with this:

Getting the QA flag menu PS3 Sixaxis + dualshock - controller - buttons Set your cursor on Network Settings and press the key combo (all at the same time): L1 + L2 + L3 (press left stick) + R1 + R2 + dpad_down

Tools/Files you WILL need:

Use any of the two below:

C2D (Do not forget to install openssl and change install dir to c:\openssl)
or
CEX2DEX Just works without any other install and this is the tool i use in this guide.

Memdump_0.01-FINAL
To read and save a flash dump to your USB

Multiman 20120722 (link is from deanks tutorial)
Multiman 20120722 Mirror
To install/flash EIDO when your dex flashdump is done

OFW 3.41
OFW 3.41 Mirror

MFW 3.41
MFW 3.41
MFW 3.41
MFW 3.41
This is the pup i myself used, with the patches added, use if you trust me..
Get OFW and do it yourself otherwise


MFW BUILDER 0.2
MFW BUILDER 0.2
MFW BUILDER 0.2
MFW BUILDER 0.2
To make your ofw 3.41 into a mfw 3.41

Dump_rootkey modifie par Attila
Dump_rootkey Mirror
No need to compile dump_rootkey as it is done for you in this zip
Use like this: c:\dump_rootkey\dump_rootkey 192.168.2.186



PAUSE!
Now that you have all files, make sure you are QA FLAGGED and ready for the downgrade! (Do not do it yet, the guide below will instruct when!)



AND SO THE REAL WORK STARTS! UNICORNS SOON!



On the PS3:

Lets start with installing memdump (PLACE USB IN SLOT NEAREST TO POWER IN THE FRONT) and dump the flash with X.
On NOR (AND THIS IS A NOR GUIDE ONLY) it should take like 5 seconds.

On PC:

When done take the dump to the pc and copy it to the CEX2DEX folder and start the program, load the flash*.bin and extract metldr.
Save as metldr (no file extension)
Save a backup of your untouched flash for the future. (Never know when it will come in handy)

Take the metldr and copy it to the data folder in the dump_rootkey folder on your PC.

On the PS3:

Install the asbestos_ldr.pkg

Install the 20120722 version of multiman. DO NOT TRY AND UPDATE FROM WITHIN MULTIMAN. JUST USE THE ONE LINKED ABOVE!

On PC:

Start mfw builder and load your OFW 3.41

Tick these options:

Patch LV1 hypervisor Patch LV2 kernel Patch package installer Patch application launcher

Save the new pup.


ON THE PS3:

Turn off PS3 and go into recovery and flash the newly created 3.41 pup.
REMEMBER THAT IF YOU HAVEN'T READ THE ABOVE ABOUT DOWNGRADING OR HAVE A PS3 THAT CANT DOWNGRADE PAST 3.55/3.50 YOU WILL SCREW YOUR PS3!

How to Access Playstation Recovery Menu 1. Turn off your PS3. 2. Hold The power button down; The system will turn on and turn off once again. 3. Once the System has been shutdown, re-press you finger until you hear 2 consecutive beeps 4. When you hear the 2 beeps take finger off power button. 5. You will be prompted to plug in your controller via usb and then hit the PS button 6. The Recovery menu will pop up.

When it is back in XMB check your PS3 IP and then launch asbestos_ldr.

Yes, the screen should be black.
Yes, the controller should stop working.
Yes, long press on power/switching power off is the way it should be to "reboot" it.

If previous steps have been done correctly you now are mere seconds from the UNICORNS

On PC:
Start a cmd window and cd to your dump_rootkey folder

Issue command; dump_rootkey *.*.*.*

*.*.*.*=PS3 ip

Unicorns! (FINALLY!)

In the dump_rootkey folder you now have eid_root_key.bin

Copy this to your CEX2DEX folder and rename it to dump (no file extension) and put it in the metldr dump row. (Notice your flash*.bin should also be loaded)

Save as my-DEX-flash.EID0.bin

Close CEX2DEX

Rename your my-DEX-flash.EID0.bin to my-DEX-flash.EID0.NORBIN and place on usb.

On the PS3:

Insert usb and start multiman.

Navigate to your "my-DEX-flash.EID0.NORBIN" and double-click on it. You should get a 3x yes/no promt (choose yes on all to flash the dex eido part)
Should give you a Success and then you reboot.

Now you can flash a DEX fw from XMB (I used Itskamel´s 3.55)

You are now on a DEX PS3...

w00t?

[final-den]

great tutorial
im going to try this in the evening.
thanks man

[DEFAULTDNB]

Nice guide I saw @PsDev tweet he would make a 3.55 version of asbestos, so hopefully this guide will get shorter and simpler soon

[final-den]

Originally Posted by DEFAULTDNB Nice guide I saw @PsDev tweet he would make a 3.55 version of asbestos, so hopefully this guide will get shorter and simpler soon

that's great news defaultdnb
maybe i will wait a bit more then

[majid25]

This looks really simple, no HDD format required, no Linux..this is great for NOR users. Any chance there will be a way to do this on NAND without Linux later down the road?

[rahul1989]

MFW builder 0.2 is down,, plz re upload.

[JayDee78]

Originally Posted by rahul1989 MFW builder 0.2 is down,, plz re upload.

Fixed, new link works.

[svenmullet]

Of course it doesn't work for me

C:\>c:\dump_rootkey\dump_rootkey.exe 192.168.1.72 [INFO] Connecting to '192.168.1.72'...ok. [INFO] Ping...ok. [INFO] VAS ID = 0x000000000000000B [INFO] map_lpar_memory_region(data): res = 0 [ERROR] Could not open './data/metldr'. [ERROR] Could not open './data/dumper'. 2 [main] dump_rootkey 5852 exception::handle: Exception: STATUS_ACCESS_VI LATION 17707 [main] dump_rootkey 5852 open_stackdumpfile: Dumping stack trace to dum _rootkey.exe.stackdump C:\>

[edit] Never mind, I'm a tard. (haven't put metldr in the folder yet, d'oh)

[spok]

Originally Posted by majid25 This looks really simple, no HDD format required, no Linux..this is great for NOR users. Any chance there will be a way to do this on NAND without Linux later down the road?

afaik by downgrade it will autoformat HDD & all data will b lost or am i wrong, what about if i cant Qflag my console, can i downgrade via factory mode with old JB?

[rahul1989]

1. By this -> "SAVE A BACKUP OF YOUR UNTOUCHED FLASH!!!" do you mean the original flash*.bin file?

2. when we save metldr, we have to provide a name for it,, what should we name it as??