[Omnicidux]

Already Plenty of CFW's but more is better and if added any Better features

[munky875821417]

I got an idea:
Ps3 with e3
Have 3.55 cfw and 4.xx ofw on Nor flashes
Modify lv1 on to perform memdump during initialization on 3.55 and dump on local medium
Set ps3 on 4.xx ofw
Run
Switch nor to 3.55 cfw
Use cell reset line to reset "keeps ram alive from 4.xx"
3.55 performs dump to specified area
Reinstall 3.55 cfw with unmodified lv1
Locate dump
Profit

Maybe it can be done with dual nand as well

[r07f1]

anyone remember this? http://pastie.org/4830564
maybe this can help ,)

[munky875821417]

Originally Posted by r07f1 anyone remember this? http://pastie.org/4830564 maybe this can help ,)

Self Decrypter Mediafire v.6

[Asure]

Sony may have plugged that hole in OFW some time ago, but untill someone generates a PKG and tests with that decrypter we can't really tell

Edit: Found a link to a (3.41) pkg for this:
http://www.sendspace.com/file/w30wgf

Anyone on DEX fw can confirm if it runs and decrypts something?

- Put the file you want to decrypt into :
        /dev_hdd0/game/DCRY00001/USRDIR/SOURCE/
- Launch the decrypter
- Get the decrypted files from :
        /dev_hdd0/game/DCRY00001/USRDIR/DESTINATION/

[doggie721]

Originally Posted by Asure Sony may have plugged that hole in OFW some time ago, but untill someone generates a PKG and tests with that decrypter we can't really tell Edit: Found a link to a (3.41) pkg for this: http://www.sendspace.com/file/w30wgf Anyone on DEX fw can confirm if it runs and decrypts something? - Put the file you want to decrypt into : /dev_hdd0/game/DCRY00001/USRDIR/SOURCE/ - Launch the decrypter - Get the decrypted files from : /dev_hdd0/game/DCRY00001/USRDIR/DESTINATION/

I try decrypt lv2_kernel.self of the FW 4.21 with this but just I get this error.

Click here to see full text

[Asure]

Thanks! This is from OFW 4.21 unpacked?
I don't have a DEX unit, but you could offcourse try some other files, like psp_emulator.self, vsh.self etc. Perhaps similar files from an older update to see when they plugged the hole.

The tool must do something. Except there was no 'DEX For everyone!' party back in 2010 so it did not get much attention

Possible reason why kernel self didn't decrypt: (note, i'm not an expert at source/coding..)

#define CHECK_OFFSET            0x70
#define CHECK_VALUE                     0x40

The 0x70 offset is checked to hold 0x40
The program reads the code and puts some elements in a buffer, element #4 is checked against the value 0x40
If it doesn't match, print text & exit":

if (BufferCheck[4] != CHECK_VALUE) {
        YCoordinate += 80;
        dbgFontPrintf(200, YCoordinate, TEXTSCALE, "ERROR: THIS FILE CANNOT YET BE DECRYPTED (COMING SOON) !");
        goto EndProg;

So what's at 0x70? I think the appinfo header?

[ryant001]

Originally Posted by doggie721 I try decrypt lv2_kernel.self of the FW 4.21 with this but just I get this error. Click here to see full text

What firmware where you on when you tried to decrypt?

[doggie721]

Originally Posted by ryant001 What firmware where you on when you tried to decrypt?

3.55 and 4.21 DEX
************* [ - Post Merged - ] *************
@Asure

both DEX and CEX

[ryant001]

Originally Posted by doggie721 3.55 and 4.21 DEX

Then it doesn't work, which is not that surprising since that application is just a beta and it wasn't ever completed(at least not for us normal users).