[coragin]

Originally Posted by carldenning u could make a new dex flash and convert it to cex

True, just dump it through MM right?

[carldenning]

Originally Posted by coragin True, just dump it through MM right?

yep , check here this is what i did yesturday for my nand , basicly the same but do it for nor http://www.ps3hax.net/showpost.php?p...9&postcount=34

[coragin]

ARGH I figured it out!

You gave me the wrong offset for a NOR, the offset for NOR is 0x303D5

Now its all landing on the correct parts, 84 which is USA CEX Dump.
************* [ - Post Merged - ] *************
@carldenning @haz367 @butnut

Thanks for your help so far, I dont know where to go from here.

Never-mind, I didn't figure it out, that was region.

Could someone pretty please look at these dumps and let me know which is CEX and DEX and if no CEX help me on how to progress further.

I give up. Here are the important files if anyone can convert one of the to a CEX flash, I would really appreciate it.

I am including one of every dump I have. If anyone can at minimum identify one as a CEX. I have also reverse byte them in advance. The ones that need it.

So basically this upload has 5 dumps and really all I need to know is which are DEX and which are CEX and of coarse which are good. If someone is feeling especially friendly, maybe they could convert my good DEX flash dump into a CEX for me.

I am frustrated and just don't get it. Sigh.

Anyways here is my link to my NOR Flashes, all have been pre byte-reversed so no work is needed to be done except for someone who knows, to look at them through a HEX program and let me know what to do.

I am really stuck guys, normally I do not ask this many questions and figure this stuff out on my own, but I am stumped and completely confused.

Gosh this is depressing. Anyways here is the link, please take a look someone.

http://www.mediafire.com/?38p3uh0rr39ruok

[butnut]

I would be happy to help, but could you do me a favor?

Just make a new dump with multiman and put it and your decrypted metldr into a password protected rar. Upload that to media fire and pm me the password and the link. I will upload @ media fire a cex dump for you.

[coragin]

Multiman will not let me dump the flash, says somethign along the lines of could not create iso. I dumped with memorydump.pkg and the metldr and that dump is in what I just posted above. The readme file says it all.

Thank you @butnut

Oh and if those metldr dont work for some reason (only used them that one time) let me know and I will reinstall linux on my ps3 and redo the metldr dump. Unless you find one of them to be a CEX flash dump and I wont need to.

Thank you again my friend, thank you so very much.

I would love to be able to stay up and do this my friend, but my head keeps falling on my keyboard, almost two full days awake. I will check on it tomorrow, thank you again, so much, you are a life saver. A God among men! Thank you!

[butnut]

All those metldr's were still encrypted but

E3FlasherBackup1.bin

is a cex dump, so if that is a 3.55 dump then you can flash that.

[coragin]

Thank you butnut! I love you man! All I need to do now is find the tutorial I used to go to dex to figure out what 3.55 version I used. )))

You the man! Did the dump seem fine as well? and can I flash that through MM or should I flash through E3? And if I flash through E3, will I need to reverse bytes again? lol

[butnut]

Originally Posted by coragin Thank you butnut! I love you man! All I need to do now is find the tutorial I used to go to dex to figure out what 3.55 version I used. ))) You the man! Did the dump seem fine as well? and can I flash that through MM or should I flash through E3? And if I flash through E3, will I need to reverse bytes again? lol

I did not check the dump to make sure it is good, I have never needed to check a dump before so I don't know how to do it.

If you think it might be bad then you should get someone who has done it before to check it.

If you want to flash it with E3 then you will need to byte reverse it again.

As for multiman if you cant dump then you probably cant flash.

Are you on 3.55dex ofw right now, if so then that is why you cant flash with multiman.

Try installing itskamel 3.55 dex or rogero 3.55 dex then you should be able to dump and flash with multiman.

If you use multiman to flash then do not byte reverse the dump.

[haz367]

1) the given offsets are correct, ur Idps and TargetID is present 2 times in the NOR flash (EID0 and EID5 section) and must be present on both OFFSETS

a) EID0 OFFSETS NOR - idps+targetid

offset block 2F070 - 2F07F = idps+targetid@2F075

b) EID5 OFFSETS NOR - identical value(idps+targetid) as EID0 offset 2F070-2F07F

OFFSETS/ block 303D0-303DF = idps+targetid@303D5
the one u find there is EID5 key, only CHANGE the first OFFSET = EID0
we don't have full eid convert so ONLY EID0 is modified back to CEX targetid using C2D.exe



NAND/NOR EID0 idps/targetid offsets

** EID0 is located in NAND at 0x80870 and in NOR at 0x2f070

Originally Posted by coragin ARGH I figured it out! You gave me the wrong offset for a NOR, the offset for NOR is 0x303D5

************* [ - Post Merged - ] *************



edit:

dump mess? my toilet is cleaner although i'm lazy as ****

i'm checking the dumps, DO NOT FLASH anything back, u have 2 different PS3 dumps there!! wait a min and i'l post the info then u can first verify wich dump belongs to ur PS3 (must be the original e3 and the e3 rogero, the rogero one is from the first downgrade from 3.73 to 355, not dehashed = empty ROS0 folder ) the other e3 rebug dump is from ANOTHER CONSOLE, flashing the dump from another console without having a VALID dump of ur own PS3(per console) is permbrick

[coragin]

Originally Posted by haz367 1) the given offsets are correct, ur Idps and TargetID is present 2 times in the NOR flash (EID0 and EID5 section) and must be present on both OFFSETS a) EID0 OFFSETS NOR - idps+targetid offset block 2F070 - 2F07F = idps+targetid@2F075 b) EID5 OFFSETS NOR - identical value(idps+targetid) as EID0 offset 2F070-2F07F OFFSETS/ block 303D0-303DF = idps+targetid@303D5 the one u find there is EID5 key, only CHANGE the first OFFSET = EID0 we don't have full eid convert so ONLY EID0 is modified back to CEX targetid using C2D.exe NAND/NOR EID0 idps/targetid offsets ** EID0 is located in NAND at 0x80870 and in NOR at 0x2f070 ************* [ - Post Merged - ] ************* edit: dump mess? my toilet is cleaner although i'm lazy as **** i'm checking the dumps, DO NOT FLASH anything back, u have 2 different PS3 dumps there!! wait a min and i'l post the info then u can first verify wich dump belongs to ur PS3 (must be the original e3 and the e3 rogero, the rogero one is from the first downgrade from 3.73 to 355, not dehashed = empty ROS0 folder ) the other e3 rebug dump is from ANOTHER CONSOLE, flashing the dump from another console without having a VALID dump of ur own PS3(per console) is permbrick

I just did another 6 dumps, fresh ones. 3 From Multiman 3 fom Memdump.pkg all are identical. And here is the offsets of those 6 (total) vs my original (before downgrade dump)

CEX 303D0 - 303DF = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA
CEX 2F070 - 2F07F = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA
DEX 2F070 - 2F07F = 00 00 00 01 00 82 00 0B 14 08 ED FB E2 03 C1 CA
DEX 303D0 - 303DF = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA

I am assuming I need to use the either Rogero or Rebug dump. Or if I Flash back my original dump I will need to put OFW back on and REMEMBEr what OFW came with it right?

Iam assuming from the above code, all I would need to do is change ...

DEX 2F070 - 2F07F = 00 00 00 01 00 82 00 0B 14 08 ED FB E2 03 C1 CA
DEX 303D0 - 303DF = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA

to

DEX 2F070 - 2F07F = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA
DEX 303D0 - 303DF = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA

In both instances of coarse. And it would be a CEX dump, right?

Last question. Is there a way to find out what FW version was on these dumps? 3.55, 3.72, 4,21 etc?

Here is my NEW dumps, just made, 3 from MM 3 from memdump.

http://www.mediafire.com/?265anoqha1w1ubs

EDIT ------ CONVERTED DUMP--------------

@haz367 @butnut

I took todays multiman flash dump and edited it with HxD

I changed

2F070 - 2F07F = 00 00 00 01 00 82 00 0B 14 08 ED FB E2 03 C1 CA

to

2F070 - 2F07F = 00 00 00 01 00 84 00 0B 14 08 ED FB E2 03 C1 CA

Nothing else. Here is the two dumps, todays Multiman dump and a copy of it with just the above offsets edited.

http://www.mediafire.com/?rzhba5461m91p62

Would you mind taking a look? I verified size and they are an EXACT match in bytes. And there was no warning in HxD about altering size when I did the edit.

Thanks you guys have been so much help.