eEID0 Dumper Released - No Need To Install Linux For CEX2DEX? Time Will Tell

Published on 07-22-2012 07:02 AM

23 Comments

Mixed translations coming in today regarding the news over at Demonhades. Developer Blackdeath has released a tool, eEID0 Dumper, which can be used on CFW3.55 and their JBM 3.55, MA 3.56. The news which is difficult to translate suggests the need for Linux to be installed on your PS3 may no longer be mandatory for CEX2DEX. If this is entirely true I'm sure it will make many of you very happy however I would suggest taking a back seat and wait till some have tested the method as I'm sure you don't want to brick your system. From what I have read one needs to install the pkg from dev_usb000 and then launch the app from the video section on the XMB,

UPDATE: I have tried the above using the version 2 by Blackdeath on KMEAW 3.55, no spoofers and it's working fine. Instead of simply pressing X to launch the app I pressed triangle and then selected start to launch.

About eEID0 Dumper by Balckdeath:

Hello friends, after the method of filtration CEX2DEX the team decided to investigate this new field (for some) and not so much for others, that is why we are working to bring you the easiest method to move to Linux without requiring DEX. Today I present created by the dumper EID0 blackdeath with which we can dump all EID0 or directly CEX first section with only launch a pkg and have connected a USB port on dev_usb000, the instructions are on screen and are easy:

START: To dump all EID0.
SQUARE: To dump the first section of EID0 directly (eid0_1st_Section_CEX.bin).
X: To dump metldr (Encryption) to USB and be prepared to exploit and get the dump of the decrypted metldr in subsequent steps. (New version)

Tell them to keep working this issue need not linux as the next step is to dump the metldr without having to make so many things in linux but a quick and easy dump. The eEID0 is necessary for the process dump metldr As you know, and only the first section of eEID0 (That we get directly to this tool) is required for Conversion to a unit DEX / TEST.

Download: EID0-DUMPER BY BLACKDEATH.pkg (Old Version)
Download: eEID0-DUMPERV2 BY BLACKDEATH.pkg (New Version)

Thanks BlackDeath, Checko, Tito01 and DemonHades

From checko: WIP: A method to dump metldr and eEID root keys without linux, more easy with some little steps .. maybe naehrwert can help you.

Originally Posted by @naehrwert via Twitter

Twitter / naehrwert: isn't installing linux to ...
Isn't installing linux to get your eid root key a bit of an overkill when you could just use netrpc?!

Originally Posted by @naehrwert via Twitter

Twitter / naehrwert: Or you could compile this ...
Or you could compile this #4295312 - Pastie , sign it with metldr keys and grab the key/iv from shared LS...

Another tool has been released by RacingLocura07, ConfEditor to be used in the JBM 3.55 & MA 3.56 custom firmware for TheGrid.

Background info regarding TheGrid: allows game backups as well as many plugins to be used within JBM 3.55 & MA 3.56 custom firmware. Some uses for these plugins is the ability to play background music while playing games, FTP in background and dump RAM.

About ConfEditor by RacingLocura07:

Our partner and developer RacingLocura07 (UsaveME) leaves us on this occasion the conf editor ps3, this application allows you to enable or disable patches, plugins or create flags without using a PC, all from the PS3 itself in a simple and fast.

Download: ConfEditor

Options:

Displays a list of flags
Displays list of patch-dynamic
Displays a list of plugins
Allows you to export to the root of the usb, the. Cfg file to test it before storing.

List of flags:

Matheros (direct or normal)
dumper-ram
debug
dev_flash (dumper / restore)
sc35/36 +8 (more compatible)
100% Fan speed (fan at 100%)

Source: PS3News via demonhades

PSX-SCENE: The Pinnacle Scene Xenocracy

● Latest News ● Report News ● Search Forums ● Hall of Fame ●
● Facebook.com/PSXScene ● RSS ● Twitter.com/psx_scene ●

Share
- Share this post on
- Digg
- Del.icio.us
- Technorati
- Twitter

Categories:

_{Tags :

3.56 ma,

blackdeath,

cex to dex,

cex2dex,

confeditor,

eeid0 dumber,

ps3,

ps3 cfw,

ps3 dump ram,

ps3 jfw dh,

racinglocura07,

thegrid}

23 Comments

deank - 07-22-2012, 07:16 AM
- Reply
This "tool" is far from doing anything useful yet. It reads from your flash the "metldr" and "eEID" and saves them as files on the USB - nothing more, nothing less. It doesn't decrypt anything, it doesn't give you the keys, it doesn't convert anything. You can get these two files by dumping your flash and extracting it with norunpack or cex2dex applications. You still need a way to use your "metldr" file and make the PS3 extract the key+iv so you can change the target_id and re-encrypt and write to the flash.

Shaitan - 07-22-2012, 07:16 AM
- Reply
lol a day late for me but awesome news, hope people are careful though.
Edit: ^ hmm not sure now.

Tranced - 07-22-2012, 07:32 AM
- Reply
Hi Dean, Thanks for your input. What about the info/hint that naehrwert gives. Above tweets? Any input regarding that? Also could one say that the above is at least a start?

Berennk - 07-22-2012, 07:37 AM
- Reply
I pressed X 15 minutes ago and there still black screen. Is that normal?
Rebug 3.55.2

deank - 07-22-2012, 07:40 AM
- Reply
Tranced, I guess if one compiles it and finds a way to sign it properly and then execute it with proper privileges it will work as he said. Launching it from GameOS as lv2 app probably won't work, because it has to be executed as secure_loader (the way the actual metldr is executed when PS3 boots). Back in November last year there was such compiled .self (still on the wiki) which was supposedly used to do the same job. I'll check about that.

Berennk - 07-22-2012, 07:54 AM
- Reply
30 minutes. still no respone. Even power button dosnt work.
Im afraid it need to turn off from the outlet(

Tranced - 07-22-2012, 08:08 AM
- Reply
@Berennk I pulled my power cable out after 30min black screen. PS3 booted fine afterwards. Did you read my update above? The first time I launched the app I pressed X to launch which did not work for me. The second time I pressed "triangle", then selected "start" from the menu to launch and it started fine. (The picture on the article is from my LCD TV)

@Dean. Thanks for the info. It's difficult getting info from google translate. I guess the article headline was a little misconceiving. Changed it!

OpenSource - 07-22-2012, 08:31 AM
- Reply
Originally Posted by deank

This "tool" is far from doing anything useful yet. It reads from your flash the "metldr" and "eEID" and saves them as files on the USB - nothing more, nothing less. It doesn't decrypt anything, it doesn't give you the keys, it doesn't convert anything. You can get these two files by dumping your flash and extracting it with norunpack or cex2dex applications. You still need a way to use your "metldr" file and make the PS3 extract the key+iv so you can change the target_id and re-encrypt and write to the flash.

Well this is more easy than dump your flash and later make an extraction i like this way...

And you can get directly the First Section of your CEX eEID0 ...

RUT Dark Ronin - 07-22-2012, 09:11 AM
- Reply
OpenSource, which is only saves you a minute or so, doing the same with norunpack/flowrebuilder. Still, someone may find this one handy, so keep up the good work anyway. And, wish great luck for dev's with naehrwert's advice!

aldostools - 07-22-2012, 09:24 AM
- Reply
As deank says, to get the "metldr" and "eEID" files, just dump your flash with the latest build of multiMAN:
mmOS->Select any file->Open in HEX viewer->[SELECT]->[START]->DUMP LV2(NO)->DUMP LV1(NO)->DUMP FLASH(YES)
(for a NOR it takes only 5 seconds!!!)

Transfer the dumped file of the NOR or NAND flash (copied to the USB) to your PC, and use norunpack.exe:
norunpack.exe flash.BIN extract_folder
(it also takes another 5 seconds!!!)

In the extract_folder you will find the "eEID" (64KB) and inside the folder "asecure_loader" you will find the "metldr" (59KB):

Do not get confused, the "eEID" file is *not* used for CEX-to-DEX conversion. You only need the "metldr" file. An alternative method to extract "metldr" is using the CEX2DEX application by Gunner54.

With all these methods, the "metldr" is extracted ENCRYPTED!!!

Currently it is still required to copy your "metldr" file to "metldrpwn" folder, and *run* the script "run.sh" through PS3 linux (via OtherOS++ or the original OtherOS 3.15) to *decrypt* the "metldr" and get the "dump_eid0.bin" (it is not the same than the EID or eEID0 file!!)

It is "dump_eid0.bin" and the dump file of your PS3 flash what is required by C2D by andbey0nd or CEX2DEX by Gunner54.

The real PITA is get OtherOS++ & linux installed... the rest is easy if you follow the deank's tutorial.

BahumatLord - 07-22-2012, 09:40 AM
- Reply
The real PITA is get OtherOS++ & linux installed... the rest is easy if you follow the deank's tutorial.

yup. Gotta agree with deank and aldostools. I don't see a way around installing Linux no matter how big a pain in the ass it is. But like aldostools said once that's done the rest is a piece of cake

RUT Dark Ronin - 07-22-2012, 09:53 AM
- Reply
IMO, job could be done using special custom lv2diag.self under FSM. Seriously though, we haven't one yet, but maybe CrashSerious would be so kind to look into it some way? It makes sense, y'know.

vronz - 07-22-2012, 10:14 AM
- Reply
@deank : if MM now can decrypt and encrypt eEID0, can we count there will be easy way to remarry BD drive - as far as i know BD "marriage information" is coded somewhere in eEIDx or the algorithms for that are still unknown?

RUT Dark Ronin - 07-22-2012, 10:22 AM
- Reply
vronz, remarrying is pretty simple under FSM at 3.55, so dig that way) Search for it, wiki holds it all)))

vronz - 07-22-2012, 10:32 AM
- Reply
@RUT Dark Ronin: thanks, but i know that and i'm more interested in how the "marriage", between BD drive and the console works, because i want to use such BD drive on computer - connecting PS3 BD drive to computer is not a problem for me, but it can't read any data sectors until it's authenticated as result of the "marriage" and so i'm interested to be able to do such authentication on PC.

@ALL: i read that running 3.6+ backups is not possible on DEX - if that's true and considering on DEX any homebrew can be executed, can someone please, explain why 3.6+ keys are still not/can't be obtained as well the EBOOTs be decrypted, thanks. i have the same question for the BD AACS certificates - it seems DEX has newer than 3.55 CEX.

RUT Dark Ronin - 07-22-2012, 10:57 AM
- Reply
vronz, "backups' are easilly launched on 4.11 DEX using built-in BD-Emu option of dex.

MakinaCore - 07-22-2012, 11:44 AM
- Reply
does this scrub the HDD internal and external ?

YOUSS84 - 07-22-2012, 12:55 PM
- Reply
Originally Posted by RUT Dark Ronin

vronz, "backups' are easilly launched on 4.11 DEX using built-in BD-Emu option of dex.

easily????

_Exeedy_ - 07-22-2012, 01:41 PM
- Reply
I think its better that not everyone has a dex console... when someone has not enough knowledge to dump the metldr the easy way with linux they should go back to cex and play their games like before.. and we know... every ****in people on dex its a bad thing... im thinking at sony right now

BahumatLord - 07-22-2012, 02:17 PM
- Reply
Originally Posted by YOUSS84

easily????

Yes, very. I've been playing a backup of The Amazing Spider-Man (4.11). It's actually not bad for a movie tie-in. You just need to spend 5 minutes learning how to use PS3GEN and have a spare external hard drive that can be formatted for games to be played this way. Ideally you would need a 200 gig external. You would get 4 45 gig partitions on it. 1 game per partition