[REQUESTING DUMPS] Slim 3.60 25xx/3xxx SuperSlim NOR/eMMC Consoles

esc0rtd3w

esc0rtd3w

Developer
DUMP Shared Folder: http://www.mediafire.com/folder/e7rs9wh6w8ohv/mtldr2-dumps

i am gathering dumps from currently non-jailbreakable console models only.

you can use the dumper tool @ https://**ps3xploit.com >Domain no Longer owned by team** (ps3xploit.me =new)/

if you would like to post a link to dump, I will add to main shared folder for research!

Please include FW version.

you can mask your IDPS before posting link to dump :-p

Use HxD or this tool provided by @pink1 (drag your dump into IDPSMasker.exe) and mask after the chassis code like below example:

S252pFu.png


IDPS Masking Offsets

0x0002F070 1st IDPS instance on NOR
0x000303D0 2nd IDPS instance on NOR

0x00040870 1st IDPS instance on EMMC
0x00041BD0 2nd IDPS instance on EMMC


Submitted Dumps
Thank You To All Who Submitted Dumps :)

2508B 4.55 NOR
2511A 4.82 NOR
30XX 4.82 NOR
3000A 4.82 NOR
3001A 4.50 NOR
3001A 4.70 NOR
3001A 4.81 NOR
3001A 4.82 NOR / Alt #1 / Alt #2
3004A 4.46 NOR
3004A 4.78 NOR
3004A 4.81 NOR
3004A 4.82 NOR / Alt #1 / Alt #2
3004B 4.81 NOR
3006A 4.82 NOR
3008A 4.82 NOR
3008B 4.82 NOR / Alt #1
30XX DECH 4.60 NOR DEX
4001B 4.55 NOR
4001B 4.81 NOR
4001B 4.82 NOR
4001C 4.40 NOR
4004C 4.81 NOR
4004C 4.82 NOR / Alt #1
4006B 4.50 NOR
4011B 4.81 NOR
4204C 4.81 NOR / Alt #1
4204C 4.82 NOR
4208C 4.81 NOR / Alt #1
4208C 4.82 NOR
4212C 4.81 NOR
4214B 4.82 NOR
4XXXXA 4.82 eMMC
4003A 4.81 eMMC
4004A 4.81 eMMC
4004A 4.82 eMMC
4008A 4.53 eMMC ** E3 ODE **
42XXA 4.81 eMMC
42XXA 4.82 eMMC
4201A 4.81 eMMC
4201A 4.82 eMMC / Alt #1
4208A 4.81 eMMC ** COBRA ODE 4.20 **
40XX Prototype DEH-MLODAK-G 4.31 eMMC DEX

 
Last edited:
esc0rtd3w said:
yes thank you, i can add to OP if you like
Click to expand...
I only had an old Nand dump & 1 Nor dump to test with so if anyone would like to test it out that'd be awesome.

To use drag your dump into IDPSMasker.exe.
http://www.mediafire.com/file/3659qy8ea4t04b7/IDPSMasker.zip

Here is the code i used if anybody has any use for it.
Code: 
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.IO;

namespace IDPSMasker
{
    class Program
    {

        static byte[] mask = new byte[8] {
            0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF
        };



        static void Main(string[] args)
        {
             Console.ForegroundColor = ConsoleColor.Magenta;
             if (args.Length == 1)
             {
                 masknor(args[0]);
             }
             else
             {
                 Console.WriteLine("Drag dump into IDPSMasker.exe to mask IDPS");
                 Console.WriteLine("Press any key to exit");
                 Console.ReadKey();
             }
        }


        private static void masknor(string dump)
        {
            string type = "";
            Stream fin = new FileStream(dump, FileMode.Open, FileAccess.Read, FileShare.ReadWrite);
            BinaryReader brfin = new BinaryReader(fin);
            if (fin.Length == 0x1000000) { type = "nor"; }
            else if (fin.Length == 0x10000000) { type = "nand"; }
            else if (fin.Length == 0xFFC00000) { type = "emmc"; }
            fin.Close();
            if (type == "nor")
            {
               
            using (System.IO.BinaryWriter fileWriter = new System.IO.BinaryWriter(System.IO.File.Open(dump, System.IO.FileMode.Open)))
            {
                fileWriter.BaseStream.Position = 0x0002F078; // set the offset
                fileWriter.Write(mask);

                fileWriter.BaseStream.Position = 0x000303D8; // set the offset
                fileWriter.Write(mask);
            }
           
           }
            else if (type == "nand")
            {

                using (System.IO.BinaryWriter fileWriter = new System.IO.BinaryWriter(System.IO.File.Open(dump, System.IO.FileMode.Open)))
                {
                    fileWriter.BaseStream.Position = 0x00080878; // set the offset
                    fileWriter.Write(mask);

                    fileWriter.BaseStream.Position = 0x00081BD8; // set the offset
                    fileWriter.Write(mask);
                }

            }
            else if (type == "emmc")
            {

                using (System.IO.BinaryWriter fileWriter = new System.IO.BinaryWriter(System.IO.File.Open(dump, System.IO.FileMode.Open)))
                {
                    fileWriter.BaseStream.Position = 0x00040878; // set the offset
                    fileWriter.Write(mask);

                    fileWriter.BaseStream.Position = 0x00041BD8; // set the offset
                    fileWriter.Write(mask);
                }

            }
        }

    }
}
 
I only have a few dumps for jailbreakable models (CECHK04, CECHL... CECH 2504B 0C, CECH 2504B 1A) made on ofw 4.82...
 
You must log in or register to reply here.

Similar threads

Back
Top