PS3Hax Network - Playstation 3 Hacks and Mods - View Single Post

JonahUK · 07-16-2012

@filipezwicker :

Bleh did the tut before Gunner54's app was released, therefore he didn't have that option available hence it's not in his tutorial.

For those wondering about the NAND process.

Some offsets need to be changed but none the less, the procedure is the same.

For example, differences to Bleh's tut for NAND:

5. Store dtbImage.ps3.bin on USB drive, plug it in and run install_otheros.pkg

NAND owners should use the dtbImage.ps3.bin.minimal and rename it to dtbImage.ps3.bin

10. cd /tmp/petitboot/mnt/sda1/
./create_hdd_region.sh

There are two .sh scripts available for this step, if you receive errors stating -8, use the alternate version from the wiki.

Getting metldr:

1. dump your nor in GameOS using memdump_0.01-FINAL

You can use this to dump your NAND as well.

2. now you will need to unpack your nor, use norunpack

To get metldr from your NAND dump, use flowrebuilder and choose this option:

EXTRACT a Byte reversed NOR dump or an interleaved and unscrambled NAND dump

You *may* have to byte reverse first, I can't remember.

Check your flash dump and see if "asecure loader" is written correctly or reversed. If it's reversed then you need to byte reverse first before extracting it with flowrebuilder.

Metldr will be extracted into the "asecure_loader" folder.

Flashing back:

2. cd /tmp/petitboot/mnt/sda1/
dd if=DEXFLASH.bin of=/dev/ps3nflasha bs=1024
reboot

I'm not sure on the NAND flashing process but you should be able to use this:

dd if=DEXFLASH.bin of=/dev/ps3nflasha bs=1 seek=$((0x80800)) count=$((0x10000))

The above steps need to be confirmed by someone who has converted a NAND, mainly the flashing part.

0x80800 is the EID start address for NAND.

Bleh's tut seems straight forward and he has already stated it works.

07-16-2012	#1026
JonahUK Senior Member Join Date: Jul 2011 Location: Salford, UK Posts: 1,279 Likes: 590 Liked 796 Times in 500 Posts Mentioned: 166 Post(s) Tagged: 0 Thread(s)	@filipezwicker : Bleh did the tut before Gunner54's app was released, therefore he didn't have that option available hence it's not in his tutorial. For those wondering about the NAND process. Some offsets need to be changed but none the less, the procedure is the same. For example, differences to Bleh's tut for NAND: 5. Store dtbImage.ps3.bin on USB drive, plug it in and run install_otheros.pkg NAND owners should use the dtbImage.ps3.bin.minimal and rename it to dtbImage.ps3.bin 10. cd /tmp/petitboot/mnt/sda1/ ./create_hdd_region.sh There are two .sh scripts available for this step, if you receive errors stating -8, use the alternate version from the wiki. Getting metldr: 1. dump your nor in GameOS using memdump_0.01-FINAL You can use this to dump your NAND as well. 2. now you will need to unpack your nor, use norunpack To get metldr from your NAND dump, use flowrebuilder and choose this option: EXTRACT a Byte reversed NOR dump or an interleaved and unscrambled NAND dump You may have to byte reverse first, I can't remember. Check your flash dump and see if "asecure loader" is written correctly or reversed. If it's reversed then you need to byte reverse first before extracting it with flowrebuilder. Metldr will be extracted into the "asecure_loader" folder. Flashing back: 2. cd /tmp/petitboot/mnt/sda1/ dd if=DEXFLASH.bin of=/dev/ps3nflasha bs=1024 reboot I'm not sure on the NAND flashing process but you should be able to use this: dd if=DEXFLASH.bin of=/dev/ps3nflasha bs=1 seek=$((0x80800)) count=$((0x10000)) The above steps need to be confirmed by someone who has converted a NAND, mainly the flashing part. 0x80800 is the EID start address for NAND. Bleh's tut seems straight forward and he has already stated it works. Last edited by JonahUK; 07-16-2012 at 08:30 AM. Reason: Minor corrections.