Warning
* BY FOLLOWING THE GUIDE STEP-BY-STEP OR 'NOT', YOU AGREE THAT I AM IN NO WAY RESPONSIBLE FOR ANYTHING THAT HAPPENS TO YOUR PS3 CONSOLE.
* IT IS REQUIRED AT ONE POINT TO FORMAT THE PS3 INTERNAL HARD DISK DRIVE, SO IF YOU DON'T WANT TO LOSE YOUR DATA, YOU MUST MAKE A BACKUP OF IT BEFORE CONTINUING.
COMPLETE NAND PS3 CEX-TO-DEX GUIDE (by CaptainCPS-X)
THANKS TO:
PS3DevWiki devs, PS3 Scene Devs (past & present), JaiCrab,
@
butnut
,
@
GraVoX959
,
@
bleh
, Gunner54, DeanK and anyone else I forgot.
SPECIAL THANKS TO:
Any dev who were involved in the original CEX-2-DEX conversion method.
ABOUT MY CEX-2-DEX PACKAGE:
Each guide Step has its own directory, and any needed file(s) will be located there.
UPDATE: New smaller package uploaded in 2 parts to Mediafire.
NAND_CEX2DEX_PACK_v2_CaptainCPSX.part1.rar (199 MB) (MD5: 72845FAD1B23F1A2D7453847684F4576)
NAND_CEX2DEX_PACK_v2_CaptainCPSX.part2.rar (162 MB) (MD5: 600A93E7C7F8D57C008EF84DCB59A8DE)
Red Ribbon RC5 must be downloaded from here:
http://sourceforge.net/projects/redr...5.rar/download
The package includes:
- OtherOS++ CFW 3.55 (SS Patches)(1/2 HDD)
- Petitboot PKG / BIN files
- CEX2DEX (by Gunner54)
- Red Ribbon RC5 ( REMOVED IN NEW PACKAGE, LOOK ABOVE FOR INFO )
- Factory Service Mode Tool v2
- Jaicrab Preloader Advance v3.1
- DEX OFW 4.11
Everything has been structured into directories named as: STEP_1, STEP_2, etc...for easy handling of files depending on the Guide step you are located in.
ABOUT THIS GUIDE:
This guide is for
NAND PS3 models only. I have done every step on my CECHE01 NAND PS3 console. And everything went well. Please don't skip any step, and read very carefully. If you don't read English very well, don't use Google Translate, or any other tool, you could end up bricking your PS3.
UPDATE: This guide has verified and updated information, the one I included as a text file in the RAR package should be used only as reference, consult this guide "online" for precise information.
WHAT PS3 MODELS HAVE NAND?
Code:
CECHA COK-001 2x 128MB NAND 60GB
CECHA COK-001 2x 128MB NAND 60GB
CECHB COK-001 2x 128MB NAND 20GB
CECHB COK-001 2x 128MB NAND 20GB
CECHC COK-002 2x 128MB NAND 60GB
CECHC COK-002 2x 128MB NAND 60GB
CECHE COK-002 2x 128MB NAND 80GB
CECHE COK-002W 2x 128MB NAND 80GB
CECHG SEM-001 2x 128MB NAND 40GB
More info here:
http://www.ps3devwiki.com/wiki/SKU_Models
ARE YOU GOING TO WRITE A NOR GUIDE?
I will probably make one based on other NOR guides, IF I can make sure it will not fail. I don't want to lead people to bricks.
WHAT "CAN" BE DONE IF I CONVERT MY CEX TO DEX ?
- more info coming soon, I am currently testing xD LOL! -
WHAT "CANNOT" BE DONE IF I CONVERT MY CEX TO DEX ?
- more info coming soon as well... -
CAN I GO BACK TO CEX AFTER CONVERTING TO DEX ?
- Keep reading below please.
MY DEX-TO-CEX BRICK
- Installed MFW 3.55 DEX (With Peek & Poke enabled)
- Used
"Factory Service Mode Tool v2" to put my console in FSM.
- A file was automatically created
specifically for DEX to get out of FSM, called
"Lv2diag_exit.self"
- I copied my old NAND flash dump
"Backuprflash.bin" to my USB device and renamed it to
"rflash.bin"
- Copied
"JaiCrab Preloader Advance v3.1" files (
Lv2diag.self,
advance.cfg) to restore
"rflash.bin" to my NAND.
- Connected the USB device to my PS3 turned it ON
- Everything went fine, I was on CEX now, the system started was in FSM, so I turned it off.
- I connected my USB device to my PC and deleted
"JaiCrab Preloader Advance" files (
Lv2diag.self,
advance.cfg)
-Renamed the
"Lv2diag_exit.self" specifically for DEX to
"Lv2diag.self" to exit factory mode.
-Connected the USB device to my PS3 and turned it ON.
- PS3
supposedly went out of FSM based on the generated "factory.txt" log file, but then I got a Blinking Red Light.
- PS3 got bricked
"apparently" by using
the wrong "Lv2diag.self" to exit FSM, I was supposed to use
the one for CEX, not
DEX.
NEW UPDATE: Brick apparently didn't happen because of the Lv2diag.self, both PKG files (DEX / CEX) from FMS Tool v2 are the same Lv2diag.self. Apparently after flashing my NAND back to CEX I had to install a CEX FW from Factory Service Mode. By exiting FSM before I had installed a CEX FW, bricked my NAND PS3.
My recommendation is that if you go to
DEX,
stay on DEX until it is officially confirmed that you can safely go back to CEX on NANDs.
REQUIREMENTS:
1- NAND PS3 model running on CFW/OFW 3.55 or less.
2- My CEX-2-DEX Package (it includes everything you will need)
(NEW LINKS)
*
NAND_CEX2DEX_PACK_v2_CaptainCPSX.part1.rar (199 MB) (MD5: 72845FAD1B23F1A2D7453847684F4576)
*
NAND_CEX2DEX_PACK_v2_CaptainCPSX.part2.rar (162 MB) (MD5: 600A93E7C7F8D57C008EF84DCB59A8DE)
3- USB Keyboard / Mouse
4- USB Storage Device (FAT32) (with at least 2GB just in case)
5- Patience, Time and the will to convert your PS3 to DEX.
ADVICE: DO NOT SKIP ANY STEP!. EVERY STEP AND SUB-STEP IS IMPORTANT!!!
STEP 1 :: INSTALLING OTHEROS++ CFW 3.55
1- Backup important data from PS3 (saves, images, videos, etc...).
2- Verify and remove any disc inserted on the PS3.
3- Turn off your PS3.
4- Connect a USB Storage Device to your PC (FAT32).
5- Copy the directory from
"CFW_355_OTHEROS++" to the root of the USB Storage Device.
6- Connect the USB Storage Device to the PS3.
7- Turn on the PS3 in 'Recovery Mode' (press power button for 8 seconds, then again until it beeps).
8- Select "System Update" and follow on-screen instructions.
9- After installation is done, turn off your PS3.
10- Turn on the PS3 in 'Recovery Mode' (press power button for 8 seconds, then again until it beeps).
11- Choose "Restore PS3 System".
STEP 2 :: GOING INTO FACTORY SERVICE MODE
1- Connect the USB Storage Device to the PC.
2- Copy the files from
"FACTORY_SERVICE_MODE_TOOL_v02" to the root of a USB storage device.
3- Connect the USB Storage Device to the PS3 and install "FactoryServiceMode.gnpdrm.pkg".
4- Run "Factory Service Mode Tool" from the XMB Game column.
5- If you hear 3 beeps, try it again, it should beep once now and reboot into Factory Service Mode.
6- You can turn off your PS3 for now.
Note: In your USB storage device there will be a file called "Lv2diag_exit.self", this will be used later to exit FSM.
STEP 3 :: GETTING FLASH DUMP
1- Copy the files from
"JAICRAB_PRELOADER_ADVANCE_v31" to the root of the USB Storage Device.
2- Connect the USB Storage Device to the PS3 (to the last USB slot on the right).
3- Turn the PS3 on, and wait until it completely turn off, this could take a few minutes.
4- NAND Flash dump will be located in the USB Storage Device as "Backuprflash.bin"
5- Connect the USB Storage Device to your PC.
6- Remove "Lv2diag.self" and "advance.cfg" from the root of your USB Storage Device.
7- Rename "Lv2diag_exit.self" to "Lv2diag.self".
8- Connect the USB Storage Device to your PS3 and turn it on.
9- Your PS3 should be out of Factory Service Mode.
10- Connect the USB Storage Device to your PC.
11- Remove the "Lv2diag.self" from the USB Storage Device.
UPDATE: If you use Windows, and you cannot see the flash dump on your USB Storage Device.
* Click on the windows explorer menu
"Tools -> Folder Options".
* On the new window click the top Tab
"View".
* Select
"Show hidden files, folders, and drives".
* Un-ckeck
"Hide protected Operative System files".
* Click
"OK".
Now you should see the flash dump
"Backuprflash.bin" on the root of your USB Storage Device.
IMPORTANT UDPATE: Make a backup of "Backuprflash.bin" to a safe location, you will need it in case you want to go back to CEX!.
Warning
WARNING: Other methods of acquiring the Flash dump for NAND are NOT good for backup purposes, I tested them and did not get a complete dump. The resulting dumps had missing data on them. You have been warned.
The ONLY method for NAND to get a complete flash dump (similar to Hardware method) is by using JaiCrab Preloader Advance v3.1.
PS3DevWiki has precise information about this:
http://www.ps3devwiki.com/wiki/Hardw...ND_from_GameOS
Difference between hardware dumps and software dumps
ps3vflasha
hardware dumps
256 MB (268,435,456 bytes)
bootldr is at 0x000000 on NAND (0xFC0000 on NOR)
software dumps
dump size = 239 MB (251,396,096 bytes)
bootldr not at 0x000000 on NAND :
Code:
00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF .....¬à ÿ....ÞÂ*¾ï
reason:
Code:
addi %r12, %r4, 0x200 # r4 = start sector
256MB NAND consoles have a hidden section of size 0x40000 (0x200 * 512 byte sector = 0x40000) hidden by the hv. The hv hides it at address 002786E8
Original code : 0x39840200f8010090
Change to : 0x39840000f8010090
|
More info here as well: http://www.ps3hax.net/showpost.php?p...postcount=1380
UPDATE: Thanks to DeanK for this information:
Actually multiMAN writes ONLY one sector (512 bytes). It needs the whole dump to verify it, but takes only one sector, compares it to your IDPS to make sure that it is proper for your console and writes it. Both for NOR and NAND. It doesn't need to flash the whole 16MB NOR or 256MB NAND - that's how i converted my console.
+ mm generates 240mb nand, but that's all is needed because the EID sector is at 0x40800 so it can be read by "c2d" and written by multiMAN later.
|
That clear things out regarding NAND flash dump size. Don't use Linux to get NAND flash dumps. For some reason CEX2DEX can't recognize them as valid.
I will do all the process again at some point but using multiMAN to manage the dumping and flashing of the NAND and update this guide with more info.
In any case, just stick to this guide steps and tools to make sure everything goes fine
Note: A log file will be written on the USB Storage Device called "JaiCrab.txt", open it on your PC to see if there were any errors.
STEP 4 :: GETTING METLDR FROM FLASH DUMP WITH CEX2DEX (by Gunner54)
1- Run CEX2DEX located in
"CEX2DEX_BY_GUNNER54" directory.
2- Click the top-right "..." button and navigate to your USB Storage Device root directory.
3- Select "Backuprflash.bin" and click "Open"
4- Click on "Extract METLDR".
5- Save the resulting "METLDR" file to the root of the USB Storage Device.
STEP 5 :: PREPARING METLDRPWN
1- Copy the
"metldrpwn" directory to the root of the USB storage device.
2- Move the "METLDR" dump we got from CEX2DEX to the "metldrpwn" directory that was copied.
STEP 6 :: PREPARING PETITBOOT AND RED RIBBON RC5 LIVE
UPDATE: Please download this file, since I forgot to include it in the RAR package, you will need it! ( create_hdd_region.sh )
1- Copy all files located on
"RED_RIBBON_RC5_LIVE" to the root the USB storage device.
2- Copy all files located on
"PETITBOOT" to the root of the USB storage device.
3- Copy "
create_hdd_region.sh" to the root of the USB Storage Device.
UPDATE: If you did not get the first package I uploaded, please download Red Ribbon RC5 from here:
http://sourceforge.net/projects/redr...5.rar/download
* You must extract the RAR, then extract the ISO contents to the root of the USB Storage Device.
NOTE: The included 'dtbImage.ps3.bin' is for NAND users only! was originally called 'dtbImage.ps3.bin.minimal'
STEP 7 :: SETTING UP PETITBOOT
1- Connect the USB Storage Device to the PS3.
2- Install "setup_flash_for_otheros.pkg".
3- Install "install_otheros.pkg".
4- Install "boot_otheros.pkg".
5- Install "reboot.pkg".
6- Run "Setup FLASH for OtherOS" (PS3 will beep and return to XMB).
7- Reboot your PS3 by manually pressing the Power button.
8- Run "Install OtherOS" (PS3 will beep and return to XMB).
9- Run "Boot OtherOS" (PS3 will beep and return to XMB).
10- Run "Reboot" (this will take you to petitboot).
STEP 8 :: GETTING THE EID0 DUMP FROM RED RIBBON RC5
UPDATE: I included information regarding the installation of Red Ribbon RC5 to your PS3, so please download the new file mentioned on "STEP 6 ::" (create_hdd_region.sh) Thanks to DeanK for the tip! I forgot to write that part xD
UPDATE: For security reasons Linux doesn't display anything when you write your password, so when you input your username, just write "ps3" when it ask for password (even if you don't see anything happening) and press ENTER.
1- Connect a USB Keyboard and Mouse to the PS3.
2- From the petitboot main screen select "Quit to Shell".
3- Write "/tmp/petitboot/mnt/
sda1/create_hdd_region.sh" (sda1 could be different, depending on where you connected the USB Storage Device)
4- If you get an error about path not found, write "mount" and look for the correct "sda1", "sda2", etc. Then try sub-step 3.
5- Reboot the PS3
6- If you end up in GameOS, then run "Reboot" from the XMB game column.
7- From the petitboot main screen select 'live-otheros' and press ENTER.
8- Wait for Red Ribbon RC5 Live to finish loading.
9- If asked for login it should be (user: ps3)(pass: ps3).
10- Double-click the "Install Red Ribbon" icon on the desktop.
11- During partitioning you can resize the default /dev/ps3dd1 partition from to just 4GB (4096MB), It will speed up installation/formatting (all will take less than 5 mins)
12- Restart the PS3 after installation is complete.
13- If you end up in GameOS, then run "Reboot" from the XMB game column.
14- From the petitboot main screen select "Red Ribbon" (don't select live-otheros, live-asbestos or failsafe)
15- If asked for login it should be (user: ps3)(pass: ps3)
*16- Go to the top-left icon on the bar and click it.
*17- Go to "Preferences->Keyboard and select these, 'Generic', 'US', 'alt international'. Click 'Apply' and ten 'Close'.
18- Open "File Manager" (second icon in the top-left bar).
19- Navigate to your USB Storage Device and copy "metldrpwn" to "/home/ps3/" directory.
20- Press "ALT+CTRL+F1", this will take you to Terminal Mode.
21- Write "cd metldrpwn" and press ENTER.
22- Write "sudo
chmod +x ./run.sh" and press ENTER.
(updated with correct command, thanks to
@gankutsuo
for the tip)
23- Write "sudo ./run.sh"
24- Press "ALT+CTRL+F7" to exit Teminal Mode.
25- Open "File Manager" (second icon in the top-left bar)
26- Navigate to /home/ps3/ directory and copy "dump_eid0.bin" to the USB storage device.
27- Turn off your PS3. If it reboots go into GameOS.
Note 1: If you can't locate your USB Storage Device while on Red Ribbon RC5, then connect a different USB Storage Device to copy "dump_eid0.bin" to its root.
Note 2: Steps marked with "*" are optional depending on you keyboard layout, in my case I had to do it.
STEP 9 :: PATCHING CEX FLASH DUMP TO DEX
1- Connect the USB Storage Device to your PC
2- Navigate to your USB Storage Device and rename
"dump_eid0.bin" to
"dump".
3- Run CEX2DEX located in
"CEX2DEX_BY_GUNNER54" directory.
4- Click the top "..." button and select "Backuprflash.bin" and click "Open".
5- Click the second "..." button and select "dump" and click "Open".
6- Click "CEX2 -> DEX" button.
7- Save the resulting file to your USB Storage Device as "rflash.bin"
STEP 10 :: FACTORY MODE, ONE MORE TIME
1- Connect the USB Storage Device
2- Turn on your PS3 and run "Factory Service Mode Tool" from the XMB Game column.
3- If you hear 3 beeps, try it again, it should beep once now and reboot into Factory Service Mode.
4- You can turn off your PS3 for now.
Note: In your USB storage device there will be a file called "Lv2diag_exit.self", this will be used later to exit FSM.
STEP 11 :: RE-FLASHING DEX WITH JAICRAB PRELOADER ADVANCE v3.1
Warning
WARNING! - This step will re-flash the NAND DEX dump, make sure everything went right, and that the dump size is 256MB. If you did something wrong I am not responsible!
1- Connect you USB Storage Device to your PC.
2- Copy the files from
"JAICRAB_PRELOADER_ADVANCE_v31" to the root of the USB Storage Device.
3- Connect the USB Storage Device to the PS3 (to the last USB slot on the right).
4- Turn the PS3 ON, and wait until it completely turn off, this could take a few minutes.
Note: A log file will be written on the USB Storage Device called "JaiCrab.txt", open it on your PC to see if there were any errors.
STEP 12 :: EXIT FACTORY MODE
1- Connect the USB Storage Device to your PC.
2- Remove "Lv2diag.self" and "advance.cfg" from the root of your USB Storage Device.
3- Rename "Lv2diag_exit.self" to "Lv2diag.self".
4- Connect the USB Storage Device to your PS3 and turn it on.
5- Your PS3 should be out of Factory Service Mode.
6- Connect the USB Storage Device to your PC.
7- Remove the "Lv2diag.self" from the USB Storage Device.
8- Turn off your PS3.
STEP 13 :: INSTALL DEX OFW 4.11
1- Copy the directory inside
"DEX_OFW_411" to the root of the USB Storage Device.
2- Connect the USB Storage Device to your PS3.
3- Start your PS3 in "Recovery Mode" (press power button for 8 seconds, then again until it beeps)
4- Select "System Update" and follow the instructions.
Congratulations! If everything went well, you are officially on DEX! =D
Please, if anyone have questions regarding my guide let me know, I will try to help when I have some free time.
PS: Everyone, please stay on topic to avoid confusion and reduce possibility of a brick because of misinformation. If you want information on how to play 'X' game / backup on DEX, then go to the proper thread.
SeeYa!
07-21-2012
[GUIDE] PS3 NAND CEX-TO-DEX
