Join Date: Feb 2008
Location: Porto - Portugal
Liked 20 Times in 13 Posts
Mentioned: 1 Post(s)
Tagged: 0 Thread(s)
[TUTORIAL] Get eid_root_key on DEX, and convert PS3 to CEX without original nand/nor!
I'm creating this small post/tutorial, for those who may need some help, and hope it can helps find some other things.
First, i was on 3.55 dex, and i couldn't make a dump of root key, tryed it on DEX original, installed itskamel dex cfw, and nothing. But i could still get nand flash dump of a 60GB model with multiman 4.06.
So what you can do to get the nand/nor dump, and eid_root_key file, so you can use c2d.exe v2, to convert back to CEX?
It may take a while, but it works. And you may find, or some devs may find also this usefull, as its required to install a "partiall" cex/dex fw. You will understand in a few minutes.. read this:
Follow this instructions, as they are easy to use, of course, there is always a risk of bricking if something gets done wrong, but remember, im not responsible.
1- Downgrade to or install 3.55 itskamel dex fw on system update
2- Install 4.06 multiman (thats what i used)
3- Open multiman, and get your nand/nor dump
3.1- To get your nand/nor dump, go to mmOS, press O on any file, open in HEX viewer, press SELECT, press START.. it will appear 3 questions: 1 = NO, 2 = NO, 3 = YES.. and wait, it takes about 5 minutes.
4- Exit multiman
4.1- Save your file on PC
5- Install Factory Service Mode v2
6- On a blank USB, copy rogero 3.4 CFW to root of usb, and file 1 (lv2diag.self) also to root of usb.
7- Connect USB drive to the most right usb door, and start FSM v2 (It may fail to boot on first time, and beep 2 times, and return to XMB, its normal, and start FSM v2 again, it will beep once, and reboot your ps3)
7.1- Wait until your PS3 to start flashing green and after 2, 3 seconds it will turn off.
8- Remove your USB, delete the files, and rename "lv2diag_exit.self" to "lv2diag.self" (If you dont get the exit file, go to your PC, and copy file 2, lv2diag.sef, and copy to root of usb, and connect it the same USB door it was on PS3.
9- Turn on PS3, it will after 5 seconds turn off.
10- Remove USB and start PS3 (You are now on rogero 3.4 cfw, "partially".. Its not a complete cex fw you have installed.. Devs may look at this if you can, to make sure if theres some exploit, or something else)
11- Install "eEID_root_key_dumper.pkg", and run it.
11.1- PS3 will beep and restart
12- Remove multiman 4.06 and install 4.03 dex and run it
12.1- Your file will be in dev_hdd0/tmp
12.2- Copy the file to a USB pen.
13- Go to your computer, and use does files you got with this step to convert on c2d.exe v2 your DEX nand/nor flash, back to CEX.
After you've made previous steps, copy the cex flash generated on c2d.exe v2, to a usb, open multiman, go to your usb, and flash it.
After all this you can go back to CEX.
Sorry if my tutorial is not the best, but i think it has 2 good topics to discuss on the scene, and to help everyone.
Also sorry for my bad english, as im portuguese, and i've also lost my original nand, and used this steps, some if found it on my own, like installing rogero as a partiall cex/dex fw, to get back on CEX.
So, if any mod see the need to change something, feel free to do it, if it's a bit confusing.
Thanks for Reading, and hope it helps a lot of you.
Any doubts or questions, feel free to post, i will help as much as i can.