IV PS3 Debug Discussion

[ribonucleic]

good luck dude ! please let us know how it went ( detailed if possible ) im personaly too confused about it and abit scared to mess my console ... i have a 60gb retro compatible with ps2 and i dont want to brick it ( i might go to local pawn-shop and look for a broken ps3 to fix and experiment with )

ok, if you want details that i know then read the rant its got a lot of info in it

i'll tell you guys what i did if i succeed, in fact i'll tell you what i did if i fail, if i succeed i'll make a small package of all the tools i used (except rebug firmwares because they don't like hotlinking or duplicating their downloads), if i can make enough sense out of it i'll also add in a small description of the encryption chain which will basically detail why we can't CEX to DEX on 4.21 yet (if ever)

[HuN]

ok, if you want details that i know then read the rant its got a lot of info in it

i'll tell you guys what i did if i succeed, in fact i'll tell you what i did if i fail, if i succeed i'll make a small package of all the tools i used (except rebug firmwares because they don't like hotlinking or duplicating their downloads), if i can make enough sense out of it i'll also add in a small description of the encryption chain which will basically detail why we can't CEX to DEX on 4.21 yet (if ever)

just like you , i learned about " eid_root_key " after i aready installed 4.21.2 rebug ... and honestly some tutorials iv read about cex/dex are more confusing than helpfull , for some are not even telling about about the root_key thing and/or need to get it while in 3.55 ... and worst they dont offer some safety mesures such as dumps hash check " jumper " suggested .

[ribonucleic]

just like you , i learned about " eid_root_key " after i aready installed 4.21.2 rebug ... and honestly some tutorials iv read about cex/dex are more confusing than helpfull , for some are not even telling about about the root_key thing and/or need to get it while in 3.55 ... and worst they dont offer some safety mesures such as dumps hash check " jumper " suggested .

---

My console survived the following steps, i have been stressing over this so much i am going to finish the 20 beers left in the fridge

i need someone who has converted a nand console to come forward with what they did and then we will have a nand and nor tutorial

Be aware that even though i was successful this is still a risky thing to do to your console, also this tutorial is not complete such as it doesn't tell you how to back up your flash so do your research, fret about every tiny detail and when you are confident that you know all you need to know, have done all the things you need to do, then do some more research, after this if you are still willing to lose your console should this fail, then and only then proceed with the final step, good luck


Final note before you start: i am not responsible for any bricked consoles you were warned above that this could brick your console and should take that very seriously!

CEX to DEX tutorial

If your firmware version is 3.55 then start at step 2.



you can backup your flash before downgrading or after upgrading back to 4.21 personally i backed it up before i downgraded

1) if you have QA'd your console downgrade to Rebug 3.55.4 (from XMB)
if your console is not QA'd then downgrade using Rebugs 999 downgrader and then install Rebug 3.55.4 over it
(get Rebug cfw and/or 999 Downgrader download link(s) from www.Rebug.me)

Rebug 3.55.4 and Rebug 999 Downgrader are the same firmware (at the time this tutorial was written) except the downgrader was modified specially for downgrading but after using the 999 Downgrader there will be a mismatch in the PS3's system files and installing 3.55.4 should fix this mismatch

to check if you're QA'd goto the settings column and highlight Network Settings then on your controller press L1+L2+L3+R1+R2+dpad down then scroll to the bottom of the settings column if you are QA'd and did the button combo correctly then there will be an entry named Debug

2) download eEID_RKDumper -- download link (i am hotlinking from ps3scenefiles.com, they made me register but i have logged out and this link still works)

3) place eEID_RKDumper.pkg in usb:/packages/ install it, run it (be prepared for a black screen, restart, bleeps and improper shutdown warning)

4) use a file browser (i used Multiman's MMos) to go to dev_hdd0/tmp/ and copy the file named eid_root_key (which should be only 48 bytes in length) to usb

5) --vv FOR NOR CONSOLES ONLY vv----

follow this tutorial c2d-easy-cex-dex-method-16mb-nor-consoles
check the new DEX firmware in a hex editor at offset 0x2F075 you should see a value of 0x82, this is your TargetID and 0x82 means DEX

----^^ FOR NOR CONSOLES ONLY ^^----

6) this step is for both NAND and NOR consoles... go back to Rebug 4.21.2 and follow this mini tutorial

REWRITE TARGET ID IN FLASH: (finally convert to DEX)

This option requires you have a valid NOR/NAND dump named correctly on dev_usb000. --snipped out unneeded part because to have gotten this far you would have already performed this snipped part--

Rename your original CEX dump to CEX-FLASH.EID0.NORBIN (16mb) or CEX-FLASH.EID0.NANDBIN (239mb or 256mb)
Rename your converted DEX dump to DEX-FLASH.EID0.NORBIN (16mb) or DEX-FLASH.EID0.NANDBIN (239mb or 256mb)

Once you have prepared your NOR/NAND dumps place them on a USB device and connect it to dev_usb000 (port on the right, closest to BD drive).

Now that you have your valid dumps named properly and connected to dev_usb000 it is a simple as selecting the option and following the onscreen prompts. Takes less than 10secs once you have your dumps prepared.

if you spot any errors or are unsure about any steps in this tutorial then stop and do some research, ask some questions, tell me of the error, then continue if you still want to.

[nativesith]

Wakin up to a warning kewl! Best o luck son.

[jumper]

i'm guessing that before you moved from 3.55 to 4.21.2 that you had done your research about converting to DEX and recovered your eid_root_key?

or did you have to downgrade?
if you did, did you just throw Rebug 3.55.4 onto your console, fetch your key, fix your flash, then back to Rebug 4.21.2 to reflash to DEX?

I've been bouncing between firmwares lately and when I decided to go for DEX I had to downgrade from 4.21.1 rebug. Every time I have downgraded I do this:

1. Make sure I have no disc in the bd drive
2. Install Rebug 9.99 downgrader from xmb
3. Install Kmeaw 3.55 from recovery menu
4. On kmeaw go to network settings and press L1+L2+L3+R1+R2+dpad down to verify qa flag is still set

Seeing as I'm not the only one that will be playing with DEX, does anyone else think a seperate topic for debug discussion would be a good idea (to reduce the load on this thread maybe)?
I've started experimenting with sending over a new update.img while in game and I'm getting mixed results (mostly crashes).

[ribonucleic]

Seeing as I'm not the only one that will be playing with DEX, does anyone else think a seperate topic for debug discussion would be a good idea (to reduce the load on this thread maybe)?
I've started experimenting with sending over a new update.img while in game and I'm getting mixed results (mostly crashes).

yes a debugging topic would be good

also i am now on DEX myself check the tut i wrote above

[HuN]

yes a debugging topic would be good

also i am now on DEX myself check the tut i wrote above

my ps3 is a NAND ... ill have to search abit more to make sure i got everything right

a " gta 4 debug thread " would be great ... either you or jumper should start it , for you guys are already in DEX ! and ready to go

[ribonucleic]

I think my tut would work for you, you just need an alternative to step 5

[Three-Socks]

Anyone thought about trying to reverse engineer the GTA EBOOT using IDA? I've been getting into that kinda stuff myself lately. Its my new hobby for now Been working on hitman and now ac3.

I wouldn't mind looking into GTA's eboot myself. Just wondering if you had anything specific you where trying to do? I'll try and help if so.

BTW be careful going to dex Make sure your super paranoid (in this case it does help) so when you back up your flash you do it multiple times and compare them using the proper methods. ps3devwiki is down atm but heres the cache of a page that can help: Validating flash dumps - PS3 Development Wiki

[ribonucleic]

.............. BTW be careful going to dex Make sure your super paranoid (in this case it does help) ........ Validating flash dumps - PS3 Development Wiki

yes, definitely do be super paranoid, i was and i won lol...

btw here is another link about the same topic www.ps3devwiki.com/wiki/Talk:Validating_flash_dumps its a different article and provide key bits of info...

3 i'm guessing you have DEX'd your console? or is it something you are considering?