How to DEX Your PS3

REQUIREMENTS:

1- NAND PS3 model running on CFW/OFW 3.55 or less.
2- My CEX-2-DEX Package (it includes everything you will need) (NEW LINKS)
* NAND_CEX2DEX_PACK_v2_CaptainCPSX.part1.rar (199 MB) (MD5: 72845FAD1B23F1A2D7453847684F4576)
* NAND_CEX2DEX_PACK_v2_CaptainCPSX.part2.rar (162 MB) (MD5: 600A93E7C7F8D57C008EF84DCB59A8DE)
3- USB Keyboard / Mouse
4- USB Storage Device (FAT32) (with at least 2GB just in case)
5- Patience, Time and the will to convert your PS3 to DEX.

ADVICE: DO NOT SKIP ANY STEP!. EVERY STEP AND SUB-STEP IS IMPORTANT!!!

STEP 1 :: INSTALLING OTHEROS++ CFW 3.55

1- Backup important data from PS3 (saves, images, videos, etc...).
2- Verify and remove any disc inserted on the PS3.
3- Turn off your PS3.
4- Connect a USB Storage Device to your PC (FAT32).
5- Copy the directory from "CFW_355_OTHEROS++" to the root of the USB Storage Device.
6- Connect the USB Storage Device to the PS3.
7- Turn on the PS3 in 'Recovery Mode' (press power button for 8 seconds, then again until it beeps).
8- Select "System Update" and follow on-screen instructions.
9- After installation is done, turn off your PS3.
10- Turn on the PS3 in 'Recovery Mode' (press power button for 8 seconds, then again until it beeps).
11- Choose "Restore PS3 System".

STEP 2 :: GOING INTO FACTORY SERVICE MODE

1- Connect the USB Storage Device to the PC.
2- Copy the files from "FACTORY_SERVICE_MODE_TOOL_v02" to the root of a USB storage device.
3- Connect the USB Storage Device to the PS3 and install "FactoryServiceMode.gnpdrm.pkg".
4- Run "Factory Service Mode Tool" from the XMB Game column.
5- If you hear 3 beeps, try it again, it should beep once now and reboot into Factory Service Mode.
6- You can turn off your PS3 for now.

Note: In your USB storage device there will be a file called "Lv2diag_exit.self", this will be used later to exit FSM.

STEP 3 :: GETTING FLASH DUMP

1- Copy the files from "JAICRAB_PRELOADER_ADVANCE_v31" to the root of the USB Storage Device.
2- Connect the USB Storage Device to the PS3 (to the last USB slot on the right).
3- Turn the PS3 on, and wait until it completely turn off, this could take a few minutes.
4- NAND Flash dump will be located in the USB Storage Device as "Backuprflash.bin"
5- Connect the USB Storage Device to your PC.
6- Remove "Lv2diag.self" and "advance.cfg" from the root of your USB Storage Device.
7- Rename "Lv2diag_exit.self" to "Lv2diag.self".
8- Connect the USB Storage Device to your PS3 and turn it on.
9- Your PS3 should be out of Factory Service Mode.
10- Connect the USB Storage Device to your PC.
11- Remove the "Lv2diag.self" from the USB Storage Device.

UPDATE: If you use Windows, and you cannot see the flash dump on your USB Storage Device.

* Click on the windows explorer menu "Tools -> Folder Options".
* On the new window click the top Tab "View".
* Select "Show hidden files, folders, and drives".
* Un-ckeck "Hide protected Operative System files".
* Click "OK".

Now you should see the flash dump "Backuprflash.bin" on the root of your USB Storage Device.

IMPORTANT UDPATE: Make a backup of "Backuprflash.bin" to a safe location, you will need it in case you want to go back to CEX!.

warning
Warning

WARNING: Other methods of acquiring the Flash dump for NAND are NOT good for backup purposes, I tested them and did not get a complete dump. The resulting dumps had missing data on them. You have been warned.

The ONLY method for NAND to get a complete flash dump (similar to Hardware method) is by using JaiCrab Preloader Advance v3.1.

PS3DevWiki has precise information about this:

http://www.ps3devwiki.com/wiki/Hardw...ND_from_GameOS

Difference between hardware dumps and software dumps

ps3vflasha

hardware dumps

256 MB (268,435,456 bytes)

bootldr is at 0x000000 on NAND (0xFC0000 on NOR)

software dumps

dump size = 239 MB (251,396,096 bytes)

bootldr not at 0x000000 on NAND :

Code:


00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000010 00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF .....¬à ÿ....ÞÂ*¾ï

reason:

Code:

addi %r12, %r4, 0x200 # r4 = start sector
256MB NAND consoles have a hidden section of size 0x40000 (0x200 * 512 byte sector = 0x40000) hidden by the hv. The hv hides it at address 002786E8

Original code : 0x39840200f8010090
Change to : 0x39840000f8010090
More info here as well: http://www.ps3hax.net/showpost.php?p...postcount=1380





UPDATE: Thanks to DeanK for this information:
Actually multiMAN writes ONLY one sector (512 bytes). It needs the whole dump to verify it, but takes only one sector, compares it to your IDPS to make sure that it is proper for your console and writes it. Both for NOR and NAND. It doesn't need to flash the whole 16MB NOR or 256MB NAND - that's how i converted my console.

+ mm generates 240mb nand, but that's all is needed because the EID sector is at 0x40800 so it can be read by "c2d" and written by multiMAN later.
That clear things out regarding NAND flash dump size. Don't use Linux to get NAND flash dumps. For some reason CEX2DEX can't recognize them as valid.

I will do all the process again at some point but using multiMAN to manage the dumping and flashing of the NAND and update this guide with more info.

In any case, just stick to this guide steps and tools to make sure everything goes fine

Note: A log file will be written on the USB Storage Device called "JaiCrab.txt", open it on your PC to see if there were any errors.

STEP 4 :: GETTING METLDR FROM FLASH DUMP WITH CEX2DEX (by Gunner54)

1- Run CEX2DEX located in "CEX2DEX_BY_GUNNER54" directory.
2- Click the top-right "..." button and navigate to your USB Storage Device root directory.
3- Select "Backuprflash.bin" and click "Open"
4- Click on "Extract METLDR".
5- Save the resulting "METLDR" file to the root of the USB Storage Device.

STEP 5 :: PREPARING METLDRPWN

1- Copy the "metldrpwn" directory to the root of the USB storage device.
2- Move the "METLDR" dump we got from CEX2DEX to the "metldrpwn" directory that was copied.

STEP 6 :: PREPARING PETITBOOT AND RED RIBBON RC5 LIVE

UPDATE: Please download this file, since I forgot to include it in the RAR package, you will need it! ( create_hdd_region.sh )

1- Copy all files located on "RED_RIBBON_RC5_LIVE" to the root the USB storage device.
2- Copy all files located on "PETITBOOT" to the root of the USB storage device.
3- Copy "create_hdd_region.sh" to the root of the USB Storage Device.

UPDATE: If you did not get the first package I uploaded, please download Red Ribbon RC5 from here:

http://sourceforge.net/projects/redr...5.rar/download

* You must extract the RAR, then extract the ISO contents to the root of the USB Storage Device.

NOTE: The included 'dtbImage.ps3.bin' is for NAND users only! was originally called 'dtbImage.ps3.bin.minimal'

STEP 7 :: SETTING UP PETITBOOT

1- Connect the USB Storage Device to the PS3.
2- Install "setup_flash_for_otheros.pkg".
3- Install "install_otheros.pkg".
4- Install "boot_otheros.pkg".
5- Install "reboot.pkg".
6- Run "Setup FLASH for OtherOS" (PS3 will beep and return to XMB).
7- Reboot your PS3 by manually pressing the Power button.
8- Run "Install OtherOS" (PS3 will beep and return to XMB).
9- Run "Boot OtherOS" (PS3 will beep and return to XMB).
10- Run "Reboot" (this will take you to petitboot).

STEP 8 :: GETTING THE EID0 DUMP FROM RED RIBBON RC5

UPDATE: I included information regarding the installation of Red Ribbon RC5 to your PS3, so please download the new file mentioned on "STEP 6 ::" (create_hdd_region.sh) Thanks to DeanK for the tip! I forgot to write that part xD

UPDATE: For security reasons Linux doesn't display anything when you write your password, so when you input your username, just write "ps3" when it ask for password (even if you don't see anything happening) and press ENTER.

1- Connect a USB Keyboard and Mouse to the PS3.
2- From the petitboot main screen select "Quit to Shell".
3- Write "/tmp/petitboot/mnt/sda1/create_hdd_region.sh" (sda1 could be different, depending on where you connected the USB Storage Device)
4- If you get an error about path not found, write "mount" and look for the correct "sda1", "sda2", etc. Then try sub-step 3.
5- Reboot the PS3
6- If you end up in GameOS, then run "Reboot" from the XMB game column.
7- From the petitboot main screen select 'live-otheros' and press ENTER.
8- Wait for Red Ribbon RC5 Live to finish loading.
9- If asked for login it should be (user: ps3)(pass: ps3).
10- Double-click the "Install Red Ribbon" icon on the desktop.
11- During partitioning you can resize the default /dev/ps3dd1 partition from to just 4GB (4096MB), It will speed up installation/formatting (all will take less than 5 mins)
12- Restart the PS3 after installation is complete.
13- If you end up in GameOS, then run "Reboot" from the XMB game column.
14- From the petitboot main screen select "Red Ribbon" (don't select live-otheros, live-asbestos or failsafe)
15- If asked for login it should be (user: ps3)(pass: ps3)
*16- Go to the top-left icon on the bar and click it.
*17- Go to "Preferences->Keyboard and select these, 'Generic', 'US', 'alt international'. Click 'Apply' and ten 'Close'.
18- Open "File Manager" (second icon in the top-left bar).
19- Navigate to your USB Storage Device and copy "metldrpwn" to "/home/ps3/" directory.
20- Press "ALT+CTRL+F1", this will take you to Terminal Mode.
21- Write "cd metldrpwn" and press ENTER.
22- Write "sudo chmod +x ./run.sh" and press ENTER. (updated with correct command, thanks to @gankutsuo for the tip)
23- Write "sudo ./run.sh"
24- Press "ALT+CTRL+F7" to exit Teminal Mode.
25- Open "File Manager" (second icon in the top-left bar)
26- Navigate to /home/ps3/ directory and copy "dump_eid0.bin" to the USB storage device.
27- Turn off your PS3. If it reboots go into GameOS.

Note 1: If you can't locate your USB Storage Device while on Red Ribbon RC5, then connect a different USB Storage Device to copy "dump_eid0.bin" to its root.

Note 2: Steps marked with "*" are optional depending on you keyboard layout, in my case I had to do it.

STEP 9 :: PATCHING CEX FLASH DUMP TO DEX

1- Connect the USB Storage Device to your PC
2- Navigate to your USB Storage Device and rename "dump_eid0.bin" to "dump".
3- Run CEX2DEX located in "CEX2DEX_BY_GUNNER54" directory.
4- Click the top "..." button and select "Backuprflash.bin" and click "Open".
5- Click the second "..." button and select "dump" and click "Open".
6- Click "CEX2 -> DEX" button.
7- Save the resulting file to your USB Storage Device as "rflash.bin"

STEP 10 :: FACTORY MODE, ONE MORE TIME

1- Connect the USB Storage Device
2- Turn on your PS3 and run "Factory Service Mode Tool" from the XMB Game column.
3- If you hear 3 beeps, try it again, it should beep once now and reboot into Factory Service Mode.
4- You can turn off your PS3 for now.

Note: In your USB storage device there will be a file called "Lv2diag_exit.self", this will be used later to exit FSM.


STEP 11 :: RE-FLASHING DEX WITH JAICRAB PRELOADER ADVANCE v3.1

warning
Warning

WARNING! - This step will re-flash the NAND DEX dump, make sure everything went right, and that the dump size is 256MB. If you did something wrong I am not responsible!


1- Connect you USB Storage Device to your PC.
2- Copy the files from "JAICRAB_PRELOADER_ADVANCE_v31" to the root of the USB Storage Device.
3- Connect the USB Storage Device to the PS3 (to the last USB slot on the right).
4- Turn the PS3 ON, and wait until it completely turn off, this could take a few minutes.

Note: A log file will be written on the USB Storage Device called "JaiCrab.txt", open it on your PC to see if there were any errors.

STEP 12 :: EXIT FACTORY MODE

1- Connect the USB Storage Device to your PC.
2- Remove "Lv2diag.self" and "advance.cfg" from the root of your USB Storage Device.
3- Rename "Lv2diag_exit.self" to "Lv2diag.self".
4- Connect the USB Storage Device to your PS3 and turn it on.
5- Your PS3 should be out of Factory Service Mode.
6- Connect the USB Storage Device to your PC.
7- Remove the "Lv2diag.self" from the USB Storage Device.
8- Turn off your PS3.

STEP 13 :: INSTALL DEX OFW 4.11

1- Copy the directory inside "DEX_OFW_411" to the root of the USB Storage Device.
2- Connect the USB Storage Device to your PS3.
3- Start your PS3 in "Recovery Mode" (press power button for 8 seconds, then again until it beeps)
4- Select "System Update" and follow the instructions.

Congratulations! If everything went well, you are officially on DEX!

Basically pasted from here?
http://www.ps3hax.net/showthread.php?t=40292

Ya it's the same tutorial I used. I copied it into my google docs a while back. Instead of wasting a hour typing it out I just copy and paste it from my docs. Makes it a whole lot easier trust me -_-.