Sponsored Links

Sponsored Links

PS3 C2D CEX to DEX Flash Patcher v2, Changes Region / TargetID


Sponsored Links
127w ago - Following up on his initial release, today PlayStation 3 developer andbey0nd has updated his PS3 C2D.exe CEX to DEX Flash Patcher to version 2 which now includes Region / TargetID changing in the PS3 NOR Flash as outlined below.

Download: [Register or Login to view links] / [Register or Login to view links] (Mirror) / [Register or Login to view links] (Mirror #2) / [Register or Login to view links] (Mirror #3) / [Register or Login to view links] / [Register or Login to view links] / [Register or Login to view links] by deank

To quote from the ReadMe file (via pastie.org/4282714):

c2d.exe (win32 app)

Requires:

  • OpenSSL 1.0.1 installed in c:\openssl or d:\openssl ([Register or Login to view links])
  • EID root key (per_console_key) obtained with metldrpwn
  • PS3 (NOR) flash dump
  • Extract c2d.rar in a local folder (c:\c2d or d:\c2d)

Purpose:

  • Allows changing the Region / TargetID of your PS3 system
  • Allows "converting" any Retail PS3 into Debug unit (target_id 0x82)
  • Allows "converting" a Retail PS3 from one region to another (i.e. EUR PS3 -> JAP PS3, USA PS3 -> RUSSIAN PS3)
  • Changing a Retail PS3 region unlocks playback for region-locked DVD/Blu-ray movies and PS1/PS3 games

WARNING: For best results flash the output NOR file with a tool which rewrites *ONLY the EID0 sector* (one sector / 512 bytes @ sector #376 / 0x178; NOR file offset 0x2f000-0x2f1ff). Flashing the whole 16MB NOR is not needed and can easily brick the PS3.

TIPS:

  • Use your original NOR flash to create new files for different regions for your PS3 to have them handy later:

For example you can have (each file is 16MB):

  • my-slim-JAP.EID0.NORBIN
  • my-slim-EUR.EID0.NORBIN
  • my-slim-USA.EID0.NORBIN
  • my-slim-DEX.EID0.NORBIN

* Using a proper tool you can switch regions in one second when needed

PROTIPS:

  • The latest online debug update of multiMAN 04.04.03 handles writing to NOR in the right fashion (1 sector) from .EID0.NORBIN files.
  • To dump NOR: mmOS->Select any file->Open in HEX viewer->[SELECT]->[START]->DUMP LV2(NO)->DUMP LV1(NO)->DUMP FLASH(YES)
  • To write EID0 sector: mmOS->Double-click on a .EID0.NORBIN 16MB full NOR dump file->Follow the on-screen instructions->Reboot.

Usage:

c2d - Changes REGION/TARGET_ID in PS3 NOR flash

Usage: c2d.exe eid_key_file.bin in_flash.bin out_flash.bin [target_id]

[Register or Login to view code]

Output:

[Register or Login to view code]

Enjoy!
andbey0nd

Note: TargetID/RegionCode is one and the same. DEX target/region is 82. 0x84 is USA RETAIL PS3, 0x82 is Debug/DEX.

Below are a few additional guides from Sony PlayStation 3 hacker deank as follows:

DeanK's OtherOS with METLDRPWN PUP Installation / Usage Tutorial (via ps3crunch.net/forum/threads/4111-C2D?p=45668#post45668)

Ok, folks... I prepared a 218MB rar package to make things easier. It includes everything you need, except for RedRibbon (you'll have to download it yourself -> [Register or Login to view links]).

PS3_OTHEROS_LINUX_METLDRPWN.rar (218.21MB) [Register or Login to view links] (Original Version)

PS3_OTHEROS_LINUX_METLDRPWN.rar (217.49MB) [Register or Login to view links] (New Version - Recommended)

You can also use this smaller download if you already have OTHEROS-22GB.PUP downloaded:

PS3_OTHEROS_SETUP_METLDRPWN.rar (48.33MB) [Register or Login to view links] (Original Version)

PS3_OTHEROS_SETUP_METLDRPWN.rar (52.25MB) [Register or Login to view links] (Older Version)

PS3_OTHEROS_SETUP_METLDRPWN.rar (46.67MB) [Register or Login to view links] (Old Version)

PS3_OTHEROS_SETUP_METLDRPWN.rar (46.85MB) [Register or Login to view links] (New Version - Recommended)

You can download the OTHEROS PUP separately directly from glevand's repo and save it as \PS3\UPDATE\PS3UPDAT.PUP on your USB: [Register or Login to view links]

Download and follow the instructions. You need a USB hdd to extract this package to the root folder of the USB and also Red-Ribbon.iso extracted in the root folder of the same USB. The rar contains:

  • c2d tool / openssl installer
  • metldrpwn folder with precompiled metldrpwn.ko module for Red Ribbon
  • multiMAN (for CEX and DEX) (no backups on DEX)
  • norunpack (+cygwin1.dll)
  • PS3\UPDATE\PS3UPDAT.PUP (otheros-22GB.PUP)
  • create_hdd_region.sh
  • 4 packages needed to setup OtherOS from XMB/GameOS + flash image for NORs (dtbImage.ps3.bin)

Instructions

That's all you need.

[Register or Login to view code]

Notes: NAND should be also supported (Refer to the PS3 NAND CEX to DEX Guide by CaptainCPS-X). While I was converting my PS3 from CEX to DEX and then back from DEX to CEX I NEVER used the POWER BUTTON to turn-off/restart the PS3. The only time I had to do that is at the beginning when you have to enter the Recovery Menu after OTHEROS PUP is installed.

All other firmware updates are performed from XMB (not from recovery menu) and all restarts/turn-offs are performed with {PS}->Turn Off in GameOS, or reboot/shutdown/restart/boot-to-game-os while in petitboot or linux.

The PS3 I used for my tests is SLIM, which came with 2.70, never downgraded and no need for special firmwares with checks-disabled, etc. If you're console is downgraded from 3.56+ following this tutorial may brick it.

You only need linux once just to obtain your key. After you have the keys you can switch to CEX/DEX/change the ps3 region from GameOS. Yes, it may be possible to obtain the key without installing linux (either from livecd or using some other method), but not at the moment.

EASIEST WAY: When you boot your PS3 in PETITBOOT you can see the paths to the kernels. Two of these (first two lines) will show the correct path to your USB HDD (look for /......../petitboot/.....).

If you see ...../sda1.... or ...../sdb1.... <--- this is your USB HDD so use the path with cd and then launch create_hdd_region.sh

You can either use:

[Register or Login to view code]

or

[Register or Login to view code]

You can easily find your USB HDD by trying the folders:

try to type these:

[Register or Login to view code]

here you can type

[Register or Login to view code]

and find your usb (sda* / sdb* / sdc*) (sda1 means Storage Device "A", partition 1, sdb1 means Storage Device "B", partition 1, etc) and then you can

[Register or Login to view code]

(change "cd sda1" appropriately - if you use USB HDD, 1st partition is sda1, second is sda2, etc... If you use USB STICK/FLASH then sdb1/sdb2..)

Below is a PS3 Real Debug (DEX) video from gt41 who used an E3 Flasher to dump the NOR, converted NORCEX to NORDEX and reflashed it back (without risk of bricking) to play PS3 game backups including Pro Evolution Soccer (PES) 2012.





Also below is a PS3 DEX 4.11 - Pro Evolution Soccer 2012 (Italian) M109 by PS3DEX:





Finally, from PS3 developer Rogero who recently released a Rogero 3.55 DEX Downgrader CFW Peek / Poke PS3UPDAT.PUP for Custom Firmware users:

For all owners of PS3 consoles downgraded from 3.55+ using hardware flashers and Rogero_CFW_v3.x:

Before attempting to convert to DEX and to avoid Bricking the PS3, please reset the PS3 syscon hashes to eliminate the need of using CEX/DEX firmwares with Patched LV1 checks.

To Reset the syscon and have the PS3 back to normal safer mode like any original (non Downgraded ) PS3, here are the steps:

1- After completing the downgrade process and having Rogero CFW 3.x up and running, make sure you have the Blu-Ray drive attached or the QA Toggle package won't work.
2- Download the Rebug QA_Toggle package from here (ps3devwiki.com/files/flash/Tools/toggle-qa/toggle_qa.pkg) ---> toggle_qa.pkg
3- Put the "toggle_qa.pkg" on USB and Install it on the PS3.
4- Run the "Rebug Toggle QA" from XMB, the screen will go Black and you will see HDD Led activity then if all went fine you will hear one Beep and the PS3 will Restart back to XMB.
5- If you want to make sure QA flag was set, go to "Network Settings" then apply the following key combo (all at the same time):

L1 + L2 + L3 (press left stick) + R1 + R2 + dpad_down

You should see Edy Viewer, Debug Settings, and Install Package Files if done correctly.

6- Now that you have QA flag set, Turn Off your PS3 and Turn it back on but into "Recovery Menu"

This Step is very important, it have to be from "Recovery Menu" and not a normal Update from XMB or the PS3 will Brick.

Here is how to access it:

a. Turn off PlayStation 3.
b. Hold The power button down; The system will turn on and turn off once again.
c. Once the System has been shutdown, re-press you finger until you hear 2 consecutive beeps
d. When you hear the 2 beeps take finger off power button.
e. You will be prompted to plug in your controller via usb and then hit the PS button
f. The Recovery menu will pop up.

Alternatively you can simply use CondorStrike's Updater package to enter Recovery Menu directly from XMB without going through the boot sequences. --> Condor Updater v2.0 (ps3devwiki.com/files/flash/Tools/Condor%20Updater/Condor%20Updater%20v2.0.pkg)

7- Now you must have any 3.55 OFW or CFW with original (non Patched) LV1, here's a link to 3.55-Kmeaw --> kmeaw355.PUP (ps3devwiki.com/files/firmware/MFW-CEX/Kmeaw/kmeaw355.PUP)

8- Select the last option of the Recovery Menu --> System Update, then when prompted press "Start+Select" to start the update.

Once finished the PS3 will restart into XMB with the Syscon hashes reset back to 3.55 in both "ros0" and "ros1" and your PS3 is back like any original/non Downgraded PS3 that can use any CEX/DEX Fw without having to worry about disabling LV1 checks.

You can proceed now with converting from CEX to DEX by following Deank's tutorial normally.




Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter, Facebook and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene and PlayStation 4 scene updates and fresh homebrew releases!

Comments 649 Comments - Go to Forum Thread »

• Please Register at PS3News.com or Login to make comments on Site News articles.
 
#609 - emerax - 73w ago
emerax's Avatar
Oh see here: [Register or Login to view links]

#608 - racer0018 - 73w ago
racer0018's Avatar
All the semi bricks I have seen had to fixed with a hardware flasher. Thanks.

#607 - emerax - 73w ago
emerax's Avatar
Hi all..

Bit of a dilemma, I semi bricked by converting DEX to CEX through multiman which I don't normally do, I'd normally run it through rebug toolbox and be sweet, anyway its semi bricked "5 beep thingo" and turns off.

Now I have a minimus dongle and just wondering if anyone has used this device to fix their own semi brick, I'm just a bit lost as to what hex file I should use, loading it etc I have read up on and it looks pretty straight forward, another issue im having is that everyone, well most people are stating that in order to use these dongles I must be on 3.55?

At the time of converting from DEX to CEX on was on 4.x REBUG, once I find correct hex, all I'll need to do is load lv2diag.self and rebugs 999 3.55.4 downgrader right? Anyone information would be appreciated!

Thanks!

#606 - spiretos35 - 75w ago
spiretos35's Avatar
good job, also from Rancid-o (via ps3ita.it/cfw-ofw/cfw-ps3ita-4-41-dex-rev4/):

Download: [Register or Login to view links] (Password: camparisoda)
MD5: d71a5b5ec3e786a2250da7fd87139d59

CFW 4.41 DEX PS3ITA REV4

  • Removed ecdsa check from appldr, isoldr, lv1ldr and lv2ldr.
  • Patched lv1 to added support to lv1 peek, lv1 poke and remove syscon hash check.
  • Patched lv2 to added lv2 peek, lv2 poke, lv1 peek, lv1 poke and lv1 call.
  • Patched sys_init_osd to to allow execution of a self when the PS3 starts. Thanks to Miralatijera for this!
  • Added CORE ps3itald, this allow to change the console id or set it as retail when PS3 starts (You do NOT need to use Change IDPS All Region or similar to sign up on PSN).
  • Added Spoof 4.46.
  • Patched VSH to added ReactPSN support.
  • Patched nas_plugin to allow installation of PKG Retail.
  • Patched autodownload_plugin and download_plugin to allow installation of games update.
  • Patched UPL.xml to allow installation of CFW on PS3 with broken blu-ray drive and broken bluetooth board.
  • Added Playstation Store and Playstation Home icon.
  • The CFW can run every game with fw version set to 4.41 or lower (no sprx, self patching is necessary).
  • The CFW can be installed from the XMB over OFW 3.55 and each CFW DEX with spkg check patched.

Use PS3ITA Manager 1.30 to change the console id..

1) Run Ps3ita manager
2) Press START to enter in "Global Options"
3) Select "Network Tools"
4) Select "Set new console id"
5) Enter your console id and to the question "Do you want CORE (ps3itald.self) automatically set this console id when you boot PS3?" reply with YES

Now the console id inserted is automatically set at boot of console (No need start PS3ITA Manager again)

#605 - Gunner54 - 75w ago
Gunner54's Avatar
Unkn0wn 4.41 DEX CFW

Thought this might be useful for some people. YES this can be installed on a CEX2DEX convert without a brick.

Install over any existing DEX CFW with isoldr and spu_pkg_rvk_verifier patched. Otherwise install the 3.55 DEX Downgrade PUP and install from there.

  • lv1ldr ecdsa patched
  • lv2ldr ecdsa patched
  • isoldr ecdsa patched
  • appldr ecdsa patched
  • lv1 coreos hash patched
  • lv1 mmap patched
  • lv1 sysmgr integrity check patched
  • lv1 peek/poke
  • lv2 peek/poke
  • spu_pkg_rvk_verifier patched
  • nas_plugin patched
  • autodownload_plugin/download_plugin patched
  • 4.46 spoof + PSN
  • reActPSN patched

MD5: 38A7BEEFE2FD7DCB63B29A134434338C
Size: 188,452,615 Bytes

I WILL NOT BE RESPONSIBLE FOR ANY DAMAGE THIS MAY CAUSE TO YOUR PS3.

Download: [Register or Login to view links]

Update:

  • added PS store (4.41.1)

Download: [Register or Login to view links] (179.5 MB)

MD5: 272752DD7529DAFAD7B9AC430E909B8C
Size: 188,452,615 Bytes

 

Sponsored Links

Sponsored Links
Sponsored Links

Sponsored Links







Advertising - Affiliates - Contact Us - PS3 Downloads - PS3 Forums - Privacy Statement - Site Rules - Top - © 2015 PlayStation 3 News