Post: How to Boot Debug on a Retail PS3 Unit
Options
09-08-2011, 04:08 AM
#1
Stack0verfl0w
Computer engineer
few weeks back we saw a video on You must login or register to view this content.
DEX to CEX Converter By "You know who"
Originally posted by another user
To quote from a (now removed) Tweet of Squarepusher2: "BTW Mathieulh I know you gave durandal that CEX-DEX ZIP, that it wasn't you that bundled that up, and you were not supposed to do so either"
Originally posted by another user
**WARNING** IF THIS TUTOTIAL ISN'T FOLLOWED TO THE LETTER YOU MAY BRICK, THE AUTHOR (THAT WOULD BE ME) DENIES ALL KINDS OF RESPONSABILITY SHOULD YOUR PS3 GET DAMAGED IN ANY WAYS. YOU KNOW THE RISKS **WARNING**
Requirements:
1. A playstation 3 on firmware 3.55 or below
2. A dongle to go to Service mode
3. A usb pendrive
4. A brain
5. The author of this little trick.
6. Have your pc connected directly to the ps3 on ethernet with the ip set to 192.168.0.100 and the hostmask to 255.255.255.0 (make sure no firewall is running, not even windows one, this may prevent your console from connecting to the pc)
Procedure:
** PART 1 **
1. Set your console into service mode with any compatible dongle.
2. Put the content of the converter-console folder at the root of your usb pendrive.
3. Extract ObjectiveSuites-GetData on your PC.
4. Put the usb pendrive on the last usb port on the right of your console.
5. Run ObjectiveSuites.exe from ObjectiveSuites-GetData
6. You now have a few seconds to start your console, start it.
7. Objective Suite should display "PASS" and txt files will be created in the Temp dir. Once done, power off your console.
8. Get ALL these txt files from your temp directory and send them to the author (me) with informations about your playstation 3 model (FAT/SLIM, CECH* model)
** PART 2 **
9. You should recieve from the author (Yeah me again) a file called request_idps.txt
10. Extract ObjectiveSuites-SetIdps on your pc.
11. Put the request_idps.txt in your temp folder (MAKE EXTRA SURE IT'S THERE OR YOU WILL BRICK)
12. Run ObjectiveSuites.exe from the ObjectiveSuites-SetIdps directory.
13. Start the SAME CONSOLE YOU GOT THE TXT FILES FROM (If it's another console you WILL BRICK IT).
14. Wait until Objective suite displays "PASS" Then power off your console, at this point your console should be a Debug one.
** PART 3 **
15. You will now need to do a drive initialisation in order to use the bluray drive on your console. Put your usb pendrive on your pc, delete all the files you previously put in there, Put "Lv2Diag.self" from the "set up" directory at the root of your pendrive along with PS3UPDAT.PUP (that's 3.30 debug firmware)
16. Put the pendrive on the usb port on the most right of your console.
17. Power on the console, The screen will be black and the green led will stay lit, wait until it blinks and the console powers off, once it does the firmware will be installed.
18. Put the pendrive back on pc, delete the files you put in there previously, and copy the content of the "drivefix" folder to the root of the pendrive.
19. Put the pendrive at the usb port most on the right of your console and power it on.
20. The drive initialisation will then occur, wait a couple of seconds, then power off the console (you may have to unplug it from the AC)
21. Put the pendrive back onto the pc, delete the files you previously put in there, then copy the Lv2diag.self from the "finalize" folder.
22. Put the pendrive on the usb port on the most right of your console. Power it on. Your console will power on for a few seconds then power off.
CONGRATULATIONS YOU HAVE NOW COMPLETED ALL THE STEPS AND YOUR CONSOLE IS A FULLY FUNCTIONAL DEBUG BOX. YOU NOW JUST NEED TO POWER IT ON AND COMPLETE THE USUAL FIRST TIME SETUP PROCEDURE.
I ASKED MATH FOR THE .TXT HIS WORDS
You must login or register to view this content.
Download:You must login or register to view this content. PASSWORD pass: ps3scene
mirror: You must login or register to view this content.
You must login or register to view this content.
You must login or register to view this content.
DOWNLOAD 3.70 DEBUG HERE You must login or register to view this content.
source: ps3 news
The following 7 users say thank you to Stack0verfl0w for this useful post:
The following user groaned Stack0verfl0w for this awful post:
09-09-2011, 04:20 AM
#47
TUHTA
Haxor!
i got it,so just simply change lets say 0x84(wich is retail USA) to 0x82 and than what?How do we flash it back to PS3,also as Mathieulh mentioned,you got to convert the eEID to ASCII and rename it to the file needed(request_idps.txt)i guess the Programm that will use it,will change everything needed for you?
Also is this right:
1.Get you NOR dump
2.Extract it
3.Open eEID with hex editor
4.Go to offset 0x70 and get to 6th byte and change it to 0x82
5.Go to offset 0x13D0 and get to 6th byte and change it to 0x82
6.Save it
P.S. thats how we patch the EID.
Yeah i think got it!Someone just let me know if im wrong!
Here we go ,how do we get request_idps.txt
1.Get the Nor dump(dont forget to Byte reverse it first)
2.Extract it with Flowrebuilder
3.Open eEID with HxD(hex editor)
4.Press CTRL+G and type 70
5.Copy the whole line
6.Past in Notepad(i would recommend the Notepad++) and save in ANSCII
7.Edit the 6th byte to 0x82(for example 00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66 the 6th byte is 89,so change it to 82)
8.Name it "request_idps.txt"
Check it out guys!is this right,i hope so....
i attached example...[ATTACH=CONFIG]11775[/ATTACH]
Also is this right:
1.Get you NOR dump
2.Extract it
3.Open eEID with hex editor
4.Go to offset 0x70 and get to 6th byte and change it to 0x82
5.Go to offset 0x13D0 and get to 6th byte and change it to 0x82
6.Save it
P.S. thats how we patch the EID.
Yeah i think got it!Someone just let me know if im wrong!
Here we go ,how do we get request_idps.txt
1.Get the Nor dump(dont forget to Byte reverse it first)
2.Extract it with Flowrebuilder
3.Open eEID with HxD(hex editor)
4.Press CTRL+G and type 70
5.Copy the whole line
6.Past in Notepad(i would recommend the Notepad++) and save in ANSCII
7.Edit the 6th byte to 0x82(for example 00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66 the 6th byte is 89,so change it to 82)
8.Name it "request_idps.txt"
Check it out guys!is this right,i hope so....
i attached example...[ATTACH=CONFIG]11775[/ATTACH]
09-09-2011, 05:07 AM
#48
PS3 Prodigy
(ಥ_ಥ
Originally posted by TUHTA
i got it,so just simply change lets say 0x84(wich is retail USA) to 0x82 and than what?How do we flash it back to PS3,also as Mathieulh mentioned,you got to convert the eEID to ASCII and rename it to the file needed(request_idps.txt)i guess the Programm that will use it,will change everything needed for you?
Also is this right:
1.Get you NOR dump
2.Extract it
3.Open eEID with hex editor
4.Go to offset 0x70 and get to 6th byte and change it to 0x82
5.Go to offset 0x13D0 and get to 6th byte and change it to 0x82
6.Save it
P.S. thats how we patch the EID.
Also is this right:
1.Get you NOR dump
2.Extract it
3.Open eEID with hex editor
4.Go to offset 0x70 and get to 6th byte and change it to 0x82
5.Go to offset 0x13D0 and get to 6th byte and change it to 0x82
6.Save it
P.S. thats how we patch the EID.
Yeah you have the right idea . :O Also your wrong about 0x84 is not US retail 0x89 is us retail like this:
0x82 is Debug / DEX
00000000 00 00 00 01 00 89 00 0B 14 00 EF DD CA 25 52 66
where it says 89 is the byte (target ID) you change
09-09-2011, 07:31 AM
#49
TUHTA
Haxor!
i just compared it to other files,how they look like,i guess its not TOTALLY different,i just compared the structure of it to other files that were uplaoded by a person from PS3NEWS,he actually got some files(in temp folder) except the idps one..
---------- Post added at 11:31 AM ---------- Previous post was at 09:15 AM ----------
Any suggestions so far?
---------- Post added at 11:31 AM ---------- Previous post was at 09:15 AM ----------
Any suggestions so far?
09-09-2011, 10:04 AM
#50
ELITE xxmcvapourxx
Guest
Copyright © 2026, NextGenUpdate.
All Rights Reserved.
