What to patch in GECR to boot into XMB?

Half Mile Ride

Half Mile Ride

Member
Hi I recently converted a CECHP01 with VER-001 mobo into a GECR-1500, I followed these steps, with help of @zecoxao to dump the eEID root key

1-. Dump the EID_Root_Key (rebug toolbox can do this)
2-. Dump the flash and patch it for 0xA0 with c2d.exe
3-. rename dump to XXXXX.EID0.NORBIN (if NOR) and put in USB
4-. using mmOS click on the dump to flash EID0
5-. reboot in recovery mode
6-. Install GEX OFW.



The problem is that after booting it, it blackscreens for about a minute then an error pops up "an error ocurred during the start operation" I was told by @zecoxao that this is because it is looking for USB authentication, It is possible to remove these with MFW but I don't have the patches to remove usb authentication, does anyone know more about this?

I converted it to GEX so that I could play some arcade games I got on it.
 
You was able to complete the step 6 successfuly ? (Install GEX OFW)
If so.. that means the blackscreen with the warning appears at the next reboot after the arcade firmware installation ?

And not sure if this is going to help, but after the arcade firmware installation... have you tryed to remove the hdd, format it in PC, then plug it back on the PS3 ? (and reinstall arcade firmware again)

I think the arcade hdd layout is different than retail... if this is right then that hdd format should be mandatory
 
sandungas said:
You was able to complete the step 6 successfuly ? (Install GEX OFW)
If so.. that means the blackscreen with the warning appears at the next reboot after the arcade firmware installation ?

And not sure if this is going to help, but after the arcade firmware installation... have you tryed to remove the hdd, format it in PC, then plug it back on the PS3 ? (and reinstall arcade firmware again)

I think the arcade hdd layout is different than retail... if this is right then that hdd format should be mandatory
Click to expand...


Yes it first acted as if the HDD was corrupted (I rebooted straight to recovery from 3.55 CEX after changing Target ID) then it asked for a firmware update of at least 3.55, I put 2.51 GEX in my USB and set it to install, it succesfully completed and then rebooted to a database rebuild.

After that if I turn it on it blackscreens for at least a minute then the XMB appears for a split second and the un-quitable error appears, I'm pretty sure it's because of the Dongle authentication.


I have reinstalled the same firmware about 4 times, I'm holding off on updating past 3.56 GEX because I'll probably have an irrevesible semi-brick (probably permanently set to arcade and only useable with the right equipment), I'm looking for the checks that I need to patch with MFW Builder so that the warning doesn't appear and it boots to XMB normally, there is a video of a guy that did it with a genuine GECR here:


The HDD layout of Arcade PS3s is largely the same as CEX/DEX/DEH/SEX it only differs in that it stores a copy of the last PUP installed in "/dev_hdd0/game/SCEEXE000/ARCDIR/PS3UPDAT.PUP"
 
Last edited:
Oki, i never did read about that usb dongle identificator though
I knew there was usb dongles to lock games (preinstalled on hdd by namco) but after a hdd format there is no game in the PS3 so im guessing is other kind of usb dongle identificator, but dunno
 
sandungas said:
Oki, i never did read about that usb dongle identificator though
I knew there was usb dongles to lock games (preinstalled on hdd by namco) but after a hdd format there is no game in the PS3 so im guessing is other kind of usb dongle identificator, but dunno
Click to expand...

I might be wrong about the USB authenticator while no game is in the Hard Drive but
By reading about these on psdevwiki I have come to know that they also authenticate with the hard drive on boot (HDD Serial and a unique Encryption for arcade)

I don't know why the arcade PS3 territory is so uncharted, I wish it was more developed, arcade games are a blast.
 
I'm sure it can work without the jvs/jamma boards if the right patches are made.

Do you know what to patch to at least make it boot to XMB? those patches that the guy in the video did to 3.60 GEX?


If all else fails can I use the convert as a genuine one by getting the Game Kits? Those that come with dongles + hard drive? (I would probably also need the extra jvs board)
 
He mentions in an assembler thread (he is under a different name) that he made patches to 3.60 GEX to be able to do most of what he does on the videos.

What can I do to get more functionality out of the system?
Why are there 0% public exploits/developments on this kind of system? I see a system that shows great promise, probably later we can get to a point where rebug makes a CFW that can switch between CEX/DEX/GEX and boot arcade games.

Thanks everyone for their help, I've been in the PS3 scene before PSJailbreak got developed and I'm a n00b in some subjects while proficient in others, anyone remember the infectus modchip?
 
Forgot to add:

When I try to make a CFW with MFW Builder it forces me to remove all patches that I add one by one until nothing is checked and it just remakes the OFW with one byte of difference.

Edit: not anymore, it just doesn't let me use any other patch that isn't these:


*[4.xx] Bypass RSOD screen

+ Patch out branch to rsod

*[4.xx] Patch lv1!

+ [4.xx] Mmap out lv1!
+ [4.xx] Patch lv1 for deleting ENCDEC!
+ [4.xx] Patch lv1 update manager!
+ [4.xx] Patch lv1 to allow extracion of all pkg types!
+ [4.xx] Patch lv1 indi info manager!
+ [4.xx] Patch lv1 to allow 4kb of GPU Acess!
+ [4.xx] Patch lv1 to allow settings breakpoints!
+ [4.xx] Patch lv1 (SPE) to allow all bits!
+ [4.xx] Patch lv1 for HTAB Writing!
+ [4.xx] Patch lv1 to skip ACL Checks!
+ [4.xx] Patch lv1 to remove Integrity Check!

*[4.xx] Patch nas_plugin[.sprx]

+ [4.xx] Patch using Habib's patterns! [includes debug pkg!]

*[4.xx] Patch spp_verifier!

+ [4.xx] Patch spp_verifier[.self]

*[4.xx] Patch spu_pkg_rvk_verifier!

+ [4.xx] Patch spu_pkg_rvk_Verifier[.self]

*[4.xx] Patch spu_token_processor!

+ [4.xx] Patch spu_token_processor[.self]

--------------- (I can't disable ECDSA check or patch lv2 or vsh.self/VSH, I'm using 4.40 GEX as a template) ---------------
 
Last edited:
Half Mile Ride said:
Hi I recently converted a CECHP01 with VER-001 mobo into a GECR-1500, I followed these steps, with help of @zecoxao to dump the eEID root key

1-. Dump the EID_Root_Key (rebug toolbox can do this)
2-. Dump the flash and patch it for 0xA0 with c2d.exe
3-. rename dump to XXXXX.EID0.NORBIN (if NOR) and put in USB
4-. using mmOS click on the dump to flash EID0
5-. reboot in recovery mode
6-. Install GEX OFW.



The problem is that after booting it, it blackscreens for about a minute then an error pops up "an error ocurred during the start operation" I was told by @zecoxao that this is because it is looking for USB authentication, It is possible to remove these with MFW but I don't have the patches to remove usb authentication, does anyone know more about this?

I converted it to GEX so that I could play some arcade games I got on it.
Click to expand...


This is for using a ps3 inside an arcade cabinet? Interesting...
 
joe7dust said:
This is for using a ps3 inside an arcade cabinet? Interesting...
Click to expand...
Not exactly, is better explained in this link http://www.psdevwiki.com/ps3/Namco_System_357

Short explain... there are some arcade cabinets made by namco (that costs some thousands) that has a PS3 motherboard inside

The only difference of that motherboards with the retail PS3's is doesnt have the wifi/BT module, neither the bluray drive
There is a family of official firmwares specific for this PS3 models named "arcade"... this firmwares (arcade PUPs) only installs in arcade motherboards... unless you do the conversion discussed in this thread :)
 
Sorry to bring back an old topic but I actually have a Namco system 357 (Tekken 6 Bloodline rebellion) but the motherboard is having some problems. This thread however gives me a bit of hope though as I have been playing around with my system. Here's what I found: just out of curiosity, I installed a blank hard drive.

While the system turned on, it would give a "Cannot start, the correct hard disk was not found" I decided to plug in a DualShock 3 controller and began messing around with it. When I pressed the home and start button, I got a menu that told me if I would like to format the drive or turn off the system.

I formatted the drive and it booted briefly to the XMB then it gave me the same exact error you're experiencing "an error occurred during the start operation". I also have an original Tekken 6BL hard drive and dongle with arcade firmware 3.40. For the games to actually boot properly you also need the usb I/O JVS/video pcb. Without it, you'll just get a black screen, no error code.

Like I said, this thread is giving me a bit of hope as I want to swap out my dying board with a "new" one to keep preserving the system. :) any help with this would be greatly appreciated!
 
Last edited by a moderator:
You must log in or register to reply here.

Similar threads

Back
Top