PS3 Help with PS3 Fat

[lugh22]

Hello everyone,

Last week I reassembled the PS3 and tried to update(to 2.36) and change some settings to see if the number of bad blocks would increase and to check if something changes in the dumps, so it looks like something can be written to NAND, the checker returns the ROS0 as 2.36

Spoiler

PyPS3checker v0.10.x. Check log.

Checked file : C:\Users\Acer\Desktop\nand_teste.bin


******* Getting flash type *******
Flash type : NAND (full dump, 256MB)


******* Getting SKU identification datas *******
idps = 0x03
metldr0 = 0xE8E0
metldr1 = 0x0E8A
bootldr0 = 0x2EF4
bootldr1 = 0x2EF4
bootldrsize = 0x2EF80

Matching SKU : OK
CECHE01 MG (COK-002)
Minimum version 1.00


******* Getting SDK versions *******
ROS0 : 236.000
ROS1 : 235.000


******* Checking bootldr_top_region *******
001.01 bootldr0 (Top) : OK
001.02 bootldr1 (Top) : OK
001.03 bootldr Rev key (Top) : OK
001.04 bootldr Statistics (Top) : OK
001.05 bootldr (Top) 0xFF Filled Area : OK


******* Checking Header_Magic *******
002.01 Header Magic 0x00 Filled Area 0 : OK
002.02 Header Magic : OK
002.03 Header Magic 0x00 Filled Area 1 : OK


******* Checking flash_region_table *******
003.01 Flash Region Table Header : OK
003.02 asecure_loader Offset - Length : OK
003.03 asecure_loader Name : OK
003.04 eEID Offset - Length : OK
003.05 eEID Name : OK
003.06 cISD Offset - Length : OK
003.07 cISD Name : OK
003.08 cCSD Offset - Length : OK
003.09 cCSD Name : OK
003.10 trvk_prg Offset - Length : OK
003.11 trvk_prg Name : OK
003.12 trvk_pkg Offset - Length : OK
003.13 trvk_pkg Name : OK
003.14 creserved_0 Offset - Length : OK
003.15 creserved_0 Name : OK
003.16 ros Offset - Length : OK
003.17 ros Name : OK
003.18 cvtrm Offset - Length : OK
003.19 cvtrm Name : OK
003.20 Flash Region Table 0x00 Filled Area : OK


******* Checking asure_loader_region *******
004.01 asecure_loader Header : OK
004.02 metldr Offset : OK
004.03 metldr Length : OK
004.04 metldr Name : OK
004.05 metldr RevKey : OK
004.06 metldr Binary Size : OK
004.07 metldr Statistics : OK
004.08 asecure_loader 0x00 Filled Area : OK


******* Checking eEID_region *******
005.01 eEID Header : OK
005.02 EID0 Offset - Length : OK
005.03 EID1 Offset - Length : OK
005.04 EID2 Offset - Length : OK
005.05 EID3 Offset - Length : OK
005.06 EID4 Offset - Length : OK
005.07 EID5 Offset - Length : OK
005.08 EID0 IDPS0 : OK
005.09 EID0 IDPS1 : OK
005.10 EID0 Static : OK
005.11 EID2 BlockSize/Padding : OK
005.12 EID3 Static0 : OK
005.13 EID3 Static1 : OK
005.14 EID3 Static2 : OK
005.15 EID5 IDPS0 : OK
005.16 EID5 IDPS1 : OK
005.17 EID5 Static : OK
005.18 eEID Region 0xFF Filled Area : OK
005.19 eEID Statistics0 : OK
005.20 eEID Statistics1 : OK


******* Checking cISD_region *******
006.01 cISD Header : OK
006.02 cISD0 Offset - Length : OK
006.03 cISD1 Offset - Length : OK
006.04 cISD2 Offset - Length : OK
006.05 cISD0 0xFF Filled Area : OK
006.06 cISD1 IDLog Header : OK
006.07 cISD1 Semistatic 1 : OK
006.08 cISD1 Semistatic 2 : OK
006.09 cISD1 0xFF Filled Area 0 : OK
006.10 cISD1 Static : OK
006.11 cISD1 Semistatic 3 : OK
006.12 cISD1 0xFF Filled Area 1 : OK
006.13 cISD1 Statistics : OK
006.14 cISD2 : OK
006.15 cISD 0xFF Filled Area : OK


******* Checking cCSD_region *******
007.01 cCSD Header : OK
007.02 cCSD Entry Table : OK
007.03 cCSD 0xFF Filled Area : OK


******* Checking Revokation_region *******
008.00 trvk_prg Region Header : OK
008.01 trvk_prg0 SCE : OK
008.02 trvk_prg0 Hash : WARNING!
Size = 0x2C0
MD5 = E339EB916D7DD86CE497F9AD42ADB9E9
Version = (unknown)

008.03 trvk_prg1 SCE : OK
008.04 trvk_prg1 Hash : OK
Size = 0x2C0
MD5 = 02AEEBC058B53653B0D9F96E61BB8F70
Version = 2.35 (from PUP)

008.00 trvk_pkg Region Header : OK
008.05 trvk_pkg0 SCE : OK
008.07 trvk_pkg1 SCE : WARNING!
At offset : 0x94820
Actual data :
> FF FF FF FF
Expected data :
> 53 43 45 00



******* Checking Unreferenced_Area *******
008.08 unreferenced area 0xFF filled : OK


******* Checking CoreOS_region *******
009.00 ROS Header : OK
009.01 ROS0 Header : WARNING!
At offset : 0xC0020
Actual data :
> 00 00 00 03 00 00 00 09 00 00 00 00 00 4B E5 78
Expected data :
> 00 00 00 00 00 00 00 00 00 00 00 00 00 6F FF E0

009.02 ROS0 Hash : WARNING!
Size = 0x6FFFE0
MD5 = F8C9FE3136A42F64975AB528BC77062F
Version = (unknown)

009.03 ROS1 Header : OK
009.04 ROS1 Hash : OK
Size = 0x6FFFE0
MD5 = 8E90D6483CCB71AA78780AAF43CC42F8
Version = 2.35 CEX/SEX OFW



******* Checking cvtrm_region *******
010.01 cvtrm Header : OK
010.02 cvtrm Header Static 1 : OK
010.03 vtrm Magic 1 : OK
010.05 vtrm Magic 2 : OK
010.07 cvtrm 0x00 Filled Area : OK


******* Checking cell_ext_os_area *******
011.01 cell_ext_os_area Header : OK
011.02 cell_ext_os_area 0xFF Filled Area 0 : OK
011.03 cell_ext_os_area Break Section : OK
011.04 cell_ext_os_area 0xFF Filled Area 1 : OK


******* Checking bootldr_bottom_region *******
012.01 bootldr0 (Bottom) : OK
012.02 bootldr1 (Bottom) : OK
012.03 bootldr Rev key (Bottom) : OK
012.04 bootldr Statistics (Bottom) : OK
012.05 bootldr 0xFF Filled Area : OK


******* Checking datamatches *******
bootldr size : OK
per console nonce : OK
bootldr : OK
metldr size : OK
vtrm header datas : OK
vtrm : OK


******* Checking repetitions *******
Header Magic Repetition : OK
asecure_loader Repetition : OK
eEID Repetition : OK
cISD Repetition : OK
cCSD Repetition : OK
trvk_prg Repetition : OK
trvk_pkg Repetition : OK
ros Repetition : OK
cvtrm Repetition : OK


******* Additional information *******
MAC address :
CID :
eCID :
board_id (part of console S/N) :
kiban_id (board barcode) :



******* Checks completed *******

Total number of checks = 131
Number of dangers = 0
Number of warnings = 4

Following check(s) returned a WARNING!
008.02 trvk_prg0 Hash
008.07 trvk_pkg1 SCE
009.01 ROS0 Header
009.02 ROS0 Hash

All checks done in 3.21 seconds.

Also I tried to change some FF bytes in the ROS0 area and successfully wrote to the NAND1, where the most of the bad blocks are, and after reading again, the bytes I changed where there, so it looks not a hardware problem.
The number of bad blocks stayed the same for NAND1, 84.

Now, can I patch this NAND with a higher firmware, like 3.55 and flash it?
Will the PS3 boot with this modified NAND?

 

[lugh22]

I decided to give it a try and patched the NAND with Darkjiros CFW 4.70 NoFSM and flash it.
Now the PS3 wont boot to XMB, after some time it turn off by itself, but now I can access recovery mode.

And after trying every option, these are the results:

1. Restart System: Does nothing, just shut down after some time.

2. Restore Default Settings: Fails with the message "The system storage cannot be accessed".

3. Restore File System: Does nothing and just restart or lock at the "Preparing... Please wait" screen.

4.Rebuild Database: Also gets stuck at the "Preparing... Please wait" screen or shows me the "The system storage cannot be accessed" message.

5.Restore PS3 System: Also fails with the message "The system storage cannot be accessed".

6.System update: Does not work, always gives me the "The data is corrupted" with error code 8002F2C5/8002F2B5, I tried with several OFW/CFW and always the same, also with different flash drives, USB ports, etc.
After some tries it shows "Cannot start, The appropriate system storage was not found.", tried with different HDD's and nothing changed.

Also got the error 8001002B, but I don't recall what option I selected.

I guess at least now I ruled out the NAND's being bad, since no error appeared while using the teensy to write to them.Well, I will flash the old 2.35 ROS back to it.

 

[lugh22]

Hello everyone,

I decided to go back to this PS3 and give another try, I broke my clip when flashing the original backup after my last post, so I removed the NAND's from the board to flash them, and since I removed why not try to replace the one with several bad blocks.

AND IT WORKED!!

No more RSOD's, all the settings save now!

But now I have one more problem, the network, wifi or cable, does not work(Error 80010201), BT works fine, I had this problem before replacing the NAND's, I thought it was a corrupted config in xregistry, but resetting the default settings does nothing.
I replaced the wifi board with a know working board from another E01 and still nothing.

EDIT:
Just updated the FW to 2.36 and the network is working again