PS3 NOR Dump Auto-Patcher v0.01 by Rogero is Released

[PS3 News]

Following up on the BwE NOR Validator Public HTML Edition, today PlayStation 3 homebrew developer BwE has made available a PS3 homebrew application with details below.

Download: http://betterwayelectronics.com/files/BwE_NOR_Patcher.rar / BwE NOR Patcher v1.0 (Mirror)

The application is available above, and below is what BwE mentioned about it for those interested.

BwE PS3 NOR Patcher v1.0

• Checks CoreOS then patches 3.55/3.56 – Also minimum version check.

More PlayStation 3 News...

[PS3 News]

Following up on his PS3 NOR Dump Auto-Patcher v0.01, today PlayStation 3 developer Rogero has released PS3 NOR and NAND Auto Patcher v0.04 with the changes outlined below.

Download: PS3 Nor and Nand Auto Patcher v0.04.rar / PS3 Nor and Nand Auto Patcher v0.04.rar (Mirror) / PS3 Nor and Nand Auto Patcher v0.04.rar (Mirror #2) / PS3 Nor and Nand Auto Patcher v0.04.rar (Mirror #3)

To quote: PS3 Nor and Nand Auto Patcher v0.04

ChangeLog:

Initial release v0.01

• Compatible with both E3 and ProgSkeet Nor dumps.
• Checking your PS3 Nor Dump if it is Byte-Reversed or No.
• Applying the correct downgrade patches depending on the Dump type detected.
• Eliminating the need to byte-swap the dump in order to apply the patches.
• Making the patching easier rather then using several programs to do it.

v0.04 Update

• Added new Rogero CFW4.40 v1.02 patches.
• Works for any PS3 model with downgradable metldr revision (not metldr2) including PS3 with Minver 3.56
• No more FSM is needed for downgrading.
• Added detection of non-downgradable "metldr" revisions.
• Added support for Interleaved NAND Dumps (now will patch both Nor and Nand dumps)

How to use:

• Dump your Flash many times and verify it well before proceeding.
• Drag and Drop any Nor or Interleaved NAND Dump onto the executable,
• It will detect the dump type and patch it accordingly with CFW4.40 patches.
• Flash the patched image back into the PS3 Nor/Nands.
• Restart the PS3.

If the PS3 was already on OFW4.40 then it must start normally and you can Install Rogero CFW4.40 v1.02 from XMB -> Settings -> System Update.

If the PS3 was on OFW < 4.40 then you will see the "Connect a PS3 controller" screen, and you can continue by installing Rogero CFW4.40 v1.02 simply by following the screen instructions.

Warning: This program does not check for the dump validity, you must provide a good dump previously checked and verified.

It will patch the dump image even if it's not a 100% valid dump, the program only does some minimal checks before patching assuming that the user have provided a valid dump.




More PlayStation 3 News...

[PS3 News]

Following up on his BwE NOR Validator and BwE NOR Patcher, today PlayStation 3 homebrew developer BwE has released BwE NOR Validator v1.16 followed by v1.17, v1.18, v1.19, v1.20, v1.21, v1.22, v1.23, v1.24, v1.25 and v1.28 alongside BwE NOR / NAND Patcher v0.01 followed by v0.02 with details below.

Download: http://betterwayelectronics.com/files/BwE_NOR_Validator.rar / http://www.betterwayelectronics.com/files/BwE_NOR-NAND_Patcher.rar

To quote: BwE NOR Validator v1.16

Application MD5: A9D0B21E8C0452EF00EFC48DA79D974C

Changelog

• 1.28 - 15/05/2013 : completely rewritten cvtrm validation + added more validations to it, upgraded/perfected entropy (possibly final version, unless adding firmware revisions/new consoles)
• 1.25 - 13/05/2013 : added entropy check for metldr/bootldr (possibly final version, unless adding firmware revisions/new consoles (From EussNL: Entropy is used for checking encrypted sections, like metldr/asecureloader and bootldr, which because of their encryption will have high entropy. When knowing the entropy of other sections (based on known good dumps), it can be a good prediction of the validity of it without interpreting or decrypting it.)
• 1.24 - 06/04/2013 : added more information to suit newly discovered ps3 data, improved validation, added a tip for bad md5's, removed version forcing (possibly last release).
• 1.23 - 29/04/2013 : improved validation, added 4.41 ofw information
• 1.22 - 16/04/2013 : added 115 more validations + changed statistic range for bootldr + other small boring changes
• 1.21 - 11/04/2013 : patch3 error fix.
• 1.20 - 10/04/2013 : added new console data, removed 3.56 patch (replaced with 4.40), added protection against using old validator, changed corruption check (again!), added quick info for console.
• 1.19 - 09/04/2013 : changed metldr statistic range, minver check (to suit refurbished ps3s), corruption changes
• 1.18 - 08/04/2013 : upgraded cisd/cell_ext_nor_area/metldr validations to suit unique metldr.2 revision, changed corruption output (again).
• 1.17 - 08/04/2013 : changed repetition check, changed corruption output, bugfix
• 1.16 - 02/04/2013 : added rogero's 4.40 patch, changed options, added 25+ md5's, changed stats range and id check

BwE NOR/NAND Patcher 0.01 has the same exciting features as my validator, only - less.

Patches 3.55/3.56/4.40 on NOR or NAND. Validates CoreOS and maybe TRVK. Does that without a loader/chiptunes and all in the console. Faster than other my validator and other patchers.

Found any bugs? Let me know. I just made this for giggles so its bound to have something wrong.

BwE NOR/NAND Patcher 0.02

• Fixes the E3 flasher style (swapped) dump issue.

Finally, below is a WIP (via pastebin.com/DUivneHz) BwE NAND Validator, as follows:

Filename: CatisFine-NAND-unified.bin

MD5: 655B6285C43CF4F80F57BDDD66F42C23
File Size: 268435456
Validator Version: 1.11

=======================================================================
Return


Lv0ldr/Bootldr:
Encrypted Binary Size - 2A2A ✔
Decrypted Binary Size - 2A2A ✔
Calculated Bootldr Size - 2A2E0 ✔
Rev Key - 5CE463CD5C9EB67AFEA01B54 (CECHA/CECHB (COK-001)) ✔
PerConsole Nonce - 57D6521BB4DCACDFDD033EF6 ✔

Lv0ldr/Bootldr Corrupt Sequence Check:
Nothing Found! ✔

Lv0ldr/Bootldr Encrypted Statistics:
Sum: 172768 ✔
Mean: 674.875 ✔
Std Dev: 25.5372085320194 ✔

First Region Header:
Unknown Blank - ✔
Magic Header - 0FACE0FF - DEADBEEF ✔
Region Count - 00 ✔
Unknown - 00 ✔
Blank Filled Block - ✔
Return


Flash-Region Table:
Count - 9 ✔
Length - EBFE00 ✔

asecure_loader ✔
Size: 040000 ✔
Location: 000600 (0x40800) ✔

eEID ✔
Size: 010000 ✔
Location: 040600 (0x80800) ✔

cISD ✔
Size: 000800 ✔
Location: 050600 (0x90800) ✔

cCSD ✔
Size: 000800 ✔
Location: 050E00 (0x91000) ✔

trvk_prg ✔
Size: 002000 ✔
Location: 051600 (0x91800) ✔

trvk_pkg ✔
Size: 002000 ✔
Location: 053600 (0x93800) ✔

creserved_0 ✔
Size: 02A800 ✔
Location: 055600 (0x95800) ✔

ros ✔
Size: E00000 ✔
Location: 07FE00 (0xC0000) ✔

cvtrm ✔
Size: 040000 ✔
Location: E7FE00 (0xEC0000) ✔

Structure/Corruption Check - ✔

Asecure_Loader/Metldr:
File Length - 0ED6 ✔
Encrypted Binary Size - EDA0 ✔
Decrypted Binary Size - 0ED6 ✔
File Name - metldr ✔
Calculated Metldr Size - EDA0 ✔
Rev Key - 48F43FDE3EEE37119C673663 (CECHA/CECHB/CECHC/DECHA00A/J/DECHA(COK-001/002)) ✔
PerConsole Nonce - 57D6521BB4DCACDFDD033EF6 ✔
Metldr Version - Metldr Old - Downgradeable ✔
Blank Filled Block - ✔

Asecure_Loader/Metldr Corrupt Sequence Check:
Nothing Found! ✔

Asecure_Loader/Metldr Encrypted Statistics:
Sum: 60832 ✔
Mean: 237.625 ✔
Std Dev: 14.7025407968267 ✔

EID:
Count - 06 ✔
Length - 1DD0 ✔
Entry Table ✔

EID0:
IDPS - 0000000100840002100115EDDED80no ✔
PerConsole Nonce - 57D6521BB4DCACDFDD033EF6 ✔
Static + Count - 0012000B (11) ✔

EID2:
P-Block Size - 0080 ✔
S-Block Size - 0690 ✔
Padding ✔

EID3:
PerConsole Nonce - 57D6521BB4DCACDFDD033EF6 ✔
Unknown Static - 00000001 ✔
Unknown Static - 000100D0 ✔

EID5:
IDPS - 0000000100840002100115EDDED80no ✔
PerConsole Nonce - 57D6521BB4DCACDFDD033EF6 ✔
Unknown Static - 00120730 ✔

IDPS Info:
Target ID - 84 (Retail / Kiosk USA / CEX UC2) ✔
Model - 02 (CECHB (COK-001)) ✔
IDPS - EID0 & EID5 ✔

CISD:
Count - 03 ✔
Length - 0270 ✔
Entry Table ✔

CISD0:
MAC Address - 0015C1CB2D67 ✔
Unknown Static - ✔

CISD1:
IDLog Header - 7F49444C (IDL) ✔
Unknown Static - ✔
Area Start - ✔
Unknown Static - ✔
Unknown Static - ✔
ECID - 01C50A16411897180305004000000000 ✔
Board ID - 27430205 ✔
Kiban ID - 3LA00073806D ✔
Unknown ID - 001100110012 ✔
CKP2 Data - ✔
Unknown Static - ✔
Unknown Semi Static ID - ✔
CKP Management ID - ✔
Availiable Area - ✔

CISD2:
WLAN Channel - 07FF ✔
WLAN Filler - ✔
Unreferenced Area - ✔

CCSD:
Count - 01 ✔
Length - 0800 ✔
Filler - ✔
File Table - ✔

CCSD0:
Structure - ✔
Unreferenced Area - ✔
Return


TRVK PRG Header:
Offset to region - 1010 ✔
Offset to file - 1010 ✔
Region Size - 2000 ✔
Unknown Filler - ✔
Return


TRVK_PRG0:
Filler - ✔
Data Size - 02E0 ✔
Header - SCE ✔
Header Filler - ✔
Unknown - ✔
Meta Size - E0 ✔
Unknown 2 - ✔
Unknown 3 - ✔
Empty Space - ✔
Return


TRVK_PRG1:
Filler - ✔
Data Size - 0000 ✔
Header - SCE ✔
Header Filler - ✔
Unknown - ✔
Meta Size - E0 ✔
Unknown 2 - ✔
Unknown 3 - ✔
Empty Space -[WARNING] - Too long to display!
Return


TRVK PKG Header:
Offset to region - 0020 ✔
Offset to file - 0020 ✔
Region Size - 2000 ✔
Unknown Filler - ✔
Return


TRVK_PKG0:
Filler - ✔
Data Size - 0260 ✔
Header - SCE ✔
Header Filler - ✔
Unknown - ✔
Meta Size - 60 ✔
Unknown 2 - ✔
Unknown 3 - ✔
Empty Space - ✔
Return


TRVK_PKG1:
Filler - ✔
Data Size - FFFF ✔
Header - [DANGER] - ���
Header Filler - [DANGER] - FFFFFFFFFFFFFFFFFFFFFFFFFF
Unknown -[DANGER] - FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Meta Size - FF ✔
Unknown 2 -[DANGER] - FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Unknown 3 -[DANGER] - 00000002000000000000000000000000
Empty Space - ✔

Creserved_0:
Filler - ✔

ROS0/1 Versions:
355.000 ✔
355.000 ✔

ROS0:
Header Filler - ✔
Length of Flash Region - 6FFFE0 ✔
Unknown Static - ✔
Entry Count - 18 ✔
Length of Flash Region 2 - 6FFFE0 ✔

ROS0 355.000 File Table; AuthID & MD5:
aim_spu_module.self ✔
AuthID: 1070000025000001 ✔
MD5: CA9BBC99C645173E1F98AA66C47A4500 ✔

appldr ✔
AuthID: 1FF000000C000001 ✔
MD5: 5C7436BFFC7E8D0A8E210BD0CA83CDF2 ✔

creserved_0 ✔
AuthID: N/A ✔
MD5: 09A1D434DBD7197E7C3AF8A7C28CA38B ✔

default.spp ✔
AuthID: N/A ✔
MD5: B0AD88EE637311AE5196F1B11D43BE0A ✔

emer_init.self ✔
AuthID: 10700003FC000001 ✔
MD5: 9D670B662BE696C8460449B7EFDD803E ✔

eurus_fw.bin ✔
AuthID: N/A ✔
MD5: B5F54D9A11D1EAE71F35B5907C6B9D3A ✔

hdd_copy.self ✔
AuthID: 1070000501000001 ✔
MD5: C1DC055EF0D6082580AC066E2B0A3C38 ✔

isoldr ✔
AuthID: 1FF000000A000001 ✔
MD5: 811329ECDB677181B9FC5CC3564D9047 ✔

lv0 ✔
AuthID: 1FF0000001000001 ✔
MD5: FF6753184D15F45508C5330A6144A4D9 ✔

lv1.self ✔
AuthID: 1FF0000002000001 ✔
MD5: 128499C45F6A66D48FCC0AFAE075C188 ✔

lv1ldr ✔
AuthID: 1FF0000008000001 ✔
MD5: E9AE2A62B4CC31750D4E56C7D5FFDD6F ✔

lv2ldr ✔
AuthID: 1FF0000009000001 ✔
MD5: A597AA3D8101674856EEF83AC1D0EF28 ✔

manu_info_spu_module.self ✔
AuthID: 1070000055000001 ✔
MD5: 65A3EEE4C48716674CB1C29609B5F54D ✔

mc_iso_spu_module.self ✔
AuthID: 1070000037000001 ✔
MD5: 5FFB33A6CECB99081E54A0E36E3C61AF ✔

me_iso_spu_module.self ✔
AuthID: 1070000043000001 ✔
MD5: 3B15C14770D654FEF9987E2517616D89 ✔

sb_iso_spu_module.self ✔
AuthID: 107000001F000001 ✔
MD5: B39E13FBD6B07F65616A0355EF5CB262 ✔

sc_iso.self ✔
AuthID: 1070000020000001 ✔
MD5: D7EDCA0ED3749F11EE34F0F532CF5AA7 ✔

sdk_version ✔
AuthID: N/A ✔
MD5: 3DA12E2CB472EB8193309B663D7C913A ✔

spp_verifier.self ✔
AuthID: 1070000021000001 ✔
MD5: 90D1C8A45F6FEE52219E1B14FF8C9765 ✔

spu_pkg_rvk_verifier.self ✔
AuthID: 1070000022000001 ✔
MD5: B76B7244B19032A9518787D9EC827F3C ✔

spu_token_processor.self ✔
AuthID: 1070000023000001 ✔
MD5: 22ABABCFC027F892AD2CF4E1C9FD925C ✔

spu_utoken_processor.self ✔
AuthID: 107000004C000001 ✔
MD5: 0E5A2E8A68FE09481D728C227DC5A165 ✔


ROS1:
Header Filler - ✔
Length of Flash Region - 6FFFE0 ✔
Unknown Static - ✔
Entry Count - 18 ✔
Length of Flash Region 2 - 6FFFE0 ✔

ROS1 355.000 File Table; AuthID & MD5:
aim_spu_module.self ✔
AuthID: 1070000025000001 ✔
MD5: CA9BBC99C645173E1F98AA66C47A4500 ✔

appldr ✔
AuthID: 1FF000000C000001 ✔
MD5: 5C7436BFFC7E8D0A8E210BD0CA83CDF2 ✔

creserved_0 ✔
AuthID: N/A ✔
MD5: 09A1D434DBD7197E7C3AF8A7C28CA38B ✔

default.spp ✔
AuthID: N/A ✔
MD5: B0AD88EE637311AE5196F1B11D43BE0A ✔

emer_init.self ✔
AuthID: 10700003FC000001 ✔
MD5: 9D670B662BE696C8460449B7EFDD803E ✔

eurus_fw.bin ✔
AuthID: N/A ✔
MD5: B5F54D9A11D1EAE71F35B5907C6B9D3A ✔

hdd_copy.self ✔
AuthID: 1070000501000001 ✔
MD5: C1DC055EF0D6082580AC066E2B0A3C38 ✔

isoldr ✔
AuthID: 1FF000000A000001 ✔
MD5: 811329ECDB677181B9FC5CC3564D9047 ✔

lv0 ✔
AuthID: 1FF0000001000001 ✔
MD5: FF6753184D15F45508C5330A6144A4D9 ✔

lv1.self ✔
AuthID: 1FF0000002000001 ✔
MD5: 128499C45F6A66D48FCC0AFAE075C188 ✔

lv1ldr ✔
AuthID: 1FF0000008000001 ✔
MD5: E9AE2A62B4CC31750D4E56C7D5FFDD6F ✔

lv2ldr ✔
AuthID: 1FF0000009000001 ✔
MD5: A597AA3D8101674856EEF83AC1D0EF28 ✔

manu_info_spu_module.self ✔
AuthID: 1070000055000001 ✔
MD5: 65A3EEE4C48716674CB1C29609B5F54D ✔

mc_iso_spu_module.self ✔
AuthID: 1070000037000001 ✔
MD5: 5FFB33A6CECB99081E54A0E36E3C61AF ✔

me_iso_spu_module.self ✔
AuthID: 1070000043000001 ✔
MD5: 3B15C14770D654FEF9987E2517616D89 ✔

sb_iso_spu_module.self ✔
AuthID: 107000001F000001 ✔
MD5: B39E13FBD6B07F65616A0355EF5CB262 ✔

sc_iso.self ✔
AuthID: 1070000020000001 ✔
MD5: D7EDCA0ED3749F11EE34F0F532CF5AA7 ✔

sdk_version ✔
AuthID: N/A ✔
MD5: 3DA12E2CB472EB8193309B663D7C913A ✔

spp_verifier.self ✔
AuthID: 1070000021000001 ✔
MD5: 90D1C8A45F6FEE52219E1B14FF8C9765 ✔

spu_pkg_rvk_verifier.self ✔
AuthID: 1070000022000001 ✔
MD5: B76B7244B19032A9518787D9EC827F3C ✔

spu_token_processor.self ✔
AuthID: 1070000023000001 ✔
MD5: 22ABABCFC027F892AD2CF4E1C9FD925C ✔

spu_utoken_processor.self ✔
AuthID: 107000004C000001 ✔
MD5: 0E5A2E8A68FE09481D728C227DC5A165 ✔


CoreOS MD5 Validation:
ROS0: 3.55_PATCHED - F162E0D72EBA0F46B7FB36E6AAB63958 ✔
ROS1: 3.55_PATCHED - F162E0D72EBA0F46B7FB36E6AAB63958 ✔

CVTRM:
Header 1 - SCEIVTRM ✔
Version - ✔
Unknown Static - ✔

VTRM 0:
Header - VTRM ✔
Version - 04 ✔
SHA1 Hash - A0B67480AA62DA6782C07D6D03EDED7A ✔
Structure - ✔
Unknown Data - ✔
Protected Files Table Reserved Entries - 96 ✔

VTRM 0 Entries:
Table Entry 1 - ✔
Reserved Table Entry 1 - 0400000002000005 ✔
Used Table Entry 1 - 10700005FF000001 - vsh.self ✔
Self Data Validation - ✔

VTRM 0 Continued:
Filler - ✔
Footer - ✔
Unknown Static - ✔
Filled Space - ✔

VTRM 1:
Header - VTRM ✔
Version - 04 ✔
SHA1 Hash - A0B67480AA62DA6782C07D6D03EDED7A ✔
X & Y Tables Reserved Entries - 1168 ✔
Protected Files Table Reserved Entries - 2336 ✔
Protected Files Table Used Entries - 6 ✔
Reserved Entries - ✔

VTRM 1 Entries:
Table Entry 1 - ✔
Reserved Table Entry 1 - 1070000002000001 - LPAR 2 or GameOS / PS3_LPAR ✔
Used Table Entry 1 - 1070000039000001 - bdp_bdmv.self ✔
Self Data Validation - ✔

Table Entry 2 - ✔
Reserved Table Entry 2 - 0020000002000005 ✔
Used Table Entry 2 - 1070000003000002 - mgvideo.self ✔
Self Data Validation - ✔

Table Entry 3 - ✔
Reserved Table Entry 3 - 0010000002000005 ✔
Used Table Entry 3 - 1070000003000002 - mgvideo.self ✔
Self Data Validation - ✔

Table Entry 4 - ✔
Reserved Table Entry 4 - 1070000002000001 - LPAR 2 or GameOS / PS3_LPAR ✔
Used Table Entry 4 - 1070000003000002 - mgvideo.self ✔
Self Data Validation - ✔

Table Entry 5 - ✔
Reserved Table Entry 5 - 0400000002000005 ✔
Used Table Entry 5 - 10700005FF000001 - vsh.self ✔
Self Data Validation - ✔

Table Entry 6 - ✔
Reserved Table Entry 6 - 0410000002000005 ✔
Used Table Entry 6 - 10700005FF000001 - vsh.self ✔
Self Data Validation - ✔

VTRM 1 Continued:

Filled Area - ✔
Encrypted Sequence - ✔
Empty Space - ✔
Unknown Filler - ✔

Time to calculate: 1.111063 seconds.

More PlayStation 3 News...

[ppr2012]

can it validate my nor dumps 100%...

[sorooshjavadnia]

hi i'm sorry if i'm not good in en lang .., ok every time i try too un ban man console i failed but infact i have a pse fully broken (hardware) and i have the console id and psid. how can i exchange them to ps3 because every time i try for am moment everything is good but as soon as i turn off the system or restart it turn back to default !!!

the original default last time i use the psid patcher wel this can help me pou ro i must use something else

[PS3 News]

Following up on the previous updates from BwE, today PlayStation 3 homebrew developer sinsizer has made available PS3 NOR / NAND Statistic Beta for those interested in validating and checking their PS3 NOR / NAND dumps.

Download: NOR_NAND_Statistic_BETA.rar / NOR_NAND_Statistic_BETA.rar (Mirror)

To quote: Features:

• NOR/NAND statistics
• NOR/NAND patching
• NOR/NAND byte swapping
• NOR/NAND infos
• NOR/NAND validation
• NOR/NAND extraction
• DATECODE check

This tool works different than other validators. Instead of outputting a full log, it will output an error.log, if validate is checked. But see for yourself.

Always patching 3.55 is recommended to see if the patched statistic is right/green. ckp_management_ID values have to be equel as well as per_console_nonce (should be stated in error.log if not). There is one easy rule! If the error.log contains an entry, your dump is definitly broken!

Ros section is excluded from validation. Why? It´s easy to repair, the hole section gets patched anyway and it leads to the rule above.

For NAND all known sections gets checked. But a big part is not or only rarely documented. So the hole part after cvtrm, cell_ext_os_area, OtherOS and unreferenced area at the end won´t be checked. It´s very important that you have look at the statistics and the “corrupt block count” of flowrebuilder when interleaving.

It's always recommended to check dumps manually with an hexeditor, and using other tools for validation, to be as save as possible!
As long as it is not possible to decrypt the full dump, it's impossible to validate it to 100%. Keep in mind this is only beta.


More PlayStation 3 News...