114w ago - Following up on his Guide to Remarry PS3 Blu-ray Drives to other consoles, today PlayStation 3 developer Mark Webber has shared another on how to recover Blu-ray drive playback on 256MB FAT PS3 consoles.
To quote: Ok, so finally....
How To Recover BD Playback On 256meg Fats
You will need to QA flag your PS3
IF you are on 3.55: Using the special 3.55 downgrade PUP by Jaicrab, then down again to 3.15 or 3.41 using stock PUP files
Follow this guide to QA flag your PS3
By ps3nemesis: (EASY QA FLAG INSTALL)
NOTE BEFORE YOU ATTEMPT THIS OR ANY MOD TO PS3 FILE STRUCTURE PLEASE BACK-UP YOR dev_flash 2 FOLDER AND THE WHOLE OF dev_hdd0/home AS THIS IS WHERE YOUR PSN / DLC/ PSONE LICENCES ARE KEPT. ALSO MAKE AN EXTRA BACK-UP OF dev_hdd0/home/act.dat .
PLEASE ALSO BE AWARE THAT SOME PEOPLE ARE STATING THAT THE TROPHY SYSTEM GETS MESSED UP !!! FOOLS RUSH IN...
Note: Only works on Otheros++ 3.55 or 3.41 CFW at the moment, so you'll have to reflash to it, then go back to your cfw's (i.e 3.55 CFW > Otheros++ > QA Flag > 3.55 CFW )
Go to network settings (Do not enter it) and hit or hold L1+L2+L3+R1+R2+down on the dpad
QA auto flagging is now done
Turn on the 'system update debug' in the debug settings
Play a BD disc with the highest MKB version you can get..Latest release from Blockbuster or whatever.
Note: It may start to play and then you get no video output to the tv. This happened a few times to me. Just power off, accept the "naughty boy" messgage from Sony and try again until it plays.
If it keeps doing this, you need to change to AV or component leads since your TV seems to not be 100% HDMI/BD compliant. I have tested this on several (at least 5) PS3's with 100% success rate.
Stay tuned for more PS3 Hacks and PS3 CFW news, follow us on Twitter and be sure to drop by the PS3 Hacks and PS3 Custom Firmware Forums for the latest PlayStation 3 scene updates and homebrew releases!
I intentionally wrote wrong DRL and CRL hashes with VTRM service store_with_update.
After that i couldn't play my BD movies on GameOS.
Then i wrote correct hashes again and BD playback is working again
You will new decrypted EID2 data. How to get it on Linux is described here: (ps3devwiki.com/wiki/Spuisofs#Dumping_EID2_Key_with_spuisofs)
EID2 contains encrypted P-Block and S-Block. To get decrypted S-Block and P-Block first you have to decrypt EID2 with EID2 key and IV and then decrypt the blocks with DES-CBC. P-Block and S-Block DES-CBC IV and key:
IV: 00 00 00 00 00 00 00 00
key: 6C CA B3 54 05 FA 56 2C
P-Block is stored in BD buffer 2.
BD buffer 2 is of size 0x60 bytes.
P-Block is in decryoted EID2 at offset 0x20 and of size 0x80.
Not all P-Block data is sent to BD drive. Only data starting at offset 0x10 and of size 0x60 bytes is written to BD drive buffer 2.
Tested on my PS3 Slim with OtherOS++.
After writing P-Block to BD drive buffer 2, authenticate the BD drive with ps3dm.
# First enable writing BD buffer 2
sudo ./bd_enable_buffer_write -b 2
# Write P-Block to BD buffer 2
sudo ./bd_write_buffer -b 2 -i pblock.bin
# Authenticate the BD drive
sudo ps3dm -v sm drive_auth 0x29 # It should not fail !!!
ss status 0
S-Block is stored in BD buffer 3.
BD buffer 3 is of size 0x670 bytes.
S-Block is in decryoted EID2 at offset 0xa0 and of size 0x690.