242w ago - Since today all the owners of a PS3 with
infectus could begin to experiment with the firmware patching.
Please share ideas questions and feedbacks in this thread comments, it would be appreciated.
Download:
PS3 NAND Flow Rebuilder v3.50 BETA
NDT ;-)
From ReadMe: PS3 NAND FLOW REBUILDER v3.50 (including ECC Algo by RPS).
This tool allows to unscramble the blocks of a PS3 dumps ordering them in a way that the dumps become readable and extractable!
It also allow you to re-scramble back to the original order once you modified the data you wants, then from now on it include the ECC recalculation algorithm that was private until today.
It's for study and tests purposes, for experienced people only (devs) that this way can manage the files inside the flashes and patch sensible areas.
In this updated version you'll find some good news:
1) You can now re-scramble back a modified dump in order to flash it in your console (ECC regeneration is now included).
2) Analyzer has some more informations (it's still alpha, i use it for debug, it's complete only for versions 2.40/2.41).
3) It automatically extract EID file in its own modules.
4) It show the (eventual) differences between the 2 bootloaders files
5) Save Console Attributes log file in the Log dump folder.
6) Support the 80 Gb Nand Dump extraction for study purpose (nand model is different and is one chip only).
USAGE:
- UNSCRAMBLE & INTERLEAVE FLASHES / RESCRAMBLE & DEINTERLEAVE FLASHES -
First of all select if you want to unscramble or re-scramble your dump.
The first option is the first you have to use, it unscramble your flashes and interleave them in order to obtain a readable and extractable dump.
Once you modified the unscrambled dump (you can swap files or change some data) the second one allow you to deinterleave the flashes rescrambling them as the original ones are (otherwise dump won't work).
- BYTE REVERSE AND EXTRACT AN 80GB DUMP FILE -
Our very own Courier dumped a 80Gb Flash yet! It's completly different from a 40/60 Gb dump, it's already interleaved.
With this option you can extracte the kernel files from this kind of dumps.
- FILE SELECTION -
"Flash 0" (TOP): Is the flash0 dump file, warning, many USA dumps use the way around names, so if your dump is USA you should try to load Flash1 here instead.
"Flash 1" (BOTTOM): Is the flash1 dump file, warning, many USA dumps use the way around names, so if your dump is USA you should try to load Flash0 here instead.
OUTPUT (INTERLEAVED) file: It's the interleaved file that the tool produce using the UNSCRAMBLE option.
INPUT (INTERLEAVED) file: It's the modified interleaved file from witch the tool rebuild the new flashes (0/1) that you need reflash on PS3.
- ANALYZER -
It's the option that add to the log what's contained in the flashes blocks, the info is in this format:
0000000000.00.01.120.15140.00000#0249 | 00000000.0.1.78.3B24.0000 ==> File-System Root
On the Left there is the OOB block unique data, on the right (after the ==>) there is the analysis, so what the block contains.
It's fully working only for dump versions 2.40/2.41 and it's very slow, it's an alpha debug option.
- GENERATE NEW ECC -
Using the Option "Re-scramble modified dump then de-interleave it into two new flashes." you can enable this flag, so the new modified and rescrambled flashes will have ECC fixed (thanks to RPS for the Algo).
- FORCE BAD BLOCKS ECC CALCULATION -
This option shouldn't be checked unless you know what you're doing!
PS3 don't expect the ECC of a bad block to be good, it's safer to keep it as it is.
- GENERATE AMOXIFLASH DIFF FILE -
Bushing is working on a feature for Amoxiflash (a tool to flash nands fo Wii, XBOX360 and PS3) that will allow you to flash only the differences from the original flash file.
This will allow you to save time while trying some ps3 hacks attempts :-)
INSTALL NOTE:
This tool need the .net framework 2.0 in order to work: most computers should have it installed yet, by the way here is the link in case you wonder where to get it:
microsoft.com/downloads/details.aspx?familyid=0856eacb-4362-4b0d-8edd-aab15c5e04f5&displaylang=en
NOTE:
ECC calculation (Algo by our very own RPS *you mate rocks!* ), is included in the tool this time, have fun pathing your firmware.
Stand-Alone tool (PS3NANDECC v1.30) was included in order to be used separately if you wish; The Algorithm is the same for Debug and Retail consoles.
###BEWARE: you need the external power addition to your Infectus mod in order to use it! Otherwise it's to risky, if you patch something bad your console won't boot anymore.###
GREETINGS:
I'd like to greet all the ppl that helped me in this work: ggparallel, RPS, Ein, CJPC, Courier and all the PS3News.com staff :-)
NDT ;-)
I hope that the works and developement on the ps3 still works the same good way as the last week!!
So my question is: is the dump complete? I mean is there be some other area holding additional data? Can anybody (NDT?) shed some more light on this? Thank you very much.
Hehe I think we can rule BAHAMUT out then, their latest PS3 .NFO file is requesting help and $DK files:
Anybody interested in creating intros, trainers, cracks or anything else game
related are welcome. If you can code an application or tool designed for
Windows based systems that can provide a benefit or aid for us, we are also
interested. Knowledge in C/C++/ASM is a must and experience with coding in a
game related field is not required, but preferable. If you have experience
with utilities or the game scene, dealing with encrypted files, we could also
use your help. If you are a demo maker and can do intros, trainers or even
prods, we want you!
HARDWARE
If you can provide game systems, memory sticks, flash kits and even beta
versions of games, there could be a spot for you. We are also interested in
people with access to the latest SDK's and relevant programming tools, so
feel free to contact us.
Just happened to catch that when I was updating www.PS3NFO.com earlier tonight.
Depending how far you perceive that horizon to be, sure. I wouldn't hold my breath though. The work to find an exploit on retail consoles to even allow a CFW still hasn't been completed (publicly). If and when it is done, then in time a CFW may be released.
People need to realize that tons of research still needs to be done. It took over a year of work by multiple people to complete the NAND project, and there is still work to be done on that front.
One day there might be a way to do it without an Infectus and work is being done to figure that route out, but like I said earlier, nothing (ISO loaders, CFW, etc) will be released in the forseeable future, unless its some underground group that is way ahead of the game.