PS3 [GUIDE] Unbrick a PS3 after an unfortunate PS3Xploit flash

PyPS3checker v0.11.x. Check log.
Checked file : C:\Users\thorn\Downloads\PS3 4.88 hacks\For E3 Flasher\PyPS3tools-master\PyPS3tools-master\PyPS3patcher\Original dumps\New Dumps\1\bkpps3.bin
******* Getting flash type *******
Flash type : NOR
Reversed : YES
******* Getting SKU identification datas *******
idps = 0x0C
metldr0 = 0xF920
metldr1 = 0x0F8E
metldrkey = 0x39ECF2D2ACC0E0752248A9F8
bootldr0 = 0x2FFB
bootldr1 = 0x2FFB
bootldrsize = 0x2FFF0
Matching SKU : OK
CECH-30xxx (KTE-001)
Minimum version 3.66
WARNING: The machine this dump belongs to is currently not downgradable!
******* Getting SDK versions *******
ROS0 : 488.000
ROS1 : 488.000
******* Checking first_region_header *******
001.01 First Region Header 0x00 Filled Area 0 : OK
001.02 First Region Header Magic : OK
001.03 First Region Header 0x00 Filled Area 1 : OK
******* Checking flash_format *******
002.01 Flash Format String : OK
002.02 Flash Format Version : OK
002.03 Flash Format 0xFF Filled Area : OK
******* Checking flash_region_table *******
003.01 Flash Region Table Header : OK
003.02 asecure_loader Offset - Length : OK
003.03 asecure_loader Name : OK
003.04 eEID Offset - Length : OK
003.05 eEID Name : OK
003.06 cISD Offset - Length : OK
003.07 cISD Name : OK
003.08 cCSD Offset - Length : OK
003.09 cCSD Name : OK
003.10 trvk_prg0 Offset - Length : OK
003.11 trvk_prg0 Name : OK
003.12 trvk_prg1 Offset - Length : OK
003.13 trvk_prg1 Name : OK
003.14 trvk_pkg0 Offset - Length : OK
003.15 trvk_pkg0 Name : OK
003.16 trvk_pkg1 Offset - Length : OK
003.17 trvk_pkg1 Name : OK
003.18 ros0 Offset - Length : OK
003.19 ros0 Name : OK
003.20 ros1 Offset - Length : OK
003.21 ros1 Name : OK
003.22 cvtrm Offset - Length : OK
003.23 cvtrm Name : OK
003.24 Flash Region Table 0x00 Filled Area : OK
******* Checking asure_loader_region *******
004.01 asecure_loader Header : OK
004.02 metldr Offset : OK
004.03 metldr Length : OK
004.04 metldr Name : OK
004.05 metldr RevKey : OK
004.06 metldr Binary Size : OK
004.07 metldr Statistics : OK
004.08 asecure_loader 0x00 Filled Area : OK
******* Checking eEID_region *******
005.01 eEID Header : OK
005.02 EID0 Offset - Length : OK
005.03 EID1 Offset - Length : OK
005.04 EID2 Offset - Length : OK
005.05 EID3 Offset - Length : OK
005.06 EID4 Offset - Length : OK
005.07 EID5 Offset - Length : OK
005.08 EID0 IDPS0 : OK
005.09 EID0 IDPS1 : OK
005.10 EID0 Static : OK
005.11 EID2 BlockSize/Padding : OK
005.12 EID3 Static0 : OK
005.13 EID3 Static1 : OK
005.14 EID3 Static2 : OK
005.15 EID5 IDPS0 : OK
005.16 EID5 IDPS1 : OK
005.17 EID5 Static : OK
005.18 eEID Region 0xFF Filled Area : OK
005.19 eEID Statistics0 : OK
005.20 eEID Statistics1 : OK
******* Checking cISD_region *******
006.01 cISD Header : OK
006.02 cISD0 Offset - Length : OK
006.03 cISD1 Offset - Length : OK
006.04 cISD2 Offset - Length : OK
006.05 cISD0 0xFF Filled Area : OK
006.06 cISD1 IDLog Header : OK
006.07 cISD1 Semistatic 1 : OK
006.08 cISD1 Semistatic 2 : OK
006.09 cISD1 0xFF Filled Area 0 : OK
006.10 cISD1 Static : OK
006.11 cISD1 Semistatic 3 : OK
006.12 cISD1 0xFF Filled Area 1 : OK
006.13 cISD1 Statistics : OK
006.14 cISD2 : OK
006.15 cISD 0xFF Filled Area : OK
******* Checking cCSD_region *******
007.01 cCSD Header : OK
007.02 cCSD Entry Table : OK
007.03 cCSD 0xFF Filled Area : OK
******* Checking Revokation_region *******
008.01 trvk_prg0 SCE : OK
008.02 trvk_prg0 Hash : OK
Size = 0x2E0
MD5 = C6E142FFF29F5DACDBBF56779C0F32C7
Version = 3.66 (from factory)
008.02 trvk_prg0 0xFF filled area : OK
008.03 trvk_prg1 SCE : OK
008.04 trvk_prg1 Hash : OK
Size = 0x2E0
MD5 = C6E142FFF29F5DACDBBF56779C0F32C7
Version = 3.66 (from factory)
008.04 trvk_prg1 0xFF filled area : OK
008.05 trvk_pkg0 SCE : OK
008.06 trvk_pkg0 0xFF filled area : OK
008.07 trvk_pkg1 SCE : OK
008.08 trvk_pkg1 0xFF filled area : OK
******* Checking CoreOS_region *******
009.01 ROS0 Header : OK
009.02 ROS0 Hash : OK
Size = 0x6FFFE0
MD5 = EA9F81A031A7B6701560B3501712DF1A
Version = 4.88 CEX Patched (Evilnat based)
009.03 ROS0 unused 0xFF Filled Area : OK
009.04 ROS1 Header : OK
009.05 ROS1 Hash : OK
Size = 0x6FFFE0
MD5 = EA9F81A031A7B6701560B3501712DF1A
Version = 4.88 CEX Patched (Evilnat based)
009.06 ROS1 unused 0xFF Filled Area : OK
******* Checking cvtrm_region *******
010.01 Pre cvtrm 0xFF Filled Area : OK
010.02 cvtrm0 Header : OK
010.03 cvtrm0 0xFF Filled Area : OK
010.04 vtrm0 Magic : OK
010.05 vtrm0 Reserved Entries : OK
010.07 cvtrm1 Header : OK
010.08 cvtrm1 0xFF Filled Area : OK
010.09 vtrm1 Magic : OK
010.10 vtrm1 Reserved Entries : OK
******* Checking Second_Region_Header *******
011.01 Second Region Header 0x00 Filled Area 0 : OK
011.02 Second Region Header Magic : OK
011.03 Second Region Header Count : OK
011.04 Second Region Header 0x00 Filled Area 1 : OK
011.05 Second Region Unknown Block 0 : OK
011.06 Second Region Header 0x00 Filled Area 2 : OK
011.07 Second Region Unknown Block 1 : OK
011.08 Second Region Header 0x00 Filled Area 3 : OK
******* Checking Unreferenced_Area *******
012.01 unreferenced area 0xFF Filled : OK
******* Checking CELL_EXTNOR_AREA_Region *******
013.01 CELL_EXTNOR_AREA Header : OK
013.02 CELL_EXTNOR_AREA 0x00 Filled Area 0 : OK
013.03 CELL_EXTNOR_AREA 0x00 Filled Area 1 : OK
013.04 CELL_EXTNOR_AREA 0x00 Filled Area 2 : OK
013.05 CELL_EXTNOR_AREA 0x00 Filled Area 3 : OK
013.06 CELL_EXTNOR_AREA 0xFF Filled Area 0 : OK
013.07 CELL_EXTNOR_AREA 0x00 Filled Area 5 : OK
013.08 CELL_EXTNOR_AREA 0x00 Filled Area 6 : OK
013.09 CELL_EXTNOR_AREA 0xFF Filled Area 1 : OK
******* Checking bootldr_region *******
014.01 bootldr0 : OK
014.02 bootldr1 : OK
014.03 bootldr Rev key : OK
014.04 bootldr Statistics : OK
014.05 bootldr 0xFF Filled Area : OK
******* Checking datamatches *******
bootldr size : OK
per console nonce : OK
CELL_EXTNOR_AREA Hash1 : OK
CELL_EXTNOR_AREA Hash2 : OK
metldr size : OK
vtrm0 : OK
vtrm1 : OK
******* Checking repetitions *******
Header Magic0 Repetitions : OK
asecure_loader Repetitions : OK
eEID Repetitions : OK
cISD Repetitions : OK
cCSD Repetitions : OK
trvk_prg0 Repetitions : OK
trvk_prg1 Repetitions : OK
trvk_pkg0 Repetitions : OK
trvk_pkg1 Repetitions : OK
ros0 Repetitions : OK
ros1 Repetitions : OK
cvtrm Repetitions : OK
******* Additional information *******
HDD : ST9250315AS 6VCSMNZY
MAC address : 28:0D:FC:16:02:9E
CID : 0x000203023793
eCID : 01CA04F2802027180A13554200000010
board_id (part of console S/N) : 27459404
kiban_id (board barcode) : 402111310598
******* Checks completed *******
Total number of checks = 155
Number of dangers = 0
Number of warnings = 1
Following check(s) returned a WARNING!
SKU identification
All checks done in 6.51 seconds.
----------------------------------------------------------------------------
| IMPORTANT NOTICE ! |
| Checks of late CECH-25xxx, CECH-3xxxx and CECH-4xxxx consoles dumps still |
| under development and may return false results. If you feel it's the case, |
| please post your *.checklog.txt in a new issue on my github repository: |
| https://github.com/littlebalup/PyPS3tools/issues |
| Thanks! It will help me a lot to improve that tool ;) |
----------------------------------------------------------------------------
 
PyPS3checker v0.11.x. Check log.
Checked file : C:\Users\thorn\Downloads\PS3 4.88 hacks\For E3 Flasher\PyPS3tools-master\PyPS3tools-master\PyPS3patcher\Original dumps\New Dumps\1\bkpps3.bin
******* Getting flash type *******
Flash type : NOR
Reversed : YES
******* Getting SKU identification datas *******
idps = 0x0C
metldr0 = 0xF920
metldr1 = 0x0F8E
metldrkey = 0x39ECF2D2ACC0E0752248A9F8
bootldr0 = 0x2FFB
bootldr1 = 0x2FFB
bootldrsize = 0x2FFF0
Matching SKU : OK
CECH-30xxx (KTE-001)
Minimum version 3.66
WARNING: The machine this dump belongs to is currently not downgradable!
******* Getting SDK versions *******
ROS0 : 488.000
ROS1 : 488.000
******* Checking first_region_header *******
001.01 First Region Header 0x00 Filled Area 0 : OK
001.02 First Region Header Magic : OK
001.03 First Region Header 0x00 Filled Area 1 : OK
******* Checking flash_format *******
002.01 Flash Format String : OK
002.02 Flash Format Version : OK
002.03 Flash Format 0xFF Filled Area : OK
******* Checking flash_region_table *******
003.01 Flash Region Table Header : OK
003.02 asecure_loader Offset - Length : OK
003.03 asecure_loader Name : OK
003.04 eEID Offset - Length : OK
003.05 eEID Name : OK
003.06 cISD Offset - Length : OK
003.07 cISD Name : OK
003.08 cCSD Offset - Length : OK
003.09 cCSD Name : OK
003.10 trvk_prg0 Offset - Length : OK
003.11 trvk_prg0 Name : OK
003.12 trvk_prg1 Offset - Length : OK
003.13 trvk_prg1 Name : OK
003.14 trvk_pkg0 Offset - Length : OK
003.15 trvk_pkg0 Name : OK
003.16 trvk_pkg1 Offset - Length : OK
003.17 trvk_pkg1 Name : OK
003.18 ros0 Offset - Length : OK
003.19 ros0 Name : OK
003.20 ros1 Offset - Length : OK
003.21 ros1 Name : OK
003.22 cvtrm Offset - Length : OK
003.23 cvtrm Name : OK
003.24 Flash Region Table 0x00 Filled Area : OK
******* Checking asure_loader_region *******
004.01 asecure_loader Header : OK
004.02 metldr Offset : OK
004.03 metldr Length : OK
004.04 metldr Name : OK
004.05 metldr RevKey : OK
004.06 metldr Binary Size : OK
004.07 metldr Statistics : OK
004.08 asecure_loader 0x00 Filled Area : OK
******* Checking eEID_region *******
005.01 eEID Header : OK
005.02 EID0 Offset - Length : OK
005.03 EID1 Offset - Length : OK
005.04 EID2 Offset - Length : OK
005.05 EID3 Offset - Length : OK
005.06 EID4 Offset - Length : OK
005.07 EID5 Offset - Length : OK
005.08 EID0 IDPS0 : OK
005.09 EID0 IDPS1 : OK
005.10 EID0 Static : OK
005.11 EID2 BlockSize/Padding : OK
005.12 EID3 Static0 : OK
005.13 EID3 Static1 : OK
005.14 EID3 Static2 : OK
005.15 EID5 IDPS0 : OK
005.16 EID5 IDPS1 : OK
005.17 EID5 Static : OK
005.18 eEID Region 0xFF Filled Area : OK
005.19 eEID Statistics0 : OK
005.20 eEID Statistics1 : OK
******* Checking cISD_region *******
006.01 cISD Header : OK
006.02 cISD0 Offset - Length : OK
006.03 cISD1 Offset - Length : OK
006.04 cISD2 Offset - Length : OK
006.05 cISD0 0xFF Filled Area : OK
006.06 cISD1 IDLog Header : OK
006.07 cISD1 Semistatic 1 : OK
006.08 cISD1 Semistatic 2 : OK
006.09 cISD1 0xFF Filled Area 0 : OK
006.10 cISD1 Static : OK
006.11 cISD1 Semistatic 3 : OK
006.12 cISD1 0xFF Filled Area 1 : OK
006.13 cISD1 Statistics : OK
006.14 cISD2 : OK
006.15 cISD 0xFF Filled Area : OK
******* Checking cCSD_region *******
007.01 cCSD Header : OK
007.02 cCSD Entry Table : OK
007.03 cCSD 0xFF Filled Area : OK
******* Checking Revokation_region *******
008.01 trvk_prg0 SCE : OK
008.02 trvk_prg0 Hash : OK
Size = 0x2E0
MD5 = C6E142FFF29F5DACDBBF56779C0F32C7
Version = 3.66 (from factory)
008.02 trvk_prg0 0xFF filled area : OK
008.03 trvk_prg1 SCE : OK
008.04 trvk_prg1 Hash : OK
Size = 0x2E0
MD5 = C6E142FFF29F5DACDBBF56779C0F32C7
Version = 3.66 (from factory)
008.04 trvk_prg1 0xFF filled area : OK
008.05 trvk_pkg0 SCE : OK
008.06 trvk_pkg0 0xFF filled area : OK
008.07 trvk_pkg1 SCE : OK
008.08 trvk_pkg1 0xFF filled area : OK
******* Checking CoreOS_region *******
009.01 ROS0 Header : OK
009.02 ROS0 Hash : OK
Size = 0x6FFFE0
MD5 = EA9F81A031A7B6701560B3501712DF1A
Version = 4.88 CEX Patched (Evilnat based)
009.03 ROS0 unused 0xFF Filled Area : OK
009.04 ROS1 Header : OK
009.05 ROS1 Hash : OK
Size = 0x6FFFE0
MD5 = EA9F81A031A7B6701560B3501712DF1A
Version = 4.88 CEX Patched (Evilnat based)
009.06 ROS1 unused 0xFF Filled Area : OK
******* Checking cvtrm_region *******
010.01 Pre cvtrm 0xFF Filled Area : OK
010.02 cvtrm0 Header : OK
010.03 cvtrm0 0xFF Filled Area : OK
010.04 vtrm0 Magic : OK
010.05 vtrm0 Reserved Entries : OK
010.07 cvtrm1 Header : OK
010.08 cvtrm1 0xFF Filled Area : OK
010.09 vtrm1 Magic : OK
010.10 vtrm1 Reserved Entries : OK
******* Checking Second_Region_Header *******
011.01 Second Region Header 0x00 Filled Area 0 : OK
011.02 Second Region Header Magic : OK
011.03 Second Region Header Count : OK
011.04 Second Region Header 0x00 Filled Area 1 : OK
011.05 Second Region Unknown Block 0 : OK
011.06 Second Region Header 0x00 Filled Area 2 : OK
011.07 Second Region Unknown Block 1 : OK
011.08 Second Region Header 0x00 Filled Area 3 : OK
******* Checking Unreferenced_Area *******
012.01 unreferenced area 0xFF Filled : OK
******* Checking CELL_EXTNOR_AREA_Region *******
013.01 CELL_EXTNOR_AREA Header : OK
013.02 CELL_EXTNOR_AREA 0x00 Filled Area 0 : OK
013.03 CELL_EXTNOR_AREA 0x00 Filled Area 1 : OK
013.04 CELL_EXTNOR_AREA 0x00 Filled Area 2 : OK
013.05 CELL_EXTNOR_AREA 0x00 Filled Area 3 : OK
013.06 CELL_EXTNOR_AREA 0xFF Filled Area 0 : OK
013.07 CELL_EXTNOR_AREA 0x00 Filled Area 5 : OK
013.08 CELL_EXTNOR_AREA 0x00 Filled Area 6 : OK
013.09 CELL_EXTNOR_AREA 0xFF Filled Area 1 : OK
******* Checking bootldr_region *******
014.01 bootldr0 : OK
014.02 bootldr1 : OK
014.03 bootldr Rev key : OK
014.04 bootldr Statistics : OK
014.05 bootldr 0xFF Filled Area : OK
******* Checking datamatches *******
bootldr size : OK
per console nonce : OK
CELL_EXTNOR_AREA Hash1 : OK
CELL_EXTNOR_AREA Hash2 : OK
metldr size : OK
vtrm0 : OK
vtrm1 : OK
******* Checking repetitions *******
Header Magic0 Repetitions : OK
asecure_loader Repetitions : OK
eEID Repetitions : OK
cISD Repetitions : OK
cCSD Repetitions : OK
trvk_prg0 Repetitions : OK
trvk_prg1 Repetitions : OK
trvk_pkg0 Repetitions : OK
trvk_pkg1 Repetitions : OK
ros0 Repetitions : OK
ros1 Repetitions : OK
cvtrm Repetitions : OK
******* Additional information *******
HDD : ST9250315AS 6VCSMNZY
MAC address : 28:0D:FC:16:02:9E
CID : 0x000203023793
eCID : 01CA04F2802027180A13554200000010
board_id (part of console S/N) : 27459404
kiban_id (board barcode) : 402111310598
******* Checks completed *******
Total number of checks = 155
Number of dangers = 0
Number of warnings = 1
Following check(s) returned a WARNING!
SKU identification
All checks done in 6.51 seconds.
----------------------------------------------------------------------------
| IMPORTANT NOTICE ! |
| Checks of late CECH-25xxx, CECH-3xxxx and CECH-4xxxx consoles dumps still |
| under development and may return false results. If you feel it's the case, |
| please post your *.checklog.txt in a new issue on my github repository: |
| https://github.com/littlebalup/PyPS3tools/issues |
| Thanks! It will help me a lot to improve that tool ;) |
----------------------------------------------------------------------------

This dump looks good overall.
However the console is not CFW compatible so a no-fsm patch cannot work, it contains modified CoreOS files that cannot run on 3xxx slims.

You need to use pyps3patcher to patch this dump with a OFW 4.88 CoreOS patch file then apply the newly patched dump to the NOR Flash memory with the E3.
I dunno if there is OFW 4.88 patch file available for download anywhere.
@littlebalup may have such a file somewhere, I am not sure.
Alternatively you could make a patch file yourself from another console running OFW or HFW 4.88 using the PS3 Toolset (Dump ROS as no-fsm patch file feature in the Flash Memory Manager with strict mode off, making sure you are using the right ROS) or ask someone you can trust to make one for you. I recommend to install OFW 4.88 twice in a row before dumping a ROS as patch file to avoid using the wrong ROS.
 
Last edited:
Yes what you said is exactly what I thought I needed to do but to get from another console wouldnt it need to be the same model no,and I have opened the 4.88 PUP,but I dont know how to make the CORE_OS_PACKAGE.pkg into a .bin file
 
to get from another console wouldnt it need to be the same model no,and I have opened the 4.88 PUP,but I dont know how to make the CORE_OS_PACKAGE.pkg into a .bin file
No, the ROS data is standard & does not depend on console model, you can use a OFW or HFW 4.88 (it is the same thing) ROS dump from any console model.
 
Well I thank you,for the info,I updated one of my other ps3s to OFW 4.88 and then used the exploit site to get hen working I ROS dumps of Bank 1 and 2 ,as well as a reg backup. I will try to patch the other one later,Im going to bed now,Thank you again for your help,I did have 2 old backwards compat sys. with CFW.
 
Last edited:
Does that mean I have to patch two times one for each ROS?
1. You must dump a ROS which has 4.88 OFW/HFW on it with the PS3 Toolset "dump ROS as no fsm patch" feature.
Make sure to use the right ROS, when in doubt, install OFW or HFW twice in a row so both ROS will be identical & you cannot make a mistake.
2. Replace the original no-fsm patch file in pyps3patcher folder with the file you just dumped with the PS3 Toolset.
3. Launch pyps3patcher as per instructions to patch your latest E3 dump.
4. Apply the newly patched dump to the Flash memory using the E3.
 
Thank you, I installed 3 times but didnt check to see if the ROS files were the same,I will check and try,Thank you again for your time.How do I change .hex to .bin I know how to change the file type,but do I need to do any thing else to make it useable?The patcher doesnt seem to like it.
 
Last edited:
I put my ROS dump in the folder and renamed to match the nofsm patch ,the patcher said it corrupt, I tried several times I tried to get the dumper ,PS3 toolset to dump a bin file but that didnt work ether .I am now trying to use the rebuilder whitch said I need to use a dump from a matching model .I got one and made the dump my self.I will let you know how that works out.
 
I put my ROS dump in the folder and renamed to match the nofsm patch ,the patcher said it corrupt, I tried several times I tried to get the dumper ,PS3 toolset to dump a bin file but that didnt work ether .I am now trying to use the rebuilder whitch said I need to use a dump from a matching model .I got one and made the dump my self.I will let you know how that works out.

The pyps3patcher probably checks what it patches, I dunno if there is an option to bypass the checks, you would need to ask littlebalup. If the dump gets patched properly, the corruption error may not be relevant. Once done, the dump file should show 4.88 Retail CEX OFW/HFW in pyps3checker for both ros0 & ros1.

The easiest way forward if ever you cannot use a patching tool is to do the job manually in a hex editor, it should only be a matter of copying the data from the patch file & pasting it to overwrite both ros regions (keeping the ros header untouched).

Regarding rebuilding and/or donor dumps, I cannot help however you should not try to do everything at once, one thing at a time.
First get the ROS regions back to OFW 4.88, then you can fiddle with other things..
 
I put my ROS dump in the folder and renamed to match the nofsm patch ,the patcher said it corrupt, I tried several times I tried to get the dumper ,PS3 toolset to dump a bin file but that didnt work ether .I am now trying to use the rebuilder whitch said I need to use a dump from a matching model .I got one and made the dump my self.I will let you know how that works out.

The nofsm_patch.bin md5 hash is checked to be sure is good before to apply it. The hash is store in the patches.info https://github.com/littlebalup/PyPS3tools/blob/master/PyPS3patcher/patches/patches.info

Anyway a "cust" command exist to apply a custom ROS.

https://github.com/littlebalup/PyPS...50c8/PyPS3patcher/PyPS3patcher_README.txt#L39

cust : apply a custom ROS patches.

NOTES :
- Custom ROS patch file must be nammed "patch.bin" and located to the script
folder.

So, rename your ROS as "patch.bin" then use the command
Code:
patcher.py cust yourdump.bin
 
I thank both of you for your help,I thought the corruption error was caused by me changing the file extention to .bin ,all of the other patches were bin files ,and I didnt know how to convert the .hex file made with PS3tools to a bin file.I will try as you suggested.Thank you again for your time. Happy New Year!!
 
hello my friends sorry before my language
i have a big problem with my playstation 3 slim ofw 4.88 i was trying to dawngrad
but It turns on and back off i think its bricked because a bad dump so look the result of the dump
p_219215dwz1.jpg
 
la console slim cech2104A date code 0B It was hacked before en cfw 4.87 with bg toolset after mistake update with ofw 4.88 par internet That time was not cfw 4.88 in a bg toolset So I did dawngrad with e3 flasher and This problem appeared
note; console bani

PyPS3checker v0.11.x. Check log.
Checked file : C:\Users\INFINITY2019\Desktop\PyPS3checker-standalone-package_2021-22-11_215328\bkpps3.bin
******* Getting flash type *******
Flash type : NOR
Reversed : YES
******* Getting SKU identification datas *******
idps = 0x0F
metldr0 = 0xE920
metldr1 = 0x0E8E
metldrkey = 0x99873BC715F280809C302225
bootldr0 = 0x2F4B
bootldr1 = 0x2F4B
bootldrsize = 0x2F4F0
Matching SKU : WARNING!
No matching SKU found!
******* Getting SDK versions *******
ROS0 : 488.000
ROS1 : 488.000
******* Checking first_region_header *******
001.01 First Region Header 0x00 Filled Area 0 : OK
001.02 First Region Header Magic : OK
001.03 First Region Header 0x00 Filled Area 1 : OK
******* Checking flash_format *******
002.01 Flash Format String : OK
002.02 Flash Format Version : OK
002.03 Flash Format 0xFF Filled Area : OK
******* Checking flash_region_table *******
003.01 Flash Region Table Header : OK
003.02 asecure_loader Offset - Length : OK
003.03 asecure_loader Name : OK
003.04 eEID Offset - Length : OK
003.05 eEID Name : OK
003.06 cISD Offset - Length : OK
003.07 cISD Name : OK
003.08 cCSD Offset - Length : OK
003.09 cCSD Name : OK
003.10 trvk_prg0 Offset - Length : OK
003.11 trvk_prg0 Name : OK
003.12 trvk_prg1 Offset - Length : OK
003.13 trvk_prg1 Name : OK
003.14 trvk_pkg0 Offset - Length : OK
003.15 trvk_pkg0 Name : OK
003.16 trvk_pkg1 Offset - Length : OK
003.17 trvk_pkg1 Name : OK
003.18 ros0 Offset - Length : OK
003.19 ros0 Name : OK
003.20 ros1 Offset - Length : OK
003.21 ros1 Name : OK
003.22 cvtrm Offset - Length : OK
003.23 cvtrm Name : OK
003.24 Flash Region Table 0x00 Filled Area : OK
******* Checking asure_loader_region *******
004.01 asecure_loader Header : OK
004.02 metldr Offset : OK
004.03 metldr Length : OK
004.04 metldr Name : OK
004.05 metldr RevKey : OK
004.06 metldr Binary Size : OK
004.07 metldr Statistics : OK
004.08 asecure_loader 0x00 Filled Area : OK
******* Checking eEID_region *******
005.01 eEID Header : OK
005.02 EID0 Offset - Length : OK
005.03 EID1 Offset - Length : OK
005.04 EID2 Offset - Length : OK
005.05 EID3 Offset - Length : OK
005.06 EID4 Offset - Length : OK
005.07 EID5 Offset - Length : OK
005.08 EID0 IDPS0 : OK
005.09 EID0 IDPS1 : OK
005.10 EID0 Static : OK
005.11 EID2 BlockSize/Padding : OK
005.12 EID3 Static0 : OK
005.13 EID3 Static1 : OK
005.14 EID3 Static2 : OK
005.15 EID5 IDPS0 : OK
005.16 EID5 IDPS1 : OK
005.17 EID5 Static : OK
005.18 eEID Region 0xFF Filled Area : OK
005.19 eEID Statistics0 : OK
005.20 eEID Statistics1 : OK
******* Checking cISD_region *******
006.01 cISD Header : OK
006.02 cISD0 Offset - Length : OK
006.03 cISD1 Offset - Length : OK
006.04 cISD2 Offset - Length : OK
006.05 cISD0 0xFF Filled Area : OK
006.06 cISD1 IDLog Header : OK
006.07 cISD1 Semistatic 1 : OK
006.08 cISD1 Semistatic 2 : OK
006.09 cISD1 0xFF Filled Area 0 : OK
006.10 cISD1 Static : OK
006.11 cISD1 Semistatic 3 : OK
006.12 cISD1 0xFF Filled Area 1 : OK
006.13 cISD1 Statistics : OK
006.14 cISD2 : OK
006.15 cISD 0xFF Filled Area : OK
******* Checking cCSD_region *******
007.01 cCSD Header : OK
007.02 cCSD Entry Table : OK
007.03 cCSD 0xFF Filled Area : OK
******* Checking Revokation_region *******
008.01 trvk_prg0 SCE : OK
008.02 trvk_prg0 Hash : OK
Size = 0x2E0
MD5 = E537DE954DCF25D4DE961DF44549BAF7
Version = 3.50 (from PUP)
008.02 trvk_prg0 0xFF filled area : OK
008.03 trvk_prg1 SCE : OK
008.04 trvk_prg1 Hash : OK
Size = 0x2E0
MD5 = 17C2074A28C7FDE825293210F8905446
Version = 3.40 (from factory)
008.04 trvk_prg1 0xFF filled area : OK
008.05 trvk_pkg0 SCE : OK
008.06 trvk_pkg0 0xFF filled area : OK
008.07 trvk_pkg1 SCE : OK
008.08 trvk_pkg1 0xFF filled area : OK
******* Checking CoreOS_region *******
009.01 ROS0 Header : OK
009.02 ROS0 Hash : OK
Size = 0x6FFFE0
MD5 = 36A0D80FB18E9D6FD7635217D59FA726
Version = 4.88 CEX/SEX OFW/HFW
009.03 ROS0 unused 0xFF Filled Area : OK
009.04 ROS1 Header : OK
009.05 ROS1 Hash : OK
Size = 0x6FFFE0
MD5 = 36A0D80FB18E9D6FD7635217D59FA726
Version = 4.88 CEX/SEX OFW/HFW
009.06 ROS1 unused 0xFF Filled Area : OK
******* Checking cvtrm_region *******
010.01 Pre cvtrm 0xFF Filled Area : OK
010.02 cvtrm0 Header : OK
010.03 cvtrm0 0xFF Filled Area : OK
010.04 vtrm0 Magic : OK
010.05 vtrm0 Reserved Entries : OK
010.07 cvtrm1 Header : OK
010.08 cvtrm1 0xFF Filled Area : OK
010.09 vtrm1 Magic : OK
010.10 vtrm1 Reserved Entries : OK
******* Checking Second_Region_Header *******
011.01 Second Region Header 0x00 Filled Area 0 : OK
011.02 Second Region Header Magic : OK
011.03 Second Region Header Count : OK
011.04 Second Region Header 0x00 Filled Area 1 : OK
011.05 Second Region Unknown Block 0 : OK
011.06 Second Region Header 0x00 Filled Area 2 : OK
011.07 Second Region Unknown Block 1 : OK
011.08 Second Region Header 0x00 Filled Area 3 : OK
******* Checking Unreferenced_Area *******
012.01 unreferenced area 0xFF Filled : OK
******* Checking CELL_EXTNOR_AREA_Region *******
013.01 CELL_EXTNOR_AREA Header : OK
013.02 CELL_EXTNOR_AREA 0x00 Filled Area 0 : OK
013.03 CELL_EXTNOR_AREA 0x00 Filled Area 1 : OK
013.04 CELL_EXTNOR_AREA 0x00 Filled Area 2 : OK
013.05 CELL_EXTNOR_AREA 0x00 Filled Area 3 : OK
013.06 CELL_EXTNOR_AREA 0xFF Filled Area 0 : OK
013.07 CELL_EXTNOR_AREA 0x00 Filled Area 5 : OK
013.08 CELL_EXTNOR_AREA 0x00 Filled Area 6 : OK
013.09 CELL_EXTNOR_AREA 0xFF Filled Area 1 : OK
******* Checking bootldr_region *******
014.01 bootldr0 : OK
014.02 bootldr1 : OK
014.03 bootldr Rev key : OK
014.04 bootldr Statistics : OK
014.05 bootldr 0xFF Filled Area : OK
******* Checking datamatches *******
bootldr size : OK
per console nonce : OK
CELL_EXTNOR_AREA Hash1 : OK
CELL_EXTNOR_AREA Hash2 : OK
metldr size : OK
vtrm0 : OK
vtrm1 : OK
******* Checking repetitions *******
Header Magic0 Repetitions : OK
asecure_loader Repetitions : OK
eEID Repetitions : OK
cISD Repetitions : OK
cCSD Repetitions : OK
trvk_prg0 Repetitions : OK
trvk_prg1 Repetitions : OK
trvk_pkg0 Repetitions : OK
trvk_pkg1 Repetitions : OK
ros0 Repetitions : OK
ros1 Repetitions : OK
cvtrm Repetitions : OK
******* Additional information *******
HDD : TOSHIBA MK3265GSX H 90JNC8C7T
MAC address : FC:0F:E6:29:41:06
CID : 0x000202779293
eCID : 01C524026104C70E1505134200000000
board_id (part of console S/N) : 27456973
kiban_id (board barcode) : 3J5N1919505A
******* Checks completed *******
Total number of checks = 155
Number of dangers = 0
Number of warnings = 1
Following check(s) returned a WARNING!
SKU identification
All checks done in 45.86 seconds.
----------------------------------------------------------------------------
| IMPORTANT NOTICE ! |
| Checks of late CECH-25xxx, CECH-3xxxx and CECH-4xxxx consoles dumps still |
| under development and may return false results. If you feel it's the case, |
| please post your *.checklog.txt in a new issue on my github repository: |
| https://github.com/littlebalup/PyPS3tools/issues |
| Thanks! It will help me a lot to improve that tool ;) |
----------------------------------------------------------------------------
 
la console slim cech2104A date code 0B It was hacked before en cfw 4.87 with bg toolset after mistake update with ofw 4.88 par internet That time was not cfw 4.88 in a bg toolset So I did dawngrad with e3 flasher and This problem appeared
note; console bani

...
******* Getting SKU identification datas *******
idps = 0x0F
metldr0 = 0xE920
metldr1 = 0x0E8E
metldrkey = 0x99873BC715F280809C302225
bootldr0 = 0x2F4B
bootldr1 = 0x2F4B
bootldrsize = 0x2F4F0
Matching SKU : WARNING!
No matching SKU found!
...

Ok, donc si j'ai bien compris ce dump est celui fait avec l'E3 juste avant de flasher?
L'IDPS avait t'il déjà été changé? Si oui comment?
Ce warning vient du fait que le Product Sub Code dans ton IDPS ne correspond pas au model de la console. Tu devrais avoir un Product Sub Code 0x0B alors que tu as un 0x0F (ce qui correspond à une superslim CECH-40xx).
Ce qui semble indiquer que l'IDPS a été modifié. Si ça a été mal fait ça peut expliquer le brick.
Mais il y a de grandes chance que ton soucis vienne d'un mauais flash. Refais un dump et compare le avec celui-ci. S'il n'est pas identique c'est qu'il y a eu un soucis avec l'E3 (clip...).

Ok, so if I understood correctly this dump is the one made with E3 just before flashing?
Had the IDPS already been changed? If yes, how?
This warning is because the Product Sub Code in your IDPS does not match the console model. You should have a Product Sub Code 0x0B while you have 0x0F (which corresponds to a CECH-40xx superslim).
Which seems to indicate that the IDPS has been changed. If it was done badly that could explain the brick.
But there's a good chance your concern comes from a bad flash. Do a dump again and compare it with this one. If it is not identical means there was a problem with E3 (clip ...).
 
Ok, donc si j'ai bien compris ce dump est celui fait avec l'E3 juste avant de flasher?
L'IDPS avait t'il déjà été changé? Si oui comment?
Ce warning vient du fait que le Product Sub Code dans ton IDPS ne correspond pas au model de la console. Tu devrais avoir un Product Sub Code 0x0B alors que tu as un 0x0F (ce qui correspond à une superslim CECH-40xx).
Ce qui semble indiquer que l'IDPS a été modifié. Si ça a été mal fait ça peut expliquer le brick.
Mais il y a de grandes chance que ton soucis vienne d'un mauais flash. Refais un dump et compare le avec celui-ci. S'il n'est pas identique c'est qu'il y a eu un soucis avec l'E3 (clip...).

Ok, so if I understood correctly this dump is the one made with E3 just before flashing?
Had the IDPS already been changed? If yes, how?
This warning is because the Product Sub Code in your IDPS does not match the console model. You should have a Product Sub Code 0x0B while you have 0x0F (which corresponds to a CECH-40xx superslim).
Which seems to indicate that the IDPS has been changed. If it was done badly that could explain the brick.
But there's a good chance your concern comes from a bad flash. Do a dump again and compare it with this one. If it is not identical means there was a problem with E3 (clip ...).[/QUOTE
dump before flash (d'not have original dum
my ps3 banni online (possible someone of my brothers made this change of l'idps to access online !)
 
Last edited:
ya pas une méthode pour changer (0x0B)?
Moderation Team:

This is an English speaking forum, postings in other languages without a translation is not acceptable.
Please add a translation from now on or your posts will get deleted.
 

dump before flash (d'not have original dump)
my ps3 banni online (possible someone of my brothers made this change of l'idps to access online !)
 
Back
Top