PS3 [research] SuperSlim 4000 series - hardware flash

Louay said:
Hope it will comes to the world so if it possible we will have 2 reading method using SD Card Adapter mod and Teensy 2.0++ ?!
Click to expand...
Judges has this for the teensy2. 0++ I'm sure he has made dumps when the ps4 was released.
I'm doubting myself now though [emoji23] I'm going to have to have a search on his github to check

Sent from my G3121 using Tapatalk
 
baileyscream said:
Judges has this for the teensy2. 0++ I'm sure he has made dumps when the ps4 was released.
I'm doubting myself now though [emoji23] I'm going to have to have a search on his github to check

Sent from my G3121 using Tapatalk
Click to expand...
I don't think so. PS3 eMMC doesn't support SPI. So SPIway can't be used. PS4 has SPI if I remember well.
 
Not confirm but... Is this the tri state ?

And this will be joined to ground point where?on golden area
 

Attachments

  • BeautyPlus_20190521114331932_save.jpg
    BeautyPlus_20190521114331932_save.jpg
    1.1 MB · Views: 493
Work in progress...

Panasonic controler to EMMC bus mapping complete :
EMMC bus mapping.png

I successfully dumped the 256MB "flash partition" (including the bootldr) from the EMMC, with the console self powered and booted.
But I didn't found a way yet to dump a bricked console. The tristate to grnd doen't keep the console turned on... and the EMMC is not recognized by supplying VDDF and VDD with an external 3V power supply...

Any suggestions are welcome.

Attached the EMMC spec.
 

Attachments

Last edited:
4k EMMC succefully dumped from a naked PPX-001 mobo :)
Using a +3v external supply for VDDF (VCC).
VDD supplied by my card reader.
It is necessary to remove the 47ohms resistor on the CLK line (otherwise the Panasonic controller blurs the line and the connection hang...).

4 bit data connection (dat0 to dat3):
pic_tests.png


dumping:
screen_tests.png


256MB dump showing the bootldr (byte reversed):
screen_tests.png


Write tests coming soon.
 
Last edited:
littlebalup said:
4k EMMC succefully dumped from a naked PPX-001 mobo :)
Using a +3v external supply for VDDF (VCC).
VDD supplied by my card reader.
It is necessary to remove the 47ohms resistor on the CLK line (otherwise the Panasonic controller blurs the line and the connection hang...).

4 bit data connection (dat0 to dat3):
View attachment 18342

dumping:
View attachment 18340

256MB dump showing the bootldr (byte reversed):
View attachment 18341

Write tests coming soon.
Click to expand...

Brilliant stuff @littlebalup keep up the good work
 
Sdw100 said:
Brilliant stuff @littlebalup keep up the good work
Click to expand...

Thanks :)

Side note : maybe it would be better to moove that thread in another section. I think I wrongly created it in "Downgrading". But no downgrade to expect here... just unbrick.
So maybe in the hardware mod section? idk
When finished, if good results, I'll create something in the Tut's section.
 
Huzaifa said:
I have a ps3 super slim cech 4004c it is bricked it turns on for about 2 seconds then turns off
Can i use that tristate point to make it turned on
Click to expand...
Use the tristate point and if it's a firmware issue it will halt the system
When I say halt it will give a green power light but blank screen and not power off normally
It will just halt mid power up
Does that make sence

Sent from my G3121 using Tapatalk
 
I didn't had time to go further on the projet but I'm posting here the hardmod connection diagram if somebody wants to play with.
!AT YOUR OWN RISK!

You can use any raw disk editor to dump your eMMC. Flash data are the first 256MB (including dev_flash, like NANDs).

EMMC hardmod.png


Extra notes :
- I'm using 4bit connection (DAT 0 to 3), but a single bit connection should work (slowly) by only using DAT 0.
- You must inject +3v, 200mA minimum, to VCC (see the NOR tests points at the begining of that thread to locate VCC points) to supply the eMMC VDDF.

-------------------------------------------------------------------------------------

In add, here my full eMMC dump, for research purpose (if some want/can help to identify partitions addresses...) : https://www.mediafire.com/file/uzaicdbrta8utur/full_emmc_4share.rar/file

Notes:
- Do not search any idps... it will not work...
- It's byte swapped.

Please give feedback, if any.
 
Last edited:
baileyscream said:
Use the tristate point and if it's a firmware issue it will halt the system
When I say halt it will give a green power light but blank screen and not power off normally
It will just halt mid power up
Does that make sence

Sent from my G3121 using Tapatalk
Click to expand...
i superlim does that light grey screen on hdmi black on av and green light with 2 beeps when pressed iwas able to use it with only afew lags but one uninstalled a ps2 classic played game through multiman game froze unplugged and plugged again hdmi grey screen booted into safe mode display ok instead of reset system or restore file system selected update from storage media tried to update to 4.84 hfw to 4.84 ofw now no more safe mode or anything brought used av and black screen
 

Attachments

  • IMG_4076.JPG
    IMG_4076.JPG
    1.4 MB · Views: 187
  • IMG_4078.JPG
    IMG_4078.JPG
    864.1 KB · Views: 187
Fallen777 said:
i superlim does that light grey screen on hdmi black on av and green light with 2 beeps when pressed iwas able to use it with only afew lags but one uninstalled a ps2 classic played game through multiman game froze unplugged and plugged again hdmi grey screen booted into safe mode display ok instead of reset system or restore file system selected update from storage media tried to update to 4.84 hfw to 4.84 ofw now no more safe mode or anything brought used av and black screen
Click to expand...
This might be helpful if I understood your issue correctly! https://support.playstation.com/s/article/PS3-HDMI-Picture-Problems?language=en_US
 
Itroublve Hacker said:
This might be helpful if I understood your issue correctly! https://support.playstation.com/s/article/PS3-HDMI-Picture-Problems?language=en_US
Click to expand...
doesnt work for me in a day or 2 i will try to post url of my video on youtube

Fallen777 said:
doesnt work for me in a day or 2 i will try to post url of my video on youtube
Click to expand...
sorry bro dint had the time for that
it been two and half weeks since my ps3 is in coma
i assume its a software issue not an rsx problem is it
i have once tried to turn console on with fan unconnected it started giving beeps and flashing green and red light
and turned off after that i reconnected the fan and turned it fan was too loud so instantl turned it off and put it aside to cool down is there anymore damage done to motherboard because this idiotic act of mine
my cmos socket is ripped from motherborad and cmos trace is also ripped cell is still present in it and its connected from negative end to motherborad should i remove it
cmos was ripped after software halt started after applying update
i have applied hy618 silicon thermal grease on cell be and rsx is it safe
i have also applied a little uhu glue on ripped cmos connector to keep it intact with borad is it safe

hello is there anyone who can help in reviving my 12gb samsung emmc model youtube link of my video

would it be possible to obtain complete dump from a working console to decrpt and diagonose it on a develloper kit to bypass metld 2
using the ps3 xploit dumper online site
 
Last edited by a moderator:
Metldr is paired with CELL processor using a unique key (only valid for your PS3), a metldr taken from a PS3 is not going to work in a different PS3
 
Fallen777 said:
would it be possible to obtain complete dump from a working console to decrpt and diagonose it on a develloper kit to bypass metld 2
Click to expand...
sandungas said:
Metldr is paired with CELL processor using a unique key (only valid for your PS3), a metldr taken from a PS3 is not going to work in a different PS3[/QUOTE
Sounds more like syscon
what causes a GLOD
Click to expand...

But still would it be possible to desolder metldr2 if its a physical chip and put it on a programming station like a andrino chip is programed with firmware
To decode its keys its not like it wont ever be bypassed
 
Last edited by a moderator:
You must log in or register to reply here.

Similar threads

Back
Top