Platform ID: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
m (→‎Examples documented by users: This ones are confirmed by littlebalup for superslim motherboards with eMMC flash)
 
(94 intermediate revisions by 3 users not shown)
Line 1: Line 1:
== Description ==
== Description ==
Platform ID (or plat.id) is a hardware identifyer that indicates the target hardware revision
Platform ID (or plat.id / HW id) is a hardware identifyer that indicates the target hardware revision
*The [[Platform ID]] name includes the [[Chassis ID|Chassis Type]] letter. See also: [[SKU_Models_Nonretail#Prototype_model_names|Prototypes]]
*The [[Platform ID]] name includes the [[Chassis ID|Chassis Type]] letter. See also: [[SKU_Models_Nonretail#Prototype_model_names|Prototypes]]
*Dont confuse them with other motherboard identifyers in [[Flash:Individual_System_Data_-_cISD#cISD1|cISD1]] section as:
*Dont confuse the [[Platform ID]] with other motherboard identifyers located in [[Flash:Individual_System_Data_-_cISD#cISD1|cISD1]] section as:
**'''board_id''' is the serial number "printed" in the motherboard. In PS3's from euro region this same number is part of "PS3 serial" in the white sticker (e.g. SERIAL: xx-'''12345678'''-xxxxxx-CECH-xxxxX [http://www.ps3devwiki.com/wiki/File:Console-sticker-FAT-back.png]). USA and other regions does not list it
**'''board_id''' is the serial number "printed" in the motherboard. In PS3's from euro region (only) the board_id is included in the "PS3 serial" printed in a white sticker (e.g. '''[[Media:Console-sticker-FAT-back.png|27430423]]''')
**'''kiban_id''' is the barcode "printed" in the motherboard
**'''kiban_id''' is the barcode "printed" in the motherboard


== Get system info from gameOS ==
== How to get the Platform ID ==
{{boxkitty2|content=<big>'''Please report your platform ID by editing this page'''</big>}}
 
=== Apps ===
Syscon Error Log Utility inside the PS3 Advanced Toolset: https://github.com/bucanero/psl1ghtv2_ports/releases (v1.0.1 or later)
 
*How to use it:
#Plug a storage device into any USB port
#Install and boot the app... choose the Syscon Error Log function... then the app automatically quits and returns to XMB (there is no display on screen, this is normal)
#A file with the name "sm_error.log" is created on the storage drive
#Open this file in a text editor, take note of the platform id
 
=== GameOS ===
The [[Platform ID]] can be retrieved from GameOS by using [[LV2_Functions_and_Syscalls| syscall 387]] '''sys_sm_get_system_info'''
The [[Platform ID]] can be retrieved from GameOS by using [[LV2_Functions_and_Syscalls| syscall 387]] '''sys_sm_get_system_info'''
<syntaxhighlight lang="cpp">
<syntaxhighlight lang="cpp">
Line 27: Line 39:
*''0xb5ed'' is the '''Build Number''' also if spoofed to another FW
*''0xb5ed'' is the '''Build Number''' also if spoofed to another FW


== Examples documented by users ==
=== Syscon UART ===
{| class="wikitable sortable"
You can also get the <b>Platform ID</b> using the <i>hversion</i> command over the [[Syscon Firmware|Syscon]] serial interface.<br>
On Mullion models this command is only available in the internal mode, Sherwood models need to be patched in order to unlock it.
 
== Platform ID locations ==
 
=== Example from syscon firmware ===
There is a table with the Platform ID's of all the PS3 models supported by the [[Syscon Firmware]], in every syscon revision some more Platform IDs was added, this is s sample from one of the latest syscon revisions with the purpose of showing the complete list. The support of all this platform ID's is not complete, some of the oldest ones are not fully supported
 
{{boxcodelite|float=left|title=Sample from syscon [[SW3-302]] firmware v2.12.0|code=
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
 
0002A350                                43 6F 6B 31 31 00            Cok11.
0002A360  43 6F 6B 31 32 00 43 6F 6B 31 33 00 43 6F 6B 31  Cok12.Cok13.Cok1
0002A370  34 00 43 6F 6B 42 31 30 00 43 6F 6B 43 31 30 00  4.CokB10.CokC10.
0002A380  43 6F 6B 43 31 31 00 43 6F 6B 43 31 32 00 43 6F  CokC11.CokC12.Co
0002A390  6B 44 31 30 00 43 6F 6B 45 31 30 00 43 6F 6B 46  kD10.CokE10.CokF
0002A3A0  31 30 00 43 6F 6B 47 31 30 00 43 6F 6B 47 31 31  10.CokG10.CokG11
0002A3B0  00 43 6F 6B 48 31 30 00 43 6F 6B 48 31 31 00 43  .CokH10.CokH11.C
0002A3C0  6F 6B 4A 31 33 00 43 6F 6B 4B 31 30 00 43 6F 6B  okJ13.CokK10.Cok
0002A3D0  4D 32 30 00 43 6F 6B 4D 34 30 00 43 6F 6B 4E 31  M20.CokM40.CokN1
0002A3E0  30 00 43 6F 6B 4E 33 30 00 43 6F 6B 4E 31 30 00  0.CokN30.CokN10.
0002A3F0  75 6E 6B 6E 6F 77 6E 00                          unknown.
}}{{clear}}
 
But in syscon [[Sherwood]] series the Platform ID is stored at the start of the emulated EEPROM, the first 2 values located at offset 0x60000 ([[Syscon_SW_Series|SW]]) or 0xA0000 ([[Syscon_SW2_Series|SW2]]/[[Syscon_SW3_Series|SW3]]). First byte = Platform ID (hex), next 8 bytes = Platform ID (string, null terminated). Dont take this offsets of the emulated EEPROM as something strict because sherwood uses "bad block remapping" and "wear leveling" this features allows to relocate the data at different offsets (probably in blocks of length 2 bytes)
 
{{boxcodelite|float=left|title=Sample from syscon [[SW3-302]] firmware v2.12.0|code=
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
 
000A0000  B0 43 6F 6B 4D 31 30 00 00 51 60 30 FF FF FF FF  °CokM10..Q`0ÿÿÿÿ
000A0010  01 4E 00 FF FF 16 03 BC 2C FF FF FF FF FF FF FF  .N.ÿÿ..¼,ÿÿÿÿÿÿÿ
000A0020  00 02 00 00 03 C8 78 FF FF FF FF FF FF FF FF FF  .....Èxÿÿÿÿÿÿÿÿÿ
000A0030  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0040  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0050  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0060  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0070  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0080  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0090  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00A0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00B0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0100  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0110  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0120  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0130  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0140  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0150  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0160  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0170  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0180  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0190  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01A0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01B0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0200  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0210  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0220  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0230  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0240  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
 
}}{{clear}}
*In the sample above: Platform ID = 0xB0 (hex), CokM10 (string)
 
=== Example from syscon config ===
In [[Syscon Hardware|Syscon]] [[Mullion]] the Platform ID (1 byte, in hex format) is located at EEPROM offset 0x310E<br>
Since [[Syscon SW3 Series]] ([[CECH-30xx]] / [[KTE-001]] motherboard or newer) the Platform ID is also "hardcoded" at offset 0x0 of the emulated EEPROM, in both formats: first byte = Platform ID (hex), next 8 bytes = Platform ID (string, null terminated)<br>
The usual way to get the Platform ID by UART is with the command "hversion" but is locked by default (not available in syscon "external mode" access), however we can read this bytes in raw with the command "r" (available in syscon "external mode" access). See [[Syscon Firmware#Sherwood]]
 
{{keyboard|content=
> Type this in the syscon UART interface: r [offset][length]
> r 0 9
}}
 
{{boxcodelite|float=left|title=Sample from [[CECH-30xx]] / [[KTE-001]] / [[SW3-301]] firmware v2.3.0|code=
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
 
00000000  90 43 6F 6B 4B 31 30 00 00                      .CokK10..
}}{{clear}}
*In the sample above: Platform ID = 0x90 (hex), CokK10 (string)
 
=== Example from decrypted lv0 ===
The first 3 (or 4) letters of the [[Platform ID]] names are located in a table inside lv0, this is an small sample of that table, for more info see: {{talk}}
{{boxcodelite|float=left|code=
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
 
000379C0  47 6E 6F 00 00 00 00 00 43 6F 6B 00 00 00 00 00  Gno.....Cok.....
000379D0  43 79 74 32 00 00 00 00 43 79 74 33 00 00 00 00  Cyt2....Cyt3....
000379E0  53 68 72 00 00 00 00 00 43 79 74 31 00 00 00 00  Shr.....Cyt1....
}}{{clear}}
*Shr = Shreck (0.00)
*Cyt = Cytology (0.30)
*Cok = Cookie (0.30)
*Gno = Gnome (<abbr title="references can be found in the 'try_cpbusy' script inside the CP update for the DECR-1000">2.00</abbr>)
 
== Platform ID lists ==
=== Shreck Series ===
{| class="wikitable" style="line-height:100%; font-size:90%;"
|-
|-
! [[SKU Models|PS3 Model]] !! [[Motherboard Revisions|Motherboard]] !! platform ID !! Speculation !! Notes
! rowspan="2" style="width:100px;" | [[SKU Models|PS3 Model]] !! rowspan="2" style="width:100px;" | [[Motherboard Revisions|Motherboard]] !! colspan="4" | [[Platform ID]] !! rowspan="2" | Notes
|-
|-
| [[DEH-R1000]] || [[TMU-510]] || Cyt2.2 || || Cyt2.2 confirmed for DEH-R1000/TMU-510 <!--// M4j0r //-->
! style="width:50px;" | Text !! style="width:70px;" | Hex<small>([[Mullion]])</small> !! style="width:70px;" | Hex<small>([[Sherwood]])</small> !! style="width:200px;" | Type
|-
|-
| [[DEH-R1010]] || [[TMU-510]] || Cyt2.2 || || Cyt2.2 confirmed for DEH-R1010/TMU-510 <!--// M4j0r //-->
| ? || ? || Shr1.0 || 0x00000010 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[DEH-R1020]] || [[TMU-510]] || Cyt2.2 || || Cyt2.2 confirmed for DEH-R1020/TMU-510 <!--// M4j0r //-->
| ? || ? || Shr1.1 || 0x00000011 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[DEH-R1030]] || [[TMU-520]] || Cyt3.1 || || Cyt3.1 confirmed for DEH-R1030/TMU-520 <!--// M4j0r //-->
| ? || ? || Shr1.2 || 0x00000012 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[DEH-R1040]] || [[TMU-520]] || Cyt3.2 || || Cyt3.2 confirmed for DEH-R1040/TMU-520 <!--// M4j0r //-->
| ? || ? || Shr-4D || 0x00000013 || {{cellcolors|#ffaaaa}} N/A || ||  
|-
|-
| [[DECR-1000]] || [[TMU-520]] || Cyt3.2 || || Cyt3.2 confirmed for DECR-1000/TMU-520 <!--// M4j0r, Strike Venom //-->
| ? || ? || Shr1.3 || 0x00000014 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[DEH-H1001-D]] || [[COOKIE-13]] || || Cok13 ? ||  
| ? || ? || Shr-LC || 0x00000015 || {{cellcolors|#ffaaaa}} N/A || ||  
|-
|-
| [[DEH-H1000A-E]] || [[COK-001 (Prototype)]] || Cok14 || || Cok14 confirmed for DEH-H1000A-E http://pastie.org/private/jfry49hxsrbw0v6wr3crpa <!--// M4j0r, Strike Venom //-->
| ? || ? || Shr1.4 || 0x00000016 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECHAxx]] / [[CECHBxx]] || [[COK-001]] || Cok14 || || Cok14 confirmed for CECHAxx?/COK-001 <!--// Zer0Tolerance //--> http://pastie.org/private/m7ha5d7ngaaq6mpn0fnurq
| ? || ? || Shr1.5 || 0x00000017 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECHCxx]] / [[CECHExx]] || [[COK-002]] || CokB10 || || CokB10 confirmed for CECHC04/COK-002 <!--// littlebalup //-->
| style="padding:0px;" |  
|-
|-
| [[CECHGxx]] || [[SEM-001]] || CokC12 || || <!--// M4j0r, http://www.psdevwiki.com/ps3/index.php?title=Talk:Motherboard_Revisions&diff=13569&oldid=13562 //-->
| ? || ? || Shr2.0 || 0x00000020 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECHHxx]] || [[DIA-001]] || CokD10 || || CokD10 confirmed for CECHH04/DIA-001/FW-min:1.97 <!--// littlebalup //-->
| ? || ? || Shr2.1 || 0x00000021 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECHJxx]] / [[CECHKxx]] || [[DIA-002]] || CokE10 || || DECHJ00A <!--// M4j0r //-->
| ? || ? || Shr2.2 || 0x00000022 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECHLxx]] / [[CECHMxx]] / [[CECHPxx]] / [[CECHQxx]] || [[VER-001]] || CokF10 || || CokF10 confirmed for CECHL00/VER-001 <!--// Ada L0ve Lace, M4j0r //--> and CECHP04/VER-001 <!--// littlebalup //-->
| ? || ? || Shr2.3 || 0x00000023 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[DECR-1400]] || [[DEB-001]] || Deb01 || || Deb01 confirmed for DECR-1400/DEB-001 <!--// Mathieulh //-->
| ? || ? || Shr2.4 || 0x00000024 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECH-20xx]] || [[DYN-001]] || CokG11 ||  || CokG11 confirmed for CECH-20xx/DYN-001 http://pastie.org/5394300 <!--// eussNL, littlebalup //-->
| ? || ? || Shr2.5 || 0x00000025 || {{cellcolors|#ffaaaa}} N/A ||  ||  
|-
|-
| [[CECH-21xx]] || [[SUR-001]] || CokH11 || || CECH-2104A (date code 0B). FW-min 3.20
| ? || ? || Shr2.6 || 0x00000026 || {{cellcolors|#ffaaaa}} N/A || ||  
|-
|-
| [[CECH-25xx]] || [[JTP-001]] || CokJ13 || || CokJ13 confirmed for CECH-2504B/JTP-001/datecode:0C <!--// sandungas //-->
| style="padding:0px;" |  
|-
|-
| [[CECH-25xx]] || [[JSD-001]] || CokJ20 || || <!--// nikitis //-->CECH-2501A FW-min 3.50 http://pastie.org/8086813<br /><!--// confirmed by MikeM64 //-->CECH-2501B FW-min 3.40
| ? || ? || Shr3.0 || 0x00000030 || {{cellcolors|#ffaaaa}} N/A || ||
|-
|-
| [[CECH-30xx]] || [[KTE-001]] || CokK10 || || DECH-3000A <!--// M4j0r //-->
| ? || ? || Shr3.1 || 0x00000031 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
|-
| [[CECH-40xx]] ? || [[MSX-001]] || || CokL20 ? ||  
| ? || ? || Shr3.2 || 0x00000032 || {{cellcolors|#ffaaaa}} N/A || ||  
|-
|-
| [[CECH-40xx]]A (eMMC) || [[MPX-001]] || CokM30 || || CokM30 confirmed for CECH-4004A/MPX-001(EMMC)/datecode:2D/FW-min:4.25 <!--// littlebalup //-->
| ? || ? || Shr3.2-4 || 0x00000033 || {{cellcolors|#ffaaaa}} N/A || ||  
|-
|-
| [[CECH-42xx]] ? || [[NPX-001]] || || CokN.. ? ||  
| ? || ? || Shr3.3 || 0x00000034 || {{cellcolors|#ffaaaa}} N/A || ||  
|-
|-
| [[CECH-42xx]]A (eMMC) || [[PPX-001]] || CokP40 || || CokP40 confirmed for CECH-4204A/PPX-001(EMMC)/datecode:3C/FW-min:4.50 <!--// littlebalup //-->
| style="padding:0px;" |  
|-
|-
| [[CECH-42xx]] ? || [[PQX-001]] ||  || CokQ.. ? ||  
| ? || ? || Shr4.0 || 0x00000040 || {{cellcolors|#ffaaaa}} N/A ||  ||
|}
 
=== Cytology Series ===
{| class="wikitable" style="line-height:100%; font-size:90%;"
|-
! rowspan="2" style="width:100px;" | [[SKU Models|PS3 Model]] !! rowspan="2" style="width:100px;" | [[Motherboard Revisions|Motherboard]] !! colspan="4" | [[Platform ID]] !! rowspan="2" | Notes
|-
! style="width:50px;" | Text !! style="width:70px;" | Hex<small>([[Mullion]])</small> !! style="width:70px;" | Hex<small>([[Sherwood]])</small> !! style="width:200px;" | Type
|-
| ? || ? || Cyt1.0 || 0x20000010 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
| ? || ? || Cyt1.1 || 0x20000011 || {{cellcolors|#ffaaaa}} N/A ||  ||  
|-
| ? || ? || Cyt1.2 || 0x20000012 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
| style="padding:0px;" |
|-
| ? || ? || Cyt2.0 || 0x20000020 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
| ? || ? || Cyt2.1 || 0x20000021 || {{cellcolors|#ffaaaa}} N/A ||  ||  
|-
|-
| [[CECH-43xx]] || [[RTX-001]] || CokR30 ||  || CokR30 confirmed for CECH-4301A/FW-min:4.60
| [[DEH-R1000]]<br>[[DEH-R1010]]<br>[[DEH-R1020]] || [[TMU-510]] || Cyt2.2 || 0x20000022 || {{cellcolors|#ffaaaa}} N/A ||  || <span style="background:#ccccff">Cyt2.2 confirmed</span> for DEH-R1000/TMU-510<!--// M4j0r //-->, DEH-R1010/TMU-510<!--// M4j0r //-->, DEH-R1020/TMU-510<!--// M4j0r //-->
|-
|-
| [[CECH-43xx]] || [[REX-00x|REX-001]] ||  || cokX.. ? ||  
| style="padding:0px;" |  
|-
|-
| ? || ? || Cyt3.0 || 0x20000030 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
| [[DEH-R1030]] || [[TMU-520]] || Cyt3.1 || 0x20000031 || {{cellcolors|#ffaaaa}} N/A ||  || <span style="background:#ccccff">Cyt3.1 confirmed</span> for DEH-R1030/TMU-520<!--// M4j0r //-->
|-
| [[DEH-R1040]]<br>[[DECR-1000]] || [[TMU-520]] || Cyt3.2 || 0x20000032 || {{cellcolors|#ffaaaa}} N/A ||  || <span style="background:#ccccff">Cyt3.2 confirmed</span> for DEH-R1040/TMU-520<!--// M4j0r //-->, DECR-1000/TMU-520<!--// M4j0r, Strike Venom //-->
|-
| ? || ? || Cyt3.3 || 0x20000033 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
| ? || ? || Cyt3.4 || 0x20000034 || {{cellcolors|#ffaaaa}} N/A ||  ||
|}
|}


== Help Request ==
=== Cookie Series ===
Dump platform info (coded by "3141card" as a standalone function for documenting purposes)
{| class="wikitable" style="line-height:100%; font-size:90%;"
|-
! rowspan="2" style="width:100px;" | [[SKU Models|PS3 Model]] !! rowspan="2" style="width:100px;" | [[Motherboard Revisions|Motherboard]] !! colspan="4" | [[Platform ID]] !! rowspan="2" | Notes
|-
! style="width:50px;" | Text !! style="width:70px;" | Hex<small>([[Mullion]])</small> !! style="width:70px;" | Hex<small>([[Sherwood]])</small> !! style="width:200px;" | Type
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok01 || 0x10000010 || {{cellcolors|#ffaaaa}} N/A ||  ||
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok02 || 0x10000020 || {{cellcolors|#ffaaaa}} N/A ||  ||
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok03 || 0x10000030 || {{cellcolors|#ffaaaa}} N/A ||  ||
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok05 || 0x10000050 || {{cellcolors|#ffaaaa}} N/A ||  ||
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok08 || 0x10000080 || {{cellcolors|#ffaaaa}} N/A ||  ||
|-
| style="padding:0px;" |
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok11 || 0x100000B0 || 0x01 ||  || Undocumented PS3 Model DEH-H1001-B with suffix '''B''' (ascii) = 0x'''B''' (hex) = '''11''' (dec) = Cok'''11''', Motherboard '''COOKIE-11''' ?
|- {{cellcolors|#e7e7e7}}
| ? || ? || Cok12 || 0x100000C0 || 0x02 ||  || Undocumented PS3 Model DEH-H1001-C with suffix '''C''' (ascii) = 0x'''C''' (hex) = '''12''' (dec) = Cok'''12''', Motherboard '''COOKIE-12''' ?
|- {{cellcolors|#e7e7e7}}
| [[DEH-H1001-D]] || [[COOKIE-13]] || ? || ? || ? ||  ||  Cok13 ? / 0x100000D0 ? / 0x03 ?
|- {{cellcolors|#e7e7e7}}
| [[DEH-H1000A-E]] || [[COK-001 (Prototype)|COK-001<small>(Proto)</small>]] || Cok14 || 0x100000E0 || 0x04 || || <span style="background:#ccccff">Cok14 confirmed</span> for DEH-H1000A-E<!--// M4j0r, Strike Venom //-->
|-
| style="padding:0px;" |
|-
| [[CECHAxx]]<br>[[CECHBxx]] || [[COK-001]] || Cok14 || 0x100000E0 || 0x04 || || <span style="background:#ccccff">Cok14 confirmed</span> for CECHAxx?/COK-001 <!--// Zer0Tolerance //-->
|-
| [[CECHCxx]]<br>[[CECHExx]] || [[COK-002]] || CokB10 || 0x10000100 || 0x10 || || <span style="background:#ccccff">CokB10 confirmed</span> for CECHC04/COK-002 <!--// littlebalup //-->
|- {{cellcolors|#e7e7e7}}
| ? || ? || CokC10 || 0x10000200 || 0x20 ||  || <strike>[[GECR-1100]] COK-002 ?, [[GECR-1500]] VER-001 ?, [[GECR-2500]] JTP-001/JSD-001 ?</strike>
|- {{cellcolors|#e7e7e7}} {{cellcolors|#e7e7e7}}
| ? || ? || CokC11 || 0x10000201 || 0x21 ||  ||
|-
| [[CECHGxx]] || [[SEM-001]] || CokC12 || 0x10000202 || 0x22 ||  || <span style="background:#ccccff">CokC12 confirmed</span> for CECHGxx <!--// M4j0r //-->
|-
| [[CECHHxx]] || [[DIA-001]] || CokD10 || 0x10000300 || 0x30 ||  || <span style="background:#ccccff">CokD10 confirmed</span> for CECHH04/DIA-001/FW-min:1.97 <!--// littlebalup //-->
|-
| [[CECHJxx]]<br>[[CECHKxx]] || [[DIA-002]] || CokE10 || 0x10000301 || 0x40 ||  || <span style="background:#ccccff">CokE10 confirmed</span> for DECHJ00A <!--// M4j0r //-->
|-
| [[DECR-1400]] || [[DEB-001]] || Deb01 || 0x10000301 || 0x40 || Hardcoded || <span style="background:#ccccff">Deb01 confirmed</span> for DECR-1400/DEB-001 <!--// Mathieulh //-->
|-
| style="padding:0px;" |
|-
| [[CECHLxx]]<br>[[CECHMxx]]<br>[[CECHPxx]]<br>[[CECHQxx]] || [[VER-001]] || CokF10 || {{cellcolors|#ffaaaa}} N/A || 0x50 || || <span style="background:#ccccff">CokF10 confirmed</span> for CECHL00/VER-001<!--// Ada L0ve Lace, M4j0r //--> and CECHP04/VER-001 <!--// littlebalup //-->
|- {{cellcolors|#e7e7e7}}
| ? || ? || CokG10 || {{cellcolors|#ffaaaa}} N/A || 0x60 ||  ||
|-
| [[CECH-20xx]]'''A/B''' || [[DYN-001]] || CokG11 || {{cellcolors|#ffaaaa}} N/A || 0x61 ||  || <span style="background:#ccccff">CokG11 confirmed</span> for CECH-20xx/DYN-001<!--// eussNL, littlebalup //-->
|- {{cellcolors|#e7e7e7}}
| ? || ? || CokH10 || {{cellcolors|#ffaaaa}} N/A || 0x70 ||  || PS3 model CBEH-H2001 with motherboard [[SUR-00x#SURTEES-03|SURTEES-03]] ?
|-
| [[CECH-21xx]]'''A/B''' || [[SUR-001]] || CokH11 || {{cellcolors|#ffaaaa}} N/A || 0x71 ||  || <span style="background:#ccccff">CokH11 confirmed</span> for CECH-2104A (date code 0B). FW-min 3.20
|- {{cellcolors|#e7e7e7}}
| ? || ? || CokJ12 || {{cellcolors|#ffaaaa}} N/A || 0x80 ||  ||
|-
| [[CECH-25xx]]'''A/B''' || [[JTP-001]] || CokJ13 || {{cellcolors|#ffaaaa}} N/A || 0x80 ||  || <span style="background:#ccccff">CokJ13 confirmed</span> for CECH-2504B/JTP-001/datecode:0C <!--// sandungas //-->
|-
| [[CECH-25xx]]'''A/B''' || [[JSD-001]] || CokJ20 || {{cellcolors|#ffaaaa}} N/A || 0x80 || Hardcoded || <span style="background:#ccccff">CokJ20 confirmed</span> for CECH-2501A FW-min 3.50<!--// nikitis //--> and CECH-2501B FW-min 3.40<!--// MikeM64 //-->
|-
| [[CECH-30xx]]'''A/B''' || [[KTE-001]] || CokK10 || {{cellcolors|#ffaaaa}} N/A || 0x90 ||  || <span style="background:#ccccff">CokK10 confirmed</span> for DECH-3000A <!--// M4j0r //-->
|-
| style="padding:0px;" |
|-
| [[CECH-40xx]]'''B/C''' || [[MPX-001]]<small>(NOR)</small> || CokM10 || {{cellcolors|#ffaaaa}} N/A || 0xB0 || hardcoded || <span style="background:#ccccff">CokM10 confirmed</span> for MPX-001(NOR) <!--// ElGris //-->
|-
| [[CECH-40xx]]'''B/C''' || [[MSX-001]]<small>(NOR)</small> || CokM20 || {{cellcolors|#ffaaaa}} N/A || 0xB0 ||  || <span style="background:#ccccff">CokM20 confirmed</span> for MSX-001(NOR) <!--// vyktormvmpay25 by UART //-->
|-
| [[CECH-40xx]]'''A''' || [[MPX-001]]<small>(eMMC)</small> || CokM30 || {{cellcolors|#ffaaaa}} N/A || 0xB8 || hardcoded || <span style="background:#ccccff">CokM30 confirmed</span> for CECH-4004A/MPX-001(EMMC)/datecode:2D/FW-min:4.25 <!--// littlebalup, vyktormvmpay25 by UART //-->
|-
| ? || [[MSX-001]]<small>(eMMC) ?</small> || ? || {{cellcolors|#ffaaaa}} N/A || ? ||  ||  CokM40 ? / 0xB8 ?
|-
| style="padding:0px;" |
|-
| [[CECH-40xx]]'''B/C''' || [[NPX-001]]<small>(NOR)</small> || CokN10 || {{cellcolors|#ffaaaa}} N/A || 0xA0 ||  || <span style="background:#ccccff">CokN10 confirmed</span> for NPX-001(NOR) <!--// vyktormvmpay25 by UART //-->
|- {{cellcolors|#e7e7e7}}
| ? || ? || CokN20 || {{cellcolors|#ffaaaa}} N/A || 0xA0 ||  ||
|-
| ? || [[NPX-001]]<small>(eMMC)</small> || ? || {{cellcolors|#ffaaaa}} N/A || ? ||  || CokN30 ? / 0xA8 ?
|- {{cellcolors|#e7e7e7}}
| ? || ? || CokN40 || {{cellcolors|#ffaaaa}} N/A || 0xA8 ||  ||
|-
| style="padding:0px;" |
|-
| [[CECH-42xx]]'''B/C''' || [[PQX-001]]<small>(NOR)</small> || CokP10 || {{cellcolors|#ffaaaa}} N/A || 0xC0 || hardcoded || <span style="background:#ccccff">CokP10 confirmed</span> for PQX-001(NOR) <!--// vyktormvmpay25 by UART //-->
|-
| [[CECH-42xx]]'''B/C''' || [[PPX-001]]<small>(NOR)</small> || CokP20 || {{cellcolors|#ffaaaa}} N/A || 0xC0 || hardcoded || <span style="background:#ccccff">CokP20 confirmed</span> for PPX-001(NOR) <!--// ElGris by UART //-->
|-
| [[CECH-42xx]]'''A''' || [[PQX-001]]<small>(eMMC)</small> || CokP30 || {{cellcolors|#ffaaaa}} N/A || 0xC8 || hardcoded || <span style="background:#ccccff">CokP30 confirmed</span> for PQX-001(eMMC) <!--// Fallen77 by UART //-->
|-
| [[CECH-42xx]]'''A''' || [[PPX-001]]<small>(eMMC)</small> || CokP40 || {{cellcolors|#ffaaaa}} N/A || 0xC8 || hardcoded - needs to be <abbr title="From a syscon dump>confirmed</abbr> || <span style="background:#ccccff">CokP40 confirmed</span> for CECH-4204A/PPX-001(EMMC)/datecode:3C/FW-min:4.50 <!--// littlebalup //-->
|-
| style="padding:0px;" |
|-
| [[CECH-43xx]]'''B/C''' || [[RTX-001]]<small>(NOR)</small> || CokR10 || {{cellcolors|#ffaaaa}} N/A || 0xD0 || hardcoded || <span style="background:#ccccff">CokR10 confirmed</span> for RTX-001(NOR) <!--// ElGris by UART //-->
|-
| [[CECH-43xx]]'''B/C''' || [[REX-001]]<small>(NOR)</small> || CokR20 || {{cellcolors|#ffaaaa}} N/A || 0xD0 || hardcoded - speculation || <span style="background:#ccccff">CokR20 confirmed</span> for REX-001(NOR) <!--// ElGris //-->
|-
| [[CECH-43xx]]'''A''' || [[RTX-001]]<small>(eMMC) ?</small> || CokR30 || {{cellcolors|#ffaaaa}} N/A || 0xD8 || hardcoded - needs to be <abbr title="From a syscon dump>confirmed</abbr> || <span style="background:#ccccff">CokR30 confirmed</span> for CECH-4301A/FW-min:4.60 (<span style="background:#ffaaaa">motherboard model not reported</span>)
|-
| [[CECH-43xx]]'''A''' || [[REX-001]]<small>(eMMC)</small> || cokR40 || {{cellcolors|#ffaaaa}} N/A || 0xD8 || hardcoded || <span style="background:#ccccff">CokR40 confirmed</span> for REX-001(eMMC) <!--// vyktormvmpay25 by UART //-->
|}


http://www.mediafire.com/?xdqi5j27w3tg0c1
=== Gnome Series ===
 
Probably the [https://en.wikipedia.org/wiki/Zego Zego BCU-100]
*How to use:
#Plug a storage device in usb0 (USB port closer to the Bluray drive)
#Install and boot the app... then the PS3 beeps 3 times... then the app automatically quits and returns to XMB (there is no display on screen, this is normal)
#A file with the name "platform_info.bin" is created in usb0
#Open this file in a hex editor, take note of the '''Cok***''' (can be readed in ASCII in the hex editor)
 
Please report back your values by editing this page
 
==Example from decrypted lv0==
The first 3 (or 4) letters of the [[Platform ID]] names are located in a table inside lv0, this is an small sample of that table, for more info see: {{talk}}
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
000379C0  47 6E 6F 00 00 00 00 00 43 6F 6B 00 00 00 00 00  Gno.....Cok.....
000379D0  43 79 74 32 00 00 00 00 43 79 74 33 00 00 00 00  Cyt2....Cyt3....
000379E0  53 68 72 00 00 00 00 00 43 79 74 31 00 00 00 00  Shr.....Cyt1....
   
Shr = Shreck (0.00)
Cyt = Cytology (0.30)
Cok = Cookie (0.30)
Gno = Gnome. Probably the Zego BCU-100, references can be found in the 'try_cpbusy' script inside the CP update for the DECR-1000 (2.00)


{{Development}}
{{Development}}
<noinclude>[[Category:Main]]</noinclude>
<noinclude>[[Category:Main]]</noinclude>

Latest revision as of 06:38, 18 July 2022

Description[edit | edit source]

Platform ID (or plat.id / HW id) is a hardware identifyer that indicates the target hardware revision

  • The Platform ID name includes the Chassis Type letter. See also: Prototypes
  • Dont confuse the Platform ID with other motherboard identifyers located in cISD1 section as:
    • board_id is the serial number "printed" in the motherboard. In PS3's from euro region (only) the board_id is included in the "PS3 serial" printed in a white sticker (e.g. 27430423)
    • kiban_id is the barcode "printed" in the motherboard

How to get the Platform ID[edit | edit source]

Do it :'(
Do it :'(
Please report your platform ID by editing this page

Apps[edit | edit source]

Syscon Error Log Utility inside the PS3 Advanced Toolset: https://github.com/bucanero/psl1ghtv2_ports/releases (v1.0.1 or later)

  • How to use it:
  1. Plug a storage device into any USB port
  2. Install and boot the app... choose the Syscon Error Log function... then the app automatically quits and returns to XMB (there is no display on screen, this is normal)
  3. A file with the name "sm_error.log" is created on the storage drive
  4. Open this file in a text editor, take note of the platform id

GameOS[edit | edit source]

The Platform ID can be retrieved from GameOS by using syscall 387 sys_sm_get_system_info

#include <ppu-lv2.h>
s32 lv2_get_platform_info(uint8_t platform_info[0x18]){
	lv2syscall1(387, (uint64_t) info);
	return_to_user_prog(s32);
	}

This is what you could get:

0305500000000040436f6b42313000000000b5ed00100000

Where

  • 0x030550 is the PS3 firmware version, also if spoofed to another FW
  • 0x40436f6b423130 converted to ascii is @CokB10 and that is the Platform ID
    • Since COK-002 motherboard the fourth letter of the Platform ID indicates the chassis, e.g. "CokB10" is Chassis Type = B
  • 0xb5ed is the Build Number also if spoofed to another FW

Syscon UART[edit | edit source]

You can also get the Platform ID using the hversion command over the Syscon serial interface.
On Mullion models this command is only available in the internal mode, Sherwood models need to be patched in order to unlock it.

Platform ID locations[edit | edit source]

Example from syscon firmware[edit | edit source]

There is a table with the Platform ID's of all the PS3 models supported by the Syscon Firmware, in every syscon revision some more Platform IDs was added, this is s sample from one of the latest syscon revisions with the purpose of showing the complete list. The support of all this platform ID's is not complete, some of the oldest ones are not fully supported

Sample from syscon SW3-302 firmware v2.12.0
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

0002A350                                43 6F 6B 31 31 00            Cok11.
0002A360  43 6F 6B 31 32 00 43 6F 6B 31 33 00 43 6F 6B 31  Cok12.Cok13.Cok1
0002A370  34 00 43 6F 6B 42 31 30 00 43 6F 6B 43 31 30 00  4.CokB10.CokC10.
0002A380  43 6F 6B 43 31 31 00 43 6F 6B 43 31 32 00 43 6F  CokC11.CokC12.Co
0002A390  6B 44 31 30 00 43 6F 6B 45 31 30 00 43 6F 6B 46  kD10.CokE10.CokF
0002A3A0  31 30 00 43 6F 6B 47 31 30 00 43 6F 6B 47 31 31  10.CokG10.CokG11
0002A3B0  00 43 6F 6B 48 31 30 00 43 6F 6B 48 31 31 00 43  .CokH10.CokH11.C
0002A3C0  6F 6B 4A 31 33 00 43 6F 6B 4B 31 30 00 43 6F 6B  okJ13.CokK10.Cok
0002A3D0  4D 32 30 00 43 6F 6B 4D 34 30 00 43 6F 6B 4E 31  M20.CokM40.CokN1
0002A3E0  30 00 43 6F 6B 4E 33 30 00 43 6F 6B 4E 31 30 00  0.CokN30.CokN10.
0002A3F0  75 6E 6B 6E 6F 77 6E 00                          unknown.

But in syscon Sherwood series the Platform ID is stored at the start of the emulated EEPROM, the first 2 values located at offset 0x60000 (SW) or 0xA0000 (SW2/SW3). First byte = Platform ID (hex), next 8 bytes = Platform ID (string, null terminated). Dont take this offsets of the emulated EEPROM as something strict because sherwood uses "bad block remapping" and "wear leveling" this features allows to relocate the data at different offsets (probably in blocks of length 2 bytes)

Sample from syscon SW3-302 firmware v2.12.0
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000A0000  B0 43 6F 6B 4D 31 30 00 00 51 60 30 FF FF FF FF  °CokM10..Q`0ÿÿÿÿ
000A0010  01 4E 00 FF FF 16 03 BC 2C FF FF FF FF FF FF FF  .N.ÿÿ..¼,ÿÿÿÿÿÿÿ
000A0020  00 02 00 00 03 C8 78 FF FF FF FF FF FF FF FF FF  .....Èxÿÿÿÿÿÿÿÿÿ
000A0030  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0040  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0050  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0060  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0070  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0080  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0090  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00A0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00B0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A00F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0100  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0110  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0120  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0130  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0140  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0150  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0160  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0170  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0180  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0190  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01A0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01B0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01D0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A01F0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0200  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0210  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0220  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0230  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000A0240  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
  • In the sample above: Platform ID = 0xB0 (hex), CokM10 (string)

Example from syscon config[edit | edit source]

In Syscon Mullion the Platform ID (1 byte, in hex format) is located at EEPROM offset 0x310E
Since Syscon SW3 Series (CECH-30xx / KTE-001 motherboard or newer) the Platform ID is also "hardcoded" at offset 0x0 of the emulated EEPROM, in both formats: first byte = Platform ID (hex), next 8 bytes = Platform ID (string, null terminated)
The usual way to get the Platform ID by UART is with the command "hversion" but is locked by default (not available in syscon "external mode" access), however we can read this bytes in raw with the command "r" (available in syscon "external mode" access). See Syscon Firmware#Sherwood

Type This
> Type this in the syscon UART interface: r [offset][length]
> r 0 9
Sample from CECH-30xx / KTE-001 / SW3-301 firmware v2.3.0
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  90 43 6F 6B 4B 31 30 00 00                       .CokK10..
  • In the sample above: Platform ID = 0x90 (hex), CokK10 (string)

Example from decrypted lv0[edit | edit source]

The first 3 (or 4) letters of the Platform ID names are located in a table inside lv0, this is an small sample of that table, for more info see: Discussion

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000379C0  47 6E 6F 00 00 00 00 00 43 6F 6B 00 00 00 00 00  Gno.....Cok.....
000379D0  43 79 74 32 00 00 00 00 43 79 74 33 00 00 00 00  Cyt2....Cyt3....
000379E0  53 68 72 00 00 00 00 00 43 79 74 31 00 00 00 00  Shr.....Cyt1....
  • Shr = Shreck (0.00)
  • Cyt = Cytology (0.30)
  • Cok = Cookie (0.30)
  • Gno = Gnome (2.00)

Platform ID lists[edit | edit source]

Shreck Series[edit | edit source]

PS3 Model Motherboard Platform ID Notes
Text Hex(Mullion) Hex(Sherwood) Type
? ? Shr1.0 0x00000010 N/A
? ? Shr1.1 0x00000011 N/A
? ? Shr1.2 0x00000012 N/A
? ? Shr-4D 0x00000013 N/A
? ? Shr1.3 0x00000014 N/A
? ? Shr-LC 0x00000015 N/A
? ? Shr1.4 0x00000016 N/A
? ? Shr1.5 0x00000017 N/A
? ? Shr2.0 0x00000020 N/A
? ? Shr2.1 0x00000021 N/A
? ? Shr2.2 0x00000022 N/A
? ? Shr2.3 0x00000023 N/A
? ? Shr2.4 0x00000024 N/A
? ? Shr2.5 0x00000025 N/A
? ? Shr2.6 0x00000026 N/A
? ? Shr3.0 0x00000030 N/A
? ? Shr3.1 0x00000031 N/A
? ? Shr3.2 0x00000032 N/A
? ? Shr3.2-4 0x00000033 N/A
? ? Shr3.3 0x00000034 N/A
? ? Shr4.0 0x00000040 N/A

Cytology Series[edit | edit source]

PS3 Model Motherboard Platform ID Notes
Text Hex(Mullion) Hex(Sherwood) Type
? ? Cyt1.0 0x20000010 N/A
? ? Cyt1.1 0x20000011 N/A
? ? Cyt1.2 0x20000012 N/A
? ? Cyt2.0 0x20000020 N/A
? ? Cyt2.1 0x20000021 N/A
DEH-R1000
DEH-R1010
DEH-R1020
TMU-510 Cyt2.2 0x20000022 N/A Cyt2.2 confirmed for DEH-R1000/TMU-510, DEH-R1010/TMU-510, DEH-R1020/TMU-510
? ? Cyt3.0 0x20000030 N/A
DEH-R1030 TMU-520 Cyt3.1 0x20000031 N/A Cyt3.1 confirmed for DEH-R1030/TMU-520
DEH-R1040
DECR-1000
TMU-520 Cyt3.2 0x20000032 N/A Cyt3.2 confirmed for DEH-R1040/TMU-520, DECR-1000/TMU-520
? ? Cyt3.3 0x20000033 N/A
? ? Cyt3.4 0x20000034 N/A

Cookie Series[edit | edit source]

PS3 Model Motherboard Platform ID Notes
Text Hex(Mullion) Hex(Sherwood) Type
? ? Cok01 0x10000010 N/A
? ? Cok02 0x10000020 N/A
? ? Cok03 0x10000030 N/A
? ? Cok05 0x10000050 N/A
? ? Cok08 0x10000080 N/A
? ? Cok11 0x100000B0 0x01 Undocumented PS3 Model DEH-H1001-B with suffix B (ascii) = 0xB (hex) = 11 (dec) = Cok11, Motherboard COOKIE-11 ?
? ? Cok12 0x100000C0 0x02 Undocumented PS3 Model DEH-H1001-C with suffix C (ascii) = 0xC (hex) = 12 (dec) = Cok12, Motherboard COOKIE-12 ?
DEH-H1001-D COOKIE-13 ? ? ? Cok13 ? / 0x100000D0 ? / 0x03 ?
DEH-H1000A-E COK-001(Proto) Cok14 0x100000E0 0x04 Cok14 confirmed for DEH-H1000A-E
CECHAxx
CECHBxx
COK-001 Cok14 0x100000E0 0x04 Cok14 confirmed for CECHAxx?/COK-001
CECHCxx
CECHExx
COK-002 CokB10 0x10000100 0x10 CokB10 confirmed for CECHC04/COK-002
? ? CokC10 0x10000200 0x20 GECR-1100 COK-002 ?, GECR-1500 VER-001 ?, GECR-2500 JTP-001/JSD-001 ?
? ? CokC11 0x10000201 0x21
CECHGxx SEM-001 CokC12 0x10000202 0x22 CokC12 confirmed for CECHGxx
CECHHxx DIA-001 CokD10 0x10000300 0x30 CokD10 confirmed for CECHH04/DIA-001/FW-min:1.97
CECHJxx
CECHKxx
DIA-002 CokE10 0x10000301 0x40 CokE10 confirmed for DECHJ00A
DECR-1400 DEB-001 Deb01 0x10000301 0x40 Hardcoded Deb01 confirmed for DECR-1400/DEB-001
CECHLxx
CECHMxx
CECHPxx
CECHQxx
VER-001 CokF10 N/A 0x50 CokF10 confirmed for CECHL00/VER-001 and CECHP04/VER-001
? ? CokG10 N/A 0x60
CECH-20xxA/B DYN-001 CokG11 N/A 0x61 CokG11 confirmed for CECH-20xx/DYN-001
? ? CokH10 N/A 0x70 PS3 model CBEH-H2001 with motherboard SURTEES-03 ?
CECH-21xxA/B SUR-001 CokH11 N/A 0x71 CokH11 confirmed for CECH-2104A (date code 0B). FW-min 3.20
? ? CokJ12 N/A 0x80
CECH-25xxA/B JTP-001 CokJ13 N/A 0x80 CokJ13 confirmed for CECH-2504B/JTP-001/datecode:0C
CECH-25xxA/B JSD-001 CokJ20 N/A 0x80 Hardcoded CokJ20 confirmed for CECH-2501A FW-min 3.50 and CECH-2501B FW-min 3.40
CECH-30xxA/B KTE-001 CokK10 N/A 0x90 CokK10 confirmed for DECH-3000A
CECH-40xxB/C MPX-001(NOR) CokM10 N/A 0xB0 hardcoded CokM10 confirmed for MPX-001(NOR)
CECH-40xxB/C MSX-001(NOR) CokM20 N/A 0xB0 CokM20 confirmed for MSX-001(NOR)
CECH-40xxA MPX-001(eMMC) CokM30 N/A 0xB8 hardcoded CokM30 confirmed for CECH-4004A/MPX-001(EMMC)/datecode:2D/FW-min:4.25
? MSX-001(eMMC) ? ? N/A ? CokM40 ? / 0xB8 ?
CECH-40xxB/C NPX-001(NOR) CokN10 N/A 0xA0 CokN10 confirmed for NPX-001(NOR)
? ? CokN20 N/A 0xA0
? NPX-001(eMMC) ? N/A ? CokN30 ? / 0xA8 ?
? ? CokN40 N/A 0xA8
CECH-42xxB/C PQX-001(NOR) CokP10 N/A 0xC0 hardcoded CokP10 confirmed for PQX-001(NOR)
CECH-42xxB/C PPX-001(NOR) CokP20 N/A 0xC0 hardcoded CokP20 confirmed for PPX-001(NOR)
CECH-42xxA PQX-001(eMMC) CokP30 N/A 0xC8 hardcoded CokP30 confirmed for PQX-001(eMMC)
CECH-42xxA PPX-001(eMMC) CokP40 N/A 0xC8 hardcoded - needs to be confirmed CokP40 confirmed for CECH-4204A/PPX-001(EMMC)/datecode:3C/FW-min:4.50
CECH-43xxB/C RTX-001(NOR) CokR10 N/A 0xD0 hardcoded CokR10 confirmed for RTX-001(NOR)
CECH-43xxB/C REX-001(NOR) CokR20 N/A 0xD0 hardcoded - speculation CokR20 confirmed for REX-001(NOR)
CECH-43xxA RTX-001(eMMC) ? CokR30 N/A 0xD8 hardcoded - needs to be confirmed CokR30 confirmed for CECH-4301A/FW-min:4.60 (motherboard model not reported)
CECH-43xxA REX-001(eMMC) cokR40 N/A 0xD8 hardcoded CokR40 confirmed for REX-001(eMMC)

Gnome Series[edit | edit source]

Probably the Zego BCU-100