Talk:Flash-Main

proposal to put on Flash-Main

reference files:

• Console C: PS4 NOR Dump 1.06 (without MAC Adress & Console-ID) & PS4 NOR Dump 1.61 (without MAC Adress & Console-ID)
• Other (not documented) :
  • PS4 TEST KIT NOR Dump 1.010.031 and 1.500.101 (without MAC Adress & Console-ID)
  • MYDumps.rar (CUH-1004A) - Reidenschi)

	Console C (retail)		Other (not documented) (nonretail)
Region	CUH-1004A	CUH-1004A	DUH-T1000AA
System Firmware	1.06	1.610.000	1.010.031	1.500.101
Statistics:	00´s FF´s Rest 2.63917 % 11.8333 % < 0.376 %	00´s FF´s Rest 2.64108 % 11.8317 % < 0.377 %	00´s FF´s Rest 2.27889 % 23.4341 % < 0.3316 %	00´s FF´s Rest 2.65852 % 13.4016 % < 0.37 %
Entropy:	7.52796 (94.0995%)	7.52799 (94.0999%)	6.86775 (85.8469%)	7.4452 (93.065%)
Redundancy:	5.90047%	5.90007%	14.1531%	6.93503%
A. Mean:	131072
StdDev:	245712	245685	486941	278255

Strings: Flash-Main/strings

discussion

1) are the Statistics: / Entropy: / Redundancy: / A. Mean: / StdDev: of those listed recalculated and checked? Euss (talk) 00:01, 20 September 2014 (EDT)

2) there seem to be a naming conflict "A", "B", "C" as the "C" originally mentioned was Retail, not nonretail and only 1 retail console was shared as download (cfwprophet's) while SKU_Models_NonretailDUH-T1000AA was neither A/B/C/whatever. Euss (talk) 00:06, 20 September 2014 (EDT)

Labelname	A		B			C		T
Type	CUH-1004A (retail)		CUH-1004A (retail)			CUH-1004A (retail)		DUH-T1000AA (nonretail)
System Firmware	1.05	1.510.000	1.01	1.05	1.510.000	1.06	1.610.000	1.010.031	1.500.101
Dump	na	na	na	na	na	[1]	[2]	[3]
SHA1	08CB6EC416768DD4B3990F477438C4DEC19FAFC0 (noncensored)	A0604B241A7A9AA62921620F51E24DE0C2D7EFC6 (noncensored)	712D50D69CF470E319F544B32A901CD8DFC42FE8 (noncensored)	E5028E34F1879B6B9924D1F91ABF21287CACD9DD	824531492194ABD87AA74B4F5064111FAD67D570	2F4B0A62C46AFB3268F420B703DDD3B326989446 93C6CBAD9BF046471794C37E1AD45A6F632A26F6 (noncensored)	BF59E348B19947BFD2F1A43F973C2750099E7FE4	AA51480B63D3DC39B8EF3D2915844304553C8C98	52A9B8F1A6A90C48A516D26A262B3EA28CC43214
Statistics:	00: 2.62% (878086) FF: 11.83% (3971044) rest: =<0.38%	00: 2.66% (893232) FF: 11.83% (3970942) rest: =<0.38%	00: 2.28% (765587) FF: 21.87% (7337853) rest: =<0.34%	00: 2.64% (885411) FF: 11.83% (3970604) rest: =<0.38%	00: 2.66% (893384) FF: 11.83% (3970352) rest: =<0.38%	00: 2.64% (885558) FF: 11.83% (3970607) rest: =<0.38%	00: 2.64% (886200) FF: 11.83% (3970045) rest: =<0.38%	00: 2.28% (764667) FF: 23.46% (7863176) rest: =<0.33%	00: 2.66% (892051) FF: 13.40% (4496842) rest: =<0.37%
Entropy:
Redundancy:
A. Mean:
StdDev:

example

nameblob1	nameblob2	nameblob3
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00093800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00093810 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................	Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00093800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00093810 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................	Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00093800 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00093810 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

jumps

SLB2 entry at 0x4000
second entry at 0x64000  (+ 0x60000)
third entry at 0xC4000   (+ 0x60000)
fourth entry at 0x144000 (+ 0x80000)

sony computer entertainment inc entry at 0x0
???? <- this should be second entry (+ 0x1000)
second entry at 0x2000 (+ 0x2000)
third entry at 0x3000 (+ 0x1000)

SCEVTRM entry at 0x380040
next entry 0x3A0040 (+0x20000)

(hidden) data

between 2nd and third SLB2 entries, 0xD0 bytes after the data

01 00 00 00 00 00 00 00 00 00 00 00 25 00 00 00 (supplied dump on wiki)
01 00 00 00 00 00 00 00 00 00 00 00 26 00 00 00 (other supplied dumps)

between third and fourth SLB2 entries, 0xE0 bytes after the data(0x60 on others)

little endianess so version is in reverse order?

01 00 00 00 00 00 00 00 05 01 [00 01] 00 00 00 00 -> 1.00 version
01 00 00 00 00 00 00 00 01 01 [50 01] 00 00 00 00 -> 1.50 version
01 00 00 00 00 00 00 00 01 01 [00 03] 00 00 00 00 -> 3.11 version
01 00 00 00 00 00 00 00 02 01 [50 02] 00 00 00 00 -> 2.50 or 2.51??? from BLOD ps4

much more reliable version identifier than 0x1CA600 
since a confirmed 3.11 console displays

FF 00 FF 00 00 00 62 01 FF FF FF FF FF FF FF FF

offset 0x1C6000/0x1C6010

FF 51 21 6D 66 1C 00 03
22 2F 1D 6D 66 1C 00 03

strings

bt_sdio.wlan.OSA.bt_hci.blembx
BT_SDIO
DIRECT
CUH-1004A B01X
Marvell Micro AP
Idle
TimerCbMsgQ
MacMgmtSMEMs
MAC Mgmt
OSA_Sema
SleepConfirmTmr
AP_NullPktDoneTmr
CBProcSMEMsgQ
CBProcMsgQ
CB Proc
MAC Tx Notify
ChipRev:
BB:
RF:
O.R.:
Cal O.R.:
$Id:

other dumps

• http://konsole.rzeszow.pl/ps4/994.rar
• http://konsole.rzeszow.pl/ps4/950.rar
• http://konsole.rzeszow.pl/ps4/1024.rar

MD5 of files within SLB2/CID

Hey guys, here are some files within your local PS4 firmware

SLB2 Section 1 0x42A0 & 0x642A0:
Identifier / MD5
9060	E4EA90FA4B5B0A1066E79F961B607C34 
8087	6537AD81702579C55E09E04CE722804E 
A079	9BD36B4148E0FD9C50C7F3FB0DBB3A13 
B05C 	4A3E67134157CACDB9DF7C1E5ADE3CFD 
107A 	03A323F303FA8D83B9A1072D9AE7C4C6 

SLB2 Section 2 0xC42A0:
Identifier / MD5
A086 	D8F17E3A0F614ACDEFA8916E3EE17365 
204D 	F0B7F975B9621E9A23BBAB8BAB0E2B81 
204B 	B81D81A5AAF271CF545D01343B1F0589 

WiFi/BT 0x144200:
Identifier / MD5
7CE1    C5DCA09C92A2F0362D00BDE4EDB7548B
A8DD    D51C9935B5409313041177FB0393550B
ECE0    65945E2E2270FFC02869498AF03F6854

File Length: Differs per identifier

Discovered whilst making BwE PS4 NOR Validator June 2018

Will provide more information/flash discoveries soon! 

This is quite hard to do alone :)

PS4 NOR Validator

chat

Bloody Hell you have risen from the dead!!! it's been so many years since we all heard from you!! nice to see you back dude!! come on discord