Category PS4 Guides and Tutorials       Thread starter BwE       Start date Mar 10, 2019 at 12:43 AM       12,963       76            
A few months ago I posted a BwE Complete PS4 NOR Removal Guide followed by my BwE PS4 NOR Comparator, and today's Tutorial covers a lesson in corruption repair on PS4 NOR Repairs by Better Way Electronics.

Here in my favourite example we have a dump that does not boot, is ultimately displaying signs of a BLOD but when the dump is validated it shows the following results:

Code:
UNK Dynamic PerConsole Section Filler 2: ✔
UNK Static Section 1: 000000 [DANGER]
UNK Dynamic Section 20 (SKU Byte): 00 [DANGER]
UNK Dynamic Section 21: 0000000000000000000000000000 [DANGER]
UNK Filler 4: ✔
UNK Dynamic Section 22:
00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 ✔
UNK Filler 5: ✔
UNK Dynamic Section 23:
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF [WARNING]

Well large blocks of 00 is obviously not good, but what about the UNK Dynamic Section 23? Well I give this area (and the areas below it) WARNING's as it generally has blank spaces sporatically throughout its section. So no big deal! I just can't explain why there are blank spaces!

The real issue is the UNK Static Section 1 and UNK Dynamic Section 20-22. Hence the DANGER output!

If you were to open this dump in a hex editor (I prefer HxD) you would see from 0x1CE000 to 0x1CE1FF (A length of 200) you would see this:

BwE PS4 Dump Repair 1.png

Now this corrupt dump is a CUH-1001A on version 6.20 - If I were to look at a similar dump, with similar specs I would see:

BwE PS4 Dump Repair 2.png

Its quite clear what the solution is! Copy this data from the working dump into the corrupt dump! But Should I?

Well luckily the above static section and dynamic sections that were corrupt are GENERIC. This means they are not tied down to a specific console or even version.

To explain a bit better, here is a quick run down of the possible results for the corrupt area:

The possible outputs for the UNK Static Section 1 are only going to be 0007FF (Unless you are stuck in IDU mode, it will be 0107FF - which I consider a 'DANGER' output). So its quite obvious that there is no other replacement for this corruption!

The next area is the UNK Dynamic Section 20, it is a bit different as it is based on the SKU of the console. The possible outputs are: 07 (Retail) or 06 (Dev/Test). It is again very obvious what to replace it with. Easy!

Now the UNK Dynamic Section 21 is a bit more weird as it is dynamic but can also be static among multiple consoles with very different SKU's and versions. For example, 28 of my dumps have this as the result: 0007FF0700030C04000000040000. This makes it easy to replace! If it didn't work, I would have tried the other results (there are not that many).

The UNK Filler 4 was always going to be blank space, but was it FF space or 00? Well that was easy to figure out.

UNK Dynamic Section 22 is the most complex section. While it is dynamic I was able to prove through my research that it is NOT tied to a specific console. It is highly dynamic, maybe only 2 of 100 consoles will have the same result, but when they do they are totally different SKU's and versions. I ultimately have no idea what this section is, but I do know it's transferable!

Again, the final UNK Filler 5 is a simple fix!

The final result is that logically, I can feel safe in copying the area from 0x1CE000 to 0x1CE1FF verbatim from a similar console! So I did!

So I ran the patched dump in my validator again and ta-da!

Code:
UNK Dynamic PerConsole Section Filler 2: ✔
UNK Static Section 1: 0007FF ✔
UNK Dynamic Section 20 (SKU Byte): 07 (Retail) ✔
UNK Dynamic Section 21: 0007FF0700030C04000000040000 ✔
UNK Filler 4: ✔
UNK Dynamic Section 22:
F9020000F90200009885B400000000003401000034010000A881B700000000006602000065020000AC901C01000000004D000000 ✔
UNK Filler 5: ✔
UNK Dynamic Section 23:
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF [WARNING]

The results come up perfectly! (Ignoring the WARNING). Putting this data on the PS4 resulted in it booting up once again! No more BLOD! Amazing!

This is why my BwE PS4 NOR Comparator tool is so damn useful, this is the best method for understanding what areas of a corrupt console can be patched!

Remember if you want to help my BwE PS4 NOR Validator, send me dumps (but please label them (version, model & issue etc))!

If you like what I do, or just like me for me, buy me a coffeeeee!
BwE Logo.png

BwE PS4 NOR Repair Guide by BetterWayElectronics.jpg
 

Comments

BwE

Developer
Senior Member
Contributor
The only chips if damaged that will not allow it to boot is the syscon, Southbridge and Apu. Even then it will still either have a blue light flashing, sometimes forever sometimes for a few seconds. Or it will turn off instantly or not power on at all.

Example in the OP the PS4 there has the wifi/BT board removed. Console boots fine.
 

Chaos Kid

Developer
Senior Member
Contributor
He maybe able to route or get a new chip and apply it with fw would he not @BwE
And just install a fw on boot.

As chips can be purchased from digikey
 

jd200

Senior Member
Contributor
Verified
@koosknlo clip I got from china hum the power block works which provides the power to the ps4 but no life at all maybe onboard fuse has blow when turned the ps4 off but I don't now what to test to see whats blown
 

Chaos Kid

Developer
Senior Member
Contributor
I've never seen a clip for the ps4 unlike e3 Flasher for ps3 that could be your problem there and the board sounds like it's fried or blown resister or capacitor
 

BwE

Developer
Senior Member
Contributor
AliExpress is where I get most of my tools and accessories. I can't recommend any particular seller as they are all the same with the same stock really.
 

Chaos Kid

Developer
Senior Member
Contributor
I'm looking mainly for a clip rather then using solder method which they do exist I noticed. I live in canada so finding some stuff is a bit tougher here but still get my hands on it regardless.
Right now have an analyzer hooked into it thro clips
 

XfactorX

Senior Member
Contributor
Verified
@thiagomaxxx you ave to use the latest version of spiway (v0.40) and remember to program the board with the latest related version of .hex file

@BwE
According to what is written on ps4 devwiki, in order to be able to read the Nor without desolder it, it is necessary to lift the VCC pin, so how do you do when you use the clip?

I thought it would be better to avoid overheating the chip to remove it (even if I've already done it) so I prefer to wire the teensy directly on the motherboard, as for the ps4 models with 8-WSON pakage chip I do the same but taking into consideration how much is written on devwiki, I disconnect the vcc pin removing a resistance and a diode in the bottom of the motherboard behind the chip.

I already talked to you about it via e-mail ;)




 
Recent Articles
Action-RPG Oninaki Joins New PlayStation 4 Games Next Week
Next week Tokyo RPG Factory's latest action-RPG Oninaki hits PlayStation 4 on August 22nd casting you as a Watcher, tasked with helping usher the souls of the departed into their next life. 🗼...
Electric Purple, Red Camouflage, Titanium Blue & Rose Gold DS4 Controllers!
Earlier this year we saw an Alpine Green DualShock 4 PS4 Controller, and now Sony announced their latest batch of DualShock 4 PS4 Controllers will include Electric Purple, Red Camouflage, Titanium...
Iconit: PS4 Tool to Change PlayStation 4 Game Icons by OfficialAhmed
Following his PS4HEN Trophy Calculator release, developer OfficialAhmed shared Iconit v1.00 on Twitter today, which allows jailbroken console owners with PS4 HEN to change PlayStation 4 game icons...
PC Building Simulator for PlayStation 4 Arrives, PS4 Launch Trailer
While it can't compare to Origin PC's Big O, today The Irregular Corporation officially launched their PC Building Simulator for PS4 consoles providing users an inexpensive way to repair, test and...
Top