Teensy++ 2.0 - NOR DUMP/FLASH

[sege5641]

I wanted to start this thread and move the NOR/Teensy++ 2.0 discussion away from the "CECHA01 + Infectus". People seem to be getting the wrong idea on what these two boards can and can't do. Please continue the discussion about Infectus Board in the other thread.

[wizdumb]

I was finally able to get proper dumps of my NOR flash with the teensy++ 2.0. Here is the DL link in case anyone want to have a poke around or do some comparing. It is a 3.66 dump

NorDumps.rar

[anos]

i'm only waiting someone with enought skills to develope a full software for nor dump and flashing why defyboy stopped working on that?

[Faris]

Me and most users:

Lets play smart, i can understand C++/java codes, so i can read that dump too..!
1- Download the file
Yay its there..! lets try to read it
2- 2 .bin files ---> try with notepad++, bla bla reading
3- Ok, that's way beyond me -_-" ..

good luck people, I seriously wish if I can contribute though

[DragoonPL]

Wizdumb is this 3.55 dump or 3.6x?

[wizdumb]

i'm only waiting someone with enought skills to develope a full software for nor dump and flashing why defyboy stopped working on that?

Defyboy has stated in the infectus thread that he is currently working on the code as well as a pc side app.

Wizdumb is this 3.55 dump or 3.6x?

This is a 3.66 dump. The ps3 was originally below 3.55, but it also has the RSOD. I just updated to see if it would repair the RSOD, but it did not. My main goal of all this is to find a fix of RSOD. Downgrading would just be icing on the cake.

Me and most users:

Lets play smart, i can understand C++/java codes, so i can read that dump too..!
1- Download the file
Yay its there..! lets try to read it
2- 2 .bin files ---> try with notepad++, bla bla reading
3- Ok, that's way beyond me -_-" ..

good luck people, I seriously wish if I can contribute though

It can be unpacked with RMS "Nor Unpkg-The Tool"

/*
  # ../norunpkg norflash.bin norflash
  unpacking asecure_loader (size: 190xxx bytes)...
  unpacking eEID (size: 65536 bytes)...
  unpacking cISD (size: 2048 bytes)...
  unpacking cCSD (size: 2048 bytes)...
  unpacking trvk_prg0 (size: 131072 bytes)...
  unpacking trvk_prg1 (size: 131072 bytes)...
  unpacking trvk_pkg0 (size: 131072 bytes)...
  unpacking trvk_pkg1 (size: 131072 bytes)...
  unpacking ros0 (size: 7340032 bytes)...
  unpacking ros1 (size: 7340032 bytes)...
  unpacking cvtrm (size: 262144 bytes)...
*/

// Copyright 2010       Sven Peter
// Licensed under the terms of the GNU GPL, version 2
// http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt
// nor modifications by rms.

#include "tools.h"
#include "types.h"

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/stat.h>

#ifdef WIN32
#define MKDIR(x,y) mkdir(x)
#else
#define MKDIR(x,y) mkdir(x,y)
#endif

u8 *pkg = NULL;

static void unpack_file(u32 i)
{
        u8 *ptr;
        u8 name[33];
        u64 offset;
        u64 size;

        ptr = pkg + 0x10 + 0x30 * i;

        offset = be64(ptr + 0x00);
        size   = be64(ptr + 0x08);

        memset(name, 0, sizeof name);
        strncpy((char *)name, (char *)(ptr + 0x10), 0x20);

        printf("unpacking %s (size: %d bytes)...\n", name, size);
        memcpy_to_file((char *)name, pkg + offset, size);
}

static void unpack_pkg(void)
{
        u32 n_files;
        u64 size;
        u32 i;

        n_files = be32(pkg + 4);
        size = be64(pkg + 8);

        for (i = 0; i &lt; n_files; i++)
                unpack_file(i);
}

int main(int argc, char *argv[])
{
        if (argc != 3)
                fail("usage: norunpkg filename.nor target");

        pkg = mmap_file(argv[1]);

        /* kludge for header, i do not do sanity checks at the moment */
        pkg += 1024;

        MKDIR(argv[2], 0777);

        if (chdir(argv[2]) != 0)
                fail("chdir");

        unpack_pkg();

        return 0;
}

[danixleet]

Defyboy has stated in the infectus thread that he is currently working on the code as well as a pc side app.



This is a 3.66 dump. The ps3 was originally below 3.55, but it also has the RSOD. I just updated to see if it would repair the RSOD, but it did not. My main goal of all this is to find a fix of RSOD. Downgrading would just be icing on the cake.

could you please pm or post reply you steps to the flash including the fw hex and pc side, i originally stated id do this but the ps3 got damage in the solder process, i am awaiting a new ps3 but already have the teensy 2++ board and other required tools required, not shit talk lol im serious about nor dumps and dev from them.

[quincyarc]

@wizdumb if i were you ill research on mapping nand/nor bad blocks on the ps3 as well as how ps3 deals with bad blocks. No one started researching on it so you'll be the first.

[wizdumb]

@wizdumb if i were you ill research on mapping nand/nor bad blocks on the ps3 as well as how ps3 deals with bad blocks. No one started researching on it so you'll be the first.

That is what I am doing at the moment. I am no dev, coder, or expert on the ps3 like a lot of the talented names out there but I am learning as I go and will provide anything useful I happen to come across. The information was already out there, I just took the time to gather it all and make it work.

To quote from RMS:

NOR flash is a type of flash that allows random byte access, sort of like a hard disk. NAND, the other type of flash allows block by block access

And to quote defyboy via pm:

You cannot remap bad blocks on NOR, NOR flash is expected to be 100% perfect over it's lifespan, it does not deterioration the same as NAND.

[defyboy]

@wizdumb if i were you ill research on mapping nand/nor bad blocks on the ps3 as well as how ps3 deals with bad blocks. No one started researching on it so you'll be the first.

NOR must be shipped from factory with no bad blocks, hence the much higher expense. There is no way to handle bad blocks on this.
NAND bad block structure I believe has been looked into, From what I know, it uses the bad block map shipped with it from factory. It would be better if we could read/write this through the NOR interface provided, that way the SS2 chip takes care of ECC and Interleaving.