Editing Bluray Drive

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
= BD Drive =
= BD Drive =
Interface speed is max. 11MB/s based on the supported read speeds
Interface speed is max. 11MB/s based on the supported read speeds


== Supported Disc Formats ==
 
== Disc Formats supported ==
 
===BD===
===BD===
{{media ps3 bd}} {{media ps3 bd install}} {{media ps3 bd video}}
Blu-ray disc read maximum is at 2× speed (72 Mbit/s), region coded type allowing the use of:
 
* PlayStation 3 BD-ROM[33] (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
Blu-ray Disc read maximum is at 2× speed (72 Mbit/s) throughout the entire disc (CLV), [[Regions|region]] coded type allowing the use of:
* PlayStation 3 BD-ROM (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
* BD-ROM (BD region matched; i.e., Area A, Area B, etc., and All)
* BD-ROM (BD region matched; i.e., Area A, Area B, etc., and All)
* BD-R
* BD-R
Line 13: Line 14:


===DVD===
===DVD===
{{media ps2 dvd}}  {{media data sacd}}
DVD disc read maximum is at 8× speed (86.40 Mbit/s), region coded type allowing the use of:
 
DVD disc read maximum is at 8× speed (86.40 Mbit/s) at the outermost part of the disc (CAV), [[Regions|region]] region coded type allowing the use of:
* PlayStation 2 DVD-ROM[33] (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C)
* PlayStation 2 DVD-ROM[33] (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C)
* DVD-ROM
* DVD-ROM
* DVD-Video (DVD region matched; i.e., Region 1, Region 2, etc., and All)
* DVD-Video (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
* DVD-Audio (DVD-Video content only)
* DVD-Audio (DVD-Video content only)
* DVD+R
* DVD+R
Line 26: Line 25:
* AVCHD
* AVCHD
* DSD Disc
* DSD Disc
* DVD side of DualDisc
* DualDisc
* Super Audio CD (compatibility removed in 40 GB, the second 80 GB model (CECHF), and the 160 GB model)
* Super Audio CD (compatibility removed in 40 GB, the second 80 GB model (CECHF), and the 160 GB model)


===CD===
===CD===
{{media ps2 cd}} {{media ps1 cd}} {{media data cd}}
Compact Disc disc read maximum is at 24× speed (29.49 Mbit/s), region coded type allowing the use of:
 
Compact Disc disc read maximum is at 24× speed (29.49 Mbit/s) at the outermost part of the disc (CAV), [[Regions|region]] coded type allowing the use of:
* PlayStation 2 CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C, compatibility removed in 40 GB model, the second 80 GB model (CECHF), and the 160 GB model)
* PlayStation 2 CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C, compatibility removed in 40 GB model, the second 80 GB model (CECHF), and the 160 GB model)
* PlayStation CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U or PAL)
* PlayStation CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U or PAL)
Line 42: Line 39:
* Picture CD?
* Picture CD?
* MP3 CD (MP3, WMA, ATRAC)
* MP3 CD (MP3, WMA, ATRAC)


== Bluray Drive Revisions ==
== Bluray Drive Revisions ==
This table shows all parts mounted from factory on the different PS3 models, and also the compatible replacement parts that was not mounted from factory because was released later but works. When several replacement parts are compatible you should try to aim for the newest one because it superceedes the others (probably at the time the new part started being produced the production of the older part was stopped)


{| class="wikitable"
===Firmware===
|+ Retail PS3 Models
 
! {{cellcolors|#A2A9B1}} <!-- please dont delete this column, is intended to preserve the rowspan alignments of all the other rows --> !! [[SKU Models | PS3 Model]] !! <abbr title="MotherBoard">[[Motherboard Revisions|MB]]</abbr> !! I/O !! [[Bluray Drive|Drive]] !! <abbr title="Mounting Drivesled">Slide</abbr> !! <abbr title="Laser Assembly">Laser</abbr> !! <abbr title="Lenses">Lens</abbr> !! <abbr title="DaughterBoard">DB</abbr> !! Controller !! [[Talk:Bluray_Drive_Firmware#Speculation|EMBOOT]] !! Notes
Based on the firmware packages in the 3.55 PUP, there are 6-7 different bluray drive revisions:
|-
 
| {{cellcolors|#A2A9B1|#A2A9B1}} 1 || [[CECHAxx]] || rowspan="2" | [[COK-001]] || rowspan="6" | PATA 60p || rowspan="6" | [[BD-400]] || rowspan="6" | [[KEM-400AAA]] || rowspan="6" | [[KES-400A]] || rowspan="6" | 1 || rowspan="5" | [[BMD-001]] || rowspan="5" | [[CXD5063AGG-1]] || rowspan="5" | 302R....? || rowspan="5" |
BDIT_FIRMWARE_PACKAGE.pkg
|-
BDPT_FIRMWARE_PACKAGE_301R.pkg
| {{cellcolors|#A2A9B1|#A2A9B1}} 2 || [[CECHBxx]]
BDPT_FIRMWARE_PACKAGE_302R.pkg
|-
BDPT_FIRMWARE_PACKAGE_303R.pkg
| {{cellcolors|#A2A9B1|#A2A9B1}} 3 || [[CECHCxx]] || rowspan="2" | [[COK-002]]
BDPT_FIRMWARE_PACKAGE_304R.pkg
|-
BDPT_FIRMWARE_PACKAGE_306R.pkg
| {{cellcolors|#A2A9B1|#A2A9B1}} 4 || [[CECHExx]]
BDPT_FIRMWARE_PACKAGE_308R.pkg
|-
 
| {{cellcolors|#A2A9B1|#A2A9B1}} 5 || rowspan="2" | [[CECHGxx]] || rowspan="2" | [[SEM-001]]
===Hardware===
|-
When comparing with fielddata from spare parts sellers:
| {{cellcolors|#A2A9B1|#A2A9B1}} 6 || [[BMD-002]] || [[CXD5065GB-1]] || 302R....? ||
 
|-
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
| {{cellcolors|#A2A9B1|#A2A9B1}} 7 || [[CECHHxx]] || [[DIA-001]] || rowspan="4" | PATA 60p || rowspan="6" | [[BD-410]] || rowspan="6" | [[KEM-410ACA]] || rowspan="6" | [[KES-410A]] || rowspan="6" | 2 || [[BMD-003]] || [[CXD5065GB-1]] || 302R....? ||
|- bgcolor="#cccccc"
|-
! Drive !! Laser !! Daughterboards !! @SKU !! Notes
| {{cellcolors|#A2A9B1|#A2A9B1}} 8 || [[CECHJxx]] || rowspan="3" | [[DIA-002]] || rowspan="2" | [[BMD-006]] || rowspan="2" | [[CXD5065GB-1]] || rowspan="2" | 302R....? || rowspan="2" |
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 9 || rowspan="2" | [[CECHKxx]]
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 10 || [[BMD-011]] || [[R8J32800FPV]] || 304R....? ||
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 11 || rowspan="2" | [[CECHLxx]]<br>[[CECHMxx]]<br>[[CECHPxx]]<br>[[CECHQxx]] || rowspan="2" | [[VER-001]] || rowspan="2" | SATA 24p || [[BMD-021]] || [[CXD5065GB-1]] || 302R....? ||
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 12 || [[BMD-031]] || [[R8J32810FPV1]] || 304R....? ||
|-{{cellcolors|#A2A9B1}}
| colspan="12" |
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 13 || rowspan="2" | [[CECH-20xx]] || rowspan="2" | [[DYN-001]] || rowspan="3" | SATA 24p || rowspan="3" | [[BD-450]] || rowspan="3" | [[KEM-450AAA]] || rowspan="3" | [[KES-450A]] or<br />[[KES-460A]] || rowspan="6" | 2 || [[BMD-051]] || [[R8J32820FPV1]] || 308R....? ||
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 14 || [[BMD-061]] || [[CXD5130R-1]] || 306R0008 ||
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 15 || [[CECH-21xx]] || [[SUR-001]] || [[BMD-065]] || [[CXD5131R-1]] || 306R0010 ||
| BD400 || KEM-400AAA || BMD-001 || CECHA ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 16 || rowspan="2" | [[CECH-25xx]] || [[JTP-00x]] || rowspan="3" | SATA || rowspan="2" | [[BD-460]] || rowspan="2" | [[KEM-450DAA]] || rowspan="2" | [[KES-450D]] or<br />[[KES-460A]] || rowspan="3" {{integrated}} || [[R8J32830FPV1]] || 308R....? ||
| BD400 || KEM-400AAA || BMD-001 || CECHB ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 17 || [[JSD-00x]] || [[CXD5131R-1]] || 306R0011 ||
| BD400 || KEM-400AAA || BMD-001 || CECHC ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 18 || [[CECH-30xx]] || [[KTE-001]] || [[BD-470]] || [[KEM-450EAA]] || [[KES-450E]] or<br />[[KES-470A]] || [[CXD5132R-1]] || 310R0003 ||
| BD400 || KEM-400AAA || BMD-001 || CECHE ||  
|-{{cellcolors|#A2A9B1}}
| colspan="12" |  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 19 || rowspan="2" | [[CECH-40xx]] || [[MSX-001]] || rowspan="7" | SATA || rowspan="7" {{integrated}} || rowspan="2" | [[KEM-850]] || rowspan="2" | [[KES-850A]] || rowspan="5" | 2 || rowspan="7" {{integrated}} || [[CXD5132R-1]] || 314R0001 ||
| BD400 || KES-400AAA || BMD-002 || CECHG ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 20 || [[MPX-001]] || [[R8J32840FP1]] || 312R....? ||
| BD400 || KES-400AAA || BMD-003 || CECHG || SEM-001: 1-875-384-21 / BMD-003: 1-875-350-31
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 21 || rowspan="3" | [[CECH-42xx]] || [[NPX-001]] ||[[KEM-850]]||[[KES-850A]]|| [[R8J32840FP1]] || 312R....? ||
| BD410 || KEM-410ACA || BMD-003 || CECHH ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 22 || [[PPX-001]] ||[[KEM-451AAA]]||[[KES-451A]]|| ? || ........? ||
| BD410 || KES-410ACA || - || CECHH ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 23 || [[PQX-001]] ||[[KEM-850]]||[[KES-850A]]|| ? || ........? ||
| BD410 || KEM 410CCA || - || - ||  
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 24 || rowspan="2" | [[CECH-43xx]] || [[RTX-001]] || [[KEM-451AAA]] || [[KES-451A]] || 1 || [[R8J32840FP1]] || 316R....? ||  
| BD450 || KEM-450AAA || - || - ||
|-
|-
| {{cellcolors|#A2A9B1|#A2A9B1}} 25 || [[REX-00x|REX-001]] || [[KEM-495AAA]] || [[KES-495A]] || 1 || [[R9J04G011FP1]] || 318R....? ||
| BD450 || KES-450ACA || BMD-051 || CECH-20xx ||  
|}
 
<!-- Around year 2014, when we assigned the superslim motherboards to the different PS3 models we had to do some assumptions because was recently launched, the info about them was very scarce and the superslim owners was not giving any help at all, now 7 years later we are pretty much at the same point, i dont really know for sure who is the "owner" of each superslim motherboard, personally i trust most the info from the "platform id" but is incomplete for superslims too. Anyway im going to reorganize the table a bit following the assignment of motherboard to PS3 model from the "motherboard revisions" page, wip -->
 
{| class="wikitable"
|+ Non Retail PS3 Models
! [[SKU Models | PS3 Model]] !! <abbr title="MotherBoard">[[Motherboard Revisions|MB]]</abbr> !! [[Bluray Drive|Drive]] !! <abbr title="Mounting Drivesled">Slide</abbr> !! <abbr title="Laser Assembly">Laser</abbr> !! <abbr title="Lenses">Lens</abbr> !! <abbr title="DaughterBoard">DB</abbr> !! I/O !! Controller !! [[Talk:Bluray_Drive_Firmware#Speculation|EMBOOT]] !! Notes
|-
|-
| [[DECR-1000]] || [[TMU-520]] || [[BD-400]] || [[KEM-400AAA]] || [[KES-400A]] || 1 || [[BMD-001]] || PATA 60p || [[CXD5063GG-3]] ||  ||
| - || - || BMD-0?? || CECH-21xx ||  
|-
|-
| [[DECR-1400]] || [[DEB-001]] || [[BD-410]] ||  ||  ||  ||  ||  ||  ||  ||
|}
|}


*Notes
Note: Need proper sources, drive info and which PS3 SKU's are having X drive. Please fill in the needed info if possible.
**In lasers models with 2 lenses, one is for CD/DVD, another for Blu-ray
**Need proper sources, drive info and which PS3 SKU's are having X drive. Please fill in the needed info if possible.
**The BD controllers starting with '''CXD''' are manufactured by sony and the others with '''R''' are manufactured by renesas. Starting from CECHKxx every motherboard has 2 revisions of the BD drive, the first uses a sony BD controller and the second a renesas BD controller. This means for some reason (like reducing costs?) sony passes the BD controller production to renesas when they are happy with the new BD controllers


== Table explained in short ==


=== CECHA, CECHB, CECHC, (some CECHE, CECHG) ===
== Remarry BluRay drive ==
Initial FAT models: With [[BD-400]] drive, [[BMD-001]] daughterboard capable for driving [[KEM-400AAA]] slide and [[KES-400A]] laser.


=== CECHE ===
Hardware is interlocked on the PS3, so exchanging a bluray drive from one unit to another requires remarriage of the components.
Some have a KES-410ACA dual lens laser with [[BMD-003]] daughterboard.


=== CECHG ===
'''Procedure:'''
First seen on [[CECHGxx]]: Still [[BD-400]] drive, but now with [[BMD-002]] or [[BMD-003]] daughterboard


=== CECHH, CECHI, CECHJ, CECHK, CECHL, CECHM, CECHN, CECHO, CECHP, CECHQ ===
Put files on a blank usb stick & add a 2.30 or 3.15 PUP
Since [[CECHHxx]] and later: Changed to [[BD-410]] drive, with [[BMD-003]]/[[BMD-006]]/[[BMD-011]]/[[BMD-021]]/[[BMD-031]] daughterboard and [[KES-410A]] dual lens laser
Put in the service mode JIG/dongle and get into factory service mode.
Put the created USB stick into port 0 (closest to the reader) and run.
After you run the initial remarry process, do not take it out of factory service mode.
Put a BD disc in and run it on the PS3. (This restores your DRL files!)
Then you can take it out of factory service mode.
Launch as normal.


=== CECH2000 ===
'''Needed files on USB stick:'''
[[CECH-20xx]] slims introduced [[BD-450]] with [[BMD-051]] daughterboard, capable of driving [[KES-450A]] laser and [[KEM-450AAA]] slide


=== CECH2100 ===
dev_usb000.rar (856.52 KB)
[[CECH-21xx]] slims also uses [[BD-450]] with [[BMD-051]] daughterboard, capable of driving [[KES-450A]] laser and [[KEM-450AAA]] slide (but sometimes seen with KES-460A laser)
<pre>http://www.zshare.net/download/890710435e792875/
http://hotfile.com/dl/114659343/2d8630a/dev_usb000.rar.html
http://depositfiles.com/en/files/6zb5a1ozf
http://www.megaupload.com/?d=O2M43K40
http://rapidshare.com/files/457728407/dev_usb000.rar
http://www.rapidspread.com/file.jsp?id=anxklm4bcu
http://www.easy-share.com/1914734717/dev_usb000.rar</pre>


=== CECH2500, CECH3000 without daughterboard ===
Lv2diag.self  MD5:C48E5EBFC00ABD89094CB73A2B0BEA59
[[CECH-25xx]] (and later [[CECH-30xx]]) series moved the components from the daughterboard to the main PS3 motherboard. Thus there are more/different flatcables used to connect the drive. They are electrical inter-changable (2500<>3000), but mounting differs slightly. It can be modified to fit by cutting some plastic pins on the bottom front of the drive (to make it fit properly with the start/eject board).<br />
manufacturing_updater_for_reset  MD5:90168C03B217CE775A7839D87BBFF2A3 / SHA1:1E770010A3A6EF572AF39783A04DF792670998D3
fdm_spu_module.self  MD5:9BDE16660221042A4440ED2C053A139E / SHA1:D63AA8F0F1C4A7A4497A9E297062CA6E9D2B568B
PS3UPDAT.PUP  (see below)
cfg [folder]
- standalone.cfg (original was MD5:24DB112BF90A4048462C6D26F4263507 / SHA1:519F627B9F367A2E0E05F956E9F2720E4C7AFE8C


KES-460A Laser will work with all slims before the CECH-30xx series.
for comparison:
3.55 downgrader :
- Lv2diag.self  (file1)  MD5:099F33A7967F99E91C07E870FD78B3DB / CRC32:9338ABF2 / CRC16:4FCC
- Lv2diag.self  (file2)  MD5:7A20BFDAE65EEFB47A4425DB1B52DCDE / CRC32:72740080 / CRC16:502A (same as 3.50--)
3.50 downgrader :
- Lv2diag.self  (file1)  MD5:90168C03B217CE775A7839D87BBFF2A3 / CRC32:D1F0AAFC / CRC16:CD8D
- Lv2diag.self  (file2)  MD5:7A20BFDAE65EEFB47A4425DB1B52DCDE / CRC32:72740080 / CRC16:502A
ObjectiveSuites files :
- CONSOLE_SETUP_CEX.SIG.XML  (MD5:0DAE958782D5584DFF3A1EB880ABC067 / SHA1:544432CF2CED5836ED3B8BE9DED2898AA57AA00A)


KES-470A Laser is not backwards compatible and only with CECH-30xx series
'''Usable PS3UPDATE.PUP files:'''


=== CECH4000 toploader ===
[[CECH-40xx]] introduced the toploader (like ps2 slim and old ps1 had) with [[KEM-850]] PHA 0672 assembly.


=== unreferenced ===
'''2.30 RETAIL/CEX'''
*[[KES-450E]]
http://www.multiupload.com/62DJ3LSO62
*[[KEM-480AAA]] unknown PS3 model
MD5:DD2E675FCE5D2EB28CA93BC32EDB3DE6
*[[KEM-495AAA]] [[CECH-43xx|CECH-4301C]]
CRC32:811F7B02 / CRC16:9696
SHA1:FB639B3ED4E7CD5C457855CF1C9B59E06C05C87A
HMAC_SHA1:0x5ADB88B2B83C89DB0EA01E56A4D7DB4769A311B4


== Remarry BluRay drive ==
'''2.30 RETAIL-D/CEX'''
BluRay drive daughterboard is paired with PS3 motherboard, so exchanging a BluRay drive requires remarriage of the BluRay daughterboard. See: [[Remarry Bluray Drive]]
http://www.multiupload.com/7PYR38RLO9
MD5:B34951B1C3A181811B11238204044493
CRC32:908063EF / CRC16:2DDD
SHA1:999A238C0553DB6129C5BB89982ED190EBEE2867
HMAC_SHA1:0x5ADB88B2B83C89DB0EA01E56A4D7DB4769A311B4
''Is on disk: BLES00259/BLUS30118, BLES00286, BCES00098, BLES00184/BLUS30132, BLES00166, BLES00251, BLES00256, BLES00238, BLES00250, BLES00289, BLES00276, BLES00277/BLES00280''


== BluRay region switcher ==
'''3.15 RETAIL/CEX'''
This makes changing the [http://en.wikipedia.org/wiki/Blu-ray_Disc#Region_codes BluRay region] switching possible. The method described below is using 3 region specific bytes (0x84, 0x85, 0x8C) to change the modelinfo.
http://www.multiupload.com/4SGCDZM07C
MD5:54EE80E14E479F8351A988EB9A472072
CRC32:E82D9526 / CRC16:7DB
SHA1:FC4E891E84333F9B37FF7F253ECA165AA416C6AD
HMAC_SHA1:0xD87AFAD8C786E0EEE83C0C96EF61492D78F37980


Other modelinfo byte values: 0x81 Reference Tool, 0x82 Debug, 0x83 Japan (00), 0x84 North America (01), 0x85 Europe, Middle East, Africa (04), 0x86 South Korea (05), 0x87 United Kingom, Ireland (03), 0x88 Mexico (11), 0x89 Australia, New Zealand (02), 0x8A Singapore, Malaysia (06), 0x8B Taiwan (07), 0x8C Russia, India (08), 0x8D China (09), 0x8E Hong Kong (12)
'''3.15 RETAIL-D/CEX'''
http://www.multiupload.com/M53MVW3W7K
MD5:80D7F3EC2CFEBF582926228AC3A11E21
CRC32:5D5C55CB / CRC16:D078
SHA1:7FE68E92353BAC93225272F27BF2DEB9AB6366A6
HMAC_SHA1:0xD87AFAD8C786E0EEE83C0C96EF61492D78F37980
''Is on disk: BCUS98164, BLES00517, BLES00773, BLES00789, BCES00797, BLES00816, BLES00825, BLES00885, BLUS30295''


Payloader method prerequisites:
* [http://ps3.dashhacks.com/downloads/lv2-patcher-v9 LV2 Patcher v9]
* patchfiles (see below)


patch4.txt content (3.55 offsets):
== Hardware Components ==
<div style="height:200px; overflow:auto">


<syntaxhighlight lang="asm">
The drive controller contains a BGA-sized 2MB flash memory chip for Blu-ray drive firmware code, with the contents encrypted. In addition to this, there is a 8MB SDRAM working memory chip. Each drive contains a unique identification number, possibly stored in the SPI Serial Interface NOR Macronix flash chip. This chip or the flash chip probably stores the device key (and associated sequence keys), and the host private key.
# BD Region A (NTSC) [North America]
The Blu-ray drive is controlled by the Sony CXD5065 Digital Signal Processor chip and the Sony CXA2720 Front End Processor chip. Motors are driven by Rohm BA5888FP and Rohm BD7956FS.
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary,
# just the first QWORD of the payload
# Change region to US... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std    %r30, 0xA0(%sp)
F38C: FBE100A8 # std    %r31, 0xA8(%sp)
F390: FBA10098 # std    %r29, 0×98(%sp)
F394: F80100C0 # std    %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force US - Retail
F3A8: 3BC00084 # li        %r30, 0×84
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp)
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor
</syntaxhighlight>
</div>
 
patch5.txt content(3.55 offsets):
<div style="height:200px; overflow:auto">
 
<syntaxhighlight lang="asm">
# BD Region B (PAL) [Europe, Middle East, Africa]
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary,
# just the first QWORD of the payload
# Change region to Europe... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std    %r30, 0xA0(%sp)
F38C: FBE100A8 # std    %r31, 0xA8(%sp)
F390: FBA10098 # std    %r29, 0×98(%sp)
F394: F80100C0 # std    %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force Europe - Retail
F3A8: 3BC00085 # li        %r30, 0×85
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp)
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor
</syntaxhighlight>
</div>
 
patch6.txt content(3.55 offsets):
<div style="height:200px; overflow:auto">
 
<syntaxhighlight lang="asm">
# BD Region C (RUSSIA/INDIA)
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary,
# just the first QWORD of the payload
# Change region to US... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std    %r30, 0xA0(%sp)
F38C: FBE100A8 # std    %r31, 0xA8(%sp)
F390: FBA10098 # std    %r29, 0×98(%sp)
F394: F80100C0 # std    %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force Russia - Retail
F3A8: 3BC0008C # li        %r30, 0×8C
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp)
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor
</syntaxhighlight>
</div>
 
Copy the patch files to /dev_hdd0/game/LV2000000/USRDIR and use LV2 Patcher to select the patch to use. Reboot to return to original state.
 
Reference: [http://pastehtml.com/view/1df94sk.html ps3mrenigma blog export]
 
== BD Drive IC Components ==
The drive controller contains a BGA-sized 2MB NOR flash memory chip for Blu-ray drive firmware code, with the contents encrypted. In addition to this, there is a 8MB SDRAM working memory chip. Each drive contains a unique identification number, possibly stored in the SPI Serial Interface Macronix EEPROM. This chip or the NOR flash chip probably stores the device key (and associated sequence keys), and the host private key.
The Blu-ray drive is controlled by a Sony Digital Signal Processor chip (CXD6350GG-1, CXD5063AGG-1, CXD5065GB-1, CXD5065-1 depending the SKU) and a Sony CXA2720R Front End Processor chip. Motors/coils are driven by Rohm BA5888FP (Laser Driver - Tracking/Focus Coils driver) and Rohm BD7956FS (Motor Driver - EXP-Motor coils/sled/slot motor driver), of which the Laser Driver uses an OPAMP NJM13403V for Tracking/Focus CTRL.


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 312: Line 176:
! Type !! Size !! Speed !! Voltage !! Packaging !! Manufacturer !! Serial Number !! Description
! Type !! Size !! Speed !! Voltage !! Packaging !! Manufacturer !! Serial Number !! Description
|-
|-
| NOR Flash || 2MB ||  || 3V ||  || Spansion || S99-50111-001 || PS3 Blu-ray firmware chip
| Flash || 2MB ||  || 3V ||  || Spansion || S99-50111-001 || PS3 Blu-ray firmware chip
|-
|-
| NOR Flash || 1MB ||  || 3V || BGA-48/BGA-64 || Spansion || S29AL008D / AL008D0043-01 || PS3 Blu-ray firmware chip (CECHJ and later models)
| Flash || 1MB ||  || || || Spansion || S29AL008D || PS3 Blu-ray firmware chip (CECHJ and later models)
|-
|-
| SDRAM || 8MB (64M-bit 4Mx16) || 133MHz || 3.3V || TSOPII-54 || Samsung || K4S641632K-UC75 || PS3 Blu-ray working memory chip
| SDRAM || 8MB || 133MHz || || || Samsung || K4S641632K-UC75 || PS3 Blu-ray working memory chip
|-
|-
| SDRAM || [http://www.esmt.com.tw/DB/manager/upload/M12L64164A.pdf 8MB (64M-bit 4Mx16)] || 143MHz || 3.3V || TSOPII-54 || ESMT || M12L64164A-7TG || PS3 Blu-ray working memory chip (CECHJ and later models)
| SDRAM || 8MB || || || || ESMT || M12L64164A-7TG || PS3 Blu-ray working memory chip (CECHJ and later models)
|-
|-
| EEPROM || 128KB || 85MHz ||  ||  || Macronix || MX25L1005MC-12G || PS3 Blu-ray flash chip
| NOR Flash || 128KB || 85MHz ||  ||  || Macronix || MX25L1005MC-12G || PS3 Blu-ray flash chip
|-
|-
|}
|}


In regard to Renesas SCEI R8J328xxFPV see also: http://weaponre.com/blog.html
===Controllers (Digital Signal Processors)===
*Also known as MC or MechaCon.
====CXD5063GG-1====
IC300 <br />
Used in [[BMD-001]], [[BMD-002]]
====CXD5063AGG-1====
IC300 <br />
Used in [[BMD-001]], [[BMD-002]]
====CXD5065GB-1====
IC300 <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-021]] <br />
[[:File:CXD5065GB-1-GRID-bw-pcbview.png]] <br />
Other Reference: http://stefde69.blogspot.com/2010/04/blue-ray-board-made-accessible.html
====CXD5130R-1====
Used in BMD-061 <br />
====CXD5131R-1====
*Used as controller/bridge for the [[Bluray Drive]]:
**On [[Bluray Drive]] board [[BMD-065]], used in PS3 models [[CECH-21xx]] with motherboard [[SUR-00x|SUR-001]]
**Integrated on motherboard in PS3 models [[CECH-25xx]] with motherboard [[JSD-00x|JSD-001]] (not in JTP-001)
See: [[CXD5131R-1]]
====CXD5132R-1====
Integrated on PS3 motherboards: [[KTE-00x]] (in [[CECH-30xx]] PS3 models), and [[MSX-00x]] (in [[CECH-40xx]] PS3 models)


See: [[CXD5132R-1]]
== Bluraydrive I/O Connector ==


====Renesas SCEI R8J32800FPV====
Used in [[BMD-011]]
====Renesas SCEI R8J32810FPV1====
Used in [[BMD-031]]
====Renesas SCEI R8J32820FPV1====
Used in BMD-051 <br />
running @ 33.969MHz <br />
<gallery>
File:Renesas R8J32820FPV1.jpg|Renesas R8J32820FPV1
</gallery>
====Renesas SCEI R8J32830FPV1====
Integrated on PS3 motherboard: [[JTP-00x]] (in [[CECH-25xx]] PS3 models)
<gallery>
File:Renesas R8J32830FPV1.jpg|Renesas R8J32830FPV1 (integrated on JTP-001 motherboard)
</gallery>
===Subcontrollers (Front-End-Processors)===
==== CXA2720R ====
IC110 <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-021]]
===Drivers===
====Rohm BA5888FP (Laser Driver - Tracking/Focus Coils driver)====
Simular Datasheet: [http://www.trisaster.de/file/sony/ps3/hardware/laufwerk/BA5954FP.pdf BA5954FP.pdf] <br />
IC108 <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-011]], [[BMD-021]]
====Rohm BD7956FS (7 channel Motor Driver - EXP-Motor coils/sled/slot motor driver)====
Datasheet: [http://doc.chipfind.ru/pdf/rohm/bd7956fs.pdf bd7956fs.pdf]<br />
IC103 <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-011]], [[BMD-021]]
====Rohm BD7969EFV (9 channel Motor/Coil Driver - EXP-Motor coils/sled/slot/focus motor driver)====
Datasheet: [http://www.rohm.com/products/databook/motor/pdf/bd7959efv-e.pdf bd7959efv-e.pdf]<br />
[http://www.rohm.com/web/global/products?p_p_id=productdetail_WAR_rohmglobalportalportlet&p_p_lifecycle=2&p_p_state=normal&p_p_mode=view&p_p_resource_id=qrCodeInjection&p_p_cacheability=cacheLevelPage&p_p_col_id=column-1&p_p_col_pos=1&p_p_col_count=2&_productdetail_WAR_rohmglobalportalportlet_pdfURL=http%3A%2F%2Frohmfs.rohm.com%2Fen%2Fproducts%2Fdatabook%2Fpackage%2Fspec%2Fic%2Fhtssop-b54-b54r-ch-1-2-e2-e.pdf&_productdetail_WAR_rohmglobalportalportlet_partNumber=BD7959EFV&_productdetail_WAR_rohmglobalportalportlet_partNodeCode=106550&_productdetail_WAR_rohmglobalportalportlet_packageLinkFlag=true&_productdetail_WAR_rohmglobalportalportlet_productName=bd7959efv bd7959efv]<br />
Used in BMD-061
Integrated on motherboard in [[CECH-25xx]] with motherboard [[JTP-00x|JTP-001]]
====Rohm BD7979EFV====
Integrated on motherboard in [[CECH-25xx]] with motherboard [[JSD-00x|JSD-001]], and [[CECH-30xx]] with motherboard [[KTE-00x|KTE-001]]
See [[BD7979EFV]]
====Rohm BD7761EFV (motor driver)====
Integrated on PS3 motherboard: [[MSX-001]], [[MPX-001]], [[PQX-001]]. See: [[BD7761EFV]]
<!--// not verifyed if present in [[NPX-00x]] PS3 motherboards //-->
====Rohm BD7763EFV (motor driver)====
Integrated on PS3 motherboard: [[PPX-00x]] and [[REX-001]] (probably used also in [[RTX-001]]). See: [[BD7763EFV]]
====NJM13403V (OPAMP - Tracking/Focus CTRL)====
Datasheet: [http://www.multiupload.com/0KIHRIZ64G NJM13403V.pdf (153.98 KB)] <br />
IC303 <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-021]] <br />
[[:File:NJM13403V-SSOP14.png]]
===Memory===
====NOR Flash====
=====Spansion S99-50111-001=====
IC304 <br />
Contains encrypted firmware <br />
Used in [[BMD-001]]
<gallery>
File:Spansion_S99-50111-001.png|Spansion S99-50111-001
File:Spansion_S99-50111-001_pinout.png|Spansion S99-50111-001 pinout
</gallery>
Manufacturer ID: 0x01<br />
Device ID: 0x49<br />
Capacity: 16Mbit
=====Spansion AL008D0043-01=====
IC304 <br />
Contains encrypted firmware <br />
Used in [[BMD-002]], [[BMD-003]], [[BMD-004]], [[BMD-006]], [[BMD-021]] <br />
[[File:AL008D0043-01-GRID-color-pcbview.png|thumbnail|none]]
Manufacturer ID: 0x01<br />
Device ID: 0x5B (bottom boot block) <br />
Capacity: 8Mbit
Other Reference:
*http://stefde69.blogspot.com/2010/05/first-look-to-numerical-sections.html
*http://twitpic.com/25fcke/full
=====Spansion S29AL008D=====
Datasheet: [http://www.spansion.com/Support/Datasheets/S29AL008D_00_A11_e.pdf S29AL008D_00_A11_e.pdf] <br />
IC304 <br />
Contains encrypted firmware <br />
[[:File:S29AL008D-BGA-48.png]] <br />
Used in [[BMD-006]] <br />
====RAM====
=====Samsung K4S641632K-UC75=====
Datasheet: [http://www.multiupload.com/S0BJNRX2K1 K4S641632K.pdf (327.77 KB)] <br />
IC309 <br />
Worker RAM for BD <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-021]] <br />
[[:File:Samsung_K4S641632K-UC75-TSOPII-54.png]]
=====ESMT M12L64164A-7TG=====
Datasheet: [http://www.esmt.com.tw/DB/manager/upload/M12L64164A.pdf M12L64164A.pdf]<br />
IC309 <br />
Worker RAM for BD <br />
Used in [[BMD-003]], [[BMD-006]] <br />
[[:File:ESMT-M12L64164A-7TG-TSOPII54.png]]
====EEPROM====
=====Macronix MX25L1005MC=====
Datasheet: [http://www.semiconductorstore.com/pdf/Macronix/Serial1.pdf Serial1.pdf] <br />
IC310 <br />
Key <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]] <br />
[[:File:Macronix-MX25L1005MC-SOP8.png]]
====Serial====
=====Macronix MX25L1635DM2I-12G=====
16M-BIT x1/x2/x4 CMOS Serial Flash<br />
Datasheet: [http://www.alldatasheet.com/datasheet-pdf/pdf/267911/MCNIX/MX25L1635DM2I-12G.html] <br />
Used in BMD-061 <br />
===Others===
====CXD5064R====
IC504 <br />
Used in [[BMD-001]]
====Marvell 88SA8040-TBC1====
Used in [[BMD-011]], [[BMD-021]]
SATA to PATA IDE bridge chip. See: [[88SA8040-TBC1]]
== BD Drive Connectors ==
=== CN301 - Bluraydrive Main I/O Connector ===
<div style="float:right">[[File:60pin-DB-CON.jpg|200px|thumb|left|60-pin DB Connector<br />bluray drive]]</div>
<div style="float:right">[[File:60pin-DB-CON.jpg|200px|thumb|left|60-pin DB Connector<br />bluray drive]]</div>
60 pins <br />
To mainboard, Data <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]], [[BMD-011]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 627: Line 318:
|-
|-
|}
|}


=== CN100 14pin ===
=== CN100 14pin ===
Line 677: Line 369:
|}
|}


=== CN104 2pin ===
To IR-LED for detect disc insertion <br />
Used in [[BMD-001]], [[BMD-002]]
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"
|- bgcolor="#cccccc"
! Pin !! Usage !! Remarks
|-
| 1 ||  ||
|-
| 2 ||  ||
|-
|}


=== CN200 2pin ===
=== CN200 2pin ===
Line 704: Line 384:


=== CN103 45pin ===
=== CN103 45pin ===
To laser, Data and Focus/Tracking <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 802: Line 480:
|-
|-
|}
|}


=== CN102 8pin ===
=== CN102 8pin ===
To spindle motor <br />
Used in [[BMD-001]], [[BMD-002]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 828: Line 505:
|-
|-
|}
|}


=== CN101 14pin ===
=== CN101 14pin ===
To position tracking mechanics <br />
Used in [[BMD-001]], [[BMD-002]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 867: Line 543:
|}
|}


=== CN101 8pin ===
 
To position tracking mechanics <br />
 
Used in [[BMD-003]], [[BMD-006]]
=== CN200 2pin ===


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 875: Line 551:
! Pin !! Usage !! Remarks
! Pin !! Usage !! Remarks
|-
|-
| 1 || ||  
| 1 || PHOTO LED ||  
|-
|-
| 2 || ||
| 2 || GND || Ground
|-
| 3 ||  ||
|-
| 4 ||  ||
|-
| 5 ||  ||
|-
| 6 ||  ||
|-
| 7 ||  ||
|-
| 8 ||  ||  
|-
|-
|}
|}


=== CN100 19pin ===
=== CN100 19pin ===
To disc motor <br />
Used in [[BMD-001]], [[BMD-002]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 941: Line 604:
|}
|}


=== CN100 18pin ===
To disc motor <br />
Used in [[BMD-003]], [[BMD-006]]
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"
|- bgcolor="#cccccc"
! Pin !! Usage !! Remarks
|-
| 1 ||  ||
|-
| 2 ||  ||
|-
| 3 ||  ||
|-
| 4 ||  ||
|-
| 5 ||  ||
|-
| 6 ||  ||
|-
| 7 ||  ||
|-
| 8 ||  ||
|-
| 9 ||  ||
|-
| 10 ||  ||
|-
| 11 ||  ||
|-
| 12 ||  ||
|-
| 13 ||  ||
|-
| 14 ||  ||
|-
| 15 ||  ||
|-
| 16 ||  ||
|-
| 17 ||  ||
|-
| 18 ||  ||
|-
|}


=== CN300 45pin ===
=== CN300 45pin ===
JTAG (check service manual) <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 1,086: Line 702:
|-
|-
|}
|}


=== CN502 4pin ===
=== CN502 4pin ===
To mainboard, Power <br />
Used in [[BMD-001]], [[BMD-002]], [[BMD-003]], [[BMD-006]]


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 1,104: Line 721:
|-
|-
|}
|}
{{Components}}<noinclude>
[[Category:Main]]
</noinclude>
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "http://www.psdevwiki.com/ps3/Bluray_Drive"