Editing Talk:PS3Cobra Payload Reverse Engineering
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 1: | Line 1: | ||
= D/L's = | = D/L's = | ||
[http://www.mediafire.com/?bcdf3qi6q2icv0q COBRA v2.0 boot] //[http://mir.cr/1OH8LPZP mirror] ([http://www.totalphase.com/support/product/beagle_usb480/ TDC]) [http://forum.psxcare.com/support/showthread.php/40058-Cobra-usb-dongel-med-PS1-support dumpsource] | [http://www.mediafire.com/?bcdf3qi6q2icv0q COBRA v2.0 boot] //[http://mir.cr/1OH8LPZP mirror] ([http://www.totalphase.com/support/product/beagle_usb480/ TDC]) [http://forum.psxcare.com/support/showthread.php/40058-Cobra-usb-dongel-med-PS1-support dumpsource] | ||
Line 338: | Line 24: | ||
* http://www.cobra-usb.com/downloads/Cobra-USB_PSP-Launcher.rar // [http://www.multiupload.com/D8IRAT24ST Cobra-USB_PSP-Launcher.rar (332.73 KB)] | * http://www.cobra-usb.com/downloads/Cobra-USB_PSP-Launcher.rar // [http://www.multiupload.com/D8IRAT24ST Cobra-USB_PSP-Launcher.rar (332.73 KB)] | ||
* | * http://www.cobra-usb.com/downloads/Cobra-USB_PS3_Updater_v1_0.rar // [http://www.multiupload.com/3FVTPTFQDY Cobra-USB_PS3_Updater_v1_0.rar (401.7 KB)] | ||
* http://www.cobra-usb.com/downloads/Cobra- | * http://www.cobra-usb.com/downloads/Cobra-USB_PC_Updater_v2.0.rar | ||
* [http://www.cobra-usb.com/downloads/genps3iso_v2.0.rar Genps3iso v2.0] // [http://www.multiupload.com/8M5FONYM8E genps3iso_v2.0.rar (51.26 KB)] | |||
* [http://www.cobra-usb.com/downloads/UserManual-English_v4.1.pdf English User Guide v4.1] // [http://www.multiupload.com/C4DS9OSCBO UserManual-English_v4.1.pdf (698.72 KB)] | |||
// | * [http://www.multiupload.com/YNW8GB517G Cobra CFW v3.55] | ||
---- | |||
= Hardware Dongle = | |||
== Dongle 1.0 == | |||
<table width="100%" align="left"><tr><td align="left">[[File:CobraPCB - TOP.jpg|200px|thumb|left|Psjb2 Trueblue - OVERVIEW]]</td></tr></table> | |||
=== Components === | |||
---- | ==== Actel ProASIC3 A3P060 - FPGA ==== | ||
U2 <br /> | |||
A3P060 = 60,000 System Gates | |||
blank = Speed Grade: Standard | |||
VQ = Package Type: Very Thin Quad Flat Pack (0.5mm pitch) | |||
G = Lead-Free Packaging: RoHS-Compliant (Green) | |||
100 = Package Lead Count : 100 pins | |||
blank = Security Feature : no IP license | |||
blank = Temperature Range: Commercial (0°C to +70°C Ambient Temperature) | |||
128-bit AES <br /> | |||
1,024 bits of user flash memory <br /> | |||
Datasheets and usermanuals: http://www.actel.com/products/pa3/docs.aspx#ds <br /> | |||
Familyroot: http://www.actel.com/products/pa3/ <br /> | |||
== Cobra | ===== Pinout A3P060 VQ100 ===== | ||
{|class="wikitable" | <div style="float:right">[[File:VQ100.png|200px|thumb|left|Actel ProASIC3 A3P060 - FPGA (Cobra) VQ100 package]]</div> | ||
<div style="height:350px; overflow:auto"> | |||
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;" | |||
|- bgcolor="#cccccc" | |||
! Pin !! Function !! Notes | |||
|- | |||
| 1 || GND || Ground | |||
|- | |||
| 2 || GAA2/IO118UDB3 || | |||
|- | |||
| 3 || IO118VDB3 || | |||
|- | |||
| 4 || GAB2/IO117UDB3 || | |||
|- | |||
| 5 || IO117VDB3 || | |||
|- | |||
| 6 || GAC2/IO116UDB3 || | |||
|- | |||
| 7 || IO116VDB3 || | |||
|- | |||
| 8 || IO112PSB3 || | |||
|- | |||
| 9 || GND || Ground | |||
|- | |||
| 10 || GFB1/IO109PDB3 || | |||
|- | |||
| 11 || GFB0/IO109NDB3 || | |||
|- | |||
| 12 || VCOMPLF || | |||
|- | |||
| 13 || GFA0/IO108NPB3 || | |||
|- | |||
| 14 || VCCPLF || | |||
|- | |||
| 15 || GFA1/IO108PPB3 || | |||
|- | |||
| 16 || GFA2/IO107PSB3 || | |||
|- | |||
| 17 || VCC || | |||
|- | |||
| 18 || VCCIB3 || | |||
|- | |||
| 19 || GFC2/IO105PSB3 || | |||
|- | |||
| 20 || GEC1/IO100PDB3 || | |||
|- | |- | ||
| 21 || GEC0/IO100NDB3 || | |||
|- | |- | ||
| | | 22 || GEA1/IO98PDB3 || | ||
|- | |- | ||
| | | 23 || GEA0/IO98NDB3 || | ||
|- | |- | ||
| | | 24 || VMV3 || | ||
|- | |- | ||
| | | 25 || GNDQ || Ground | ||
|- | |- | ||
| | | 26 || GEA2/IO97RSB2 || | ||
|- | |- | ||
| | | 27 || GEB2/IO96RSB2 || | ||
|- | |- | ||
| | | 28 || GEC2/IO95RSB2 || | ||
|- | |- | ||
| | | 29 || IO93RSB2 || | ||
|- | |- | ||
| | | 30 || IO92RSB2 || | ||
|- | |- | ||
| | | 31 || IO91RSB2 || | ||
|- | |- | ||
| | | 32 || IO90RSB2 || | ||
|- | |- | ||
| | | 33 || IO88RSB2 || | ||
|- | |||
| 34 || IO86RSB2 || | |||
|- | |||
| 35 || IO85RSB2 || | |||
|- | |||
| 36 || IO84RSB2 || | |||
|- | |||
| 37 || VCC || | |||
|- | |||
| 38 || GND || Ground | |||
|- | |||
| 39 || VCCIB2 || | |||
|- | |||
| 40 || IO77RSB2 || | |||
|- | |||
| 41 || IO74RSB2 || | |||
|- | |||
| 42 || IO71RSB2 || | |||
|- | |||
| 43 || GDC2/IO63RSB2 || | |||
|- | |||
| 44 || GDB2/IO62RSB2 || | |||
|- | |||
| 45 || GDA2/IO61RSB2 || | |||
|- | |||
| 46 || GNDQ || Ground | |||
|- | |||
| 47 || TCK || | |||
|- | |||
| 48 || TDI || | |||
|- | |||
| 49 || TMS || | |||
|- | |||
| 50 || VMV2 || | |||
|- | |||
| 51 || GND || Ground | |||
|- | |||
| 52 || VPUMP || | |||
|- | |||
| 53 || NC || | |||
|- | |||
| 54 || TDO || | |||
|- | |||
| 55 || TRST || | |||
|- | |||
| 56 || VJTAG || | |||
|- | |||
| 57 || GDA1/IO60USB1 || | |||
|- | |||
| 58 || GDC0/IO58VDB1 || | |||
|- | |||
| 59 || GDC1/IO58UDB1 || | |||
|- | |||
| 60 || IO52NDB1 || | |||
|- | |||
| 61 || GCB2/IO52PDB1 || | |||
|- | |||
| 62 || GCA1/IO50PDB1 || | |||
|- | |||
| 63 || GCA0/IO50NDB1 || | |||
|- | |||
| 64 || GCC0/IO48NDB1 || | |||
|- | |||
| 65 || GCC1/IO48PDB1 || | |||
|- | |||
| 66 || VCCIB1 || | |||
|- | |||
| 67 || GND || Ground | |||
|- | |||
| 68 || VCC || | |||
|- | |||
| 69 || IO43NDB1 || | |||
|- | |||
| 70 || GBC2/IO43PDB1 || | |||
|- | |||
| 71 || GBB2/IO42PSB1 || | |||
|- | |||
| 72 || IO41NDB1 || | |||
|- | |- | ||
| 73 || GBA2/IO41PDB1 || | |||
|- | |- | ||
| | | 74 || VMV1 || | ||
|- | |- | ||
| | | 75 || GNDQ || Ground | ||
|- | |- | ||
| 76 || GBA1/IO40RSB0 || | |||
|- | |- | ||
| | | 77 || GBA0/IO39RSB0 || | ||
|- | |- | ||
| | | 78 || GBB1/IO38RSB0 || | ||
|- | |- | ||
| | | 79 || GBB0/IO37RSB0 || | ||
|- | |- | ||
| | | 80 || GBC1/IO36RSB0 || | ||
|- | |- | ||
| | | 81 || GBC0/IO35RSB0 || | ||
|- | |- | ||
| | | 82 || IO29RSB0 || | ||
|- | |- | ||
| | | 83 || IO27RSB0 || | ||
|- | |- | ||
| 84 || IO25RSB0 || | |||
|- | |- | ||
| | | 85 || IO23RSB0 || | ||
|- | |- | ||
| | | 86 || IO21RSB0 || | ||
|- | |- | ||
| 87 || VCCIB0 || | |||
|- | |- | ||
| | | 88 || GND || Ground | ||
|- | |- | ||
| | | 89 || VCC || | ||
|- | |- | ||
| 90 || IO15RSB0 || | |||
|- | |- | ||
| | | 91 || IO13RSB0 || | ||
|- | |- | ||
| | | 92 || IO11RSB0 || | ||
|- | |- | ||
| | | 93 || GAC1/IO05RSB0 || | ||
|- | |- | ||
| | | 94 || GAC0/IO04RSB0 || | ||
|- | |- | ||
| | | 95 || GAB1/IO03RSB0 || | ||
|- | |- | ||
| | | 96 || GAB0/IO02RSB0 || | ||
|- | |- | ||
| | | 97 || GAA1/IO01RSB0 || | ||
|- | |- | ||
| | | 98 || GAA0/IO00RSB0 || | ||
|- | |- | ||
| | | 99 || GNDQ || Ground | ||
|- | |- | ||
| | | 100 || VMV0 || | ||
|- | |- | ||
|} | |} | ||
</div> | |||
==== 24.000 MHz Crystal ==== | |||
Y1 <br /> | |||
CLK for Actel <br /> | |||
==== 12.000 MHz Crystal ==== | |||
Y2? <br /> | |||
CLK for Atmel <br /> | |||
==== AMS1117 3.3 1032 - Low Dropout Linear Regulator ==== | |||
U3 <br /> | |||
Datasheet: http://www.sltdigital.com/product/product_pdf/AMS1117.pdf / http://home1.cyber-labo.co.jp/board/goods/pdf/AMS1117.pdf <br /> | |||
[[:File:AMS1117 - SOT-223.png]]<br /> | |||
==== (unreferenced 5pin IC : U4) ==== | |||
U4 <br /> | |||
[[:File:SOT5.PNG]]<br /> | |||
<br /> | |||
==== Atmel ATMEGA 16A ==== | |||
U5 <br /> | |||
==== Winbond 25X16AVS1G (SPI Flash 16Mbit) ==== | |||
U1 <br /> | |||
<div style="float:right">[[File:W25X16A - SOIC-8.png|200px|thumb|left|8-pin TSSOP<br />Winbond 25X16A<br />SOIC-8 pinout]]</div> | |||
<pre>W - Winbond | |||
25X - SPI Flash | |||
16 - 16Mbit / 2M-byte (Uniform 4Kbyte sectors/64Kbyte blocks) | |||
AVS1G - 100MHz (200Mbits/sec)</pre> | |||
datasheet: [http://www.multiupload.com/P2833U5SOW W25X16A.pdf (1.3 MB)] <br /> | |||
Note: can use [http://blog.hodgepig.org/busninja/ Bus Ninja] or [http://flashrom.org/Bus_Pirate Bus Pirate] and [http://flashrom.org/Flashrom FlashROM] - <abbr title="In-System Programming (ISP)">ISP</abbr> is possible, so long as no other devices on the SPI bus are trying to access the device (in that case, you might want to cut Vcc to the FPGA or the regulator for it). | |||
= | {| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;" | ||
|- bgcolor="#cccccc" | |||
! Pin !! Usage !! Remarks | |||
|- | |||
| 1 || /CS || Chip Select | |||
|- | |||
| 2 || DO || Data output | |||
|- | |||
| 3 || /WP || Write Protect | |||
|- | |||
| 4 || GND || Ground | |||
|- | |||
| 5 || DIO || Serial data input/output | |||
|- | |||
| 6 || CLK || Serial Clock | |||
|- | |||
| 7 || /HOLD || Hold | |||
|- | |||
| 8 || VCC || Vcc (min 2.7-max 3.6V) | |||
|- | |||
|} |