Bluray Drive

BD Drive

Interface speed is max. 11MB/s based on the supported read speeds

Disc Formats supported

BD

Blu-ray disc read maximum is at 2× speed (72 Mbit/s), region coded type allowing the use of:

• PlayStation 3 BD-ROM (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
• BD-ROM (BD region matched; i.e., Area A, Area B, etc., and All)
• BD-R
• BD-RE (not compatible with BD-RE version 1.0)

DVD

DVD disc read maximum is at 8× speed (86.40 Mbit/s), region coded type allowing the use of:

• PlayStation 2 DVD-ROM[33] (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C)
• DVD-ROM
• DVD-Video (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
• DVD-Audio (DVD-Video content only)
• DVD+R
• DVD+RW
• DVD-R
• DVD-RW
• AVCHD
• DSD Disc
• DualDisc
• Super Audio CD (compatibility removed in 40 GB, the second 80 GB model (CECHF), and the 160 GB model)

CD

Compact Disc disc read maximum is at 24× speed (29.49 Mbit/s), region coded type allowing the use of:

• PlayStation 2 CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C, compatibility removed in 40 GB model, the second 80 GB model (CECHF), and the 160 GB model)
• PlayStation CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U or PAL)
• CD-ROM
• CD-R
• CD-RW
• CD-DA
• Photo CD?
• Picture CD?
• MP3 CD (MP3, WMA, ATRAC)

Bluray Drive Revisions

Firmware

Based on the firmware packages in the 3.55 PUP, there are 6-7 different bluray drive revisions:

BDIT_FIRMWARE_PACKAGE.pkg
BDPT_FIRMWARE_PACKAGE_301R.pkg
BDPT_FIRMWARE_PACKAGE_302R.pkg
BDPT_FIRMWARE_PACKAGE_303R.pkg
BDPT_FIRMWARE_PACKAGE_304R.pkg
BDPT_FIRMWARE_PACKAGE_306R.pkg
BDPT_FIRMWARE_PACKAGE_308R.pkg

Hardware

When comparing with fielddata from spare parts sellers:

Drive	Laser	Daughterboards	@SKU	Notes
BD400	KEM-400AAA	BMD-001	CECHA
BD400	KEM-400AAA	BMD-001	CECHB
BD400	KEM-400AAA	BMD-001	CECHC
BD400	KEM-400AAA	BMD-001	CECHE
BD400	KES-400AAA	BMD-002	CECHG
BD400	KES-400AAA	BMD-003	CECHG	SEM-001: 1-875-384-21 / BMD-003: 1-875-350-31
BD410	KEM-410ACA	BMD-003	CECHH
BD410	KES-410ACA	-	CECHH
BD410	KEM 410CCA	-	-
BD450	KEM-450AAA	-	-
BD450	KES-450ACA	BMD-051	CECH-20xx
-	-	BMD-0??	CECH-21xx

Note: Need proper sources, drive info and which PS3 SKU's are having X drive. Please fill in the needed info if possible.

Remarry BluRay drive

Hardware is interlocked on the PS3, so exchanging a bluray drive from one unit to another requires remarriage of the components.

Procedure:

Put files on a blank usb stick & add a 2.30 or 3.15 PUP
Put in the service mode JIG/dongle and get into factory service mode.
Put the created USB stick into port 0 (closest to the reader) and run.
After you run the initial remarry process, do not take it out of factory service mode.
Put a BD disc in and run it on the PS3. (This restores your DRL files!)
Then you can take it out of factory service mode.
Launch as normal. 

Needed files on USB stick:

dev_usb000.rar (856.52 KB)

http://www.zshare.net/download/890710435e792875/
http://hotfile.com/dl/114659343/2d8630a/dev_usb000.rar.html
http://depositfiles.com/en/files/6zb5a1ozf
http://www.megaupload.com/?d=O2M43K40
http://rapidshare.com/files/457728407/dev_usb000.rar
http://www.rapidspread.com/file.jsp?id=anxklm4bcu
http://www.easy-share.com/1914734717/dev_usb000.rar

Lv2diag.self  MD5:C48E5EBFC00ABD89094CB73A2B0BEA59
manufacturing_updater_for_reset  MD5:90168C03B217CE775A7839D87BBFF2A3 / SHA1:1E770010A3A6EF572AF39783A04DF792670998D3
fdm_spu_module.self  MD5:9BDE16660221042A4440ED2C053A139E / SHA1:D63AA8F0F1C4A7A4497A9E297062CA6E9D2B568B
PS3UPDAT.PUP  (see below)
cfg [folder]
- standalone.cfg (original was MD5:24DB112BF90A4048462C6D26F4263507 / SHA1:519F627B9F367A2E0E05F956E9F2720E4C7AFE8C

for comparison:

3.55 downgrader :
- Lv2diag.self  (file1)  MD5:099F33A7967F99E91C07E870FD78B3DB / CRC32:9338ABF2 / CRC16:4FCC
- Lv2diag.self  (file2)  MD5:7A20BFDAE65EEFB47A4425DB1B52DCDE / CRC32:72740080 / CRC16:502A (same as 3.50--)
3.50 downgrader :
- Lv2diag.self  (file1)  MD5:90168C03B217CE775A7839D87BBFF2A3 / CRC32:D1F0AAFC / CRC16:CD8D
- Lv2diag.self  (file2)  MD5:7A20BFDAE65EEFB47A4425DB1B52DCDE / CRC32:72740080 / CRC16:502A
ObjectiveSuites files : 
- CONSOLE_SETUP_CEX.SIG.XML  (MD5:0DAE958782D5584DFF3A1EB880ABC067 / SHA1:544432CF2CED5836ED3B8BE9DED2898AA57AA00A)

Usable PS3UPDATE.PUP files:

2.30 RETAIL/CEX http://www.multiupload.com/62DJ3LSO62

MD5:DD2E675FCE5D2EB28CA93BC32EDB3DE6
CRC32:811F7B02 / CRC16:9696
SHA1:FB639B3ED4E7CD5C457855CF1C9B59E06C05C87A
HMAC_SHA1:0x5ADB88B2B83C89DB0EA01E56A4D7DB4769A311B4

2.30 RETAIL-D/CEX http://www.multiupload.com/7PYR38RLO9

MD5:B34951B1C3A181811B11238204044493
CRC32:908063EF / CRC16:2DDD
SHA1:999A238C0553DB6129C5BB89982ED190EBEE2867
HMAC_SHA1:0x5ADB88B2B83C89DB0EA01E56A4D7DB4769A311B4

Is on disk: BLES00259/BLUS30118, BLES00286, BCES00098, BLES00184/BLUS30132, BLES00166, BLES00251, BLES00256, BLES00238, BLES00250, BLES00289, BLES00276, BLES00277/BLES00280

3.15 RETAIL/CEX http://www.multiupload.com/4SGCDZM07C

MD5:54EE80E14E479F8351A988EB9A472072
CRC32:E82D9526 / CRC16:7DB
SHA1:FC4E891E84333F9B37FF7F253ECA165AA416C6AD
HMAC_SHA1:0xD87AFAD8C786E0EEE83C0C96EF61492D78F37980

3.15 RETAIL-D/CEX http://www.multiupload.com/M53MVW3W7K

MD5:80D7F3EC2CFEBF582926228AC3A11E21
CRC32:5D5C55CB / CRC16:D078
SHA1:7FE68E92353BAC93225272F27BF2DEB9AB6366A6
HMAC_SHA1:0xD87AFAD8C786E0EEE83C0C96EF61492D78F37980

Is on disk: BCUS98164, BLES00517, BLES00773, BLES00789, BCES00797, BLES00816, BLES00825, BLES00885, BLUS30295

BluRay region switcher

This makes changing the BluRay region switching possible. The method described below is using 3 region specific bytes (0x84, 0x85, 0x8C) to change the modelinfo.

Other modelinfo byte values: 0x81 Reference Tool, 0x82 Debug, 0x83 Japan (00), 0x84 North America (01), 0x85 Europe, Middle East, Africa (04), 0x86 South Korea (05), 0x87 United Kingom, Ireland (03), 0x88 Mexico (11), 0x89 Australia, New Zealand (02), 0x8A Singapore, Malaysia (06), 0x8B Taiwan (07), 0x8C Russia, India (08), 0x8D China (09), 0x8E Hong Kong (12)

Payloader method prerequisites:

• LV2 Patcher v9
• patchfiles (see below)

patch4.txt content (3.55 offsets):

# BD Region A (NTSC) [North America]
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary, 
# just the first QWORD of the payload
# Change region to US... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std     %r30, 0xA0(%sp)
F38C: FBE100A8 # std     %r31, 0xA8(%sp)
F390: FBA10098 # std     %r29, 0×98(%sp)
F394: F80100C0 # std     %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall 
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force US - Retail
F3A8: 3BC00084 # li        %r30, 0×84 
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp) 
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor

patch5.txt content(3.55 offsets):

# BD Region B (PAL) [Europe, Middle East, Africa]
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary, 
# just the first QWORD of the payload
# Change region to Europe... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std     %r30, 0xA0(%sp)
F38C: FBE100A8 # std     %r31, 0xA8(%sp)
F390: FBA10098 # std     %r29, 0×98(%sp)
F394: F80100C0 # std     %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall 
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force Europe - Retail
F3A8: 3BC00085 # li        %r30, 0×85 
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp) 
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor

patch6.txt content(3.55 offsets):

# BD Region C (RUSSIA/INDIA)
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary, 
# just the first QWORD of the payload
# Change region to US... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std     %r30, 0xA0(%sp)
F38C: FBE100A8 # std     %r31, 0xA8(%sp)
F390: FBA10098 # std     %r29, 0×98(%sp)
F394: F80100C0 # std     %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall 
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force Russia - Retail
F3A8: 3BC0008C # li        %r30, 0×8C 
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp) 
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor

Copy the patch files to /dev_hdd0/game/LV2000000/USRDIR and use LV2 Patcher to select the patch to use. Reboot to return to original state.

Reference:

ps3mrenigma blog export

Hardware Components

The drive controller contains a BGA-sized 2MB flash memory chip for Blu-ray drive firmware code, with the contents encrypted. In addition to this, there is a 8MB SDRAM working memory chip. Each drive contains a unique identification number, possibly stored in the SPI Serial Interface NOR Macronix flash chip. This chip or the flash chip probably stores the device key (and associated sequence keys), and the host private key. The Blu-ray drive is controlled by the Sony CXD5065 Digital Signal Processor chip and the Sony CXA2720 Front End Processor chip. Motors are driven by Rohm BA5888FP and Rohm BD7956FS.

Type	Size	Speed	Voltage	Packaging	Manufacturer	Serial Number	Description
Flash	2MB		3V		Spansion	S99-50111-001	PS3 Blu-ray firmware chip
Flash	1MB				Spansion	S29AL008D	PS3 Blu-ray firmware chip (CECHJ and later models)
SDRAM	8MB	133MHz			Samsung	K4S641632K-UC75	PS3 Blu-ray working memory chip
SDRAM	8MB				ESMT	M12L64164A-7TG	PS3 Blu-ray working memory chip (CECHJ and later models)
NOR Flash	128KB	85MHz			Macronix	MX25L1005MC-12G	PS3 Blu-ray flash chip

Bluraydrive I/O Connector

60-pin DB Connector
bluray drive

Pin	Usage	Remarks
1	EVER3.3V
2	GND	Ground
3	12_SW	12CM Disk Switch
4	8_SW	8CM Disk Switch
5	HOST_EJECT
6	HOST_DISCIN
7	DISC_CHUCK
8	PHOTO_LED
9	DISCIN_SW
10	GND	Ground
11	SCK
12	SCS
13	SIN
14	SOUT
15	XSIOINT
16	RESERVED	TXD
17	RESERVED	RD
18	XSB_CBLID
19	GND	Ground
20	DAT
21	LRCK
22	BCK
23	GND	Ground
24	HINT
25	HA1
26	XPDIAG
27	HA0
28	HA2
29	XHCS0
30	XHCS1
31	XDASP
32	GND	Ground
33	DREQ
34	GND	Ground
35	XIOW
36	GND	Ground
37	XIOR
38	GND	Ground
39	XIOCHRDY
40	CSEL
41	XDACK
42	GND	Ground
43	HDB7
44	HDB8
45	HDB6
46	HDB9
47	HDB5
48	HDB10
49	HDB4
50	HDB11
51	HDB3
52	HDB12
53	HDB2
54	HDB13
55	HDB1
56	HDB14
57	HDB0
58	HDB15
59	GND	Ground
60	XRESET

CN100 14pin

Pin	Usage	Remarks
1	5V	+5V DC
2	SCKSNS3	S clock Sense
3	Slide Cam SW
4	12cm SW	to S100: 12cm Detection Switch
5	8cm SW	to S101: 8cm Detection Switch
6	DISC CHUCK	to S102: Chucking Switch
7	DISC IN SW
8	EVER 3.3V	+3.3V DC
9	GND	Ground
10	NC	No connection
11	LOAD+	to 12
12	LOAD+	to CN101-2pin:2
13	LOAD-	to 14
14	LOAD-	to CN101-2pin:1

CN101 2pin

Pin	Usage	Remarks
1	LOAD-	to CN100-14pin:13+14
2	LOAD+	to CN100-14pin:11+12

CN200 2pin

Pin	Usage	Remarks
1	PHOTO LED	to JL200
2	GND	Ground ; to JL201

CN103 45pin

Pin	Usage	Remarks
1	IOP_MON
2	TEST_V
3	EMST
4	LDEN
5	XRST
6	SDIO
7	SEN_LDD
8	SCLK
9	THERMO
10	8.0V	8.0V DC
11	5.0V	5V DC
12	GND_LD	Ground
13	GND_LD	Ground
14	3.3V	3.3V DC
15	GND	Ground
16	GND	Ground
17	XOUT
18	H
19	G
20	F
21	E
22	VC_PD
23	D
24	C
25	B
26	A
27	5V_PD	VCC 5V DC
28	GND_PD	Ground
29	DVD_AF-
30	DVD_AF+
31	GND_PD	Ground
32	BD_AF-
33	BD_AF+
34	GND_PD	Ground
35	VPP_LCD
36	SEN_LCD
37	EXP_B-
38	EXP_B+
39	EXP_A-
40	EXP_A+
41	EXP_INIT
42	TRK_in
43	FCS_far
44	FCS_near
45	TRK_out

CN102 8pin

Pin	Usage	Remarks
1	SLDA3
2	SLDA3
3	SLDA1
4	SLDA1
5	SLDB1
6	SLDB1
7	SLDB3
8	SLDB3

CN101 14pin

Pin	Usage	Remarks
1	5V	+5V DC
2	SCKSNS3	S clock Sense
3	SW4	Slide Cam SW
4	SW3	12cm SW
5	SW2	8cm SW
6	DISC CHUCK
7	DISC IN SW
8	EVER 3.3V	+3.3V DC
9	GND	Ground
10	NC	No connection
11	LOAD+	to 12
12	LOAD+
13	LOAD-	to 14
14	LOAD-

CN100 19pin

Pin	Usage	Remarks
1	HB+
2	HB-
3	HW-
4	HW+
5	HV-
6	HV+
7	HU-
8	HU+
9	U
10	U
11	V
12	V
13	W
14	W
15	FGND	Ground
16	SIGGND	Ground
17	INSW
18	SCK5V
19	SCKSNS

CN300 45pin

Pin	Usage	Remarks
1	3.3V
2	3.3V
3	5V
4	5V
5	RESERVED
6	RESERVED
7	RESERVED
8	TRACESYNC
9	PIPESTAT0
10	PIPESTAT1
11	PIPESTAT2
12	TRACECLK
13	TRACEPKT15
14	TRACEPKT14
15	TRACEPKT11
16	TRACEPKT13
17	TRACEPKT10
18	TRACEPKT6
19	TRACEPKT9
20	TRACEPKT3
21	TRACEPKT8
22	TRACEPKT1
23	TRACEPKT5
24	TRACEPKT12
25	TRACEPKT2
26	TRACEPKT7
27	TRACEPKT0
28	TRACEPKT4
29	TINT
30	TMS
31	TDO
32	JTSEL
33	TCK
34	NTRST
35	RTCK
36	TDI
37	NSRST
38	RXD
39	TXD
40	DBDRQ
41	DBGACK
42	GND	Ground
43	GND	Ground
44	GND	Ground
45	GND	Ground

CN502 4pin

Pin	Usage	Remarks
1	12V
2	GND	Ground
3	GND	Ground
4	5V