Bluray Drive: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
Line 494: Line 494:
== Hardware Components ==
== Hardware Components ==


The drive controller contains a BGA-sized 2MB flash memory chip for Blu-ray drive firmware code, with the contents encrypted. In addition to this, there is a 8MB SDRAM working memory chip. Each drive contains a unique identification number, possibly stored in the SPI Serial Interface NOR Macronix flash chip. This chip or the flash chip probably stores the device key (and associated sequence keys), and the host private key.
The drive controller contains a BGA-sized 2MB NOR flash memory chip for Blu-ray drive firmware code, with the contents encrypted. In addition to this, there is a 8MB SDRAM working memory chip. Each drive contains a unique identification number, possibly stored in the SPI Serial Interface Macronix EEPROM. This chip or the NOR flash chip probably stores the device key (and associated sequence keys), and the host private key.
The Blu-ray drive is controlled by the Sony CXD5065 Digital Signal Processor chip and the Sony CXA2720 Front End Processor chip. Motors are driven by Rohm BA5888FP and Rohm BD7956FS.
The Blu-ray drive is controlled by a Sony Digital Signal Processor chip (CXD6350GG-1, CXD5063AGG-1, CXD5065GB-1, CXD5065-1 depending the SKU) and a Sony CXA2720R Front End Processor chip. Motors/coils are driven by Rohm BA5888FP (Laser Driver - Tracking/Focus Coils driver) and Rohm BD7956FS (Motor Driver - EXP-Motor coils/sled/slot motor driver), of which the Laser Driver uses an OPAMP NJM13403V for Tracking/Focus CTRL.


{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
{| border="1" cellspacing="0" cellpadding="5" border="#999" class="wikitable" style="border:1px solid #999; border-collapse: collapse;"  
Line 501: Line 501:
! Type !! Size !! Speed !! Voltage !! Packaging !! Manufacturer !! Serial Number !! Description
! Type !! Size !! Speed !! Voltage !! Packaging !! Manufacturer !! Serial Number !! Description
|-
|-
| Flash || 2MB ||  || 3V ||  || Spansion || S99-50111-001 || PS3 Blu-ray firmware chip
| NOR Flash || 2MB ||  || 3V ||  || Spansion || S99-50111-001 || PS3 Blu-ray firmware chip
|-
|-
| Flash || 1MB ||  ||  ||  || Spansion || S29AL008D || PS3 Blu-ray firmware chip (CECHJ and later models)
| NOR Flash || 1MB ||  ||  ||  || Spansion || S29AL008D / AL008D0043-01 || PS3 Blu-ray firmware chip (CECHJ and later models)
|-
|-
| SDRAM || 8MB || 133MHz ||  ||  || Samsung || K4S641632K-UC75 || PS3 Blu-ray working memory chip
| SDRAM || 8MB || 133MHz ||  ||  || Samsung || K4S641632K-UC75 || PS3 Blu-ray working memory chip
Line 509: Line 509:
| SDRAM || 8MB ||  ||  ||  || ESMT || M12L64164A-7TG || PS3 Blu-ray working memory chip (CECHJ and later models)
| SDRAM || 8MB ||  ||  ||  || ESMT || M12L64164A-7TG || PS3 Blu-ray working memory chip (CECHJ and later models)
|-
|-
| NOR Flash || 128KB || 85MHz ||  ||  || Macronix || MX25L1005MC-12G || PS3 Blu-ray flash chip
| EEPROM || 128KB || 85MHz ||  ||  || Macronix || MX25L1005MC-12G || PS3 Blu-ray flash chip
|-
|-
|}
|}


== BD Drive IC Components ==
== BD Drive IC Components ==

Revision as of 13:25, 22 July 2011

BD Drive

Interface speed is max. 11MB/s based on the supported read speeds


Disc Formats supported

BD

Blu-ray disc read maximum is at 2× speed (72 Mbit/s), region coded type allowing the use of:

  • PlayStation 3 BD-ROM (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
  • BD-ROM (BD region matched; i.e., Area A, Area B, etc., and All)
  • BD-R
  • BD-RE (not compatible with BD-RE version 1.0)

DVD

DVD disc read maximum is at 8× speed (86.40 Mbit/s), region coded type allowing the use of:

  • PlayStation 2 DVD-ROM[33] (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C)
  • DVD-ROM
  • DVD-Video (DVD region matched; i.e., Zone 1, Zone 2, etc., and All)
  • DVD-Audio (DVD-Video content only)
  • DVD+R
  • DVD+RW
  • DVD-R
  • DVD-RW
  • AVCHD
  • DSD Disc
  • DualDisc
  • Super Audio CD (compatibility removed in 40 GB, the second 80 GB model (CECHF), and the 160 GB model)

CD

Compact Disc disc read maximum is at 24× speed (29.49 Mbit/s), region coded type allowing the use of:

  • PlayStation 2 CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U/C, PAL or NTSC-C, compatibility removed in 40 GB model, the second 80 GB model (CECHF), and the 160 GB model)
  • PlayStation CD-ROM (PlayStation region matched; i.e., NTSC-J, NTSC-U or PAL)
  • CD-ROM
  • CD-R
  • CD-RW
  • CD-DA
  • Photo CD?
  • Picture CD?
  • MP3 CD (MP3, WMA, ATRAC)


Bluray Drive Revisions

Firmware

Based on the firmware packages in the 3.55 PUP, there are 6-7 different bluray drive revisions:

BDIT_FIRMWARE_PACKAGE.pkg
BDPT_FIRMWARE_PACKAGE_301R.pkg
BDPT_FIRMWARE_PACKAGE_302R.pkg
BDPT_FIRMWARE_PACKAGE_303R.pkg
BDPT_FIRMWARE_PACKAGE_304R.pkg
BDPT_FIRMWARE_PACKAGE_306R.pkg
BDPT_FIRMWARE_PACKAGE_308R.pkg

Unpkg works fine, results in content, info0, info1 output.

BDIT_FIRMWARE_PACKAGE - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  35 2D 32 30 30 36 2C 20 53 6F 6E 79 20 43 6F 6D  5-2006, Sony Com
00000020  70 75 74 65 72 20 45 6E 74 65 72 74 61 69 6E 6D  puter Entertainm
00000030  65 6E 74 20 49 6E 63 2E 1A 00 00 00 00 00 00 00  ent Inc.........
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  41 96 18 D3 2D 8F 0F 68 11 4D A7 09 E4 1F A7 6F  A–.Ó-..h.M§.ä.§o
00000080  EF 29 48 A0 E9 F2 A8 F0 CC 4B F3 4D E0 4A B0 17  ï)H éò¨ðÌKóMàJ°.
00000090  C2 DA 07 5F 96 B3 C8 8D E1 06 2E 3A 1D A7 FD 20  ÂÚ._–³È.á..:.§ý 
000000A0  D9 2F E0 6E A0 14 19 F0 F2 21 AC 8B 9E 0B 5D B2  Ù/àn ..ðò!¬‹ž.]²
000000B0  07 82 6D 51 D4 2C E8 73 E1 71 8A 1B 50 A9 AD 91  .‚mQÔ,èsáqŠ.P©­‘
000000C0  33 0E 30 52 E1 AC 16 A4 81 35 E3 1F 22 6D 2C DD  3.0Rá¬.¤.5ã."m,Ý

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

001E0020  11 32 BF 1C 41 76 FD 80 5A CD B7 80 9E 48 BF F8  .2¿.Avý€ZÍ·€žH¿ø
001E0030  23 3A D0 91 09 6A 2F 88 95 24 0C D4 66 90 B1 02  #:Б.j/ˆ•$.Ôf.±.
001E0040  69 72 9B D0 53 A6 B4 8C 9E 91 D6 2D 2C 3D DF 7D  ir›ÐS¦´Œž‘Ö-,=ß}
001E0050  9B 0F 56 5A A9 E6 13 83 D1 B9 8C DE D7 50 78 F0  ›.VZ©æ.ƒÑ¹ŒÞ×Pxð
001E0060  BC 6A B2 F2 6E 64 D5 30 A1 9F B4 83 D2 54 BA 3A  ¼j²òndÕ0¡Ÿ´ƒÒTº:
001E0070  2A 76 75 EF 01 CD 71 CD 5B 77 A8 22 83 93 94 01  *vuï.ÍqÍ[w¨"ƒ“”.
001E0080  CD 18 50 F3 12 C4 4E D6 6F DF 04 98 93 84 78 2C  Í.Pó.ÄNÖoß.˜“„x,


BDPT_FIRMWARE_PACKAGE_301R - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  35 2D 32 30 30 39 2C 20 53 6F 6E 79 20 43 6F 6D  5-2009, Sony Com
00000020  70 75 74 65 72 20 45 6E 74 65 72 74 61 69 6E 6D  puter Entertainm
00000030  65 6E 74 20 49 6E 63 2E 1A 00 00 00 00 00 00 00  ent Inc.........
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  80 18 D2 E4 22 AA 2B D7 85 47 F4 40 53 9A 04 0C  €.Òä"ª+×…Gô@Sš..
00000080  D0 B8 A5 04 20 51 9E 90 09 4F 2E 78 BA 32 C0 EA  и¥. Qž..O.xº2Àê
00000090  E9 61 96 ED D8 2A 70 C0 59 68 4E B2 47 25 9C 97  éa–íØ*pÀYhN²G%œ—

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000E7FB0  C2 CD F9 06 49 3F 3D 57 2F 6A 3B CA 11 5D E5 B3  ÂÍù.I?=W/j;Ê.]å³
000E7FC0  8D 8B 6F E5 7F DE BA CB 7B BF B4 1C 1F ED 86 6E  .‹oå.ÞºË{¿´..í†n
000E7FD0  D4 04 26 35 9A 1A 9E DB 83 91 55 84 4E 7E B9 B1  Ô.&5š.žÛƒ‘U„N~¹±
000E7FE0  88 5B 48 87 AA 52 4E 8D 7F EB D3 23 05 C7 39 E5  ˆ[H‡ªRN..ëÓ#.Ç9å
000E7FF0  36 09 CE FF 1D 58 82 35 17 E4 9C 7E D8 7C EA 38  6.Îÿ.X‚5.äœ~Ø|ê8

BDPT_FIRMWARE_PACKAGE_302R - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  35 2D 32 30 30 39 2C 20 53 6F 6E 79 20 43 6F 6D  5-2009, Sony Com
00000020  70 75 74 65 72 20 45 6E 74 65 72 74 61 69 6E 6D  puter Entertainm
00000030  65 6E 74 20 49 6E 63 2E 1A 00 00 00 00 00 00 00  ent Inc.........
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  BF D1 15 FC E9 87 12 B9 3B 7D F0 54 08 79 09 0A  ¿Ñ.üé‡.¹;}ðT.y..
00000080  25 DC E1 55 BC 3A FA 4E EB F4 8C 21 F4 F2 50 98  %ÜáU¼:úNëôŒ!ôòP˜
00000090  52 45 7A 0A 0E C6 80 B7 A7 1E 0E 76 2D 47 03 59  REz..Æ€·§..v-G.Y

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000E7FB0  28 12 21 7D E4 F3 B2 D8 B3 05 2A DE 8E 05 B9 EA  (.!}äó²Ø³.*ÞŽ.¹ê
000E7FC0  76 A6 19 53 82 84 CE 8F 5C 34 42 AA 8A 45 2A F6  v¦.S‚„Î.\4BªŠE*ö
000E7FD0  8F 67 35 2E 6F 63 64 95 50 73 ED 5F 7C 65 F6 52  .g5.ocd•Psí_|eöR
000E7FE0  9F F3 A8 E8 2A EA E5 F4 79 21 5A 6A FA 4D 95 A5  Ÿó¨è*êåôy!ZjúM•¥
000E7FF0  68 35 FE 8A 83 C4 83 4A C1 EA 1D DC DA 25 77 6B  h5þŠƒÄƒJÁê.ÜÚ%wk

BDPT_FIRMWARE_PACKAGE_303R - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  35 2D 32 30 30 39 2C 20 53 6F 6E 79 20 43 6F 6D  5-2009, Sony Com
00000020  70 75 74 65 72 20 45 6E 74 65 72 74 61 69 6E 6D  puter Entertainm
00000030  65 6E 74 20 49 6E 63 2E 1A 00 00 00 00 00 00 00  ent Inc.........
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000070  BD B4 11 5E 92 F8 76 E9 00 60 84 EF 84 57 21 A8  ½´.^’øvé.`„ï„W!¨
00000080  72 B8 0A 0B 06 81 CA 24 16 14 B2 6C 7F B6 30 C7  r¸....Ê$..²l.¶0Ç
00000090  B5 69 11 E7 F5 00 CE E3 B6 27 A5 D4 C7 79 1A 65  µi.çõ.Îã¶'¥ÔÇy.e

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000E7FB0  F0 AD E2 C7 DF B5 11 6A 3C 25 B9 22 CC AB E2 77  ð­âÇßµ.j<%¹"Ì«âw
000E7FC0  A0 66 89 B5 20 08 D6 9E 94 D5 0C DC 1F BF FF 91   f‰µ .Öž”Õ.Ü.¿ÿ‘
000E7FD0  52 80 00 CD A5 CE A1 A2 1F 12 7C B8 A9 2D C9 34  R€.ͥΡ¢..|¸©-É4
000E7FE0  EB 18 88 09 10 68 6A F9 57 48 6D 03 34 AC C8 7C  ë.ˆ..hjùWHm.4¬È|
000E7FF0  A7 68 FE 09 28 D5 CD 0D BC 77 97 AA 30 06 6B 61  §hþ.(ÕÍ.¼w—ª0.ka

BDPT_FIRMWARE_PACKAGE_304R - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  37 20 53 6F 6E 79 20 43 6F 6D 70 75 74 65 72 20  7 Sony Computer 
00000020  45 6E 74 65 72 74 61 69 6E 6D 65 6E 74 20 49 6E  Entertainment In
00000030  63 2E 20 20 20 20 20 20 20 20 20 20 20 20 20 20  c.              
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  A3 4B 87 C5 C9 72 39 F1 2B 7D 9C E4 9C A9 25 70  £K‡ÅÉr9ñ+}œäœ©%p
00000070  9D A5 ED 88 D4 84 84 E7 78 AE 69 F0 99 59 E2 25  .¥íˆÔ„„çx®ið™Yâ%

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00190030  93 0D BC 5D 7B 01 49 3F 6A 08 FC 2E F3 18 CE A5  “.¼]{.I?j.ü.ó.Î¥
00190040  3E BB 43 DD EF 82 28 8F B0 42 D0 C3 7B FA 3D B4  >»CÝï‚(.°BÐÃ{ú=´
00190050  E8 0F 0D 55 1F 65 C8 D9 D8 B7 F5 FB 25 0F F5 28  è..U.eÈÙØ·õû%.õ(
00190060  03 D1 7F 6D 01 12 F2 CB EA 6E 98 09 16 96 F0 F9  .Ñ.m..òËên˜..–ðù
00190070  CA C8 A7 95 B6 C8 BA 25 1A 3E 1D 5C AB 98 86 A4  Êȧ•¶Èº%.>.\«˜†¤

BDPT_FIRMWARE_PACKAGE_306R - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  38 2D 32 30 31 30 20 53 6F 6E 79 20 43 6F 6D 70  8-2010 Sony Comp
00000020  75 74 65 72 20 45 6E 74 65 72 74 61 69 6E 6D 65  uter Entertainme
00000030  6E 74 20 49 6E 63 2E 20 20 20 20 20 20 20 20 20  nt Inc.         
00000040  00 00 00 01 00 0C 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 32 62 3E D0 C8 09 71 70  ........2b>ÐÈ.qp
00000060  62 1E 90 55 B3 C7 0D 10 69 68 B6 AB 72 07 7D AD  b..U³Ç..ih¶«r.}­
00000070  9A A0 05 D6 76 55 DA 1C 69 FC AA F2 3C 37 D6 B8  š .ÖvUÚ.iüªò<7Ö¸

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000BFFB0  2E 7C 1C CD 66 77 E4 8F B9 1C 79 70 57 26 0A B0  .|.Ífwä.¹.ypW&.°
000BFFC0  AA 7D 1E 31 38 54 7C B2 62 0E 75 8F 82 B8 65 BE  ª}.18T|²b.u.‚¸e¾
000BFFD0  61 E3 49 21 EA 74 30 EA 2E 2C 77 1F ED E4 F8 89  aãI!êt0ê.,w.íäø‰
000BFFE0  2A 8C 1A 33 C2 11 62 CF CD BA B7 2A DB 91 D6 B8  *Œ.3Â.bÏͺ·*Û‘Ö¸
000BFFF0  86 BC A4 79 1D E2 FC 2B 84 87 B9 8D 09 64 A0 4D  †¼¤y.âü+„‡¹..d M

BDPT_FIRMWARE_PACKAGE_308R - content (3.55)

head:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  43 6F 70 79 72 69 67 68 74 28 43 29 20 32 30 30  Copyright(C) 200
00000010  37 20 53 6F 6E 79 20 43 6F 6D 70 75 74 65 72 20  7 Sony Computer 
00000020  45 6E 74 65 72 74 61 69 6E 6D 65 6E 74 20 49 6E  Entertainment In
00000030  63 2E 20 20 20 20 20 20 20 20 20 20 20 20 20 20  c.              
00000040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000050  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000060  57 04 AF 8B 09 FA 3D 47 A4 6B 43 91 5B D3 75 D0  W.¯‹.ú=G¤kC‘[ÓuÐ
00000070  31 23 38 63 95 0A 07 10 71 CD 8A 8E BD 89 BB 37  1#8c•...qÍŠŽ½‰»7
00000080  27 68 E6 3D DA 45 CD CA E8 5F 7C 9C 58 6B 96 F2  'hæ=ÚEÍÊè_|œXk–ò

tail:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00190030  4B A5 79 55 FD A9 98 BE 07 96 2D 60 72 2F 8E C2  K¥yUý©˜¾.–-`r/ŽÂ
00190040  02 C6 13 BD 76 7C FF A7 AF 26 99 E6 54 E2 22 CC  .Æ.½v|ÿ§¯&™æTâ"Ì
00190050  35 47 E6 5B 18 CF D2 63 BF 4F 22 4B C9 6B 78 C5  5Gæ[.ÏÒc¿O"KÉkxÅ
00190060  1E 0D EB 47 D3 46 6F 3E 75 B2 6E 73 E6 DA 68 FF  ..ëGÓFo>u²nsæÚhÿ
00190070  FC 1F 86 2F 65 40 57 85 61 29 E5 89 BD 50 AB ED  ü.†/e@W…a)剽P«í

Hardware

When comparing with fielddata from spare parts sellers:

Drive Partno. Laser Slide Daughterboards Part no. @SKU Notes
BD400 2-888-817-01 KES-400A KEM-400AAA BMD-001 1-871-575-14
1-871-575-24
1-871-575-34
CECHA single lens (includes mount)
BD400 2-888-817-01 KES-400A KEM-400AAA BMD-001 1-871-575-14
1-871-575-24
1-871-575-34
CECHB single lens (includes mount)
BD400 2-888-817-01 KES-400A KEM-400AAA BMD-001 1-871-575-14
1-871-575-24
1-871-575-34
CECHC single lens (includes mount)
BD400 2-888-817-01 KES-400A KEM-400AAA BMD-001 1-871-575-14
1-871-575-24
1-871-575-34
CECHE single lens (includes mount)
BD400 2-888-817-01 KES-400AAA KEM-400AAA BMD-002 1-874-277-23
1-874-277-33
CECHG Single lens using cheaper parts (no mount)
BD400 2-888-817-01 KES-400A KEM-400AAA BMD-003 1-875-350-21
1-875-350-31
CECHG SEM-001: 1-875-384-21 / BMD-003: 1-875-350-31
BD410 3-278-607-01 KES-410A KEM-410ACA BMD-003 1-875-350-21
1-875-350-31
CECHH dual lens, one for CD/DVD, another for Blu-ray (includes mount)
BD410 - KES-410A KEM-410ACA ?BMD-004? ? CECHH dual lens, one for CD/DVD, another for Blu-ray (no mount)
BD410 - KES-410A KEM-410ACA ?BMD-004? ? CECHJ dual lens, one for CD/DVD, another for Blu-ray (no mount)
BD410 - KES-410A KEM-410ACA BMD-006 ? CECHK dual lens, one for CD/DVD, another for Blu-ray (includes mount)
BD410 3-874-913-11 KES-410A KEM-410ACA BMD-021 CECHL dual lens, one for CD/DVD, another for Blu-ray (includes mount)
BD410 3-874-913-11 KES-410A KEM-410ACA BMD-021 CECHM dual lens, one for CD/DVD, another for Blu-ray (includes mount)
BD410 3-874-913-11 KES-410A KEM-410ACA BMD-021 CECHP dual lens, one for CD/DVD, another for Blu-ray (includes mount)
BD410 3-874-913-11 KES-410A KEM-410ACA BMD-021 CECHQ dual lens, one for CD/DVD, another for Blu-ray (includes mount)
BD410 3-874-913-11 KES-410A KEM 410CCA ?BMD-031? -
BD450 KES-450A KEM-450AAA BMD-051 CECH-20xx
BD450 KES-450ACA KEM-450AAA BMD-051 CECH-20xx
- - - - CECH-21xx
- KES-460A - - CECH-25xx
- KES-470A - - CECH-25xx

Note: Need proper sources, drive info and which PS3 SKU's are having X drive. Please fill in the needed info if possible.

Remarry BluRay drive

Hardware is interlocked on the PS3, so exchanging a bluray drive from one unit to another requires remarriage of the components.

Procedure:

Put files on a blank usb stick & add a 2.30 or 3.15 PUP
Put in the service mode JIG/dongle and get into factory service mode.
Put the created USB stick into port 0 (closest to the reader) and run.
After you run the initial remarry process, do not take it out of factory service mode.
Put a BD disc in and run it on the PS3. (This restores your DRL files!)
Then you can take it out of factory service mode.
Launch as normal. 

Needed files on USB stick:

dev_usb000.rar (856.52 KB)

http://www.zshare.net/download/890710435e792875/
http://hotfile.com/dl/114659343/2d8630a/dev_usb000.rar.html
http://depositfiles.com/en/files/6zb5a1ozf
http://www.megaupload.com/?d=O2M43K40
http://rapidshare.com/files/457728407/dev_usb000.rar
http://www.rapidspread.com/file.jsp?id=anxklm4bcu
http://www.easy-share.com/1914734717/dev_usb000.rar
Lv2diag.self  MD5:C48E5EBFC00ABD89094CB73A2B0BEA59
manufacturing_updater_for_reset  MD5:90168C03B217CE775A7839D87BBFF2A3 / SHA1:1E770010A3A6EF572AF39783A04DF792670998D3
fdm_spu_module.self  MD5:9BDE16660221042A4440ED2C053A139E / SHA1:D63AA8F0F1C4A7A4497A9E297062CA6E9D2B568B
PS3UPDAT.PUP  (see below)
cfg [folder]
- standalone.cfg (original was MD5:24DB112BF90A4048462C6D26F4263507 / SHA1:519F627B9F367A2E0E05F956E9F2720E4C7AFE8C

for comparison:

3.55 downgrader :
- Lv2diag.self  (file1)  MD5:099F33A7967F99E91C07E870FD78B3DB / CRC32:9338ABF2 / CRC16:4FCC
- Lv2diag.self  (file2)  MD5:7A20BFDAE65EEFB47A4425DB1B52DCDE / CRC32:72740080 / CRC16:502A (same as 3.50--)
3.50 downgrader :
- Lv2diag.self  (file1)  MD5:90168C03B217CE775A7839D87BBFF2A3 / CRC32:D1F0AAFC / CRC16:CD8D
- Lv2diag.self  (file2)  MD5:7A20BFDAE65EEFB47A4425DB1B52DCDE / CRC32:72740080 / CRC16:502A
ObjectiveSuites files : 
- CONSOLE_SETUP_CEX.SIG.XML  (MD5:0DAE958782D5584DFF3A1EB880ABC067 / SHA1:544432CF2CED5836ED3B8BE9DED2898AA57AA00A)

Usable PS3UPDATE.PUP files:


2.30 RETAIL/CEX http://www.multiupload.com/62DJ3LSO62

MD5:DD2E675FCE5D2EB28CA93BC32EDB3DE6
CRC32:811F7B02 / CRC16:9696
SHA1:FB639B3ED4E7CD5C457855CF1C9B59E06C05C87A
HMAC_SHA1:0x5ADB88B2B83C89DB0EA01E56A4D7DB4769A311B4

2.30 RETAIL-D/CEX http://www.multiupload.com/7PYR38RLO9

MD5:B34951B1C3A181811B11238204044493
CRC32:908063EF / CRC16:2DDD
SHA1:999A238C0553DB6129C5BB89982ED190EBEE2867
HMAC_SHA1:0x5ADB88B2B83C89DB0EA01E56A4D7DB4769A311B4

Is on disk: BLES00259/BLUS30118, BLES00286, BCES00098, BLES00184/BLUS30132, BLES00166, BLES00251, BLES00256, BLES00238, BLES00250, BLES00289, BLES00276, BLES00277/BLES00280

3.15 RETAIL/CEX http://www.multiupload.com/4SGCDZM07C

MD5:54EE80E14E479F8351A988EB9A472072
CRC32:E82D9526 / CRC16:7DB
SHA1:FC4E891E84333F9B37FF7F253ECA165AA416C6AD
HMAC_SHA1:0xD87AFAD8C786E0EEE83C0C96EF61492D78F37980

3.15 RETAIL-D/CEX http://www.multiupload.com/M53MVW3W7K

MD5:80D7F3EC2CFEBF582926228AC3A11E21
CRC32:5D5C55CB / CRC16:D078
SHA1:7FE68E92353BAC93225272F27BF2DEB9AB6366A6
HMAC_SHA1:0xD87AFAD8C786E0EEE83C0C96EF61492D78F37980

Is on disk: BCUS98164, BLES00517, BLES00773, BLES00789, BCES00797, BLES00816, BLES00825, BLES00885, BLUS30295


BluRay region switcher

This makes changing the BluRay region switching possible. The method described below is using 3 region specific bytes (0x84, 0x85, 0x8C) to change the modelinfo.

Other modelinfo byte values: 0x81 Reference Tool, 0x82 Debug, 0x83 Japan (00), 0x84 North America (01), 0x85 Europe, Middle East, Africa (04), 0x86 South Korea (05), 0x87 United Kingom, Ireland (03), 0x88 Mexico (11), 0x89 Australia, New Zealand (02), 0x8A Singapore, Malaysia (06), 0x8B Taiwan (07), 0x8C Russia, India (08), 0x8D China (09), 0x8E Hong Kong (12)


Payloader method prerequisites:


patch4.txt content (3.55 offsets):

# BD Region A (NTSC) [North America]
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary, 
# just the first QWORD of the payload
# Change region to US... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std     %r30, 0xA0(%sp)
F38C: FBE100A8 # std     %r31, 0xA8(%sp)
F390: FBA10098 # std     %r29, 0×98(%sp)
F394: F80100C0 # std     %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall 
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force US - Retail
F3A8: 3BC00084 # li        %r30, 0×84 
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp) 
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor

patch5.txt content(3.55 offsets):

# BD Region B (PAL) [Europe, Middle East, Africa]
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary, 
# just the first QWORD of the payload
# Change region to Europe... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std     %r30, 0xA0(%sp)
F38C: FBE100A8 # std     %r31, 0xA8(%sp)
F390: FBA10098 # std     %r29, 0×98(%sp)
F394: F80100C0 # std     %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall 
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force Europe - Retail
F3A8: 3BC00085 # li        %r30, 0×85 
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp) 
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor

patch6.txt content(3.55 offsets):

# BD Region C (RUSSIA/INDIA)
# Patches marked with (*1) seem to be unstable. Thanks to drizztbsd and
# RandomUse.
# PL3:
ef48: payload.bin # this is not neccesary, 
# just the first QWORD of the payload
# Change region to US... Thanks ps3mrenigma
# Syscall preamble
F380: F821FF51 # stdu    %sp, -0xB0(%sp)
F384: 7C0802A6 # mflr    %r0
F388: FBC100A0 # std     %r30, 0xA0(%sp)
F38C: FBE100A8 # std     %r31, 0xA8(%sp)
F390: FBA10098 # std     %r29, 0×98(%sp)
F394: F80100C0 # std     %r0,  0xC0(%sp)
# capture 0x19004 if not jump to original syscall 
F398: 3FE00001 # lis        %r31, 1
F39C: 63FF9004 # ori        %r31, %r31, 0×9004
F3A0: 7C1F1800 # cmpw    %r31, %r3
F3A4: 4082003C # bne _orig_syscall
# Force Russia - Retail
F3A8: 3BC0008C # li        %r30, 0×8C 
F3AC: 3BA00001 # li        %r29, 1
F3B0: 9BA40001 # stb        %r29, 1(%r4)
F3B4: 9BC40003 # stb        %r30, 3(%r4)
F3B8: 9BA40005 # stb        %r29, 5(%r4)
F3BC: 9BA40007 # stb        %r29, 7(%r4)
F3C0: 38600000 # li        %r3, 0
# Restore STACK
F3C4: E80100C0 # ld        %r0, 0xC0(%sp)
F3C8: EBA10098 # ld        %r29, 0×98(%sp) 
F3CC: EBE100A8 # ld        %r31, 0xA8(%sp)
F3D0: EBC100A0 # ld        %r30, 0xA0(%sp)
F3D4: 7C0803A6 # mtlr    %r0
F3D8: 382100B0 # addi    %sp, %sp, 0xB0
F3DC: 4E800020 # blr
F3E0: 4823ED28 # b syscall0x363
31EB1C: 0000F380 #syscall 0x363 descriptor

Copy the patch files to /dev_hdd0/game/LV2000000/USRDIR and use LV2 Patcher to select the patch to use. Reboot to return to original state.


Reference:

ps3mrenigma blog export


Hardware Components

The drive controller contains a BGA-sized 2MB NOR flash memory chip for Blu-ray drive firmware code, with the contents encrypted. In addition to this, there is a 8MB SDRAM working memory chip. Each drive contains a unique identification number, possibly stored in the SPI Serial Interface Macronix EEPROM. This chip or the NOR flash chip probably stores the device key (and associated sequence keys), and the host private key. The Blu-ray drive is controlled by a Sony Digital Signal Processor chip (CXD6350GG-1, CXD5063AGG-1, CXD5065GB-1, CXD5065-1 depending the SKU) and a Sony CXA2720R Front End Processor chip. Motors/coils are driven by Rohm BA5888FP (Laser Driver - Tracking/Focus Coils driver) and Rohm BD7956FS (Motor Driver - EXP-Motor coils/sled/slot motor driver), of which the Laser Driver uses an OPAMP NJM13403V for Tracking/Focus CTRL.

Type Size Speed Voltage Packaging Manufacturer Serial Number Description
NOR Flash 2MB 3V Spansion S99-50111-001 PS3 Blu-ray firmware chip
NOR Flash 1MB Spansion S29AL008D / AL008D0043-01 PS3 Blu-ray firmware chip (CECHJ and later models)
SDRAM 8MB 133MHz Samsung K4S641632K-UC75 PS3 Blu-ray working memory chip
SDRAM 8MB ESMT M12L64164A-7TG PS3 Blu-ray working memory chip (CECHJ and later models)
EEPROM 128KB 85MHz Macronix MX25L1005MC-12G PS3 Blu-ray flash chip

BD Drive IC Components

CXD6350GG-1 (Digital Signal Processor)

IC300
Used in BMD-001, BMD-002

CXD5063AGG-1 (Digital Signal Processor)

IC300
Used in BMD-001, BMD-002

CXD5065GB-1 (Digital Signal Processor)

IC300
Used in BMD-001, BMD-002, BMD-003

CXD5065-1 (Digital Signal Processor)

IC300
Used in BMD-006

CXA2720R (Front-End-Processor)

IC110
Used in BMD-001, BMD-002, BMD-003, BMD-006

Rohm BA5888FP (Laser Driver - Tracking/Focus Coils driver)

IC108
Used in BMD-001, BMD-002, BMD-003, BMD-006

Rohm BD7956FS (Motor Driver - EXP-Motor coils/sled/slot motor driver)

IC103
Used in BMD-001, BMD-002, BMD-003, BMD-006

NJM13403V (OPAMP - Tracking/Focus CTRL)

IC303
Used in BMD-001, BMD-002, BMD-003

Spansion S99-50111-001 (NOR)

IC304
Contains encrypted firmware
Used in BMD-001

Spansion AL008D0043-01 (NOR)

IC304
Contains encrypted firmware
Used in BMD-002, BMD-003

Spansion S29AL008D (NOR)

IC304
Contains encrypted firmware
Used in BMD-006

ESMT K4S641632K-UC75 (RAM)

IC309
Worker RAM for BD
Used in BMD-001, BMD-002, BMD-003

ESMT M12L64164A-7TG (RAM)

IC309
Worker RAM for BD
Used in BMD-006

Macronix MX25L1005MC (EEPROM)

IC310
Key
Used in BMD-001, BMD-002, BMD-003, ?BMD-006?

CXD5064R

IC504
Used in BMD-001, BMD-002

BD Drive Connectors

CN301 - Bluraydrive Main I/O Connector

60-pin DB Connector
bluray drive

60 pins
To mainboard, Data
Used in BMD-001, BMD-002, BMD-003

Pin Usage Remarks
1 EVER3.3V
2 GND Ground
3 12_SW 12CM Disk Switch
4 8_SW 8CM Disk Switch
5 HOST_EJECT
6 HOST_DISCIN
7 DISC_CHUCK
8 PHOTO_LED
9 DISCIN_SW
10 GND Ground
11 SCK
12 SCS
13 SIN
14 SOUT
15 XSIOINT
16 RESERVED TXD
17 RESERVED RD
18 XSB_CBLID
19 GND Ground
20 DAT
21 LRCK
22 BCK
23 GND Ground
24 HINT
25 HA1
26 XPDIAG
27 HA0
28 HA2
29 XHCS0
30 XHCS1
31 XDASP
32 GND Ground
33 DREQ
34 GND Ground
35 XIOW
36 GND Ground
37 XIOR
38 GND Ground
39 XIOCHRDY
40 CSEL
41 XDACK
42 GND Ground
43 HDB7
44 HDB8
45 HDB6
46 HDB9
47 HDB5
48 HDB10
49 HDB4
50 HDB11
51 HDB3
52 HDB12
53 HDB2
54 HDB13
55 HDB1
56 HDB14
57 HDB0
58 HDB15
59 GND Ground
60 XRESET

CN100 14pin

Pin Usage Remarks
1 5V +5V DC
2 SCKSNS3 S clock Sense
3 Slide Cam SW
4 12cm SW to S100: 12cm Detection Switch
5 8cm SW to S101: 8cm Detection Switch
6 DISC CHUCK to S102: Chucking Switch
7 DISC IN SW
8 EVER 3.3V +3.3V DC
9 GND Ground
10 NC No connection
11 LOAD+ to 12
12 LOAD+ to CN101-2pin:2
13 LOAD- to 14
14 LOAD- to CN101-2pin:1


CN101 2pin

Pin Usage Remarks
1 LOAD- to CN100-14pin:13+14
2 LOAD+ to CN100-14pin:11+12

CN104 2pin

To IR-LED for detect disc insertion
Used in BMD-001, BMD-002

Pin Usage Remarks
1
2

CN200 2pin

Pin Usage Remarks
1 PHOTO LED to JL200
2 GND Ground ; to JL201


CN103 45pin

To laser, Data and Focus/Tracking
Used in BMD-001, BMD-002, BMD-003

Pin Usage Remarks
1 IOP_MON
2 TEST_V
3 EMST
4 LDEN
5 XRST
6 SDIO
7 SEN_LDD
8 SCLK
9 THERMO
10 8.0V 8.0V DC
11 5.0V 5V DC
12 GND_LD Ground
13 GND_LD Ground
14 3.3V 3.3V DC
15 GND Ground
16 GND Ground
17 XOUT
18 H
19 G
20 F
21 E
22 VC_PD
23 D
24 C
25 B
26 A
27 5V_PD VCC 5V DC
28 GND_PD Ground
29 DVD_AF-
30 DVD_AF+
31 GND_PD Ground
32 BD_AF-
33 BD_AF+
34 GND_PD Ground
35 VPP_LCD
36 SEN_LCD
37 EXP_B-
38 EXP_B+
39 EXP_A-
40 EXP_A+
41 EXP_INIT
42 TRK_in
43 FCS_far
44 FCS_near
45 TRK_out

CN102 8pin

To spindle motor
Used in BMD-001, BMD-002

Pin Usage Remarks
1 SLDA3
2 SLDA3
3 SLDA1
4 SLDA1
5 SLDB1
6 SLDB1
7 SLDB3
8 SLDB3

CN101 14pin

To position tracking mechanics
Used in BMD-001, BMD-002

Pin Usage Remarks
1 5V +5V DC
2 SCKSNS3 S clock Sense
3 SW4 Slide Cam SW
4 SW3 12cm SW
5 SW2 8cm SW
6 DISC CHUCK
7 DISC IN SW
8 EVER 3.3V +3.3V DC
9 GND Ground
10 NC No connection
11 LOAD+ to 12
12 LOAD+
13 LOAD- to 14
14 LOAD-

CN101 8pin

To position tracking mechanics
Used in BMD-003

Pin Usage Remarks
1
2
3
4
5
6
7
8

CN100 19pin

To disc motor
Used in BMD-001, BMD-002

Pin Usage Remarks
1 HB+
2 HB-
3 HW-
4 HW+
5 HV-
6 HV+
7 HU-
8 HU+
9 U
10 U
11 V
12 V
13 W
14 W
15 FGND Ground
16 SIGGND Ground
17 INSW
18 SCK5V
19 SCKSNS

CN100 18pin

To disc motor
Used in BMD-003

Pin Usage Remarks
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

CN300 45pin

?
Used in BMD-001, BMD-002, BMD-003

Pin Usage Remarks
1 3.3V
2 3.3V
3 5V
4 5V
5 RESERVED
6 RESERVED
7 RESERVED
8 TRACESYNC
9 PIPESTAT0
10 PIPESTAT1
11 PIPESTAT2
12 TRACECLK
13 TRACEPKT15
14 TRACEPKT14
15 TRACEPKT11
16 TRACEPKT13
17 TRACEPKT10
18 TRACEPKT6
19 TRACEPKT9
20 TRACEPKT3
21 TRACEPKT8
22 TRACEPKT1
23 TRACEPKT5
24 TRACEPKT12
25 TRACEPKT2
26 TRACEPKT7
27 TRACEPKT0
28 TRACEPKT4
29 TINT
30 TMS
31 TDO
32 JTSEL
33 TCK
34 NTRST
35 RTCK
36 TDI
37 NSRST
38 RXD
39 TXD
40 DBDRQ
41 DBGACK
42 GND Ground
43 GND Ground
44 GND Ground
45 GND Ground

CN502 4pin

To mainboard, Power
Used in BMD-001, BMD-002, BMD-003

Pin Usage Remarks
1 12V
2 GND Ground
3 GND Ground
4 5V