Editing Memory Card

== Pinout ==
[http://www.vitadevwiki.com/index.php?title=Media#Pinout_2 Media-Pinout]

don't try to take it apart [http://imgur.com/a/yvFYG like this]
{| class="wikitable"
|-
! Pin !! Signal !! Description
|-
| 1 || INS ||  Detection Pin
|-
| 2 || SCLK ||  Serial Clock
|-
| 3 || VCC ||  Voltage
|-
| 4 || D3 ||  Data 2
|-
| 5 || D2 ||  Data 3
|-
| 6 || D1 ||  Data 1
|-
| 7 || D0 ||  Data 0
|-
| 8 || BS ||  Bus State
|-
| 9 || VSS ||  Ground
|-
|}

pinouts by [https://twitter.com/Asdron_/status/781948076281954304 Asdron] also confirmed by [https://twitter.com/Asdron_/status/781948076281954304 RichDevX]

About Pin 1: "it's an input pin on the host controller (pulled up high), and the pin on the card is grounded" (source [https://twitter.com/RichDevX/status/779282383132626945 RichDevX])


== Soft Reversing ==
The OS driver for the Memory Card can be found here:
 [[Files_on_the_PS_Vita#os0|os0]]:kd/magicgate.skprx

But this will require a kernel exploit source to be able to dump this kernel driver and reverse / analyze it for future purpose which is right now not possible to do the lack of the source code for [[HENkaku]].


== HW Reversing ==
(by [https://twitter.com/RichDevX RichDevX])
*[https://twitter.com/RichDevX/status/780488977023430657 Waveform of the memory card, planning to release the source code for the simple logic analyzer soon. PulseView is awesome :D] [https://pbs.twimg.com/media/CtTX7ETXEAUadPD.jpg picture]

*[https://twitter.com/RichDevX/status/780550176633188352 Hmm, although it appears to be based on memory stick pro, looks like they may be using a different command set] [https://pbs.twimg.com/media/CtURPjqWYAIVyDg.jpg picture]

* [https://twitter.com/RichDevX/status/780558540566069248 Here's the famous serial to parallel transition command (was it designed to look like a transformer E core on purpose? ^_^)] [https://pbs.twimg.com/media/CtUZysbXgAAidfO.jpg picture]

* [https://twitter.com/RichDevX/status/780845430401798144 Some good news for the community, doesn't look like the session is encrypted. ^_^] [https://pbs.twimg.com/media/CtYetLcXEAE34Px.jpg picture]

 [https://twitter.com/RichDevX @RichDevX] I don't know what is that picture... But seems good. Right?
 [https://twitter.com/ACViperPro @ACViperPro] it's just a graphical representation of two separate sessions of 1s and 0s ^_^ (binary state of digital signals). as for the significance, the sessions are exactly the same. there's also a lot of whitespace which is a good indication :P. 

 [https://twitter.com/RichDevX @RichDevX] i'm totally noob but, quoting @yifanlu.. "Some.. packets are constant.. others--partially change after each time you turn on Vita". [https://twitter.com/RichDevX @RichDevX] "This is most likely related to some encryption mechanism." Encrypting the handshake is not much different from encrypting all! xD. 
 [https://twitter.com/Danyfenix69 @Danyfenix69] we can deal with challenge/response handshakes, session encryption would require much more work

* [https://twitter.com/RichDevX/status/781307476700491777 Looks like we found a match, that wasn't too hard :P http://crccalc.com/  (CRC-16/BUYPASS)] [https://pbs.twimg.com/media/CtfCyNEXYAAMEPP.jpg picture]

* [https://twitter.com/RichDevX/status/781948956666396672 It's game time, all your commands are belong to us ^_^] [https://pbs.twimg.com/media/CtoKK_NXYAAkafs.jpg picture]