forums.ps2dev.org

pyrosama · Joined: 13 May 2005 Posts: 66

I supose I could call them and ask if I can send my psp back after it quit working and send them a nice box of chips :P

When they dont send them back call and bitch demanding they replace it!

On a more serious note:

Are there any other chips you would like removed and photographed? The board is far gone now so it wont be any further hard :P

Canti_

Dr. Vegetable · Posted: Tue Dec 13, 2005 7:07 am Post subject:

Yeah, they might conclude that you've voided your warranty. Unless you can convince them that this happened when you upgraded the firmware to 2.60...

RE: Pulling up chips, I think you got the important ones.

By the way, I just counted the layers on the main PC board. There are no fewer than eight levels of traces, and plenty of blind VIAs. There may be limits to what we will learn by visual inspection alone...

pyrosama · Joined: 13 May 2005 Posts: 66

If I can find easy way I want to sand board down layer by layer and scan pcb and digitize in cad.

Get full view of every thing.

(Any ideas of how to sand downlayers without sanding too far too fast?)

Canti_

Dr. Vegetable · Posted: Tue Dec 13, 2005 9:07 am Post subject:

Hmm... I've considered doing something like this myself, but I am sure it would be a HUGE effort and not very likely to work. I thought about peeling up some of the ground planes to see if I could make out what is going on underneath, but that was when I thought there might be only 4 or 5 layers total. It would probably be more productive (and a lot quicker) to use a continuity tester to try to figure out where some of the test points and other signal lines go.

I am also planning to "explode" a PSP in order to probe it while it is running. This is probably the only way we will figure out what some of these test points are for.

dot_blank · Joined: 28 Sep 2005 Posts: 498 Location: Brasil

thanks pyro for the pics again :) !!

and to lighten your bandwidth
here is a mirror with single zip archive
with all aforementioned cpu pics

great job ....hehe and that nand
area looks mighty toasty ;)

Download Zip
_________________
10011011 00101010 11010111 10001001 10111010

HaQue · Joined: 25 Nov 2005 Posts: 91 Location: Adelaide, Australia

Do you have the wireless module to photograph in the great detail as you did the mainboard? Im wondering how the mainboard and module communicate.

At the risk of beating this to death, Im still after some good images of it.

Whats the possibility of removing the wireless model and making a different module to do other useful functions? I highly doubt it is like a minipci interface, but it could be possible to use the header on the mainboard for some other function.

This would probably be impossible with current firmware anyway.
_________________
www.smartwave-wireless.com

Dr. Vegetable · Posted: Tue Dec 13, 2005 10:57 am Post subject:

I never did get back to figuring out how to upload pictures from my HandyCam, but if I do I'll try to post some pictures soon.

The shield on the WiFi module has a lid that snaps on/off, and a frame that is soldered to the board. Unfortunately, the frame has a support piece across the middle that seems to be designed to hide a lot of the good stuff. I had to really look around in there just to get the part number off the second chip. I think that you won't get much info from a picture unless we de-solder the frame.

Still, a picture is worth a thousand words, so I'll see what I can do.

dot_blank · Joined: 28 Sep 2005 Posts: 498 Location: Brasil

I will be sending my useless
daughter on over to pyros house for
some good RandR ;) hehe

and he will take very good pics for
us all and we will be happy and hopefully
this helps you guys out with wifi woahs :)

pyro: take a very good care of the skank ;)
and please do use a light blueish purplelish
light source as her eyes are very sensitive :P
i think this will make pics look extra sexy

cheers
_________________
10011011 00101010 11010111 10001001 10111010

pyrosama · Joined: 13 May 2005 Posts: 66

Hmm light blueish purplelish light source... I need to buy some purple shrink wrap and put on my flashlight (light source :P )

What is easiest method to remove the frame cleanly? My solder skills are poor at best.

Dot when are you planning on shipping out the dboard?

Canti_

Dr. Vegetable · Posted: Tue Dec 13, 2005 10:45 pm Post subject:

I am not sure what will be the best way to remove the frame. It is pretty small, and connected to the board very close to many of the components beneath, soldered at several tabs most of the way around the base.

Normally, I use stuff called Dry Wick ("DriWick?") which is a roll of copper braid. You simply hold the DryWick against a solder joint, heat with an iron, and the hot solder gets soaked up into the braid. If I don't have any wick handy, sometimes I just heat the joints and then quickly whack the board against a flat surface to get the hot solder to splatter off of the board. Most technicians that I know will also use a pair of cutters to separate the shield into smaller pieces, then pull them up individually. You might even just be able to heat the shield with a hot iron and pry it up.

Of course, since you stated that you lost your iron, none of this will help. This might be a bit delicate for that butane torch...

HaQue · Joined: 25 Nov 2005 Posts: 91 Location: Adelaide, Australia

I have removed the sheilds of many wireless card for modification,and I use a fine tipped soldering iron along with a solder sucker. For those that don't know what a solder sucker is, it is a spring loaded device that has small nozzle. You push the cener suction rod down and it locks in place. heat up the solder and hold the nozzle close. When the solder is liquid, press the button and the solder gets sucked up into the sucker.

You have to use one to appreciate how well it works. Ive fould it works alot better, and cleaner than solder wick. They are pretty cheap, Mine was approx AU$10(US$7).

For heating solder in very fine places, I wrap copper wire around the soldering iron tip and if need be, sharpen it as well.

Hope this helps someone.

HaQue
_________________
www.smartwave-wireless.com

Zenurb · Joined: 30 Sep 2005 Posts: 106 Location: United Kingdom

digihoe · Joined: 14 May 2005 Posts: 108

dot_blank · Joined: 28 Sep 2005 Posts: 498 Location: Brasil

If we talk about hardware, especially with
electronics ....i would say most would know
what a soldersucker is ;)

unfortunately for pyro there is no
scorchersucker ...damn your really
nuts ;)

as for the board:
boxed and ready for address
will contact briefly for further
instructions
_________________
10011011 00101010 11010111 10001001 10111010

Dr. Vegetable · Posted: Wed Dec 14, 2005 11:56 pm Post subject:

Not only do I know what a solder-sucker is, I even forgot what a solder-sucker is! I'm probably dating myself, but back when I learned how to solder, you used to be able to actually see the components with the naked eye...

pyrosama · Joined: 13 May 2005 Posts: 66

Photo's have been uploaded check them out!

Also these are the ground points of the connector to the dboard:

G G
| | | | | | | | | | | | | | | | | | | |

| | | | | | | | | | | | | | | | | | | |
G G G

As for the rest of them I dont have what it takes to find any thing else out about them I build a little continuity tester with an led and my HP 6203B DC Power Supply (fancy eq to play with leds :P ) however it will be prone to misleading me as it will not indicate if there is any resistance so small resistance would yield the same results as continuity.

Canti_

Dr. Vegetable · Posted: Sun Dec 18, 2005 9:00 pm Post subject:

Dibblah · Joined: 03 Nov 2005 Posts: 13

So now we have all flash pins identified as externally accessible. What stops us from cutting the tracks (possibly /CE and /WE only), chemically stripping the enamel off them and soldering on our own board with a http://www.samsung.com/Products/Semiconductor/NANDFlash/SLC_SmallBlock/256Mbit/K9F5608U0D/ds_k9f5608x0d_rev03.pdf?

edit - Hmmm... Looks like the data bus is not tri-stated when CE is inactive :(

I really don't see that hot-swapping can possibly work - For a start, the bad blocks list is likely to be cached, etc. So the NAND'd have to be prewritten.

Cheers,

Allan.

digihoe · Joined: 14 May 2005 Posts: 108

Yes yes... With all the flashpoints needed, atleast external programing should work... Anyone tried it?
What kind of flasher would be needed to externally flash it? Also do one need to write a program to be able to read/write the chip, nem indicates that...

Best regards and hope external programming will be with us in the future.

Dr. Vegetable · Posted: Mon Dec 19, 2005 4:38 pm Post subject:

Hot-swapping does seem like a long shot. But then again, PSP homebrew was considered to be a long shot not so long ago.

It might be possible to flash two chips so that they have the same list of bad blocks, but you would essentially have to mark both chips with the union of both sets of bad blocks. On a wing and a prayer, this might work until new bad blocks develop on either chip, but that also assumes that you can re-flash the original one in the first place, which is the "crux of the biscuit", to borrow from Frank Zappa.

That doesn't rule out cold swapping, though...

As far as external flashing goes, nobody has yet figured out how to get to these lines without opening the case and/or cutting traces, so we're still probably a long way away from that.

Dibblah · Joined: 03 Nov 2005 Posts: 13

Am I misunderstanding this, or is SmartMedia just a direct access NAND flash chip?

Surely a flasher can't be as simple as just a $20 USB card reader and wiring up a dummy smartmedia card to the traces already identified...?

http://elm-chan.org/docs/sm_e.html

And the NAND flash could also be harvested off a SM card, for dual use (Yes, it's a lot large, and you need a 32Mb card rather than 64, which probably won't work due to protocol changes)

Cheers,

Allan.

Dibblah · Joined: 03 Nov 2005 Posts: 13

user303 · Joined: 15 Dec 2005 Posts: 2

this is 100% speculation but still:

Sony must have thought about some way to repair bricked psp's.
With millions units sold and the high frequency of new firmwareupgrades there must be some percentage that the legal firmware upgrades go wrong.
Even with 0.1% failure rate, these bricked units have to be in some way easily repairable, as these units get sent in for repair.

Atleast in my mind it would make sense ;)

So keep up the excellent work!

digihoe · Joined: 14 May 2005 Posts: 108

digihoe · Joined: 14 May 2005 Posts: 108

Dr. Vegetable · Posted: Mon Dec 19, 2005 10:21 pm Post subject:

Dibblah · Joined: 03 Nov 2005 Posts: 13

Dr. Vegetable · Posted: Tue Dec 20, 2005 8:06 am Post subject:

How would that work? (Not doubting that it would, just intensely curious.)

The flash chip in the PSP has three distinct regions that would need to be programmed. Would these appear as separate partitions? I was under the impression that a regular SM card would only present a single partition to the host computer.

Dibblah · Joined: 03 Nov 2005 Posts: 13

Dr. Vegetable · Posted: Tue Dec 20, 2005 8:58 am Post subject:

Well if that would work then it seems like you could cut the traces going to the flash and connect them instead to an SM slot. Then program a different SM card with each firmware version and swap versions simply by swapping SM cards. Of course, the RAM control lines would stay connected to the original chip. You could possibly even retain the ability to use the original flash simply by wiring the chip selects through a DPDT switch to select between the NAND and the SM card for booting.

Hmm...

EDIT:Changed "SD" to "SM", per digihoe's correction. Big difference between SecureDigital and SmartMedia cards. Too many freakin' form factors! (Thanks digi!)