• Super Slim Components And Test Points

    PS3 Hacks , 15.02.2013

    PS3HaX member baileyscream recently received a 12GB Super Slim PS3 for repair, he then put together a detailed thread containing some information on the Components and Test Points, here is a quote from the thread:

     

    i have recived a super slim
    CHECH-4003A
    DATE CODE [2C]
    BOARD MPX-001

    RATED: 220-240~0.85A 50/60Hz

    this one is the 12GB version
    (NO HDD)

    this also doesnt have a normal NOR chip

    in its place there is a:-

    Panasonic
    MN66840
    231P50VN

    and to the side of that there is a NAND chip (16gb)

    SAMSUNG 231
    KLMAG2GE4A-A001

    HCFE759V (<<the V could be a U)

    the ones documented on the wiki have normal NOR chips
    http://www.ps3devwiki.com/index.php?…0x&oldid=16361

    you can also see the layout of the board on the above link.

    these are images from the one i have

    To read the full story and see more awesome images in their full size, visit the thread below:
    super slim components and test points

    Discuss in Forums (43)


  • 43 Comments

    1. euss
      02-13-2013
      08:28 PM
      1

      Thanks for confirming our suspicions (we do not see 12GB model often)

      added to wiki:

      Code:
      +	N    02:24 	KLMAG2GE4A-A001‎‎ (6 changes | hist) . . (+3,705) . . [Euss‎ (6×)]
+	     01:39 	(Upload log)‎ . . [Euss‎ (13×)]
  m   01:16 	Protection‎ (diff | hist) . . (+437) . . Euss (Talk | contribs | block) (→Picture Gallery: ) [rollback]
  m   00:59 	Flash (Hardware)‎ (diff | hist) . . (+412) . . Euss (Talk | contribs | block) (→Retail: ) [rollback]
  m   00:49 	Template:Console‎ (diff | hist) . . (+173) . . Euss (Talk | contribs | block) [rollback]
+	     00:46 	MPX-00x‎‎ (3 changes | hist) . . (+221) . . [Euss‎ (3×)]
 N    00:37 	MN66840‎ (diff | hist) . . (+299) . . Euss (Talk | contribs | block) (Created page with "Category:Hardware {{stub}} == Panasonic MN66840 == <div style="float:right">Panasonic MN66840</div> Used in 'Super S...")
      did a compare with 500GB/250GB models and 12GB model:

    2. tjhooker73
      02-13-2013
      08:37 PM
      2

      A 16GB Nand ?!? what

    3. ploggy
      02-13-2013
      08:41 PM
      3

      lol, Does anyone else see the skull smoking a spliff in the 3rd pic

    4. playerkp420
      02-13-2013
      11:04 PM
      4

      Originally Posted by ploggy View Post
      lol, Does anyone else see the skull smoking a spliff in the 3rd pic
      LOL. I didn't notice that earlier.

    5. sandungas
      02-13-2013
      11:28 PM
      5

      Originally Posted by ploggy View Post
      lol, Does anyone else see the skull smoking a spliff in the 3rd pic
      LOL, this was funny


      Thx for the pics btw

    6. tjhooker73
      02-13-2013
      11:46 PM
      6

      So is the NAND chip really 16GB or is it 16MB?!?

    7. haxxxen
      02-13-2013
      11:47 PM
      7

      it is gigabit
      1gigabit same as 1megabyte

    8. baileyscream
      02-14-2013
      05:14 AM
      8

      Originally Posted by euss View Post
      Thanks for confirming our suspicions (we do not see 12GB model often)

      added to wiki:
      Code:
      +	N    02:24 	KLMAG2GE4A-A001‎‎ (6 changes | hist) . . (+3,705) . . [Euss‎ (6×)]
+	     01:39 	(Upload log)‎ . . [Euss‎ (13×)]
  m   01:16 	Protection‎ (diff | hist) . . (+437) . . Euss (Talk | contribs | block) (→Picture Gallery: ) [rollback]
  m   00:59 	Flash (Hardware)‎ (diff | hist) . . (+412) . . Euss (Talk | contribs | block) (→Retail: ) [rollback]
  m   00:49 	Template:Console‎ (diff | hist) . . (+173) . . Euss (Talk | contribs | block) [rollback]
+	     00:46 	MPX-00x‎‎ (3 changes | hist) . . (+221) . . [Euss‎ (3×)]
 N    00:37 	MN66840‎ (diff | hist) . . (+299) . . Euss (Talk | contribs | block) (Created page with "Category:Hardware {{stub}} == Panasonic MN66840 == <div style="float:right">Panasonic MN66840</div> Used in 'Super S...")
      added more info (that i should have posted in the first place)
      and a shot of the label
      this might help narrow down what has what inside
      -----------------------------------------------------------------------------------------------
      CHECH-4003A
      DATE CODE [2C]
      BOARD MPX-001

      RATED: 220-240~0.85A 50/60Hz





      ************* [ - Post Merged - ] *************
      Originally Posted by tjhooker73 View Post
      So is the NAND chip really 16GB or is it 16MB?!?
      Samsung eMMC memory comprises high-density MLC NAND and an MMC controller in a BGA package. It supports x1, x4, or x8 bus widths and interface voltages of 1.8V or 3.3V. Densities range from 4GB to 64GB.
      http://www.samsung.com/global/busine...-emmc/overview

      and on this link:
      http://www.samsung.com/global/busine...emmc/catalogue

      you will find in the tabel:-
      KLMAG2GE4A 16GB x8 1.7~1.95, 2.7~3.6 169FBGA MassProduction

    9. GregoryRasputin
      02-14-2013
      07:59 AM
      9

      [MENTION=177623]baileyscream[/MENTION] you know there are rules against posting porn O.o

    10. jhax78
      02-14-2013
      08:07 AM
      10

      thank you for this great post nice clear pictures

    11. baileyscream
      02-14-2013
      09:17 AM
      11

      Originally Posted by haxxxen View Post
      it is gigabit
      1gigabit same as 1megabyte
      i missed this earler

      your wrong
      gig to meg isnt 1-1 lol

      8 bits - 1 byte
      1024 bytes - 1 Kilobyte
      1024 Kilobytes - 1 Megabyte
      1024 Megabytes - 1 Gigabytes
      ************* [ - Post Merged - ] *************
      Originally Posted by GregoryRasputin View Post
      [MENTION=177623]baileyscream[/MENTION] you know there are rules against posting porn O.o
      hmm like when "someone" posted a pic of themselves in a "mankini"

      yes i see that rule is abided by all

      anyway everything looks better stripped lol

    12. GregoryRasputin
      02-14-2013
      09:58 AM
      12

      Originally Posted by baileyscream View Post
      hmm like when "someone" posted a pic of themselves in a "mankini"

      yes i see that rule is abided by all
      I posted that on Twitter, not the forum

    13. baileyscream
      02-14-2013
      10:19 AM
      13

      Originally Posted by GregoryRasputin View Post
      I posted that on Twitter, not the forum
      i was sure it was also posted in a thread. hmm i'm probably wrong
      kinda destroys my argument

      ah well i will cover up the "vulnerable" parts next time

      and just when i was about to make some pics of me poking about with it too

      now what am i supposed to do with these gardening gloves

    14. haxxxen
      02-14-2013
      10:20 AM
      14

      sorry for my stupid post. i don't know why i have even posted in your thread. i should have put a question mark on there or stood calm

    15. Mr.Dutch
      02-14-2013
      10:34 AM
      15

      Originally Posted by haxxxen View Post
      i should have put a question mark on there or stood calm
      just say he has a broken fuse.

    16. MJ999
      02-14-2013
      11:36 AM
      16

      Originally Posted by Mr.Dutch View Post
      just say he has a broken fuse.
      Your name should be changed to Mr.Fuseman

    17. Mr.Dutch
      02-14-2013
      01:24 PM
      17

      Originally Posted by MJ999 View Post
      Your name should be changed to Mr.Fuseman
      Mr.ConFused would fit me better.

    18. baileyscream
      02-15-2013
      07:08 PM
      18

      first post updated
      [MENTION=131344]euss[/MENTION]
      again if the added info is any use to you then please feel free to copy it to the wiki

    19. jhax78
      02-15-2013
      07:24 PM
      19

      Originally Posted by baileyscream View Post
      first post updated
      [MENTION=131344]euss[/MENTION]
      again if the added info is any use to you then please feel free to copy it to the wiki
      nice work that it runs again, did you only reflow rsx or more parts?

    20. popcorn900
      02-15-2013
      07:37 PM
      20

      Originally Posted by haxxxen View Post
      it is gigabit
      1gigabit same as 1megabyte
      What? a gig is the same as a meg? since when?
      ohh i see you said gigabit not byte my bad lol.

    21. baileyscream
      02-15-2013
      07:43 PM
      21

      Originally Posted by jhax78 View Post
      nice work that it runs again, did you only reflow rsx or more parts?
      just the gpu
      i pasted the cpu ready to do that right after but curiosity got the better of me.
      so i decided to try it first that way i could also be 100% that it was or was not the gpu

      as it happens it was

      going to check the bdvd drive next
      then i will re-strip it down and start tracing the test points.
      i cannot find any info about that panasonic chip though so i doubt a dump will be done for a long time.

      but hell if anyone finds any info or has an idea then while i have this it can be tried
      ************* [ - Post Merged - ] *************
      Originally Posted by popcorn900 View Post
      What? a gig is the same as a meg? since when?
      ohh i see you said gigabit not byte my bad lol.
      ok i'm going to assume you havent read page 2

    22. jhax78
      02-15-2013
      08:03 PM
      22

      Originally Posted by baileyscream View Post
      then i will re-strip it down and start tracing the test points.
      i cannot find any info about that panasonic chip though so i doubt a dump will be done for a long time.

      but hell if anyone finds any info or has an idea then while i have this it can be tried
      :
      http://rere.qmqm.pl/~mirq/JESD84-A44.pdf

      and checked this out?

      http://www.ps3devwiki.com/wiki/KLMAG2GE4A-A001

    23. BwE
      02-15-2013
      08:05 PM
      23

      I was just about to get all ****ty as I did this already - but realised its a 12gb

      ^_^

    24. baileyscream
      02-15-2013
      08:50 PM
      24

      Originally Posted by BwE View Post
      I was just about to get all ****ty as I did this already - but realised its a 12gb

      ^_^
      you have the test points marked out?
      can you post it so i can compare / see if there the same. it will save alot of work if you could
      ************* [ - Post Merged - ] *************
      nothing like a bit of light reading before bed
      well thats the NAND taken care off
      i wonder if the panasonic chip does something similar to the starship as in reading / writing / bad block mapping (not interlacing etc)
      if so then i wonder how hard it would be to just dump the nand.

    25. jamesst20
      02-15-2013
      10:25 PM
      25

      Originally Posted by baileyscream View Post
      you have the test points marked out?
      can you post it so i can compare / see if there the same. it will save alot of work if you could
      ************* [ - Post Merged - ] *************


      nothing like a bit of light reading before bed
      well thats the NAND taken care off
      i wonder if the panasonic chip does something similar to the starship as in reading / writing / bad block mapping (not interlacing etc)
      if so then i wonder how hard it would be to just dump the nand.
      That should still work with a Progskeet right?

    26. baileyscream
      02-15-2013
      11:36 PM
      26

      Originally Posted by jamesst20 View Post
      That should still work with a Progskeet right?
      well thats just it.
      i haven't done one of these before
      so its all trial and error for me.

      the 16GB nand mapped (thank you [MENTION=131344]euss[/MENTION] for this)
      http://www.ps3devwiki.com/wiki/KLMAG2GE4A-A001

      and standard nand
      http://www.ps3devwiki.com/wiki/File:TOSP1-48pin.png

      so does this chip need:-
      R/B
      RE
      CE
      CLE
      ALE
      WE
      WP

      for a dump to be possible?
      well there is alot to read and the info done by euss [post 2] and the linked to pdf's
      also the links posted by [MENTION=163476]jhax[/MENTION] [post 23 ]
      should give the answer

    27. digiprog
      02-16-2013
      02:55 AM
      27

      hehe :P 16gb well that's a huge NAND
      ************* [ - Post Merged - ] *************
      wow.. 16GB NAND .. btw does it have a star chip or even some way to JTAG this baby ? :P
      u know old ps3 has no JTAG enabled :P

    28. Mr.Dutch
      02-16-2013
      03:46 AM
      28

      Originally Posted by baileyscream View Post
      i have got the super slim working by doing a reflow on my re-work station.
      that this new machine allready need a reflow/reball, how is this possible.

      it took the fat ps3's some years to do this?

    29. digiprog
      02-16-2013
      05:52 AM
      29

      Originally Posted by Mr.Dutch View Post
      that this new machine allready need a reflow/reball, how is this possible.

      it took the fat ps3's some years to do this?
      bailey had noticed that some liquid is spit inside the ps3. so he cleaned and reflowed

    30. Mr.Dutch
      02-16-2013
      06:38 AM
      30

      Originally Posted by digiprog View Post
      bailey had noticed that some liquid is spit inside the ps3.
      now who wants to spit in his ps3, someone thats so frustrated that he lost a game?

      ooh, you probably mean spilt.

    31. arwynj55
      02-16-2013
      08:48 AM
      31

      well.. now that we got more info of the super slim... I guess good things are going to come...

    32. baileyscream
      02-16-2013
      08:49 AM
      32

      Originally Posted by digiprog View Post
      hehe :P 16gb well that's a huge NAND

      wow.. 16GB NAND .. btw does it have a star chip or even some way to JTAG this baby ? :P
      u know old ps3 has no JTAG enabled :P
      yep if i can get it to dump then this is not going to be a 20min job lol

      star chip? as in starship. i was wondering if the panasonic works like that although it just has 1 nand so no interleaving maybe just bad block re-mapping although this nand has a good write up so it may not need that.

      it really needs looking at propperly.
      and i can only do the basics
      but whatever i can get done will hopefully help the devs in some small way. even if its just to start documenting bits off it.
      ************* [ - Post Merged - ] *************
      Originally Posted by arwynj55 View Post
      well.. now that we got more info of the super slim... I guess good things are going to come...
      Not really
      I'm just looking at how this board is set out.
      Mapping test points
      And now seeing if the nand can be dumped

      If everything is on the nand and not on the panasonic chip then there will be more info there as it will be like dumping the nand on old phat consoles plus dumping the hdd.

      But i doubt there will be anything useful.
      It will just be worth documenting at the most

    33. guerrierodipace
      02-16-2013
      04:57 PM
      33

      [MENTION=177623]baileyscream[/MENTION]

      can be interesting trying to read like eMMC on some Corona motherboard in XBXO360
      just five solder point and a fake sd card

    34. baileyscream
      02-16-2013
      05:02 PM
      34

      Originally Posted by guerrierodipace View Post
      [MENTION=177623]baileyscream[/MENTION]

      can be interesting trying to read like eMMC on some Corona motherboard in XBXO360
      just five solder point and a fake sd card
      do you have any links for this?
      i havent got into the xbox scene so i wouldnt know where to start looking

    35. guerrierodipace
      02-16-2013
      05:16 PM
      35

      you can take a look here (using goolge translate)
      http://www.consoleopen.com/forum/tut...matizzato.html

      or googling for "corona v2 reading nand"

      I found also the original guide https://www.dropbox.com/s/ln33bajdgz...ll_Hack_GT.pdf



      The controller is different but is always eMMC standard

      ps: on xbox you don't need 68ohm resistor and only pads 1,2,3,4,16 to connect

    36. digiprog
      02-16-2013
      07:15 PM
      36

      Originally Posted by Mr.Dutch View Post
      now who wants to spit in his ps3, someone thats so frustrated that he lost a game?

      ooh, you probably mean spilt.
      haha :P yea sorry, was drunk or smthn besides im not original english u know :P i still learn english language :P

    37. euss
      02-16-2013
      08:20 PM
      37

      Originally Posted by baileyscream View Post
      do you have any links for this?
      i havent got into the xbox scene so i wouldnt know where to start looking
      http://www.ps3devwiki.com/wiki/KLMAG2GE4A-A001 already there

      using SD reader will only allow for 1 or 4 bit mode, as you wont be using the datalines used for 8 bit communication (dropping to 1bit only, when the reader relies on /CD signal).

      Also keep in mind that not all readers can be used. Sandisk seems to be a good choice, also using Linux and not Windows gives you a lot more control over the initialisation/reading/writing process (higher compatibility too).

      And yes, this trick also works on Wii-U eMMC and many ebookreaders, tablets, phones etc as eMMC is JEDEC JESD84-A4 compliant, which has a lot in common with MMC 4.x.

      With these differences:
      • original MMC: 20MHz
      • SD: 25 / 50 MHz
      • MMCplus: 26 / 52 MHz
      • eMMC: up to 200MHz
      "even though the four-bit-wide bus and high-speed modes of operation are deliberately electrically compatible with SD, the initialization protocol is different, so firmware/software updates are required to support these features in an SD reader."

      See also:
      * http://en.wikipedia.org/wiki/MultiMe..._and_MMCmobile
      * http://en.wikipedia.org/wiki/Secure_...Transfer_modes

    38. baileyscream
      02-17-2013
      06:08 AM
      38

      Originally Posted by euss View Post
      http://www.ps3devwiki.com/wiki/KLMAG2GE4A-A001 already there
      you have been busy during the night. either that or i need to refresh the page more .

      using SD reader will only allow for 1 or 4 bit mode, as you wont be using the datalines used for 8 bit communication (dropping to 1bit only, when the reader relies on /CD signal).

      Also keep in mind that not all readers can be used. Sandisk seems to be a good choice, also using Linux and not Windows gives you a lot more control over the initialisation/reading/writing process (higher compatibility too).

      And yes, this trick also works on Wii-U eMMC and many ebookreaders, tablets, phones etc as eMMC is JEDEC JESD84-A4 compliant, which has a lot in common with MMC 4.x.

      With these differences:
      • original MMC: 20MHz
      • SD: 25 / 50 MHz
      • MMCplus: 26 / 52 MHz
      • eMMC: up to 200MHz
      "even though the four-bit-wide bus and high-speed modes of operation are deliberately electrically compatible with SD, the initialization protocol is different, so firmware/software updates are required to support these features in an SD reader."

      See also:
      * http://en.wikipedia.org/wiki/MultiMe..._and_MMCmobile
      * http://en.wikipedia.org/wiki/Secure_...Transfer_modes
      thats some nice research.
      you really know where to look and how to find anything.

      i will start reading this and see what i can do with it
      thanks euss
      ************* [ - Post Merged - ] *************
      wait a min
      i have an spi flasher
      http://www.ebay.com/itm/USB-SPI-NAND...-/110845032395




      https://sites.google.com/site/rghnan...i-nand-flasher

      never used it.
      i was going to try to dump the bdvd drive chip with it but i forgot all about having it.
      just going through my box of bits and found it.

      im sure these can be used for the same eMMC nand dumping.

      anyone know for sure?

    39. euss
      02-17-2013
      07:41 AM
      39

      X360 NAND flashers use the Southbridge of the console in JTAG mode, to access the flash. You cannot use them on PS3 as such.

    40. baileyscream
      02-17-2013
      07:57 AM
      40

      Originally Posted by euss View Post
      X360 NAND flashers use the Southbridge of the console in JTAG mode, to access the flash. You cannot use them on PS3 as such.
      right. thank you.

      that saved me messing about trying to get it to work

      the sd card reader.
      is this a dummy card or an actual working sd card?

    41. euss
      02-17-2013
      09:19 AM
      41

      you solder to an old SD card, to have nice contacts to put it in your reader. alternative is to solder directly to your reader.

      alternative: normal PCB with correct spacing


    42. baileyscream
      02-17-2013
      03:59 PM
      42

      i have a wire connected to where there is an arrow in the below image.
      this is what i figure i need.
      if anyone spots a mistake then please let me know.



      [MENTION=131344]euss[/MENTION]
      the image you have in the wiki of the below is not in focus so i have done you a better one



      and this might be off use
      just traced the traces so they show better and i was using it against the wii u as a comparrison

    43. guerrierodipace
      02-27-2013
      07:46 AM
      43

      any progress?