https://wiki.pcbotaku.com/wiki/api.php?action=feedcontributions&feedformat=atom&user=Defor 2026-10-11T12:53:09Z User contributions MediaWiki 1.43.9 https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=257 2013-08-05T20:03:44Z

<p>Defor: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * Samsung K9F6408UOA<br /> * Samsung K9F6408UOB<br /> * Samsung K9F6408UOC - [[File:K9F6408UOC.pdf]]<br /> * Fujitsu MBM30LV0064 - [[File:MBM30LV0064.PDF]]<br /> * Toshiba TC58V64FT<br /> * Toshiba TC58V64AFT - [[File:TC58V64AFT.PDF]]<br /> * Spansion S99-50146<br /> ==Memory card pinout==<br /> http://www.hardwarebook.info/Sony_Playstation_Memory_Card<br /> <br /> <br /> ==Dumping the memory card==<br /> <br /> ===EPROM programmer method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> Dumps contain valid ECC data.<br /> <br /> ===PS2 HD Project method===<br /> NAND flash desoldered and placed on a retail PS2 memory card. '''DO NOT allow card to be mounted under the normal OSD of dump will NOT be clean!''' (Recommend using DEV1/2 method to force booting into ULE) Perform a memory card dump to HDD from each slot to ensure good dump.<br /> Dumps contain no ECC data.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Defor https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=246 2013-07-26T17:27:10Z

<p>Defor: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * K9F6408UOA<br /> * K9F6408UOB<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> * [[File:MBM30LV0064.PDF]] - Fujitsu MBM30LV0064 datasheet<br /> * TC58V64FT<br /> * [[File:TC58V64AFT.PDF]] - Toshiba TC58V64AFT datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Defor https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=245 2013-07-26T16:59:14Z

<p>Defor: /* Memory Card */</p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> * [[File:MBM30LV0064.PDF]] - Fujitsu MBM30LV0064 datasheet<br /> * TC58V64FT<br /> * [[File:TC58V64AFT.PDF]] - Toshiba TC58V64AFT datasheet<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Defor https://wiki.pcbotaku.com/wiki/index.php?title=File:TC58V64AFT.PDF&diff=244 2013-07-26T16:55:27Z

<p>Defor: Datasheet</p> <hr /> <div>Datasheet</div>

Defor https://wiki.pcbotaku.com/wiki/index.php?title=Category:Sys246&diff=243 2013-07-26T16:54:32Z

<p>Defor: </p> <hr /> <div>[http://members.iinet.net.au/~lantra9jp1/gurudumps/system246/index.html Info from guru]<br /> <br /> [http://www.csclub.uwaterloo.ca:11068/mymc/ps2mcfs.html PlayStation 2 Memory Card File System]<br /> <br /> =Memory Card=<br /> The NAND flash chip is organized into:<br /> *1024 ''Blocks''<br /> *16 ''Pages'' per block<br /> *528 ''bytes'' pr page,consisting of<br /> **256 bytes of the 1st half page<br /> **256 bytes of the 2nd half page<br /> **16 bytes ''spare''<br /> <br /> 1024*16*528=8650752 bytes. This is the size a raw dump of the chip should have. The 16 bytes spare part of the page ''should'' be used for some kind of system level ECC/error correction algorithm. For the PS2/System246 this algorithm is ''Hamming''.<br /> <br /> Some dumps do not include the spare/ECC portion, as this is not seen by the host system (it is handled by the MCU on the memory card), or they include it in a separate file. These files will be 1024*16*512=8388608 bytes, and 1024*16*16=262144 respectively.<br /> <br /> The different way to store dumps is very similar to the ISO vs RAW/BIN of optical discs.<br /> <br /> NAND flash chips seen:<br /> * [[File:K9F6408UOC.pdf]] - Samsung K9F6408U0C datasheet<br /> * [[File:MBM30LV0064.PDF]] - Fujitsu MBM30LV0064 datasheet<br /> * [[File:TC58V64AFT.PDF]] - Toshiba TC58V64AFT datasheet (Actual part is TC58V64FT)<br /> ==Dumping the memory card==<br /> <br /> ===Desoldering method===<br /> Wellon VP-490 programmer with Adapter WL-PSOP44-U001 is confirmed to make correct raw dumps.<br /> <br /> ==listing/extracting files==<br /> http://www.csclub.uwaterloo.ca:11068/mymc/ works great under linux, get the python source and run it from linux for zero issues:<br /> <br /> This is the dump of SuperDragonBallZ<br /> <br /> ~/python mymc.py NM00027.BIN ls<br /> rwx--d----+---- 33 2005-12-07 09:49:58 .<br /> -wx--d----+--H- 0 2005-01-19 12:46:14 ..<br /> rwx-f--8--+---- 46912 2005-01-19 12:46:16 boot.bin<br /> rwx-f--8--+---- 86561 2005-01-19 12:46:17 ACLOAD<br /> rwx-f--8--+---- 91265 2005-01-19 12:46:19 IOPRP214A<br /> rwx-f--8--+---- 50 2005-01-19 12:46:19 title.txt<br /> rwx-f--8--+---- 3686320 2005-12-07 09:49:24 DBALOAD<br /> rwx-f--8--+---- 105346 2005-12-07 09:49:26 DBAGAME<br /> rwx-f--8--+---- 126002 2005-12-07 09:49:27 FPGA<br /> rwx-f--8--+---- 32644 2005-12-07 09:49:29 JVFIRM<br /> rwx-f--8--+---- 261261 2005-12-07 09:49:31 IOPRP300A<br /> rwx-f--8--+---- 83725 2005-12-07 09:49:33 MCMANAC<br /> rwx-f--8--+---- 6509 2005-12-07 09:49:34 ACCORE<br /> rwx-f--8--+---- 2501 2005-12-07 09:49:34 ACFPGALD<br /> rwx-f--8--+---- 15874 2005-12-07 09:49:35 ACJVLD<br /> rwx-f--8--+---- 1745 2005-12-07 09:49:36 ACJV<br /> rwx-f--8--+---- 4901 2005-12-07 09:49:37 ACRAM<br /> rwx-f--8--+---- 1369 2005-12-07 09:49:38 ACSRAM<br /> rwx-f--8--+---- 2665 2005-12-07 09:49:39 ACMEM<br /> rwx-f--8--+---- 5997 2005-12-07 09:49:40 ACMEME<br /> rwx-f--8--+---- 2817 2005-12-07 09:49:41 ACTIMER<br /> rwx-f--8--+---- 11957 2005-12-07 09:49:42 ACATA<br /> rwx-f--8--+---- 36065 2005-12-07 09:49:43 ACCDVD<br /> rwx-f--8--+---- 6781 2005-12-07 09:49:44 ACCDVDE<br /> rwx-f--8--+---- 6501 2005-12-07 09:49:45 ACUART<br /> rwx-f--8--+---- 44869 2005-12-07 09:49:46 PADMAN<br /> rwx-f--8--+---- 10542 2005-12-07 09:49:47 MNCARDIF<br /> rwx-f--8--+---- 17067 2005-12-07 09:49:48 IOPMAIN<br /> rwx-f--8--+---- 28661 2005-12-07 09:49:49 LIBSD<br /> rwx-f--8--+---- 70925 2005-12-07 09:49:50 ACARKD_DVD<br /> rwx-f--8--+---- 76469 2005-12-07 09:49:52 CRI_ADXI<br /> rwx-f--8--+---- 1370 2005-12-07 09:49:53 INFODAT<br /> rwx-f--8--+---- 726162 2005-12-07 09:49:58 RAMDISK<br /> <br /> =To be verified=<br /> <br /> *only boot.bin is affected by magic gate on system246, it loads another file within the FS which is a lamely xored ELF file, and that one is the game boot<br /> <br /> Magic Gate on 246:<br /> *prevent that people can read the contents of the card, be it using a PC or other computer or a retail PS2.<br /> *In case the card can still be read, prevent that the encrypted file works on other dongle cards<br /> *protect the contents of the file against analysis and tampering</div>

Defor