Looking for a way to program a NAND Flash

Discussion in 'Modding and Hacking - Consoles and Electronics' started by LeHaM, Oct 22, 2014.

  1. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    Hi guys,
    I want to try and dump a Samsung K9F6408UOC-TCB0 it's a 8Mb Nand Flash apparently.

    My TL866 can't read it of-course haha


    Sorry if this sounds noob-ish but I have a NAND-X It has lots of I/O

    What is required to read and program this chip?

    VCC, GND Clock??


    I have seen lots of those cheap NAND programmers on ebay but are aimed at the 360 nand (Like the nandx, so all the pin-outs are a mystery)...


    Any help is appreciated :D

    DataSheet: http://pdf1.alldatasheet.com/datasheet-pdf/view/114272/SAMSUNG/K9F6408U0C.html



    This may help..

    [​IMG]

    (Also my TL866 is only the CS, anyone reflashed one, what other features does A FW have apart from ICSP))


    [​IMG]
     
    Last edited: Oct 22, 2014
  2. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    This ic is used in ps2 memory card also, is there a ps2 app to dump a 1:1 hex or bin of a memorycard, no questions asked??
     
  3. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    The FMCB installer allows dumps of the card to be made, although the dumps are of the data regions of sectors on the card (ECC data will not be present). I'm quite sure that there are other tools that can do that too, but I never looked for them.
     
  4. RandQalan

    RandQalan Rapidly Rising Member

    Joined:
    Apr 12, 2013
    Messages:
    90
    Likes Received:
    1
  5. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    I took a look at MC anihaltor i think it won't work for this going by what SP193 said..
    This flash isn't a Ps2 chip it's the flash from a PSX ;)
     
  6. Mord.Fustang

    Mord.Fustang My goodness, it's nipley out!

    Joined:
    Feb 17, 2013
    Messages:
    818
    Likes Received:
    182
    Might be of help:

    http://wiki.pcbotaku.com/wiki/Category:Sys246#EPROM_programmer_method
     
    Last edited: Oct 22, 2014
  7. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    Why do you want to dump it that way? Why wouldn't a normal, software dump work? After all, the ECC data is generated by the driver and written during flashing (unless their driver is designed differently from MCMAN, but it has similar functions in my memory).

    For me, I just made a file-by-file copy of it since the PSX accesses the data on it as files.
     
    RandQalan likes this.
  8. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    If I put the PSX flash on a MC Pcb, could ulaunch read the files, I'm assuming because the MC AND PSX use the same part both would address data the same and ulaunch is run in ps2 mode on both systems..

    basically im im looking to make a clean dump, if I had the money if buy a NAND programmer compatible with this chip and do it that way but I don't have $300+ to spend on one..

    does anyone know if the psx flash is encrypted?

    also where is the DVRP physically located?
     
  9. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    You do not have to do all that, just to get access to it. The drivers for it are XFLASH and XFROMMAN, both which are conveniently stored in the PSX boot ROM. Sure, uLaunchELF does not support that interface, but writing software is easier and less invasive than physically transferring the chip elsewhere for dumping.

    The flash chip is not encrypted, AFAIK.

    The DVRP is located on the PSX mainboard. It is the only Fujitsu chip there.
     
  10. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    Hmm okies, remember my PSX is effectively dead :( unless I can get a sony disk that is (very rare here)
     
  11. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    You only need a way to run homebrew software (e.g. FMCB) to make such a dump. The SONY disc is only good for making an attempt at installing the XMB onto a new disk.
     
  12. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    What are you trying to achieve ?

    Depending on what you're trying to do you don't even need to solder the chip out of the board.

    There's nothing special about the flash on the PSX, it's treated by the system just like a PS2 memory card. Even the filesystem is identical.

    If your goal is modify the files in it, it might be doable with homebrew tools and a ethernet cable.

    So, do you care about sharing with us what you intend to do ?
     
  13. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    Oh I am talking about the HDd that's what I need, I had another thread, the hdd in my unit died and I can't load anything (FMCB boots but I can't run any homebrew like ulaunch )

    basically i I want to dump the NAND on my dead unit so I have a back up (also I don't know if it's been done). And I want to mess around with the flash and see if I can install FMCB or replace it with a larger chip..

    Does that make sense? I'm a practical learner so to speak, plus it's a cool thing to do.. Hehe :)

    if I did make a backup image using a memory card then put that image onto a new blank chip would that idea work??
     
  14. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    ok so ive been reading up on how nand chips work and what is required to read write them..

    So this chip requires only 7 data lines, i think a teensy would do the trick
     
  15. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    Well... as long as you can run FMCB, you can still run software. It's a pity that uLaunchELF seems to have a problem with the PSX, when the HDD unit is missing/malfunctioning.

    FMCB does not support the flash chip. There's no point in installing a larger chip anyway, since there isn't much that you can put in there.
    And even if somebody writes a replacement for the OSD, why wouldn't it fit within the 8MB flash device? :/

    It's accessed with a filesystem. You do not need to treat it like a simple EEPROM chip.
    Plus that will not work properly if you replace it with a device that has a different capacity because the dump would still have a 8MB filesystem (it'll still have a capacity of 8MB, until you format it).
     
    Last edited: Oct 23, 2014
  16. l_oliveira

    l_oliveira Officer at Arms

    Joined:
    Nov 24, 2007
    Messages:
    3,879
    Likes Received:
    245
    Just to fix another misconcept on this thread. XBOX360 uses a proprietary protocol over an SPI bus to aid on board flashing. Inside the XBOX360 southbridge chip there's an 8051 based MCU which deals with low level accesses to the flashrom. It collects commands and data on the SPI bus (NAND-X) and forward it to the NAND, translating it.

    That is XBOX360 specific and has NOTHING to do with NAND chips.

    Now, there's a flasher for PS3 called "NANDWAY" which run on Teensy2++ hardware. That could work for you.

    But then what you will get at the output is a PS2 memory card image.


    What you need to do to make uLE usable with your PSX is edit the FMCB config to make it aways autoboot the uLE elf.

    that should allow you to at least use the PSX with OPL + SMB.
     
  17. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    Well I de soldered the NAND and put on a MC, ulaunch reads it fine (as expected :) ) made both a copy of just files and an image.bin using that mc anihalator.

    installed FMCB and patched xosdmain.elf with kelf signer.

    upon boot,

    "checking system integrity"

    "please send for repairs"

    booting with FMCB card just get usual black screen..

    Well ill that was fun haha :)


    ps: I formatted the flash using FMCB installer, did normal install (not cross model or regional), transferred KBIT ect using kelf twin signer (basically the exact same as making a normal card)


    there where two small (looked like resistors) right next to the flash on the PSX mobo that I accidentally desoldered, I put them back on but yeah..

    They looked like they connect to two pins on the NAND (before pin 40, so the bottom side of the chip) idk if that would cause issues or not..


    The original files on the NAND only made up total of 450k.. There was a txt file titled something like boot settings? (My PC is off ATM, I'll upload in the morning) inside it had some gibberish( I don't have Japanese lang installed on my Pc maybe that's why) and "=NORMAL"..

    currently that hat flash has none of the original files just FMCB install with patched xosdmain.elf
     
  18. sp193

    sp193 Site Soldier

    Joined:
    Mar 28, 2012
    Messages:
    2,217
    Likes Received:
    1,052
    Ah well. Whatever that floats your boat. :)

    As I wrote above, FMCB was not coded nor designed for use with the PSX's flash storage. Not only because the KELF that the FMCB installer installs is a CARD KELF (whereas the KELF that non-MC devices will contain is a DISK KELF) that will not boot from anything other than a memory card, but also because the resulting FMCB installation will still require the FREEMCB.CNF file to be stored on either a memory card or USB disk.

    So, did you or did you not ever manage to get FMCB working on your PSX?

    l_Oliveira showed me that before. It seems like a binary file to me that has some strings in it.
     
    Last edited: Oct 23, 2014
  19. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    my FMCB card (that I used to use in the PSX is set to boot Ulaunch by default, I have hot keys set for various elfs OPL being one of them. Nothing will load in this state however (corrupted disk)

    but just so I'm clear, DVRP looks at both disk FW AND Security sectors on the platters too

    as for the DVRP being the only fugitsu chip on the mobo, mine seems to have about 4 Fujitsu chips from what I can tell, I'll look up the datasheets and be sure :D

    has as the HDD fw been dumped?
     
  20. LeHaM

    LeHaM Site Soldier

    Joined:
    May 5, 2013
    Messages:
    2,634
    Likes Received:
    292
    Yes FMCB Was working perfectly on my PSX before the HDD died :( I still get the FMCB logo when boot a MC though..

    So what if I did a FMCB hdd install and copied the files off a hdd onto the PSX flash?

    are there any apps that can boot on the PSX when the DVRP locks us out? Or does it effectively halt all processes?



    its fun learning all this hehe :)
     
sonicdude10
Draft saved Draft deleted
Insert every image as a...
  1.  0%

Share This Page