I am a long time reader but first time poster here at qj.net and have been searching high and low for information on the whole pre-ipl dump of a ta-088v3 mobo. I have a psp 2001 with the dreaded ta-088v3 mobo and I am currently useing chickHEN R2 with CFWe and it works great however I have become a little bit obsessed with cracking the psp cause I want to just install CFW and not have to use chickHEN and all every time I shut off my psp and I just want to see it done. so after like 30 hours of searching and reading over and over and over I cant find any new information on dumping the pre-ipl I saw back in 08 codebreaker dumped some of the pre-ipl and I saw rumors that DAX broke some as well however im not seeing anything new as in within the last few months and it seems that with the darkalex forums closing its another hit to the psp community. (by the way I work at a data center and get free bandwidth and all and can host a forum however I dont have time to administer it)
so here is my main question
If we cant dump the pre-ipl because it gets locked or whatnot and we cant run any arbitrary code because its not signed and all and we dont have a way to capture the boot up via the usb cable or anything.
how about this: do you guys think we could A.) open up a psp with a ta-088v3 mobo and then do some testing to see what pins the the cpu uses to talk to the ram and then solder some wires on the pins and wire it to the data of like a usb or serial port and then use a capture program to listen in to the data being transmitted and log it and then go over it. it would be like getting a complete dump of everything that happens on boot directly to a log file on the pc.
let me know what you guys think. also I would even be willing to supply a psp with the ta-088v3 mobo for testing.