maxconsole Wrote:New information has come to light on the official Sony PSP unbricker. According to internet reports, a gamer sent a bricked PSP to Sony who then returned it with a memory stick inside and contained a slew of files. As already established the memory stick is useless without a special hardware battery which accesses the battery pin that enables writing the IPL from the memory stick.

Contents of returned PSP Memory Stick

- Binary encrypted full NAND image.
- Required modules for system control for use by IPL of debug hardware.
- Logging module for debug log review (log is saved after full write).
A file used for testing that the system plays well (usually a demo of a PSP game).

Special Battery hardware specifications

- 1.1v-3.5v debug unit for connecting through the serial port in 3rd. battery pin.
- Transmission of data is UNENCRYPTED but uses a XOR algorithm for transmission (easily parsed and analyzed).
- Contains any number of IPLs (different ones for each motherboard revision (TA-XXX))
- IPL is loaded into the Kernel Memory. ME area seems most likely (IPL of the PSP is the same but missing 2 essential modules that the debug unit has).
- Contains ipl_mg_modules.bin and ipl_mg_nanddriver.bin
- IPL is encrypted in 3 stages. Easily decrypted to show stages, but not for decrypt each individual stage.
- Contains a 40x120 column TFT screen for display.
- Has a SERIAL port for PC connectivity.
- Seems to have a 32MB ROM IMAGE on Flash.
- 8MB of RAM.
- Nickel-Cadmium Battery Cell (possibly 76 hour battery life).
- AC/DC adapter port 15V.
- Contains 4 buttons (on/off, reset, connect/disconnect, menu).
- Arrow keys UP and DOWN for menu.