Threaded Mode | Linear Mode

u_c_taker · 16/06/2007 10:09 AM

then 4.00 would be the last firmware sony would release

YoYoBallz · 16/06/2007 10:17 AM

Yes but I bet that battery is not easy to find, I read on qj that only sony has theses battery's.... Would be nice though if someone found a way around this, so wee could use it without the battery.. but who know if that even possible.

u_c_taker · 16/06/2007 11:07 AM

u never know but everything can be made
every code can be cracked
every protection can be defeated n breached
so i think its possible

dedat · 16/06/2007 11:52 AM

this was just posted

maxconsole Wrote:New information has come to light on the official Sony PSP unbricker. According to internet reports, a gamer sent a bricked PSP to Sony who then returned it with a memory stick inside and contained a slew of files. As already established the memory stick is useless without a special hardware battery which accesses the battery pin that enables writing the IPL from the memory stick.

Contents of returned PSP Memory Stick

- Binary encrypted full NAND image.
- Required modules for system control for use by IPL of debug hardware.
- Logging module for debug log review (log is saved after full write).
A file used for testing that the system plays well (usually a demo of a PSP game).

Special Battery hardware specifications

- 1.1v-3.5v debug unit for connecting through the serial port in 3rd. battery pin.
- Transmission of data is UNENCRYPTED but uses a XOR algorithm for transmission (easily parsed and analyzed).
- Contains any number of IPLs (different ones for each motherboard revision (TA-XXX))
- IPL is loaded into the Kernel Memory. ME area seems most likely (IPL of the PSP is the same but missing 2 essential modules that the debug unit has).
- Contains ipl_mg_modules.bin and ipl_mg_nanddriver.bin
- IPL is encrypted in 3 stages. Easily decrypted to show stages, but not for decrypt each individual stage.
- Contains a 40x120 column TFT screen for display.
- Has a SERIAL port for PC connectivity.
- Seems to have a 32MB ROM IMAGE on Flash.
- 8MB of RAM.
- Nickel-Cadmium Battery Cell (possibly 76 hour battery life).
- AC/DC adapter port 15V.
- Contains 4 buttons (on/off, reset, connect/disconnect, menu).
- Arrow keys UP and DOWN for menu.

Vegetano1 · 16/06/2007 12:02 PM

These files probebly do not even have a trade mark or what so ever..!?

Somebody up a mirror for this please..!

cR@Zy!NgLi$h · 16/06/2007 03:02 PM

"Special" Battery...?  Pah.  Not sold.

EDIT: Just read the full specs on the Battery, and while I'm still skeptical, I'll keep an eye out for the JigKick (just in case)...

ZiNgA BuRgA · 16/06/2007 05:28 PM

This was actually known quite a while ago.
The special battery boots up with a different IPL, which extracts the encrypted archive stored on the MS into flash0.

cR@Zy!NgLi$h · 17/06/2007 03:53 AM

ZiNgA BuRgA Wrote:The special battery boots up with a different IPL, which extracts the encrypted archive stored on the MS into flash0.

So it's not horse spoon? What's up with the "battery" having a screen?  Sounds to me more like this thing's a little mini computer thingy instead of a battery!?!

Vegetano1 · 17/06/2007 03:58 AM

cR@Zy!NgLi$h Wrote:[quote=ZiNgA BuRgA]
The special battery boots up with a different IPL, which extracts the encrypted archive stored on the MS into flash0.

So it's not horse spoon? What's up with the "battery" having a screen?

ZiNgA BuRgA · 17/06/2007 04:21 AM

It has a screen? All I know is that it boots it's own IPL.

Threaded Mode \| Linear Mode Magic Memory Stick Unbricker ?!?
Author	Message