benheck.com Forums

Videogame Hacking
It is currently Sat Jun 24, 2017 7:46 pm

All times are UTC - 6 hours




Post new topic Reply to topic  [ 347 posts ]  Go to page 1, 2, 3, 4, 5 ... 24  Next
Author Message
PostPosted: Tue Sep 04, 2007 9:38 am 
Offline
Senior Member
User avatar

Joined: Sun Jan 15, 2006 5:19 pm
Posts: 1906
Location: Formerly known as iam7805
Search Google for the TOTALNewbi MS Installer. This will create the files you need for the memory stick. It's much more versatile then the files I have previously been distributing.

Ok, so you want to unbrick or downgrade your PSP but don't have a PSP capable of running homebrew apps. No problem! In this tutorial I will show you how to modify the battery's hardware to make it activate service mode.

This is our victim. Please note that while this concept may work on non-Sony batteries, only official batteries are guaranteed to have the same internals, so we recommend using one.

STEP 1:

The first thing you need to do is obviously crack open the battery. Surprisingly, the battery isn't very hard to get in to. In this picture you can see that I'm just using a guitar pick to slide in through an edge and slide around the perimeter of the battery to seperate the two halves.

STEP 2:

Next, we need to locate a certain chip. The chip has the model number S93C56 printed on it. We are going to need to desolder pin 5 and lift it off of the board. Here is a magnified viewof the board, which shows where the chip is and which pin needs to be lifted.

Newer batteries have a much smaller board with a different layout. The same chip needs to have the pin lifted, but the chip is in a different position. Once you've located chip S93C56, the rest of the instructions are basically the same. This has been confirmed with the 2200 mAH Official Sony battery.

STEP 3:

If you are not confident in your soldering skills, have a less than steady hand or have a larger-than-optimal sized tip, please desolder the cell pack from the battery first. If you make contact between pins 5 and 6 then you will short ground to +3.6VDC! Not good! When desoldering the cell, only keep the iron on long enough to melt the solder. If you can, use a higher wattage iron so that the tip will be hotter, but you won't transfer as much heat to the cell pack. Remember that heat + Li-Ion battery = large explosion (t3h sux0r5, unless you get in on video. :twisted: Seriously though, this operation is not for the faint hearted, and should definitely not be your first soldering experience. I recommend trying your hand on lifting the pins on an N64 CPU chip. Surely if you spend enough time here you have a couple killed N64 mobos laying around. :P)

Now is actually desoldering the pin. There are a few ways you could do this, but I think my method is the best because its less likely to damage components near by. Use an Xacto knife with a sharp tip and try to put it underneath the pin. Get somebody to hold a soldering iron (WITH A VERY FINE CONICAL TIP!) on the pin. When the solder melts you can pop the pin up with the knife. Be sure not to hold the iron on the board too long to avoid the lithium battery from getting too hot and exploding. When your done it will look something like this.

STEP 4:

Finally, close the battery's casing. Use some Krazy Glue to keep it closed, or just use electrical tape around the edges like I did. I don't actually recommend the electrical tape as it makes the battery very snug in the compartment and it takes a bit of force to get it out. You can use the battery just like a regular Pandora's battery. As for getting the Memory Stick files, I can tell you that they are out there and you can find them after a bit of Googling. However, I can't tell you exactly where to find them as they contain copyrighted Sony code, and sharing them is illegal.

How does this work?

The pin that we just lifted was actually the ground pin of the EEPROM. Removing this pin effectively shuts off the EEPROM. When the microcontroller inside the battery tries to read the EEPROM, it will think the EEPROM contains all 1s (in binary). This is because of the pull-up resistors on the data lines. So the microcontroller returns a serial number of 0xFFFFFFFF to the PSP, which then goes into service mode.

Thank you for reading this, and if you have any questions, make sure to post and I'll try to help you!

-iam

_________________
I'd imagine right now you wish you were a cuttlefish...


Last edited by blackbox_dev on Thu Oct 11, 2007 7:50 pm, edited 7 times in total.

Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 10:52 am 
Offline

Joined: Tue Aug 07, 2007 8:51 am
Posts: 129
Location: Indiana
I have a question about upgrading after using the pandoras battery unbricking. When i try and upgrade to any firmware weather it be a custom firmware or an official it bricks again. the only firmware I've been able to upgrade to is 2.71 without it bricking. Any ideas why this might be happening?


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 11:03 am 
Offline
Senior Member
User avatar

Joined: Sun Jan 15, 2006 5:19 pm
Posts: 1906
Location: Formerly known as iam7805
That's kind of weird. It's possible that you have a corrupted idStorage. This pagedoesn't show the same symptoms as what you listed, but it's worth a try.

_________________
I'd imagine right now you wish you were a cuttlefish...


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 12:34 pm 
Offline
Senior Member

Joined: Mon Oct 10, 2005 7:42 am
Posts: 1573
Location: The Netherlands
Figured this out yourself iam. Great job in both cases! :o (we need to discuss some more jab ;-))


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 1:26 pm 
Offline
Portablizer

Joined: Tue Oct 11, 2005 3:44 pm
Posts: 3610
This is awesome...although I'd rather not blow off my hands :P


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 2:00 pm 
Offline
User avatar

Joined: Sun Jan 22, 2006 3:05 pm
Posts: 644
This is awesome! I'll have to try this soon.

_________________
Meh, I don't post much.


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 2:52 pm 
Offline
User avatar

Joined: Mon Aug 08, 2005 3:27 pm
Posts: 1020
Location: The end of time...
I assume re-grounding it will return it to a standard PSP battery?

_________________
Check out my Ebay page for my Custom Arcade Sticks for sale!


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 3:00 pm 
Offline
Portablizer
User avatar

Joined: Thu Nov 24, 2005 10:32 am
Posts: 5748
Location: Ontario, Canada
Looks like it, if that's all that you do.

_________________
Hey, sup?


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 3:27 pm 
Offline
Senior Member
User avatar

Joined: Mon Nov 14, 2005 10:19 pm
Posts: 3047
Location: Ontario, Canada
XPCportables wrote:
I assume re-grounding it will return it to a standard PSP battery?


heres an idea: install a switch.

_________________
Image

"Linux is only free if your time is worthless"


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 4:07 pm 
Offline
User avatar

Joined: Mon Aug 08, 2005 3:27 pm
Posts: 1020
Location: The end of time...
That's what I was thinking. I have some friends who want their PSPs downgraded and that would be the easiest way for me to do it.

_________________
Check out my Ebay page for my Custom Arcade Sticks for sale!


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 6:44 pm 
Offline
Portablizer
User avatar

Joined: Thu Nov 24, 2005 10:32 am
Posts: 5748
Location: Ontario, Canada
Umm...once you do this, is your battery gone? I found enlightening information that says so. Do you just need to do what the 1st post on HAD tells you to? Or do you just need to resolder the pin?

People who have done this, please.

_________________
Hey, sup?


Top
 Profile  
 
 Post subject:
PostPosted: Tue Sep 04, 2007 7:14 pm 
Offline
Portablizer

Joined: Tue Oct 11, 2005 3:44 pm
Posts: 3610
Re-soldering the pin should work, but I think a switch would be the best way ;)


Top
 Profile  
 
 Post subject:
PostPosted: Wed Sep 05, 2007 6:24 pm 
Offline
Senior Member
User avatar

Joined: Sun Jan 15, 2006 5:19 pm
Posts: 1906
Location: Formerly known as iam7805
Resoldering the pin should work, although I haven't tried it. If not, than you can rewrite the EEPROM once you downgrade and resolder the pin. That should clear up any potential problems.

-iam

_________________
I'd imagine right now you wish you were a cuttlefish...


Top
 Profile  
 
 Post subject:
PostPosted: Wed Sep 05, 2007 8:03 pm 
Offline
Moderator

Joined: Tue Jun 08, 2004 9:52 pm
Posts: 4793
Just to let you know, if you actually do this, the PSP battery may get as hot as 2000 degrees Fahrenheit if you short the GND.


Top
 Profile  
 
 Post subject:
PostPosted: Thu Sep 06, 2007 4:45 pm 
Offline
Senior Member
User avatar

Joined: Sun Jan 15, 2006 5:19 pm
Posts: 1906
Location: Formerly known as iam7805
Right, so you need to be really careful when you do this. You may actually want to desolder the battery attached to the board before you do this. I didn't need to however, and the battery pack obviously didn't explode or even smoke.

-iam

_________________
I'd imagine right now you wish you were a cuttlefish...


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 347 posts ]  Go to page 1, 2, 3, 4, 5 ... 24  Next


All times are UTC - 6 hours


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Powered by phpBB® Forum Software © phpBB Group