Hello Stream Crossers!
I am back today to revisit the subject of updating your PSP to run custom firmware. The original instructions needed to be done in Windows only, and required really old custom firmwares to run. This version copies all the software to the PSP and runs it there, so any Operating System can be used. Also, the updated software runs on firmware 3.xx and newer, no need to install 1.50 kernels!
First we will review a bit of information, history, and terminology regarding PSP Firmware Flashing.
First off, a PSP with Official Firmware cannot be flashed, simply because software must be run on the PSP that a) makes the memory stick bootable, and b) modifies the battery's serial number (more on this later). Thus you always need a PSP with custom firmware to start the modification process. Somewhat like Agent Smith in The Matrix.
The primary leader in this work it a programmer named Dark Alex, aka DAX. I am not sure where he is located, but I know for sure he is from a Spanish speaking country.
The first generation of PSP's were the 1000 model, depending on where you live, the last digit will not be a 0, but another number. Similarly, the next two generations were OFFICIALLY named PSP 2000 and PSP 3000.
The PSP 2000 was improved in terms of its energy efficiency, and was significantly thinner and lighter than its predacessor, the PSP 1000. It was marketed as the "PSP SLIM" in some countries, "PSP LITE" in others. Thus, gamers began referring to the first generation as the "PSP PHAT" (pronounced FAT).
So far, the PSP 3000 does not have any cool nicknames.
All official games and software for the PSP have a special "signature" code in them to verify that the game is permitted to be executed. The very first model of the PSP 1000 was released with firmware 1.50 (also referred to as the 1.50 kernel). This had a flaw in it that allowed ANY software to be executed on the PSP. SONY quickly issued a fix for this. Certain games also carried the same flaws. Some programmers were able to extract the 1.50 kernel and use it in their modification procedures.
Pandora's Battery? JigKick? WTF? When you mess up the internal software in the PSP to the point that it no longer turns on (called BRICKING) you usually have to send it back to SONY for repairs. SONY has special battery modules that will cause the PSP to boot off a special memory stick and reprogram the PSP.
A "Pandora's Battery" or "JigKick" is a battery whose serial number has been changed to 0xffffffff and works the same as the official SONY repair batteries. A "Magic Memory Stick" (aka MMS) is a memory stick made bootable by a piece of software called Despertar Del Cementerio, which is Spanish for "wake from the cemetary" as it can restore a bricked PSP without sending it to SONY for repair.
HACKABILITY
Thus far, ALL PSP 1000 models can have their firmwares upgraded. ALL PSP 1000 models can make a Pandora's Battery. This is optimal however, since the SLIM batteries are thinner than the originals, and only work in PSP SLIMs (they don't make electrical contact in PHAT PSPs). An original battery will work in all PSP's (the thinner models need a special cover to hold it in place, however).
MOST PSP 2000 models can have their firmwares upgraded. The last version with the TA-088 motherboards are NOT hackable, sorry. NONE of the PSP 2000 models can make a Pandora's Battery.
NONE of the PSP 3000 models are hackable, thus they cannot make a Pandora's Battery.
Now let's get started. I will be making reference to the 'root' or 'root directory' of the memory stick. This is the top level of the memory stick's file system. The first time you double click on it's icon, you are brought to the root of the memory stick.
To perform this, you need the following files. Please note the filename may be strang when you save it, depending on what the sources saved it as originally. You can rename the downloaded files to help you keep track of what is what.
Step 1: Backup your memory stick, get the firmwares
Charge your battery until it is 100%. You cannot run out of power during the process of writing the firmware.
Copy everything you want to keep on you memory stick to your hard drive as we will be formatting the card during this tutorial to make it bootable.
Download all the software to your computer.
Download all the firmwares to your computer. Extract them one by one and rename them as 150.PBP, 340.PBP, 380.PBP, 410.PBP and 500.PBP. Make an extra of 150.PBP and rename it as UPDATE.PBP
Step 2: Format Your Memory Stick
Using any PSP go to Settings > System Settings > Format Memory Stick
This will erase all data, and create fresh folders for you to use.
Step 3: Copy the Needed Software to the Memory Stick
Put your memory stick and fully charged battery in to the SOURCE PSP. Connect the PSP to the computer via USB so it appears as a drive.
Use WinRAR to open the Pandora Installer archive and extract the entire folder "pan3xx" to the PSP\GAME folder on the Memory Stick.
Use WinRAR to open the Despertar del Cementerio archive and extract the entire folder "dc8" to the PSP\GAME folder on the Memory Stick.
Use WinRAR to open the Custom Firmware 5.00 M33-6 archive and extract the entire folder "UPDATE" to the PSP\GAME folder on the Memory Stick
Copy UPDATE.PBP, 150.PBP, 340.PBP, 380.PBP, 410.PBP and 500.PBP to the root of the Memory Stick.
Also copy 500.PBP to the PSP\GAME\UPDATE folder.
Now disconnect the PSP from your computer.
Step 4: Create a Magic Memory Stick
If you are using a custom theme, you need to change it back to the default theme before proceeding.
On the PSP, under GAMES > MEMEORY STICK, run "Despertar del Cementerio v8". This will copy files to the Memory Stick to make it bootable for re-flashing your PSP. A long extraction process will follow.
The final step asks you to select a button to be used to boot to DC8, press and hold the DOWN direction button. (any direction is ok, I used DOWN, so the instructions will use that. If you used a different direction button, substitute it in when I say DOWN).
Once complete it will bring you back to the main screen.
You now have what is known as a "Magic Memory Stick".
Step 5: Create Padora's Battery
Remember, if your SOURCE PSP is a PSP Slim and the TARGET PSP is a Phat PSP, put the Phat PSP battery in before doing this step. Why? It will work with both batteries but the Slim battery only fits properly into a PSP Slim, it simply will not make proper electrical contact in a PSP Phat. Thus, Step 8 will not work.
The Phat PSP battery will make proper electrical contact in both kinds of devices.
If both the SOURCE and TARGET PSP's are Slim, then you are OK.
Under GAMES > MEMEORY STICK, run Pandora Installer.
Press X on the Welcome Screen to go to the Main Menu.
On the Main Menu, move the selection arrow down to "Battery options..." and press X.
This will let you create a Pandora's Battery from a normal battery, or create a normal battery from a Pandora's Battery.
First go to "dump battery serial to file" and press X to back up your original serial number. Follow the on screen instructions if there are any.
Now go to "make battery Pandora" and press X, follow the on screen instructions if there are any.
Now go to "back to mainmenu...." and press X, then "Quit" on the Main Menu and press X.
You now have what is known as a "JigKick Battery".
Step 6: Flash to the Custom Firmware.
Fully power down the TARGET PSP and disconnect the AC power if it is attached.
Now remove the battery and Memory Stick from the TARGET PSP.
Now remove the Pandora's Battery and Magic Memory Stick from the TARGET PSP.
Put the "Magic Memory Stick" into the TARGET PSP first, before the battery.
Now press and hold the DOWN direction button and put the Pandora's Battery into the TARGET PSP. The unit will turn on automatically, go into service mode, and boot from the Memory Stick (that is why the Memory Stick had to go in first).
You will now be presented with seven options. Highlight "Install 5.00 M33" and press X.
The install process will take up to 10 minutes (thus the battery must be FULLY charged). Put the TARGET PSP down and let it run through. It will either restart on its own or prompt you to press a key to reboot it or shutdown. Press X to reboot.
Congratulations, you have firmware 5.00 M33-4! One more step to go!
Step 7: Upgrade to 5.00 M33-6
After the unit restarts, go to GAMES > MEMORY STICK.
Run the "PSP Update ver 5.00". Some text will display. Press X to continue.
More text will appear, and you will be returned to the main PSP screen.
When it is complete, CONGRATULATIONS!!! You now have a fully modified PSP running custom firmware.
Step 8: Switch the battery back to normal
If you have other batteries, and wish to keep this in Pandora Mode, then skip this step.
Otherwise power down the PSP, remove the Pandora's Battery and connect the A/C Adaptor and plug it in.
Now power on the PSP. When it is fully started, put the Pandora's Battery back in. Since the PSP if fully on, it won't go into Service Mode.
Go to GAMES > MEMEORY STICK, and run Pandora Installer and go back to "Battery options...". If you backed up your battery in Step 5, select "set battery serial from file" and press X. This will rewrite the original serial number to the battery.
If you did not back up the serial, select "make battery normal" and press the X button to write a generic serial number instead.
Now your battery will function as normal.
Step 9: Prepare to play copied games
Keep the Memory Stick (and Pandora's Battery, if you didn't switch it back) in a safe place if you intend to unlock more PSP's otherwise go to SETTINGS > SYSTEM SETTINGS > FORMAT MEMORY STICK. Then copy your backed up files from Step 1 back onto the card.
Press SELECT. An on screen menu will appear. Highlight "UMD ISO MODE" and press the right direction key until "M33 driver" appears. Then highlight "EXIT" and press "X".
Copied PSP games have an *.iso or *.cso file name. Simply create an ISO folder in the root of the Memory Stick and save the games there.
They will appear under GAMES > MEMORY STICK
If the system can't see any games in the ISO directory, copy the entire contents of the Memory Stick to a temporary folder and format the Memory Stick, then copy your stuff back to the Memory Stick again.
Well that's it. Its alot of work, but is definately worth every minute.
Until next time, keep on having fun!
"bah weep graaagnah wheep ni ni bong"
Sunday, March 8, 2009
PSP: Pandora's Battery (Version 2)
How to load a custom firmware on your Sony PSP
Sunday, September 28, 2008
Wii: Play Dii Vii Dii's
WARNING! As of November 17, 2008, Nintendo has released version 3.4 of their System Software.
This release kills the Twilight Hack, and may possibly remove any unauthorized software.
Additionally Nintendo has revised their privacy policy granting themselves permission to install or unistall software on your Wii without your consent!
It is strongly suggested that you disconnect your Wii from the internet until a solution has been found.
The update is voluntary now, but clearly it won't be for long.
More information here: http://wiibrew.org/wiki/System_Menu_3.4
Today we investigate tuning your Wii into a DVD player! Hard to believe, but its true!
First, you must have the Homebrew Channel (aka HBC) installed on your Wii. If you don't, go back to my last post to find out how.
Now the easiest way to get the software you need is to install the Homebrew Browser. To use this option, you must have your Wii hooked up to a wireless network. Go to the main site CodeMii to download the latest version.
http://www.codemii.com/
http://wiibrew.org/wiki/Homebrew_apps/Homebrew_Browser
Using a card reader, extract the files to a directory in the "apps" folder of you SD card that you used in the setup of the Homebrew Channel. Now simply put the SD card back into the Wii. Now, go to the Homebrew Channel and the Homebrew Browser should be ready to launch. Here are the controls:
A Button = Click Button
B Button = Cancel Download
D Pad Left/Right = Change category
Minus/Plus Button = Previous or Next 6 homebrew applications
Home Button = Return to loader
All software that is downloaded in the Homebrew Browser is ready to go right away, and can be uninstalled via the Homebrew Browser as well.
Now, back to playing DVD's. Search through the applications under Utilities and download "DVDx Installer v1.0" and "MPlayer libdvd Edition".
Now return to the Homebrew Channel and run "DVDx Installer v1.0". This installs required files on the Wii to read DVD's. Follow the installer's instructions based on if your Wii has had a MOD chip installed or not. Once the installer exits, you don't need to run "DVDx Installer v1.0" again, unless you wish to remove the installation. Simply deleting it through the Homebrew Browser does not uninstall the files it installed.
Now simply run the MPlayer program, and put a DVD in the slot.
See this page for a summary of controls.
Now get out there and watch some DVD's. Don't forget to explore the other software titles available via the Homebrew Channel.
"bah weep graaagnah wheep ni ni bong"
Friday, August 15, 2008
Wii: Run Homebrew on Your Wii!
WARNING! As of November 17, 2008, Nintendo has released version 3.4 of their System Software.
This release kills the Twilight Hack, and may possibly remove any unauthorized software.
Additionally Nintendo has revised their privacy policy granting themselves permission to install or unistall software on your Wii without your consent!
It is strongly suggested that you disconnect your Wii from the internet until a solution has been found.
The update is voluntary now, but clearly it won't be for long.
More information here: http://wiibrew.org/wiki/System_Menu_3.4
Well the Wii has finally succumbed to the hackers. It seems that a bug in one of the first games for it, The Legend of Zelda: Twilight Princess, has a bug in it that will allow someone to load their own custom software. This has come to be known as the Twilight Hack.
Normally you have to perform the Twilight Hack each time you want to run custom software (homebrew), but some enterprising programmers have written "The Homebrew" channel for the Wii, so that you can just launch stuff straight off of your SD without having to start Twilight Princess each time.
What the Twilight Hack is is a specially modified saved game file, in which the name of the horse is too long. This crashes the game, and causes the Wii to boot off the card.
You will need the following:
- A copy of The Legend of Zelda: Twilight Princess
- An empty SD Card
- A Card Reader
- WinRAR to extract the files (download here)
- The Twilight Hack (download here)
- The Homebrew Channel (download here)
Now follow these steps:
- Unzip the Twilight Hack to the SD Card. You can delete the README file.
- In the private folder are three file paths: /private/wii/title/rzdp/data.bin, /private/wii/title/rzdj/data.bin, /private/wii/title/rzde/data.bin
- Keep one of the paths, and delete the others. If you are in Europe or Australia, keep /private/wii/title/rzdp/data.bin. If you are in Japan, keep /private/wii/title/rzdj/data.bin. If you are in Canada or the US, keep /private/wii/title/rzde/data.bin
- Extract the Homebrew Channel rar file to your desktop. In the resulting folder you will find a file named "boot.dol" copy this to the root of the SD card (the root of the card is the first level of files you see when you double click on its icon in "My Computer"). You can delete the folder from your desktop.
- Now, if you have a Zelda game in progress, save a copy to a different SD card as we will need to delete the copy on the Wii.
- Put your SD card with the Twilight Hack into the Wii.
- If you have never played the game before, then start the game and go through the process of starting a game. You don't have to actually play it, you can cancel during the opening cinematics.
- Now go into the saved game section of the Wii, and delete the Zelda save file.
- Now switch to the SD Card and copy the Twilight Hack to the Wii.
- Once complete, exit back to the main Channel screen.
- Start playing Zelda. You should see a saved game that has almost all the hearts. Select it. If you are in Canada/US there will be two saved games. Pick the first one, if it doesn't work then restart the game and try the other one.
- When the game starts, you will see a person. Walk up to him and talk to him, the game will proptly crash and you will see text on the screen.
- Follow all the instructions, and the Hombrew Channel installer will run, then the Wii will reset.
- When you get back to the channel screen, you will see The Homebrew Channel.
- To run homebrew, create a folder in the root of the SD Card titled "apps". You can now create seperate folders in the apps folder for each piece of software. To find Wii software, go to the Wiibrew Wiki.
Once the Homebrew Channel is installed, you can delete the Twilight Hack from your Wii, and either copy your saved game back, or start a new Zelda game.
In a future post, I will introduce you to several interesting pieces of software, including a Super Nintendo Emulator!!!!
Until next time, get a Wii and keep having fun!
"bah weep graaagnah wheep ni ni bong"
Saturday, March 8, 2008
PSP: UMD Ripping
How to Copy Your UMD Game to Your PC
Well Stream Crossers, I think that I have touched on a new source of inspiration: PSP Hacking.
Today I will be teaching you how to rip your UMD games to your hard drive as a backup or for playing off of your Memory Stick.
Why would you want to do that? First of all, reading the Memory Stick is much more energy efficient than spinning a disk and firing a laser, so your battery life goes up. Secondly, it helps you to prevent damage to your games by leaving them in their boxes, safe and sound.
Edited 2009-02-07: "USB Special System Storage" is no longer used since the fuctionality to mount the UMD as a drive in Windows is now built in to the firmware.
So here we go:
1) Fully shutdown your PSP by holding the power button in the off position. Then turn it back on.
2) Hold down the L & R buttons as it powers up. You will be presented with a screen with white and red writing.
3) Go to "Configuration" and press X.
4) Under "Use VshMenu" make sure it is Enabled. If not, press the down arrow until this line is highlighted red, and press X.
5) Now go to "Back" and press X.
6) On the main screen, select "Exit" and press X. Your PSP will start up as normal.
7) Now put in the "UMD" you want to rip into your PSP.
8) Press the select button to bring up the "M33 VSH MENU".
9) Now go down to "UMD DEVICE" and press right to change "Memory Stick" to "UMD Disc".
10) Press SELECT to close the menu.
11) Now connect the PSP to your computer, and start the USB Connection.
12) Now go to "My Computer" and open up the PSP drive.
13) Now you should see your game.
14) Now copy your game to anywhere you want on your Computer. - (E.x. "Desktop")
15) Now your rip is being made.
16) When it is done, disconnect your PSP, then press the select button to bring up the "M33 VSH MENU" and switch "UMD Disc" back to "Memory Stick".
Please note that this is a 100% copy of the game. It may come out to be very huge. I'm sure that there are programs out there that will allow you to remove content and compress the file down to something much smaller. Be careful, if you remove too many components from the game, it may no longer function.
"bah weep graaagnah wheep ni ni bong"
Sunday, March 2, 2008
PSP: Pandora's Battery
How to load a custom firmware on your Sony PSP
These instructions are quite old. Click here for more up to date instructions that work on any Operating System!
While I am no fan of Sony, I have to admit that the PSP has amazing potential. But only a fraction of that potential can be realized out of the box.
My brother purchased a PSP (the original black "Phat" as opposed to the current thin "Slim" version) and it wasn't long before realizing that building a decent library of games would cost a small fortune. So I searched the far reaches of the internet to amass the knowledge that I am going to divulge to you right here.
In order to convert the PSP's internal operating system (the 'firmware') you must start with a PSP that already has its firmware updated to 'custom firmware'. This 'custom firmware' is a patched version of Sony's official firmware that unlocks many of the restrictions of the offical version. This includes playing copies of games off the Memory Stick.
To flash the firmware to custom firmware we are going to perform a trick known as Pandora's Battery. The battery's serial number will be temporarily rewritten in order to put the PSP into service mode. Then it boots off of the memory stick and initializes the rewriting.
To perform this, you need the following:
Step 1: Backup your memory stick, get the firmwares, install the 1.50 kernel in the SOURCE.(Revised March 7)
Charge your battery until it is 100%. You cannot run out of power during the process of writing the firmware.
Copy everything you want to keep on you memory stick to your hard drive as we will be formatting the card during this tutorial to make it bootable.
Download all the software to your "My Documents" folder.
Download all the firmwares to your "My Documents" folder. Extract them one by one and rename them as 150.PBP, 340.PBP, 380.PBP, and 390.PBP.
Download the 1.5 Kernel Addon for your version of the Custom Firmware. Connect the SOURCE PSP to the computer in USB mode. Uncompress the contents to /PSP/GAME, then disconnect the PSP and run the 1.50 kernel installer.
Step 2: Install Microsoft .net 2.0
Pandora's GUI will not install or run without it.
Step 3: Install Pandora's GUI
Following the Ultimate Pandora link above will get you the file "14885_Pandora_sUltimateMagicStickv2.rar". Double click on it and double click on "Pandoras_GUI_v1.5.rar" in the new window that opens. Then copy the "Pandoras_GUI_v1.5" folder to your desktop.
Go into the folder and double click on "Setup Pandora's GUI.msi" to install the software. When complete, an icon will appear on your desktop.
Step 4: Prep your Memory Stick with Pandora's GUI
Put your memory stick and fully charged battery in to the SOURCE PSP. Connect the PSP to the computer via USB so it appears as a drive.
Double click Pandora's GUI to run it. It will start on the "Pandoras Battery" tab.
Click on "Load local file" and locate 150.PBP, and hit OPEN.
Under PSP Memorycard, change this to match the drive letter of your PSP while connected to the computer. Use "My Computer" to verify the letter. Change the target folder to PSP/GAME150.
Click on "Format My PSP" when done, disconnect your PSP, remove the card, hold the power button on off until it shuts down. Don't shut down Pandora's GUI.
Put the card back in, power up the PSP, and connect it via USB again. Go back to Pandora's GUI and click on "Copy Files".
When done, disconnect your PSP, remove the card, hold the power button on off until it shuts down.GUI. Put the card back in and power up the PSP.
On your PSP go to GAMES > MEMEORY STICK. You will see four items, "Pandora's Battery Creator", "Pandora's Battery Firm. Installer", and two corrupt files. This is OK, don't delete anything.
Go to the installer and press X to run it. When complete it will bring you back to the main PSP Screen.
Reconnect your PSP in USB mode. In Pandora's GUI, click on "Write IPL".
When complete, close Pandora's GUI. Keep the PSP connected in USB mode.
Step 5: Copy the additional files and folders to the memory stick
Copy 150.PBP, 340.PBP, 380.PBP to the root of the Memory Stick.
Double click on "despertar_cementerio4.rar" and copy the "despertar_cementerio" folder to your memory stick in PSP > GAME.
Double click "390m33_2.rar" and copy the UPDATE folder to your memory stick in PSP > GAME. Copy the 390.PBP firmware to your memory stick in PSP > GAME > UPDATE.
Step 6: Create a "Magic Memory Stick"
Disconnect your PSP. Under GAMES > MEMEORY STICK, run "Despertar del Cementerio". Once complete it will bring you back to the main screen.
Step 7: Create Padora's Battery
Remember, if your SOURCE PSP is a PSP Slim and the TARGET PSP is a Phat PSP, put the Phat PSP battery in before doing this step. Why? It will work with both batteries but the Slim battery only fits properly into a PSP Slim, it simply will not make proper electrical contact in a PSP Phat. Thus, Step 8 will not work.
The Phat PSP battery will make proper electrical contact in both kinds of devices.
If both the SOURCE and TARGET PSP's are Slim, then you are OK.
Under GAMES > MEMEORY STICK, run Pandora's Battery Creator.
When the select screen comes up, press triangle to backup your battery info. This is important so we can restore it later. The program will exit.
Run Pandora's Battery Creator but this time press "X" to rewrite the battery's serial number. The program will exit when done.
You now have what is known as a "JigKick Battery".
Step 8: Flash to the 3.80 Custom Firmware.
Now remove the battery and Memory Stick from the TARGET PSP.
Put the "Magic Memory Stick" into the TARGET PSP first, before the battery.
Now put the Pandora's Battery into the TARGET PSP. The unit will turn on automatically, go into service mode, and boot from the Memory Stick (that is why the Memory Stick had to go in first).
You will now be presented with four options. Simply press "X" to install 3.80 M33, the custom firmware. The install process will take up to 10 minutes. Put the TARGET PSP down and let it run through. It will either restart on its own or prompt you to press a key. Press the key it asks for.
Step 9: Upgrade to 3.90 M33-2
After the unit restarts, go to GAMES > MEMORY STICK.
Run the "PSP Update ver 3.90". Some text will display and then the official Sony Installer will begin. This is OK. Follow the on-screen prompts and let it install the update.
When it is complete, CONGRATULATIONS!!! You now have a fully modified PSP running custom firmware.
Step 10: Switch the battery back to normal
If you have other batteries, and wish to keep this in Pandora Mode, then skip this step.
Otherwise power down the PSP, remove the Pandora's Battery and connect the A/C Adaptor and plug it in.
Now power on the PSP. When it is fully started, put the Pandora's Battery back in. Since the PSP if fully on, it won't go into Service Mode.
Go to GAMES > MEMEORY STICK, and run Pandora's Battery Creator. If you backed up your battery in Step 7, press the L + R buttons at the same time. This will rewrite the original serial number to the battery.
If you did not back up the serial, press the square button to write a generic serial number instead.
Now your battery will function as normal.
Step 11: Prepare to play copied games
Keep the Memory Stick in a safe place if you intend to unlock more PSP's otherwise go to SETTINGS > SYSTEM SETTINGS > FORMAT MEMORY STICK. Then copy your backed up files from Step 1 back onto the card.
Press SELECT. An on screen menu will appear. Highlight "UMD ISO MODE" and press the right direction key until "M33 driver" appears. Then highlight "EXIT" and press "X".
Copied PSP games have an *.iso or *.cso file name. Simply create an ISO folder in the root of the Memory Stick and save the games there.
They will appear under GAMES > MEMORY STICK
If the system can't see any games in the ISO directory, copy the entire contents of the Memory Stick to a temporary folder and format the Memory Stick, then copy your stuff back to the Memory Stick again.
Well that's it. Its alot of work, but is definately worth every minute.
Until next time, keep on having fun!
"bah weep graaagnah wheep ni ni bong"
