9Likes
PANDORA BATTERY
It Allows the PSP to boot into service mode when an MMS is inserted.
There are 2 ways to create a Pandora Battery
1.Hardmodding a Pandora Battery: it involves removing 5th pin or cutting a strip to make the battery to enter service mode
Refer here on how to Hardmod a phat or slim battery.
http://www.pspmod.com/forums/psp-har...-pictures.html
IMP: a hardmod phat pandora wont work on slim model psp
2.Softmodding a Pandora Battery :- Unlike hardmodding, which requires you to tamper with battery to make it jig-kick, softmodding a battery involves changing the battery EEPROM serial to 0xFFFFFFFF which causes the console to boot into service-mode
There are many ways to softmod a battery into pandora battery , however this is supported only by limited psp.
The psps which can softmod a pb are
1. All psp phats(1k models)
2.Psp slim with TA-085v1 motherboard( only this model can softmod among all 2k)
Ways to Softmod a Pandora Battery
1.XMBattery Plugin
1. download the plugin from here XMBattery Plugin v0.1 - Homebrew Applications - PSP - QuickJump Downloads
2.follow instructions in readme and enable the plugin in your recovery menu and reboot
3.now under SYSTEM SETTINGS go to BATTERY MODE and now you can softmod
IMP: XMBattery is incompatible with 6.39 ME or 6.60 ME. Whenever i tried anabling the plugin i used to get crashes
2.Ultimate VSH Menu
1.download it from here Ultimate VSH Menu v2.00, PSP Hacks - PSP Slim Hacks
2. enable it in your recovery menu
3.you will now have option to Convert battery: pandora, autoboot or normal
btw the vsh.txt command must be ms0:/seplugins/vshmenu.prx (no 1 must be there after prx unlike the readme)
this is pointless for those who have the latest cfw(i'm talking about ME and 5.50 GEN D) which has options for softmodding built in recovery menu.
3. Using your cfw for Softmodding
1.the option to softmod from cfw is built into the following cfw versions
5.50 GEN D
6.39 ME
6.60 ME
1.go to Recovery menu on your psp
2.under advanced configuration>battery options , you will see options to make battery into normal, jig-kick or autoboot.
To convert a softmod pandora battery back into normal one
remove battery,connect the psp to AC power , go back to the place where you made the pandora(eg: in recovery menu) and insert the battery to be made normal and choose option to convert to NORMAL BATTERY
To convert a SLIM PANDORA HARDMODDED BATTERY back to normal
1.open up the battery
2. go to the place where you have made the small cut
3.using a pencil slowly rub the area of the cut with pencil lead
4.your battery should be normal now.
Once the pandora battery is done
1.insert the mms
2.hold whatever trigger required and insert the pandora battery to boot into DC menu
SECTION 3 -UNBRICK YOUR PSP
1. Unbricking a 1k or a hackable 2k
1.you will require a memory stick in the range 256 mb - 4 gb and a pandora battery.
2.head to the first part of section 2 to create an mms.
3.once done, get a softmodded/hardmodded pandora battery.
4.insert the mms, hold L trigger and then insert the pandora battery.
5.now set the psp down on some surface so that the battery doesn't come off, if its loose.
your psp will now boot into service mode with the DC menu
6.choose the first option, 'install 5.00 m33-4'
7.wait for it to be done.
8.your psp is now unbricked
NOTE :you can even install 5.00 ofw from the mms.
this tutorial is applicable if you have modded your ms with DC v8.(don't worry, if you did what i posted in the first part of section 2- ignore this)
UNBRICK UN-HACKABLE 2k (TA-088 v3 mobo)
Files you Require
•Extracted Files Original - all of the original image with the extracted files - essentially a set of service cards.
•MSID 512MB Original - this dump MSPro ID origialnoy service card, taken by MSID Dumper
•Original Dump MS - full service card image format IMG. You can look through WinHex.
•Write IPL to MS - utility service record IPL-loader in 16th sector card. IPL itself is already there: multiloader_ipl.bin
MAKING MAGIC SERVICE CARD
1.Need MS PRO DUO card neoriginal 512 MB , 2 GB or 4 GB.
2.Original SONY is not suitable, because Nanda has chips and they do not have specifications (datasheets) and programmers.
3.Download " MSID Dumper ", insert the memory card into your PSP and run the program. See on the screen the "Serial Number" and MSProID your card and write, although the dump area MSID still remain at the root of the memory card and you can then see the hex-editor. That you can come in handy when you search the data in the dump of the chip.
4.Thin body with a scalpel raspolovinivaem card in half, not ponostyu, but only the back and slightly more than half the edges.
5.Then, using tweezers pull out from the housing fee, it is not glued, but just lying in the grooves.
6.From the boards fed to a memory chip (nand), which is the largest 48 feet. A small square near the memory controller, it can not touch.
7.Insert the chip into programming with sockets TSOP-48 for this chip:
8.Keep in mind that with the mind maps are the same, but inside can be different Nanda, such as Hynix or Samsung. Therefore, under your chip is then searched the programmer. See the list of supported chips:Hynix, as far as I know, all have the same standard of conclusions on the datasheet TSOP-48, so if the letters or numbers differ from the list of supported models, it does not matter.
9.Chip is inserted in socket programming is very simple, where she has designed clothes pegs, push down on the socket, the contacts move away, put mikruha and socket is released, the contacts are pressed against the legs of the chip, so that a newbie is like two fingers on the asphalt.
10.Further, the programmer is connected to a computer with pre-installed software that came with the programmer. The program specifies a range of pages you want to dump and dump of the memory.
11.Immediately dumps the entire 2 GB of memory for very long, and not necessary. I must say that we need a service area where the registered MS ID card that serves as a key dekriptovki anbrikera files, is at the end of the chip in the second bank. This area is located on the chips of 2GB Hynix HY27UH08AG5M or analogs, as It consists of two banks of memory to 1 GB. Therefore it is necessary to dump only the last few pages of the 2nd bank. The programmer himself will tell what page ends with Nanda. You need only specify the range (and up). In my case this page with MSID is within the range 07FFC4-07FFC5
12.Next, open the dump file in a Hex editor, type in the search, what to look for, namely a piece of hex code MSID: 204D5350534E5930 , that means a literal expression _MSPSNY0, that is, it is half the 16-digit key, MSID, which all the cards MS PRO DUO memory is the same.
13.If not found, then dump the next few pages from the end, until we find the desired one. Having learned the address, now we remove only the following page, where the MSID - this is exactly 512h4 16 x 4 = 2048 64 = 2112 bytes . Chip specification, you can read and write at least this size, that is, by page, but you can just more of a multipage.
14.In changing the hex 16-digit ID of the card on the ID of the card which was removed set of the original service card. Required ID code can be found in the folder " MSID 512MB Original "in the file ID.txt .
fact that each service is encrypted with a unique set of MSID that card on which he had written, and accordingly it is decrypted and the files at work. It's just like you do password-protected archive WinRAR - What's the password install, uncompress the same password.
15.After replacing the ID, do not forget to save the file. Then sewn back this page dump at the same address from which to dump.
16.Solder in the chip in place. There needs careful not to overheat the chip and the solder legs closed, because feet are small and very close to each other. Control the solder through a magnifying glass, at a minimum there will need an 8-fold, professionals in the workshops is done through a microscope. Although pro soldering with closed eyes, but then you need experience, a good flux, which itself draws the solder to the legs, braiding, to shoot the excess solder, etc.
17.Format a memory card manufactured by the PSP.
18.From the folder " Write IPL to MS "run" install_psp_ms_multi_loader_ipl.cmd "
19.Only then do connect PSP to your computer.
20.In the console can see how determined flash drive and click on the English " Y "
21.We see a message " Write MS BOOT CODE "- then everything is fine. If you get the message " Canceled "- means the wrong letter pressed or not in the layout.
If you get the message " Check Free reserved sector: to Small Sectors reserved "-
22.Mount a Hex editor stick, like a physical drive and make sure that the 16th sector, there is known to us IPL.
23.From the folder " Extracted Files Original "copy the contents of the stick and go to flash briknutye TA-088v3 =)
Disclaimer:
i have not performed this and so i don't know how it's gonna work or provide you assistance beyond this info.
this info on creating a service card for ta 88v3 was provided to me by one of my friends and i just copy pasted it from the link.
regarding the files required, i have them but it appears they are stolen property, so i'm not giving links. However if you can convince me that you are capable of doing this, then i'll think about it.
a normal 2k hardmodded pandora should suffice for unbricking, the headache is creating the service card.
it is a must you have a solid engineering background to perform this.(not meant for 12 year old kiddos)
also make a note that the nand programmer software can only run on Windows XP and is not compatible with windows vista/7
Recover your 3k from a semi-brick.
What is a semi-brick?
semi-brick is a state where you can't boot your 3k into the XMB, however you can access recovery menu on booting up with R trigger held.
As you might have guessed, this is possible only if you have installed the 3k with 6.20 PRO-B permanent patch.
So if you have a semi-bricked 3k , that had the perma patch installed, just follow these steps to unbrick it.
1.remove battery, re-insert and power up holding R trigger.
2.if the PRO recovery menu shows up, you're in luck else you have a full-brick.
3.in the recovery menu, search for this option 'Hide cfw files' and set it to DISABLED
4.Choose 1st option -Toggle USB (make sure USB device set to ms)
5.make sure you have a 'vshorig.prx' file there (if you haven't tampered with the cfw files it should be there and you can skip step 3 and 5)
6.download this file from the link below
Download Semi-BrickRecovery.exe for free on uploading.com
7.copy that file in this location ms0:/psp/game
8.now run the Semi-BrickRecovery.exe from this folder.
9.Done!
note: the ofw that will be flashed here will be 6.35.
if you want to flash any other ofw, just goto the UPDATE folder and replace the 635.pbp with the new ofw.
make sure to change that eboot.pbp to ofw.pbp
10.if you have any plugins in the seplugin folder delete all of them now.
11.exit usb mode and choose to reset device.
12.power on again holding R trigger.
13.run the third option 'Run /PSP/GAME/RECOVERY/EBOOT.PBP'
14.press X to install ofw.
15.the 6.35 (or any other ofw you chose) updater should now come up.
your 3k is now un-bricked.
[ note: you can also do this method to unbrick psp 3k, if your psp has 6.20 TN D/E installed with the perma patch.]
should you want to go back to 6.20 PRO-B again just goto my guide section 3, and use the 6.xx downgrader.
.png)
Originally Posted by Slowman 