PDA

View Full Version : S0NY's Secret UNCOVERED! []


70w
06-20-2007, 09:28 AM
Just found some interesting info about s0ny's secret "unbrick"
:confused::confused::confused:
-----------------------------------------------------------------------

[THESE FILES ARE FOR REFERENCE ONLY. YOU CAN NOT RUN THEM WITHOUT THE JIGKICK]

More info:
http://forums.maxconsole.net/showthread.php?t=65518

There was a PSP that Sony unbricked that was sent back to the owner with a memory stick inside.
The memory stick contained these items:

- Binary encrypted full NAND image.
- Required modules for system control for use by IPL of debug hardware.
- Logging module for debug log review (log is saved after full write).
- A file used for testing that the system plays well (usually a demo of a PSP game).

This memory stick supposedly unbricks any PSP.
But, you need a special battery in the PSP to load the files.

This battery is know as the "Sony JigKick".
It sends data through through the 3rd. battery pin that enables writing to the IPL from the memory stick.
Here are the battery specs:

- 1.1v-3.5v debug unit for connecting through the serial port in 3rd. battery pin.
- Transmission of data is UNENCRYPTED but uses a XOR algorithm for transmission (easily parsed and analyzed).
- Contains any number of IPLs (different ones for each motherboard revision (TA-XXX))
- IPL is loaded into the Kernel Memory. ME area seems most likely (IPL of the PSP is the same but missing 2 essential modules that the debug unit has).
- Contains ipl_mg_modules.bin and ipl_mg_nanddriver.bin
- IPL is encrypted in 3 stages. Easily decrypted to show stages, but not for decrypt each individual stage.
- Contains a 40x120 column TFT screen for display.
- Has a SERIAL port for PC connectivity.
- Seems to have a 32MB ROM IMAGE on Flash.
- 8MB of RAM.
- Nickel-Cadmium Battery Cell (possibly 76 hour battery life).
- AC/DC adapter port 15V.
- Contains 4 buttons (on/off, reset, connect/disconnect, menu).
- Arrow keys UP and DOWN for menu.


Download:
http://rapidshare.com/files/37520180/Magic_Memory_Stick.rar:cool:

NeoViruS™
06-21-2007, 12:35 PM
:cool1: __GOOD INFO__:cool1:

Thread sticky for *5 days*

NeoViruS™
06-27-2007, 02:47 PM
....thread UNstuck___

70w
06-28-2007, 12:15 PM
If some of you are still wondering if the "magical memory stick and special battery (http://pspupdates.qj.net/PSP-FW-3-50-downgraded-with-magical-un-bricking-memstick-in-China-WHAT-/pg/49/aid/96016)" for the PSP is true or not, well, the video clip below will keep you guessing some more. It shows a guy (okay, a hand) downgrading a PlayStation Portable unit from firmware 3.50 to 2.71.

it seems that these folks are not so keen on sharing their secrets as a good deal of effort was spent to hide the memory stick (http://pspupdates.qj.net/tags/memory-stick/287) and the battery from view.

Based from a rough translation, we learned that this magical memory stick is able to do its trick because it's acting like a bootable disc for the PSP. The previously mentioned third pin in the battery will prevent the unit from reading any firmware data and redirect it to the memory stick. This, then, puts the PSP in a state known as "Factory Mode".

If you are wondering why firmware 2.71, take note that this is the lowest fimrware that motherboard TA-086 supports. Despite the fact that the PSP has been placed under "Factory Mode", it is still running on an un-patched motherboard.


VIDEO
http://www.tudou.com/programs/view.php?itemID=7057992

azzazil
04-10-2008, 12:34 PM
hi bro the link not working