Nicodemus82 from Qj has found something really sweet. He calls it PSP Magic Memory Stick Files - Sony Unbricker. Apparently some one sent their bricked PSP to Sony and when it came back it had a memory stick with these files on it. They included:
Code:
* Binary encrypted full NAND image.
* Required modules for system control for use by IPL of debug hardware.
* Logging module for debug log review (log is saved after full write).
* A file used for testing that the system plays well (usually a demo of a PSP game).
There is some sad news with this too. This is completely usless unless you have a special battery dubed "Sony JigKick." What makes this so special? Well the battery accesses the third battery pin that "enables writing to the IPL from the memory stick.
Here are the Specs for the battery:
Code:
* 1.1v-3.5v debug unit for connecting through the serial port in 3rd. battery pin.
* Transmission of data is UNENCRYPTED but uses a XOR algorithm for transmission (easily parsed and analyzed).
* Contains any number of IPLs (different ones for each motherboard revision (TA-XXX))
* IPL is loaded into the Kernel Memory. ME area seems most likely (IPL of the PSP is the same but missing 2 essential modules that the debug unit has).
* Contains ipl_mg_modules.bin and ipl_mg_nanddriver.bin
* IPL is encrypted in 3 stages. Easily decrypted to show stages, but not for decrypt each individual stage.
* Contains a 40x120 column TFT screen for display.
* Has a SERIAL port for PC connectivity.
* Seems to have a 32MB ROM IMAGE on Flash.
* 8MB of RAM.
* Nickel-Cadmium Battery Cell (possibly 76 hour battery life).
* AC/DC adapter port 15V.
* Contains 4 buttons (on/off, reset, connect/disconnect, menu).
* Arrow keys UP and DOWN for menu.
Even though we can not use this unless we get the battery, it is pretty interesting knowing how Sony unbricks out PSPs. If some one could get a hold of that battery we could unbrick psp's :P