Pandora’s Battery Released – Unbrick ANY PSP

by Mike Bendel on August 22, 2007 @ 5:44 pm


Team C+D have released an universal unbricker for PSP units! Called Pandora’s Battery, this application writes the necessary data to turn any ordinary PSP battery into those JigKick Batteries you’ve been hearing about.

Once in possession of a JigKick battery, you can downgrade any PSP firmware (and most likely future firmwares as well) to firmware 1.5.

We told you that we’d be releasing an unbricker for the M33 bricks. But then we got to thinking, maybe that just wouldn’t be exciting enough. Would you like a super special surprise bonus? How about an unbricker for ALL PSPs? Yep, you read that right. We call it “Pandora’s Battery”.
There’s a larger story behind this unbricker, though, and it deserves to be told. It’s the culmination of years of behind-the-scenes research and development by some of the top names in PSP hacking, under the name of the Prometheus project. This group of people, from various development teams, was dedicated to developing and releasing PSP hacks and exploits, with the aim of improving the status of PSP homebrew, and making sure that it was kept alive.
For some time this project was highly successful – many releases from Noobz, C+D and others were direct results of this work. The zenith of this success was the development of this unbricker – which required some amazing technical leaps, including:

1. Reverse engineering of the service (unbrick) mode
2. Development of a technique to change an ordinary battery into a service mode trigger battery (and back)
3. Development of custom IPL code along with a technique to sign that code as authentic.

Even more impressive is that all of the above was achieved without any access to the official hardware or software. With careful nurturing, this unbricker and custom IPL was to become the foundation of a whole new homebrew environment. Unfortunately something happened to shatter the idyll. Somehow, the unbricker was leaked into the wider world before it was ready to be released. Whether this was deliberate, by one of the team members, or accidental via a security breach is still unclear. The fact is that this unbricker appeared on the black market, being sold for huge prices. As far as we know, it is probably very close to the same software that appears in at least some of the ‘magic unbricker’/'jigkick’ videos.
So, although the time was not right to release this (it would have been wise to wait at least until the PSP Slim release), our hand has been forced. In order to prevent small fortunes being made by leeches, we are giving this unbricker away for free. So – let it be known – if you have paid for an unbricker, then you have been ripped off. I suggest that you take up your grievances with the seller – it should never have been sold. And if you’re unhappy about this being released before PSP Slim – then blame whoever it was that leaked or stole it.
It’s unclear whether or not this is the end for the Prometheus project – hopefully not, but that is undecided so far. In case it is the end, it is worth a quick roll of honour. In alphabetical order:
Adrahil, Booster, Cswindle, Dark_AleX, Ditlew, Fanjita, Joek2100, Jim, Mathieulh, Nem, Psp250, Skylark, TyRaNiD.
And here are their respective C+D (Create and Destroy) nicknames.
Mathieulh = WiseFellow
Tyranid = bockscar
Fanjita = FullerMonty
Joek = CosmicOverSoul
Dark_Alex = Malyot
Chris = Caretaker
Adrahil = VoidPointer
nem = h1ckeyph0rce
Anyway – make sure to read the readme.txt in this release for how to use it, but in brief it works like this:

1. You run a program on a homebrew-enabled PSP that will convert a standard PSP battery into a jigkick battery. Note that you can’t then use that battery normally – so you should use a spare one.
2. You run a program to generate the unbricker memory stick image, built from the v1.5 update EBOOT (note that this, and the custom IPL, means the release is completely free of Sony copyright materials).
3. You run some programs on a PC to install the image to your memory stick.

Now, you have a battery/memory stick pair that works just like the famous jigkick combination (but better) – just insert them into any PSP (even a brick) and the PSP will be reinstalled with the v1.5 firmware. As far as we know, this will continue to work for all future firmwares.
Enjoy! And remember – if you find this useful, please donate to the original developers – it’s a lot cheaper than paying £1500 for it on the black market.

Download Pandora Battery / Donate to C+D

Pandora Battery Release by Prometheus / C+D !! [LAN.ST]

Follow this author on .

Comments
supaquickt says:

WOW, Who cares about the slim release now. Simply WOW!

Cheezeball99 says:

:ohmy: So what does this mean? Extra battery FTW? Can you downgrade firmwares with this?

Acerthief says:

Another Big Day in the PSP Scene.XD

YEAH!

Wait even the battery included when buying the PSP works as well?

canadajames says:

It basically means no more need for downgraders or anything of the like the psp is totally unlocked..... Which while being amazing and I'm almost certainly gonna make one of these incase of something in the future all I have to say is..... now what. p.s. Now I might have to get a slim :(/:) = conflicted

supaquickt says:

Yes, I better keep my pants on. Does this have to use an Official Sony battery, and will any memstick work (I'm talking Sony or Sandisk, not original or fake)? Now I gotta go brick a PSP haha

x3sphere says:

Any PSP battery will work. Yes it means all current firmwares can be downgraded as well.

Cheezeball99 says:

Oh jeez. Well, heh, I should start buying some bricked PSP's on eBay then, eh? :biggrin:

supaquickt says:

Oh, so PSP slim can be downgraded to :O Or I'm I on another planet.

x3sphere says:

Possibly. They use a different battery than the regular units though so it is too early to tell yet.

canadajames says:

Just looked at some video and the psp slim does use a different battery but the older battery is also compatible found it on some video banner posted in psp general i thnk check it if you want.

Death_Pigeon says:

I read the read me and came across this in "NOTES AND RESTRICTIONS"

- The firmware in the Memory Stick is not a full 1.50, but a minimal

subset. Therefore, not all applications (such as flashers, or

recovery apps) will load.

What does this mean? You can't go to custom firmware or what?

shadowthor says:

just curious, if i use my spare 4gb would that be okay? PLus the battery can be converted back?

Tenshigami says:

It says anything less than a 4GB will do. Probably because 1.50 doesn't support 4GB memory stick pro duos. Also Memory Stick Duos (e.g. 32MB) aren't supported. Just the PRO Duos.

Fako says:

sooo, everything was coming from the underground.. a top secret group.. man that sounds like a movie or something haha

x3sphere says:

Well my friend did it and he was able to run the kxploit patcher then flash 3.52 M33. So there shouldn't be any problems. Maybe that means like theme flashers and whatnot.

GPUX says:

I'd like to see what sony's reaction will be to this.

supaquickt says:

From DAX on maxconsole:

That refers to the memory stick recovery firmware (developers could replace some of the files of recovery firmware to exeucte their applications, and we just warn them that the subset of prx's for the recovery firmware is limited). But the one flashed back is a full 1.50, so you can install whatever cfw later.

Ecko says:

Battery can't be converted back *me thinks*.

Let me get this straight - you need a unbricked PSP to generate files for the "Pandora's battery" which will then turn a regular battery in the jigkick battery? Is that right?

Then you simply put in the battery into the bricked PSP and the menu should come up? Is that right?

One more thing... Under notes and restrictions... it says "The IDStorage cannot be totally restored, as there is no known way to regenerate it properly."

^^^

What does that mean? What is IDStorage for those of us who don't know what that is?

rabbit says:

IDS is the part that stores things like your MAC address and some other hardware specific info.

dennis96411 says:

Will it unbrick my fat32 formatted flash0 psp(my file sys of flash0 is fat32[i'm stupid and change the file system and it bricked])?

x3sphere says:

Yeah that's all right.

Don't worry about the IDStorage. Like rabbit said it only stores some hardware-specific information. That isn't to say it's not important... but aside from the TA-082/86 downgraders, nothing else messes with it.

Yes it will.

Darkchild says:

so...this means...everyone can enjoy the homebrew world? :D:D:D hurrah!

Roe says:

This is big. But I got a question. Has anyone tried this?. Because I want to know whether you can change the battery back

Darkchild says:

a guy has tried it in qj

there's even a video on youtube

:D

supaquickt says:

The short answer is Yes, I don't exactly know how but you can do it. I've just order a 2nd battery in case though don't want to be playing with the original to I know how this works fully.

cyrus says:

so with this ican downgrade a 3.50 fw? =)

lifesosian says:

cyrus: i think so..as stated from qj forum..

just asking.. to prepare this batt and ms..

i need to prepare it on a 1.50 fw or i can also can prepare it using a custom fw?

GPUX says:

read the readme text file.

cyrus says:

it says you need a oe fw, m33, 1.50 fw..but no sony fw..

Ecko says:

Start stocking up on cheap bricked PSP's on ebay before prices skyrocket... nvm... too late.

Acerthief says:

the guide says that i format with say computer, then with their program, so it's "modified".

if i finished unbricking, can i format my MS card with the computer again so it back to the normal FAT? or will it stay "modified"?

Thanks in Advance.

EDIT: it says problem reading "system.dreg". any help? Thanks.

Roe says:

well system.dreg is in flash1. try formatting flash1 through recovery and see if it helps

Chilly Willy says:

The pandora stuff uses the Sony 1.50 update. All updates (including the 1.50) only change the firmware files related to the PSP libs and such. The IdStorage and settings are NOT changed by firmware updates. Therefore, the pandora stuff will not change the IdStorage or settings either.

So how does that affect you? Say you have a working PSP that has 3.52 on it. You use the pandora thingy to downgrade it to 1.50. The IdStorage and settings were fine before, so after Pandora is done, they're still fine. Now say you have a bricked PSP. Let us also say the brick completely wiped out the NAND flash, so the IdStorage and settings are gone too. Running Pandora will restore the firmware associated with the libraries and such, but NOT the IdStorage and settings. The IdStorage controls a variety of things in the PSP, so unless they can be restored afterwards, you won't be able to do things like connect to the PS3, or certain USB functions, or see funny operation of the battery.

Hanzo_f19 says:

is it only me or...is everything getting leaked?

donsammy says:

i dont have a sonu battery, its a nother brand, could i use that battery???

Hanzo_f19 says:

dont know... what is the brand of it?

supaquickt says:

At this stage the only way to know is to try it. I'm sure compatiblity lists will come soon there have been reports not EVERY battery works. But most will work fine.

Ecko says:

Thanks for the detailed explanation. I understand now.:smile:

Acerthief says:

has anyone downgraded a "non-downgradeable" firmware(like 3.10 3.11, 3.40, etc)

just to make sure, cause my friends making me to it.XD

Hanzo_f19 says:

Acerthief, i don't u test yourself? i mean u cant brick with this.

Acerthief says:

nice~. now it worked. thanks roe:)

EDIT: x3, should i make a tutorial? i found out the installation guide in the readme.txt is a bit confusing for some computer noobs. (like me XD). i can make one i with screen shots so it's more n00b friendly? how bout it, x3? it's your call :). If yes i'll do it tonight. but now i hafta go to class. take care everyone!

supaquickt says:

Worked a treat turned an official sony battery into my jigkick and have a spare 1gb Sandisk to use for it. I used it to downgrade an official 3.40 to 1.50. Big thanks to the team (although I have Lumines in the post I bought it last week lol).

If you don't mind here's the guide I followed:

EDIT: Removed link, been sent to x3sphere to see what he says.

x3sphere says:

A guide has now been posted thanks to FreePlay -

http://forums.exophase.com/showthread.php?t=3238

Chilly Willy says:

Yeah, I replied to that assuring people I've tried it successfully. It helps to have some positive reports in a thread like that, especially if it's by a dev like myself.

I got a new 2200 maH battery for everyday usage (it's charging right now), and converted my older 1800 maH battery into a Pandora battery. I also got a 256 MB Sony Pro Duo stick that is strictly for Pandora. It has all the files, a backup of the battery eeprom, and a backup of my nand (renamed to nandimage.flash as needed to write it back). So now I have a battery and stick ready in case I brick my PSP messing around with stuff - which is good as my work on the IdStorage does have the potential to brick. I always worried about that. Now I can rest easy. 8)

XsavioR says:

i knew it .... ive been hoping some one would figure out the battery xploit for a bit now.... nice work

Acerthief says:

really nice job they've done.

I've got a question. can i put the files for flashing M33 in the same into my "magic MS" so i wouldn't have to change MS through downgrading and flashing, or putting it in will just mess up my MS?

Thanks in Advance.

EDIT: A 64mb Pro Duo (be sure to format into FAT) can put all the stuff in. Just to tell everyone so you won't have to use too much money on a 512/256mb. :D

rabbit says:

[cgi.ebay.com]

Doesn't matter how public it is, they are still selling it.

Chilly Willy says:

Yes, you can put any files you want into it. What makes the stick special are the two Windows programs included - the first formats the stick with empty space before the start of the partition; the second writes the custom IPL into that empty space. The rest of the stick is a normal FAT formatted memstick that can hold anything. Pandora expects some things to be in certain places, like the UPDATE.PBP file in the root of the memstick, but as long as all the required stuff is there, you can put extra stuff onto the stick as well.

Acerthief says:

okay thanks chilly willy

XsavioR says:

Hypothetical question

brand new ta-086 , slap in my handy pandoras battery , and put 1.5 ipl on it ...

What happens with all the jazz about idstorage and the key that allows 1.5 ipl on it ?

donsammy says:

has anybody tried to do it with another battery brand other then a sony???

cR@Zy!NgLi$h says:

the original release thread over at n00bz website says it'll work with any battery!

Chilly Willy says:

The downgrade option is supposed to automatically handle TA-082 and TA-086 PSPs properly. I haven't tried it to check that, but from remarks some of the authors made, I gather they're using the same patch to key 5 the NOOBZ 3.50 downgrader uses.

Hanzo_f19 says:

yep, i tried on a TA-082 motherboard and it works...SWEET

MENACERONER says:

so quick one who knows how to scoop one of these guys game werks gonna have em? or am i leaning more towards the internet purchase

PhreakAccident says:

Just wanted to share my experience. Had a full brick PSP and a semi-brick PSP. We used Pandora on the full brick and got it to 1.50 from there did an official 3.52 upgrade. Then we downgraded back to 1.50 via Pandora and while running the 3.52 official update we yanked the battery to brick it. Pandora fixed it again (this thing is too sweet!). From 1.50 we have to put 3.40OE because for some reason 3.52M33 doesn't take. But once the OE is on the 3.52M33 does on with ease. Both these PSP are the older motherboards but will be doing a new board tomorrow. Whoot!

Words do not say enough to express thanks. Donations forthcoming!

PA

Edit: Just did a PSP with the new motherboards and this Pandora kit smartly patched it. Another flawless upgrade to M33!

TimTiger says:

It defiantly works. just curious I deleted half my flash 0 and therefor bricked it. used the battery and MC and now I'm back runnin and on M33 :)

XTM_Rage says:

I hit a roadblock. How do I execute the "msipl" application ? I try running msipl.bin from the memstick (in DOS) and doesn't do anything?

x3sphere says:

Copy the msipl.bin to the msinst folder on your hard drive.

Then go into the command line, enter the msinst folder and type the command:

msinst O msipl.bin

where "O" is your memory stick drive.

XTM_Rage says:

Okay. Thanks.:D

But, I hit another roadblock. :( the spare battery that I bought, it seems to have a lot of errors in it's flash (eeprom?) ? I tried converting it to a service mode battery, and it changes one key, and says the other keys are corrupt, or that an error was found, and it lists a whole set of keys that is has errors with, before it lets me make a selection. :confused1:

PhreakAccident says:

Was it made in Japan or China. Just throwing this out, but I remember reading that some new batteries are trickling out that are unPandorable. Japan manufactured seems to come to mind. Worth a look at.

Acerthief says:

the batteries made in china are manufactured by non-experienced workers.

so better off looking for a jap made one.

One mans opinion. :D

ferdi8 says:

okay my PsP is not turning on. i had just upgraded to 3.52 M33 - 4 then after a while i tried to upgrade to 3.71 M33-2. But while upgrading it said "you system does not have the right configuration". i tried this twice and it dint work. So i turned off my psp and went out. now when i got back ..my psp is not turning on. only the green LED light is coming on and the screen is black..even the backlight is not coming on and i cant even go into recovery mode. Did i just brick it ?? What do i do now ?

my battery is a sony 3.6v 1800 mAh

Acerthief says:

do you know anyone else that has another full set or Pandora?

Give it a try and see how it works.

Basically this might be either you have bad keys, or a hardware issue.

I'm sorry, but your PSP is bricked at the moment. :(

**And please don't post the same thing three times, us mods will look through EVERY thread there is so we will see it. Thanks!:)**

rfawn says:

A fake chip looks like this inside [i4.photobucket.com] and cant be used for soft or hard mod.

As for all batteries working...

...not true.

The only decent guide I could find for this was [psp-homebrew.eu]

Please take note that the Japanese PSP-280 battery is definately a fake. The PSP-280 battery is best avoided.

Also, beware that the battery that comes with the Ceramic White PSP-1000 (PSP-PHAT) can be softmodded, but from personal experience not hardmodded. I ended up taking the entire chip off and it still ran as a normal battery.

Always check buyer reviews (both good and bad), and if the price looks too good to be true, then it probably is.

With all the confusion of what batteries do, and dont work, sometimes its just better to get one premade. It may actually save you the cost of a bunch of useless fake batteries.

[www.dealextreme.com] sell cheap premade ones, but none of the normal batteries are legit.

Or [www.codejunkies.com] if you want a safer option, but of course, they require a credit card.

Personally, I used [www.gp2xstore.com]

XsavioR says:

In my honest opinion, the best way (keep in mind i have a phat) is to use the batt that comes with the psp, BUY a nother battery for normal use since u can up the MAH rating on the battery you purchase , extending play time considerably.

There may be a better course of action for those who have purchased psp 2000, or one of the special kits, but if you have an old psp laying around your best bet is to use the 1800 MAH stock batery (psp-110) for pandoras , and go pick your self up a 2200mah battery pack(psp-280), which will last longer then the stock for gaming.

I picked up the 2200mah psp battery from Frys electronics for like 33$ a great investment considering i only ever had one battery, and now i have 2. And the original can be put into pandora mode , or returned to normal .

you say:

Login with your username and password below. New User?





Quantcast