• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

PSP Custom Firmware Thread

Chris R

Member
Peronthious said:
You'll want to modify the version.txt file located in the flash0 of the PSP. To do this:

Go into the Advanced portion of the boot configuration and toggle "USB flash0".

Connect the PSP to the PC and navigate to /vsh/etc

Open version.txt

Change all of the numbers that say 550 or 5.50 to 610 or 6.10, respectively

Save and exit, and disconnect the PSP

Go into the Configuration menu and turn on the version.txt hack

Done! Now you should be able to connect the PSP to the PC and download games from the PSN store using MediaGo.

Trying this right now, but I can't get the file to save (says it is read only) using Windows 7.

I was able to play Suikoden with 0 issues after buying it off the store, so that is good :D
 
DMPrince said:
Undead Knight sort of hard freeze and then restart when it gets to the first save.

5.50 Gen-B2 here.

It's the game, not the CFW. Save any time past that first save offering and you will be fine for the rest of the game.
 

drizzle

Axel Hertz
rhfb said:
Trying this right now, but I can't get the file to save (says it is read only) using Windows 7.
Not only this problem has been reported/solved 3 or 4 times in this same thread, it's the most retarded solution of them all.

In windows, right click to file proprieties, uncheck read only?

And I'm not even saying it was posted long ago, it was posted 2-3 pages back. It's like there's one question, 5 replies/answers telling you how to fix/solve your problem, and people ask the same thing again. Ad infinitum :lol
 
BigNastyCurve said:
It's the game, not the CFW. Save any time past that first save offering and you will be fine for the rest of the game.
if only i can save passed the first. i would need a save from someone right after that point :lol.
 

Cloudy

Banned
I need help, guys. I'm on the 3.40 custom firmware. How do I upgrade to the latest Sony firmware w/o bricking my PSP?
 

Cloudy

Banned
k, I just downgraded my PSP back to 1.50. If I load sony's latest update, is there anyway to downgrade later if I want?
 

bigswords

Member
jarosh said:
alright, no problem. either way, do you know if it's safe to just go back to official firmware? i really don't have any use for cfw anymore.

You can force the PSP to use it's max cpu speed 333 mhz for all games. This improves the framerate/loading (yes loading times) for games that don't use 333 mhz.
 

Fuzzy

I would bang a hot farmer!
drizzle said:
Not only this problem has been reported/solved 3 or 4 times in this same thread, it's the most retarded solution of them all.

In windows, right click to file proprieties, uncheck read only?

And I'm not even saying it was posted long ago, it was posted 2-3 pages back. It's like there's one question, 5 replies/answers telling you how to fix/solve your problem, and people ask the same thing again. Ad infinitum :lol
I really think this thread needs a guide that can be posted on each page like the Wii HB thread.
 

dark10x

Digital Foundry pixel pusher
Mejilan said:
I think you know what you need to do if you want a real, full CFW going.
I already have a PSP1000 with the full CFW running. It's just that...the 3000 screen is SO much better that I can hardly stand using the older units.
 

zooL

Member
hmm while playing my psp randomly shows the "battery is empty" symbol and goes to standby although the battery is still about 75% full... has this happened to anybody else? is there a solution? damn it :(
 

Median

Member
Pixeljunk works :D I used the version.txt trick to buy it from Media Go, then used NPdecryptor to decrypt it. Worked fine on 5.50 GEN-B2.
 

Manp

Member
probably this is a stupid question, but is there a way to remove the "make pandora battery" and "make normal battery" options from the gen vsh menu?

:)
 

Adam Prime

hates soccer, is Mexican
Manp said:
probably this is a stupid question, but is there a way to remove the "make pandora battery" and "make normal battery" options from the gen vsh menu?

:)

I think I just fked up my PSP screwing around with those two options. Last night I clicked "Make normal battery" and nothing happened, on screen anyways. So I was like "Hmm, I'm going to click make Pandora battery" and nothing again happened. So I figured whatever and then clicked "Shutdown Device" from the VSH menu.

... now when I boot up my PSP it comes up to a blank screen and no options to do anything, even when holding R when booting up the PSP. It just stays a green light with no memory card accessing light or anything. The LCD screen by the looks of it doesn't appear to turn on or anything. I dont have my charger with me, I'm at my girlfriends house for the weekend, do you guys think I just need to turn it on without the battery and plugged in.

... damn, what did I just do? :(
 

Manp

Member
Adam Prime said:
I think I just fked up my PSP screwing around with those two options. Last night I clicked "Make normal battery" and nothing happened, on screen anyways. So I was like "Hmm, I'm going to click make Pandora battery" and nothing again happened. So I figured whatever and then clicked "Shutdown Device" from the VSH menu.

... now when I boot up my PSP it comes up to a blank screen and no options to do anything, even when holding R when booting up the PSP. It just stays a green light with no memory card accessing light or anything. The LCD screen by the looks of it doesn't appear to turn on or anything. I dont have my charger with me, I'm at my girlfriends house for the weekend, do you guys think I just need to turn it on without the battery and plugged in.

... damn, what did I just do? :(

your battery is probably in pandora mode right now... when you power it on it stays there waiting for the pandora memory stick which isn't there of course.

my PSP can't make a pandra batteay anyway so i'd like those two options removed since 1) they're useless for me and 2) when i try them my psp go crazy and i have to power it off.

i just don't want to use one of those for mistake when accessing the vsh. putting those only in the recovery menu would be a good compromise in my opinion.

:)
 

seb

Banned
Adam Prime said:
I think I just fked up my PSP screwing around with those two options. Last night I clicked "Make normal battery" and nothing happened, on screen anyways. So I was like "Hmm, I'm going to click make Pandora battery" and nothing again happened. So I figured whatever and then clicked "Shutdown Device" from the VSH menu.

... now when I boot up my PSP it comes up to a blank screen and no options to do anything, even when holding R when booting up the PSP. It just stays a green light with no memory card accessing light or anything. The LCD screen by the looks of it doesn't appear to turn on or anything. I dont have my charger with me, I'm at my girlfriends house for the weekend, do you guys think I just need to turn it on without the battery and plugged in.

... damn, what did I just do? :(

I think you can remove the battery and start with the AC adapter only. Then insert the battery and "make it normal" again.

Edit: while I'm here I might just ask: can you use a CFW (and which one) PSP to redeem the 3 games from UMDs for the GO ? If not I'll just switch to OFW but going back and forth is painful :p
 

ShowDog

Member
I'm interested in installing a CFW on a friends PSP this afternoon. His is a 1001 model, and it's never had unofficial firmware before. Do I need to install this M33 3.52 before going to the better 5.50 GEN-B firmware?

I'm technically proficient, but completely inexperienced when it comes to PSP's. Most guides and whatnot on Google seem to be from 2007, so if anyone can hook me up with a website or some quick instructions that'd be great. The link in the OP is currently inoperable.

Edit: Ehh I thinkI found some decent guides at pspcustomfirmware.com using some chickenhen thing to go straight to M33 5.0. If this is a bad call lemme know.
 

Midou

Member
zooL said:
hmm while playing my psp randomly shows the "battery is empty" symbol and goes to standby although the battery is still about 75% full... has this happened to anybody else? is there a solution? damn it :(

Same thing happened to me, when I asked around, I found out it was pretty much just dead, I just ordered a new one off amazon..
 
Hopefully I am not breaking the TOS by asking this (please delete if I am), but is there a trustworthy place online (aside from ebay and craigslist) that sells modded/CFW PSPs? Google is not helping me on this one. Keep in mind that I am a complete noob when it comes to CFW (I only have a 3000) so I'm looking for a place to start. Any help is appreciated.
 

CorwinB

Member
MomoPufflet said:
Hopefully I am not breaking the TOS by asking this (please delete if I am), but is there a trustworthy place online (aside from ebay and craigslist) that sells modded/CFW PSPs? Google is not helping me on this one. Keep in mind that I am a complete noob when it comes to CFW (I only have a 3000) so I'm looking for a place to start. Any help is appreciated.

I think you could either get one from Ebay (search for M33 PSP), or get an hackable one from the same source. That's what I did for my second PSP.
 

mojiimbo

Member
Has anyone here had a problem with not being able to access the flash0 memory in the process of trying to do the version.txt trick on a PSP1000?

I was trying to get my PSP1000 up to date since I switched over to a PSP2000 about a year ago and haven't really touched the 1000 since. I went from ~M33 5.00 to GENA then GENB and then GENB2 fine. I booted in to the recovery mode and followed this tutorial, which I used on my 2000 just last week.

http://www.neogaf.com/forum/showpost.php?p=16293820&postcount=5428

When it got to the part where I had to toggle the internal flash0 memory on it would only mount my memory stick memory. I tried the other internal flash memory banks and the same thing happened. I tried to remove the memory stick and that unsurprisingly didn't do anything. I even went to the other menu where you can tell it to mount the internal memory in the XMB USB mode and that didn't work either. Any help?
 

Mejilan

Running off of Custom Firmware
Mojiimbo, I vaguely recall helping someone with a similar problem in the past. Not too sure what we did to resolve it. Disabled some plugins, reinstalled CFW... Trying to recall. In any event, if you haven't already done so, boot into the recovery menu and disable ALL plugins. Then access advanced/advanced configuration (IIRC), and disable all plugin functionality from there.

Then perform a clean reboot and try again.

---------------------------

PSP Go Hello World Proof of Concept exploit.
Well, that was fast.

To be fair, this is NOT likely to turn into anything useful without a ton of work. And even then... it just might not. Still, it's an interesting development.

Yep, you read that right folks. Mere days after its launch and somebody's already hacked the PSP Go. Hold your horses, though! There are a few caveats.


The one responsible for this hack is FreePlay, who you may know for his work on the Sparta SDK and his recent run-ins with Team Mack. Before you go out an buy a Go thinking it's wide open to homebrew, here are a few disclaimers from the dev:

* This was a known exploit that was abandoned because better prospects came along. I did not discover it; I just figured out how to make it work properly. Better hackers than I likely figured it out way before I did; they just never used it for anything I know of.
* I won't be releasing this or divulging the name of the game involved. It's a proof-of-concept, and it may become more developed privately, but until there's a worthwhile reason to release it it'll stay private. I'd prefer that Sony not patch it before it becomes really useful.
* It's user-mode only, meaning no flash modification, no piracy, no advanced custom themes, no plugins - none of that. I wouldn't expect anything else to come from it, unless I get some help.

There's no telling if this exploit will eventually be made public, but at least now we have definite proof that the Go isn't homebrew-proof after all. Kudos to FreePlay for a job well done (also, thanks for telling us about it)!

Edit - Forgot to link to the source.
http://www.qj.net/Hello-world-PSP-Go-hacked-proof-of-concept-video-released/pg/49/aid/134973
 

Kccitystar

Member
MomoPufflet said:
Hopefully I am not breaking the TOS by asking this (please delete if I am), but is there a trustworthy place online (aside from ebay and craigslist) that sells modded/CFW PSPs? Google is not helping me on this one. Keep in mind that I am a complete noob when it comes to CFW (I only have a 3000) so I'm looking for a place to start. Any help is appreciated.

Find a store that sells early PSP-2000 series systems and CFW installation is pretty easy.
 

Miroslav

Member
i lend my psp, firm 5.00 M-33, to my sister and she "accidentally" upgraded to 6.00 . I use to think that using a legitimate firmware will brick my psp but it does run fine, except I lost the capability to use hombrew. Is there a way to go back to 5.00 M-33 or the newer 5.50 GEN? If this post is somewhat offensive to the forums rules please delete it and excuse me. Thanks in advance.

FYI: It is a phat psp 1000
 

Kccitystar

Member
Miroslav said:
i lend my psp, firm 5.00 M-33, to my sister and she "accidentally" upgraded to 6.00 . I use to think that using a legitimate firmware will brick my psp but it does run fine, except I lost the capability to use hombrew. Is there a way to go back to 5.00 M-33 or the newer 5.50 GEN? If this post is somewhat offensive to the forums rules please delete it and excuse me. Thanks in advance.

FYI: It is a phat psp 1000

I would think you can use a pandora battery to reflash the PSP, since the exploit used to reflash the PSP via ChickHEN doesn't work on 6.00
 

Mejilan

Running off of Custom Firmware
Miroslav, all PSP 1000s are susceptible to Pandora batteries. Use one to reinstall CFW.
There are no software-only exploits working on 6.00, so the hardware (Pandora) solution is the only one currently available to you.

--------------------------------

Haven't tested these yet, but these are supposed to be the 6.00 and 6.10 version.txt files.

release:6.10:
build:3745,0,3,1,0:builder@vsh-build6
system:54865@release_610,0x06010010:
vsh:p6501@release_610,v55286@release_610,20090918:
target:1:WorldWide

release:6.00:
build:3642,0,3,1,0:builder@vsh-build6
system:54442@release_600,0x06000010:
vsh:p6496@release_600,v54812@release_600,20090831:
target:1:WorldWide
 

Mejilan

Running off of Custom Firmware
Reposting on new page.

-------------------------------------------

PSP Go Hello World Proof of Concept exploit.
Well, that was fast.

To be fair, this is NOT likely to turn into anything useful without a ton of work. And even then... it just might not. Still, it's an interesting development.

Yep, you read that right folks. Mere days after its launch and somebody's already hacked the PSP Go. Hold your horses, though! There are a few caveats.


The one responsible for this hack is FreePlay, who you may know for his work on the Sparta SDK and his recent run-ins with Team Mack. Before you go out an buy a Go thinking it's wide open to homebrew, here are a few disclaimers from the dev:

* This was a known exploit that was abandoned because better prospects came along. I did not discover it; I just figured out how to make it work properly. Better hackers than I likely figured it out way before I did; they just never used it for anything I know of.
* I won't be releasing this or divulging the name of the game involved. It's a proof-of-concept, and it may become more developed privately, but until there's a worthwhile reason to release it it'll stay private. I'd prefer that Sony not patch it before it becomes really useful.
* It's user-mode only, meaning no flash modification, no piracy, no advanced custom themes, no plugins - none of that. I wouldn't expect anything else to come from it, unless I get some help.

There's no telling if this exploit will eventually be made public, but at least now we have definite proof that the Go isn't homebrew-proof after all. Kudos to FreePlay for a job well done (also, thanks for telling us about it)!

Edit - Forgot to link to the source.
http://www.qj.net/Hello-world-PSP-Go-hacked-proof-of-concept-video-released/pg/49/aid/134973
 
I'm thinking the way to go with this is going to have to be one PSP-1000 for homebrew and one PSP 2000 for retail. I really like how the slim ones look, so that helps ;)
 
Mejilan said:
Miroslav, all PSP 1000s are susceptible to Pandora batteries. Use one to reinstall CFW.
There are no software-only exploits working on 6.00, so the hardware (Pandora) solution is the only one currently available to you.

--------------------------------

Haven't tested these yet, but these are supposed to be the 6.00 and 6.10 version.txt files.

I LOVE you!
 

drizzle

Axel Hertz
nolookjones said:
is it possible to use a psp2000/3000 lcd screen on the psp 1000?
You can't change screens from any PSP model to another. From what i gather, each generation (1000/2000/3000) the screen got changed to the hardware level. As in, each model only has drivers that allow it to comunicate to their individual screen. Changing the screen renders it useless.

The way i see things, a software modification could possibly allow them to communicate again (as long as you wire everything up correctly), because, on cellphones, you can change the display driver and make different screens work.

HOWEVER, that's total speculation on my part. There's no solutions available (to my knowledge) to change screens between models, hardware or software wise.
 

ravien56

Member
Mejilan said:
Reposting on new page.

-------------------------------------------

PSP Go Hello World Proof of Concept exploit.
Well, that was fast.

To be fair, this is NOT likely to turn into anything useful without a ton of work. And even then... it just might not. Still, it's an interesting development.



Edit - Forgot to link to the source.
http://www.qj.net/Hello-world-PSP-Go-hacked-proof-of-concept-video-released/pg/49/aid/134973
Hmmm....so what do you think? You think this will eventually happen?
 

drizzle

Axel Hertz
ravien56 said:
Hmmm....so what do you think? You think this will eventually happen?
It's only user mode - so CFW possibilities, if they ever happen, will be like the PSP3000.

Yes, it will eventually happen. As long as there interest, things will get cracked/hacked. Specially when using software flaws, since software is made by humans and humans are imperfect.

Only time can tell how "open" the PSP Go can get with this or any other exploit.
 

Mejilan

Running off of Custom Firmware
xero273 said:
If they can get CFW working on the GO, it'll probably be the temp CFW like the 3000

That's the likeliest scenario as to possible near-future developments. I do expect all iterations of the hardware to get cracked eventually, though.
 
drizzle said:
It's only user mode - so CFW possibilities, if they ever happen, will be like the PSP3000.

Yes, it will eventually happen. As long as there interest, things will get cracked/hacked. Specially when using software flaws, since software is made by humans and humans are imperfect.

Only time can tell how "open" the PSP Go can get with this or any other exploit.

Well to Sony's credit, the PS3 is still unhackable.
 

drizzle

Axel Hertz
Mejilan said:
That's the likeliest scenario as to possible near-future developments. I do expect all iterations of the hardware to get cracked eventually, though.
Mejilan, maybe you can aswer me this.

IF there's everything wrong in this text, please, if you have the time, explain it. I'm actually writing this much to see if I have everything right.

We all know what a Pandora battery does - it triggers a service mode that allows the firmware flash (aka, flash0) of the PSP to be overwritten.

However, later revisions of PSP2k and 3k don't allow the machine to go to service mode through a Pandora battery. But you still can use the ChickHEN exploit to get access to the machine.

Why does flashing flash0 from a ChickHEN instance bricks the PSP3k? Did sony change something to the Flash0 writing process? I read something about stuff being encrypted, but the text didn't elaborate.

Now, what happens in this scenario: Later PSP2k motherboards don't allow Pandora to engage service mode, but with ChickHEN exploit, could you write the Flash0 area? Remember, on a Later 2k model.
 

Mejilan

Running off of Custom Firmware
I'm not a developer, so my understanding of the actual processes is limited.
What I know I've gleaned from posts, readmes, and technical readouts, and not from experience.

That said, here's my understanding of things:
The Pandora battery was developed by reverse-engineering the PSP's IPL; which I suppose is something like the PSP's boot sector or boot loader.
In later 2000s and 3000s, the method for engaging service mode (IPL) was changed, and encryption was added by Sony on the pre-IPL level, which has made it MUCH harder to dump the encryption keys and reverse-engineer the new process.

In other words, Sony made behind-the-scenes changes to how service mode is engaged, and locked those changes away in a fashion that has yet to be unlocked. It is my understanding that the only real barrier to fully cracking the later 2000s and 3000s is the dumping of the pre-IPL encryption keys.

For all intents and purposes, later 2000s and 3000s are the same. Their motherboards are a bit different, but they have basically the same layer of new security applied.

Like I said, though, I'm no expert, so my knowledge of this is hokey, at best. :)
 

drizzle

Axel Hertz
Mejilan said:
The Pandora battery was developed by reverse-engineering the PSP's IPL; which I suppose is something like the PSP's boot sector or boot loader.
In later 2000s and 3000s, the method for engaging service mode (IPL) was changed, and encryption was added by Sony on the pre-IPL level, which has made it MUCH harder to dump the encryption keys and reverse-engineer the new process.
I was under the impression that the PSP1000 could have it's flash0 area flashed directly through software.

The way i remember it, PSP2000 came out and couldn't be flashed through software, and a couple weeks/months later, Pandora Battery was discovered/made public. However, you could only make them on PSP1000s.

Then Sony changed the mobos on the PSP2000 to not boot into service mode through Pandoras. A change that, obviously, carried over to the PSP3000.

I didn't know they also made pre-IPL level encryption on the PSP2k as well. Since later 2k and 3k are essentially the same board, you can't install CFW on later model PSP2k either, just like the 3ks.

Thanks Mejilan. That made it all easier to understand.
 

Mejilan

Running off of Custom Firmware
Hmmm. I could have sworn it eventually became possible to make a Pandora even on an earlier 2000. The 2000 revision definitely had some new security, and it was likely a step in the direction they took with the later 2000s and 3000s, but it clearly was not sufficient!

But yes, at first, 1000s could be downgraded and customized strictly through software. Software exploits became less important once the Pandora hit, however, as it had become the defacto standard for safe upgrading/downgrading.
 
CorwinB said:
I think you could either get one from Ebay (search for M33 PSP), or get an hackable one from the same source. That's what I did for my second PSP.

Is a PSP1000 with 1.5 firmware pretty easy to upgrade to the latest CFW?

Kccitystar said:
Find a store that sells early PSP-2000 series systems and CFW installation is pretty easy.

How can you tell if it's an early unit?
 

word up

Neo Member
Mejilan said:
Hmmm. I could have sworn it eventually became possible to make a Pandora even on an earlier 2000. The 2000 revision definitely had some new security, and it was likely a step in the direction they took with the later 2000s and 3000s, but it clearly was not sufficient!

I have a PSP 2001 (came pre-modded with 3.6 i think) and I soft modded its battery to flash my friends 100something, so it was definately doable on the early ones.
 
Mejilan said:
But yes, at first, 1000s could be downgraded and customized strictly through software. Software exploits became less important once the Pandora hit, however, as it had become the defacto standard for safe upgrading/downgrading.

ya it was so awesome to use the GTA LCS exploit with my psp1000...no pandora needed...

i wonder how the service mode is officially invoked on the psp go (since the battery isnt easily removable)...
 
Top Bottom