PSP Exploit

Well, it seems the homebrew community is already hot on the trail of producing a custom version of Sony’s official PSP firmware version 3.95. It is currently in the testing phase, and is scheduled to be released very soon.

This appears to be a solid list of what to expect from this release:

• Launch ISO / homebrew 3.xx
• Adding a name to differentiate firmware for PSP to 3.95 standard ones FC (general request in the forums).
• POPS 3.95
• IRShell functional functional except ISO Launch
• PSP 5.0 Filer functional
• Plug-in Capture.prx tested ok
• Plug-in cwcheat.prx tested ok
• Plug-in Recovery LE (Ketchup) and tested ok (except for displaying the version number blocked on 3.90M33 - Update plug-in planned)
• The USB Host is always buggy but works perfectly with a small tip.
• The recovery is still accessible directly via the XMB with the L key
• CXMB does not currently works but we updating the plug-in is underway (just a problem of addresses to settle)
• Popsloader not working. Only Dark_Alex can update its plug-in. Is not planned at this time.
• Taking screenshots should be added. Still under discussion.

It’s kind of a downer Popsloader won’t be supported, but it’s always good to hear that people are working on these releases.

No release date has been set, but it could be as early as this weekend. They are addressing major bugs, and hope to have them done by this weekend, so stay tuned.

Sony PlayStation Portable homebrew developer MathieulH recently released a statement regarding pretty much the state of Custom Firmware for the PSP, as well as what lies ahead. In it, he talked about the release of the latest CFW, 3.93, and what they have planned in case the official 4.0 firmware comes along.

So, what did Mathieulh say? Pretty much that the M33 team did not have any hand in making the latest CFW (that is, 3.93), and that he finds the idea to implement access to recovery directly via the VSH a pretty cool one. So, score one point for the unnamed developer.

Well, if Team M33 didn’t make CFW 3.93, then when are they going to bust out one of theirs? Mathieulh says that the way things look, the current custom firmware will be all that we need until 4.0 rolls along - so until that fateful firmware comes, there is no scheduled release from Team M33. A reason for this is because Sony hasn’t been quite generous with the new stuff coming from every firmware, which makes the effort of making a new custom one a bit pointless. His statement (as translated in the QJ.Net PSP Forums by transce08):

“Concerning M33, no release is actually expected before the release of 4.00 (so one must be patient) and for diverse reasons, the foremost being of course the lack of any new features by Sony in the new firmware updates since 3.90 (at least from my point of view).”

That certainly explains it, then. If you’re already equipped with the latest CFW, then you’re all set. Here’s hoping for more great things from Mathieulh and Team M33.

NervOS is really shaping up to be quite a shell replacement, but don’t take my word for it (anyone remember Reading Rainbow?). Version 1.7 is now available and packs an impressive list of changes and new features.

NervOS 1.7 changes:

• Calculator
• Web Browser (sceKernelExitGame is patched on it so it returns to NervOS after the user quit it)
• Sony OSK for text input
• Ability to skip tracks (after loading a playlist)
• Ogg Support
• Playlist reader (m3u)
• File Browser: ability to delete files/folders.
• File Browser: ability to rename files/folders.
• File Browser: ability to copy files/folders.
• File Browser: ability to make folders.
• File Browser: displays file size after file name.
• File Browser: sorts alphabetically folders and files and folders are displayed before files.
• File Browser: detects more 14 file types.
• When entering Load Music, the music only stops after you choose a new one.
• Customizable font.
• Icon0.png
• Remove highlight bars.
• Removed “..” and “.” From the file browser.
• Fixed a bug in the task manager.
• Internal Core changes
• Fixed bug in the Image Viewer.
• Fixed bug in the clock system

Click here to Download NervOS 1.7 for yourself. Be sure to read all documentation included before installing or using this download.

In case you missed my post about the release of Custom Firmware 3.93, check it out here.

Here is yet another strange update to surface for the peculiar release of Custom Firmware 3.93. A 1.50 firmware addon for the Fat PSP. As usual, this is for use only on Fat PSP’s and is only compatible with Custom Firmware 3.93. Here is a list of changes from the Readme file:

• Install on a Fat the kernel 1.50 add on. To use the 1.50 Kernel for an application, you’ll absolutely need to put the Kernel to 1.50, even if the application is in the GAME150 Kernel.
  • If you change the kernel in VSH Recovery, you’ll still need a reboot
• The new recovery has this two asked features :
  • Suspend device
  • Shutdown device

Installation is just as simple as previous releases. Unzip the contents of the download into your PSP\GAME folder and place the official 1.50 firmware update file (150.PBP) into the root of your memory stick and execute.

Just like the Custom Firmware 3.93 release, it is unclear who developed this kernel.

You can download the 1.50 Firmware Addon by clicking here

Although Dark Alex and Team M33 have yet to release a new Custom Firmware since 3.90, another functional alternative has surfaced which is based on the Sony Playstation Portable 3.93. This version is only known as CFW 3.93 and gives credit to the usual CFW contributors.

This seems to be the changelog provided for CFW 3.93:

• Uses the 3.93 kernel
• Implemented all the original custom firmware features.
• Ability to use the normal recovery inside the XMB by pressing the HOME button:
  • When in the recovery, the system is suspended, and you can change all options directly.
  • All options work immediately, there is no need to reboot (even the Slim’s USB charging option)
  • Ability to make a Pandora battery from the recovery, read and restore the EEPROM, etc. Providing that the motherboard supports it.
• Ability to hide the MAC address in System Information, if you do so, the MAC will show visually as all 0’s.
• Ability to save the savegames in normal format, rather then encrypted (only functions in March33 and Sony NP9960 mode).
• The native 3.93 pops isn’t as good as the previous pops, therefore I hope the popsloader will get updated to support 3.93.

It seems to be a mystery as to who made this custom firmware release, but Dark Alex and Team M33 received recognition.

Download CFW 3.93 here and give it a try for yourself.

Still unfamiliar with the whole concept of Custom Firmware? Check out my introduction to PSP Custom Firmware to get caught up

WiFix is a homebrew application for the PSP that allows users to listen to music, watch movies, chat, and send instant messages from one simple interface. Version 2.0 of this application is now available for download.

This version boasts a rather large list if improvements. Here are some note from the release thread:

• Clock on the bottom bar.
• Load your own content in one section
• Listen to music without any memory errors, unlike programs such as PSPTunes, JukeBox, and Songbird.
• Listen to your music anywhere, chat, browse the web, view a movie, play a flash game, all without memory errors.
• Choose between two almost exact copies of FireFox and IE for your web browsers, both with key features like the ability to open 5 tabs, view bookmarks, etc.
• The Application Center, where you can run up to 4 applications at one time, like a clock, calender, weather report, calculator, stopwatch, pixel fixer, and much more.
• The new WiFiX Store, with the best in gaming, video, and music content.
• A WiFiX 2.0 Exclusive Memory Saver, to stop your web browser from running out of memory.
• WiFiX 2.0 HHB (Helper Hint Bubble) that gives you tips and info about your Playstation Portable.

As always, be sure to read the readme file and any other documentation included with the release to avoid any problems and maximize the applications full potential.

Download WiFix 2.0 here

Japanese Coder Minerva has just rolled out version 0.7 of the application Adhoc File Transfer for the Sony PlayStation Portable.

Just like its name indicates, this program allows users to transfer files from their handheld units to another PSP using the WiFi connection.

The following information on this version of the homebrew application was translated using an online language translator:

• Adhoc communications, using another machine to send files to an undisclosed game software.
• File Transfer one-to-one and one-to-many (1 received 1 to send 6) communications.
• The other is to have the tool, even if official game-sharing feature
• Tools to transfer itself.
• OE, such as M33 CFW Kernel3.xx based on the work.
• Some older <-> new transfer station in its current issue.
• Speed is sent or received, is receiving less than the 3.40 OE 120 KByte / sec
• 3.51M33 if it is more than 300 to 400 KByte / sec extent.
• Slows down the communication, the receiver is more than 3.51 M33 recommended.

The PSP Adhoc File Transfer v0.7 application does come with a readme file, but an English version is not available. I highly recommend translating it to learn more about this applications full potential before using it.

You can download PSP Adhoc File Transfer v0.7 here

Version 1.3 of PSX2PSP is available for download. For those that are not aware, this homebrew application easily converts iso’s of Playstation One games to the PSP Eboot format. In order to play these games, a PSP with Custom Firmware is needed. For more information on Custom Firmware, see these posts:
Intro to PSP Custom Firmware
Unbrick or Downgrade/Upgrade any PSP using the Pandora Battery

This program is a cinch to use. Simply give it an iso of a PSX game, customize the Eboot if you wish (or use the default), and then transfer the resulting Eboot file and keys.bin file to the PSP/GAME folder on your PSP’s memory card. Then, enjoy those classic gems you’ve been waiting to replay (or play for the first time). It even allows you choose multiple iso files (for multidisk games) to convert to a single Eboot. So, Final Fantasy VII here I come! New features of this version include:

• Added support for icons size 80×80
• Added new colors to the theme by default
• Added support for the conversion of multi games

Download PSX2PSP v1.3 here

Homebrew developer SeanPaul223 has updated Luigi’s World to version 2. The latest build implements a few changes including new graphics and more options.

According to the documentation, the homebrew game now has some new graphics and a theme selector, with some code optimization implemented to the ‘brew. The gameplay is essentially the same though, with Luigi collecting diamonds as he traverses through the level.

If you plan on installing Luigi’s World v2 on your PlayStation Portable, be sure to go over the documentation included in the zipped file to avoid any problems.

You can download Luigi’s World v2 here. Enjoy

Disclaimer
Following the processes that follow is done solely at your own risk. The developers of any tools mentioned in this article cannot be held responsible for any negative effects of their use. Also, I do not accept credit for these tools or processes.

In my previous post, I talked about homebrew and custom firmware, but only mentioning being able to install it on a fat PSP running firmware 1.5. Well, there is another way which works on any PSP. This method can be used to unbrick any firmware handicapped PSP or upgrade (or downgrade) a PSP to just about any version of custom firmware. Unfortunately, a working PSP running either 1.5 firmware or custom firmware is needed, as well as a spare battery and memory stick (1Gb works, but 512Mb should work as well). The battery is used to create what’s known as a Pandora battery, and the memory stick is used to create a Pandora Memory Stick (aka jigstick or Magic Memory Stick).

For the battery, I chose to use an official Sony battery for the phat PSP since it is proven to work very well. I have read that you should not attempt to use a slim battery as this will kill it. Even though the phat PSP battery does not properly fit the PSP slim, it can still be used in the Slim for these purposes. Just make sure the battery is as secure as it can be, and lay the PSP on a stable surface while performing any actions involving this battery.

First, grab a program called mspformat. Get it here. Connect the PSP to a computer and place it in USB mode. If desired, back up the contents of the memory card (simply copy the entire contents to your computer), because it is about to be formatted. Using the command prompt (Start, run, cmd), navigate to the location of the mpsformat program, and type the following to format the memory stick correctly:

mspformat X (where X is the drive letter of the PSP memory stick)

Exit USB mode and reboot the PSP (rebooting may not be necessary, but I usually do it anyway just in case). Connect to the computer again with USB mode.

Now, head over to Dark_Alex’s page and download Despertar del Cementerio. Manually create a directory in the root of your formatted memory stick called PSP. Within that directory, create a directory called GAME. Place the folder DC5 from the Despertar del Cementerio download into the PSP\GAME directory. Next, you are going to need Sony’s official firmware updates for firmware versions 1.50, 3.40, and 3.90. I cannot link to these here, but they are pretty easy to find by searching for “1.50 Official PSP Update”, or something along those lines. Each of these downloads may be named EBOOT.PBP. If they are, rename them 150.PBP, 340.PBP, and 390.PBP and place them into the root of the memory stick. Don’t worry too much, because if something isn’t right, the program will tell you and you’ll just have to try again.

Once everything is setup, exit USB mode, navigate to the game menu, and enter the memory stick. If the contents look strange, power down the PSP, remove and replace the memory stick, and turn it back on. This should fix it. Now, execute Despertar del Cementerio. Once this is complete, re-connect to the PC and delete 150.PBP and 340.PBP as they are no longer needed. Leave 390.PBP. At this point, the memory stick is ready for action and can be put aside for later use. Credit goes to Dark_Alex for portions of this guide.

Next, we need a proper battery (more aptly, a Pandora battery) to utilize the Magic Memory Stick we just created. There are two different ways to do this, depending on which PSP is being used. Since I was using a Slim PSP, I used the corly149 tool, found here (registration is required to download, but only takes a minute). There is also the c+d tool for those that have a phat PSP with either custom firmware or 1.50. Check it out here, and please, if you can, drop those guys a donation and thank them for all of their contributions to the community.

Once you have your chosen Pandora Battery creation tool ready to use, it’s time to modify that spare battery you have. Plug the AC adapter in the PSP and remove your normal battery and replace it with the battery you wish to make a Pandora Battery. Make sure the battery is charged at least 75%, but 80% is better to be safe. Disconnect the AC adapter and execute the Pandora Battery creation tool. This process should be pretty self explanatory. This comes from the readme of the tool:

service mode writes a serial 0xFFFFFFFF to the battery eeprom (inserting the battery will power on and wait for a proper MS)
auto boot mode writes a serial 0×00000000 to the battery eeprom (inserting the battery will power on and boot the firmware)
dummy normal writes a serial 0×12345678 to the battery eeprom (the battery will work normally)
backup eeprom reads the battery eeprom to a file “eeprom.bin” in the root of a MS
restore eeprom if a file “eeprom.bin” is present, it will attempt to write it to the batteries eeprom

I believe there are two restore options that will initially be disabled, but more on those in a moment. First, you want to backup your battery’s EEPROM. This is necessary if you want to return to normal at a later time, but it should be done regardless as it really doesn’t hurt to have the backup. Now the restore options should be enabled since the backup file is now present. Now, you want to choose service mode. This writes the 0xFFFFFFFF serial number to the battery’s EEPROM, making it a service mode battery (or Pandora Battery). Once complete, exit the application. Re-attach the AC adapter and remove the modified battery and replace it with the normal battery. Congratulations, you now have a Pandora Battery and a Magic Memory Stick that can be used to unbrick any PSP. It can also be used to install Custom Firmware to any PSP.

Note that this process sets up the battery and memory stick combo to install firmware 3.90 (the most recent at this time). This process can also be used to downgrade to a previous firmware, but I won’t go into that detail here. You should have the gist of it by now.

To use the combo, simply take the PSP you want to use it on and insert your Magic Memory Stick. Be sure to insert the stick when no battery is installed! Now, install your Pandora battery and the PSP will automatically turn on. The PSP will boot into service mode and you can follow the on screen instructions. Pressing X (cross) will install 3.90 m33 custom firmware. Pressing O (circle) will install the original 3.90 firmware. It’s that easy.

If you are running custom firmware on your PSP, these are priceless tools to have. That way, if you screw up installing a custom theme (or do anything else to trash your firmware), you’ll have what you need to bring the PSP back to life. Spread the joy of custom firmware to your friends and show them what it can do. And most of all, have fun!