Pandora (unbricker/downgrader) for PSP-200X TA-088v3

[frostegater]

Service Kit for PSP-200X
(supports TA-088v3)
{ NO SALES HERE }

After a successful hack and hide the long-time topic:
"Размышления о возможностях взлома ТА88v3" (http://www.pspx.ru/forum/showthread.php?t=86864)
...it was decided unhide.

KixMnQUiBSENew video by ErikPshat

SshMsBcNW78


Service Kit and MSID Dumper:

Service_memstick_TA-088v3.zip (http://www.pspx.ru/forum/attachment.php?attachmentid=8471)

MSID Dumper & SRC.zip (http://www.pspx.ru/forum/attachment.php?attachmentid=8470)


Structure folders in first archive:

Extracted Files Original - all files from original JigKick Card.
MSID 512mb Original - dump MSPro ID from original JigKick card.
Original Dump MS - full dump Service Card.
Write IPL to MS - tool for writing ipl in MemoryStick™.


How to do your own magic Service Card:

Firstly you need not original MemoryStick™ PRO DUO (from our china friends, cards w/o MagicGate). Usually it's an 512 Mb, 2 Gb or 4 Gb models.
Original Sony MemoryStick™ PRO DUO are not supported ('cause we have no datasheets/programmers for it).




http://www.pspx.ru/forum/attachment.php?attachmentid=3833&stc=1&d=1310507805


http://www.pspx.ru/forum/attachment.php?attachmentid=3834&stc=1&d=1310507805


Download "MSID Dumper", insert MemoryStick™ in PSP and launch programm. Write on paper Serial Number and MSProID.
Remove the back shell of the MS using a knife (scalpel).
Extract internal board (with NAND) from case.
Unsold NAND microchip from card. [Some hardware magic!]



http://www.pspx.ru/forum/attachment.php?attachmentid=3835&stc=1&d=1310507805


http://www.pspx.ru/forum/attachment.php?attachmentid=3836&stc=1&d=1310507805


http://www.pspx.ru/forum/attachment.php?attachmentid=3837&stc=1&d=1310507805


http://www.pspx.ru/forum/attachment.php?attachmentid=3838&stc=1&d=1310507805




Insert NAND in NAND Flash TSOP-48 programmer: http://www.soft-center.ru/reader/


29F128G08CJAAA
29F16G080AA
29F16G08AAMCI
29F16G08MAA
29F32G08AAM02
29F32G08CAMCI
29F32G08CBAAA
29F32G08FAA
29F32G08FAMB2
29F32G08JAMD2
29F32G08QAA
29F32G08TAA
29F64G08AAME1
29F64G08CAMD2
29F64G08CAMDB
29F64G08CFAAA
29F64G08CFABA
29F64G08FAMCI
29F8G08MAA
8GbUTHN
???
D27UAG8T2MTR
F4GMSAP
FBAL41B8GK3W
FBNL41B8GK3PG
FBNL63B5IK3WG
FDL63AP-32U
FNNM29B2GK3WG
FQ64G08UCT1-24
FT16G08UCM03
FTAL41B8Gk3WG
FTNM40A4GK3W2
H27UAG8T2ATR
H27UDG8VEMYR
HN29V1G
HVPE4F4
HVPG3P3
HY27UA081G1M
HY27UBG8T2ATR
HY27UBG8T2MYR
HY27UBG8U5MTR
HY27UF081G2M
HY27UF084G2M
HY27UG082G (?)
HY27UG082G2M
HY27UG082G4 (?)
HY27UG084G2M
HY27UG088G5
HY27UG088G5M
HY27UH088G2
HY27UH08AG5
HY27US08121M
HY27UT084G
HY27UT084G2
HY27UT088G2M
HY27UU088G5M
HY27UU08AG5A
HY27UV08AG5
HY27UV08BG5
HY27UW08BGFM
K9ABG08U0A
K9BCG08U1A
K9CDG08U5A
K9E2G08U0M
K9F1208U0M
K9F1G08
K9F1G16
K9F2808
K9F2G08
K9F4G08
K9F5808
K9F8G08
K9G8G08U0B
K9G8G08UOM
K9GAG08U0M
K9GBG08U0M
K9HAG08U1M
K9HBG08U1A
K9HBG08U1M
K9HCG08
K9HDG08U5M
K9K1G08
K9K2G08
K9K2G16
K9K4G08
K9K8G08U0M
K9K8G08U1M
K9L8G08
K9LAG08
K9LBG08U0D
K9LBG08U0M
K9MDG08U5M
K9NBG08
K9NCG08U5M
K9W8G08
K9WAG08
M8UJ3C26AH
MT29F2G08
MT29F4G08
N1G08UOA
P1U4GR30CT
PQI-KA04-072A-1D00
PQI-KA04-072F-1D00
R1FV04G13RSA
SDTHGEHE0-1024
SDTNGCHE0-2048
SDTNGCHEM-1024
SDTNIGHSM-2048
SDTNIGHSM-4096
SDTNKLAHSM-1024
SDTNKLBHSM-2048
SDTNKLBHSM-2048
SDTNLLBHSM-4096
SDTNMMAHSM-002G
SDTNMMBHSM-004G
SDXNGDHE0-4096-I
T04G724
TC58DVG04B1FT00
TC58DVM72A
TC58DVM9
TC58NVG1
TC58NVG2
TC58NVG3
TC58NVG4T2ETA00
TC58NVG5D2FTAIO
TH58DVG2
TH58NVG4D4CTG00
TH58NVG5D1DTG20
TH58NVG5D1DTG20
TH58NVG5D2ETAK0
TH58NVG5D4CTG20
TH58NVG5T2ETA00
TH58NVG5T2ETA20
TH58NVG6D2ELA48
TH58NVG6D2ETA20
TH58NVG6T2ETA20
TH58NVG6T2ETA2A
TH58NVG7D1DLA87
TH58NVG7D2ELA48
TH58NVG7D2ELA89
TH58NVG8D2ELA89
Unknown
VD101L3LC03
VD101M3MC03
VD101N3NC03
VD102Q3QC33
xD card 128
xD card 256
xD card H1024
xD card H512
xD card M1024
xD card M2GB

Source: http://www.soft-center.ru/reader/NAND_List.php

Install programmer software (Supplied with programmer).
Connect programmer to PC.
Dump part NAND with MSID (MemoryStick™ ID). If you dump not access part, dump other part...
Open NAND by HEX Editor and search HEX points: 204D5350534E5930.



http://www.pspx.ru/forum/attachment.php?attachmentid=3839&stc=1&d=1310507805



If you not found this points, dump other list.
Correct msid from dump: 204D5350534E593000788884C6AA0000. Fat text-found points in dump (up items).
After correct msid, save file and writing dump in NAND.
Sold NAND in card and insert card in case.
Format card in PSP.
From folder "Write IPL to MS" launch "install_psp_ms_multi_loader_ipl.cmd"
Connect PSP to PC.
Press "Y".
If print "Write MS BOOT CODE" - IPL writing access.

If print "Canceled" - you press not correct pad.
If print "Check free reserved sector : to small reserved sectors" - using mspformat.exe.

Open MemoryStick™ by HEX editor. Veryfying installed IPL from 16 sector.
From folder "Extracted Files Original" copy all files in MemoryStick™.
Complete!


P.S. I`m translate The original theme in Russian by ErikPshat (http://www.pspx.ru/forum/member.php?u=46934)... Thanks vit9696. Sorry for my bad english...

[enzo9]

Congrats for the finding. If find a site that sells mms please publishing it
thanks

(Sorry for my english, i'm Argentinian :crazy:)

[erutan]

enzo9, welcome =) We are glad to see you =)))

[jorpakko]

Good news!!!
Unfortunately I don't have the equipment to make the MS.:(
Anyone selling these yet? Could really use one for my bricked 2004 TA88v3.

Oh, greets from Finland. :drinks:

[acquetto]

thanks

[raztabob12]

good news to bricked ta-088v3 users like me...

thanks guys...

are these available in "Repair Package" that is "already made" for sale?

and any approximate how much would it cost?...

coz my psp's been dead for quite some time now... :D

thanks once again...

kudos to the geniuses behind it all... :drinks:

[sadwolf]

Im still dont understand a little bit. if i want to unbrick my psp 2003 ta 88 v3 i will need to buy NAND Flash TSOP-48 or i can use files witch is in Service_memstick_TA-088v3.7z ?

[c.ozzy]

want to unbrick my psp 2003 ta 88 v3 i will need to buy NAND Flash TSOP-48 or i can use files witch is in Service_memstick_TA-088v3.7z ?

You need also the nand programmer (because u have to dump the memorystick and then change the MS_ID) or an already "modded" memorystick.. i don't know if u can find it on ebay or something else

[Semeye]

Didn't Dark_Alex say doing such a thing as this was almost impossible? I don't get it! Anyway, excellent work! Unbelievable... xD

[gm619]

can it unbreak psp 3000?

[totoybatotoy]

hmmm i hope you would release the decoder

[deluxe372]

Я чето не понял ето инфа по востановке
ТА88v3

[flash_zero]

deluxe372, Смотри на русском http://www.pspx.ru/forum/showthread.php?t=92433

[deluxe372]

всеравно не понимаю(
как можна востановит TA88v3

[DIIGMO]

deluxe372, по типу пандоры) Или смотри видео, как именно идёт процесс.

[inoob]

Hi guys! Well, i'm from Brazil, and i got one PSP 2000 with TA-088v3 bricked! I would like know if could you do a video-lesson with the needed steps to make the unbrick! Sorry for my bad english! Thank you all!

[hichem05]

Good Job man you are the best ,it will be better if you did the manipulation to create the MS on video .
try to do it ......

[thibistin]

hello
I have a psp slim (TA 088 V3 mothercard) which was bricked for a year and a half.
good if I start it, nothing is displayed, as in this video
http://www.youtube.com/watch?v=UIMHT6It5bs

Is there really a solution for unbrick please

and .

( sorry for my bad english :$ )

[Sad King]

what i need for do the unbrick of my psp plz hlp me ! im not have a pandora battry like this in video !

[manyaksbs]

how to magic memory stick please video.

Kardeş türksün anladım videonuda izledim aynı psp var bendede 2006 versiyon. aga özelden msn adresimi yolladım eklede belki birbirimize yardımımız dokunur. :)

[Yoti]

how to magic memory stick please video.
1. hardware: get a right memstick, unsold nand, do a dump of nand, reprogram dump with new msid, write new/modified dump to nand, sold nand back to memstick
2. software: inject ipl from archive, copy all files to card
3. unbrick: insert your jigstick, insert pandora battery, wait for "OK"

[xland]

After hard work (regenerate ecc and spare part for changed page in nand) I make one stick (1GB) with corect MSID.
I inserted IPL from archive and verify if are corect writed.
All files was transfered to MS but when I put standard Pandora battery with MS inserted dont make nothing. Only green light like when use standard MSID.
Files was transfered in MS root.
Here's my dump MSID after change operation: 5287.
I change only MSID, its necesary to change and serial (35000000)?.
Please give me some advice where Im wrong.
PSP its with mainboard TA088v3
5287

[Yoti]

its necesary to change and serial (35000000)?
No

Please give me some advice where Im wrong.
Hardware problems on bricked PSP?
You may test card on ANY psp2k. Not all of cards are will work more than 0 (zero) times ;)

[xland]

Hardware problems on bricked PSP?
No
You may test card on ANY psp2k.
I have one bricked PSP and good one. Same on both.
Not all of cards are will work more than 0 (zero) times ;)
Be more explicit please :).

[Yoti]

Be more explicit please
If you do your card 100% right it may not work.

[xland]

If you do your card 100% right it may not work.
Thanks, I'll try with other card.

[xland]

I make new card and I have same issues like first card.
When tell me dont work all cards means dont work because its wrong ECC and stick controller dont pass errors or and if I have good ECC (with good MSID of course) and card its recognised correct may not work?
Why PSP memory led stay all time off?
I think when put Pandora battery PSP must read information about MSID and after that MSIPL from card but card isnt accesed any more.

PS. I read and information from russian thread. Who make working stick have luck and find card what dont check ECC and change only MSID or change both: and MSID and ECC like me?

[Yoti]

When tell me dont work all cards means dont work because its wrong ECC and stick controller dont pass errors or and if I have good ECC (with good MSID of course) and card its recognised correct may not work?
Don't know why, may be as you explained.

I think when put Pandora battery PSP must read information about MSID and after that MSIPL from card but card isnt accesed any more.
PSP -> Battery : Your SN?
Battery -> PSP : FFFFFFFF
PSP -> MemStick : IPL?
MemStick -> PSP : %here it is%
PSP -> Pre-IPL : Check it!
Pre-IPL -> PSP : All ok.

[xland]

PSP -> Battery : Your SN?
Battery -> PSP : FFFFFFFF
PSP -> MemStick : IPL?
MemStick -> PSP : %here it is%
PSP -> Pre-IPL : Check it!
Pre-IPL -> PSP : All ok.

That I know from this steps:
PSP -> Battery : Your SN? - its FFFFFFFF (Pandora Battery)
Battery -> PSP : FFFFFFFF - returned corect
PSP -> MemStick : IPL? - Here I dont know because I dont see light on MS led - Your IPL its injected and begin at 16 sector.
MemStick -> PSP : %here it is%
PSP -> Pre-IPL : Check it!
Pre-IPL -> PSP : All ok.

I dont see in above steps MSID verification or its used only after all this steps for decrypting?

xland добавил 19.12.2011 в 22:41
Thanks a lot for advices Yoti.
My mistake was I inject IPL on PSP 2004 and for me dont work this.
After I inject IPL on PSP Phat all was OK.
Was good and first card.
Bricked PSP with TA088v3 its now alive again :)

[ikyak]

excuse me, i got a lot of question here, how do i connect TSOP-48 programmer to pc? does TSOP-48 programmer using usb port? what OS does it support to? if it's available, where do i can buy it? any help would be appreciated, :)

[frostegater]

excuse me, i got a lot of question here, how do i connect TSOP-48 programmer to pc? does TSOP-48 programmer using usb port? what OS does it support to? if it's available, where do i can buy it? any help would be appreciated, :)

You buy programmer in soft-center?

[Yoti]

I dont see in above steps MSID verification or its used only after all this steps for decrypting?
*.prx.enc files and may be some other signed with msid.

Bricked PSP with TA088v3 its now alive again
Congrats!

[ikyak]

You buy programmer in soft-center?
NOT YET, I'M JUST WONDERING HOW TO CONNECT IT JUST BEFORE I BUY ONE.

ikyak добавил 24.12.2011 в 17:57
i'm sorry, can i just buy both magic Service Card and Pandora Battery from u? 'cause it's impossible for me to make one, i don't even have a soldering skill. my psp slim 2k (ta-088v3) have been dying here,

[gettergtr]

Well...it's not easier to buy a complete Pandora pack for novice?

[mari95]

Hello. It's good programmer for this operation? http://www.ebay.com/itm/Willem-EPROM-Programmer-Adapter-TSOP48-LV8-16bit-U07-/200544959618?pt=LH_DefaultDomain_0&hash=item2eb1693c82

[frostegater]

mari95, may be.. but not tested... I think, you will have problems with ECC.

[mari95]

What program selector will you recommend? Cheap and with socket and adapter TSOP48. Give me link from e-bay , please.

Sorry for my bad english. I'm is from Poland. :)

[lenovo3000]

@mari95 - musi być taki co obsługuje te układy http://www.soft-center.ru/reader/NAND_List.php
The programmer that supports systems with a nand_list np. http://dybkowski.net/download/nand_flash/k9g8g08u0a.pdf

[mari95]

lenovo3000, jesteś z Polski? Mógłbyś mi pomóc na gadu gadu z tym programatorem?

[lenovo3000]

Usb xD READER plus adapter (PCB GOTRONIK with Flash-chip holder from Ebay)
http://i41.tinypic.com/2ak9tev.jpg

[mari95]

Lenovo3000 give me links for good offer of this reader and adapter TSOP48 , please.

[lenovo3000]

@mari95
Reader = czytnik kart xD
adapter TSOP48 = adapter kupiony na ebay
płytka pod adapter = płytka z Gotronik.pl kupiona na allegro
Najgorzej wlutować w/w adapter w płytkę tak by nie doszło do zwarcia na istotnych pinach.
Nie ma linku do gotowego programatora. Jedynie do tego co Rosjanie proponują. Samemu musisz coś takiego złożyć. Jak to będzie działać zależy od dokładności składającego. Karty xD to nic innego jak nandflash tylko w innej obudowie jak TSOP48. Programu do edycji zawartości to poleciłbym DMDE.
Całkiem ciekawy pomysł to skrzyżowanie rozłożonej karty Mstick (tylko sam kontroler) ze złączem-szczęką umożliwiającą wsadzenie karty xD. Wtedy nie będzie potrzebne babrać się w NANDach bo wystarczy odpowiedni wsad Yoti-ego wsadzony na Xd i dalej jak w opisie. Wtedy nie będzie potrzeby kupować drogiego programatora. Tak czy inaczej samemu trzeba nad tym pomysleć.
Sam widzisz że linku żadnego nie podam. By znaleźć adapter wpiszesz "TSOP48" w ebay.com.au i ci wywali kilku sprzedawców . Są dwa czy trzy rodaje tych adapterów. Ja kupiłem najtańszy. Wydałem koło 49zł . Korzystaj że dolar tani. Może do 2.50zł za 1USD daleko ale urwać 1/3 można przy wahaniach. Powodzenia.

[mari95]

Lenovo3000 to widzę ,że jednak lipna sprawa z tym programowaniem. Nie takie łatwe jakby się wydawało. Czy ty umiesz zaprogramować i możesz zaprogramować taką kartę? Odkupiłbym od ciebie. Szkoda ,że nie ma chociaż jednej osoby ,która sprzedaje takie karty.

[cw455]

you can unlock my psp
PSP-3004 è il codice 8D ta-090
PSP-3004 è il codice 9D ta-090
PSP-3004 è il codice 9C ta-093

[lpinho]

A big thanks from Portugal for the work and translation.

It's a shame that the reader is so expensive, I hoped some chinese fab already taken up the task to sell these online.

Thanks anyway!!! Great work

[Gregorio]

cw455, no, only ta-088v3(PSP-200*) supported

[frostegater]

cw455, no, only ta-088v3(PSP-200*) supported

For all PSP-20xx

[mari95]

Frostegater, not work on TA-090v2?

[frostegater]

mari95, yaaahr.. 090v2 its PSP-200x?!

[mari95]

TA-090 is in slim 2000. TA-090v2 - first motherboard in slim 3000.

[Gregorio]

mari95, TA-090v2 not supported, all psp 300* not supported

[ikyak]

excuse me:scratch_one-s_head:, what is the main point of having TSOP Programmer? is it only to CHANGE the MS ID?

[tymagix]

hello I would like to know if it was possible to modify the ms without resorting to the method of opening the ms, a software program in bulk?

[Gregorio]

tymagix, it is impossible
ikyak, I do not understand the question

[lpinho]

Hi, sorry if these are stupid questions.

Is the information that you change in the nand of a memory stick protected by any copyright laws or any law? Why is it impossible to find this for sale anywhere?(lack of commercial interest? illegal to sell? am I looking in the wrong places :)?)

Thanks

[Gregorio]

lpinho, it is illegal, and that no one involved in

[tymagix]

agreed thank you for your reply I have only bought me a nand programmer TSOP48

tymagix добавил 01.03.2012 в 14:58
for the programmer need a TSOP48 8 bit or 16 bit?

[Gregorio]

tymagix, 16 bit

[ikyak]

I do not understand the question
i mean, is the reason of having that tool(TSOP, only to change msid? if so, then why don't we just change it via some softwares which already have the feature, such as MiniTool Partision Wizard. CMIIW :scratch_one-s_head:

[Gregorio]

ikyak, it is impossible to have all tried

[tymagix]

is it possible to program a micro sd card with a program to change the msid and then put in an adapter msproduo getting started the psp?

[psgamer]

To do this we need to know, how this adapter works(I haven`t found information about it). First question is where is located msid area - in adapter or in service area of microsd? All dumps, I succseeded to save, begins from following(I used 256mb microsd so don't be surprised about FAT16):
http://img404.**************/img404/8980/screenmhp.jpg

And look here(File system part):
http://www.pspx.ru/forum/attachment.php?attachmentid=5084&d=1322490201

I have no idea how to access area before this in microsd

[c.ozzy]

Usb xD READER plus adapter (PCB GOTRONIK with Flash-chip holder from Ebay)
http://i41.tinypic.com/2ak9tev.jpg

DOes it work? Have u tested it?
Have I to unsold my ms for "fit" it in this reader? or is it just a plug and play?

thanks :)

[tymagix]

First question is where is located msid area - in adapter or in service area of microsd?

msid the area is in the service area of the microsd I think because the adapter does not have a nand

[psgamer]

Adapter has build-in eeprom or, in old ones - separated 8-pin eeprom chip. It would be interesting to dump such chip, but I saw such adapter only on photo

[ru07]

Pleeeease! Help me unbrick my psp 2006 ta-088v3 i'm new to this programming thing but i promise i'll do my very best to make my psp alive, pleeeease! :(

[tymagix]

Pleeeease! Help me unbrick my psp 2006 ta-088v3 i'm new to this programming thing but i promise i'll do my very best to make my psp alive, pleeeease! :(

What help do you want? do not you understand that? it all there's the de******ion on how to unbrick your psp on the forum

[ru07]

first, there is no available link for the MSID dumper and SRC, then where to buy cheap NAND tsop 43 programmer? sorry for not understanding because im new to such things and i envy them, they've already fixed their psp 200x with the specific mobo. :(

[tymagix]

http://cgi.ebay.fr/Willem-5-0-Programmer-Adapter-TSOP48-LV8-16bit-U14-/200587673130?pt=LH_DefaultDomain_0&hash=item2eb3f4fe2a

tymagix добавил 03.04.2012 в 21:23
http://www.flash-extractor.com/shop/

tymagix добавил 03.04.2012 в 21:26
http://www.pspx.ru/forum/showthread.php?t=92433

tymagix добавил 03.04.2012 в 21:31
first, there is no available link for the MSID dumper and SRC, then where to buy cheap NAND tsop 43 programmer? sorry for not understanding because im new to such things and i envy them, they've already fixed their psp 200x with the specific mobo. :(

Here you have the links you need for the programmer you have to check that your nand is supported

[ru07]

is there any video or tutorial on how to make that service mem stick? :(

or is there a more simple way? i mean without buying such things? :( *sigh*

is this impossible for me :(

[tymagix]

is there any video or tutorial on how to make that service mem stick? :(

or is there a more simple way? i mean without buying such things? :( *sigh*

is this impossible for me :(

I'm sorry there is no video on how to make the card and unfortunately there is not no other way for now, we should ask if he has yoti can make a full video of the desoldering nand, its programming and its reintegration into the PSP.

[Gregorio]

No. We can't make a video of the desoldering nand, its programming and its reintegration into the PSP.

[ru07]

I'm sorry there is no video on how to make the card and unfortunately there is not no other way for now, we should ask if he has yoti can make a full video of the desoldering nand, its programming and its reintegration into the PSP.

for now? so i can still fix my psp if i'll wait for the fix right? but is there any possibilities that the fix will be discovered? or this is the only way? thank you for the response.

[jaday143]

there is way to fix ta088v3 go to the psp service buy a MoBo and they will fix it for you. sorry for my bad english

[pokeloverhs]

I have a bricked psp 3004 3g model data code 8d.
Don't know motherboard because bricked before checking it. Will this work?????????
If yes please give me the link for nand programmer ebay or dealextreme will do. And i also need link for chinese memory stick because i have 3 but they are original. Please help I am a 13 year old noob. Dad is gonna help me with electronics and all but I need help from your side too.:unknw::unknw::unknw::unknw::unknw::unknw:

Or else:suicide::suicide::suicide::suicide: for me

[bugmenot_]

is there a possibility that this magic MS be massively produced and sold in the open? It would be cheaper than buying the programmer itself...

[Seymen]

It's too hard :(

[drh87]

Could work this clip: https://www.ic2005.com/shop/product.php?productid=129
with a NAND Programmer?

The pinout of HY27UH08AG5M is the same of the clip (8bit)

Could be a possible solution solderless?

[bruceteh95]

Can I use this memory card for make the MMS!! Please Help!!

http://i812.photobucket.com/albums/zz43/rockerfoo90/P1050104.jpg

[frostegater]

bruceteh95, try it :)

[bruceteh95]

bruceteh95, try it :)

I want to ask my psp had brick already , how do I run the "MSID Dumper"!!

[frostegater]

bruceteh95, ask your friends for PSP. Without PSP you cant dump msid.

[bruceteh95]

bruceteh95, ask your friends for PSP. Without PSP you cant dump msid.

Any psp also can ??? like psp v2 or psp 3000

[frostegater]

bruceteh95, facepalm. What do you mean you when write "psp v2"? Any PSP. NO VITA... noobs..

[toto99303]

Hi guys, I've been following this topic for long time and I have a question:

I have bricked PSP-3004.Date code is 8C. This indicates that the psp probably has ta088v3 mainboard and this method can be used to unbrick the PSP?
Can anyone confirm this? Thanks in advance.

[ErikPshat]

this method can be used to unbrick the PSP?
This method can be used to unbrick the PSP-2000!

[evo_]

I have idea to use old s1 mp3 player as nand flasher.
S1clone is a tool to create and restore full nand backup from s1mp3.
It has a hynix hy27u... tsop48 nand flash with firmware in it, so potentially we can soldier nand and write MSPD dump.

s1 mp3 nand flashes (it has a G2M hynix chips instead G5M :/)
HY27UH081G2M 128MB
HY27UH082G2M 256MB
HY27UH084G2M 512MB
HY27UH088G2M 1024MB

What do You think ? Is it possible ?

[frostegater]

I have idea to use old s1 mp3 player as nand flasher.
S1clone is a tool to create and restore full nand backup from s1mp3.
It has a hynix hy27u... tsop48 nand flash with firmware in it, so potentially we can soldier nand and write MSPD dump.

s1 mp3 nand flashes (it has a G2M hynix chips instead G5M :/)
HY27UH081G2M 128MB
HY27UH082G2M 256MB
HY27UH084G2M 512MB
HY27UH088G2M 1024MB

What do You think ? Is it possible ?

You should have physical access to NAND included service spaces. I dont know can you make it using mp3player, because I don't know which controller used in player. Sorry for my bad English.

[evo_]

frostegater, Thanks for quick reply.
I have a s1 mp3 256MB - it has Hynix HY27UH082G2M chip inside.
S1clone http://s1mp3.de/tools.s1clone.html (it can be download from this site, from download section) is a tool, which can make full dump of nand flash of s1mp3 through usb. But it creates backup with different extension - .s1clone. However I can view dump by hex workshop - I think dump looks ok.

I don't know what's the differnce between HY27UH08*G2M and HY27UH08*G5M.
Info from hynix_part_number: G2M vs G5M
- 2 === 1 nCE & 1 R/nB; Sequential Row Read Disable
- 5 === 2 nCE & 2 R/nB; Sequential Row Read Disable

It will be cheap nand programmer to change msid. What do you think ?

PS: Nice site about s1mp3 players http://s1mp3.org/en/docs_hwspecs.php - hw specs etc.

[frostegater]

evo_, yeah, will be good if you can make it success. Please tell me your result.

[evo_]

Soldering is not a big problem for me, but it's hard to find fake memory stick card.

I have only 1 MSPD - geniune sandisk 4GB (black body).
My friend has a old fake "sony" memory stick 4GB card with magicgate unknown, but I didn't open it.
In my opinion the most possible way with s1mp3: take nand from card to s1mp3. make a backup, change serial number and MSID by hex editor, write it to mp3 again and solder nand to fake card. (but I'm not sure if this player can handle 4GB nand).

I think it may works, but I don't know what's the real difference between HY27UH08*G2M and HY27UH08*G5M chips (mp3 has a G2M chip :/)

[Washasat]

Can you Guys make a tutorial on how you did that because i dont understand anything from that tutorial .

[megadownlo]

pls. re-upload the files i need?? Thank you...

Service Kit and MSID Dumper:

* Service_memstick_TA-088v3.7z
* MSID Dumper & SRC.7z

could show a video of making the jigkick card and explained in english?
and how do i use the Time Machine or something?? where do I get one??

megadownlo добавил 31-01-13 в 0:Jan p
SIR YOTI :cray:

:to_become_senile:

please make video of the jig kick card. please!!!!please!!!!please!!!!please!!!!please!!!!please!!!!please!!!!please!!!! please!!!!

THANK YOU!!!!!!!!:thank_you:

megadownlo добавил 31-01-13 в 0:Jan p
excuse me,
i couldn't understand what you were saying starting from here,
11. Dump part NAND with MSID (MemoryStickпїЅ ID). If you dump not access part, dump other part...

until step 24...

could you explain them in a noob way or in a way where children will understand, =)? please?

i don't know what you meant by dump, sorry....

I am all new to the technician stuff, perhaps you could add more screen shots because it's hard to rely on the verbal steps alone,
thank you sir :thank_you:

megadownlo добавил 31-01-13 в 0:Jan p
is this trustworthy???

http://cgi.ebay.fr/Willem-Programmer-Adapter-TSOP48-LV-8-16bit-F18-/200677098309?pt=FR_YO_MaisonJardin_Bricolage_ElectroniqueComposants&hash=item2eb9498345

which among the e-bay could be trusted?? and how do i translate ebay into english, I can't seem to find the settings, it's all in russian, sorry

[ErikPshat]

pls. re-upload the files i need?? Thank you...

Service Kit and MSID Dumper:

* Service_memstick_TA-088v3.7z
* MSID Dumper & SRC.7zOK, re-uploaded.

[cucho]

Эй, друг может устроить пластины ta_090v1 PSP извините за мой язык, я из Мексики

[M1limetrox]

What is this? He use a nand programmer?

http://www.ps3oon.com/2013/06/alternative-solusi-unbricked-psp2000.html