It it REAL!! Updates for the Magic Memstick/Battery

[will2km]

The article, images and video are from www.levelup.cn.

Sorry for my English.

http://www.tudou.com/programs/view.php?itemID=7057992

近日，关于3.50系统降级以及“神奇电池â€Â�的传说已经广为流传。在网络上有人号 称可以将所有版本的PSP软件降级至

1.50，哪怕是最新的3.50系统主机都能轻而易举的被搞定。这一说法刚刚传出，立刻遭到了许多人士的质 疑：凭借往日

对于降级的一些消息和“常识â€Â�这种降级显然是不可能的。之后，为了证明自己说法的 真实性，当事人上传了一段视频

，在视频里清除的看到当事人将一台全新的系统为3.50系统的PSP降级为了2.71。这立刻在网络上引起 了轰动。并且由

于降级过程中使用到了一块神秘的电池，不明真相的网友，立刻由此引发了大胆的假设：电池可以降级！但其实， 电池

只是作为钥匙，开启了PSP的工厂模式。而这次的降级其实是一次“修复†Â�工程。
3.50 downgrading and the lengedery magic battery have been on the internet for quite a long time.

Someone claims that they could downgrade any FW PSP to 1.50 including the newest 3.50. Few people

believe them, because... only a battery??? Several days ago, a guy (saleclerk in a game shop in

Shenzhen China) posted a video clip of sucessfully downgrading a 3.50 to 2.71, in this video, he

seems to try to hide something when he loaded the battery on the PSP, which makes more people think

it might be the MAGIC battery.

Well, actually, the battery is only a key, a key to open "Factory Mode" on the PSP. And this

downgrading process is actually a "recovery" process.


　　为了揭开这次降级事件的真相，levelup.cn特别观察员琥珀以及《掌机王SP》编辑米格特别前往 进行调查采访以及

拍摄。再次感谢相关人士对本次采访的支持（由于某些原因，以及事先的协定，在此不方便透露相关人士的更多情 况，

敬请谅解）。

To clear this up, the "special speculator" on levelup.cn, Hupo aka amber (I don't know to translate

the exact word, you can take him as a moderator) and an editor from "King of Portable Consoles SP"

Mige, found this man, had an interview and took another downgrading video clip. The identities and

backgrounds of the other people who are involved in this article will not be exposed as they agreed.


在文章开始之前，先给出一张List，让大家有个心理准备
·降级是真的，并且可以对付任何版本主机
·电池确实不是普通电池，是特质的
·电池不是降级的主角，而是一把钥匙。降级的主角还是记忆棒里面的程序

First of all, a list:
1. the downgrading is real, and it's good for any FW PSP
2. the battery is NOT an ordinary battery in our PSP, it is special
3. the battery is ONLY a key, the most important part is the programs in the memory stick


现在我就开始一步一步的来分析这次降级吧，降级的过程其实简单分为三个步骤
The downgrading process is in 3 (here is a typo in the original article, 4 steps actually) steps

第一步：打开记忆棒仓盖，装入存有神秘程序的记忆棒。前文说过“神奇电池â€Â�仅仅是 一把钥匙，降级的主角还是记忆

棒里面的程序

1. open the cover of the battery compartment, put in an ordinary battery, install the memory stick.

Again, the "magic battery" is only a key, the most important part is the programs in the memory

stick

第二步：关机，卸下普通电池。并且连接上安全可靠的外置电源，然后将“神奇电池â€Â� 放入电池仓，神奇电池并不能给

PSP供电进行降级。

2. shut down the PSP, uninstalled the ordinary battery. Connect the PSP to AC, put the "magic

battery" in

第三步：拨动电源开关，启动PSP。当屏幕上显示出特定画面时即可取下“神奇电池†�，让PSP完全由外接电源供电。这

时已经开始执行降级程序，并开始对固件芯片进行操作。

3. turn on the PSP. when the screen shows some special information, take off the "magic battery",

and now the PSP should reply on the AC only

第四步，当记忆棒指示灯停止闪烁，并且在屏幕上出现ＯＫ画面，表示操作已经完成时即可关闭电源，取出记忆棒 ，然

后重新开机，这时系统版本显示应该为2.71。

4. when the memory stick stops blinking, and the screen shows "OK", it means the whole downgrade

process is finished. turn off the PSP, take out the memory stick, reboot, the FW should be 2.71



电池：
Battery

细心观察的玩家一定发现，PSP的电池接口有三根金手指。而多出来的第三根金手指附带有其他的作用，根据先 前SONY公

布的一些情报来看，PSP的电池是附带有信息识别功能的，也就是说主机会检测电池的身份是否合法，然而这对 于国内的

组装电池生产者来说形同虚设。尽管如此，我们取得了一个很重要的信息，PSP对于电池具备一定的信息检测机 制。而在

这次降级的过程中，这块“神奇电池â€Â�就更进一步的发挥了这一机制的作用：PSP启 动后，在没有读取任何固件信息的情

况下首先读取电能供应机关â€â€�â€â€�电池上的信息；而神奇电池上的这段信息则告诉P SP进行一项特定的任务â€â€�â€â€�读取记忆棒

。

Take a closer look at the battery, we could see that it has three "gold fingers" (pins ?). The extra

third one has its special mission. According to the earlier information from SONY, this battery

could identify information, which means that the PSP could check whether the "magic battery" is

legal or official. However, this identity checking for the clone manufaturers in China is nothing.

In this downgrading process, the battery proves the function: when boots up, the console didn't read

any FW data, but reads the data on the battery. Then the battery told PSP to do another task -- read

the mem stick


这一过程完全是不通过PSP的固件系统芯片控制的，而是更加底层的“工厂模式â€Â�， 所以之前尽管Dark_AleX对于PSP的

系统固件进行了地毯式的研究和解析仍然没有发现这个特殊的存在。

This process is not through PSP FW chip, but a even lower level "factory mode", so I guess this why

although Dark_Alex masters every single detail of FW, he didn't find this mode.

当PSP被要求在加载系统程序前读取记忆棒，那么可以做的事情就很多了。因为这里已经完全将系统固件隔离了 ，也就不

存在什么高版本低版本，哪怕系统已经由于误操作而完全无法启动（变砖），仍然可以使用工厂模式 来重写系统。
打个比方，这种方式就好比用系统引导盘重装系统，你只需要一张能够引导系统的光盘即可；而此前的降级就好比 在

WinXP下重装系统，你不仅仅需要安装光盘，你还需要一个能正常运行的系统。

When the PSP is required to read the mem stick before load FW programs, there are lots of things we

could do. Because it doesn't matter higher or lower FW on this PSP, we could rewrite it now. It's

like you use a bootable CD reinstall your windows system, all you need is a BOOTABLE CD. You could

install Win98 if you are in WINXP.


记忆棒：
Mem stick:

电池起到了“钥匙â€Â�的作用，开启了PSP的工厂模式，让PSP在加载操作系统前先 读取记忆棒上的程序。那么记忆棒上到

底有些什么神奇的程序呢？由于先前的保密协定，这里不能直接透露这个程序的名字，然而可以告诉大家的是，这 个程

序的作用就是向固件芯片写入系统程序。这个过程其实和我们通常意义上说的降级没什么区别，不过就是写入一个 特定

版本的系统而已。

OK, the battery is a key that opens "factory mode". Now we move to the mem stick. As agreed, we will not expose the name of this program, what we could say is the function of this program is to write FW. This process is not different from what we call downgrade in general, but just write to a specific FW 2.71.

细心的玩家，看完前面的降级过程介绍，肯定会产生一个疑问：为什么从3.50
降到的是2.71而不是1.50？这个问题其实很简单。因为2.71系统是支持TA-086主板的最低版本系统。在工厂模式下所使

用的其实还是SONY官方的系统文件，因为非SONY官方系统是无法通过工厂模式的校验的。而在没有打补丁 的前提下，

TA-086主板是无法直接运行1.50系统。而Dark_AleX也是花费大半年时间的不断摸索和研究才制作出 了TA-82/TA-086主

板运行1.50系统的补丁，并由此制作了通用型2.71降级程序。使用工厂模式“降级â₠¬Â�到2.71，然后再用Dark_AleX的通

用降级程序降至1.50是最为安全和可靠的做法。

Then, why 2.71? Because 2.71 is the lowest FW that TA-086 supports. Even under "factory mode", the program is still using official FW from sony, unofficial FW (homebrews etc.) will not pass the "factory mode" checking in the first place. And if w/o patch, TA-086 doesn't support 1.50. Dark_Alex et al., put lots of time on this patch and successfully gave us a universal 2.71 downgrader. Therefore, the best way to do (if we could) is to downgrade higher FW to 2.71 with this "factory mode", then use Dark_Alex's downgrader back to 1.50.



这次降级的意义：
尽管3.50系统的“音乐方块降级包â€Â�已经推出，但本文所提及的这种降级由于是一 种“工厂模式â€Â�的固件操作行为。对

于3.60乃至更高版本的系统降级都具有极其重要的意义，由于无需主机系统的支持，对于已经变砖的机器也能 轻而易举

的实现恢复。如果工厂模式能够破解而无需使用神奇电池启动，那么PSP的破解将进入一个新的篇 章。

If it also works on FW3.60, or if we could get in "factory mode" w/o the battery, it will be

great...blah blah blah

[Cheezeball99]

I actually have the files/programs that go on the memstick, just don't have the battery. Probably shouldn't say that too loud.

[voidzero1]

I actually have the files/programs that go on the memstick, just don't have the battery. Probably shouldn't say that too loud.

If you've got the files, please pass my way??

Also, I know that this might be a long shot, but if there is someone out there selling this battery, I'd like to buy at least two. PM me! Someone in China must've at least managed to get hold of one or more..... I've got 5 bricked PSP's in need of TLC. And NO!!! I'm not going to sell or send to SONY or any of the other remarks anyone wants to make.

Thanks in advance.

[canadajames]

I think there was thread about this made a while ago. I thought it was fake?

[voidzero1]

I think there was thread about this made a while ago. I thought it was fake?

Normally I would agree with you there. Sometimes I go with the theory, "If there's smoke, there's fire".

I still say it's a hunt worth persuing. So if anybody has info (for real of course ), let us know. If the team of ***** (won't mention the red beast on F1 racing) could accidentally leak tech info to their rivals, what's to stop someone at SONY making a massive quick buck.

Anyways, I've said my 10c worth... let's see what happens. And for all you other non-believers, don't bother giving your negative inputs. Although, I'll still except it. LMAO

[Junit]

Translated if anyone actually wants to read through the whole thing

Recently, the system of rank and a 3.50 "magical battery" the legend has been widely circulated. The network claims it was all versions of the PSP software demotion to 1.50. even 3.50 is the latest mainframe system can be easy to get. This argument has spread, immediately met many people questioned : With the downgrading of the past for some news and "common sense" This demotion is obviously impossible. Next, in order to prove the veracity of his statement, the parties to upload a video, the video clearing the parties will see a completely new system for the PSP 3.50 to 2.71 demotion. This immediately on the network caused a great stir. And because the process of downgrading the use of a mysterious batteries, uninformed Netters This immediately triggered a bold assumption : battery can be downgraded! , But in fact the battery is only as a key to open the PSP to the factory model. But this time the demotion is a "repair" projects. 3.50 downgrading and the magic batte lengedery ry have been on the internet for quite a long time . Someone claims that they could downgrade any F W PSP 1.50 to 3.50 including the newest. Few peop le believe them, because ... only a battery? ? ? Several days ago, a guy (saleclerk in a game shop in Shenzhen China ) posted a video clip of successfully downgradin g 3.50 to a 2.71, in this video, he seems to try to hide something when he loaded t he battery on the PSP, which makes more people think it might be the MAG IC battery. Well, actually, the battery is only a key, a key to open "Factory Mode" on the PSP. And this d owngrading process is actually a "recovery" pr gy. To this demotion opened the truth, levelup.cn special observer amber and "Wang SP handheld" editorial MiG Special to conduct interviews and shooting. Thanks again related to the interview with the support (for some reason, and prior agreements, in this inconvenient to disclose more of the locations). To clear this up, the "special speculator" on levelup.cn. ri aka amber (I do not know to translate the achieve Felicity ct word, you can take him as a moderator) and an editor fro m "King of Portable Consoles SP" Mige. found this man, had an interview and took another downgrading v Ideo clip. The identities and backgrounds of th e other people who are involved in this article w ill not be exposed as they agreed. prior to the start of the article, List is a first, so we have a psychological preparation demotion is true. and that can deal with any version of it is not the host cell battery, is the characteristics of the battery is not the protagonist of demotion, but a key. The protagonist of demotion or Memory Stick inside the procedures First of all, a list : 1. the downgrading is real, and it's good for any FW PSP 2. the battery is NOT a n ordinary battery in our PSP, it is special 3. ONLY the battery is a key, the most important part is the programs in the me mory stick now I started step-by-step analysis of this demotion bar, In fact, the process of downgrading divided into three simple steps The downgrading is in process 3 (here is a typo in the original article, four steps actually) first steps : Open the Memory Stick positions covered, there mysterious loading procedures Memory Stick. The former said "magical battery" is only one key, the protagonist of demotion or Memory Stick inside the 1. open the cover of the batter y 闃茬伀闁, put in an ordinary battery. install the memory stick. Again, the "magic battery" is only a key, the most important part is the programs in the me mory stick next step : shutdown, battery discharge. Safe and reliable connectivity to the external power supply, and then "magical battery" into the battery compartment, magic does not offer PSP battery power supply for the downgrading. 2. Shut down the PSP, uninstalled the ordinary battery. the Connect PSP to AC, put the "magic battery" in the third step : trying power switch, start the PSP. When the screen displayed specific pictures can be removed "magical battery", the PSP entirely by external power supply. Then began the implementation of demotion procedures, and began to operate chip firmware. 3. Turn on the PSP. When the screen shows some spe Citigroup information, take off the "magic battery," and now the PSP should reply on the AC only the fourth step, When Memory Stick stop blinking lights, and appeared on the screen images OK, said the operation has completed can turn off the power, remove memory stick, and then re-boot, time System version should show as 2.71. 4. When the memory stick stops blinking. and the screen shows "OK" it means the whole process is finishe downgrade d. turn off the PSP, take out the memory stick. reboot, the FW should be 2.71 Battery : Battery careful observation of the players will find that the PSP battery interface has three ordinary. And the third extra-ordinary there are other incidental effect, according to previous Sony announced some intelligence, PSP battery is incidental to a function of identification information, in other words mainframe will check the battery status was illegal, however, for domestic battery producers exist in name only. Nevertheless, we have made a very important message, the PSP for a battery with some information and detection mechanisms. And the recent downgrading of the process, this "magical battery" on further play a role in this mechanism : after commencement of the PSP, in the absence of any firmware to read the information of the first power supply organs to read -- information on the battery; Miraculously battery of this information will tell the PSP for a specific task -- Memory Stick reader. Take a closer look at the battery, we could see that it has three "gold fingers" (pi ns?) . The extra third one has its special missio n. According to the earlier information from SO NY, this battery could identify information, which means that the PSP could check whether the "magic battery" is legal or official. However, this identity checking for the clone manufatur ers in China is nothing. In this downgrading pro cess, the battery proves the function : when boots up, the console did not read any FW data, but reads the data on the battery. Then the batte ry told the PSP to do another task -- read the mem 2 k this process is entirely through the PSP firmware system-on-chip control, but even the bottom of the "factory model" So before despite Dark_A leX system for the PSP firmware for the carpet of research and analysis are still not have found this special presence. This process is not through the PSP FW chip, but even a lower level "factory mode" so I guess this why although Dark_Alex masters e very single detail of FW. he did not find this mode. When the PSP was asked in procedures before loading system memory reader rods, we can do things a lot. Because here has been completely isolated system firmware, and does not exist in high-low version version, even the system has been completely due to misoperation not start (variant brick), it can still use the factory model to rewriting system. For example, this approach can be compared with boot disk to reinstall system, you only need a guide to the CD-ROM can be; Before the demotion like in the next reinstall WinXP system, you not only need to install the CD, you also need a functioning system. When the PSP is required to read the mem stick BEF ore load FW programs, there are lots of things we could do. Because it d oesn't matter higher or lower FW on this PSP, we could rewrite it now. It's like you use a boota ble CD reinstall your windows system, all you need is a CD BOOTABLE. You could install W in98 if you are in WINXP. Memory Stick : Mem stick : battery played a "key" role in the opening of the factory model PSP, the PSP before loading the operating system to read Memory Stick or procedures. Then on the Memory Stick in the end what some magical process? Due to the confidentiality of the previous agreements, not directly disclosed here this procedure name, but can tell you is that the role of this procedure is to chip into the system firmware procedures. This process and the fact we usually sense that the demotion, apparently But is write a specific version of the system only. OK, the battery is a key that opens the "factory mode." N ow we move to the mem stick. As agreed, we will not expose the name of this program, what we could say is the function of this program FW is to write. This process is not different fro m what we call downgrade in general, but just write to a specific FW 2.71. Observant players, looking ahead demotion process, will definitely create a doubt : Why dropped from 3.50 is 2.71 instead of 1.50? In fact, this issue is very simple. Because the system supports 271 TA-086 motherboard version of the minimum system. The factory model used by the fact Sony official or system files, because non-Sony official system can be found through the factory calibration of the model. And in the absence of patches under the premise, TA-086 motherboard is not directly system running 1.50. Dark_AleX and also spent more than half a year of constant exploration and research to come up with a TA-82/TA -086 motherboard operating system patch 1.50, and thus produced a versatile 2.71 demotion procedures. The use of the factory model "demotion" of 2.71, Then Dark_AleX common procedures downgraded to 1.50 is the most secure and reliable approach. Then, why 271? Because 2.71 is the lowest FW that TA-0 86 supports. Even under "factory mode" the program is still using official from Sony FW , unofficial FW (homebrews etc.). will not pass the "factory mode" checking in the first place. And if w / o patch , TA-086 does not support 1.50. Dark_Alex et al. , put lots of time on this patch and successfully universal gave us a 2.71 downgrader. Therefore, the best way to do (if we could) is to downgrade hi gher FW to 2.71 with this "factory mode" then use Dark_Alex's downgrader back to 1.50. This downgrade significance : 3.50 despite the "demotion music sheet packet" has been published and but the paper referred to the demotion because this is a "factory model" of operating firmware acts. For Version 3.60 and higher systems demotion have great significance, Because without the support of the mainframe system, has changed brick machines can be easy to regain. If the plant is able to break the pattern without the use of battery-powered magic, the PSP will tackle a new chapter. If it also works on FW3.60. or if we could get in the "factory mode" w / o the batte ry, it will be great ... blah blah blah

[Casey44]

Well, actually, the battery is only a key, a key to open "Factory Mode" on the PSP. And this d owngrading process is actually a "recovery" pr gy. To this demotion opened the truth, levelup.cn special observer amber and "Wang SP handheld" editorial MiG Special to conduct interviews and shooting. Thanks again related to the interview with the support (for some reason, and prior agreements, in this inconvenient to disclose more of the locations). To clear this up, the "special speculator" on levelup.cn. ri aka amber (I do not know to translate the achieve Felicity ct word, you can take him as a moderator) and an editor fro m "King of Portable Consoles SP" Mige. found ....

Well, I got lost here.
Be away awhile brushing up on my English. Any native English speaker willing to translate the piece in the meantime? Thnx.

[voidzero1]

any luck that you've found the battery and memory stick chasis44?

[Ecko]

I wonder how the battery acts like a key...

If someone with experience with electronics and the PSP with access to the battery is able to somehow trigger the 'key' without the special battery itself, then they could develop a way to recover bricked PSP's.

[Darkchild]

well I know a bit of electronics, but without the actual key, there's nothing I can do xD