[how to] hack psp's with firmware 3.51 or higher

[BCman]

Dont forget to read the bottom where u can upgrade to the newest firmware once hacked.....

Lots of info out there, tons of threads, but I thought I would bring it together for u, BC style........
Been floods of ppl getting new slims, so here we go......this also will work for fat psp's.


Only way to hack new SLIM is PANDORA, i repeat, ONLY way is PANDORA. Fats can be hacked this way too.
ANY PSP WITH FIRMWARE HIGHER THAN 3.50 CAN ONLY BE HACKED THIS WAY!!!!!
For u lazys/pussies, a list of people around the world who will make battery and stick for u......
http://www.darkmessiah.byethost13.com/freeservice.html
http://forums.noobz.eu/downgrader-su...ing-pandora/0/


Pandora...
-Can downgrade/upgrade/unbrick ANY psp, slim or fat, regardless of firmware version.
EXCEPTION: IF U HAVE A BRAND NEW SLIM WITH THE NEW PROCESSOR IT CURRENTLY CANT BE HACKED, PANDORA BATTERY STILL WORKS BUT THE IPL ISNT RECOGNIZED THEREFORE U CANT FLASH CUSTOM FIRMWARE TO IT YET, THERE IS A FIX IN THE WORKS BUT IT WILL TAKE SOME TIME TILL WE SEE IT.
read this to determine what u have by the letters on the box.
http://www.psp-hacks.com/forums/f117...ox-by-t223726/

-Is a combination of a psp battery and a memory stick
-The battery is converted into "service" mode, what this means is that when battery is inserted into psp, it makes the psp read/load/boot from memory stick instead of internal flash.
-There are soft modded batteries that are converted using homebrew(software) by another CF psp or hard modded batteries where u open up the battery itself and lift a pin on the circuit board. Both of which do the same thing....
-A "service" battery/DATEL TOOL battery/Pandora battery/Hard mod battery ARE ALL THE SAME THING AND DO THE SAME THING.
-Batteries can be soft and hard modded and then converted back to normal if done right....
-The memory stick contains the new firmware/software, DC = Despertar del Cementerio, which is loaded with "service/pandora" battery.
- Three main versions of DC:
-DCv3=flashes 3.71-2M33 to ANY psp regardless of firmware
-DCv4=flashes 3.80-5M33 to ANY psp regardless of firmware
-DCv5=flashes 3.90-3M33 to ANY psp regardless of firmware
-DCv6=flashes 4.01-2M33 to ANY psp regardless of firmware
-DCv7=flashes 4.01-2M33 to ANY psp regardless of firmware, AND REPAIRS corrupt idstorage and keys!


OK, LETS START HERE
1ST, we must make ur battery into service mode, several ways, find one way that best suits ur needs.
2ND, we must make "magic" memcard, once again, several ways, requirement 3 ANYONE can do.

PANDORA BATTERY REQUIREMENTS:
-To make battery you must meet one of these requirements, scroll down to the requirement u meet and continue.
1-----Have access to a psp that has 2.80 firmware or lower
2-----Have access to a psp that has custom firmware or 1.5
3-----Buy a Datel Battery already converted to service mode battery
4-----Buy Pandora battery off EBAY (watch out 4 scammers!)
5-----Send ur battery to someone on these forums to make battery
6-----Hard mod ur battery, just about everyone can do this one way or another...





Requirement 1
if u have a psp(fat only) with firmware 2.80 or lower, u can downgrade it with these files and nothing else is required.
once @ 1.5, u can either upgrade to 3.52-4M33 and make pandora or make it from 1.5(more difficult) then use the pandora to hack ur slim.
so, upgrade to 2.80 with this.
http://rapidshare.com/files/12130275/280update.rar
then, use this to downgrade to 1.5(read readme!)
http://calo-hacks.com/downloads/down...0DownGrade.zip
tip for running HEN
http://www.psp-hacks.com/forums/f125...nning-t148656/
then, onto requirement 2 to make magic memcard and service battery with all-in-one UPMS program that can be run with a CF psp....

Requirement 2
Now that u have 1.5 or CF, use UPMS to make the very best Pandora method.

MY FAVORITE ULTIMATE PANDORA(UPMS Sapphire V4)
(Note, This is 4 psp's that have custom firmware installed up to 3.90-3M33, no other psp can run this app. )
THIS WILL BRICK UR PSP IF U HAVE 4.01m33 AND USE THE FATMSMOD PATCH, DO NOT USE!
(if u have 4.01M33, use UPTInstallerV5 link= http://www.psp-hacks.com/forums/f118...5-out-t225263/ )
(note, open flash0 and delete "dic" folder to ensure u have enough free space for UPMS...)
download this UPMS INSTALLER, READ README!!!!!!!!!!!
http://www.noob911.com/downloads/psp...nstallerV4.rar


and heres my quick low down...
download all 4 eboots and rename.
(Make sure u have file extentions turned on!)
download 3.90 eboot, extract file to PC, open folder and find eboot.pbp and rename it to 390.pbp
http://www.psp-hacks.com/download.php?id=1406
download 3.80 eboot extract file to PC, open folder and find eboot.pbp and rename it to 380.pbp
http://www.psp-hacks.com/download.php?id=1377
download 3.71 eboot extract file to PC, open folder and find eboot.pbp and rename it to 371.pbp
http://www.psp-hacks.com/download.php?id=1259
download 1.5 eboot extract file to PC, open folder and find eboot.pbp and rename to 150.pbp
http://www.psp-hacks.com/download.php?id=4

-extract the UPMS file listed above to ur pc and READ README!!!
-format memcard with Custom Firmware PSP
-copy both 150.pbp and 371.pbp and 380.pbp and 3.90.pbp to root of memstick.
-copy cso file to ur ISO folder on ur psp memstick
-put umd in psp or ensure u have umd mode/iso loader set to SONY NP9660(VSH menu or recovery>config setting)
-run cso program from xmb>game>memstick
-Install the 3rd IPL, sleep fix in step 1.
-install full program(slowest) in step 3.
-Charge your battery to above 75-100% first, PSP's won't boot if the battery is too low no matter what.
-make sure to backup/create battery EEPROM(this is to reconvert ur battery back to normal should u convert it)(this is done in step 2)
-then goto step 2 and convert battery.
-done

When you insert the service battery, it should autoboot the psp and turn it on, your power light should be Green.
USAGE
(All usage instructions are in ptf files from first download...)
If DCv3/4/5 is active:
With PSP off and battery removed,
1) Hold Left Trigger
2) Insert your Pandora battery, Ultimate Loader will boot.
NOTE: If you have the power switch in the Hold position (down) and insert Pandora's battery while holding Left Trigger it will boot directly to DCv3, but don't forget to put hold switch back to normal otherwise your button presses will not work.
If you have either Hellcat, Joker, or are unsure which folder is active:
With PSP off and battery removed,
1) Push power switch down to Hold.
2) Hold Left trigger
3) Insert Pandora's battery, The slim will boot then turn off.
4) Remove Pandora's battery
5) Put power switch back to normal (turn hold off)
6) Hold left trigger
7) Insert Pandora's battery, this will now display the Ultimate Loader menu. From here you can launch DCv3.
quoted from OverfiendX

-DCv3=flashes 3.71-2M33 to ANY psp regardless of firmware
-DCv4=flashes 3.80-5M33 to ANY psp regardless of firmware
-DCv5=flashes 3.90-3M33 to ANY psp regardless of firmware

MAKE SURE YOU BACK UP YOUR NAND.
Use any of the tools provided by UPMS to backup and recover your nand.
Goto tools menu in ULoader and select Elf Menu. select nandmanager. Press [] to backup and X to restore.
This allows you to dump your NAND and restore from one of multiple bin files.
Your backup will be named nand-dump.bin and stored in the nanddump folder on ms0
You can rename them to what you like just keep .bin as the extension.
OR
Backup your NAND when you get into despertar cementerio v3/4/5 by Pressing the [ ] button if u havent do so already...
NOTE: ONLY RESTORE NAND BACKUP TO PSP AS LAST CASE SCENARIO AND KNOW WHAT UR DOING!!THIS IS NOT FOR NOOBS. READ THE NAND DUMP TUT BEFORE DOING SO.
NEVER, NEVER FLASH ANOTHER PSP'S NAND DUMP!!




Requirement 3
-If u have the DATEL TOOL battery or Pandora battery or Service battery(all the same thing...), all u need is "magic" memstick.
-All three of these options can be done with just the PC or a psp in usb mode...
-Can be made with ANY psp, slim or fat, regardless of firmware (as long as u have USB access),Will work with Card Reader too.
-Must use memstick bigger than 32mb, 64MB-4GB memsticks work great(in other words, dont use 32MB card or any card bigger than 4GB), watch out for FAKE memsticks!!!! Such as EBAY...

4 DIFFERENT WAYS TO DO SO...

1ST, try this, very easy most anyone can do(flashes whatever firmware u choose)(thanks jeff)
http://www.psp-hacks.com/forums/f118...-full-t224166/

2nd, U can try this, it is super easy(thxs Beaker and Klutch)
http://www.psp-hacks.com/forums/f133...im-or-t210546/

3rd, or this, also really easy(flashes whatever firmware u choose)
http://www.psp-hacks.com/forums/f118...-v1-3-t224818/

4th, or the old school way...makes DCv3(flashes 3.71-2M33)
-download file.
http://www.megaupload.com/?d=NGOH440I
-note: Will not work on VISTA
*extract the file into your desktop:
*Open README 1st folder
*highlight and copy MSINST and MSPFORMAT folder
*open My Computer
*Left Click the C: drive once (Note: if you double click, it will open C: drive)
*Now RIGHT Click on C:\ drive and PASTE
==============
*now you need to ENABLE USB MODE on psp
*make note of the psp drive letter
==============
*Open Cmd window ( Start > RUN > CMD )
*Type in the following command "CD C:\" (note: with-out quote mark) HIT enter
*it should take you to -----> C:\>
*now type "CD MSPFORMAT"(note: with-out quote mark)
*it should take you to -----> C:\MSPFORMAT\
*type the following command "mspformat.exe X" ( where X=psp drive letter) note: NO quotation
*Press Y to continue
*it should say "Drive succesfully formatted, and partition moved."
*disable USB mode
*close cmd window
*remove the memory stick and re-insert back
*re-enable USB mode
*Now go back to the Desktop where you extracted those files earlier
*Choose the Pandora Folder you want to make ( original(phat ONLY!!!, will downgrade to 1.5) or despertar(slim or phat, will flash 3.71-2M33 to either)
*Once you choose the folder you want, dbl click and open it
*Select all and COPY
*open the psp memory stick and PASTE
*go back to CMD window.
*Type in the following command "CD C:\" (note: with-out quote mark) HIT enter
*it should take you to -----> C:\>
*now type "CD MSINST"(note: with-out quote mark)
*it should take you to -----> C:\MSINST\
*type the following command "msinst.exe X msipl.bin" (again where X=psp drive letter) note: NO quotation
*It should ask you " Are You Sure ? [Y]
*Press Y and Hit ENTER
*The last line should say " Write MS BOOT CODE "
thats it your done..

Insert memcard into psp, insert battery AND hold L trigger to boot to DCv3, from there, press [] to dump nand. When its done it shuts off psp to confirm dump.
Restart and load DCv3 again.
Now press x to flash 3.71M33.
X to shutdown, remove service battery and boot like normal with good battery or AC plugged in.
SERVICE BATTERY MUST BE CHARGED MORE THAN 75% FOR MENU TO LOAD!!!


Requirement 4
If u bought one off EBAY, ask the seller how to use, or use requirement 3 instructions to make "magic" memcard.

Requirement 5
Figure it out, and bug them.

Requirement 6
HARD modding batteries, the fun stuff....
working batterys that can be modded
http://www.noob911.com/forums/viewtopic.php?f=69&t=680
non working batterys that cant be
http://www.noob911.com/forums/viewtopic.php?f=70&t=681

Read tuts!
Only use plastic whatever to open case, NEVER metal cause to can slip and short out the battery and then its garbage.
http://www.pspmod.com/forums/psp-har...-res-pics.html GREAT PICS FOUND HERE!!!!!!!!!
Slim batteries.
http://www.psp-hacks.com/forums/viewtopic.php?id=123590 HARD MOD SLIM BATTERY TUT(no lifting pin4!)Best way for slim batteries
http://www.ps3forums.com/showthread.php?t=116426 HARD MOD SLIM BATTERY TUT(no lifting pin4!)Best way for slim batteries
http://pspslimhacks.com/forum/index.php/topic,69.0.html HARD MOD SLIM BATTERY(lift pin4)
http://forums.maxconsole.net/showthread.php?t=90959 More pics........
Fat batteries.
http://www.psp-hacks.com/forums/viewtopic.php?id=111615 Make a Pandora Battery Without a homebrew PSP (HARD MOD FAT)(lift pin5)
http://i132.photobucket.com/albums/q...5/DSCF2043.jpg PICS of PIN 5 Hard Mod Battery
http://i132.photobucket.com/albums/q...5/DSCF2048.jpg PICS of PIN 5 Hard Mod Battery
http://www.pspmod.com/forums/psp-har...t-fat-psp.html Newer psp fat battery pics(chip on top)
http://forums.afterdawn.com/thread_view.cfm/620243 More excellent pics

once u have battery hard modded, into service mode goto requirement 3 to make "magic" memstick.









Now u hopefully are hacked and are using CF(custom firmware) M33
now its time to update to the newest CF to play new games and enjoy all that official firmware has plus much more!



4.01M33
(Minimum requirement of 3.52-3M33 installed first)
Important! MAKE sure ur kernal is set to 3.xx or u will brick(hold R trigger when starting psp to enter recovery menu, enter config, set game homebrew kernal to 3.xx)
Hold L trigger + triangle throughout boot once installer starts(unless ur battery is above 78% charged...). When the screen says 'Verifying 390.PBP', let go, and update normally.
Install 4.01M33 first, then run update 2.
4.01M33 noob proof installer
http://rapidshare.com/files/12565706..._Installer.rar
or
http://www.sendspace.com/file/zvk7za
4.01-2M33 Update noob proof installer
http://www.sendspace.com/file/qw0dqr
or
http://rapidshare.com/files/125851192/4.01_M33-2.rar

IMPORTANT
Now that u have custom M33 firmware, u need to set ur iso loader and boost ur cpu speeds...
to do so, enter VSH menu (press home button from xmb for 3.52 users and select button from xmb for 3.71+ users) then scroll down and set umd mode/iso loader to SONY NP9660(The Best!)
and, boost ur cpu speeds in game and xmb to 333/166, this will not harm ur psp(only uses battery up a little faster)(Wifi card can become hot if used for long periods @ this speed)
Also, format memstick to delete unneeded install files and create folder structure...

All praise goes the genius DARK ALEX, For his outstanding creation of SE/OE/M33 firmwares.
Also, read Demonchild's tut on M33 firmware to understand more.
http://www.psp-hacks.com/forums/f127...noobs-t201551/


ENJOY!

[killaj]

damn, i've really gotta get off my ass and re-arrange the stickies again...
bookmarked until i get around to it. there's far too many stickies right now

[gabe713]

:| im not a noob why did I click here?

[popopola]

Originally Posted by gabe713

:| im not a noob why did I click here?

'cause your a noob.
nice thread bcman, always helping out :mrgreenthumbsup:
this'll be helpful once I get a slim.. possibly soon.

[PspMan001]

you cant make a slim battery on a slim battery

[BCman]

yes u can hard mod a slim battery, several ways..
lift pin 4
or
well as it turns out you don't have to tear chip's 4-th pin from PCB in order to make a pandora battery.
Just cut the track on the PCB that runs from the chip... make a small visible cut... and no need to tear the chip pin.
After installing custom firmware just take a small wire, make a jumper and solder it where you made the cut.

meh...

[killaj]

bumpity bump bump

[Ryu]

BUMP

[Snap_X]

Excellent Tut, will be sure to give to all the noobs :mrgreenthumbsup:

[Ryu]

Sticked