Editing JigKick Battery

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
= What is a JigKick Battery? =


The term "JigKick" refers to external hardware that, when connected, causes the PSP to boot in Manufacturing Mode (commonly known as service mode). In this mode, the [[iplloader]] launches the [[IPL]] from sector 16 on the physical drive (the Memory Stick) instead of the NAND.


The original JigKick Battery (also referred to as "Pandora Battery") is a PSP battery that reports a serial number of 0xFFFFFFFF. This version of JigKick Battery is only compatible with PSP-1000 and PSP-2000. Newer versions of JigKick hardware have been created for other models.
= A Note =


= JigKick History =
The JigKick Battery described on this page is the original iteration by Team C+D. Some of the info presented may be outdated and/or missing images and is in the process of being fixed up. This version of the JigKick Battery is only able to put PSP-1000 and PSP-2000 in service mode. For newer models, please see the following:
* [[Psp-3000_Jigkick | PSP-3000 JigKick]]
* [[Psp_Go_Jigkick | PSP Go JigKick]]
* [[PSP_Street_Jigkick | PSP Street JigKick]]


== Pandora's Release ==
= What is a JigKick Battery? =
 
The original Pandora JigKick Battery and [[Magic_Memory_Stick | Magic Memory Stick]] software was [https://web.archive.org/web/20230627183619/http://noobz.fanjita.org/joomla/news/unbricker-for-all-firmwares.html released by Team C+D] on August 22nd, 2007. It included a PSP homebrew app to re-write the serial number stored in the battery's EEPROM to 0xFFFFFFFF and another homebrew app to create a Magic Memory Stick capable of installing a fresh copy of firmware 1.50 on any PSP-1000, allowing unbricking or downgrading from any firmware.
 
This first version of the JigKick Battery continued to work on the PSP-2000 with updated [[Magic_Memory_Stick | Magic Memory Stick]] software.


== Sony Fights Back ==
The term "JigKick" refers to external hardware that when connected causes the PSP to boot in Manufacturing Mode (commonly known as service mode). In this mode, the [[PRE-IPL]] launches the [[IPL]] from sector 16 on the physical drive (the Memory Stick) instead of the NAND.


Sony changed the way newer PSPs worked multiple times in order to prevent users from using service mode to quickly downgrade or install Custom Firmware.
The original JigKick Battery (also referred to as "Pandora Battery") is a PSP battery that reports a serial number of 0xFFFFFFFF. This version of JigKick Battery is only compatible with PSP-1000 and PSP-2000 (excl. TA-090v1).


=== Battery EEPROM Write Access Patched in New Motherboards ===
= Sony's patches =


Starting with the second revision of PSP Slim motherboard (TA-085v2 and newer), Sony changed SYSCON firmware to block the ability to write to the battery's EEPROM, preventing homebrew software from changing the battery's serial when run on these newer PSPs. Using batteries already converted to JigKick to enter service mode still works on newer PSP-2000s with this change.
== PRE-IPL patch in new Tachyon revisions ==
 
=== Battery EEPROM Write Access Patched in New Batteries ===
 
[https://web.archive.org/web/20230627183620/http://noobz.fanjita.org/joomla/news/are-new-sony-batteries-pandora-proof.html First reported by Fanjita] on September 24th, 2007.
 
Sony began preventing EEPROM writes in all sizes of newly manufactured batteries, mostly impacting 1200mAh batteries included with late PSP-2000s and PSP-3000s. These 1200mAh batteries have a label serial starting with 08 or higher.
 
=== iplloader patch in new Tachyon revisions ===
(This section should be moved to [[Magic_Memory_Stick | Magic Memory Stick]] as it deals with the software side of service mode more than the hardware)


As time went on, Slim PSPs with different revisions of the TA-088 motherboard have been released, and are confirmed to be Pandora-proof. The TA-088v2 first reported being shipped with Slims in the Asia continent, had a patched Tachyon that disabled the loading of all current Pandora IPL, but however did not defeat the loading of custom firmware IPLs. The ability to flash CFW via Despertar Del Cementerio has been fixed with v6 which uses a new kernel, therefore allowing Pandora Battery to work on TA-088v2.
As time went on, Slim PSPs with different revisions of the TA-088 motherboard have been released, and are confirmed to be Pandora-proof. The TA-088v2 first reported being shipped with Slims in the Asia continent, had a patched Tachyon that disabled the loading of all current Pandora IPL, but however did not defeat the loading of custom firmware IPLs. The ability to flash CFW via Despertar Del Cementerio has been fixed with v6 which uses a new kernel, therefore allowing Pandora Battery to work on TA-088v2.


A third revision of the TA-088 came weeks after v2. Dubbed the TA-088v3, this motherboard is completely Pandora-proof as discovered by Silverspring. Sony has patched Pandora Battery by updating [[iplloader]] in newer [[Tachyon]] revisions (0x00600000 and newer).
A third revision of the TA-088 came weeks after v2. Dubbed the TA-088v3, this motherboard is completely Pandora-proof as discovered by Silverspring. Sony has patched Pandora Battery by updating [[PRE-IPL]] in newer [[Tachyon]] revisions (0x00600000 and newer).


Source: [https://web.archive.org/web/20081226001926/http://forums.maxconsole.net/showthread.php?t=117432 TA-088v2 report on 14-07-2008]
Source: [https://web.archive.org/web/20081226001926/http://forums.maxconsole.net/showthread.php?t=117432 TA-088v2 report on 14-07-2008]
Line 40: Line 28:
The PSP-2000 version of the TA-090 (v1) motherboard is hackable with Pandora Battery. However, with the PSP-3000 version of the TA-090 (v2 and v3), Pandora Battery does not even turn on the PSP.
The PSP-2000 version of the TA-090 (v1) motherboard is hackable with Pandora Battery. However, with the PSP-3000 version of the TA-090 (v2 and v3), Pandora Battery does not even turn on the PSP.


=== Added Authentication Challenges ===
== Battery EEPROM write access patch in new motherboards ==


Starting with PSP-3000, SYSCON issues extra challenges that are JigKick specific which must be passed before the PSP can boot from the Memory Stick IPL. A normal battery with serial changed to 0xFFFFFFFF will trigger these challenges but cannot pass them, preventing the PSP from booting and finally stopping the original JigKick Battery from working. Later versions of the 3000 introduced different, more obfuscated challenges thanks to Datel teasing a PSP-3000 compatible JigKick Battery that was never released. Newer models like the Go and Street didn't have removable batteries and used different pins/triggers for the same style of communication as 3000s with official JigKick hardware.
The new PSP Slim motherboards (TA085v2 and newer) can not write to the battery EEPROM at all because Sony disabled it, therefore you have to use the hardware mod way to make a Pandora battery.


== New Breakthroughs ==
== Battery EEPROM write access patch in new batteries ==


On January 11th 2021, a new post [https://www.pspx.ru/forum/showthread.php?t=111113 on pspx.ru forums] by khubik detailed information on how to build a new style of JigKick that could put 03g models of PSP-3000 into service mode by connecting the center pin of the battery connector to a USB serial adapter and using a PC program called Baryon Sweeper to receive and pass the SYSCON challenges. The way to trigger [[PSP_Street_Jigkick | service mode on PSP Street]] was discovered in February, 2021 and involved using the USB ID pin for communication and a button combo. PSP Go keys seem to have been dumped around June, 2021. More keys for newer models were dumped on April 29th 2023 (11g) and May 2nd, 2023 (04g, 07g, 09g) and added to a new version of the PC program re-written in Python called PySweeper. The method to trigger [[Psp_Go_Jigkick | service mode on PSP Go]] was discovered by l_oliveira on August 5th, 2023, finally making service mode available on all models.
Reported by Fanjita on 24-09-2007. [http://noobz.fanjita.org/joomla/news/are-new-sony-batteries-pandora-proof.html]


Any new battery which is official (including Fat and Slim) and all fake batteries cannot be converted into a Pandora Battery. So the advice is to buy a new one and use the original one as a Pandora Battery. This is ideal because a Pandora Battery can do lots of useful things like run the Time Machine and along with a Magic Memory Stick you can unbrick, downgrade any supported PSP. Or you can just use the original one and convert it back to a normal battery, if you don't want to spend any money. You can also buy a Datel Tool Battery. This is the same as an "original" JigKick Battery. But, even if you have a Datel Tool Battery, you still have to make a Magic Memory Stick.


= Creating PSP-1000 and PSP-2000 JigKick Battery =
= Converting a normal battery to JigKick =


In order to turn a battery into a JigKick battery, it must be modified so it reports a serial of 0xFFFFFFFF. This can be done through software (softmod) on PSP-1000 and extremely early PSP-2000 consoles by writing to the battery's EEPROM. If softmodding isn't an option, the battery hardware can be changed (hardmod) by lifting the ground pin on the EEPROM, which disables it and causes an open bus, which happens to read as if the serial is 0xFFFFFFFF.
You can either Hardmod a battery or Softmod it.


== Softmod ==
Hardmod is when you you make a JigKick Battery by opening it up and and removing a pin, this can be done to ANY battery.


In order to softmod a battery, you will need the following:
Softmod is when you make a JigKick Battery by using a program. But it has to be suitable. New Batteries cannot be softmodded.
* Any PSP-1000 or a PSP-2000 with a TA-085v1 motherboard that can run homebrew apps
* A compatible battery from the list below:


=== Softmod Compatible Batteries ===
== Softmod ==


* Sony original 1200mAh<sup>1</sup>
For this you will need a spare compatible battery and a PSP on FW 1.50 or on a CFW eg. 3.80 M33 with 1.50 Kernel addon. You wil first need a Pandorable-by-software battery (see list).
* Sony original 1800mAh<sup>1</sup>
* Sony original 2200mAh<sup>1</sup>
* Datel X2 3600mAh
* Datel Max Power 1800mAh
* Datel GO MAX GM1000 (Alkaline AAA Battery Adapter, changing the AAA batteries will cause the serial to default back to 0x00000000)
* Possibly other models of Datel branded batteries


<sup>1</sup>: Official Sony batteries may have their EEPROM writing patched, these patched batteries are unable to be softmodded. The only batteries confirmed to have this patch are 1200mAh that have a label serial starting with 08 and higher (this serial check does not apply to 1800mAh and 2200mAh as they use a different serial layout). There has been a [https://web.archive.org/web/20230627183620/http://noobz.fanjita.org/joomla/news/are-new-sony-batteries-pandora-proof.html report in the past by Fanjita] that other sizes may have it as well, but that hasn't been 100% confirmed. The best way to be for sure is to try softmodding. If it doesn't work and your PSP is known to have a motherboard that can write to battery EEPROM, then your battery is patched. An example of the 1200mAh battery serial can be seen below:
=== Pandorable-by-software batteries ===


[[File:Sony 1200mAh Battery Serial.jpg|thumb|left]]
Working:


=== Battery Softmod Software ===
    Sony Slim "standard" Li-ion 1200 mAh
    Sony "standard" Li-ion 1800 mAh
    Sony PSP-280 2200mAh
    Datel, PSP Battery 3600 mAh (X2)
    Datel, PSP Battery 1800 Max Power
    Datel, PSP Battery GO MAX (Model # GM1000, uses AAA batteries) note: If you remove the batteries, it resets the serial back to all 0's


There are many homebrew apps that offer the ability to change a battery's serial number and some [[Custom_Firmware(CFW) | Custom Firmwares]] even have the option baked in. Some of the more popular ones are listed below.
Not working:


==== Original Pandora's Battery Creator ====
    3.6v 3600 mAh Battery Pack (Silver letters) (Model PSP-360) (Fake)
    2600 mAh Mega Battery Pack (Fake)
    Atomic Battery Pack 3.6V 1800mAh
    Sony PSP-280 2200mAh (Fake)
    Sony PSP Bloc-Battery pack 3.6v 1800 mAh
    Battery 3600mAh, unknown brand, (china made model NK-RH008) (Fake)
    Battery Pack, unknown brand, (lithium) 3.6v 3600 mAH (Fake)
    Intec 1800 mAh Li-ion
    Intec 2200 mAh
    UltraLast e-Boost 3.7v 2200mAh Li-PO battery


The original Pandora battery converter app, only works on the 1.50 kernel. Not recommended unless you have a 1000 on 1.50 already and want to check out the original. [https://web.archive.org/web/20230717185301/http://psp.jim.sh/fanjita/pandora.zip Download]
There is now a method that will enable users of CFW above 3.71 M33 which does not automatically have the 1.50 firmware kernel, or for those who are on Slim PSP), to create a Pandora battery, by interfacing directly with the PSP's [[Syscon]] chip. This method uses code by SilverSpring, and can be found here???.


==== Open Source Pandora Battery Tool ====
=== Requirements ===


A tool created by Cory1492 for softmodding batteries from 3.xx+ kernels. Should still work on current [[Custom_Firmware(CFW) | Custom Firmwares]]. [https://gbatemp.net/download/open-source-pandora-battery-tool.7643/ Download]
* A Pandorable battery (spare if possible). Check if it is pandorable in the list below.
* An homebrew capable PSP: on FW 1.50, or any CFW with the 1.50 Kernel addon, or a homebrew-enabled PSP.
* A Pandora installer software:
** Pandora's Battery Creator (taken from N00bz)
** Cory149's tool (taken from Max Console)


==== PSP Tool ====
=== Installer software ===


PSP Tool is a good service mode setup Swiss Army knife app. It can softmod batteries, create many older [[Magic_Memory_Stick | Magic Memory Sticks]], dump and restore IDStorage, and show system info. [https://www.gamebrew.org/wiki/PSP_Tool Download]
==== Original Pandora's Battery creator ====


==== Custom Firmwares ====
The original Pandora's Battery creator only for suitable FAT batteries. However, other alternatives such as the UPMS Installer, Hellcat's Pandora Installer for 3.xx kernels, can convert a Slim battery to Service Mode successfully. Download pandora files; battery files included in it, only works on 1.50 or CFW with 1.50 kernel.


Some newer [[Custom_Firmware(CFW) | Custom Firmwares]] have the option to convert a battery to a service mode JigKick built-in:
==== Cory149's tool ====
* 6.6x ARK-4 (VSH Menu>Advanced VSH Menu)
* 6.xx ME/LME (Recovery Menu>Advanced>Battery Config)
* 5.50 GEN (VSH Menu)
* 3.95 & 5.02 GEN (Recovery Menu>Advanced)


=== Softmodding the Battery ===
Cory149's tool which can even convert some old SLIM and FAT suitable batteries.


1. Download and install your chosen app above. If you're running one of the Custom Firmwares listed above, you can skip this step.
=== Installation ===


2. Insert the battery you want to softmod into your PSP and turn it on
    First make sure you have the requirements, then download the software depending on what firmware you are on.
 
    If you are on 1.50/CFW with 1.50 kernel download the Pandora files; which can convert only FAT batteries, since it only works on FAT PSPs. However, the alternative options for Slims are available.
3. Run your app of choice and navigate to the battery options
    If on CFW with no 1.50 kernel download Cory149's tool, which can convert all batteries, and works on both FAT and SLIM PSPs, only on CFW.
 
    Whichever one downloaded put it in the GAME folder, but you will have to change your kernel depending on what you downloaded.
4. Most apps have options like "Back up EEPROM", "Normal battery", and "Autoboot battery". You should back up the EEPROM first if the option is available, then the one you want to select will be called "Make Jigkick battery" or "Convert to Service Mode Battery"
    If you downloaded the Cory149's tool, make sure it is set to 3.xx kernel.
 
    If you downloaded the Pandora tools then make sure it is set to 1.50 kernel.
5. After it has completed, turn your PSP off, pull the battery out, and put it back in. If the conversion was successful, your PSP will turn on and stay at a black screen or will boot a previously installed Memory Stick IPL if you already have one
    Run it on the XMB with the battery and Press triangle if you plan to make use it for normal use again.
 
    Then go back on the program and press X to convert to Pandora's Battery.
6. If you only have one battery and need to convert it back, leave the battery out, connect a charger to the PSP, turn it on, then insert the battery after it's already booted. Now you can navigate back to the battery options of your chosen app and either restore the serial from the EEPROM backup you took or use the "Make Normal Battery" option to change it back to a normal one with a randomly generated serial.
    If successful, take it out and plug it back in with no MS, (or an MS that has an IPL that cannot boot with a Pandora Battery) the screen will stay blank.


== Hardmod ==
== Hardmod ==
(This section to be re-written)


For this method, you will have to open up your battery, and maybe need some soldering skills, and guts. If you aren't sure about what to do, the best thing to use is a Datel Tool Battery.
For this method, you will have to open up your battery, and maybe need some soldering skills, and guts. If you aren't sure about what to do, the best thing to use is a Datel Tool Battery.
Line 158: Line 152:
5. If you want to turn it back into a normal battery, re-solder the leg down
5. If you want to turn it back into a normal battery, re-solder the leg down


==== Blue Square ====
=== Blue Square ===


1. Open the extra battery with a knife or a screwdriver.
1. Open the extra battery with a knife or a screwdriver.
Line 171: Line 165:


If successful, place the battery into the PSP without a Memory Stick inserted. The PSP should boot automatically with the screen staying blank.
If successful, place the battery into the PSP without a Memory Stick inserted. The PSP should boot automatically with the screen staying blank.
= Creating PSP-3000 JigKick Hardware =
* See [[Psp-3000_Jigkick | PSP-3000 Jigkick]]
= Creating PSP Go JigKick Hardware =
* See [[Psp_Go_Jigkick | PSP Go Jigkick]]
= Creating PSP Street JigKick Hardware =
* See [[PSP_Street_Jigkick | PSP Street Jigkick]]


= See also =
= See also =


* [https://web.archive.org/web/20090309223546/http://alek.dark-alex.org/pspwiki/index.php/JigKick_Battery Old PSP Wiki page]
* [https://web.archive.org/web/20090309223546/http://alek.dark-alex.org/pspwiki/index.php/JigKick_Battery Old PSP Wiki page]
* [http://noobz.fanjita.org/joomla/news/unbricker-for-all-firmwares.html Pandora's Battery release by Team C+D (22-08-2007)]
Please note that all contributions to PSP Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PSP Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)
Retrieved from "http://www.psdevwiki.com/psp/JigKick_Battery"