Despertar del Cementerio

Despertar del Cementerio is the universal unbricker developed by Team M33 (Dark_Alex, adrahil, & Mathieulh). “Rise from the Cemetery” is the English translation of “Despertar del Cementerio”.

This method uses a modified version of a Pandora Battery install, and it has been tested to unbrick any PSP-1000 "Phat" (01g), PSP-2000 "Slim" (02g), or early PSP-3000 "Brite" (03g) containing motherboards TA-079 through TA-092, regardless previous firmware or region. Later PSP-3000 models (04g, 09g, 07g), PSP Go models (05g), or PSP Street models (11g) have not been supported by Despertar del Cementerio for a long while, until Despertar del Cementerio v10 finally allowed unbricking all PSPs, regardless of their method.

Development

When the 3.71 Sony official and 3.71 M33 custom firmwares were released, Dark_Alex developed a way of installing custom firmware through the use of Pandora Battery. This was a full universal unbricker and worked perfectly on a PSP-1000 Phat model. The install process was somehow similar to the original Pandora unbricker method, and it required the properly formatted memory stick, and the right ipl written.

Nine versions of Despertar del Cementerio have been released:

Version 1 supported only PSP-1000 models and installs 3.71 M33-2 custom firmware or Sony 3.71 official firmware.

Version 2 fixed a bug where some PSP-1000 models would brick using Despertar del Cementerio v1.

Version 3 added kernel support for some PSP-2000 Slim models allowing the service menu to be displayed.

Version 4 installs 3.80 M33-5 custom firmware or Sony 3.80 official firmware.

Version 5 installs 3.90 M33-3 custom firmware or Sony 3.90 official firmware.

Version 6 added support for TA-088v2 motherboards, added Test M33 feature to boot 4.01M33-2 from memory stick, and installs 4.01 M33-2 custom firmware or Sony 4.01 official firmware.

Version 7 adding the ability to regenerate some vital parts of the ID Storage and installs 4.01 M33-2 custom firmware or Sony 4.01 official firmware.

Version 8 installs 5.00 M33-4 custom firmware or Sony 5.00 official firmware.

Version 9 was reverse engineered from v7 and v8 by Balika001, added support for PSP-2000 TA-088v3 motherboards, added support for all first generation PSP-3000 models (03g), and installs 5.00 M33-7 custom firmware or Sony 5.00 official firmware.

Version 9.01, also by Balika001, added Testing Tool M33 feature, and installs 5.02 M33 custom firmware or Sony 5.02 official firmware.

Version 10 supports flashing a truly permanent and full variant of the 6.61 ARK4 CFW on any PSP model, GO and Street included.

Installation

The original way of installing Despertar Cementerio requires a homebrew-enabled 2.xx ,3.xx or 4.xx PSP. In Addition, it requires a JigKick Battery. However, users can use an easy installer that will format, and write the files including the ipl to the Magic Stick. All of this is done from a computer.

Preparation

This requires an memory stick between 128MB and 4GB, that is PRO DUO, and is genuine. (Fakes work but reliability can sometimes be low)

First, you must format your memory stick to their proper partitions. There are many applications that work not only on the PSP, but across the major operating systems. In Addition, if you have a partitioning tool, you can just reformat, and repartition the first ~250kb section for Pandora.

Since DC5, formatting isn't required anymore.

From there, you have to configure homebrew to run on the 2.xx or 3.xx kernel. Either through custom firmware nativly, or through HEN. Either way, when it is ready, you are ready to start.

Firmware Install

NOTE: If you have a TA-088v2 Slim, you MUST use version 6 or later, as it can successfully load DCv6 and up. TA-088v3 Slims cannot load Pandora at all.

There are 7 versions of Despertar Cementerio. It is recommended that you use version 6 or higher as they will have the latest support for Slims. (The TA-085 and TA-088 Series motherboards does with the exception of the TA-088v3) Also, version 3 installs 3.71 M33-2/3.71, version 4 installs 3.80 M33-5/3.80,version 5 installs 3.90M33-3/3.90, versions 6 and 7 install 4.01 M33/4.01. Whichever one you download, you must move the 'despertar_cementerio' (or 'DCx' with DCv5+) folder to /PSP/GAME. From there, download the 4.01 update. (1.50, 3.40, 3.xx for DCv3-DCv5) Extract each, rename them to '150.PBP, '340.PBP', '371.PBP' (or '380.PBP or '3.90.PBP' or '401.PBP'). From there, move all of them to the root of your memory stick.

Afterwords, launch the installer from the XMB, and press X to begin installation. When it is done, it will display "Install Success". If it ends with an error, you must go back and repeat the firmware install to see where you messed up. In DC6+, if the installer locks up at 99% writing the iploader, you must mspformat your memory stick, and then redo the installation. When it is done, it will boot back to the XMB. Reactivate USB Mode.

IPL Writing

Note: On DCv6 and up, this is done automatically in the installer. If it freezes at this step in the install in DCv6 and up, use mspformat to reformat and repartition your memory stick.

The ipl transfer to the memory stick can be performed with or without a homebrew-enabled PSP. However, it does require USB access to the memory stick. There are various homebrew that write compatible ipls that will boot to the Service Menu properly. The necessary ipl for this, is automatically created during the firmware install.

Computer Method

There are a lot of GUIs that can work across Windows, Mac, and Linux. In Addition, the standard command prompt on Windows, and terminal on Linux are able to write the ipl to the memory stick. Other than that, there are GUIs such as Pandora GUI 1.5, Disinter, and Pandora Box GUI that will all write the ipl. These methods are known to successfully make the ipl.

Software Method

Homebrew applications can be ran from the PSP, that will install the ipl to the memory stick. However, on newer firmware versions, the wide range of applications have greatly been decreased due to actions by Sony to block ipl writing. As of firmware 3.80, only the UPMS Installer is known to write ipls without fail. Ipls can still be written via the computer.

Battery Creation

There are various different ways of converting your battery to and from a JigKick Battery (Otherwise known as Pandora's Battery). However, the easiest change requires a PSP capable of running homebrew. Softmodding the battery will NOT work on a TA-085v2 or any of the TA-088 series motherboards. TA-085v1 Slims and Phats can still softmod batteries. There is a hardware method available, but this is irreversible if the user does not have access to soldering tools.

Software Methods

There are various tools, and apps that are capable of converting most Phat and Slim batteries to Pandora. The normal 1.50 Pandora battery tool will only work on a Phat with the 1.50 kernel installed, and read for use. This method will not work on a Slim, however. Other methods include overfiendx's UPMS installer, Hellcat's Pandora Installer for 3xx kernels, and the Corly149 tool.

On the TA-085v2, and new TA-088 Slim motherboards, direct write access to the EEPROM of any battery is completely blocked. There is no known way around this. However, the battery can still be converted on a TA085v1 Slim, and Phat PSPs.

Hardware Methods

There is one hardware method that can be performed on both Phat and Slim batteries. However, this requires a lot of time, and patience as this process can short out the battery rendering it useless. (Other than shorting, the battery can explode and burn) This process involved opening the battery up, and lifting pin 5 (sometimes 4) off the PCB. The pin lifted is actually the pin that controls the EEPROM. With no reading being given, the EEPROM is automatically changed to '0xFFFFFFFF', which thus, unlocks service mode indicating that the battery is now a Pandora Battery.

This process is reversible, but it requires soldering the pin back into place. Doing this is not all the time effective, and it can also render your battery useless if the heat explodes the battery. In Addition, if the pin was taken completly from the PCB, it will only add to the difficulty of converting the battery back from Pandora to a regular battery.

Accessibility

Within Despertar del Cementerio, there are options to back up and restore nand images, as well as options for IDStorage key regeneration. (As of DC7)

NAND backups

A NAND image contains firmware, and IDStorage Keys which are vital for proper operation of a PSP. The keys and nand are unique and specific to each PSP. So flashing PSPA's NAND to PSPB's NAND will result the loss of many functions of the PSP. If the nand dump also contains bad blocks then the one currently flashed to the PSP, it may result in a brick. This type of writing to the NAND is called PHYSICAL writing. In versions 6 and 7, a user can boot to 4.01 M33-2 on the memory stick. Dec Cem M8(nand tool) writes the the backup LOGICALLY instead, which writes the good data over the new bad blocks.

IDStorage Key Regeneration

A couple days before the release of Despertar Cementerio v7, Alek posted on his blog asking the community to post nand dumps of all motherboards that were ever released, and in each of the three regions. (Not counting the TA-088v3) Days later, Despertar Cementerio v7 bought the IDStorage Key Regeneration feature from the nand dumps. The IDStorage Key regeneration allows users to destroy and rewrite some parts of their keys. Also, a user can retrieve the MAC Address of their Wifi board if they messed it up with an IDStorage edit or installed a new board. According to tests done before DC7 was released, the UMD, DNAS, and Adhoc should work. However, the PSN and the PS3 will recognize the PSP as a new device and all current PSN downloads will not work unless decrypted. Also, as a part to the regeneration, DC7 can read the MAC address from the Wifi board, or use a random MAC address and write it to ID Storage.

Lflash Partitioning

New to DC7 is manual lflash partitioning. Lflash is everything in your flash0-3. The only other homebrew known for doing this is Cory's nandTool. Serving the same purpose, this feature will fix any of the errors with the installer freezing at any of the 'Formatting flash x' stages. In Addition to that, a user can manually repartition each of the flash drives to different sizes in order to allocate for the other.

Other than that, on a base install of Despertar Cementerio, there is only the two option options of installing custom firmware and the official firmware counterpart.

Addons

There has been no add ons released by Dark_Alex himself. However, with the various other homebrew coders out there, functionality can be added to Despertar Cementerio. This can be achieved by using an ELF file of the Despertar Cementerio unbricker. The new ELF file can be launched through an ELF menu or loader that is booted before the service menu. In the newest version of the ELF menu even EBOOT.PBP's can be launched with the menu. On top of that, using this method can allowed any homebrew to be launched on any system, whether bricked or not. However, all of this needs to be launched with a Pandora Battery.

Jas0nuk's ELF Menu

One notable homebrew that can be used in conjunction with the Service Menu is jas0nuk's ELF Menu. This allows USB access to the memory stick, flash0, 1, 2, and 3 drives. Also, it allows for the execution of ELFs. However, this overwrites one file from the Despertar Cementerio install to make it boot to the ELF menu instead of the Service Menu. Using this menu will call for the use of the unbricker in ELF format. If you take the original resurrection.elf and move it to the ms0:/elf folder, it will show up on the ELF Menu to use. Just make sure you rename it something helpful like Despertar_del_Cementerio_vX.elf, this way you know what it is. The install can be reversed if the 'resurrection.elf' file was backed up before install or moved to the ms0:/elf folder. In the new version EBOOT.PBP's can now be ran as well as .ELF's.

Cory's NAND Tool (Dec Cem M8)

Nick named "Dec Cem M8" because it's supposed to "Bridge the gap between Despertar and Cementerio", this ELF allows for users to manage their NAND and perform complicated operations with it themselves. This does include USB access, but it requires decrypted 1.50 USB files. This tool can backup and write the contents of the NAND, it has access to backup and write the IDStorage Keys and, it is able to format the NAND partitions, particularly l flash, in case a user has trouble during unbricking. (When the user would get stuck at 'Formatting flash0, flash1, or flash2').

Current List of Despertar del Cementerio downloads

• Version 1: Download
• Version 2: Download
• Version 3: Download
• Version 4: Download
• Version 5: Download
• Version 6: Download
• Version 7: Download
• Version 8: Download
• Version 9: Download
• Version 9.01: Download
• Version 10: Download
• Sources : Github