Page 1 of 5

PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 11:12 am
by xMacx
Sorry for my bad English

intentionally Brick carry out

short howto

Needed:
PS Vita of 3.61
FW choice
battery pack half empty (not mandatory)
Content Manager Assistant
Charles
Hex editor

at your own risk

Search update
example : Brick

Code: Select all

<update_data_list> 
	<region id="eu"> 
		<np level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
		<np_d level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
		<version system_version="04.600.000" label="3.60"> 
			<update_data update_type="full"> 
				<image size="133676544">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/rel_cd80b3da55771c99557db552542dff2b/PSP2UPDAT.PUP?dest=eu</image> 
			</update_data> 
		</version> 
		<recovery spkg_type="systemdata"> 
			<image spkg_version="01.000.010" size="56768512">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0804/sd_80cefcda06707796a040648aea38da0f/PSP2UPDAT.PUP?dest=eu</image> 
		</recovery> 
		<recovery spkg_type="preinst"> 
			<image spkg_version="01.000.000" size="128788480">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0804/pre_f5e6da7d1213101482300ccaeda35c3c/PSP2UPDAT.PUP?dest=eu</image> 
		</recovery> 
	</region> 
</update_data_list>
Part 2 editor update for Security mode

Code: Select all

<recovery spkg_type="systemdata">
<image spkg_version="01.000.010" size="56768512">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/sd_4190a24e21086c240221cc009cde1ef2/PSP2UPDAT.PUP?dest=eu</image>
if ye do is change your PSVita Brick
it remains black except Home button
waiting battery pack empty (not mandatory)
(try several times) Security mode > used Charles > FW choice
example editor FW 3.60 > 33 2E 36 31 (omitting only important > 2016_0323/sd_4190a24e21086c240221cc009cde1ef2)
have forgotten what > please edit pre of

Code: Select all

<recovery spkg_type="preinst">
<image spkg_version="01.000.000" size="128788480">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/pre_c1ffba04357e27e337e599977f642230/PSP2UPDAT.PUP?dest=eu</image>
no longer works the brick, sony file down. http://darthsternie.bplaced.net download fw file
the same must also work on PS4 ?

now happy again of 3.60 ;)

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 5:19 pm
by shaneod
Hi :wave:
I'm curious what this thread is about, but I honestly can't make any sense of these steps. Can you please explain in your native language?

From what I've gathered so far, I think you're suggesting to update the Vita via qCMA, edit one of the firmware files and partially brick it, and then use Charles and downgrade to 3.60 via safe mode.

The bit in particular that I don't understand is the hex editing part.

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 6:13 pm
by Freakler
Can you please post a video about the process?

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 6:25 pm
by rhmi
yeah its so confusing o.O

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 9:27 pm
by senas8
This could be huge ... If we can contact him and have someone explain it better.

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 10:50 pm
by shaneod
Alright, I studied the OP's post a little more, and I think (but I'm not sure) I understand up until the point where you semi-brick.

I will say right now that the bit I really do not understand is which form of update the OP expects to be done (QCMA or Charles system update?).
Therefore, if your console does not semi-brick when doing the update via Charles, as I describe below, instead try and figure out how to do the exact same process via QMCA, on the off-chance they operate differently.
  1. Obtain all the prerequisites the OP listed.
  2. You'll also need to host a web server temporarily. Make sure that you host these files on the web server.
    Note the web server's IP address (run ipconfig in command prompt).
  3. Run Charles Proxy and enable breakpoints for * (meaning everything) requests & responses
  4. Note your computer's IP address (run ipconfig in command prompt)
  5. Tell your Vita to connect to the internet via a proxy server, your computer's IP with port 8888
  6. Tell the Vita to check for updates.
  7. A prompt will show up in Charles, notifying you of the Vita's attempt to connect. Approve it.
  8. You will see the update request. The URL will look like http://......./psp2-updatelist.xml
    Execute the request (not the response) and when the response appears, edit it.
    Look at (but do not execute) the response to find out what region it's using. It'll say

    Code: Select all

    <region id="REGION-HERE">
    Paste the below code into the response window, replacing the original response.
    Remember to replace REGION-HERE with your region.
    Replace each instance of WEB-SERVER-IP with the IP of the computer on which the web server is running.

    Code: Select all

    <update_data_list> 
       <region id="REGION-HERE"> 
          <np level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
          <np_d level0_system_version="01.600.000" level1_system_version="03.600.000" level2_system_version="03.600.000" map="03.600.000" /> 
          <version system_version="04.600.000" label="3.60"> 
             <update_data update_type="full"> 
                <image size="133676544">http://WEB-SERVER-IP/3.60/full/PSP2UPDAT.PUP</image> 
             </update_data> 
          </version> 
          <recovery spkg_type="systemdata"> 
             <image spkg_version="01.000.010" size="56768512">http://WEB-SERVER-IP/3.61/systemdata/PSP2UPDAT.PUP</image> 
          </recovery> 
          <recovery spkg_type="preinst"> 
             <image spkg_version="01.000.000" size="128788480">http://WEB-SERVER-IP/3.61/preinst/PSP2UPDAT.PUP</image> 
          </recovery> 
       </region> 
    </update_data_list>
  9. Execute the response, letting the Vita install the "update".
At this point, assuming for some extremely weird reason this works, you've probably semi-bricked, due to the fact that "full" is version 3.60, yet "systemdata" and "preinst" are 3.61.

If it actually worked to this point, and has semi-bricked with access to safe-mode, then let me know (you madman), and we'll try to figure out the second part of the guide.

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 11:26 pm
by bugsystew
Don't Work, Erro C1-6562-9 after apply downgrade to 3.60

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Sun Aug 21, 2016 11:36 pm
by shaneod
bugsystew wrote:Don't Work, Erro C1-6562-9 after apply downgrade to 3.60
Alright, if it didn't semi-brick, I've absolutely no idea. I googled and C1-6562-9 is a 'Downgrade failed' error.
As an aside, the OP mentioned that you should hex edit the 3.60 systemdata PUP, replacing 3.60 plaintext with 3.61 inside the PUP itself (not the URL), but they never mentioned to do the same for full or preinst, so it shouldn't be relevant to us.

We're probably just better off waiting for the OP to come back.
Sony would have to have been really stupid to allow this to work, though, so it's looking more like a theory than something that's actually been tested imo. Unlikely to work.

As a side note, I haven't tested this, as my Vita has not arrived yet. I was basically just trying to make sense of it. I'll try this in a few days if the OP hasn't replied by then.

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Mon Aug 22, 2016 8:11 am
by oguretz
I think i get hex editing part.

In this file:

Code: Select all

<recovery spkg_type="systemdata">
<image spkg_version="01.000.010" size="56768512">http://deu01.psp2.update.playstation.net/update/psp2/image/2016_0323/sd_4190a24e21086c240221cc009cde1ef2/PSP2UPDAT.PUP?dest=eu</image>
Look at 0x800, there is 33 2E 36 30, which is "3.60" in ANSI. Author suggests to modify it (maybe during download by modifying network package in Charles?) to 33 2E 36 31 which is "3.61" in ANSI.

Re: PSVita 3.61 to 3.60 Intentionally Brick carry out

Posted: Mon Aug 22, 2016 8:54 am
by xMacx
been randomly :cry: hang now been 3.61 IDU MODE , wanted to repeat the process