[RELEASE] Recovery Flasher

[Hellcat]

As far as I understand it there's a lot more involved than just saving back the IDS dumps ppl sent (me as well ). It's a crapload of stuff with the KIRK engine, generating certivicates and what not else, since it also recreates the keys that are unique per PSP and can't just be copied back from another one (UMD related keys and some more).


Anyway, I'm drifting off....

@zipper:
Yes, you're right, you can upgrade your PSP from almost every CFW (tested down to 3.02-OE) straight up to 4.01-M33-2, without the need to stop by any other firmware.

The main purpose of this tool is upgrading (and downgrading) as well as the recovering of semi bricks, yes

[tinmanx]

Great work, Hellcat. I'm very much enjoying your apps.

Now if I could only figure out how to convert a NAND IPL to a Time Machine NAND IPL, so I can boot 3.60 - 3.80-M33 with a battery in service mode

Having a 085-v2 can suck at times. (Yes, I know.. Use the D/C adapter, just kind of hard on the run)

[cyslim5]

Time Machine only works with 3.60 M33, 3.40 OE-A, 1.50 with 3.40 and 3.60 components, 1.50 (original) and 4.01 M33-2 (last one by DC7).

Time Machine won't work on any other firmware except the ones mentioned above.

EDIT: You can convert DC1-4 using the Time Machine option.

[niko86]

Originally Posted by cyslim5

@niko86: It's true that it's the IDStorage from other PSPs (prolly mine is included ) but the IDStorage dumps sent should be complete and unpatched.

Yeah i was oversimplifying. I've read the whole discussion on lan.st forums it was very interesting how they do it.

Originally Posted by Hellcat

As far as I understand it there's a lot more involved than just saving back the IDS dumps ppl sent (me as well ). It's a crapload of stuff with the KIRK engine, generating certivicates and what not else, since it also recreates the keys that are unique per PSP and can't just be copied back from another one (UMD related keys and some more).

I'm amazed how anyone reverse engineering these processes and then gets it all working again.

[tinmanx]

Originally Posted by cyslim5

Time Machine only works with 3.60 M33, 3.40 OE-A, 1.50 with 3.40 and 3.60 components, 1.50 (original) and 4.01 M33-2 (last one by DC7).

Time Machine won't work on any other firmware except the ones mentioned above.

EDIT: You can convert DC1-4 using the Time Machine option.

Sorry, if I misspoke, I know the MSIPL's will boot said firmware versions. I'm looking for a way to convert the NAND IPL for 3.60, 3.71, and 3.80 M33 to work with a Pandora battery. If the battery is in service mode (which I have it in all the time) the PSP will not boot 3.90-M33 or less, if the service mode battery used to power on the without a memory card if will not boot. So the only way I have to boot, lets say 3.60-M33 is to use a normal battery or A/C power.

I know 3.60-M33 can work with a Time Machine IPL, and a service mode battery, if I flash the IPL from Time Machine to my NAND the PSP boots 3.60-M33 from the MS not the NAND. So, If I dump the IPL from 3.60-M33 I need to covert to it boot via the NAND.

It's not a big deal. I just wanted it for some experiments.

[cyslim5]

3.60 M33 via Time Machine requires you to have a dump of a 3.60 PSP (360.PSAR) but you'll have to search for it.

Also, you can't boot 3.71 M33, 3.80 M33 or 3.90 M33 from a memory stick (only 4.01 M33-2) cos they aren't supported by Time Machine.

You need 3.90 M33-2 or higher to be able to boot from NAND.

[zipper]

Originally Posted by Hellcat

As far as I understand it there's a lot more involved than just saving back the IDS dumps ppl sent (me as well ). It's a crapload of stuff with the KIRK engine, generating certivicates and what not else, since it also recreates the keys that are unique per PSP and can't just be copied back from another one (UMD related keys and some more).


Anyway, I'm drifting off....

@zipper:
Yes, you're right, you can upgrade your PSP from almost every CFW (tested down to 3.02-OE) straight up to 4.01-M33-2, without the need to stop by any other firmware.

The main purpose of this tool is upgrading (and downgrading) as well as the recovering of semi bricks, yes

Thanks Hellcat. Appreciate your reply and all your efforts in developing such a nice tool!

[Hellcat]

UPDATE *** UPDATE *** UPTIME

Changes on 1.32 since 1.30

• fixed a flaw in the backup/restore functions that made them going haywire on CFWs of 3.52 and below when restoring a full firmware from a backup.
  Now works fine on those lower CFWs as well
  
• Well, this one is more "just for fun" than meant serious.... I made an additional build of the app, that runns on unpatched, virgin, original 1.50
  Restoring and creating backups works as fine as installing a fresh M33 CFW (3.71/4.01) - YES, you can go from 1.50 STRAIGHT AND NONSTOP to a fresh 4.01-M33 this way!
  The other way round also works: restoring a 1.50 from a backup when running on 4.01.
  (this might also help people having installed the 1.50 AddOn and so unable to use the original build)

First post suffered the same fate as this app: It got UPDATED

[nhlan7]

Originally Posted by Hellcat

UPDATE *** UPDATE *** UPTIME

Changes on 1.32 since 1.30

• fixed a flaw in the backup/restore functions that made them going haywire on CFWs of 3.52 and below when restoring a full firmware from a backup.
  Now works fine on those lower CFWs as well
  
• Well, this one is more "just for fun" than meant serious.... I made an additional build of the app, that runns on unpatched, virgin, original 1.50
  Restoring and creating backups works as fine as installing a fresh M33 CFW (3.71/4.01) - YES, you can go from 1.50 STRAIGHT AND NONSTOP to a fresh 4.01-M33 this way!
  The other way round also works: restoring a 1.50 from a backup when running on 4.01.
  (this might also help people having installed the 1.50 AddOn and so unable to use the original build)

First post suffered the same fate as this app: It got UPDATED

After un-rar your newest V1.32, there is a folder call 150, where do I put it because I don't see its instruction from readme file, thanks in advance.

[Moose]

Originally Posted by nhlan7

After un-rar your newest V1.32, there is a folder call 150, where do I put it because I don't see its instruction from readme file, thanks in advance.

Are you on the firmware 1.50? If not then you don't need to use it.

[nhlan7]

Originally Posted by Moose

Are you on the firmware 1.50? If not then you don't need to use it.

No, I'm on 4.01 M33-2, but what if I downgrade to 1.5 then where do I put 150's folder, thanks again.

[spike021]

Sorry Hellcat, but I must be having a slow day: what do you mean by

Originally Posted by Hellcat

• Well, this one is more "just for fun" than meant serious.... I made an additional build of the app, that runns on unpatched, virgin, original 1.50
  Restoring and creating backups works as fine as installing a fresh M33 CFW

Do you mean just so you can easily downgrade to it? Or you can actually run it off the MS...

[Hellcat]

The two folders for the 1.50 build go into /PSP/GAME.... like all other HBs, why anywhere else?

The 1.50 build then runns on an OFW 1.50, booted from NAND - the "original" build does not run on 1.50 due to a lot of reasons (mostly anti-security patches not applied).

So, on the bottom line, you can use almost all options of the app on a 1.50.
You can make a backup of your currently installed 1.50, you can restore backups you already have, you can install a fresh 3.71-M33 or 4.01-M33.... whatever.... if you made a backup of the 1.50 you can also restore it when using Recovery Flasher on any other firmware and so effectively downgrade to 1.50 from any other CFW (without Pandora ).

[CFPSP]

hi the flasher comes up with 3.71m33 but not 4.01m33 does it have to be added the psp is a japanese import and was on 3.52m33-4 but is now on 3.71m33 thanks to HELLCAT
-=Double Post Merge =-
hi got it to show 4.01m33-2 thanks for the flasher

[soulburn]

Quick question:

Is there any possibilty to run RF from 3.40 OE Recovery Menu? If I understand it correctly, CF version won't run from RM on older firmwares and 1.50 version won't run on CF.

[cyslim5]

The recovery flasher from recovery menu option isn't available to CFWs based on 1.50 kernel (i.e. 3.52 M33-4 or lower).

[Hellcat]

Yep, the "original" build only runns from XMB on 1.50 based CFWs (3.xx-OEs).

However the 1.50 build could/should run in that case.... I didn't try that.... but I will, and report back!

[SchmilK]

trying this now cause my psp all of a sudden says it made my battery a pandora but it does not. hopefully its related to the extended vshmenu flash, or maybe fatmsmod :-/ but i dont know...

*edit*

YAAAY I CAN HAS PANDORA AGAIN

Thanks dude!!

[cheewongken]

Hey Hellcat. Remember me? I was there at the start. Lol. nice to see business is going well. i'd like to know, how do you use the restore backup option?

[lanicor]

I have a big problem. On my Slim PSP i had CFW 4.01 and i downgrade it to 3.71 with your flashing program. I have pandora's battery but i flashed it without rflash.elf. After flashing it says "done" and "press eny key to shoutdown". I pressed a key and when i tried to turn on, power light light's up for 4 sec. and automaticaly light's off. When i remove memory stick and power on, green light is on but nothing happens (black screen without light and anything). When the green light is on, i inserted memory stick and power light goes off. Please help!!! THX

[SchmilK]

Originally Posted by lanicor

I have a big problem. On my Slim PSP i had CFW 4.01 and i downgrade it to 3.71 with your flashing program. I have pandora's battery but i flashed it without rflash.elf. After flashing it says "done" and "press eny key to shoutdown". I pressed a key and when i tried to turn on, power light light's up for 4 sec. and automaticaly light's off. When i remove memory stick and power on, green light is on but nothing happens (black screen without light and anything). When the green light is on, i inserted memory stick and power light goes off. Please help!!! THX

It sounds like your pandora memorystick setup is messed up.

This happened to me when i used the Time machine reboot function of CustomFirmware Extender which messed up the config file.

you can boot up normally by taking out your battery and plug in your AC adapter then power it on. From there you can run the battery setup and put your battery back to normal and/or reinstall DCv7 and/or time machine to correct the booting error you currently have while the battery is set to pandora.

*edit on a side note to my previous post*
I could not make the pandora battery on 4.01 after installing FatMSmod from 3.71...it sure makes games better, but then it cant read/write the battyer info properly. It always says my battery serial is 0x00ab0000 Wierd ehh?

[lanicor]

It has started without battery Can u explain me how to correct the boot with battery?

[SchmilK]

Originally Posted by lanicor

It has started without battery Can u explain me how to correct the boot with battery?

If you are using DCv5,6 or 7 then you should have a TM folder on your memorystick, then inside of that there is a config.txt

NOTHING = "NAND";
LEFT = "/TM/DC5/ipl.bin";
RIGHT = "/TM/DC6/ipl.bin";
UP = "/TM/PANDORA.BIN";
L = "/TM/DC7/ipl.bin";
CROSS = "/TM/150/ipl.bin";
CIRCLE = "/TM/150_340/ipl.bin";
TRIANGLE = "/TM/340OE/ipl.bin";
SQUARE = "/TM/360M33/ipl.bin";

To use all available ipls, here is how my file looks.

I hold L Trigger to load DCv7
NOTHING = NAND is the line that is probably broken in your file.

Hopefully that helps

[lanicor]

I dont have TM folder Is there another way?
Can i write config.txt on my comp. and insert it in created TM folder ?
I instaled time machine v o.1 and i have 6 options but i think i need to select one of these:
Install iplloader on PSP MS boot sector
Convert Pandora/DC1-DC4 ipl into TM format

Which option to select?
-=Double Post Merge =-
I fixed it. I installed CFW 4.01 from Recovery flasher and work fine. Thanks a lot man.

[cheewongken]

Hey add 5.00M33 in here! and yeah, can you get the 1.50 kernels too? your app doesn't install the 1.50 kernel from a backup. =(

[Erland]

I had a friend who was on 3.51 M33-3 and installed the update for 3.52 M33-4 and semi-bricked...

when he tried using this program from recovery it told him that it required 2.71 or something...

had him rename the 1.50 version to RECOVERY / RECOVERY% and run it like that. It worked beautifully and installed 4.01 M33-2 for him.

Thanx for the program.

[cheewongken]

Originally Posted by Erland

I had a friend who was on 3.51 M33-3 and installed the update for 3.52 M33-4 and semi-bricked...

when he tried using this program from recovery it told him that it required 2.71 or something...

had him rename the 1.50 version to RECOVERY / RECOVERY% and run it like that. It worked beautifully and installed 4.01 M33-2 for him.

Thanx for the program.

Hey Erland! Nice to see you. lol i think we are both more regular at PSP-Hacks(.)com...

[RronL]

Hey people, RECOVERY FLASHER WORKS ON 5.00 M33. If you want to downgrade to 4.01 ( I haven't tested 3.71) It works flawlessly. Just make a backup to be more safe.
Thanks

[Mr_Shizzy]

Originally Posted by RronL

Hey people, RECOVERY FLASHER WORKS ON 5.00 M33. If you want to downgrade to 4.01 ( I haven't tested 3.71) It works flawlessly. Just make a backup to be more safe.
Thanks

I would be very careful when using this on 5.00 m33.

I used it on my 5.00 m33 SLIM to downgrade down to 4.01, but when I did, I picked the "do not format flash1" option, and it bricked my PSP !!
Not even DC7 would fix it...

I tried many ways to recover it, not even the official m33 updater eboot would work correctly...

Everything i tried, wasn't able to format Flash1.
Hell I even wrote my own program to try to fix it, with no success...

Finally, I remembered I had made a nand back up with Nand Tool 0.5 before I made this epic stupid move...
I restored with that, and thank GOD it is working again...

If you are going to use this before it's updated for 5.00 m33, i would be extremely careful. And for GOD's sakes, use the format Flash1 option; if you do downgrade with it.

[Erland]

Yeah every time I try to install anything using this program without formatting it bricks...

I don't get it..