Custom Firmware - The proof of concept

i cant sleep because of this.thanks dark alex.really.not sarcastic.

I can't read your writing.could you please learn.ENGLISH.punctuation does not work like this.silly you.

Zitat:

---

Zitat von Networkgamer

exept sont hardcoded the ipl so that you cant have one thats <2.6.same with the firmware.BTW did you get it at ebgames and if so did you get the warenty?

---

No, it's in my sig. Bought it from Japanese online retailer.

I was just wondering if a similar process could be applied to 2.5/2.6FW since both have kernel access and access to flash0.

Any bricks using this till now?

mine hasnt bricked yet and now im having fun with it.i cant sleep

STOP WRITING LIKE A TARD

Anyone having issues entering recovery mode?

I simply used devhook to emulate 1.50, and so far all the features except 1.50 corrupt file hiding, and recovery mode are working.

R should be used for Recovery Mode.
L should be used to enter Safe mode. ( Normal boot, all defaults. )

Questions:

- Can recovery mode actually start an update? ( Real update. )
- Likewise, will it run any normal homebrew, like irshell/x-flash.

- Is there any reason features dont work in devhook?

BUGS: ( Found during emulation. )

- If "nokxploit" is "true" then hide corrupt, dosnt work. ( Here. )
- Recovery mode dosnt work in emulation. ( ??? ) Just loads and loads.



NOTE to users:

How it works....

Installation:
1. It renames the vshmain.prx into vshmain_real.prx.
2. It writes the custom vshmain.prx ( by Dark_AleX) as a replacement.
|_ Previous 2 operations in "flash0:/VSH/MODULE/"
3. It then writes the recovery.elf into "flash0:/KD/" ( Mine don't work )
4. Now this is complete, its done.

Boot:
1. The psp by nature, reads vshmain.prx, which loads new functions etc.
2. If R TRIGGER is currently being pressed, flash0:/KD/recovery.elf is loaded.
3. The custom vshmain.prx then loads the vshmain_real.prx for normal use.
4. Gameboot is skiped, umd is skipped. ( Optional. )
5. Corrupt icons are suppressed. ( Optional. )

Upon 1.00 eboot selection...
1. You select the eboot.
2. The custom mod now loaded into ram, takes the elf out of the eboot.
3. The elf is placed in "ms0:/__TEMP__.ELF" and is then loaded.

QUESTION: Given THIS situation, how are corrosponding files found?


More analysis later... ( Im still too chicken to flash this lol. )

thats how i write.get used to it or dont read my posts.

Double Post Merge

btw there isnt a good shell that can find and load all of my 1.0 formatted homebrew.what other shells do.ive tryed psp-oss v0.2 and irshell 1.6.psp-oss wont launch them and irshell cant find them

ThanX for the more in-depth info regarding what is done in the background LordSturm! :D

Like you, I am a little chicken**** when it comes to doing this. I already downgraded from 2.6 to 1.5 and nearly crapped my pants doing so, I think I can wait for a bit.

Zitat:

---

Zitat von LordSturm

Anyone having issues entering recovery mode?

I simply used devhook to emulate 1.50, and so far all the features except 1.50 corrupt file hiding, and recovery mode are working.

R should be used for Recovery Mode.
L should be used to enter Safe mode. ( Normal boot, all defaults. )

Questions:

- Can recovery mode actually start an update? ( Real update. )
- Likewise, will it run any normal homebrew, like irshell/x-flash.

- Is there any reason features dont work in devhook?

BUGS: ( Found during emulation. )

- If "nokxploit" is "true" then hide corrupt, dosnt work. ( Here. )
- Recovery mode dosnt work in emulation. ( ??? ) Just loads and loads.



NOTE to users:

How it works....

Installation:
1. It renames the vshmain.prx into vshmain_real.prx.
2. It writes the custom vshmain.prx ( by Dark_AleX) as a replacement.
|_ Previous 2 operations in "flash0:/VSH/MODULE/"
3. It then writes the recovery.elf into "flash0:/KD/" ( Mine don't work )
4. Now this is complete, its done.

Boot:
1. The psp by nature, reads vshmain.prx, which loads new functions etc.
2. If R TRIGGER is currently being pressed, flash0:/KD/recovery.elf is loaded.
3. The custom vshmain.prx then loads the vshmain_real.prx for normal use.
4. Gameboot is skiped, umd is skipped. ( Optional. )
5. Corrupt icons are suppressed. ( Optional. )

Upon 1.00 eboot selection...
1. You select the eboot.
2. The custom mod now loaded into ram, takes the elf out of the eboot.
3. The elf is placed in "ms0:/__TEMP__.ELF" and is then loaded.

QUESTION: Given THIS situation, how are corrosponding files found?


More analysis later... ( Im still too chicken to flash this lol. )

---

i did this on both of my psp`s and works great.
maybe some comfort to someone