forums.ps2dev.org Forum Index forums.ps2dev.org
Homebrew PS2, PSP & PS3 Development Discussions
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Which M33 boot module loads the Recovery menu

 
Post new topic   Reply to topic    forums.ps2dev.org Forum Index -> PSP Development
View previous topic :: View next topic  
Author Message
vodkkaa



Joined: 29 Aug 2007
Posts: 10
Location: Adelaide, Australia

PostPosted: Sat Jan 24, 2009 11:44 am    Post subject: Which M33 boot module loads the Recovery menu Reply with quote

iirc in the OE firmwares, recovery was loaded from the rtc.prx (systemctrl150). im pretty sure that this module applied the majority of the firmware patches before launching into the higher kernel. now that the ipl has been hacked and the firmware patches of m33 are applied from the custom ipl, does rtc.prx still load the m33 recovery, or is it loaded from the ipl.
Back to top
View user's profile Send private message
Dariusc123456



Joined: 12 Aug 2008
Posts: 394

PostPosted: Sat Jan 24, 2009 2:33 pm    Post subject: Reply with quote

Its loaded from recovery.prx. The ipl is just cpu instuctions, so it wont just load from the ipl. The OE source code show's that its load from recovery.prx .
Back to top
View user's profile Send private message AIM Address
xero1



Joined: 02 Dec 2006
Posts: 3

PostPosted: Sat Jan 24, 2009 4:10 pm    Post subject: Reply with quote

Dariusc123456 wrote:
Its loaded from recovery.prx. The ipl is just cpu instuctions, so it wont just load from the ipl. The OE source code show's that its load from recovery.prx .


Yes sir, just CPU instructions. :)



vodkkaa, from the IPL.
Back to top
View user's profile Send private message
J.F.



Joined: 22 Feb 2004
Posts: 2906

PostPosted: Sat Jan 24, 2009 4:26 pm    Post subject: Reply with quote

xero1 wrote:
Dariusc123456 wrote:
Its loaded from recovery.prx. The ipl is just cpu instuctions, so it wont just load from the ipl. The OE source code show's that its load from recovery.prx .


Yes sir, just CPU instructions. :)



vodkkaa, from the IPL.


Nah! Those really are opcodes!! It's just a coincidence that they seem like they form words related to PSP modules. ;) :D
Back to top
View user's profile Send private message AIM Address
Wally



Joined: 26 Sep 2005
Posts: 672

PostPosted: Sat Jan 24, 2009 5:03 pm    Post subject: Reply with quote

Dariusc123456 wrote:
Its loaded from recovery.prx. The ipl is just cpu instuctions, so it wont just load from the ipl. The OE source code show's that its load from recovery.prx .


You're a CPU instuction.
Back to top
View user's profile Send private message AIM Address
vodkkaa



Joined: 29 Aug 2007
Posts: 10
Location: Adelaide, Australia

PostPosted: Sat Jan 24, 2009 5:34 pm    Post subject: Reply with quote

so the recovery.prx is loaded and if RTrigger is not being held it continues on with the boot process. i want to knwo which module contains the instructions to launch recovery.prx when rtrigger is being held.

and how come the recovery.prx cannot be replaced with another prx. im guessing the recovery is launched using sctrlKernelLoadExec so if i put another prx in the place of recovery.prx, shouldnt it execute. i tested it with 5.02 GEN by taking the M33 recovery and copying to my flash0 in place of the GEN recovery and the M33 recovery successfully lauches when R is held, But if i take the GEN recovery and put it in place of the M33 recovery on an m33 install, the recovery doesnt boot. does DA sign his modules or something
Back to top
View user's profile Send private message
Wally



Joined: 26 Sep 2005
Posts: 672

PostPosted: Sat Jan 24, 2009 6:14 pm    Post subject: Reply with quote

J.F. wrote:
xero1 wrote:
Dariusc123456 wrote:
Its loaded from recovery.prx. The ipl is just cpu instuctions, so it wont just load from the ipl. The OE source code show's that its load from recovery.prx .


Yes sir, just CPU instructions. :)



vodkkaa, from the IPL.


Nah! Those really are opcodes!! It's just a coincidence that they seem like they form words related to PSP modules. ;) :D


The answer is there! :P
Back to top
View user's profile Send private message AIM Address
xero1



Joined: 02 Dec 2006
Posts: 3

PostPosted: Sat Jan 24, 2009 6:32 pm    Post subject: Reply with quote

vodkkaa wrote:
does DA sign his modules or something


No, but GEN does "something" ;). Try to decrypt the recovery.prx from GEN with PRXDecrypter, you'll see.

Dump The IPL from your NAND. The rest will become clear.
Back to top
View user's profile Send private message
vodkkaa



Joined: 29 Aug 2007
Posts: 10
Location: Adelaide, Australia

PostPosted: Sat Jan 24, 2009 7:35 pm    Post subject: Reply with quote

xero1 wrote:
vodkkaa wrote:
does DA sign his modules or something


No, but GEN does "something" ;). Try to decrypt the recovery.prx from GEN with PRXDecrypter, you'll see.


but M33 recovery works on GEN, but GEN recovery doesnt work on M33. I want to know what module gives the recovery menu instructions to boot. One of the modules must contain

Code:
      if (pad.Buttons & PSP_CTRL_RTRIGGER)
      {
         struct SceKernelLoadExecParam param;

         memset(&param, 0, sizeof(param));

         param.size = sizeof(param);
         param.key = "updater";

         sceKernelLoadExec(RECOVERY, &param);
      }
      else
      {
         sceKernelExitVSHVSH(NULL);
      }


which one is it. im going out to dinner now, but when i get back ill take a closer look into the gen modules.
Back to top
View user's profile Send private message
Super Sheep



Joined: 23 Mar 2008
Posts: 31

PostPosted: Sat Jan 24, 2009 8:32 pm    Post subject: Reply with quote

Listen to what the people are saying. There is a small check in the IPL for R Trigger and it launches recovery if found.
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
moonlight



Joined: 26 Oct 2005
Posts: 567

PostPosted: Sat Jan 24, 2009 8:43 pm    Post subject: Reply with quote

vodkkaa wrote:
xero1 wrote:
vodkkaa wrote:
does DA sign his modules or something


No, but GEN does "something" ;). Try to decrypt the recovery.prx from GEN with PRXDecrypter, you'll see.


but M33 recovery works on GEN, but GEN recovery doesnt work on M33. I want to know what module gives the recovery menu instructions to boot. One of the modules must contain

Code:
      if (pad.Buttons & PSP_CTRL_RTRIGGER)
      {
         struct SceKernelLoadExecParam param;

         memset(&param, 0, sizeof(param));

         param.size = sizeof(param);
         param.key = "updater";

         sceKernelLoadExec(RECOVERY, &param);
      }
      else
      {
         sceKernelExitVSHVSH(NULL);
      }


which one is it. im going out to dinner now, but when i get back ill take a closer look into the gen modules.


recovery is loaded by ipl, there is no loadexec. custom Ipl detects key by using the sony syscon driver embedded in main.bin, and if R is found, it changes the load of the pspbt file by one contained in the custom ipl. This special pspbtcnf file has vsh module and some other unneeded module removed, and recovery and usb modules added.
Back to top
View user's profile Send private message
vodkkaa



Joined: 29 Aug 2007
Posts: 10
Location: Adelaide, Australia

PostPosted: Sun Jan 25, 2009 12:54 am    Post subject: Reply with quote

moonlight wrote:
vodkkaa wrote:
xero1 wrote:
vodkkaa wrote:
does DA sign his modules or something


No, but GEN does "something" ;). Try to decrypt the recovery.prx from GEN with PRXDecrypter, you'll see.


but M33 recovery works on GEN, but GEN recovery doesnt work on M33. I want to know what module gives the recovery menu instructions to boot. One of the modules must contain

Code:
      if (pad.Buttons & PSP_CTRL_RTRIGGER)
      {
         struct SceKernelLoadExecParam param;

         memset(&param, 0, sizeof(param));

         param.size = sizeof(param);
         param.key = "updater";

         sceKernelLoadExec(RECOVERY, &param);
      }
      else
      {
         sceKernelExitVSHVSH(NULL);
      }


which one is it. im going out to dinner now, but when i get back ill take a closer look into the gen modules.


recovery is loaded by ipl, there is no loadexec. custom Ipl detects key by using the sony syscon driver embedded in main.bin, and if R is found, it changes the load of the pspbt file by one contained in the custom ipl. This special pspbtcnf file has vsh module and some other unneeded module removed, and recovery and usb modules added.


thanks. that is what i asked in the op. but how come i can switch the GEN recovery with the m33 recovery, but no the m33 recovery with the gen recovery.
Back to top
View user's profile Send private message
moonlight



Joined: 26 Oct 2005
Posts: 567

PostPosted: Sun Jan 25, 2009 3:49 am    Post subject: Reply with quote

vodkkaa wrote:
moonlight wrote:
vodkkaa wrote:
xero1 wrote:
vodkkaa wrote:
does DA sign his modules or something


No, but GEN does "something" ;). Try to decrypt the recovery.prx from GEN with PRXDecrypter, you'll see.


but M33 recovery works on GEN, but GEN recovery doesnt work on M33. I want to know what module gives the recovery menu instructions to boot. One of the modules must contain

Code:
      if (pad.Buttons & PSP_CTRL_RTRIGGER)
      {
         struct SceKernelLoadExecParam param;

         memset(&param, 0, sizeof(param));

         param.size = sizeof(param);
         param.key = "updater";

         sceKernelLoadExec(RECOVERY, &param);
      }
      else
      {
         sceKernelExitVSHVSH(NULL);
      }


which one is it. im going out to dinner now, but when i get back ill take a closer look into the gen modules.


recovery is loaded by ipl, there is no loadexec. custom Ipl detects key by using the sony syscon driver embedded in main.bin, and if R is found, it changes the load of the pspbt file by one contained in the custom ipl. This special pspbtcnf file has vsh module and some other unneeded module removed, and recovery and usb modules added.


thanks. that is what i asked in the op. but how come i can switch the GEN recovery with the m33 recovery, but no the m33 recovery with the gen recovery.


he probably encrypts it so that it doesn't work.
Of course once I have realized this, don't expect nothing from me (including vlf, popstation) to work on gen from now on:) Let this thread to be a prove of who started incompatibilities.
Back to top
View user's profile Send private message
Torch



Joined: 28 May 2008
Posts: 842

PostPosted: Sun Jan 25, 2009 4:58 am    Post subject: Reply with quote

@vodkkaa
recovery.prx can be replaced with with another user mode module. You will also have a big lump of free space (almost 45MiB) on the Slim for your module when booted in recovery mode.

From this you can further load kernel modules. Even VLF works in recovery mode.
Back to top
View user's profile Send private message
vodkkaa



Joined: 29 Aug 2007
Posts: 10
Location: Adelaide, Australia

PostPosted: Sun Jan 25, 2009 12:05 pm    Post subject: Reply with quote

moonlight wrote:

he probably encrypts it so that it doesn't work.
Of course once I have realized this, don't expect nothing from me (including vlf, popstation) to work on gen from now on:) Let this thread to be a prove of who started incompatibilities.


now it all makes sense to me. i thought you were checking the modules loaded but really it is gen who has encrypted their modules. thanks
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    forums.ps2dev.org Forum Index -> PSP Development All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group