PS Vita Recovery Menu: Difference between revisions
More actions
No edit summary |
|||
| Line 19: | Line 19: | ||
|image_alt=PS Vita Recovery Menu | |image_alt=PS Vita Recovery Menu | ||
}} | }} | ||
PS Vita Recovery Menu is a custom recovery environment for the PlayStation Vita running custom firmware (HENkaku, h-encore, h-encore2, or Enso). Hold R at power-on to boot directly into the recovery menu. Provides a complete toolkit for plugin management, system diagnostics, unbricking, storage repair, CPU control, and more. | |||
'''Warning:''' This tool cannot recover a fully hard-bricked PS Vita. It is intended for experienced PS Vita CFW users who understand the risks. Certain operations including modifying system partitions, deleting core system files, resetting the tai configuration, or applying unsafe plugin configurations, can result in a soft brick or, in worst-case scenarios, a hard brick. | |||
''' | |||
== Features == | == Features == | ||
=== Main Menu === | === Main Menu === | ||
* Exit to LiveArea | * Exit to LiveArea | ||
| Line 52: | Line 45: | ||
=== Advanced Tools === | === Advanced Tools === | ||
* CPU Speed Control | * CPU Speed Control - independent ARM / GPU ES4 / BUS / XBR clock domains, persists across reboots | ||
* Registry Hacks | * Registry Hacks | ||
* Reset VSH (restart LiveArea) | * Reset VSH (restart LiveArea) | ||
| Line 61: | Line 54: | ||
=== System Information === | === System Information === | ||
Displays firmware version, model, | Displays firmware version, model, Enso status, motherboard series, live clocks, battery health, memory, and active tai config path. | ||
=== Restore / Unbrick === | === Restore / Unbrick === | ||
| Line 96: | Line 89: | ||
* Never touches <code>vs0:</code> / <code>os0:</code> unless System Write Mode is manually enabled (with full warning dialog) | * Never touches <code>vs0:</code> / <code>os0:</code> unless System Write Mode is manually enabled (with full warning dialog) | ||
* Config backed up before every install/uninstall operation | * Config backed up before every install/uninstall operation | ||
* Atomic config writes (<code>.tmp</code> | * Atomic config writes (<code>.tmp</code> ? rename) prevent corruption on power loss | ||
* L-trigger at boot triggers safe mode | * L-trigger at boot triggers safe mode - disables non-essential plugins before menu opens | ||
== Installation == | |||
'''Recommendations before use:''' | |||
* Always back up <code>ux0:tai/config.txt</code> and <code>ur0:tai/config.txt</code> before making any changes. | |||
* Use the "Backup tai/" function under Restore / Unbrick before proceeding with any repair operation. | |||
* Test changes on one device before applying to others. | |||
* If unsure about an operation, do not proceed. | |||
'''Instructions:''' | |||
* Download the latest <code>VitaRecovery.vpk</code> from the [https://github.com/DrinkingSubset/PS-Vita-Recovery-Menu-Project/releases Releases page]. | |||
* Install via [[VitaShell]]. | |||
* Launch the app once from LiveArea (bubble will appear as Title ID <code>RECM00001</code>). | |||
* Go to "Boot Recovery Installer" > "Install Boot Recovery". | |||
** Copies <code>boot_recovery.skprx</code> and <code>boot_trigger.suprx</code> to your active tai directory. | |||
** Inserts both entries into <code>ur0:tai/config.txt</code> (or your active config). | |||
** A backup of your config is automatically created. | |||
* Reboot holding R to enter the recovery menu. | |||
== How the R-trigger boot system works == | |||
The boot recovery system uses two separate plugins that work together: | |||
* <code>boot_recovery.skprx</code> - kernel plugin, loaded under <code>*KERNEL</code> | |||
* <code>boot_trigger.suprx</code> - user plugin, loaded under <code>*main</code> | |||
At power-on, <code>boot_recovery.skprx</code> loads first as a kernel plugin and spawns a thread that waits for the controller driver to initialise. If the R trigger is held, it writes a flag file (<code>ur0:tai/recovery_boot_trigger</code>); otherwise it exits cleanly with zero overhead on normal boot. Once SceShell and LiveArea start, <code>boot_trigger.suprx</code> loads inside the SceShell process, checks for the flag file, deletes it, and then calls <code>sceAppMgrLaunchAppByUri</code> to launch the recovery menu application. | |||
The two-plugin design is required because <code>sceAppMgrLaunchAppByUri</code> can only be called from within the SceShell process - it cannot be invoked from kernel space or before the shell has initialised. | |||
== | == Known issues == | ||
* PS Vita 2000 model detection shows incorrect model name in System Info - under investigation. | |||
* Boot recovery does not work on h-encore2 (3.74) without Enso, because the kernel hook requires taiHEN to load at coldboot. Normal bubble launch works fine on all firmware versions. | |||
== Screenshots == | |||
[[image:PSVitaRecoveryMenu.png|640px]] | |||
== | == Compatibility == | ||
Requires a jailbroken PS Vita running HENkaku, h-encore, h-encore2, or Enso on firmware 3.60–3.74. | |||
Tested Devices: | |||
{| class="wikitable" | {| class="wikitable" | ||
|- | |- | ||
! Device !! Firmware !! CFW | ! Device !! Firmware !! CFW | ||
|- | |- | ||
| PS Vita PCH-1000 (3G) || 3.65 || | | PS Vita PCH-1000 (3G) || 3.65 || Enso | ||
|- | |- | ||
| PS Vita PCH-1101 || 3.60 || HENkaku | | PS Vita PCH-1101 || 3.60 || HENkaku | ||
| Line 115: | Line 140: | ||
| PS Vita PCH-1101 || 3.74 || h-encore2 | | PS Vita PCH-1101 || 3.74 || h-encore2 | ||
|- | |- | ||
| PS Vita PCH-2001 Slim || 3.65 || | | PS Vita PCH-2001 Slim || 3.65 || Enso + SD2Vita | ||
|} | |} | ||
== Credits == | |||
This recovery menu stands on the shoulders of giants. The PSP and PS Vita homebrew communities have been collaborative, innovative, and persistent for over two decades. Without their exploits, tools, libraries, and shared knowledge, none of this would exist. | |||
The | |||
'''PSP Scene Pioneers (2005–2010) – The Revolution Begins:''' | |||
These trailblazers cracked the PSP wide open, creating the first homebrew enablers and Custom Firmwares (CFW) that inspired everything that followed. | These trailblazers cracked the PSP wide open, creating the first homebrew enablers and Custom Firmwares (CFW) that inspired everything that followed. | ||
* | * Dark_AleX (Dark Alex) - The absolute legend who started it all. Creator of OE (Open Edition), SE, and M33 series CFW (3.51–5.00+). His work enabled safe homebrew execution and updates on PSPs worldwide. Often called the "father" of PSP modding. | ||
* | * Team M33 (including Dark_AleX under pseudonym, Adrahil, Yoshiro/Miriam, Helldashx, and others) - Developed the iconic M33 CFW line after OE/SE. Continued innovations post-2007. | ||
* | * Total_Noob - Long-time PSP developer with tools, plugins, and scene involvement across eras. | ||
* | * Fanjita - Early exploit collaborator with Dark_AleX. | ||
* | * nem - Created the very first PSP exploit (2005 TIFF on 1.0 firmware). | ||
* | * Davee (Team Typhoon) - ChickHEN for newer PSP models (bridged to full CFW). | ||
* Other early notables: Liquidzigong, Team GEN, various PSP-Archive maintainers. | * Other early notables: Liquidzigong, Team GEN, various PSP-Archive maintainers. | ||
'''PS Vita Scene (2016–Present) – Kernel Hacks & Modern Tool:''' | |||
The Vita scene built on PSP foundations with deep reversing and safe, persistent hacks. | The Vita scene built on PSP foundations with deep reversing and safe, persistent hacks. | ||
* | * Team Molecule (yifanlu, Davee, Proxima, xyz, mathieulh, and others) - The core group that reverse-engineered the Vita kernel. Created HENkaku (initial exploit), taiHEN (plugin framework), and Enso (permanent coldboot CFW). Their work is the foundation for almost all modern Vita homebrew. | ||
* | * TheOfficialFloW (The Flow) - One of the most prolific Vita developers. Creator of VitaShell (essential file manager), Modoru (the downgrader), Adrenaline (PSP emulator on Vita), and countless tools/utilities. | ||
* | * SKGleba - Modern maintainer and powerhouse. Updated/forked Modoru for higher firmwares, created VitaDeploy (all-in-one toolbox), enso_ex, IMCUnlock, CBS, and many SD2Vita/storage tools. | ||
* | * Freakler - Tools like ConsoleID, Fingerprint, and various utilities. | ||
* | * xerpi - Vital libraries (ftpvitalib, vita2dlib) used in hundreds of projects. | ||
* | * Rinnegatamante - Massive ports, emulators, and game enhancements. | ||
* | * cuevavirus - Maintained and updated taiHEN. | ||
* | * devnoname120 - VHBB (Vita homebrew browser/app store). | ||
* | * LiEnby - Technical corrections and feedback that improved this project's accuracy. | ||
* | * Other major contributors (alphabetical, from GitHub credits, vita.hacks.guide, and community acknowledgments): | ||
** 173210 | ** 173210 | ||
** aerosoul | ** aerosoul | ||
| Line 203: | Line 195: | ||
** velocity | ** velocity | ||
'''Special Thanks:''' | |||
* The entire | |||
* | * The entire r/vitahacks community (Reddit) for guides, testing, and support. | ||
* | * vita.hacks.guide maintainers - The definitive modern resource. | ||
* GameBrew, PSDevWiki, and PSP-Archive for preserving history. | |||
* All plugin authors (StorageMgr, rePatch, NoNpDrm, etc.) whose work is used daily. | * All plugin authors (StorageMgr, rePatch, NoNpDrm, etc.) whose work is used daily. | ||
* Testers, translators, documenters, and everyone who shared knowledge on forums like GBAtemp, PSX-Place, and DCEmu. | * Testers, translators, documenters, and everyone who shared knowledge on forums like GBAtemp, PSX-Place, and DCEmu. | ||
== External links == | == External links == | ||
* GitHub - https://github.com/DrinkingSubset/PS-Vita-Recovery-Menu-Project | |||
* Reddit - https://www.reddit.com/r/PSVitaHomebrew/comments/1ry7uw5/github_drinkingsubsetpsvitarecoverymenuproject_a/ | * Reddit - https://www.reddit.com/r/PSVitaHomebrew/comments/1ry7uw5/github_drinkingsubsetpsvitarecoverymenuproject_a/ | ||
Latest revision as of 04:54, 9 April 2026
| PS Vita Recovery Menu | |
|---|---|
| General | |
| Author | DrinkingSubset |
| Type | System Tools |
| Version | 1.0.6 |
| License | MIT License |
| Last Updated | 2026/03/19 |
| Links | |
| Download | |
| Website | |
| Source | |
PS Vita Recovery Menu is a custom recovery environment for the PlayStation Vita running custom firmware (HENkaku, h-encore, h-encore2, or Enso). Hold R at power-on to boot directly into the recovery menu. Provides a complete toolkit for plugin management, system diagnostics, unbricking, storage repair, CPU control, and more.
Warning: This tool cannot recover a fully hard-bricked PS Vita. It is intended for experienced PS Vita CFW users who understand the risks. Certain operations including modifying system partitions, deleting core system files, resetting the tai configuration, or applying unsafe plugin configurations, can result in a soft brick or, in worst-case scenarios, a hard brick.
Features
Main Menu
- Exit to LiveArea
- Plugins
- Advanced
- System Info
- Restore / Unbrick
- Plugin Fix Mode
- Sony Recovery
- Storage Manager
- File Manager
- Cheat Manager
- Reboot
- Power Off
Plugin Manager
- Toggle any plugin on/off
- Remove duplicate entries
- Clean
config.txt - Save changes
Advanced Tools
- CPU Speed Control - independent ARM / GPU ES4 / BUS / XBR clock domains, persists across reboots
- Registry Hacks
- Reset VSH (restart LiveArea)
- Suspend / Shut Down / Reboot
- System Write Mode (with full warning dialog)
- Boot Diagnostics
- Boot Recovery Installer
System Information
Displays firmware version, model, Enso status, motherboard series, live clocks, battery health, memory, and active tai config path.
Restore / Unbrick
- Safe Mode Boot
- Reset taiHEN config
- Backup / Restore
ux0:tai/ - Rebuild LiveArea Database
- Official Sony recovery options
Plugin Fix Mode
- Safe Mode
- View & Toggle plugins
- Re-enable All
- Reset to Minimal
- Backup / Restore config
Sony Recovery
Replicas of Sony's safe-mode options (Restart, Rebuild Database, Format Memory Card, Restore System, Update Firmware) with danger warnings.
Storage Manager (SD2Vita)
- Card & config information
- Mount point switching
- StorageMgr install
- Format tools
File Manager
Full partition browser with folder and file operations.
Cheat Manager
- Vita native cheats (.psv)
- PSP CWCheat (.db) support
Safety Features
- Never touches
vs0:/os0:unless System Write Mode is manually enabled (with full warning dialog) - Config backed up before every install/uninstall operation
- Atomic config writes (
.tmp? rename) prevent corruption on power loss - L-trigger at boot triggers safe mode - disables non-essential plugins before menu opens
Installation
Recommendations before use:
- Always back up
ux0:tai/config.txtandur0:tai/config.txtbefore making any changes. - Use the "Backup tai/" function under Restore / Unbrick before proceeding with any repair operation.
- Test changes on one device before applying to others.
- If unsure about an operation, do not proceed.
Instructions:
- Download the latest
VitaRecovery.vpkfrom the Releases page. - Install via VitaShell.
- Launch the app once from LiveArea (bubble will appear as Title ID
RECM00001). - Go to "Boot Recovery Installer" > "Install Boot Recovery".
- Copies
boot_recovery.skprxandboot_trigger.suprxto your active tai directory. - Inserts both entries into
ur0:tai/config.txt(or your active config). - A backup of your config is automatically created.
- Copies
- Reboot holding R to enter the recovery menu.
How the R-trigger boot system works
The boot recovery system uses two separate plugins that work together:
boot_recovery.skprx- kernel plugin, loaded under*KERNELboot_trigger.suprx- user plugin, loaded under*main
At power-on, boot_recovery.skprx loads first as a kernel plugin and spawns a thread that waits for the controller driver to initialise. If the R trigger is held, it writes a flag file (ur0:tai/recovery_boot_trigger); otherwise it exits cleanly with zero overhead on normal boot. Once SceShell and LiveArea start, boot_trigger.suprx loads inside the SceShell process, checks for the flag file, deletes it, and then calls sceAppMgrLaunchAppByUri to launch the recovery menu application.
The two-plugin design is required because sceAppMgrLaunchAppByUri can only be called from within the SceShell process - it cannot be invoked from kernel space or before the shell has initialised.
Known issues
- PS Vita 2000 model detection shows incorrect model name in System Info - under investigation.
- Boot recovery does not work on h-encore2 (3.74) without Enso, because the kernel hook requires taiHEN to load at coldboot. Normal bubble launch works fine on all firmware versions.
Screenshots
Compatibility
Requires a jailbroken PS Vita running HENkaku, h-encore, h-encore2, or Enso on firmware 3.60–3.74.
Tested Devices:
| Device | Firmware | CFW |
|---|---|---|
| PS Vita PCH-1000 (3G) | 3.65 | Enso |
| PS Vita PCH-1101 | 3.60 | HENkaku |
| PS Vita PCH-1101 | 3.74 | h-encore2 |
| PS Vita PCH-2001 Slim | 3.65 | Enso + SD2Vita |
Credits
This recovery menu stands on the shoulders of giants. The PSP and PS Vita homebrew communities have been collaborative, innovative, and persistent for over two decades. Without their exploits, tools, libraries, and shared knowledge, none of this would exist.
PSP Scene Pioneers (2005–2010) – The Revolution Begins:
These trailblazers cracked the PSP wide open, creating the first homebrew enablers and Custom Firmwares (CFW) that inspired everything that followed.
- Dark_AleX (Dark Alex) - The absolute legend who started it all. Creator of OE (Open Edition), SE, and M33 series CFW (3.51–5.00+). His work enabled safe homebrew execution and updates on PSPs worldwide. Often called the "father" of PSP modding.
- Team M33 (including Dark_AleX under pseudonym, Adrahil, Yoshiro/Miriam, Helldashx, and others) - Developed the iconic M33 CFW line after OE/SE. Continued innovations post-2007.
- Total_Noob - Long-time PSP developer with tools, plugins, and scene involvement across eras.
- Fanjita - Early exploit collaborator with Dark_AleX.
- nem - Created the very first PSP exploit (2005 TIFF on 1.0 firmware).
- Davee (Team Typhoon) - ChickHEN for newer PSP models (bridged to full CFW).
- Other early notables: Liquidzigong, Team GEN, various PSP-Archive maintainers.
PS Vita Scene (2016–Present) – Kernel Hacks & Modern Tool:
The Vita scene built on PSP foundations with deep reversing and safe, persistent hacks.
- Team Molecule (yifanlu, Davee, Proxima, xyz, mathieulh, and others) - The core group that reverse-engineered the Vita kernel. Created HENkaku (initial exploit), taiHEN (plugin framework), and Enso (permanent coldboot CFW). Their work is the foundation for almost all modern Vita homebrew.
- TheOfficialFloW (The Flow) - One of the most prolific Vita developers. Creator of VitaShell (essential file manager), Modoru (the downgrader), Adrenaline (PSP emulator on Vita), and countless tools/utilities.
- SKGleba - Modern maintainer and powerhouse. Updated/forked Modoru for higher firmwares, created VitaDeploy (all-in-one toolbox), enso_ex, IMCUnlock, CBS, and many SD2Vita/storage tools.
- Freakler - Tools like ConsoleID, Fingerprint, and various utilities.
- xerpi - Vital libraries (ftpvitalib, vita2dlib) used in hundreds of projects.
- Rinnegatamante - Massive ports, emulators, and game enhancements.
- cuevavirus - Maintained and updated taiHEN.
- devnoname120 - VHBB (Vita homebrew browser/app store).
- LiEnby - Technical corrections and feedback that improved this project's accuracy.
- Other major contributors (alphabetical, from GitHub credits, vita.hacks.guide, and community acknowledgments):
- 173210
- aerosoul
- ColdBird
- cpasjuste
- der0ad (wargio)
- dots-tb
- frangarcj
- Hykem
- LemonHaze
- MajorTom
- motoharu
- mr.gas
- Nkekev
- PrincessOfSleeping
- qwikrazor87
- SilicaAndPina
- SocraticBliss
- Sorvigolova
- St4rk
- sys (yasen)
- velocity
Special Thanks:
- The entire r/vitahacks community (Reddit) for guides, testing, and support.
- vita.hacks.guide maintainers - The definitive modern resource.
- GameBrew, PSDevWiki, and PSP-Archive for preserving history.
- All plugin authors (StorageMgr, rePatch, NoNpDrm, etc.) whose work is used daily.
- Testers, translators, documenters, and everyone who shared knowledge on forums like GBAtemp, PSX-Place, and DCEmu.