forums.ps2dev.org

I'm making a library wich has the goal to replace the PSPgu, it contains high and low level functions (actualy i can go to 650FPS when blitting a fullscreen image in 32bits mode). Now I want to add functions to blit the Sony OSK but there was a bug when I blit image+osk (fast scanlines and controls ...

Ok, thanks ^^

I posted ;)

What I've found out so far is that the PSP do have it's own dialect of assembler. It seem not to be comparable with ix86 assembler where you accessing registers like AX, BX, ESI and all this stuff The PSP uses a MIPS 32bit processor. So in assembler program you can use all MIPS commands and more: F...

This is the source code : void sceGuFrontFace(int order) { if (order) sendCommandi(155,0); else sendCommandi(155,1); } Yes its a special way, because if you write GU_CW the GU_CCW mode is used, and if you write GU_CCW ...

Yes, when I finish this work I share it on the net.

I dont know the triEngine, but is there any colision->textureWidth ? or ->twidth ?

If yes, then :
triU32 bgColor = ((triU32*) collision->data)[collision->textureWidth * y +x];

serige wrote:Excuse me, I just realized I am talking to a 15-year-old, and that may me feel like I am 50... :'(

$
just..... LOL

I made a program to reverse automatically the IPL.
Anyone want this ? ^^

A little screen :p :

I can make a CFW, but I never decrypted a OFW, I always used already decrypted versions by using the PsarDumper..

serige wrote: However, I am pretty sure there are people out there who have already accomplished what you are trying to do :)

Yes, it's sure, but that Fu***** people dont want to give me that ! Are they afraid that I make an CFW ?? I don't know how to do !!

But, how look likes the key ^^ ?

I found that (bu following the code) :
0xBF 0x0E 0xBF 0xC0 0x02 0x80 0xEC 0x0F 0xEC 0x4F 0xED 0x8F 0x71 0x40 0xE9 0x8F

It's maybe that or not, but what is the algorithm to decrpt the IPL2 ??

I ve the full IPL. You can get it by this wav : - Put this PRX into "ms0:/elf/" - install the 6.00 OFW - Restart your PSP and press SELECT (like R for recovery) - You arrives in the "ELF Menu" - then start "Dump_IPL.elf" by pressing X For sure, you need to have the TM T...

Hum....
I dont have this UMD, is it possible to use the DEMO ?

By using the 1.50 TM, you need to simply add your PRX to the list conained in ms0:/TM/150/kd/pspbtcnf_updater.txt
:p

It's an interesting list, but why Sony did this ?
More the time passes more I believe that Sony wants that we made exploits, they give to us the 'exploitable' games !

But how to make an exploit ? Is there any program in the savedata ?

UP I decrypted the 01g IPL, but where is the key ?? It should be somewhere in the decrypted IPL, just follow the mips code. Even if they change the decrypting routine, it would contain specific instructions to tell the ipl how to decrypt kernel modules. I think what you say is true, but for all fir...

UP


I decrypted the 01g IPL, but where is the key ??

So, now we need to find the key to decrypt the kernel PRXs... Have you any idea ?

I think we need to decrypt the IPL first, because it contains all the keys (1g, 2g, 3g, and maybe 4g..)

ab5000 wrote:if you want i hooked the Dmesg function responsible for decrypting PSAR's, we can analyze the output...

What you hook ? The function itself, or the calling function ?

I've a PSP Fat.
I typed "reset updater" before.
And I use PSP Link v2.0 Final...


EDIT:
I solved my problem, I found another way to start the PRX at same time as the updater.

I get this error :

Failed to Load/Start module 'ms0:/PSP/GAME/UPDATE/EBOOT.PBP' Error: 0x800200D9

I know that, but it's not my problem.

In the 1.50 firmware (with TM), I want to patch the vshCtrlLoadExecMs1(...) wich is the function used to start updates.
And I want to start a PRX at same time to dump the memory of the updater (to get a decompressed Psar, decrypted table, etc....)

Im trying to start a PRX at same time as an Eboot, but it doesn't work, that's my code : // Start the kernel-mode Prx LoadStartKernelModule("flash0:/vsh/module/dump.prx"); vshKernelLoadExecVSHMs1(file, param); But the LoadExec function unloads all th...

ab5000 wrote:I extracted the table from updater memory (just run 1.50 in TM, run psplink, reset in updater mode and run the fw update. strage thing: reset updater fails on 5.550 GEN-B2! error 0x8002013A) and i put it on MS.

What you call the updater mode ? What is it ?

EDIT: I said nothing, i found.. ^^

2) Why psardumper fail in decrypting the table? i thought psar decryption wasn't needing firmware keys. did they change the algoritmh? I think the keys has changed, you can see that in the PsarDumper : TABLE_KEYS table_keys[] = { { 0xb730e5c7, 0x95620b49, key_S &am...

I need to know what is a complete KL4E header, is there any documentation ? Because that result is by decrypting and decompressing the file, this is the decrypted and compressed file : http://img411.imageshack.us/img411/8348/sanstitre2ed.png So my key is too short I think, because the 3 firsts block...

Hi, i'm trying to decrypt the FW 6.0. Actualy I found a key (first: is it a 16 bytes key ? or more ? less ?), and I use the PSP to decompress the code, and the result that is the result for a "simple" PRX (amctrl.prx) : http://img19.imageshack.us/img19/523/sanstitrece.png And all the file ...

Hi, im creating a graphic library for the XMB. I want to use IntraFont, but it uses too much RAM, so I think it's possible to dump the memory and retrieve the adress of the already loaded font by XMB.
But how ? Anyone know the "real" PGFHeader structure used by XMB ?

svxs wrote:My advice is to not reinvent the wheel. If the GU functions do it fine by themselves, why wrap them?

That's the difference, in reality certain things are not good inthe PSPGU, and I want to make a low-level library.