forums.ps2dev.org

> I'm calling it wrong or sony messed with sockaddr_in structure for the psp. You got it right - the Sony PSP structure is a little non-standard (hence the REVIEW comment). Extra byte out front (apparently unused, at least according to TwistedMetal game code) Will be updating the sample and header l...

[lots of little topics] re: loading You should be able to load all the VSH user modules (IIRC there is one kernel module). Your app will start with a relatively clean slate (something like 60 core "KD" modules, none from VSH) If having problems with "sceKernelLoadModule", you may...

re: DHCP > ... We just need to figure out the callbacks and libs associated with it. Exactly. Most of the structure is already there, just need to figure out what is missing (Wipeout Pure and Twisted Metal appear to do the same init, but they have adhoc features too) Its on my list. --- > hi, i have...

[selective replies] > Using telnet at the moment, would it be possible to have a "computer monitoring" setup? As mentioned many things are possible. All will require a little C programming and familiarity with Berkeley sockets (/WinSock) At this point it is a developer sample code program....

re: AIBO Still working on the AIBO stuff (connection timeout problems right now). Re: connection woes If you see "Connecting 00000000 " and it never increases, then the connection is failing very early on. Is the WiFi light turning on? Check your Infrastructure connection, and test it. If ...

> PspPet, I have two words: Stuff it. > Now, if you're still reading... what the hell do you want from us? If you are asking -- I will politely request you not resort to personal attacks. If you read my posts, I have disagreements with the policy, but have not insulted or made false claims on any pe...

Commentary: Extracting debug information accidentally left in an executable can be very useful. However these are relatively rare, especially for closed-systems like game consoles. It is debatable whether it is "reverse engineering". For example if they accidentally left a copy of a system...

I haven't figured out all the configuration enumeration code (mostly from Wipeout, which has a real UI to pick the configuration). Right now it should work if you have one configuration, setup using explicit SSID and IP address. > refreshing on the PSP takes sometimes up to minutes, I think that's b...

[since nobody else appears to want to argue the point ;-> -- here's another inconsistency] > ...Unless you have anything new to add FWIW: The new SDK includes a detailed discussion of how to use the BANNED API to access/rip your own UMD. As mentioned this issue is well past moot. I will continue to ...

> re: Patch tricks and socket sample app > I'll clean up the current slimey trick and make it 1.0/1.50 aware and post it sometime soon. http://aibohack.com/psp/wifi_sample_001.zip Very primitive, very lame telnetd-like test app. Based on nem's HelloWorld app structure (not using any "sdk",...

> Including cygwin's socket.h (assuming that is what you are doing) will do you no good .... True. > ...as there is no socket implementation for the psp yet. FWIW: the "sceNetInet" library is very very similar to Berkeley sockets #define socket sceNetInetSocket #define sendto sceNetInetSen...

TRF-Yu-Ki wrote: > So PspPet patched the entry points himself; before that patch... calling sceNetInit() would put the Instruction-pointer where? I guess since he got it working, what I'm saying now is pointless. But, I'm just curious how a call to a non-existant routine wouldn't crash. Still a good...

> STUB_START "ModuleMgrForKernel",0x40010000,0x00130005 As mentioned, that's the problem. The "ModuleMgrForUser" has all the important entries you need. STUB_START "ModuleMgrForUser",0x40010000,0x00040005 STUB_FUNC 0x977de386,sceKernelLoadModule STUB_FUNC 0x710f61b5,sce...

> So, if you do a load-module for pspnet.prx and call an sceNet routine. If your PSP doesn't shut down, then I guess you succeeded calling Fortunately/Unfortunately not. The stub routines will not crash if you call them with a not-yet-loaded library. Instead they return error code 0x8002013a My prob...

FWIW: There is an automated way of adding hundreds of entries at once (you need a login ID). Checks the SHA1 values and reports if the names are new or old [those reports "neofar" posts in the other top sticky thread] I just did that myself (converting my discovered entries from disassembl...

Yes typo (0x90000)
Has anyone got the lazy imports to work with MS/flash0 loaded libraries ?? (I load the modules, they are in RAM, but the library entry stubs don't get fixed up).

> Guess we'll have to crack the whip to get our big NID list out the door. There's way too much duplication going on :). How about placing them in the public database ? http://pspdev.ofcode.com/api.php (or at least post them on the "Library function list" thread and someone will move them ...

mrbrown wrote: >I have yet to crack any of the NIDs found in the VSH modules. Has anyone else? Just started looking into the VSH modules. Lots of good stuff there. Found a few NIDs -- searching for more now (fortunately it appears they use the same technique) The trick, as always is finding the pref...

LoadModule tips and tricks: ['mrbrown' has already hinted at some of these things. Here's some additional advice from my similar experiments. NOTE: error codes found experimentally] As mentioned, loading the library from MS can be *attempted* with the the sceKernelLoadModule[Ms] APIs. Loading a libr...

> Here is the latest version of the attack program. Please incorporate the hash[] array bug fix mentioned above (or something similar) . The latest version still has this problem (crashes on me 100% of the time without it -- VC6 -Ot) For people still having problems with the VC debug/release options...

All of the USB interface (not UsbBus_driver) (some already in database, will look into more automatic updating since there are 100s more to go...) ;; ForUser ; sceUsb 0xae5de6af sceUsbStart 0xc2464fa0 sceUsbStop 0xc21645a4 sceUsbGetState 0x4e537366 sceUsbGetDrvList 0x112cc951 sceUsbGetDrvState 0x586...

djhuevo wrote: > A lot of modules added (due to the TyRaNiD kernel dump prog :) Good. I guess people are interested in Kernel level things too. Suggestion: How about organizing the modules into three sections: For User (firmware), For Kernel (firmware includes driver) and UMD libraries (which you ca...

Very small sample of the System/Kernel entries found by using the system exports technique (culling out the obvious false-positives with a relatively short SHA1 search - items marked with "?") ; IoFileMgrForKernel 0x3251ea56 sceIoPollAsync 0xe23eec33 sceIoWaitAsync 0x35dbd746 ? 0xcb05f8d6 ...

Sampling of new "User" entries found by using the system exports technique (looking at what the system provides, not limited to discovered entries used by UMD programs) ; IoFileMgrForUser (NEW entries only) 0x68963324 sceIoLseek32 0x1b385d8f sceIoLseek32Async 0xe8bc6571 sce...

FYI: Semi-related topic - Easy way to find hash-keys - use Kernel Memory Dump I don't know how people are finding hash keys, but I suspect they are looking at existing programs and their entry stubs. --- An easy way to get *all* the hash keys for a given library: Be sure the library is loaded into m...

> while ((hash[hashpos3++]&0xffffff00) < searchval); BUG: no range checking on the 'hash' array. Applies to all 3 searches, and all versions. May or may not bite you (depends on system memory management and luck and what garbage memory is past the end of the array) Fix/Workaround (keeping the se...

Final? commentary: At this point the issue is well past moot Moderators on this board may decide to continue the censorship of the obvious solution of how to use a documented API (and 100% legal IMHO) Heck, even the main proponent of censoring this information is heavily hinting at the solution. htt...

> In fact, the immediacy of your return to this topic could indicate that it was in fact you who released the tool itself. Ok, perhaps out of line - but I will take it as a jest. ;-> --- Consider the ramifications of a public program that does everything that is censored on this BBS. The claim that ...

ooPo wrote: > This issue will also no doubt be revisited when/if a dumping tool is released by a warez group. Didn't take very long. It has happened already (very visible on a number of websites, except for this one) - not a "WAREZ" group per-se, but apparently in preparation for a warez-l...

I disagree with the conclusion - but I thank you for the clarification. > You're also free to further try to convince us that this is a bad idea... My best argument has been made and apparently ignored (censoring on-topic otherwise legal free-speech -- under terms more restrictive than the DMCA). I ...