cfw patch game directory stuff

[thecobra]

This thread should be locked,seriously.

why? it not violating any of the rules?

[eldiablov]

Its dangerous.

[thecobra]

Its dangerous.

hmm, i guess but people should know that any function or program that mess with the fw is dangerous and should try it on there OWN risk
-=Double Post Merge =-
super sheep , i was just wondering if i can use better sctrlHENFindFunction instead of FindProc so it will look like this -----------------------------------------------

int sceCtrlReadBufferPositivePatched(SceCtrlData* pad, int count) 
   { 
      //my patch on code 
   } 
    
   u32 OriginalFunction; 

   OriginalFunction = sctrlHENFindFunction("sceController_Service", "sceCtrl_driver", 0x1F803938); 

   sctrlHENPatchSyscall(OriginalFunction, sceCtrlReadBufferPositivePatched);

[eldiablov]

Just make sure you test excessively before releasing. This thread doesnt inspire much confidence.

[thecobra]

Just make sure you test excessively before releasing. This thread doesnt inspire much confidence.

i know what you mean and yeah, i do, i always do before releasing it or any of my program(even when it doesn't have any possibility of fw damage). :)

[Coolj]

Nah,not violating rules I guess..Just saw your ignorant comments and thought its better to lock this thingy.

[thecobra]

Nah,not violating rules I guess..Just saw your ignorant comments and thought its better to lock this thingy.

?what comment was ignorant? and no offense but if you dont like a thread dont read it

[Davee]

sctrlHENFindFunction is better than FindProc? :P

If you actually bothered to look in systemctrl.h you will find an awesome line known as:

#define FindProc sctrlHENFindFunction

[Torch]

Lot of the loading/executing functions are dependent on the EBOOT being in PSP\GAME\XXXX.

Something will break somewhere if you change this. For example if the EBOOT is calling some other load/exec function etc.

And its not only about hooking the load functions. The eboot loading function (in 3.xx kernel atleast) wont even work if its not in PSP\GAME\XXXX, so you will have to find the function and dasm it and patch it and what not.

[Davee]

Lot of the loading/executing functions are dependent on the EBOOT being in PSP\GAME\XXXX.

Something will break somewhere if you change this. For example if the EBOOT is calling some other load/exec function etc.

And its not only about hooking the load functions. The eboot loading function (in 3.xx kernel atleast) wont even work if its not in PSP\GAME\XXXX, so you will have to find the function and dasm it and patch it and what not.

The thing is that most of these functions he has to hook are already hooked by the custom firmware. M33 isn't really good with double hooks.

[thecobra]

ok i having a problem
the compiler give on givin me errors with the systemctrl.h file.

here is the erros

C:\Pather1test>make
psp-gcc -I. -IC:/pspsdk/psp/sdk/include -O2 -G0 -Wall -D_PSP_FW_VERSION=150   -
 -o main.o main.c
In file included from main.c:4:
C:/pspsdk/psp/sdk/include/systemctrl.h:200: error: expected ')' before '*' toke

C:/pspsdk/psp/sdk/include/systemctrl.h:241: error: expected '=', ',', ';', 'asm
 or '__attribute__' before 'sctrlHENSetStartModuleHandler'
make: *** [main.o] Error 1

i know it doesnt have to do with my main.c file because i only include it the file but never use it just to make sure it compiles correctly

i wanted to make just a simple eboot with this
here my makefile

TARGET = hello
OBJS = main.o
 
CFLAGS = -O2 -G0 -Wall
CXXFLAGS = $(CFLAGS) -fno-exceptions -fno-rtti
ASFLAGS = $(CFLAGS)
 
EXTRA_TARGETS = EBOOT.PBP
PSP_EBOOT_TITLE = Hello World
 
PSPSDK=$(shell psp-config --pspsdk-path)
include $(PSPSDK)/lib/build.mak

and here my systemctrl.h file

Spoiler for 1:

#ifndef __SCTRLLIBRARY_H__
#define __SCTRLLIBRARY_H__

#include <pspsdk.h>
#include <pspkernel.h>
#include <psploadexec_kernel.h>
#include <pspinit.h>
#include <psploadcore.h>

enum BootLoadFlags
{
	BOOTLOAD_VSH = 1,
	BOOTLOAD_GAME = 2,
	BOOTLOAD_UPDATER = 4,
	BOOTLOAD_POPS = 8,
	BOOTLOAD_UMDEMU = 64, /* for original NP9660 */
};

/**
 * Restart the vsh.
 *
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL
 *
 * @returns < 0 on some errors.
 *
*/
int sctrlKernelExitVSH(struct SceKernelLoadExecVSHParam *param);

/**
 * Executes a new executable from a disc.
 * It is the function used by the firmware to execute the EBOOT.BIN from a disc.
 *
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHDisc(const char *file, struct SceKernelLoadExecVSHParam *param);

/**
 * Executes a new executable from a disc.
 * It is the function used by the firmware to execute an updater from a disc.
 *
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHDiscUpdater(const char *file, struct SceKernelLoadExecVSHParam *param);

/**
 * Executes a new executable from a memory stick.
 * It is the function used by the firmware to execute an updater from a memory stick.
 *
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHMs1(const char *file, struct SceKernelLoadExecVSHParam *param);

/**
 * Executes a new executable from a memory stick.
 * It is the function used by the firmware to execute games (and homebrew :P) from a memory stick.
 *
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHMs2(const char *file, struct SceKernelLoadExecVSHParam *param);

/**
 * Executes a new executable from a memory stick.
 * It is the function used by the firmware to execute ... ?
 *
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHMs3(const char *file, struct SceKernelLoadExecVSHParam *param);

/**
 * Executes a new executable from a memory stick.
 * It is the function used by the firmware to execute psx games
 *
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHMs4(const char *file, struct SceKernelLoadExecVSHParam *param);


/**
 * Executes a new executable with the specified apitype
 *
 * @param apitype - The apitype
 * @param file - The file to execute.
 * @param param - Pointer to a ::SceKernelLoadExecVSHParam structure, or NULL.
 *
 * @returns < 0 on some errors. 
*/
int sctrlKernelLoadExecVSHWithApitype(int apitype, const char *file, struct SceKernelLoadExecVSHParam *param);

/**
 * Sets the api type 
 *
 * @param apitype - The apitype to set
 * @returns the previous apitype
 *
 * @Note - this will modify also the value of sceKernelBootFrom, since the value of
 * bootfrom is calculated from the apitype
*/
int sctrlKernelSetInitApitype(int apitype);

/**
 * Sets the filename of the launched executable.
 *
 * @param filename - The filename to set
 * @returns 0 on success
*/
int sctrlKernelSetInitFileName(char *filename);

/**
 * Sets the init key config
 *
 * @param key - The key code
 * @returns the previous key config
*/
int sctrlKernelSetInitKeyConfig(int key);

/**
 * Sets the user level of the current thread
 *
 * @param level - The user level
 * @return the previous user level on success
 */
int sctrlKernelSetUserLevel(int level);

/**
 * Sets the devkit version
 * 
 * @param version - The devkit version to set
 * @return the previous devkit version
 * 
*/
int sctrlKernelSetDevkitVersion(int version);

/**
 * Checks if we are in SE.
 *
 * @returns 1 if we are in SE-C or later, 0 if we are in HEN-D or later,
 * and < 0 (a kernel error code) in any other case
*/
int	sctrlHENIsSE();

/**
 * Checks if we are in Devhook.
 *
 * @returns 1 if we are in SE-C/HEN-D for devhook  or later, 0 if we are in normal SE-C/HEN-D or later,
 * and < 0 (a kernel error code) in any other case
*/
int	sctrlHENIsDevhook();

/**
 * Gets the HEN version
 *
 * @returns - The HEN version
 *
 * HEN D / SE-C :  0x00000400
 */
int sctrlHENGetVersion();

/**
 * Finds a driver
 *
 * @param drvname - The name of the driver (without ":" or numbers)
 *
 * @returns the driver if found, NULL otherwise
 *
 */
PspIoDrv *sctrlHENFindDriver(char *drvname);

/** 
 * Finds a function.
 *
 * @param szMod - The module where to search the function
 * @param szLib - The library name
 * @param nid - The nid of the function
 *
 * @returns - The function address or 0 if not found
 *
*/
u32 sctrlHENFindFunction(const char* szMod, const char* szLib, u32 nid);

#define FindProc sctrlHENFindFunction

typedef int (* STMOD_HANDLER)(SceModule2 *);

/**
 * Sets a function to be called just before module_start of a module is gonna be called (useful for patching purposes)
 *
 * @param handler - The function, that will receive the module structure before the module is started.
 *
 * @returns - The previous set function (NULL if none);
 * @Note: because only one handler function is handled by HEN, you should
 * call the previous function in your code.
 *
 * @Example: 
 *
 * STMOD_HANDLER previous = NULL;
 *
 * int OnModuleStart(SceModule2 *mod);
 *
 * void somepointofmycode()
 * {
 *		previous = sctrlHENSetStartModuleHandler(OnModuleStart);
 * }
 *
 * int OnModuleStart(SceModule2 *mod)
 * {
 *		if (strcmp(mod->modname, "vsh_module") == 0)
 *		{
 *			// Do something with vsh module here
 *		}
 *
 *		if (!previous)
 *			return 0;
 *
 *		// Call previous handler
 *
 *		return previous(mod);
 * }
 *
 * @Note2: The above example should be compiled with the flag -fno-pic
 *			in order to avoid problems with gp register that may lead to a crash.
 *
*/
STMOD_HANDLER sctrlHENSetStartModuleHandler(STMOD_HANDLER handler);

/**
 * Sets the partition 2 and 8  memory for next loadexec.
 *
 * @param p2 - The size in MB for the user partition. Must be > 0
 * @param p8 - The size in MB for partition 8. Can be 0.
 *
 * @returns 0 on success, < 0 on error. 
 * This function is only available in the slim. The function will fail
 * if p2+p8 > 52 or p2 == 0
*/
int sctrlHENSetMemory(u32 p2, u32 p8);

/**
 * Loads a module on next reboot. Only kernel mode.
 *
 * @param module_after - The path of the module which is loaded after the module to be loaded.
   The module passed to this function will be loaded just before that module.
 * @param buf - The buffer containing the module - Don't deallocate this one. It has to reside in kernel memory.
 * @param size - The size of the module
 * @param flags - The modes in which the module should be loaded, one of BootLoadFlags
 *
 * @Example:
 * sctrlHENLoadModuleOnReboot("/kd/usersystemlib.prx", module_buffer, module_size, BOOTLOAD_GAME | BOOTLOAD_POPS | BOOTLOAD_UMDEMU); 
 *
 * This will load the module contained in module_buffer just before /kd/usersystemlib.prx in the next reboot, if the mode of next reboot is game, pops or umdemu
 *
 * @Remarks: Don't use too early modules in first param like "/kd/init.prx" or "/kd/systemctrl.prx", or your module may not load properly
 * Only one module will be loaded on reboot with this function. 
 * If this function is called many times, only the last one will be considered.
 * By making a module to load itself using this function, and calling 
 * sctrlHENLoadModuleOnReboot on module_start, a prx can cause itself to be resident in the modes choosen by flags.
 * If all flags are selected, the module will stay resident until a psp shutdown, or until sctrlHENLoadModuleOnReboot is not called.
*/

void sctrlHENLoadModuleOnReboot(char *module_after, void *buf, int size, int flags);

/** Changes a syscall to another function 
 *
 * @param addr - the address of the original function
 * @param newaddr - the address of the new function
*/
void sctrlHENPatchSyscall(u32 addr, void *newaddr);

#endif

according to the compiler the errors come from here:

typedef int (* STMOD_HANDLER)(SceModule2 *);

and here:

STMOD_HANDLER sctrlHENSetStartModuleHandler(STMOD_HANDLER handler);

guys got any clue on how to fix that erros because i did what the compiler said but it give me diffrent erros.

meanwhile i try to cut those part of the header file because i dont use it but it will be really greate if i was told how to fix that.

thanks in advance

[Mr305]

This is going way beyond spoon-fed but I never refuse to help:

Check the header file (WHICH ONE?) and it is a very identifiable error :)

[thecobra]

This is going way beyond spoon-fed but I never refuse to help:

Check the header file (WHICH ONE?) and it is a very identifiable error :)

thanks but i did check the systemctrl.h header file and didnt saw any error at first.

when i recheck it i modifiy it a little bit so in line 200 it looks like this

typedef int (* STMOD_HANDLER);
typedef int (* SceModule2);

and seem to work. thanks for your help. rigth now i am working on the patching part of the program.

i try to patch sceIoDopen and notice something wiere

i made the patch function to return a simple 2 or 1 depending on the dirname it pass by but for some reason i get a 3?

here my souce code

#include <pspkernel.h>
#include <pspdebug.h>
#include <pspcallbacks.h>
#include <systemctrl.h>
#include <pspdisplay.h>
#include <pspctrl.h>
#include <string.h>
#include <stdio.h>
#include <pspsdk.h>
#include <unistd.h>
#include <pspiofilemgr.h>
#include <stdlib.h>
#define printf pspDebugScreenPrintf

PSP_MODULE_INFO("Name Of Program",0,1,1);

u32 sceIoDopenFunction; 

int sceIoDopenpatch (const char* dirname) 	 
   { 
   int rv = 0;
   if (stricmp(dirname, "ms0:/PSP/GAME")==0 || (stricmp(dirname, "ms0:/PSP/GAME/")==0) ) {
   rv = 2;
   } else { rv = 1;}
      
	  return rv; 
   } 
    
   

   

int main() {
 pspDebugScreenInit();
     pspDebugScreenClear();
     SetupCallbacks();
	  printf("PATCHER 2008 Dopen\n");
	  printf("ABOUT TO PATCH\n");
  sceIoDopenFunction = FindProc("iofilemgr", "IoFileMgrForUser", 0xB29DDF9C); 
   sctrlHENPatchSyscall(sceIoDopenFunction, sceIoDopenpatch);
    printf("Finish patching now about to test if work\n");
	int pt;
	pt = sceIoDopen("ms0:/PSP/GAME");
	printf("here are the result %i\n", pt);
	printf("ABOUT to resture PATCH\n");
	sctrlHENPatchSyscall((u32)sceIoDopenpatch, (void *)sceIoDopenFunction);
	printf("Fishing restoring\n");
	printf("About to see real result\n");
	pt = sceIoDopen("ms0:/PSP/GAME");
	printf("here are the result %i\n", pt);
	printf("END :)\n");
     sceKernelSleepThread();
	      return 0;
}

and what i get is this

PATCHER 2008
ABOUT to Patch
finish patching now about to test if work
here are the result 3
about to resture the patch
Finishing restoring
about to see real result
here are the result 4
END : )

i really find it weir because if you check i pass ms0:/PSP/GAME meaning it should give me 2 and not 3? any idea why it does that?
-=Double Post Merge =-
i just notice that it on giving back how many time the funtion is call,
i say this because i counted how many time the funtion is use and it excatly 3, and when i recall it , the return var is alway increase

[JaX3RiR]

Why don't you just decrypt vshctrl.prx and edit the game directories that way?

That's what I did with 3.60 M33 Time Machine, I edited it to load GAMEXXX games from GAME4XX instead of GAME360.

[thecobra]

Why don't you just decrypt vshctrl.prx and edit the game directories that way?

That's what I did with 3.60 M33 Time Machine, I edited it to load GAMEXXX games from GAME4XX instead of GAME360.

that a no because the prx can get corrupted and not in all cfw, the vshctrl.prx are EXACTLY the same but thanks for the advice
-=Double Post Merge =-
i dont know why but the funtion dont seem to be hook. those that mean they could only be hook by prx? because all funtion i hook work the same as if i never hook it

[Mr305]

i dont know why but the funtion dont seem to be hook. those that mean they could only be hook by prx? because all funtion i hook work the same as if i never hook it

That is because you are missing the basics.

Start with a simple prxs you'll learn as you go on...
You didn't follow the advice by others in the beginning of the thread.

After a while you'll AUTOMATICALLY get hang of things. :)

[eldiablov]

that a no because the prx can get corrupted and not in all cfw, the vshctrl.prx are EXACTLY the same but thanks for the advice
-=Double Post Merge =-
i dont know why but the funtion dont seem to be hook. those that mean they could only be hook by prx? because all funtion i hook work the same as if i never hook it

Then you're not doing it right. Do a scan on your computer for something called apihook.c it's an example by Tyrannid of hooking. I found it randomly last night :/

[thecobra]

That is because you are missing the basics.

Start with a simple prxs you'll learn as you go on...
You didn't follow the advice by others in the beginning of the thread.

After a while you'll AUTOMATICALLY get hang of things. :)

oh, so the patching funtion MOST be in a prx. i had put it on my eboot because i wanted to see the result by i will do what you said and put it in a prx.wait a second while i try it and report my result here :)
-=Double Post Merge =-

Then you're not doing it right. Do a scan on your computer for something called apihook.c it's an example by Tyrannid of hooking. I found it randomly last night :/

i downloaded that a few minute ago but he doesn't use the same function that super sheep advise. i find the one super sheep gave me more simple to use. i try what mr305 said and if that doesnt work i go to apihook.c style

[Coolj]

Dude,learn how to program first,seriously.This thread is a joke!

[eldiablov]

i downloaded that a few minute ago but he doesn't use the same function that super sheep advise. i find the one super sheep gave me more simple to use. i try what mr305 said and if that doesnt work i go to apihook.c style

Super sheep alread said THAT THAT METHOD WONT WORK FOR WHAT YOU WANT TO ACHIEVE. Please stop being so ignorant.

[thecobra]

Super sheep alread said THAT THAT METHOD WONT WORK FOR WHAT YOU WANT TO ACHIEVE. Please stop being so ignorant.

, why people becoming to be rude? a simple "it wont work try the other way" work find you guys know and thanks i try the apihook styl

[eldiablov]

I dont mean to be rude but you're just not listening and you clearly don't have the skill to pull this off. Learn more about actual programming first.

[thecobra]

I dont mean to be rude but you're just not listening and you clearly don't have the skill to pull this off. Learn more about actual programming first.

i am listing, it just i have so many problem at my house right now that some things just pass by me. and do believe i can pull this of and i show you.

[eldiablov]

i am listing, it just i have so many problem at my house right now that some things just pass by me

That's really funny considering you PM'ed him twice and responded to his post

[thecobra]

That's really funny considering you PM'ed him twice and responded to his post

what? PM who?

[eldiablov]

You PM'ed super sheep ...

[thecobra]

You PM'ed super sheep ...

yeah, once and that was when he told me i had to hook it dynamicly so i ask him to give me a example.

anyways, i going stop posting here for a while so i can go back to the patching project. i come back when i am done. if you have to tell me anything that doesn't have to do with patching please pm me and don't put it here.

thanks

[Davee]

Why don't you just decrypt vshctrl.prx and edit the game directories that way?

That's what I did with 3.60 M33 Time Machine, I edited it to load GAMEXXX games from GAME4XX instead of GAME360.

Decompress vshctrl...

Plus that is a terrible idea. People will be flashing hex edited vshctrl all over the place.


@thecobra

This is advanced PSP programming. You need to use kernel mode.

typedef int (* STMOD_HANDLER);
typedef int (* SceModule2);

Change that. That is so very wrong. Add -lpspsystemctrl_kernel to your makefile instead...

#include <pspkernel.h>
#include <pspsdk.h>
#include <pspiofilemgr.h>
#include <systemctrl.h>

PSP_MODULE_INFO("Simple hook", 0x1000, 0, 1);

//Notice the kernel mode?

#define PatchSyscall sctrlHENPatchSyscall

void ClearCaches()
{
	sceKernelDcacheWritebackAll();
	sceKernelIcacheClearAll();
}

SceUID sceIoDopenPatched(const char *dirname)
{
	if(strcasecmp(dirname, "ms0:/iwanttohookthisfunction") == 0)
	{
		sceIoMkdir(dirname, 0777);
	}
	
	return sceIoDopen(dirname);
}

int module_start(SceSize args, void *argp)
{
	PatchSyscall(FindProc("sceIOFileManager", "IoFileMgrForKernel", 0xB29DDF9C), sceIoDopenPatched);
	
	ClearCaches();
	
	SceUID dfd;

	if(dfd = sceIoDopen("ms0:/iwanttohookthisfunction") >= 0)
	{
		sceIoClose(dfd);
	}

	return 0;
}

That sample should work. As a Plugin obv.

[Bubbletune]

Just keep in mind that won't function properly in the VSH, it'd either do nothing at all or kill the vshctrl patches, I can't remember from the top of my head if vshctrl loads before it loads any plugins.