› Foros › PlayStation 3 › Modchips y Softmods
cmhacks escribió:Este hack se puede decir que usa una misma id para todas las consolas que usan el payload, osea que pueden banear todas las consolas que usen este payload con una simplicidad terrible.
La modificación del payload que he posteado hace un poco mas difícil la localización del payload en si, pero no es infalible.
Yo de vosotros, esperaría acontecimientos.
Saludos
rubencube escribió:cmhacks escribió:Este hack se puede decir que usa una misma id para todas las consolas que usan el payload, osea que pueden banear todas las consolas que usen este payload con una simplicidad terrible.
La modificación del payload que he posteado hace un poco mas difícil la localización del payload en si, pero no es infalible.
Yo de vosotros, esperaría acontecimientos.
Saludos
incluso con la de hermes 4b con la inclusion del psn?
cmhacks escribió:Este hack se puede decir que usa una misma id para todas las consolas que usan el payload, osea que pueden banear todas las consolas que usen este payload con una simplicidad terrible.
La modificación del payload que he posteado hace un poco mas difícil la localización del payload en si, pero no es infalible.
Yo de vosotros, esperaría acontecimientos.
Saludos
pero con la de hermes seguimos teniendo todos las misma id?si es asi si sony quiere nos hace de goma!!!cmhacks escribió:rubencube escribió:cmhacks escribió:Este hack se puede decir que usa una misma id para todas las consolas que usan el payload, osea que pueden banear todas las consolas que usen este payload con una simplicidad terrible.
La modificación del payload que he posteado hace un poco mas difícil la localización del payload en si, pero no es infalible.
Yo de vosotros, esperaría acontecimientos.
Saludos
incluso con la de hermes 4b con la inclusion del psn?
La que he posteado es la de hermes + psn con la modificación, pero igualmente se puede detectar, lo hace difícil pero no imposible.
No hay problema por esperar unos días, os lo aconsejo por vuestro bien.
Saludos
juanjooo87 escribió:Sabeis si a salido algo para la palm pre???
Derhelm escribió:cmhacks escribió:Este hack se puede decir que usa una misma id para todas las consolas que usan el payload, osea que pueden banear todas las consolas que usen este payload con una simplicidad terrible.
La modificación del payload que he posteado hace un poco mas difícil la localización del payload en si, pero no es infalible.
Yo de vosotros, esperaría acontecimientos.
Saludos
Pero que hace? Un random de la id? Aun asi pueden detectar cuando utilizamos el open manager, por tanto gracias, pero lo mejor es tu recomendacion
cmhacks escribió:Derhelm escribió:cmhacks escribió:Este hack se puede decir que usa una misma id para todas las consolas que usan el payload, osea que pueden banear todas las consolas que usen este payload con una simplicidad terrible.
La modificación del payload que he posteado hace un poco mas difícil la localización del payload en si, pero no es infalible.
Yo de vosotros, esperaría acontecimientos.
Saludos
Pero que hace? Un random de la id? Aun asi pueden detectar cuando utilizamos el open manager, por tanto gracias, pero lo mejor es tu recomendacion
Basicamente le dice al psnetwork que la consola es una REFTOOL. Esto quiere decir que falsea la versión del hardware de la consola diciéndole que no es una retail, si no una versión de desarrollo limitada.
Sony puede hacer barrido comprobando cuentas de psn logueadas con dicho hardware, contando que la reftool cuesta 15000 dolares mínimo, no muchas circularan por la red y las que circulan son las que se utilizan para programar los juegos que compras en la tienda de siempre, por así decirlo.
Saludos
cmhacks escribió:Buenas
Código fuente del payload mejorada, añade cierta invisibilidad de cara a sony, vamos, mas difícil de banear pero no imposible.
Saludos
http://www.multiupload.com/ORQGCRW803
PD: No recomiendo que os conectéis con este sistema, ya que el riesgo de baneo es muy alto
josete2k escribió:cmhacks escribió:Buenas
Código fuente del payload mejorada, añade cierta invisibilidad de cara a sony, vamos, mas difícil de banear pero no imposible.
Saludos
http://www.multiupload.com/ORQGCRW803
PD: No recomiendo que os conectéis con este sistema, ya que el riesgo de baneo es muy alto
Por lo que veo no hay cambios con respecto a la versión posteada por el autor (la original)
el port1_config_descriptor.S es idéntico.
El cambio está en el model_set y creo (creo) que no se usa para compilar.
#include "macros.h.S"
.align 4
model_set:
li %r29, 1
stb %r29, 1
(%r4) stb %r29, 7
(%r4) li %r29, 9
stb %r29, 5
(%r4)
blr
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
# modified by Hermes to add /app_home/PS3_GAME /see readme.txt) and the shortcut to launch bluray from here
# added syscall 8, perm mode, relocatable code....
#define USB_MODULE
#define SYS8_VERSION 0x100
#define PERM_MODE 2 // 0 -> restricted 1-> original 2-> new for some games
// kernel 3.41 address
#define memcpy 0x7c01c
#define memset 0x4d144
#define strcpy 0x4d2f0
#define strncmp 0x4d344
#define strlen 0x4D318
#define unk_4E81C 0x4E81C
#define alloc 0x62088
#define free 0x624c8
#define add_kernel_module 0xd22d8
#define unk_D292C 0xD292C
#define unk_D2998 0xD2998
#define unk_D29C4 0xD29C4
#define strdup 0x1B3B3C
#define hook_open_out (0x2AAFF4)
#define SYSCALL_TABLE 0x2eb128
#define USER_DATA 0x800000000033E720
/* Addressing Macros */
// Payload bases
#define DESTINATION 0x7FF000
#define BASE (DESTINATION-(resident_code-destination_code))
// Absolute branching
#define ABS(target) ((target) - (BASE) - .)
// Dynamic macros to load a label into a register
#define MEM_BASE(dest) \
li dest, 1; \
rldicr dest, dest, 63, 0;
#define LOAD_LABEL(dest, source, address) \
oris dest, source, ((BASE) + (address))@h; \
ori dest, dest, ((BASE) + (address))@l;
#define LOADI_LABEL(dest, address) LOAD_LABEL(dest, dest, address)
// For loading an absolute value
#define LOAD_ABS(dest, source, address) \
oris dest, source, ((address))@h; \
ori dest, dest, ((address))@l;
#define LOADI_ABS(dest, address) LOAD_ABS(dest, dest, address)
// Absolute .quads
#define QUAD_ABS(address) .quad 0x8000000000000000 + BASE + address
/* Patch Table Macros */
#define PATCH_INST(offset, instruction...) .long offset; instruction
#define PATCH_DATA(offset, data...) .long offset; .long data
#define PATCH_BRANCH(offset, op, target) .long offset; op (. + (target - offset))
.org 0x0
destination_code:
USB_desc:
.byte 9, 2, 0x12, 0, 1, 0, 0, 0x80, 0xFA, 9, 4, 0, 0, 0, 0xFE, 1, 2, 0, 0, 0, 0, 0, 0, 0, 0xFA, 0xCE, 0xB0, 3, 0xAA, 0xBB, 0xCC, 0xDD
# copy code and jump to main
exploit_entry:
addi %r3, %r3, -0x1000 #t_u64* src_addr_r3 = start section ROM Addr
li %r5, 0x1000 #t_u64 size_bytes_r5 = 0x1000 / 4096
li %r4, 1
rldicr %r4, %r4, 63,0
oris %r4, %r4, (BASE)@h // dest addr
ori %r4, %r4, (BASE)@l
copy_to_dest:
addi %r5, %r5, -8
ldx %r6, %r3, %r5
stdx %r6, %r4, %r5
cmpldi %r5, 0
bne copy_to_dest
addi %r4, %r4, (exploit_main)@l # load exploit_main addr
mtctr %r4 # jump dest_addr exploit main
bctr
exploit_main:
mflr %r0
stdu %sp, -0xA0(%sp)
std %r27, 0x78(%sp)
std %r28, 0x80(%sp)
std %r29, 0x88(%sp)
std %r30, 0x90(%sp)
std %r31, 0x98(%sp)
std %r0, 0xB0(%sp)
MEM_BASE(%r31)
#ifdef USB_MODULE
mr %r3, %r31
LOADI_LABEL(%r3, memory_patch_amod) # 0x800050B3C
bl ABS(add_kernel_module)
#endif
mr %r4, %r31
LOADI_ABS(%r4, SYSCALL_TABLE)
# syscall 36
mr %r3, %r31
LOADI_LABEL(%r3, syscall36_desc)
std %r3, 36*8(%r4)
mr %r5, %r31
LOADI_LABEL(%r5, patch_table_data)
patch_lv2:
lwz %r3, 0(%r5)
cmplwi %r3, 0
beq zero_payload
lwz %r4, 4(%r5)
add %r3, %r3, %r31
stw %r4, 0(%r3)
addi %r5, %r5, 8
b patch_lv2
// memset 0 from BASE to DESTINATION
zero_payload:
ld %r27, 0x78(%r1)
ld %r28, 0x80(%r1)
ld %r29, 0x88(%r1)
ld %r30, 0x90(%r1)
ld %r31, 0x98(%r1)
ld %r0, 0xb0(%r1)
addi %r1, %r1, 0xa0
mtlr %r0
MEM_BASE(%r3)
oris %r3, %r3, (BASE)@h
ori %r3, %r3, (BASE)@l
li %r4, 0
li %r5, (resident_code)@l
b ABS(memset)
# ---------------------------------------------------------------------------
# 00700150
patch_table_data:
PATCH_INST(0x0490e0, ld %r4, 0xf08(%r2))
PATCH_INST(0x0490e4, ld %r3, 0x20(%r28))
PATCH_INST(0x0490e8, std %r3, 0(%r4))
PATCH_BRANCH(0x04f0a8, bl, (BASE+(some_additional_patching_on_the_fly-destination_code))) // memory_patching_desc
PATCH_BRANCH(/*0x2aafc8*/ 0x2AAFF0, b, (BASE+(vsh_hook_open-destination_code))) // vsh_open_hook_desc
PATCH_INST(0x04ed18, li %r4, 0)
PATCH_INST(0x04ed1c, stw %r4, 0(%r3))
PATCH_INST(0x04ed20, blr)
PATCH_DATA(0x3ba890, 0x01000000)
####### WARNING! This patch cause problems with games as F1 2010 with USB devices ########
#PATCH_INST(0x0505d0, li %r3, 1)
#PATCH_INST(0x0505d4, blr)
####### New patch to avoid problems with games as F1 2010 with USB devices ########
PATCH_BRANCH(0x0505d0, b, (BASE+(perm_routine-destination_code)))
PATCH_BRANCH(0x234D0, bl, (BASE+(perm0_routine-destination_code)))
PATCH_BRANCH(0xE83D4, bl, (BASE+(perm0_routine-destination_code)))
##########################################################################################
PATCH_BRANCH(0x4F290, b, 0x4F264) // Skip 0x80010019 error in kernel (version>3.41). You need change de PARAM.SFO to <= 3.41. Only for test (not useful)
PATCH_INST(0x57398, nop) // Skip 0x8001003D error (not PARAM.SFO or not disc?) for some PKG from games
PATCH_BRANCH(0x57408, b, 0x574A8) // update patch from mathieulh, modified by Hermes to avoid 0x80010009 error in Uncharted 2 update
PATCH_INST(0x5745C, li %r31, 0) // from mathieulh, skip 0x8001003E error (different PARAM.SFO?)
PATCH_INST(0x4F840 + 0x3EC, nop)
PATCH_BRANCH(0x273F98, b, (BASE+(model_set-destination_code)))
// syscalls patch
PATCH_INST(0x17CBC, ld %r3, 0(%r3)) // syscall 6
PATCH_INST(0x17CC0, blr)
PATCH_INST(0x17CC8, std %r4, 0(%r3)) // syscall 7
PATCH_INST(0x17CCC, blr)
PATCH_BRANCH(0x17CD4, b, (BASE+(syscall8-destination_code))) // syscall 8
PATCH_INST(0x50B3C, li %r3, 1) # use this patch if you move the payload resident code to other address
PATCH_INST(0x50B40, blr)
# 007001C8
.long 0
########################################################################################################################################################
.quad 0
resident_code:
return1:
li %r3, 1
blr
return0:
li %r3, 0
blr
# ---------------------------------------------------------------------------
# 00050B4C
syscall36_desc:
QUAD_ABS(Syscall_36_activate_virtual_bluray_drive)
.quad USER_DATA
#ifdef USB_MODULE
memory_patch_amod:
QUAD_ABS(aMod)
QUAD_ABS(probe)
QUAD_ABS(initialize)
QUAD_ABS(disconnect)
probe:
QUAD_ABS(kmod_func1) # 50BD4 - struct func {function_ptr, = kmod_func1
.quad USER_DATA # user_data?}
initialize:
QUAD_ABS(kmod_func2) # 50C1C - struct func {function_ptr, = kmod_func2
.quad USER_DATA # user_data?}
disconnect:
QUAD_ABS(kmod_func3) # 50C78 - struct func {function_ptr, = kmod_func3
.quad USER_DATA # user_data?}
initialized_flag:
QUAD_ABS(set_initialized_flag) # 50C84 - ptr to set_initialized_flag (unused)
.quad USER_DATA # user_data?}
#endif
# ---------------------------------------------------------------------------
#00050BD4
kmod_func1:
stdu %sp, -0x80(%sp)
mflr %r0
std %r0, 0x90(%sp)
li %r4, 0
li %r5, 1
bl ABS(unk_D2998)
lwz %r5, 8(%r3)
li %r3, 0
lis %r4, 0xAAAA # 0xAAAAC0DE
ori %r4, %r4, 0xC0DE # 0xAAAAC0DE
cmplw %r4, %r5
beq kmod_func1_ret
li %r3, -1
kmod_func1_ret:
extsw %r3, %r3
ld %r0, 0x90(%sp)
mtlr %r0
addi %sp, %sp, 0x80
blr
# ---------------------------------------------------------------------------
# 00050C1C
kmod_func2:
stdu %sp, -0x80(%sp)
mflr %r0
std %r0, 0x90(%sp)
li %r4, 0
bl ABS(unk_D29C4)
addi %r4, %sp, 0x70
li %r5, 0
std %r5, 0(%r4)
li %r6, 0x21AA
sth %r6, 0(%r4)
li %r6, 0
sth %r6, 6(%r4)
MEM_BASE(%r6)
LOADI_LABEL(%r6, initialized_flag)
li %r7, 0
bl ABS(unk_D292C)
li %r3, 0
ld %r0, 0x90(%sp)
mtlr %r0
addi %sp, %sp, 0x80
blr
# ---------------------------------------------------------------------------
# 00050C78
kmod_func3:
li %r3, 0
blr
# li %r11, 0xFF
# sc 1
# ---------------------------------------------------------------------------
# 00050C84
set_initialized_flag:
cmpwi %r3, 0
bne locret_50CA4
MEM_BASE(%r3)
LOADI_LABEL(%r3, GAME_NAME_PTR)
li %r4, 1
stw %r4, 0x10(%r3)
locret_50CA4:
blr
# ---------------------------------------------------------------------------
# 00050CA8
Syscall_36_activate_virtual_bluray_drive:
stdu %sp, -0xD0(%sp)
mflr %r0
std %r0, 0xE0(%sp)
std %r31, 0xC8(%sp)
addi %r4, %sp, 0x70
bl ABS(strdup)
MEM_BASE(%r31)
// new for enable skip_end_table_3
li %r4, 2
LOAD_LABEL(%r3, %r31, skip_end_table_3)
stw %r4, 0(%r3)
LOADI_LABEL(%r31, GAME_NAME_PTR)
ld %r3, 0(%r31)
cmpdi %r3, 0
beq loc_50CE4
li %r4, 0x27
bl ABS(free)
loc_50CE4:
li %r4, 0x27
li %r3, 0x800
bl ABS(alloc)
std %r3, 0(%r31)
ld %r4, 0x70(%sp)
bl ABS(strcpy)
ld %r3, 0x70(%sp)
li %r4, 0x27
bl ABS(free)
ld %r3, 0(%r31)
bl ABS(strlen)
ld %r4, 0(%r31)
add %r3, %r4, %r3
std %r3, 8(%r31)
li %r3, 0
ld %r31, 0xC8(%sp)
ld %r0, 0xE0(%sp)
addi %sp, %sp, 0xD0
mtlr %r0
blr
# ---------------------------------------------------------------------------
# 00050D34
vsh_hook_open:
/*
// skipped by new jump
stdu %sp, -0xA0(%sp)
mflr %r0
std %r28, 0x80(%sp)
std %r29, 0x88(%sp)
std %r31, 0x98(%sp)
std %r26, 0x70(%sp)
std %r27, 0x78(%sp)
std %r0, 0xB0(%sp)
mr %r28, %r4
mr %r29, %r3
*/
MEM_BASE(%r31)
LOAD_LABEL(%r27, %r31, str_open_cmp)
ld %r26, 0(%r27)
cmpldi %r26, 0
beq hook_open1
_b_hook_open00:
mr %r3, %r29
ld %r4, 0(%r26) // get compare path
cmpldi %r4, 0
beq hook_open1
lwz %r5, 16(%r26) // get len of compare path
bl ABS(strncmp)
cmpldi %r3, 0
bne _b_hook_open01
lwz %r5, 16(%r26)
add %r4, %r29, %r5 // &open_path[compare_path_len]
ld %r3, 8(%r26) // get new path
mr %r29, %r3 // changes open_path
lwz %r5, 20(%r26) // get len of new path
add %r3, %r3, %r5
bl ABS(strcpy)
b proceed
_b_hook_open01:
addi %r26, %r26, 24
b _b_hook_open00
hook_open1:
LOAD_LABEL(%r4, %r31, strAppHome)
li %r5, 9
bl ABS(strncmp)
cmpldi %r3, 0
bne hook_open_bdvd
LOAD_LABEL(%r26, %r31, GAME_NAME_PTR2)
ld %r27, 0x00(%r26)
cmpldi %r27, 0
bne vsh_open_noalloc
li %r4, 0x27
li %r3, 0x800
bl ABS(alloc)
std %r3, 0x00(%r26);
mr %r27, %r3
LOAD_LABEL(%r4, %r31, strDevUSB)
bl ABS(strcpy)
/*******************************************************************/
vsh_open_noalloc:
addi %r3, %r27, 11
LOAD_LABEL(%r5, %r31, GAME_NAME_PTR)
ld %r4, 0(%r5)
cmpldi %r4, 0
beq skip_usb1
mr %r27, %r4
ld %r3, 8(%r5)
skip_usb1:
addi %r4, %r29, 9
bl ABS(strcpy)
mr %r29, %r27
beq proceed
hook_open_bdvd:
mr %r3, %r29
mr %r4, %r31
LOADI_LABEL(%r4, aDev_bdvd);
li %r5, 9
bl ABS(strncmp)
cmpldi %r3, 0
bne proceed
LOADI_LABEL(%r31, GAME_NAME_PTR)
#ifdef USB_MODULE
lwz %r3, 0x10(%r31)
cmplwi %r3, 0
beq proceed
#endif
ld %r3, 0(%r31)
cmpldi %r3, 0
beq proceed
ld %r3, 8(%r31)
addi %r4, %r29, 9
bl ABS(strcpy)
ld %r29, 0(%r31)
proceed:
mr %r4, %r28
mr %r3, %r29
bl ABS(strlen)
b ABS(hook_open_out)
# ---------------------------------------------------------------------------
# 00050DBC
some_additional_patching_on_the_fly:
mflr %r0
stdu %sp, -0x1A0(%sp)
std %r27, 0x78(%sp)
std %r28, 0x80(%sp)
std %r29, 0x88(%sp)
std %r30, 0x90(%sp)
std %r31, 0x98(%sp)
std %r0, 0x1B0(%sp)
mr %r29, %r3
mr %r30, %r4
MEM_BASE(%r31)
ld %r28, -0x6A00(%rtoc)
ld %r28, 0x68(%r28)
ld %r28, 0x18(%r28)
ld %r27, 0xF08(%rtoc)
ld %r9, 0x18(%r29)
lwz %r9, 0x30(%r9)
rldicl %r9, %r9, 48,16
cmpwi %r9, 0x29
bne loc_50E64
ld %r4, 0x10(%r28)
rldicr %r5, %r4, 24,39
rldicl %r5, %r5, 8,56
cmpwi %r5, 0xFF
beq loc_50E38
ori %r4, %r4, 3
std %r4, 0x10(%r28)
li %r3, 6
stw %r3, 0(%r30)
b loc_50E48
loc_50E38:
ori %r4, %r4, 2
std %r4, 0x10(%r28)
li %r3, 0x2C
stw %r3, 0(%r30)
loc_50E48:
lwz %r5, 4(%r28)
ld %r4, 8(%r28)
ld %r3, 0(%r27)
add %r9, %r3, %r5
std %r9, 0(%r27)
bl ABS(memcpy)
b loc_50F24
loc_50E64:
mr %r3, %r29
mr %r4, %r30
bl ABS(unk_4E81C)
mr %r29, %r31
LOADI_LABEL(%r29, patch_flag)
lwz %r3, 0(%r29)
lwz %r5, 4(%r28)
add %r3, %r3, %r5
stw %r3, 0(%r29)
ld %r4, 0x10(%r28)
rldicr %r5, %r4, 24,39
rldicl %r5, %r5, 8,56
cmpwi %r5, 0xFF
bne loc_50F24
ld %r3, 0(%r27)
li %r4, 0
li %r6, 0
loc_50EAC:
add %r7, %r3, %r4
lwz %r5, 0(%r7)
xor %r6, %r6, %r5
addi %r4, %r4, 4
cmpldi %r4, 0x400
bne loc_50EAC
lwz %r3, 0(%r29)
rldicr %r6, %r6, 32,31
or %r6, %r6, %r3
li %r3, 0
stw %r3, 0(%r29)
mr %r7, %r31
LOADI_LABEL(%r7, memory_patch_table) #hermes
loc_50EE4:
ld %r3, 0(%r7)
cmpldi %r3, 0
beq loc_50F24
addi %r7, %r7, 0x10
cmpld %r3, %r6
bne loc_50EE4
ld %r5, -8(%r7)
ld %r7, 0(%r27)
loc_50F04:
lwz %r3, 0(%r5)
cmplwi %r3, 0
beq loc_50F24
cmplwi %r3, 1 // skip patch n bytes (it is a trick used to skip conditional patch)
beq is_type_1
cmplwi %r3, 2 // non skip patch (it is a trick used to skip conditional patch. In this case patch successfull)
beq is_type_2
lwz %r4, 4(%r5)
add %r3, %r3, %r7
stw %r4, 0(%r3)
addi %r5, %r5, 8
b loc_50F04
is_type_1:
lwz %r3, 4(%r5)
add %r5, %r5, %r3
addi %r5, %r5, 8 // skip n+8 bytes (non patch)
b loc_50F04
is_type_2:
addi %r5, %r5, 8 // skip 8 bytes (patch)
b loc_50F04
loc_50F24:
li %r3, 0
ld %r27, 0x78(%sp)
ld %r28, 0x80(%sp)
ld %r29, 0x88(%sp)
ld %r30, 0x90(%sp)
ld %r31, 0x98(%sp)
ld %r0, 0x1B0(%sp)
addi %sp, %sp, 0x1A0
mtlr %r0
blr
########################################################################################################################################################
# generic tool main syscall
syscall8:
mflr %r0
stdu %sp, -0xA0(%sp)
std %r27, 0x78(%sp)
std %r28, 0x80(%sp)
std %r29, 0x88(%sp)
std %r30, 0x90(%sp)
std %r31, 0x98(%sp)
std %r0, 0xB0(%sp)
MEM_BASE(%r31)
LOAD_LABEL(%r27, %r31, save_syscall_values)
lwz %r28, 0(%r27) // stealth mode
cmplwi %r28, 0x0
beq syscall8_ok // if not stealth mode work normally
cmplwi %r28, 8
bge syscall8_stealth // if stealth mode >=8 ignore all
cmpldi %r3, 1 // test for command == 1
bne syscall8_stealth
cmpldi %r4, 0 // compare if key is 0 to skip count times
beq syscall8_skip_count
addi %r28, %r28, 1 // stealth_mode++ (count times)
stw %r28, 0(%r27)
syscall8_skip_count:
ld %r28, 8(%r27) // get key and compares if same key
cmpld %r4, %r28
bne syscall8_stealth
li %r28, 1
stw %r28, 0(%r27) // stealth mode
// syscall8 enabled: system_call_2(8, 1, key)
LOAD_ABS(%r4, %r31, SYSCALL_TABLE)
ld %r28, 16(%r27)
std %r28, 6*8(%r4) // patch syscall 6 to enable
ld %r28, 24(%r27)
std %r28, 7*8(%r4) // patch syscall 7 to enable
LOAD_LABEL(%r28, %r31, syscall36_desc)
std %r28, 36*8(%r4) // patch syscall 36 to enable
li %r28, 0
stw %r28, 0(%r27) // stealth mode off
li %r3, SYS8_VERSION
b syscall8_end
syscall8_ok:
// syscall switch
andi. %r3, %r3, 0xff
cmpldi %r3, 10
bge syscall8_unsupported
LOAD_LABEL(%r27, %r31, syscall8_table)
sldi %r28, %r3, 3
add %r27, %r27, %r28
ld %r29, 0(%r27)
// move param registers
mr %r3, %r4
mr %r4, %r5
mr %r5, %r6
// jump to register address with link
bl syscall8_bl
syscall8_end:
ld %r27, 0x78(%sp)
ld %r28, 0x80(%sp)
ld %r29, 0x88(%sp)
ld %r30, 0x90(%sp)
ld %r31, 0x98(%sp)
ld %r0, 0xB0(%sp)
addi %sp, %sp, 0xA0
mtlr %r0
blr
syscall8_stealth:
lis %r3, -0x7FFF
ori %r3, %r3, 3
b syscall8_end
syscall8_unsupported:
li %r3, -1
b syscall8_end
syscall8_bl:
mtctr %r29
bctr
# ---------------------------------------------------------------------------
// system_call_2(8, 0, key): disables the syscalls vectors and fix a key to enable it again using system_call_2(8, 1, key)
sys8_disable:
LOAD_LABEL(%r27, %r31, save_syscall_values)
std %r3, 8(%r27) // save key
li %r28, 1
stw %r28, 0(%r27) // stealth mode
LOAD_ABS(%r4, %r31, SYSCALL_TABLE)
ld %r3, 37*8(%r4) // get unused syscall addr
ld %r28, 6*8(%r4)
std %r3, 6*8(%r4) // patch syscall 6 to stealth
std %r28, 16(%r27)
ld %r28, 7*8(%r4)
std %r3, 7*8(%r4) // patch syscall 7 to stealth
std %r28, 24(%r27)
std %r3, 36*8(%r4) // patch syscall 36 to stealth
li %r3, 0
blr
// dummy for system_call_2(8, 1, key)
sys8_enable: // system_call_2(8, 1, key) when syscalls are enabled
li %r3, SYS8_VERSION
blr
sys8_memcpy: // system_call_4(8, 2, dest, src, len)
b ABS(memcpy)
sys8_memset: // system_call_4(8, 3, dest, dat, len)
b ABS(memset)
sys8_call: // system_call_4(8, 4, addr, param1, param2)
mtctr %r3
mr %r3, %r4
mr %r4, %r5
bctr
sys8_alloc: // system_call_3(8, 5, size, pool)
b ABS(alloc)
sys8_free: // system_call_3(8, 6, ptr, pool)
b ABS(free)
sys8_panic: // system_call_1(8, 7)
li %r3, 0
li %r11, 0xFF
sc 1
sys8_perm_mode: // system_call_2(8, 8, perm)
LOAD_LABEL(%r27, %r31, perm_mode)
stw %r3, 0(%r27)
li %r3, 0
blr
sys8_open_table: // system_call_2(8, 9, ptr)
mr %r4, %r3
LOAD_LABEL(%r27, %r31, str_open_cmp)
ld %r3, 0(%r27)
std %r4, 0(%r27)
blr
########################################################################################################################################################
perm0_routine:
MEM_BASE(%r9)
LOADI_LABEL(%r9, perm_mode)
lwz %r0, 0(%r9)
cmplwi %r0, 1
beq return1
cmplwi %r0, 2
beq return0
ld %r9, -0x6978(%rtoc)
mflr %r0
b ABS(0x000505D8)
perm_routine:
MEM_BASE(%r9)
LOADI_LABEL(%r9, perm_mode)
lwz %r0, 0(%r9)
cmplwi %r0, 0
bne return1
ld %r9, -0x6978(%rtoc)
mflr %r0
b ABS(0x000505D8)
########################################################################################################################################################
model_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
// 0x81 = Reftool
// 0x82 = Debugging station
// 0x85 = Euro Retail
// 0xA0 = System debugger
li %r29, 0x82
stb %r29, 3(%r4)
li %r29, 1
stb %r29, 1(%r4)
stb %r29, 7(%r4)
li %r29, 9
stb %r29, 5(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
# 00050F70
memory_patch_table:
.quad 0xa0556f3d002cb8fd
QUAD_ABS(memory_patch_table_1)
.quad 0x8c0a948c000d99b1
QUAD_ABS(memory_patch_table_3)
.quad 0xa2bc1a5600052adc
QUAD_ABS(memory_patch_table_4)
.quad 0x6b70280200020017
QUAD_ABS(memory_patch_table_2)
.quad 0
memory_patch_table_1:
PATCH_INST(0x305354, li %r3, 130)
PATCH_INST(0x5f3fc0, li %r3, 1)
PATCH_INST(0x5f3fc4, blr)
.long 0
memory_patch_table_2:
#PATCH_INST(0x2ed0c, li %r29, 1)
PATCH_INST(0x2eef0, nop) # mathieulh pkg patch
.long 0
memory_patch_table_3:
PATCH_DATA(0x0022b888, 0x5f746f6f) # "_tool2.xml#root"
PATCH_DATA(0x0022b88c, 0x6c322e78)
PATCH_DATA(0x0022b890, 0x6d6c2372)
PATCH_DATA(0x0022b894, 0x6f6f7400)
skip_end_table_3: // conditional patch: if first 4 bytes == 1 skip patch if == 2 patch successfull
PATCH_DATA(1, 3*8) // skip 3 patchs
PATCH_DATA(0x2367e8, 0x2f646576) // "/dev" // replace "/home_apps/PS3_GAME" by "/dev_bdvd/PS3_GAME"
PATCH_DATA(0x2367ec, 0x5f626476) // "_bdv"
PATCH_DATA(0x2367f0, 0x642f5053) // "d/PS"
.long 0
memory_patch_table_4:
PATCH_DATA(0x000d68b8, 0x5f746f6f) # "_tool2.xml#root"
PATCH_DATA(0x000d68bc, 0x6c322e78)
PATCH_DATA(0x000d68c0, 0x6d6c2372)
PATCH_DATA(0x000d68c4, 0x6f6f7400)
.long 0
GAME_NAME_PTR:
.quad 0
GAME_MOUNTPOINT_PTR:
.quad 0
INITIALIZED:
.long 0
patch_flag:
.long 0
str_open_cmp:
.quad 0
save_syscall_values: // (for stealth)
.quad 0 // stealth mode
.quad 0 // key
.quad 0 // syscall 6
.quad 0 // syscall 7
perm_mode:
.long PERM_MODE
aDev_bdvd:
.string "/dev_bdvd"
aMod:
.string "mod"
GAME_NAME_PTR2:
.quad 0
strAppHome:
.string "/app_home"
strDevUSB:
.string "/dev_usb000"
syscall8_table:
QUAD_ABS(sys8_disable);
QUAD_ABS(sys8_enable);
QUAD_ABS(sys8_memcpy);
QUAD_ABS(sys8_memset);
QUAD_ABS(sys8_call);
QUAD_ABS(sys8_alloc);
QUAD_ABS(sys8_free);
QUAD_ABS(sys8_panic);
QUAD_ABS(sys8_perm_mode);
QUAD_ABS(sys8_open_table);
QUAD_ABS(sys8_enable);
end_dest_code:
.byte 0
########################################################################################################################################################
// fill out to 3840 bytes
.org 0xf00
loc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
cmhacks escribió:PD: Es el parcheo sugerido por math
#include "macros.h.S"
.align 4
model_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
// 0x81 = Reftool
// 0x82 = Debugging station
// 0x85 = Euro Retail
// 0xA0 = System debugger
li %r29, 0x82
stb %r29, 3(%r4)
li %r29, 1
stb %r29, 1(%r4)
stb %r29, 7(%r4)
li %r29, 9
stb %r29, 5(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
loc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
elfrenchy escribió:Acaba de poner esto:
I see "mathieulh's fix" everywhere. I don't even want to be remotely associated with it, All this code comes or (cont)
Vamos, que el no tiene nada que ver...
cmhacks escribió:#include "macros.h.S"
.align 4
model_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
// 0x81 = Reftool
// 0x82 = Debugging station
// 0x85 = Euro Retail
// 0xA0 = System debugger
li %r29, 0x82
stb %r29, 3(%r4)
li %r29, 1
stb %r29, 1(%r4)
stb %r29, 7(%r4)
li %r29, 9
stb %r29, 5(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
La modificacion se ha efectuado en el modelset.h.Sloc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
Vamos, en principio así seria correcto
Saludos
PD: josete2k en el link que he puesto, tienes la modificación aplicada, no obstante.. que placa estas usando?
josete2k escribió:cmhacks escribió:#include "macros.h.S"
.align 4
model_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
// 0x81 = Reftool
// 0x82 = Debugging station
// 0x85 = Euro Retail
// 0xA0 = System debugger
li %r29, 0x82
stb %r29, 3(%r4)
li %r29, 1
stb %r29, 1(%r4)
stb %r29, 7(%r4)
li %r29, 9
stb %r29, 5(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
La modificacion se ha efectuado en el modelset.h.Sloc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
Vamos, en principio así seria correcto
Saludos
PD: josete2k en el link que he puesto, tienes la modificación aplicada, no obstante.. que placa estas usando?
Haz una prueba, borra el modelset y compila...
Compila IGUAL!!!! Y el HEX es idéntico.
El cambio debe ser en el port1_config_descriptor.S al menos en las versione de Hermes.
Ahora mismo uso una GoldenAVR y mi mod del clon de PSJ (que también es una Teensy/Golden).
Adjunto un HEX que acabo de compilar junto al port1_config_descriptor.S modificado (por cierto lleva auto DFU también, incluyo el psgroove.c)
:100000000C94B90D0C94D70D0C94D70D0C94D70DFE
:100010000C94D70D0C94D70D0C94D70D0C94D70DD0
:100020000C94D70D0C94D70D0C94F4130C94D70D9D
:100030000C94D70D0C94D70D0C94D70D0C94D70DB0
:100040000C94D70D0C94D70D0C94D70D0C94D70DA0
:100050000C94060E0C94D70D0C94D70D0C94D70D60
:100060000C94D70D0C94D70D0C94D70D0C94D70D80
:100070000C94D70D0C94D70D0C94D70D0C94D70D70
:100080000C94D70D0C94D70D0C94D70D0C94D70D60
:100090000C94D70D0C94D70D120100020900010831
:1000A000AAAACCCC0001000000010902190001013C
:1000B00000E0320904000001090000000705810387
:1000C00001000C092906A900326400FF1201000298
:1000D00000000008AAAA555500000000000409020B
:1000E000000F010000801201000200000008AAAA0F
:1000F000BBBB0000000000010902160001010080E6
:10010000010904000000FE0102000421B42F1201C5
:10011000000200000008AAAA5555000000000002D5
:1001200009024D0A01010080010904000000FE01DE
:1001300002000904000000FE0102000904000000A2
:10014000FE0102000904000000FE01020009040093
:100150000000FE0102000904000000FE0102000987
:10016000000904000000FE0102000904000000FE76
:100170000102000904000000FE0102000904000061
:1001800000FE0102000904000000FE010200090453
:10019000000000FE0102000904000000FE01020050
:1001A00002000904000000FE010200090400000032
:1001B000FE0102000904000000FE01020009040023
:1001C0000000FE0102000904000000FE0102000917
:1001D00004000000FE0102000904000000FE01020C
:1001E0000102000904000000FE01020009040000F1
:1001F00000FE0102000904000000FE0102000904E3
:10020000000000FE0102000904000000FE010200DF
:100210000904000000FE0102000904000000FE01C4
:10022000FE0102000904000000FE010200090400B2
:100230000000FE0102000904000000FE01020009A6
:1002400004000000FE0102000904000000FE01029B
:10025000000904000000FE0102000904000000FE85
:1002600000FE0102000904000000FE010200090472
:10027000000000FE0102000904000000FE0102006F
:100280000904000000FE0102000904000000FE0154
:1002900002000904000000FE010200090400000041
:1002A0000000FE0102000904000000FE0102000936
:1002B00004000000FE0102000904000000FE01022B
:1002C000000904000000FE0102000904000000FE15
:1002D0000102000904000000FE0102000904000000
:1002E000000000FE0102000904000000FE010200FF
:1002F0000904000000FE0102000904000000FE01E4
:1003000002000904000000FE0102000904000000D0
:10031000FE0102000904000000FE010200090400C1
:1003200004000000FE0102000904000000FE0102BA
:10033000000904000000FE0102000904000000FEA4
:100340000102000904000000FE010200090400008F
:1003500000FE0102000904000000FE010200090481
:100360000904000000FE0102000904000000FE0173
:1003700002000904000000FE010200090400000060
:10038000FE0102000904000000FE01020009040051
:100390000000FE0102000904000000FE0102000945
:1003A000000904000000FE0102000904000000FE34
:1003B0000102000904000000FE010200090400001F
:1003C00000FE0102000904000000FE010200090411
:1003D000000000FE0102000904000000FE0102000E
:1003E00002000904000000FE0102000904000000F0
:1003F000FE0102000904000000FE010200090400E1
:100400000000FE0102000904000000FE01020009D4
:1004100004000000FE0102000904000000FE0102C9
:100420000102000904000000FE01020009040000AE
:1004300000FE0102000904000000FE0102000904A0
:10044000000000FE0102000904000000FE0102009D
:100450000904000000FE0102000904000000FE0182
:10046000FE0102000904000000FE01020009040070
:100470000000FE0102000904000000FE0102000964
:1004800004000000FE0102000904000000FE010259
:10049000000904000000FE0102000904000000FE43
:1004A00000FE0102000904000000FE010200090430
:1004B000000000FE0102000904000000FE0102002D
:1004C0000904000000FE0102000904000000FE0112
:1004D00002000904000000FE0102000904000000FF
:1004E0000000FE0102000904000000FE01020009F4
:1004F00004000000FE0102000904000000FE0102E9
:10050000000904000000FE0102000904000000FED2
:100510000102000904000000FE01020009040000BD
:10052000000000FE0102000904000000FE010200BC
:100530000904000000FE0102000904000000FE01A1
:1005400002000904000000FE01020009040000008E
:10055000FE0102000904000000FE0102000904007F
:1005600004000000FE0102000904000000FE010278
:10057000000904000000FE0102000904000000FE62
:100580000102000904000000FE010200090400004D
:1005900000FE0102000904000000FE01020009043F
:1005A0000904000000FE0102000904000000FE0131
:1005B00002000904000000FE01020009040000001E
:1005C000FE0102000904000000FE0102000904000F
:1005D0000000FE0102000904000000FE0102000903
:1005E000000904000000FE0102000904000000FEF2
:1005F0000102000904000000FE01020009040000DD
:1006000000FE0102000904000000FE0102000904CE
:10061000000000FE0102000904000000FE010200CB
:1006200002000904000000FE0102000904000000AD
:10063000FE0102000904000000FE0102000904009E
:100640000000FE0102000904000000FE0102000992
:1006500004000000FE0102000904000000FE010287
:100660000102000904000000FE010200090400006C
:1006700000FE0102000904000000FE01020009045E
:10068000000000FE0102000904000000FE0102005B
:100690000904000000FE0102000904000000FE0140
:1006A000FE0102000904000000FE0102000904002E
:1006B0000000FE0102000904000000FE0102000922
:1006C00004000000FE0102000904000000FE010217
:1006D000000904000000FE0102000904000000FE01
:1006E00000FE0102000904000000FE0102000904EE
:1006F000000000FE0102000904000000FE010200EB
:100700000904000000FE0102000904000000FE01CF
:1007100002000904000000FE0102000904000000BC
:100720000000FE0102000904000000FE01020009B1
:1007300004000000FE0102000904000000FE0102A6
:10074000000904000000FE0102000904000000FE90
:100750000102000904000000FE010200090400007B
:10076000000000FE0102000904000000FE0102007A
:100770000904000000FE0102000904000000FE015F
:1007800002000904000000FE01020009040000004C
:10079000FE0102000904000000FE0102000904003D
:1007A00004000000FE0102000904000000FE010236
:1007B000000904000000FE0102000904000000FE20
:1007C0000102000904000000FE010200090400000B
:1007D00000FE0102000904000000FE0102000904FD
:1007E0000904000000FE0102000904000000FE01EF
:1007F00002000904000000FE0102000904000000DC
:10080000FE0102000904000000FE010200090400CC
:100810000000FE0102000904000000FE01020009C0
:10082000000904000000FE0102000904000000FEAF
:100830000102000904000000FE010200090400009A
:1008400000FE0102000904000000FE01020009048C
:10085000000000FE0102000904000000FE01020089
:1008600002000904000000FE01020009040000006B
:10087000FE0102000904000000FE0102000904005C
:100880000000FE0102000904000000FE0102000950
:1008900004000000FE0102000904000000FE010245
:1008A0000102000904000000FE010200090400002A
:1008B00000FE0102000904000000FE01020009041C
:1008C000000000FE0102000904000000FE01020019
:1008D0000904000000FE0102000904000000FE01FE
:1008E000FE0102000904000000FE010200090400EC
:1008F0000000FE0102000904000000FE01020009E0
:1009000004000000FE0102000904000000FE0102D4
:10091000000904000000FE0102000904000000FEBE
:1009200000FE0102000904000000FE0102000904AB
:10093000000000FE0102000904000000FE010200A8
:100940000904000000FE0102000904000000FE018D
:1009500002000904000000FE01020009040000007A
:100960000000FE0102000904000000FE010200096F
:1009700004000000FE0102000904000000FE010264
:10098000000904000000FE0102000904000000FE4E
:100990000102000904000000FE0102000904000039
:1009A000000000FE0102000904000000FE01020038
:1009B0000904000000FE0102000904000000FE011D
:1009C00002000904000000FE01020009040000000A
:1009D000FE0102000904000000FE010200090400FB
:1009E00004000000FE0102000904000000FE0102F4
:1009F000000904000000FE0102000904000000FEDE
:100A00000102000904000000FE01020009040000C8
:100A100000FE0102000904000000FE0102000904BA
:100A20000904000000FE0102000904000000FE01AC
:100A300002000904000000FE010200090400000099
:100A4000FE0102000904000000FE0102000904008A
:100A50000000FE0102000904000000FE010200097E
:100A6000000904000000FE0102000904000000FE6D
:100A70000102000904000000FE0102000904000058
:100A800000FE0102000904000000FE01020009044A
:100A9000000000FE0102000904000000FE01020047
:100AA00002000904000000FE010200090400000029
:100AB000FE0102000904000000FE0102000904001A
:100AC0000000FE0102000904000000FE010200090E
:100AD00004000000FE0102000904000000FE010203
:100AE0000102000904000000FE01020009040000E8
:100AF00000FE0102000904000000FE0102000904DA
:100B0000000000FE0102000904000000FE010200D6
:100B10000904000000FE0102000904000000FE01BB
:100B2000FE0102000904000000FE010200090400A9
:100B30000000FE0102000904000000FE010200099D
:100B400004000000FE0102000904000000FE010292
:100B5000000904000000FE0102000904000000FE7C
:100B600000FE0102000904000000FE010212010063
:100B70000200000008AAAA55550000000000030961
:100B800002120001010080010904000000FE0102C0
:100B900000090212000101008009020000010100A9
:100BA00080010904000000FE01020009023000017A
:100BB000010080010904000000FE0102003E210046
:100BC000000000FACEB003AABBCCDD80000000001C
:100BD00046500080000000003DEE7012010002004F
:100BE0000000084C05EB0200000000000109022093
:100BF0000001000080010904000002FF000000075E
:100C00000502020800000705810208000012010029
:100C10000200000008AAAAC0DE00000000000109CE
:100C200002120001010080010904000000FE01021F
:100C3000000902120001000080FA0904000000FE11
:100C4000010200000000000000FACEB003AABBCCF5
:100C5000DD3863F00038A01000388000017884F897
:100C6000066484007F6084EE1838A5FFF87CC328F2
:100C70002A7CC4292A282500004082FFF0388400FD
:100C8000587C8903A64E8004207C0802A6F821FF28
:100C900061FB610078FB810080FBA10088FBC10043
:100CA00090FBE10098F80100B03BE000017BFFF809
:100CB000067FE3FB786463007F6063F0204B8D3434
:100CC000357FE4FB786484002E6084B1287FE3FBE9
:100CD000786463007F6063F010F86401207FE5FBB7
:100CE0007864A5007F60A5EF2C80650000280300D4
:100CF0000041820018808500047C63FA1490830010
:100D00000038A500084BFFFFE4EB610078EB8100A1
:100D100080EBA10088EBC10090EBE10098E80100B6
:100D2000B0382100A07C0803A6386000017863F881
:100D3000066463007F6063EE183880000038A0010D
:100D4000E84B84E21C000490E0E8820F0800049065
:100D5000E4E87C0020000490E8F86400000004F05F
:100D6000A8487B0285002AAFF0485541FC0004EDFD
:100D700018388000000004ED1C908300000004ED92
:100D8000204E800020003BA89001000000000505D7
:100D9000D0487AF0FC000234D0487DC1CD000E83EB
:100DA000D4487172C90004F2904BFFFFD400057360
:100DB000986000000000057408480000A000057459
:100DC0005C3BE000000004FC2C6000000000273FBA
:100DD000984858B75C00017CBCE863000000017CC7
:100DE000C04E80002000017CC8F883000000017C18
:100DF000CC4E80002000017CD4487E781000050B8A
:100E00003C3860000100050B404E800020000000CF
:100E1000000000000000000000386000014E80006B
:100E200020386000004E80002080000000007FF12C
:100E300050800000000033E72080000000007FF8B1
:100E40005A80000000007FF04080000000007FF02A
:100E50005080000000007FF06080000000007FF004
:100E600080800000000033E72080000000007FF059
:100E7000C8800000000033E72080000000007FF100
:100E800024800000000033E72080000000007FF194
:100E90002C800000000033E720F821FF817C08024D
:100EA000A6F80100903880000038A000014B8D3971
:100EB0000580A30008386000003C80AAAA6084C0B6
:100EC000DE7C042840418200083860FFFF7C630715
:100ED000B4E80100907C0803A6382100804E800011
:100EE00020F821FF817C0802A6F8010090388000DC
:100EF000004B8D38ED3881007038A00000F8A40058
:100F00000038C021AAB0C4000038C00000B0C4003E
:100F10000638C0000178C6F80664C6007F60C6F0D7
:100F20007038E000004B8D382138600000E8010087
:100F3000907C0803A6382100804E80002038600095
:100F4000004E8000202C0300004082001C3860000E
:100F5000017863F8066463007F6063F80C388000F2
:100F600001908300104E800020F821FF317C0802A0
:100F7000A6F80100E0FBE100C8388100704B9B49F6
:100F8000D93BE000017BFFF8063880000267E300F0
:100F90007F6063F7C49083000067FF007F63FFF802
:100FA0000CE87F00002C2300004182000C388000F8
:100FB000274B86333138800027386008004B862E57
:100FC000E5F87F0000E88100704B84E141E86100B2
:100FD00070388000274B86330DE87F00004B84E19A
:100FE00055E89F00007C641A14F87F000838600000
:100FF00000EBE100C8E80100E0382100D07C0803E4
:10100000A64E8000203BE000017BFFF80667FB0056
:101010007F637BF824EB5B0000283A0000418200EC
:101020004C7FA3EB78E89A0000282400004182005E
:101030003C80BA00104B84E1292823000040820044
:101040002480BA00107C9D2A14E87A00087C7D1B5D
:101050007880BA00147C632A144B84E0B148000005
:10106000D83B5A00184BFFFFBC67E4007F6084F850
:101070006638A000094B84E0E92823000040820084
:101080006867FA007F635AF85EEB7A0000283B003D
:10109000004082002438800027386008004B862EEC
:1010A00005F87A00007C7B1B7867E4007F6084F899
:1010B000704B84E059387B000B67E5007F60A5F832
:1010C0000CE8850000282400004182000C7C9B2352
:1010D00078E8650008389D00094B84E0317F7DDBAE
:1010E00078418200547FA3EB787FE4FB786484002E
:1010F0007F6084F85038A000094B84E06528230005
:10110000004082003467FF007F63FFF80C807F009F
:10111000102803000041820020E87F0000282300FF
:101120000041820014E87F0008389D00094B84DFED
:10113000DDEBBF00007F84E3787FA3EB784B84DF97
:10114000F54BAABCCC7C0802A6F821FE61FB61002D
:1011500078FB810080FBA10088FBC10090FBE100CF
:1011600098F80101B07C7D1B787C9E23783BE000E1
:10117000017BFFF806EB829600EB9C0068EB9C007D
:1011800018EB620F08E93D001881290030792984A5
:10119000022C09002940820058E89C00107885C183
:1011A000E478A546202C0500FF41820018608400E9
:1011B00003F89C001038600006907E000048000094
:1011C0001460840002F89C00103860002C907E00AF
:1011D0000080BC0004E89C0008E87B00007D232A16
:1011E00014F93B00004B87CC51480000EC7FA3EB87
:1011F000787FC4F3784B84F4417FFDFB7867BD00B2
:101200007F63BDF820807D000080BC00047C632AE1
:1012100014907D0000E89C00107885C1E478A54614
:10122000202C0500FF408200B0E87B0000388000E1
:101230000038C000007CE3221480A700007CC62A8E
:101240007838840004282404004082FFEC807D006C
:101250000078C607C67CC61B7838600000907D0009
:10126000007FE7FB7864E7007F60E7F734E867001A
:1012700000282300004182006038E700107C233002
:10128000404082FFECE8A7FFF8E8FB000080650023
:101290000028030000418200402803000141820031
:1012A000202803000241820028808500047C633AE4
:1012B000149083000038A500084BFFFFD480650020
:1012C000047CA51A1438A500084BFFFFC438A500FC
:1012D000084BFFFFBC38600000EB610078EB810039
:1012E00080EBA10088EBC10090EBE10098E80101E0
:1012F000B0382101A07C0803A64E8000207C0802A3
:10130000A6F821FF61FB610078FB810080FBA10052
:1013100088FBC10090FBE10098F80100B03BE000C1
:10132000017BFFF80667FB007F637BF82C839B0043
:1013300000281C00004182006C281C00084080002E
:10134000B828230001408200B02824000041820018
:101350000C3B9C0001939B0000EB9B00087C24E06D
:1013600040408200943B800001939B000067E400B2
:101370002E6084B128EB9B0010FB840030EB9B00B7
:1013800018FB84003867FC007F639CF010FB84012D
:10139000203B800000939B00003860010048000063
:1013A00034706300FF2823000A4080005867FB0068
:1013B0007F637BF87C787C1F247F7BE214EBBB008F
:1013C000007C8323787CA42B787CC533784800008C
:1013D0003DEB610078EB810080EBA10088EBC10060
:1013E00090EBE10098E80100B0382100A07C0803F0
:1013F000A64E8000203C608001606300034BFFFF2D
:10140000D43860FFFF4BFFFFCC7FA903A64E8004BA
:101410002067FB007F637BF82CF87B00083B800093
:1014200001939B000067E4002E6084B128E864010A
:1014300028EB840030F8640030FB9B0010EB840044
:1014400038F8640038FB9B0018F86401203860000D
:10145000004E800020386001004E8000204B87C97C
:10146000D84B84DAFC7C6903A67C8323787CA42B8C
:10147000784E8004204B862A2C4B862E68386000DC
:1014800000396000FF4400002267FB007F637BF8A7
:101490004C907B0000386000004E8000207C641B74
:1014A0007867FB007F637BF824E87B0000F89B00F3
:1014B000004E800020392000017929F806652900B6
:1014C0007F6129F84C80090000280000014182F961
:1014D0004C280000024182F94CE92296887C0802DF
:1014E000A64B850F10392000017929F806652900DF
:1014F0007F6129F84C80090000280000004082F933
:101500001CE92296887C0802A64B850EE83FE00085
:101510000163FF90047C1F18004082002C3BC00038
:10152000819BC40003E80100C0EBA10098EBC1005F
:10153000A07C0803A6EBE100A8382100B0386000C9
:10154000004E8000207C7E1B784BA7486CA0556F16
:101550003D002CB8FD80000000007FF77C8C0A94D1
:101560008C000D99B180000000007FF7A4A2BC1A86
:101570005600052ADC80000000007FF7E86B702829
:10158000020002001780000000007FF798000000B2
:1015900000000000000030535438600082005F3FBC
:1015A000C038600001005F3FC44E80002000000092
:1015B000000002EEF060000000000000000022B811
:1015C000885F746F6F0022B88C6C322E780022B85E
:1015D000906D6C23720022B8946F6F74000000004D
:1015E0000100000018002367E82F64657600236778
:1015F000EC5F626476002367F0642F5053000000B4
:1016000000000D68B85F746F6F000D68BC6C322EFF
:1016100078000D68C06D6C2372000D68C46F6F7424
:1016200000000000000000000000000000000000BA
:1016300000000000000000000000000000000000AA
:10164000000000000000000000000000000000009A
:10165000000000000000000000000000000000008A
:101660000000000000000000022F6465765F6264E5
:101670007664006D6F640000000000000000002F21
:101680006170705F686F6D65002F6465765F75735C
:10169000623030300080000000007FF5F8800000EC
:1016A00000007FF63C80000000007FF644800000D0
:1016B00000007FF64880000000007FF64C800000AC
:1016C00000007FF65C80000000007FF66080000074
:1016D00000007FF66480000000007FF6708000004C
:1016E00000007FF68480000000007FF63C000000D0
:1016F00000000000000000000000000000000000EA
:1017000000000000000000000000000000000000D9
:1017100000000000000000000000000000000000C9
:1017200000000000000000000000000000000000B9
:1017300000000000000000000000000000000000A9
:101740000000000000000000000000000000000099
:101750000000000000000000000000000000000089
:101760000000000000000000000000000000000079
:101770000000000000000000000000000000000069
:101780000000000000000000000000000000000059
:101790000000000000000000000000000000000049
:1017A0000000000000000000000000000000000039
:1017B0000000000000000000000000000000000029
:1017C0000000000000000000000000000000000019
:1017D0000000000000000000000000000000000009
:1017E00000000000000000000000000000000000F9
:1017F00000000000000000000000000000000000E9
:1018000000000000000000000000000000000000D8
:1018100000000000000000000000000000000000C8
:1018200000000000000000000000000000000000B8
:1018300000000000000000000000000000000000A8
:101840000000000000000000000000000000000098
:101850000000000000000000000000000000000088
:101860000000000000000000000000000000000078
:101870000000000000000000000000000000000068
:101880000000000000000000000000000000000058
:101890000000000000000000000000000000000048
:1018A0000000000000000000000000000000000038
:1018B0000000000000000000000000000000000028
:1018C0000000000000000000000000000000000018
:1018D0000000000000000000000000000000000008
:1018E00000000000000000000000000000000000F8
:1018F00000000000000000000000000000000000E8
:1019000000000000000000000000000000000000D7
:1019100000000000000000000000000000000000C7
:1019200000000000000000000000000000000000B7
:1019300000000000000000000000000000000000A7
:101940000000000000000000000000000000000097
:101950000000000000000000000000000000000087
:101960000000000000000000000000000000000077
:101970000000000000000000000000000000000067
:101980000000000000000000000000000000000057
:101990000000000000000000000000000000000047
:1019A0000000000000000000000000000000000037
:1019B0000000000000000000000000000000000027
:1019C0000000000000000000000000000000000017
:1019D0000000000000000000000000000000000007
:1019E00000000000000000000000000000000000F7
:1019F00000000000000000000000000000000000E7
:101A000000000000000000000000000000000000D6
:101A100000000000000000000000000000000000C6
:101A200000000000000000000000000000000000B6
:101A300000000000000000000000000000000000A6
:101A40000000000000000000000000000000000096
:101A50000000000000000000000000000000000086
:101A60000000000000000000000000000000000076
:101A70000000000000000000000000000000000066
:101A80000000000000000000000000000000000056
:101A90000000000000000000000000000000000046
:101AA0000000000000000000000000000000000036
:101AB0000000000000000000000000000000000026
:101AC0000000000000000000000000000000000016
:101AD0000000000000000000000000000000000006
:101AE00000000000000000000000000000000000F6
:101AF00000000000000000000000000000000000E6
:101B000000000000000000000000000000000000D5
:101B100000000000000000000000000000000000C5
:101B200000000000000000000000000000000000B5
:101B30000080000000003DEE7880000000003DEED7
:101B400088800000000033E720E883FFF0E863FFAF
:101B5000F8E8A30018386310007C0428004082FFD6
:101B6000F438C3F0207CC903A64E80042004000092
:101B7000000011241FBECFEFD0E2DEBFCDBF11E0C9
:101B8000A0E0B1E0E2ECFEE200E00BBF02C0079093
:101B90000D92A431B107D9F711E0A4E1B1E001C081
:101BA0001D92A933B107E1F75ED30C945F170C9433
:101BB0000000E0911301FF27E7FDF095E45FFE4F81
:101BC0008F778083E3EEF0E080838081806880837C
:101BD0000895982F809113018917B9F090931301FC
:101BE000E92FFF27E7FDF095DF01A45FBE4F8C9141
:101BF00087FD1C92E45FFE4F80818F778093E30026
:101C00008091E30080688093E30008951F920F9213
:101C10000FB60F9211248F938BEF809385008EE186
:101C20008093840080912701882329F080912701E7
:101C30008150809327018F910F900FBE0F901F90BE
:101C4000189528EE33E0782F709548EC50E06095B9
:101C500005C0CA010197F1F7215030402115310527
:101C6000C1F785B18064872385B988EE93E0FA01D6
:101C70003197F1F70197D9F785B18064862385B94B
:101C800028EE33E0E6CF81E08093E9008091E80020
:101C900085FF18C0909121019923A1F08091220124
:101CA000882339F08091EB0088608093EB001092DC
:101CB00022019093F1008091E8008E778093E800F4
:101CC000109221010895FC01109226011092250125
:101CD00021E030E0C9010E2E02C0880F991F0A943E
:101CE000E2F7809321013197EE0FFF1FDF01A05033
:101CF000BF4F83E091E08D939C93EC5EFE4F318368
:101D000020830895FC01109224011092230121E008
:101D100030E0C9010E2E02C0880F991F0A94E2F725
:101D2000809321013197EE0FFF1FDF01A050BF4FBD
:101D300080E091E08D939C93EC5EFE4F3183208395
:101D40000895FA016091370170913801923081F164
:101D5000993209F4AEC0913009F0B4C080911301FA
:101D60008330D1F084303CF4813081F082308CF4C7
:101D7000882349F0A7C08530A9F0853084F08630EB
:101D800009F0A0C012C048E950E06BC04CEC50E034
:101D900068C046EE50E065C04EE051E062C04DE6DE
:101DA0005BE05FC04BED5BE05CC04DE05CE059C0C8
:101DB00090911301933009F440C094303CF4913079
:101DC000A1F092307CF5992359F07CC0953009F44C
:101DD00068C095300CF441C0963009F073C066C0FD
:101DE0004AEA50E029E130E071C0843008F06AC06E
:101DF0006830710529F041E35CE020E03FE004C079
:101E00004EED50E028E030E0833009F05FC06930EB
:101E1000710508F45BC085E0809320018AE080931F
:101E2000270154C088E0809320018FE08093270130
:101E300048EF50E026E130E049C0813049F4693094
:101E4000710530F08BE0809320018AE080932701B8
:101E500040E251E02DE43AE039C0882329F44FE70D
:101E60005BE022E130E032C0813059F46830710526
:101E700019F049E95BE0F5CF41E95BE028E030E0AB
:101E800025C08230F9F46930710530F080E180932B
:101E9000200184E1809327014BEA5BE020E330E0FE
:101EA00015C04DEE5BE020E230E010C04FE15CE099
:101EB000D8CF80911301882329F443EC50E029E026
:101EC00030E004C040E050E020E030E05183408347
:101ED000C9010895089508950895089508950895ED
:101EE00081E061EC42E045D3882329F480E090E072
:101EF00060E470E0A6DE82E060EC42E03AD3882342
:101F000029F480E090E060E470E09BCE08951F9398
:101F1000809113018630A1F4809132018A3A09F050
:101F200023C18091E800877F8093E8008091E800DA
:101F30008E778093E800A1D38FE18093200119C1AF
:101F4000853059F4809132018B3009F00DC18091B8
:101F5000E800877F8093E8002EC0882309F004C141
:101F600080913101803A71F580913201882309F026
:101F7000FBC08091330190913401892B09F0F4C0AA
:101F80008091350190913601892B09F0EDC0809147
:101F9000370190913801049709F0E6C08091E8007C
:101FA000877F8093E8001092F1001092F100109268
:101FB000F1001092F1008091E8008E778093E800A4
:101FC0005CD3D7C0833AB1F580913201882309F000
:101FD000CBC08091330190913401892B09F0C4C0AA
:101FE0008091370190913801049709F0BDC0E091CC
:101FF00035018E2F8150863008F0BBC08091E800FB
:10200000877F8093E800F0E03197EE0FFF1FDF013C
:10201000A050BF4F8C9111969C918093F1009093AA
:10202000F100EC5EFE4F808191818093F1009093EE
:10203000F100C1CF833209F097C080913201833023
:1020400009F048C08091370190913801892B09F03F
:1020500041C010913501812F8150863008F089C030
:102060008091E800877F8093E8008091E8008E7778
:102070008093E80002D38091330190913401843041
:10208000910591F0089709F074C0163009F071C0FD
:1020900080912001882309F06CC082E080932001A8
:1020A0008FE08093270165C0E12FF0E081E090E0B0
:1020B000012E02C0880F991F0A94E2F78093210134
:1020C000EE0FFF1FEE5EFE4F808191818061918354
:1020D00080834FC080913201813009F045C08091EA
:1020E000370190913801892B09F03EC010913501DC
:1020F000812F8150863008F03CC08091E800877FB6
:102100008093E8008091E8008E778093E800B5D254
:1021100080913301909134018031910519F04497F9
:1021200041F511C0212F30E0F901EE0FFF1FEE5EE7
:10213000FE4F808191818E7F918380833093240133
:102140002093230116C0212F30E0F901EE0FFF1F6D
:10215000EE5EFE4F808191818F7E918380833093EC
:1021600026012093250105C080E490E060E070E046
:1021700068DD1F91089582E08093E9008091E80076
:1021800085FF1CC088E090E060E070E057D6809149
:10219000E8008B778093E80080912A0190912B01D1
:1021A000089690932B0180932A018034910534F096
:1021B00083E18093200182E38093270181E0809373
:1021C000E9008091E80085FF2DC0809120018331D6
:1021D00049F580912701882329F580912801909164
:1021E000290180349105F4F48F5C944E68E070E02E
:1021F00040E050E0E2D58091E8008E778093E800DF
:10220000809128019091290108969093290180934B
:1022100028018034910534F084E1809320018FE01F
:1022200080932701089584B7877F84BF88E10FB624
:10223000F89480936000109260000FBE80E090E000
:1022400020E80FB6F89420936100809361000FBEE0
:1022500083E08093810081E080936F00269A2E9A1C
:10226000A7D2789408952F923F924F925F926F92E7
:102270007F928F929F92AF92BF92CF92DF92EF9216
:10228000FF920F931F93CFDF2E981092200180E0D2
:10229000A0DCF7E02F2E0FE0E1E17E2E72E1672E49
:1022A00065E1562E56E1452E4DE2342E37E1C32E20
:1022B00028E1B22E14E199E1A92E8AE1982EBBE122
:1022C0008B2EACE1FA2EFDE1EF2EEEE1DE2E8091B9
:1022D0001301882309F4D7DC80911301853009F4B8
:1022E0004ADFDAD580912001823051F480912701B4
:1022F000882331F481E090E0E6DC83E080932001E4
:1023000080912001833059F480912501909126011C
:10231000019729F481E05DDC84E0809320018091C5
:102320002001853059F480912701882339F451DC4C
:1023300082E090E0C8DC86E080932001809120015B
:10234000863051F48091250190912601029721F465
:1023500082E03FDC2092200180912001883059F4F6
:1023600080912701882339F434DC83E090E0ABDCF2
:1023700089E08093200180912001893059F4809177
:10238000250190912601039729F483E022DC8AE05D
:1023900080932001809120018B3059F48091270196
:1023A000882339F416DC82E090E0ACDC8CE080938A
:1023B0002001809120018C3059F48091230190916B
:1023C0002401029729F48DE08093200100932701D6
:1023D000809120018D3051F480912701882331F4C0
:1023E00084E090E070DC8EE08093200180912001F9
:1023F0008E3051F48091250190912601049721F4AB
:1024000084E0E7DB0093200180912001803169F4B2
:1024100080912701882349F4DCDB81E0809322014D
:1024200085E090E050DC70922001809120018131A4
:1024300051F48091250190912601059721F485E0C2
:10244000C8DB6092200180912001843169F4809181
:102450002701882349F4BDDB81E08093220183E0DA
:1024600090E050DC5092200180912001853151F4A0
:102470008091230190912401039721F4409220013F
:102480003092270180912001863151F480912701FB
:10249000882331F49EDB85E090E034DCC09220019B
:1024A00080912001873151F4809123019091240182
:1024B000059721F4B092200110932701809120010B
:1024C000883151F480912701882331F482DB84E044
:1024D00090E018DCA092200180912001893151F414
:1024E0008091230190912401049721F4909220017E
:1024F00010932701809120018A3151F480912701A6
:10250000882331F466DB81E090E0FCDB80922001DF
:10251000809120018B3151F480912301909124010D
:10252000019721F4F092200110932701809120015E
:102530008C3151F480912701882331F44ADB86E005
:1025400090E0C1DBE0922001809120018D3151F4B7
:102550008091250190912601069721F486E039DBD0
:10256000D0922001809120018F3109F0B0CE2E9AB7
:10257000AECE1F93DF93CF93CDB7DEB72E970FB6B6
:10258000F894DEBF0FBECDBF182F742F9E012F5FB2
:102590003F4FFE013896D901AF018A2F821B8093ED
:1025A000E9008091EC008D938091ED008193A41758
:1025B000B50799F7812F90E0FE01E80FF91F6183BD
:1025C000A80FB91F7C9391E09093E9001092F0005E
:1025D0001092E8001092ED008091EB008E7F8093C6
:1025E000EB009F5F973081F720E030E0BE01685F2D
:1025F0007F4FAE014F5F5F4FFB01E20FF31F9081F2
:1026000091FF15C02093E9008091EB0081608093D9
:10261000EB00FA01E20FF31F80818093EC009093AE
:10262000ED008091EE0087FD02C080E008C02F5FC2
:102630003F4F2730310501F71093E90081E02E96D6
:102640000FB6F894DEBF0FBECDBFCF91DF911F91C3
:1026500008951092F40090E09093E9001092F00039
:102660001092E8001092ED008091EB008E7F809335
:10267000EB009F5F973081F70895809131018823A7
:102680009CF404C0809130018823B9F08091E80067
:1026900082FFF8CF8091E8008B778093E80008955F
:1026A00080913001882349F08091E80080FFF8CFC5
:1026B0008091E8008E778093E800089594E68091F9
:1026C000EC0080FF05C08091E80080FF05C025C0B8
:1026D0008091E80082FD21C080913001882311F4AF
:1026E00082E0089580913001853011F483E00895EF
:1026F0008091EB0085FF02C081E008958091E100A8
:1027000082FFDDCF8091E1008B7F8093E1009923F0
:1027100011F484E008959150D2CF80E0089557D00D
:102720005ED01092300110922E0110922D01109265
:102730002C018CE089BD89B5826089BD09B400FE99
:10274000FDCF8091D800982F9F779093D800806814
:102750008093D8008091D70081608093D7008091CA
:10276000D8008F7D8093D8008091E0008B7F80938C
:10277000E0008091E0008E7F8093E0008091E10096
:102780008E7F8093E1008091E20081608093E2007F
:102790008091E100877F8093E1008091E200886072
:1027A0008093E2008091D80081608093D8000895E2
:1027B000E7EDF0E0808180688083B1DFE8EDF0E054
:1027C00080818061808381E080932F010895E8ED0E
:1027D000F0E080818C7F80831092E2000895109257
:1027E000DA001092E10008951F920F920FB60F9237
:1027F0000BB60F9211242F933F934F935F936F93D8
:102800007F938F939F93AF93BF93EF93FF938091A9
:10281000DA0080FF15C08091D80080FF11C0809140
:10282000DA008E7F8093DA008091D90080FF05C0A6
:1028300081E0809330014EDB03C0109230014BDB0E
:102840008091E10080FF1DC08091E20080FF19C0EF
:102850008091E1008E7F8093E1008091E2008E7F85
:102860008093E2008091E20080618093E200809199
:10287000D80080628093D80019BC85E08093300135
:102880002BDB8091E10084FF2AC08091E20084FF6D
:1028900026C08CE089BD89B5826089BD09B400FE7F
:1028A000FDCF8091D8008F7D8093D8008091E1008A
:1028B0008F7E8093E1008091E2008F7E8093E20022
:1028C0008091E20081608093E20080912E01882354
:1028D00011F483E001C084E080933001FEDA80913E
:1028E000E10083FF23C08091E20083FF1FC080913D
:1028F000E100877F8093E10082E0809330011092B5
:102900002E018091E1008E7F8093E1008091E200B2
:102910008E7F8093E2008091E20080618093E200EC
:1029200098DE80E060E042E024DED8DA8091E100C9
:1029300082FF0AC08091E20082FF06C08091E10020
:102940008B7F8093E100CBDAFF91EF91BF91AF9144
:102950009F918F917F916F915F914F913F912F91B7
:102960000F900BBE0F900FBE0F901F9018951F93E6
:10297000DF93CF93CDB7DEB7AC970FB6F894DEBF39
:102980000FBECDBFE1E3F1E08091F100819321E042
:10299000E933F207C9F780913101309132013530C6
:1029A00009F487C0363040F43130C9F1313070F06D
:1029B000333009F028C133C0383009F4ECC0393065
:1029C00009F4FBC0363009F01EC192C0803821F0F6
:1029D000823809F018C108C080912D01882311F0B8
:1029E00093E013C091E011C080913501877080930E
:1029F000E9008091EB0090E025E0969587952A9577
:102A0000E1F7982F91701092E9008091E800877F9C
:102A10008093E8009093F1001092F100C7C08823E2
:102A200019F0823009F0EFC090E08F71907000973C
:102A300021F0029709F0E8C00CC080913301813089
:102A400009F0E2C010922D01333069F580932D0119
:102A50002AC080913301882331F5209135012770F8
:102A600009F4D2C02093E9008091EB0080FFCCC034
:102A7000333021F48091EB00806213C08091EB0031
:102A800080618093EB0081E090E002C0880F991F85
:102A90002A95E2F78093EA001092EA008091EB0019
:102AA00088608093EB001092E9008091E800877FB6
:102AB00080C0882309F0A7C0109133018091E800FD
:102AC000877F8093E800D9DD05C08091300188239D
:102AD00009F49AC08091E80080FFF7CF812F8F77AB
:102AE00011F492E001C093E09093300162D88CC061
:102AF000809133019091340123E08C3D920799F548
:102B00005FB7F894DE0115964EE020E030E061E218
:102B1000E42FF0E060935700849120FF03C082957A
:102B20008F704F5F982F9F70892F805D8A3308F0D8
:102B3000895F8C9311961C9211972F5F3F4F1296CD
:102B40002431310529F75FBF8AE28B8383E08C83D0
:102B50008091E800877F8093E800CE0103966AE2C7
:102B600070E06AD012C060913501AE014F5F5F4FD7
:102B7000E8D8BC01009709F447C08091E800877F3E
:102B80008093E80089819A81B7D08091E8008B77A3
:102B90008093E80039C08038B1F58091E800877FE4
:102BA0008093E80080912E018093F1008091E800ED
:102BB0008E778093E80061DD27C0882321F580E0CF
:102BC00091E060E0AE014F5F5F4FBBD8892BE1F031
:102BD00090913301E981FA817196E491E917A0F0AF
:102BE0008091E800877F8093E80090932E0145DD77
:102BF00080912E01882311F483E001C084E080934A
:102C000030016ED901C083D98091E80083FF0AC0EA
:102C10008091EB0080628093EB008091E800877FD9
:102C20008093E800AC960FB6F894DEBF0FBECDBF20
:102C3000CF91DF911F9108959C01409137015091F0
:102C400038014617570718F4F90120E03DC0611517
:102C5000710511F0AB01F8CF8091E8008E77809379
:102C6000E80040E050E0F0CF8091E80083FF02C030
:102C700081E008958091E80082FD34C080913001A8
:102C80008823B1F1809130018530A1F18091E80075
:102C900080FF1AC08091F2009091F300982F06C037
:102CA00081918093F100415050409F5F4115510543
:102CB00011F09830A8F320E0983009F421E08091D9
:102CC000E8008E778093E8004115510569F62223CC
:102CD00059F608C080913001882351F0809130016D
:102CE000853041F08091E80082FFF4CF80E00895C4
:102CF00082E0089583E008959C014091370150914E
:102D000038014617570710F490E03FC06115710570
:102D100011F0AB01F9CF8091E8008E778093E80045
:102D200040E050E0F1CF8091E80083FF02C081E0F5
:102D300008958091E80082FD36C08091300188239B
:102D4000C1F1809130018530B1F18091E80080FFC0
:102D50001CC08091F2009091F30009C0F9012F5F2F
:102D60003F4FE491E093F100415050408F5F411597
:102D7000510511F0883090F390E0883009F491E02B
:102D80008091E8008E778093E8004115510559F64F
:102D9000992349F608C080913001882351F0809131
:102DA0003001853041F08091E80082FFF4CF80E06F
:102DB000089582E0089583E00895BF92CF92DF9254
:102DC000EF92FF920F931F93CF93DF93F82EE92E8C
:102DD0008B016A0173DCB82E882329F58F2D9E2D77
:102DE0009C01E9011DC08091E80085FD12C0809121
:102DF000E8008E778093E800C114D10431F0F60129
:102E00000995813011F485E00FC058DC882341F02A
:102E10000BC0FE012196E491E093F10001501040B7
:102E20000115110501F78B2DDF91CF911F910F91A6
:102E3000FF90EF90DF90CF90BF900895FF920F9397
:102E40001F93CF93DF93EC018B0138DCF82E88239E
:102E5000D1F01BC08091E80085FD12C08091E80090
:102E60008B778093E8000115110531F0F801099581
:102E7000813011F485E00AC021DC882321F006C0EE
:102E80008091F1002197209729F78F2DDF91CF9125
:102E90001F910F91FF9008951F9380913001882317
:102EA00061F01091E9001092E9008091E80083FF41
:102EB00001C05DDD17701093E9001F910895F8942B
:022EC000FFCF42
:102EC200000100010001000100010001FFFFFFFFFE
:042ED200FFFFFFFF00
:00000001FF
josete2k escribió:Mandeeeeeeeeeeeeeee?????
cmhacks escribió:josete2k escribió:Mandeeeeeeeeeeeeeee?????
cosas del copy y el paste.
Compila este, ya esta preparado
http://rapidshare.com/#!download|21l34| ... .zip|12123
Saludos
PLSRC = port1_config_descriptor.S # jig_payload.S
rockmetal escribió:podria alguien enviar el link para descargar el por1-config_descripto.bin modificado
saludos
model_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
li %r30, 0x81
stb %r30, 3(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
model_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
li %r29, 0x82
stb %r29, 3(%r4)
li %r29, 1
stb %r29, 1(%r4)
stb %r29, 7(%r4)
li %r29, 9
stb %r29, 5(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
cmhacks escribió:Cierto, tengo 2348238423 sources descargados y nada ordenados
Adjunto la compilación del payload en cuestión para varias placas.
Saludos
khaosjimena escribió:Pone que esta en contra, mensajes dirigidos a SONY para la anulación y ¿ahora da pistas de como hacerlo un poco más difícil de detectar?
No lo entiendo y la verdad es que no me fío, ¿Quizás esto delata mas todavía el payload pues ha dejado muy claro su enfado?
Derhelm escribió:khaosjimena escribió:Pone que esta en contra, mensajes dirigidos a SONY para la anulación y ¿ahora da pistas de como hacerlo un poco más difícil de detectar?
No lo entiendo y la verdad es que no me fío, ¿Quizás esto delata mas todavía el payload pues ha dejado muy claro su enfado?
A que te refieres Khaos?
cmhacks escribió:Derhelm escribió:khaosjimena escribió:Pone que esta en contra, mensajes dirigidos a SONY para la anulación y ¿ahora da pistas de como hacerlo un poco más difícil de detectar?
No lo entiendo y la verdad es que no me fío, ¿Quizás esto delata mas todavía el payload pues ha dejado muy claro su enfado?
A que te refieres Khaos?
Lo único que he hecho math es denunciar las formas de este payload, ya que es una solución bastante chapucera y la cual tiene un riesgo muy alto.
Banearan si o si con una simplicidad pasmosa.
El online se puede convertir en el corral de la pacheca llena de cheteros.
Igualmente ha indicado la forma de hacerlo un poco mas seguro ( esto esta comprobado ) pero no es un método infalible.
Saludos
cmhacks escribió:rockmetal escribió:podria alguien enviar el link para descargar el por1-config_descripto.bin modificado
saludos
Cambia estomodel_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
li %r30, 0x81
stb %r30, 3(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABS(0x273F98 + 4)
Por estomodel_set:
lis %r31, 1
ori %r31, %r31, 0x9004
cmpw %r31, %r3
bne loc273650
li %r29, 0x82
stb %r29, 3(%r4)
li %r29, 1
stb %r29, 1(%r4)
stb %r29, 7(%r4)
li %r29, 9
stb %r29, 5(%r4)
ld %r0, 0xC0(%r1)
ld %r29, 0x98(%r1)
ld %r30, 0xA0(%r1)
mtlr %r0
ld %r31, 0xA8(%r1)
addi %r1, %r1,0xB0
li %r3, 0
blr
loc273650:
mr %r30, %r3
b ABSOLUTE_MEM2(patch_func20 + 4)
Saludos
Pero cmhacks, tu lo has hecho de la manera que indica math?
Por cierto, al final me he lanzado y he usado tu ultima compilacion, va al pelo
Me he creado una cuenta nueva para hacerlo, por si me banean la cuenta, espero que no baneen consola
cmhacks escribió:Pero cmhacks, tu lo has hecho de la manera que indica math?
Por cierto, al final me he lanzado y he usado tu ultima compilacion, va al pelo
Me he creado una cuenta nueva para hacerlo, por si me banean la cuenta, espero que no baneen consola
Las compilaciones que he posteado llevan el patch de math, si
Saludos
PD: rockmetal, que bin?? Saludos
rockmetal escribió:cmhacks escribió:Pero cmhacks, tu lo has hecho de la manera que indica math?
Por cierto, al final me he lanzado y he usado tu ultima compilacion, va al pelo
Me he creado una cuenta nueva para hacerlo, por si me banean la cuenta, espero que no baneen consola
Las compilaciones que he posteado llevan el patch de math, si
Saludos
PD: rockmetal, que bin?? Saludos
el bin del port1_config_descriptor.bin
rockmetal escribió:Ok, te explico, tengo un clone del psj y la unica forma de actualizarlo es atraves del por1_config_descriptor (que hermes siempre los da en su open source), el chip que lleva es un atmega16a por tanto no sirven los hex que pesan mas de 16k. tengo el programa para flashear el clone, pero tengo que tener el port1_config_descriptor.bin, no se si me entiendes. en un post que me repondes me indicas que cambie el model_set?
cristiangringo escribió:Alguna posibilidad de un modificado para el psgroopic ?
cmhacks escribió:Dime si te funciona.
Saludos
cristiangringo escribió:cmhacks escribió:Dime si te funciona.
Saludos
No, la consola inicia sin jailbreak. Para mas informacion, yo utilizo pic18f2550 con bootloader.
chofo_260 escribió:]
toma este uso yo en mi psgroovepic amigo