Wednesday, July 20, 2005

Two New Bootloaders

- PSP Hacks have posted news of two new bootloaders out there.
- First is HOOK BOOT v0.10. The ReadMe is in broken English which I cannot understand very well, so I'll just recreate it here (from this post):

"API HOOK monitor & API emulation.

- what is HOOK BOOT ?
It patches BOOT.BIN, and it can hook any API.

1.API monitoring to output DISPLAY or FILE.
To analyze API argument and how to use it.
The place of log file is '“ms0:/LOG.txt'

2.UMD emulation.
It can boot some game from MS, for save battery and fast access.

3.Information on the import function can be known.
To analyze.

-– TECHNOLOGY
It is SYSTEM CALL hook with before load patch and after load patch.

1. before load
The target NID are removed from the file, and filled up in the ENTRY point.

2. after load
The entry points are searched with NID in memory and hook it.

- LIMITATION
1.Now supported non-encrypted ELF only.
2.Now supported single module only,sub modules can'’t hook.
3.The UMD emulation is still developing,not a perfect.

-– How to use
1.copy the PSP ELF to '‘ms0:/PSP_GAME/SYSDIR/BOOT.BIN'’.
2.copy the HOOK BOOT to '‘ms0:/PSP/GAME/xxxx/EBOOT.BIN'’ (for PSP Ver.1.00).
3.execute '‘HOOK BOOT'’ from PSP.

-– UMD emulation
1.path is changed from '‘disc0:' to '‘fatms0:' dynamically.
2.loadable KernelModule from MS.
3.emulate the UMD Drive condition.

- FUTURE PLAN
1.A free file name replacement.
The change of the game directory name.
The share of the movie and sound file to make it the smallest.

2.Only dynamic hook.(hope)
If SYSTEM CALL can be replaced or hooked in kernel,
limitation 1 and 2 can be removed.

- Compatibile list
Working
PUZZLE BOBBLE POCKET
KOTOBANO PUZZLE MOJIPITTAN
KOLLON
PUYO PUYO FEAVER
SANGOKUSI-V
WIPE OUT PURE
MAJONG FIGHT CLUB
VANPIRE CHRONIKLE (checked boot and top menu only)

Not working
NAMCO MUSIUM : next version
MINNA NO GOLF PORTABLE : 'UMD1:' RAW data is necessary,protect check?
METAG MEAR AC!D : Probably, a cause is a no-hook the sunmodule '“kjfs.prx'
PIPOSARU ACADEMIEA : It hangs up soon,no idea
NEED FOR SPEED UNDERGROUND : tried a little
RIDGE RACERS : tried a little

- Second is the PSPX Loader from FPL Crew.
- What makes this one different is that it patches the 1.50 PSP kernel so as to allow modules, (the PSP equivalent of DLL files) to be loaded from the Memory Stick. One of Sony's anti-hacking measures was to only allow module loading from the UMD drive, but now you can just patch the BOOT.BIN to look at the MS slot ("ms0:/")instead to use with this loader.
- This is better because is saves preloading all the necessary modules ahead of time in kernel mode, just let the game do it itself. This makes this loader more compatible with features such as sound and WiFi (in theory.)
- PSP 1.0 compatibility is coming in the next release.

No comments: