Editing Talk:Patches

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
==Patches Sandbox==
There is a wiki page for patch tests that is not tracked by the wiki search engine, to access it click in the next link, and feel free to use it for any experiments:
See: [http://www.psdevwiki.com/ps3/Patches/sandbox patches sandbox]
==Shop firmware on Retail console==
==Shop firmware on Retail console==


Line 227: Line 222:
=== Conclusion / Status ===
=== Conclusion / Status ===


Although it is possible to add as a task, it is not recommended in general. There is brick risk (on 3.55 reported blackscreen brick -> seems to be related to self_rebuilder bug).
Although it is possible to add as a task, it is not recommended in general. There is brick risk.


   <mall0ry> eussNL, that appldr fself patch is risky because it is patching a branch target
   <mall0ry> eussNL, that appldr fself patch is risky because it is patching a branch target


== JFW MA-1 3.56 "bad idea" ==  
== JFW MA-1 3.56 "bad idea" ==  
Line 309: Line 305:


Request for anyone that installed this FW : lv1 and lv2 dump (can be done e.g. with glevand' PKGs).
Request for anyone that installed this FW : lv1 and lv2 dump (can be done e.g. with glevand' PKGs).
<!--//
http://www.mediafire.com/?8yhidf1a8ng0v5w LV1
http://www.mediafire.com/?dajss2b3c3hyj5v LV2
(TechnoDon) //-->
=== JFW-DH added custom keys ===
<pre>lv1-iv:    148E7A251EC03A2FA88EFCC13D882D4B
lv1-key:  962E952E25236322FE415F6EAC9DEC6BB2AD93CA1FE6B4B82C9A21510BE4B76D
lv1-pub:  625D1DF4C3264BBA9FC17A4437BA42591585A5ECCC6F3042DB3A80CBBC0426DAF33549C537AA7782</pre>
<pre>lv2-iv:    7E90800265795153BAB81C5E74623639
lv2-key:  0829876E2B9BAB777F5710DABB9AFC86510FA598AC98056DCD4F7A17E68CC479
lv2-pub:  625D1DF4C3264BBA9FC17A4437BA42591585A5ECCC6F3042DB3A80CBBC0426DAF33549C537AA7782</pre>
<pre>app-iv:    20CF5F16EC9ABBD5ECEE9A957B4CD543
app-key:  6DEC0F32E7403B6302122678A8DB1B41EEAB9A8449CFBD241C7FEAFEFD609094
app-pub:  71F46AC33FF89DF589A100A7FB64CEAC244C9A0CBBC1FDCE80FB4BF8A0D2E66293309CB8EE8CFA95
app-priv:  0010818ED8A666051C6198662C3D6DDE2CA4901DDC
app-ctype: 0x12</pre>
<!--// http://pastie.org/private/nnaxm6hvrdyo42hxqbqyvq ; see also #ps3dev backlog //-->
=== Preloader Advance : Another bad idea? ===
http://jaicrab.blogspot.com/2011/12/ps3-preloader-advance.html
Backuprflash.bin
As usual the NAND dumps are missing things because of lv1 masking first section:
====NAND: missing bootldr at offset 0x0 and 0xF000000====
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00000010  00 00 00 00 0F AC E0 FF 00 00 00 00 DE AD BE EF  .....¬àÿ....Þ­¾ï
00000020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 00  ..............v.
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
0F000000  8C A5 FA 66 E4 E1 F4 05 ED 79 5B 90 2D 1B FE C6  Œ¥úfäáô.íy[.-.þÆ
0F000010  23 C8 CD 66 8D 6C F4 76 21 E3 D7 FD 9C 2D FA 37  #ÈÍf.lôv!ã×ýœ-ú7
0F000020  21 3C C7 74 D9 57 B1 AA 97 74 4F F6 0E 73 B6 79  !<ÇtÙW±ª—tOö.s¶y
====NAND: missing any bootldr header====
00 00 2A 3F
00 00 2A 2A
00 00 30 44
00 00 2A 37
00 00 2E 8C
00 00 2F 1C
00 00 2E F4
00 00 2E E3
00 00 2E AB
00 00 2E B3
00 00 2F 13
00 00 2F 3B
00 00 2F 4B
00 00 2F 53
00 00 2F 5B
00 00 2F FB 
====NOR: missing second region at offset 0xF00000====
On NOR dumps, the [[Flash:Second_Region|second region]] is missing:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00F00000  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00F00010  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00F00020  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
  ....
00F1FFF0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00F20000  43 45 4C 4C 5F 45 58 54 4E 4F 52 5F 41 52 45 41  CELL_EXTNOR_AREA
====Conclusion====
not suitable as debrick dump with hardware flasher.
;Option:
:NAND:
:use flasher with option to start writing at offset 0x40000 (where Backuprflash.bin 0x0 begins) and thus skip overwriting first bootldr section.
:NOR:
:use flasher to stop writing after offset 0xEFFFFF
;NAND - Partial extraction:
# Add 0x40000 of 00 bytes at offset 0x0
# After that, use flowrebuilder to extract part of the data inside the dump (missing bootldr!)
asecure_loader\metldr
ros\[versionstring-ROS0 $]\[coreosfiles $]
ros\[versionstring-ROS1 $]\[coreosfiles $]
cCSD
cISD
creserved_0
cvtrm
eEID
trvk_pkg
trvk_prg
== OtherOS patches ==
=== 3.55 LV1 patches ===
http://pastie.org/private/zvohgrd80htu7s47zqu0yg
=== 3.55 LV2 patches ===
http://pastie.org/private/qrirgh0qjsoo4acbuiag
=== 3.15 LV1 patches ===
http://pastie.org/private/imxnatxezislsxjmsci6gg (including 'in hvdump' offsets)
== dexl0ve ==
=== dexl0ve lv2_kernel ===
http://pastie.org/private/zbhkmnldresx3cdxfufqkg
== Rebug spoofer ==
Index.dat and Version.txt from to spoof firmware (.dat is always static key, so no need for resigning)
vsh.self patches: http://pastie.org/3495642 (CEX 3.55 OFW vs Rebug Spoofer 4.00)
=== PSN enabled spoofer ===
vsh.self patches: http://pastie.org/private/94i2skcva5qvkypdtx4g6w (CEX 3.55 OFW vs Rebug Spoofer 4.11)
=== PSoN!/PS3ITA rebug based variant ===
http://www.ps3hax.net/showthread.php?t=39462<br />
vsh.self patches: http://pastie.org/private/lugpsiiaww1upltdlebr5w (CEX 3.55 OFW vs PS3ITA and Rebug Spoofer 4.11)
== PS2 on non BC enabler ==
game_ext_plugin
  set search  "\x88\x1f\x00\x06\x3b\x80\x00\x01"
  set replace "\x88\x1f\x00\x02\x3b\x80\x00\x01"
   
sysconf_plugin
  set search  "\x88\x1c\x00\x06\x54\x00\x07\xfe"
  set replace "\x88\x1c\x00\x02\x54\x00\x07\xfe"
premo_game_plugin
  set search  "\x41\x9e\x00\x4c\xe8\x01\x00\xa0\x38\x60\x00\x00"
  set replace "\x41\x9e\x00\x4c\xe8\x01\x00\xa0\x38\x60\x00\x01"
premo_plugin
  set search  "\x41\x9e\x00\x4c\xe8\x01\x00\xa0\x38\x60\x00\x00"
  set replace "\x41\x9e\x00\x4c\xe8\x01\x00\xa0\x38\x60\x00\x01"
http://pastie.org/4392598
== appldr 3.55 add 3.56/3.60 keys ==
As used in [http://pastie.org/4458820 mfw\tasks\add_360keys_to_appldr355.tcl] and [https://web.archive.org/web/*/http://ps3devwiki.com/files/firmware/MFW-CEX/Downgrader/Rogero-V3.5/ Rogero V3.5]
appldr.elf 3.55 patches : http://pastie.org/4458799
== Install Packages on 4.xx ==
REBUG style IPF patches for CEX/LITE
=== explore_plugin.sprx ===
http://www.mediafire.com/convkey/e04d/2iar0so3dszczxfzg.jpg
*ex)4.75/4.76
Search  4817487D 5460073E3C800025
Replace 38600001 5460073E3C800025
Search  4807464D 5460073E7FA4EB78
Replace 38600001 5460073E7FA4EB78
*Note
This doesn't require an extra patch on explore_category_game,
If you use this file from DEX FW, you won't need this patch as it's enabled by default.
Reversed by Cyberskunk
== Install Packages on 4.3x ==
=== explore_category_game.prx ===
set search  "\xF8\x21\xFE\xD1\x7C\x08\x02\xA6\xFB\x81\x01\x10\x3B\x81\x00\x70"
set replace "\x38\x60\x00\x01\x4E\x80\x00\x20\xFB\x81\x01\x10\x3B\x81\x00\x70"
=== explore_plugin.sprx ===
set search  "\xF8\x21\xFE\xD1\x7C\x08\x02\xA6\xFB\x81\x01\x10\x3B\x81\x00\x70"
set replace "\x38\x60\x00\x01\x4E\x80\x00\x20\xFB\x81\x01\x10\x3B\x81\x00\x70"
=== category_game.xml ===
Add to end like always:
<syntaxhighlight lang="xml">
  <View id="seg_gamedebug">
      <Attributes>
        <Table key="game_debug">
            <Pair key="icon_rsc"><String>tex_album_icon</String></Pair>
            <Pair key="title_rsc"><String>msg_tool_app_home_ps3_game</String></Pair>
            <Pair key="child"><String>segment</String></Pair>
        </Table>
      </Attributes>
      <Items>
        <Query class="type:x-xcb/game-debug" key="game_debug"  attr="game_debug" />
      </Items>
  </View>
  <View id="seg_package_files">
      <Attributes>
        <Table key="host_device">
            <Pair key="icon_rsc"><String>tex_album_icon</String></Pair>
            <Pair key="title_rsc"><String>msg_tool_install_file</String></Pair>
            <Pair key="child"><String>segment</String></Pair>
            <Pair key="ingame"><String>disable</String></Pair>
        </Table>
      </Attributes>
      <Items>
        <Query
            class="type:x-xmb/xmlpackagefolder"
            key="host_device" attr="host_device"
            src="#seg_packages"
        />
      </Items>
  </View>
  <View id="seg_packages">
      <Items>
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_host" src="host://localhost/q?path=/app_home/&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_bdvd" src="host://localhost/q?path=/dev_bdvd&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_ms" src="host://localhost/q?path=/dev_ms&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb0" src="host://localhost/q?path=/dev_usb000&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb1" src="host://localhost/q?path=/dev_usb001&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb2" src="host://localhost/q?path=/dev_usb002&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb3" src="host://localhost/q?path=/dev_usb003&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb4" src="host://localhost/q?path=/dev_usb004&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb5" src="host://localhost/q?path=/dev_usb005&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb6" src="host://localhost/q?path=/dev_usb006&suffix=.pkg&subclass=x-host/package" />
        <Query class="type:x-xmb/xmlpackagefolder" key="host_provider_usb7" src="host://localhost/q?path=/dev_usb007&suffix=.pkg&subclass=x-host/package" />
      </Items>
  </View>
</syntaxhighlight>
Add into place where you want app_home and install package to show up:
<syntaxhighlight lang="xml">
        <Query
            class="type:x-xmb/folder-pixmap"
            key="seg_gamedebug"
            src="#seg_gamedebug"
            />
        <Query
            class="type:x-xmb/folder-pixmap"
            key="seg_package_files"
            src="#seg_package_files"
            />
</syntaxhighlight>
== PS3 Turbo load + gameboot + Removal singstar in action ==
{{#ev:youtube|0jgj1ju0bjE}}
PS3 Turbo load + gameboot + Removal singstar in action


==Running fself on CEX CFW 4.20+==
[http://www.multiupload.com/VTB7715SM8 dump_lv1.pkg (69.61 KB)]
http://www.psx-place.com/forum/mfw/running-fself-cex-cfw-2598.html
[http://www.multiupload.com/W6UVJ776R3 dump_lv2.pkg (70.11 KB)]<br />
or dumperpack wich includes those 2 and other dumpers as well: dumperpack.rar (1.9 MB) http://www.multiupload.com/R34YRGY6Z8
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)