| View previous topic :: View next topic |
| Author |
Message |
CrazyT
Joined: 23 Dec 2006 Posts: 18
|
Posted: Sun Feb 08, 2009 7:56 pm Post subject: IPL inside NAND-Dump |
|
|
Well the basic problem is that i can't find the IPL inside a NAND-Dump that was made by my PSP.
I already read some documents ...
(
http://roland.xtreemhost.com/?p=6
http://hitmen.c02.at/files/yapspd/psp_doc/chap19.html
)
But they do not really describe the offset inside the NAND.
(for example: "The table is located at the
4th physical block of the nand (offset 0x10000)"
at that offset i only have lots of 0xFF values, so it can't be right)
You probably wonder why i'm asking for that.
I was browsing through the net and found a open source psp-emulator.
(called pspplayer: http://code.google.com/p/pspplayer/)
This emulator seems to be able to execute mips-instructions.
Sadly all firmware commands are implemented into the program itself and aren't emulated.
Thats why you can't emulate any firmware.(and only can test hombrew)
My idea was to somehow use a nand-dump to load/emulate a complete psp.(i know ... its kinda difficult to do that because you need to emulate the hardware,too) |
|
| Back to top |
|
 |
Bubbletune
Joined: 03 Jan 2009 Posts: 28
|
Posted: Sun Feb 08, 2009 8:16 pm Post subject: |
|
|
| It's impossible to emulate enough hardware to make that idea reality, mainly KIRK and SPOCK whichs internals are completely unknown. |
|
| Back to top |
|
 |
cory1492
Joined: 10 Dec 2004 Posts: 216
|
Posted: Tue Feb 10, 2009 8:03 pm Post subject: |
|
|
The offsets in YAPSPD were before we really started getting NAND dumps, before the current format 'full' dumps were common. Physical memory locations usually don't include spare data/pages (16 spare bytes for every 512 bytes of user data.) For example, "The table is located at the 4th physical block of the nand (offset 0x10000)" would equate to "The table is located at the 4th block of the nand dump (offset 0x10800)". Block sizes are (512user+16spare)*32 in 'full' NAND dumps, not just 512*32.
Actually decoding the IPL on a PC without PSP hardware in the mix doing the decrypting, probably not gonna happen for the reason Bubbletune mentions - though I guess there is nothing stopping someone from making a small server-client app that handles such hardware functions on the PSP... |
|
| Back to top |
|
 |
Torch

Joined: 28 May 2008 Posts: 842
|
Posted: Tue Feb 10, 2009 9:01 pm Post subject: |
|
|
| I assume you can run a completely decrypted firmware with some patches. |
|
| Back to top |
|
 |
|