forums.ps2dev.org

volksport · Joined: 27 Mar 2005 Posts: 7 Location: Michigan

Note: The person responsible for all of this wants to remain anonymous for his own reasons, so I am being a proxy for his discoveries by request. If you know WHO I am talking about, please keep it to yourself, again I am merely respecting this person's wishes, as should you.

Japan Wipeout Downloads are available now. Starting with Gamma Pack 1, there will be one per month for six months.

New User-Agent for Japan Wipeout: SCEJ PSP BROWSER 0105 UCJS10007

The browser uses this link on the web page: proc://command/http://wipeoutpurepsp.scej-online.jp/downloads/pak_gamma1/download.pspdif

So now we have a new protocol link to play with: proc://command/xxxxx

Japan Wipeout Pure Download URL: http://wipeoutpurepsp.scej-online.jp/?serviceId=wipeoutpure_ingamesupport_main&hostId=ucjs10007_wipeoutpure_psp_umd_1&hostLanguage=en&pspId=xxxx&skin=Default

The PSPID is blanked out, but is not required. In fact you can simply browse to http://wipeoutpurepsp.scej-online.jp and it will take you to the downloads.

When you request a download it downloads this file: http://wipeoutpurepsp.scej-online.jp/downloads/pak_gamma1/download.pspdif
which appears to be encrypted, then that initiates a request to
http://wipeoutpurepsp.scej-online.jp/downloads/pak_gamma1/data.pspdat which is a ZIP file.

beatwho · Joined: 15 Dec 2004 Posts: 28

handy tip:

if you have wget you can download it using something like this:

wget --user-agent="SCEJ PSP BROWSER 0105 UCJS10007" http://wipeoutpurepsp.scej-online.jp/downloads/pak_gamma1/data.pspdat

dlrm42 · Joined: 21 Jan 2005 Posts: 3

Hi,

you can access the page also with the firefox useragent switch extension, which some are using allready.
anyway, the pure data doesn't seem to do anything. I grabbed the file and put in on the psp, then I started wipeout (us) and nothing happens. renameing the folder from UCJS... to UCUS... presented the same result.
in the savegame explorer on the psp, the gamepack dir. presents itself as corrupt data. so my guess is if the download.pspdif file isn't processed by the ingame browser it doesn't effect the game.

mrbrown · Joined: 17 Jan 2004 Posts: 1536

Uh, what does this download add to the game?
_________________
"He was warned..."

mrbrown · Joined: 17 Jan 2004 Posts: 1536

dlrm42 · Joined: 21 Jan 2005 Posts: 3

I guess new tracks,skins and racers, at least that is known from different articles/interviews about wipeout pure.

volksport · Joined: 27 Mar 2005 Posts: 7 Location: Michigan

originalself · Joined: 09 Apr 2005 Posts: 9

First I would just like to say hi as this is my first post here...anyway. I have made a small site hosting one psp formated video and I used the new command from the wipe out site and it tried to download it.

darkfader · Joined: 27 Mar 2005 Posts: 8 Location: Netherlands

I noticed that "proc" too, but I cannot try anything here. I wonder if it's an libhttp extension or game specific. And I wonder if there are more commands like that.

angelfly · Joined: 09 Apr 2005 Posts: 4

ooPo · Posted: Sat Apr 09, 2005 5:26 am Post subject:

The download.pspdif file is the important part, not the zip file. It may be a small bit of executable code, or a batch file of some sort. Perhaps equivalent to the pif files on windows.

Pointing it to a valid EBOOT.PBP file - Small blip of loading, blank screen, shuts the psp down after a minute or so.

Pointing it to a valid UNKNOWN.PSP file - Loads longer, but puts random coloured dots on the screen while it loads. Then stops, shuts the psp down.

kry.sys · Joined: 16 Mar 2005 Posts: 82

ooPo · Posted: Sat Apr 09, 2005 6:11 am Post subject:

The eboot and psp files were from the jp 1.5 upgrade image, btw.

kry.sys · Joined: 16 Mar 2005 Posts: 82

asmodi · Posted: Sat Apr 09, 2005 6:26 am Post subject:

I see no reason why Wipeout should know these filetypes, but as the transfer is probebly done through an API function, it could however be the case. Can you try with more random files ooPo, or did you already try that? I just borrowed Wipeout earlier to day, so I can't test it. I will however get it monday morning.
_________________
It's not in my nature to be mysterious, but I can't talk about it, and I can't talk about why.

ooPo · Posted: Sat Apr 09, 2005 6:33 am Post subject:

I see a good reason. The psp uses these standard interfaces, like the save game loading and web browsing interfaces. So why wouldn't it understand standard file types?

It wasn't a complete shot in the dark, but I will admit I didn't expect success. :)

asmodi · Posted: Sat Apr 09, 2005 6:36 am Post subject:

That was what I ment with the use of the API. Seems a little dumb to make use of the function for some maps and cars (planes?).

It sounds like the webbrowser indeed is in the firmware already...
_________________
It's not in my nature to be mysterious, but I can't talk about it, and I can't talk about why.

Mr_Bogus · Joined: 09 Apr 2005 Posts: 3 Location: Stockholm

ooPo · Posted: Sat Apr 09, 2005 7:18 am Post subject:

Apparently the region-specific parts of these standard screens can be specified by the game itself, allowing them to still be in firmware.

I thought that too when I saw the loading screens on Japanese and US games using different buttons for 'ok'. (X/O) I was soon corrected when I mentioned this on #pspdev. :)

Klimru · Joined: 09 Apr 2005 Posts: 34

Has anyone made heads or tails out of the pspdif file?710 bytes, but, it must be some kind of code or something.

kry.sys · Joined: 16 Mar 2005 Posts: 82

kry.sys · Joined: 16 Mar 2005 Posts: 82

asmodi · Posted: Sat Apr 09, 2005 7:53 am Post subject:

Klimru · Joined: 09 Apr 2005 Posts: 34

Quick idea...

Since the data file is a zip file that is (if i read this correctly) unzipped onto the memory stick... has anyone tried any proxy/dns redirection of any kind to get a different zip file downloaded?

If so, I recall there being various overflow exploits involving low memory unzip libraries and craftily made archives.

Would be interesting.

asmodi · Posted: Sat Apr 09, 2005 7:58 am Post subject:

Klimru · Joined: 09 Apr 2005 Posts: 34

Klimru · Joined: 09 Apr 2005 Posts: 34

Also, I'm not sure if the people testing are directly linking to the pspdat file or using DNS fudging to put the pspdif file and the dat file in the locations the normal process would follow (on the correct URL), then accessing the pspdif file.

LiquidIce · Joined: 04 Apr 2005 Posts: 55

Did the new PSP user agent appear when they got the firmware update, or did it start reporting the new user-agent after they installed the Wipeout update?

Someone who has this update should run it through some of the tests on MomDad's page to see if anything has changed (if any new browser/javascript/iframe features are now supported).

If someone could figure out how to play or download movies that would be sweet. Does the proc://command stuff work on a US PSP yet? I'll start trying some different links.

Also, does it write the data to the memory stick as it downloads, or does it download it into ram then dump it on the stick?

plmars · Joined: 09 Apr 2005 Posts: 6

I am a newbie here so please no flaming. LOL. Here is what i found out. Everything seem to take place in the "param.sfo" file. I assume you can just dump unziped data onto you memory stick and dont even change folder name (maybe u will have to but thats not a big thing). When i just copied it like that the save game manager sees it without the problem. Now here is the question. Wipeout doesnt detect the Game Pack because:
a) folder name is not what its supposed to be (better option)
b) it has to be added to the main param.sfo file (not so good option).

In case 'a' everything would be so much easier because all you will have to change would be the folder name and the folder name hardcoded into the param.sfo file. The problem with this is that param.sfo seems to have a wired checks on it. If you change one latter, even the one in the diescription, it becomes corrupted (as reported by save game manager). I am working hard to crack this.

In case 'b' it would really suck cause I have no idea where to include that information. I wont just drop it between bunch of "00". LOL. In this case we will need someone with Japanese version to help us out.

I'm trying to focus onto param.sfo cracking because it can help so much in the future. One little update on it. Every single param.sfo has the same exact langth which makes reverse engineering so much easier.

plmars · Joined: 09 Apr 2005 Posts: 6

Sorry for double posting but to add some stuff up.

The parts that seem to change from one param.sfo to another are located between 57Dh and 58Ch and then between 11C0h and 11DFh. Check them out. We need to crack that integrity checking algorithm.

edit: Never mind. More stuff changes. Need to research it more.