wololo.net/talk

Posted: **Thu Jan 17, 2013 12:37 pm**

For homebrew tests I tend to use:
Doom
Picodrive
T.O.M.E.

These tend to be pretty "resilient" and run in most cases.

Also, don't be stupid like me: when you are working on a game exploit, make sure the game is actually available on the PSN for the vita!

Posted: **Thu Jan 17, 2013 1:03 pm**

wololo wrote:For homebrew tests I tend to use:
Doom
Picodrive
T.O.M.E.

These tend to be pretty "resilient" and run in most cases.

Also, don't be stupid like me: when you are working on a game exploit, make sure the game is actually available on the PSN for the vita!

Wasnt able to run Doom or Picodrive via wmenu
But when I placed the Picodrive eboot directly to hbl folder instead of wmenu, it worked

I am not sure but it looks like whenever i try to run something via wmenu it just clears up everything and exits

Code: Select all

Enter hookExitThread : 040B7231
Enter hookExitThread : 040BA175
Num exit thr: 00000000
Set array
Exited threads: 1
Exit hookExitThread
Running threads: 5
Num exit thr: 00000001
Set array
Exited threads: 2
Exit hookExitThread
Running threads: 4
Num exit thr: 00000002
Set array
Exited threads: 3
Exit hookExitThread
Running threads: 3
Num exit thr: 00000003
Set array
_hook_sceKernelExitGame called
Exited threads: 4
Searching for library sceNetApctl
Exit hookExitThread
Searching for library sceNetResolver
Searching for library sceNetInet
NID: 0xA9ED66B9
call is: 0x0A20CEDA
Threads cleanup
cleaning audio threads
Running Threads cleanup
3 running threads remain
Kill thread ID 04868355
2 running threads remain
Not killing myself - yet
1 running threads remain
Kill thread ID 04870D09
Pending Threads cleanup
Sleeping Threads cleanup
4 exited threads remain
Delete thread ID 04863A39
3 exited threads remain
Delete thread ID 040BA175
2 exited threads remain
Delete thread ID 040B7231
1 exited threads remain
Delete thread ID 040B436D
Threads cleanup Done
Ram Cleanup
Ram Cleanup Done
Files Cleanup
Files Cleanup Done

All the exploits I got are on psn, I'm not trying these which aren't

edit: also Wagic runs if I directly place the eboot to load

,Doom runs too,gpSP starts to load then crash, + wmenu 0.4 from monster hunter release works, still cant run homebrew from it.
also it does not run on vita(exploit is fine, just the hbl), i think the pspemu does not like the exceptions that psplink is giving on psp

Posted: **Tue Mar 26, 2013 10:07 pm**

I decided to try porting hbl once again, it works fine on psp, starts wmenu and homebrew, but i'm getting exception when the menu starts and when homebrew starts

Code: Select all

API returned 048CB56B
Set array
Pending threads: 1
Enter hookRunThread: 048CB56B
Number of pending threads: 00000001
Pending threads: 0
Number of running threads: 00000002
Running threads: 3
Exit hookRunThread: 048CB56B
Enter createcallback: Exit Callback
Exit createcallback: Exit Callback ID: 048C5327
Enter registerexitCB: 048C5327
Found matching CB, func: 0890AACC
Exit registerexitCB: 048C5327
Enter createcallback: Power Callback
Exit createcallback: Power Callback ID: 048F3F49
Exception - Bus error (instr)
Thread ID - 0x048CB56B
Th Name   - update_thread
EPC       - 0x080316F0
Cause     - 0x10000018
BadVAddr  - 0x00000000
Status    - 0x00088613
zr:0x00000000 at:0x00000001 v0:0x00000000 v1:0x00000001
a0:0xDEADBEEF a1:0xDEADBEEF a2:0xDEADBEEF a3:0xDEADBEEF
t0:0xDEADBEEF t1:0xDEADBEEF t2:0xDEADBEEF t3:0xDEADBEEF
t4:0x882F7500 t5:0x00088613 t6:0x00004000 t7:0x080316F0
s0:0x048CB56B s1:0xDEADBEEF s2:0xDEADBEEF s3:0xDEADBEEF
s4:0xDEADBEEF s5:0xDEADBEEF s6:0xDEADBEEF s7:0xDEADBEEF
t8:0xDEADBEEF t9:0xDEADBEEF k0:0x09FBDF00 k1:0x00000000
gp:0x08A07750 sp:0x09FBDEB8 fp:0x09FBDEC0 ra:0x0890AD80
Call to sceKernelMaxFreeMemSize()
call to sceKernelAllocPartitionMemory partitionId: 2, name: block, type:0, size:
20076800, addr:0x00000000
-> final allocation made for 20076800 of 20076800 requested bytes with result 0x
048DC53D
Num tracked OS blocks now: 00000002
API returned 048F0D65
Set array
Pending threads: 1
Enter hookRunThread: 048F0D65
Number of pending threads: 00000001
Pending threads: 0
Number of running threads: 00000003
Running threads: 4
Exit hookRunThread: 048F0D65

I think thats why i can't get it work on vita, but i wasnt able to find this "'update_thread" anywhere in hbl source so im stuck at the moment

It isnt game's thread,isn't wmenu thread, it is hbl's thread 100%, because i get it even when using no menu just straight homebrew ( Doom )

update: i commented out #define DONT_HOOK_IF_FUNCTION_IS_IMPORTED, the crash is gone, it still does not work on vita, i have no idea why

update2:nevermind, seems to work now

some compatibility :

Code: Select all

Doom - works
picodrive - works
lamecraft - works ?
s4inexcraft - crashes
GDP - blackscreen
Daedalus R13- works
Daedalus X64 - blackscreen
psp filer - select language then crash/blackscreen
psp lorer - kind of works, crashes on some operations
gpSP - works but crashes if you press /_\ 
snes9xTYL - starts but crashes/stucks when loading rom
uo_SNES9x - works
Adhoc File Transfer - works

I noticed little problem, if I for example try to create new folder using psp lorer, bringing up keyboard only gives black/grey screen, how could i fix this? Are there any OSK hooks ? I tried #define HOOK_Osk but it didnt change anything

Posted: **Thu Aug 29, 2013 3:14 pm**

i have the same problem with one game ......how to resolve ?

Code: Select all

Address to allocate from: 0x08900000
-->ALLOCATING MEMORY @ 0x08900000 size 0x001F0300... call to sceKernelAllocParti
tionMemory partitionId: 2, name: ELFMemory, type:2, size:2032384, addr:0x0890000
0
-> final allocation made for 1632384 of 2032384 requested bytes with result 0x80
0200D9
FAILED: 0x800200D9
Failed to allocate memory for the module
ERROR 0x80020001 loading main module

Posted: **Fri Aug 30, 2013 12:13 am**

what do the "memory cleanup" steps tells you? total memory available, and maximum linear memory available? Max linear should be around 23MB or more... if not, it means something has not been cleaned up properly: thread, or memory block, or vpl, or fpl... use uidlist to check. Sometimes uidlist contains blocks for which the pointer is not found in user ram, making it impossible for gen-exploit-config.rb to find it. Sync with Qwikrazor about this a I think he might have found ways to fix some of these issues

wololo.net/talk

hbl porting help

Re: hbl porting help

Re: hbl porting help

Re: hbl porting help

Re: hbl porting help

Re: hbl porting help