PS3 IRISMAN v3.44: 4.70 CFW Support by Aldostools

bitsbubba · Feb 25, 2015

I wouldn't front page this just as I believe it's still not workin all the way

STLcardsWS · Feb 25, 2015

bitsbubba said:
I wouldn't front page this just as I believe it's still not workin all the way

Front page already, I was going to wait as last i see it was testing still attached to it, but seen Aldo had upped it to brewology so thought it was good to go.

Joonie · Feb 25, 2015

MAMBA port works fine on 4.70

EDIT*

Game fails to launch with update files [8001003D]

800 error fix needs fixed

sandungas · Feb 25, 2015

Aldo, the fancontroll when using the "payload" mode (where fan is controlled with variable speeds)... is broken since version 2.30 or so (people is reporting in eol forum the last version where it was working normally was 2.28b)

If you dont want to fix or make a regression of the code related... then please disable it because it can make some PS3's to go YLOD

Orion · Feb 25, 2015

[MENTION=89]aldostools[/MENTION] can you relase your payload 4.70?
My payload give me black screen

aldostools · Feb 25, 2015

sandungas said:
Aldo, the fancontroll when using the "payload" mode (where fan is controlled with variable speeds)... is broken since version 2.30 or so (people is reporting in eol forum the last version where it was working normally was 2.28b)

If you dont want to fix or make a regression of the code related... then please disable it because it can make some PS3's to go YLOD

The fan control is disabled by default on IRISMAN because I have suggested multiple times to use webMAN's fan control instead, but some users are deaf....

If some dev wants to review it... I can merge the fix with the source code... but at this moment I'm too busy with other stuff to expend energy on that "semi-obsolete" feature.

Orion said:
[MENTION=89]aldostools[/MENTION] can you relase your payload 4.70?
My payload give me black screen

The source code with all the latest changes is now updated on github.

Joonie said:
Game fails to launch with update files [8001003D]

800 error fix needs fixed

I basically ported the offsets of the patches implemented by DeanK on webMAN. I guess it could be some additional anti-ODE code introduced in 4.70.

Here is the 8001003D fix ported to 4.70 used in IRISMAN:

Code:

pokeq(0x8000000000056588ULL, 0x63FF003D60000000ULL ); // fix 8001003D error  Original: 0x63FF003D419EFFD4ULL

francesco.lanzillotta · Feb 25, 2015

Pointer is null. When related to PARAM.SFO : "to play this game, you must insert the following disc. Insert the disc, and then start the game again. (8001003D)": can be resolved by pointing to (only) other PARAM.SFO with Lxx folder. In this case, it s similar than 0x8001003E but with some PARAM.SFO parameter (TITLE_ID?) embedded. Refresh it by using this Lxx or others

source: Error Codes - PS3 Developer wiki

Orion · Feb 25, 2015

aldostools said:
The fan control is disabled by default on IRISMAN because I have suggested multiple times to use webMAN's fan control instead, but some users are deaf....

If some dev wants to review it... I can merge the fix with the source code... but at this moment I'm too busy with other stuff to expend energy on that "semi-obsolete" feature.

The source code with all the latest changes is now updated on github.

I basically ported the offsets of the patches implemented by DeanK on webMAN. I guess it could be some additional anti-ODE code introduced in 4.70.

Here is the 8001003D fix ported to 4.70 used in IRISMAN:

Code:

pokeq(0x8000000000056588ULL, 0x63FF003D60000000ULL ); // fix 8001003D error Original: 0x63FF003D419EFFD4ULL

Thanks Aldo but i solved the problem in my payload

Orion · Feb 25, 2015

aldostools said:
The fan control is disabled by default on IRISMAN because I have suggested multiple times to use webMAN's fan control instead, but some users are deaf....

If some dev wants to review it... I can merge the fix with the source code... but at this moment I'm too busy with other stuff to expend energy on that "semi-obsolete" feature.

The source code with all the latest changes is now updated on github.

I basically ported the offsets of the patches implemented by DeanK on webMAN. I guess it could be some additional anti-ODE code introduced in 4.70.

Here is the 8001003D fix ported to 4.70 used in IRISMAN:

Code:

pokeq(0x8000000000056588ULL, 0x63FF003D60000000ULL ); // fix 8001003D error Original: 0x63FF003D419EFFD4ULL

Aldo i have tested your fix but it dont work....

sandungas · Feb 25, 2015

aldostools said:
The fan control is disabled by default on IRISMAN because I have suggested multiple times to use webMAN's fan control instead, but some users are deaf....

If some dev wants to review it... I can merge the fix with the source code... but at this moment I'm too busy with other stuff to expend energy on that "semi-obsolete" feature.

Im not telling to disable it by default, im telling to disable the "fancontroll in payload mode" completly to avoid people using it because:

-Is broken
-Using weban doesnt solves the problem, not all people use webman or a cobra firmware
-Is very risky and can make people to YLOD
-If you are not going to fix it then the most responsible thing to do is to remove the feature... or you prefer to have a broken feature that can YLOD consoles ?

Is not something personal... i know about the bug so i will not fail in the trap, the problem is the users that has no idea about it

simoaigle · Feb 25, 2015

irisman dont work

irisman v3.44 dont support BD Emu
So FIFA 2015 dont work
PES 2015 dont work

so this version is incomplet and faild

mcspicha · Feb 25, 2015

Spoof console id also doesn't work. PS is freezing and only think you can do is a reset by pushing power button

Tranced · Feb 25, 2015

simoaigle said:
irisman v3.44 dont support BD Emu
So FIFA 2015 dont work
PES 2015 dont work

so this version is incomplet and faild

Chill guys. Give developers some time to iron out all the kinks. From what I read this version was in a test phase of sorts. Aldo is boss when it comes to listening to feedback and executing updates fast but I'm sure he has other things in real life to take care of too. Just sit back and everything will be as it was in no time I'm sure. Peace

aldostools · Feb 25, 2015

Orion said:
Aldo i have tested your fix but it dont work....

It isn't my fix... it's deank's fix for 4.65 with the offset just ported to 4.70. I'll leave that task to other devs like you

Orion · Feb 25, 2015

aldostools said:
It isn't my fix... it's deank's fix for 4.65 with the offset just ported to 4.70. I'll leave that task to other devs like you

I solved the error friend

the patch work in gamesonic manager but not in IRISMAN i not know why

Code:

void load_payload_470(int mode)
{
    /*
    //Remove Lv2 memory protection
        lv1poke(0x370F28 + 0x00, 0x0000000000000001ULL); // Original: 0x0000000000351FD8ULL
        lv1poke(0x370F28 + 0x08, 0xE0D251B556C59F05ULL); // Original: 0x3B5B965B020AE21AULL
        lv1poke(0x370F28 + 0x10, 0xC232FCAD552C80D7ULL); // Original: 0x7D6F60B118E2E81BULL
        lv1poke(0x370F28 + 0x18, 0x65140CD200000000ULL); // Original: 0x315D8B7700000000ULL
    
    */

    install_lv2_memcpy();
    /* WARNING!! It supports only payload with a size multiple of 8 */
    lv2_memcpy(0x8000000000000000ULL + (u64) PAYLOAD_OFFSET,
                   (u64) payload_sky_470_bin,
                   payload_sky_470_bin_size);

    lv2_memcpy(0x8000000000000000ULL + (u64) PAYLOAD_UMOUNT_OFFSET, // copy umount routine
                      (u64) umount_470_bin,
                      umount_470_bin_size);

    restore_syscall8[0]= SYSCALL_BASE + 64ULL; // (8*8)
    restore_syscall8[1]= peekq(restore_syscall8[0]);

    u64 id[2];
    // copy the id
    id[0]= 0x534B314500000000ULL | (u64) PAYLOAD_OFFSET;
    id[1] = SYSCALL_BASE + 64ULL; // (8*8)
    lv2_memcpy(0x80000000000004f0ULL, (u64) &id[0], 16);

    u64 inst8 =  peekq(0x8000000000003000ULL);                     // get TOC
    lv2_memcpy(0x8000000000000000ULL + (u64) (PAYLOAD_OFFSET + 0x28), (u64) &inst8, 8);
    inst8 = 0x8000000000000000ULL + (u64) (PAYLOAD_OFFSET + 0x20); // syscall_8_desc - sys8
    lv2_memcpy(SYSCALL_BASE + (u64) (8 * 8), (u64) &inst8, 8);

    usleep(1000);

    remove_lv2_memcpy();

    pokeq(0x80000000007EF000ULL, 0ULL);// BD Emu mount
    pokeq(0x80000000007EF220ULL, 0ULL);

    /* BASIC PATCHES SYS36 */
    // by 2 anonymous people
    _poke32(0x565FC, 0x60000000);             
    PATCH_JUMP(0x56604, 0x566A0);             
    _poke32(0x5A6E0,  0x60000000);            // fix 80010009 error
    _poke32(0x5A6F4,  0x60000000);            // fix 80010019 error
    _poke(  0x56588,  0x63FF003D60000000ULL); // fix 8001003D error  "ori     %r31, %r31, 0x3D\n nop\n" done
    _poke32(0x56650,  0x3BE00000);            // fix 8001003E error -- 3.55 ok in 0x055F64 "li      %r31, 0"  done

    PATCH_JUMP(0x56654, 0x56564);             // Not present in rebug, anyway..

	pokeq(0x80000000002670D8ULL, 0x4E80002038600000ULL );
	pokeq(0x80000000002670E0ULL, 0x7C6307B44E800020ULL );
	
	pokeq(0x80000000002670D8ULL, 0x4E80002038600000ULL ); 
	pokeq(0x80000000002670E0ULL, 0x7C6307B44E800020ULL ); 
    pokeq(0x8000000000056588ULL, 0x63FF003D60000000ULL ); 
    //pokeq(0x800000000005658CULL, 0x63FF003D60000000ULL ); // fix 8001003D error
	pokeq(0x800000000005664CULL, 0x3FE080013BE00000ULL ); 

	pokeq(0x80000000000565F8ULL, 0x419E00D860000000ULL ); 
	pokeq(0x8000000000056600ULL, 0x2F84000448000098ULL ); 
	pokeq(0x800000000005A6DCULL, 0x2F83000060000000ULL ); 
	pokeq(0x800000000005A6F0ULL, 0x2F83000060000000ULL ); 

	pokeq(0x800000000005622CULL, 0x386000012F830000ULL ); 
	pokeq(0x80000000002275ECULL, 0x38600000F8690000ULL ); 

	pokeq(0x8000000000055C58ULL, 0xF821FE917C0802A6ULL ); 
	pokeq(0x8000000000058E18ULL, 0x419E0038E8610098ULL );


    /*
        -002c3cf0  f8 01 00 b0 7c 9c 23 78  7c 7d 1b 78 4b d8 aa 1d  |....|.#x|}.xK...|
        +002c3cf0  f8 01 00 b0 7c 9c 23 78  4b d4 01 88 4b d8 aa 1d  |....|.#xK...K...| (openhook jump - 0x3E80)
    */

    PATCH_JUMP(0x2975E4, (PAYLOAD_OFFSET+0x30)); // patch openhook - done
    _poke32(0x2975C0, 0xF821FF61); // free openhook Rogero 4.30 (put "stdu    %sp, -0xA0(%sp)" instead   "b       sub_2E9F98")

#ifdef CONFIG_USE_SYS8PERMH4
    PATCH_JUMP(PERMS_OFFSET, (PAYLOAD_OFFSET+0x18));
#endif

}

and this is another method to detect CFW 4.70 that i use in my 4.70 payload

Code:

int is_firm_470(void)
{

    u64 addr = peekq((SYSCALL_BASE + NEW_POKE_SYSCALL * 8));
    // check address first
    if(addr < 0x8000000000000000ULL || addr > 0x80000000007FFFFFULL || (addr & 3)!=0)
        return 0;
    addr = peekq(addr);

    if(addr == NEW_POKE_SYSCALL_ADDR) return 1;

    return 0;
}

aldostools · Feb 25, 2015

sandungas said:
Im not telling to disable it by default, im telling to disable the "fancontroll in payload mode" completly to avoid people using it because:

-Is broken
-Using weban doesnt solves the problem, not all people use webman or a cobra firmware
-Is very risky and can make people to YLOD
-If you are not going to fix it then the most responsible thing to do is to remove the feature... or you prefer to have a broken feature that can YLOD consoles ?

Is not something personal... i know about the bug so i will not fail in the trap, the problem is the users that has no idea about it

This one is new: in addition to "copycat", now I'm also "irresponsible"... :dancestraw:

Here is a reminder of the disclamer included in the program:

IRISMAN IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.

IN NO EVENT SHALL THE AUTHOR OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE
OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

The source code is available for other to fix/copy/remove/improve any feature that they want.... I do not have any obligation to fix it...

aldostools · Feb 25, 2015

Orion said:
I solved the error friend

the patch work in gamesonic manager but not in IRISMAN i not know why

and this is another method to detect CFW 4.70 that i use in my 4.70 payload

Thanks you for the code.. I see that the patches are exactly the same that I use, except that you use a different order...

As I'm on 4.46 (I think I never will move from that version)... I cannot test the issue myself.

I made a new test build using the same order of pokes that you use. If you want to test it, you can download:
http://aldostools.org/temp/test/IRISMAN_344_test2.pkg

Regarding your CFW detection method, yes it's a valid method, but I think it's better to compare the TOC as I do in IRISMAN. You can also check the build date, like I did for 4.66.

francesco.lanzillotta · Feb 25, 2015

Great aldo, this version works perfectly

Orion · Feb 25, 2015

aldostools said:
Thanks you for the code.. I see that the patches are exactly the same that I use, except that you use a different order...

As I'm on 4.46 (I think I never will move from that version)... I cannot test the issue myself.

I made a new test build using the same order of pokes that you use. If you want to test it, you can download:
http://aldostools.org/temp/test/IRISMAN_344_test2.pkg

Regarding your CFW detection method, yes it's a valid method, but I think it's better to compare the TOC as I do in IRISMAN. You can also check the build date, like I did for 4.66.

yes aldo this version work

PS3 IRISMAN v3.44: 4.70 CFW Support by Aldostools

bitsbubba

STLcardsWS

Joonie

sandungas

Orion

aldostools

francesco.lanzillotta

Orion

Orion

sandungas

simoaigle

mcspicha

Tranced

aldostools

Orion

aldostools

aldostools

francesco.lanzillotta

Orion

Similar threads

Featured content

Trending content

Latest posts