Function list + python tool + c tool

bigslam · Post by **bigslam** » Sat May 06, 2006 3:29 am

I have not checked these fuctions
sceAta_driver
0xc7b02795 = sceAtaDeviceyPortOi
0x298ddc3d = sceAtaAhbInit
0xf6ac2e5d = sceAtaAhbTerm
0x76c0923d = sceAtaCallfCmdO
0x638eea14 = sceAtaAccessGetSelectDCall
Heres a python tool for searching for functions python sha1

groepaz · Post by **groepaz** » Sat May 06, 2006 3:33 am

eh, those look all like false posives to me.... did you check the actual functions and see if the names fit to what the function actually does?

dot_blank · Post by **dot_blank** » Sat May 06, 2006 5:49 am

those should be revisited
havent seen those anywhere
they just might be false positives

moonlight · Post by **moonlight** » Sat May 06, 2006 5:50 am

Mmm, probably groepaz is right... some of those names are too rare.

Anyways, the atapi module is interesting... :)

Rusty · Post by **Rusty** » Sat May 06, 2006 6:24 am

Ahb appears to be related to ata, google ata ahb and you will find a lot. Also the fact that there is an init and term makes it more likely.

bigslam · Post by **bigslam** » Sat May 06, 2006 8:19 am

You guys can check to see if it works

http://pspdev.ofcode.com/api2.0/index.p ... &module=71
7a0e484c = sceMesgLedClearRegStatusFlag

and some more

http://pspdev.ofcode.com/api2.0/index.php?type=2&id=10
af5960f3 = sceCtrlIDSpeedClearD
af5960f3 = sceCtrlAccessGameSharingzGamer

--
2995d020 = sceUtilityAccessdqSZ
ed0fad38 = sceUtilityBackDrivesNetSSLMe
88bc7406 = sceUtilityDbSharingDUsbSync
88bc7406 = sceUtilityDbIsPacketInfoupdate
88bc7406 = sceUtilityDbIsPacketInfoupdate

moonlight · Post by **moonlight** » Sun May 07, 2006 1:38 am

bigslam wrote:I have not checked these fuctions
sceAta_driver
0xc7b02795 = sceAtaDeviceyPortOi
0x298ddc3d = sceAtaAhbInit
0xf6ac2e5d = sceAtaAhbTerm
0x76c0923d = sceAtaCallfCmdO
0x638eea14 = sceAtaAccessGetSelectDCall
Heres a python tool for searching for functions python sha1

A question... How much time did the script take on your machine?

I'm running the script right now with some modifications for other module, and, well, i would like to know if it will take 1 hour or 1 week :)

bigslam · Post by **bigslam** » Sun May 07, 2006 1:51 am

moonlight wrote:
bigslam wrote:I have not checked these fuctions
sceAta_driver
0xc7b02795 = sceAtaDeviceyPortOi
0x298ddc3d = sceAtaAhbInit
0xf6ac2e5d = sceAtaAhbTerm
0x76c0923d = sceAtaCallfCmdO
0x638eea14 = sceAtaAccessGetSelectDCall
Heres a python tool for searching for functions python sha1
A question... How much time did the script take on your machine?

I'm running the script right now with some modifications for other module, and, well, i would like to know if it will take 1 hour or 1 week :)

The script took me about 10 mins to a half hour to find the results u see right there. I'm on CPU: AMD Athlon 64 X2 Dual Core 3800+, 2.00 GHz, 512KB Memory: Used: 621/1536MB

moonlight · Post by **moonlight** » Sun May 07, 2006 2:12 am

bigslam wrote:
moonlight wrote:
bigslam wrote:I have not checked these fuctions
sceAta_driver
0xc7b02795 = sceAtaDeviceyPortOi
0x298ddc3d = sceAtaAhbInit
0xf6ac2e5d = sceAtaAhbTerm
0x76c0923d = sceAtaCallfCmdO
0x638eea14 = sceAtaAccessGetSelectDCall
Heres a python tool for searching for functions python sha1
A question... How much time did the script take on your machine?

I'm running the script right now with some modifications for other module, and, well, i would like to know if it will take 1 hour or 1 week :)
The script took me about 10 mins to a half hour to find the results u see right there. I'm on CPU: AMD Athlon 64 X2 Dual Core 3800+, 2.00 GHz, 512KB Memory: Used: 621/1536MB

One nid of sceUtility that you don't posted, i don't know if it's real anyways.

943cba46 = sceUtilityfResetWW

groepaz · Post by **groepaz** » Sun May 07, 2006 2:22 am

i really really REALLY suggest anyone going NID hunting to actually verify his results before posting. i ran my tools myself, and i got a LOT of false positives, and even a LOT look "likely". (i could probably post a few hundreds that look like they could be real, but they are not).

moonlight · Post by **moonlight** » Sun May 07, 2006 2:34 am

groepaz wrote:i really really REALLY suggest anyone going NID hunting to actually verify his results before posting. i ran my tools myself, and i got a LOT of false positives, and even a LOT look "likely". (i could probably post a few hundreds that look like they could be real, but they are not).

That's what i'll do when i run the script for the loadexec module, since i don't know anything about sceUtility ;)

zshadow · Post by **zshadow** » Sun May 07, 2006 8:08 am

I ran it for a few hours..

received quite a few false positives, but heres one that may be real (someone feel free to test) -

1579a159 = sceUtilityLoadNetModule

bigslam · Post by **bigslam** » Mon May 08, 2006 3:50 am

Here is a c++ ver of the psp nid finder this is not a finish ver and you cant not input your own hashes. You will be able soon though. www.crypticnetwork.org/psp/pspcrack_opt.exe

Oh on another note when it searchs the hashes it will spit them out like

Okay, we've found that sceAtaSelectHUMDRandom hashes to: b6 60 24 32
Okay, we've found that sceAtaSemaphoreCmdMeNetconf hashes to: 83 20 c4 6f

The hash needs to be revsered. This will be fixed soon. it goes over 5 times so it will be like Done1,Done2, upto 5

forums.ps2dev.org

Function list + python tool + c tool

Function list + python tool + c tool

Re: Function list + python tool

Re: Function list + python tool

Re: Function list + python tool