├── ipl_blocks
├── 0xBFC00100r.bin
├── 0xBFE01100r.bin
├── 0xbfe01100v2.bin
├── jr_0xbfe01100.bin
├── 0xbfe01100v2_350.bin
├── fully_encrypted_blocks
│ ├── ipl_0x8001.bin
│ └── ipl_0xbfc.bin
└── README.md
├── dump_cp_addr
├── build
│ ├── dump_cp_addr.elf
│ └── dump_cp_addr_devarg.elf
├── README.md
├── dump_cp_addr.c
└── dump_cp_addr_devarg.c
├── ipl_shellcode
├── 0xa0010000
│ ├── build
│ │ └── 0x8001.bin
│ ├── linkfile.l
│ ├── Makefile
│ └── main.S
├── 0xbfc00000
│ ├── build
│ │ └── 0xbfc.bin
│ ├── linkfile.l
│ ├── Makefile
│ └── main.S
├── jr_0xbfe01100
│ ├── build
│ │ └── shellcode_jr_0xbfe01100.bin.keep
│ ├── main.S
│ ├── linkfile.l
│ ├── Makefile
│ └── README.md
└── README.md
├── write_cp_addr_devarg
├── write_cp_addr_devarg.elf
├── README.MD
└── write_cp_addr_devarg.c
├── README.md
├── kbooti_dump.sh
└── LICENSE
/ipl_blocks/0xBFC00100r.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/0xBFC00100r.bin
--------------------------------------------------------------------------------
/ipl_blocks/0xBFE01100r.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/0xBFE01100r.bin
--------------------------------------------------------------------------------
/ipl_blocks/0xbfe01100v2.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/0xbfe01100v2.bin
--------------------------------------------------------------------------------
/ipl_blocks/jr_0xbfe01100.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/jr_0xbfe01100.bin
--------------------------------------------------------------------------------
/ipl_blocks/0xbfe01100v2_350.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/0xbfe01100v2_350.bin
--------------------------------------------------------------------------------
/dump_cp_addr/build/dump_cp_addr.elf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/dump_cp_addr/build/dump_cp_addr.elf
--------------------------------------------------------------------------------
/ipl_shellcode/0xa0010000/build/0x8001.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_shellcode/0xa0010000/build/0x8001.bin
--------------------------------------------------------------------------------
/ipl_shellcode/0xbfc00000/build/0xbfc.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_shellcode/0xbfc00000/build/0xbfc.bin
--------------------------------------------------------------------------------
/dump_cp_addr/build/dump_cp_addr_devarg.elf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/dump_cp_addr/build/dump_cp_addr_devarg.elf
--------------------------------------------------------------------------------
/write_cp_addr_devarg/write_cp_addr_devarg.elf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/write_cp_addr_devarg/write_cp_addr_devarg.elf
--------------------------------------------------------------------------------
/ipl_blocks/fully_encrypted_blocks/ipl_0x8001.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/fully_encrypted_blocks/ipl_0x8001.bin
--------------------------------------------------------------------------------
/ipl_blocks/fully_encrypted_blocks/ipl_0xbfc.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_blocks/fully_encrypted_blocks/ipl_0xbfc.bin
--------------------------------------------------------------------------------
/ipl_shellcode/jr_0xbfe01100/build/shellcode_jr_0xbfe01100.bin.keep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/mathieulh/DTP-T1000-Pre-IPL-dumper/HEAD/ipl_shellcode/jr_0xbfe01100/build/shellcode_jr_0xbfe01100.bin.keep
--------------------------------------------------------------------------------
/ipl_shellcode/README.md:
--------------------------------------------------------------------------------
1 | BUILD INSTRUCTIONS:
2 |
3 | main.S
4 |
5 | For 0.6.0 and below kbooti:
6 |
7 | li $t0, 0xBFC00000 #boot vector/loader
8 |
9 | For 0.7.0 and onward:
10 |
11 | li $t0, 0xa0010000 #payload address referenced in boot vector
12 |
--------------------------------------------------------------------------------
/ipl_shellcode/jr_0xbfe01100/main.S:
--------------------------------------------------------------------------------
1 | .set noreorder
2 | .global start
3 | .ent start
4 |
5 | start:
6 | #Store 0xBFE01100 to register $29 and jump to it
7 |
8 | li $29, 0xBFE01100
9 | jr $29
10 | nop
11 |
12 | .end start
13 | .set reorder
14 |
--------------------------------------------------------------------------------
/ipl_shellcode/0xa0010000/linkfile.l:
--------------------------------------------------------------------------------
1 | OUTPUT_FORMAT("elf32-littlemips")
2 | OUTPUT_ARCH(mips)
3 |
4 | ENTRY(start)
5 |
6 | SECTIONS
7 | {
8 | . = 0x40F0000;
9 | .text.start : {
10 | *(.text.start)
11 | }
12 | .text : {
13 | *(.text)
14 | }
15 | .rodata : {
16 | *(.rodata)
17 | }
18 | .data : {
19 | *(.data)
20 | }
21 | .bss : {
22 | *(.bss)
23 | }
24 | }
25 |
--------------------------------------------------------------------------------
/ipl_shellcode/0xbfc00000/linkfile.l:
--------------------------------------------------------------------------------
1 | OUTPUT_FORMAT("elf32-littlemips")
2 | OUTPUT_ARCH(mips)
3 |
4 | ENTRY(start)
5 |
6 | SECTIONS
7 | {
8 | . = 0x40F0000;
9 | .text.start : {
10 | *(.text.start)
11 | }
12 | .text : {
13 | *(.text)
14 | }
15 | .rodata : {
16 | *(.rodata)
17 | }
18 | .data : {
19 | *(.data)
20 | }
21 | .bss : {
22 | *(.bss)
23 | }
24 | }
25 |
--------------------------------------------------------------------------------
/ipl_shellcode/jr_0xbfe01100/linkfile.l:
--------------------------------------------------------------------------------
1 | OUTPUT_FORMAT("elf32-littlemips")
2 | OUTPUT_ARCH(mips)
3 |
4 | ENTRY(start)
5 |
6 | SECTIONS
7 | {
8 | . = 0x40F0000;
9 | .text.start : {
10 | *(.text.start)
11 | }
12 | .text : {
13 | *(.text)
14 | }
15 | .rodata : {
16 | *(.rodata)
17 | }
18 | .data : {
19 | *(.data)
20 | }
21 | .bss : {
22 | *(.bss)
23 | }
24 | }
25 |
--------------------------------------------------------------------------------
/ipl_shellcode/0xa0010000/Makefile:
--------------------------------------------------------------------------------
1 | PSPDEV=C:\pspsdk\bin
2 | INCLUDES=-I $(PSPDEV)/../psp/sdk/include
3 |
4 | all: clean patch.bin
5 |
6 | patch.bin:
7 | $(PSPDEV)/psp-as main.s -o main.o
8 | $(PSPDEV)/psp-ld -T linkfile.l main.o -o main.elf
9 | $(PSPDEV)/psp-strip -s main.elf
10 | $(PSPDEV)/psp-objcopy -O binary main.elf build/0x8001.bin
11 |
12 | clean:
13 | rm -rf *~ *.o *.elf *.bin build/*.bin
14 |
--------------------------------------------------------------------------------
/ipl_shellcode/0xbfc00000/Makefile:
--------------------------------------------------------------------------------
1 | PSPDEV=C:\pspsdk\bin
2 | INCLUDES=-I $(PSPDEV)/../psp/sdk/include
3 |
4 | all: clean patch.bin
5 |
6 | patch.bin:
7 | $(PSPDEV)/psp-as main.s -o main.o
8 | $(PSPDEV)/psp-ld -T linkfile.l main.o -o main.elf
9 | $(PSPDEV)/psp-strip -s main.elf
10 | $(PSPDEV)/psp-objcopy -O binary main.elf build/0xbfc.bin
11 |
12 | clean:
13 | rm -rf *~ *.o *.elf *.bin build/*.bin
14 |
--------------------------------------------------------------------------------
/ipl_shellcode/jr_0xbfe01100/Makefile:
--------------------------------------------------------------------------------
1 | PSPDEV=C:\pspsdk\bin
2 | INCLUDES=-I $(PSPDEV)/../psp/sdk/include
3 |
4 | all: clean patch.bin
5 |
6 | patch.bin:
7 | $(PSPDEV)/psp-as main.s -o main.o
8 | $(PSPDEV)/psp-ld -T linkfile.l main.o -o main.elf
9 | $(PSPDEV)/psp-strip -s main.elf
10 | $(PSPDEV)/psp-objcopy -O binary main.elf build/shellcode_jr_0xbfe01100.bin
11 |
12 | clean:
13 | rm -rf *~ *.o *.elf *.bin build/*.bin
14 |
--------------------------------------------------------------------------------
/ipl_shellcode/jr_0xbfe01100/README.md:
--------------------------------------------------------------------------------
1 | # Build instructions
2 |
3 | Create the proper prototype encrypted IPL block from the compiled IPL shellcode using a custom version of ipltool (original project available here: https://github.com/zecoxao/ipltool )
4 |
5 | use the following values
6 |
7 |
8 | unsigned long int entry = 0x00000000;
9 | u32 loadAddr = 0x00000000;
10 | u32 dataSize = 0x10;
11 | u32 decblkSize = 0x10;
12 |
13 |
14 | An encrypted pre-built version of this shellcode in IPL block format is already suppplied as jr_0xbfe01100.bin in the ipl_blocks folder
15 |
--------------------------------------------------------------------------------
/dump_cp_addr/README.md:
--------------------------------------------------------------------------------
1 | BUILD INSTRUCTIONS:
2 |
3 | Requires CP toolchain by Flatz (check link below)
4 |
5 | https://playstationhax.xyz/forums/topic/1191-release-cp_toolchain-by-flatz/
6 |
7 | to build run the following command:
8 |
9 | mipsel-linux-gcc -o dump_cp_addr.elf dump_cp_addr.c -static -static-libgcc
10 |
11 | An optional version called dump_cp_addr_devarg allowing you change the device to dump from using the following syntax has been added.
12 |
13 | ./dump_cp_addr_devarg device address size > file
14 | for example ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > dump.bin
15 |
16 |
--------------------------------------------------------------------------------
/write_cp_addr_devarg/README.MD:
--------------------------------------------------------------------------------
1 | Use this to write from file to arbitrary memory locations on the Commmunication Processor.
2 |
3 | usage: write_cp_addr_devarg.elf file device address
4 |
5 | Build using
6 |
7 | * Cygwin x86 (does not appear to work with Cygwin64)
8 | * Communication processor mipsel toolchain
9 |
10 | path is hardcoded to PATH=/cygdrive/r/mipsel-toolchain/bin:$PATH (use subst to match the path consequently)
11 | http://technet.microsoft.com/en-us/library/bb491006.aspx
12 |
13 | Use the following comand to build:
14 | mipsel-linux-gcc-3.3.4 -static -o write_cp_addr_devarg.elf write_cp_addr_devarg.c
15 |
--------------------------------------------------------------------------------
/ipl_blocks/README.md:
--------------------------------------------------------------------------------
1 | # Build instructions
2 |
3 | Create the proper encrypted IPL blocks from the compiled IPL shellcode using a custom version of ipltool (original project available here: https://github.com/zecoxao/ipltool )
4 |
5 | For 0.4.0 and 0.6.0 build using 0x00000000 as load address and entry point and 0x20 for the data size
6 | for 0.7.0 and later build using the original values
7 |
8 |
9 | unsigned long int entry = 0x040F0000;
10 | u32 loadAddr = 0x040F0000;
11 | u32 dataSize = 0xF50;
12 | u32 decblkSize = 0xF60;
13 |
14 |
15 | Add 0xF30 worth of padding data (can be 00s) at the end of the compiled shellcode before encrypting.
16 |
--------------------------------------------------------------------------------
/ipl_shellcode/0xa0010000/main.S:
--------------------------------------------------------------------------------
1 | .set noreorder
2 | .global start
3 | .ent start
4 | #entrypoint is 0x40F0000
5 | start:
6 | #copy reset vector
7 | # li $t0, 0xBFC00000 #boot vector/Lib-PSP iplloader loader code
8 | li $t0, 0xa0010000 #Lib-PSP iplloader payload referenced in boot vector/loader
9 | addiu $t3, $t0, 0x1000 #don't go over 0x1000 bytes at a time
10 | li $t1, 0xBFE50000 #Tachyon Shared memory offset+0x50000 mapped to 0x1D600000+0x50000 on the communication processor
11 | loop:
12 | lw $t2, 0($t0)
13 | sw $t2, 0($t1)
14 | addiu $t0, 4
15 | bne $t3, $t0, loop
16 | addiu $t1, 4
17 |
18 |
19 | .end start
20 | .set reorder
21 |
--------------------------------------------------------------------------------
/ipl_shellcode/0xbfc00000/main.S:
--------------------------------------------------------------------------------
1 | .set noreorder
2 | .global start
3 | .ent start
4 | #entrypoint is 0x40F0000 for 0.7.0+ 0x8400000 for older
5 | start:
6 | #copy reset vector
7 | li $t0, 0xBFC00000 #boot vector/Lib-PSP iplloader loader code
8 | # li $t0, 0xa0010000 #Lib-PSP iplloader payload referenced in boot vector/loader
9 | addiu $t3, $t0, 0x1000 #don't go over 0x1000 bytes at a time
10 | li $t1, 0xBFE50000 #Tachyon Shared memory offset+0x50000 mapped to 0x1D600000+0x50000 on the communication processor
11 | loop:
12 | lw $t2, 0($t0)
13 | sw $t2, 0($t1)
14 | addiu $t0, 4
15 | bne $t3, $t0, loop
16 | addiu $t1, 4
17 |
18 | .end start
19 | .set reorder
20 |
--------------------------------------------------------------------------------
/dump_cp_addr/dump_cp_addr.c:
--------------------------------------------------------------------------------
1 | #include
2 | #include
3 | #include
4 | #include
5 | #include
6 | #include
7 | #include
8 |
9 | // old
10 | // #define PROM_ADDR 0x1FC00000
11 | // #define PROM_LEN (512 * 1024)
12 |
13 | int main(int argc, const char **argv) {
14 | uint8_t *addr;
15 | if (argc != 3) {
16 | return -2;
17 | }
18 | off_t dump_addr = (off_t)strtol(argv[1], NULL, 16);
19 | size_t dump_size = (size_t)strtol(argv[2], NULL, 16);
20 | printf("dump_addr: 0x%08x dump_size: 0x%08x\n", dump_addr, dump_size);
21 | int fd;
22 | ssize_t sz;
23 | if ((fd = open("/dev/mem", O_RDONLY | O_SYNC)) < 0 ) {
24 | printf("Error opening file. \n");
25 | close(fd);
26 | return -1;
27 | }
28 | addr = (uint8_t *)mmap(0, dump_size, PROT_READ, MAP_SHARED,
29 | fd, dump_addr);
30 | if (addr == (void*)-1) {
31 | perror("mmap");
32 | return -1;
33 | }
34 | sz = write(STDOUT_FILENO, addr, dump_size);
35 | assert(sz == dump_size);
36 |
37 | return 0;
38 | }
39 |
--------------------------------------------------------------------------------
/dump_cp_addr/dump_cp_addr_devarg.c:
--------------------------------------------------------------------------------
1 |
2 | #include
3 | #include
4 | #include
5 | #include
6 | #include
7 | #include
8 | #include
9 |
10 | // old
11 | // #define PROM_ADDR 0x1FC00000
12 | // #define PROM_LEN (512 * 1024)
13 |
14 | int main(int argc, const char **argv) {
15 | uint8_t *addr;
16 | if (argc != 4) {
17 | return -2;
18 | }
19 | const char *devname = argv[1];
20 | off_t dump_addr = (off_t)strtol(argv[2], NULL, 16);
21 | size_t dump_size = (size_t)strtol(argv[3], NULL, 16);
22 | printf("dev: %s dump_addr: 0x%08x dump_size: 0x%08x\n", devname, dump_addr,
23 | dump_size);
24 | int fd;
25 | ssize_t sz;
26 | if ((fd = open(devname, O_RDONLY | O_SYNC)) < 0 ) {
27 | printf("Error opening file. \n");
28 | close(fd);
29 | return -1;
30 | }
31 | addr = (uint8_t *)mmap(0, dump_size, PROT_READ, MAP_SHARED,
32 | fd, dump_addr);
33 | if (addr == (void*)-1) {
34 | perror("mmap");
35 | return -1;
36 | }
37 | sz = write(STDOUT_FILENO, addr, dump_size);
38 | assert(sz == dump_size);
39 |
40 | return 0;
41 | }
42 |
--------------------------------------------------------------------------------
/write_cp_addr_devarg/write_cp_addr_devarg.c:
--------------------------------------------------------------------------------
1 | #include
2 | #include
3 | #include
4 | #include
5 | #include
6 | #include
7 | #include
8 | #include
9 | #include
10 |
11 | void err_quit(char *msg)
12 | {
13 | printf(msg);
14 | return 0;
15 | }
16 |
17 | int main (int argc, char *argv[])
18 | {
19 | int fdin, fdout;
20 | char *src, *dst;
21 | struct stat statbuf;
22 | int mode = 0x0777;
23 | off_t dump_addr = (off_t)strtol(argv[3], NULL, 16);
24 |
25 | if (argc != 4)
26 | err_quit ("usage: a.out ");
27 |
28 | /* open the input file */
29 | if ((fdin = open (argv[1], O_RDONLY)) < 0)
30 | {printf("can't open %s for reading", argv[1]);
31 | return 0;
32 | }
33 |
34 | /* open/create the output file */
35 | if ((fdout = open (argv[2], O_RDWR | O_CREAT | O_TRUNC, mode )) < 0)
36 | {printf ("can't create %s for writing", argv[2]);
37 | return 0;
38 | }
39 |
40 | /* find size of input file */
41 | if (fstat (fdin,&statbuf) < 0)
42 | {printf ("fstat error");
43 | return 0;
44 | }
45 |
46 | /* go to the location corresponding to the last byte */
47 | if (lseek (fdout, statbuf.st_size - 1, SEEK_SET) == -1)
48 | {printf ("lseek error");
49 | return 0;
50 | }
51 |
52 | /* write a dummy byte at the last location */
53 | if (write (fdout, "", 1) != 1)
54 | {printf ("write error");
55 | return 0;
56 | }
57 |
58 | /* mmap the input file */
59 | if ((src = mmap (0, statbuf.st_size, PROT_READ, MAP_SHARED, fdin, 0))
60 | == (caddr_t) -1)
61 | {printf ("mmap error for input");
62 | return 0;
63 | }
64 |
65 | /* mmap the output file */
66 | if ((dst = mmap (0, statbuf.st_size, PROT_READ | PROT_WRITE,
67 | MAP_SHARED, fdout, dump_addr)) == (caddr_t) -1)
68 | {printf ("mmap error for output");
69 | return 0;
70 | }
71 |
72 | /* this copies the input file to the output file */
73 | memcpy (dst, src, statbuf.st_size);
74 | return 0;
75 |
76 | }
77 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | DTP-T1000 Pre-IPL dumper
2 |
3 | This tool allows to dump Lib-PSP iplloader's loader segment (or full binary on 0.4 and 0.6) using kbooti/bootdispi files as input
4 | Check the wiki page below for more information:
5 |
6 | https://playstationdev.wiki/pspdevwiki/index.php?title=PRE-IPL
7 |
8 | If you wonder what a DTP-T1000 is and what development SKUs are available, an overview is available here: https://playstationdev.wiki/pspdevwiki/index.php?title=SKU_Models
9 |
10 | Requirements:
11 |
12 | - A DTP-T1000 or a DEM-1000 unit.
13 | - Access with root privileges to the Communication_Processor (check the wiki page below for more details)
14 | http://www.psdevwiki.com/ps3/Communication_Processor
15 |
16 | How to:
17 |
18 |
19 | Extract the archive on your DTP-T1000/DEM-1000 (using /tmp is preferable due to the extra space available on this partition)
20 |
21 | chmod all files with proper permission
22 |
23 | copy respective kbooti/bootdispi from the SDK in the folder containing the script using the following file names (without the quotes)
24 |
25 | "kbooti_040.bin" (for SDK 0.4.X-0.5.X)
26 |
27 | SHA-256: 18B5BF7AEFE956D99B397AAAAC94DC965ADFDBC2BE0532096BBC1F8F8C5B7C34 (Full decrypted binary)
28 |
29 | "kbooti_060.bin" (for SDK 0.6.X-0.7.X)
30 |
31 | SHA-256: 5CDEDDEBE11807DDAEB17BAC03945A0B828E8057C9587652CA207E3BB959AC96 (Full decrypted binary)
32 |
33 | "kbooti_070.bin" (for SDK 0.7.0-0.8.X)
34 |
35 | SHA-256: 388FA1DB87973A2A37D576AAAB785D840CA4D883AB5111781DA2D0AF59CFE667 (Full decrypted binary)
36 |
37 | SHA-256: 351ECD64C945489999D477ECAFBFBB8FE769C2484636D2F7323557F7EEFD54A2 (Decrypted payload)
38 |
39 | "kbooti_090.bin" (for SDK 0.9.0-2.5.0)
40 |
41 | SHA-256: E415198C16E29D96C9232FF78272EE639D0630A56E370ED18A33D358FEF7CA95 (Full decrypted binary)
42 |
43 | SHA-256: 4F794E4FF32D5267AEAEDBA362D005EF0B7E93E29CF7C8209E0D9DBB0144F4DB (Decrypted payload)
44 |
45 | "kbooti_260.bin" (for SDK 2.6.0)
46 |
47 | SHA-256: 0A83CB36F1FE7C2A9A53BD46E6FFD915D4D1BB97EED3D1EF336960DB752C3446 (Full decrypted binary)
48 |
49 | SHA-256: 8821D96F5FB35C55DF649A97F5703F8A705362C2F54665B5EE4221E686B5578A (Decrypted payload)
50 |
51 | "kbooti_271.bin" (for SDK 2.7.0)
52 |
53 | SHA-256: 7DDFF7093906C10BA11D7402E9939763173F1ADEA59A38B4006484FD18EA21EA (Full decrypted binary)
54 |
55 | SHA-256: F9160C03EC6174F54F1C1EB645CFBBDB65B3DA47DA1A5478BE30E5EB2B0852B4 (Decrypted payload)
56 |
57 | "kbooti_350.bin" (for SDK 3.5.0+)
58 |
59 |
60 | SHA-256: AAF6F3CF0D7E028F43BE6FB788018F7A6F49B140A2591937B5C3A8373D2186A5 (Full decrypted binary with xor key)
61 |
62 | SHA-256: 5066E257EC43DA37788535C331E5A01955F5F498B103C340903409649BCB5046 (Decrypted payload with xor key)
63 |
64 |
65 | Note: This will dump the 3.5.0 Lib-PSP iplloader with the XOR key. (key is only wiped from uncached memory in JIG mode)
66 | the XOR key is meant to be located at 0xB0C in the full binary and 0x88C in the payload so you can just retrieve it and paste it back.
67 |
68 |
69 | run the kbooti_dump.sh script.
70 |
71 | Dumps will be named Lib-PSP iplloader*
72 |
73 | OPTIONAL: You can supply your own retail psp bootrom named pre-ipl.bin, should you do so, the dumper will rebuild the whole Lib-PSP iplloader binary including the loader part.
74 |
75 | COMPILATION INSTRUCTIONS:
76 |
77 | * Build dump_cp_addr and dump_cp_add_devarg using the toolchain available below:
78 |
79 | https://playstationhax.xyz/forums/topic/1191-release-cp_toolchain-by-flatz/
80 |
81 | * Build the 0xbfc00000 and 0xa0010000 shellcodes
82 |
83 | * Copy the build dump_cp_addr.elf, the 0x8001.bin and 0xbfc.bin shellcodes as well as the 0xBFE01100v2.bin, 0xBFE01100v2_350.bin and jr_0xbfe01100.bin IPL blocks at the same location.
84 |
--------------------------------------------------------------------------------
/kbooti_dump.sh:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 |
3 | #Version=/var/lib/toolupdate/toolupdate.version
4 |
5 | #delete all temporary files
6 | rm -f *.tmp
7 | #if grep '1.5.0' $Version;then
8 |
9 |
10 |
11 | #0.4.0
12 | #check if the kbooti file exists
13 | if [ -f kbooti_040.bin ]; then
14 | #appends the dumper payload to the IPL block
15 | cat jr_0xbfe01100.bin 0xbfc.bin > ipl_0xbfc.bin.tmp
16 | #create a temporary file only containing the first 0x1000 of the kbooti
17 | dd if=kbooti_040.bin bs=1 count=4096 of=kbooti.tmp
18 | #appends the IPL containing the crafted IPL to the temporary kbooti
19 | cat kbooti.tmp ipl_0xbfc.bin.tmp > kbootidmp.tmp
20 | #check if the current CP version contains the dstdb binary, if not use bloadp instead
21 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
22 | #write the kbooti+IPL to 0x1D600000 using dstdb's bloadp command
23 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
24 | #write the kbooti+IPL to 0x1D600000 using bloadp if dstdb is not present
25 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
26 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
27 | #If neither dstdb or bloadp binaries are present notify the user of an unsupported CP version
28 | else echo "Unsupported CP Version!"
29 | fi
30 | #reset tachyon
31 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
32 | #wait 10 seconds for the payload to run properly before killing dspreset
33 | sleep 10
34 | #tachyon crashes and does not return a proper reset value so dspreset is stuck in a waiting loop, thus we kill dspreset manually
35 | pkill dspreset
36 | #read address 0x1D650000 where our payload has written the dump. (0xBFE50000 on tachyon)
37 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader0.4.0.bin.tmp"
38 | #create the final file after removing the excess memory data from the dump
39 | dd if="Lib-PSP iplloader0.4.0.bin.tmp" bs=1 count=1472 of="Lib-PSP iplloader0.4.0.bin"
40 | #delete all temporary files
41 | rm -f *.tmp
42 | fi
43 |
44 | #0.6.0
45 | if [ -f kbooti_060.bin ]; then
46 | cat jr_0xbfe01100.bin 0xbfc.bin > ipl_0xbfc.bin.tmp
47 | dd if=kbooti_060.bin bs=1 count=4096 of=kbooti.tmp
48 | cat kbooti.tmp ipl_0xbfc.bin.tmp > kbootidmp.tmp
49 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
50 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
51 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
52 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
53 | else echo "Unsupported CP Version!"
54 | fi
55 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
56 | sleep 10
57 | pkill dspreset
58 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader0.6.0.bin.tmp"
59 | dd if="Lib-PSP iplloader0.6.0.bin.tmp" bs=1 count=1872 of="Lib-PSP iplloader0.6.0.bin"
60 | rm -f *.tmp
61 | fi
62 |
63 | #0.7.0
64 | if [ -f kbooti_070.bin ]; then
65 | cat 0xbfe01100v2.bin 0x8001.bin > ipl_0x8001.bin.tmp
66 | dd if=kbooti_070.bin bs=1 count=4096 of=kbooti.tmp
67 | cat kbooti.tmp ipl_0x8001.bin.tmp > kbootidmp.tmp
68 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
69 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
70 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
71 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
72 | else echo "Unsupported CP Version!"
73 | fi
74 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
75 | sleep 10
76 | pkill dspreset
77 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader0.7.0_0x80010000.bin.tmp"
78 | dd if="Lib-PSP iplloader0.7.0_0x80010000.bin.tmp" bs=1 count=2196 of="Lib-PSP iplloader0.7.0_0x80010000.bin"
79 | if [ -f pre-ipl.bin ]; then
80 | dd if=pre-ipl.bin bs=1 count=52 of="Lib-PSP iplloader_full.bin.1.tmp"
81 | echo -ne "\\x94\\x08" >> "Lib-PSP iplloader_full.bin.1.tmp"
82 | dd if=pre-ipl.bin bs=1 skip=54 count=586 of="Lib-PSP iplloader_full.bin.2.tmp"
83 | cat "Lib-PSP iplloader_full.bin.1.tmp" "Lib-PSP iplloader_full.bin.2.tmp" "Lib-PSP iplloader0.7.0_0x80010000.bin" > "Lib-PSP iplloader_0.7.0.bin"
84 | fi
85 | rm -f *.tmp #deletes all temporary files
86 | fi
87 |
88 | #0.9.0
89 | if [ -f kbooti_090.bin ]; then
90 | cat 0xbfe01100v2.bin 0x8001.bin > ipl_0x8001.bin.tmp
91 | dd if=kbooti_090.bin bs=1 count=4096 of=kbooti.tmp
92 | cat kbooti.tmp ipl_0x8001.bin.tmp > kbootidmp.tmp
93 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
94 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
95 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
96 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
97 | else echo "Unsupported CP Version!"
98 | fi
99 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
100 | sleep 10
101 | pkill dspreset
102 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader0.9.0_0x80010000.bin.tmp"
103 | dd if="Lib-PSP iplloader0.9.0_0x80010000.bin.tmp" bs=1 count=2196 of="Lib-PSP iplloader0.9.0_0x80010000.bin"
104 | if [ -f pre-ipl.bin ]; then
105 | dd if=pre-ipl.bin bs=1 count=52 of="Lib-PSP iplloader_full.bin.1.tmp"
106 | echo -ne "\\x94\\x08" >> "Lib-PSP iplloader_full.bin.1.tmp"
107 | dd if=pre-ipl.bin bs=1 skip=54 count=586 of="Lib-PSP iplloader_full.bin.2.tmp"
108 | cat "Lib-PSP iplloader_full.bin.1.tmp" "Lib-PSP iplloader_full.bin.2.tmp" "Lib-PSP iplloader0.9.0_0x80010000.bin" > "Lib-PSP iplloader_0.9.0.bin"
109 | fi
110 | rm -f *.tmp
111 | fi
112 |
113 | #2.6.0
114 | if [ -f kbooti_260.bin ]; then
115 | cat 0xbfe01100v2.bin 0x8001.bin > ipl_0x8001.bin.tmp
116 | dd if=kbooti_260.bin bs=1 count=4096 of=kbooti.tmp
117 | cat kbooti.tmp ipl_0x8001.bin.tmp > kbootidmp.tmp
118 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
119 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
120 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
121 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
122 | else echo "Unsupported CP Version!"
123 | fi
124 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
125 | sleep 10
126 | pkill dspreset
127 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader2.6.0_0x80010000.bin.tmp"
128 | dd if="Lib-PSP iplloader2.6.0_0x80010000.bin.tmp" bs=1 count=3060 of="Lib-PSP iplloader2.6.0_0x80010000.bin"
129 | if [ -f pre-ipl.bin ]; then
130 | dd if=pre-ipl.bin bs=1 count=52 of="Lib-PSP iplloader_full.bin.1.tmp"
131 | echo -ne "\\xf4\\x0b" >> "Lib-PSP iplloader_full.bin.1.tmp"
132 | dd if=pre-ipl.bin bs=1 skip=54 count=586 of="Lib-PSP iplloader_full.bin.2.tmp"
133 | cat "Lib-PSP iplloader_full.bin.1.tmp" "Lib-PSP iplloader_full.bin.2.tmp" "Lib-PSP iplloader2.6.0_0x80010000.bin" > "Lib-PSP iplloader_2.6.0.bin"
134 | fi
135 | rm -f *.tmp
136 | fi
137 |
138 | #2.7.1
139 | if [ -f kbooti_271.bin ]; then
140 | cat 0xbfe01100v2.bin 0x8001.bin > ipl_0x8001.bin.tmp
141 | dd if=kbooti_271.bin bs=1 count=4096 of=kbooti.tmp
142 | cat kbooti.tmp ipl_0x8001.bin.tmp > kbootidmp.tmp
143 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
144 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
145 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
146 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
147 | else echo "Unsupported CP Version!"
148 | fi
149 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
150 | sleep 10
151 | pkill dspreset
152 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader2.7.1_0x80010000.bin.tmp"
153 | dd if="Lib-PSP iplloader2.7.1_0x80010000.bin.tmp" bs=1 count=3060 of="Lib-PSP iplloader2.7.1_0x80010000.bin"
154 | if [ -f pre-ipl.bin ]; then
155 | dd if=pre-ipl.bin bs=1 count=52 of="Lib-PSP iplloader_full.bin.1.tmp"
156 | echo -ne "\\xf4\\x0b" >> "Lib-PSP iplloader_full.bin.1.tmp"
157 | dd if=pre-ipl.bin bs=1 skip=54 count=586 of="Lib-PSP iplloader_full.bin.2.tmp"
158 | cat "Lib-PSP iplloader_full.bin.1.tmp" "Lib-PSP iplloader_full.bin.2.tmp" "Lib-PSP iplloader2.7.1_0x80010000.bin" > "Lib-PSP iplloader_2.7.1.bin"
159 | fi
160 | rm -f *.tmp
161 | fi
162 |
163 | #3.5.0
164 | if [ -f kbooti_350.bin ]; then
165 | cat 0xbfe01100v2_350.bin 0x8001.bin > ipl_0x8001.bin.tmp
166 | dd if=kbooti_350.bin bs=1 count=4096 of=kbooti.tmp
167 | cat kbooti.tmp ipl_0x8001.bin.tmp > kbootidmp.tmp
168 | if [ -f /usr/local/sony/bin/bootdispi/dstdb ]; then
169 | /usr/local/sony/bin/bootdispi/dstdb -nokbd -Force bloadp kbootidmp.tmp
170 | elif [ -f /usr/local/sony/bin/bootdispi/dsbloadp ]; then
171 | /usr/local/sony/bin/bootdispi/dsbloadp kbootidmp.tmp
172 | else echo "Unsupported CP Version!"
173 | fi
174 | nohup /usr/local/sony/bin/bootdispi/dspreset &>/dev/null &
175 | sleep 10
176 | pkill dspreset
177 | ./dump_cp_addr_devarg.elf /dev/mem 0x1D650000 0x1000 > "Lib-PSP iplloader3.5.0_0x80010000.bin.tmp"
178 | dd if="Lib-PSP iplloader3.5.0_0x80010000.bin.tmp" bs=1 count=3188 of="Lib-PSP iplloader3.5.0_0x80010000.bin"
179 | if [ -f pre-ipl.bin ]; then
180 | dd if=pre-ipl.bin bs=1 count=52 of="Lib-PSP iplloader_full.bin.1.tmp"
181 | echo -ne "\\x74\\x0c" >> "Lib-PSP iplloader_full.bin.1.tmp"
182 | dd if=pre-ipl.bin bs=1 skip=54 count=586 of="Lib-PSP iplloader_full.bin.2.tmp"
183 | cat "Lib-PSP iplloader_full.bin.1.tmp" "Lib-PSP iplloader_full.bin.2.tmp" "Lib-PSP iplloader3.5.0_0x80010000.bin" > "Lib-PSP iplloader_3.5.0.bin"
184 | fi
185 | rm -f *.tmp
186 | fi
187 |
188 | rm -f *.tmp
189 |
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | GNU GENERAL PUBLIC LICENSE
2 | Version 2, June 1991
3 |
4 | Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
5 | 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
6 | Everyone is permitted to copy and distribute verbatim copies
7 | of this license document, but changing it is not allowed.
8 |
9 | Preamble
10 |
11 | The licenses for most software are designed to take away your
12 | freedom to share and change it. By contrast, the GNU General Public
13 | License is intended to guarantee your freedom to share and change free
14 | software--to make sure the software is free for all its users. This
15 | General Public License applies to most of the Free Software
16 | Foundation's software and to any other program whose authors commit to
17 | using it. (Some other Free Software Foundation software is covered by
18 | the GNU Lesser General Public License instead.) You can apply it to
19 | your programs, too.
20 |
21 | When we speak of free software, we are referring to freedom, not
22 | price. Our General Public Licenses are designed to make sure that you
23 | have the freedom to distribute copies of free software (and charge for
24 | this service if you wish), that you receive source code or can get it
25 | if you want it, that you can change the software or use pieces of it
26 | in new free programs; and that you know you can do these things.
27 |
28 | To protect your rights, we need to make restrictions that forbid
29 | anyone to deny you these rights or to ask you to surrender the rights.
30 | These restrictions translate to certain responsibilities for you if you
31 | distribute copies of the software, or if you modify it.
32 |
33 | For example, if you distribute copies of such a program, whether
34 | gratis or for a fee, you must give the recipients all the rights that
35 | you have. You must make sure that they, too, receive or can get the
36 | source code. And you must show them these terms so they know their
37 | rights.
38 |
39 | We protect your rights with two steps: (1) copyright the software, and
40 | (2) offer you this license which gives you legal permission to copy,
41 | distribute and/or modify the software.
42 |
43 | Also, for each author's protection and ours, we want to make certain
44 | that everyone understands that there is no warranty for this free
45 | software. If the software is modified by someone else and passed on, we
46 | want its recipients to know that what they have is not the original, so
47 | that any problems introduced by others will not reflect on the original
48 | authors' reputations.
49 |
50 | Finally, any free program is threatened constantly by software
51 | patents. We wish to avoid the danger that redistributors of a free
52 | program will individually obtain patent licenses, in effect making the
53 | program proprietary. To prevent this, we have made it clear that any
54 | patent must be licensed for everyone's free use or not licensed at all.
55 |
56 | The precise terms and conditions for copying, distribution and
57 | modification follow.
58 |
59 | GNU GENERAL PUBLIC LICENSE
60 | TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
61 |
62 | 0. This License applies to any program or other work which contains
63 | a notice placed by the copyright holder saying it may be distributed
64 | under the terms of this General Public License. The "Program", below,
65 | refers to any such program or work, and a "work based on the Program"
66 | means either the Program or any derivative work under copyright law:
67 | that is to say, a work containing the Program or a portion of it,
68 | either verbatim or with modifications and/or translated into another
69 | language. (Hereinafter, translation is included without limitation in
70 | the term "modification".) Each licensee is addressed as "you".
71 |
72 | Activities other than copying, distribution and modification are not
73 | covered by this License; they are outside its scope. The act of
74 | running the Program is not restricted, and the output from the Program
75 | is covered only if its contents constitute a work based on the
76 | Program (independent of having been made by running the Program).
77 | Whether that is true depends on what the Program does.
78 |
79 | 1. You may copy and distribute verbatim copies of the Program's
80 | source code as you receive it, in any medium, provided that you
81 | conspicuously and appropriately publish on each copy an appropriate
82 | copyright notice and disclaimer of warranty; keep intact all the
83 | notices that refer to this License and to the absence of any warranty;
84 | and give any other recipients of the Program a copy of this License
85 | along with the Program.
86 |
87 | You may charge a fee for the physical act of transferring a copy, and
88 | you may at your option offer warranty protection in exchange for a fee.
89 |
90 | 2. You may modify your copy or copies of the Program or any portion
91 | of it, thus forming a work based on the Program, and copy and
92 | distribute such modifications or work under the terms of Section 1
93 | above, provided that you also meet all of these conditions:
94 |
95 | a) You must cause the modified files to carry prominent notices
96 | stating that you changed the files and the date of any change.
97 |
98 | b) You must cause any work that you distribute or publish, that in
99 | whole or in part contains or is derived from the Program or any
100 | part thereof, to be licensed as a whole at no charge to all third
101 | parties under the terms of this License.
102 |
103 | c) If the modified program normally reads commands interactively
104 | when run, you must cause it, when started running for such
105 | interactive use in the most ordinary way, to print or display an
106 | announcement including an appropriate copyright notice and a
107 | notice that there is no warranty (or else, saying that you provide
108 | a warranty) and that users may redistribute the program under
109 | these conditions, and telling the user how to view a copy of this
110 | License. (Exception: if the Program itself is interactive but
111 | does not normally print such an announcement, your work based on
112 | the Program is not required to print an announcement.)
113 |
114 | These requirements apply to the modified work as a whole. If
115 | identifiable sections of that work are not derived from the Program,
116 | and can be reasonably considered independent and separate works in
117 | themselves, then this License, and its terms, do not apply to those
118 | sections when you distribute them as separate works. But when you
119 | distribute the same sections as part of a whole which is a work based
120 | on the Program, the distribution of the whole must be on the terms of
121 | this License, whose permissions for other licensees extend to the
122 | entire whole, and thus to each and every part regardless of who wrote it.
123 |
124 | Thus, it is not the intent of this section to claim rights or contest
125 | your rights to work written entirely by you; rather, the intent is to
126 | exercise the right to control the distribution of derivative or
127 | collective works based on the Program.
128 |
129 | In addition, mere aggregation of another work not based on the Program
130 | with the Program (or with a work based on the Program) on a volume of
131 | a storage or distribution medium does not bring the other work under
132 | the scope of this License.
133 |
134 | 3. You may copy and distribute the Program (or a work based on it,
135 | under Section 2) in object code or executable form under the terms of
136 | Sections 1 and 2 above provided that you also do one of the following:
137 |
138 | a) Accompany it with the complete corresponding machine-readable
139 | source code, which must be distributed under the terms of Sections
140 | 1 and 2 above on a medium customarily used for software interchange; or,
141 |
142 | b) Accompany it with a written offer, valid for at least three
143 | years, to give any third party, for a charge no more than your
144 | cost of physically performing source distribution, a complete
145 | machine-readable copy of the corresponding source code, to be
146 | distributed under the terms of Sections 1 and 2 above on a medium
147 | customarily used for software interchange; or,
148 |
149 | c) Accompany it with the information you received as to the offer
150 | to distribute corresponding source code. (This alternative is
151 | allowed only for noncommercial distribution and only if you
152 | received the program in object code or executable form with such
153 | an offer, in accord with Subsection b above.)
154 |
155 | The source code for a work means the preferred form of the work for
156 | making modifications to it. For an executable work, complete source
157 | code means all the source code for all modules it contains, plus any
158 | associated interface definition files, plus the scripts used to
159 | control compilation and installation of the executable. However, as a
160 | special exception, the source code distributed need not include
161 | anything that is normally distributed (in either source or binary
162 | form) with the major components (compiler, kernel, and so on) of the
163 | operating system on which the executable runs, unless that component
164 | itself accompanies the executable.
165 |
166 | If distribution of executable or object code is made by offering
167 | access to copy from a designated place, then offering equivalent
168 | access to copy the source code from the same place counts as
169 | distribution of the source code, even though third parties are not
170 | compelled to copy the source along with the object code.
171 |
172 | 4. You may not copy, modify, sublicense, or distribute the Program
173 | except as expressly provided under this License. Any attempt
174 | otherwise to copy, modify, sublicense or distribute the Program is
175 | void, and will automatically terminate your rights under this License.
176 | However, parties who have received copies, or rights, from you under
177 | this License will not have their licenses terminated so long as such
178 | parties remain in full compliance.
179 |
180 | 5. You are not required to accept this License, since you have not
181 | signed it. However, nothing else grants you permission to modify or
182 | distribute the Program or its derivative works. These actions are
183 | prohibited by law if you do not accept this License. Therefore, by
184 | modifying or distributing the Program (or any work based on the
185 | Program), you indicate your acceptance of this License to do so, and
186 | all its terms and conditions for copying, distributing or modifying
187 | the Program or works based on it.
188 |
189 | 6. Each time you redistribute the Program (or any work based on the
190 | Program), the recipient automatically receives a license from the
191 | original licensor to copy, distribute or modify the Program subject to
192 | these terms and conditions. You may not impose any further
193 | restrictions on the recipients' exercise of the rights granted herein.
194 | You are not responsible for enforcing compliance by third parties to
195 | this License.
196 |
197 | 7. If, as a consequence of a court judgment or allegation of patent
198 | infringement or for any other reason (not limited to patent issues),
199 | conditions are imposed on you (whether by court order, agreement or
200 | otherwise) that contradict the conditions of this License, they do not
201 | excuse you from the conditions of this License. If you cannot
202 | distribute so as to satisfy simultaneously your obligations under this
203 | License and any other pertinent obligations, then as a consequence you
204 | may not distribute the Program at all. For example, if a patent
205 | license would not permit royalty-free redistribution of the Program by
206 | all those who receive copies directly or indirectly through you, then
207 | the only way you could satisfy both it and this License would be to
208 | refrain entirely from distribution of the Program.
209 |
210 | If any portion of this section is held invalid or unenforceable under
211 | any particular circumstance, the balance of the section is intended to
212 | apply and the section as a whole is intended to apply in other
213 | circumstances.
214 |
215 | It is not the purpose of this section to induce you to infringe any
216 | patents or other property right claims or to contest validity of any
217 | such claims; this section has the sole purpose of protecting the
218 | integrity of the free software distribution system, which is
219 | implemented by public license practices. Many people have made
220 | generous contributions to the wide range of software distributed
221 | through that system in reliance on consistent application of that
222 | system; it is up to the author/donor to decide if he or she is willing
223 | to distribute software through any other system and a licensee cannot
224 | impose that choice.
225 |
226 | This section is intended to make thoroughly clear what is believed to
227 | be a consequence of the rest of this License.
228 |
229 | 8. If the distribution and/or use of the Program is restricted in
230 | certain countries either by patents or by copyrighted interfaces, the
231 | original copyright holder who places the Program under this License
232 | may add an explicit geographical distribution limitation excluding
233 | those countries, so that distribution is permitted only in or among
234 | countries not thus excluded. In such case, this License incorporates
235 | the limitation as if written in the body of this License.
236 |
237 | 9. The Free Software Foundation may publish revised and/or new versions
238 | of the General Public License from time to time. Such new versions will
239 | be similar in spirit to the present version, but may differ in detail to
240 | address new problems or concerns.
241 |
242 | Each version is given a distinguishing version number. If the Program
243 | specifies a version number of this License which applies to it and "any
244 | later version", you have the option of following the terms and conditions
245 | either of that version or of any later version published by the Free
246 | Software Foundation. If the Program does not specify a version number of
247 | this License, you may choose any version ever published by the Free Software
248 | Foundation.
249 |
250 | 10. If you wish to incorporate parts of the Program into other free
251 | programs whose distribution conditions are different, write to the author
252 | to ask for permission. For software which is copyrighted by the Free
253 | Software Foundation, write to the Free Software Foundation; we sometimes
254 | make exceptions for this. Our decision will be guided by the two goals
255 | of preserving the free status of all derivatives of our free software and
256 | of promoting the sharing and reuse of software generally.
257 |
258 | NO WARRANTY
259 |
260 | 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
261 | FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
262 | OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
263 | PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
264 | OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
265 | MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
266 | TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
267 | PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
268 | REPAIR OR CORRECTION.
269 |
270 | 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
271 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
272 | REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
273 | INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
274 | OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
275 | TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
276 | YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
277 | PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
278 | POSSIBILITY OF SUCH DAMAGES.
279 |
280 | END OF TERMS AND CONDITIONS
281 |
282 | How to Apply These Terms to Your New Programs
283 |
284 | If you develop a new program, and you want it to be of the greatest
285 | possible use to the public, the best way to achieve this is to make it
286 | free software which everyone can redistribute and change under these terms.
287 |
288 | To do so, attach the following notices to the program. It is safest
289 | to attach them to the start of each source file to most effectively
290 | convey the exclusion of warranty; and each file should have at least
291 | the "copyright" line and a pointer to where the full notice is found.
292 |
293 |
294 | Copyright (C)
295 |
296 | This program is free software; you can redistribute it and/or modify
297 | it under the terms of the GNU General Public License as published by
298 | the Free Software Foundation; either version 2 of the License, or
299 | (at your option) any later version.
300 |
301 | This program is distributed in the hope that it will be useful,
302 | but WITHOUT ANY WARRANTY; without even the implied warranty of
303 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
304 | GNU General Public License for more details.
305 |
306 | You should have received a copy of the GNU General Public License along
307 | with this program; if not, write to the Free Software Foundation, Inc.,
308 | 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
309 |
310 | Also add information on how to contact you by electronic and paper mail.
311 |
312 | If the program is interactive, make it output a short notice like this
313 | when it starts in an interactive mode:
314 |
315 | Gnomovision version 69, Copyright (C) year name of author
316 | Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
317 | This is free software, and you are welcome to redistribute it
318 | under certain conditions; type `show c' for details.
319 |
320 | The hypothetical commands `show w' and `show c' should show the appropriate
321 | parts of the General Public License. Of course, the commands you use may
322 | be called something other than `show w' and `show c'; they could even be
323 | mouse-clicks or menu items--whatever suits your program.
324 |
325 | You should also get your employer (if you work as a programmer) or your
326 | school, if any, to sign a "copyright disclaimer" for the program, if
327 | necessary. Here is a sample; alter the names:
328 |
329 | Yoyodyne, Inc., hereby disclaims all copyright interest in the program
330 | `Gnomovision' (which makes passes at compilers) written by James Hacker.
331 |
332 | , 1 April 1989
333 | Ty Coon, President of Vice
334 |
335 | This General Public License does not permit incorporating your program into
336 | proprietary programs. If your program is a subroutine library, you may
337 | consider it more useful to permit linking proprietary applications with the
338 | library. If this is what you want to do, use the GNU Lesser General
339 | Public License instead of this License.
340 |
--------------------------------------------------------------------------------