Printable View
Does anyone have a proper patch for the lv2 access_control_engine_check_capability function?
The psgroove patch (< 3.41) makes it return 1 by default, which is incorrect behavior as in some occasions this function needs to return 0.
Who has a proper patch? In proper I mean an actual patch for the memory location where the access control rights are stored instead of ppc assembly..
Ok, I found that the data within %r4 is the easiest to patch, as:Code:li %r0, 2
lwz %r9, 0x28(%r29)
ld %r4, stru_3308D8.base_addr_toc
addi %r5, %sp, arg_80
addi %r6, %sp, arg_78
addi %r3, %sp, arg_70
stw %r9, arg_70(%sp)
std %r0, arg_78(%sp)
std %r0, arg_80(%sp)
bl access_control_engine_check_capability
0x40: gives access to homebrew
0x20: does not give access to homebrew
But this is only when %r0 == 2, I still need a solution when %r0 == 1..
just a guess, but did you try 0x80?
thnx User, but 0x40 indeed does the trick and seems like a proper and clean patch.
my problem now is getting the lv2 isoself functions (lv2 syscall 230-240) to work, still getting authentication errors on those..