Permanent HEN

Postby kgsws » Sat Mar 05, 2011 2:31 pm
I made this HEN permanent, it will go on even after reboot.

I renamed original vshmain.prx to vshorig.prx, replaced original vshmain.prx with HEN loader (modified to use power imports and not HTML hack), and modified rebootex code to this:

Code: Select all
void
rename_module(void *a0, char *mod_name, char *neu_mod_name)
{
ModuleEntry *pmod;
int i, len;
char *modules_start, *names_start;
BtcnfHeader *hdr = a0;

modules_start = (char *) a0 + hdr->modules_start;
names_start = (char *) a0 + hdr->names_start;

pmod = (ModuleEntry *) modules_start;
len = __strlen(mod_name) + 1;

if (hdr->modules_nr < 0)
return;

/* search mod by name */
for (i = 0; i < hdr->modules_nr; i++) {
if (!__memcmp(names_start + pmod->name, mod_name, len))
break;
pmod++;
}
if (i == hdr->modules_nr)
return;

__memcpy(names_start + pmod->name, neu_mod_name, len);
}

int
sceBootDecryptPSP_Patched(void *a0, void *a1)
{
int r;

r = sceBootDecryptPSP(a0, a1);
inject_module(a0, "/kd/init.prx", HEN_STR, 255);
rename_module(a0, "/vsh/module/vshmain.prx", "/vsh/module/vshorig.prx");

return r;
}

You have to pack fake vshmain.prx like explained here, of course use original vshmain.prx as base and not lfatfs.

Tested on PSP-1000, TA-079.