tag:blogger.com,1999:blog-39974503435862267732011-07-30T06:42:39.436-07:00PSP HACKINGAll the resource you need while hacking your PSP.skyendhttp://www.blogger.com/profile/04669064968788426270noreply@blogger.comBlogger31100tag:blogger.com,1999:blog-3997450343586226773.post-15008643338419365582010-08-06T00:33:00.000-07:002010-08-06T00:33:37.008-07:00MIPS ASM TUTORIAL BY SiberianSTAR[18:17] <+SiberianSTAR> Assembly is a low-level programming language where each instruction corresponds to CPU op-code<br />[18:19] <+SiberianSTAR> Every CPU architecture has different set of opcodes and instructions, an op-code is an instruction that the CPU can understand<br />[18:20] <+SiberianSTAR> Every mips opcode is formed by 32 bits<br />[18:22] <+SiberianSTAR> This was the introduction<br />[18:23] <+SiberianSTAR> You can see the memory like a big matrix of bytes, where each byte is addressed with a 32bits value<br />[18:23] <+SiberianSTAR> The first byte is 0x0000000, the second is 0x00000001 and so on<br />[18:23] <+SiberianSTAR> A byte is formed by 8 bits, where each bits can be 1 or 0, on or off<br />[18:24] <+SiberianSTAR> An 8 bits value can store a number between 0 and 255, 2^0 - 2^8 - 1<br />[18:25] <+SiberianSTAR> On intel CPU the values are stored in the little-endian form, so the MSB (most significant byte) is the last byte<br />[18:25] <+SiberianSTAR> like<br />[18:25] <+SiberianSTAR> 0x12345678 - in memory is 0x78563412<br />[18:26] <+SiberianSTAR> Converting a number from hex to decimal is simple<br />[18:26] <+SiberianSTAR> Hexdecimal has 16 digits, 0-9 A-F<br />[18:26] <+SiberianSTAR> A = 10, B = 11, C = 12, D = 13, E = 14, F = 15<br />[18:27] <+SiberianSTAR> to convert for example 0xAA into Decimal you have to do 16^1 * A + 16^0 * A<br />[18:27] <+SiberianSTAR> A = 10 so, the number is 16*10 + 10 = 170 some more<br />[18:28] <+SiberianSTAR> The simpler operation that a CPU can perform between numbers are called bitwise-operations<br />[18:29] <+SiberianSTAR> The most common bitwise operation are OR, AND, NOT and XOR<br />[18:29] <+SiberianSTAR> they operate directly to each binary digit of a value<br />[18:29] <+SiberianSTAR> for example<br />[18:30] <+SiberianSTAR> OR<br />[18:30] <+SiberianSTAR> in1 in2 out<br />[18:30] <+SiberianSTAR> -----------<br />[18:30] <+SiberianSTAR> 0 0 0<br />[18:30] <+SiberianSTAR> 0 1 1<br />[18:30] <+SiberianSTAR> 1 0 1<br />[18:30] <+SiberianSTAR> 1 1 1<br />[18:30] <+SiberianSTAR> Takes as example the values 0xAA, 0x45<br />[18:31] <+SiberianSTAR> the binary rapresentation of the two values are 10101010 (0xAA) 01000101 (0x45)<br />[18:32] <+SiberianSTAR> An OR is a sum without the carry<br />[18:33] <+SiberianSTAR> Another bitwise logic operation is AND<br />[18:33] <+SiberianSTAR> in1 in2 out<br />[18:33] <+SiberianSTAR> -----------<br />[18:33] <+SiberianSTAR> 0 0 0<br />[18:33] <+SiberianSTAR> 0 1 0<br />[18:33] <+SiberianSTAR> 1 0 0<br />[18:33] <+SiberianSTAR> 1 1 1<br />[18:33] <+SiberianSTAR> And returns TRUE only if both bits are TRUE<br />[18:34] <+SiberianSTAR> In most cases AND is used to get only certain digits of an hex-number<br />[18:34] <+SiberianSTAR> for example<br />[18:34] <+SiberianSTAR> if you have<br />[18:34] <+SiberianSTAR> 0xABCD<br />[18:34] <+SiberianSTAR> but you want to get only the first and the last digit<br />[18:35] <+SiberianSTAR> you may do<br />[18:35] <+SiberianSTAR> 0xABCD AND 0xF00F<br />[18:35] <+SiberianSTAR> the output number will be 0XA00D<br />[18:35] <+SiberianSTAR> XOR is one of the most important bitwise logic operation<br />[18:35] <+SiberianSTAR> XOR means Exclusive-OR<br />[18:35] <+SiberianSTAR> It return TRUE only if the two bits are different<br />[18:36] <+SiberianSTAR> XOR<br />[18:36] <+SiberianSTAR> in1 in2 out<br />[18:36] <+SiberianSTAR> -----------<br />[18:36] <+SiberianSTAR> 0 0 0<br />[18:36] <+SiberianSTAR> 0 1 1<br />[18:36] <+SiberianSTAR> 1 0 1<br />[18:36] <+SiberianSTAR> 1 1 0<br />[18:36] <+SiberianSTAR> Another important bitwise logic instruction is left/right SHIFT<br />[18:37] <+SiberianSTAR> if you shift a number left you will multiply the number by 2<br />[18:37] <+SiberianSTAR> If you shift a number right you will divide a number by 2<br />[18:37] <+SiberianSTAR> Shift instructions are very fast<br />[18:38] <+SiberianSTAR> So if you have to divide a number by two you may use the shift instead of the slower division<br />[18:38] <+FreePlay> it's integer division, of course<br />[18:38] <+SiberianSTAR> yes<br />[18:39] <@harleyg> so in binary you have 2... 10, moving to the right is 1, 1<br />[18:39] <@harleyg> which in c is >> right?<br />[18:39] <+SiberianSTAR> >> is the right shift and corresponds to a division by two<br />[18:39] <+SiberianSTAR> So if in C you do A = 10 >> 1, A = 5<br />[18:40] <@harleyg> yes<br />[18:40] <+SiberianSTAR> and << is the multiplication<br />[18:40] <+SiberianSTAR> ok<br />[18:40] <+SiberianSTAR> In ASM you don't have variables<br />[18:41] <+SiberianSTAR> But you will have to operate directly to the registers of the CPU or on the memory<br />[18:42] <+SiberianSTAR> The memory is divided by text segment (code of the program), data segment (where you store your static data) and stack segment<br />[18:43] <+SiberianSTAR> The C compilers uses the stack segment to store your local variables of the functions<br />[18:44] <+SiberianSTAR> A register is a part of the CPU that can contain a value, each register of the psp is 32bits length<br />[18:44] <+SiberianSTAR> there are 32 Registers of general purposes and 32 floating point registers<br />[18:44] <+SiberianSTAR> The general purposes registers are named $0 .. $31<br />[18:45] <+SiberianSTAR> those registers have a mnemonic name,<br />[18:45] <+SiberianSTAR> $0 is also $zero and usually contains 0x00000000<br />[18:45] <+SiberianSTAR> $1 is a temporary register of the assembler<br />[18:45] <+FreePlay> "usually"?<br />[18:46] <+SiberianSTAR> well if you don't change that it will contains always 0<br />[18:46] <+SiberianSTAR> <br />[18:46] <+SiberianSTAR> $2 and $3 are $v0 and $v1, and are used to store the return value of the functions<br />[18:47] <+SiberianSTAR> (in intel 286+ cpus was used EAX to store the return value of a function)<br />[18:47] <+SiberianSTAR> $4, $5, $6, $7 are used to pass the arguments to a function<br />[18:48] <+SiberianSTAR> $28, $gp is named global pointer<br />[18:48] <+SiberianSTAR> $29, $sp is the stack pointer<br />[18:48] <@harleyg> $80$27?<br />[18:48] <@harleyg> $8-$27?<br />[18:49] <+SiberianSTAR> the stack pointer register contains the address of the first free stack byte from the top<br />[18:49] <+SiberianSTAR> $26 and $27 are used from the operating system<br />[18:50] <+SiberianSTAR> $24, $25 are for general use<br />[18:50] <+SiberianSTAR> $8 and $15 are for general use and are not preserved on a function call<br />[18:51] <+SiberianSTAR> $16 and $23 are for general use and are preserved on a function call<br />[18:51] <+SiberianSTAR> $30 is the frame pointer and $31 is the return address, it automatically set after a JAL instruction<br />[18:52] <+SiberianSTAR> ok so start with the asm instructions<br />[18:54] <+SiberianSTAR> The arithmetic and bitwise instructions can operate only on the registers<br />[18:54] <+SiberianSTAR> if you want to do a multiplication of a value stored in memory you have first to load it on a register<br />[18:55] <+SiberianSTAR> You can load values into registers only if the address is 4byte aligned, this means that the address is a multiple of four<br />[18:56] <+SiberianSTAR> the LW instruction loads a value from the memory into a register<br />[18:56] <@harleyg> how couldnt it be a multiple of 4?<br />[18:56] <+SiberianSTAR> ??<br />[18:56] <@harleyg> You can load values into registers only if the address is 4byte aligned, this means that the address is<br />[18:56] <@harleyg> a multiple of four<br />[18:56] <+SiberianSTAR> yes<br />[18:56] <+SiberianSTAR> for example<br />[18:56] <+SiberianSTAR> 0x00000000<br />[18:56] <+SiberianSTAR> 0x00000004<br />[18:57] <+SiberianSTAR> 0x00000008<br />[18:57] <+SiberianSTAR> and so on<br />[18:57] <+SiberianSTAR> the instruction to load a value from memory to a register is LW<br />[18:57] <+SiberianSTAR> the general syntax of an instruction is<br />[18:58] <+SiberianSTAR> mnemonic destination, source<br />[18:58] <+SiberianSTAR> so for example<br />[18:59] <+SiberianSTAR> to load the 32bits value in the position 0x00000000 of the memory in $t0<br />[18:59] <+SiberianSTAR> you can do<br />[18:59] <+SiberianSTAR> lw $t0, 0<br />[19:00] <+SiberianSTAR> the store instruction SW copy a value from a register into memory<br />[19:00] <+SiberianSTAR> sw $t0, 0<br />[19:00] <+SiberianSTAR> will save $t0 in the position 0 of the memory<br />[19:00] <+SiberianSTAR> you may set a base offset into a register, for example $t1 = 0x0000A0000<br />[19:01] <+SiberianSTAR> and then use that register as base offset<br />[19:01] <+SiberianSTAR> doing<br />[19:01] <+SiberianSTAR> lw $t0, 0x10($t1)<br />[19:01] <+SiberianSTAR> you will load into $t0 the value in the memory position 0x10 + $t1<br />[19:02] <+SiberianSTAR> If you see an assembly file generated by the psp-gcc compiler<br />[19:02] <+SiberianSTAR> you will see often the LUI instruction<br />[19:02] <+SiberianSTAR> with syntax is<br />[19:02] <+SiberianSTAR> LUI dest_register, immediate<br />[19:03] <+SiberianSTAR> dest_register = immediate * 0x10000<br />[19:04] <+SiberianSTAR> so for example<br />[19:05] <+SiberianSTAR> if you want to set in $2 the base offset 0x89000000<br />[19:05] <+SiberianSTAR> you do<br />[19:05] <+SiberianSTAR> LUI $2, 0x8900<br />[19:05] <+SiberianSTAR> and then you can use $2 as an base offset register<br />[19:06] <+SiberianSTAR> let see an example program<br />[19:08] <+SiberianSTAR> http://rafb.net/paste/results/IHjZ3163.html<br />[19:10] <@harleyg> ok<br />[19:10] <+SiberianSTAR> you can try to generate your asm code of an your c source doing psp-gcc -S code.c<br />[19:10] <+SiberianSTAR> let's see the asm generated by a simple C program<br />[19:11] <+SiberianSTAR> http://rafb.net/paste/results/f4vwze96.html<br />[19:11] <+SiberianSTAR> the asm generated code is<br />[19:11] <+SiberianSTAR> http://rafb.net/paste/results/q7sNRo73.html<br />[19:12] <+SiberianSTAR> you can see how for each function is used a label<br />[19:12] <+SiberianSTAR> the code of "function" is very simple<br />[19:12] <@harleyg> can you explain ?<br />[19:12] <+SiberianSTAR> as the first operation it sets the stack pointer<br />[19:13] <+SiberianSTAR> each function has to set his stack pointer<br />[19:13] <+SiberianSTAR> you see<br />[19:13] <+SiberianSTAR> addiu $sp,$sp,-16<br />[19:13] <+SiberianSTAR> addiu $sp,$sp,-16<br />[19:13] <@harleyg> yes<br />[19:13] <+SiberianSTAR> this puts in $sp, $sp - 16<br />[19:13] <+SiberianSTAR> why this ?<br />[19:14] <@harleyg> $sp = $sp + -16?<br />[19:14] <@harleyg> or is that addu<br />[19:14] <+SiberianSTAR> yes<br />[19:14] <+SiberianSTAR> but<br />[19:14] <+SiberianSTAR> each variable declared on your c source code takes 4 byte<br />[19:14] <+SiberianSTAR> some generated code is unuseful<br />[19:15] <+SiberianSTAR> like<br />[19:16] <+SiberianSTAR> moment, before i explain<br />[19:16] <@harleyg> ok<br />[19:16] <+SiberianSTAR> why it does $sp - 16 ?<br />[19:16] <@harleyg> huh?<br />[19:17] <+SiberianSTAR> bcz that function uses the first 16bytes free of the stack to store his variables and temporary data<br />[19:17] <+SiberianSTAR> for the first thing he sets his frame pointer<br />[19:17] <@harleyg> isnt it $sp = -16?<br />[19:17] <+SiberianSTAR> yes<br />[19:17] <+SiberianSTAR> the stack is LIFO style<br />[19:17] <@harleyg> wouldnt it be subiu if it was $sp - 16?<br />[19:17] <+SiberianSTAR> nono<br />[19:17] <+SiberianSTAR> it does<br />[19:18] <+SiberianSTAR> $sp = $sp - 16<br />[19:18] <@harleyg> isnt it add thougjh?<br />[19:18] <+SiberianSTAR> well if you have studied math you know that adding a negative value on a positive is equal to subtract<br />[19:19] <+SiberianSTAR> function(int a, int b)<br />[19:19] <+SiberianSTAR> and 4bytes to store the original stack pointer<br />[19:19] <+SiberianSTAR> - frame pointer - sorry<br />[19:19] <@harleyg> ok<br />[19:20] <+SiberianSTAR> frame pointer is used as a base-offset for variables<br />[19:20] <+SiberianSTAR> sw $fp,8($sp)<br />[19:20] <+SiberianSTAR> move $fp,$sp<br />[19:20] <+SiberianSTAR> in the first instruction it saves the original frame pointer in 8 + $sp<br />[19:20] <+SiberianSTAR> then it moves on the $fp the value of $sp<br />[19:21] <+SiberianSTAR> and because we compiled the code with no optimization<br />[19:21] <+SiberianSTAR> the generated code is stupid<br />[19:21] <+SiberianSTAR> sw $4,0($fp)<br />[19:21] <+SiberianSTAR> sw $5,4($fp)<br />[19:21] <+SiberianSTAR> lw $3,0($fp)<br />[19:21] <+SiberianSTAR> lw $2,4($fp)<br />[19:21] <+SiberianSTAR> in the first two instructions<br />[19:21] <+SiberianSTAR> the value of the variables a and b are stored into $4 and $5<br />[19:21] <+SiberianSTAR> ehm<br />[19:21] <@harleyg> ok<br />[19:21] <+SiberianSTAR> the value of the variables a and b are stored from the registers $4 and $5 into memory<br />[19:21] <+SiberianSTAR> 0 + $fp<br />[19:21] <+SiberianSTAR> and<br />[19:21] <+SiberianSTAR> 4 + $fp<br />[19:22] <+SiberianSTAR> (each variables is 4byte length)<br />[19:22] <+SiberianSTAR> then it reload the contents from the memory into the registers $3 and $2<br />[19:22] <@harleyg> ok<br />[19:22] <+SiberianSTAR> so<br />[19:22] <+SiberianSTAR> $3 = $4 and $2 = $5<br />[19:22] <+SiberianSTAR> in the next instruction it performs the addition<br />[19:22] <+SiberianSTAR> addu $2,$3,$2<br />[19:23] <+SiberianSTAR> it saves in the register $2 the result of $3+$2<br />[19:23] <@harleyg> $2 = $3 + $2<br />[19:23] <+SiberianSTAR> exactly<br />[19:23] <@harleyg> yeah<br />[19:24] <+SiberianSTAR> the register $2 is used from the gcc compiler to return the value of a function<br />[19:24] <+SiberianSTAR> then it restores the stack pointer and the frame pointer<br />[19:24] <+SiberianSTAR> the register $2 is used from the gcc compiler to return the value of a function<br />[19:24] <+SiberianSTAR> then it restores the stack pointer and the frame pointer<br />[19:24] <+SiberianSTAR> lw $fp,8($sp)<br />[19:24] <+SiberianSTAR> addiu $sp,$sp,16<br />[19:25] <+SiberianSTAR> and jumps into the address contained into the register $31<br />[19:25] <+SiberianSTAR> the main function is simpler<br />[19:25] <+SiberianSTAR> more simple<br />[19:25] <+SiberianSTAR> addiu $sp,$sp,-16<br />[19:25] <+SiberianSTAR> sw $31,12($sp)<br />[19:25] <+SiberianSTAR> sw $fp,8($sp)<br />[19:25] <+SiberianSTAR> move $fp,$sp<br />[19:25] <+SiberianSTAR> li $4,10 # 0xa<br />[19:25] <+SiberianSTAR> li $5,20 # 0x14<br />[19:25] <+SiberianSTAR> jal function<br />[19:25] <+SiberianSTAR> nop<br />[19:25] <+SiberianSTAR> for each function the stack-pointer and the frame pointer is set up<br />[19:26] <+SiberianSTAR> <siberianstar> li $4,10 # 0xa<br />[19:26] <+SiberianSTAR> <siberianstar> li $5,20 # 0x14<br />[19:26] <+SiberianSTAR> with these two instructions it loads on the registers $4 and $5 the value of the function call function(10, 20)<br />[19:26] <@harleyg> hmm<br />[19:26] <@harleyg> 10 = $4?<br />[19:26] <+SiberianSTAR> yes<br />[19:26] <@harleyg> ok<br />[19:26] <+SiberianSTAR> you know <br />[19:26] <@harleyg> <br />[19:26] <+SiberianSTAR> $4 = 10<br />[19:27] <+SiberianSTAR> $5 = 20<br />[19:27] <+SiberianSTAR> registers $4-$7 are used to send the arguments to the functions<br />[19:27] <+SiberianSTAR> then it calls the 'function'<br />[19:28] <+SiberianSTAR> JAL jump at the address specified and saves the return address into the register $31<br />[19:28] <@harleyg> $4 - $7 yeah?<br />[19:28] <+SiberianSTAR> uh?<br />[19:28] <@harleyg> what if the function requires... 10 arguements<br />[19:28] <@harleyg> hwo cn you use $4 and $7 ? <br />[19:28] <+SiberianSTAR> we try and we see what it does <br />[19:30] <+SiberianSTAR> http://rafb.net/paste/results/sXt4CF33.html<br />[19:30] <+SiberianSTAR> http://rafb.net/paste/results/FMRk1r73.html<br />[19:31] <+SiberianSTAR> it goes over<br />[19:31] <+SiberianSTAR> li $8,50 # 0x32<br />[19:31] <+SiberianSTAR> li $9,60 # 0x3c<br />[19:31] <+SiberianSTAR> li $10,70 # 0x46<br />[19:31] <+SiberianSTAR> li $11,80 # 0x50<br />[19:31] <+SiberianSTAR> and use the next registers<br />[19:31] <+SiberianSTAR> that are general-purpose registers</siberianstar></siberianstar><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/3997450343586226773-1500864333841936558?l=skyend-pspslimhacks.blogspot.com' alt='' /></div>skyendhttp://www.blogger.com/profile/04669064968788426270noreply@blogger.com0tag:blogger.com,1999:blog-3997450343586226773.post-6392926548314370962010-08-06T00:17:00.000-07:002010-08-06T00:17:35.468-07:00Half Byte LoaderHalf Byte Loader ( hbl ) is an e-loader developed for patapon 2 exploit.<br />It lets you use homebrews on Official Firmwares upto 6.20.<br /><br />You can find more info about it <a href="http://forums.pspslimhacks.com/hacking/6016-only-topic-patapon-2-save-game-exploit-half-byte-loader.html">here</a><br /><br />Source Code for HBL is available at <a href="http://code.google.com/p/valentine-hbl/">Google Code SVN</a><br /><br />For a list of working homebrew apps, go <a href="http://advancedpsp.tk/foro_es/viewtopic.php?f=41&t=425">here</a><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/3997450343586226773-639292654831437096?l=skyend-pspslimhacks.blogspot.com' alt='' /></div>skyendhttp://www.blogger.com/profile/04669064968788426270noreply@blogger.com0tag:blogger.com,1999:blog-3997450343586226773.post-65854647986680501062010-02-13T00:17:00.000-08:002010-08-06T00:31:31.255-07:00SKYEND'S BLOG<div align="left">Hiya every one, this is skyend bringing you all the usefull links in one place.<br /><br />Visit <a href="http://forums.pspslimhacks.com/">PSP SLIM HACKS FORUMS </a><br /><br /><a href="http://forums.pspslimhacks.com/members/skyend.html">My profile </a><br /><a href="http://skyend.blog.co.in/files/2010/02/screenshot0072.jpg"><img alt="" class="alignnone size-medium wp-image-6" height="170" src="http://skyend.blog.co.in/files/2010/02/screenshot0072-300x170.jpg" width="300" /></a></div><div align="center"><br /><br /><b>:: GUIDES ::</b></div><div align="center">These tutorials are written by my fellow mates ( & me ) at PSH forums.</div><div align="center"><br /></div><div align="left"><a href="http://forums.pspslimhacks.com/user-help/121-psp-hackable-allow-me-answer.html">IS THIS PSP HACKABLE ? ALLOW ME TO ANSWER THAT</a></div><div align="left">Use this guide to identify which motherboard you have.</div><div align="left"><br /><a href="http://forums.pspslimhacks.com/tutorials/2179-tutorial-how-install-cfw-any-psp.html">How To Install CFW on Any PSP</a></div><div align="left">As the title says, full CFW guide.<br /><br /><a href="http://forums.pspslimhacks.com/tutorials/4711-tutorial-how-downgrade-upgrade-your-psps-ofw-cfw.html">How To Upgrade/Downgrade Your PSPs OFW/CFW</a></div><div align="left">Simple methods to upgrade/downgarde your firmware.<br /><br /><a href="http://forums.pspslimhacks.com/tutorials/4606-tutorial-how-play-5-50-gen-d3-games-5-50-gen-d2-5-50-gen-b2-quickfix.html">Tutorial To Play 5.50 gen-d3 games on 5.50 gen-d2</a></div><div align="left">Allows you to play latest games on GEN-D2 without updating to the buggy GEN-D3<br /><br /><a href="http://forums.pspslimhacks.com/tutorials/10-custom-firmware-terminology.html">Custom Firmware Terminology</a></div><div align="left">Contains all the terms/abbreviations a newbie needs to know<br /><br /><a href="http://forums.pspslimhacks.com/tutorials/2934-hacking-psp-3000-tutorial.html">Hacking a PSP 3000</a></div><div align="left">As the title says...<br /><br /><a href="http://forums.pspslimhacks.com/tutorials/3884-tutorial-psp2000v3-psp3000-hacking-comprehensive-guide.html">TUTORIAL - PSP2000v3 and PSP3000 Hacking - A comprehensive Guide</a></div><div align="left">As the title says...it also has tips & tricks to load chickHEN<br /><br /></div><a href="http://forums.pspslimhacks.com/tutorials/4416-ultimate-theme-guide-2010-a.html">The Ultimate Theme Guide! 2010 </a><br />Simply the best theme guide out there.<br /><br /><a href="http://forums.pspslimhacks.com/tutorials/2482-using-yoshihiros-game-decrypter-v4-w-screens.html">Using Yoshihiro's Game Decrypter V4 (w/screens)</a><br />Use this to decrypt games if you are 5.03 MHU ( CFWE ) user.<br /><br /><a href="http://forums.pspslimhacks.com/user-help/3466-guide-using-despertar-cementerio-v8.html">Using Despertar Del Cementerio v8</a><br />Use this to unbrick your bricked fully hackable PSP.<br /><br /><div align="center"><b>:: DOWNLOADS ::</b></div><b><br /></b><br /><b>:: OFW FILES ::</b><br /><br /><b><a href="http://pspslimhacks.com/index.php?dl_id=138">5.00 FIRMWARE UPDATE </a></b><br /><div align="left"><b><a href="http://pspslimhacks.com/index.php?dl_id=427">5.03 FIRMWARE UPDATE</a> { required for chickHEN }</b><br /><b><a href="http://pspslimhacks.com/index.php?dl_id=231">5.50 FIRMWARE UPDATE</a></b></div><b><a href="http://pspslimhacks.com/index.php?dl_id=337">6.00 FIRMWARE UPDATE</a></b><br /><b><a href="http://pspslimhacks.com/index.php?dl_id=360">6.10 FIRMWARE UPDATE</a></b><b><br /></b><br /><b><a href="http://pspslimhacks.com/index.php?dl_id=404">6.20 FIRMWARE UPDATE</a> </b><br /><b> <a href="http://pspslimhacks.com/download/514/">6.30 FIRMWARE UPDATE</a> </b><br /><b><a href="http://www.mediafire.com/?vp26bdzuz8b7xrn">6.31 FIRMWARE UPDATE</a></b><br /><b><br /></b><br /><b>:: CFW FILES :: (</b><b> For FULLY HACKABLE PSPs )</b><br /><b><br /></b><br /><b><a href="http://pspslimhacks.com/custom-firmware-500-m33-6-released/">5.00 M33-6</a> { latest CFW by team M33 }</b><br /><b><a href="http://pspslimhacks.com/custom-firmware-5-50-gen-d-released/">5.50 GEN-D</a></b><br /><b><a href="http://pspslimhacks.com/custom-firmware-5-50-gen-d2-released/">5.50 GEN-D2</a> { most stable in the GEN family }</b><br /><b><a href="http://pspslimhacks.com/custom-firmware-5-50-gen-d3-final-released/">5.50 GEN-D3 " FINAL BUILD"</a></b><br /><br /><b>P.S I wont include Prometheus here as its buggy.</b><br /><b> I recommend using M33_620 or Prometheus plugin.</b><br /><b>You can find the links in the plugins section. </b><br /><b><br /></b><br /><b>For PARTIALLY HACKABLE PSPs ( ie 3000 & SLIMS with ta-088v3 )</b><br /><b><br /></b><br /><b><a href="http://pspslimhacks.com/custom-firmware-enabler-3-60-released/">CFWE 3.60</a> { more stable in CFWE, latest games require decyption }</b><br /><b><a href="http://pspslimhacks.com/custom-firmware-enabler-3-70-released-cfwenabler">CFWE 3.70</a> {</b><b> latest games require decyption }</b><b><br /></b><br /><b><a href="http://pspslimhacks.com/custom-firmware-5-03-gen-b-for-hen-released">5.03 GEN-B</a> { more stable in GENs, has inbuilt game</b><b> decryp</b><b>ter }</b><br /><b><a href="http://pspslimhacks.com/custom-firmware-5-03-gen-c-released/">5.03 GEN-C</a> </b><b>{ has inbuilt game decrypter }</b><br /><b> </b><b><br /></b><br /><b>:: chickHEN ::</b><br /><b><br /></b><br /><b><a href="http://pspslimhacks.com/chickhen-r2-for-frimware-503-released/">chickHEN R2</a></b><br /><b><a href="http://advancedpsp.tk/foro_es/viewtopic.php?f=23&t=21">chickHEN mod2</a></b><br /><b><a href="http://www.psp-hacks.com/2009/12/01/mhuspeed-v3-an-alternative-to-chickhen/">MHUSPEED v3</a> { loads easily }</b><br /><b><br /></b><br /><b>:: DOWNGRADERS ::</b><br /><b><br /></b><br /><b><a href="http://pspslimhacks.com/hellcats-recovery-flasher-v160-detection-for-hen-mode/">HELLCAT'S RECOVERY FLASHER v1.60 [LATEST] </a></b><br /><b>This is for fully hackable PSPs only.</b><br /><b>You will brick your PSP if you downgrade a Partially Hackable one.</b><br /><br /><b><a href="http://fserv.skill-club.com/get_1187_f341.html">5.50 GEN-D3 Final Firmware Pack for Hellcats Recovery Flasher v1.60</a> </b><br /><b>( open the readme.txt for very clear instructions ) </b><br /><b><br /></b><br /><div align="center"><b>:: UTILITIES AND PLUGINS ::</b><br /><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/pspident-04-find-out-what-psp-motherboard-you-have/">PSPIdent 0.4</a> </b></div><div align="left"><b>Use this to find out your PSP's motherboard.</b></div><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/rains-ultralite-mms-maker-for-500-m33-4/">Rains Ultralite MMS Maker</a> </b></div><div align="left"><b>Use this to make a Magic Memory Stick</b></div><div align="left"><b><a href="http://pspslimhacks.com/ultimate-vsh-menu-revised-by-total_noob/">Ultimate VSH Menu Revised by Total Noob</a> </b><br /><b>Addon to the normal VSH menu </b></div><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/go-tube-version-1-1-released-youtube-on-your-psp/">Go Tube v1.1 Use this to watch youtube videos</a> </b></div><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/index.php?dl_id=452">PSP Cheat dev: DayPR Rev.6 bugfix</a> </b><br /><b>Go cheating ! </b></div><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/cxmb-for-3-71-5-50/">CXMB for 3.71-5.50</a> </b></div><div align="left"><b>Use this to install CTF themes to your fully hackable PSP.</b><br /><br /><b><a href="http://dl.qj.net/psp/homebrew-applications/unofficial-cxmb-for-503-m33/gen-v2.html">CXMB MOD for 5.03 CFW</a> </b><br /><b>CXMB mod for partially hackable PSP. </b></div><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/pspdisp-v0-4-use-your-psp-as-a-second-display/">PSPdisp v0.4 – Use your PSP as a second display</a> </b><br /><b>Displays your PC's monitor on PSP</b></div><div align="center"><b>:: EMULATORS ::</b><br /><div align="left"><br /></div><div align="left"><b><a href="http://pspslimhacks.com/psp-emulators/">All latest emulators are here</a> </b></div></div><div align="left"><b> </b><b><br /></b></div></div><b><br /></b><br /><br /><script src="http://widgets.amung.us/tab.js" type="text/javascript"></script><script type="text/javascript">WAU_tab('1j6mzn539zwl', 'left-middle')</script><br /><a href="http://www.freebloghitcounter.com/" target="_blank"><img alt="blog counter" border="0" src="http://www.freebloghitcounter.com//counter.php?page=skyend-pspslimhacks.blogspot.com&digits=33&unique=0" /></a><br /><br /><a href="http://www.freebloghitcounter.com/" style="color: black; font-family: Verdana; font-size: 9px; text-decoration: none;" target="_blank">blog counter</a><br /><div id="eXTReMe"><a href="http://extremetracking.com/open?login=skypsh"><br /><img alt="eXTReMe Tracker" height="38" id="EXim" src="http://t1.extreme-dm.com/i.gif" style="border: 0;" width="41" /></a><br /><script type="text/javascript"><!--var EXlogin='skypsh' // Loginvar EXvsrv='s10' // VServerEXs=screen;EXw=EXs.width;navigator.appName!="Netscape"?EXb=EXs.colorDepth:EXb=EXs.pixelDepth;EXsrc="src";navigator.javaEnabled()==1?EXjv="y":EXjv="n";EXd=document;EXw?"":EXw="na";EXb?"":EXb="na";EXd.write("<img "+EXsrc+"=http://e1.extreme-dm.com","/"+EXvsrv+".g?login="+EXlogin+"&","jv="+EXjv+"&j=y&srw="+EXw+"&srb="+EXb+"&","l="+escape(EXd.referrer)+" height=1 width=1>");//--></script><noscript><div id="neXTReMe"><img height="1" width="1" alt="" src="http://e1.extreme-dm.com/s10.g?login=skypsh&j=n&jv=n" /><br /> </div></noscript></div><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/3997450343586226773-6585464798668050106?l=skyend-pspslimhacks.blogspot.com' alt='' /></div>skyendhttp://www.blogger.com/profile/04669064968788426270noreply@blogger.com6