Added 3.02U support

Author: MFDGaming

.github/workflows/compile.yml

@@ -33,6 +33,8 @@ jobs:
         mv build/exploit.iso release/exploit_3.02J.iso
         ./compile.sh 3.02K
         mv build/exploit.iso release/exploit_3.02K.iso
+        ./compile.sh 3.02U
+        mv build/exploit.iso release/exploit_3.02U.iso
 
     - name: Upload ISO Artifact
       uses: actions/upload-artifact@v6

compile.sh

@@ -26,6 +26,9 @@ elif [[ "$1" == "3.02j" || "$1" == "3.02J" ]]; then
 elif [[ "$1" == "3.02k" || "$1" == "3.02K" ]]; then
     echo "Building for DVD Player v3.02K"
     dvd_ver="302K"
+elif [[ "$1" == "3.02u" || "$1" == "3.02U" ]]; then
+    echo "Building for DVD Player v3.02U"
+    dvd_ver="302U"
 else
     echo "Building for DVD Player v3.00E/A"
 fi

src/code/code.c

@@ -18,6 +18,7 @@ static void setup_pointers() {
     u32 *video_ts_ifo_302g = (u32 *)0x00683d90;
     u32 *video_ts_ifo_302j = (u32 *)0x00685f10;
     u32 *video_ts_ifo_302k = (u32 *)0x00682810;
+    u32 *video_ts_ifo_302u = (u32 *)0x0090c210;
     if (video_ts_ifo_300e[0] == 0x45444956) {
         sceSifSyncIop = (sceSifSyncIop_t)0x00283460;
         sceSifResetIop = (sceSifResetIop_t)0x002832f8;
@@ -163,6 +164,22 @@ static void setup_pointers() {
         _sceCd_c_cb_sem = (int *)0x004d43b0;
         _sceCd_cd_ncmd = (void *)0x004d5550;
         _sceCd_ncmd_semid = (int *)0x004d43a8;
+    } else if (video_ts_ifo_302u[0] == 0x45444956) {
+        sceSifSyncIop = (sceSifSyncIop_t)0x00284c10;
+        sceSifResetIop = (sceSifResetIop_t)0x00284aa8;
+        sceSifInitRpc = (sceSifInitRpc_t)0x00207d20;
+        sceSifExitRpc = (sceSifExitRpc_t)0x00207ec0;
+        sceSifCallRpc = (sceSifCallRpc_t)0x00208560;
+        sceSifWriteBackDCache = (sceSifWriteBackDCache_t)0x0020a080;
+        sceCdNCmdDiskReady = (sceCdNCmdDiskReady_t)0x00258a90;
+        _sceCd_ncmd_prechk = (_sceCd_ncmd_prechk_t)0x00258920;
+        _sceCd_cd_read_intr = (_sceCd_cd_read_intr_t)0x002582e8;
+        sceCdSync = (sceCdSync_t)0x00258b28;
+        sceCdDiskReady = (sceCdDiskReady_t)0x00259028;
+        sceCdCbfunc_num = (int *)0x004d4154;
+        _sceCd_c_cb_sem = (int *)0x004d4130;
+        _sceCd_cd_ncmd = (void *)0x004d52d0;
+        _sceCd_ncmd_semid = (int *)0x004d4128;
     }
 }
 

src/injector/injector.c

@@ -186,6 +186,13 @@ int generate_exploit_pgc(char *out_path, uint32_t off, uint32_t len, uint32_t ea
 #define JUMP_POINTER 0x00687748
 #define CMD_DATA_ADDR 0x013154b0
 #define IFO_BUFFER 0x01318d00
+#elif V302U
+#define VM_CMD_PARSER_SWITCH_ADDR 0x0090c278
+#define VM_ADDR 0x013cfac0
+#define VOB_BUFFER_ADDR 0x013d84c0
+#define JUMP_POINTER 0x009111c0
+#define CMD_DATA_ADDR 0x013c9a30
+#define IFO_BUFFER 0x013cd280
 #endif
 
 #define CTRL_DATA_ADDR (VOB_BUFFER_ADDR + 0x0c + 0x629)

src/jump/jump.c

@@ -18,6 +18,8 @@
 #define RBI_ADDR 0x00256330
 #elif V302K
 #define RBI_ADDR 0x002566a8
+#elif V302U
+#define RBI_ADDR 0x00256668
 #endif
 
 typedef int (*readBufferInternal_t)(char *, int, int, void *, int, int);

src/ld/jump.ld

@@ -16,7 +16,7 @@ BV300E = 0x0155d510;
 BV300U = 0x01387f10;
 BV300J = 0x01103710;
 BV302J = 0x01152790;
-BV302U = 0;
+BV302U = 0x013d8b10;
 BV302A = 0;
 BV302E = 0x015ae110;
 BV302K = 0x01324590;