还有个叫：TrUMD (Train) iSO Loader 2.71 BETA For PSP 的东东

这个东东不是devhook…………，别测试了

楼主还是卡那可能Dark_AleX大大自己帖的原文吧，我不知道版本b有什么区别，Dark_Alex大大在论坛里面没有放出。原文说这只是在2.71下直接在PSP操作界面运行自制软件的东东
===============================================================


This program enables homebrew to be run in 2.71 through the XMB. Itmakes a patch that remains permanent until hardwar reset. Sleep modewon't remove the patch.

Note: this program writes some smallfiles in the flash, ONLY the first time is executed. IT does NOYrewrite any existing file in the system, it writes new files, so theprobabilities of breaking are practically null.

It doesn'twork on DevHook, because the patch methods that it does interphere withDevHook. I may release in the future a special version for 2.71 DevHookthat only does the extended patches for the kernel PRX loading. Itwould be added to the pspbtcnf* files, so no need for the TIFF when Iport it to DevHook.

Instructions
------------

- Copy all contents inside MS_ROOT to the root of your memory stick.
- Go to the PHOTO viewer of the XMB and enter in the folder "HEN".
- If the PSP just freeze, reboot your psp and try again. Currently the TIFF is very unstable and it
is only executed sometimes. I'll try to improve that in the future.

- The first time you run the program, you will see quickly a blue screen, and after that a screen
that can be of two colors:

* Red: the files couldn't be written to the flash (it hapens a few times). Just keep trying.
* Green: The files were written succesfully. After that, the xmb will be rebooted. Now you can run
the homebrew in format prepared for 2.71. (see details below).

- As mentioned before, the patch will remain resident in memory, and even entering sleep mode
won't delete it. Only a hardware reset will remove the program from memory.

- When you do a hardware reset, you'll have to run the TIFF again.
This time there won't be green or red screen, just a blue screen and xmb reboot, since
this time there is no need to write to the flash.

Note: the files pspbtknf.txt, pspbtknf_game.txt, pspbtknf_updater, and systemctrl.prx in the root
of the memory stick are only needed the first time the program is executed. After that you
can delete those. However, don't delete patch.bin, h.bin and the folder with the TIFF, since
you will need those the next time you do a hard reset and want to run the program again.

Note2: Once the program is loaded, it is independant of the memory stick contents. So you can
freely swap memory sticks.


Notes about homebrew running
-----------------------------

- Current homebrews are not supported. Since current homebrews are in static ELF format,  they
won't run (they are rejected by the 2.71 kernel). Homebrews for 2.71 have to be in PRX format.
Programmers see the programming notes.
In future versions i may patch the kernel to allow it to accept static ELF's.

- There are some samples in the "GAME" directory, all of them ported from the psp sdk samples,
except the nanddumper written by me.

* polyphonic, psp sdk sample (user mode).
* cube, psp sdk sample (user mode). It shows a cube rotating.
* kdumper, psp sdk sample (kernel mode). It dumps kernel memory to the memory stick.
* ipldumper, psp sdk sample (kernel mode). It dumps the ipl to the memory stick.
* systemparam, psp sdk sample  (user mode). It displays info about the system
* nanddumper, by me. (kernel mode). It dumps the full nand content to the file
"nandimage.flash" in the memory stick. The format of the dump is compliant with U.P. chip.
(It requires 33 MB of free space in the memory stick).



Programming notes for developers
--------------------------------

- As mentioned before, homebrew has to be in PRX format, at least atm. Furthermore, the main PRX, the one in
the PBP, has to be an user PRX. However this user PRX can load unsigned kernel modules from
the memory stick, allowing kernel mode apps.

- There is no need for noplainmodule check patch or nodevicecheck patch, since those are done
by the homebrew enabler.

- Try to use USE_KERNEL_LIBS = 1 in your kernel PRX's. In 2.XX, the separation between user
and kernel mode is higher than in 1.XX.
Some functions in "*ForUser" are now totally separated (different address) from their
"*ForKernel" equivalents. A good example is ModuleMgr. If you are in a kernel prx and
you call the sceKernelLoadModule of ModuleMgrForUser, you will get a "ILLEGA_PERMANENT_CALL" error.

- Currently DevHook emulated 2.71 is not supported. I'll try to add support to DevHook, so
programs for 2.71 can be developed in a 1.50

- See the source code of the samples to have a hint on how to program for 2.71.

Credits and thanks.
-------------------

- Coded by Dark_AleX

Thanks to:

- Booster for creating devhook. HEN reboot method is based on devhook one.
- Nopx86 of the TIFF exploit.
- hitchhikr for the kernel exploit of 2.50-2.71.

A大的原帖在PS2NFO论坛有，给出连接，大家自己去看看吧，原文根本没有写自己是移植了DevHook，反倒是说如何和DevHook合用如何如何：

http://www.ps2nfo.com/forums/showthread.php?t=26876

不过刚才看了楼主给的地址，上面说PS2NFO是模仿他的…………

这也太强了 ORZ

不过国外相关的破解网站，连权威的PSPUPDATE都没有放出，我看大家还是谨慎些吧

引用:

原帖由 kurara 于 2006-9-24 21:35 发表
而且在这个Devhook模拟1.5系统以后，还能运行那些在1.5的主机上才能运行的软件
D_A发布的压缩包里面就有一个给模拟的1.5用普通的1.5版DH，用于再模拟2.71:D
这么说那些PMP-AVC一类的软件也能在2.71的PSP上运行了

看来真有可能是A大发布的了，完全的devhook指日可待？

看来误解楼主了，向你道歉