From 7ae6951c6eb4022b6903daf34d5edfb7c6054cb1 Mon Sep 17 00:00:00 2001
From: AKuHAK <621640+AKuHAK@users.noreply.github.com>
Date: Mon, 21 Mar 2022 19:10:47 +0200
Subject: [PATCH] kpatch (2018/01/29)

---
 kpatch/README.txt                     |  68 +++++++
 kpatch/Rules.eeload.make              |  61 +++++++
 kpatch/Rules.patch.make               |  57 ++++++
 kpatch/linkfile-eeload                | 110 +++++++++++
 kpatch/linkfile-patch                 | 107 +++++++++++
 kpatch/patch0100/EELOAD.img           | Bin 0 -> 9112 bytes
 kpatch/patch0100/EELOAD/EELOAD.c      | 251 ++++++++++++++++++++++++++
 kpatch/patch0100/EELOAD/Makefile      |   8 +
 kpatch/patch0100/EELOAD/dvdplayer.txt |   1 +
 kpatch/patch0100/Makefile             |  13 ++
 kpatch/patch0100/osdsys.c             |  29 +++
 kpatch/patch0101/EELOAD.img           | Bin 0 -> 8984 bytes
 kpatch/patch0101/EELOAD/EELOAD.c      | 249 +++++++++++++++++++++++++
 kpatch/patch0101/EELOAD/Makefile      |   8 +
 kpatch/patch0101/Makefile             |  13 ++
 kpatch/patch0101/osdsys.c             |  29 +++
 16 files changed, 1004 insertions(+)
 create mode 100644 kpatch/README.txt
 create mode 100644 kpatch/Rules.eeload.make
 create mode 100644 kpatch/Rules.patch.make
 create mode 100644 kpatch/linkfile-eeload
 create mode 100644 kpatch/linkfile-patch
 create mode 100644 kpatch/patch0100/EELOAD.img
 create mode 100644 kpatch/patch0100/EELOAD/EELOAD.c
 create mode 100644 kpatch/patch0100/EELOAD/Makefile
 create mode 100644 kpatch/patch0100/EELOAD/dvdplayer.txt
 create mode 100644 kpatch/patch0100/Makefile
 create mode 100644 kpatch/patch0100/osdsys.c
 create mode 100644 kpatch/patch0101/EELOAD.img
 create mode 100644 kpatch/patch0101/EELOAD/EELOAD.c
 create mode 100644 kpatch/patch0101/EELOAD/Makefile
 create mode 100644 kpatch/patch0101/Makefile
 create mode 100644 kpatch/patch0101/osdsys.c

diff --git a/kpatch/README.txt b/kpatch/README.txt
new file mode 100644
index 0000000..5ce022a
--- /dev/null
+++ b/kpatch/README.txt
@@ -0,0 +1,68 @@
+OSDSYS patch for ROM v1.0x	- 2018/01/29
+--------------------------------------------
+
+This package contains the source code for clones of the OSDSYS patches, meant for ROM v1.00 and v1.01.
+As with the OSD update files, these files were meant to be encapsulated as KELFs. But I will not cover that here.
+
+The first PlayStation 2 consoles (SCPH-10000 & SCPH-15000) had a considerably different boot ROM from the expansion-bay consoles.
+Other than having the earliest-possible IOP and EE kernels, their OSDSYS programs were coded rather differently and had a design flaw that prevented arguments from being passed to memory-card updates.
+
+These are the original update files and their descriptions:
+
+Model                 ROM             Update File  Description
+SCPH-10000            0100JC20000117  osdsys.elf   OSDSYS patch (patch0100).
+SCPH-10000/SCPH-15000 0101JC20000217  osd110.elf   System Driver Update + OSDSYS patch (patch0101).
+SCPH-18000            0120JC20001027  osd130.elf   System Driver Update + OSDSYS patch (patch0101). Exactly the same in content as osd110.elf.
+
+The OSDSYS patch will copy a ROM image that contains a replacement EELOAD program, into kernel memory (0x80030000).
+It will then patch the EE kernel to scan 0x80030000-0x80040000 for the EELOAD, instead of the boot ROM.
+
+The System Driver Update attempts to boot the HDD-based update from the HDD unit.
+While the SCPH-18000 contained a modern ROM that did not have the same deficiencies as its predecessors,
+it is incapable of supporting the CXD9566R PCMCIA controller of the SCPH-18000. As a result, it needed extra help to boot updates from the HDD unit.
+
+osd110.elf and osd130.elf are the system driver update main executables, which also contain a patch that is similar to the code within osdsys.elf, which install a replacement EELOAD program that will replace rom0:EELOAD.
+This patch targets OSDSYS from ROM v1.01J, and does nothing for other ROM versions.
+As a result, its patches are also different from the ones that osdsys.elf applies (see below).
+
+This EELOAD replacement will wait for a request that boots rom0:OSDSYS, before loading rom0:OSDSYS and applying a few fixes to it:
+	1. Patch the memory card update dispatcher to pass arguments.
+	2. patch0100 only: Overwrite the Japanese message (DVDプレーヤーが起動できませんでした。), which says that that the DVD Player could not be started.
+	3. patch0100 only: Replaces update filenames and commands.
+
+Once the OSDSYS-patching code within EELOAD is run, its effects are binding until the console is hard-reset or powered off.
+
+Modifications for FMCB, which this package has:
+-----------------------------------------------
+FMCB sits in for the system driver update. To save space, I made osd110.elf similar to osdsys.elf; instead of being a full system driver update, it will patch OSDSYS to boot osd130.elf.
+The osdsys.elf patch was also made to boot osd130.elf directly, hence allowing only one copy of the system driver update to exist.
+
+Official path of execution:
+ROM v1.00J: osdsys.elf -> osd110.elf -> HDD update
+ROM v1.01J: osd110.elf -> HDD update
+ROM v1.20J: osd130.elf -> HDD update
+
+New (unofficial) path of execution:
+ROM v1.00J: osdsys.elf -> osd130.elf -> HDD update
+ROM v1.01J: osd110.elf -> osd130.elf -> HDD update
+ROM v1.20J: osd130.elf -> HDD update
+
+Notes for compilation:
+----------------------
+These patches are split into two parts: The main program and an ROM image that contains EELOAD.
+It is possible to build the patch without rebuilding EELOAD, by just entering "make".
+
+The EELOAD module is a binary file, built to be loaded at 0x00082000. To build a ROM image, you need a tool (i.e. ROMIMG).
+If you wish to rebuild EELOAD, you need to:
+1. Build EELOAD, by entering "make" from within the EELOAD folder.
+2. Convert it into a binary file. You can do that with ee-objdump.
+3. Generate a new ROM image named 'EELOAD.img', that contains EELOAD.
+4. Rebuild the patch.
+
+Other trivia:
+-------------
+Within the comments of the ROM images, the EELOAD images are known as "eeload.rom".
+Their original paths were as follows:
+osdsys.elf: horikawa@phoenix/ee/src/kernel/patch0100/kpatch
+osd110.elf: horikawa@phoenix/ee/src/kernel/patch0101/kpatch
+
diff --git a/kpatch/Rules.eeload.make b/kpatch/Rules.eeload.make
new file mode 100644
index 0000000..c3b82bd
--- /dev/null
+++ b/kpatch/Rules.eeload.make
@@ -0,0 +1,61 @@
+# _____     ___ ____     ___ ____
+#  ____|   |    ____|   |        | |____|
+# |     ___|   |____ ___|    ____| |    \    PS2DEV Open Source Project.
+#-----------------------------------------------------------------------
+# Copyright 2001-2004, ps2dev - http://www.ps2dev.org
+# Licenced under Academic Free License version 2.0
+# Review ps2sdk README & LICENSE files for further details.
+
+EE_CC_VERSION := $(shell $(EE_CC) --version 2>&1 | sed -n 's/^.*(GCC) //p')
+
+CRT0_OBJ = crt0.o
+MAPFILE = memory.map
+
+EE_INCS := $(EE_INCS) -I$(PS2SDK)/ee/include -I$(PS2SDK)/common/include -I.
+EE_LDFLAGS := $(EE_LDFLAGS) -L$(PS2SDK)/ee/lib -s -Wl,-Map,$(MAPFILE)
+EE_LIBS := $(EE_LIBS) -lc -lkernel-nopatch
+
+# C compiler flags
+EE_CFLAGS := -D_EE -G0 -Os -Wall $(EE_INCS) $(EE_CFLAGS)
+
+# C++ compiler flags
+EE_CXXFLAGS := -D_EE -G0 -Os -Wall $(EE_INCS) $(EE_CXXFLAGS)
+
+# Assembler flags
+EE_ASFLAGS := $(EE_ASFLAGS)
+
+# Externally defined variables: EE_BIN, EE_OBJS, EE_LIB, LINKFILE, CRT0_OBJ_S
+
+# These macros can be used to simplify certain build rules.
+EE_C_COMPILE = $(EE_CC) $(EE_CFLAGS)
+EE_CXX_COMPILE = $(EE_CXX) $(EE_CXXFLAGS)
+
+# Extra macro for disabling the automatic inclusion of the built-in CRT object(s)
+ifeq ($(EE_CC_VERSION),3.2.2)
+	EE_NO_CRT = -mno-crt0
+else ifeq ($(EE_CC_VERSION),3.2.3)
+	EE_NO_CRT = -mno-crt0
+else
+	EE_NO_CRT =
+endif
+
+%.o : %.c
+	$(EE_CC) $(EE_CFLAGS) $(EE_INCS) -c $< -o $@
+
+%.o : %.s
+	$(EE_AS) $(EE_ASFLAGS) $< -o $@
+
+%.o : %.S
+	$(EE_CC) $(EE_CFLAGS) $(EE_INCS) -c $< -o $@
+
+$(EE_BIN) : $(EE_OBJS) $(CRT0_OBJ)
+	$(EE_CC) $(EE_NO_CRT) -nostartfiles -T$(LINKFILE) $(EE_CFLAGS) \
+		-o $(EE_BIN) $(CRT0_OBJ) $(EE_OBJS) $(EE_LDFLAGS) $(EE_LIBS)
+	$(EE_STRIP) -s -d -R .mdebug.eabi64 -R .reginfo -R .comment $(EE_BIN)
+	$(EE_OBJCOPY) -O binary $(EE_BIN) EELOAD
+
+$(CRT0_OBJ) : $(CRT0_OBJ_S)
+	$(EE_AS) $(EE_ASFLAGS) $< -o $@
+
+clean::
+	rm -f $(EE_BIN) $(EE_OBJS) $(CRT0_OBJ) $(MAPFILE) EELOAD
diff --git a/kpatch/Rules.patch.make b/kpatch/Rules.patch.make
new file mode 100644
index 0000000..0e6c9ba
--- /dev/null
+++ b/kpatch/Rules.patch.make
@@ -0,0 +1,57 @@
+# _____     ___ ____     ___ ____
+#  ____|   |    ____|   |        | |____|
+# |     ___|   |____ ___|    ____| |    \    PS2DEV Open Source Project.
+#-----------------------------------------------------------------------
+# Copyright 2001-2004, ps2dev - http://www.ps2dev.org
+# Licenced under Academic Free License version 2.0
+# Review ps2sdk README & LICENSE files for further details.
+
+EE_CC_VERSION := $(shell $(EE_CC) --version 2>&1 | sed -n 's/^.*(GCC) //p')
+
+LINKFILE = ../linkfile-patch
+MAPFILE = memory.map
+
+EE_INCS := $(EE_INCS) -I$(PS2SDK)/ee/include -I$(PS2SDK)/common/include -I.
+EE_LDFLAGS := $(EE_LDFLAGS) -L$(PS2SDK)/ee/lib -s -Wl,-Map,$(MAPFILE)
+EE_LIBS := $(EE_LIBS) -lc -lkernel-nopatch
+
+# C compiler flags
+EE_CFLAGS := -D_EE -G0 -Os -Wall $(EE_INCS) $(EE_CFLAGS)
+
+# C++ compiler flags
+EE_CXXFLAGS := -D_EE -G0 -Os -Wall $(EE_INCS) $(EE_CXXFLAGS)
+
+# Assembler flags
+EE_ASFLAGS := $(EE_ASFLAGS)
+
+# Externally defined variables: EE_BIN, EE_OBJS, EE_LIB
+
+# These macros can be used to simplify certain build rules.
+EE_C_COMPILE = $(EE_CC) $(EE_CFLAGS)
+EE_CXX_COMPILE = $(EE_CXX) $(EE_CXXFLAGS)
+
+# Extra macro for disabling the automatic inclusion of the built-in CRT object(s)
+ifeq ($(EE_CC_VERSION),3.2.2)
+	EE_NO_CRT = -mno-crt0
+else ifeq ($(EE_CC_VERSION),3.2.3)
+	EE_NO_CRT = -mno-crt0
+else
+	EE_NO_CRT =
+endif
+
+%.o : %.c
+	$(EE_CC) $(EE_CFLAGS) $(EE_INCS) -c $< -o $@
+
+%.o : %.s
+	$(EE_AS) $(EE_ASFLAGS) $< -o $@
+
+%.o : %.S
+	$(EE_CC) $(EE_CFLAGS) $(EE_INCS) -c $< -o $@
+
+$(EE_BIN) : $(EE_OBJS)
+	$(EE_CC) $(EE_NO_CRT) -nostartfiles -T$(LINKFILE) $(EE_CFLAGS) \
+		-o $(EE_BIN) $(EE_CRT0_OBJ) $(EE_OBJS) $(EE_LDFLAGS) $(EE_LIBS)
+	$(EE_STRIP) -s -d -R .mdebug.eabi64 -R .reginfo -R .comment $(EE_BIN)
+
+clean::
+	rm -f $(EE_BIN) $(EE_OBJS) $(MAPFILE)
diff --git a/kpatch/linkfile-eeload b/kpatch/linkfile-eeload
new file mode 100644
index 0000000..8dbb5cd
--- /dev/null
+++ b/kpatch/linkfile-eeload
@@ -0,0 +1,110 @@
+/*
+# _____     ___ ____     ___ ____
+#  ____|   |    ____|   |        | |____|
+# |     ___|   |____ ___|    ____| |    \    PS2DEV Open Source Project.
+#-----------------------------------------------------------------------
+# Copyright 2001-2004, ps2dev - http://www.ps2dev.org
+# Licenced under Academic Free License version 2.0
+# Review ps2sdk README & LICENSE files for further details.
+#
+# $Id$
+# Linkfile script for ee-ld
+*/
+
+ENTRY(_start);
+
+SECTIONS {
+	.text 0x00082000: {
+		_ftext = . ;
+		*(.start)
+		*(.text)
+		*(.text.*)
+		*(.gnu.linkonce.t*)
+		KEEP(*(.init))
+		KEEP(*(.fini))
+		QUAD(0)
+	}
+
+	PROVIDE(_etext = .);
+	PROVIDE(etext = .);
+
+	.reginfo : { *(.reginfo) }
+
+	/* Global/static constructors and deconstructors. */
+	.ctors ALIGN(16): {
+		KEEP(*crtbegin*.o(.ctors))
+		KEEP(*(EXCLUDE_FILE(*crtend*.o) .ctors))
+		KEEP(*(SORT(.ctors.*)))
+		KEEP(*(.ctors))
+	}
+	.dtors ALIGN(16): {
+		KEEP(*crtbegin*.o(.dtors))
+		KEEP(*(EXCLUDE_FILE(*crtend*.o) .dtors))
+		KEEP(*(SORT(.dtors.*)))
+		KEEP(*(.dtors))
+	}
+
+	/* Static data.  */
+	.rodata ALIGN(128): {
+		*(.rodata)
+		*(.rodata.*)
+		*(.gnu.linkonce.r*)
+	}
+
+	.data ALIGN(128): {
+		_fdata = . ;
+		*(.data)
+		*(.data.*)
+		*(.gnu.linkonce.d*)
+		SORT(CONSTRUCTORS)
+	}
+
+	.rdata ALIGN(128): { *(.rdata) }
+	.gcc_except_table ALIGN(128): { *(.gcc_except_table) }
+
+	_gp = ALIGN(128) + 0x7ff0;
+	.lit4 ALIGN(128): { *(.lit4) }
+	.lit8 ALIGN(128): { *(.lit8) }
+
+	.sdata ALIGN(128): {
+		*(.sdata)
+		*(.sdata.*)
+		*(.gnu.linkonce.s*)
+	}
+
+	_edata = .;
+	PROVIDE(edata = .);
+
+	/* Uninitialized data.  */
+	.sbss ALIGN(128) : {
+		_fbss = . ;
+		*(.sbss)
+		*(.sbss.*)
+		*(.gnu.linkonce.sb*)
+		*(.scommon)
+	}
+
+	.bss ALIGN(128) : {
+		*(.bss)
+		*(.bss.*)
+		*(.gnu.linkonce.b*)
+		*(COMMON)
+	}
+	_end_bss = .;
+
+	/* Symbols needed by crt0.s.  */
+	PROVIDE(_heap_size = 0x2000);
+	PROVIDE(_stack_size = 0x2000);
+
+	_stack = ALIGN(128);
+	PROVIDE(_stack = .);
+	. = _stack + _stack_size;
+
+	_end = .;
+	PROVIDE(end = .);
+
+	/* Unwanted stuff */
+	/DISCARD/ : {
+		* ( .MIPS.abiflags )
+	}
+}
diff --git a/kpatch/linkfile-patch b/kpatch/linkfile-patch
new file mode 100644
index 0000000..ed3673f
--- /dev/null
+++ b/kpatch/linkfile-patch
@@ -0,0 +1,107 @@
+/*
+# _____     ___ ____     ___ ____
+#  ____|   |    ____|   |        | |____|
+# |     ___|   |____ ___|    ____| |    \    PS2DEV Open Source Project.
+#-----------------------------------------------------------------------
+# Copyright 2001-2004, ps2dev - http://www.ps2dev.org
+# Licenced under Academic Free License version 2.0
+# Review ps2sdk README & LICENSE files for further details.
+#
+# $Id$
+# Linkfile script for ee-ld
+*/
+
+ENTRY(_start);
+
+SECTIONS {
+	.text 0x00200000: {
+		_ftext = . ;
+		*(.start)
+		*(.text)
+		*(.text.*)
+		*(.gnu.linkonce.t*)
+		KEEP(*(.init))
+		KEEP(*(.fini))
+		QUAD(0)
+	}
+
+	PROVIDE(_etext = .);
+	PROVIDE(etext = .);
+
+	.reginfo : { *(.reginfo) }
+
+	/* Global/static constructors and deconstructors. */
+	.ctors ALIGN(16): {
+		KEEP(*crtbegin*.o(.ctors))
+		KEEP(*(EXCLUDE_FILE(*crtend*.o) .ctors))
+		KEEP(*(SORT(.ctors.*)))
+		KEEP(*(.ctors))
+	}
+	.dtors ALIGN(16): {
+		KEEP(*crtbegin*.o(.dtors))
+		KEEP(*(EXCLUDE_FILE(*crtend*.o) .dtors))
+		KEEP(*(SORT(.dtors.*)))
+		KEEP(*(.dtors))
+	}
+
+	/* Static data.  */
+	.rodata ALIGN(128): {
+		*(.rodata)
+		*(.rodata.*)
+		*(.gnu.linkonce.r*)
+	}
+
+	.data ALIGN(128): {
+		_fdata = . ;
+		*(.data)
+		*(.data.*)
+		*(.gnu.linkonce.d*)
+		SORT(CONSTRUCTORS)
+	}
+
+	.rdata ALIGN(128): { *(.rdata) }
+	.gcc_except_table ALIGN(128): { *(.gcc_except_table) }
+
+	_gp = ALIGN(128) + 0x7ff0;
+	.lit4 ALIGN(128): { *(.lit4) }
+	.lit8 ALIGN(128): { *(.lit8) }
+
+	.sdata ALIGN(128): {
+		*(.sdata)
+		*(.sdata.*)
+		*(.gnu.linkonce.s*)
+	}
+
+	_edata = .;
+	PROVIDE(edata = .);
+
+	/* Uninitialized data.  */
+	.sbss ALIGN(128) : {
+		_fbss = . ;
+		*(.sbss)
+		*(.sbss.*)
+		*(.gnu.linkonce.sb*)
+		*(.scommon)
+	}
+
+	.bss ALIGN(128) : {
+		*(.bss)
+		*(.bss.*)
+		*(.gnu.linkonce.b*)
+		*(COMMON)
+	}
+	_end_bss = .;
+
+	_end = . ;
+	PROVIDE(end = .);
+
+	/* Symbols needed by crt0.s.  */
+	PROVIDE(_heap_size = -1);
+	PROVIDE(_stack = -1);
+	PROVIDE(_stack_size = 128*1024);
+
+	/* Unwanted stuff */
+	/DISCARD/ : {
+		* ( .MIPS.abiflags )
+	}
+}
diff --git a/kpatch/patch0100/EELOAD.img b/kpatch/patch0100/EELOAD.img
new file mode 100644
index 0000000000000000000000000000000000000000..24f1f901043053e28a4b5d2950faba475dd34ce6
GIT binary patch
literal 9112
zcmc&(Yiu0Xbv`pYB$pH|4XL%gQW$wC&PtTc30Eo&)5aDU&n_KWwJla60vmC{H7O|)
zEQPe=wo0lZ<CWsd$eJe5{&4>-Br{Q(&5BOxSShM#A<+U`sD)q{Nm{5NAtjKF<{`U|
z>)5iV-*;!0V%Cp7P@n^lGxy$e&pq#R?%C}FI|hb@Ph9=qzU}_pz1#Wuungh<z=Om0
zK5)-AwKl==z<t~9&T$x*pRQNab^i=aZ@$?Qc`&vmz4?yxo#`z-W8+`my?gJzT|MFM
z&+Og*rJgU3e{FpKUiSg@8vg3UE@yjh@1F7fyL!Ww-k}{^dhfYE>-A1N^2FGl^yYNB
zcj@r(jPHJ(ROlJWdUmtKGQK}%-xkkGgIH!rlzY$=&o<(^Vy;<?%+)i8?YJ~#{QR^n
z(wGtJ9L7z+aRu*q=C~D4Ig7qzBxbh)iSwE(+~@m;0p9@lY5Vu1wUf<ys{>B^MZCC}
zz+r9>F(%WPH>6?1OtT($ELV}z745kioZ2XII;ia>{o8PU^={AZ20b%BJlEGG**zlJ
zeXAt5CoZ{tH_N~tQwH`m$=Ml^v$LyYZYC~svp37jGp4*edkf%`fbWvr5leE<*)rhY
z0@x&AyJYUTC37cjdAXF5te=vzC7$^j&a=P|&zyLPXAa`bL7bVznOU5f!<jjpIgc~v
zapqZ^c@}5R;mo<&qzw9NfG;WYr8U5LVe51s@y5N7kE#C!&RakO@b0sKw^MT9VIDlp
z&sxCWDRYYMbcDZj@;c3+*KY=VjaJZEY6g4@Xlwy}axIow4IMgZs^Vx-s)ze*Gb<^R
zhJ3VKNH!`vG9eQ`8I#WBs2Fk%`W`LL$k`r|OXatNe8P|`c1>@5>tX=r^g>(~W2T(i
zsB~+>9-&`z(d&a*6fN=6F>w>i;r<SLNr@%8t(jWJTwGrk>~r4?_ek1HzZY;19#gj$
z1JC{-a635sRUokK(+gt8G6r}`zd43;MvFFhc{gye#%E`lH1R7=n}^Lg-5i|`R<6)n
zUGK2{Fy5SbKic!7csO28=W>2(w2_}y#Sb=v<~lyj-{EPQY<5TINj~NVfu6Y%czrhH
zEcrw3Dg(Gq=@|<?;tFMuElXYpGx*LI)cS#F|7G&8WL%h%n{-(ruIZ#pKyb{DVGQ3%
zP|upsUqhI8AWKcAZNgD5j#-rpkclZT1kMp(9E-X*9f-_?e(9Iwd`l<~Cv72k=ozP9
zbU&B1{amg%tNeRc5%3Gxw*WlK2GX#B5bsPte8l1SzOpUa${=jl=`KMpM^980j+qlx
z(4kAA+mi1G&Xf=4NK;AD*uNIMktXUUE^V2|i4U~aY|!`YNfpby%^TjvnxC7tdz2oB
zx_#e-3=F%|Z_`)eEa+b+y}-NR04vU0qT2=C$FR?k%^T+N4ub6)exmS*)Xt<GiKHe!
z!2E--pLRu?2w_)=yOw*oPB_Bs0SxuPF>S9C@DrH3q<C=EzJCwgb=+6uhrEc`lQmvU
zacLO}N9}C6`>@>@*&kwS#G9r6K>3A8$iK*MG3L6he9fNxHO4jCh-*1*4WR7+X!}J(
z+dl)Ae31_Y3z`2Ie&YD9l09jH9$*&@869>>xi^7U&WWTe%jr57;R@*xc?V;{5C<P4
z$_q7rZK@mZtQ#Mw8~<tD*px!?gCJ%n#V<3)g|VqnUS!_!;jgrFpK_iFTHs&JGTmp%
zq2i4)YIev}@dnv7)D0Z4`ANhr@Z`$j$oJ-yER9LvSODqZVMf`#1^cmqBO!XlmRO|+
z`zh}v#vQ=(%fKBXzUFsa*qt%?I@UNQ|K0Mf;!3HSv=PK@oSPp?$hjh88gd`z^T@Ab
z#cM%+m~&ivJE#s5HrzvhE(!gJJkj4At3>+_=u7mYA5*XJDQC)+1kR@%IwUsP4E__6
zt01OToNi0+kZk2DcqENCiaTVBTS0Cq+F0+#S_1LB2jAk;rd{a&aGxuUHe!P~E_|vL
z=M0jo(9i09j4R#1N!j$^&9REHps`P$D!MXXY!&?(3-;*rGZyI2^vgYEOD=)$%b?>7
zzR#9zjJxG$fIU<0ke`F5%NWm<d$49o<M+~7?~s?vX{?)A>%%-O?HL1vGrk+Z3*EvF
zDf2LQ`H_y_Q}%g!;S%1hz@_Xak}GXT$rAGIkfzB{ma$B$jP-TMXUmXfnessXE>lJp
zU?3;(+>E$zxR3I&B@VsMAohfLleR-T7&qykjGM3x*y#%@9#=iDc+xvmY=C{nQR6KF
z$4ReH=J%|ZFVA|TMZ^QFncS;lTFovQk2Pttk9g*W4ED`>kCkhA2>!1dq{Y%R3D8M;
zX%i_|*HZnL;Fs}A3i%0Zu;Cc&0JYM_Y5OhUAurs|J)CdGSj~4&tJ;$DTyKfyt9A3O
z(R_Z>v|Y<<-1C>vfsVC*LcSs|lmq8wz_U5uDt}m}JfY(yn=?TVZO*s>Z!5~@*rQ2<
zJr&{mTj-MbDCe5JQH~r-bk3~jLZ+cDaMqS@6qE4dwQ^K6_`*MG0$CJ_aBA^4#V|K!
zcbWsre&G9M;;s1sa0V@;NBP3_`iOXIaFDP4NpQ5gec+!t`;mQKAM>UrO*U=t0pMm1
zU2a1k1>f)q@QfF<Aq#fK*kDFBo(BFZY)Zqu;Rxi1Z}^b3L!Wr`!VSvSKo^2r^<fWj
zHU~cVj7@2%89U8J<bXpZC+T9&^M9*qkMPbRek@acc*c&wU!X%3M?gbm59+{#v{kAP
zA1%=aV815}@Rvhu=Nj~??}0vB<=BbmupY-6?iU&A*FcV^u8a6a+>0R(B|sbN2juxY
z;@}JLi7-wx&l8^eu!r?yWFyE2v{}U9n$2*`Z_fP!_M?Foa#^z<(#id?1lYw{kXL%S
z{jko{pg-1lpdWQw-n^}wcEkEu<W2}j)qQ~Dm~ii+#^yKUH*q<pkNQvto>+#tEWBqe
z#%?otX84>(u7ki7JZDbTjUTPckAG4({%YO$YjxuwSd*y+ciyo<O3BWlZ;0*w6>68Q
zDSPlCt!t=TD?HQ!o*qp#$==OzvD(fIt&mlUwB#wigJ4sN!*>Jg)2_r*331!Fe>sdR
zA*>(0tI=DuaNdpHe)O(JZ{*caqY6n;R_aLn%hL~){$B_Jc_aOptiRQl9|RNfV&Ke_
zBrmgpb6m6``J2EgS(?kb^ErW?Aa_o=+7#@6BlC}66<OPYIQT8-)u@QH9fj?$K?11+
zvVIG6s->V4#3Rj+=87h(aeu8se>z}agniDQh|Bj+v`XoOtXVBN*l}m_&s5zcGJ!Z|
z!O%y`ntWvg<6K-GE6<PIQ>1+xvK#YfwjlTGs4Y>)m13_dpNDP0uRx=+ZSb`Kz81jK
z0{B?~FQ{){KusRndkOYl^NTlO!`w^!l+{l#CY?@lQJe=w<DEdorXfpX%yIf%<n+8a
zgLy>0)4^Qi3$*p+cK$!vPd}~S&w7pc;L~N&#c>B}A|E!MKuy(Y-V@n2aw?uMZsFbs
znkctgog>g6bLDyD${SR!Y=cbA%z5O>c~3|F^^7^ssyq)lHo$NBH;?amuK{aq8LrKF
z>nE8@89QpV3-Bs_89QpZljn-nnDM{h*(pU|6V5U+)sahOu2n}a+wO>G%NN7Am$IG`
z_lwhZ2lS0lW*fMln)tp2IiOW`l_~Fp<jYC?1wkDCQY{<!izA-C7ibOSn|KL-al|Wf
z9KyMP^XzL&Fzuj&=MTZASeF=+7t&*PHSHlUAA<Y}<yM(0Gv^w3*X|v>OPh<~JsP!O
zn)d<Dk=E<?^H@fzA&h8VIzt#mSA*&+Ox-nY&qcE3*_7{7O1`vl-DW&x%!G_9>k*?t
zXGMp8YH`#yhvXXW7&`WGjykE1r0E-|O=0txi(<5@JHi-_I>d#vM!KLw^bep9!kDPP
zn0s5rRrLaEheT8}uwEeDe-8Vno<n(MCu@6oRt=W8iHE*JoVC8iS&Uit5Kk>1)a;7*
zuG`iCbj34bu&+GydA+{iTy<m&d2bYT#xAv%fL#P%*E0cn1I_ZJVJ8bp@8?Hy#j1(E
z40;>}>ftcn4M3lvUGPrzDqw13-!kOlNVeE%9g2LXQ1stFwK1<F1|DCOAssQ0u}?<~
zd``5q&bxONrC`_(F!h;WLO&f8Rw4iSCB#P82!fc(kET4o@rjj?q27qx|NO@HAlIKl
z&x~iNsoPg;rDN+vKKH)FZZ#46O!>B|YZ=QHM|dapb;NAj8C(QyEjD70{EYYji+dYn
z$Fs)zbSbqb<mj`gb1J4BdlvMlm<JvfK>q@0UjW?;pm_oGDj)UrQyZ_r)>fD?J)u31
zo{y_LX;%h;-$c#uuS$>KR`qrX@(B5_O343W#6M~w@ISP~zc063=U*q!<d=N&jOF~3
zhb4Z&7tarQhGrt3P4G+^k>^!<=@@zD-I+W?w$I)mKH@ZMP4d38V#sI(v?$&`isw9d
zrrwF?H{kDm;NkcJ@?h9Y@u9!4w}TSIW&L6My51&o6XDKNcb26)M_iS+o1%Hgv~=wI
z(0zijgZpT6gsH{EUt-Mp|L(aL{*TY)*?ijT>X+4Z<D2TnH`k4yuB)FM*OyfP^I)z8
zJ&sGL1)A+)#IIHOZW;76++!2BnSU?a@aFlN)|An-D}DXY>hd@Ga|fROgDVrScf=-q
zzX|>H5N7#%uzl~u(>tzAJe|nmZ|lT&K9!qDC9`se<P*4CAP*lqa5XrGJHRyl&h&^}
zKA6V2Ci=4QlLN1J=o5qO_x|pF)F|kq4RJ3TRH!8uakmL+#oR?rYX-fWZtuUZ8T4L%
z`+f^(+<JTeaEmN|_nLcUBYMQFM{RQ}<brxTr0pX4e+Tr%L0>$i?^+z|@sPfY8<V>9
zn)fd4eG7dN(m<Np*#kih0zRe!;9$QJ`KrVoXV||)?7%wkp*O|ev|r*l>~r#D)|hUB
zYmATR@j+hjLFmr{EghsY$(rpr?A%MQ5qFrdHMuV0n{vf(1xl_pnQ{*O?}Kj#K5_tm
zBRSL4tZ*#?`>~7l{IUm4epwe0KYG2~!(JTVm-9AS!USlZLvMC$iDu$or||orvylE2
zzx#a&<U46g{-MWlEv<iTTvF~{d3{}cVx_n@a?jJ*u?dma4u*VO0UxxF*A9{%(rrNZ
zgbV2n`QZ6{00TW-z82EV{6o6Ez828Ub@r<{7THze8s}=yyTO@d^!qY|xZ|T1W9>DC
zyJZQnhcTl%(zc;G5<~A}bgBzF<b84-YM0n1T~<m7=j4HVTFI+Lj+)hxrb*N|wzM_k
z{As(>`YaU6vkx8UG{1oU=5hF2_TUBNDAE!~j;Q6%q&#BS)+lUq{p4+C0X=b7@zE+>
zlU36|9?fD$w%9EBVM7Lrt1#-veT;o!(7OP-7r=wcDKn`1n%_Ykj2fKrm1pruM!2s+
zz8tfsmjHej{G$d}eRbA^CHYZs1ijTMc`4vM#JOr|;ay}=!n;US!n;UGqPvJ@L4Lf8
z%s_VAnS)Q}HI;vTR~+zib<<d161_Og**5ycx=e2|WPPQIoDr9<iiK~)dB`e_??eTy
zm`We+FdcG7#g^5TZdr#OWjp$LW~Et5i4NSoW0GI%SXG_(1LkVva*ku+7)>ELx&=Oj
zdoXH3S=^q+Jt!gFs&C|Ui|+JSb=(zH&xbV@`(UK`*PwL;{2sih90qwnzAr((pL}<z
zLhh6+<<4Hf9OMv3ekIO0`1`lOH9i1t)_bJmlW16kj!4IOg~OhlkKX^n9EM!WhxZEJ
zC9eMlp?U~GnBQp6*~w1HD`-Q8&;!;ddFNNPGWKie<KJp_>Fjs7Vs5xey4n?D>@$&g
zQS?A=W6(*qB8fKGPps0Q`mbh%{sDXy*q{D!cMtX--ca`EDR|<3i}Xhp$-K+oahdB`
zgEIF^bSHY%yIj0o-HE~;2Wt}i?rFd3T`IGdW37Dw_n!;6|Ik+`6Xt&QPk?6uc$6=&
zpSb+@kj0THo4s@g7llUj(O;#l!Z4KHp`Twt<~HQC3bk%n-?)hn0{&+B(GOrgwDy}|
zXM$&3A+I=x_DA}7e+9jjSMVnNHH>auKEJze%$^bhMp#3O9I4CqQ+57J-=zQ2H<e#L
zSAyS0emPZDyz+Mu<P+tWrdaB}Lc64Y(oZ$nx`lqpJ}Lc_zCqta?ooYn-Z3orrH#Gx
zNyPLv`ef~{vfPhww$jT--S;P;A0?lU@fpObC7+?cke=oJ`&uuR=l%R+d}e`qP+m}z
z`2X+w@$voXySDAf?RaR1BBTX<s%^3&Biffzj$6Xq8N|tWD*QeBQkg*S267{R%ibiY
zabDT_jD~ylt!9gc-V}1>(Qf{>w+%kzCmZ0{{5`)Z(>XXQM_##t9C*1%9M}V#SE4$l
z>wDa9V4oqIQpE8efjdmtM%bHU`M3*|uxWS7Nmp?%y>5TG&*cvN@uA|ApFec?$<G)5
z`kN2@MWyg^;k$*4g&!8)z}Jg~Q%`z;@Ad8-cyJ)=fY0H9`+LW~vUBtAr9ZQ4-)^k&
zaSmAf$5K1*`mf+Vv@zT+-uU<v1CKvG{&+OrKfd#i_U+m?{>aX7!r5=B59iV7eIR_x
k-ElR~Vyl`%2T+Z|f7ScKF@LREKEDiP=`+ByG{DDy0@#;hn*aa+

literal 0
HcmV?d00001

diff --git a/kpatch/patch0100/EELOAD/EELOAD.c b/kpatch/patch0100/EELOAD/EELOAD.c
new file mode 100644
index 0000000..046308c
--- /dev/null
+++ b/kpatch/patch0100/EELOAD/EELOAD.c
@@ -0,0 +1,251 @@
+/*
+	Filename:	EELOAD
+	Description:	EE executable Loader (OSDSYS update). Largely the same as EELOAD from ROM v1.01, but has a patching mechanism.
+	Date:		2013/04/25
+	Arguments:
+			argv[0]=<filename of ELF to load> or <"moduleload">
+			(Or if "moduleload" was specified as the first argument):
+			argv[1...n]= commands, where:
+					"-m <module to load>"			-> Loads a regular IOP module.
+					"-k <Encrypted module to load>"		-> Loads an encrypted IOP module.
+					"-x <Encrypted program to load>"	-> Loads and executes an encrypted EE program.
+
+			(Strings remaining in the argv[] array are arguments that are to be passed to the loaded program)
+
+	Other notes:	If no arguments are specified, it loads rom0:OSDSYS.
+*/
+
+#include <kernel.h>
+#include <sifrpc.h>
+#include <loadfile.h>
+#include <iopcontrol.h>
+#include <string.h>
+#include <ee_regs.h>
+#include <dma_registers.h>
+
+//0x00083e80
+#define NUM_BOOT_PATHS	1
+static char *DefaultBootPaths[NUM_BOOT_PATHS+1]={"rom0:OSDSYS", NULL};
+
+//0x00083e88
+static t_ExecData ElfData;
+
+//0x00083ea0 - the patch that solves the problem with the browser being unable to pass arguments to the update.
+//The same as the v1.01 OSDSYS patch, except for the addresses.
+static const unsigned int OSDSYS_patch[]={
+	0x18a0000a,	//blez a1, +11
+	0x3c0b004f,	//lui t3, $004f
+	0x25670100,	//addiu a3, t3, $0100
+	0x00a0402d,	//daddu t0, a1, zero
+	0x8cc20000,	//lw v0, $0000(a2)
+	0x2508ffff,	//addiu t0, t0, $ffff
+	0x24c60004,	//addiu a2, a2, $0004
+	0xace20000,	//sw v0, $0000(a3)
+	0x00000000,	//nop
+	0x1500fffa,	//bne t0, zero, -5
+	0x24e70004,	//addiu a3, a3, $0004
+	0x3c0a0029,	//lui t2, $0029
+	0x8d4ad280,	//lw t2, $d280(t2)
+	0x24080001,	//addiu t0, zero, $0001
+	0x010a102a,	//slt v0, t0, t2
+	0x10400014,	//beq v0, zero, +21
+	0x28a20010,	//slti v0, a1, $0010
+	0x10400012,	//beq v0, zero, +19
+	0x3c02004f,	//lui v0, $004f
+	0x00051880,	//sll v1, a1, 2
+	0x24420100,	//addiu v0, v0, $0100
+	0x3c070028,	//lui a3, $0028
+	0x00624821,	//addu t1, v1, v0
+	0x34e7d288,	//ori a3, a3, $d288
+	0x8ce30000,	//lw v1, $0000(a3)
+	0x00000000,	//nop
+	0x25080001,	//addiu t0, t0, $0001
+	0x24e70004,	//addiu a3, a3, $0004
+	0x24a50001,	//addiu a1, a1, $0001
+	0xad230000,	//sw v1, $0000(t1)
+	0x010a102a,	//slt v0, t0, t2
+	0x10400004,	//beq v0, zero, +5
+	0x25290004,	//addiu t1, t1, $0004
+	0x28a20010,	//slti v0, a1, $0010
+	0x5440fff7,	//bnel v0, zero, -8
+	0x8ce30000,	//lw v1, $0000(a3)
+	0x24030006,	//addiu v1, zero, $0006
+	0x0080202d,	//daddu a0, a0, zero
+	0x00a0282d,	//daddu a1, a1, zero
+	0x25660100,	//addiu a2, t3, $0100
+	0x00c0302d,	//daddu a2, a2, zero
+	0x0000000c,	//syscall (00000)
+	0x03e00008,	//jr ra
+	0x00000000	//nop
+};
+
+/* 0x000820e8*/
+static void PatchOSDSYS(void){
+	volatile unsigned int *ptr;
+	unsigned int i, size;
+
+	FlushCache(0);
+
+	//Copy the patch.
+	strcpy((char*)0x0028b9b0, "DVD�v���[���[���N���ł��܂���ł����B");	//Don't know why they need to patch this as the original message is exactly the same. D:
+	//Originally, these lines made the OSD use osd110.elf instead. But since FMCB's v1.10 update only causes the v1.01 OSD to use osd130.elf, do the same thing here. The v1.20 update is the first update that doesn't require patching.
+	strcpy((char*)0x0028b770, "/BIEXEC-SYSTEM/osd130.elf");
+	strcpy((char*)0x0028b790, "-x mc%d:/BIEXEC-SYSTEM/osd130.elf");
+	strcpy((char*)0x0028b8a0, "osd130.elf");
+
+	*(volatile unsigned int*)0x00204ad0=((*(volatile unsigned int*)0x00204ad0)&0xFC000000)|0x0013c000;	//jal 0x004f0000
+
+	size=sizeof(OSDSYS_patch);	//It did a calculation on the size of the patch by subtracting the end from the start.
+
+	for(i=0,ptr=(volatile unsigned int*)0x004f0000; i<size; ptr++,i+=4){
+		*ptr=OSDSYS_patch[i/4];
+	}
+
+	FlushCache(0);
+	FlushCache(2);
+}
+
+/* 0x000821d0 */
+static void SyncSIF0(void){
+	int i;
+
+	//If SIF0 has incoming data, initialize SIF0 and acknowledge incoming data.
+	if(*DMA_REG_STAT&0x20){
+		SifSetDChain();	//Re-initialize SIF0 (IOP -> EE)
+		*DMA_REG_STAT=0x20;
+		while(*R_EE_SBUS_REG40&0x3000){};
+
+		for(i=0x1000; i>0; i--){};
+	}
+}
+
+/* 0x00082258 */
+static void SyncIOP(void){
+	while((*R_EE_SBUS_SMFLAG&SIF_STAT_BOOTEND)==0){};
+	*R_EE_SBUS_SMFLAG=SIF_STAT_BOOTEND;
+}
+
+/* 0x00082298 */
+static void ResetIOP(void){
+	SifIopReset("", 0);
+	while(!SifIopIsAlive()){};
+
+	SyncIOP();
+}
+
+/* 0x000822c8 */
+static void AckSIF0(void){
+	if(*R_EE_SBUS_REG40&0x20){
+		DI();
+		ee_kmode_enter();
+
+		*(volatile unsigned int*)0xBD000040=0x20;
+
+		ee_kmode_exit();
+		EI();
+	}
+
+	if(*DMA_REG_STAT&0x20)
+		*DMA_REG_STAT=0x20;
+}
+
+/* 0x00082368
+	Returns NULL if the argument doesn't contain the specified switch, otherwise, returns the first character after the switch.
+*/
+static const char *IsSwitchCheck(const char *SwitchString, const char *cmd){
+	while(*SwitchString!='\0'){
+		if(*SwitchString!=*cmd) return NULL;
+		SwitchString++;
+		cmd++;
+	}
+
+	return cmd;
+}
+
+/* 0x000823a8 */
+static void ExecExecutable(int argc, char *argv[]){
+	FlushCache(0);
+	SifExitRpc();	//Original had SifExitCmd();
+
+	ExecPS2((void *)ElfData.epc, (void *)ElfData.gp, argc, argv);
+}
+
+/* 0x00082400 */
+static void BootError(const char *path){
+	char *argv[2];
+
+	SifExitRpc();	//Original had SifExitCmd();
+
+	argv[0]="BootError";
+	argv[1]=(char*)path;
+
+	ExecOSD(2, argv);
+}
+
+/* 0x00082440 */
+int main(int argc, char *argv[]){
+	const char *CommandString;
+	int i;
+
+	if(argc>=2){
+		argv++;
+		argc--;
+		SyncSIF0();
+		ResetIOP();
+		AckSIF0();
+
+		SifInitRpc(0);
+
+		/* 0x000824b8 */
+		if(IsSwitchCheck("moduleload", argv[0])!=NULL){
+			argc--;
+			argv++;
+
+			while(argc>0){
+				if((CommandString=IsSwitchCheck("-m ", argv[0]))!=NULL){
+					SifLoadModule(CommandString, 0, NULL);
+				}
+				else if((CommandString=IsSwitchCheck("-k ", argv[0]))!=NULL){
+					SifLoadModuleEncrypted(CommandString, 0, NULL);
+				}
+				else if((CommandString=IsSwitchCheck("-x ", argv[0]))!=NULL){
+					FlushCache(0);
+					if(SifLoadElfEncrypted(CommandString, &ElfData)<0){
+						BootError(CommandString);
+					}
+
+					argv[0]=(char*)CommandString;
+					ExecExecutable(argc, argv);
+				}
+				else break;
+
+				argc--;
+				argv++;
+			}
+		}
+
+		FlushCache(0);
+		if(SifLoadElf(argv[0], &ElfData)<0){
+			BootError(argv[0]);
+		}
+
+		if(IsSwitchCheck("rom0:OSDSYS", argv[0])!=NULL){
+			PatchOSDSYS();
+		}
+
+		ExecExecutable(argc, argv);
+	}
+
+	SyncIOP();
+	SifInitRpc(0);
+	FlushCache(0);
+	for(i=0; i<NUM_BOOT_PATHS; i++){
+		if(SifLoadElf(DefaultBootPaths[i], &ElfData) >= 0)
+			break;
+	}
+
+	PatchOSDSYS();
+	ExecExecutable(1, &DefaultBootPaths[i]);
+
+	return 0;
+}
diff --git a/kpatch/patch0100/EELOAD/Makefile b/kpatch/patch0100/EELOAD/Makefile
new file mode 100644
index 0000000..cc05a7d
--- /dev/null
+++ b/kpatch/patch0100/EELOAD/Makefile
@@ -0,0 +1,8 @@
+EE_BIN = EELOAD.elf
+EE_OBJS = EELOAD.o
+
+CRT0_OBJ_S = ../../crt0-eeload.s
+LINKFILE = ../../linkfile-eeload
+
+include $(PS2SDK)/Defs.make
+include ../../Rules.eeload.make
diff --git a/kpatch/patch0100/EELOAD/dvdplayer.txt b/kpatch/patch0100/EELOAD/dvdplayer.txt
new file mode 100644
index 0000000..1108b24
--- /dev/null
+++ b/kpatch/patch0100/EELOAD/dvdplayer.txt
@@ -0,0 +1 @@
+DVD�v���[���[���N���ł��܂���ł����B
\ No newline at end of file
diff --git a/kpatch/patch0100/Makefile b/kpatch/patch0100/Makefile
new file mode 100644
index 0000000..1596ed3
--- /dev/null
+++ b/kpatch/patch0100/Makefile
@@ -0,0 +1,13 @@
+EE_BIN = osdsys.elf
+
+EE_OBJS = osdsys.o EELOAD_img.o
+
+include $(PS2SDK)/Defs.make
+include ../Rules.patch.make
+
+clean:
+	rm -f EELOAD_img.c
+
+EELOAD_img.o:
+	bin2c EELOAD.img EELOAD_img.c EELOAD_img
+	$(EE_CC) $(EE_CFLAGS) $(EE_INCS) -c EELOAD_img.c -o EELOAD_img.o
diff --git a/kpatch/patch0100/osdsys.c b/kpatch/patch0100/osdsys.c
new file mode 100644
index 0000000..375744e
--- /dev/null
+++ b/kpatch/patch0100/osdsys.c
@@ -0,0 +1,29 @@
+#include <kernel.h>
+
+extern unsigned char EELOAD_img[];
+extern unsigned int size_EELOAD_img;
+
+void *_start(void){
+	unsigned int i;
+	vu32 *start;
+
+	DI();
+	ee_kmode_enter();
+
+	for(i=0,start=(vu32*)0x80030000; i<size_EELOAD_img/4; i++){
+		start[i]=((vu32*)EELOAD_img)[i];
+	}
+
+	*(vu16*)0x80005670=0x8003;	//Patch the start of address range of the IOPRP image containing EELOAD.
+	*(vu16*)0x80005674=0x8004;	//Patch the end of address range of the IOPRP image containing EELOAD.
+
+	ee_kmode_exit();
+	EI();
+
+	FlushCache(0);
+	FlushCache(2);
+
+	ExecOSD(0, NULL);
+
+	return((void*)0x80005670);
+}
diff --git a/kpatch/patch0101/EELOAD.img b/kpatch/patch0101/EELOAD.img
new file mode 100644
index 0000000000000000000000000000000000000000..6f00b0155ef2fc6110ee975569bb6982f93a4d6d
GIT binary patch
literal 8984
zcmc&)U2GiJbv`pYB!?7j4XL%gQW$wC%}SKTF;^-L)5aDU&n^{Ok)w@76fz)}Yf@4q
zm<nmfMU_-Vrj+c;z?$Ym9$cUg3rb9sVzZ)C#Yu`PT1c{x7HMG=MVb~aNJt4}w~eE?
ziR;L+r{8yHmZH}`O@RU(fSS4Yo_p^3Kj)s+uEE`d!@|c@|L)rPNdDnn{M;)A{5!a3
z_~FlO+o{$jIUd}x^PxP4rtDd#rW^h-G`;mMTVzjSYi7&+nFlgkd&efec;LXH@%_Eg
z?t2d%{zC5;C%!Uq_>lKG^&0;2<bHQoU*Exr!~6T9mA=C6t$o`b$@zVgk3T(jFta7I
zrElr*=!`eNN-Feh;QLOiB(f5WIh)O#G>L6RM0rOo@g2j|6?3g(WG62icT8!@N^#B+
zY0ip$8RHh<xQ4fxJ#Cw5cQKHxB%F32abNd@`y@CHc<i(1oZpStUToFdU2r-e;+tXt
zhqXb(nC`^9Ax#@*T6NR4Jw?j;c+d6l+(wb}VSO*@--+|RhkU1p^qjlg-y*q#BDwLE
zl0Rrle*7*OJZQ<_c#B+|7rA(LrCgdf<<i-^<du0#UOAhRT(Da5K}s%`SIea`aTXQ6
zrtImzo&&xi;2Q$I9Ps6UFAscq;5!X`r-APz@SOy{Q^0rX?A?G*0p14Qy8)8|j4dY>
z-V?xULk>NViTQ)$z`YH)w~d=J6tn`qMV<xDXV02)qTDLS%5AbOXp?8lJ)fQHUqw0I
zgq~!!B(>xHZbrnha+0=aP_vb(RI}3OjORN+Dk0seQ8DB)<UU%Omy5k3S1NCZ#iSwE
zoVxt@*2MtK`2|xJ6PBFYsAO#EIOlw5E&BaXPstWPlMpYt9PZDtm&&n4cQi}OT8rx{
zf_>gw(H_b8nRi3(!DH#pV(2^Xhh7(lZ-!zKmsp9c0lqSCjp3Zpk^^3DgdW!T?5mI_
zewlzFU2YFY=fgMK^!67YI__jwL^Qk??<t$ncsZTR`Ki-Je%cj3KnI!|__RL2(=yp?
zi_eo{!V5z^doA?)9mrXV$GnvWaGle$Hf+@s${<&fq7G*8U7S+ud*c09$-k2E)QsGz
z%L?%<H&X_JlR*Mw*l?2i)r5W%!Mp=mYBJ{#j&gCWn!E~`Sn^Wno(P1#WJ5M0^O1i9
zWvM_;Kq_v=h7;>qcR+N>=N!rBOJ7rdw!Z}U1?*b@9%Ta=*g%ALJ|sTkaDzbE7Hy>r
z8+Loj(97(ZvcfTcrUp86nd-6S+o3xXfH~4smJIf<0dJ&<x-q3AyNmchYuyGBVy0D0
z@waUFG3m|EIlW4cg`Oa=AOpkc4m$Mfn1lXx(hIx`F0kUfCAvM({S06X*|Om;@D9UW
z8@{jbh}6%d9f_o;7coB%`{`7)i4b<Bcx$+q>x3gr4KUOL$F#j}!2b|)7ZeYk+V`KK
zx0d_r{3u?;nXdC<iAT#&IO=By-f^cnwm-zUm^WL0S^0%X#J|XIFy?x*@-=7r7Z}%R
zBd+DNHG#HQLEDdF+Wr}^<coYLSjhax@Dn%il<Y|p^Z>hP%3g`(-U3=VCz7cyr|WWz
zE22Z>9gGQM#BsUqr!5WReGTIy4dXv*7+W$`dOu7!DG4f!ZBa~`sw^_@2k=wccYr(s
zduoGUwaQ$-EyqfC$f(sNGo{;Pf1w9BVC&O}SK!5yeX-A-QZh8Afnx!zS7}GYZ^LdJ
z;7E#IbtF;k#eT{;g>e_~{5<pu#Mk<c2YWN7-@qEjlwXg0y>z?OEZT-C7jbT}kd(_M
z#xmp{%oma0#!5HC;xOm9_I6ksCTz5aeq0v%4|$@WxptX$9ny#BKQB|C@FjP~lO)ck
z9J(Yi-3tDblCL6`Roxz2?~+{gRq#j}?+~xxh*w3vDmhs1!CDe=ycgdR(3U;u{dm78
z%?@IMxE`2k$2mjfD)O&J-{MLSa8fqCcyp{`D`@POXG@;^u+%R4^ET|z9bgR5pC6EI
z6<e-=@2jBW0=_R+9E^M9r+~ds>5`v;rmGlVs`O&blICw^u-+xFR5Dn%u-1=x)CJEQ
zAe?dC0AA=8_D7jVIjb1!_+4d}=NGQv-40yJZeqF8c9bk3-!5sHj%1n0w#!(5mwcuI
zSym_y<n0P&WCI3r0?)082gmy<A4g2+eI79<%9peq(!qF1zhu0GZNN@nQgPVx{nCJc
ztkeYiG*M&KfMdX)s_?ttFIM{f(GubS)-3K-v8-;FjKi9AI40_%F6`^~pRCmL5By#?
zNQ<p!lc1CI(k9ZLuB8XAAn%*iH1ZPGV8aR60cx2IbIv~k4|(B!?%{kZ#+*N~aW1Ou
zFwgb2c;4&z;Cy>LzliyIJ|nKDp#vRje~&yxUML672YKJ&e7k(ULU}^ROEz~MduVe%
z#rcRkqVhQQXwu|N#`yjUx+Ffzxo&TiBgYb-)9-tbX=DqWb>x{+3VyssW|2R<!ry5E
zSxlAS)Dmn;U~bImwg#2`!1pV}yW|JZ;lGg{<qNm!BI2#XLB0;o{#ZEL-8lGXu6}&n
z?`OW$q{X2P-g_HqpFOkOhCT|u=@Z}?FK9zH?2NI&ifudt{2pvdLsC5m`QaNrB%RPF
z9)0RIWow`d!Oh$2BhKc*2cNMS4Ygvo)r{DGtn8*d%=y7@RLv3B{6Qk??VWcL@E7P%
z#Szd@J&5`*DIHaB?`)Yi0Q)^-fWJIqJJ+CB{UG$&E+@|%!Mcex)c0BH*FbKkuE+6>
zxR*fwNrE=k4ao0B#KD)~6H%OIekVNlVGrxZ*hY{KXtRjHb(`Us-<<mo*pCKU$YtGr
zNGJCvl3*8SL0*~V_QU#4gZ^0Cfqv9yMQd{p?S^%+$O90Ls`miLG2w2Yw&pkEH*vXE
zfVxlzo<x?pEV}0`CN^6<GkSi6TnB+Ec+Q+_7(daFAOEmn{N;x6R~p7)xH?-4AGm*m
zlvCY>XT<UT3^mL4v@`Umw!YA#O+DHMo}Ngz$e}H!*c}%ND`cf2Ep?9XFx-^p@J48V
z+7mOK6t9E(m&14x!3OcW7QaP{=DqkG#P3@CMqd3is*f~frH;fuMf#!A|4U&gzsx)-
z>+T8U<#1BI6T0(dDazT<JuO;6{xWpSw&t<kd{JO0$elBuHUs<L$ov!3MAoz+4t^ba
zHL4;Vv#|ZuNFdcv)@_AOwKQ~sc%&K9TGeC~?vFL-PY3LGV4r8tnDXs2?NUA?t5-=L
zcHEu%V^uG~$`HqF82V^MlP_&xoHOOg%FxKR67AcN1DL<C6}ewWO^N!goH(m|9<~9$
z0*%VH!Pf%#S^!TA;Aa86pssxhwRmLjW!QV&FW!O;b1(5zR{w-C>2y<z;_eZRcL5cf
z3bw|W;|_Sp=|ypeiimvY!&9*@MDg-goc!PHr=K?NXT3)K!KW*vi{mcTL;-9(iJGe0
z+7{b3aw?uEZsEQMnkct=og>g6bL9@?%G*?~?0`(I><;A0Azw%S^^Lr5SC2!EP4HX(
zoyPZ&--NY}EZ6e>x@qQ8#*TXJ0=%lmW9+EsPM#|^dIgX9PFm5|g0qaQH*%%IHE-mq
zQ~Q122_B2$UfO<EYLCr1UC=i|nPcEyYT^5C<bZbBU!lB{Qmmx#7ltPMrB*TUXCj`y
z8){ADn|KMocf>Do9Km^j^PQVZFrA=-=NDj8tV@jPLT1eIGCuP1G01PK(k?R<=3E2s
z`hA0UXlpULKcg1R@E*W9(t7J&j=n)Hf)UNnWC^3_YGSSz>%lqaR4iMbP5B;B@}-UI
z4&y0fCS+V)hZqeyt2*>kkE4!Nkej$$=-9_O>ckt#&^J(<dMYl*F<R9fQ4B{N;)!@8
z>!CwETSGn~jD`A(xwl<BRWGo1NX9k8b>Jr5e+v7jo+EkXrt5ooRvnhOiHE*Job`Ui
zMT}YZ5KlcH)a{D+ZrRo#bj33gu&*NYdCPA&=Z%aZ?~S6)*ss=-u#51kdNxE)pjH0F
za8grB?>k2FrJ99)40;;|>ftEf4MLxhUGOe744C>junpNek}GxF$70`^Dh2PI+gQ{Q
z15YnXK}QT^?9&kgUlc8)^UhsEDH!zuEPXzl)X#^bE0O<#GGe1=gkeJENA#yQ4&M$L
z>dnagr#8L|xqc6NW;{bp-MLCDpIj^Qd+$l&9t*M0l5eQGma(ij!n<&wBW649&?0DS
za}ayv67c~R_cq9mXN~piQtnL3><g%Ks+OF50raSt2Obtc{{m=V0No3qc>(k)9}V<#
z8*jqaR#*u=shvWv$J5;m>Tlq;P&53i(&IN&y<LVpBK~U<@xK`Jk6H-)7nb-B<nCMi
z>*SgIl5d`|oPYAL#4q^b`4P|1Ow6+do+%^pyizZpB+tAvlV`~Gh1(=RoMx>_-uG1v
z8LfgA#rsF`Tm;Y5JMsJ){JjS}9KVV@81+yB=r8K&pak()e>j1zcZl3cxC(V=+q!$g
zQ+c~3o_8%<$G#8UCm1`pk2Xh`dQAK|#+?6c&z=82K9^_n>1?Q9RyB<8Y#86wFn+F~
zesaA)(gUZ!T$|G(S5OPII>U%xEAibn<ZHOcCO2DuBRlct`I^>})wFB<1JLU7H~Ml%
zp8M>z$v3(ZlR<!fcM!oWe-CvYntX2ewaMp_Is9#({N|_flj&4W?w4W`cMIg<lSi(H
zmvIM}!{3Eok*h~DIM+fy7JhQ%jV^t1sPo|u?njM+{#k*0(U?Llv531(L@VZA)3jF5
zyXn4x9j&1E);kE=K;!oN28P>Y`Mb|LBpcBiW<Bay+aVX!+YxQAk^gr<p9%WRh`yU9
z*3F2%*EXhf>9ZbQ+WRZ?MMwi_>SPZDH3;~a34w!sO603Ddz(?;60rm8z=xg`d(uIf
z<EX#MlUZYWNv<(IqPGWm!3Uu~8?<zh&J=65)39?tvs%1i!q(-wh;Pc(mP<;mb(wMw
zeea`hhXHZ`f1|k2+p2Ia0{h9=8u?}Knf$UYB7XFExraSCz%S=*w2TSRd<i|-u_c;`
zf33nFfX=DRr}#Y(NGRXT*z&i%u4iilYfMRdhvbd5=H%_--N8N2<;EsOUOyV~aSeRX
zK3+dcdPuhc-4iaNH{yfm^8pO>aP?+HGxHDW_WRpFH`m#x=2&EZnQNS@KR3b)%jgfJ
zfVdN&7Gv!-gS%xJv4=6k8|m2KjU>?f7@b)U9kOOvi`pfzNtfHDjB|>>J*VW=CbO0|
z(lU)2$B~X^oImGu+n<3#dG@g*-PU91Yo3O`<&MrHN0Ao%e)2*+cc$cV!?8zUo9m`G
zTT|$Tdy0>CSwCH~4CK)qcH~N}QXDp9u(T4R0o=#f4+gyppnCy4sGKs7y07&e)WN91
z8DDu8pHz(dI^@eSdwNOW_rO1DaMe#|O<0y6gr<MonUU{?yob2gZ7sTsEJ}12sY!Gf
zDNB48(QL?%caeF>ZYy)}_llazzkw$%c)7l5tUrZb9OfJcePUhawi>doT0_n-WqsAg
zH{v{GmBDwiidIauA9t88xxebjs%np{MUS!*{XDDMD&=Gs?%oM0u5s;}&ies#HF7z}
ziD-<bkj!p{58)n+not&ZWpEElN{{Lrxjmx012r9Y1=aImjm16~Y5oOhT>-xbFDi#Y
z9+2;MA>U8FyVM|e%9V0wFW?m9U?RT~rwRW4J@kzCft&Rn>G&iX7NH~3QBgRY>C^H1
zUzo#?Yx(eA!Mnt*-yT#CA&l}H?KwByEky-wNC7=yeVTWERV!n^hW`CM)_R@&4o|EN
zcgp%sg&6xRBwiFfklPq^lB-Ix1NM`sHmUxrRi%FbUlsPJf85=J{fA#F`|}k%asP_+
z#}>)F%imF%>sf;`_e*>y8uqW2?o)T7sK>#Y1iy7U!~T^DYdO~11>AoMxc|^sC==#>
z_D_Ik0eF-zu%Ed6caY-9jKf~Ki;F@t`sinAt1t|ucj)I$$lQUPR-)F8>KiZle#qYn
zKl%a8ht_@_?o0BFYvdK@(Edmt@2{Y@`VV-M{yIjlA)i0gFlJAQ0VArRMNTy2`<Vv+
zrEk)I>6^+gUo69KW51lKDPH+|2=a;YOG|8ZU!h&nKk28MY~M=1WS^9NO5dPwBKN4i
zIqw)Y{L;Z*`Xpj{2Ys@BS6S{yI9uuEqwf2Y(2tVO$M_6l)soN9Uq}yWsnfypNDI&V
z*~j?I0`;K0pf2(M-}h4!hcgfE+@0V3=x#+w8~Ri`WkpuBFQi?sjJXSllV&>l9s5d!
zKsQ3UgTG;KlD4e;Wc%|P?$!5LZ5n!0$d$7_{7r8sd?-jY!Lj-O0$Q@&L!)B;<Qj6|
z)e>=F4{%<K>y-81;(i1B4B3<>j{ge1VZt`U-dsDtU7(Cj2hwh)hI{EP`|I-`9^5mS
zb3y;`;3It#U)s0jcQW_xA3wlD@VH0p!(*8T|0gi{(8g%H_!ARP4?gwO#8dJ3@Wj49
z7~elW@%X-I!aZ!O5BG`qeI$CT$=~9iz%vyTi!CpY4&bsq-i~PO;n%9=^UFY%K0`c9
H1AP29<30)o

literal 0
HcmV?d00001

diff --git a/kpatch/patch0101/EELOAD/EELOAD.c b/kpatch/patch0101/EELOAD/EELOAD.c
new file mode 100644
index 0000000..6ad265b
--- /dev/null
+++ b/kpatch/patch0101/EELOAD/EELOAD.c
@@ -0,0 +1,249 @@
+/*
+	Filename:	EELOAD
+	Description:	EE executable Loader (OSDSYS update). Largely the same as EELOAD from ROM v1.01, but has a patching mechanism.
+	Date:		2013/10/13
+	Arguments:
+			argv[0]=<filename of ELF to load> or <"moduleload">
+			(Or if "moduleload" was specified as the first argument):
+			argv[1...n]= commands, where:
+					"-m <module to load>"			-> Loads a regular IOP module.
+					"-k <Encrypted module to load>"		-> Loads an encrypted IOP module.
+					"-x <Encrypted program to load>"	-> Loads and executes an encrypted EE program.
+
+			(Strings remaining in the argv[] array are arguments that are to be passed to the loaded program)
+
+	Other notes:	If no arguments are specified, it loads rom0:OSDSYS.
+*/
+
+#include <kernel.h>
+#include <sifrpc.h>
+#include <loadfile.h>
+#include <iopcontrol.h>
+#include <string.h>
+#include <ee_regs.h>
+#include <dma_registers.h>
+
+//0x00084080
+#define NUM_BOOT_PATHS	1
+static char *DefaultBootPaths[NUM_BOOT_PATHS+1]={"rom0:OSDSYS", NULL};
+
+//0x00084088
+static t_ExecData ElfData;
+
+//0x000840a0 - the patch that solves the problem with the browser being unable to pass arguments to the update.
+//The same as the v1.00 OSDSYS patch, except for the addresses.
+static const unsigned int OSDSYS_patch[]={
+	0x18a0000a,	//blez a1, +11
+	0x3c0b004f,	//lui t3, $004f
+	0x25670100,	//addiu a3, t3, $0100
+	0x00a0402d,	//daddu t0, a1, zero
+	0x8cc20000,	//lw v0, $0000(a2)
+	0x2508ffff,	//addiu t0, t0, $ffff
+	0x24c60004,	//addiu a2, a2, $0004
+	0xace20000,	//sw v0, $0000(a3)
+	0x00000000,	//nop
+	0x1500fffa,	//bne t0, zero, -5
+	0x24e70004,	//addiu a3, a3, $0004
+	0x3c0a0029,	//lui t2, $0029
+	0x8d4ad800,	//lw t2, $d800(t2)
+	0x24080001,	//addiu t0, zero, $0001
+	0x010a102a,	//slt v0, t0, t2
+	0x10400014,	//beq v0, zero, +21
+	0x28a20010,	//slti v0, a1, $0010
+	0x10400012,	//beq v0, zero, +19
+	0x3c02004f,	//lui v0, $004f
+	0x00051880,	//sll v1, a1, 2
+	0x24420100,	//addiu v0, v0, $0100
+	0x3c070028,	//lui a3, $0028
+	0x00624821,	//addu t1, v1, v0
+	0x34e7d808,	//ori a3, a3, $d808
+	0x8ce30000,	//lw v1, $0000(a3)
+	0x00000000,	//nop
+	0x25080001,	//addiu t0, t0, $0001
+	0x24e70004,	//addiu a3, a3, $0004
+	0x24a50001,	//addiu a1, a1, $0001
+	0xad230000,	//sw v1, $0000(t1)
+	0x010a102a,	//slt v0, t0, t2
+	0x10400004,	//beq v0, zero, +5
+	0x25290004,	//addiu t1, t1, $0004
+	0x28a20010,	//slti v0, a1, $0010
+	0x5440fff7,	//bnel v0, zero, -8
+	0x8ce30000,	//lw v1, $0000(a3)
+	0x24030006,	//add	iu v1, zero, $0006
+	0x0080202d,	//daddu a0, a0, zero
+	0x00a0282d,	//daddu a1, a1, zero
+	0x25660100,	//addiu a2, t3, $0100
+	0x00c0302d,	//daddu a2, a2, zero
+	0x0000000c,	//syscall (00000)
+	0x03e00008,	//jr ra
+	0x00000000	//nop
+};
+
+/* 0x000820e8 */
+static void PatchOSDSYS(void){
+	volatile unsigned int *ptr;
+	unsigned int i, size;
+
+	FlushCache(0);
+
+	//These lines weren't originally here, but I would like the kernel to use the update for v1.20 instead to save space (Since it's the first update that doesn't involve kernel patching).
+	strcpy((char*)0x0028bd00, "/BIEXEC-SYSTEM/osd130.elf");
+	strcpy((char*)0x0028bca8, "-x mc0:/BIEXEC-SYSTEM/osd130.elf");
+	strcpy((char*)0x0028be08, "osd130.elf");
+
+	//Copy the patch.
+	*(volatile unsigned int*)0x00204b28=((*(volatile unsigned int*)0x00204b28)&0xFC000000)|0x0013c000;	//jal 0x004f0000
+
+	size=sizeof(OSDSYS_patch);	//It did a calculation on the size of the patch by subtracting the end from the start.
+
+	for(i=0,ptr=(volatile unsigned int*)0x004f0000; i<size; ptr++,i+=4){
+		*ptr=OSDSYS_patch[i/4];
+	}
+
+	FlushCache(0);
+	FlushCache(2);
+}
+
+/* 0x00082180 */
+static void SyncSIF0(void){
+	int i;
+
+	//If SIF0 has incoming data, initialize SIF0 and acknowledge incoming data.
+	if(*DMA_REG_STAT&0x20){
+		SifSetDChain();	//Re-initialize SIF0 (IOP -> EE)
+		*DMA_REG_STAT=0x20;
+		while(*R_EE_SBUS_REG40&0x3000){};
+
+		for(i=0x1000; i>0; i--){};
+	}
+}
+
+/* 0x00082208 */
+static void SyncIOP(void){
+	while((*R_EE_SBUS_SMFLAG&SIF_STAT_BOOTEND)==0){};
+	*R_EE_SBUS_SMFLAG=SIF_STAT_BOOTEND;
+}
+
+/* 0x00082248 */
+static void ResetIOP(void){
+	SifIopReset("", 0);
+	while(!SifIopIsAlive()){};
+
+	SyncIOP();
+}
+
+/* 0x00082278 */
+static void AckSIF0(void){
+	if(*R_EE_SBUS_REG40&0x20){
+		DI();
+		ee_kmode_enter();
+
+		*(volatile unsigned int*)0xBD000040=0x20;
+
+		ee_kmode_exit();
+		EI();
+	}
+
+	if(*DMA_REG_STAT&0x20)
+		*DMA_REG_STAT=0x20;
+}
+
+/* 0x00082300
+	Returns NULL if the argument doesn't contain the specified switch, otherwise, returns the first character after the switch.
+*/
+static const char *IsSwitchCheck(const char *SwitchString, const char *cmd){
+	while(*SwitchString!='\0'){
+		if(*SwitchString!=*cmd) return NULL;
+		SwitchString++;
+		cmd++;
+	}
+
+	return cmd;
+}
+
+/* 0x00082340 */
+static void ExecExecutable(int argc, char *argv[]){
+	FlushCache(0);
+	SifExitRpc();	//Original had SifExitCmd();
+
+	ExecPS2((void *)ElfData.epc, (void *)ElfData.gp, argc, argv);
+}
+
+/* 0x00082398 */
+static void BootError(const char *path){
+	char *argv[2];
+
+	SifExitRpc();	//Original had SifExitCmd();
+
+	argv[0]="BootError";
+	argv[1]=(char*)path;
+
+	ExecOSD(2, argv);
+}
+
+//0x000823d8
+int main(int argc, char *argv[]){
+	const char *CommandString;
+	int i;
+
+	if(argc>=2){
+		argv++;
+		argc--;
+		SyncSIF0();
+		ResetIOP();
+		AckSIF0();
+
+		SifInitRpc(0);
+
+		if(IsSwitchCheck("moduleload", argv[0])!=NULL){
+			argc--;
+			argv++;
+
+			while(argc>0){
+				if((CommandString=IsSwitchCheck("-m ", argv[0]))!=NULL){
+					SifLoadModule(CommandString, 0, NULL);
+				}
+				else if((CommandString=IsSwitchCheck("-k ", argv[0]))!=NULL){
+					SifLoadModuleEncrypted(CommandString, 0, NULL);
+				}
+				else if((CommandString=IsSwitchCheck("-x ", argv[0]))!=NULL){
+					FlushCache(0);
+					if(SifLoadElfEncrypted(CommandString, &ElfData)<0){
+						BootError(CommandString);
+					}
+
+					argv[0]=(char*)CommandString;
+					ExecExecutable(argc, argv);
+				}
+				else break;
+
+				argc--;
+				argv++;
+			}
+		}
+
+		FlushCache(0);
+		if(SifLoadElf(argv[0], &ElfData)<0){
+			BootError(argv[0]);
+		}
+
+		if(IsSwitchCheck("rom0:OSDSYS", argv[0])!=NULL){
+			PatchOSDSYS();
+		}
+
+		ExecExecutable(argc, argv);
+	}
+
+	SyncIOP();
+	SifInitRpc(0);
+	FlushCache(0);
+	for(i=0; i<NUM_BOOT_PATHS; i++){
+		if(SifLoadElf(DefaultBootPaths[i], &ElfData) >= 0)
+			break;
+	}
+
+	PatchOSDSYS();
+	ExecExecutable(1, &DefaultBootPaths[i]);
+
+	return 0;
+}
diff --git a/kpatch/patch0101/EELOAD/Makefile b/kpatch/patch0101/EELOAD/Makefile
new file mode 100644
index 0000000..cc05a7d
--- /dev/null
+++ b/kpatch/patch0101/EELOAD/Makefile
@@ -0,0 +1,8 @@
+EE_BIN = EELOAD.elf
+EE_OBJS = EELOAD.o
+
+CRT0_OBJ_S = ../../crt0-eeload.s
+LINKFILE = ../../linkfile-eeload
+
+include $(PS2SDK)/Defs.make
+include ../../Rules.eeload.make
diff --git a/kpatch/patch0101/Makefile b/kpatch/patch0101/Makefile
new file mode 100644
index 0000000..b7d2a20
--- /dev/null
+++ b/kpatch/patch0101/Makefile
@@ -0,0 +1,13 @@
+EE_BIN = osd110.elf
+
+EE_OBJS = osdsys.o EELOAD_img.o
+
+include $(PS2SDK)/Defs.make
+include ../Rules.patch.make
+
+clean:
+	rm -f EELOAD_img.c
+
+EELOAD_img.o:
+	bin2c EELOAD.img EELOAD_img.c EELOAD_img
+	$(EE_CC) $(EE_CFLAGS) $(EE_INCS) -c EELOAD_img.c -o EELOAD_img.o
diff --git a/kpatch/patch0101/osdsys.c b/kpatch/patch0101/osdsys.c
new file mode 100644
index 0000000..375744e
--- /dev/null
+++ b/kpatch/patch0101/osdsys.c
@@ -0,0 +1,29 @@
+#include <kernel.h>
+
+extern unsigned char EELOAD_img[];
+extern unsigned int size_EELOAD_img;
+
+void *_start(void){
+	unsigned int i;
+	vu32 *start;
+
+	DI();
+	ee_kmode_enter();
+
+	for(i=0,start=(vu32*)0x80030000; i<size_EELOAD_img/4; i++){
+		start[i]=((vu32*)EELOAD_img)[i];
+	}
+
+	*(vu16*)0x80005670=0x8003;	//Patch the start of address range of the IOPRP image containing EELOAD.
+	*(vu16*)0x80005674=0x8004;	//Patch the end of address range of the IOPRP image containing EELOAD.
+
+	ee_kmode_exit();
+	EI();
+
+	FlushCache(0);
+	FlushCache(2);
+
+	ExecOSD(0, NULL);
+
+	return((void*)0x80005670);
+}