Editing Talk:Hypervisor Reverse Engineering
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
| Latest revision | Your text | ||
| Line 1: | Line 1: | ||
Merge needed | Merge needed (?) : https://webcache.googleusercontent.com/search?q=cache:http%3A%2F%2Fwiki.gitbrew.org%2Fwikibrew%2FPS3%3AHvReverseEngineering | ||
== MMIO / Memorymap == | == MMIO / Memorymap == | ||
| Line 13: | Line 10: | ||
| 0x200000 || 0x400000 || || LV1 Code Region || || | | 0x200000 || 0x400000 || || LV1 Code Region || || | ||
|- | |- | ||
| 0x20000000000 || 0x80000 || || SPE0 MMIO Memory Region || || | |||
| 0x20000000000 || 0x80000 || || SPE0 MMIO Memory Region || || | |||
|- | |- | ||
| 0x20000080000 || 0x80000 || || SPE1 MMIO Memory Region || 0x003ABC20 || | | 0x20000080000 || 0x80000 || || SPE1 MMIO Memory Region || 0x003ABC20 || | ||
| Line 29: | Line 24: | ||
| 0x20000300000 || 0x80000 || || SPE6 MMIO Memory Region || 0x003B5BE0 || | | 0x20000300000 || 0x80000 || || SPE6 MMIO Memory Region || 0x003B5BE0 || | ||
|- | |- | ||
| 0x20000509000 || 0x1000 || || Pervasive Memory || || Contains 48 bit Serial Number | | 0x20000509000 || 0x1000 || || Pervasive Memory || || Contains 48 bit Serial Number(???) | ||
|- | |- | ||
| || 0x1000 || || SPE1 Shadow Registers Memory Region || 0x003ABDA0 || | | || 0x1000 || || SPE1 Shadow Registers Memory Region || 0x003ABDA0 || | ||
| Line 49: | Line 44: | ||
| 0x2000050A210 || 0x4 || || XDR Memory Channel Type || || For use with above memory locations | | 0x2000050A210 || 0x4 || || XDR Memory Channel Type || || For use with above memory locations | ||
|- | |- | ||
| 0x24000000000 || || || SB bus subsystem || || | | 0x24000000000 || || || SB bus subsystem || || | ||
|- | |- | ||
| 0x24000002000 || 0x200 || 1 || SATA Controller 1 || || | | 0x24000002000 || 0x200 || 1 || SATA Controller 1 || || | ||
| Line 125: | Line 120: | ||
| 0x2401F000000 || 0x1000000 || || NOR Flash || || | | 0x2401F000000 || 0x1000000 || || NOR Flash || || | ||
|- | |- | ||
| 0x28000000000 || 0x2000 || || AV Manager (/dev/ioif0) || || only mmap system call | |||
| 0x28000000000 || 0x2000 || || AV Manager (/dev/ioif0) || || | |||
|- | |- | ||
| 0x28001800000 || 0x1000 || || AV Manager (/dev/ioif0) || || only mmap system call | | 0x28001800000 || 0x1000 || || AV Manager (/dev/ioif0) || || only mmap system call | ||
| Line 181: | Line 174: | ||
|} | |} | ||
* Linux driver for playing with BE MMIO: http://pastie.org/private/zkzpmj5j6hixacxppk9waq | * Linux driver for playing with BE MMIO: http://pastie.org/private/zkzpmj5j6hixacxppk9waq | ||
== PS3 ea memory map == | == PS3 ea memory map == | ||
| Line 219: | Line 212: | ||
| Unmapped Area | | | Unmapped Area | | ||
0x0000_0000 +-------------------------------+ | 0x0000_0000 +-------------------------------+ | ||
</pre> | </pre>http://pastie.org/private/bfqqa2cpadolns9bm0eqa | ||
== History of Packet ID Entries == | == History of Packet ID Entries == | ||
* 0x18000 <- [[Dispatcher_Manager]] | * 0x18000 <- [[Dispatcher_Manager]] | ||
* 0x8000 <- ??? | * 0x8000 <- ??? | ||
| Line 241: | Line 231: | ||
* 0x24000 <- [[USB_Dongle_Authenticator]] | * 0x24000 <- [[USB_Dongle_Authenticator]] | ||
* 0x25000 <- [[User_Token_Manager]] | * 0x25000 <- [[User_Token_Manager]] | ||
from SPM | from SPM | ||
[http://pastie.org/private/mdw6lcgcp6sby1qvlipog possible process names | [http://pastie.org/private/mdw6lcgcp6sby1qvlipog possible process names] | ||
[http://pastie.org/private/guigb77nctwvsq50tkaeq possible process / packet ids 1 | [http://pastie.org/private/guigb77nctwvsq50tkaeq possible process / packet ids 1] | ||
[http://pastie.org/private/j7cv141bu5jw2acundzla possible process / packet ids 2 | [http://pastie.org/private/j7cv141bu5jw2acundzla possible process / packet ids 2] | ||
==coolstuf== | ==coolstuf== | ||
| Line 261: | Line 250: | ||
Repositories: | Repositories: | ||
* http://www.sendspace.com/file/qlkzkd | * http://www.sendspace.com/file/qlkzkd | ||
* http://www.mirrorcreator.com/files/0NFBM0PC/coolstuff_0.rar_links | * http://www.mirrorcreator.com/files/0NFBM0PC/coolstuff_0.rar_links | ||
| Line 267: | Line 255: | ||
* http://fileape.com/index.php?act=download&id=aG4VzHXWKqwXbi50 | * http://fileape.com/index.php?act=download&id=aG4VzHXWKqwXbi50 | ||
* | * http://ps3devwiki.com/files/coolstuf/ | ||
===Content=== | ===Content=== | ||
| Line 609: | Line 597: | ||
ps3wiki/XRegistry File Format_2.htm 52.7 KB | ps3wiki/XRegistry File Format_2.htm 52.7 KB | ||
</pre> | </pre> | ||
==emer init.self== | ==emer init.self== | ||
=== Program 1 === | ===Program 1=== | ||
Crossreference: [http://portal.gitbrew.org/wikibrew/PS3:HvReverseEngineering:emer_init.self:Program_1 gitbrew.org::emer_init.self:Program_1] <br /> | |||
Crossreference: [ | |||
<pre> | <pre> | ||
| Line 835: | Line 823: | ||
</pre> | </pre> | ||
=== Program 2 === | ===Program 2=== | ||
Crossreference: [http://portal.gitbrew.org/wikibrew/PS3:HvReverseEngineering:emer_init.self:Program_2 gitbrew.org::emer_init.self:Program_2] <br /> | |||
Crossreference: [ | |||
<pre> | <pre> | ||
0x80308 | 0x80308 | ||
| Line 1,152: | Line 1,139: | ||
0x66604200 | 0x66604200 | ||
</pre> | </pre> | ||
---- | ---- | ||
== | ==about RSX== | ||
<pre> | <pre> | ||
0x28002010000 contains the same as 0x2808FF90000 | 0x28002010000 contains the same as 0x2808FF90000 | ||
0x28002050000 contains the same as 0x2808FFD0000 | 0x28002050000 contains the same as 0x2808FFD0000 | ||
you can prove that by writing in one offset and reading the other | you can prove that by writing in one offset and reading the other | ||
0x2808XXXXXXX is BAR1 (i.e. VRAM on Nvidia GPUs) | 0x2808XXXXXXX is BAR1 (i.e. VRAM on Nvidia GPUs) | ||
0x28002XXXXXX is | 0x28002XXXXXX is BAR0 (i.e. PRAMIN on Nvidia GPUs) | ||
</pre> | </pre> | ||