Editing Talk:PSP Emulation

Jump to navigation Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 1: Line 1:
== Playstation Portable memory regions ? ==
==PSP Emulator Types and Revisions==
<div>
<div style="float:top; text-align:center;">'''PSP Emulators Types and Revisions'''</div>
<div style="float:left; width:33%;">
{| class="wikitable" style="font-size:xx-small;"
|+ psp_emulator.elf (decrypted)
! Firmware !! Bytes !! MD5 !! <abbr title="Revision">Rev</abbr>
|-
! [[1.00_CEX|1.00]] ~ [[3.10_CEX|3.10]]
| colspan="3" {{no}}
|-
! [[3.15_CEX|3.15]]
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! [[3.66_CEX|3.66]]
| 419.120 || DFED8FCDB36A4284A27369304D47674F || ?
|-{{cellcolors|#ddddff}}
! [[3.70_CEX|3.70]]
| rowspan="3" | 419.176 || 0F6F1D92D045A86565DF705276776A41 || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[3.74_CEX|3.74]]
| DC8C67FEEB605D73D073BBCAD8F17E6A
|-{{cellcolors|#bbbbff}}
! [[4.00_CEX|4.00]]
| rowspan="2" | 419.416 || 7371A95BB0ACB1152EB13EA11C866F87 || rowspan="2" | same
|-{{cellcolors|#bbbbff}}
! [[4.01_CEX|4.01]]
| C17EE35A278E64227558FA9C39E805B5
|-{{cellcolors|#ddddff}}
! [[4.10_CEX|4.10]]
| rowspan="2" | 419.472 || DAA4E9816037E1EFFFF15B344B61BD1D || rowspan="2" | same
|-{{cellcolors|#ddddff}}
! [[4.11_CEX|4.11]]
| 2DF5AFE349E082A79AF4E50B8100F80A
|-
! [[4.15_CEX|4.15]]
| ? || ? || ?
|-{{cellcolors|#bbbbff}}
! [[4.20_CEX|4.20]]
| rowspan="3" | 419.480 || 540422B0759D20738BF498337E33B7E2 || rowspan="3" | same
|-{{cellcolors|#bbbbff}}
! ~
| style="text-align:center; background-color:#bbbbff;" | ''Any''
|-{{cellcolors|#bbbbff}}
! [[4.25_CEX|4.25]]
| 5D20DFAE9E0D704F6DD17D2A807A1D2C
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-{{cellcolors|#ddddff}}
! [[4.78_CEX|4.78]]
| rowspan="3" | 419.520 || EFEA0DFDDD6E7C479983B5E4E8B95295 || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[4.82_CEX|4.82]]
| 5CAC36C3F940749B4DD5E03DB02C732A
|}
<span style="font-size:small">
{{widedot}}'''Decrypted (elf)''': changes <abbr title="when comparing two decrypted files of the same revision from different firmwares the only difference is the target firmware">every firmware version</abbr><br>
{{widedot}}'''<abbr title="0x20 bytes">Build label</abbr>''': no/unknown<br>
{{widedot}}'''<abbr title="2 bytes">Target Firmware</abbr>''': yes, repeated '''two''' times<br>
{{widedot}}'''Revision''': unknown
</span>
</div>
<div style="float:left; width:33%;">
{| class="wikitable" style="font-size:xx-small;"
|+ psp_translator.elf (decrypted)
! Firmware !! Bytes !! MD5 !! <abbr title="Revision">Rev</abbr>
|-
! [[1.00_CEX|1.00]] ~ [[3.10_CEX|3.10]]
| colspan="3" {{no}}
|-
! [[3.15_CEX|3.15]]
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! [[3.66_CEX|3.66]]
| 283.128 || 0F52CE7666276B71FF5C560D7BD28014 || ?
|-{{cellcolors|#ddddff}}
! [[3.70_CEX|3.70]]
| rowspan="3" | 283.128 || C35D80E8B1A4A61212EA773C061BF1DC || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[3.74_CEX|3.74]]
| A42CD1453C52149297A975F2BA5B2D38
|-{{cellcolors|#bbbbff}}
! [[4.00_CEX|4.00]]
| rowspan="2" | 283.128 || DF07955312D1C09DC2DC355EBA47F8AA || rowspan="2" | same
|-{{cellcolors|#bbbbff}}
! [[4.01_CEX|4.01]]
| A06E7BF7C1D062878593E1D4EA85B4C9
|-{{cellcolors|#ddddff}}
! [[4.10_CEX|4.10]]
| rowspan="2" | 283.128 || FB4801625CA15AC58DB28A4223EFD4A2 || rowspan="2" | same
|-{{cellcolors|#ddddff}}
! [[4.11_CEX|4.11]]
| 3154FF57D36E3D7C4F2C061393816482
|-
! [[4.15_CEX|4.15]]
| ? || ? || ?
|-{{cellcolors|#bbbbff}}
! [[4.20_CEX|4.20]]
| rowspan="3" | 283.120 || C125A486D3C48EA2C957EAFC0AB69B39 || rowspan="3" | same
|-{{cellcolors|#bbbbff}}
! ~
| style="text-align:center; background-color:#bbbbff;" | ''Any''
|-{{cellcolors|#bbbbff}}
! [[4.23_SEX|4.23 S]]
| C469B41798157C53C3E7794E9BDF9D36
|-
! [[4.25_CEX|4.25]]
| 283.120 || A675423F5C8B9FD02AA2150D46B953AE || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-{{cellcolors|#ddddff}}
! [[4.78_CEX|4.78]]
| rowspan="3" | 283.120 || A35809CE6C184F3E3B52C18E0AE19217 || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[4.82_CEX|4.82]]
| 58E104453AC60DE2B671E43F09D96E80
|}
<span style="font-size:small">
{{widedot}}'''Decrypted (elf)''': changes <abbr title="when comparing two decrypted files of the same revision from different firmwares the only difference is the target firmware">every firmware version</abbr><br>
{{widedot}}'''<abbr title="0x20 bytes">Build label</abbr>''': no/unknown<br>
{{widedot}}'''<abbr title="2 bytes">Target Firmware</abbr>''': yes, repeated '''one''' time<br>
{{widedot}}'''Revision''': unknown
</span>
</div>
</div>
<br style="clear: both;" />
 
== Playstation Portable ==
  PPSSPP
  PPSSPP
  00010000 Scratchpad
  00010000 Scratchpad
Line 10: Line 175:
  B0000000 Default load address
  B0000000 Default load address


== Cryptobrainstorming ==
=== Crypto ===
Supported Kirk Crypto ? (1,4,7,11,12,13,14,16,17,18,19)


== emulator_api errors ==
Supported Kirk Crypto ? (1,4,7,11,12,13,14,16,17,18,19)
 
=== emulator_api errors ===
Google translations from japanese error messages:
Google translations from japanese error messages:


Line 78: Line 244:
  S7004 We were leaving from the room.
  S7004 We were leaving from the room.


== Emulator patches ==
===NPEZ00093 TETRIS===
This patches are intended to be applyed to the PSP emulator
MINIS2 SETTINGS
AW.SINGLE_BUF = 80
AW.REUSE_ADRS = 110000
 
PPSSPP <br>
<pre>
23:10:028 user_main    I[SCEGE]: Common\FramebufferCommon.cpp:331 Creating FBO for 00110000 : 280 x 20 x 3<br>
23:10:030 user_main    W[SCEGE]: Common\FramebufferCommon.cpp:373 FBO reusing depthbuffer, 00110000/00044000 and 00088000/00044000<br>
23:10:041 user_main    I[G3D]: GLES\ShaderManager.cpp:140 Linked shader: vs 31 fs 32<br>
23:15:969 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: >L<br>
23:16:302 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: <OK<br>
23:16:377 user_main    W[G3D]: GLES\TextureCache.cpp:336 Render to texture with different strides 256 != 280<br>
23:19:096 user_main    I[SCEGE]: GLES\Framebuffer.cpp:730 Resizing FBO for 00110000 : 256 x 272 x 3<br>
23:39:980 user_main    I[SCEGE]: GLES\Framebuffer.cpp:730 Resizing FBO for 00110000 : 256 x 272 x 3<br>
</pre>


=== Patch to redirect unsupported commands (experimental) ===
===Crashes===
This ugly and highly experimental poc code simply redirects unsupported cmd's to 0x01010005 (Seek Begin), prolly breaks other cmd's
====Black Rock Shooter====
<pre>
lv2(2): #
lv2(2): #
lv2(2): # SDK version: 446000
lv2(2): # system software version: 4.46 (DEX)
lv2(2): # revision: 49873
lv2(2): #
lv2(2): # Lv-2 detected an interrupt(exception) in a user PPU Thread.
lv2(2): #
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Data Storage
lv2(2): #  SRR0 : 0x00000000016a8d94 00000000000C8D94                lwz      r17, 0x454(r15) ; r15 = 0
lv2(2): #  SRR1 : 0x800000000200e032
lv2(2): #  DSISR: 0x0000000040000000
lv2(2): #  DAR  : 0x0000000000000454
lv2(2): #  TB  : 0x000000028bed73b7
lv2(2): #  HW Thread #: 1
lv2(2): #
lv2(2): # Backtrace
lv2(2): #  0x00000000016a8d88 sub_c8CB0 + 0xD8
lv2(2): #  0x00000000015e36ac PEmuCoreLib_7EBDEE23 + -0x20
lv2(2): #  0x0000000000b7d25c ThreadManForKernel_D3C08E1A + 0x2A0
lv2(2): #  0x000000000163bc48 sub_5B0C8 + 0xB78
lv2(2): #  0x000000000163c68c sub_5C32C + 0x348
lv2(2): #  0x000000000163dc14 sub_5DA7C + 0x1E8
lv2(2): #  0x000000000163ddd8
lv2(2): #  0x00000000016697c8
lv2(2): #  0xbadadd0010700fcc
lv2(2): #
lv2(2): # User PPU Thread Info.
lv2(2): #  ID        : 0x010700fd
lv2(2): #  Name      : PEmuExecThread
lv2(2): #  Stack addr: 0x00000000d00ab000
lv2(2): #  Stack size: 0x0000000000020000
lv2(2): #  Priority  : 1001
lv2(2): #  Proc name : /dev_flash/pspemu/psp_emulator.self
lv2(2): #  Proc ID  : 0x1030200
lv2(2): #
lv2(2): # Register Info.
lv2(2): #      LR: 0x00000000016a8d8c    CR:0x4824202a
lv2(2): #    CTR: 0x00000000000a512c
lv2(2): #
lv2(2): #  GPR 0: 0x00000000016a8d8c  GPR 1: 0x00000000d00c9f50
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0x0000000000000000
lv2(2): #  GPR 4: 0x80000000006ac990  GPR 5: 0x0000000000000000
lv2(2): #  GPR 6: 0x0000000000000000  GPR 7: 0x0000000000000000
lv2(2): #  GPR 8: 0x00000000300000c0  GPR 9: 0x0000000000000001
lv2(2): #  GPR10: 0x00000000010700fd  GPR11: 0x0000000000000000
lv2(2): #  GPR12: 0x00000000000c0308  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000001abc4f0  GPR15: 0x0000000000000000
lv2(2): #  GPR16: 0x000000004824202a  GPR17: 0x00000000801a4730
lv2(2): #  GPR18: 0x00000000089a6550  GPR19: 0x0000000000000000
lv2(2): #  GPR20: 0x0000000000057e40  GPR21: 0x0000000000000002
lv2(2): #  GPR22: 0x0000000009979e00  GPR23: 0x0000000000000800
lv2(2): #  GPR24: 0x00000000089a6550  GPR25: 0x0000000009973e00
lv2(2): #  GPR26: 0x0000000009983e00  GPR27: 0x0000000009983e00
lv2(2): #  GPR28: 0x0000000009983e00  GPR29: 0x0000000009983e00
lv2(2): #  GPR30: 0x0000000009fec650  GPR31: 0x0000000008815618
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x82008000
lv2(2): #
lv2(2): #  FPR 0: 0xc000000000000000  FPR 1: 0x0000000000000000
lv2(2): #  FPR 2: 0x0000000000000000  FPR 3: 0x0000000000000000
lv2(2): #  FPR 4: 0xfff8000082008000  FPR 5: 0x408c200000000000
lv2(2): #  FPR 6: 0x3f52345680000000  FPR 7: 0x00000010703fd000
lv2(2): #  FPR 8: 0x0000000000000000  FPR 9: 0x0000000000000000
lv2(2): #  FPR10: 0x0000000000000000  FPR11: 0x00000010703fd000
lv2(2): #  FPR12: 0xfff8000082008000  FPR13: 0x407f400000000000
lv2(2): #  FPR14: 0x00000010703fd000  FPR15: 0x00000010703fd000
lv2(2): #  FPR16: 0x00000010703fd000  FPR17: 0x00000010703fd000
lv2(2): #  FPR18: 0x00000010703fd000  FPR19: 0x00000010703fd000
lv2(2): #  FPR20: 0x00000010703fd000  FPR21: 0x00000010703fd000
lv2(2): #  FPR22: 0x00000010703fd000  FPR23: 0x00000010703fd000
lv2(2): #  FPR24: 0x00000010703fd000  FPR25: 0x00000010703fd000
lv2(2): #  FPR26: 0x00000010703fd000  FPR27: 0x00000010703fd000
lv2(2): #  FPR28..


{{boxcode|float=left|width=50%|title=Original|code=<syntaxhighlight lang="asm">
00000000000285B0
00000000000285B0 empty_buffer:                          # CODE XREF: sceIoIoctlAsync+74�j
00000000000285B0                                        # sceIofileAsync+140�j ...
00000000000285B0                li        r31, 0       
00000000000285B4                clrldi    r27, r3, 32 
00000000000285B8                li        r29, 0       
00000000000285BC                cmpwi    cr4, r31, 0 
00000000000285C0
00000000000285C0 IoFileMgrForUser_822ADD32:              # CODE XREF: sceIoIoctlAsync+184�j
00000000000285C0                                        # sceIofileAsync+2D0�j
00000000000285C0                clrldi    r7, r23, 32  # out data ptr
00000000000285C4                extsw    r3, r24      # id
00000000000285C8                extsw    r4, r28      # cmd
00000000000285CC                mr        r6, r27      # in size
00000000000285D0                clrldi    r8, r25, 32  # out len
00000000000285D4                mr        r5, r29      # in data ptr
00000000000285D8                bl        _IoFileMgrForUser_822ADD32 # pspFileSystem.... ?
00000000000285DC                ld        r2, 0xC0+var_98(r1)
00000000000285E0                mr        r31, r3
00000000000285E4                beq      cr4, loc_285F4 # nop
00000000000285E8                mr        r3, r29
00000000000285EC                bl        _sys_libc_free
00000000000285F0                ld        r2, 0xC0+var_98(r1)
00000000000285F4
00000000000285F4 loc_285F4:                              # CODE XREF: sceIoIoctlAsync+B4�j
00000000000285F4                stw      r31, 8(r30)  # return value
</syntaxhighlight>}}


{{boxcode|float=right|width=50%|title=Patched|code=<syntaxhighlight lang="asm">
r31 = 8815618
00000000000285B0
00000000000285B0 loc_285B0:                              # CODE XREF: sceIoIoctlAsync+74�j
00000000000285B0                                        # sceIoIoctlAsync+140�j ...
00000000000285B0                bl        _sys_libc_malloc
00000000000285B4                clrldi    r26, r3, 32
00000000000285B8                lis      r28, 0x101 # 0x1010005                          # Seek cmd id
00000000000285BC                ori      r28, r28, 5 # 0x1010005
00000000000285C0                b        loc_28724
00000000000285C4 # ---------------------------------------------------------------------------
00000000000285C4
00000000000285C4 loc_285C4:                              # CODE XREF: sceIoIoctlAsync+184�j  #
00000000000285C4                                        # sceIoIoctlAsync+2D0�j              # Both branches also modified, so we can use 5x4 bytes
00000000000285C4                clrldi    r7, r23, 32
00000000000285C8                extsw    r3, r24
00000000000285CC                extsw    r4, r28
00000000000285D0                mr        r6, r27
00000000000285D4                clrldi    r8, r25, 32
00000000000285D8                mr        r5, r29
00000000000285DC                bl        _IoFileMgrForUser_822ADD32
00000000000285E0                ld        r2, 0xC0+var_98(r1)
00000000000285E4                mr        r31, r3
00000000000285E8                mr        r3, r29
00000000000285EC                bl        _sys_libc_free
00000000000285F0                ld        r2, 0xC0+var_98(r1)
00000000000285F4                stw      r31, 8(r30)
</syntaxhighlight>}}{{clear}}


Unsupported ID's will be replaced with empty buffers and simply sent through IoIoctl.<br>
0881560C addu s1,s0,s1
PGD = ID 0x04100001
08815610 jal zz_sceAtracReleaseAtracID
08815614 nop
08815618 li a0,-0x1
0881561C sw a0,0x2020(s2)
08815620 lb s1,0x20A0(s1)
08815624 beq s1,zero,pos_08815634
</pre>


Supported cmd ID's:
crash #2 on loading
  0x1010005 (UMD file seek set)
<pre>
  0x1010009
lv2(2): # Interrupt(exception) Info.
  0x101000A
lv2(2): #  Type : Data Storage
  (0x1020006)
lv2(2): #  SRR0 : 0x00000000016a8d94
  (0x1020007)
lv2(2): #  SRR1 : 0x800000000200e032
  0x1030008 (Read UMD file)
lv2(2): #  DSISR: 0x0000000040000000
  (0x1D20002)
lv2(2): #  DAR  : 0x0000000000000454
  0x1F100A6 (UMD file seek whence)
lv2(2): #  TB  : 0x0000000106f65ac5
  0x1F30003 (UMD disc read sectors operation)
lv2(2): #  HW Thread #: 1
lv2(2): #
lv2(2): # Backtrace
lv2(2): #  0x00000000016a8d88
lv2(2): #  0x00000000015e36ac
lv2(2): #  0x0000000000b7d25c
lv2(2): #  0x000000000163bc48
lv2(2): #  0x000000000163c68c
lv2(2): #  0x000000000163dc14
lv2(2): #  0x000000000163ddd8
lv2(2): #  0x00000000016697c8
lv2(2): #  0xbadadd001030068c
lv2(2): #
lv2(2): # User PPU Thread Info.
lv2(2): #  ID        : 0x01030069
lv2(2): #  Name      : PEmuExecThread
lv2(2): #  Stack addr: 0x00000000d00ab000
lv2(2): #  Stack size: 0x0000000000020000
lv2(2): #  Priority  : 1001
lv2(2): #  Proc name : /dev_flash/pspemu/psp_emulator.self
lv2(2): #  Proc ID   : 0x1010200
lv2(2): #
lv2(2): # Register Info.
lv2(2): #      LR: 0x00000000016a8d8c    CR:0x4824208a
lv2(2): #    CTR: 0x00000000000a512c
lv2(2): #
lv2(2): #  GPR 0: 0x00000000016a8d8c  GPR 1: 0x00000000d00c9f50
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0x0000000000000000
lv2(2): #  GPR 4: 0x80000000006768a0  GPR 5: 0x0000000000000000
lv2(2): #  GPR 6: 0x0000000000000000  GPR 7: 0x0000000000000000
lv2(2): #  GPR 8: 0x00000000300000c0  GPR 9: 0x0000000000000001
lv2(2): #  GPR10: 0x0000000001030069  GPR11: 0x0000000000000000
lv2(2): #  GPR12: 0x00000000000c0308  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000001abc4f0  GPR15: 0x0000000000000000
lv2(2): #  GPR16: 0x000000004824208a  GPR17: 0x00000000805c3858
lv2(2): #  GPR18: 0x0000000000000001  GPR19: 0x0000000009e28010
lv2(2): #  GPR20: 0x0000000000000001  GPR21: 0x0000000000000001
lv2(2): #  GPR22: 0x0000000000000000  GPR23: 0x0000000000000000
lv2(2): #  GPR24: 0x0000000004000000  GPR25: 0x0000000000000080
lv2(2): #  GPR26: 0x0000000000000001  GPR27: 0x0000000009e28010
lv2(2): #  GPR28: 0x0000000000000001  GPR29: 0x0000000000000001
lv2(2): #  GPR30: 0x0000000009ffda80  GPR31: 0x0000000008814a94 jal zz_sceCtrlReadBufferPositive
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x82004000
lv2(2): #
lv2(2): #  FPR 0: 0x407be00000000000 FPR 1: 0x0000000000000000
lv2(2): #  FPR 2: 0x406e000000000000  FPR 3: 0x0000000000000000
lv2(2): #  FPR 4: 0xfff8000082004000  FPR 5: 0x4040000000000000
lv2(2): #  FPR 6: 0x3fef000000000000 FPR 7: 0x0000001030369000
lv2(2): #  FPR 8: 0x407be00000000000 FPR 9: 0x406e000000000000
lv2(2): #  FPR10: 0x0000000000000000 FPR11: 0x0000001030369000
lv2(2): #  FPR12: 0xfff8000082004000  FPR13: 0x407f400000000000
lv2(2): #  FPR14: 0x0000001030369000 FPR15: 0x0000001030369000
lv2(2): #  FPR16: 0x0000001030369000  FPR17: 0x0000001030369000
lv2(2): #  FPR18: 0x0000001030369000 FPR19: 0x0000001030369000
lv2(2): #  FPR20: 0x0000001030369000  FPR21: 0x0000001030369000
lv2(2): #  FPR22: 0x0000001030369000 FPR23: 0x0000001030369000
lv2(2): #  FPR24: 0x0000001030369000  FPR25: 0x0000001030369000
lv2(2): #  FPR26: 0x0000001030369000 FPR27: 0x0000001030369000
lv2(2): #  FPR28: 0x0000001030369000  FPR29: 0x0000001030369000
lv2(2): #  FPR30: 0x0000001030369000 FPR31: 0x0000001030369000
lv2(2): #
</pre>
zz_sceAtracReleaseAtracID
zz_sceCtrlReadBufferPositive


*Reference help:
Its a thread? timing/sync problem.
**https://raw.githubusercontent.com/hrydgard/ppsspp/master/Core/HLE/sceIo.cpp
**https://code.google.com/p/jpcsp/source/browse/trunk/src/jpcsp/HLE/modules150/IoFileMgrForUser.java


====Cars====
Cars Race-O-Rama
<pre>
<pre>
0x01020001 - Get UMD Primary Volume Descriptor
rsx-err 262
0x01020002 - Get UMD Path Table
0x01020003 - Get UMD sector size
0x01020004 - Get UMD file pointer
0x01010005 - Set UMD file seek
0x01020006 - Get UMD file start sector
0x01020007 - Get UMD file length in bytes
0x01030008 - Read UMD file
0x01D20001 - Get UMD device file current sector seek position
0x01F30003 - Read raw sectors from UMD device file
0x01F100A6 - Set UMD device file seek by sector
0x04100001 - Define decryption key (DRM by amctrl.prx)
0x04100002 - Set PGD offset
0x04100010 - Get PGD data size
</pre>
</pre>
_CELL_DBG_RSX_ERROR_GRAPH_COMMAND_ERROR
* invalid data is specified for a command
* this error indicates that the command is supported but the data for that command is a value outside of the allowable range
====Dissidia 012====
<pre>
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Instruction Segment
lv2(2): #  SRR0 : 0xbadadd0010800610
lv2(2): #  SRR1 : 0x800000000000c032
lv2(2): #  DSISR: 0x0000000000200000
lv2(2): #  DAR  : 0x0000000010005f20
lv2(2): #  TB  : 0x000000022782edce
lv2(2): #  HW Thread #: 0
lv2(2): # Register Info.
lv2(2): #      LR: 0xbadadd0010800610    CR:0x28000022
lv2(2): #    CTR: 0x00000000000a512c
lv2(2): #
lv2(2): #  GPR 0: 0xbadadd0010800610  GPR 1: 0x00000000d00caf90
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0x0000000000000000
lv2(2): #  GPR 4: 0x8000000000638750  GPR 5: 0x0000000000000000
lv2(2): #  GPR 6: 0x0000000000000000  GPR 7: 0x0000000000000095
lv2(2): #  GPR 8: 0x0000000030000070  GPR 9: 0x0108006100000000
lv2(2): #  GPR10: 0x0000000001080061  GPR11: 0x0000000000000000
lv2(2): #  GPR12: 0x00000000000c0308  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000000000000  GPR15: 0x0000000000000000
lv2(2): #  GPR16: 0x0000000000000000  GPR17: 0x0000000000000000
lv2(2): #  GPR18: 0x0000000000000000  GPR19: 0x0000000000000000
lv2(2): #  GPR20: 0x0000000000000000  GPR21: 0x0000000000000000
lv2(2): #  GPR22: 0x0000000000000000  GPR23: 0x0000000000000000
lv2(2): #  GPR24: 0x0000000000000000  GPR25: 0x0000000000000000
lv2(2): #  GPR26: 0x0000000000000000  GPR27: 0x0000000000000000
lv2(2): #  GPR28: 0x0000000000000000  GPR29: 0x0000000000000000
lv2(2): #  GPR30: 0x0000000000000000  GPR31: 0x0000000000000000
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x82004000
lv2(2): #
lv2(2): #  FPR 0: 0x0000000000000000  FPR 1: 0x0000000000000000
lv2(2): #  FPR 2: 0x0000000000000000  FPR 3: 0x0000000000000000
lv2(2): #  FPR 4: 0xfff8000082004000  FPR 5: 0x403b800000000000
lv2(2): #  FPR 6: 0x0000000000000000  FPR 7: 0x0000000000000000
lv2(2): #  FPR 8: 0x0000000000000000  FPR 9: 0x0000000000000000
lv2(2): #  FPR10: 0x3ff0000000000000  FPR11: 0x0000000000000000
lv2(2): #  FPR12: 0xfff8000082004000  FPR13: 0xbff0000000000000
lv2(2): #  FPR14: 0x0000001080361000  FPR15: 0x0000001080361000
lv2(2): #  FPR16: 0x0000001080361000  FPR17: 0x0000001080361000
lv2(2): #  FPR18: 0x0000001080361000  FPR19: 0x0000001080361000
lv2(2): #  FPR20: 0x0000001080361000  FPR21: 0x0000001080361000
lv2(2): #  FPR22: 0x0000001080361000  FPR23: 0x0000001080361000
lv2(2): #  FPR24: 0x0000001080361000  FPR25: 0x0000001080361000
lv2(2): #  FPR26: 0x0000001080361000  FPR27: 0x0000001080361000
lv2(2): #  FPR28: 0x0000001080361000  FPR29: 0x0000001080361000
lv2(2): #  FPR30: 0x0000001080361000  FPR31: 0x0000001080361000
</pre>
<pre>
lui a0,0x886
lui a1,0x886
addiu a0,a0,0x64C4
jal z_un_088eceb0
addiu a1,a1,0x64FC
li a0,0x264
li a1,0x2
jal z_un_088ecfd4
li a2,0x2
jal z_un_088ee754
nop
li a0,0x1
...
z_un_088ecfd4:
addiu sp,sp,-0x20
sw s0,0x0(sp)
sw s1,0x4(sp)
move s0,a2
move s1,a1
sw s2,0x8(sp)
sw s3,0xC(sp)
sw ra,0x10(sp)
jal z_un_088ecf48
move s2,a0
lui s3,0x89D
lw a0,0x7F00(s3)
beq a0,zero,pos_088ED0B8
nop
lbu a0,0x0(a0)
bne a0,zero,pos_088ED0B0
nop
slti a0,s2,0x264
bne a0,zero,pos_088ED0A8
nop
slti a0,s1,0x2
bne a0,zero,pos_088ED0A0
nop
slti a0,s0,0x2
bne a0,zero,pos_088ED098
nop
move a0,s2
move a1,s1
jal z_un_088ef658
move a2,s0
jal zz_sceMpegInit
...
z_un_088ee754:
addiu sp,sp,-0x20
sw s0,0x4(sp)
lui s0,0x89D
lw a0,0x7F00(s0)
sw s1,0x8(sp)
sw s2,0xC(sp)
sw s3,0x10(sp)
sw ra,0x14(sp)
beq a0,zero,pos_088EE7E0
nop
lbu a1,0x0(a0)
beq a1,zero,pos_088EE7D8
nop
lbu a0,0x1(a0)
bne a0,zero,pos_088EE7D0
nop
jal zz_sceMpegQueryMemSize
...
</pre>
launching OVL process
====Gods Eater Burst====
Original EBOOT.PBP, no EBOOT.BIN resigned.
<pre>
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Instruction Segment
lv2(2): #  SRR0 : 0xbadadd0010800010
lv2(2): #  SRR1 : 0x800000000000c032
lv2(2): #  DSISR: 0x0000000000200000
lv2(2): #  DAR  : 0x800000020011c010
lv2(2): #  TB  : 0x000000018b2e5560
lv2(2): #  HW Thread #: 0
lv2(2): #
lv2(2): # Backtrace
lv2(2): #  0xbadadd001080000c
lv2(2): # Register Info.
lv2(2): #      LR: 0xbadadd0010800010    CR:0x24000028
lv2(2): #    CTR: 0x000000000163c62c
lv2(2): #
lv2(2): #  GPR 0: 0xbadadd0010800010  GPR 1: 0x00000000d00caf90
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0xffffffffffffffff
lv2(2): #  GPR 4: 0x00000000300e4af0  GPR 5: 0x0000000000000021
lv2(2): #  GPR 6: 0x0000000000010000  GPR 7: 0x0000000000000000
lv2(2): #  GPR 8: 0x00000000d00cad90  GPR 9: 0x0000000000000000
lv2(2): #  GPR10: 0xffffffff80020001  GPR11: 0x0000000000000002
lv2(2): #  GPR12: 0x0000000024000028  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000000000000  GPR15: 0x0000000000000000
lv2(2): #  GPR16: 0x0000000000000000  GPR17: 0x0000000000000000
lv2(2): #  GPR18: 0x0000000000000000  GPR19: 0x0000000000000000
lv2(2): #  GPR20: 0x0000000000000000  GPR21: 0x0000000000000000
lv2(2): #  GPR22: 0x0000000000000000  GPR23: 0x0000000000000000
lv2(2): #  GPR24: 0x0000000000000000  GPR25: 0x0000000000000000
lv2(2): #  GPR26: 0x0000000000000000  GPR27: 0x0000000000000000
lv2(2): #  GPR28: 0x0000000000000000  GPR29: 0x0000000000000000
lv2(2): #  GPR30: 0x0000000000000000  GPR31: 0x0000000000000000
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x00000000
lv2(2): #
lv2(2): #  FPR 0: 0x0000001080301000  FPR 1: 0x0000000000000000
lv2(2): #  FPR 2: 0x0000000000000000  FPR 3: 0x0000000000000000
lv2(2): #  FPR 4: 0x0000000000000000  FPR 5: 0x0000000000000000
lv2(2): #  FPR 6: 0x0000000000000000  FPR 7: 0x0000000000000000
lv2(2): #  FPR 8: 0x0000000000000000  FPR 9: 0x0000000000000000
lv2(2): #  FPR10: 0x0000000000000000  FPR11: 0x0000000000000000
lv2(2): #  FPR12: 0x0000000000000000  FPR13: 0x0000000000000000
lv2(2): #  FPR14: 0x0000000000000000  FPR15: 0x0000000000000000
lv2(2): #  FPR16: 0x0000000000000000  FPR17: 0x0000000000000000
lv2(2): #  FPR18: 0x0000000000000000  FPR19: 0x0000000000000000
lv2(2): #  FPR20: 0x0000000000000000  FPR21: 0x0000000000000000
lv2(2): #  FPR22: 0x0000000000000000  FPR23: 0x0000000000000000
lv2(2): #  FPR24: 0x0000000000000000  FPR25: 0x0000000000000000
lv2(2): #  FPR26: 0x0000000000000000  FPR27: 0x0000000000000000
lv2(2): #  FPR28: 0x0000000000000000  FPR29: 0x0000000000000000
lv2(2): #  FPR30: 0x0000000000000000  FPR31: 0x0000000000000000
</pre>
Suggestion 0xbadadd..... is related to EBOOT sign, decryption,....
====Evangelion====
PS3 - crashes on unsupported scePauth_F7AA47F6 which it cant resolve
<pre>
[FILE LOADING]:map/free/freemap.xml
[FILE LOADING]:sound/se/se_map00.phb
Lo[FILE LOADING]:ui/free/place.bin
ad : [sound/se/se_map00][3,-1]
[8]ui/free/place.bin
[FILE LOADING]:ui/common/fm_00.bin
[9]ui/common/fm_00.bin
[FILE LOADING]:ui/common/fm_01.bin
[10]ui/common/fm_01.bin
[FILE LOADING]:ui/common/fm_02.bin
[11]ui/common/fm_02.bin
[FILE LOADING]:ui/free/command00.bin
[12]ui/free/command00.bin
[FILE LOADING]:ui/free/command00.bin
[13]ui/free/command00.bin
[FILE LOADING]:ui/free/rs_02.bin
[14]ui/free/rs_02.bin
[FILE LOADING]:ui/free/bn_c000.gim
[FILE LOADING]:ui/free/com_nm.gim
ERROR 0x9ffed84
SQ:lv2(2): #
lv2(2): #
lv2(2): # SDK version: 446000
lv2(2): # system software version: 4.46 (DEX)
lv2(2): # revision: 49873
lv2(2): #
lv2(2): # Lv-2 detected an interrupt(exception) in a user PPU Thread.
lv2(2): #
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Data Storage
lv2(2): decrypt line = (1) column = (0) : error unexpected character(control)
lv2(2): #  SRR0 : 0x0000000081052170
lv2(2): #  SRR1 : 0x800000000200e032
lv2(2): #  DSISR: 0x0000000042000000
lv2(2): #  DAR  : 0x00000000b182b18e
lv2(2): #  TB  : 0x00000003e747def9
lv2(2): #  HW Thread #: 0
lv2(2): #
lv2(2): # Backtrace
lv2(2): #  0x00000000016a8d88 sub_C8CB0 + 0xD8
lv2(2): #  0x00000000015e36ac
lv2(2): #  0x0000000000b7d25c
lv2(2): #  0x000000000163bc48 bl        _ThreadManForUser_D3C08E1A
lv2(2): #  0x000000000163c68c bl        sub_5B0C8
lv2(2): #  0x000000000163dc14 bl        sub_5C32C
lv2(2): #  0x000000000163ddd8 bl        sub_5DA7C / SceModmgrStart
lv2(2): #  0x00000000016697c8 - PEmuExecThread
lv2(2): #  0xbadadd0010800a3c
lv2(2): #
lv2(2): # User PPU Thread Info.
lv2(2): #  ID        : 0x010800a4
lv2(2): #  Name      : PEmuExecThread
lv2(2): #  Stack addr: 0x00000000d00ab000
lv2(2): #  Stack size: 0x0000000000020000
lv2(2): #  Priority  : 1001
lv2(2): #  Proc name : /dev_flash/pspemu/psp_emulator.self
lv2(2): #  Proc ID  : 0x1030200
lv2(2): #
lv2(2): # Register Info.
lv2(2): #      LR: 0x0000000080bc1cf4    CR:0x28228082
lv2(2): #    CTR: 0x0000000081051ab8
lv2(2): #
lv2(2): #  GPR 0: 0x0000000000000000  GPR 1: 0x00000000d00c9f50
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0x00000000b3900000
lv2(2): #  GPR 4: 0x0000000000000000  GPR 5: 0x0000000001abc4f0
lv2(2): #  GPR 6: 0x00000000089ee400  GPR 7: 0x0000000081051ab8
lv2(2): #  GPR 8: 0x00000000300000c0  GPR 9: 0x0000000000000001
lv2(2): #  GPR10: 0x00000000b8c050b0  GPR11: 0x00000000b182b18e
lv2(2): #  GPR12: 0x00000000b182b182  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000001abc4f0  GPR15: 0x00000000300e55c0
lv2(2): #  GPR16: 0x000000008107c290  GPR17: 0x0000000008aa6c88
lv2(2): #  GPR18: 0x0000000008aa6cb0  GPR19: 0x0000000008aa6958
lv2(2): #  GPR20: 0x0000000008aa6c80  GPR21: 0xfffffffffffffffc
lv2(2): #  GPR22: 0x00000000000000b0  GPR23: 0x0000000008c05088
lv2(2): #  GPR24: 0x000000006d92e082  GPR25: 0x0000000008ca4690
lv2(2): #  GPR26: 0x0000000000000002  GPR27: 0x0000000008000000
lv2(2): #  GPR28: 0x00000000000003e8  GPR29: 0x0000000000000032
lv2(2): #  GPR30: 0x0000000009ffe8d0  GPR31: 0x00000000089ee400
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x82064000
lv2(2): #
lv2(2): #  FPR 0: 0xbfe3542760000000  FPR 1: 0x0000000000000000
lv2(2): #  FPR 2: 0x407c800000000000  FPR 3: 0x0000000000000000
lv2(2): #  FPR 4: 0xfff8000082064000  FPR 5: 0x408e000000000000
lv2(2): #  FPR 6: 0x3f51111120000000  FPR 7: 0x0000000000000000
lv2(2): #  FPR 8: 0x4070000000000000  FPR 9: 0x0000000000000000
lv2(2): #  FPR10: 0x0000000000000000  FPR11: 0x0000000000000000
lv2(2): #  FPR12: 0xfff8000082064000  FPR13: 0xbff0000000000000
lv2(2): #  FPR14: 0x00000010803a4000  FPR15: 0x00000010803a4000
lv2(2): #  FPR16: 0x00000010803a4000  FPR17: 0x00000010803a4000
lv2(2): #  FPR18: 0x00000010803a4000  FPR19: 0x00000010803a4000
lv2(2): #  FPR20: 0x00000010803a4000  FPR21: 0x00000010803a4000
lv2(2): #  FPR22: 0x00000010803a4000  FPR23: 0x00000010803a4000
lv2(2): #  FPR24: 0x00000010803a4000  FPR25: 0x00000010803a4000
lv2(2): #  FPR26: 0x00000010803a4000  FPR27: 0x00000010803a4000
lv2(2): #  FPR28: 0x00000010803a4000  FPR29: 0x00000010803a4000
lv2(2): #  FPR30: 0x00000010803a4000  FPR31: 0x00000010803a4000
</pre>
PPSSPP
<pre>
28:02:573 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:map/free/freemap.xml
28:02:576 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:sound/se/se_map00.phb
28:02:593 user_main    I[KERNEL]: HLE\sceKernelMemory.cpp:1140 sceKernelPrintf: Load : [sound/se/se_map00][3,-1]
28:02:594 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/free/place.bin
28:02:608 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [8]ui/free/place.bin
28:02:609 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/common/fm_00.bin
28:02:615 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [9]ui/common/fm_00.bin
28:02:615 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/common/fm_01.bin
28:02:618 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [10]ui/common/fm_01.bin
28:02:618 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/common/fm_02.bin
28:02:620 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [11]ui/common/fm_02.bin
28:02:621 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/free/command00.bin
28:02:622 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [12]ui/free/command00.bin
28:02:623 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/free/command00.bin
28:02:624 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [13]ui/free/command00.bin
28:02:624 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/free/rs_02.bin
28:02:627 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [14]ui/free/rs_02.bin
28:02:628 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/free/bn_c000.gim
28:02:634 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:ui/free/com_nm.gim
28:02:638 user_main    I[HLE]: HLE\scePauth.cpp:38 scePauth_F7AA47F6(08c2cc40, 00000df0, 0bffed80, 0bffed84)
28:02:639 user_main    I[COMMON]: FileUtil.cpp:248 CreateDir: directory ...\ppsspp_win\memstick/PAUTH
28:02:660 user_main    E[HLE]: HLE\scePauth.cpp:63 No decrypted file found! save as ...\ppsspp_win\memstick/PAUTH/pauth_5fb505c3.bin
28:02:676 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: ERROR 0xffffffff
28:02:679 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:char/free/c000.xml
28:02:682 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:char/free/c000/c000_00a.gmo
28:02:720 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:char/freemot/a000b.gmo
28:02:738 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:char/freemot/a010b.gmo
28:02:771 user_main    I[IO]: HLE\sceIo.cpp:906 stdout: [FILE LOADING]:char/freemot/a011a.gmo
</pre>
====Harry Potter and the Half-Blood Prince====
<pre>
rsx-err 262
</pre>
====Killzone Liberation====
<pre>
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Instruction Segment
lv2(2): #  SRR0 : 0xbadadd0010b00760
lv2(2): #  SRR1 : 0x800000000000c032
lv2(2): #  DSISR: 0x0000000002200000
lv2(2): #  DAR  : 0x8000000100078ad0
lv2(2): #  TB  : 0x00000007828ccc76
lv2(2): #  HW Thread #: 1
lv2(2): # Register Info.
lv2(2): #      LR: 0xbadadd0010b00760    CR:0x24000028
lv2(2): #    CTR: 0x000000000163c62c
lv2(2): #
lv2(2): #  GPR 0: 0xbadadd0010b00760  GPR 1: 0x00000000d00caf90
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0xffffffffffffffff
lv2(2): #  GPR 4: 0x00000000300e4630  GPR 5: 0x0000000000000021
lv2(2): #  GPR 6: 0x0000000000010000  GPR 7: 0x0000000000000000
lv2(2): #  GPR 8: 0x00000000d00cad90  GPR 9: 0x0000000000000000
lv2(2): #  GPR10: 0xffffffff80020001  GPR11: 0x0000000000000002
lv2(2): #  GPR12: 0x0000000024000028  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000000000000  GPR15: 0x0000000000000000
lv2(2): #  GPR16: 0x0000000000000000  GPR17: 0x0000000000000000
lv2(2): #  GPR18: 0x0000000000000000  GPR19: 0x0000000000000000
lv2(2): #  GPR20: 0x0000000000000000  GPR21: 0x0000000000000000
lv2(2): #  GPR22: 0x0000000000000000  GPR23: 0x0000000000000000
lv2(2): #  GPR24: 0x0000000000000000  GPR25: 0x0000000000000000
lv2(2): #  GPR26: 0x0000000000000000  GPR27: 0x0000000000000000
lv2(2): #  GPR28: 0x0000000000000000  GPR29: 0x0000000000000000
lv2(2): #  GPR30: 0x0000000000000000  GPR31: 0x0000000000000000
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x00000000
lv2(2): #
lv2(2): #  FPR 0: 0x00000010b0376000  FPR 1: 0x0000000000000000
lv2(2): #  FPR 2: 0x0000000000000000  FPR 3: 0x0000000000000000
lv2(2): #  FPR 4: 0x0000000000000000  FPR 5: 0x0000000000000000
lv2(2): #  FPR 6: 0x0000000000000000  FPR 7: 0x0000000000000000
lv2(2): #  FPR 8: 0x0000000000000000  FPR 9: 0x0000000000000000
lv2(2): #  FPR10: 0x0000000000000000  FPR11: 0x0000000000000000
lv2(2): #  FPR12: 0x0000000000000000  FPR13: 0x0000000000000000
lv2(2): #  FPR14: 0x0000000000000000  FPR15: 0x0000000000000000
lv2(2): #  FPR16: 0x0000000000000000  FPR17: 0x0000000000000000
lv2(2): #  FPR18: 0x0000000000000000  FPR19: 0x0000000000000000
lv2(2): #  FPR20: 0x0000000000000000  FPR21: 0x0000000000000000
lv2(2): #  FPR22: 0x0000000000000000  FPR23: 0x0000000000000000
lv2(2): #  FPR24: 0x0000000000000000  FPR25: 0x0000000000000000
lv2(2): #  FPR26: 0x0000000000000000  FPR27: 0x0000000000000000
lv2(2): #  FPR28: 0x0000000000000000  FPR29: 0x0000000000000000
lv2(2): #  FPR30: 0x0000000000000000  FPR31: 0x0000000000000000
</pre>
Fix:
<pre>
ELF_PATH = disc0:/PSP_GAME/USRDIR/KZL.PRX
</pre>
Crash was happening because emulator does not support game prx via loader.
KZL PRX crash after guerilla logo
<pre>
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Data Storage
lv2(2): #  SRR0 : 0x000000000165d70c sub_7CBB8 + 0xB54
lv2(2): #  SRR1 : 0x800000000200e032
lv2(2): #  DSISR: 0x0000000040000000
lv2(2): #  DAR  : 0x0000000000000000
lv2(2): #  TB  : 0x00000009f27df9f0
lv2(2): #  HW Thread #: 1
lv2(2): #
lv2(2): # Backtrace
lv2(2): #  0x00000000d00cfd0c
lv2(2): #  0x000000000162dfcc sub_4DF98 + 0x34 - 0x779242A2 0x00220920 sceRtcConvertLocalTimeToUTC
lv2(2): #  0x0000000001602bf4 cvt.s.w %s,%s
lv2(2): #  0x00000000016c8d88
lv2(2): #  0x00000000016036ac vmone.t %s
lv2(2): #  0x0000000000b9d25c
lv2(2): #  0x000000000165bc48
lv2(2): #  0x000000000165c68c
lv2(2): #  0x000000000165dc14
lv2(2): #  0x000000000165ddd8
lv2(2): #  0x00000000016897c8
lv2(2): #  0xbadadd0018100c7c
lv2(2): #
lv2(2): # User PPU Thread Info.
lv2(2): #  ID        : 0x018100c8
lv2(2): #  Name      : PEmuExecThread
lv2(2): #  Stack addr: 0x00000000d00b1000
lv2(2): #  Stack size: 0x0000000000020000
lv2(2): #  Priority  : 1001
lv2(2): #  Proc name : /dev_flash/pspemu/psp_emulator.self
lv2(2): #  Proc ID  : 0x1050200
lv2(2): #
lv2(2): # Register Info.
lv2(2): #      LR: 0x000000000165d704    CR:0x28242042
lv2(2): #    CTR: 0x00000000000a512c
lv2(2): #
lv2(2): #  GPR 0: 0x0000000008e92184  GPR 1: 0x00000000d00cfc80
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0x0000000000000000
lv2(2): #  GPR 4: 0x0000000000000001  GPR 5: 0x0000000009f000b4
lv2(2): #  GPR 6: 0x0000000000000000  GPR 7: 0x00000000400e4630
lv2(2): #  GPR 8: 0x0000000009f000b4  GPR 9: 0x000000000011db40
lv2(2): #  GPR10: 0x0000000008820300  GPR11: 0x0000000001a6c658
lv2(2): #  GPR12: 0x00000000000c0308  GPR13: 0x000000001000d260
lv2(2): #  GPR14: 0x0000000001abc4f0  GPR15: 0x00000000400e5170
lv2(2): #  GPR16: 0x0000000028242042  GPR17: 0x000000008004b1a0
lv2(2): #  GPR18: 0x0000000000000000  GPR19: 0x0000000000000001
lv2(2): #  GPR20: 0x0000000000000000  GPR21: 0x0000000000000000
lv2(2): #  GPR22: 0x0000000001abc4f0  GPR23: 0x00000000400e5170
lv2(2): #  GPR24: 0x0000000000000000  GPR25: 0x0000000000000001
lv2(2): #  GPR26: 0x0000000000000000  GPR27: 0x0000000000000000
lv2(2): #  GPR28: 0x0000000000000000  GPR29: 0x0000000000000000
lv2(2): #  GPR30: 0x0000000000000000  GPR31: 0x0000000000000000
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x00000000
lv2(2): #
lv2(2): #  FPR 0: 0x00000018103c8000  FPR 1: 0x00000018103c8000
lv2(2): #  FPR 2: 0x00000018103c8000  FPR 3: 0x00000018103c8000
lv2(2): #  FPR 4: 0xfff8000000000000  FPR 5: 0x00000018103c8000
lv2(2): #  FPR 6: 0x00000018103c8000  FPR 7: 0x00000018103c8000
lv2(2): #  FPR 8: 0x00000018103c8000  FPR 9: 0x00000018103c8000
lv2(2): #  FPR10: 0x00000018103c8000  FPR11: 0x00000018103c8000
lv2(2): #  FPR12: 0xfff8000000000000  FPR13: 0x00000018103c8000
lv2(2): #  FPR14: 0x00000018103c8000  FPR15: 0x00000018103c8000
lv2(2): #  FPR16: 0x00000018103c8000  FPR17: 0x00000018103c8000
lv2(2): #  FPR18: 0x00000018103c8000  FPR19: 0x00000018103c8000
lv2(2): #  FPR20: 0x00000018103c8000  FPR21: 0x00000018103c8000
lv2(2): #  FPR22: 0x00000018103c8000  FPR23: 0x00000018103c8000
lv2(2): #  FPR24: 0x00000018103c8000  FPR25: 0x00000018103c8000
lv2(2): #  FPR26: 0x00000018103c8000  FPR27: 0x00000018103c8000
lv2(2): #  FPR28: 0x00000018103c8000  FPR29: 0x00000018103c8000
lv2(2): #  FPR30: 0x00000018103c8000  FPR31: 0x00000018103c8000
</pre>
====Metal Gear Solid Portable====
PS3 - freezes on startup
<pre>
lv2(2): #  Type : Instruction Segment
lv2(2): #  SRR0 : 0xbadadd0010300bd0
lv2(2): #  SRR1 : 0x800000000000c032
lv2(2): #  DSISR: 0x0000000002200000
lv2(2): #  DAR  : 0x00000000b0010000
lv2(2): #  TB  : 0x00000000dfe842f2
lv2(2): #  HW Thread #: 1
lv2(2): #
lv2(2): # Backtrace
lv2(2): #  0xbadadd0010300bcc
lv2(2): #
lv2(2): # User PPU Thread Info.
lv2(2): #  ID        : 0x010300bd
lv2(2): #  Name      : PEmuExecThread
lv2(2): #  Stack addr: 0x00000000d00ab000
lv2(2): #  Stack size: 0x0000000000020000
lv2(2): #  Priority  : 1001
lv2(2): #  Proc name : /dev_flash/pspemu/psp_emulator.self
lv2(2): #  Proc ID  : 0x1010200
lv2(2): #
lv2(2): # Register Info.
lv2(2): #      LR: 0xbadadd0010300bd0    CR:0x24000028
lv2(2): #    CTR: 0x000000000163c62c
lv2(2): #
lv2(2): #  GPR 0: 0xbadadd0010300bd0  GPR 1: 0x00000000d00caf90
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0xffffffffffffffff
lv2(2): #  GPR 4: 0x00000000300e6030  GPR 5: 0x0000000000000021
lv2(2): #  GPR 6: 0x0000000000010000  GPR 7: 0x0000000000000000
lv2(2): #  GPR 8: 0x00000000d00cad90  GPR 9: 0x0000000000000000
lv2(2): #  GPR10: 0xffffffff80020001  GPR11: 0x0000000000000002
lv2(2): #  GPR12: 0x0000000024000028  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000000000000  GPR15: 0x0000000000000000
lv2(2): #  GPR16: 0x0000000000000000  GPR17: 0x0000000000000000
lv2(2): #  GPR18: 0x0000000000000000  GPR19: 0x0000000000000000
lv2(2): #  GPR20: 0x0000000000000000  GPR21: 0x0000000000000000
lv2(2): #  GPR22: 0x0000000000000000  GPR23: 0x0000000000000000
lv2(2): #  GPR24: 0x0000000000000000  GPR25: 0x0000000000000000
lv2(2): #  GPR26: 0x0000000000000000  GPR27: 0x0000000000000000
lv2(2): #  GPR28: 0x0000000000000000  GPR29: 0x0000000000000000
lv2(2): #  GPR30: 0x0000000000000000  GPR31: 0x0000000000000000
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x00000000
lv2(2): #
lv2(2): #  FPR 0: 0x00000010303bd000
</pre>
Crash happened because of wrong signing of EBOOT.BIN via PrxEncrypter, starts when signed with sign_np
later on freezes
<pre>
rsx-err 1
</pre>
_CELL_DBG_RSX_ERROR_FIFO_PARSE_ERROR
====Motorstorm Arctic Edge====
On Freeze:
<pre>
rsx-err 256
local cmd area [100000-500000]
cmd_offset=1e0000 start_cmd=f7bc
put=44060 get=4a9900
debug label = 1337c0d3
ret_local_offset = 4ace30
ret_main_offset = 44060
cmdbuf_base = 100000
old_jts[0]=204ace34
flip timeout!
local cmd area [100000-500000]
cmd_offset=3a0000 start_cmd=fc70
put=44060 get=4a9900
debug label = 1337c0d3
ret_local_offset = 2efa30
ret_main_offset = 44060
get[-32] = 43900000
get[-31] = 43800000
get[-30] = 0
get[-29] = ffffffff
get[-28] = 4499999a
get[-27] = 448b4b4b
get[-26] = 3f800000
get[-25] = 0
get[-24] = 41808
get[-23] = 0
get[-22] = 400c1714
get[-21] = 0
get[-20] = 0
get[-19] = 0
get[-18] = 41808
get[-17] = 8
get[-16] = 0
get[-15] = 0
get[-14] = 0
get[-13] = 40801818
get[-12] = 43a00000
get[-11] = 0
get[-10] = 0
get[-9] = ffffffff
get[-8] = 44aaaaab
get[-7] = 0
get[-6] = 3f800000
get[-5] = 0
get[-4] = 43b00000
get[-3] = 0
get[-2] = 0
get[-1] = ffffffff
get[0] = 44bbbbbc
get[1] = 0
get[2] = 3f800000
get[3] = 0
get[4] = 43b00000
get[5] = 43800000
get[6] = 0
get[7] = ffffffff
get[8] = 44bbbbbc
get[9] = 448b4b4b
get[10] = 3f800000
get[11] = 0
get[12] = 43a00000
get[13] = 43800000
get[14] = 0
get[15] = ffffffff
get[16] = 44aaaaab
get[17] = 448b4b4b
get[18] = 3f800000
get[19] = 0
get[20] = 41808
get[21] = 0
get[22] = 400c1714
get[23] = 0
get[24] = 0
get[25] = 0
get[26] = 41808
get[27] = 8
get[28] = 0
get[29] = 0
get[30] = 0
get[31] = 40801818
get[32] = 43b00000
</pre>
rsx-err 256 - _CELL_DBG_RSX_ERROR_GRAPH_LIMIT_COLOR ?
* failure on accessing a tiled area (accessed as a color buffer)
* cellGcmSetSurface() not properly set for the tiled area
* pitch sizes in cellGcmSetSurface() are larger than cellGcmSetTileInfo() / cellGcmSetDisplayBuffer()
* memory format specified in cellGcmSetInlineTransfer() must be linear format
* fragment program being placed in tiled area and cellGcmSetFragmentProgramParameter() called
====Naruto Ultimate Ninja Impact====
<pre>
fatal error : cannot load disc0:/sce_lbn0xE640_size0x5100 0x80020148
fatal error : cannot load module disc0:/sce_lbn0xE640_size0x5100
fatal error : cannot load disc0:/sce_lbn0xE640_size0x5100 0x80020148
fatal error : cannot load module disc0:/sce_lbn0xE640_size0x5100
fatal error : cannot load disc0:/sce_lbn0xE640_size0x5100 0x80020148
fatal error : cannot load module disc0:/sce_lbn0xE640_size0x5100
</pre>
SCE_KERNEL_ERROR_UNSUPPORTED_PRX_TYPE  = 0x80020148
====Patapon 3====
PS3
<pre>
lv2(2): # Interrupt(exception) Info.
lv2(2): #  Type : Data Storage
lv2(2): #  SRR0 : 0x0000000001668aa4 sub_88A80+0x24
lv2(2): #  SRR1 : 0x800000000200e032
lv2(2): #  DSISR: 0x0000000042000000
lv2(2): #  DAR  : 0x0000000000000038
lv2(2): #  TB  : 0x000000017fdd4b06
lv2(2): #  HW Thread #: 0
lv2(2): # Backtrace
lv2(2): #  0x0000000001668cc4 _Export_PEmuCoreLib_3A9CD1C8+0x2C
lv2(2): #  0x0000000000dd369c
lv2(2): #  0x000000000160827c sceIoClose+0x1C
lv2(2): #  0x00000000015e2bf4
lv2(2): #  0x00000000016a8d88
lv2(2): #  0x00000000015e36ac
lv2(2): #  0x0000000000b7d25c
lv2(2): #  0x000000000163bc48
lv2(2): #  0x000000000163c68c
lv2(2): #  0x000000000163dc14
lv2(2): #  0x000000000163ddd8
lv2(2): #  0x00000000016697c8
lv2(2): #  0xbadadd0010700f4c
lv2(2): # Register Info.
lv2(2): #      LR: 0x0000000001668ce4    CR:0x28244044
lv2(2): #    CTR: 0x00000000000a562c
lv2(2): #
lv2(2): #  GPR 0: 0x0000000000000000  GPR 1: 0x00000000d00c98a0
lv2(2): #  GPR 2: 0x000000000191ef80  GPR 3: 0x0000000001abccec
lv2(2): #  GPR 4: 0x00000000300e4180  GPR 5: 0x0000000001abc4f0
lv2(2): #  GPR 6: 0x00000000015e2ba0  GPR 7: 0x00000000801bafc0
lv2(2): #  GPR 8: 0x00000000300e4180  GPR 9: 0x0000000000000000
lv2(2): #  GPR10: 0x0000000000000000  GPR11: 0x0000000000000000
lv2(2): #  GPR12: 0x00000000000c0328  GPR13: 0x000000001000cf50
lv2(2): #  GPR14: 0x0000000001abc4f0  GPR15: 0x00000000300e51e0
lv2(2): #  GPR16: 0x0000000028244042  GPR17: 0x0000000000000000
lv2(2): #  GPR18: 0x0000000008c4b6eb  GPR19: 0x00000000ffffffff
lv2(2): #  GPR20: 0x0000000000000001  GPR21: 0x0000000000000000
lv2(2): #  GPR22: 0x0000000008c4b6e8  GPR23: 0x0000000008c4b6e0
lv2(2): #  GPR24: 0x00000000fefefeff  GPR25: 0x0000000000000002
lv2(2): #  GPR26: 0x0000000008a59820  GPR27: 0x0000000001a9c0b4
lv2(2): #  GPR28: 0x00000000300e4180  GPR29: 0x00000000300e4180
lv2(2): #  GPR30: 0x00000000300e4180  GPR31: 0x0000000000000000
lv2(2): #
lv2(2): #    XER: 0x0000000000000000  FPSCR: 0x00000000
lv2(2): #
lv2(2): #  FPR 0: 0x00000010703f5000  FPR 1: 0x00000010703f5000
lv2(2): #  FPR 2: 0x00000010703f5000  FPR 3: 0x00000010703f5000
lv2(2): #  FPR 4: 0xfff8000000000000  FPR 5: 0x00000010703f5000
lv2(2): #  FPR 6: 0x00000010703f5000  FPR 7: 0x00000010703f5000
lv2(2): #  FPR 8: 0x00000010703f5000  FPR 9: 0x00000010703f5000
lv2(2): #  FPR10: 0x00000010703f5000  FPR11: 0x00000010703f5000
lv2(2): #  FPR12: 0xfff8000000000000  FPR13: 0x00000010703f5000
lv2(2): #  FPR14: 0x00000010703f5000  FPR15: 0x00000010703f5000
lv2(2): #  FPR16: 0x00000010703f5000  FPR17: 0x00000010703f5000
lv2(2): #  FPR18: 0x00000010703f5000  FPR19: 0x00000010703f5000
lv2(2): #  FPR20: 0x00000010703f5000  FPR21: 0x00000010703f5000
lv2(2): #  FPR22: 0x00000010703f5000  FPR23: 0x00000010703f5000
lv2(2): #  FPR24: 0x00000010703f5000  FPR25: 0x00000010703f5000
lv2(2): #  FPR26: 0x00000010703f5000  FPR27: 0x00000010703f5000
lv2(2): #  FPR28: 0x00000010703f5000  FPR29: 0x00000010703f5000
lv2(2): #  FPR30: 0x00000010703f5000  FPR31: 0x00000010703f5000
</pre>
PPSSPP
<pre>
17:07:711 user_main    D[IO]: HLE\sceIo.cpp:1762 5=sceIoOpenAsync(disc0:/PSP_GAME/USRDIR/DATAMS.HED, 00000001, 00000000)
17:07:711 user_main    D[IO]: HLE\sceIo.cpp:1879 5 = sceIoWaitAsyncCB(5, 0bfff330): waiting
17:07:711 user_main    D[IO]: HLE\sceIo.cpp:1141 206848 = sceIoLseek(5, 0, 2)
17:07:711 user_main    D[IO]: HLE\sceIo.cpp:1141 0 = sceIoLseek(5, 0, 0)
17:07:711 FileThread  D[IO]: HLE\sceIo.cpp:1177 0 = sceIoLseekAsync(5, 0, 0)
17:07:711 FileThread  D[IO]: HLE\sceIo.cpp:1907 0 = sceIoPollAsync(5, 0bfdb988): not ready
17:07:711 FileThread  D[IO]: HLE\sceIo.cpp:1718 sceIoSetAsyncCallback(5, 295, 08c49bc0)
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:1910 0 = sceIoPollAsync(5, 0bfdba88)
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:884 sceIoReadAsync(5, 08c4ce80, 13fc8): deferring result
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:1907 0 = sceIoPollAsync(5, 0bfdb988): not ready
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:1718 sceIoSetAsyncCallback(5, 295, 08c49bc0)
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:1907 0 = sceIoPollAsync(5, 0bfdb988): not ready
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:1907 0 = sceIoPollAsync(5, 0bfdb988): not ready
17:07:712 FileThread  D[IO]: HLE\sceIo.cpp:1907 0 = sceIoPollAsync(5, 0bfdb988): not ready
17:07:712 FileThread  D[IO]: HLE\sceUmd.cpp:317 0x32=sceUmdGetDriveStat()
17:07:713 FileThread  D[IO]: HLE\sceIo.cpp:1910 81864 = sceIoPollAsync(5, 0bfdba88)
17:15:853 user_main    D[IO]: HLE\sceIo.cpp:1285 sceIoClose(5)
18:26:237 user_main    D[IO]: HLE\sceIo.cpp:1762 5=sceIoOpenAsync(disc0:/PSP_GAME/USRDIR/DATAMS.BND, 00000001, 00000000)
18:26:237 user_main    D[IO]: HLE\sceIo.cpp:1879 5 = sceIoWaitAsyncCB(5, 0bfff490): waiting
18:26:237 user_main    D[IO]: HLE\sceIo.cpp:693 sceIoGetstat(disc0:/PSP_GAME/USRDIR/DATAMS.BND, 0bfff498) : sector = 0001f350
18:30:214 user_main    D[IO]: HLE\sceIo.cpp:1285 sceIoClose(-1)
</pre>
====Persona3 PORTABLE====
No Exception Message, Console hard freezes.
<pre>
flip timeout!
local cmd area [100000-500000]
cmd_offset=330000 start_cmd=df3c
put=2c9c0 get=43750c
debug label = 1337c0d3
ret_local_offset = 43aec0
ret_main_offset = 2c9c0
</pre>
AW.VRAM_MODE = 1
====Sword Art Online====
Right in ingame Tutorial, hard freezes console, no exception message
<pre>
finish mpeg avc
lv2(2): System Warning : busy loop detected
local cmd area [100000-500000]
cmd_offset=3d0000 start_cmd=170c
put=622c0 get=4d1708
debug label = 1337c0d3
ret_local_offset = 3c27e0
ret_main_offset = 622c0
</pre>
====Valkyrie Profile Lenneth====
<pre>
sceDisplayGetAccumulatedHcount() = d325
sceDisplayGetAccumulatedHcount() = d443
sceDisplaySetFrameBuf(topaddr:4088000, bufferwidth:512, pixelformat:3, sync:1) = 0
sceDisplayGetAccumulatedHcount() = d561
sceGeEdramGetAddr() = 4000000
sceGeEdramGetAddr() = 4000000
sceGeListEnQueue(list:4198800,, stall:0, cbid:0, arg:9f13e20) = 49adca28
sceDisplayGetAccumulatedHcount() = d67f
sceDisplaySetFrameBuf(topaddr:4000000, bufferwidth:512, pixelformat:3, sync:0) = 0
sceGeListEnQueue(list:48e951c0,, stall:48e951c0, cbid:0, arg:8857520) = 48adca1f
sceGeEdramGetAddr() = 4000000
sceGeListUpdateStallAddr(qid:48adca1f,, stall:48e952fc) = 0
sceGeListUpdateStallAddr(qid:48adca1f,, stall:48e95394) = 0
sceGeEdramGetAddr() = 4000000
sceGeEdramGetAddr() = 4000000
sceGeListEnQueue(list:4198800,, stall:0, cbid:0, arg:9f13e20) = 4fadca16
sceDisplayGetAccumulatedHcount() = d79d
sceDisplaySetFrameBuf(topaddr:4088000, bufferwidth:512, pixelformat:3, sync:0) = 0
sceGeListEnQueue(list:48e951c0, stall:48e951c0, cbid:0, arg:8857520) = 4eadca0d
rsx-err 257
local cmd area [100000-500000]
cmd_offset=20000 start_cmd=76e0
put=10ed8 get=52f680
debug label = 1337c0d3
ret_local_offset = 1275b0
ret_main_offset = 10dd4
cmdbuf_base = 100000
old_jts[0]=201275b4
sceGeEdramGetAddr() = 4000000
sceGeListUpdateStallAddr(qid:4eadca0d,, stall:48e952fc) = 0
sceGeListUpdateStallAddr(qid:4eadca0d,, stall:48e95394) = 0
sceGeEdramGetAddr() = 4000000
sceGeEdramGetAddr() = 4000000
sceGeListEnQueue(list:4198800,, stall:0, cbid:0, arg:9f13e20) = 4dadca05
sceUtilitySavedataInitStart(8e9bc1c) = 0
</pre>
rsx-err 257 - _CELL_DBG_RSX_ERROR_GRAPH_LIMIT_Z ?
* tiled area is accessed as depth buffer
* depth buffer area not properly specified in cellGcmSetSurface() for tiled area
* pitch size not properly specified in cellGcmSetSurface() or may be larger than in cellGcmSetTileInfo()
* pitch size in cellGcmSetDisplayBuffer() must be the same as for the color buffer in cellGcmSetTileInfo() and cellGcmSetSurface()
Please note that all contributions to PS3 Developer wiki are considered to be released under the GNU Free Documentation License 1.2 (see PS3 Developer wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To protect the wiki against automated edit spam, we kindly ask you to solve the following hCaptcha:

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "http://www.psdevwiki.com/ps3/Talk:PSP_Emulation"