Talk:PSP Emulation: Difference between revisions

From PS3 Developer wiki
Jump to navigation Jump to search
(→‎TRANSLATOR_PATCH: Removing since we figured this out.)
Tag: Manual revert
 
(19 intermediate revisions by 3 users not shown)
Line 1: Line 1:
== PSP Emulator Types and Revisions ==
<div>
<div style="float:top; text-align:center;">'''PSP Emulators Types and Revisions'''</div>
<div style="float:left; width:33%;">
{| class="wikitable" style="font-size:xx-small;"
|+ psp_emulator.elf (decrypted)
! Firmware !! Bytes !! MD5 !! <abbr title="Revision">Rev</abbr>
|-
! [[1.00_CEX|1.00]] ~ [[3.10_CEX|3.10]]
| colspan="3" {{no}}
|-
! [[3.15_CEX|3.15]]
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! [[3.66_CEX|3.66]]
| 419.120 || DFED8FCDB36A4284A27369304D47674F || ?
|-{{cellcolors|#ddddff}}
! [[3.70_CEX|3.70]]
| rowspan="3" | 419.176 || 0F6F1D92D045A86565DF705276776A41 || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[3.74_CEX|3.74]]
| DC8C67FEEB605D73D073BBCAD8F17E6A
|-{{cellcolors|#bbbbff}}
! [[4.00_CEX|4.00]]
| rowspan="2" | 419.416 || 7371A95BB0ACB1152EB13EA11C866F87 || rowspan="2" | same
|-{{cellcolors|#bbbbff}}
! [[4.01_CEX|4.01]]
| C17EE35A278E64227558FA9C39E805B5
|-{{cellcolors|#ddddff}}
! [[4.10_CEX|4.10]]
| rowspan="2" | 419.472 || DAA4E9816037E1EFFFF15B344B61BD1D || rowspan="2" | same
|-{{cellcolors|#ddddff}}
! [[4.11_CEX|4.11]]
| 2DF5AFE349E082A79AF4E50B8100F80A
|-
! [[4.15_CEX|4.15]]
| ? || ? || ?
|-{{cellcolors|#bbbbff}}
! [[4.20_CEX|4.20]]
| rowspan="3" | 419.480 || 540422B0759D20738BF498337E33B7E2 || rowspan="3" | same
|-{{cellcolors|#bbbbff}}
! ~
| style="text-align:center; background-color:#bbbbff;" | ''Any''
|-{{cellcolors|#bbbbff}}
! [[4.25_CEX|4.25]]
| 5D20DFAE9E0D704F6DD17D2A807A1D2C
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-{{cellcolors|#ddddff}}
! [[4.78_CEX|4.78]]
| rowspan="3" | 419.520 || EFEA0DFDDD6E7C479983B5E4E8B95295 || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[4.82_CEX|4.82]]
| 5CAC36C3F940749B4DD5E03DB02C732A
|}
<span style="font-size:small">
{{widedot}}'''Decrypted (elf)''': changes <abbr title="when comparing two decrypted files of the same revision from different firmwares the only difference is the target firmware">every firmware version</abbr><br>
{{widedot}}'''<abbr title="0x20 bytes">Build label</abbr>''': no/unknown<br>
{{widedot}}'''<abbr title="2 bytes">Target Firmware</abbr>''': yes, repeated '''two''' times<br>
{{widedot}}'''Revision''': unknown
</span>
</div>
<div style="float:left; width:33%;">
{| class="wikitable" style="font-size:xx-small;"
|+ psp_translator.elf (decrypted)
! Firmware !! Bytes !! MD5 !! <abbr title="Revision">Rev</abbr>
|-
! [[1.00_CEX|1.00]] ~ [[3.10_CEX|3.10]]
| colspan="3" {{no}}
|-
! [[3.15_CEX|3.15]]
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! [[3.66_CEX|3.66]]
| 283.128 || 0F52CE7666276B71FF5C560D7BD28014 || ?
|-{{cellcolors|#ddddff}}
! [[3.70_CEX|3.70]]
| rowspan="3" | 283.128 || C35D80E8B1A4A61212EA773C061BF1DC || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[3.74_CEX|3.74]]
| A42CD1453C52149297A975F2BA5B2D38
|-{{cellcolors|#bbbbff}}
! [[4.00_CEX|4.00]]
| rowspan="2" | 283.128 || DF07955312D1C09DC2DC355EBA47F8AA || rowspan="2" | same
|-{{cellcolors|#bbbbff}}
! [[4.01_CEX|4.01]]
| A06E7BF7C1D062878593E1D4EA85B4C9
|-{{cellcolors|#ddddff}}
! [[4.10_CEX|4.10]]
| rowspan="2" | 283.128 || FB4801625CA15AC58DB28A4223EFD4A2 || rowspan="2" | same
|-{{cellcolors|#ddddff}}
! [[4.11_CEX|4.11]]
| 3154FF57D36E3D7C4F2C061393816482
|-
! [[4.15_CEX|4.15]]
| ? || ? || ?
|-{{cellcolors|#bbbbff}}
! [[4.20_CEX|4.20]]
| rowspan="3" | 283.120 || C125A486D3C48EA2C957EAFC0AB69B39 || rowspan="3" | same
|-{{cellcolors|#bbbbff}}
! ~
| style="text-align:center; background-color:#bbbbff;" | ''Any''
|-{{cellcolors|#bbbbff}}
! [[4.23_SEX|4.23 S]]
| C469B41798157C53C3E7794E9BDF9D36
|-
! [[4.25_CEX|4.25]]
| 283.120 || A675423F5C8B9FD02AA2150D46B953AE || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-
! ?
| ? || ? || ?
|-{{cellcolors|#ddddff}}
! [[4.78_CEX|4.78]]
| rowspan="3" | 283.120 || A35809CE6C184F3E3B52C18E0AE19217 || rowspan="3" | same
|-{{cellcolors|#ddddff}}
! ~
| style="text-align:center; background-color:#ddddff;" | ''Any''
|-{{cellcolors|#ddddff}}
! [[4.82_CEX|4.82]]
| 58E104453AC60DE2B671E43F09D96E80
|}
<span style="font-size:small">
{{widedot}}'''Decrypted (elf)''': changes <abbr title="when comparing two decrypted files of the same revision from different firmwares the only difference is the target firmware">every firmware version</abbr><br>
{{widedot}}'''<abbr title="0x20 bytes">Build label</abbr>''': no/unknown<br>
{{widedot}}'''<abbr title="2 bytes">Target Firmware</abbr>''': yes, repeated '''one''' time<br>
{{widedot}}'''Revision''': unknown
</span>
</div>
</div>
<br style="clear: both;" />
== Playstation Portable memory regions ? ==
== Playstation Portable memory regions ? ==
  PPSSPP
  PPSSPP
Line 243: Line 78:
  S7004 We were leaving from the room.
  S7004 We were leaving from the room.


== Emulator patches (experimental) ==
== Emulator patches ==
This patches are intended to be applyed to the PSP emulator
This patches are intended to be applyed to the PSP emulator


=== Patch to redirect commands ===
=== Patch to redirect unsupported commands (experimental) ===
This ugly and highly experimental poc code simply redirects unsupported cmd's to 0x01010005 (Seek Begin), prolly breaks other cmd's
This ugly and highly experimental poc code simply redirects unsupported cmd's to 0x01010005 (Seek Begin), prolly breaks other cmd's


Original:
{{boxcode|float=left|width=50%|title=Original|code=<syntaxhighlight lang="asm">
<syntaxhighlight lang="asm">
00000000000285B0
00000000000285B0
00000000000285B0 empty_buffer:                          # CODE XREF: sceIoIoctlAsync+74�j
00000000000285B0 empty_buffer:                          # CODE XREF: sceIoIoctlAsync+74�j
Line 277: Line 111:
00000000000285F4 loc_285F4:                              # CODE XREF: sceIoIoctlAsync+B4�j
00000000000285F4 loc_285F4:                              # CODE XREF: sceIoIoctlAsync+B4�j
00000000000285F4                stw      r31, 8(r30)  # return value
00000000000285F4                stw      r31, 8(r30)  # return value
</syntaxhighlight>
</syntaxhighlight>}}


Modification:
{{boxcode|float=right|width=50%|title=Patched|code=<syntaxhighlight lang="asm">
<syntaxhighlight lang="asm">
00000000000285B0
LOAD:00000000000285B0
00000000000285B0 loc_285B0:                              # CODE XREF: sceIoIoctlAsync+74�j
LOAD:00000000000285B0 loc_285B0:                              # CODE XREF: sceIoIoctlAsync+74�j
00000000000285B0                                        # sceIoIoctlAsync+140�j ...
LOAD:00000000000285B0                                        # sceIoIoctlAsync+140�j ...
00000000000285B0                bl        _sys_libc_malloc
LOAD:00000000000285B0                bl        _sys_libc_malloc
00000000000285B4                clrldi    r26, r3, 32
LOAD:00000000000285B4                clrldi    r26, r3, 32
00000000000285B8                lis      r28, 0x101 # 0x1010005                          # Seek cmd id
LOAD:00000000000285B8                lis      r28, 0x101 # 0x1010005                          # Seek cmd id
00000000000285BC                ori      r28, r28, 5 # 0x1010005
LOAD:00000000000285BC                ori      r28, r28, 5 # 0x1010005
00000000000285C0                b        loc_28724
LOAD:00000000000285C0                b        loc_28724
00000000000285C4 # ---------------------------------------------------------------------------
LOAD:00000000000285C4 # ---------------------------------------------------------------------------
00000000000285C4
LOAD:00000000000285C4
00000000000285C4 loc_285C4:                              # CODE XREF: sceIoIoctlAsync+184�j  #
LOAD:00000000000285C4 loc_285C4:                              # CODE XREF: sceIoIoctlAsync+184�j  #
00000000000285C4                                        # sceIoIoctlAsync+2D0�j              # Both branches also modified, so we can use 5x4 bytes
LOAD:00000000000285C4                                        # sceIoIoctlAsync+2D0�j              # Both branches also modified, so we can use 5x4 bytes
00000000000285C4                clrldi    r7, r23, 32
LOAD:00000000000285C4                clrldi    r7, r23, 32
00000000000285C8                extsw    r3, r24
LOAD:00000000000285C8                extsw    r3, r24
00000000000285CC                extsw    r4, r28
LOAD:00000000000285CC                extsw    r4, r28
00000000000285D0                mr        r6, r27
LOAD:00000000000285D0                mr        r6, r27
00000000000285D4                clrldi    r8, r25, 32
LOAD:00000000000285D4                clrldi    r8, r25, 32
00000000000285D8                mr        r5, r29
LOAD:00000000000285D8                mr        r5, r29
00000000000285DC                bl        _IoFileMgrForUser_822ADD32
LOAD:00000000000285DC                bl        _IoFileMgrForUser_822ADD32
00000000000285E0                ld        r2, 0xC0+var_98(r1)
LOAD:00000000000285E0                ld        r2, 0xC0+var_98(r1)
00000000000285E4                mr        r31, r3
LOAD:00000000000285E4                mr        r31, r3
00000000000285E8                mr        r3, r29
LOAD:00000000000285E8                mr        r3, r29
00000000000285EC                bl        _sys_libc_free
LOAD:00000000000285EC                bl        _sys_libc_free
00000000000285F0                ld        r2, 0xC0+var_98(r1)
LOAD:00000000000285F0                ld        r2, 0xC0+var_98(r1)
00000000000285F4                stw      r31, 8(r30)
LOAD:00000000000285F4                stw      r31, 8(r30)
</syntaxhighlight>}}{{clear}}
</syntaxhighlight>


Unsupported ID's will be replaced with empty buffers and simply sent through IoIoctl.<br>
Unsupported ID's will be replaced with empty buffers and simply sent through IoIoctl.<br>

Latest revision as of 15:13, 7 April 2024

Playstation Portable memory regions ?[edit source]

PPSSPP
00010000 Scratchpad
04000000 VRAM
08800000 User memory
08804000 Default load address
88000000 Kernel memory

psp_emulator.self
B0000000 Default load address

Cryptobrainstorming[edit source]

Supported Kirk Crypto ? (1,4,7,11,12,13,14,16,17,18,19)

emulator_api errors[edit source]

Google translations from japanese error messages: 

 0002 This world did not have a room that are playing the same game
 1005 Upon your use of this application, you'll need to agree to the Terms of Use
 2001 Network connection it has expired. It will return to the title screen
 2002 Network connection it has expired. It will return to the title screen
 2007 You can not connect to ad hoc. Please check the information page
 3001 You can not connect to the network. Please check the information page
 3003 There is no possible connection server
 4001 You can not connect to the network. Please check information page
 4001 You can not connect to the network. Please check information page
 4004 We will not exceed the number that can be created room
 4005 We have exceeded the maximum number of bookmarks. Please register again by removing unnecessary bookmark
 4006 The lobby is a registered
 4007 It will return to the title for a certain period of time operation is not performed
 5002 This room is taking entry limit
 5005 Because the connection type of network is different, you can not play in this room. Please check the manual
 5006 It is during the transmission of comments
 6001 You can not change the wallpaper for the free capacity of the HDD is insufficient. To make the change of wallpaper you need free space of more than 17MB.
 6002 The size of the image can not be specified in the wallpaper. Please check the information page
 6003 It does not support the file format of the image. Please check the information page
10001 Not available, because 20GB model (CECHB00) is not equipped with wireless LAN feature.
10002 PlayStation®3, please use it to connect to the broadband network in a wired.
10003 A system error has occurred.
10004 It is connected. Please be patient. Channel 1
10005 It is connected. Please be patient. Channel 6
10006 It is connected. Please be patient. Channel 11
10007 It is connected. Please be patient. Channel automatic
10008 Not available in the sub-account that is limiting the use of chat. administrator of n master account (such as parents) Please use after receiving the permission of chat use to.
10009 Upon your use of ad-hoc party, you should be asked to agree to the Terms of Service.
10010 You need to sign up to PlayStation®Network.
10011 I signed out from PlayStation®Network. You exit. / Please use it to enable the Internet connection.
10012 It is in a location other than the lobby.
30002 In order to start the ad-hoc party, System software update is required.
30003 Ad-hoc party is not installed. Please download the ad-hoc party (free of charge) from PlayStation®Store.
30004 Ad-hoc party has been updated. If you play the PSP® (PlayStation®Portable) Remaster is. Restart from the PSP® (PlayStation®Portable) Remaster icon.
30005 You can not connect to PlayStation®Network. Please check the configuration of the body.
30006 Are you sure that you want to move to the ad-hoc party? Please check the save data.
30007 We were leaving from the room.
30008 We left the room
30009 You can not connect to the network. Please confirm information page.
30010 Room of the password is incorrect.
30011 This room is taking entry limit.
30012 This room can not enter because of the packed.
30013 We were leaving from the room.
30014 Are you sure that you want to leave the room? Data when you leave the room not been saved will be lost.
30015 Are you sure that you want to leave the room?
30016 Are you sure that you want to move to end the game to the ad-hoc party? What you do not save will be lost.
30017 We did not put in a room.
30018 This PSP®Remaster title in eight room is not supported.
30019 You can not connect to PlayStation®Network. Please check the information page. 
30020 We were leaving from the room. Are you sure that you want to move to the ad-hoc party without saving the game?
30021 The selected lobby is packed.
H8001 I could not connect.
H8002 I could not connect.
H8003 I could not connect.
H8004 I could not connect.
H8005 I could not connect.
H8006 I could not connect.
S7001 I could not connect.
S7002 I could not connect.
S7003 I could not connect.
S7004 We were leaving from the room.

Emulator patches[edit source]

This patches are intended to be applyed to the PSP emulator

Patch to redirect unsupported commands (experimental)[edit source]

This ugly and highly experimental poc code simply redirects unsupported cmd's to 0x01010005 (Seek Begin), prolly breaks other cmd's

Original
Edit-copy purple.svg.png 
00000000000285B0
00000000000285B0 empty_buffer:                           # CODE XREF: sceIoIoctlAsync+74�j
00000000000285B0                                         # sceIofileAsync+140�j ...
00000000000285B0                 li        r31, 0        
00000000000285B4                 clrldi    r27, r3, 32   
00000000000285B8                 li        r29, 0        
00000000000285BC                 cmpwi     cr4, r31, 0   
00000000000285C0
00000000000285C0 IoFileMgrForUser_822ADD32:              # CODE XREF: sceIoIoctlAsync+184�j
00000000000285C0                                         # sceIofileAsync+2D0�j
00000000000285C0                 clrldi    r7, r23, 32   # out data ptr 
00000000000285C4                 extsw     r3, r24       # id
00000000000285C8                 extsw     r4, r28       # cmd
00000000000285CC                 mr        r6, r27       # in size
00000000000285D0                 clrldi    r8, r25, 32   # out len 
00000000000285D4                 mr        r5, r29       # in data ptr
00000000000285D8                 bl        _IoFileMgrForUser_822ADD32 # pspFileSystem.... ?
00000000000285DC                 ld        r2, 0xC0+var_98(r1)
00000000000285E0                 mr        r31, r3
00000000000285E4                 beq       cr4, loc_285F4 # nop
00000000000285E8                 mr        r3, r29
00000000000285EC                 bl        _sys_libc_free
00000000000285F0                 ld        r2, 0xC0+var_98(r1)
00000000000285F4
00000000000285F4 loc_285F4:                              # CODE XREF: sceIoIoctlAsync+B4�j
00000000000285F4                 stw       r31, 8(r30)   # return value
Patched
Edit-copy purple.svg.png 
00000000000285B0
00000000000285B0 loc_285B0:                              # CODE XREF: sceIoIoctlAsync+74�j
00000000000285B0                                         # sceIoIoctlAsync+140�j ...
00000000000285B0                 bl        _sys_libc_malloc
00000000000285B4                 clrldi    r26, r3, 32
00000000000285B8                 lis       r28, 0x101 # 0x1010005                           # Seek cmd id
00000000000285BC                 ori       r28, r28, 5 # 0x1010005
00000000000285C0                 b         loc_28724
00000000000285C4 # ---------------------------------------------------------------------------
00000000000285C4
00000000000285C4 loc_285C4:                              # CODE XREF: sceIoIoctlAsync+184�j   #
00000000000285C4                                         # sceIoIoctlAsync+2D0�j              # Both branches also modified, so we can use 5x4 bytes
00000000000285C4                 clrldi    r7, r23, 32
00000000000285C8                 extsw     r3, r24
00000000000285CC                 extsw     r4, r28
00000000000285D0                 mr        r6, r27
00000000000285D4                 clrldi    r8, r25, 32
00000000000285D8                 mr        r5, r29
00000000000285DC                 bl        _IoFileMgrForUser_822ADD32
00000000000285E0                 ld        r2, 0xC0+var_98(r1)
00000000000285E4                 mr        r31, r3
00000000000285E8                 mr        r3, r29
00000000000285EC                 bl        _sys_libc_free
00000000000285F0                 ld        r2, 0xC0+var_98(r1)
00000000000285F4                 stw       r31, 8(r30)

Unsupported ID's will be replaced with empty buffers and simply sent through IoIoctl.
PGD = ID 0x04100001

Supported cmd ID's: 

0x1010005 (UMD file seek set)
0x1010009
0x101000A
(0x1020006)
(0x1020007)
0x1030008 (Read UMD file)
(0x1D20002)
0x1F100A6 (UMD file seek whence)
0x1F30003 (UMD disc read sectors operation)

0x01020001 - Get UMD Primary Volume Descriptor
0x01020002 - Get UMD Path Table
0x01020003 - Get UMD sector size
0x01020004 - Get UMD file pointer
0x01010005 - Set UMD file seek
0x01020006 - Get UMD file start sector
0x01020007 - Get UMD file length in bytes
0x01030008 - Read UMD file
0x01D20001 - Get UMD device file current sector seek position
0x01F30003 - Read raw sectors from UMD device file
0x01F100A6 - Set UMD device file seek by sector
0x04100001 - Define decryption key (DRM by amctrl.prx)
0x04100002 - Set PGD offset
0x04100010 - Get PGD data size
Retrieved from "http://www.psdevwiki.com/ps3/index.php?title=Talk:PSP_Emulation&oldid=73916"