PS2 Emulation: Difference between revisions

From PS4 Developer wiki
Jump to navigation Jump to search
Line 598: Line 598:
'-' or '+' Changes the specified preceding or succeeding 2 bytes of VU1 mpg cycles' offset according to the added number. Adding -1, for example will change the 2 bytes before it. Likewise, adding -2 will go 4 bytes away and change the specified 2 bytes accordingly. It even can change EE cycle scalar itself if you go far enough. These numbers are in HEX. Infinite amounts of '-' and '+' symbols seem to be supported.</pre>
'-' or '+' Changes the specified preceding or succeeding 2 bytes of VU1 mpg cycles' offset according to the added number. Adding -1, for example will change the 2 bytes before it. Likewise, adding -2 will go 4 bytes away and change the specified 2 bytes accordingly. It even can change EE cycle scalar itself if you go far enough. These numbers are in HEX. Infinite amounts of '-' and '+' symbols seem to be supported.</pre>
|-
|-
| --vu1-di-bits || {{Universal}} || 0, 1 || {{binary}} ||  0 Skips setting invalid, and Divides by zero flags in status register. A speedhack that vastly improves performance; it can skip costly calculations. But at the same time, it can cause issues such as broken geometry. || --vu1-di-bits=0
| --vu1-di-bits || {{Universal}} || Default value = 1<br> 0, 1 || {{binary}} ||  0 Skips setting invalid, and Divides by zero flags in status register. A speedhack that vastly improves performance; it can skip costly calculations. But at the same time, it can cause issues such as broken geometry. || --vu1-di-bits=0
|-
|-
| --vu1-const-prop || {{Universal}} || 0, 1|| {{binary}} || Enabled by default. 0 will disable it and cause performance issues but with higher compatability.[https://github.com/PCSX2/pcsx2/blob/58f5a5b915915293b90e7e8f34c33f9c0424d1e8/pcsx2/x86/microVU_Misc.h#L312 More info] || --vu1-const-prop=1
| --vu1-const-prop || {{Universal}} || 0, 1|| {{binary}} || Enabled by default. 0 will disable it and cause performance issues but with higher compatability.[https://github.com/PCSX2/pcsx2/blob/58f5a5b915915293b90e7e8f34c33f9c0424d1e8/pcsx2/x86/microVU_Misc.h#L312 More info] || --vu1-const-prop=1

Revision as of 20:18, 25 December 2024

Official games

PS2 games available on PS4 PS Store

  • Ace Combat 5: The Unsung War (Ace Combat: Squadron Leader) UP0700-CUSA13419_00-ACECOMBAT7EARLY5 or JP0700-CUSA13271_00-ACECOMBAT7EARLY5 or HP0700-CUSA14109_00-ACECOMBAT7EARLY5 or EP0700-CUSA13351_00-ACECOMBAT7EARLY5 Available as a "PS2 Classics" as part of the "Pre-Order-Bonus" for "Ace Combat 7: Skies Unknown" (PS4) only (not available separately).
  • ADK DAMASHII™ UP0576-CUSA03783_00-SLPS259060000001 or EP0576-CUSA04151_00-SLPS259060000001 "2017-02-24"
  • Arc the Lad: Twilight of the Spirits UP9000-CUSA02205_00-SCUS972310000001 or EP9000-CUSA02279_00-SCES519100000001 "2016-01-12"
  • Art of Fighting Anthology UP0576-CUSA03754_00-SLUS214870000001 or EP0576-CUSA04152_00-SLES547900000001
  • Ape Escape 2 UP9000-CUSA02194_00-SCES508850000001 or EP9000-CUSA02269_00-SCES508850000001 2016-08-02
  • Blood Omen: Legacy of Kain UP8489-CUSA49771_00-SLUS000270000000 (PS5: UP8489-PPSA24270_00-0499283180274839) 2024-11-19 PS4 12.00
  • Blood Omen 2: Legacy of Kain UP8489-CUSA49769_00-SLUS200240000000 (PS5: UP8489-PPSA24268_00-0200966777747783) 2024-11-19 PS4 12.00
  • Bully (Canis Canem Edit) UP1004-CUSA03507_00-SLUS212690000001 or EP1004-CUSA03551_00-SLES535610000001 "2016-03-22"
  • Dark Chronicle (Dark Cloud 2) UP9000-CUSA02037_00-SCUS972130000001 or EP9000-CUSA02075_00-SCES511900000001 "2016-01-19"
  • Dark Cloud UP9000-CUSA01728_00-SCUS971110000001 or EP9000-CUSA01944_00-SCES502950000001 "2015-12-05"
  • Destroy All Humans! (2005) (not to be confused with the remake EP4389-CUSA14910_00-DAH1REMAKEEU0000) UP4389-CUSA05232_00-SLUS209450000001 or EP4389-CUSA06353_00-SLES531960000001 2016-10-18
  • Destroy All Humans! 2 (2006) UP4389-CUSA05233_00-SLUS214390000001 or EP4389-CUSA06355_00-SLES543840000001 2016-11-29
  • Eternal Ring UP1022-CUSA04654_00-SLUS200150000001 requires PS4 4.70
  • FantaVision JP9000-CUSA02407_00-SCPS150300000001 or UP9000-CUSA01724_00-SCUS971050000001 or EP9000-CUSA01949_00-SCES500020000001 "2015-12-22"
  • Fatal Fury Battle Archives Vol. 2 UP0576-CUSA03750_00-SLUS217230000001 or EP0576-CUSA04153_00-SLUS217230000001 "2017-03-27"
  • Fu'un Super Combo UP0576-CUSA03784_00-SLPS257810000001 or EP0576-CUSA04154_00-SLPS257810000001 "2016-12-20"
  • Ghosthunter (English, Japanese) UP9000-CUSA47996_00-SLUS209930000000 (PS5: UP9000-PPSA21974_00-SLUS209930000000) 2024-06-18
  • Grand Theft Auto® 3 UP1004-CUSA03508_00-SLUS200620000001 or EP1004-CUSA03550_00-SLES503300000001 "2015-12-05"
  • Grand Theft Auto: Vice City UP1004-CUSA03509_00-SLUS205520000001 or EP1004-CUSA03546_00-SLES510610000001 "2015-12-05"
  • Grand Theft Auto: San Andreas UP1004-CUSA03506_00-SLUS209460000001 or EP1004-CUSA03541_00-SLES525410000001 PS4 3.11 "2015-12-05"
  • Harvest Moon: Save the Homeland UP1014-CUSA06585_00-SLUS202510000001 or EP1014-CUSA06610_00-SLUS202510000001
  • Harvest Moon: A Wonderful Life Special Edition UP1014-CUSA06584_00-SLUS211710000001 or EP1014-CUSA06609_00-SLUS211710000001 "2017-03-28"
  • Hot Shots® Tennis (Everybody's Tennis) UP9000-CUSA02193_00-SCUS976100000001 or EP9000-CUSA02270_00-SCES545350000001 "2016-09-13"
  • Indigo Prophecy (aka Fahrenheit 2005) UP1642-CUSA04798_00-SLUS211960000001 or EP1628-CUSA05760_00-SLES535390000001 "2016-08-09"
  • Jak and Daxter: The Precursor Legacy HP9000-CUSA08427_00-SCPS560030000001 patch 1.01 requires PS4 4.73
  • Jak and Daxter: The Precursor Legacy™ UP9000-CUSA02522_00-SCUS971240000001 patch 1.01 requires PS4 4.73
  • Jak and Daxter™: The Precursor Legacy EP9000-CUSA07934_00-SCES503610000001 patch 1.03 requires PS4 4.73
  • Jak and Daxter™: The Precursor Legacy JP9000-CUSA02541_00-SCPS150210000001
  • Jak II™ UP9000-CUSA07840_00-SCUS972650000001 patch 1.01 requires PS4 5.01
  • Jak II™ EP9000-CUSA07990_00-SCES516080000001 patch 1.02 requires PS4 5.01
  • Jak II™ HP9000-CUSA08422_00-SCKA200100000001 patch 1.01 requires PS4 5.01
  • Jak II JP9000-CUSA08581_00-SCPS150570000001 2017-12-05
  • Jak 3™ UP9000-CUSA07841_00-SCUS973300000001 patch 1.01 requires PS4 5.01
  • Jak 3™ EP9000-CUSA07991_00-SCES524600000001 patch 1.01 requires PS4 5.01
  • Jak 3™ HP9000-CUSA08423_00-SCKA200400000001 patch 1.01 requires PS4 5.01
  • Jak 3 UP9000-CUSA07841_00-JPPS400000000001 2017-12-20
  • Jak X: Combat Racing UP9000-CUSA07842_00-SCUS974290000001 patch 1.02 requires PS4 5.01
  • Jak™ X EP9000-CUSA07992_00-SCUS974290000001 patch 1.02 requires PS4 5.01
  • Jak X: Combat Racing UP9000-CUSA07842_00-JPPS400000000001 2018-03-15
  • Kinetica UP9000-CUSA01725_00-SCUS971320000001 or EP9000-CUSA01947_00-SCUS971320000001 "2016-05-17"
  • Manhunt UP1004-CUSA03512_00-SLUS208270000001 or EP1004-CUSA03545_00-SLES520230000001 "2016-03-22"
  • Max Payne UP1004-CUSA03513_00-SLUS202300000001 or EP1004-CUSA04488_00-SLES503260000001 "2016-04-22"
  • Metal Slug Anthology UP0576-CUSA03749_00-SLUS215500000001 or EP0576-CUSA04156_00-SLES546770000001 "2016-07-05"
  • Mister Mosquito UP9000-CUSA48755_00-SLUS203750000000 (PS5: UP9000-PPSA22948_00-SLUS203750000000) 2024-09-17 patch 1.02 requires PS4 11.52 or PS5 9.60
  • Okage: Shadow King UP9000-CUSA02199_00-SCUS971290000001 or EP9000-CUSA02282_00-SCUS971290000001, requires PS4 FW version 3.15, although it was compiled with PS4 SDK version 3.008.000, latest patch requires PS4 FW 4.05 "2016-03-22"
  • PaRappa The Rapper 2™ UP9000-CUSA01555_00-SCUS971670000001 or EP9000-CUSA01946_00-SCES504080000001 2015-12-15
  • Primal UP9000-CUSA02035_00-SCUS971420000001 or EP9000-CUSA02077_00-SCES511350000001 "2016-05-31"
  • Psychonauts UP2154-CUSA03881_00-SLUS211200000001 or EP2154-CUSA04150_00-SLES538300000001 "2016-06-07"
  • Puzzle Quest: Challenge of the Warlords UP0367-CUSA03571_00-SLUS216920000001 "2016-02-24"
  • Red Dead Revolver UP1004-CUSA03517_00-SLUS205000000001 or EP1004-CUSA03542_00-SLES524780000001 "2016-10-11"
  • Red Faction UP4389-CUSA06402_00-SLUS200730000001 or EP4389-CUSA06354_00-SLES502770000001 "2016-12-06"
  • Red Faction II UP4389-CUSA06405_00-SLUS204420000001 or EP4389-CUSA06356_00-SLES511330000001
  • Resident Evil Code: Veronica X UP0102-CUSA07104_00-SLUS201840000001 or EP0102-CUSA07343_00-SLES503060000001
  • Rise of the Kasai UP9000-CUSA01730_00-SCUS974160000001 or EP9000-CUSA01948_00-SCUS974160000001 "2016-03-08"
  • Rogue Galaxy UP9000-CUSA02195_00-SCUS974900000001 or EP9000-CUSA02271_00-SCES545520000001 "2015-12-05"
  • Samurai Shodown VI UP0576-CUSA03787_00-SLUS216290000001 or EP0576-CUSA04158_00-SLES552920000001 "2016-11-22"
  • Siren (Forbidden Siren) UP9000-CUSA02198_00-SCUS973550000001 or EP9000-CUSA02274_00-SCES519200000001 (PS5: UP9000-PPSA22947_00-SCUS973550000000) PS4 patch 1.02 requires PS4 3.00 and 2024-10-15 PS5 patch 1.00 requires PS5 9.40 "2016-06-14"
  • SkyGunner UP9000-CUSA49210_00-SLUS203840000000 (PS5: UP9000-PPSA23535_00-SLUS203840000000) 2024-09-17 patch 1.03 requires PS4 11.52 or PS5 9.60
  • Sly Raccoon (2002), Sly Cooper and the Thievius Raccoonus UP9000-CUSA47431_00-SCUS971980000000 (PS5: UP9000-PPSA21300_00-SCUS971980000000) 2024-06-11 PS4 11.50
  • Star Ocean Till The End Of Time UP0082-CUSA04778_00-SLUS204880000001 or JP0082-CUSA04842_00-SLPM654380000001 or EP0082-CUSA06379_00-SLES820280000001
  • Star Wars Bounty Hunter UP1082-CUSA03472_00-SLUS204200000001 or EP1006-CUSA03493_00-SLES508310000001 2016-01-15
  • Star Wars Racer Revenge UP1082-CUSA03474_00-SLUS202680000001 or EP1006-CUSA03492_00-SLES503660000001 2016-01-15
  • STAR WARS: Jedi Starfighter UP1082-CUSA03473_00-SLUS202930000001 or EP1006-CUSA03494_00-SLES503710000001 2016-01-15
  • STAR WARS The Clone Wars UP1082-CUSA48010_00-SLUS205100000000 (PS5: UP1082-PPSA21985_00-SLUS205100000000 or UP1082-PPSA21985_00-0384550355606536) 2024-06-11 PS4 11.50
  • Summoner PS2 Emulation (2000) UP4389-CUSA48889_00-SLUS200740000000 (PS5: UP4389-PPSA23124_00-SLUS200740000000 or UP4389-PPSA23124_00-EMUPS2SUMMONER00) 2024-07-16 PS4 patch 1.01 requires PS4 11.50, PS5 patch 1.02 requires PS5 9.40
  • The King of Fighters Collection: The Orochi Saga UP0576-CUSA03753_00-SLUS215540000001 or EP0576-CUSA04164_00-SLUS215540000001 2018-06-26
  • The King of Fighters '98 Ultimate Match UP0576-CUSA03751_00-SLUS218160000001 or EP0576-CUSA04159_00-SLES552800000001
  • The King of Fighters 2000 UP0576-CUSA03748_00-SLUS208340000001 or UP4002-CUSA03748_00-SLUS208340000001 or EP0576-CUSA04160_00-SLUS208340000001 "2016-05-03"
  • The Mark of Kri UP9000-CUSA01729_00-SCUS971400000001 or EP9000-CUSA01945_00-SCES511640000001 "2015-12-05"
  • The Warriors UP1004-CUSA03515_00-SLUS212150000001 or EP1004-CUSA03548_00-SLES534430000001 "2016-07-05"
  • TimeSplitters EP4062-CUSA49387_00-SLUS200900000000 (for PS5: EP4062-PPSA23799_00-SLUS200900000000 or EP4062-PPSA23799_00-TIMESPLITTERSONE) 2024-08-20 PS4 patch 1.01 requires PS4 11.52, PS5 patch 1.00 requires PS5 9.40
  • TimeSplitters 2 EP4062-CUSA49392_00-SLUS203140000000 (for PS5: EP4062-PPSA23801_00-SLUS203140000000 or EP4062-PPSA23801_00-TIMESPLITTERSTWO) 2024-08-20 PS4 patch 1.01 requires PS4 11.52, PS5 patch 1.00 requires PS5 9.40
  • TimeSplitters: Future Perfect EP4062-CUSA49435_00-SLUS211480000000 (for PS5: EP4062-PPSA23847_00-SLUS211480000000 or EP4062-PPSA23847_00-TIMESPLITTERS3FP) 2024-08-20 PS4 patch 1.01 requires PS4 11.52, PS5 patch 1.00 requires PS5 9.40
  • Tomb Raider: Legend UP8489-CUSA48389_00-SLUS212030000000 (PS5: UP8489-PPSA22453_00-SLUS212030000000 or UP8489-PPSA22453_00-0217126708396262) 2024-06-11 PS4 11.50
  • Twisted Metal: Black UP9000-CUSA02036_00-SCUS971010000001 or EP9000-CUSA02076_00-SCES503600000001 "2015-12-05"
  • War of the Monsters™ UP9000-CUSA01554_00-SCUS971970000001 or EP9000-CUSA01981_00-SCES512240000001 2015-12-05
  • Wild Arms™ 3 UP9000-CUSA02197_00-SCUS972030000001 or EP9000-CUSA02273_00-SCUS972030000001 2016-05-17

PS2 games available on PS4 Bluray Disc

  • ADK DAMASHII™ (by Limited Run #315) UP0576-CUSA03783_00-SLPS259060000001 "2017-02-24"
  • Art of Fighting Anthology (by Limited Run #375) UP0576-CUSA03754_00-SLUS214870000001
  • Destroy All Humans! (2005) (PS2 Classic by Limited Run #370, not to be confused with the remake EP4389-CUSA14910_00-DAH1REMAKEEU0000) UP4389-CUSA05232_00-SLUS209450000001 2016-10-18
  • Fatal Fury Battle Archives Vol. 2 (by Limited Run #371) UP0576-CUSA03750_00-SLUS217230000001
  • Fu'un Super Combo UP0576-CUSA03784_00-SLPS257810000001
  • Indigo Prophecy™ (aka Fahrenheit 2005, by Limited Run #331) UP1642-CUSA04798_00-SLUS211960000001 or EP1628-CUSA05760_00-SLES535390000001 "2016-08-09"
  • Jak and Daxter: The Precursor Legacy™ (US version, by Limited Run #184) UP9000-CUSA02522_00-SCUS971240000001
  • Jak X Combat Racing™® (US version, by Limited Run #292) UP9000-CUSA07842_00-SCUS974290000001
  • Jak II (US version, by Limited Run #212) UP9000-CUSA07840_00-SCUS972650000001
  • Jak 3 (US version, by Limited Run #258) UP9000-CUSA07841_00-SCUS973300000001
  • METAL SLUG ANTHOLOGY™ (US version by Limited Run #364) UP0576-CUSA03749_00-SLUS215500000001 "2016-07-05"
  • METAL SLUG ANTHOLOGY™ (EU version by SNK) EP0576-CUSA04156_00-SLES546770000001
  • Psychonauts UP2154-CUSA03881_00-SLUS211200000001 or EP2154-CUSA04150_00-SLES538300000001 "2016-06-07"
  • Red Faction (by Limited Run #281) UP4389-CUSA06402_00-SLUS200730000001 "2016-12-06"
  • Samurai Shodown VI (by Limited Run #329) UP0576-CUSA03787_00-SLUS216290000001 or EP0576-CUSA04158_00-SLES552920000001
  • STAR WARS™ BOUNTY HUNTER™ (US version, by Limited Run #273) UP1082-CUSA03472_00-SLUS204200000001 2016-01-15
  • Star Wars Racer Revenge UP1082-CUSA03474_00-SLUS202680000001, requires PS4 FW version ?3.15?, although it was compiled with SDK version 3.008.000
  • The King of Fighters '98 Ultimate Match (by Limited Run #344) UP0576-CUSA03751_00-SLUS218160000001
  • The King of Fighters 2000 (by Limited Run #386) UP0576-CUSA03748_00-SLUS208340000001 or UP4002-CUSA03748_00-SLUS208340000001 "2016-05-03"
  • The King of Fighters™ Collection: the Orochi Saga (by Limited Run #393) UP0576-CUSA03753_00-SLUS215540000001 2018-06-26

These PS2onPS4 games can be bought online directly via Limited Run Games for brand new or for example on Ebay for second hand or like new.

PS2 remaster games available on PS4 PS Store

  • Destroy All Humans! UP4389-CUSA14899_00-DAH1REMAKEUS0000, JP2880-CUSA19492_00-DAH1REMAKEJP0000, EP4389-CUSA14910_00-DAH1REMAKEEU0000, PS4 7.50
  • Samurai Shodown V Special
  • Metal Gear Solid Collection Vol 1
  • Tales of Symphonia Remastered UP0700-CUSA29214_00-TALESOFSYMPHONIA 2023-02-17
  • Legacy of Kain™ Soul Reaver 1&2 Remastered PS4 & PS5 (PS5: UP1032-PPSA18153_00-SOULREAVER120824) 2024-12-10
  • Tomb Raider: The Angel of Darkness (in Tomb Raider IV-VI Remastered PS4 & PS5) (PS5: UP1032-PPSA18154_00-TOMBRAIDER456225) 2025-02-14

Description

The PlayStation 2 emulation on the PlayStation 4 is handled with little difference to the PlayStation 3. Some issues on PS3's PS2 emulator were left unfixed on the PlayStation 4. Consequently, the PS4 inherited some of PS3's emulation glitches, and even introduced new ones. The new issues came as a result of PS4's weakness with emulation, which likely resulted in the trade of accuracy for performance.

Each PS2onPS4 package file (.pkg) includes the PS2 emulator itself. The PS4 does not have a native built-in emulator in its System Software, but it does have a few PS2 emulator specific features, like the usermode functions sceLncUtilIsPs2Emu, sceShellCoreUtilGetImposeMenuFlagForPs2Emu, sceSystemServiceAddLocalProcessForPs2Emu, and sceSystemServiceShowImposeMenuForPs2Emu.

The PS2 emulators are programmed to be accurate for the games they were designed to emulate. In turn, this makes accurate emulation challenging, as emulators include per-title patches and different default settings. The PlayStation 2 hardware is a complex system to emulate; any small change in configuration can make or break a game. Currently, the most commonly used emulator is "Jakv2" from Jak games, as it is the most compatible one out there. When game crashes are concerned in an emulated PS2 game, then the Resident Evil Code: Veronica X's emulator is typically used, whereas for VU accuracy it is Rogue Galaxy's.

The PS2 BIOS is included in the game's pkg file. It is the same PS2 BIOS as used in the ps2_netemu software in PS3 Operating System. The lack of encryption mechanism for PS2 game disc image files is also huge. This time, it is a plain ISO file, but the emulator still supports LIMG sector that allows the usage of non-2048 sector size discs. Moreover, memory cards are also unencrypted, but the emulator checks the CRC of some of the regions to ensure that the memory card was not modified. The PS2 emulator on PS4 also supports Lua scripting by a "Lua Bridge", which is a powerful interface that may prove exceptionally handy in fixing games.

This is first time Sony cared about floats in its emulators. Compared to the PS3 CPU, x86-64 is doing a worse job in mimicking FPU and VU floats calculation behavior. This is resolved by clamping, accurate math used per memory offset, and/or converting floats to double precision. The emulator uses OpenCL for GS, and likely other components as well.

From old emulators like WOTM, up until new ones like Jak, the PS2 emulator underwent many changes from one game to the next. This complicates documenting and predicting the emu's behavior.

Emulators

Every PS2 emulator is programmed differently. Sometimes choosing the right emulator is the only way to fix a game. Emulators are not provided pre-installed in the PS4 OS, but instead they have to be unpacked from an official PS2 CLASSICS PKG file signed by Sony. This list includes the typical usage of those emulators.

Emulator name Typical usage - Info API Version Similar emulators
2018
The King of Fighters '98: Ultimate Match The only known emulator where Mojin-ribbon is playable. Commonly known as "KOF98". 2.0
2017
Jak and Daxter: The Precursor Legacy Good compatibility with most PS2 games. It has a very high api version which means more Lua commands are supported. In addition, Jak emulators are one of the few that can use the --gs-adaptive-frameskip=1 command. It is often referred to as "Jak v2" 2.2 JakX, Jak 2, Jak 3,
Art of Fighting Anthology Similar to RECVX. It was successful in fixing "Coraline." Sometimes called "AOFA" 2.0
Resident Evil - Code: Veronica Fixes games like Jackie chan Adventures, SpongeBob SquarePants: Creature From the Krust Krab, Pac-man World 3, Yu-Gi-Oh: Capsule monsters, SpongeBob's Atlantis SquarePantis freezing at a black/splash screen. Additionally, games requiring OPL's mode 2 tend to have a higher chance of being playable under it. Often referred to as "RECVX" 1.7 Fatal Fury, Redfaction, AOFA.
Fatal Fury Battle Archives: Volume 2 Similarly to RECVX, it is often used to fix frozen games.
2016
Red Faction It is prominently used to fix VU1 sensitive games. It was used to fix Tony Hawk games suddenly crashing, as well as MTVU sensitive games such as Star Wars Battlefront II. 1.6 Max payne
Forbidden Siren The only emulator to fix Ice age 2 being stuck at splash screen. It also fixed Gran turismo 4 running abysmally slow. 0.1
The King of Fighters 2000 Seemingly one of the most GIF-accurate emus, it prevents Koei Tecmo games (Dynasty Warriors 5: Empires and Samurai Warriors 2) from suddenly freezing when battle starts. Moreover, it is likely the only emulator where Batman Begins does not crash. Often referred to as "KOF2000" 1.2 Roguev1, KOF98, Okage
Destroy All Humans! Fixed Tenchu: Fatal Shadows' crashing. 0.1
Destroy All Humans! 2 0.7
Rise of the Kasai It fixed most of the Harry Potter games. Often referred to as "rotk". 0.2
2015
War of the Monsters v1 Subjectively the best emulator to use. Used as PS2CLASSICSGUI's default emulator, it is the best one around for accurate GS emulation, as some graphical issues on the Ratchet series and Tekken 5 can only be fixed by it. Another interesting case is GTA SA's lack of need for auto flush on it, and being natively performant. Additionally, its VU0 timing as well as performance is much better than Jakv2's, as can be seen in the case of Spyro Enter the Dragonfly running comparatively better on it, and the Ratchet series requiring a lower EE delay amount in patches to work, making it one of the best emulators on the PS4. 0.1 Rogue v1 and v2, Arc the Lad, Star Wars Jedi Starfighter
GTA III Fixed the PAL version of Genji: Dawn of the Samurai. 0.6
PaRappa The Rapper 2 The only emulator to boot Spyro: A Hero's Tail. 0.1
Star Wars Racer Revenge Seemingly the closest emulator to the PS3's. Useful for debugging games as it also shows useful information such as pagefault. 0.4

Emulator Configuration

The PS2 emulator can be configured through 4 files.

Files

  • config-emu-ps4.txt - Stores paths, basic video/audio settings in official packages. But unofficially can be also used for advanced settings for global effect in multi disc .pkg with all commands originally used in cli.conf file.
  • XXXX-YYYYY_cli.conf - Stores per disc advanced settings. GS, VU, EE, IOP, FPU, COP2 emulation settings, are here. Also hacks, and hooks.
  • XXXX-YYYYY_config.lua - Used for per disc advanced scripts. Patching EE/IOP memory, Conditional hooks.
  • disc-swap-cli.conf - Stores info of multi disc games.

Commands

The rest of the CLI and Lua commands can all be found inside of any PS2 emulator's EBOOT.BIN file.

config-emu-ps4.txt commands

Command Values Notes Usage
Misc
--config-local-lua --config-local-lua=""
--lopnor-config 0,1 Enables limited PS3's PS2 config support --lopnor-config=1
--load-tooling-lua --load-tooling-lua=0
--max-console-spam
--path-snaps dir/folder Path to savestates folder --path-snaps="/tmp/snapshots"
--path-recordings dir/folder --path-recordings="/tmp/recordings"
--path-memcards dir/folder
--path-vmc dir/folder --path-vmc="/tmp/vmc"
--emulog-file 0, 1 Creates a log file with information that is rarely useful --emulog-file=1
--path-emulog dir/folder Sets the directory of the emulog file. Requires --emulog-file=1 command --path-emulog="/tmp/recordings"
--path-manual dir/folder
--path-patches dir/folder Path to patches folder --path-patches="/app0/patches"
--path-trophydata dir/folder --path-trophydata="/app0/trophy_data"
--path-featuredata dir/folder Path to folder with XXXX-YYYYY_features.lua file --path-featuredata="/app0/feature_data"
--path-postproc dir/folder Post-processing (shaders?)
--path-toolingscript dir/folder --path-toolingscript="/app0/patches"
--snapshot-name
--snapshot-datafile
--snapshot-restore
--snapshot-save frameId(?)
--snapshot-mcd-files
--snapshot-repeat repeat_count
--snapshot-modulo
--host-keyboard slot [0-7] --host-keyboard=4
--host-window-scale scale/float --host-window-scale=0.5
--host-window-pos x,y
--host-display-mode normal,full,4:3,16:9 Set display mode --host-display-mode=full
--host-graph fps Debug option that requires an unleaked debug ps2 bios --host-graph=fps
--host-osd verbose, minimal --host-osd=0
--host-vsync 0, 1 Enable or disable vsync --host-vsync=1
--host-trophy-support
--rtc-epoch unix_time (seconds since epoch) --rtc-epoch=1523776362
--framelimiter 0, 1 Enable or disable Frame limiting --framelimiter=1
--framelimit-fps FPS/float framelimiter --framelimit-fps=0.8
--framelimit-scalar scalar/float --framelimit-scalar=3.2
--framelimit-mode slowest,slower,slow,normal,fast,fastest,turbo A Standalone framelimiter --framelimit-mode=fast
--ps2-lang system Sets language. Might seem like a useless command, but a tiny number of games refuse to boot without a selected language. --ps2-lang=system
--ps2-title-id XXXX-YYYYY Example: (SLUS-21515) Sets title-id for patches. Requires the game's region code as value --ps2-title-id=SLES-50366
--verbose-cpu-cycles=1 0,1 ? --verbose-cpu-cycles=1
--gs-uprender none, 2x2 Internal resolution upscaler. --gs-uprender=2x2
--gs-upscale none, gpu, edgesmooth, motionvec, point, motionvector, smooth, motion upscaling type --gs-upscale=EdgeSmooth
Audio
--host-audio-latency msec/float Audio latency must be between 0.010 and 4.0 --host-audio-latency=1.5
--path-audio-images dir/folder
--record-audio
--record-audio-img
--record-audio-image
--record-audio-ext
--host-audio 1,0,on,off,mono --host-audio=1
--mute-audio all,none,main,bgm --mute-audio=all
--mute-streaming-audio all,none,main,bgm --mute-streaming-audio=all
Controllers
--ds4-deadzone-adjust
--ds4-diagonal-adjust
--host-pad-loses-focus --host-pad-loses-focus=1
--host-gamepads 0, 1 --host-gamepads=1
--pad-record 0, 1 Enables logging pad info in emulog
--pad-analog-to-digital 0, 1 Eternel ring emu uses the value 0 --pad-analog-to-digital=0
--mtap1 Disabled, Always, ByHost Multitap switch. The values are correct but the multitap only works in certain games. --mtap1=always
--mtap2 Disabled, Always, ByHost Multitap switch. Some games require multitap to be selected only on second port (1, 2-a, 2-b, 2-c layout). To achieve that, we need to disable the first mtap. In some cases, the emulator can be flawed in how it handles multi-tap when it involves "--mtap2". All functions for 2A, 2B, 2C, 2D must be redirected to ports on multi-tap 1 by using memory patches. --mtap2=always

XXXX-YYYYY_cli.conf commands

These commands work in config-emu-ps4.txt, but the official way to use them is through the CLI file (It is also needed for multi-disc packages). Additionally, some commands are still not discovered, and known commands might be missing their values.
All commands are pre-made. Creating new CLI commands is impossible.
The values of the commands are also pre-defined by Sony and/or have a set of possible values or ranges.
Some CLI commands have no effect, as they were added to the eboot.bin without being programmed. Some useful commands were removed or added in or from different emu revisions, or their effects were changed. In some PS2 emulators, CLI configurations can be found in the ram at SceLibcHeap[0]-3-881004000.

EmotionEngine (MIPS-IV)

EE
Commands for the emulated Emotion Engine. These commands may improve performance, prevent crashes, or provide better core sync.
Command Emulator Support Values Value Type Notes Usage
Speedhacks / Desync Fixes
--ee-cycle-scalar Universal Slowest cycles speed: 5.00
Normal cycles speed: 1.000
Fastest cycles speed: 0.100
Float Changes the cycle speed of the EE. It can benefit core sync or performance (lowering the cycle rate may affect FMVS). The default value for most emulators is ~1.0. It is highly sensitive, as any slight change may break or fix the game. (Dividing 100 with the entered value is how to find what EE clock speed percentage % the value is setting. For example, 100/5.00 = 20%) --ee-cycle-scalar=1.0
--ee-context-switch-cycles Exclusive Accelerate cycles (360 => 0)
Decelerate cycles (361 => ∞ )
4 Bytes Its effects are mysterious. Possibly configures how many CPU cycles the emulator should run before switching between different tasks or threads. Does not work on Jak emulators. Default value is 360. Seems to be useful for Bee Movie, Metal Gear Solid 3, as well as others with IPU issues. It bears no effect on VU timing. --ee-context-switch-cycles=2700?
--ee-hook Variable AdvanceClock
FastForwardClock
Mfifodrain
4 Byte hex (offset),string,4 Byte hex (opcode),4 Byte Decimals (advanceclock value) Runs the specified functionality each time a selected EE offset is reached. FastForwardClock and AdvanceClock help fix core sync issues, but can be used as a speedhack. It is believed that AdvanceClock stalls the EE for a specified amount of cycles, while FastForwardClock behaves similarly. They are commonly used on the offset directly succeeding an affected CTC2 instruction. For a mysterious reason, some offsets are ignored by AdvanceClock - it could be that this function only works on instructions 2 cycles ahead of a branch, likely specifically designed to work at both the start or end of a branch. However, this is only the case for old emulators like King Of Fighters 2000 and War Of The Monsters. Newer ones such as Jak operate differently, where AdvanceClock only works 2 cycles ahead at the end of a branch instruction.
Advanceclock usage example:

0x0 nop <-- Advancelock can work here on old emulators
0x4 beq zero,v1,0x0 <-- Advancelock cannot work here
0x8 nop <-- Advancelock cannot work here
0x10 nop <-- Advancelock can work here on both old and new emulators.
Mfifodrain is still unknown.
--ee-hook=0x0025A9F2,AdvanceClock,,500
--ee-hook=0x0019F0AD,FastForwardClock
Game fixes
--ee-jit-pagefault-threshold Exclusive 0-254 1 Byte Ignore JIT pagefaults, usually caused by data placed right after code. JIT try to recompile it, and obviously hit some bad opcodes. This command reduces the occurrence of crashes the higher it is. --ee-jit-pagefault-threshold=40
--ee-regalloc-scalar Universal 0,none,ReadOnly,WriteOnly,RW String Register allocation setting. Setting it to 0 may prevent crashes.
--ee-block-validation Universal PageProt, PageProtection, Hash, Full, none String way of validating that block been modified, and require recompilation. [Some info about PageProt way] --ee-block-validation=None
--ee-shorthash-len Exclusive inst_count/integer Length of shorthash in instruction/opcode count. Require --ee-block-validation=Hash
--ee-const-folding Universal None,Gpr,Fpu,All String EE constant folding. "All" seems to be the default option. --ee-const-folding=none
--ee-ignore-segfault Exclusive none, read, write, readwrite String Ignore segmentation fault. Ignore rw from/to unmapped memory, known in pcsx2 as TLB miss (load.store) --ee-ignore-segfault=readwrite
--ee-native-function Exclusive memset, memcpy, strlen, strcmp, strcasecmp, litodp, dptoli, floatdidf, fptoui, fptodp, dptofp, fabs, fabsf, ieee754_atan2f, ieee754_asinf, ieee754_acosf, ieee754_sinf, ieee754_cosf, ieee754_sqrtf, asinf, acosf, sinf, cosf, sqrtf. Hook mips function with HLE x64 native version. Much faster, but tricky to keep correct timings on ps2 VM. --ee-native-function=memcpy,0x11e328
Other
--ee-jit-disasm Universal 0 or 1 for mips and 2 for x86 Semi-Binary Emotion engine Just in Time disassembler mode (Likely a debug log option) --ee-jit-disasm=1
--ee-ignore-break Exclusive 0, 1 Binary Turns a BREAK instruction into a NOP Instruction.
--ee-break-as-nop Exclusive 0, 1 Binary Turns a BREAK instruction into a NOP Instruction. --ee-break-as-nop=1
--ee-jit-opt-debug Exclusive 0, 1 Binary
--ee-pc-coherency Universal 0, 1 Binary Flush PC register to memory on every mips opcode. Result in more accurate EE PC reg reads.
--ee-insn-flush-pc Exclusive 0, 1 Binary Flush PC register to memory on every mips opcode. Result in more accurate EE PC reg reads.
--ee-inst-marking Universal 0,1?
--ee-insn-marking Exclusive 0,1?
--ee-kernel-hle Universal 0, 1 Binary High-level emulation kernel. Apply HLE patches (used in mast1c0re part 2 Vulnerability 2). Apply EE kernel patches which run previously prepared x64 code instead of recompiling real code part.
--ee-injection-kernel Exclusive 0, 1 Binary Just like --ee-kernel-hle, except using a different name.
--ee-injection-title Exclusive 0, 1 Binary Apply HLE patches (used in mast1c0re part 2 Vulnerability 2). Apply per title patches which run previously prepared x64 code instead of recompiling real code part.
--ee-validate-kernel Universal 0, 1 Binary
--ee-regalloc-simd Universal readwrite, writeonly, readonly String register allocation setting
--ee-regalloc-preserve-scalar Universal LoadOnly, LO, StoreOnly, SO, LoadStore, LS String EE JIT Scalar/Int Regalloc Mode --ee-regalloc-preserve-scalar=LoadStore
--ee-regalloc-preserve-simd Universal ReadOnly, RO, WriteOnly WO, RW String EE JIT SIMD/XMM Regalloc Mode --ee-regalloc-preserve-simd=RW
--ee-static-block-links Universal options Type,Type,... [Branch,Branches,JAL,COP2,All] --ee-static-block-links=JAL,COP2
--vtune-ee Universal Unknown Unknown. It likely requires command-specific string values because decimals crash the emulator.
--ee-live32 Universal 0,1?
--ee-cache-breaks-block Universal 0,1 Binary End recompiler block on r5900 cache opcode.
--ee-evt-check-full Universal 0, 1 Binary Perform more accurate EE event check
--ee-peephole Exclusive 0, 1?
--ee-load-rewrites Universal 0,1?
--ee-store-rewrites Universal 0,1?
--ee-precompile-trace Exclusive
--ee-penalize-short-blocks Exclusive 0, 1 Binary Add cycles to short recompiled blocks?
--ee-mem-check-eob Universal EE memory check end of block
--ee-insn-callmark Exclusive
--ee-inline-limit-full Exclusive Default = 48 4 Bytes Unknown.
--ee-inline-limit-partial Exclusive Default = 14 4 Bytes Unknown.
--ee-stlf-cycle-threshold Exclusive Default = 0
4 Bytes Unknown.
--detect-idle-ee Universal 0, 1 Binary --detect-idle-ee=1
FPU
The FPU is a fast single-precision unit that typically serves the EE by calculating in-game physics. It mostly controls the accuracy of the movement of in-game objects, or the game's gravity as a whole. In some cases, it is best to use COP2 commands with the FPU's to ensure the accuracy of the game's geometrical calculations.
Command Emulator Support Values Value Type Notes Usage
Game fixes
--fpu-no-clamping Universal 0, 1 Binary Changes the clamping behavior of the FPU. It's set to 1 by default. Might fix freezing issues, or misplaced characters/items (Inaccuracies with in-game physics) --fpu-no-clamping=0
--fpu-custom-min-max Universal 0, 1 Binary Custom Max/Mini logic for denormals. Enabled by default. Disabling it might break some games --fpu-custom-min-max=0
--fpu-accurate-range Universal start,end offset (0x0 - 0x1FFFFFF) Hex combination Accurate Mul/Div/Add/Sub Math instructions for the FPU by using software floats rather than hardware floats. Can be used for full EE/FPU Mathematical accuracy in the specified range. --fpu-accurate-range=0x1acce0,0x2acce0
--fpu-no-clamp-range Exclusive start,end offset (0x0 - 0x1FFFFFF) Hex combination Per-range clamping for the FPU in the selected memory range. --fpu-no-clamp-range=0x1acce0,0x2acce0
--fpu-accurate-muldiv Universal 0 = Disabled
1 = Enabled
Binary Allows the FPU to accurately Divide/Multiply for all offsets by using software floats rather than hardware floats. (Extremely slow) --fpu-accurate-muldiv=1
--fpu-accurate-addsub Universal 0 = Disabled
1 = Enabled
Binary Allows the FPU to accurately Add/Subtract for all offsets by using software floats rather than hardware floats. Though slow on PS4, many games that work fine on PCSX2 (Pac-Man World 3, Jackie Chan Adventures) experience issues on PS4 because ADD/SUB is disabled by default. --fpu-accurate-addsub=1
--fpu-accurate-muldiv-range Universal start,end offset (0x0 - 0x1FFFFFF) Hex combination Allows the FPU to accurately Divide/Multiply in the specified ee memory range by using software floats rather than hardware floats. --fpu-accurate-muldiv-range=0x1acce0,0x2acce0
--fpu-accurate-addsub-range Universal start,end offset (0x0 - 0x1FFFFFF) Hex combination Allows the FPU to accurately Add/Subtract in the specified ee memory range by using software floats rather than hardware floats. --fpu-accurate-addsub-range=0x1acce0,0x2acce0
Speedhacks
--fpu-rsqrt-fast-estimate Exclusive 0, 1 Binary Decreases RSQRT's accuracy. Enabled by default, disabling it is important when using accurate math commands. --fpu-rsqrt-fast-estimate=1
--fpu-accurate-mul-fast Universal 0, 1 Binary Speedhack for CLI FPU muldiv commands. --fpu-accurate-mul-fast=1
Other
--fpu-custom-fused-madd Universal 0, 1 Binary Custom FMA (fused multiply-add). Disabled by default. --fpu-custom-fused-madd=0
--fpu-to-double Universal 0, 1 Binary Converts floats to doubles (Accurate). Limited testing shows that infinity is still wrong at 7F7FFFFF, rather than 7FFFFFFF with it enabled. --fpu-to-double=1
--fpu-clamp-operands Universal 0, 1 Binary Affects the fpu's clamping behavior --fpu-clamp-operands=1
--fpu-clamp-results Universal 0, 1 Binary Affects the fpu's clamping behavior --fpu-clamp-results=1
COP2
VU0 Macro-mode. These commands assist the FPU.
Command Emulator Support Values Value Type Notes Usage
Speedhacks
--cop2-opt-flags Universal 0, 1 ,2 Semi-Binary Optimize flags upon recompilation (1 is safe, 2 update sticky, and mac flag on every status flag update) setting it to 0 can in some cases improve FPU accuracy. More Info --cop2-opt-flags=1
--cop2-opt-vf00 Universal 0, 1, 2 Semi-Binary Seems to be a hacky way of optimization through the vf00 register. --cop2-opt-vf00=1
--cop2-const-prop Universal 0, 1 Binary Disables or enables constant propagation. Can Be Used as speedhack for COP2 hungry games when set to 1 More info --cop2-const-prop=1
--cop2-di-bits Universal 0, 1 Binary 0 to skip setting invalid, and div by Zero flags in status register, and therefore improve performance. Can be used as a speedhack to skip costly calculations. --cop2-di-bits=0
Game fixes
--cop2-no-clamping Universal 0, 1 Binary Changes the clamping behavior of the COP2. The default value is set to 1. --cop2-no-clamping=0
--cop2-accurate-range Universal start,end offset (0x0 - 0x1FFFFFF) Hex combination Accurate Mul/Div/Add/Sub math instructions for the COP2 by using software floats rather than hardware floats. Can be used for full COP2 mathematical accuracy in the specified range. --cop2-accurate-range=0x123456,0x134567
--cop2-no-clamp-range Exclusive start,end offset (0x0 - 0x1FFFFFF) Hex combination Per-range clamping for COP2. --cop2-no-clamp-range=0x123456,0x134567
--cop2-accurate-mul-range Universal start,end offset (0x0 - 0x1FFFFFF) Hex combination Accurate multiplication instructions for the COP2 in the specified range by using software floats rather than hardware floats (Offset range seems not to directly match EE's) --cop2-accurate-mul-range=0x123456,0x134567
--cop2-accurate-mul Universal 1 = Enabled
0 = Disabled
Binary Allows the COP2 to accurately multiply for all offsets by using software floats rather than hardware floats. (Extremely slow) --cop2-accurate-mul=1
--cop2-accurate-addsub Universal 1 = Enabled
0 = Disabled
Binary Allows the COP2 to accurately Add/Subtract for all offsets by using software floats rather than hardware floats. (Extremely slow) --cop2-accurate-addsub=1
--cop2-accurate-addsub-range Universal start,end offset (0x0 - 0x1FFFFFF) Hex combination Allows the COP2 to accurately Add/Sub in the specified ee memory range by using software floats rather than hardware floats. (Offset range seems not to directly match EE's. It is possibly 0x95400~ behind(?) --cop2-accurate-addsub-range=0x123456,0x134567
Other
--cop2-regalloc Universal 0, 1 Binary Optimized Register Allocation(?). PCSX2 seems to have this enabled by default. Seems to slow down COP2 when disabled.
--cop2-inst-q Universal 0, 1 Binary instant Q, no stalling on VWAITQ, or instances of Q. Crashes some games when enabled.
--cop2-inst-p Universal 0, 1 Binary instant P, no stalling on VWAITP, or instances of P.
--cop2-use-rcp Universal 0, 1 Binary Enables SSE RCP. Disabled by default
--cop2-use-rsqrt Universal 0, 1 Binary Enables SSE RSQRT --cop2-use-rsqrt=0
--cop2-clamp-operands Universal 0, 1 Binary Affects the COP2's clamping behavior --cop2-clamp-operands=1
--cop2-clamp-results Universal 0, 1 Binary Affects the COP2's clamping behavior --cop2-clamp-results=1

Vector Units (VU)

VU
Custom DSPs used to process vertex data, physics calculations, and other related tasks. Settings found here affect VU1, VU0, and COP2. They fix broken or missing geometry, black screens, and crashes.
Command Emulator Support Values Value Type Notes Usage
Graphical fixes
--vu-xgkick-delay Universal Limit is between (0 => 31) 1 Byte Delay xgkick instruction execution. PCSX2 uses 6 cycles, PS3 uses 2-8 cycles depending on the game. A game with missing graphics will require a low value such as 0, while one that crashes might require a high value such as 7. --vu-xgkick-delay=8
--vu-custom-min-max Universal 0, 1 Binary Custom Max/Mini logic for denormals. Disabled on pcsx2 by default but enabled by default on a couple of emus such as jakv2. Disabling it could potentially restore missing graphics, as it tends to adjust VU timing. --vu-custom-min-max=0
Game fixes
--vu-hack-triace Universal 0, 1 Binary A hack designed specifically for games developed by Tri Ace. Corrects the VU's addi calculation. Without it, the result will be one bit off, which is enough to break the game's decryption algo. --vu-hack-triace=1
--vu-branch-hazard Universal 0, 1 Binary This command relates to how the emulator handles branch hazards in the Vector Units (VU). Setting it to 0 might fix freezes at the expense of causing SPS in some games, while 1 might improve performance. Seems to be enabled by default. Disabling it prevented "Batman - Rise of Sin Tzu" from crashing --vu-branch-hazard=0
--vu-evil-branches Universal 0, 1 Binary Take in count branch in delay slot, or not. Set to 1 for the correct behavior. More Info --vu-evil-branches=1
--vu-to-double Universal 0, 1 Binary Converts floats to double. Enabling it is the accurate option. --vu-to-double=1
--vu-custom-fused-madd Universal 0, 1 Binary Custom FMA (fused multiply-add). Disabled by default --vu-custom-fused-madd=1
Speedhacks
--vu-opt-sf-check Exclusive 0, 1 Binary Updates status flags only on blocks which will read them. Known in pcsx2 as mVU flag hack. Won't work with most emulators, but will work on Arc Twilight of the Spirits™ --vu-opt-sf-check=1
--vu-opt-jr-caching Exclusive 0, 1 Binary Optimize Jump Register caching. (vi15). Won't work with most emulators but will work on Arc Twilight of the Spirits™ --vu-opt-jr-caching=1
Other
--vu-d-bit Universal 0, 1 Binary Debug break. Halts the VU and sends an interrupt to the EE. --vu-d-bit=0
--vu-t-bit Universal 0, 1 Binary Debug halt. Acts similarly to D-bit --vu-t-bit=0
--vu-inst-mflag Universal 0, 1 Binary Instant macflag? It's enabled by default. When disabled in some games, SPS springs out. --vu-inst-mflag=1
--vu-inst-cflag Universal 0, 1 Binary Instant cflag? --vu-inst-cflag=1
--vtune-vu Universal ? ?
--vu-jit-disasm Universal 0, 1, 2 Semi-Binary ? --vu-jit-disasm=1
--vu-range-merge Exclusive Default = 0
Max = 255
1 Byte vu_inst_cnt --vu-range-merge=255
VU1
VU1 is the Graphics Synthesizer’s alternate processing unit. Commands here typically improve performance, prevent crashes, and fix SPS (graphical glitches).
Command Emulator Support Values Value Type Notes Usage
Speedhacks
--vu1-mpg-cycles Universal 1 - 65535 2 Bytes Set initial speed for VU1 Micro-programs. 100 is the default value. If VU1 requirements were a bottleneck, increasing it will result in better performance while decreasing it will result in the opposite. As a side note, increasing it can benefit MTVU-sensitive games. --vu1-mpg-cycles=1000
 Symbols (They change values close to VU1-mpg-cycles' offset):

$ goes to the specified succeeding offsets. $0 will go 2 bytes forward and change them. $1 will go 4 bytes forward and change the 2 bytes specified. For example, $0,$1 will change the 4 bytes ahead as the specified 2 bytes' value.

'0x' Is like '+' a symbol that modifies succeeding values. 0x0 goes 2 bytes ahead and changes them, 0x1 goes 4 bytes ahead and so on and so forth. 

'-' or '+' Changes the specified preceding or succeeding 2 bytes of VU1 mpg cycles' offset according to the added number. Adding -1, for example will change the 2 bytes before it. Likewise, adding -2 will go 4 bytes away and change the specified 2 bytes accordingly. It even can change EE cycle scalar itself if you go far enough. These numbers are in HEX. Infinite amounts of '-' and '+' symbols seem to be supported.
--vu1-di-bits Universal Default value = 1
0, 1
Binary 0 Skips setting invalid, and Divides by zero flags in status register. A speedhack that vastly improves performance; it can skip costly calculations. But at the same time, it can cause issues such as broken geometry. --vu1-di-bits=0
--vu1-const-prop Universal 0, 1 Binary Enabled by default. 0 will disable it and cause performance issues but with higher compatability.More info --vu1-const-prop=1
--vu1-opt-flags Universal 0, 1, 2 Semi-Binary Optimize flags upon recompilation (1 is safe, 2 update sticky, and mac flag on every status flag update) More Info --vu1-opt-flags=0
--vu1-opt-vf00 Universal 0, 1, 2 Semi-Binary Seems to be a hacky way of optimization through the vf00 register. --vu1-opt-vf00=2
--vu1-jr-cache-policy Exclusive newprog, sameprog, auto, new, same String PCSX2 uses newprog as the default setting. Setting it into newprog has been proven to fix some crashes Info --vu1-jr-cache-policy=newprog
--vu1-jalr-cache-policy Exclusive newprog, sameprog, auto, new, same String PCSX2 uses newprog as the default setting. Setting it into newprog has been proven to fix some crashes Info --vu1-jalr-cache-policy=newprog
Game fixes / Graphical fixes
--vu1 Universal jit-sync String Selector between IR/JIT and it modes. Jit-sync works similarly to disabling MTVU. jit, trans, and jit-async are unimplemented functions that do not change anything. --vu1=jit-sync
--vu1-no-clamping Universal 0,1 Binary Changes the clamping behavior of the VU1. Setting specific to PS4 emulators, (unimplemented in PCSX2) with 0 resembling PCSX2's extra, and 1 extra + preserve sign. The default emulator's value is 1. --vu1-no-clamping=0
--vu1-clamp-range Exclusive vu1 memory offset start,end (0x0 - 0x800) Hex combination Values must not exceed 0x800
--vu1-accurate-addsub-range Exclusive vu1 memory offset start,end (0x0 - 0x800) Hex combination Allows the VU1 to accurately add/subtract in the specified memory range by using software floats rather than hardware floats. --vu1-accurate-addsub-range=0x0000,0x0600
--vu1-mul0fix-range Exclusive vu1 memory offset start,end (0x0 - 0x800) Hex combination Allows the VU1 to accurately multiply by 0 in the specified memory range by using software floats rather than hardware floats. --vu1-mul0fix-range=0x123,0x123
--vu1-injection Universal 0, 1 Binary unknown --vu1-injection=1
--vu1-native-patch Exclusive 0, 1 Binary Use native patches from recompiler, not compatible with Jak emus. Sony uses it for their official release of Primal --vu1-native-patch=1
Other
--vu1-inst-p Universal 0, 1 Binary instant P, no stalling on WAITP, or instances of P --vu1-inst-p=1
--vu1-use-rcp Universal 0, 1 Binary Use SSE/AVX RCP. Speedhack. Likely used only in EFU pipeline, due to rare use, its really not worth to enable it. Speed improvement will be marginally/unnoticeable. Disabled by default
--vu1-use-rsqrt Universal 0, 1 Binary Use SSE/AVX rsqrt instead of doing sqrt and then div. Speedhack, rather safe to use on VU1.
--vu1-clamp-operands Universal 0, 1 Binary Clamp operands before mathematical operation. --vu1-clamp-operands=1
--vu1-clamp-results Universal 0, 1 Binary Clamp result after mathematical operation. --vu1-clamp-results=1
--vu1-inst-q Universal 0, 1 Binary instant Q, no stalling on WAITQ, or instances of Q. --vu1-inst-q=1
--assert-path1-ad Universal 0, 1 Binary Path 1 is how the GIF takes data from VU1 via XGKICK instruction. It's unknown what this command does but it's related to VU1, and helps prevent crashes in VU1 sensitive games when enabled. --assert-path1-ad=1
VU0
VU0 is the Emotion Engine’s alternate processing unit. It is sometimes referred to as "micro-mode". Commands here prevent crashes, and fix SPS (graphical glitches). Most of these commands can not be used in old emulators. Jak emulators, however, all work with them.
Command Emulator Support Values Value Type Notes Usage
Speedhacks
--vu0-mpg-cycles Exclusive 1 - 65535 2 Bytes Set initial cycle speed for VU0 Micro-programs. 100 is the default value. It is not available in older emulators such as War of the Monsters. Raising the value helps COP2 timing, while lowering does the opposite. --vu0-mpg-cycles=1000
 Symbols (They change values close to VU0-mpg-cycles' offset):

$ goes to the specified succeeding offsets. $0 will go 2 bytes forward and changes them. $1 will go 4 bytes forward and changes the 2 bytes specified. For example, $0,$1 will change the 4 bytes ahead as the specified 2 bytes value.

'0x' Is like '+' a symbol that modifies succeeding values. 0x0 goes 2 bytes ahead and changes them, 0x1 goes 4 bytes ahead and so on and so forth. 

'-' or '+' Changes the specified preceding or succeeding 2 bytes of VU0 mpg cycles' offset according to the added number. Adding -1, for example will change the 2 bytes before it. Likewise, adding -2 will go 4 bytes away and change the specified 2 bytes accordingly. It even can change EE cycle scalar itself at -15 (Jakv2). Setting it to --vu0-mpg-cycles=1280,-15 would, for example, set ee-cycle-scalar to 5. These numbers are in HEX. Infinite amounts of '-' and '+' instances seem to be supported.
--vu0-di-bits Universal 0, 1 Binary 0 to skip setting invalid, and Div by zero flags in status register. Can be used as speedhack as it skips costly calculations, but at the same time can cause issues like broken geometry, and weird physics behavior. Depending per game. --vu0-di-bits=0
--vu0-const-prop Universal 0, 1 Binary Constant propagation, can Be used as speedhack for VU0 hungry games when set to 1 More info --vu0-const-prop=1
--vu0-opt-vf00 Universal 0, 1, 2 Semi-Binary Seems to be a hacky way of optimization through the vf00 register. --vu0-opt-vf00=1
--vu0-opt-flags Universal 0, 1, 2 Semi-Binary Optimize flags upon recompilation (1 is safe, 2 update sticky, and mac flag on every status flag update) More Info --vu0-opt-flags=1
--vu0-jr-cache-policy Exclusive newprog, sameprog, auto, new, same String PCSX2 uses newprog as the default setting Info --vu0-jr-cache-policy=sameprog
--vu0-jalr-cache-policy Exclusive newprog, sameprog, auto, new, same String PCSX2 uses newprog as the default setting Info --vu0-jalr-cache-policy=sameprog
Game fixes
--vu0-clamp-range Exclusive start, end offset (0x0 - 0x200) Hex combination per range clamping for VU0. Strangely, it rejects offsets higher than 0x200. --vu0-clamp-range=0x100,0x120
--vu0-no-clamping Universal 0,1 Binary Changes the clamping behavior of the VU0. Setting specific to ps4 emulators, unimplemented in pcsx2. The default emulator's value is 1. --vu0-no-clamping=0
--vu0-accurate-addsub-range Exclusive offset (0x0 - 0x200) Hex combination Allows the VU0 to accurately Add/Subtract in the specified memory range by using software floats rather than hardware floats. Strangely, it rejects offsets higher than 0x200.
--vu0-mul0fix-range Exclusive vu0 memory offset start,end (0x0 - 0x200) Hex combination Allows the VU0 to accurately Multiply by 0 in the specified memory range by using software floats rather than hardware floats. Strangely, it rejects offsets higher than 0x200.
Other
--vu0-injection Exclusive 0, 1 Binary Unknown usage. --vu0-injection=1
--vu0-inst-q Universal 0, 1 Binary instant Q, no stalling on WAITQ, or instances of Q --vu0-inst-q=1
--vu0-inst-p Universal 0, 1 Binary instant P, no stalling on WAITP, or instances of P --vu0-inst-p=1
--vu0-use-rcp Universal 0, 1 Binary Use SSE/AVX RCP. Speedhack. Not sure why it is even available for VU0. Disabled by default --vu0-use-rcp=1
--vu0-use-rsqrt Universal 0, 1 Binary Use SSE/AVX rsqrt instead of doing sqrt and then div. Speedhack, rather unsafe to use on VU0. --vu0-use-rsqrt=1
--vu0-clamp-operands Universal 0, 1 Binary Clamp operands before mathematical operation. --vu0-clamp-operands=1
--vu0-clamp-results Universal 0, 1 Binary Clamp result after mathematical operation. --vu0-clamp-results=1

DMA Channels

VIF
The VIF decompresses vector data, uploads microprograms to the VUs, and sends graphical data to the GIF. Its commands are often used to fix freezing.
Command Emulator Support Values Value Type Notes Usage
VIF Game fixes
--vif-ignore-invalid-cmd Exclusive 0, 1 Binary Ignore invalid vif commands. In some cases, setting it to 1 can fix games that freeze while showing the same frame. --vif-ignore-invalid-cmd=1
--vif-thread-chunk-size Exclusive 0, 1024 2 Bytes Slows down both VIFS the lower it is, and speeds them up the higher it is. 1024 is the limit, with 112 being the default value.  --vif-thread-chunk-size=100
--detect-idle-vif Universal 0, 1 Binary Enabled by default. Unknown function --detect-idle-vif=0
VIF1 Game fixes
--vif1-ignore-cmd-ints Exclusive 0, 1 Binary Set to 1 to ignore command interrupt bit. (info , explanation of int bit is right before command list). Can in some cases fix games that freeze while showing the same frame if set to 1. Games likes "Men in Black II - Alien Escape" and "Test Drive Unlimited" Will always need it. --vif1-ignore-cmd-ints=1
--vif1-instant-xfer Universal 1 = Instant VIF1
0 = Delayed VIF1
Binary Changes VIF1 timing. 0 slows its timing and is the compatible option for most games, while 1 speeds up its timing, and being more compatible with a small fraction of games. It can be used to fix graphical glitches or potentially prevent games from freezing. --vif1-instant-xfer=0
SIF
The SIF is how the EE and IOP communicate with each other. SIF has some mailbox hardware registers that the CPUs can use to pass values to each other, which happens during SIF initialization. However, once both sides have booted, they use the SIF0 (IOP->EE) and SIF1 (EE->IOP) DMA channels to communicate. Despite common belief, these commands have no effect on performance, and are rarely ever useful.
Command Emulator Support Values Value Type Notes Usage
SIF1 (IOP)
--iop-sif1-cycle-scalar Exclusive Accelerate SIF cycles: (0.99 => 0.1)
Decelerate SIF cycles: (1.1 => ∞ )
Float Controls the speed at which the IOP receives from the EE --iop-sif1-cycle-scalar=0.1
--ee-sif1-cycle-scalar Exclusive Accelerate SIF cycles: (0.99 => 0.1)
Decelerate SIF cycles: (1.1 => ∞ )
Float Controls the speed at which the EE sends to the IOP --ee-sif1-cycle-scalar=0.1
SIF0 (EE)
--iop-sif0-cycle-scalar Exclusive Accelerate SIF cycles: (0.99 => 0.1)
Decelerate SIF cycles: (1.1 => ∞ )
Float Controls the speed at which the IOP sends to the EE --iop-sif0-cycle-scalar=0.1
--ee-sif0-cycle-scalar Exclusive Accelerate SIF cycles: (0.99 => 0.1)
Decelerate SIF cycles: (1.1 => ∞ )
Float Controls the speed at which the EE receives from the IOP --ee-sif0-cycle-scalar=0.1
IPU
The IPU is a hardware-accelerated MPEG1/MPEG2 decoder. It is primarily responsible for video playback, though it can also be used to decompress texture data in some cases.
Command Emulator Support Values Value Type Notes Usage
--idec-cycles-per-qwc Exclusive Default = 0 4 Bytes Multiply how many cycles IDEC command take per whole currently worked on QWC. --idec-cycles-per-qwc=768

GS

"GS" stands for Graphics Synthesizer. It is the PlayStation®2's co-processor that is responsible for rendering the graphics (but is also used by some games for additional calculations and other purposes)
Command Emulator Support Values Value Type Notes Usage
Speedhacks
--gs-optimize-30fps Universal 0, 1 Binary Speedhack for GS hungry games. --gs-optimize-30fps=1
--gs-adaptive-frameskip Exclusive 0, 1 Binary Speedhack. Skips frames when the gs demands more resources than there are available. doesn't work on all emulators. It does however, work on jak emulators --gs-adaptive-frameskip=1
--gs-h2l-list-opt Exclusive 0, 1 Binary Setting it to 1 improves GS performance --gs-h2l-list-opt=1
GS features
--gs-use-mipmap Universal Default = 0
Values = 0, 1
Binary Enables mipmapping support. Can be used to fix graphics. Needs --gs-kernel-cl="mipmap" for full mipmapping support. If upscaling, however, --gs-kernel-cl-up="mipmap2x2" is also needed. It works best on War of the Monsters emulator, as can be seen in the Ratchet series' mipmapping issues responding only to this emu's mipmapping functionality. --gs-use-mipmap=1
--gs-use-deferred-l2h Universal 0, 1 Binary Delay option for L2H (local to host, GS to EE). --gs-use-deferred-l2h=1
--gs-use-clut-merge Universal 0, 1 Binary Enabling CLUT merging helps improve how the emulator processes textures that use indexed color palettes. It ensures more accurate emulation of the PS2’s color handling. It sometimes restores missing graphical elements, and fix texture flickering (prominently flickering shadows or UI elements). It prevents Spyro's shadow from flickering in Enter the Dragonfly. Enabling it is the accurate, albeit slow option. --gs-use-clut-merge=1
--gs-flush-ad-xyz Exclusive always, safe, safeZwrite, off, 0 String Force a primitive flush when a framebuffer is also an input texture. This fixes some processing effects, but it can sometimes be heavy on the GS in terms of performance. GTA: SA, and Jak 3 use this command. --gs-flush-ad-xyz=safe
--gs-force-bilinear Universal 0, 1 Binary Forces bilinear filtering, can fix ghosting problems in some cases. Not recommended for games that use 2D images, as it could possibly break games that rely on nearest filtering. --gs-force-bilinear=1
Gs settings / Behaviour
--gs-uprender Universal none,2x2 String Internal resolution upscaler. --gs-uprender=2x2
--gs-upscale Universal none, gpu, edgesmooth, smooth, motion, motionvec, motionvector, point String Upscaling type Selector --gs-upscale=EdgeSmooth
--gs-kernel-cl-up Variable "DarkCloud2" "fantavision" "h2lpool2x2", "OptRightTri", "clutmerge2x2", "mipmap2x2", "up2x2simple", "up2x2skipinterp", "up2x2tc", "up2x2", default String Kernel Variant Color lookup Upscaler (?), mipmap and clutmerge and h2l need to be enabled before their options become usable --gs-kernel-cl-up="clutmerge2x2"
--gs-override-small-tri-area Exclusive 0, 1 Binary This option is designed to modify how the emulator handles or renders small triangles that fall below a certain area threshold. Enabling this option could resolve graphical problems such as missing, flickering, or incorrectly rendered small details, and could potentially restore missing text in some games. --gs-override-small-tri-area=1
--gs-dirty-page-policy Exclusive 0, 1 Binary Unknown. Used by Star Wars: Jedi Starfighter --gs-dirty-page-policy=1
--gs-ignore-dirty-page-border Exclusive 0, 1 Binary Unknown. Used by Samurai Shodown Anthology --gs-ignore-dirty-page-border=1
--gs-ignore-rect-correction Exclusive 0, 1 Binary Setting it to 1 is known to fix flickering textures and graphical glitches in far distances. --gs-ignore-rect-correction=1
--gs-opt-frbuff-switch Exclusive 0, 1 Binary Unknown. Used by Everybody's Tennis/Hot Shots Tennis --gs-opt-frbuff-switch=0
--gs-kernel-cl Variable h2lpool, clutmerge, mipmap, DarkCloud2, fantavision. String Kernel Variant Color lookup(?). Options included here can be upssed if --gs-kernel-cl-up were used along with it. Mipmap and clutmerge and h2l need to be enabled before their options become usable. --gs-kernel-cl="clutmerge"
--force-frame-blend Exclusive 0, 1 Binary Enables blend (Deinterlacing?). Should be used to fix games with shaking screens. --force-frame-blend=1
--force-pal-60hz Exclusive 0, 1 Binary Enables 60hz PAL mode. --force-pal-60hz=1
--gs-progressive Universal 0, 1 Binary Enables progressive scan. Can fix graphical glitches/double screen issues.
--gs-vert-precision Exclusive 8, 16 1 Byte This option allows the user to choose between 8-bit and 16-bit precision for the vertex calculations in 3D graphics rendering. It reduces the likelihood of visual distortions such as jagged edges, improper alignment of polygons, or model "warping." The emu expects the values of 8 or 16, any other values are not permitted. It is set at 16 by default. --gs-vert-precision=8
--gs-skip-dirty-flush-on-mipmap Universal 0, 1 Binary Skip flushing textures marked as dirty from cache when enabled. It does, however, require mipmap to be enabled first. --gs-skip-dirty-flush-on-mipmap=1
--gs-packed15-fmv-opt Universal 0, 1 Binary Unknown. This option likely controls whether the emulator optimizes or processes FMVs that use the 15-bit packed color format. Used by Ape Escape 2 --gs-packed15-fmv-opt=1
--gs-fieldswap-delay Universal Default = 0
Highest = 254
1 Byte Wait longer than usual to change field. In essence, it blurs/sharpens image.
--gs-uv-shift-pointsampling Exclusive 0, 1 Binary Can be used on games like manhunt that have issues with UV light rendering --gs-uv-shift-pointsampling=1
--gs-render-tile-threshold Exclusive Lowest = 0
Default = 4294967295
4 Bytes Unknown. Used by Psychonauts --gs-render-tile-threshold=300000
--threaded-gs Universal 0, 1 Binary Multi-threaded-gs ? --threaded-gs=1
--gs-aspect-ratio Universal aspect/float (default=0.81) Float --gs-aspect-ratio=0.65
--gs-frontend-opt-mode Exclusive 0, 1, 2 Semi-Binary GS optimization mode? Unknown effect. Used on JakX --gs-frontend-opt-mode=1
--gs-motion-factor Universal 25, 50 1 Byte Unknown. Used by Wild ARMS 3 --gs-motion-factor=25
--gs-scanout-delay Universal 0, 200 Binary --gs-scanout-delay=200
--gs-check-trans-rejection Universal 0, 1 Binary Check transfer rejection? Unknown. Used by Grand Theft Auto: Vice City --gs-check-trans-rejection=1
--gs-check-trans-rejection68 Exclusive 0, 1 Binary Unknown. Used by Star Wars: Jedi Starfighter --gs-check-trans-rejection68=1
--l2h-2d-params Universal TRXREG,BITBLTBUF,height String --l2h-2d-params=0x0000000800000001,0x000000003a0a2300,512,2
--gs-h2l-accurate-hash Exclusive 0, 1 Binary Unknown. Used by Samurai Shodown Anthology. --gs-h2l-accurate-hash=1
Aspect ratio
--gs-scanout-offsetx Universal relative offset/ignored 4 Bytes A zoom in setting in the x direction --gs-scanout-offsetx=27
--gs-scanout-offsety Universal relative offset/ignored 4 Bytes A zoom in setting in the y direction --gs-scanout-offsety=27
--safe-area-min Exclusive area/float Float An overscan setting, (range 0.9 to 1.0) any other values outside of that range will be rejected by the emulator --safe-area-min=0.9
Other
--framelimit-mode Universal slowest,slower,slow,
normal
fast,fastest,turbo
String Standalone Framelimiter --framelimit-mode=fast
--framelimiter Universal 0, 1 Binary Enable or disable Frame limiting --framelimiter=1
--framelimit-fps Universal FPS/float Float framelimiter --framelimit-fps=0.8
--gs-hdr-support Exclusive 0, 1? Binary ?

IOP

The emulated I/O Processor (IOP) settings. Commands here are rarely useful, as very few games will require them. The IOP controls the emulated DEV9, SPU2, USB, Memory cards, CDVD, Firewire, along with other input/output devices
Command Emulator Support Values Value Type Notes Usage
Game fixes
--iop-cycle-scalar Universal
Accelerate IOP cycles: (0.999 => 0.100)
Default: 0.50
Decelerate IOP cycles: (1.001 => 5.000)
Float Not a performance speedhack. It impacts the speed of loading times and input latency. The default value for most emulators is 0.5 --iop-cycle-scalar=1.0
--iop-const-folding Universal None,Gpr,All String IOP constant folding More info --iop-const-folding=All
--iop-tight-slice-count Exclusive Fastest = 0
Default = 8
Slowest=65534
4 Bytes Seems to slow down the iop the higher the value. Can be used to fix CDVD timing issues. --iop-tight-slice-count=12
--iop-hook Variable AdvanceClock
FastForwardClock
Mfifodrain
4 Byte hex (offset),string,4 Byte hex (opcode),4 Byte Decimals (advanceclock value) IOP native hook, Sony uses it on their official release of Red Dead Revolver. It helps fix timing issues. It runs the specified functionality each time a selected IOP offset is reached. FastForwardClock and AdvanceClock help fix core sync issues. It is believed that AdvanceClock stalls the IOP for a specified amount of cycles, while FastForwardClock behaves similarly. For a mysterious reason, some offsets are ignored by AdvanceClock - it could be that this function only works on instructions 2 cycles ahead of a branch, likely specifically designed to work at both the start or end of a branch (on newer emus, only the end of a branch works). Mfifodrain is still unknown. --iop-hook=0x0086ac,FastForwardClock
--iop-block-validation Universal IsC, ShortHash, Hash String Way of validating that block been modified, and require recompilation. Other Possible values include PageProt, None, PageProtection --iop-block-validation=IsC
Other
--iop-validate-kernel Universal 0, 1 Binary
--iop-shorthash-len Universal Default = 8 Length of shorthash in instruction/opcode count. Require --iop-block-validation=ShortHash
--iop-pc-coherency Universal 0, 1 Binary
--iop-inst-marking Universal 0, 1?
--detect-idle-iop Universal 0, 1 Binary Enabled by default. --detect-idle-iop=0
--iop-jit-disasm Universal
--iop-evt-check-full Universal 0, 1 ? Binary

CDVD

The emulated CDVD settings. These commands help games with timing issues.
Command Emulator Support Values Value Type Notes Usage
General commands
--max-disc-num Universal 1-5 1 Byte numbers of discs in package (maximum=5) --max-disc-num=1
--boot-disc-id Universal 1-5 1 Byte sets boot disc for multi-disc pkg --boot-disc-id=0
--switch-disc-reset Exclusive 1 = Enables resetting the game upon disc swap, 0 = Disables resetting the game upon disc swap Binary 0 Can be used to prevent resetting the game when switching multiple discs. Useful for games like Samurai Warriors 2 that include an import data feature. Sadly this command isn't supported by many emulators, but jakv2 is confirmed to support it --switch-disc-reset=1
Timing
--cdvd-sector-read-cycles Universal 0 = Fastest
32000 = Default
80000 = Slowest
4 Bytes Set DVD reading speed. Higher values are slower, lower values are faster. Kinetica uses 40000, Psychonauts 4000, Red Dead Revolver 5000, Rise of Kasai 31000. Some games require moderate speed, too slow or too fast could cause audio problems. --cdvd-sector-read-cycles=0.1
--cdvd-sector-seek-cycles Exclusive 0 = Fastest and default
80000 = Slowest
4 Bytes Set the speed at which the emulated CDVD spins. Higher values are slower, lower values are faster. Fixes boot-up sometimes. More info here [1]. --cdvd-sector-seek-cycles=0
--verbose-cdvd-reads Universal 0, 1 Binary Significantly helps games with CDVD timing issues when set to 1. --verbose-cdvd-reads=0

Misc, obscure, or unknown

Command Values Notes Usage
--mfifo-manual-drain 0.1/5.0 --mfifo-manual-drain=0.30
--mfifo-chunk-drain-cycles 0
Default = 10000
800000
--mfifo-chunk-drain-cycles=210000
--pcr0-delta-hack 0
Default=1.0
400000.0
A scalar that modifies delta of pcr0 when reading it from MFC0. Some games rely on good performance counters accuracy (Spyro ANB cutscenes), and since emulator don't implement most events, hack it is. --pcr0-delta-hack=1.0
--jitproc-use-aslr Disables compiler process ASLR, useful for easier debugging, as the compiler process will be always on fixed address. Theoretically useful for mast1c0re, but to change it you need to be already in... --jitproc-use-aslr=0
--detect-idle-intc 0, 1 Enabled by default, 0 disables it --detect-idle-intc=0
--detect-idle-chcr 0, 1 Enabled by default, 0 disables it --detect-idle-chcr=0
--rom location of the bios that's inside of the fpkg Could allow to use custom bios, though still not working --rom="PS20220WD20050620.crack" or --rom="/roms/PS20220WD20050620.crack"
--cop2 jit, trans ?
--vu0 jit, trans ?
--r30 jit, trans ?

PCSX2's gameindex

PCSX2's commands on the PS4 (or the commands which behave similarly)


Current Gameindex.yaml

PCSX2 PS4 Notes
XGKickHack --vu-xgkick-delay= Possible equivalent value is 8
VuAddSubHack --vu-hack-triace=1 Required for every single game developed by TriAce
vuClampMode: 2
--vu1-no-clamping=0
--vu0-no-clamping=0
--cop2-no-clamping=0
Works similar.
vuClampMode: 3
--vu1-no-clamping=1
--vu0-no-clamping=1
--cop2-no-clamping=1
--vu-to-double=1
Works similar.
eeClampMode: 2 --fpu-to-double=0
--fpu-no-clamping=0
Works similar.
eeClampMode: 3 --fpu-to-double=1
--fpu-no-clamping=1
Works similar.
eeRoundMode: --fpu-accurate-muldiv=1
--fpu-accurate-addsub=1
vu0RoundMode: --cop2-accurate-mul=1
--cop2-accurate-addsub=1
--vu0-accurate-addsub-range=
--vu0-mul0fix-range=
vu1RoundMode: --vu1-accurate-addsub-range=
--vu1-mul0fix-range=
eeCycleRate: --ee-cycle-scalar= "Potential" equivalent values: PCSX2 - PS4:
300% --> 0.333
180% --> 0.555
130% -->0.769
100% --> 1.0
75% --> 1.333
60% --> 1.666
50% --> 2
FpuNegDivHack
FpuMulHack
--fpu-accurate-muldiv=1
cpuCLUTRender: 1 --gs-uv-shift-pointsampling=1
MTVUSpeedHack: 0 --vu1=jit-sync Some games will also require --vu1-mpg-cycles= to be between "6000 - 19000"
mergeSprite
alignSprite
--gs-kernel-cl-up="up2x2simple" Note: works similarly but not the equivalent
cpuSpriteRenderBW: 4 --gs-opt-frbuff-switch=1 Note: works similarly but not the equivalent
mipmap --gs-use-mipmap=1
--gs-kernel-cl="mipmap"
Note: Works best on War of the Monsters emulator
autoFlush --gs-flush-ad-xyz=safe Possible values include always, safe, off, 0
VIF1StallHack --vif1-instant-xfer=0 If that does not work, the Lua command eeObj.SchedulerDelayEvent("vif1.dma", 0x9000) might assist.
wildArmsHack --gs-kernel-cl-up="DarkCloud2"
deinterlace --force-frame-blend=1

XXXX-YYYYY_config.lua

It is the most powerful configuration on the emulator as it allows for direct patching of EE/IOP/VU memory, hooks registers, hook DMA. Almost everything can be done here.

If needed, it can hook registers by using register names from alias files. Alias files (ee-cpr0-alias.lua, ee-gpr-alias.lua, ee-hwaddr.lua) are stored in lua_include folder, and can be included to config by using require ("alias file name").

Known functions: Require cleanup.

ApiRequest

The most important part of the LUA script. The LUA script will crash the game if used without it.
Command Usage Notes
apiRequest apiRequest(0.1) apiRequest(<api version>)

Different emu versions support different highest api. Calling api is mandatory. some commands require higher version. Highest known version is 2.3 api from JAK 2,3,X game emulator.

(Emulator) EmuObject
 Commands for the emulator
Command Usage Notes
Object calling class
getEmuObject local emuObj = getEmuObject() Required for all functions using emuObj, that include:
LoadConfig SaveConfig GetPad AddVsyncHook
RemoveVsyncHook AddEntryPointHook RemoveEntryPointHook
AddLoginHook RemoveLoginHook AddLogoutHook RemoveLogoutHook
CheckEntitlement AddImageHook AddGifTagHook SwapMemCard
SetFormattedCard OpenDiscTray CloseDiscTray SwitchDisc
EnableImposeMenu GetDiscId GetDiscTitleId
AddSectorReadHook AddMCWriteHook ShowDiscSwitchInfo GetPs4SystemLang SetPs2Lang
ThrottleNorm ThrottleFast ThrottleMax AddAssertionHook 
SetGsTitleFix SetDeinterlace SetDisplayAspectWide SetDisplayAspectNormal 
ForceRefreshRate LoadFsShader SetDisplaySafeArea PadSetLightBar 
AddPadHook PadPressureStickRemap SetVolumes GetVolumes 
SetAudioRoute GetAudioRoute AddSnapshotLoadedHook
RemoveSnapshotLoadedHook IsNeoMode IsToolingVerbose emuMediaPatch 
Hooks
AddVsyncHook emuObj.AddVsyncHook(<task to be done every vsync>) emuObj.AddVsyncHook(my_function)

my_function can be anything, from simple patches, to extensive hook. Example usage can be found in SLUS-21550 features file. some games are not compatible with it and will crash upon startup.

RemoveVsyncHook emuObj.RemoveVsyncHook(<previously added task to be removed>) emuObj.RemoveVsyncHook(my_function)
AddEntryPointHook emuObj.AddEntryPointHook(<task>) Task to be done at ps2 game main elf entry point (right where game is loaded).
RemoveEntryPointHook
AddLoginHook
RemoveLoginHook
AddLogoutHook
RemoveLogoutHook
AddImageHook
AddGifTagHook
AddSectorReadHook emuObj.AddSectorReadHook(<sector, unk, task>) Hook to do task when disc image sector is read. Not all values are known (ex. emuObj.AddSectorReadHook(776480, 32, <task/function>) )
AddMCWriteHook emuObj.AddMCWriteHook()
AddAssertionHook emuObj.AddAssertionHook()
AddSnapshotLoadedHook
RemoveSnapshotLoadedHook
AddPadHook emuObj.AddPadHook()
Audio
SetVolumes emuObj.SetVolumes('global', 'main', 'bgm') Set volume, usually setting global is enough. Example: emuObj.SetVolumes(0.31, 1.0, 1.0) values, in floats 1.0 = 100%
GetVolumes emuObj.GetVolumes() Return current volume levels for ('global', 'main', 'bgm') in floating point values.
SetAudioRoute
GetAudioRoute
Game loading speed
ThrottleNorm emuObj.ThrottleNorm() Enable default framelimiter (50/60 fps depend on region).
ThrottleFast emuObj.ThrottleFast() Faster than default, but exact value is unknown.
ThrottleMax emuObj.ThrottleMax() Disable framelimiter during loading screens.
CDVD
OpenDiscTray
CloseDiscTray
SwitchDisc emuObj.SwitchDisc(<disc ID>) ID can be provided as is, or for example read from memory or register when needed.
GetDiscId emuObj.GetDiscId() Return DiscId in XXXX_YYY.ZZ format
GetDiscTitleId
ShowDiscSwitchInfo emuObj.ShowDiscSwitchInfo()
Other
EnableImposeMenu emuObj.EnableImposeMenu(<true/false>) EnableImposeMenu(false)
LoadConfig emuObj.LoadConfig( 0 or 1 ) emuObj.LoadConfig(0)
SaveConfig emuObj.LoadConfig( 0 or 1 ) emuObj.LoadConfig(0)
GetPad emuObj.GetPad(<gamepad button by bits>) example usage for reading input:
local CheckInputs = function()

local pad_bits = emuObj.GetPad()
local UP		= pad_bits &  0x0010
local DOWN		= pad_bits &  0x0040
local LEFT		= pad_bits &  0x0080
local RIGHT		= pad_bits &  0x0020
local Triangle		= pad_bits &  0x1000
local Cross		= pad_bits &  0x4000
local Square		= pad_bits &  0x8000
local Circle		= pad_bits &  0x2000
local L1		= pad_bits &  0x0400
local L2		= pad_bits &  0x0100
local L3		= pad_bits &  0x0002
local R1		= pad_bits &  0x0800
local R2		= pad_bits &  0x0200
local R3		= pad_bits &  0x0004
local Select		= pad_bits &  0x0001
local Start		= pad_bits &  0x0008	

if (L2 ~= 0) then
	<here function that should be done when L2 is pushed>
end
	
end

emuObj.AddVsyncHook(CheckInputs) <to trigger check at every vsync>
SwapMemCard
SetFormattedCard emuObj.SetFormattedCard(<"file name">) emuObj.SetFormattedCard("custom_formatted.card")
Allow to use custom memory card. 
GetPs4SystemLang emuObj.GetPs4SystemLang() Return PS4 system language (in unknown format).
SetPs2Lang emuObj.SetPs2Lang(<Lang ID>) Set emulated PS2 language, correct Lang IDs are 0-18. In some cases, games will hang on a black screen with some other language settings (eg Japanese) - Example for usage: emuObj.SetPs2Lang(1)
0 - japanese
1 - english
2 - french
3 - spanish
4 - german
5 - italian
6 - dutch
7 - portuguese
8 - russian
9 - korean
10 - traditonal-chinese
11 - simplified-chinese
12 - finnish
13 - swedish
14 - danish
15 - norwegian
16 - polish
17 - portuguese-brazil
18 - english-uk
PadSetLightBar emuObj.PadSetLightBar(<port, red, green, blue>) Set DS4 light bar color. The correct port values are 0-3, correct light values are 0-255.
PadPressureStickRemap emuObj.PadPressureStickRemap()
IsNeoMode emuObj.IsNeoMode() Check that PS4 run in NEO (PRO) mode. Return 1/0
IsToolingVerbose
CheckEntitlement
emuMediaPatch emuMediaPatch(disc sector, 12/24 + offset, { original data }, { replace data }) Replace 4 bytes from loaded iso file. For unknown reason we always need to add 12 to real offset for DVD game, and 24 for CD game.
GS related
CountFrameOnPS2 emuObj.CountFrameOnPS2() updates FRAPS/Actual FPS reading in olympus
SetGsTitleFix emuObj.SetGsTitleFix() More info
SetDisplayAspectWide emuObj.SetDisplayAspectWide() Force display area to 16:9 (If game not support widescreen, it will be stretched).
SetDisplayAspectNormal emuObj.SetDisplayAspectNormal() Force display area to 4:3.
ForceRefreshRate emuObj.ForceRefreshRate(<hz>) emuObj.ForceRefreshRate(50) correct values are 0, 50, 60 where 0 = default.
LoadFsShader emuObj.LoadFsShader(<slot?>, "<path>")
Shaders must be loaded right after GS has been initialized. 
Example:
Global_InitGpuResources = function()
	emuObj.LoadFsShader(1, "./shader.sb")
end

That only load Fragment Shader to program memory, to use it we need BindFragmentShader, 
and if depend on shader SetShaderParams.
SetDisplaySafeArea
(EE) EEObject
Commands for the emulated Emotion Engine
Command Usage Notes
Object calling class
getEEObject local eeObj = getEEObject() Required for all functions using eeObj
Memory editing
ReplaceMem64 eeObj.ReplaceMem64(<address>, <value>)
ReplaceMem32 eeObj.ReplaceMem32(<address>, <value>) Permanently replace an offset without needing addvsynchook?
ReplaceMem16 eeObj.ReplaceMem16(<address>, <value>)
ReplaceMem8 eeObj.ReplaceMem8(<address>, <value>)
ReadMemFloat eeObj.ReadMemFloat(<address>) eeObj.ReadMemFloat(0x258c3c)
WriteMemFloat eeObj.WriteMemFloat(<address>, <value>) eeObj.WriteMemFloat(0x365364, 1.3333333)
ReadMem128
eeObj.ReadMem128(<ee memory offset>)
Read 16 bytes from offset, examples: eeObj.ReadMem128(0x100198)
ReadMemFloat128
eeObj.ReadMemFloat128(<ee memory offset>)
return 16 bytes from offset in float form
WriteMem128
WriteMemFloat128
ReadMem64
eeObj.ReadMem64(<ee memory offset>)
Read 8 bytes from offset, examples: eeObj.ReadMem64(0x100198)
WriteMem64
eeObj.WriteMem64(<ee memory offset>, <data>)
ReadMem32
eeObj.ReadMem32(<ee memory offset>)
Read 4 bytes from offset, examples: eeObj.ReadMem32(0x100198)

eeObj.ReadMem32(gp - 31348)

WriteMem32
eeObj.WriteMem32(<ee memory offset>, <data>)
Write 4 bytes to offset, example: eeObj.WriteMem32(0x2c89ac, 0x001b70f0)
ReadMem16
eeObj.ReadMem16(<ee memory offset>)
Read 2 bytes from offset, example: eeObj.ReadMem16(0x100198)
WriteMem16
eeObj.WriteMem16(<ee memory offset>, <data>)
Write 2 bytes to offset, example: eeObj.WriteMem16(0x2c89ac, 0x70f0)
ReadMem8
eeObj.ReadMem8(<ee memory offset>)
Read 1 byte from offset, example: eeObj.ReadMem8(0x100198)
WriteMem8
eeObj.WriteMem8(<ee memory offset>, <data>)
Write 1 byte to offset, example: eeObj.WriteMem8(0x2c89ac, 0xf0)
ReadMemStr eeObj.ReadMemStr(address/register) Read string from address until null terminator
WriteMemStr eeObj.WriteMemStr(address, string)
WriteMemStrZ eeObj.WriteMemStrZ(string pointer, string) . Pointer can be read from GPR
GPR require (Necessary for register related commands)
local gpr = require( "ee-gpr-alias" )
GetGpr64 eeObj.GetGPR64(<gpr register>) example: eeObj.GetGPR64(t3)
SetGpr64
GetGprFloat Get gpr value as float value
SetGprFloat Set gpr value as float value
GetGpr eeObj.GetGPR(<gpr register>) eeObj.GetGPR(t3)
SetGpr eeObj.SetGPR(<gpr register> ,<value>) example: eeObj.SetGPR(gpr.a3 ,1)

Require defined getEEObject() as eeObj

GetFprHex eeObj.GetFprHex(<FPU register (0-31)>) Get/return floating point register value as hex string
SetFprHex eeObj.SetFprHex(<FPU register (0-31), value (u32)>) Set floating point register value as hex string
GetFpr eeObj.GetFpr(<register number>) example eeObj.GetFpr(14)
SetFpr eeObj.SetFpr(<fpr register number>, <value>) Simple example eeObj.SetFpr(14, 50.0) will set frp 14 to 50.0

But we can also combine commands to add/sub from registers eeObj.SetFpr(14, eeObj.GetFpr(14) + 50.0) this will add 50.0 to current fpr 14 value

GetPc eeObj.GetPc() This command is very helpful as it will return to you the current EE address that's being read. Can be used also with additional var. like eeObj.GetPc()+4
SetPc eeObj.SetPC(<PC>) eeObj.SetPC(0x266B80)
GetCPR0 eeObj.GetCPR0(<COP0 register>)
SetCPR0 eeObj.SetCPR0(<COP0 register>)
Hooks
AddHook eeObj.AddHook(<ee offset>, <original opcode>, <definied hook name>) example:
local W1 = 
	function()
		emuObj.SetDisplayAspectNormal()
	end

local ws1 = eeObj.AddHook(0x1c9840, 0xaf808c78, W1)
RemoveHook
AddPreHook
AddPostHook
RemovePreHook
RemovePostHook
AddJitResetHook
RemoveJitResetHook
AddHookJT eeObj.AddHookJT(Offset, offset opcode, function) Seems be a hook related to the jit
Dma
SetVifDataCycleScalar Used in Jak3 = eeObj.SetVifDataCycleScalar(1, 1.80)
DmaAddHook
eeobj.DmaAddHook(channel=%d key=%x)
Possible Dma channel numbers (?)
 GIF = 0 VIF0 = 1 
VIF1 = 2 SIF0 = 4 
SIF1 = 5 IPU0 = 6
IPU1 = 7  

Possible values for hooks

DmaTransfer [VIF0/VIF1], RaiseIntc [VIF0/VIF1], NormalTransfer [SIF0/SIF1]. 
DmaRemoveHook
Speedhacks
FastForwardClock eeObj.FastForwardClock() Skip Emotion Engine cycles?
eeObj.AddHook(0x002cc350, 0x78a30000, function()
          eeObj.FastForwardClock()
end)
AdvanceClock eeObj.AdvanceClock() Likely skips an allocated amount of EE cycles. Can only be attached to the start or end of a branch loop (on newer emus, only the end of a branch works)
eeObj.AddHook(0x002cc350, 0x78a30000, function()
          eeObj.AdvanceClock(21000)
end)
GetClock eeObj.GetClock() Returns the value of how many cycles the EE is ahead of normal clock (?)
Vu1MpgCycles eeObj.Vu1MpgCycles(<cycles>) Works just like the cli command --vu1-mpg-cycles=
Other
CallPredicate
SchedulerDelayEvent eeObj.SchedulerDelayEvent("event", cycles)
Example:
eeObj.AddHook(0x0033A4DC,0xAC430000, function() eeObj.SchedulerDelayEvent("gif.dma", 0x10500) end)
Parrapa use eeObj.SchedulerDelayEvent("vif1.dma", 0x6500) other events are gif.dma, vif0.dma, vif1.dma, sif0.dma, Sif0-NormalTransfer, sif1.dma, Sif1-NormalTransfer, ipu0.dma, ipu1.dma . This command allows for the delayment of certain DMA transfer by cycles.
WaitVu1 eeObj.WaitVu1() Likely to be the lua equivalent of "--vu1=jit-sync".
GetPcRingBuffer
Precompile Requires unknown values
CalcInsnHash
getOverlayObject eeObj.getOverlayObject() local eeOverlay = eeObj.getOverlayObject()
GetVif1Cycles eeObj.GetVif1Cycles() local vif1_cycles = eeObj.GetVif1Cycles() create vif_cycles value that can be used later. You can rename it as you wish.
SetGsTitleFix
One of the most important LUA commands. It modifies the Graphics Synthesizer's behavior.

Part of EmuObject() class, it's frequently used in official configs.

Examples

-- fix vision logo (Wild Arms 3)
local thresholdArea = 0 -- ignore alls items : fix #112276
emuObj.SetGsTitleFix( "ignoreUpRender", thresholdArea , {  texType = 3, cbp = 0x2390, tbp = 0x288000} )
------------------------------------------------------------------------------------------------------
-- Ignore up-render shift for triangles when writing mask = write alpha only . Will fix shadows (bug# 6724).
emuObj.SetGsTitleFix( "ignoreUpShiftTri", "reserved" , { fbmask = 0x00FFFFFF  } )
------------------------------------------------------------------------------------------------------
--  Performance  fix ( bug# 9474 )
if 0 then   -- emuObj.IsNeoMode() then  -- neo mode check disabled, due to bug #10442
    emuObj.SetGsTitleFix( "globalSet",  "reserved", { workLoadThreshold = 125000} )
else
    emuObj.SetGsTitleFix( "globalSet",  "reserved", { workLoadThreshold = 100000} )
end
------------------------------------------------------------------------------------------------------
-- bug# 9972
emuObj.SetGsTitleFix( "ignoreSubBuffCov", "reserved", { } )
------------------------------------------------------------------------------------------------------
-- Bully bug 9392
-- Performace fix
local thresholdArea = 600
emuObj.SetGsTitleFix( "ignoreUpRender", thresholdArea , {alpha=0x80000044 , zmsk=1 , tw=4, th=4  } )
------------------------------------------------------------------------------------------------------
-- Bug#9174 -
emuObj.SetGsTitleFix( "ignoreSubBuffCov", "reserved", { } )
------------------------------------------------------------------------------------------------------
-- Bug#9240 (Light maps uprender)
-- Copy z-buffer for future use with light maps. psm = SCE_GS_PSMZ24 (49)
emuObj.SetGsTitleFix( "forceSimpleFetch", "reserved", {tw=9, th=9, psm=49, zmsk=1 } )
------------------------------------------------------------------------------------------------------
-- Apply light maps texMode=2 (bilinear)   psm= SCE_GS_PSMCT32 (0)
emuObj.SetGsTitleFix( "forceSimpleFetch", "reserved", {tw=8, th=8, psm=0, ztst=1, texMode=2 } )
------------------------------------------------------------------------------------------------------
-- Performace fix (bug #9785 )
emuObj.SetGsTitleFix( "globalSet",  "reserved", { waveThreshold = 90000} )
emuObj.SetGsTitleFix( "ignoreAreaUpdate", 0, { } )
------------------------------------------------------------------------------------------------------
-- Accumulate fill area only when conditions are met
emuObj.SetGsTitleFix( "includeAreaUpdate", "reserved" , {alphaIsNot = 0, zmsk = 1, tw = 6, th = 6 , tbp = 0x00302000} )
emuObj.SetGsTitleFix( "ignoreUpRender", 130 , { totalArea= 700} )
------------------------------------------------------------------------------------------------------
-- Fix shadow
emuObj.SetGsTitleFix( "forceSimpleFetch", "reserved", { texMode=1  } )
------------------------------------------------------------------------------------------------------
-- Reduce flush count
emuObj.SetGsTitleFix( "SetSelfRender", "reserved", { fbmask= 0x00FFFFFF , renderSelf=1 , zmsk=1 , alpha=0 , texMode=1  } )
------------------------------------------------------------------------------------------------------
-- Disable post-processing
emuObj.SetGsTitleFix( "ignoreSprite", "reserved", {  texType=1 , tw=5 , th=8, zmsk=1 , alpha=0x80000044  } )
------------------------------------------------------------------------------------------------------
-- Small triangle rejection. Works in conjunction with CLI setting   gs-override-small-tri-area=1
-- keep default area for texture 256x256 ( no blend)  (Anakin face)
emuObj.SetGsTitleFix( "setRejectionArea", 500,{twIsNot=8, thIsNot=8 } )
------------------------------------------------------------------------------------------------------
-- Set triangle rejection area= 1000  when alpha blend is not 0 ( i.e blend is On)
emuObj.SetGsTitleFix( "setRejectionArea", 1000, {alphaIsNot=0 } )
------------------------------------------------------------------------------------------------------
-- Performace fix
local thresholdArea = 600
emuObj.SetGsTitleFix( "ignoreUpRender", thresholdArea , {alpha=0x80008068 , zmsk=1 } )
------------------------------------------------------------------------------------------------------
-- Performace fix
local thresholdArea = 700
emuObj.SetGsTitleFix( "ignoreUpRender", thresholdArea , {alpha=0x80000044 , zmsk=1 } )
------------------------------------------------------------------------------------------------------
-- Disable uprender on the draw command which samples the framebuffer (0x3200) using bilinear sampling (texMode=2)
-- All lighting effects use TriFan prim type, so use that as well to filter against.
emuObj.SetGsTitleFix( "forceSimpleFetch",  "reserved", {prim=5, texMode=2, tbp=0x320000} )


Commands

Command Example Notes Values
globalSet emuObj.SetGsTitleFix( "globalSet", "reserved", { packedRegsLo = 0x42,packedRegsHi = 0, packedRegsNum = 2, packedFlags = 3, packedPrim = 5}) used with workLoadThreshold or waveThreshold or loadThreshold
reserved
ignoreSubBuffCov ignore ? buffer coverage
ignoreUpRenderTimeout emuObj.SetGsTitleFix( "globalSet", "reserved", {ignoreUpRenderTimeout=2} )
ignoreAreaUpdate emuObj.SetGsTitleFix( "ignoreAreaUpdate", 0, { alpha=0x80000048 } )
ignoreSprite emuObj.SetGsTitleFix( "ignoreSprite", "reserved", { texType=1 , tw=5 , th=8, zmsk=1 , alpha=0x80000044 } )
ignoreUpShiftTri emuObj.SetGsTitleFix( "ignoreUpShiftTri", "reserved", {psm=0} )
clipScissors emuObj.SetGsTitleFix( "clipScissors", "reserved", {alpha = 0 , frameW = 4 , psm = 0} )
trianglesAsParticles emuObj.SetGsTitleFix( "trianglesAsParticles", "reserved", { hasClut=1,zmsk=1 } )
SetSelfRender emuObj.SetGsTitleFix( "SetSelfRender", "reserved", { fbmask= 0x00FFFFFF , renderSelf=1 , zmsk=1 , alpha=0 , texMode=1 } )
forceBiLinear
forcePoint emuObj.SetGsTitleFix( "forcePoint", "reserved", {mipIsGt=0, mmin=0} )
forceSimpleFetch emuObj.SetGsTitleFix( "forceSimpleFetch", "reserved", {psm=0} ) Used frequently to fix graphical corruptions
forcePointSampling emuObj.SetGsTitleFix( "forcePointSampling", "reserved", {alpha = 0x80000048, twIsLess=5, thIsLess=5 } )
setRejectionArea emuObj.SetGsTitleFix( "setRejectionArea", 1000, { } )
ignoreUpRender emuObj.SetGsTitleFix( "ignoreUpRender", thresholdArea , { texType = 3, cbp = 0x2390, tbp = 0x288000} ) Ignore uprender for texture type described in params
includeAreaUpdate
fetchFromCurrBuff emuObj.SetGsTitleFix( "fetchFromCurrBuff", "reserved", {psm=0} )
skipPacked emuObj.SetGsTitleFix( "skipPacked", "reserved", { alpha = 0x80000044, tbp = 0x3a4000 , zmsk=1 })
changeAlpha


Arguments/variables

Argument Usage Notes
Variable
alpha_mask
texType {texType = 3} (1-3, more? )
texMode 1 - Point? , 2 - bilinear
Argument
alphaIsNot alpha - is not X
twIsLess texture width - is less than X
thIsLess texture height - is less than X
twIsNot texture width - is not X
thIsNot texture width - is not X
psmIsNot texture pixel storage format - is not X
PSMCT32  = 0   PSMT4HL = 36
PSMCT24  = 1   PSMT4HH = 44
PSMCT16  = 2   PSMZ32  = 48
PSMCT16S = 10  PSMZ24  = 49
PSMT8    = 19  PSMZ16  = 50
PSMT4    = 20  PSMZ16S = 58
PSMT8H   = 27  
primIsNot GS primitive type - is not
Point         = 0
Line          = 1
LineStrip     = 2
Triangle      = 3
TriangleStrip = 4
TriangleFan   = 5
Sprite        = 6
mipIsGt mip level is grater than X (?)
Needs wikify
zmsk Z (depth) draw mask
update Z buffer       = 0
don't update Z buffer = 1

When 1 depth test result will be ignored
tw texture width
th texture height
ztst Z (depht) test method
ZNOUSE   = 0
ZALWAYS  = 1
ZGEQUAL  = 2
ZGREATER = 3

0 -                       All pixels fail
1 -                       All pixels pass
2 - Pass if Z grater or equal to Z buffer
3 -        Pass if Z grater than Z buffer
mmin MMIN flag
NEAREST                = 0
LINEAR                 = 1
NEAREST_MIPMAP_NEAREST = 2
NEAREST_MIPMAP_LINEAR  = 3
LINEAR_MIPMAP_NEAREST  = 4
LINEAR_MIPMAP_LINEAR   = 5
prim GS primitive type
Point         = 0
Line          = 1
LineStrip     = 2
Triangle      = 3
TriangleStrip = 4
TriangleFan   = 5
Sprite        = 6
fillArea
frameW
renderSelf
hasClut
alphaTest
primTest
workLoadThreshold
alpha
 example: alpha=0x80000044
alpha=0
tbp texture base pointer
cbp {cbp = 0x2390} CLUT buffer base pointer
psm {psm=0} texture pixel storage format
PSMCT32  = 0   PSMT4HL = 36
PSMCT24  = 1   PSMT4HH = 44
PSMCT16  = 2   PSMZ32  = 48
PSMCT16S = 10  PSMZ24  = 49
PSMT8    = 19  PSMZ16  = 50
PSMT4    = 20  PSMZ16S = 58
PSMT8H   = 27  
mxl maximum mip level (0-6)
fbmask { fbmask= 0x00FFFFFF} Framebuffer mask(?)
totalArea
packedRegs
packedRegsLo
packedRegsHi
packedRegsNum
packedFlags
packedPrim
areaNumFrames
waveThreshold
loadThreshold
fixSpriteDivTab
(IOP) IOPObject
Commands for the emulated input-output processor
Command Usage Notes
Object calling class
getIOPObject local iopObj = getIOPObject() Required for all functions using iopObj, that include:
ReplaceMem64 ReplaceMem32 ReplaceMem16 ReplaceMem8 ReadMemFloat
 WriteMemFloat WriteMem64 WriteMem32 WriteMem16 WriteMem8
 ReadMemStr AddHook RemoveHook GetGpr SetGpr GetPc SetPc
 GetCPR0 SetCPR0
Memory editing
ReplaceMem64 iopObj.ReplaceMem64(<address>, <value>)
ReplaceMem32 iopObj.ReplaceMem32(<address>, <value>)
ReplaceMem16 iopObj.ReplaceMem16(<address>, <value>)
ReplaceMem8 iopObj.ReplaceMem8(<address>, <value>)
ReadMemFloat iopObj.ReadMemFloat(<address>) iopObj.ReadMemFloat(0x28c3c)
WriteMemFloat iopObj.WriteMemFloat(<address>, <value>) iopObj.WriteMemFloat(0x65364, 1.3333333)
ReadMem128 iopObj.ReadMem128(<iop memory offset>)
WriteMem128 iopObj.WriteMem128(<iop memory offset>, <value>)
ReadMemFloat128 iopObj.ReadMemFloat128(<iop memory offset>)
WriteMemFloat128 iopObj.WriteMemFloat128(<iop memory offset>, <value>)
ReadMem64
iopObj.ReadMem64(<iop memory offset>)
Read 8 Bytes From offset
WriteMem64
iopObj.WriteMem64(<iop memory offset>, <data>)
Write 8 Bytes From offset
ReadMem32
iopObj.ReadMem32(<iop memory offset>)
Read 4 bytes from offset, examples: iopObj.ReadMem32(0x1198)

iopObj.ReadMem32(gp - 348)

WriteMem32
iopObj.WriteMem32(<iop memory offset>, <data>)
Write 4 bytes to offset, example: iopObj.WriteMem32(0x89ac, 0x001b70f0)
ReadMem16
iopObj.ReadMem16(<iop memory offset>)
Read 2 bytes from offset, example: iopObj.ReadMem16(0x1198)
WriteMem16
iopObj.WriteMem16(<iop memory offset>, <data>)
Write 2 bytes to offset, example: iopObj.WriteMem16(0x89ac, 0x70f0)
ReadMem8
iopObj.ReadMem8(<iop memory offset>)
Read 1 byte from offset, example: iopObj.ReadMem8(0x1198)
WriteMem8
iopObj.WriteMem8(<iop memory offset>, <data>)
Write 1 byte to offset, example: iopObj.WriteMem8(0x89ac, 0xf0)
ReadMemStr
GetGpr iopObj.GetGPR(<gpr register>) iopObj.GetGPR(a1)
SetGpr iopObj.SetGPR(<gpr register> ,<value>) example: iopObj.SetGPR(gpr.v0 ,3)
GetPc iopObj.GetPc() can be used also with additional var. like iopObj.GetPc()+8
SetPc iopObj.SetPC(<PC>) iopObj.SetPC(0x6B80)
GetCPR0 iopObj.GetCPR0(<COP0 register>)
SetCPR0 iopObj.SetCPR0(<COP0 register>)
Clock speed
FastForwardClock iopObj.FastForwardClock()
iopObj.AddHook(0x002cc350, 0x78a30000, function()
          iopObj.FastForwardClock()
end)
AdvanceClock iopObj.AdvanceClock() Skip an allocated amount of IOP cycles
iopObj.AddHook(0x002cc350, 0x78a30000, function()
          iopObj.AdvanceClock(21000)end)
GetClock iopObj.GetClock() Returns the value of cycles the iop is ahead of (?)
Hooks
AddHook iopObj.AddHook()
RemoveHook iopObj.RemoveHook()
(GS) GsObject
Commands for the emulated Graphics Synthesizer
Command Usage Notes
Object calling class
getGsObject local gsObj = getGsObject()
Graphical fixes / Improvement
SetL2HMode gsObj.SetL2HMode(true) (true) and (false) are only known options
SetUprenderMode gsObj.SetUprenderMode(1) Set uprender mode. Overrides CLI, 0=none, 1=2x2
SetUpscaleMode gsObj.SetUpscaleMode("EdgeSmooth") Sets upscale mode. Overrides CLI
GetFramesInQueue gsObj.GetFramesInQueue() Returns the value of the frames that are still in queue
SetFrameSkipping gsObj.SetFrameSkipping(true) false and true are the values.
SetDeinterlaceShift gsObj.SetDeinterlaceShift(0) The values are 1 and 0, Enable or disable interlacing, requires emulators with high api
Does not require object calling or unknown
Command Usage Notes
eeInsnReplace eeInsnReplace(EE memory offset, Original opcode (BE), Replace opcode (BE)) Replace 4 bytes opcode in ee memory, correct memory range is 0x0 to 0x1FFFFFFF
vuInsnReplace
vuInsnReplace(vu 0/1, vu memory offset divided by 8, (original opcode<<32) | original opcode, (replace opcode<<32) | replace opcode) 
Replace 2 x 4 bytes in VU memory, correct memory range depend on selected VU, left shift by 32 is used for VU lower opcodes. Command will fail if size is above 254.
example:
vuInsnReplace(0, 0x167, (0x000002ff << 32) | 0x520507ff,(0x000002ff << 32) | 0x8000033c)
Replace 64 bits of VU0 at offset 0xB38
iopInsnReplace iopInsnReplace(IOP memory offset, Original opcode, opcode replacement) Replace 4 bytes in iop memory, correct memory range is 0x0 to 0x1FFFFF, iopInsnReplace(0x1FFFFF, 0x0, 0x0803fff0)
eeNativeFunction eeNativeFunction(<ee offset>, <original opcode>, <function>) eeNativeFunction(0x11fa9c, 0x0080402d, 'memcpy')

Different emulators can have different functions included, vide SO3. Require api 1.4 or higher. But functions from this list should be available in every emu:

ieee754_acosf ieee754_asinf ieee754_sqrtf
fabs cosf fabsf
sinf acosf asinf
sqrtf fptoui fptodp
litodp dptoli dptofp
memcpy memset strlen
eeNativeHook eeNativeHook(<ee ofset>, <original opcode>, <action>) eeNativeHook require apiRequest(1.4) or higher.
GsCustomShader
Unlock
IsUnlocked
InsnOverlay InsnOverlay({<opcode, opcode, opcode...>}) example:
InsnOverlay({
	0x27bdfff0, -- addiu $sp, -0x10
	0xffbf0000, -- sd $ra, 0(sp)
	0xffb00008, -- sd $s0, 8(sp)
	0x3c05000f, -- lui $a1, 0x000f
	0x34a57000, -- ori $a1, 0x7000
	0x0c0db8b6, -- jal Script::State::DoString
	0x0080802d, -- move $s0, $a0
	0x24050001, -- li $a1, 1
	0x0c0dba4c, -- jal Script::State::IsNull(int)
	0x0200202d, -- move $a0, $s0
	0xdfb00008, -- ld $s0, 8(sp)
	0xdfbf0000, -- ld $ra, 0(sp)
	0x03e00008, -- jr ra
	0x27bd0010  -- addiu $sp, 0x10
})
eeDebugBreak
CsBindShader
CsSetParamInt32
CsSetParamFloat
CsResetContext
CsPrintContext
PsBindShader
PsSetParamInt32
PsSetParamFloat
PsResetContext
PsPrintContext
Note: eeObj, emuObj, gsObj, etc. are described as required but this is not really true. You can set the functions locals that they use as whatever you want, but due to the specificity of that emulator, it will be better to keep official naming used in official configs.
Other objects
Command Usage Notes
getGLSObject class
getGLSObject
Enable
EnableServerRecording
Pause
getAudioObject class
getAudioObject
muteStreamingAll
muteStreamingMain
muteStreamingBGM
getRemotePlayObject class
getRemotePlayObject
Enable
getVideoRecordingObject class
getVideoRecordingObject
Enable
getSharePlayObject class
getSharePlayObject
Enable
getSpriteObject group
getSpriteObject
Enable
Disable
BindFragmentShader
SetShaderParams
 Is not clear that params depend on shader, or are somehow hardcoded.
Example usage:

local sprite0 = getSpriteObject(0)
local scanlineParams = {
	240.0,		-- float scanlineCount
   	0.7,		-- float scanlineHeight;
	1.5,        -- float scanlineBrightScale;
	0.5,        -- float scanlineAlpha;
	0.5         -- float vignetteStrength;
}

sprite0.SetShaderParams(scanlineParams)
BindTexture
SetPosXY
SetSizeXY
SetPosUV
SetSizeUV
PrintContext
SetBlendColor sprite<X>.SetBlendColor(<R,G,B,A>) in floats, max val. 1.0
local sprite0 = getSpriteObject(0)
sprite0.SetBlendColor(1.0,1.0,1.0,1.0)
getTrophyObject local trophyObj = getTrophyObject() Required for all functions using trophyObj
getDmaObject local dmaObj = getDmaObject() Depreciated API - use EE:DmaAddHook / EE:DmaRemoveHook instead. Is not clear when it was depreciated, JAK emu don't use it.
getScreenShotObject

Registers for hook

Registers defined in alias files.

GetGpr/SetGpr

gpr.zero gpr.at 
gpr.v0  gpr.v1 
gpr.a0  gpr.a1  gpr.a2  gpr.a3 
gpr.t0  gpr.t1  gpr.t2  gpr.t3 
gpr.t4  gpr.t5  gpr.t6  gpr.t7 
gpr.s0  gpr.s1  gpr.s2  gpr.s3 
gpr.s4  gpr.s5  gpr.s6  gpr.s7 
gpr.t8  gpr.t9
gpr.k0  gpr.k1 
gpr.gp  gpr.sp  gpr.fp  gpr.ra 
gpr.lo  gpr.hi  gpr.sa

example: eeObj.GetGpr(gpr.a1)

GetCPR0/SetCPR0

cpr.index	  cpr.pagemask
cpr.random	  cpr.wired	
cpr.entrylo0      cpr.badvaddr
cpr.entrylo1      cpr.count	
cpr.context	  cpr.entryhi	


cpr.compare	  cpr.config    cpr.taglo	
cpr.status	  cpr.badpaddr  cpr.taghi	
cpr.cause	  cpr.hwbk	cpr.errorepc
cpr.epc		  cpr.pccr	
cpr.prid

example: eeObj.GetCPR0(cpr.status) 


Official PS2 configuration examples

  • You can find the rest of the PS2 configurations in here.


Canis Canem Edit
SLES 535.61
LUA

require( "ee-gpr-alias" ) -- you can access EE GPR by alias (gpr.a0 / gpr["a0"])
apiRequest(0.1)
-- EA sports cricket 07 bug 9392
-- Performance fix
local emuObj = getEmuObject()	
local thresholdArea = 600
emuObj.SetGsTitleFix( "ignoreUpRender", thresholdArea , {alpha=0x80000044 , zmsk=1 , tw=4, th=4  } )

Custom config.lua examples

Here is the first custom LUA configuration created by the community:

apiRequest(0.1)

-- Fix black screen SLUS-20064

eeInsnReplace(0x1CF3CC, 0x4100ffff, 0x00000000)	-- bc0f 0x1CF3CC to nop

This is a very basic command to replace a part of the EE memory with another instruction.

  • apiRequest(0.1) - Is required for every config. Used version depend on your original eboot highest supported api. 0.1 seems to be enough for basic patches like here. 2.3 is highest known for now.
  • -- Fix black screen SLUS-20064 is comment
  • eeInsnReplace(0x1CF3CC, 0x4100ffff, 0x00000000) is our true command here. We are replacing the value 0x4100FFFF to 0x00000000 at the offset of 0x1CF3CC . Like you can see we need to add what opcode is replaced. Not only patch, and memory offset.
  • -- bc0f 0x1CF3CC to nop is just another comment, in this case explaining what is changed

Other custom configurations made by users can be found here

Memory Map

Name From To
EE Flat Memory (4gb) 0x0000008000000000 0x0000008100000000
IOP Flat Memory (4gb) 0x0000009000000000 0x0000009100000000
R59 Binary Cache 0x0000000914B10000 0x0000000916B10000
R30 Binary Cache 0x0000000916B14000 0x0000000917314000
jitVU0 0x0000000917318000 0x0000000917B18000
jitVU1 0x0000000917B1C000 0x0000000918B1C000
Host's EE Memory Map
EE RAM - Kernel 0x0000008000000000 0x0000008000080000
EE RAM - Debug 0x0000008000078000 0x0000008000080000
EE RAM - User 0x0000008000080000 0x0000008002000000
EE Hw Devices 0x0000008010000000 0x0000008010010000
EE ROM 0x000000801FC00000 0x000000801FFE0000
EE RAM - Uncached 0x0000008020080000 0x0000008022000000
EE RAM - UncachedAccel 0x0000008030100000 0x0000008032000000
EE Scratchpad 0x0000008070000000 0x0000008070004000
EE Debug 0x00000080FFFF8000 0x0000008100000000
Host's IOP Memory Map
IOP RAM 0x0000009000000000 0x0000009000200000
IOP RAM (mirror 1) 0x0000009000200000 0x0000009000400000
IOP RAM (mirror 2) 0x0000009000400000 0x0000009000600000
IOP RAM (mirror 3) 0x0000009000600000 0x0000009000800000
IOP Scratchpad 0x000000901F800000 0x000000901F801000
IOP HW 0x000000901F801000 0x000000901F810000
IOP ROM 0x000000901FC00000 0x000000901FFE0000

Registers Map

EE-IOP

This list of registers is incomplete. Some registers are incorrectly named or include incorrect offsets. The 0x1000000xxx base is not guaranteed in different emu revisions. The IOP, VU0, and VU1 registers' offsets are static in all emulators).

This list was designed for Jak v2
Eboot md5:c644f6879af225a6e5a70233fc4625a3
GPR-EE Address FPR Address CP0 Address GPR-IOP Address
zero 0x1000000000 f00 0x1000000230 Index 0x10000002D0 zero 0x1020000000
at 0x1000000010 f01 0x1000000234 Random 0x10000002D4 at 0x1020000004
v0 0x1000000020 f02 0x1000000238 EntryLo0 0x10000002D8 v0 0x1020000008
v1 0x1000000030 f03 0x100000023C EntryLo1 0x10000002DC v1 0x102000000C
a0 0x1000000040 f04 0x1000000240 Context 0x10000002E0 a0 0x1020000010
a1 0x1000000050 f05 0x1000000244 PageMask 0x10000002E4 a1 0x1020000014
a2 0x1000000060 f06 0x1000000248 Wired 0x10000002E8 a2 0x1020000018
a3 0x1000000070 f07 0x100000024C rsvd7 0x10000002EC a3 0x102000001C
t0 0x1000000080 f08 0x1000000250 BadVAddr 0x10000002F0 t0 0x1020000020
t1 0x1000000090 f09 0x1000000254 Count 0x10000002F4 t1 0x1020000024
t2 0x10000000A0 f10 0x1000000258 EntryHi 0x10000002F8 t2 0x1020000028
t3 0x10000000B0 f11 0x100000025C Compare 0x10000002FC t3 0x102000002C
t4 0x10000000C0 f12 0x1000000260 Status 0x1000000300 t4 0x1020000030
t5 0x10000000D0 f13 0x1000000264 Cause 0x1000000304 t5 0x1020000034
t6 0x10000000E0 f14 0x1000000268 EPC 0x1000000308 t6 0x1020000038
t7 0x10000000F0 f15 0x100000026C PRid 0x100000030C t7 0x102000003C
s0 0x1000000100 f16 0x1000000270 Config 0x1000000310 s0 0x1020000040
s1 0x1000000110 f17 0x1000000274 Iab 0x1000000314 s1 0x1020000044
s2 0x1000000120 f18 0x1000000278 Iabm 0x1000000318 s2 0x1020000048
s3 0x1000000130 f19 0x100000027C Dab 0x100000031C s3 0x102000004C
s4 0x1000000140 f20 0x1000000280 Dabm 0x1000000320 s4 0x1020000050
s5 0x1000000150 f21 0x1000000284 Dvm 0x1000000324 s5 0x1020000054
s6 0x1000000160 f22 0x1000000288 Dvbm 0x1000000328 s6 0x1020000058
s7 0x1000000170 f23 0x100000028C BadPAddr 0x100000032C s7 0x102000005C
t8 0x1000000180 f24 0x1000000290 Debug 0x1000000330 t8 0x1020000060
t9 0x1000000190 f25 0x1000000294 Perf 0x1000000334 t9 0x1020000064
k0 0x10000001A0 f26 0x1000000298 Pcr0 0x1000000338 k0 0x1020000068
k1 0x10000001B0 f27 0x100000029C Pcr1 0x100000033C k1 0x102000006C
gp 0x10000001C0 f28 0x10000002A0 TagLo 0x1000000340 gp 0x1020000070
sp 0x10000001D0 f29 0x10000002A4 TagHi 0x1000000344 sp 0x1020000074
fp 0x10000001E0 f30 0x10000002A8 ErrorEPC 0x1000000348 fp 0x1020000078
ra 0x10000001F0 f31 0x10000002AC Rsvd31 0x100000034C ra 0x102000007C
hi/hi1 (2x 64bit) 0x1000000200 fACC 0x10000002B0 COP0 additional registers pc 0x102000008C
lo/lo1 (2x 64bit) 0x1000000210 FPU CTRL (FCR) real Pcr0 0x1000000350 hi 0x1020000090 ??
sa 0x1000000220 cp1cond 0x10000002B4 real Pcr1 0x1000000358 lo 0x1020000094 ??
fpu ver 0x10000002B8
fpu sticky 0x10000002BC
fpu ctrl 0x10000002C0
2CF unknown 0x10000002C4

Emulator related registers

"Fake" registers Address Notes
(?) 0x1000000360 Locking the value seems to cause a crash.
Current PC
(4 Bytes)
0x1000000368 Shows the current offset that's being executed by the EE.

Updated only on branch/jump tests, unless commands such as --ee-pc-coherency or --ee-insn-flush-pc are used.
Then updates are instant, right when instructions are executed.
Commonly used by sceners as a way of finding troublesome offsets. Can be found in some emulators here too: 0x8000016830

(?) 0x100000036C
Updated on branch/jump instructions, emulator seems to use it to store next address that will be executed.
At least in recompiler to interpreter fallback mode. During tests it shows 0x80000184
Delta counter 0x1000000370
(Passed cycles, likely decrementer). 
Evt check is performed on branch test when 0.
Fastforwardclock set this to 0,
advanceclock subtract value from this fake reg)
Cycles 0x1000000378
(?) 0x1000000384
Address when last exception occurred on r5900.
This register most of times will hold last executed syscall address,
sometimes last tlb miss or break(if "as nop" is disabled).
Unlike the pc, this one doesn't change after a crash and has much lower latency.
Thus meaning it's better at diagnosing problems.

VU0 Registers

Register W Z Y X Register W Z Y X
vf00 0x103000000C 0x1030000008 0x1030000004 0x1030000000 vf17 0x103000011C 0x1030000118 0x1030000114 0x1030000110
vf01 0x103000001C 0x1030000018 0x1030000014 0x1030000010 vf18 0x103000012C 0x1030000128 0x1030000124 0x1030000120
vf02 0x103000002C 0x1030000028 0x1030000024 0x1030000020 vf19 0x103000013C 0x1030000138 0x1030000134 0x1030000130
vf03 0x103000003C 0x1030000038 0x1030000034 0x1030000030 vf20 0x103000014C 0x1030000148 0x1030000144 0x1030000140
vf04 0x103000004C 0x1030000048 0x1030000044 0x1030000040 vf21 0x103000015C 0x1030000158 0x1030000154 0x1030000150
vf05 0x103000005C 0x1030000058 0x1030000054 0x1030000050 vf22 0x103000016C 0x1030000168 0x1030000164 0x1030000160
vf06 0x103000006C 0x1030000068 0x1030000064 0x1030000060 vf23 0x103000017C 0x1030000178 0x1030000174 0x1030000170
vf07 0x103000007C 0x1030000078 0x1030000074 0x1030000070 vf24 0x103000018C 0x1030000188 0x1030000184 0x1030000180
vf08 0x103000008C 0x1030000088 0x1030000084 0x1030000080 vf25 0x103000019C 0x1030000198 0x1030000194 0x1030000190
vf09 0x103000009C 0x1030000098 0x1030000094 0x1030000090 vf26 0x10300001AC 0x10300001A8 0x10300001A4 0x10300001A0
vf10 0x10300000AC 0x10300000A8 0x10300000A4 0x10300000A0 vf27 0x10300001BC 0x10300001B8 0x10300001B4 0x10300001B0
vf11 0x10300000BC 0x10300000B8 0x10300000B4 0x10300000B0 vf28 0x10300001CC 0x10300001C8 0x10300001C4 0x10300001C0
vf12 0x10300000CC 0x10300000C8 0x10300000C4 0x10300000C0 vf29 0x10300001DC 0x10300001D8 0x10300001D4 0x10300001D0
vf13 0x10300000DC 0x10300000D8 0x10300000D4 0x10300000D0 vf30 0x10300001EC 0x10300001E8 0x10300001E4 0x10300001E0
vf14 0x10300000EC 0x10300000E8 0x10300000E4 0x10300000E0 vf31 0x10300001FC 0x10300001F8 0x10300001F4 0x10300001F0
vf15 0x10300000FC 0x10300000F8 0x10300000F4 0x10300000F0 ACC 0x103000020C 0x1030000208 0x1030000204 0x1030000200
vf16 0x103000010C 0x1030000108 0x1030000104 0x1030000100
Register Address Register Address
vi00 0x1030000210 Status 0x1030000310??
vi01 0x1030000220 MACflag 0x1030000320??
vi02 0x1030000230 Clipflag 0x1030000330??
vi03 0x1030000240 c2c19 0x1030000340??
vi04 0x1030000250 R 0x1030000350??
vi05 0x1030000260 I 0x1030000360
vi06 0x1030000270 Q 0x1030000590
vi07 0x1030000280 c2c23 0x1030000380??
vi08 0x1030000290 c2c24 0x1030000390??
vi09 0x10300002A0 c2c25 0x10300003A0??
vi10 0x10300002B0 TPC 0x10300003B0
vi11 0x10300002C0 CMSAR0 0x10300003C0??
vi12 0x10300002D0 FBRST 0x10300003D0
vi13 0x10300002E0 VPU-STAT 0x10300003E0??
vi14 0x10300002F0 CMSAR1 0x10300003F0??
vi15 0x1030000300 c2c30 0x1030000400??

VU1 Registers

Register W Z Y X Register W Z Y X
vf00 0x104000000C 0x1040000008 0x1040000004 0x1040000000 vf17 0x104000011C 0x1040000118 0x1040000114 0x1040000110
vf01 0x104000001C 0x1040000018 0x1040000014 0x1040000010 vf18 0x104000012C 0x1040000128 0x1040000124 0x1040000120
vf02 0x104000002C 0x1040000028 0x1040000024 0x1040000020 vf19 0x104000013C 0x1040000138 0x1040000134 0x1040000130
vf03 0x104000003C 0x1040000038 0x1040000034 0x1040000030 vf20 0x104000014C 0x1040000148 0x1040000144 0x1040000140
vf04 0x104000004C 0x1040000048 0x1040000044 0x1040000040 vf21 0x104000015C 0x1040000158 0x1040000154 0x1040000150
vf05 0x104000005C 0x1040000058 0x1040000054 0x1040000050 vf22 0x104000016C 0x1040000168 0x1040000164 0x1040000160
vf06 0x104000006C 0x1040000068 0x1040000064 0x1040000060 vf23 0x104000017C 0x1040000178 0x1040000174 0x1040000170
vf07 0x104000007C 0x1040000078 0x1040000074 0x1040000070 vf24 0x104000018C 0x1040000188 0x1040000184 0x1040000180
vf08 0x104000008C 0x1040000088 0x1040000084 0x1040000080 vf25 0x104000019C 0x1040000198 0x1040000194 0x1040000190
vf09 0x104000009C 0x1040000098 0x1040000094 0x1040000090 vf26 0x10400001AC 0x10400001A8 0x10400001A4 0x10400001A0
vf10 0x10400000AC 0x10400000A8 0x10400000A4 0x10400000A0 vf27 0x10400001BC 0x10400001B8 0x10400001B4 0x10400001B0
vf11 0x10400000BC 0x10400000B8 0x10400000B4 0x10400000B0 vf28 0x10400001CC 0x10400001C8 0x10400001C4 0x10400001C0
vf12 0x10400000CC 0x10400000C8 0x10400000C4 0x10400000C0 vf29 0x10400001DC 0x10400001D8 0x10400001D4 0x10400001D0
vf13 0x10400000DC 0x10400000D8 0x10400000D4 0x10400000D0 vf30 0x10400001EC 0x10400001E8 0x10400001E4 0x10400001E0
vf14 0x10400000EC 0x10400000E8 0x10400000E4 0x10400000E0 vf31 0x10400001FC 0x10400001F8 0x10400001F4 0x10400001F0
vf15 0x10400000FC 0x10400000F8 0x10400000F4 0x10400000F0 ACC 0x104000020C 0x1040000208 0x1040000204 0x1040000200
vf16 0x104000010C 0x1040000108 0x1040000104 0x1040000100
Register Address Register Address
vi00 0x1040000210 vi16 0x1040000310??
vi01 0x1040000220 vi17 0x1040000320??
vi02 0x1040000230 vi18 0x1040000330??
vi03 0x1040000240 vi19 0x1040000340??
vi04 0x1040000250 vi20 0x1040000350??
vi05 0x1040000260 vi21 0x1040000360
vi06 0x1040000270 vi22 0x1040000370??
vi07 0x1040000280 vi23 0x1040000380??
vi08 0x1040000290 vi24 0x1040000390??
vi09 0x10400002A0 vi25 0x10400003A0??
vi10 0x10400002B0 vi26 0x10400003B0
vi11 0x10400002C0 vi27 0x10400003C0??
vi12 0x10400002D0 vi28 0x10400003D0
vi13 0x10400002E0 vi29 0x10400003E0??
vi14 0x10400002F0 vi30 0x10400003F0??
vi15 0x1040000300 vi31 0x1040000400??

Open CL and Floats

In this part, we describe the PS4 native Floating point support and OpenCL information, for both CPU and GPU. The understanding of floating point conversion is very important for emulating the PS2. The information below came from this gist.

CPU

Info Value
Device Name CXD90026AG - DG1002FGF84HT
Device Vendor AuthenticAMD
Device Vendor ID 0x1022
Device OpenCL C Version OpenCL C 1.2 pocl
Device Type CPU
Max compute units 8
Max work item dimensions 3
Max work item sizes 4096x4096x4096
Max work group size 4096
Preferred work group size multiple 8
Half-precision Floating-point support (n/a)
Single-precision Floating-point support (core)
Denormals Yes
Infinity and NANs Yes
Round to nearest Yes
Round to zero Yes
Round to infinity Yes
IEEE754-2008 fused multiply-add No
Support is emulated in software No
Correctly-rounded divide and sqrt operations Yes
Double-precision Floating-point support (cl_khr_fp64)
Denormals Yes
Infinity and NANs Yes
Round to nearest Yes
Round to zero Yes
Round to infinity Yes
IEEE754-2008 fused multiply-add Yes
Support is emulated in software No
Execution capabilities
Run OpenCL kernels Yes
Run native kernels Yes
SPIR versions 1.2
Device Extensions
 cl_khr_byte_addressable_store
 cl_khr_global_int32_base_atomics
 cl_khr_global_int32_extended_atomics
 cl_khr_local_int32_base_atomics
 cl_khr_local_int32_extended_atomics
 cl_khr_3d_image_writes 
 cl_khr_spir
 cl_khr_fp64 
 cl_khr_int64_base_atomics
 cl_khr_int64_extended_atomics 

GPU

Info Values
Device Name AMD LIVERPOOL
Device Vendor AMD
Device Vendor ID 0x1002
Device Version OpenCL 1.1
Device OpenCL C Version OpenCL C 1.1
Device Type GPU
Max compute units 18
Max work item dimensions 3
Max work item sizes 256x256x256
Max work group size 256
Compiler Available Yes
Preferred work group size multiple 64
Half-precision Floating-point support (cl_khr_fp16)
Denormals No
Infinity and NANs Yes
Round to nearest Yes
Round to zero No
Round to infinity No
IEEE754-2008 fused multiply-add No
Support is emulated in software No
Single-precision Floating-point support (core)
Denormals No
Infinity and NANs Yes
Round to nearest Yes
Round to zero No
Round to infinity No
IEEE754-2008 fused multiply-add No
Support is emulated in software No
Correctly-rounded divide and sqrt operations No
Double-precision Floating-point support (cl_khr_fp64)
Denormals Yes
Infinity and NANs Yes
Round to nearest Yes
Round to zero Yes
Round to infinity Yes
IEEE754-2008 fused multiply-add Yes
Support is emulated in software No
Execution capabilities
Run OpenCL kernels Yes
Run native kernels No
Device Extensions
cl_khr_byte_addressable_store
cl_khr_byte_addressable_store
cl_khr_global_int32_base_atomics 
cl_khr_global_int32_extended_atomics
cl_khr_local_int32_base_atomics
cl_khr_local_int32_extended_atomics
cl_khr_int64_base_atomics
cl_khr_int64_extended_atomics
cl_khr_fp64
cl_khr_fp16

PS3 Configuration support

The PS2 emulator of the PS4 supports configurations in the known format from ps2_netemu/ps2classic that came from the PS3. This feature was officially used in Arc the Lad Twilight of the Spirits ps2-ps4 classic. To enable PS3 style configuration, add this to config-emu-ps4.txt:

--lopnor-config=1
--ps2-title-id=TITLE-ID

The configuration file needs to be in folder ...'''/patches/{TITLE-ID}/''' and the file need to have name '''{TITLE-ID}_lopnor.cfgbin'''. The Title ID needs to be in XXXX-YYYYY format (ex. SLUS-12345). Example path: /patches/SLUS-12345/SLUS-12345_lopnor.cfgbin. A tester confirmed that configurations work as is without even the need to edit them.
Please keep in mind that not all PS3 commands are recognized, only 0x01 (can depend upon emu revision), 0x09, 0x0A, 0x0B, 0x0F, 0x10, 0x26, 0x27 and 0x42.
For example, the Rayman 3 configuration does not work due to the command being unsupported on PS4.
Command 0x07 is NOT recognized, but can be manually translated to CLI configuration (to "--vu-xgkick-delay=value").
Same goes for command 0x11 (--vu0-accurate-addsub-range can be used).

Known issues

Issue Games affected Solution Description
No support for EE Cache Ice Age 2, DOA2: Extreme, Nascar 2009, Barnyard, Others Lua patches to the EE memory and picking the right emulator
Incorrect GIF speed Taz Wanted, The Matrix, Batman Begins, Dynasty warriors 5 Empires, others. For a fast GIF: eeObj.SchedulerDelayEvent("gif.dma", 0x10500) end). For a slow GIF, there is seemingly no solution. Some games need a fast GIF timing, and others need a slow one.
Unknown IOP issues Genji - Dawn of the Samurai, Wild Arms 4 A number of issues can be at play here; IOP's cycle speed, for example, is 2x overclocked, CDVD's read speed and the SIF's speed are unknown.
Missing COP2 pipeline emulation. other games affected by COP2 timing Rearranging code through lua patches. While COP2 is a part of EE, in terms of emulation it's a separate processor that can run on its own. Consequently, some operations take a long time while EE still minds own its business. Some games abuse this and do their own thing, knowing that COP2 calculation takes an expected number of cycles. On this emu, every COP2 opcode is instant, which break games that expect it to take some time.
VU0 is not running in sync with EE core 24 The Game, ATV Quad Power Racing 2, Ghosthunter, Rayman Arena, Rayman 3, Largo winch, Ratchet and clank games. All games using M-bit. EE hook AdvanceClock or fastforwardclock commands on affected addresses to push VU0 ahead while stalling EE, setting the value of 5 to ee cycle scalar, and patches to rearrange code. Most of the time, it will be CTC2/QMTC2 instructions with interlock that are affected. Emulator kickstarts VU0 for 256 cycles, while reporting that 512 cycles passed. Yup, we are out of sync right from the start of VU0 mpg because people working for $ony don't know that VU0 run at EE MHz, not at EE bus MHz. Not to mention, that a 256 cycles kickstart is too much even on the correct speed. Later things just got worse. This issue can be partially replicated on Pcsx2 if you overclock the EE by +3
FPU/VU math inaccuracies. Koun, Tony hawk games, Devil may cry 3, Gun, TY the Tasmanian Tiger 3, Beyond Good & Evil, MTX Mototrax, Max payne, Bully, Jackie chan adventures, Wild arms 3, Pac-man World 3, Gran turismo 4, Many others Lua patches to the EE memory, accurate math commands. PS2 use really obscure floating point math, only one guard bit is used in calculations. PCSX2 hack it with different rounding modes, emu on ps4 fix it with soft floats, usually applied per offset. Sometime with patches directly to affected code (THPS engine).


It's worth noting that pcsx2 by default applies "accurate add/sub" for every single FPU opcode, and only to fpu opcodes. That's why accurate add/sub is needed on the PS4 while pcsx2 is happy with its default settings.

M-Bit support is broken Every game that uses M-Bit. Totally Spies! Totally Party, Mike Tyson Heavyweight Boxing, My Street, Crash Twinsanity, Marvel Nemesis, Panzer Elite Action - Fields of Glory, Super Monkey Ball Adventure, most Eko Software games, and many more. [2] Lua patches to the EE memory While emulator respect m-bit, way that VU0 work on it make it broken most of times (check "VU0 is not running in sync with EE core" issue).
Multitap doesn't support all games Urban reign, Digimon Rumble Arena 2, others Lua patches Emulator expect PS4 to be able to use 8 controllers (well, who doesn't? Even PS1 can do it...). That cause all kind of mess with controller detection when game expect multitap in second port.
DMA writes when busy signal is engaged Ratchet and Clank games, Metal gear solid 2, others None yet AKA eetiminghack
VIF1 runs too fast Urban reign, Avatar, PaRappa The Rapper 2, Eternal Poison, Soul Calibur 2, Soul Calibur 3, Others Using LUA's SchedulerDelayEvent command or Using CLI'S vif1-instant-xfer command Sony wanted to improve the performance, which is the reason VIF1 is instant. The lua's command can be customizable to set the delay period, the cli can't, therefore lua's command is much more compatible
Reading VU TPC registers returns wrong values Street Fighter 3 EX(VU0), R: Racing Revolution(VU0), Spiderman 3 (VU0, in T-Bit handler...), Edge of Reality games(VU1) Patches in lua. In this emu TPC stores full addresses, which is wrong. Real hardware keep there addr >> 3. Worth noting that EoR games read VU1 TPC in a nasty way, accessing 0x43A0(VU1 TPC) from COP2 code.
VIF command interrupts handled before VIFn_CODE is updated. Onimusha Blade Warriors Fixed by patch in intr handler. This is very specific case because Onimusha check VIFn_CODE register in interrupt handler and do nothing if code is not 0x80 (NOP with I). But VIFn_CODE seems to be updated after interrupt is handled. This practically makes everything out of sync later as interrupts are happening, but handler does nothing about them.
CDVD register 0x1F402038 (KeysValid) return wrong result. Every "SCCS" game Patches in lua. Likely specific to NTSC-C releases, because that region uses special SDK. This issue makes cdvdman become stuck on any request because it thinks that the cdvd key is invalid.
Lack of CDVD error handling Demon Chaos, Spyro A new Beginning, Silent Hill 2 Black Ribbon, games from pcsx2 #5174 PR. Patches in lua if needed. One correctly supported error is SCECdErABRT, rest is just not handled or what's worst trigger emu panic on purpose like SCECdErILI (but not for 0 sector request - Spyro). Some affected games can still work if error is just accidental and not checked by game code.
Corrupted SIF0 transfer when not full QW is send by IOP True Crime: LA, PDC DC 2008, Street Racing Syndicate(1.03) Patches in lua. IOP is able to send words by SIF0, EE DMAC can only transfer Quadwords. When IOP send not full QW real hardware use whatever was in buffer from previous transfer for missing words (only words that are requested by iop are overwritten in transfer buffer). Emu probably memset 0 that part.

PCSX2 glitches not present on PS4

This is a list of glitches that the PS4 does not suffer from, as opposed to PCSX2.
Issue PCSX2's fix Games affected Description PCSX2 issue no.
Natively fixed
Bad FPU math Disabling EE recompiler / Janky GameDB patch Armored Core Nine Breaker The AI becomes stuck on some levels, working only when EE recompiler's disabled #8587
? Enabling EETimingHack Pac-Man World 2 Hanging in Butane Pain, Ghost Bayou, Pinky's Revenge and Clyde in the Caldera levels. Unavailable
? Unavailable Persona 3 Stuttering noise when saving #7316
? Unavailable Mega Man X8 Flickering subtitles on FMVS #5192
Bad timing. Unavailable Spyro Enter the Dragonfly Audio-video desync #8286
? Unavailable Petit Copter 2 In-game hang #10380
? Unavailable Yu-Gi-Oh! The Duelists of the Roses In-game data corruption (?) leading to a hang #11576
IPU running faster than it should? Janky patch Flame of Recca: Final Burning #11335
Bad timing Unavailable Ape Escape 3 Sudden burst of in-game speed at some random points in the map Unavailable
? vu0RoundMode: 2 Ape Escape 3 The character's buster malforms when spawning anew #11386
Fixed by using certain commands
Inaccurate COP2 add/sub implementation Unavailable Driv3r AI cop car drives at the incorrect direction (Fixed on PS4 with accurate COP2 add/sub) #11714

PS2 Bios

Description

The PS2 BIOS is the file PS20220WD20050620.crack included in every PS2 game .pkg. It is the same BIOS used by Sony in PS3's ps2_netemu.self. The lack of many X modules here means that homebrew compatibility is limited, as many of those need to be recompiled to use non X versions of modules, or need to load open source versions of them through MC/CDVD. An important non X module that is missing is LIBSD, therefore, homebrews that require it will likely fail to boot, or cause an error.

This PS2 BIOS is known to blacklist some titles, and refuse to boot them. This includes all titles with the 00000000 000000A0 flag, documented here.

More about the PS2 BIOS

The version of the PS2 BIOS seems to be the developement v2.20 from the Japanese region (22/01/2007), and is not limited to booting only NTSC-J games.
The PS2 emulator does not support USB peripherals, but this seems not to be a limitation of the BIOS, as it is used also in CECH C/E PS3 consoles. 
There are signs that different PS2 BIOS versions exist, named PS20190AC20030623_nordram_miniOSD.bin. This PS2 BIOS has included handy extensions for debugging, and can debug print with "debug osd verbosity" from CLI set to "verbose". The most noticeable difference for both BIOS files seems to be the special RDRAM module.

Whilst the PS3 patches its PS2 BIOS to preferred regions, the PS4 uses a so called CallHook which is better known for PCSX2 users as fastboot. For more information about this patch, look at PCSX2's fastboot code. It is the same code except that PS2 emulators for PS4 do not have patches for different BIOS revisions.

PS2 BIOS file information:

File name: PS20220WD20050620.crack
MD5: 83AD2B530C9C102A561BA1CDC6D996D5

Files inside ROM image

File Offset in exported bin Description File type (exportable)
RESET 0x00 Bootstrap code for the EE and IOP. BIN
ROMDIR 0x2780 The ROMDIR part of the ROM image, which provides information on the location and name of files contained in the image. BIN
EXTINFO 0x2CC0 Contains the "EXTINFO" for all files in the ROM image. BIN
SBIN 0x3330 Seems to be the pad controller library for the PS1 monitor. BIN
LOGO 0xA2D0 PS1 logo? BIN
IOPBTCONF 00x1EA20 Boot configuration file for the IOP, during the final phase of the IOP reset. If no UDNL module is specified, the IOP will only have a single IOP reset in the reboot process, with the modules listed in IOPBTCONF. BIN
IOPBTCON2 0x1EB10 Boot configuration file for the IOP, for the first phase of the IOP reset (before UDNL is loaded). BIN
SYSMEM 0x1EBE0 System Memory Manager. ELF
LOADCORE 0x1FE00 The core of IOP module loading. Provides the lowest level of IOP module loading functions. Also handles the startup of the IOP. ELF
EXCEPMAN 0x22380 Exception manager. ELF
INTRMANP 0x22F60 Interrupt Manager. According to wisi, it is for PS mode. ELF
INTRMANI 0x24970 Interrupt Manager. According to wisi, it is for IOP mode. ELF
SSBUSC 0x267B0 SSBUS Controller library. The SSBUS seems to be the bus that all peripherals get connected to. It seems to have the power to control the mapping of the device registers, as well as access timing. ELF
TIMEMANP 0x26F20 Timer Manager (PS mode) ELF
TIMEMANI 0x27B00 Timer Manager (IOP mode) ELF
DMACMAN 0x28730 DMA Controller Manager. ELF
SYSCLIB 0x2BE30 System C Library. ELF
HEAPLIB 0x2E590 Memory HEAP LIBrary (i.e. thvpool, thfpool) ELF
THREADLIB 0x2F290 Multi_Thread_Manager ELF
VBLANK 0x38020 V-Blank management ELF
IOMAN 0x38DB0 IO Manager ELF
MODLOAD 0x3AD20 IOP module loader. ELF
ROMDRV 0x3D070 ROM driver. Provides access to the boot ROM (rom0). ELF
ADDDRV 0x3DF60 Adds support for the DVD ROM (rom1:), via ROMDRV. ELF
STDIO 0x3D3C0 Standard I/O library. ELF
SIFMAN 0x3EFB0 SIF manager. ELF
SIFINIT 0x40550 Initializes the SIF. ELF
EESYNC 0x40970 For synchronizing with the EE, at the end of IOP resets. EESYNC from DNAS images are evil; they also perform a memory wipe of the region from 0x00084000 to .0x00100000. ELF
EENULL 0x40E10 The idle thread (id #0) module, in ps2 loaded to 0x00081FC0. BIN
PS1ID 0x40E50 Only found in newer boot ROMs BIN
LIBFI 0x40E60 Not present in the boot ROM of the SCPH-10000 and SCPH-15000. BIN
PS1VERJ 0x40F50 BIN
PS1VERA 0x40F60 BIN
PS1VERE 0x40F70 BIN
PS1VERC 0x40F80 BIN
PS1VERH 0x40F90 BIN
OSDSYS 0x40FA0 The browser BIN
- 0x40FB0 BIN
RDRAM 0x41000 Provides a RDRAM test for the EE at power-on. This is run from RESET. BIN
EELOADCNF 0x43D50 Contains the IOP boot configuration file for EELOAD. BIN
SIFCMD 0x43F00 SIF command module. Contains the SIF command and SIF RPC functions. ELF
REBOOT 0x46140 The reboot service. Receives IOP reset packets from the EE, from across the SIF. ELF
LOADFILE 0x46910 The RPC server for MODLOAD ELF
EECONF 0x49070 Loads part of the system configuration from the MECHACON EEPROM. Also configures and resets some peripherals, depending on the model version. In slimlines, and possibly on PS3 EECONF will also load the MAC address. ELF
- 0x49FF0 BIN
IOPBOOT 0x4A000 IOP bootup program BIN
- 0x4B160 BIN
TBIN 0x4B800 The PS1 monitor program. Seems to be the PS1 BIOS. This is started by RESET, when the IOP is in PS1 mode. BIN
XSHA1 0x59770 sha1 - this only present in PS3. It is used as additional antipiracy check. It seems that it calculate disc main elf checksum and compares it with some database. Config related? ELF
XLOADFILE 0x5A740 Updated module ELF
SIO2MAN 0x5D7F0 SIO2 manager. Provides access to the SIO2 interface. ELF
- 0x5F420 BIN
MCSERV 0x61340 RPC server for MCMAN. ELF
- 0x63040 BIN
KROMG 0x64000 BIN
- 0x65CC0 BIN
KROM 0x66000 Kanji ROM? Not sure where this is used. BIN
- 0x7FE70 BIN
ROMVER 0x7FF00 ROM version. BIN
- 0x7FF10 BIN
VERSTR 0x7FF30 Version string. Probably PS1 ROM will use this because that this string is also present in PlayStation consoles. BIN
- 0x7FF90 BIN
ROMGSCRT 0x80000 BIN
NCDVDMAN 0x82D30 It seems to be a heavily stripped-down CDVDMAN module, with no support for some S-command functions like sceCdRI. ELF
SECRMAN 0x8F770 Security Manager. Signing is NOT done with the one in ROM, but with a special version that comes with the utility discs. Looks like PS3 units have a different SECRMAN module from retail sets, similar to PS2 TOOL one. ELF
MCMAN 0x93C30 Memory Card Manager. ELF
PADMAN 0xA30C0 Pad manager. ELF
CDVDMAN 0xAC810 The CD/DVD manager. ELF
CDVDFSV 0xB4BC0 The RPC server for CDVDMAN. ELF
FILEIO 0xBCF80 RPC server for IOMAN. Sony has greatly changed the semantics and design of FILEIO after some point. Connecting an old FILEIO EE RPC client to a newer server will result in a severe IOP crash. ELF
CLEARSPU 0xBF080 Seems to clear/reset the SPU, but is known to cause crashes under some conditions. Not sure if it's buggy or not. Only used by the OSDSYS of the SCPH-10000 and SCPH-15000, probably retained for backward-compatibility. ELF
UDNL 0xC0CC0 It is responsible for selecting the modules and starting the IOP, during the final phase of the IOP reset where the desired modules are to be loaded into the IOP. ELF
IGREETING 0xC2BC0 Displays boot information (i.e. IOP boot type, EBOOTP, IBOOTP, switch positions for DSW602 and the type of DSW602 board installed ELF
EELOAD 0xC3C20 The EE ELF loader, which is loaded by LoadExecPS2() to 0x00082000 in PS2 for loading ELFs. BIN
XCDVDMAN 0xD2DA0 cdvd_driver - Updated module ELF
XCDVDFSV 0xE1B30 cdvd_ee_driver - Updated module ELF
OSDSND 0xEFF60 OSD sound library. This is actually the tentative sound driver, which is called "librspu2" in the Sony SDK. ELF
PS2LOGO 0x11ABB0 Displays the PlayStation 2 logo from the inserted disc. For newer consoles, if the logo cannot be decrypted properly, it will fall back to the browser. Not actually required to boot games, but the Sony OSDSYS boots PS2 games through this program. ELF
XPARAM2 0x137500 File store per title settings for IOP emulation (XPARAM available also in real PS2 since 750XX where Deckard powerPC was introduced) ELF
OSDSYS 0x139A00 The browser BIN
PIOPRP 0x177880 Present in the PS3 ps2_(gx/soft/net)emu; contains version 3.1.0 of the IOP software (compared to version 1.3.4 on the root). BIN
KERNEL 0x1BB7E0 The EE kernel BIN

Description source: https://gist.github.com/uyjulian/25291080f083987d3f3c134f593483c5

Game_ID/DiscID in PS20220WD20050620.crack

There are 193 titleIDs listed inside XPARAM2.ELF file of PS2 BIOS included in PS20220WD20050620.crack. XPARAM2.ELF is called by OSDSYS, then ID check is performed. If titleID match to one of included in the table, different IOP emulation settings are applied. This include blacklisting for some specific titles. 

The original PS2 BIOS from models with emulated IOP, include a similar list file called XPARAM.ELF. The Title IDs there are not the same, although some of them exist on both lists.
Command Name
0x00 TITLE_MASK
0x01 SIO2_MASK
0x02 DEV9_MASK
0x03 USB_MASK
0x04 SIF_DMA_SYNC
0x05 SIF_DMA_LOAD
0x06 DMAC_CH10_INT_DELAY
0x07 MECHA_RECOGTIME
0x08 CPU_DELAY
0x09 DEV5_INT_SPEED
0x0A CDVD_READ_DELAY
0x0B SPU2_BEHAVIOR
ID Title Command Value Remarks
PBPX_952.01 DVD Utility Disc Version 1.00 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.02 DVD Utility Disc Version 1.01 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.03 DVD Utility Disc Version 1.01 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.06 DVD Player (Version 2.01) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.07 DVD Player (Version 2.10) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.08 DVD Player (Version 2.10) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.09 DVD Player (Version 2.10) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.10 DVD Utility Disc Version 2.10 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.11 DVD Utility Disc Version 1.00 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.21 DVD Player (Version 2.12) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.22 DVD Player (Version 2.14) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.24 DVD Player (Version 2.16) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.28 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.35 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_952.39 Online Start Up Disc v3.0 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_955.01 Linux for PS2 Beta Release 1 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_955.07 Playstation 2 Linux Runtime Environment v1.0 (Disc 1) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_955.09 Linux for PS2 Release 1.0 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PBPX_955.18 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PDPX_991.09 DVD Player (Version 3.04) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PSXC_002.01 PSX Update Disc 1.10 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PSXC_002.02 PSX Update Disc 1.20 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PSXC_002.03 PSX Update Disc 1.31 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
PTPX_970.38 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCAJ_201.25 Tekken 5 0x0B 0x40000000 SPU2_BEHAVIOR
SCAJ_201.26 Tekken 5 0x0B 0x40000000 SPU2_BEHAVIOR
SCES_532.02 Tekken 5 0x0B 0x40000000 SPU2_BEHAVIOR
SCKA_200.49 Tekken 5 0x0B 0x40000000 SPU2_BEHAVIOR
SCPM_621.15 0x00 0x1000000 TITLE_MASK
SCPM_621.16 0x00 0x1000000 TITLE_MASK
SCPN_601.01 PlayStation BB Navigator (Version 0.10) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPN_601.30 PlayStation BB Navigator (Version 0.20) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPN_601.40 PlayStation BB Navigator (Version 0.30) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPN_601.50 PlayStation BB Navigator (Version 0.31) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPN_601.60 PlayStation BB Navigator (Version 0.32) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPS_110.01 I.Q. Remix 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPS_110.10 Yoake no Mariko (Performance Pack Edition) 0x01 0x1800 SIO2_MASK
SCPS_110.18 Yoake no Mariko 0x01 0x1800 SIO2_MASK
SCPS_110.21 Yoake no Mariko 2nd Act (Limited Edition) 0x01 0x1800 SIO2_MASK
SCPS_110.22 Yoake no Mariko 2nd Act 0x01 0x1800 SIO2_MASK
SCPS_150.38 Lifeline 0x0A 0x80300 CDVD_READ_DELAY
SCPS_150.39 Lifeline 0x0A 0x80300 CDVD_READ_DELAY
SCPS_170.01 Gran Turismo 4 0x0B 0x10000000 SPU2_BEHAVIOR
SCPS_175.01 Linux (for PlayStation2) Release 1.0 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SCPS_200.39 0x00 0x4000000 TITLE_MASK
SCUS_971.67 PaRappa the Rapper 2 0x04 0x2000 SIF_DMA_SYNC
SCUS_972.69 Final Fantasy XI [Disc 2] 0x02 0xB DEV9_MASK
SLES_500.48 Donald Duck: Quack Attack 0x01 0x800 SIO2_MASK
SLES_500.62 Orphen: Scion of Sorcery 0x08 0xC1C CPU_DELAY
SLES_503.64 City Crisis 0x0A 0x80BB8 CDVD_READ_DELAY
SLES_504.46 Shadow Man 2: The Second Coming 0x0A 0x80600 CDVD_READ_DELAY
SLES_505.40 Simpsons: Road Rage 0x01 0x800 SIO2_MASK
SLES_506.08 Shadow Man 2: The Second Coming 0x0A 0x80600 CDVD_READ_DELAY
SLES_506.28 Simpsons: Road Rage 0x01 0x800 SIO2_MASK
SLES_507.28 Tiger Woods PGA Tour 2002 0x0A 0x803E8 CDVD_READ_DELAY
SLES_507.29 0x0A 0x803E8 CDVD_READ_DELAY
SLES_512.82 Tiger Woods PGA Tour 2003 0x0A 0x803E8 CDVD_READ_DELAY
SLES_514.79 Def Jam Vendetta 0x01 0x802 SIO2_MASK
SLES_518.41 SpyHunter 2 0x01 0x800 SIO2_MASK
SLES_518.44 Time Crisis 3 0x01 0x800 SIO2_MASK
SLES_519.97 SWAT: Global Strike Team 0x01 0x800 SIO2_MASK
SLES_520.97 SWAT: Global Strike Force 0x01 0x800 SIO2_MASK
SLES_530.37 Super Monkey Ball Deluxe 0x01 0x802 SIO2_MASK
SLES_536.68 Micro Machines v4 0x01 0x801 SIO2_MASK
SLES_537.55 Castlevania: Curse of Darkness 0x04 0x10 SIF_DMA_SYNC
SLES_537.96 FIFA Street 2 0x01 0x1800 SIO2_MASK
SLPM_620.42 Kurogane no Houkou: Warship Commander 0x01 0x3000 SIO2_MASK
SLPM_620.62 Gitaroo Man One 0x0A 0x80540 CDVD_READ_DELAY
SLPM_621.05 Taikou Risshiden IV 0x09 0x2B47000A DEV5_INT_SPEED
SLPM_621.24 Ready 2 Rumble Boxing: Round 2 0x08 0x1388 CPU_DELAY
SLPM_621.25 Gauntlet: Dark Legacy 0x08 0xC1C CPU_DELAY
SLPM_621.25 Gauntlet: Dark Legacy 0x09 0x2B470005 DEV5_INT_SPEED
SLPM_621.35 Final Fantasy: XI (Beta Version) 0x00 0xA0000000 TITLE_MASK, 0xA0000000 = Blacklist, boot after removing flag
SLPM_621.54 DDRMAX Dance Dance Revolution 6thMix 0x08 0x1A5E CPU_DELAY
SLPM_622.39 Supercar Street Challenge 0x0A 0x80300 CDVD_READ_DELAY
SLPM_623.69 Karaoke Revolution: J-Pop Vol.1 0x08 0x1388 CPU_DELAY
SLPM_623.79 Karaoke Revolution: J-Pop Vol.2 0x08 0x1388 CPU_DELAY
SLPM_623.80 Karaoke Revolution: J-Pop Vol.3 0x08 0x1388 CPU_DELAY
SLPM_623.81 Karaoke Revolution: J-Pop Vol.4 0x08 0x1388 CPU_DELAY
SLPM_623.82 Karaoke Revolution: Love & Ballad 0x08 0x1388 CPU_DELAY
SLPM_623.83 Karaoke Revolution: Night Selection 2003 0x08 0x1388 CPU_DELAY
SLPM_624.14 Karaoke Revolution: Dreams & Memories 0x08 0x1388 CPU_DELAY
SLPM_624.37 Suisui Sweet: Amai Ai no Mitsukekata 0x0B 0x40000000 SPU2_BEHAVIOR
SLPM_624.50 Karaoke Revolution: Anime Song Selection 0x08 0x1388 CPU_DELAY
SLPM_624.51 Karaoke Revolution: J-Pop Vol.5 0x08 0x1388 CPU_DELAY
SLPM_624.54 Karaoke Revolution: J-Pop Vol.6 0x08 0x1388 CPU_DELAY
SLPM_624.55 Karaoke Revolution: J-Pop Vol.7 0x08 0x1388 CPU_DELAY
SLPM_624.56 Karaoke Revolution: J-Pop Vol.8 0x08 0x1388 CPU_DELAY
SLPM_624.57 Karaoke Revolution: Snow & Party 0x08 0x1388 CPU_DELAY
SLPM_624.64 Pop'n Taisen Pazurudame Online 0x08 0x1F40 CPU_DELAY
SLPM_624.79 Karaoke Revolution: J-Pop Vol.9 0x08 0x1388 CPU_DELAY
SLPM_624.91 Mega Man: The Power Battle 0x04 0x2000 SIF_DMA_SYNC
SLPM_624.92 Karaoke Revolution: Kids Song Selection 0x08 0x1388 CPU_DELAY
SLPM_625.28 Karaoke Revolution: Kazoku Idol Sengen (Bundle Edition) 0x08 0x1388 CPU_DELAY
SLPM_625.29 Karaoke Revolution: Kazoku Idol Sengen 0x08 0x1388 CPU_DELAY
SLPM_650.86 A Visual Mix: Ayumi Hamasaki Dome Tour 2001 (Disc 1) 0x08 0x1450 CPU_DELAY
SLPM_650.87 A Visual Mix: Ayumi Hamasaki Dome Tour 2001 (Disc 2) 0x08 0x1450 CPU_DELAY
SLPM_650.90 Spy Hunter 0x01 0x1800 SIO2_MASK
SLPM_651.97 Nobunaga's Ambition Online 0x02 0xB DEV9_MASK
SLPM_652.09 Star Ocean: Till the End of Time 0x0B 0x20014 SPU2_BEHAVIOR
SLPM_654.38 Star Ocean: Till the End of Time (Director's Cut) (Disc 1) 0x0B 0x20014 SPU2_BEHAVIOR
SLPM_654.39 Star Ocean: Till the End of Time (Director's Cut) (Disc 2) 0x0B 0x20014 SPU2_BEHAVIOR
SLPM_654.88 Grand Theft Auto: Vice City 0x0A 0x300 CDVD_READ_DELAY
SLPM_654.88 Grand Theft Auto: Vice City 0x09 0x36000200 DEV5_INT_SPEED
SLPM_656.33 I Love Baseball: Pro Yakyu wo Koyonaku 0x08 0xFA0 CPU_DELAY
SLPM_656.98 Love Songs: ADV Futaba Riho 14-sai Natsu 0x0A 0x80380 CDVD_READ_DELAY
SLPM_657.05 Final Fantasy XI: Chains of Promathia (Expansion Disc) 0x02 0xB DEV9_MASK
SLPM_657.06 Final Fantasy XI: Chains of Promathia (All-In-One Edition) 0x02 0xB DEV9_MASK
SLPM_657.19 Burnout 3: Takedown 0x01 0x1C00 SIO2_MASK
SLPM_657.83 Nobunaga no Yabou Online: Tappi no Shou 0x02 0xB DEV9_MASK
SLPM_658.94 Winning Post 6: 2005 Version 0x01 0x2400 SIO2_MASK
SLPM_659.34 Maple Colors 0x0A 0x80300 CDVD_READ_DELAY
SLPM_659.53 Final Fantasy: XI (Entry Disc 2005) 0x02 0xB DEV9_MASK
SLPM_659.84 Grand Theft Auto: San Andreas 0x0A 0x803E8 CDVD_READ_DELAY
SLPM_660.33 The Sword of Etheria 0x08 0xC1C CPU_DELAY
SLPM_660.33 The Sword of Etheria 0x00 0x2000000 TITLE_MASK
SLPM_660.48 The Sword of Etheria 0x08 0xC1C CPU_DELAY
SLPM_660.48 The Sword of Etheria 0x00 0x2000000 TITLE_MASK
SLPM_660.57 Taito Memories Vol.1 0x08 0xCE4 CPU_DELAY
SLPM_661.56 Marheaven: Arm Fight Dream 0x01 0x1800 SIO2_MASK
SLPM_661.75 Akumajo Dracula: Yami no Juin 0x08 0x60 CPU_DELAY
SLPM_661.75 Akumajo Dracula: Yami no Juin 0x0B 0x2001C SPU2_BEHAVIOR
SLPM_663.93 Final Fantasy XI: Treasures of Aht Urhgan (All-In-One Edition) 0x0A 0x803E8 CDVD_READ_DELAY
SLPM_663.93 Final Fantasy XI: Treasures of Aht Urhgan (All-In-One Edition) 0x09 0x2B47000A DEV5_INT_SPEED
SLPM_663.93 Final Fantasy XI: Treasures of Aht Urhgan (All-In-One Edition) 0x02 0xB DEV9_MASK
SLPM_663.94 Final Fantasy XI: Treasures of Aht Urhgan 0x02 0xB DEV9_MASK
SLPM_664.36 Aria the Natural 0x01 0x1800 SIO2_MASK
SLPM_664.36 Aria the Natural 0x00 0xA000000 TITLE_MASK
SLPM_665.39 Nobunaga no Yabou Online: Haten no Shou 0x02 0xB DEV9_MASK
SLPM_665.58 Tomb Raider: Legend 0x08 0x3E8 CPU_DELAY
SLPM_665.74 Detective Evangelion 0x00 0x2000000 TITLE_MASK
SLPM_680.07 Karaoke Revolution (Trial) 0x08 0x1388 CPU_DELAY
SLPM_680.10 0x08 0x1388 CPU_DELAY
SLPS_200.08 Morita Shogi 0x08 0x1388 CPU_DELAY
SLPS_200.20 FIFA 2000 World Championship 0x04 0x2001 SIF_DMA_SYNC
SLPS_200.37 Go Go Golf 0x09 0x2B47000A DEV5_INT_SPEED
SLPS_200.38 Grappler Baki: Baki Saidai no Tournament 0x08 0x1194 CPU_DELAY
SLPS_200.53 Tenshi no Present: Marle Oukoku Monogatari (Limited Edition) 0x0B 0x20000000 SPU2_BEHAVIOR
SLPS_200.66 Tenshi no Present: Marle Oukoku Monogatari 0x0B 0x20000000 SPU2_BEHAVIOR
SLPS_201.01 City Crisis 0x0A 0x80BB8 CDVD_READ_DELAY
SLPS_201.11 Magical Sports Pro Baseball 2001 0x09 0x2B47000A DEV5_INT_SPEED
SLPS_201.72 Koushien: Konpeki no Sora 0x09 0x2B47000A DEV5_INT_SPEED
SLPS_201.73 Hard Hitter 2 0x0A 0x80300 CDVD_READ_DELAY
SLPS_201.97 Surfing Air Show with RatBoy 0x09 0x2B47000A DEV5_INT_SPEED
SLPS_201.99 F1 2002 0x0B 0x20005 SPU2_BEHAVIOR
SLPS_202.00 Final Fantasy XI 0x02 0xB DEV9_MASK
SLPS_204.04 Rakushou! Pachi-Slot Sengen 2 0x0A 0x80300 CDVD_READ_DELAY
SLPS_204.29 Hissatsu Pachi-Slot Evolution: Ninja Hattori-Kun V 0x08 0x1B58 CPU_DELAY
SLPS_204.55 Simple 2000 Series Vol.94: The Aka-Champion - Come on Baby 0x0B 0x40000000 SPU2_BEHAVIOR
SLPS_250.08 Sorcerous Stabber Orphen 0x08 0xC1C CPU_DELAY
SLPS_250.71 A Visual Mix: Ayumi Hamasaki Dome Tour 2001 0x08 0x1450 CPU_DELAY
SLPS_250.72 A Visual Mix: Ayumi Hamasaki Dome Tour 2001 0x08 0x1450 CPU_DELAY
SLPS_250.81 Saishuu Densha 0x0A 0x803E8 CDVD_READ_DELAY
SLPS_251.36 Kuon no Kizuna Sairin Mikotonori 0x0A 0x805DC CDVD_READ_DELAY
SLPS_251.42 Tiger Woods PGA Tour 2002 0x0A 0x803E8 CDVD_READ_DELAY
SLPS_251.50 Only You 0x0B 0x40000000 SPU2_BEHAVIOR
SLPS_252.37 Only You 0x0B 0x40000000 SPU2_BEHAVIOR
SLPS_252.75 Def Jam: Vendetta 0x01 0x802 SIO2_MASK
SLPS_252.78 Memories Off: Mix 0x0A 0x80300 CDVD_READ_DELAY
SLPS_252.90 Time Crisis 3 0x01 0x800 SIO2_MASK
SLPS_253.15 One Piece: Grand Battle 3 0x01 0x1800 SIO2_MASK
SLPS_253.57 3-Nen B-Gumi Kinpachi Sensei: Densetsu no Kyoudan ni Tate! 0x01 0x1800 SIO2_MASK
SLPS_253.79 Tokyo Majin Gakuen: Kaihoujyou Kefurokou 0x0A 0x803E8 CDVD_READ_DELAY
SLPS_254.06 Hitman: Contracts 0x08 0xDAC CPU_DELAY
SLPS_254.18 Ace Combat 5: The Unsung War 0x0A 0x500000 CDVD_READ_DELAY
SLPS_255.10 Tekken 5 0x0B 0x40000000 SPU2_BEHAVIOR
SLPS_255.85 Monster Farm 5: Circus Caravan 0x07 5 MECHA_RECOGTIME
SLPS_255.86 Tales of the Abyss 0x0A 0x803E8 CDVD_READ_DELAY
SLPS_256.04 Ar tonelico Qoga: Knell of Ar Ciel 0x00 0xA000000 TITLE_MASK
SLPS_256.67 Daito Giken Premium Pachi-Slot Collection: Yoshimune 0x01 0x1800 SIO2_MASK
SLPS_256.98 Fatal Fury Battle Archives Volume 2 0x00 0xA000000 TITLE_MASK
SLPS_257.08 The Familiar of Zero (Limited Edition) 0x0A 0x803E8 CDVD_READ_DELAY
SLPS_257.09 The Familiar of Zero 0x0A 0x803E8 CDVD_READ_DELAY
SLPS_257.21 HimeHibi - Princess Days 0x0B 0x8000000 SPU2_BEHAVIOR
SLPS_257.22 Routes PE (Limited Edition) 0x08 0x3E8 CPU_DELAY
SLPS_257.27 Routes PE 0x08 0x3E8 CPU_DELAY
SLPS_732.49 Ar tonelico Qoga: Knell of Ar Ciel (Platinum) 0x00 0xA000000 TITLE_MASK
SLUS_200.11 Orphen: Ocion of Sorcery 0x08 0x1388 CPU_DELAY
SLUS_200.11 Orphen: Ocion of Sorcery 0x09 0x8000010 DEV5_INT_SPEED
SLUS_200.77 Donald Duck: Go'in Quackers 0x01 0x800 SIO2_MASK
SLUS_202.74 City Crisis 0x0A 0x80BB8 CDVD_READ_DELAY
SLUS_203.05 Simpsons: Road Rage 0x01 0x800 SIO2_MASK
SLUS_203.64 Tiger Woods PGA Tour 2002 0x0A 0x803E8 CDVD_READ_DELAY
SLUS_204.13 Shadowman 2 0x0A 0x80600 CDVD_READ_DELAY
SLUS_204.33 SWAT: Global Strike Team 0x01 0x800 SIO2_MASK
SLUS_204.88 Star Ocean: Til the end of Time [Disc 1] 0x08 0x1388 CPU_DELAY
SLUS_205.72 Tiger Woods PGA Tour 2003 0x0A 0x803E8 CDVD_READ_DELAY
SLUS_205.90 Spyhunter 2 0x01 0x800 SIO2_MASK
SLUS_206.35 Muppets Party Cruise 0x01 0x801 SIO2_MASK
SLUS_206.39 Def Jam Vendetta 0x01 0x800 SIO2_MASK
SLUS_206.86 Splashdown: Rides Gone Wild 0x0A 0x80400 CDVD_READ_DELAY
SLUS_208.38 All-Star Baseball 2005 0x01 0x802 SIO2_MASK
SLUS_208.51 Ace Combat 5: The Unsung War 0x0A 0x500000 CDVD_READ_DELAY
SLUS_208.91 Star Ocean: Til the end of Time [Disc 2] 0x08 0x1388 CPU_DELAY
SLUS_209.18 Super Monkey Ball: Deluxe 0x01 0x800 SIO2_MASK
SLUS_210.59 Tekken 5 0x0B 0x40000000 SPU2_BEHAVIOR
SLUS_210.70 Final Fantasy XI: Chains of Promathia 0x02 0xB DEV9_MASK
SLUS_210.89 Karaoke Revolution Vol.3 0x08 0x1388 CPU_DELAY
SLUS_213.31 Sonic Riders 0x01 0x800 SIO2_MASK
SLUS_213.39 Puzzle Challenge 0x01 0x800 SIO2_MASK
SLUS_214.04 Final Fantasy XI: Treasures of Aht Urhgan 0x02 0xB DEV9_MASK
SLUS_214.52 Valkyrie Profile 2: Silmeria 0x08 0x1388 CPU_DELAY

Folder/File layout

Example: Max Payne Classic

├── config-emu-ps4.txt
├── docs
│   └── revision.h
├── eboot.bin
├── feature_data
│   └── SLES-50326_features.lua
├── formatted.card
├── image
│   └── disc01.iso
├── lua_include
│   ├── ee-cpr0-alias.lua
│   ├── ee-gpr-alias.lua
│   ├── ee-hwaddr.lua
│   ├── language.lua
│   ├── pad-and-key.lua
│   ├── ps2.lua
│   └── utils.lua
├── patches
│   └── SLES-50326_cli.conf
├── PS20220WD20050620.crack
├── ps2-emu-compiler.self
├── sce_companion_httpd
│   └── html
│       ├── BackCover.jpg
│       ├── base
│       │   ├── arrow_up.png
│       │   └── sprites.png
│       ├── css
│       │   ├── default-skin.png
│       │   └── styles.min.css
│       ├── index.html
│       ├── js
│       │   └── app.min.js
│       ├── large
│       │   ├── Box01.jpg
│       │   ├── Box04.jpg
│       │   ├── landscape
│       │   │   ├── Box01.jpg
│       │   │   ├── Box04.jpg
│       │   │   ├── Page01.jpg From 01 to 59
│       │   │   └── Page59.jpg
│       │   ├── Page01.jpg From 01 to 116
│       │   └── Page116.jpg
│       ├── medium
│       │   ├── Box01.jpg
│       │   ├── Box04.jpg
│       │   ├── landscape
│       │   │   ├── Box01.jpg
│       │   │   ├── Box04.jpg
│       │   │   ├── Page01.jpg From 01 to 59
│       │   │   └── Page59.jpg
│       │   ├── Page01.jpg from 01 to 116
│       │   └── Page116.jpg
│       ├── small
│       │   ├── Box01.jpg from 01 to 04
│       │   ├── Box04.jpg
│       │   ├── landscape
│       │   │   ├── Box01.jpg from 01 to 04
│       │   │   ├── Box04.jpg
│       │   │   ├── Page01.jpg From 01 to 59
│       │   │   └── Page59.jpg
│       │   ├── Page01.jpg From 01 to 116
│       │   └── Page116.jpg
│       └── thumbnails
│           ├── BoxThumb01.jpg
│           ├── BoxThumb04.jpg
│           ├── landscape
│           │   ├── BoxThumb01.jpg
│           │   ├── BoxThumb04.jpg
│           │   ├── Thumb01.jpg from 01 to 59
│           │   └── Thumb59.jpg
│           ├── Thumb01.jpg From 01 to 116
│           └── Thumb116.jpg
├── sce_module
│   ├── libc.prx
│   └── libSceFios2.prx
├── sce_sys
│   ├── about
│   │   └── right.sprx
│   └── keystone
└── trophy_data
    └── SLES-50326_trophies.lua

LUA include files

Files that some official PS2 Classics PKG files use in order for the lua files to be separate.

pad-connect-type.lua

local PadConnectType = {}

PadConnectType.DS4				= 0
PadConnectType.HID              = 1		-- any 3rd party USB controller (fight stick, turbo controller, etc), always local.
PadConnectType.REMOTE_DS4       = 2		-- remote DS4 should behave just like regular DS4
PadConnectType.REMOTE_VITA      = 3		-- remote VITA lacks analog L2/R2

return PadConnectType

sprite.lua

local kFilterMode = {}
kFilterMode.Point                         		  = 0x00000000	-- < Sample the one texel nearest to the sample point.
kFilterMode.Bilinear                      		  = 0x00000001	-- < Sample the four texels nearest the sample point, and blend linearly.

local kWrapMode = {}
kWrapMode.Wrap                            		  = 0x00000000	-- < The integer portion of the input coordinate is discarded, and the fractional portion is used instead. <c>U=U-floorf(U);</c>
kWrapMode.Mirror                          		  = 0x00000001	-- < The input coordinate is "reflected" across the texture boundary. This reflection may occur multiple times until the coordinate falls within the <c>[0..1]</c> range. <c>U=isOdd(floorf(U)) ? 1-fracf(U) : fracf(U)</c>
kWrapMode.ClampLastTexel                  		  = 0x00000002	-- < The input coordinate is clamped to the range <c>[0..1]</c>. <c>U=max(0,min(1,U));</c>
kWrapMode.MirrorOnceLastTexel             		  = 0x00000003	-- < The input coordinate is reflected at most one time and then clamped to the range <c>[0..1]</c>. <c>U=abs(max(-1,min(1,U));</c>
kWrapMode.ClampHalfBorder                 		  = 0x00000004	-- < Similar to kWrapModeClampLastTexel, but if clamping is necessary, the output color will be the border color specified by the Sampler. For this mode, coordinates that are not within half a pixel of the border are considered clamped.
kWrapMode.MirrorOnceHalfBorder            		  = 0x00000005	-- < Similar to kWrapModeMirrorOnceLastTexel, but if clamping is necessary, the output color will be the border color specified by the Sampler. For this mode, coordinates that are not within half a pixel of the border are considered clamped.
kWrapMode.ClampBorder                     		  = 0x00000006	-- < Similar to kWrapModeClampLastTexel, but if clamping is necessary, the output color will be the border color specified by the Sampler. For this mode, coordinates that are outside the range <c>[0..1]</c> are considered clamped.
kWrapMode.MirrorOnceBorder                		  = 0x00000007	-- < Similar to kWrapModeMirrorOnceLastTexel, but if clamping is necessary, the output color will be the border color specified by the Sampler. For this mode, coordinates that are outside the range <c>[0..1]</c> are considered clamped.

local kBlendMultiplier = {}
kBlendMultiplier.Zero                             = 0x00000000  -- < Multiply the associated input by zero.
kBlendMultiplier.One                              = 0x00000001  -- < Multiply the associated input by one.
kBlendMultiplier.SrcColor                         = 0x00000002  -- < Multiply the associated input by the fragment color.
kBlendMultiplier.OneMinusSrcColor                 = 0x00000003  -- < Multiply the associated input by one minus the fragment color.
kBlendMultiplier.SrcAlpha                         = 0x00000004  -- < Multiply the associated input by the fragment alpha.
kBlendMultiplier.OneMinusSrcAlpha                 = 0x00000005  -- < Multiply the associated input by one minus the fragment alpha.
kBlendMultiplier.DestAlpha                        = 0x00000006  -- < Multiply the associated input by the render target alpha.
kBlendMultiplier.OneMinusDestAlpha                = 0x00000007  -- < Multiply the associated input by one minus the render target alpha.
kBlendMultiplier.DestColor                        = 0x00000008  -- < Multiply the associated input by the render target color.
kBlendMultiplier.OneMinusDestColor                = 0x00000009  -- < Multiply the associated input by one minus the render target color.
kBlendMultiplier.SrcAlphaSaturate                 = 0x0000000a  -- < Multiply the associated input by the minimum of 1 or fragment alpha.
kBlendMultiplier.ConstantColor                    = 0x0000000d  -- < Multiply the associated input by the constant color. @see DrawCommandBuffer::setBlendColor()
kBlendMultiplier.OneMinusConstantColor            = 0x0000000e  -- < Multiply the associated input by one minus the constant color. @see DrawCommandBuffer::setBlendColor()
kBlendMultiplier.Src1Color                        = 0x0000000f  -- < Multiply the associated input by a secondary fragment color.
kBlendMultiplier.InverseSrc1Color                 = 0x00000010  -- < Multiply the associated input by one minus a secondary fragment color.
kBlendMultiplier.Src1Alpha                        = 0x00000011  -- < Multiply the associated input by a secondary fragment alpha.
kBlendMultiplier.InverseSrc1Alpha                 = 0x00000012  -- < Multiply the associated input by one minus a secondary fragment alpha.
kBlendMultiplier.ConstantAlpha                    = 0x00000013  -- < Multiply the associated input by the constant color alpha. @see DrawCommandBuffer::setBlendColor()
kBlendMultiplier.OneMinusConstantAlpha            = 0x00000014  -- < Multiply the associated input by one minus the constant color alpha. @see DrawCommandBuffer::setBlendColor()

local kBlendFunc = {}
kBlendFunc.Add                        			  = 0x00000000  -- < The source value is added to the destination value.
kBlendFunc.Subtract                   			  = 0x00000001  -- < The destination value is subtracted from the source value.
kBlendFunc.Min                        			  = 0x00000002  -- < The minimum of the source and destination values is selected.
kBlendFunc.Max                        			  = 0x00000003  -- < The maximum of the source and destination values is selected.
kBlendFunc.ReverseSubtract            			  = 0x00000004  -- < The source value is subtracted from the destination value.

-- Default blending mode, ideal for typical alpha channel embedded into a PNG image.
blendDefaultEquation = {
	kBlendMultiplier.SrcAlpha,					-- src multiplier
	kBlendFunc.Add,		                        -- blend function
	kBlendMultiplier.OneMinusSrcAlpha,		    -- dest multiplier
}

blendConstFadeEquation = {
	kBlendMultiplier.ConstantAlpha,					-- src multiplier
	kBlendFunc.Add,		                  	 	    -- blend function
	kBlendMultiplier.OneMinusConstantAlpha,		    -- dest multiplier
}

return kFilterMode, kWrapMode, kBlendMultiplier, kBlendFunc

MipsInsn.lua

MipsInsn = {}
MipsInsn.IsAddi			= function(insn) return (insn & 0xfc000000) == 0x20000000 end	-- addi rt,rs,simm
MipsInsn.IsAddiu		= function(insn) return (insn & 0xfc000000) == 0x24000000 end	-- addiu rt,rs,simm
MipsInsn.IsDaddu		= function(insn) return (insn & 0xfc0007ff) == 0x0000002d end	-- daddu rd,rs,rt
MipsInsn.IsAddu			= function(insn) return (insn & 0xfc0007ff) == 0x00000021 end	-- addu rd,rs,rt
MipsInsn.IsBeq			= function(insn) return (insn & 0xfc000000) == 0x10000000 end	-- beq rs,rt,off
MipsInsn.IsJ			= function(insn) return (insn & 0xfc000000) == 0x08000000 end	-- j target
MipsInsn.IsJal			= function(insn) return (insn & 0xfc000000) == 0x0c000000 end	-- jal target
MipsInsn.IsJr			= function(insn) return (insn & 0xfc1fffff) == 0x00000008 end	-- jr rs
MipsInsn.IsLq			= function(insn) return (insn & 0xfc000000) == 0x78000000 end	-- lq rt,simm(rs)
MipsInsn.IsLd			= function(insn) return (insn & 0xfc000000) == 0xdc000000 end	-- ld rt,simm(rs)
MipsInsn.IsLw			= function(insn) return (insn & 0xfc000000) == 0x8c000000 end	-- lw rt,simm(rs)
MipsInsn.IsSq			= function(insn) return (insn & 0xfc000000) == 0x7c000000 end	-- sq rt,simm(rs)
MipsInsn.IsSd			= function(insn) return (insn & 0xfc000000) == 0xfc000000 end	-- sd rt,simm(rs)
MipsInsn.IsSw			= function(insn) return (insn & 0xfc000000) == 0xac000000 end	-- sw rt,simm(rs)
MipsInsn.IsEnd			= function(insn) return (insn & 0xfc00003f) == 0x0000000d end	-- break [code]

MipsInsn.GetRt			= function(insn) return (insn >> 16) & 0x1f end
MipsInsn.GetRs			= function(insn) return (insn >> 21) & 0x1f end
MipsInsn.GetRd			= function(insn) return (insn >> 11) & 0x1f end
--MipsInsn.GetSimm		= function(insn) return ((insn << 48) >> 48) end	-- this can't create a negative value correctly
MipsInsn.GetSimm		= function(insn)
   -- Lua5.3 shifts are all logical (WHY!?). threfore (insn<<48)>>48 cannot extend the sign.
   -- Instead of using shift, do following
   local bit = 16		-- sign bit place.
   local v = insn & 0xffff
   local m = 1 << (bit - 1)
   v = v & ((1 << bit) - 1)
   return (v ~ m) - m		-- '~' is xor in Lua... how strange it is.
end
MipsInsn.GetOff			= function(insn) return MipsInsn.GetSimm(insn) end
MipsInsn.GetTarget		= function(insn) return insn & 0x3ffffff end

return MipsInsn

ee-cpr0-alias.lua

cpr = {}

cpr.index		= 0
cpr.random		= 1
cpr.entrylo0	= 2
cpr.entrylo1	= 3
cpr.context		= 4
cpr.pagemask	= 5
cpr.wired		= 6
cpr.badvaddr	= 8
cpr.count		= 9
cpr.entryhi		= 10
cpr.compare		= 11
cpr.status		= 12
cpr.cause		= 13
cpr.epc			= 14
cpr.prid		= 15
cpr.config		= 16
cpr.badpaddr	= 23
cpr.hwbk		= 24
cpr.pccr		= 25
cpr.taglo		= 28
cpr.taghi		= 29
cpr.errorepc	= 30

return cpr

ee-gpr-alias.lua

-- Recommended method to import this module:
--   local gpr = require("ee-gpr-alias")
-- 
-- Using the global 'lang' variable is depreciated.  This will change to a local-scope variable after
-- the depreciation period has expired in April 2016.

gpr = {}

gpr.zero = 0
gpr.at   = 1
gpr.v0   = 2
gpr.v1   = 3
gpr.a0   = 4
gpr.a1   = 5
gpr.a2   = 6
gpr.a3   = 7
gpr.t0   = 8
gpr.t1   = 9
gpr.t2   = 10
gpr.t3   = 11
gpr.t4   = 12
gpr.t5   = 13
gpr.t6   = 14
gpr.t7   = 15
gpr.s0   = 16
gpr.s1   = 17
gpr.s2   = 18
gpr.s3   = 19
gpr.s4   = 20
gpr.s5   = 21
gpr.s6   = 22
gpr.s7   = 23
gpr.t8   = 24
gpr.t9   = 25
gpr.k0   = 26
gpr.k1   = 27
gpr.gp   = 28
gpr.sp   = 29
gpr.fp   = 30
gpr.ra   = 31

return gpr

ee-hwaddr.lua

gif_hw  = {}
vif0_hw = {}
vif1_hw = {}

gif_hw.CHCR			= 0x1000A000
gif_hw.MADR			= 0x1000A010
gif_hw.QWC			= 0x1000A020
gif_hw.TADR			= 0x1000A030
gif_hw.ASR0			= 0x1000A040
gif_hw.ASR1			= 0x1000A050
gif_hw.SADR			= 0x1000A080

vif0_hw.CHCR		= 0x10008000
vif0_hw.MADR		= 0x10008010
vif0_hw.QWC			= 0x10008020
vif0_hw.TADR		= 0x10008030
vif0_hw.ASR0		= 0x10008040
vif0_hw.ASR1		= 0x10008050
vif0_hw.SADR		= 0x10008080

vif1_hw.CHCR		= 0x10009000
vif1_hw.MADR		= 0x10009010
vif1_hw.QWC			= 0x10009020
vif1_hw.TADR		= 0x10009030
vif1_hw.ASR0		= 0x10009040
vif1_hw.ASR1		= 0x10009050
vif1_hw.SADR		= 0x10009080

return gif_hw, vif0_hw, vif1_hw, nil

language.lua

-- Recommended method to import this module:
--   local lang = require("language")
-- 
-- Using the global 'lang' variable is depreciated.  This will change to a local-scope variable after
-- the depreciation period has expired in April 2016.

lang = {}

lang.japanese		= 0
lang.english		= 1
lang.french			= 2
lang.spanish		= 3
lang.german			= 4
lang.italian		= 5
lang.dutch			= 6
lang.portuguese		= 7
lang.russian		= 8
lang.korean			= 9
lang.chinese_traditional	= 10
lang.chinese_simplified		= 11
lang.finnish		= 12
lang.swedish		= 13
lang.danish			= 14
lang.norwegian		= 15
lang.polish			= 16
lang.portuguese_brazil	= 17
lang.english_gb		= 18
lang.turkish		= 19
lang.spanish_la		= 20
lang.arabic			= 21
lang.french_canada	= 22

return lang

pad-and-key.lua

pad = {}

-- Left Side
pad.LU	= 0x0010	-- Up
pad.LD	= 0x0040	-- Down
pad.LL	= 0x0080	-- Left
pad.LR	= 0x0020	-- Right

-- Right Side
pad.RU	= 0x1000	-- Up (Triangle)
pad.RD	= 0x4000	-- Down (Cross)
pad.RL	= 0x8000	-- Left (Square)
pad.RR	= 0x2000	-- Right (Circle)

-- aliases
pad.UP		= 0x0010	-- LU
pad.DOWN	= 0x0040	-- LD
pad.LEFT	= 0x0080	-- LL
pad.RIGHT	= 0x0020	-- LR
pad.TRIANGLE= 0x1000
pad.CROSS	= 0x4000
pad.SQUARE	= 0x8000
pad.CIRCLE	= 0x2000

pad.L1	= 0x0400
pad.L2	= 0x0100
pad.L3	= 0x0002

pad.R1	= 0x0800
pad.R2	= 0x0200
pad.R3	= 0x0004

pad.SELECT	= 0x0001
pad.START	= 0x0008

keyboard = {}

keyboard.ESCAPE		= 0x1000
keyboard.SLASH		= 0x1001
keyboard.SEPARATOR	= 0x1002	-- backslash or pipe (\|)
keyboard.BACKQUOTE	= 0x1003
keyboard.PAGEDOWN	= 0x1004
keyboard.PAGEUP		= 0x1005
keyboard.F1			= 0x1006
keyboard.F2			= 0x1007
keyboard.F3			= 0x1008
keyboard.F4			= 0x1009
keyboard.F5			= 0x100a
keyboard.F6			= 0x100b
keyboard.F7			= 0x100c
keyboard.F8			= 0x100d
keyboard.F9			= 0x100e
keyboard.F10		= 0x100f
keyboard.F11		= 0x1010
keyboard.F12		= 0x1011

ps2.lua

require("ee-gpr-alias")
require("utils")

MipsInsn = {}
MipsInsn.IsAddi			= function(insn) return (insn & 0xfc000000) == 0x20000000 end	-- addi rt,rs,simm
MipsInsn.IsAddiu		= function(insn) return (insn & 0xfc000000) == 0x24000000 end	-- addiu rt,rs,simm
MipsInsn.IsBeq			= function(insn) return (insn & 0xfc000000) == 0x10000000 end	-- beq rs,rt,off
MipsInsn.IsJ			= function(insn) return (insn & 0xfc000000) == 0x08000000 end	-- j target
MipsInsn.IsJal			= function(insn) return (insn & 0xfc000000) == 0x0c000000 end	-- jal target
MipsInsn.IsJr			= function(insn) return (insn & 0xfc1fffff) == 0x00000008 end	-- jr rs
MipsInsn.IsLq			= function(insn) return (insn & 0xfc000000) == 0x78000000 end	-- lq rt,simm(rs)
MipsInsn.IsLd			= function(insn) return (insn & 0xfc000000) == 0xdc000000 end	-- ld rt,simm(rs)
MipsInsn.IsLw			= function(insn) return (insn & 0xfc000000) == 0x8c000000 end	-- lw rt,simm(rs)
MipsInsn.IsSq			= function(insn) return (insn & 0xfc000000) == 0x7c000000 end	-- sq rt,simm(rs)
MipsInsn.IsSd			= function(insn) return (insn & 0xfc000000) == 0xfc000000 end	-- sd rt,simm(rs)
MipsInsn.IsSw			= function(insn) return (insn & 0xfc000000) == 0xac000000 end	-- sw rt,simm(rs)
MipsInsn.IsEnd			= function(insn) return (insn & 0xfc00003f) == 0x0000000d end

MipsInsn.GetRt			= function(insn) return (insn >> 16) & 0x1f end
MipsInsn.GetRs			= function(insn) return (insn >> 21) & 0x1f end
MipsInsn.GetSimm		= function(insn) return ((insn << 48) >> 48) end
MipsInsn.GetOff			= function(insn) return MipsInsn.GetSimm(insn) end
MipsInsn.GetTarget		= function(insn) return insn & 0x3ffffff end

-- return FIFO queue of stack trace
-- the queue item is { caller-addr, return-from }
--
-- example:
--    print("=== stack trace ===")
--	  local stack_trace = MipsStackTrace(eeObj, eeObj.GetPc()+4, eeObj.GetGpr(gpr.ra), eeObj.GetGpr(gpr.sp))
--	  while not stack_trace:isEmpty() do
--		 local caller = stack_trace:dequeue()
--		 print( string.format(" 0x%08x [will return from : %x]", caller[1], caller[2]) )
--	  end
--
-- NOTE: you must +4 against GetPc() if you in a EE/IOP hook.
--		 Because EE/IOP jit executed the instruction at the address already and it might affect $sp or $ra.
--
-- obj : eeObj or iopObj
-- pc  : current pc (from GetPC or readout from thread context)
-- ra  : current ra (from GetGpr or readout from thread context)
-- sp  : current sp (from GetGpr or readout from thread context)
MipsStackTrace = function (obj, pc, ra, sp, depth)
   local max_depth = depth or 10		-- max trace depth
   local n_j = 1
   local jmax = {}
   local depth = 0
   local bdl_count = 0
   local new_pc    = 0
   local icount    = 0

   local result = Queue.new()
   local pushed_ra = Queue.new()
   while depth < max_depth and icount < 2048 do
	  -- TODO: error checks
	  if (pc & 3) ~= 0 then
		 return result
	  end
	  pc = pc & 0x01ffffff
	  sp = sp & 0x01ffffff
	  local insn = obj.ReadMem32(pc)
	  -- print(string.format("trace .. pc=%x insn=%x", pc, insn))
	  -- result:enqueue( { pc, insn } )

	  if MipsInsn.IsJr(insn) and MipsInsn.GetRs(insn) == gpr.ra then
		 bdl_count = 1
		 depth = depth + 1
		 new_pc = ra
		 -- print(string.format("jr ra : ra=%x", ra))
		 icount = 0
		 -- print(string.format("enqueue caller pc=%x ret addr=%x", new_pc-8, pc))
		 result:enqueue( {new_pc-8, pc} )	-- {return-addr, where-from}
	  elseif MipsInsn.IsAddiu(insn) and MipsInsn.GetRt(insn) == gpr.sp and MipsInsn.GetRs(insn) == gpr.sp then
		 sp = sp + MipsInsn.GetSimm(insn) -- ((insn<<48) >>48)
		 -- print(string.format("addiu sp,sp,** : new sp = %x", sp))
	  elseif MipsInsn.IsLq(insn) or MipsInsn.IsLd(insn) or MipsInsn.IsLw(insn) then
		 if MipsInsn.GetRt(insn) == gpr.ra and MipsInsn.GetRs(insn) == gpr.sp then
			-- the code might push $ra on the stack after start pc.
			-- in such case, we must not retrieve $ra value from the memory.
			if pushed_ra:isEmpty() then
			   local imm = MipsInsn.GetSimm(insn) -- ((insn<<48) >>48)
			   -- print(string.format("retrieve ra from stack(%x) : sp=%x imm=%x", sp+imm, sp, imm))
			   ra = obj.ReadMem32(sp + imm)
			   -- print(string.format("load ra,%x(sp) : sp = %x+%x, ra = %x", imm, sp, imm, ra))
			else
			   -- print(string.format("retrieve ra from pushed one"))
			   pushed_ra:dequeue()
			end
		 end
	  elseif MipsInsn.IsSq(insn) or MipsInsn.IsSd(insn) or MipsInsn.IsSw(insn) then
		 if MipsInsn.GetRt(insn) == gpr.ra and MipsInsn.GetRs(insn) == gpr.sp then
			pushed_ra:enqueue(pc);
		 end
	  elseif MipsInsn.IsJ(insn) then	-- j **
		 local imm = MipsInsn.GetTarget(insn)
		 imm = imm << 2
		 if pc == imm then
			-- jump to self? maybe we can ignore it.
		 else
			new_pc = imm
			-- print(string.format("j ** : new_pc = %x", new_pc))
			bdl_count = 1
			for t=1, n_j do
			   if jmax[t] == new_pc then
				  return result							-- closed loop
			   end
			end
			if n_j > 1024 then
			   return result							-- jump buffer overflow
			end
			jmax[n_j] = new_pc
			n_j = n_j + 1
		 end
	  elseif MipsInsn.IsBeq(insn) and MipsInsn.GetRs(insn) == gpr.zero then	-- beq zero,**
		 local offset = MipsInsn.GetOff(insn) -- ((insn<<48) >> 48)
		 offset = offset << 2
		 new_pc = pc + 4 + offset

		 if pc == new_pc then
			-- jump to self? maybe we can ignore it
		 else
			-- print(string.format("beq zero,** : new_pc=%x", new_pc))
			bdl_count = 1
			for t = 1, n_j do
			   if jmax[t] == new_pc then
				  return result
			   end
			end
			if n_j > 1024 then
			   return result
			end
			jmax[n_j] = new_pc
			n_j = n_j + 1
		 end
	  elseif MipsInsn.IsEnd(insn) then	-- end
		 -- print(string.format("end"))
		 return result
	  elseif MipsInsn.IsJal(insn) then	-- jal **
		 local imm = insn & 0x03ffffff
		 imm = imm << 2
		 -- print(string.format("jal ** : addr = %x", imm))
		 -- call
	  end

	  icount = icount + 1
	  pc = pc + 4

	  -- -- print(string.format("bdl_count=%d", bdl_count))
	  if bdl_count > 0 then
		 if bdl_count == 2 then
			pc = new_pc
			bdl_count = 0
		 else
			bdl_count = bdl_count + 1
		 end
	  end
   end
   return result
end

PS2 = {}
PS2.GetCurrentThread	= function(eeObj) return eeObj.ReadMem32(0x12fac) end
PS2.GetThreads			= function(eeObj)
   local EE_THREAD_BASE	= 0x18000
   local EE_NUM_THREADS = 0x100
   local th = EE_THREAD_BASE
   local result = Queue.new()
   for t = 0, EE_NUM_THREADS-1 do
	  -- 0 : node_prev
	  -- 4 : node_next
	  -- 8 : status
	  -- 12: pc
	  -- 16: sp
	  -- 20: gp
	  -- 24: init_pri
	  -- 26: curr_pri
	  -- 28: wstat
	  -- 32: waitId
	  -- 36: wakeupCount
	  -- 40: attr
	  -- 44: option
	  -- 48: func
	  -- 52: argc
	  -- 56: args
	  -- 60: stack
	  -- 64: size
	  -- 68: root
	  -- 72: endOfHeap
	  local status = eeObj.ReadMem32(th + 8)
	  if status ~= 0 then
		 local id    = t
		 local pri   = eeObj.ReadMem16(th + 26)
		 local gp    = eeObj.ReadMem32(th + 20)
		 local pc    = eeObj.ReadMem32(th + 12)
		 local sp    = eeObj.ReadMem32(th + 16)
		 result:enqueue( {id=id, status=status, pri=pri, gp=gp, pc=pc, sp=sp} )
	  end
	  th = th + 76
   end
   return result
end

utils.lua

-- utility classes/functions

-- Stack
-- ex:
--		my_stack = Stack.new()
--  	my_stack:push( val )
--		print( my_stack:pop( val ) )
Stack = {}

function Stack.new()
   local obj = { buff = {} }
   return setmetatable(obj, {__index = Stack})
end

function Stack:push(x)
  table.insert(self.buff, x)
end

function Stack:pop()
  return table.remove(self.buff)
end

function Stack:top()
  return self.buff[#self.buff]
end

function Stack:isEmpty()
  return #self.buff == 0
end


-- Queue
-- ex:
--		my_queue = Queue.new()
--		my_queue:enqueue( val )
--		print( my_queue:dequeue(val) )
Queue = {}

function Queue.new()
  local obj = { buff = {} }
  return setmetatable(obj, {__index = Queue})
end

function Queue:enqueue(x)
  table.insert(self.buff, x)
end

function Queue:dequeue()
  return table.remove(self.buff, 1)
end

function Queue:top()
  if #self.buff > 0 then
    return self.buff[1]
  end
end

function Queue:isEmpty()
  return #self.buff == 0
end

Links