Now you should get a.PKG file of ReactPSN go ahead and install it on your PS3 8. Now you need to download the RAP File to activate your PS2 Classics Placeholder so go to google and search 'rap file for PS2Classics'. Download the RAP File 9. Create a folder on the root of your USB Drive called exdata and Copy the rap file in to exdata folder 10.
- 2PS2 Emulators types and versions
- 2.1ps2_emu.self
- 2.2ps2_gxemu.self
- 2.3ps2_softemu.self
- 2.4ps2_netemu.self
- 3Virtual PS2 (emulated machine) usage and features
- 5ps2netemu
- 5.4Peripheral support
- 5.5BIOS
- 6Virtual PS2 HDD
- 7Emulators management from GameOS
- 7.3LPAR / AUTH ID's
- 8Game CONFIG
- 8.2Config file examples (for netemu)
- 8.3Config data examples (hardcoded)
Description[edit]
Emulation of Playstation 2 is currently handled by 3 kind of emulators. CECH-A/B models use ps2_emu.self able to use built-in PS2 hardware (EE/GS/Rambus memory), and have best compatibility. CECH-C/E use ps2_gxemu, this emulator use physical Graphic Synthesizer found in this ps3 model, but Emotion Engine is fully emulated here, also there is no Rambus memory. All other models emulate PS2 thru fully software based ps2_netemu used for ps2 classics, and hacked now to use decrypted ISO files. Earlier before Sony provided ps2 classics on PS Store there was another soft only emulator strongly based on ps2_gxemu. It was called ps2_softemu, and had support for original PS2 CDVD. Only emulator not able to run physical discs is ps2_netemu.
Emulators are self files, but not typical one. Emulators are not truly PS3 Game OS elf executables, but Guest OS'es running on LV1 of PS3. This mean that LV2, or more friendly Game OS is unloaded before emulator is loaded. This also mean that while emulators are running we can't call any LV2 function. Also LV1 syscalls are limited to call from all emulators, but can be fully unlocked.
All emulators use built-in stripped developement version of PS2 BIOS with disabled debug functions that can affect some games. This is done because some games print debug info on screen when found that are run on dev bios. Bios between ps2_emu, ps2_gxemu, and ps2_netemu are different. Although bios from gxemu run fine on netemu, and vice-versa. While ps2_emu BIOS is able to run only on ps2emu version of emulator.
Simplified block diagram of a PS2
source
source
Note:
- not available in early Tool/DECR and Debug/DEX firmwares. But available in AV TOOL firmware since 1.00
- Emulation is based on a SCPH-50000/SCPH-20401 Playstation 2 Model.
PS2 Emulators types and versions[edit]
PS2 (GS+EE) | ||||
---|---|---|---|---|
Core | Job | Source | Notes | |
SPU0 | IOP | SPU ASM | ||
- | DMA | Hardware CXD2953AGB | Only in CECHAxx and CECHBxx PS3 models with COK-001 motherboard | |
SPU2 | Isolation | C++ Raw SPU | Used for MagicGate Encryption and others (?) | |
- | IPU | Hardware CXD2953AGB | Only in CECHAxx and CECHBxx PS3 models with COK-001 motherboard | |
- | GFIF | |||
SPU5 | PS2-SPU2 | C++ | about 50% load average | |
- | VU1 | Hardware CXD2953AGB | Only in CECHAxx and CECHBxx PS3 models with COK-001 motherboard | |
SPU7 | - | - | Unavailable: Factory disabled SPU | |
PPU:0 | PS2-Devices | C++ and PPU ASM | ||
PPU:1 | - | - | unused? | |
PS2-EE | Emotion Engine | Hardware CXD2953AGB | Only in CECHAxx and CECHBxx PS3 models with COK-001 motherboard | |
PS2-GS | Graphic Synthesizer | |||
PS2_GX | ||||
Core | Job | Source | Notes | |
SPU0 | IOP | SPU ASM | ||
SPU1 | DMA | SPU ASM | ||
SPU2 | Isolation | C++ Raw SPU | Used for MagicGate Encryption and others (?) | |
SPU3 | IPU | SPU ASM | ||
SPU4 | GFIF | SPU ASM | ||
SPU5 | PS2-SPU2 | C++ | about 50% load average | |
SPU6 | VU1 | SPU ASM | ||
SPU7 | - | - | Unavailable: Factory disabled SPU | |
PPU:0 | PS2-Devices | C++ and PPU ASM | ||
PPU:1 | Emotion Engine | C++ and PPU ASM | ||
PS2-GS | Graphic Synthesizer | Hardware CXD2972GB | Only in CECHCxx PS3 models with COK-002 motherboard | |
PS2 Software | ||||
problematic, see Mathieulh quoted below | ||||
Core | Job | Source | Notes | |
SPU0 | IOP | SPU ASM | ||
SPU1 | EEDMA | SPU ASM | ||
SPU2 | Isolation | C++ Raw SPU | Used for MagicGate Encryption and others (?) | |
SPU3 | IPU | SPU ASM | ||
SPU4 | GSEGFIF | SPU ASM | ||
SPU5 | PS2-SPU2 | C++ | ||
SPU6 | VU1 | SPU ASM | ||
SPU7 | - | - | Unavailable: Factory disabled SPU | |
PPU:0 | PS2-Devices | C++ and PPU ASM | ||
PPU:1 | Emotion Engine | C++ and PPU ASM | ||
PS2 Netemu | ||||
Core | Job | Source | Notes | |
SPU0 | IOP | |||
SPU1 | SPU2 | |||
SPU2 | VU1 | |||
SPU3 | EEDMA | |||
SPU4 | FE | |||
SPU5 | BE | |||
SPU6 | IPU | |||
SPU7 | BE |
ps2_emu.self[edit]
Self System Table Offset[edit]
FW version | TOC | Notes |
---|---|---|
1.00 AV | 0x7C3150 | |
1.02 | 0x7C31F0 | |
1.10 | 0x7C2168 | |
1.11 | 0x7C23C8 | |
1.30 | 0x8442E8 | |
1.30 AV | 0x8442E8 | |
1.31 | 0x844C98 | |
1.32 | 0x845CA0 | |
1.50 | 0x848728 | |
1.90 | 0x4D7ED8 | |
3.66 - 3.74 | 0x4E9A20 | |
4.00 - 4.01 | 0x4EADB8 | |
4.10 - 4.11 | 0x4EAD28 | |
4.20 - 4.21 | 0x4EAE30 | |
4.23 | 0x4EACE0 | |
4.25 | 0x4EAE30 | Reverted to 4.20 - 4.21 version? |
4.78 - 4.82 | 0x4EB8C0 |
ps2_gxemu.self[edit]
Self System Table Offset[edit]
FW version | TOC | Notes |
---|---|---|
1.50 | 0x5BDFC8 | |
1.90 | 0x666C78 | |
3.66 - 3.74 | 0x6766B8 | |
4.00 - 4.11 | 0x677990 | |
3.66 - 3.74 | 0x677AA8 | |
4.78 - 4.82 | 0x678548 |
ps2_softemu.self[edit]
Self System Table Offset[edit]
FW version | TOC | Notes |
---|---|---|
1.90 | 0x5C7B10 | |
2.50 | 0x5C7ED8 | |
3.41 | 0x5C8C00 | |
3.66 - 3.71 | 0x5C8EC0 | |
3.72 - 4.01 | 0x5C8E40 |
ps2_netemu.self[edit]
Self System Table Offset[edit]
FW version | TOC | Notes |
---|---|---|
3.73 - 3.74 | 0x7D8B00 | |
4.00 - 4.01 | 0x7DA200 | |
4.10 - 4.11 | 0x7DA180 | |
4.20 - 4.25 | 0x7DA500 | |
4.78 - 4.83 | 0x751280 |
General observations regarding PS2 Classics emulator[edit]
- Virtual memory cards are per title based, but apparently run through the current memory card system. The module used to manage memory cards is: vmc_savedata_plugin.sprx - Using a regular memory card that has been renamed result in a 'The save data is corrupt (8XXXXXXX) error'
- Loads an epilepsy warning before PS2 logo (PS button menu appears during epilepsy warning if controller is synced)
- Does not support online functionality of PS2 titles (network configuration utility inside Full Spectrum Warrior claims no network adaptor has been found, same with Syphon Filter: The Omega Strain).
- Only file that is needed in the folder for PS2 Classics is 'iso.bin.enc'. Removing the manuals/DXT files will cause the game to boot IMMEDIATELY to the PS2 logo upon switching to 720p/starting PS2 LPAR.
folder/file layout[edit]
(in this example GTA San Andreas Classic)
Virtual PS2 (emulated machine) usage and features[edit]
Video Modes[edit]
Note: Real PS2 : http://users.neoscientists.org/~blue/ps2videomodes.txt
Memory Mapping[edit]
PCSX2[edit]
ps2netemu[edit]
Name | ea | lpar2(netemu 4.81) | size | flags | lpar1(lv1 4.81) |
---|---|---|---|---|---|
text | 0x0 | 0x3D00000 | 0x300000( 3 MB) | 0x8000000000000003 0000000000000003 | 0x7D00000 |
ro_work | 0x300000 | 0x300000 | 0x500000( 5 MB) | 0x0000000000000003 0000000000000003 | 0x4300000 |
rw_work | 0x800000 | 0x800000 | 0x2A00000( 42 MB) | 0x0000000000000001 0000000000000003 | 0x4800000 |
negmem | 0x1FFF0000 | 0x3210000 | 0x10000( 64 KB) | 0x0000000000000001 0000000000000000 | 0x7210000 |
ee_ram | 0x100000000 | 0x64000E000000 | 0x2000000( 32 MB) | 0x0000000000000001 0000000000000000 | 0x3C00000 - 0x3F00000, 0x8000000 - 0x9B00000 |
ee_jit_code | 0xD00000000 | 0x680024000000 | 0x3000000( 48 MB) | 0x8000000000000001 0000000000000003 | 0xBC00000 - 0xEB00000 |
vu0_jit_code | 0xD08000000 | 0x580000800000 | 0x400000( 4 MB) | 0x8000000000000001 0000000000000003 | 0x900000 - 0xC00000 |
vu0_jit_data | 0xD0C000000 | 0x3700000 | 0x400000( 4 MB) | 0x0000000000000002 0000000000000003 | 0x7700000 |
eeram_jit_lut | 0xE00000000 | 0x640010000000 | 0x2000000( 32 MB) | 0x0000000000000001 0000000000000003 | 0x9C00000 - 0xBB00000 |
eerom_jit_lut | 0xE0FC00000 | 0x580000C00000 | 0x400000( 4 MB) | 0x0000000000000001 0000000000000003 | 0xD00000 - 0x1000000 |
ee_dbg_ram | 0x90FFF8000 | 0x64000E078000 | 0x8000( 32 KB) | 0x0000000000000001 0000000000000000 | |
iop_ram | 0x400000000 | 0x3300000 | 0x200000( 2 MB) | 0x0000000000000001 0000000000000000 | 0x7300000 |
iop_rom | 0x50FC00000 | 0x580001000000 | 0x400000( 4 MB) | 0x0000000000000001 0000000000000002 | 0x1100000 - 0x1400000 |
iop_spad | 0x50F800000 | 0x3220000 | 0x10000( 64 KB) | 0x0000000000000001 0000000000000002 | 0x7220000 |
spu2_ram | 0x600000000 | 0x3500000 | 0x200000( 2 MB) | 0x0000000000000001 0000000000000000 | 0x7500000 |
spu2_ram2 | 0x600200000 | 0x3500000 | 0x200000( 2 MB) | 0x0000000000000001 0000000000000000 | 0x7500000 |
spu2_pcm | 0x1000000000 | 0x3230000 | 0x10000( 64 KB) | 0x0000000000000001 0000000000000000 | 0x7230000 |
ee_spr_lo | 0x700000000 | 0x3201000 | 0x2000( 8 KB) | 0x0000000000000001 0000000000000000 | 0x7201000 |
ee_spr | 0x800000000 | 0x3203000 | 0x6000( 24 KB) | 0x0000000000000001 0000000000000000 | 0x7203000 |
ee_vu0_dmem0 | 0x301004000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
ee_vu0_dmem1 | 0x301005000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
ee_vu0_dmem2 | 0x301006000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
ee_vu0_dmem3 | 0x301007000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
ee_rom | 0x30FC00000 | 0x580001000000 | 0x400000( 4 MB) | 0x0000000000000001 0000000000000001 | 0x1100000 - 0x1400000 |
vrc | 0xC00000000 | 0x600005000000 | 0x1000000( 16 MB) | 0x0000000000000001 0000000000000000 | 0x1500000 - 0x2400000 |
/dev/zero | 0x4000000000 | 0x3240000 | 0x10000( 64 KB) | 0x0000000000000001 0000000000000001 | 0x7240000 |
dma_vu0_dmem0 | 0x4001004000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
dma_vu0_dmem1 | 0x4001005000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
dma_vu0_dmem2 | 0x4001006000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
dma_vu0_dmem3 | 0x4001007000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
imm_vu0_dmem0 | 0x30000000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
imm_vu0_dmem1 | 0x30001000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
imm_vu0_dmem2 | 0x30002000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
imm_vu0_dmem3 | 0x30003000 | 0x3200000 | 0x1000( 4 KB) | 0x0000000000000001 0000000000000001 | 0x7200000 |
SGSXdr | 0x1904000000 | 0x64000C000000 | 0x1700000( 23 MB) | 0x0000000000000001 0000000000000000 | 0x2500000 - 0x3B00000 |
iopTrace | 0x1400000000 | 0x3250000 | 0x10000( 64 KB) | 0x0000000000000001 0000000000000000 | 0x7250000 |
Memory Allocation[edit]
Name | Size | page_log2 | lpar2(netemu 4.81) | lpar1(lv1 4.81) |
---|---|---|---|---|
ra_vu0_dmem | 0x1000 (4 KB) | 12 (4 KB) | 0x3200000 | 0x7200000 |
ra_ee_spr_lo | 0x2000 (8 KB) | 12 (4 KB) | 0x3201000 | 0x7201000 |
ra_ee_sprx | 0x6000 (24 KB) | 12 (4 KB) | 0x3203000 | 0x7203000 |
ra_negmem | 0x10000 (64 KB) | 16 (64 KB) | 0x3210000 | 0x7210000 |
ra_iop_spad | 0x10000 (64 KB) | 16 (64 KB) | 0x3220000 | 0x7220000 |
ra_spu2_pcm | 0x10000 (64 KB) | 16 (64 KB) | 0x3230000 | 0x7230000 |
ra_nulls | 0x10000 (64 KB) | 16 (64 KB) | 0x3240000 | 0x7240000 |
ra_itrace | 0x10000 (64 KB) | 16 (64 KB) | 0x3250000 | 0x7250000 |
ra_iop_ram | 0x200000 (2 MB) | 20 (1 MB) | 0x3300000 | 0x7300000 |
ra_spu2_ram | 0x200000 (2 MB) | 20 (1 MB) | 0x3500000 | 0x7500000 |
ra_vu0_code | 0x400000 (4 MB) | 20 (1 MB) | 0x580000800000 | 0x900000 - 0xC00000 |
ra_vu0_data | 0x400000 (4 MB) | 20 (1 MB) | 0x3700000 | 0x7700000 |
ra_ee_rom_pc | 0x400000 (4 MB) | 20 (1 MB) | 0x580000C00000 | 0xD00000 - 0x1000000 |
ra_ps2_rom | 0x400000 (4 MB) | 20 (1 MB) | 0x580001000000 | 0x1100000 - 0x1400000 |
ra_vrc_mem | 0x1000000 (16 MB) | 20 (1 MB) | 0x600005000000 | 0x1500000 - 0x2400000 |
ra_sgs_xdr | 0x1700000 (23 MB) | 20 (1 MB) | 0x64000C000000 | 0x2500000 - 0x3B00000 |
ra_ee_ram | 0x2000000 (32 MB) | 20 (1 MB) | 0x64000E000000 | 0x3C00000 - 0x3F00000, 0x8000000 - 0x9B00000 |
ra_ee_ram_pc | 0x2000000 (32 MB) | 20 (1 MB) | 0x640010000000 | 0x9C00000 - 0xBB00000 |
ra_trans_code | 0x3000000 (48 MB) | 20 (1 MB) | 0x680024000000 | 0xBC00000 - 0xEB00000 |
PS2 Memory and Hardware Mapped Registers Layout[edit]
Controller[edit]
ID | Controller #Number | Note |
---|---|---|
1 (1-A) | 1 | |
2 (2-A) | 2 | |
3 (1-B) | 3 | |
4 (2-B) | 4 | |
5 (1-C) | 5 | Gamepad LED #1 + #4 |
6 (2-C) | 6 | Gamepad LED #2 + #4 |
7 (1-D) | 7 | Gamepad LED #3 + #4 |
Peripheral support[edit]
ps2_emu.self / ps2_gxemu.self[edit]
- Hub
- Mouse
- Keyboard
- EyeToy
- Head Mount Display
- Mic
- Ascii Mic
- Socom USB Headset
- Usb Headset
- Sea Mic Controller
- Force Feedback device
- GT Force
- Momo Force
- Driving Force Pro
- G25/G27
- Momo Racing
- Flight Force
- Force 3D Pro
- Modem
- Guncon2
- Densya de GO! controller type 2
- Densya de GO! Sincansen senyou controller
- Capture Eye
- Flight Stick
- Flight Stick 2
- Pop Egg
- Trance Vibrator
- PSP
- Compact Flight Controller
- Flash Memory
- Buzz!
- Pachi-Slot Controller Kurouto
- Usb Adapter
- Guncon3
- Multi Train Controller
ps2_netemu.self[edit]
- BD Remote Control
- PLAYSTATION(R)3 Controller (Vendor ID 0x54C, Product ID 0x268),
- Motion Controller - Move (Vendor ID 0x54C, Product ID 0x3D5),
- Navigation Controller (Vendor ID 0x54C, Product ID 0x42F)
- 'guncon3'
Unknown:
- Vendor ID 0xF0D (Hori), Product ID 0x4A
- Vendor ID 0x54C (Sony), Product ID 0x5AF
BIOS[edit]
ps2_netemu.self[edit]
Ps2_netemu use integrated PS2 bios included in ps2netemu.elf, not additional file like in ps1emu case. In 4.81 firmware BIOS is located from 0x820A00 to 0x9F09FF (0x820900 to 0x9F08FF in fw4.50). Bios version seems to be Developement v2.20 from Japan region (22/01/2007), but it's of course not limited to booting only NTSC-J games.
Notable thing is that ps2_netemu run fine with ps2_gxemu bios, but fail to boot using ps2_emu bios.
File | Offset in fw4.81 ps2_netemu | Offset in exported bin | Description | File type (exportable) |
---|---|---|---|---|
RESET | 0x820A00 | 0x00 | Bootstrap code for the EE and IOP. | BIN |
ROMDIR | 0x823180 | 0x2780 | BIN | |
EXTINFO | 0x8236C0 | 0x2CC0 | Contains the 'EXTINFO' for all files in the ROM image. | BIN |
SBIN | 0x823D30 | 0x3330 | Seems to be the pad controller library for the PS1 monitor. | BIN |
LOGO | 0x82ACD0 | 0xA2D0 | PS1 logo? | BIN |
IOPBTCONF | 0x83F420 | 0x1EA20 | Boot configuration file for the IOP, during the final phase of the IOP reset. If no UDNL module is specified, the IOP will only have a single IOP reset in the reboot process, with the modules listed in IOPBTCONF. | BIN |
IOPBTCON2 | 0x83F510 | 0x1EB10 | Boot configuration file for the IOP, for the first phase of the IOP reset (before UDNL is loaded). | BIN |
SYSMEM | 0x83F5E0 | 0x1EBE0 | System Memory Manager. | ELF |
LOADCORE | 0x840800 | 0x1FE00 | The core of IOP module loading. Provides the lowest level of IOP module loading functions. Also handles the startup of the IOP. | ELF |
EXCEPMAN | 0x842D80 | 0x22380 | Exception manager. | ELF |
INTRMANP | 0x843960 | 0x22F60 | Interrupt Manager. According to wisi, it is for PS mode. | ELF |
INTRMANI | 0x845370 | 0x24970 | Interrupt Manager. According to wisi, it is for IOP mode. | ELF |
SSBUSC | 0x8471B0 | 0x267B0 | SSBUS Controller library. The SSBUS seems to be the bus that all peripherals get connected to. It seems to have the power to control the mapping of the device registers, as well as access timing. | ELF |
TIMEMANP | 0x847920 | 0x26F20 | Timer Manager (PS mode) | ELF |
TIMEMANI | 0x848500 | 0x27B00 | Timer Manager (IOP mode) | ELF |
DMACMAN | 0x849130 | 0x28730 | DMA Controller Manager. | ELF |
SYSCLIB | 0x84C830 | 0x2BE30 | System C Library. | ELF |
HEAPLIB | 0x84EF90 | 0x2E590 | Memory HEAP LIBrary (i.e. thvpool, thfpool) | ELF |
THREADLIB | 0x84FC90 | 0x2F290 | Multi_Thread_Manager | ELF |
VBLANK | 0x858A20 | 0x38020 | V-Blank management | ELF |
IOMAN | 0x8597B0 | 0x38DB0 | IO Manager | ELF |
MODLOAD | 0x85B720 | 0x3AD20 | IOP module loader. | ELF |
ROMDRV | 0x85DA70 | 0x3D070 | ROM driver. Provides access to the boot ROM (rom0). | ELF |
ADDDRV | 0x85E960 | 0x3DF60 | Adds support for the DVD ROM (rom1:), via ROMDRV. | ELF |
STDIO | 0x85DDC0 | 0x3D3C0 | Standard I/O library. | ELF |
SIFMAN | 0x85F9B0 | 0x3EFB0 | SIF manager. | ELF |
SIFINIT | 0x860F50 | 0x40550 | Initializes the SIF. | ELF |
EESYNC | 0x861370 | 0x40970 | For synchronizing with the EE, at the end of IOP resets. EESYNC from DNAS images are evil; they also perform a memory wipe of the region from 0x00084000 to .0x00100000. | ELF |
EENULL | 0x861810 | 0x40E10 | The idle thread (id #0) module, in ps2 loaded to 0x00081FC0. | BIN |
PS1ID | 0x861850 | 0x40E50 | Only found in newer boot ROMs | BIN |
LIBFI | 0x861860 | 0x40E60 | Not present in the boot ROM of the SCPH-10000 and SCPH-15000. | BIN |
PS1VERJ | 0x861950 | 0x40F50 | BIN | |
PS1VERA | 0x861960 | 0x40F60 | BIN | |
PS1VERE | 0x861970 | 0x40F70 | BIN | |
PS1VERC | 0x861980 | 0x40F80 | BIN | |
PS1VERH | 0x861990 | 0x40F90 | BIN | |
OSDSYS | 0x8619A0 | 0x40FA0 | The browser | BIN |
- | 0x8619B0 | 0x40FB0 | BIN | |
RDRAM | 0x861A00 | 0x41000 | Provides a RDRAM test for the EE at power-on. This is run from RESET. | BIN |
EELOADCNF | 0x864750 | 0x43D50 | Contains the IOP boot configuration file for EELOAD. | BIN |
SIFCMD | 0x864900 | 0x43F00 | SIF command module. Contains the SIF command and SIF RPC functions. | ELF |
REBOOT | 0x866B40 | 0x46140 | The reboot service. Receives IOP reset packets from the EE, from across the SIF. | ELF |
LOADFILE | 0x867310 | 0x46910 | The RPC server for MODLOAD | ELF |
EECONF | 0x869A70 | 0x49070 | Loads part of the system configuration from the MECHACON EEPROM. Also configures and resets some peripherals, depending on the model version. In slimlines, and possibly on PS3 EECONF will also load the MAC address. | ELF |
- | 0x86A9F0 | 0x49FF0 | BIN | |
IOPBOOT | 0x86AA00 | 0x4A000 | IOP bootup program | BIN |
- | 0x86BB60 | 0x4B160 | BIN | |
TBIN | 0x86C200 | 0x4B800 | The PS1 monitor program. Seems to be the PS1 BIOS. This is started by RESET, when the IOP is in PS1 mode. | BIN |
XSHA1 | 0x87A170 | 0x59770 | sha1 - this only present in PS3. It is used as additional antipiracy check. It seems that it calculate disc main elf checksum and compares it with some database. Config related? | ELF |
XLOADFILE | 0x87B140 | 0x5A740 | Updated module | ELF |
SIO2MAN | 0x87E1F0 | 0x5D7F0 | SIO2 manager. Provides access to the SIO2 interface. | ELF |
- | 0x87FE20 | 0x5F420 | BIN | |
MCSERV | 0x881D40 | 0x61340 | RPC server for MCMAN. | ELF |
- | 0x883A40 | 0x63040 | BIN | |
KROMG | 0x884A00 | 0x64000 | BIN | |
- | 0x8866C0 | 0x65CC0 | BIN | |
KROM | 0x886A00 | 0x66000 | Kanji ROM? Not sure where this is used. | BIN |
- | 0x8A0870 | 0x7FE70 | BIN | |
ROMVER | 0x8A0900 | 0x7FF00 | ROM version. | BIN |
- | 0x8A0910 | 0x7FF10 | BIN | |
VERSTR | 0x8A0930 | 0x7FF30 | Version string. Probably PS1 ROM will use this because that this string is also present in PlayStation consoles. | BIN |
- | 0x8A0990 | 0x7FF90 | BIN | |
ROMGSCRT | 0x8A0A00 | 0x80000 | BIN | |
NCDVDMAN | 0x8A3730 | 0x82D30 | It seems to be a heavily stripped-down CDVDMAN module, with no support for some S-command functions like sceCdRI. | ELF |
SECRMAN | 0x8B0170 | 0x8F770 | Security Manager. Signing is NOT done with the one in ROM, but with a special version that comes with the utility discs. Looks like PS3 units have a different SECRMAN module from retail sets, similar to PS2 TOOL one. | ELF |
MCMAN | 0x8B4630 | 0x93C30 | Memory Card Manager. | ELF |
PADMAN | 0x8C3AC0 | 0xA30C0 | Pad manager. | ELF |
CDVDMAN | 0x8CD210 | 0xAC810 | The CD/DVD manager. | ELF |
CDVDFSV | 0x8D55C0 | 0xB4BC0 | The RPC server for CDVDMAN. | ELF |
FILEIO | 0x8DD980 | 0xBCF80 | RPC server for IOMAN. Sony has greatly changed the semantics and design of FILEIO after some point. Connecting an old FILEIO EE RPC client to a newer server will result in a severe IOP crash. | ELF |
CLEARSPU | 0x8DFA80 | 0xBF080 | Seems to clear/reset the SPU, but is known to cause crashes under some conditions. Not sure if it's buggy or not. Only used by the OSDSYS of the SCPH-10000 and SCPH-15000, probably retained for backward-compatibility. | ELF |
UDNL | 0x8E16C0 | 0xC0CC0 | It is responsible for selecting the modules and starting the IOP, during the final phase of the IOP reset where the desired modules are to be loaded into the IOP. | ELF |
IGREETING | 0x8E35C0 | 0xC2BC0 | Displays boot information (i.e. IOP boot type, EBOOTP, IBOOTP, switch positions for DSW602 and the type of DSW602 board installed | ELF |
EELOAD | 0x8E4620 | 0xC3C20 | The EE ELF loader, which is loaded by LoadExecPS2() to 0x00082000 in PS2 for loading ELFs. | BIN |
XCDVDMAN | 0x8F37A0 | 0xD2DA0 | cdvd_driver - Updated module | ELF |
XCDVDFSV | 0x902530 | 0xE1B30 | cdvd_ee_driver - Updated module | ELF |
OSDSND | 0x910960 | 0xEFF60 | OSD sound library. This is actually the tentative sound driver, which is called 'librspu2' in the Sony SDK. | ELF |
PS2LOGO | 0x93B5B0 | 0x11ABB0 | Displays the PlayStation 2 logo from the inserted disc. For newer consoles, if the logo cannot be decrypted properly, it will fall back to the browser. Not actually required to boot games, but the Sony OSDSYS boots PS2 games through this program. | ELF |
XPARAM2 | 0x957F00 | 0x137500 | Store IOP emulation settings/flags | ELF |
OSDSYS | 0x95A400 | 0x139A00 | The browser | BIN |
PIOPRP | 0x998280 | 0x177880 | BIN | |
KERNEL | 0x9DC1E0 | 0x1BB7E0 | The EE kernel | BIN |
Description source: https://gist.github.com/uyjulian/25291080f083987d3f3c134f593483c5
Virtual PS2 HDD[edit]
There are 2 different 'PS2 game' contents that can be installed in PS3 HDD (CATEGORY's 2P and 2G ).2P are games released from PSN as 'PS2 Classic' in .PKG format, and 2G are a few real 'PS2 DVD discs' that can be installed in the PS3 HDD, this installation is managed by the PS2_system_data.pkg.
This games can be installed in real PS2 (in the internall HDD of a PS2 fat)... later this same installation was used in the PSX... and when implemented in PS3 there was needed to use a virtual PS2 HDD image file keeping the same format than the original HDD used in PS2.
Game files (extracted from the real PS2 disc) are installed in a IMAGE.DAT file, this file is a 1:1 'raw copy' of a PS2 HDD.
This IMAGE.DAT is placed in the 'install folder' (inside USRDIR folder) and his size can vary up to 10+GB
There are 2 different installations: the most common is used to store 'game expansions' (e.g: used by additional content in SOCOM games)... the other type of installation is a 'full install' and it seems the only game that uses it is 'Final Fantasy XI' (main game installation when the game boots for first time + game expansions added later when needed in the same IMAGE.DAT)
PS2_system_data.pkg itself uses an IMAGE.DAT file (6.43 MB)
The structure of this 'virtual PS2 HDD' uses an 'APA header' and a 'APA MBR' + several 'APA partitions', some of them containing 'PFS filesystems'.
- Notes
- List of PS2 disc games compatibles with PS3 HDD installation hardcoded in dev_flash/vsh/module/game_ext_plugin.sprx
- Virtuall PS2 HDD support module dev_flash/vsh/module/libps2hdd.sprx ?
PS2 System Data (PSN HDD Tool package)[edit]
Titles supporting HDD installation
- Nobunaga's Ambition Online and Expansion Packs
- Final Fantasy XI (disc1=SCUS97266 disc2=SCUS97269)and Expansion Discs
- SOCOM II: U.S. NAVY SEALs and Related discs included with OPM Issue 87, OPM Issue 88, OPM Issue 89, OPM Issue 90
- SOCOM 3: U.S. NAVY SEALs
- SOCOM: U.S. NAVY SEALs Combined Assault
- Front Mission Online
- Official PlayStation Magazine Issue 87, 88, 89, 90 Discs
( non-official ps2hdd gameslist )
TitleID/DiscID in game_ext_plugin.sprx[edit]
Mainly Final Fantasy 11, Nobunaga Ambition Online, Socom IDs and the required HDD Gigabyte amount for install onto the internal hdd.
Speculation: flags are AND' with 0,1,2 (selected from sys_sm_get_hw_config according to ps2emu hardware flags? 0 = no hw?, 1 = gxemu?, 2=full hw? )
flags | DiscID | Alternative? DiscID | GigaByte | Title | 0 = VMC 1 = IMAGE.DAT | Internal Name? | GigaByte |
---|---|---|---|---|---|---|---|
0xFFFF | 'SLPS20200' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM65705' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM65706' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM65953' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM66393' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM66394' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM66893' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM66894' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLPM55229' | 'SLPS25200' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SLPM-25200.MAGIC.APPLICATION' | 0x15 |
0x0001 | 'SLPM65197' | 'SLPM65197' | 0x07 | '信長の野望 Online' | 1 | 'PP.SLPM-65197.MAGIC.APPLICATION' | 0x07 |
0x0001 | 'SLPM65783' | 'SLPM65197' | 0x07 | '信長の野望 Online' | 1 | 'PP.SLPM-65197.MAGIC.APPLICATION' | 0x07 |
0x0001 | 'SLPM66539' | 'SLPM65197' | 0x07 | '信長の野望 Online' | 1 | 'PP.SLPM-65197.MAGIC.APPLICATION' | 0x07 |
0x0001 | 'SLPM66954' | 'SLPM65197' | 0x07 | '信長の野望 Online' | 1 | 'PP.SLPM-65197.MAGIC.APPLICATION' | 0x07 |
0xFFFF | 'SCUS97269' | 'SCUS97269' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SCUS-97266.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLUS21070' | 'SCUS97269' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SCUS-97266.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLUS21404' | 'SCUS97269' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SCUS-97266.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLUS21694' | 'SCUS97269' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SCUS-97266.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SLUS21704' | 'SCUS97269' | 0x15 | 'FINAL FANTASY XI' | 1 | 'PP.SCUS-97266.MAGIC.APPLICATION' | 0x15 |
0xFFFF | 'SCUS97275' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
0xFFFF | 'SCUS97474' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
0xFFFF | 'SCUS97340' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
0xFFFF | 'SCUS97341' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
0xFFFF | 'SCUS97342' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
0xFFFF | 'SCUS97442' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
0xFFFF | 'SCUS97545' | 'SCUS97275' | 0x02 | 'SOCOM' | 0 | 'PP.SCUS-97275..SOCOM_II' | 0x02 |
In PS2 Emulator same Title IDs are present with following information:
Emulators management from GameOS[edit]
Mountpoints[edit]
ps2_netemu syscalls[edit]
LPAR / AUTH ID's[edit]
Name | Auth ID | Self (/dev_flash/ps2emu) | Notes |
---|---|---|---|
PS2_LPAR | 0x1020000003000001 | ps2_emu.self | |
*SCE_CELLOS_SYSTEM_MGR_PS2 | 0x107000001D000001 | ||
PS2_GX_LPAR | 0x1020000003000001 | ps2_gxemu.self | |
*SCE_CELLOS_SYSTEM_MGR_PS2_GX | 0x107000001D000001 | ||
PS2_SW_LPAR | 0x1020000003000001 | ps2_softemu.self | |
*SCE_CELLOS_SYSTEM_MGR_PS2_SW | 0x107000001D000001 | ||
PS2_NE_LPAR | 0x1020000003000001 | ps2_netemu.self | |
*SCE_CELLOS_SYSTEM_MGR_PS2_NE | 0x107000001D000001 |
boot_ps2[edit]
http://foxbrew.org/ps3/otheros-utils/boot_ps2.git
http://www.multi...upload.com/QKK7ETPHXZ boot_ps2-src.rar (1.43 KB)
http://www.multi...upload.com/YCZ63Y6TQ5 boot_ps2.pkg (69.17 KB)
http://www.multi...upload.com/QKK7ETPHXZ boot_ps2-src.rar (1.43 KB)
http://www.multi...upload.com/YCZ63Y6TQ5 boot_ps2.pkg (69.17 KB)
any chance of having this package resigned for 4.21 cfw? might be useful to see if it'll boot ps2_netemu.self LPAR.
(can boot ps2lpar, but also petitboot if otheros installed! 50:50 chance)
boot_ps2 4.xx eboots.zip (153 KB)
installing 3.55 pkg and replacing the eboot and editing the sfo should work.
installing 3.55 pkg and replacing the eboot and editing the sfo should work.
Getting compatibility hardware info[edit]
See: PS2_Compatibility#Software
ps2bootparam.dat[edit]
A file created at path: dev_hdd0/tmp/game/ps2bootparam.dat
- See: ps2bootparam.dat
Cobra core[edit]
taken from storage_ext.c
- sets proper ps2_(gx/soft)emu.self path for reboot
- patches ss_storage service 0x5004 disc checks on ss_server3.self inside lv1
- and the usual either replace read/ioctl for iso etc.
Game CONFIG[edit]
Some of the PS2 emulator types (such ps2_gxemu.self, ps2netemu.self) are able to load config commands that are applyed 'by game ID'. The concept of 'game patches' is not technically correct because some of the commands does patching functions but others does other things (not patching), and other commands works as switches or sets a value that are enviromental settings for the emulator (not for the game) but because are applyed 'by game' should be considered enviromental settings for that specific game, so for simplification purposes you can think in all this data as 'game configs'
This 'game config' data seems to work in the same way for all the PS2 emulator types but can be located in different places, some are hardcoded inside the emulators itself (inside the .self), and at the time the 'PS2 classics' emulator (ps2_netemu.self) was developed this config can be loaded from an external file
In short, the 'game configs' can modify the game image (by patching it) and can be used to configure the virtual PS2 (the emulated machine). And can be loaded from hardcoded data (inside the .self) or from an external file (this feature is supported only by ps2_netemu.self)
The config data consists in a list of concatenated values of 8 bytes lenght (uint32_t), and can be processed like this:
Config Commands[edit]
At the time of writing this, most of the commands are completely or partially unknown.
If you want to read some speculation and brainstorming about them, please join the Discussion page
If you want to read some speculation and brainstorming about them, please join the Discussion page
CMD ID | Example | Notes | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
0x00 | Copy following title id for enforcing if available + end config | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x01 | 2x uint32_t Params ( offset, hack id 0-0x3B) - add_hook?
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x02 | 1 Param, Config file revision ? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x03 | 0 Param, sets something 0 (Fire Pro Wrestling Returns) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x04 | 1 Param uint32_t index (i*0x80, special 0x12345: 0x91a280?) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x05 | read next command | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x06 | 0 Param, sets something 0x14F80 (85888'd) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x07 | 1 Param uint32_t (default 1) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x08 | 8 Param uint32_t (read mask,read mask, original opcode, original opcode, write mask, write mask, replace opcode, replace opcode) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x09 | uint32_t count, <list> (offset, original opcode, original opcode, replace opcode, replace opcode) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x0A | uint32_t count, <List> (offset, original opcode, replace opcode) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x0B | 1 Param uint32_t count, <List> {sector id, offset, sizeof present opcodes, replace opcodes, original opcodes} | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x0C | 1 Param (uint16_t, uint16_t) --- 0/1/2,<0x63> | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x0D | 1 Param, true/false? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x0E | 1 Param offset --- Improves ADD/SUB accuracy for selected offset (incl. Floats) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x0F | List <uint32_t Param, uint32_t Param> --- More accurate memory range (FPU mul/div/sub/add accuracy related) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x10 | List <uint32_t Param, uint32_t Param> --- More accurate memory range (COP2, mul/div/sub/add accuracy related) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x11 | 1x uint32_t Param. ADD/SUB accuracy related, all emulated ADD/SUB instruction variations check that value. Param seems to be VU memory offset (need confirmation). | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x12 | <List> (uint32_t count, | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x13 | 1x uint64_t Param | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x14 | 0 Param, sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x15 | 4 | 1 Param ( <1, >1 ), different settings/mode? | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x16 | = 0x05 (next id) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x17 | 1 | 1 Param, true/false? | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x18 | = 0x16 = 0x05 (next id) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x19 | 0 Param, sets something 1 --- SB_SIO2 related? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x1A | 0 Param, sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x1B | 0 Param, sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x1C | read uint32_t (use uint8_t) Param (default 3) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x1D | read uint32_t (use uint8_t) Param | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x1E | read uint32_t (use uint8_t) Param | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x1F | uint32_t Param (default 0x3E8?) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x20 | uint64_t Param (default 0x3C) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x21 | 1 | 1 Param: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x22 | 0 Param, sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x23 | 0 Param --- memcpy 0x100 Bytes and sets 0x14E00 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x24 | uint64_t Param | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x25 | = 0x18 = 0x16 = 0x05 (next id) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x26 | List <uint32_t Param,uint32_t Param> --- Improves ADD/SUB accuracy for selected memory range (incl. Floats) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x27 | List <uint32_t Param,uint32_t Param> --- Improves COP2 operations accuracy for selected memory range | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x28 | 1x uint32_t Param (<=3) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x29 | 2x uint32_t Param, | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x2A | 0 Param, sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x2B | 0 Param, sets something 1 --- something with Controller (analog?) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x2C | 1 Param, uint32_t | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x2D | = 0x25 = 0x18 = 0x16 = 0x05 (next id) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x2E | 1 Param, uint32_t | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x2F | 1 Param, uint32_t | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x30 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x31 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x32 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x33 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x34 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x35 | 0 Param --- Enables Force Flip Field, described in emu setting as 'Fix for [Hang] for soft-lock' | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x36 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x37 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x38 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x39 | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x3A | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x3B | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x3C | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x3D | 1 Param, uint32_t Config file revision
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x3E | 0 Params --- Sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x3F | 1 Param, uint32_t | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x40 | 0 Param --- Sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x41 | 0 Param --- Sets something 1 (Disables some lwsync - speedhack?) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x42 | 1 Param, revision ? | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x43 | 1 Param --- Equal to 0x40, but with Parameter: | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x44 | 0 Param --- Disables Smoothing and Smoothing option | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x45 | 0 Param --- Sets something 1 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x46 | 0 Param --- Enables L2H Improvement, [Performance] related setting for titles using L2H | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x47 | 0 Param --- Enables XOR CSR - XOR System Status Register (0x12001000)?, [Graphics] related setting, should fix fullscreen line corruption | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x48 | VSYNC Delay, 2x uint32_t Param
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x49 | 0 Param --- Sets something 0xB,0,0 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x4A | 0 Param --- Sets something 0x15100 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x4B | 2x uint32_t Params: offset,int (-1? selects different titleid?) - /game/ /../ USRDIR/SAVEDATA related | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x4C | 2x uint32_t Params: offset,int (2 = current path?, 3 = new ISO.BIN.ENC path?, other= ?) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x4D | 1 uint32_t Param (can be -1) --- Sets something (same as 0x49 but) 0xC, Param, 0 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x4E | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x4F | (nothing) | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
0x50 | 0 Param --- Switch to default gamepad config ? |
Config file examples (for netemu)[edit]
Official[edit]
Title ID | Title | Config Data | Revision | Notes |
---|---|---|---|---|
NPUD20461 | Bloodrayne | 15942 (4.00+) | ||
NPUD20862 | Bloodrayne 2 | 16189 (4.00+) | ||
NPUD21269 | Bully | 15753 (3.73+) | ||
NPJD00004 | Contra Shattered Soldier | 16319 (4.10+) | ||
NPJC00002 | Dark Cloud | 16135 (4.00+) | ||
NPUD20071 | Dead Or Alive 2 Hardcore | 17136 (4.50+) | fixes blackscreen | |
NPJD00011 | Dead Or Alive 2 Hardcore | 15753 (3.73+) | fixes blackscreen | |
NPED00027 | Deadly Strike | 16534 (4.20+) | ||
NPED00087 | Disneys PK: Out of the Shadows | blackscreen | ||
NPUD21944 | Doras Big Birthday Adventure | 16365 (4.20+) | ||
NPJD00005 | Dragon Force | 16598 (4.20+) | ||
NPUD20766 | Fatal Frame II | 17071 (4.50+) | ||
NPED00052 | God Hand | 16223 (4.10+) | ||
NPUD20712 | Gradius V | 15927 (3.71+) | ||
NPUD20552 | Grand Theft Auto - Vice City | 16805 (4.30+) | ||
NPED00063 | Grand Theft Auto III | 15753 (3.73+) | ||
NPUD20062 | Grand Theft Auto III | 16200 (4.10+) | ||
NPED00070 | Grand Theft Auto - San Andreas | 16480 (4.20+) | ||
NPUD20946 | Grand Theft Auto - San Andreas | 16480 (4.20+) | ||
NPJD00062 | Grandia II | texture bugs | ||
NPUD21604 | GRIMgRiMoiRe | 15634 (3.70+) | ||
NPJD00020 | Katamari Damacy | 16454 (4.20+) | ||
NPUD20847 | La Pucelle: Tactics | 16347 (4.10+) | fixes blackscreen - config rebuild function/opcode from 0x138A60 by rewrite it under 0x100000 offset, and jump to it by j 0x000FFA40 (note: area under 0x100000 is unused in 99% games, but can be freely addressed). | |
NPUD20275 | Kessen II | 15753 (3.73+) | fixes spickey polygon syndrome problems for characters in cutscenes/selection/.. | |
NPJD00040 | Mana Khemia 2 | 16792 (4.30+) | fixes blackscreen | |
NPUD20827 | Manhunt | 15753 (3.73+) | fixes graphical issues | |
NPED00145 | Max Payne | 15753 (3.73+) | fixes game hang on first cutscene/cutscenes | |
NPED00055 | MX World Tour: Featuring Jamie Little | blackscreen | ||
NPUD21577 | Odin Sphere | 15632 (3.70+) | ||
NPJD00028 | Phantasy Star Complete Collection | 16824 (4.40+) | ||
NPUC97142 | Primal | 15717 (3.73+) | fixes loading screen freezing | |
NPUD21120 | Psychonauts | 15753 (3.73+) | ||
NPUD20272 | Rayman Arena | 15753 (3.73+) | ||
NPJD00079 | Raw Danger! | fps problem | ||
NPUD20442 | Red Faction 2 | 16194 (4.00+) | ||
NPUD20471 | Rygar | 15753 (3.73+) | fixes hard crash at start when leaving the place | |
NPUD20974 | Shin Megami Tensei Digital Devil Saga 1 | 17132 (4.50+) | fixes screen shakes/framerate cracks | |
NPUD20911 | Shin Megami Tensei Nocturne | 16886 (4.40+) | fixes screen shakes/flickers | |
NPUD21621 | Shin Megami Tensei Persona 3 FES | 16712 (4.25+) | ||
NPUD21782 | Shin Megami Tensei Persona 4 | 15753 (3.73+) | Dungeon name in the corner is glitched (shows black bar). | |
NPUC97355 | Siren | 16661 (4.25+) | ||
NPED00272 | Summoner | 15753 (3.73+) | fixes blackscreen | |
NPUC97264 | Syphon Filter The Omega Strain | 16415 (4.20+) | fixes texture bugs | |
NPJD00080 | Zettaizetsumei Toshi (Disaster Report) | 17446 (4.78) |
Unofficial[edit]
ID | Title | Config Data | Revision | Notes |
---|---|---|---|---|
ALL | .hackinfection Part 1 | 15753 (3.73+) | fix freeze | |
SLUS-21268 | 24 The Game | 15717 (3.73+) | fixes loading screen freezing | |
SCES-50885 | Ape Escape 2 | 17495 (4.78+) | Force game to not create Mipmaps. Fix flickering textures completely. | |
SLUS-21165 | Arc the Lad End of Darkness | 15634 (3.70+) | fixes not displaying/freezing dialogs | |
SLUS-21445 | Ar Tonelico - Melody of Elemia | 16792 (4.30+) | fixes blackscreen | |
SLUS-21788 | Ar tonelico II - Melody of Metafalica | 16792 (4.30+) | fixes blackscreen | |
Atelier Iris | 16792 (4.30+) | fixes blackscreen | ||
Atelier Iris 2 | 16792 (4.30+) | fixes blackscreen | ||
Atelier Iris 3 | 16792 (4.30+) | fixes blackscreen | ||
SLES-50672/SLUS-20035 | Baldur's Gate - Dark Alliance | 17179 (4.50+) | fixes backgrounds not rendering properly (see: [1] ) | |
Baldur's Gate 2 | 17179 (4.50+) | fixes backgrounds not rendering properly | ||
Bard's Tale | 17179 (4.50+) | fixes backgrounds not rendering properly | ||
SLES-51044 / SLES-52968 | Burnout 2: POI | 16454 | Fixes all white rendered textures/shadows (Big thanks to Maori-Jigglypuff for patch code! ) | |
SLUS-20497 | Burnout 2: POI | 16454 | Fixes all white rendered textures/shadows (Big thanks to Maori-Jigglypuff for patch code! ) | |
SLUS-21168/SLES-53755/SLPM-66175/SLKA-25328 | Castlevania: Curse of Darkness | fixes Graphic issues with Spiky Polygons (PCSX2 workaround VU clamping mode none) | ||
Champions of Norath | 17179 (4.50+) | fixes backgrounds not rendering properly | ||
Champions Return to Arms | 17179 (4.50+) | fixes backgrounds not rendering properly | ||
SLUS-21574 | Dawn of Mana | 15717 (3.70+) | fix? (untested) | |
SCUS-97146 | Disney's Treasure Planet | 17136 (4.50+) | Fixes black screen at start, it apply to STREAM_D.IRX file in IOP folder. Patch is very weird because it apply to bad offset (should be 0x574), but if applied to correct one then game error with 'invalid tp2 file' | |
ALL | Dynasty Warriors 3/Dynasty Warriors 3 Xtreme Legends | 15753 (3.73+) | fix blackscreen | |
SLES-53539 | Fahrenheit | 16886 (4.40+) / | fixes freeze after Lucas' apartment | |
Fallout | 17179 (4.50+) | fixes backgrounds not rendering properly | ||
SLUS-20658 SLES-51467 SLPM-65548 SLPM-65803 | Freedom Fighters | 15717 (3.70+) | fix freeze when you get control at start | |
SLUS-21702 | Fire Pro Wrestling Returns | 16886 (4.40+) | fixes interlaced artifacts | |
SLES-52065 | Flipnic | 17495 (4.78+) | Remove horizontal lines at full screen, and reducing screen shakes little bit | |
SCES-53851 | Forbidden Siren 2 | 16886 (4.40+) | Graphic issues with Spiky Polygons | |
SLUS-20343 | Forever Kingdom | 16454 | Fix for bridge that can't be crossed after opening. | |
SLUS-20993 | Ghosthunter | 17495 (4.78+) | fixes random minor flickering, and ladder bug (see: [2] ) | |
SLES-54317 | Ghost Rider | 16886 (4.40+) | texture fix: white overblending ingame | |
SLUS-20758 | Growlanser Generations | 15753 (3.73+) | fix menu freeze? (untested) | |
SLUS-20576 | Harry Potter and the Chamber of Secrets | 15753 (3.73+) | Fix black screen? (untested) | |
SLUS-20926/SLPM-65612/SLKA-25172/SLES-52440/SLES-52527/SLES-52600 | Harry Potter and The Prisoner of Azkaban | 17495 (4.78+) | Fix for 3D graphics issues. However sometimes textures have a problem (mipmap?) | |
SLES-54971(?)/SLUS-21628 | Hot Wheels: Beat That! | 15753 (3.73+) | Fix for turning off ps3 after selecting track | |
SLUS-21307 | Ice Age 2 The Meltdown | 15753 (3.73+) | Fix freeze at the game logo | |
SLUS-21196 | Indigo Prophecy | 15753 (3.73+) | Fixes freeze | |
SCES-53286/SCUS-97429 | Jak X | 15753 (3.73+) | Fixes freeze while saving game | |
SLPM-66675 | Kingdom Hearts II Final Mix | 15753 (3.73+) | Fixes Hostile Program Boss issue. | |
SLUS-21799 | Kingdom Hearts Re: Chain of Memories | 15753 (3.73+) | Fixes tutorial issue? (untested) | |
SLES-50196 | Legacy of Kain: Soul Reaver 2 | 15753 (3.73+) | Turn off mipmapping in game engine. Completely fix flickering, and bad texturing. | |
SLUS-20671 | Mafia | 15753 (3.73+) | Fix freeze at start. Additional two patches comparing to gxemu included here allow to avoid translation lookaside buffer misses in some places, and are required to finish game. | |
SLUS-21735 | Mana Khemia: Alchemists of Al-Revis | 16792 (4.30+) | fixes blackscreen | |
SLUS-20230 | Max Payne | 15753 (3.73+) | fixes game hang on first cutscene/cutscenes | |
SLUS-21550 | Metal Slug Anthology | 15753 (3.73+) | Fix launching MS6 by using LoadImageAndReboot instead of FlushCache. Seems to work much better than GXemu solution. | |
SLUS-20983 | Musashi: Samurai Legend | 16886 (4.40+) | no sps fix, but reduces heavily | |
SLES-50134 SLES-50176 SLES-50177 SLES-50178 SLES-50179 | Oni | 17495 (4.78+) | fixes black screen at start | |
SLUS-20064 | Oni | 17495 (4.78+) | fixes black screen at start | |
SLUS-21037 | Project: Snowblind | fixes mipmap/texturing issues | ||
SLES-52384 | Project Zero II | 17071 (4.50+) | Fix textures problems + performance improvement | |
SLUS-20167 | Quake 3 - Revolution | 17495 (4.78+) | Break creating mipmaps to fix graphical issues / flickering (ps2_netemu not support mipmapping) | |
SLES-50126 | Quake 3 - Revolution | 17495 (4.78+) | Break creating mipmaps to fix graphical issues / flickering (ps2_netemu not support mipmapping) | |
SLUS-21262 | Radiata Stories | 15753 (3.73+) | Fix black screen and ghosting/gfx | |
SLPS-25606/SLPS-25851 | Raw Danger! | 16808 (4.30+) | Untested! But Raw Danger! is Zettaizetsumei Toshi 2, so same issue + solution as part 1? | |
SLUS-20174 | Rumble Racing | 17136 (4.50+) | fixes black screen after Playstation 2 logo. Patch apply to AUDIO.IRX file in MODULES folder | |
SLES-51345 | Run Like Hell | 17495 (4.78+) | fixes main character flickering/texturing | |
SLES-51445 | Rygar: The Legendary Adventure | 15753 (3.73+) | fixes hard crash at start when leaving the place | |
SLES-55147/SLUS-21731 | Silent Hill: Origins | 16886 (4.40+) | fixes white overblending at burning house | |
SLUS-20488 | Star Ocean - Till the End of Time | 15753 (3.73+) | Fix black screen | |
SLUS-21240 (v1.01) | Star Wars: Battlefront II | 15753 (3.73+) | Fix freeze. Work only with v1.01 version of game. Patch apply to SWBFRNT2.ELF file. | |
SLUS-21240 (v2.01) | Star Wars: Battlefront II | 15753 (3.73+) | Fix freeze. Work only with v2.01 version of game. Patch apply to SWBFRNT2.ELF file. | |
SLES-50371 | Star Wars: Jedi Starfighter | 15717 (3.73+) | Without it title calls PS2::Exit() at the end of a bonus stage. | |
SLES-54658 | Star Wars: The Force Unleashed | 1337 (ALL) | Fix graphical gliches, subtitles, QTE buttons | |
ALL | Superman Returns | 15753 (3.73+) | fixes Graphic issues | |
SLUS-21386 | Tales of The Abyss | 15717 (3.73+) | Fix freeze at Choral Castle | |
SLPS-25842 | Tales of Destiny (Director's cut) | 17495 (4.78+) | Fix freezes | |
ALL | Tokyo Extreme Racer 3 | 17041 (4.46+) | Fix screen jumps | |
ALL | Tony Hawk's series | 15753 (3.73+) | fixes Graphic issues with Spiky Polygons | |
ALL | TY The Tasmanian Tiger | 15753 (3.73+) | Fix graphical glitches, and fix locks up once you're given control. | |
SLUS-21106 | True Crime: NYC | 15753 (3.73+) | fixes freeze when something in 3D appearing | |
SLES-51958 | Whiplash | Trick game to not produce mipmaps. Fix graphical issues. | ||
SLUS-21452 | Valkyrie Profile 2 - Silmeria | 15753 (3.73+) | Fix black screen and ghosting/gfx (requires speed fix) | |
SLUS-20469 | Xenosaga Episode I: Der Wille zur Macht | 17495 (4.78+) | Fix 'erde kaiser' quest. Config cause massive slow down, and should be used only for that part of game, then removed safely. | |
Silent Hill 2 | shadow and flicker issues | |||
Silent Hill 3 | shadow issues |
Config data examples (hardcoded)[edit]
Inside ps2_emu.self[edit]
Embedded patches are based on Checksum/Hash of title. ps2_emu is only emulator version where patches are described inside self file in ascii. Known patch types described in ascii are: Patch data, new SPU2 params, and Setting mecha HACK to show GODZCD as GODZCDDA.
PS2 Title | Hash | Game | Patch Type | Data |
---|---|---|---|---|
SCUS_971.46 | 0x6B1ADE00D | Disney's Treasure Planet | Patch data - Fixes black screen at start, it apply to STREAM_D.IRX file in IOP folder. | 0x147C (sector) , 0x580 (offset) (- 0xC on disc) |
SLUS_201.74 | 0x23D92589C5 | Rumble Racing | Patch data - fixes black screen after Playstation 2 logo. Patch apply to AUDIO.IRX file in MODULES folder | 0x3AEDA (sector), 0x120 (offset) |
SLUS_211.96 | 0x24D92589D5 | Indigo Prophecy | new SPU2 params | 1 |
SLPM_661.93 | 0x608634992D | Fahrenheit (NTSC-J) | new SPU2 params | 1 |
SLUS_212.96 | 0x5CA15DF14D | Dance Factory | Setting mecha HACK to show GODZCD as GODZCDDA |
Inside ps2_gxemu.self/ps2_softemu.self[edit]
There are hundreds of configs hidden in ps2_gxemu, and ps2_softemu self files. Internal config structure is basing on custom hash based on Title ID, internal memory offset pointing to place where true patch instruction is, and count of used commands. When disc/iso is started emulator search for configs, and if config for selected ID exist, then emulator apply it by itself. Is not perfect way of applying patches, because some games use the same ID, but different content. Good example here is Star Wars Battlefront II SLUS-21240, where some versions of game can refuse to work because it apply bad patch.
PS2 Title | Hash | Game | Patch Type | Data |
---|
TitleID/DiscID in ps2_netemu.self[edit]
There are 193 titleIDs listed inside ps2_netemu.self. More precisely, into XPARAM2.ELF file of PS2 Bios included in ps2_netemu.self. XPARAM2.ELF is called by OSDSYS, then ID check is performed. If title ID match to one of included in the table, different IOP emulation settings are applied.There are internal flags related to every title ID included inside file, still unknown what they do. Also some arguments, in plain text. File in real ps2 is introduced in SCPH-750XX models so exactly when DECKARD Power PC chip exchanged original IOP chip. This can explain why it is still in PS3 netemu bios. Because PS3 it is ppc that can need the same/similar flags.
Original PS2 bios include similar list file called XPARAM.ELF, but Title IDs there are not the same, although some of them exist on both lists.
ID | Title | Command | Value | Remarks |
---|---|---|---|---|
PBPX_952.01 | DVD Utility Disc Version 1.00 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.02 | DVD Utility Disc Version 1.01 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.03 | DVD Utility Disc Version 1.01 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.06 | DVD Player (Version 2.01) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.07 | DVD Player (Version 2.10) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.08 | DVD Player (Version 2.10) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.09 | DVD Player (Version 2.10) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.10 | DVD Utility Disc Version 2.10 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.11 | DVD Utility Disc Version 1.00 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.21 | DVD Player (Version 2.12) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.22 | DVD Player (Version 2.14) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.24 | DVD Player (Version 2.16) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_952.28 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag | |
PBPX_952.35 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag | |
PBPX_952.39 | Online Start Up Disc v3.0 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_955.01 | Linux for PS2 Beta Release 1 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_955.07 | Playstation 2 Linux Runtime Environment v1.0 (Disc 1) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_955.09 | Linux for PS2 Release 1.0 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PBPX_955.18 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag | |
PDPX_991.09 | DVD Player (Version 3.04) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PSXC_002.01 | PSX Update Disc 1.10 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PSXC_002.02 | PSX Update Disc 1.20 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PSXC_002.03 | PSX Update Disc 1.31 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
PTPX_970.38 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag | |
SCAJ_201.25 | Tekken 5 | 0x0B | 0x40000000 | |
SCAJ_201.26 | Tekken 5 | 0x0B | 0x40000000 | |
SCES_532.02 | Tekken 5 | 0x0B | 0x40000000 | |
SCKA_200.49 | Tekken 5 | 0x0B | 0x40000000 | |
SCPM_621.15 | 0x00 | 0x1000000 | ||
SCPM_621.16 | 0x00 | 0x1000000 | ||
SCPN_601.01 | PlayStation BB Navigator (Version 0.10) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPN_601.30 | PlayStation BB Navigator (Version 0.20) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPN_601.40 | PlayStation BB Navigator (Version 0.30) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPN_601.50 | PlayStation BB Navigator (Version 0.31) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPN_601.60 | PlayStation BB Navigator (Version 0.32) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPS_110.01 | I.Q. Remix | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPS_110.10 | Yoake no Mariko (Performance Pack Edition) | 0x01 | 0x1800 | |
SCPS_110.18 | Yoake no Mariko | 0x01 | 0x1800 | |
SCPS_110.21 | Yoake no Mariko 2nd Act (Limited Edition) | 0x01 | 0x1800 | |
SCPS_110.22 | Yoake no Mariko 2nd Act | 0x01 | 0x1800 | |
SCPS_150.38 | Lifeline | 0x0A | 0x80300 | |
SCPS_150.39 | Lifeline | 0x0A | 0x80300 | |
SCPS_170.01 | Gran Turismo 4 | 0x0B | 0x10000000 | |
SCPS_175.01 | Linux (for PlayStation2) Release 1.0 | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SCPS_200.39 | 0x00 | 0x4000000 | ||
SCUS_971.67 | PaRappa the Rapper 2 | 0x04 | 0x2000 | |
SCUS_972.69 | Final Fantasy XI [Disc 2] | 0x02 | 0xB | |
SLES_500.48 | Donald Duck: Quack Attack | 0x01 | 0x800 | |
SLES_500.62 | Orphen: Scion of Sorcery | 0x08 | 0xC1C | |
SLES_503.64 | City Crisis | 0x0A | 0x80BB8 | |
SLES_504.46 | Shadow Man 2: The Second Coming | 0x0A | 0x80600 | |
SLES_505.40 | Simpsons: Road Rage | 0x01 | 0x800 | |
SLES_506.08 | Shadow Man 2: The Second Coming | 0x0A | 0x80600 | |
SLES_506.28 | Simpsons: Road Rage | 0x01 | 0x800 | |
SLES_507.28 | Tiger Woods PGA Tour 2002 | 0x0A | 0x803E8 | |
SLES_507.29 | 0x0A | 0x803E8 | ||
SLES_512.82 | Tiger Woods PGA Tour 2003 | 0x0A | 0x803E8 | |
SLES_514.79 | Def Jam Vendetta | 0x01 | 0x802 | |
SLES_518.41 | SpyHunter 2 | 0x01 | 0x800 | |
SLES_518.44 | Time Crisis 3 | 0x01 | 0x800 | |
SLES_519.97 | SWAT: Global Strike Team | 0x01 | 0x800 | |
SLES_520.97 | SWAT: Global Strike Force | 0x01 | 0x800 | |
SLES_530.37 | Super Monkey Ball Deluxe | 0x01 | 0x802 | |
SLES_536.68 | Micro Machines v4 | 0x01 | 0x801 | |
SLES_537.55 | Castlevania: Curse of Darkness | 0x04 | 0x10 | |
SLES_537.96 | FIFA Street 2 | 0x01 | 0x1800 | |
SLPM_620.42 | Kurogane no Houkou: Warship Commander | 0x01 | 0x3000 | |
SLPM_620.62 | Gitaroo Man One | 0x0A | 0x80540 | |
SLPM_621.05 | Taikou Risshiden IV | 0x09 | 0x2B47000A | |
SLPM_621.24 | Ready 2 Rumble Boxing: Round 2 | 0x08 | 0x1388 | |
SLPM_621.25 | Gauntlet: Dark Legacy | 0x08 | 0xC1C | |
SLPM_621.25 | Gauntlet: Dark Legacy | 0x09 | 0x2B470005 | |
SLPM_621.35 | Final Fantasy: XI (Beta Version) | 0x00 | 0xA0000000 | Blacklist, boot after removing flag |
SLPM_621.54 | DDRMAX Dance Dance Revolution 6thMix | 0x08 | 0x1A5E | |
SLPM_622.39 | Supercar Street Challenge | 0x0A | 0x80300 | |
SLPM_623.69 | Karaoke Revolution: J-Pop Vol.1 | 0x08 | 0x1388 | |
SLPM_623.79 | Karaoke Revolution: J-Pop Vol.2 | 0x08 | 0x1388 | |
SLPM_623.80 | Karaoke Revolution: J-Pop Vol.3 | 0x08 | 0x1388 | |
SLPM_623.81 | Karaoke Revolution: J-Pop Vol.4 | 0x08 | 0x1388 | |
SLPM_623.82 | Karaoke Revolution: Love & Ballad | 0x08 | 0x1388 | |
SLPM_623.83 | Karaoke Revolution: Night Selection 2003 | 0x08 | 0x1388 | |
SLPM_624.14 | Karaoke Revolution: Dreams & Memories | 0x08 | 0x1388 | |
SLPM_624.37 | Suisui Sweet: Amai Ai no Mitsukekata | 0x0B | 0x40000000 | |
SLPM_624.50 | Karaoke Revolution: Anime Song Selection | 0x08 | 0x1388 | |
SLPM_624.51 | Karaoke Revolution: J-Pop Vol.5 | 0x08 | 0x1388 | |
SLPM_624.54 | Karaoke Revolution: J-Pop Vol.6 | 0x08 | 0x1388 | |
SLPM_624.55 | Karaoke Revolution: J-Pop Vol.7 | 0x08 | 0x1388 | |
SLPM_624.56 | Karaoke Revolution: J-Pop Vol.8 | 0x08 | 0x1388 | |
SLPM_624.57 | Karaoke Revolution: Snow & Party | 0x08 | 0x1388 | |
SLPM_624.64 | Pop'n Taisen Pazurudame Online | 0x08 | 0x1F40 | |
SLPM_624.79 | Karaoke Revolution: J-Pop Vol.9 | 0x08 | 0x1388 | |
SLPM_624.91 | Mega Man: The Power Battle | 0x04 | 0x2000 | |
SLPM_624.92 | Karaoke Revolution: Kids Song Selection | 0x08 | 0x1388 | |
SLPM_625.28 | Karaoke Revolution: Kazoku Idol Sengen (Bundle Edition) | 0x08 | 0x1388 | |
SLPM_625.29 | Karaoke Revolution: Kazoku Idol Sengen | 0x08 | 0x1388 | |
SLPM_650.86 | A Visual Mix: Ayumi Hamasaki Dome Tour 2001 (Disc 1) | 0x08 | 0x1450 | |
SLPM_650.87 | A Visual Mix: Ayumi Hamasaki Dome Tour 2001 (Disc 2) | 0x08 | 0x1450 | |
SLPM_650.90 | Spy Hunter | 0x01 | 0x1800 | |
SLPM_651.97 | Nobunaga's Ambition Online | 0x02 | 0xB | |
SLPM_652.09 | Star Ocean: Till the End of Time | 0x0B | 0x20014 | |
SLPM_654.38 | Star Ocean: Till the End of Time (Director's Cut) (Disc 1) | 0x0B | 0x20014 | |
SLPM_654.39 | Star Ocean: Till the End of Time (Director's Cut) (Disc 2) | 0x0B | 0x20014 | |
SLPM_654.88 | Grand Theft Auto: Vice City | 0x0A | 0x300 | |
SLPM_654.88 | Grand Theft Auto: Vice City | 0x09 | 0x36000200 | |
SLPM_656.33 | I Love Baseball: Pro Yakyu wo Koyonaku | 0x08 | 0xFA0 | |
SLPM_656.98 | Love Songs: ADV Futaba Riho 14-sai Natsu | 0x0A | 0x80380 | |
SLPM_657.05 | Final Fantasy XI: Chains of Promathia (Expansion Disc) | 0x02 | 0xB | |
SLPM_657.06 | Final Fantasy XI: Chains of Promathia (All-In-One Edition) | 0x02 | 0xB | |
SLPM_657.19 | Burnout 3: Takedown | 0x01 | 0x1C00 | |
SLPM_657.83 | Nobunaga no Yabou Online: Tappi no Shou | 0x02 | 0xB | |
SLPM_658.94 | Winning Post 6: 2005 Version | 0x01 | 0x2400 | |
SLPM_659.34 | Maple Colors | 0x0A | 0x80300 | |
SLPM_659.53 | Final Fantasy: XI (Entry Disc 2005) | 0x02 | 0xB | |
SLPM_659.84 | Grand Theft Auto: San Andreas | 0x0A | 0x803E8 | |
SLPM_660.33 | The Sword of Etheria | 0x08 | 0xC1C | |
SLPM_660.33 | The Sword of Etheria | 0x00 | 0x2000000 | |
SLPM_660.48 | The Sword of Etheria | 0x08 | 0xC1C | |
SLPM_660.48 | The Sword of Etheria | 0x00 | 0x2000000 | |
SLPM_660.57 | Taito Memories Vol.1 | 0x08 | 0xCE4 | |
SLPM_661.56 | Marheaven: Arm Fight Dream | 0x01 | 0x1800 | |
SLPM_661.75 | Akumajo Dracula: Yami no Juin | 0x08 | 0x60 | |
SLPM_661.75 | Akumajo Dracula: Yami no Juin | 0x0B | 0x2001C | |
SLPM_663.93 | Final Fantasy XI: Treasures of Aht Urhgan (All-In-One Edition) | 0x0A | 0x803E8 | |
SLPM_663.93 | Final Fantasy XI: Treasures of Aht Urhgan (All-In-One Edition) | 0x09 | 0x2B47000A | |
SLPM_663.93 | Final Fantasy XI: Treasures of Aht Urhgan (All-In-One Edition) | 0x02 | 0xB | |
SLPM_663.94 | Final Fantasy XI: Treasures of Aht Urhgan | 0x02 | 0xB | |
SLPM_664.36 | Aria the Natural | 0x01 | 0x1800 | |
SLPM_664.36 | Aria the Natural | 0x00 | 0xA000000 | |
SLPM_665.39 | Nobunaga no Yabou Online: Haten no Shou | 0x02 | 0xB | |
SLPM_665.58 | Tomb Raider: Legend | 0x08 | 0x3E8 | |
SLPM_665.74 | Detective Evangelion | 0x00 | 0x2000000 | |
SLPM_680.07 | Karaoke Revolution (Trial) | 0x08 | 0x1388 | |
SLPM_680.10 | 0x08 | 0x1388 | ||
SLPS_200.08 | Morita Shogi | 0x08 | 0x1388 | |
SLPS_200.20 | FIFA 2000 World Championship | 0x04 | 0x2001 | |
SLPS_200.37 | Go Go Golf | 0x09 | 0x2B47000A | |
SLPS_200.38 | Grappler Baki: Baki Saidai no Tournament | 0x08 | 0x1194 | |
SLPS_200.53 | Tenshi no Present: Marle Oukoku Monogatari (Limited Edition) | 0x0B | 0x20000000 | |
SLPS_200.66 | Tenshi no Present: Marle Oukoku Monogatari | 0x0B | 0x20000000 | |
SLPS_201.01 | City Crisis | 0x0A | 0x80BB8 | |
SLPS_201.11 | Magical Sports Pro Baseball 2001 | 0x09 | 0x2B47000A | |
SLPS_201.72 | Koushien: Konpeki no Sora | 0x09 | 0x2B47000A | |
SLPS_201.73 | Hard Hitter 2 | 0x0A | 0x80300 | |
SLPS_201.97 | Surfing Air Show with RatBoy | 0x09 | 0x2B47000A | |
SLPS_201.99 | F1 2002 | 0x0B | 0x20005 | |
SLPS_202.00 | Final Fantasy XI | 0x02 | 0xB | |
SLPS_204.04 | Rakushou! Pachi-Slot Sengen 2 | 0x0A | 0x80300 | |
SLPS_204.29 | Hissatsu Pachi-Slot Evolution: Ninja Hattori-Kun V | 0x08 | 0x1B58 | |
SLPS_204.55 | Simple 2000 Series Vol.94: The Aka-Champion - Come on Baby | 0x0B | 0x40000000 | |
SLPS_250.08 | Sorcerous Stabber Orphen | 0x08 | 0xC1C | |
SLPS_250.71 | A Visual Mix: Ayumi Hamasaki Dome Tour 2001 | 0x08 | 0x1450 | |
SLPS_250.72 | A Visual Mix: Ayumi Hamasaki Dome Tour 2001 | 0x08 | 0x1450 | |
SLPS_250.81 | Saishuu Densha | 0x0A | 0x803E8 | |
SLPS_251.36 | Kuon no Kizuna Sairin Mikotonori | 0x0A | 0x805DC | |
SLPS_251.42 | Tiger Woods PGA Tour 2002 | 0x0A | 0x803E8 | |
SLPS_251.50 | Only You | 0x0B | 0x40000000 | |
SLPS_252.37 | Only You | 0x0B | 0x40000000 | |
SLPS_252.75 | Def Jam: Vendetta | 0x01 | 0x802 | |
SLPS_252.78 | Memories Off: Mix | 0x0A | 0x80300 | |
SLPS_252.90 | Time Crisis 3 | 0x01 | 0x800 | |
SLPS_253.15 | One Piece: Grand Battle 3 | 0x01 | 0x1800 | |
SLPS_253.57 | 3-Nen B-Gumi Kinpachi Sensei: Densetsu no Kyoudan ni Tate! | 0x01 | 0x1800 | |
SLPS_253.79 | Tokyo Majin Gakuen: Kaihoujyou Kefurokou | 0x0A | 0x803E8 | |
SLPS_254.06 | Hitman: Contracts | 0x08 | 0xDAC | |
SLPS_254.18 | Ace Combat 5: The Unsung War | 0x0A | 0x500000 | |
SLPS_255.10 | Tekken 5 | 0x0B | 0x40000000 | |
SLPS_255.85 | Monster Farm 5: Circus Caravan | 0x07 | 5 | |
SLPS_255.86 | Tales of the Abyss | 0x0A | 0x803E8 | |
SLPS_256.04 | Ar tonelico Qoga: Knell of Ar Ciel | 0x00 | 0xA000000 | |
SLPS_256.67 | Daito Giken Premium Pachi-Slot Collection: Yoshimune | 0x01 | 0x1800 | |
SLPS_256.98 | Fatal Fury Battle Archives Volume 2 | 0x00 | 0xA000000 | |
SLPS_257.08 | The Familiar of Zero (Limited Edition) | 0x0A | 0x803E8 | |
SLPS_257.09 | The Familiar of Zero | 0x0A | 0x803E8 | |
SLPS_257.21 | HimeHibi - Princess Days | 0x0B | 0x8000000 | |
SLPS_257.22 | Routes PE (Limited Edition) | 0x08 | 0x3E8 | |
SLPS_257.27 | Routes PE | 0x08 | 0x3E8 | |
SLPS_732.49 | Ar tonelico Qoga: Knell of Ar Ciel (Platinum) | 0x00 | 0xA000000 | |
SLUS_200.11 | Orphen: Ocion of Sorcery | 0x08 | 0x1388 | |
SLUS_200.11 | Orphen: Ocion of Sorcery | 0x09 | 0x8000010 | |
SLUS_200.77 | Donald Duck: Go'in Quackers | 0x01 | 0x800 | |
SLUS_202.74 | City Crisis | 0x0A | 0x80BB8 | |
SLUS_203.05 | Simpsons: Road Rage | 0x01 | 0x800 | |
SLUS_203.64 | Tiger Woods PGA Tour 2002 | 0x0A | 0x803E8 | |
SLUS_204.13 | Shadowman 2 | 0x0A | 0x80600 | |
SLUS_204.33 | SWAT: Global Strike Team | 0x01 | 0x800 | |
SLUS_204.88 | Star Ocean: Til the end of Time [Disc 1] | 0x08 | 0x1388 | |
SLUS_205.72 | Tiger Woods PGA Tour 2003 | 0x0A | 0x803E8 | |
SLUS_205.90 | Spyhunter 2 | 0x01 | 0x800 | |
SLUS_206.35 | Muppets Party Cruise | 0x01 | 0x801 | |
SLUS_206.39 | Def Jam Vendetta | 0x01 | 0x800 | |
SLUS_206.86 | Splashdown: Rides Gone Wild | 0x0A | 0x80400 | |
SLUS_208.38 | All-Star Baseball 2005 | 0x01 | 0x802 | |
SLUS_208.51 | Ace Combat 5: The Unsung War | 0x0A | 0x500000 | |
SLUS_208.91 | Star Ocean: Til the end of Time [Disc 2] | 0x08 | 0x1388 | |
SLUS_209.18 | Super Monkey Ball: Deluxe | 0x01 | 0x800 | |
SLUS_210.59 | Tekken 5 | 0x0B | 0x40000000 | |
SLUS_210.70 | Final Fantasy XI: Chains of Promathia | 0x02 | 0xB | |
SLUS_210.89 | Karaoke Revolution Vol.3 | 0x08 | 0x1388 | |
SLUS_213.31 | Sonic Riders | 0x01 | 0x800 | |
SLUS_213.39 | Puzzle Challenge | 0x01 | 0x800 | |
SLUS_214.04 | Final Fantasy XI: Treasures of Aht Urhgan | 0x02 | 0xB | |
SLUS_214.52 | Valkyrie Profile 2: Silmeria | 0x08 | 0x1388 |
Other game patches (unofficial)[edit]
There are other unofficial ways to patch the PS2 games such the pnach format, or the widescreen patches that allows 16:9 screen output for some games by hex editing the ISO, or by applying ppf patches. Games work fine on PS3 with same compatibility like before patching. Also some 480p (aka progressive scan) patches work fine. http://ps2wide.net/
The problem of this methods is the patch is applyed over the ISO and is modifyed permanently, but this problem can be avoided in PS3 because that unofficial patches can be 'ported' to the official config format to be used by ps2_netemu.self, by using the official config format the settings and patchs from the config file are applyed 'on the fly' and the ISO is not modifyed
ps2_title_brute code[edit]
A script to calculate whatever this encode is that is used in ps2emu, gxemu and softemu from given input title id.
It contains code for bruting as well. Just call gen_sum with the title id in a specific format to get it.
External References[edit]
CPU-GPU intensive games + games only playable in software render on PCSX2:
|
Retrieved from ‘http://www.psdevwiki.com/ps3/index.php?title=PS2_Emulation&oldid=54610’
PS3Xploit Team is pleased to announce the official release of the PS3Xploit Tools v3.0 project nicknamed 'HAN'.
The PS3Xploit Team has done it yet once again with an incredible breakthrough that has now just gone LIVE for everyone and as the recent teaser recently suggested it's for those later Slim & SuperSlim models who are not capable of installing CFW (aka NoN CFW Compatible Models). While not a HEN (Homebrew Enabler) it's a volatile dose of 'HAN' (short for etHANol). This version of the hack has evolved to give something to every PS3 model now. All models will now have the ability to install PS3 games backup pkg and unlock PS1/PS2/PSP emulators for use among other features as outlined by developer bguerville who is going to take from here with this introduction of PS3Xploit v3.0 -- Codenamed: 'HAN'
PS3Xploit Tools v3.0 is a suite of 6 tools supporting both official firmware versions 4.81 & 4.82. The only pre-requirement to use HAN is to have an activated PSN user account. It's recommended not to use your main PSN account but rather a spare one. The principle behind HAN is quite simple, due to a vulnerability in the way npdrm content is managed, it is possible to resign game related files with custom keys, patch vsh & install resigned pkg from XMB.
The first tool, on the PC side, ps3xploit_rifgen_edatresign.exe should be used to generate rif files and create new signed_act.dat. You should place the act.dat/idps.hex, previously dumped with HAN ACT/IDPS Dumper, in the resigner directory and drag matching rap file for your game onto the executable file. Then rename the new 'signed_act.dat' to 'act.dat' and place it on USB drive along with the new rif file. The files are now ready to be pushed to the PS3 using the HAN ACT/RIF Copier.
** It is recommended to resign all the pkgs that require Han enabler with this tool**
** Packages which are converts and packages which needs rif activation **
** keep original act.dat in a safe place **
The first tool, on the PC side, ps3xploit_rifgen_edatresign.exe should be used to generate rif files and create new signed_act.dat. You should place the act.dat/idps.hex, previously dumped with HAN ACT/IDPS Dumper, in the resigner directory and drag matching rap file for your game onto the executable file. Then rename the new 'signed_act.dat' to 'act.dat' and place it on USB drive along with the new rif file. The files are now ready to be pushed to the PS3 using the HAN ACT/RIF Copier.
** It is recommended to resign all the pkgs that require Han enabler with this tool**
** Packages which are converts and packages which needs rif activation **
** keep original act.dat in a safe place **
On the PS3 side, the other 5 ps3xploit tools are:
1. HAN Installer - Copies necessary system files to PS3 to run HAN.
2. HAN Enabler - Enables the HAN patches
3. HAN ACT/IDPS Dumper - Dumps current user profile user act.dat & PS3 IDPS to USB.
4. HAN ACT/RIF Copier - Copies the resigned act.dat & generated rif file from USB to the current user profile.
5. HAN Debug PKG Enabler - Provided optionally for users wishing to install debug pkg.
1. HAN Installer - Copies necessary system files to PS3 to run HAN.
2. HAN Enabler - Enables the HAN patches
3. HAN ACT/IDPS Dumper - Dumps current user profile user act.dat & PS3 IDPS to USB.
4. HAN ACT/RIF Copier - Copies the resigned act.dat & generated rif file from USB to the current user profile.
5. HAN Debug PKG Enabler - Provided optionally for users wishing to install debug pkg.
The 'HAN' project is solely relying on userland exploitation to provide digital backups support for the majority of PS3 Games as well as PS1/PS2/PSP Emulators (within the ps3 firmware) and the ability to install PKG files from USB. PS3 PKG Game backups need to be prepared with TABR and only ps3 games having an available 'game update' are supported.
PKG files are installed from the Games XMB column, using a version of the Rebug Package Manager tweaked for this project. On USB of course, the FAT32 limitation of 4Gb is still in effect, it's a partition type limitation, nothing we can do about that. However workarounds using a local server can be used to remedy the situation if required.
Important:
To get best results initializing the exploit from a remote website like ps3xploit.com, remember to load the pages directly. Don't browse to an exploit page from other pages.
Use a blank homepage & create favourites to HAN Enabler & the other pages.
Use the favourites to access any page from complete scratch.
Reload the browser between exploits.
PKG files are installed from the Games XMB column, using a version of the Rebug Package Manager tweaked for this project. On USB of course, the FAT32 limitation of 4Gb is still in effect, it's a partition type limitation, nothing we can do about that. However workarounds using a local server can be used to remedy the situation if required.
Important:
To get best results initializing the exploit from a remote website like ps3xploit.com, remember to load the pages directly. Don't browse to an exploit page from other pages.
Use a blank homepage & create favourites to HAN Enabler & the other pages.
Use the favourites to access any page from complete scratch.
Reload the browser between exploits.
PS3Xploit Tools v3.0 Overview
1. HAN style packages allowed (Patched external modules ecdsa)
2. PSX/PSP Free license type allowed (Patched sceNpdrmHeader check)
3. Resigned ACT.DAT & RIF allowed
4. Cinavia protection removed on HDD content
5. OFW Package Manager
6. Debug pkg file support added (optional)
7. reactPSN alternative solution for OFW users
1. HAN style packages allowed (Patched external modules ecdsa)
2. PSX/PSP Free license type allowed (Patched sceNpdrmHeader check)
3. Resigned ACT.DAT & RIF allowed
4. Cinavia protection removed on HDD content
5. OFW Package Manager
6. Debug pkg file support added (optional)
7. reactPSN alternative solution for OFW users
PS3 HAN Installer
This tool will copy files from USB to Flash Memory to install OFW Package Manager.
- Extract all files from 'han_supportfiles.zip' on target USB drive root
- Load Exploit Page
- Select Root Path where these files are (default /dev_usb000/)
- Click 'Initialize HAN Installer' button
- When init ready, click 'Launch HAN Installation' button to copy files to flash and reboot
- Once rebooted, you can now use the HAN Enabler and Debug Package Enabler
PS3 HAN Enabler
This tool will enable the HAN patches.
- Load Exploit Page
- Click 'Initialize HAN Enabler' button
- When init ready, click 'Enable HAN' button to activate patches
- Once browser closes (default option) you can install HAN packages from XMB
PS3 HAN ACT/IDPS Dumper
This tool will dump your activation file (act.dat) and your IDPS.
- Load Exploit Page
- Select Dump Path From Dropdown Box (default /dev_usb000/)
- Click 'Initialize ACT/IDPS Dumper' button
- When init ready, click 'Dump ACT.DAT & IDPS' button
- The browser will close automatically by default
PS3 HAN ACT/RIF Copier
This tool will write back to the PS3 a modified act.dat and *.rif file
- Load Exploit Page
- Change RIF File Name to match your target
example PS2 Placeholder: 2P0001-PS2U10000_00-0000111122223333
- Select Root Path where act.dat/*.rif is located (default /dev_usb000/)
- Click 'Initialize AC/RIF Copier' button
- When init ready, click 'Copy Files' button to transfer to HDD
![Get the rap file for ps2 placeholder r3 Get the rap file for ps2 placeholder r3](/uploads/1/2/5/5/125519492/992597211.png)
PS3 HAN Debug PKG Enabler
This tool will allow Debug Package types to be installed
- Load Exploit Page
- Click 'Initialize HAN Debug PKG Enabler' button
- When init ready, click 'Enable Debug PKG' button to activate patches.
- Once browser closes (default option) you can install Debug pkg packages from XMB.
- Resigner Tool Repo: Download Link
- Download han_supportfiles.zip
- Online Host : PS3Xploit v3.0 Han Tools
- Download Local Server PS3Xploit v3.0 Han Tools.zip
Source : www.PSX-Place.com
Sign up here with your email