PS1 and PS2 Emulator Mods

PS3 [Release] PS1 and PS2 Emulator Mods 20\10\2024

Correct me if I'm wrong but i don't think it's possible to access lv1 from ps2 lv2

Why can't? You just need to use "sc 1" instruction to access hvcall. It used in lv2 and linux. Insert it anywhere in emu and it will work. Ofc emu itself must use it to do anything at all.
 
Why can't? You just need to use "sc 1" instruction to access hvcall. It used in lv2 and linux. Insert it anywhere in emu and it will work. Ofc emu itself must use it to do anything at all.
that's exactly my point, how do you use a syscall that's not enabled in the emu while not being able to access the rest of the system? not that you can use ps3mapi or any other RTM tools, the emu should be modded first to make that system call. chicken and egg situation

what about enabling it with config files?

EDIT: we should also be able to revert the OC as soon as emu exits or the clocks will be the same on xmb and anything you run after unless you reboot
 
that's exactly my point, how do you use a syscall that's not enabled in the emu while not being able to access the rest of the system? not that you can use ps3mapi or any other RTM tools, the emu should be modded first to make that system call. chicken and egg situation

what about enabling it with config files?

EDIT: we should also be able to revert the OC as soon as emu exits or the clocks will be the same on xmb and anything you run after unless you reboot

This is a release thread of emu mods, its not a problem. I'm asking the author to do it.

Not sure what you mean, just place modded emu files to dev_flash/ps2emu? Not see any problem here.

And in my test it always doing full cell reboot when enter or exit. So clock will always reset to default.
 
Anybody have a working uLE build iso that works with netemu? I was thinking maybe the superslim build that supposively does the iopreset for ESR from FreeMCDVD or whatever it's called, I tried the Fortuna launcher but nothing shows up after the PS2 boot logo.
 
Hello, is it possible to implement rsx overclock inside the emu? I just found out during qCFW testing on my superslim that booting ps2 emu will reboot the whole console. This causes rsx clock to reset to default value. This mean for now only way to overclock is to use old custom pup method.

Thanks

I think it could be done adding a hard-coded RSX patch to the function setup_iso() in ps2emu_stage2\common\common.c

I couldn't find any LV1 poke being used currently on ps2_netemu payload. I suppose that lv1_poked(addr, value); or *(u64 *)(HV_BASE + addr) = value; can be used to apply the LV1 pokes in the ps2_netemu payload, which is injected into the emu using ps2netemu_gen.
 
I see the extracted BIOS with ClaimToolV2 is padded to 4MB, is their anyway to unpad it so it's the same as the original file in the decrypted emulator .elf? from what I can tell it pads around 2500KB of extra dummy data, the sourcecode says multiples of 1024.

The tool & cpp sourcecode is here:
https://gbatemp.net/threads/claimtoolv2.662117/

I want to use the softemu bios on netemu as it's more complete, you can access the browser in the softemu bios but you have to create the .mec & .nvm files in pcsx2 first by returning to the memory card manager with uLE, if you try a full or fast boot with no ISO mounted it doesn't work.
It also runs the first system configuration language & clock screen after that as if it's brand new out of box console.

The flags are here, you can use ps2ident to verify the changes.
https://www.psx-place.com/threads/t...s-in-mechacons-nvram-with-mechapwn-75k.36939/

https://limewire.com/d/519lr#nRzeSLJiVI

ps2_netemu patched with the earlier ps2_softemu bios, enjoy folks! :)

For reference ps2_softemu stores the bios at section/segment 38, ps2_netemu is 40.

grr it's still not working :-(
I'm sure i'm still doing something wrong with the resigning of the .elf, i've tried cloning it from the original .self as well as setting it as lvl1.self, cloning without setting it as lvl1 hangs on a black screen or stalls for a longer time on the disc icon on the xmb an if I set it as lvl1.self it powers off the console.
It's supposed to be lvl1? or guestOS how do I set it as guestOS?
 
Last edited by a moderator:
It doesn't boot any iso games just packages
just a guess, but it could be improper hash for cobra, since the hash has changed, so I'd imagine no cobra functions work.

I decrypted the original .self using rpcs3, everything else failed complaining about missing keys or npdrm, metadata, I used makeself from break n make to resign it after I edited the file in a hexeditor to overwrite the bios section.
 
I decrypted the original .self using rpcs3, everything else failed complaining about missing keys or npdrm, metadata, I used makeself from break n make to resign it after I edited the file in a hexeditor to overwrite the bios section.

it won't matter. even if you decrypt, then reencrypt with no changes, the hash will be different, because of encryption and compression.
 
it won't matter. even if you decrypt, then reencrypt with no changes, the hash will be different, because of encryption and compression.

Yeah I was wondering why the filesizes of the .self kept changing vs the original, it kept throwing me off thinking I was using a older base build or smaller .elf to begin with.
 
Yeah I was wondering why the filesizes of the .self kept changing vs the original, it kept throwing me off thinking I was using a older base build or smaller .elf to begin with.

I don't know what to suggest. you could try to compile cobra just to test it. I think there's a safeguard in case cobra is messed up, to disable cobra, but I could be wrong. the latest cobra is on github under @Evilnat 's account. I don't know if you'd be interested in testing that. good luck. if you have a NOR console, it's actually pretty hard to hard brick the system. afaik, you could even delete all of dev_blind and still recover. the recovery menu is the emer_init.self, and it's part of the coreOS, which you don't have access to in cfw, for safety reasons. I've heard NAND consoles are more sensitive though, that you can hard brick, because most of the firmware is not located on the hard drive.
 
I don't know what to suggest. you could try to compile cobra just to test it. I think there's a safeguard in case cobra is messed up, to disable cobra, but I could be wrong. the latest cobra is on github under @Evilnat 's account. I don't know if you'd be interested in testing that. good luck. if you have a NOR console, it's actually pretty hard to hard brick the system. afaik, you could even delete all of dev_blind and still recover. the recovery menu is the emer_init.self, and it's part of the coreOS, which you don't have access to in cfw, for safety reasons. I've heard NAND consoles are more sensitive though, that you can hard brick, because most of the firmware is not located on the hard drive.

https://github.com/Evilnat/Cobra-PS...2/EVILNAT/PEX/SRC/ps2emu_stage2/ps2netemu_gen

"scetool", "--template", self_input, "--sce-type=SELF", "--compress-data=TRUE", "--self-type=LV2", "--encrypt", "temp.elf", self_output

:dejection: Is this official scetool or opensource? how do I get the template file?
 
Back
Top