If you’re a PS2 hardware sicko, you may be aware of the floating point problem
If you were sad that it’s not possible to play stuntman in pcsx2, or your grand turismo recordings were not working quite right
Well, you can, today, with my soft-float recompiler build in the reply
And yes, we can patch the CPU itself!
Some of the obscure, difficult problems we’ve solved in Project Stellar’s software could potentially be handled through CPU microcode updates, allowing the original game code to run unchanged.
It’s far too early to say which fixes could benefit, but having the dumps is a huge step toward understanding what’s possible.
After 25 years, the original Xbox's last hidden ROM has finally been dumped: the CPU's microcode!
This has been a goal of mine for over 6 years, and I've worked on it off and on ever since.
Over the last couple of weeks, while building inventory and shipping orders, I've also been running hardware tests 24/7. This poor Xbox has rebooted over 50,000 times in those two weeks alone.
And it finally paid off.
The dump covers the entire 4,096-line microcode address space. The ROM itself occupies 3,200 of those lines, roughly 12 KB of microcode.
I can't overstate how huge this feels. After all these years, I finally have it.
A full write-up is coming next year!
Security folks this week: Pwned PHP
Also security folks this week: LOL “4”
Me: Oh hi I found a code execution exploit in the CD-ROM drive of a 26-year-old game console
New build of PCSX2 Reliquary is now public!
Highlights are improved networking stability, VHD hdd image support and Parallel-GS fixes for RDNA2 and Arc. As always, latest upstream sync too!
Have fun!
DL in reply
People may wonder, why do I care about maintaining a pcsx2 fork with accurate mechacon emulation?
The reason is to enable others to do important work!
Work like making arbitrary code execution for the Xploder Parental Game Lock.
https://t.co/xy4NO57Bz3
People may wonder, why do I care about maintaining a pcsx2 fork with accurate mechacon emulation?
The reason is to enable others to do important work!
Work like making arbitrary code execution for the Xploder Parental Game Lock.
https://t.co/xy4NO57Bz3
LiteX (with DDR3!) on Elgato Cam Link 4k (thanks @GregDavill, @ApertusOSCinema, @ktemkin for the "documentation" :) and utilities) https://t.co/EHRn1DslaQ
Here's the first release of the Xbox 360 Peer Pressure softmod. Blog post will be out in a few weeks with all the technical details. Barring any critical bugs I'll be "hibernating" for the next 2 months to recoup my sanity from working on this project https://t.co/MTP7adMt5m
A long‑hidden PS2 security component has finally been decoded, revealing surprising design choices and opening the door to fresh hardware insights. https://t.co/5DQ2BLESUw
A long‑hidden PS2 security component has finally been decoded, revealing surprising design choices and opening the door to fresh hardware insights. https://t.co/E7jpbEMuIh
MechaPwn folks are at it again. "XPEN" (X-Protection Enable) pin of the error correction DSP chip was discovered to be the toggle selection to turn on/off the behavior of -1 DSPs used on DTL-H hardware. This pin is pulled up internally by a resistor. Left unbonded in retail ICs.