52w ago - Following up on the
initial release, today
KDSBest has updated their PS3 / PC SPU emulation project to Alpha 2 which allows your x86 machine to emulate the PlayStation 3 SPU.
Download:
PS3 SPU Emulation Alpha 2 Module
To quote: SPU Emulation Alpha2 has been released: mBox implemented and MFC prepared, bugfixes, breakpoints implemented and all commands for metldr as far as KDSBest knows.
Hi Community,
I wanted to contribute to the scene, so I coded a tool that might help the community our members and fellow dev's. This Tool is intended for dev's so please be careful if you don't know what you do. I will not be held responsible for any harm.
My tool is a emulator for PS3 modules (e.g metldr), it is in pre alpha stage but I thought, it would be great to get some community feedback.
How to use:
Not all SPU Commands are implemented yet, but it is easily extendable and I will make it support DMA, all SPU Commands and SPU Mailbox soon.
First open a .kds file. Check out the metldr.kds to see an example. The rest is like a normal debugger. If you put dumps of your reversed functions in the KnownFunctions folder, it will detect it and mark that function for you.
Just for example Mark the whole cellSpuAesDecryptCbcCfb128 function in HexView in IDA -> Right Click -> Save to File
Name the File "cellSpuAesDecryptCbcCfb128" without extension and copy it to the KnownFunctions Directory of the Emulator. Now all similar functions get automatic detected!
"Step" Executes next command, "Run" runs till breakpoint (Breakpoints are not implemented yet).
Debug SPU Code in Windows.
Any questions?
Just get back to me at twitter
Stay tuned
KDSBest
twitter.com/#!/KDSBest
PS: Thx for MK and cfwprophet (Team acid) and of course to fail0verflow for anergistic, which helps a lot with it and even uses some functions of them.
i am on 3.55 cfw and want to go to 4.4cfw , if i do so will my backed up games on my ps3's hard dive will be lost/deleted or will it be retained ? plz...
Download: http://multiupload.biz/8ge4s19t0ja5/SPU%20simulation%20beta_MultiUpload.biz.rar.html
To quote: Let's call it beta (SPU emulation). Tested with my own elf a lot commands if they work properly. Disabled buttons depending on state.
And last but not least, if you press run a new thread is spawned. Now you are able to press pause and it stops the run ofc. The performance get a super boost with the threading.
Project Update: alpha2 - pre alpha so it is not in pre alpha stage anymore. It detects code modifications on the fly too. The new feature list is not complete that's my fault I guess.
Thanks for the news update. I need some infos from some reversers to create the next stunning feature:
Crypto dumping... dumps all crypto calls... Let's call it function parameter dumping cause it will work for everything and will implement a callback on known functions which will make dumping at certain calls possible.
I try to implement this and GET/PUT DMA commands this weekend. I think I can't finish it this weekend, but this will be the beta stage. V0.9 should then just implement the rest of the commands that anergistic implements.
After that it is unknown what I do and so on. Since then my reversing starts to get more focus.
Update: From mr_wicked: I was trying to run an SPU module in anergistic with no success. In IBM systemsim (in combination with libspe2) my code ran just fine..
Finding a broken instruction in anergistic is like finding a needle in a haystack. So I ended up throwing IBM systemsim in IDA and exported all SPU instructions to .asm. After writing a small emulator around these instructions I was able to find two nasty errors. One in "andhi" and one in the "cgx" instruction. Here are the corrected Anergistic instructions:
00010101,ri10,andhi,half,signed
{
int i;
for (i = 0; i < 8; ++i)
rth[i] = rah[i] & i10;
}
01101000010,rr,cgx
{
int i;
for (i = 0; i < 4; ++i)
{
u64 r = (u64)(rtw[i] & 1) + (u64) raw[i] + (u64) rbw[i];
rtw[i] = (r >> 32) & 1;
}
}
00111001100,rr,rotqbybi
{
u32 shift_count = (rbw[0] & 0x7f) >> 3;
rtw[0] = raw[0];
rtw[1] = raw[1];
rtw[2] = raw[2];
rtw[3] = raw[3];
while (shift_count--)
{
rtw[0] = (rtw[0] > 24);
rtw[1] = (rtw[1] > 24);
rtw[2] = (rtw[2] > 24);
rtw[3] = (rtw[3] > 24);
}
}
00111011000,rr,rotqbi
{
u32 shift_count = (rbw[0] & 0x7f) & 7;
rtw[0] = raw[0];
rtw[1] = raw[1];
rtw[2] = raw[2];
rtw[3] = raw[3];
while (shift_count--)
{
u32 t = (rtw[1] >> 31) | 2 * rtw[0];
rtw[1] = (rtw[2] >> 31) | 2 * rtw[1];
rtw[2] = (rtw[3] >> 31) | 2 * rtw[2];
rtw[3] = (rtw[0] >> 31) | 2 * rtw[3];
rtw[0] = t;
}
}
More PlayStation 3 News...
Exactly it emulates PS3 code running in the SPU sub Core of the CellBE of PS3 ON PC x86 ak 32bit systems. But also working on 64bit systems.