Hacking Emulation POPS on PSP/Vita - Config Research

AlexandreKH · Oct 15, 2023

The_Ho said:
I believe this config is sufficient for Digimon World 2003:

I noticed that the game's problem is focused on the command 0x00, I tried to enter 0x07 but it crashes at Wire Forest and any value above, so I reduced the value to 0x04 at 0x00 and the crashes stopped, for me it was what I call a slight slowdown lol.. . but completely playable, as it is a long RPG, I only tested the most informed points and the game didn't crash in any of them.

If anyone can test it further I would be grateful:

Code:

70 00 07 06 00 00 06 06 00 00 00 00 04 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 18 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 04 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 18 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF

The correction of the value 0x18 in 0x0A would it be like this?

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000420  70 00 07 06 00 00 06 06 00 00 00 00 04 00 00 00  p...............
00000430  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00000440  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
00000450  FF FF FF FF 00 00 00 00 FF FF FF FF FF FF FF FF  ÿÿÿÿ....ÿÿÿÿÿÿÿÿ
00000460  FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00  ÿÿÿÿÿÿÿÿÿÿÿÿ....
00000470  FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ..
00000480  FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00  ÿÿÿÿÿÿÿÿ........
00000490  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000004A0  00 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00  ........ÿÿÿÿ....
000004B0  04 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF  ....ÿÿÿÿÿÿÿÿÿÿÿÿ
000004C0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000004D0  FF FF FF FF FF FF FF FF 00 00 00 00 FF FF FF FF  ÿÿÿÿÿÿÿÿ....ÿÿÿÿ
000004E0  FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF  ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
000004F0  00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF  ....ÿÿÿÿÿÿÿÿÿÿÿÿ
00000500  FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00  ÿÿ..ÿÿÿÿÿÿÿÿ....
00000510  00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF  ....ÿÿÿÿÿÿÿÿÿÿÿÿ
00000520  FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF  ÿÿÿÿ........ÿÿÿÿ

I tried to edit an eboot but I got a black screen

Could anyone make a correction to be applied, please? In this case, is there no need to change the ID to SLES10972 with these corrections in EBOOT?

I'm using a Portuguese version translated by a another group that I modified to accept the saves from the original game and I also undid some changes that had been made to the graphics, such as the color of the main character, but when i try save with Guardromom it crashes (only on POPS EMULATOR PSP/VITA because in DuckStation and PS Classic Works).

I wish I could make this modification to see if I can get save out without crashing when I use Portuguese because in other languages like Spanish don't freeze.

Here is the original unedited HEX in mine Eboot SLES03936 (Only with conversion NTSC 60 fps) :

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000420  0E C3 00 00 0E C3 01 C7 6F A8 64 00 00 50 E6 49  .Ã...Ã.Ço¨d..PæI
00000430  44 41 54 78 5E 85 BC 07 50 14 FB BA C5 CB 79 F7  DATx^…¼.P.ûºÅËy÷
00000440  9E B8 F7 D9 C1 6D 0E 28 4A CE 39 E7 24 39 A8 28  ž¸÷ÙÁm.(JÎ9ç$9¨(
00000450  0A A2 62 40 05 11 51 04 14 14 31 A1 A2 A8 A0 82  .¢[email protected]¡¢¨ ‚
00000460  02 0A 8A 28 2A 22 62 0E 88 11 73 40 CC 19 45 31  ..Š(*"b.ˆ.s@Ì.E1
00000470  07 44 31 FD DE 37 E3 F6 DC 5B B7 5E D5 A3 EA 5F  .D1ýÞ7ãöÜ[·^Õ£ê_
00000480  DD 33 D3 D3 DD FF D5 EB FB D6 5A 3D 33 A8 78 98  Ý3ÓÓÝÿÕëûÖZ=3¨x˜
00000490  F4 C1 42 2B 04 4B 8D FE 58 6B 84 61 A7 33 0A 6B  ôÁB+.K.þXk„a§3.k
000004A0  9D 91 D8 E8 46 62 67 3C 1E 17 DB 19 F8 F6 CE C6  .‘ØèFbg<..Û.øöÎÆ
000004B0  DF 6B 09 31 3E 8B 18 68 95 C8 A6 7E 8B 39 30 A8  ßk.1>‹.h•È¦~‹90¨
000004C0  80 25 7E 19 84 59 4F 62 BA FF 42 62 03 73 18 EC  €%~.„YObºÿBb.s.ì
000004D0  91 45 E5 F8 5C DE AE DA 48 DD F4 55 9C 1C B5 98  ‘Eåø\Þ®ÚHÝôUœ.µ˜
000004E0  CA 61 AB D8 1F 57 C6 F4 C8 32 B2 D2 8E 33 2F FD  Êa«Ø.WÆôÈ2²ÒŽ3/ý
000004F0  04 C3 47 6C C5 DB 7B 05 0E B6 B3 B0 37 9B 86 A3  .ÃGlÅÛ{..¶³°7›†£
00000500  65 3A B3 C3 4B D8 37 A9 82 E5 A3 4A 08 94 E3 99  e:³ÃKØ7©‚å£J.”ã™
00000510  1A CD C4 52 67 02 56 06 89 D8 3B CC C7 6D 40 0E  .ÍÄRg.V.‰Ø;ÌÇm@.
00000520  CE 7D B2 E9 3D 74 39 2E 1E 39 98 19 A4 60 AA 97  Î}²é=t9..9˜.¤`ª—

wad11656 · Oct 15, 2023

Re: "The Hive"
(I know this game is about as unknown/uninteresting as you can get, but I thought I might be able to fix it on my own so tried giving it a shot.)

wad11656 said:
Can one of you marvelous geniuses combine the BD13 configs with the SLPS-01222/SLPS-01223 configs to simultaneously both fix compatibility and enable disc-swap?

Thanks to your guys' help I believe I was able to combine these configs on my own. But the disc-swap flag doesn't seem to work on this game at all, whether the other flag is set or not.

Just throwing this out here in case any of you Config Masters had any ideas.

Flag to enable disc-swap @ any time:

cmd: 0xFFFFFFFF
val: 0x00800000

(Little-endian: 0000 8000)

SLPS-01222/01223 flag that fixes the crashes:
cmd: 0x00000004
val: 0xFFFFFFF9 (Little-endian: f9ff ffff)

Combined:

Rich (BB code):

7000 0706 0000 0606 0000 8000 ffff ffff
ffff ffff ffff ffff ffff ffff f9ff ffff
ffff ffff ffff ffff ffff ffff ffff ffff
ffff ffff ffff ffff ffff ffff ffff ffff
ffff ffff ffff ffff ffff ffff 0000 0000
ffff ffff ffff ffff ffff ffff ffff 0000
ffff ffff ffff ffff 0000 0000 0000 0000
ffff ffff ffff ffff ffff ffff ffff ffff
0000 0000 0000 0000 ffff ffff 0000 8000
ffff ffff ffff ffff ffff ffff ffff ffff
f9ff ffff ffff ffff ffff ffff ffff ffff
ffff ffff ffff ffff ffff ffff ffff ffff
ffff ffff ffff ffff ffff ffff ffff ffff
0000 0000 ffff ffff ffff ffff ffff ffff
ffff 0000 ffff ffff ffff ffff 0000 0000
0000 0000 ffff ffff ffff ffff ffff ffff
ffff ffff 0000 0000 0000 0000 ffff ffff

mrjaredbeta · Oct 15, 2023

@wad11656 Something weird is definitely going on with this game (I think we all know this, lol). I am currently testing it with additional parameters in command -1 and the disc swap seems to work (starting game on disc 2, getting to screen that requires disc 1, and swap indeed works!), so I am going to backtrack and figure out what is needed for disc swap to work properly. Seems it needs a different bit in command -1, or additional bits with bit 23.

Webardo · Oct 15, 2023

wad11656 said:
Re: "The Hive"
(I know this game is about as unknown/uninteresting as you can get, but I thought I might be able to fix it on my own so tried giving it a shot.)

Thanks to your guys' help I believe I was able to combine these configs on my own. But the disc-swap flag doesn't seem to work on this game at all, whether the other flag is set or not.

Just throwing this out here in case any of you Config Masters had any ideas.

Flag to enable disc-swap @ any time:
cmd: 0xFFFFFFFF val: 0x00800000 (Little-endian: 0000 8000)

SLPS-01222/01223 flag that fixes the crashes:
cmd: 0x00000004
val: 0xFFFFFFF9 (Little-endian: f9ff ffff)

Combined:

Rich (BB code):

7000 0706 0000 0606 0000 8000 ffff ffff ffff ffff ffff ffff ffff ffff f9ff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff 0000 0000 ffff ffff ffff ffff ffff ffff ffff 0000 ffff ffff ffff ffff 0000 0000 0000 0000 ffff ffff ffff ffff ffff ffff ffff ffff 0000 0000 0000 0000 ffff ffff 0000 8000 ffff ffff ffff ffff ffff ffff ffff ffff f9ff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff ffff 0000 0000 ffff ffff ffff ffff ffff ffff ffff 0000 ffff ffff ffff ffff 0000 0000 0000 0000 ffff ffff ffff ffff ffff ffff ffff ffff 0000 0000 0000 0000 ffff ffff

Can you try copying the Arc the Lad 3 config along with your settings? I believe that game also had a similar issue before, which hopefully Sony fixed for an official release...

mrjaredbeta · Oct 15, 2023

Webardo said:
Can you try copying the Arc the Lad 3 config along with your settings? I believe that game also had a similar issue before, which hopefully Sony fixed for an official release...

Damn, you're spot on! Per kozarovv, bits 14 and 15 also seem to hit disc swap function, and the Arc the Lad III is using bit 15.

Webardo · Oct 15, 2023

Great then! By reading the Mednafen changelog, they had to add a seek error when opening the tray with the disc spinning, maybe many more games than expected use that?

mrjaredbeta · Oct 15, 2023

Hmm, I did just test it with both bits 14 and 15 enabled (0x0000C000) and it still failed to work. Bit 16 also hits disc swap function. But, one of cmd -1's bits (or a combination of them) is definitely fixing the issue, so it is just a game of test and check at this point.

The_Ho · Oct 15, 2023

I have a question friends, I'm seeing several settings on the pop fe page of games that I've already finished on PSP 6.61 without any problems from what I noticed at the time, for example: Alundra. Lunar 2. etc... Are these configs being made to fix something serious or did they just find something that could improve?

mrjaredbeta · Oct 15, 2023

Alright, so it seems that bit 15 does indeed fix it..? Really weird results when testing. Seems like there is like a 5 second delay when the game's switch disc prompt appears to when you can actually swap the discs. So, @Webardo 's suggestion ended up being the solution!

Correct config to allow disc swap is:

Code:

70 00 07 06 00 00 06 06 00 80 00 00 FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF F9 FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00
FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00
FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 00 00 00 00 FF FF FF FF 00 80 00 00
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
F9 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00
00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF

EDIT: Also, this bit checks if GPU is changing what it is rendering or not, and then allows swap. So, swap is enabled on static screens like the main menu and even PlayStation logo as well, haha.

Webardo · Oct 15, 2023

The_Ho said:
I have a question friends, I'm seeing several settings on the pop fe page of games that I've already finished on PSP 6.61 without any problems from what I noticed at the time, for example: Alundra. Lunar 2. etc... Are these configs being made to fix something serious or did they just find something that could improve?

Most of those are just configs from PSN releases. I believe that many of those will just fix or correct minor issues, such as overscan, some shorter load times, or infimal graphical inaccuracies.

Post automatically merged: Oct 16, 2023

Hey, I think I fixed Valkyrie Profile's audio stutter (for dialogue only). This is the config:

Code:

70 00 07 06 00 00 06 06 00 00 02 20 04 00 00 00
FF FF FF FF FF FF FF FF FF FF FF FF E7 FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00
FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00
FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 00 00 00 00 FF FF FF FF 00 00 02 20
04 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
E7 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00
00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF

I won't submit to pop-fe yet though. Perhaps some other command could help improve some small pauses whenever data gets loaded. Also, the fmv audio appears to be desynced.

mrjaredbeta · Oct 16, 2023

Nice find @Webardo !

I’ve submitted configs for The Hive and In Cold Blood. The Hive is using Arc the Lad III’s method with cmd -1 bit 15. In Cold Blood is using bit 15 paired with bit 16, which seems to *actually* enable disc swap at any time. Maybe bit 15 + 16 would be good test for any future game tested with disc swap issues.

Many thanks to @wad11656 for the initial tests!

OPPAI_DAISUKI · Oct 17, 2023

The_Ho said:
I believe this config is sufficient for Digimon World 2003:

I noticed that the game's problem is focused on the command 0x00, I tried to enter 0x07 but it crashes at Wire Forest and any value above, so I reduced the value to 0x04 at 0x00 and the crashes stopped, for me it was what I call a slight slowdown lol.. . but completely playable, as it is a long RPG, I only tested the most informed points and the game didn't crash in any of them.

If anyone can test it further I would be grateful:

Code:

70 00 07 06 00 00 06 06 00 00 00 00 04 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 18 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 04 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 18 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 00 00 00 00 FF FF FF FF

Hi Sir its me Sei!!!..may i ask if how can i put this code into the game?.....

The_Ho · Oct 17, 2023

OPPAI_DAISUKI said:
Hi Sir its me Sei!!!..may i ask if how can i put this code into the game?.....

Hello Sei!!... good to see you here.

Using pop fe, or manually opening EBOOT in a HEX Editor and rewriting above.

> https://gbatemp.net/threads/new-mode-to-fix-ps1-games-for-psp-and-psvita.607286/post-10267599

> https://gbatemp.net/threads/new-mode-to-fix-ps1-games-for-psp-and-psvita.607286/post-10267665

> https://gbatemp.net/threads/new-mode-to-fix-ps1-games-for-psp-and-psvita.607286/post-10268150

OPPAI_DAISUKI · Oct 18, 2023

The_Ho said:
Hello Sei!!... good to see you here.

Using pop fe, or manually opening EBOOT in a HEX Editor and rewriting above.

thank you for kind reply sir... can i use PSX2PSP as the converter?...because i noticed that the one you uploaded on the site was in this kind of format... i gonna try this now i was confused where to put those addresses although at least i do know how to use Hxd because i used that in editing pokemon emerald...im gonna convert it now....

Post automatically merged: Oct 18, 2023

The_Ho said:
Hello Sei!!... good to see you here.

Using pop fe, or manually opening EBOOT in a HEX Editor and rewriting above.

is this the right addresses?...

The_Ho · Oct 18, 2023

OPPAI_DAISUKI said:
thank you for kind reply sir... can i use PSX2PSP as the converter?...because i noticed that the one you uploaded on the site was in this kind of format... i gonna try this now i was confused where to put those addresses although at least i do know how to use Hxd because i used that in editing pokemon emerald...im gonna convert it now....

Post automatically merged: Oct 18, 2023

is this the right addresses?...

No.

Example:

OPPAI_DAISUKI · Oct 18, 2023

The_Ho said:
No.

Example:

View attachment 399814

Thank you for your reply sir... so the address is 00038400 and then i copied the pops fe config for the game on their site.... is this the one sir?....

Webardo · Oct 18, 2023

OPPAI_DAISUKI said:
Thank you for your reply sir... so the address is 00038400 and then i copied the pops fe config for the game on their site.... is this the one sir?....

Not really. Revert those changes or else you eboot won't work

.

You should search for your game's region code (in this case SLES) and paste the config just below the ID found at 0xX0400, if you made your eboot with PSX2PSP or 0xX8400 if you used pop-fe. You don't have to write the ID itself.
It should look the same as in this picture @The_Ho shared with you:

The_Ho said:
View attachment 399814

However, you could just make your eboot with pop-fe, it'll inject the config automatically if your game has one.

The_Ho · Oct 18, 2023

OPPAI_DAISUKI said:
Thank you for your reply sir... so the address is 00038400 and then i copied the pops fe config for the game on their site.... is this the one sir?....

OPPAI_DAISUKI · Oct 18, 2023

Webardo said:
Not really. Revert those changes or else you eboot won't work .

You should search for your game's region code (in this case SLES) and paste the config just below the ID found at 0xX0400, if you made your eboot with PSX2PSP or 0xX8400 if you used pop-fe. You don't have to write the ID itself.
It should look the same as in this picture @The_Ho shared with you:

However, you could just make your eboot with pop-fe, it'll inject the config automatically if your game has one.

thank you for kind reply sir...i created my eboot on PSX2PSP because i love to use my favorite custom pics just like the normal converstion on PSX2PSP games....at least for set region i know the mechanics but now with this new method im having a hard time finding and inserting those configs for the game...upon reading your reply is this correct?... game's ID was SLES03936 where i found at 00000130 and then add the fix that i found on pops fe on 0400?.....

The_Ho · Oct 18, 2023

Webardo said:
However, you could just make your eboot with pop-fe, it'll inject the config automatically if your game has one.

Yes, I also suggested this to him, but I think he wants to understand how injecting into HEX works.

Hacking Emulation POPS on PSP/Vita - Config Research

Member

Well-Known Member

Attachments

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Attachments

Well-Known Member

Well-Known Member

Attachments

Well-Known Member

Well-Known Member

Well-Known Member

Attachments

Well-Known Member

Similar threads

Popular threads in this forum