forums.ps2dev.org Forum Index forums.ps2dev.org
Homebrew PS2, PSP & PS3 Development Discussions
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Some new nids (sceNand, ModuleMgrForKernel, ...)

 
Post new topic   Reply to topic    forums.ps2dev.org Forum Index -> PSP Development
View previous topic :: View next topic  
Author Message
moonlight



Joined: 26 Oct 2005
Posts: 567

PostPosted: Tue Sep 19, 2006 7:58 am    Post subject: Some new nids (sceNand, ModuleMgrForKernel, ...) Reply with quote

Today i felt like wanting to hunt nids :P

sceNand (all firmwares):
C478C1DE - sceNandReadPagesRawAll
E05AE88D - sceNandReadPagesRawExtra
BADD5d46 - sceNandWritePagesRawAll
8932166A - sceNandWritePagesRawExtra


ModuleMgrForKernel(2.00+):
0x3E4FEDDC - sceKernelLoadModuleToBlock
0x61EC6AB0 - sceKernelModuleMgrMode
0xF80F3C96 - sceKernelLoadModuleBufferBootInitConfig


LoadCoreForKernel(2.00+):
0x3BB7AC18 - sceKernelLoadCoreMode

IoFileMgrForKernel(2.80+):
0x5216CE3F - sceIoTerminateFd (this one requires confirmation)

sceIoFilemgrDNAS_driver (2.7X only, since in 2.80 the module has changed and doesn't export anything):
0x0144AFDA - sceIoLseekDNAS
0x4B4AAA29 - sceIoEndDNAS
0x79A425A4 - sceIoInitDNAS
0x8E56CAA1 - sceIoReadDNAS
0x9F645A9C - sceIoCloseDNAS

These ones seem to be used to open files protected with some kind of drm. sceIoFilemgrDNAS_driver_AA46A25E would be like "sceIoOpenDNAS", although that's not the name.
Back to top
View user's profile Send private message
adrahil



Joined: 16 Mar 2006
Posts: 277

PostPosted: Tue Sep 19, 2006 9:48 am    Post subject: Reply with quote

Niice :)
About nids, tell me , do you know why in the sc_sascore.prx which is in flash0 there are none of the functions which are in the sc_sascore.prx which is in the umds. Hereafter is the list of function names of the umd sascore:
Code:

sceSasCore
sceSasExit
sceSasGetEndFlag
sceSasGetEnvelopeHeight
sceSasInit
sceSasRevEVOL
sceSasRevParam
sceSasRevType
sceSasRevVON
sceSasSetADSR
sceSasSetADSRmode
sceSasSetEffect
sceSasSetEffectType
sceSasSetEffectVolume
sceSasSetKeyOff
sceSasSetKeyOn
sceSasSetNoise
sceSasSetPitch
sceSasSetSimpleADSR
sceSasSetSL
sceSasSetVoice
sceSasSetVolume
Back to top
View user's profile Send private message
0okm0000



Joined: 13 Jan 2006
Posts: 116

PostPosted: Wed Sep 20, 2006 12:23 am    Post subject: Re: Some new nids (sceNand, ModuleMgrForKernel, ...) Reply with quote

moonlight wrote:
Today i felt like wanting to hunt nids :P

sceNand (all firmwares):
C478C1DE - sceNandReadPagesRawAll
E05AE88D - sceNandReadPagesRawExtra
BADD5d46 - sceNandWritePagesRawAll
8932166A - sceNandWritePagesRawExtra


ModuleMgrForKernel(2.00+):
0x3E4FEDDC - sceKernelLoadModuleToBlock
0x61EC6AB0 - sceKernelModuleMgrMode
0xF80F3C96 - sceKernelLoadModuleBufferBootInitConfig


LoadCoreForKernel(2.00+):
0x3BB7AC18 - sceKernelLoadCoreMode

IoFileMgrForKernel(2.80+):
0x5216CE3F - sceIoTerminateFd (this one requires confirmation)

sceIoFilemgrDNAS_driver (2.7X only, since in 2.80 the module has changed and doesn't export anything):
0x0144AFDA - sceIoLseekDNAS
0x4B4AAA29 - sceIoEndDNAS
0x79A425A4 - sceIoInitDNAS
0x8E56CAA1 - sceIoReadDNAS
0x9F645A9C - sceIoCloseDNAS

These ones seem to be used to open files protected with some kind of drm. sceIoFilemgrDNAS_driver_AA46A25E would be like "sceIoOpenDNAS", although that's not the name.

Great :D
can you add Search function in your "PSP PRX Documentation project" :)
_________________
PSP hardware hack
http://0okm.blogspot.com/
Back to top
View user's profile Send private message Visit poster's website
laichung



Joined: 06 May 2005
Posts: 123

PostPosted: Tue Sep 26, 2006 2:15 pm    Post subject: Reply with quote

in 2.8 usbacc.prx

0x2E251404 sceUsbAccRegisterType
0x18b04c82 sceUsbAccUnregisterType

usb.prx

0x616f2b61 sceUsbWaitStateCB
Back to top
View user's profile Send private message
laichung



Joined: 06 May 2005
Posts: 123

PostPosted: Fri Sep 29, 2006 4:12 pm    Post subject: Reply with quote

in 2.8 libasfparser.prx

0x2CB147F7 sceAsfGetFrameData
0x8B08301F sceAsfParserEndEntry
0xB9E4BD9E sceAsfParserStartEntry

in 2.8 usbmic

0x63400E20 sceUsbMicGetInputLength
(p.s. only one functions is left unknow.)


I have a question. There are many strings inside the string-dump of the prx, some of them look likes a function name but it is not (it not pass the NIDs search). Are they the internal function name?
Back to top
View user's profile Send private message
adrahil



Joined: 16 Mar 2006
Posts: 277

PostPosted: Fri Sep 29, 2006 9:25 pm    Post subject: Reply with quote

Yes, they're internal functions. You could trace them and give thir addresses though :)
It may also be possible that those functions are inline, like the sceSas, or some sceMSCM functions.
Back to top
View user's profile Send private message
moonlight



Joined: 26 Oct 2005
Posts: 567

PostPosted: Fri Sep 29, 2006 10:22 pm    Post subject: Reply with quote

Good find. they will be added soon to my page.
Back to top
View user's profile Send private message
laichung



Joined: 06 May 2005
Posts: 123

PostPosted: Fri Sep 29, 2006 10:49 pm    Post subject: Reply with quote

Just for fun

from 2.8 usbgps.prx

0x6EED4811 sceUsbGpsClose
0x7C16AC3A sceUsbGpsGetState
0x934EC2B2 sceUsbGpsGetData
0x9F267D34 sceUsbGpsOpen


moonlight wrote:
Good find. they will be added soon to my page.
Back to top
View user's profile Send private message
laichung



Joined: 06 May 2005
Posts: 123

PostPosted: Fri Sep 29, 2006 11:01 pm    Post subject: Reply with quote

Thanks for information

Also some functions look have problem under ps2dis , for examples:
Code:

sceUsbBus_driver_90B82F55:
     li v0 , $00000001
     lui a0 $0000
     jr ra
     sw v0 $00000604


My understanding is , after jr ra is called, the function should jump back to the orginial function, and the last command should not run, right? Does it mean the last command is not belong to sceUsbBus_driver_90B82F55 but the next function sceUsbBus_driver_7B87815D? or the prxtool generate the wrong address inside the map file?


adrahil wrote:
Yes, they're internal functions. You could trace them and give thir addresses though :)
It may also be possible that those functions are inline, like the sceSas, or some sceMSCM functions.
Back to top
View user's profile Send private message
jimparis



Joined: 10 Jun 2005
Posts: 1179
Location: Boston

PostPosted: Sat Sep 30, 2006 3:32 am    Post subject: Reply with quote

MIPS loads and branches have a delay slot, so the "sw" line is executed. See e.g. http://www.go-ecs.com/mips/miptek1.htm#DS
Back to top
View user's profile Send private message
adrahil



Joined: 16 Mar 2006
Posts: 277

PostPosted: Sat Sep 30, 2006 4:00 am    Post subject: Reply with quote

- a normal ''branch'' instruction does something like:
Code:
if(condition){
delay_instruction();
goto whatever_address;
} else {
delay_instruction();
}


examples: J, JR, BEQ, BNE, BGEZ,...

- however, the ''branch likely'' instructions are of this form:
Code:
if(condition){
delay_instruction();
goto whatever_address;
}


examples: BEQL, BNEL, ...
Back to top
View user's profile Send private message
laichung



Joined: 06 May 2005
Posts: 123

PostPosted: Sat Sep 30, 2006 12:32 pm    Post subject: Reply with quote

Thanks all information~~
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    forums.ps2dev.org Forum Index -> PSP Development All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group