In PS4Scene news today following the PSXITArch Linux PS4 Installation Guide and latest PS4 FPKGs, the Spine PlayStation 4 Emulator for Linux is now updated to Spine PS4 Emulator Build 20210901 (dated September 1st) by devofspine on Github followed by Spine PS4 Emulator Build 20220117 (dated January 17th, 2022).
Download: spine-20220517.zip (93.4 MB - Latest Version) / GIT / spine-20220117.zip (70.62 MB) / spine-20220117.zip (Mirror via _nyannoying) / spine-20210901.rar (47.73 MB) / spine-20210901.rar (Mirror) / spine (3.07 MB - supports windowed mode via -w parameter) / spine (3.07 MB - fixes a bug that wouldn't let the executable run if /dev/shm was marked as no-exec) / spine (Mirror via _nyannoying) / GIT (Demo) / Spine PS4 Emulator 2021 Updated Compatibility Spreadsheet (Unofficial) via MrPerson156
According to @zecoxao on Twitter, it loads a bit of the intro to Save The Scene PS4 Homebrew PKG Game by @Lapy and includes a 5.05 compatibility list (compatibility.xlsx) noting that other games might work.
From the included README.txt: spine version 2021/09/01
Spine Emulator (PS4) - Persona 5 Royal Main Menu
Spine Emulator (PS4) - Persona 5 Royal INGAME
Spine Emulator (PS4) - Persona 3 Dancing OPENING
Spine Emulator (PS4) - Persona 5 Royal INGAME #2 (Loading fields with mod menu)
PlayStation 4 emulation on the PC is here | MVG
Spine Test: Organ Trail
Spine Emulator (PS4) - Persona 5 Royal INGAME #3
Spine PS4 Emulator - Multiple 2D Games Test (Native Linux / Ubuntu - spine-20220517)
Spine PS4 Emulator - Multiple 3D Games Test (Native Linux / Ubuntu - spine-20220517) PART 1
Spine PS4 Emulator - Cuphead Ingame(Native Linux / Ubuntu - spine-20220517 / Zink Vulkan Drivers)
Spine PS4 Emulator - Digimon World: Next Order Ingame (Native Linux / Ubuntu - spine-20220517)
Spine PS4 Emulator - The Legend of Heroes: Trails of Cold Steel (Linux / Ubuntu - spine-20220517)
Spine PS4 Emulator - Multiple 3D Games Test (Native Linux / Ubuntu - spine-20220517) PART 2
Also heating things up in the PlayStation 5 Scene for those interested in a potential AMD SP (Secure Processor) Glitch for PS5 Fuses:
Spine PS4 Emulator | Try Multiple Games 2D/3D (New Spine 20220517 Audio/Graphics Improvement)
Spine PS4 Emulator | Games 3D (New Spine 20220517 Progress / Audio / Graphics Improvement)
Spoiler
Published part 2 of the AMD PSP reversing stuff. This one focuses on the Crypto Co-Processor (CCP) and looking at the system for loading firmware and decrypting it.
Scratch that "locked/unreadable key slots" idea
Leak News AMD PSP Bootroms and VMProtect Source
SpecterDev thoughts on the leaked AMD Secure Processor bootroms (for people who don't know what this is about: AMD Zen 2 bootrom has been leaked, the PS5 CPU is also based on Zen 2, reverse engineering the secure processor may lead to a full PS5 jailbreak)
I've just dumped AMD PSP ROM from 4800s Desktop Kit which shares the same APU as used in Xbox Series X (Arden, Sparkman). Now it's a time to explore.
There was some pain to exploit it. I've got PSP code execution a week ago but then got stuck because UART interface was inactive. I've guessed that it's some problem with the PSP bootloader that doesn't configure SuperIO chip properly and looks like I was correct.
On 4800s the Nuvoton chip marked 5565D-M was used as multi-controller. Unfortunately, there is no datasheet for it and its pinout very differs from all public datasheets of similar chips that I can find.
Fortunately, after looking into a lot of pictures on the Internet I was able to find some PC motherboard from MSI that used the same SuperIO chip, and I've found boardview, that's how I've figured out all pins of it. But I still needed datasheet to figure out UART problem.
After a week of guessing, bruteforcing, reflashing BIOS (where I put my PSP payload) and observing LPC bus using Logic Analyzer, I was able to find a combination of register/bits that needed to be toggled to activate UART.
Finally, I have proper read/write/call primitives running via UART server from my PSP payload that works in SVC mode.
Unfortunately I have a little knowledge on boot chain and security parts of Xbox One, so cannot say. I've worked on its userland/kernel parts only.
Download: spine-20220517.zip (93.4 MB - Latest Version) / GIT / spine-20220117.zip (70.62 MB) / spine-20220117.zip (Mirror via _nyannoying) / spine-20210901.rar (47.73 MB) / spine-20210901.rar (Mirror) / spine (3.07 MB - supports windowed mode via -w parameter) / spine (3.07 MB - fixes a bug that wouldn't let the executable run if /dev/shm was marked as no-exec) / spine (Mirror via _nyannoying) / GIT (Demo) / Spine PS4 Emulator 2021 Updated Compatibility Spreadsheet (Unofficial) via MrPerson156
According to @zecoxao on Twitter, it loads a bit of the intro to Save The Scene PS4 Homebrew PKG Game by @Lapy and includes a 5.05 compatibility list (compatibility.xlsx) noting that other games might work.
From the included README.txt: spine version 2021/09/01
- made by spinedev
- compatibility list (rudimentar, please improve it) in compatibility.xlsx
- please include firmware dependencies in firmware folder
- for linux only. for ubuntu it's required to install libsdl2-dev, rest of libs are available in lib folder
- chmod a+x both lib folder contents and spine executable, then you can place these contents in your game folder and type
- ./spine eboot.bin
- fself eboots are supported
- arrow keys to move (dpad)
- zxcvb etc keys should be for triangle, square, circle, cross, options, etc
- undertale works really well as well as we are doomed, others ingame may experience some graphical glitches and artifacts
- Nucleus PS3 / PS4 PC Emulator Open Source Project by AlexAltea
- Orbital PS4 Emulator: PlayStation 4 Virtualization by AlexAltea
- Orbital: Experiments in PS4 Emulation Demo Video by AlexAltea
- Orbital PS4 Emulator Gets DualShock 4 Support, Latest Demo by AlexAltea
- Spine PS4 Emulator for Linux Rumored, Demo Video by DevOfSpine
- PS4 Compatibility Layer Uplift for Orbis on Windows Updated by IDC
- GPCS4 PS4 Emulator for PC by Inori Runs We Are Doomed PSN Game!
Spine Emulator (PS4) - Persona 5 Royal Main Menu
Spine Emulator (PS4) - Persona 5 Royal INGAME
Spine Emulator (PS4) - Persona 3 Dancing OPENING
Spine Emulator (PS4) - Persona 5 Royal INGAME #2 (Loading fields with mod menu)
PlayStation 4 emulation on the PC is here | MVG
Spine Test: Organ Trail
Spine Emulator (PS4) - Persona 5 Royal INGAME #3
Spine PS4 Emulator - Multiple 2D Games Test (Native Linux / Ubuntu - spine-20220517)
Spine PS4 Emulator - Multiple 3D Games Test (Native Linux / Ubuntu - spine-20220517) PART 1
Spine PS4 Emulator - Cuphead Ingame(Native Linux / Ubuntu - spine-20220517 / Zink Vulkan Drivers)
Spine PS4 Emulator - Digimon World: Next Order Ingame (Native Linux / Ubuntu - spine-20220517)
Spine PS4 Emulator - The Legend of Heroes: Trails of Cold Steel (Linux / Ubuntu - spine-20220517)
Spine PS4 Emulator - Multiple 3D Games Test (Native Linux / Ubuntu - spine-20220517) PART 2
Also heating things up in the PlayStation 5 Scene for those interested in a potential AMD SP (Secure Processor) Glitch for PS5 Fuses:
- Glitching the AMD Secure Processor / 2108.04575.pdf / ACM Conference on Computer and Communications Security (CCS) 2021
Spine PS4 Emulator | Try Multiple Games 2D/3D (New Spine 20220517 Audio/Graphics Improvement)
Spine PS4 Emulator | Games 3D (New Spine 20220517 Progress / Audio / Graphics Improvement)
Spoiler
- AMD-SP-Loader-main.zip / AMD-SP-Loader GIT - Binary Ninja (Binja) loader for AMD Secure Processor (SP) / Platform Security Processor (PSP) firmware binaries. It will try to load AGESA Bootloader (ABL) and Bootloader blobs and will setup the correct load addresses.
Published part 2 of the AMD PSP reversing stuff. This one focuses on the Crypto Co-Processor (CCP) and looking at the system for loading firmware and decrypting it.
Scratch that "locked/unreadable key slots" idea
- 2304.14717.pdf
- ftpm_attack (Code and data artifacts for our paper: "faulTPM: Exposing AMD fTPMsā Deepest Secrets") via PSPReverse
- bootroms (AMD Zen 2 SP (Secure Processor) Bootroms aka AMD PSP Bootroms) via anonpsp
- VMProtect Source (Partial) via Alukym
Leak News AMD PSP Bootroms and VMProtect Source
SpecterDev thoughts on the leaked AMD Secure Processor bootroms (for people who don't know what this is about: AMD Zen 2 bootrom has been leaked, the PS5 CPU is also based on Zen 2, reverse engineering the secure processor may lead to a full PS5 jailbreak)
I've just dumped AMD PSP ROM from 4800s Desktop Kit which shares the same APU as used in Xbox Series X (Arden, Sparkman). Now it's a time to explore.
There was some pain to exploit it. I've got PSP code execution a week ago but then got stuck because UART interface was inactive. I've guessed that it's some problem with the PSP bootloader that doesn't configure SuperIO chip properly and looks like I was correct.
On 4800s the Nuvoton chip marked 5565D-M was used as multi-controller. Unfortunately, there is no datasheet for it and its pinout very differs from all public datasheets of similar chips that I can find.
Fortunately, after looking into a lot of pictures on the Internet I was able to find some PC motherboard from MSI that used the same SuperIO chip, and I've found boardview, that's how I've figured out all pins of it. But I still needed datasheet to figure out UART problem.
After a week of guessing, bruteforcing, reflashing BIOS (where I put my PSP payload) and observing LPC bus using Logic Analyzer, I was able to find a combination of register/bits that needed to be toggled to activate UART.
Finally, I have proper read/write/call primitives running via UART server from my PSP payload that works in SVC mode.
Unfortunately I have a little knowledge on boot chain and security parts of Xbox One, so cannot say. I've worked on its userland/kernel parts only.