478
edits
Changes
Jump to navigation
Jump to search
Line 45:
Line 45: − + Line 56:
Line 56: − + Line 65:
Line 65: + + Line 72:
Line 74: − + + + + + + + + + + + + + + + + − + − + Line 89:
Line 106: − + − + + +
→Camera registers
| 0x04004200
| 0x04004200
| 2
| 2
| REG_CAMUNK
| REG_CAMRST
|-
|-
| 0x04004202
| 0x04004202
|}
|}
=== REG_CAMUNK ===
=== REG_CAMRST ===
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
| ?
| ?
|}
|}
Used for resetting cameras/DSP?
=== REG_CAMCNT ===
=== REG_CAMCNT ===
! DESCRIPTION
! DESCRIPTION
|-
|-
| 13-0
| 3-4
| ?
|-
| 5
| This is set for resetting cameras/DSP?
|-
| 7-6
| ?
|-
| 9-8
| Poked for resetting cameras/DSP?
|-
| 12-10
| ?
| ?
|-
| 13
| Set during initialization?
|-
|-
| 14
| 14
| ?
| Cleared during initialization?
|-
|-
| 15
| 15
| Frame transfer enable
| Enable
|}
|}
|-
|-
| 31-0
| 31-0
| Video data
| RGB555 video data converted by DSP
|}
|}
For retrieving camera video data, [[NDMA]] with arm9 startup mode 11(camera) is used with this src register. Transferred length varies per resolution. In the video data, each pixel is 2 bytes.
For retrieving camera video data, [[NDMA]] with arm9 startup mode 11(camera) is used with this src register. Transfer lengths used are 0x18000 and 0x96000. The former is 256x192(actual camera resolution to final video data resolution conversion is handled by DSP) and the latter is 640x480.
The DSP fw binary still seems to be loaded after cameras were used in the exploited title, as reading this register(with cameras reinitialized prior to that) results in changing data rather than fixed data. The DSP is a proprietary CEVA DSP, since this ISA is proprietary fw binaries can't be compiled for it. Thus homebrew could potentially only use cameras when the exploited title can use cameras and cameras were used in the title prior to running hax.
== See also ==
== See also ==