From a291c43b6c6224b9ce4b94d9a891b608ad231f3c Mon Sep 17 00:00:00 2001
From: Jannik Vogel <email@jannikvogel.de>
Date: Fri, 31 Aug 2018 02:26:19 +0200
Subject: [PATCH] Add tools to fill and dump memory

---
 python-scripts/dump_dsp.py | 39 ++++++++++++++++++++++++++++++++++++++
 python-scripts/dump_ram.py | 21 ++++++++++++++++++++
 python-scripts/fill_dsp.py | 28 +++++++++++++++++++++++++++
 python-scripts/fill_ram.py | 27 ++++++++++++++++++++++++++
 4 files changed, 115 insertions(+)
 create mode 100755 python-scripts/dump_dsp.py
 create mode 100755 python-scripts/dump_ram.py
 create mode 100755 python-scripts/fill_dsp.py
 create mode 100755 python-scripts/fill_ram.py

diff --git a/python-scripts/dump_dsp.py b/python-scripts/dump_dsp.py
new file mode 100755
index 0000000..4cd9cfd
--- /dev/null
+++ b/python-scripts/dump_dsp.py
@@ -0,0 +1,39 @@
+#!/usr/bin/env python3
+
+# Dumps the DSP memory
+
+from xboxpy import *
+import struct
+
+f = open('dsp.bin', 'wb')
+
+data = []
+
+print("GP P")
+for i in range(4096):
+  data += [apu.read_u32(NV_PAPU_GPPMEM + i*4)]
+print("GP X")
+for i in range(4096):
+  data += [apu.read_u32(NV_PAPU_GPXMEM + i*4)]
+print("GP Y")
+for i in range(2048):
+  data += [apu.read_u32(NV_PAPU_GPYMEM + i*4)]
+print("GP MIXBUF")
+for i in range(1024):
+  data += [apu.read_u32(NV_PAPU_GPMIXBUF + i*4)]
+
+print("EP P")
+for i in range(4096):
+  data += [apu.read_u32(NV_PAPU_EPPMEM + i*4)]
+print("EP X")
+for i in range(3072):
+  data += [apu.read_u32(NV_PAPU_EPXMEM + i*4)]
+print("EP Y")
+for i in range(256):
+  data += [apu.read_u32(NV_PAPU_EPYMEM + i*4)]
+
+
+encoded = bytes(sum([list(struct.pack("<I", x)) for x in data], list()))
+f.write(encoded)
+
+f.close()
diff --git a/python-scripts/dump_ram.py b/python-scripts/dump_ram.py
new file mode 100755
index 0000000..d1f3ec1
--- /dev/null
+++ b/python-scripts/dump_ram.py
@@ -0,0 +1,21 @@
+#!/usr/bin/env python3
+
+# Read all physical memory
+
+from xboxpy import *
+
+ram_size = 64 * 1024 * 1024
+
+f = open('ram.bin', 'wb')
+
+offset = 0
+chunk_size = 0x1000
+assert(ram_size % chunk_size == 0)
+while offset < ram_size:
+  mapped = ke.MmMapIoSpace(offset, chunk_size, ke.PAGE_READWRITE)
+  data = memory.read(mapped, chunk_size)
+  f.write(data)
+  ke.MmUnmapIoSpace(mapped, chunk_size)
+  offset += chunk_size
+
+f.close()
diff --git a/python-scripts/fill_dsp.py b/python-scripts/fill_dsp.py
new file mode 100755
index 0000000..7f2537d
--- /dev/null
+++ b/python-scripts/fill_dsp.py
@@ -0,0 +1,28 @@
+#!/usr/bin/env python3
+
+# Fills the DSP memory with known pattern
+
+from xboxpy import *
+
+print("GP P")
+for i in range(4096):
+  apu.write_u32(NV_PAPU_GPPMEM + i*4, 0x313373)
+print("GP X")
+for i in range(4096):
+  apu.write_u32(NV_PAPU_GPXMEM + i*4, 0x313373)
+print("GP Y")
+for i in range(2048):
+  apu.write_u32(NV_PAPU_GPYMEM + i*4, 0x313373)
+print("GP MIXBUF")
+for i in range(1024):
+  apu.write_u32(NV_PAPU_GPMIXBUF + i*4, 0x313373)
+
+print("EP P")
+for i in range(4096):
+  apu.write_u32(NV_PAPU_EPPMEM + i*4, 0x313373)
+print("EP X")
+for i in range(3072):
+  apu.write_u32(NV_PAPU_EPXMEM + i*4, 0x313373)
+print("EP Y")
+for i in range(256):
+  apu.write_u32(NV_PAPU_EPYMEM + i*4, 0x313373)
diff --git a/python-scripts/fill_ram.py b/python-scripts/fill_ram.py
new file mode 100755
index 0000000..718cff4
--- /dev/null
+++ b/python-scripts/fill_ram.py
@@ -0,0 +1,27 @@
+#!/usr/bin/env python3
+
+# Search empty memory regions and fill them with a pattern
+
+from xboxpy import *
+
+pattern = b'JayFoxRox'
+page_contents = (pattern * ((0x1000 // len(pattern) + 1)))[0:0x1000]
+print(len(page_contents))
+assert(len(page_contents) == 0x1000)
+
+ram_size = 64 * 1024 * 1024
+
+page_count = 0
+
+#FIXME: Walk the pagetable instead and map memory using MmMapIoSpace!
+offset = 0
+while offset < ram_size:
+  allocated = ke.MmAllocateContiguousMemoryEx(0x1000, offset, offset + 0x1000, 0x1000, ke.PAGE_READWRITE)
+  if allocated != 0:
+    memory.write(allocated, page_contents[0:len(pattern)])
+    print("Filling 0x%08X" % ke.MmGetPhysicalAddress(allocated))
+    ke.MmFreeContiguousMemory(allocated)
+    page_count += 1
+  offset += 0x1000
+
+print("Filled %d pages" % page_count)