Ape Escape (USA) SCUS-94423 - Will not run past DualShock required screen

[tummyache123]

Game: Ape Escape SCUS-94423

Version: d224545

Hardware: Ryzen 7 3700X, 2070 Super, 32GB RAM, Windows 10 2004 x64

Behavior: Game boots and will show the DualShock required disclaimer, then gets stuck on a black screen.

• Logs: [INFO] Using bios SCPH1001.BIN [INFO] Loaded memory card 1 from card1.mcr Controller XInput Controller connected

PS-X Realtime Kernel Ver.2.5 Copyright 1993,1994 (C) Sony Computer Entertainment Inc. KERNEL SETUP!

Configuration : EvCB 0x10 TCB 0x04 System ROM Version 2.2 12/04/95 A Copyright 1993,1994,1995 (C) Sony Computer Entertainment Inc. ResetCallback: _96_remove .. [GPU] GP0(0) nop: non-zero argument (0x07920c) [GPU] GP0(0) nop: non-zero argument (0x07920c) System Controller ROM Version 94/09/19 c0 PS-X Control PAD Driver Ver 3.0

PS-X Realtime Kernel Ver.2.5 Copyright 1993,1994 (C) Sony Computer Entertainment Inc. KERNEL SETUP!

Configuration : EvCB 0x10 TCB 0x04 System restarted System ROM Version 2.2 12/04/95 A Copyright 1993,1994,1995 (C) Sony Computer Entertainment Inc. ResetCallback: _96_remove .. [GPU] GP0(0) nop: non-zero argument (0x07920c) [GPU] GP0(0) nop: non-zero argument (0x07920c) System Controller ROM Version 94/09/19 c0 SetGraphDebug:level:1,type:0 reverse:0

BOOTSTRAP LOADER Type C Ver 2.1 03-JUL-1994 Copyright 1993,1994 (C) Sony Computer Entertainment Inc. setup file : cdrom:SYSTEM.CNF;1 TCB 00000020 EVENT 00000020 STACK 801ffff0 BOOT = cdrom:\SCUS_944.23;1 argument = EVENT=20 STACK=801FFFF0

KERNEL SETUP!

Configuration : EvCB 0x20 TCB 0x20 boot file : cdrom:\SCUS_944.23;1 EXEC:PC0(800a3660) T_ADDR(80010000) T_SIZE(000a5000) boot address : 800a3660 801ffff0 Execute !

            S_ADDR(801ffff0)  S_SIZE()

[SPU] Unhandled write at 0x1f801da0: 0x00 [SPU] Unhandled write at 0x1f801da1: 0x00 [SPU] Unhandled write at 0x1f801dae: 0x00 [SPU] Unhandled write at 0x1f801daf: 0x00 [SPU] Unhandled write at 0x1f801db8: 0x00 [SPU] Unhandled write at 0x1f801db9: 0x00 [SPU] Unhandled write at 0x1f801dba: 0x00 [SPU] Unhandled write at 0x1f801dbb: 0x00 [SPU] Unhandled write at 0x1f801dbc: 0x00 [SPU] Unhandled write at 0x1f801dbd: 0x00 [SPU] Unhandled write at 0x1f801dbe: 0x00 [SPU] Unhandled write at 0x1f801dbf: 0x00 CD_init: addr=800a6f98 ResetGraph:jtb=800a87f8,env=800a8840 [GPU] GP0(0) nop: non-zero argument (0x0a87f8)

[ultraembedded]

I see this too. The reason the game gets stuck is that it trashes the beginning of main RAM by writing past the 2MB window:

[DMA3] CDROM -> RAM @ 0x00200000, block, count: 0x0200 RAM out of range write 00200000 -> 00000000 = 00000000 RAM out of range write 00200004 -> 00000004 = 00000000 RAM out of range write 00200008 -> 00000008 = 00000000 RAM out of range write 0020000c -> 0000000c = 00000000 RAM out of range write 00200010 -> 00000010 = 00000000 RAM out of range write 00200014 -> 00000014 = 00000000 RAM out of range write 00200018 -> 00000018 = 00000000 RAM out of range write 0020001c -> 0000001c = 00000000 RAM out of range write 00200020 -> 00000020 = 00000000 RAM out of range write 00200024 -> 00000024 = 81e22290 RAM out of range write 00200028 -> 00000028 = 81e22120 RAM out of range write 0020002c -> 0000002c = 00000000 RAM out of range write 00200030 -> 00000030 = 00000008 RAM out of range write 00200034 -> 00000034 = 00000001 RAM out of range write 00200038 -> 00000038 = 81da31c4 RAM out of range write 0020003c -> 0000003c = 8064ce50 RAM out of range write 00200040 -> 00000040 = 00000020 RAM out of range write 00200044 -> 00000044 = 8064cf20 RAM out of range write 00200048 -> 00000048 = bff4b3f0 RAM out of range write 0020004c -> 0000004c = bff4b5b0 RAM out of range write 00200050 -> 00000050 = ffffffff ...

This blats important bios stuff, which is the reason the game freezes after the 'DualShock required screen'. As to why the game setups up a CDROM DMA transfer with this address - who knows...