forums.ps2dev.org

I tried to call sceKernelCheckPspConfig with the config.txt (loaded to a buffer ) passed as parameter - it gave me some "cant handle plain config..." errormessage... mind telling me how this method works? Does the decryption thing has to be initialized somehow? I'd love to chat about some ...

Lastly if you prefer to decode things more atomically, you can grab the .PRXs after they have come out of the decryption process and save them before they become un-gzipped and loaded/flattened into memory. This gives you a more generic view of the modules (ie. no specific load addresses, just like...

Hi,

could anyone here tell me in what memory regions the VSH modules reside in? What memory range has to be dumped to get access to the decrypted VSH prx files?

Thanks in advance,

-mc

Well, if it's not loadexec.prx then it's loadcore.prx they modified (propably something inside loadelf code) ... i'll find out... i reversed much more difficult stuff in the past ... :)

Yes, i expected that. Question is if it's possible to replace this 1.5 .prx by the 1.0 version - i'll definitely try that as soon as i get my hands on a 2nd PSP for testing...

If i had a spare 1.50 PSP i would do the following: Copy the 8106 bytes small 1.0 "flash0\kd\loadexec.prx" to my 1.5 psp flash (still assuming that it's possible to write to the flash FAT system). The new 1.5 "loadexec.prx" is about 60k big so sony must have added all "secur...