Module
Known NIDs
| Version |
Name |
World |
Privilege |
NID
|
| 1.69 |
SceCoredump |
Non-secure |
Kernel |
0x4CB1F0CC
|
| 3.60 |
SceCoredump |
Non-secure |
Kernel |
0x3E0F5EBD
|
Libraries
Though it may be possible to enable some Coredump features via setting registry values, patching for creating full Coredumps on retails is required. There are 2 key patches.
In the SceCoredump module, there are two functions that read values from the registry. The registry key used is "/CONFIG/COREDUMP". The first patch is to force the function that checks the key "enable_coredump" to return 1. The second is to force the function that checks the key "dump_level" to return 0xEF0. They are at base+0x3070 and base+0x3000 respectively on 1.50.
Known NIDs
SceCoredumpForDriver
sceCoredumpCafContextCreateForDriver
| Version |
NID
|
| 3.60 |
0x2964AD0A
|
derived from SceVshBridge
sceCoredumpCafContextDestroyForDriver
| Version |
NID
|
| 3.60 |
0x95402BF3
|
derived from SceVshBridge
sceCoredumpCafCreateIvForDriver
| Version |
NID
|
| 3.60 |
0xE1BCBE8F
|
sceCoredumpCafFinalForDriver
| Version |
NID
|
| 3.60 |
0xC90F61AF
|
derived from SceVshBridge
| Version |
NID
|
| 3.60 |
0x65AA4991
|
derived from SceVshBridge
| Version |
NID
|
| 3.60 |
0x7C8120C5
|
derived from SceVshBridge
| Version |
NID
|
| 3.60 |
0xAE2C2793
|
derived from SceVshBridge
sceCoredumpCafInitForDriver
| Version |
NID
|
| 3.60 |
0x9336009B
|
derived from SceVshBridge
sceCoredumpCafSegmentFinalForDriver
| Version |
NID
|
| 3.60 |
0xDF17420A
|
derived from SceVshBridge
sceCoredumpCafSegmentInitForDriver
| Version |
NID
|
| 3.60 |
0x07185515
|
derived from SceVshBridge
sceCoredumpCafSegmentTransformForDriver
| Version |
NID
|
| 3.60 |
0xFB7AEBFE
|
derived from SceVshBridge
sceCoredumpCreateDumpForDriver
| Version |
NID
|
| 3.60 |
0x0C10313F
|
derived from SceVshBridge
sceCoredumpDeleteCrashReportCafForDriver
| Version |
NID
|
| 3.60 |
0xAD070837
|
derived from SceVshBridge
SceCoredumpForDriver_unk_097AA37D
| Version |
NID
|
| 3.60 |
0x097AA37D
|
Used in SceAppMgr
Used in SceAppMgrAbortHandler
Some flag that always returns 1
SceCoredumpForDriver_unk_A7D214A7
| Version |
NID
|
| 3.60 |
0xA7D214A7
|
Used in SceAppMgr
Used in SceAppMgrAbortHandler
SceCoredumpForDriver_unk_340856F7
| Version |
NID
|
| 3.60 |
0x340856F7
|
Used in SceAppMgr
Used in sceCoreDumpFinishCoredumpForShellForDriver
SceCoredumpForDriver_unk_10863B61
| Version |
NID
|
| 3.60 |
0x10863B61
|
SceCoredumpForDriver_unk_12392973
| Version |
NID
|
| 3.60 |
0x12392973
|
SceCoredumpForDriver_unk_D064F6DC
| Version |
NID
|
| 3.60 |
0xD064F6DC
|
SceCoredumpForDriver_unk_EF20949F
| Version |
NID
|
| 3.60 |
0xEF20949F
|
SceCoredumpForDriver_unk_13EF8516
| Version |
NID
|
| 3.60 |
0x13EF8516
|
Probably opens/creates coredump file
SceCoredump
sceCoredumpRegisterCoredumpHandler
| Version |
NID
|
| 3.60 |
0x031DC61E
|
sceCoredumpUnregisterCoredumpHandler
| Version |
NID
|
| 3.60 |
0x6037A2C3
|
SceCoredumpNounlink
sceCoredumpWriteUserData
| Version |
NID
|
| 3.60 |
0xDF335DCF
|