Module
Known NIDs
| Version |
Name |
World |
Privilege |
NID
|
| 1.69 |
SceCoredump |
Non-secure |
Kernel |
0x4CB1F0CC
|
| 3.60 |
SceCoredump |
Non-secure |
Kernel |
0x3E0F5EBD
|
Libraries
Known NIDs
Enabling more coredumps
Though it may be possible to enable some Coredump features via setting registry values, patching for creating full Coredumps on CEX is required. There are 2 key patches. In the SceCoredump module, there are two functions that read values from the registry. The registry key used is "/CONFIG/COREDUMP".
The first patch is to force the function (located at base+0x3070 on 1.50) that checks the key "enable_coredump" to return 1 (True).
The second patch is to force the function (located at base+0x3000 on 1.50) that checks the key "dump_level" to return 0xEF0 (full coredump).
SceCoredumpForDriver
sceCoredumpCafContextCreateForDriver
| Version |
NID
|
| 3.60 |
0x2964AD0A
|
derived from SceVshBridge
sceCoredumpCafContextDestroyForDriver
| Version |
NID
|
| 3.60 |
0x95402BF3
|
derived from SceVshBridge
sceCoredumpCafCreateIvForDriver
| Version |
NID
|
| 3.60 |
0xE1BCBE8F
|
sceCoredumpCafFinalForDriver
| Version |
NID
|
| 3.60 |
0xC90F61AF
|
derived from SceVshBridge
| Version |
NID
|
| 3.60 |
0x65AA4991
|
derived from SceVshBridge
| Version |
NID
|
| 3.60 |
0x7C8120C5
|
derived from SceVshBridge
| Version |
NID
|
| 3.60 |
0xAE2C2793
|
derived from SceVshBridge
sceCoredumpCafInitForDriver
| Version |
NID
|
| 3.60 |
0x9336009B
|
derived from SceVshBridge
sceCoredumpCafSegmentFinalForDriver
| Version |
NID
|
| 3.60 |
0xDF17420A
|
derived from SceVshBridge
sceCoredumpCafSegmentInitForDriver
| Version |
NID
|
| 3.60 |
0x07185515
|
derived from SceVshBridge
sceCoredumpCafSegmentTransformForDriver
| Version |
NID
|
| 3.60 |
0xFB7AEBFE
|
derived from SceVshBridge
sceCoredumpCreateDumpForDriver
| Version |
NID
|
| 3.60 |
0x0C10313F
|
derived from SceVshBridge
sceCoredumpDeleteCrashReportCafForDriver
| Version |
NID
|
| 3.60 |
0xAD070837
|
derived from SceVshBridge
SceCoredumpForDriver_unk_097AA37D
| Version |
NID
|
| 3.60 |
0x097AA37D
|
Used in SceAppMgr
Used in SceAppMgrAbortHandler
Some flag that always returns 1
SceCoredumpForDriver_unk_A7D214A7
| Version |
NID
|
| 3.60 |
0xA7D214A7
|
Used in SceAppMgr
Used in SceAppMgrAbortHandler
SceCoredumpForDriver_unk_340856F7
| Version |
NID
|
| 3.60 |
0x340856F7
|
Used in SceAppMgr
Used in sceCoreDumpFinishCoredumpForShellForDriver
SceCoredumpForDriver_unk_10863B61
| Version |
NID
|
| 3.60 |
0x10863B61
|
SceCoredumpForDriver_unk_12392973
| Version |
NID
|
| 3.60 |
0x12392973
|
SceCoredumpForDriver_unk_D064F6DC
| Version |
NID
|
| 3.60 |
0xD064F6DC
|
SceCoredumpForDriver_unk_EF20949F
| Version |
NID
|
| 3.60 |
0xEF20949F
|
SceCoredumpForDriver_unk_13EF8516
| Version |
NID
|
| 3.60 |
0x13EF8516
|
Probably opens/creates coredump file
SceCoredump
sceCoredumpRegisterCoredumpHandler
| Version |
NID
|
| 3.60 |
0x031DC61E
|
sceCoredumpUnregisterCoredumpHandler
| Version |
NID
|
| 3.60 |
0x6037A2C3
|
SceCoredumpNounlink
sceCoredumpWriteUserData
| Version |
NID
|
| 3.60 |
0xDF335DCF
|