SceCoredump

Enabling more coredumps
Though it may be possible to enable some Coredump features via setting registry values, patching for creating full Coredumps on CEX is required. There are 2 key patches. In the SceCoredump module, there are two functions that read values from the registry. The registry key used is "/CONFIG/COREDUMP".

The first patch is to force the function (located at base+0x3070 on 1.50) that checks the key "enable_coredump" to return 1 (True).

The second patch is to force the function (located at base+0x3000 on 1.50) that checks the key "dump_level" to return 0xEF0 (full coredump).

Thread stopReason table
sceKernelSysrootDbgpSuspendProcessAndWaitResumeForKernel

sceKernelIsThreadDebugSuspendedForDriver

sceCoredumpCafContextCreateForDriver
derived from

Returns Caf context.

sceCoredumpCafContextDestroyForDriver
derived from

sceCoredumpCafFinalForDriver
derived from

sceCoredumpCafHeaderFinalForDriver
derived from

sceCoredumpCafHeaderInitForDriver
derived from

sceCoredumpCafHeaderTransformForDriver
derived from

sceCoredumpCafInitForDriver
derived from

sceCoredumpCafSegmentFinalForDriver
derived from

sceCoredumpCafSegmentInitForDriver
derived from

base_key size is 0x10. It is the key that is sent to SceSblPostSsMgr for maybe some modification.

sceCoredumpCafSegmentTransformForDriver
derived from

sceCoredumpCreateDumpForDriver
derived from

sceCoredumpDeleteCrashReportCafForDriver
derived from

SceCoredumpForDriver_097AA37D
Used in

Used in

Always returns 1.

sceKernelCoredumpTriggerForDriver
Used in

Used in

sceKernelCoredumpCancelForDriver
Used by

Used in

SceCoredumpForDriver_D064F6DC
Calls SceCoredumpForDriver_A7D214A7.

SceCoredumpForDriver_unk_13EF8516
Probably opens/creates coredump file

sceCoredumpRegisterCoredumpHandler
Calls SceProcessmgr.

sceCoredumpUnregisterCoredumpHandler
Calls SceProcessmgr.