Writing a binary loader for savedata exploit

by **wth** » Fri May 18, 2012 8:44 pm

lol anyway it doesn't matter
whatever the load address we just have to look what it is

by **m0skit0** » Sat May 19, 2012 12:19 am

Definitely.

by **frostegater** » Sat May 19, 2012 1:19 am

m0skit0 wrote:@Frostegater: You can use PSPLink's modlist + modinfo to get any info you want about modules.

thanks!

Code: Select all: UID: xxxx Attr: 0000 - Name: xxxx Entry: 0x0884BD84 - GP: 0x08915328 - TextAddr: 0x08804000 TextSize: 0x00104E94 - DataSize: 0x00004468 BssSize: 0x00106B00 Segment 0: Addr 0x08804000 - Size 0x00109338 Segment 1: Addr 0x0890D338 - Size 0x00113F88

0x08804000?

by **m0skit0** » Sat May 19, 2012 1:25 am

TextAddr: 0x08804000

Yes.

by **frostegater** » Sat May 19, 2012 2:08 am

can I check my exploit by simple loader.. exit game or output text on screen without loading h.bin?

by **wololo** » Sat May 19, 2012 3:06 am

Yes, although writing a binary loader puts you one step further if you plan to port hbl.

by **frostegater** » Sat May 19, 2012 4:02 am

its right?

Code: Select all: .set noat .set noreorder jal 0x08804000+prx_sceKernelExitGame_addr nop

by **FrEdDy** » Sat May 19, 2012 4:36 am

Frostegater wrote:its right?

Code: Select all
.set noat .set noreorder jal 0x08804000+prx_sceKernelExitGame_addr nop

The syntax is wrong, and you can do it just by replacing your return address with ExitGame address

by **frostegater** » Sat May 19, 2012 5:06 am

FrEdDy wrote:The syntax is wrong, and you can do it just by replacing your return address with ExitGame address

but I want to validate return addresses

by **m0skit0** » Sat May 19, 2012 11:58 am

That makes no sense.