Announcement

Collapse
No announcement yet.

Memory Dropper v1.0a

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Memory Dropper v1.0a

    I've been messing with this technique for a while, and finally got it to some what working... I find it seems to only work during a cut scene of some sort, but never during game play (well GTA3 will work in game play but freezes). I don't have much to choose from when it comes to testing, so it might help if someone else tried a few games. It uses the same joker scanner from LDv3, and uses the same activation joker (R3 + L3).

    How it works:
    - Main ELF installs the engine (written in CodeDesigner v2) to memory address 0x00080000
    - Main ELF installs packed dumper ELF to kernel memory address 0x80030000
    - Main ELF loads the game disc ELF manually, then executes the engine
    - Engine installs Syscall filter, and performs ExecPS2 to launch game ELF with arguments provided by the main ELF
    - Syscall filter modifies the EPC used to return to game after syscall execution completes with MIPS ASM command eret
    - In game engine is executed by the ASM command eret, and takes the original EPC and jumps to it after it is done processing
    - Joker scanner is called by the in game engine to locate the controller input for the game
    - In game engine activates with R3 + L3, and will extract a packed ELF to memory and perform ExecPS2() on it with argument "gt.elf"
    - Dumper ELF will reboot the IOP, and load all it's modules it needs (USB, pad, etc.)
    - Dumper ELF will dump memory 0x00082000 - 0x02000000 to usb drive when Cross button pressed

    For me, I find it only seems to work properly during a cut scene (or fmv sequence whatever you like to call the movie portions). However when it does work properly it dumps RAM directly to the USB drive.

    Before anyone mentions it, not this is not a rebuild of jimmy's IGMassDumper application. The USB driver might be the same (I forget where I got the USBD / USBHDFSD IRX modules from). I didn't make the IRX modules used, only the application itself.

    The main ELF boot has no GUI, however does take controller inputs:

    CROSS - Stop the disc so you can swap and load a backup
    START - Launch the game

    Remember, there is NO GUI for it (not even a scr_printf() shell), so if you have a total blank screen don't assume it didn't load!

    Download is in attachment, I don't expect any good results as the technique isn't very reliable (obviously).

    I called this Memory Dropper because it drops off when you enter the memory dump menu. You can't return to game, and if it's pre-load is a success you can press Start button to reboot the PS2 after dumping. I noticed that with the game GUN it dumps perfectly during a cut scene but when you enter during game play it fails to read/write the USB drive every time you hit Cross button... Oh well worth playin' with
    Attached Files

  • #2
    Thanks for the hard work. I was hoping this will work during game play.

    Comment


    • #3
      You never know, it might work on a game during play (only one way to find out). However I honestly highly doubt it will, it only worked for me during cut scenes. However it has given me a few other ideas towards making it more efficient. What little bit it does work has actually allowed me to dump some games I couldn't ever get to load with PCSX2, which is a good sign!
      Last edited by Gtlcpimp; 12-05-2010, 02:22:50 PM.

      Comment

      Working...
      X