- Today Jack Chen
has shared a PlayStation 3 IDA IDC hypervisor dump script on xorloser
's blog (linked above) alongside a PS3 Debug / Test Firmware
version 3.41 leak from Blackpen0
there as well!
For those curious, the IDA script is used to extract the protection page list of process obj in PS3 Hypervisor dumps.
Downloads: PS3 IDA IDC Hypervisor Dump Script
/ PS3 Debug Firmware v3.41
/ [Register or Login to view links]
(Mirror - Required UnRAR Password Below)
To quote: For those who are new to HV reversing like I am. Here I made a quick IDC script for those interested in tracing the process protection pages to realize the VA and RA address mapping being used by the process.
You must execute the HV_DUMP.IDC from xorloser
first, then apply this IDC later because it requires a opd_table to be defined first. and it’s for 3.15 HV only because that’s the only HV dump I have. process 0 is not extractable. There seems some data missing in the process object of process 0.