COREDMP: Difference between revisions
Jump to navigation
Jump to search
(Created page with "= What are COREDMP files = * COREDMP files are just compressed core dumps of a crash * To decompress them, use something that supports GZIP == Examples of COREDMP files == ...") |
CelesteBlue (talk | contribs) No edit summary |
||
| (5 intermediate revisions by 5 users not shown) | |||
| Line 1: | Line 1: | ||
ORBISDMP files are compressed core dumps of a crash. | |||
= Location = | |||
Kernel crash dumps: | |||
* They are stored on the swap partition in NXDP format. | |||
* Use [https://fail0verflow.com/blog/2017/ps4-crashdump-dump/ fail0verflow's NXDP decoder]. | |||
* | Usermode application crash: | ||
* | * <pre>?/user/data?/orbiscore-1411820528-0x0000003c-eboot.bin.orbisdmp</pre> | ||
* Use an extraction tool that supports GZIP. | |||
?Kernel or shellcore? crash: | |||
* <pre>?/user/data?/orbiscore-systemcrash.orbisstate</pre> | |||
* Use [https://github.com/CelesteBlue-dev/PS4-RE-tools/blob/master/ps4-crash-dump-decrypt SocraticBliss's decrypter]. | |||
{{Development}} | |||
<noinclude>[[Category:Main]]</noinclude> | |||
Latest revision as of 22:25, 18 September 2022
ORBISDMP files are compressed core dumps of a crash.
Location[edit | edit source]
Kernel crash dumps:
- They are stored on the swap partition in NXDP format.
- Use fail0verflow's NXDP decoder.
Usermode application crash:
?/user/data?/orbiscore-1411820528-0x0000003c-eboot.bin.orbisdmp
- Use an extraction tool that supports GZIP.
?Kernel or shellcore? crash:
?/user/data?/orbiscore-systemcrash.orbisstate
- Use SocraticBliss's decrypter.
| |||||||||||||||||||||||||||
