(08-09-2010, 07:22 AM)BlackDaemon Wrote: I decrypted files in "PSP_GAME\USRDIR\modules" folder, but i can't replace them since:
libpsmfplayer.prx: enc-32,144/dec-80,586 bytes and psmf.prx: enc-6,800/dec-11,298 bytes because this game has LBA protection. Maybe possible make some external modules loading? If some of file in "PSP_GAME\USRDIR\modules" has different header (~SCE/~PSP) emulator tryes to load external decrypted files from "JPCSP\tmp\ULUS10466\modules" folder.
It is possible, but I'm not sure if it'll help much, atleast not for those two modules.
BlackDaemon, could you or Darth please try this:
1 - Run "Tekken 6" and place a breakpoint on that function;
2 - Wait for the game to stop there and copy the contents of the last register ($ra);
3 - Jump to the address you just copied and you'll see the instruction that calls this syscall;
4 - Center that instruction on the Debugger window, so we can see what happens before and after;
5 - Take a screenshot and post it here.
This way we could check exactly which arguments are used in this function, and if any of them is obvious enough, it may give us a clue to this function's name.