Hi Mr Truck,
I hate to bother you, but I've been having trouble understanding the exploit tool you wrote that makes OpenZDK possible.
I made a post about it here:
http://www.zuneboards.com/forums/gam...tml#post530501 and they suggested I talk to you directly.
In summary, I had three main issues:
*ptr = *ptr;
Why on earth would you need to do that?
Second is, what are ipl and rvx? Are the bytes in _ipl some sort of unlock code?
Another thing that confused me is, why did you need to use the "MarhalCopy" method from the ZuneKernelMethods? Wouldn't it be enough to just overwrite the return address on the stack?
If you don't have time to answer these questions directly, I would really appreciate it if you could at least point me to where I could go to find the answers. I've been trying to figure this out for a week or so now.