For the size, that's why I said devolution is between bytes 0x3200000 to 0x3219A9F inclusive (~102KB) in the MEM2 dump.
So the difference of 7 KB is because of the bss segment?
A lot less, yes. But still quite a lot. If you want to check every function it is still kind of a sisyphus work. To find the DRM part one need a lot of skill and know-how-so there is a lot less of this: http://imageshack.us/a/img96/6462/wupe.png
So there is a difference between kernel and loader.bin? loader.bin is a binary blob inside the boot.dol and the kernel is a binary blob inside the loader.bin? Therefore three layers? Are you sure? 102 KB sounds more like the loader.bin.If the DRM is still in the kernel and not just loader.bin
Doubt it. Tueidj is clever. He has probably put as many checks as possible inside devo. patching one check will let a checksum fail. And patching the checksum check will propably also break the program, because can easily connect a checksum with a game patch such that this gamepatch fails, if the checksum is wrong.it can probably be disabled with a single b(ranch) command. Same with any possible checksums.