Using deci3dbg in IDA?

Okay so basically I'm trying to figure out this plugin:
http://oct0xor.github.io/2014/05/30/deci3dbg/

It tells you:

I have no idea what "project" folder they're talking about. I googled for ages and nobody gives an answer.

The plugin doesn't show up in the "debugger" menu list so that's probably related.

My buddy Stipo was trying it for ages himself, and I don't remember how far he got but had a really hard time figuring out exactly what version of IDA you need to use, because the tutorial given by the guy who created the plugin made it too vague. He would get various errors about 32 bit and 64 bit compatibility and such.

Does anyone have any experience with this?

 

That part only applies if you intend to compile the plugin yourself. If you use the binaries, simply putting them into the plugins folder as described in the readme should work. Is the bin folder of your TM installation missing from your PATH environment variable maybe? Does the log show any errors when loading a SELF?

 

The problem is the plugin doesn't appear in the "debugger" list in IDA despite putting it in the plugins folder. I tried it on two different versions of the program on two different PCs. It just won't show up.

Eboots and stuff load fine in Target Manager and its debugger.

 

I could really use some help here, the plugins don't show up in IDA at all. I need to get this working.

 

I believe you need to have SN systems ProDG tools installed. From the deci3dbg web sight:\

As well as:

I just finished setting it up myself and I can verify it works. You're welcome.

edit: heres a link to where you can download the prodg software. I believe its ok to share this: http://www.mediafire.com/download/ov227kvod21am8n/ProDG+v4.20.1.exe

-doulomb

 

I was able to get it working with a multiman eboot.bin.

I first decrypted it and resigned as an fself, then used the prodg debugger to launch the fselfed eboot.bin.

Then I hit "attach to process" in IDA and it worked!

Let me know if you need any more help.

-doulomb

 

I have proDG installed, I've always had it installed.
The problem is no plugins show up in IDA.

I put the plugins into the plugins folder in IDA, and they don't show up in the "plugins" menu.

As I've said before, no such "project" folder exists. I have no idea what folder that is.

 

Did you read the part about "How to use"?

You don't access it from the plugins menu, you access it from the "Select Debugger" menu.

Also you don't need to do the Copy folder part unless you are trying to compile the plugin. Notice how its under a big bold header that says "Compilation"? Did you even read the page?

Also can I ask what it is you are trying to do that so urgently requires this plugin?

-doulomb

 

By "plugins" menu I meant the debugger menu.

See here:


It's not in the list but I have put the plugins in the plugins folder.

It's urgent because I bought DEX PS3s for me and a friend so we could mod games like The Last of Us.
He is more experienced with 360 modding so we're trying to help each other figure this out together.

I know this plugin works with The Last of Us because I was directed to it by a guy that uses it for that game and others.

I apologise for my ignorance, this program is all new to me, so I needed a much more in depth description of how to set it up than what was given.

 

I think you need to open a decrypted EBOOT.BIN. From the looks of that screenshot you've opened a Signed ELF version. You need to decrypt it before you open it with IDA. I recommend using this: http://psx-scene.com/forums/content/jjkkyu-updates-trueancestor-self-resigner-v1-91-3934/

Copy the EBOOT to the resigner folder then choose option 1. It will spit out the decrypted file as EBOOT.elf. Try opening that file with IDA.

-doulomb

 

That's after decrypting.

 

When you opened it in IDA and it asked you what processor etc, what did you choose? It looks like you have it set to the wrong processor. It says .686p which I would guess means you choose the 686 architecture. The PS3 uses powerpc. When you loaded the elf into IDA it should have automatically figured out it was a PPC elf.

No offence but it seems like you are really really inept at this. If you can't figure this part out, its only going to get harder when you are trying to mod the game. Anyways I'm going to help you get this working dude, whatever it takes.

-doulomb

 

I'm not the one that's going to be making the mods when this is working, well not right away anyway.
I'm trying to figure out how to get this setup so Stipo can start using it. (The friend I bought a PS3 for.) He knows how to use IDA, but was having trouble getting PS3 stuff to work with it.

Here's it loaded as PPC:


This is what I selected when I loaded the file this time:

 

Do you see the part that says ELF64 for PowerPC 64? You should select that because it will automatically set up a ton of shit that wont if you choose binary file.

Do that and you should be all set.

-doulomb

 

I get an error about the program needing to be a 64 bit version, but I cannot for the life of me find a version that is 64 bit. All ones labeled at 64 are only 32.

Anyway this is what Stipo got when he loaded it as you said since his is 64 bit.


He asked how do you read a byte from something like seg000:000000000001020C.
Tho he should probably just be posting here.

Is this correct? I can just send you my .elf to let you have a crack at it if it's still wrong.

 

Look in C:/Program Files (x86)/IDA/ and you should see an IDA64.exe file. And yes that is correct.

-doulomb

 

I got a different version and It says this down the bottom.


Here's all the stuff it says after I load an .elf

I doubt it's working properly if it says that first thing.

 

hey guys, as an addition to freakos post, me and him need to know this.

Is there any reason why there is simply ZERO functions like : .float , byte_ , .double , unk_ .... nothing! all there is in here is a few .quad instructions being held as if they are .long

Something else, is what the hell does all this "seg002:0000000000E871A4" shit mean, what kind of address is that!? either i'm WAY too used to xbox360 XEX's .. or something fucky is going on here.

what the hell is going on exactly?

 

Did you install the deci3dbg.p64 file into your IDA plugins folder? Basically plugins have to be made for either 32 bit IDA which are .plw files and 64 bit IDA which uses .p64 files. IDA is saying it can't find that file.

The installation part of the web sight says:

Sounds like you only copied the first file.

-doulomb

 

I'm not sure about the first part of your post regarding the fact that there are supposedly zero functions. Could you post a picture showing what you are seeing vs what you are expecting?

Regarding the addressing, seg002 would mean that it is the 2nd segment of the elf file, and then the second part is the internal elf address. Basically this lets the computer rearrange the address space when it loads the file without any of the addresses internally getting messed up.

I'm having a hard time explaining it properly but basically for the purposes you need, it really doesn't matter.

-doulomb