Parece que esto puede ser la posible solucion al los dvdchecks, a parte del famoso IDA PRO, para quien no tenga dinero para pagarselo, o no tenga FTP ni esas cosas, esta podría ser la posible solución. Ante todo gracias a MaBoquepaSA POR LA INFORMACIÓN, TE LO HAS CURRARO.
Dejo aqui el texto de la pagina y a ver si lo traducimos. Yo pienso hacerlo, porque esto se podría poner interesante en breve.
------------------------------------------------------------------------------
GETTING STARTED
SETTING FONTS
Run ps2dis.exe, then choose fonts at first. Focus disassembler window and choose "Preference-fonts...". Focus Hex window and do it in the same way. I think "Courier New - regular" is a good choise.
BROWSING and ANALYZING PS2 BINARIES
Simply drop a PS2 executable. Use following keys to bworse, KEY ACTION
UP/DOWN Moves up and down
PageUp,PageDown Next/Prev page
Ctrl+PageUp,Down 1000h Up/Down
Alt+PageUp,Down 10000h Up/Down
g Jump to specified address
Ctrl+g Jump to specified label (if there are labels set).
Right arrow (USEFUL!) Jump to address which current line refers to.
Left arrow Return back to referrer.
LABELLING TEXT RESOURCES
- With new version, PS2DIS detects many string literals automatically.
There must be some text resources in .data or .rodata section. If you find them, I sugest you label it with this easy way.
Cursor the top of string(s).
Then press Shift+b and label is set.
If there are more strings after this, continue pressing that key.
LABELLING SYSCALLs
PS2 kernel supports some system-calls and most executables have these functions. PS2DIS will automatically find and label them. Choose "label syscall" from menu "Analyzer".
LABELLING MEMORY MAPPED I/Os
ps2.map that comes with ps2dis.exe defines some known I/O addresses. Choose "Load label" from menu "File" then import it.
INVOKING ANALYZER
PS2DIS has powerful analyzer functions. To use it, you should run Analyzer first. Choose "Invoke analyzer" from menu "Analyzer". It may looks as if it hangs up, but don't worry, wait a while and it should return.
You will see another labels like FNC_XXXXXXXX or __XXXXXXXX which are refered from somewhere. FNC_XXXXXXXX are the points that some JALs point to. Mark it using SPACE key then press F3, you will see the referrers. Press Alt+x to return back to marked address.(This exchanges cursor and mark.) Press F3 to jump to next referrer. Press Alt+A to show/hide these labels.
IMPORTING LABELS FROM AN OTHER FILE
This function will transplant symbols from files which has symbols. You should invoke Analyzer before do this. Try "Import labels from other file" in menu "Analyzer" then choose any file that has symbols. It finds functions that are assumed same, and label them. Check labels using Ctrl+g!
--------------------------------------------------------------------------------
KEY ASSIGN
KEY ACTION
DATA TYPE RELATED
b Set type as BYTE
Alt+b Set type of the region between marked and cursor as BYTEs
Shift+b Set type as BYTE then label it
h Set type as HALF WORD
Alt+h Set type of the region between marked and cursor as HALFs
w Set type as WORD
Alt+w Set type of the region between marked and cursor as WORDs
d Set type as DOUBLE WORD
Alt+d Set type of the region between marked and cursor as DWORDs
q Set type as QUAD WORD
Alt+q Set type of the region between marked and cursor as QWORDs
c Set type as CODE
Alt+c Set type of the region between marked and cursor as CORDs
u Set type as UNDEFINED(almost same as CODE)
Alt+u Set type of the region between marked and cursor as UNDEFs
Shift+u Set type as NOT INITIALIZED
MARK/REGION RELATED
SPACE Mark current line, or reset current mark
Alt+x Exchange current line with marked line
Ctrl+t Save region(which are lines between current line and marked line) as text file
Ctrl+c Copy current function to the clipboard
ADDRESS STACK RELATED
Right arrow Push current address into Stack then jump to address where the current line refer to
Left arrow Pop an address from Stack then jump to the address. Popped address is still there. See below.
Ctrl+Right arrow Jump to the address which has popped recently. It behaves like 'history' function of WWW browsers.
Ctrl+Left arrow Back to the Stack. It behaves like 'history' function of WWW browsers.
Insert Push current address into Stack
EDITOR
Enter Editor dialog pops up. You can edit label,command and opcode itself. If you edit opcodes, all histories are saved as Patch. See 'p' command.
PATCH
p Open 'patch' dialog. You can view all changes, enable/disable each change, and copy that infos to the clip board (for creating chat codes). (Assembler function doesn't work properly with some opcodes, for now.)
MOVE
PageUp or Ctrl+b Page Up
PageDown or Ctrl+f Page Down
Up up
Down down
Ctrl+Up/Down Up/Down to prev/next function
Ctrl+PageUp,Down 1000h Up/Down
Alt+PageUp,Down 10000h Up/Down
g Jump to specified address in hexadecimal. When you hit left-shift key after typed all 8 hex charcters, it decodes the address as AR2 cheat code.
Ctrl+g Jump to the address where the selected symbol belongs to
Home Jump to start address
Shift+3 Set a 32bit word then find next.
F4 find the 32bit word you set. (forward)
Shift+F4 find the 32bit word you set. (backward)
ANALYZER RELATED
F3 Jump to next address where marked line reffers to
Shift+F3 Jump to previous address where marked line reffers to
Ctrl+i Import symbols (of function names) from other file
Ctrl+Shift+1 Import symbols (of function names) from folder which has PSX Libs(*.lib). This function doesn't support multi-thread so it looks as if it hungs up...
--------------------------------------------------------------------------------
hanimar@geocities.com