Today PlayStation 3 developer Storm Shadow (aka zadow28) released an IDA Professional PS3 SPU Debugger IDA PRO (Integrated Anergistic Support) Plugin with a guide available HERE, as follows:
Download: [Register or Login to view links]
To quote: I had some spare time this weekend, and i have been reading up on my Python. So i set the goal for adding debugging support for SPU proccesor in ida, since the procs. is written in Python.
Download the package at the bottom (linked above) and overwrite the files in ida dir.
You can edit the line in gdb_arch.cfg if you dont have ida in c:\ida
to what ever you have.
set QEMUPATH C:\ida\plugins\SpuDebug
You have to have Python installed correctly. See techbliss.org/threads/setting-up-ida-with-pyside-and-pyqt-it-makes-big-difference.211/ for help (there are finished packages there somewhere).
First set system environment setting: itechtics.com/customize-windows-environment-variables/
Make new one called:
Turn Firewall off when debugging or pass it throug or it wont connect. Restart PC.
Okay fire up ida and load a spu.elf file. Choose spu proccessor
Right away after its loaded you would notice that we can selct debuggers, the original spu dosent support this.
I code so it start with the remote gdb debugger since this is what we need, we have to setup some small stuff before we start, press debugger options at the top.
Tick run program before debugging and choose configoration.
Now i have made two options we can choose from.
Debugger or dump ls. We start with dump since its the fun one.
Press ok ok ok. I will give a short explainasion later.
Press run the green arrow and it dumps the ls.bin
Now we test out the live debugger option. We chosse under debugger settings again.
IMPORTANT !! We have to have max package size set to 1024.
Tick stop on debugging start it seems to be the most stable. Then click edit exceptions in the button.
Locate SIGABRT and press right click edit and untick stop.
You press the green arrow again to run or set Breakpoint and run to cursor.
Success! We can now write custom anergistic to do specific needs. Remeber anergistic is basicly gdbserver in a shell.
Little more about the Dumper module. I use a custom version off Anergistic. That works with patching my way throug a spu file. When loaded any spu module it loads a spesial patcher module also. Credits to computerline
You find it under views>> subview >> patches. Press that.
Under edit >> patches you have two new options.
Select the jump in graph view and select edit selection.
Patch and go to patch windows >> right click and refresh.
Now dump that ls.b
More PlayStation 3 News...