
- how to unDMA a code
Threaded View

ShaneO how to unDMA a code 01-17-2010,
04:46 AM

Raumy Re: how to unDMA a code 02-14-2010,
01:55 AM

Bl4Ck.KiD... Re: how to unDMA a code 02-14-2010,
09:34 AM

Raumy Re: how to unDMA a code 02-14-2010,
10:47 AM

Bl4Ck.KiD... Re: how to unDMA a code 02-14-2010,
12:14 PM

Raumy Re: how to unDMA a code 02-14-2010,
01:11 PM

Bl4Ck.KiD... Re: how to unDMA a code 02-14-2010,
01:26 PM

Raumy Re: how to unDMA a code 02-14-2010,
01:36 PM

Raumy Re: how to unDMA a code 02-15-2010,
11:49 AM

Bl4Ck.KiD... Re: how to unDMA a code 02-15-2010,
12:00 PM

Raumy Re: how to unDMA a code 02-15-2010,
12:10 PM

Bl4Ck.KiD... Re: how to unDMA a code 02-15-2010,
12:18 PM

smerf234 Re: how to unDMA a code 02-15-2010,
09:58 PM

Raumy Re: how to unDMA a code 02-15-2010,
10:09 PM
-
how to unDMA a code
Things you need:
1. PS2dis
2. A ram dump that was created while in the part of the game the code is for.
(examples: Skywalker DMA - take the ram dump while in game. Lobby boot DMA - Take the ram dump while in the lobby.)
3. A hex calculator (start menu>all programs>accessories>calculator --- click view>scientific and then bubble in hex and Qword)
4. A DMA code you wish to unDMA for whatever purpose.
For this tutorial I am going to unDMA the DMA version of the virus code.
If this is your first time I recommend using it too so you can follow along easier.
#DMA Virus Mode
0xFFFFFFFF 0x0074CD1C
0x00000BD8 0x00000001
Pointer Offset Value
1. Open PS2dis and drag your ram dump into it. If a box pops up just click ok.
2. press "g" on your keyboard, enter the pointer of your DMA and press enter. In this case the pointer is 0074CD1C.
3. At the address 0074CD1C there should be the value 08D59470. If not then you need to redo the ram dump in the correct area in the game. Enter the value 8D59470 into the hex calculator and subtract 8800000 from it (you dont enter the leftmost zeros in the calculator because it removes them anyway). You should get 559470 ( 00559470 ).
4. Enter 559470 into the hex calculator and add BD8 ( the offset ) to it. You should get 55A048 ( 0055A048 ). That is the address of your unDMA'd code! Yay!
5. 0055A048 is your address and 00000001 is your value
#Virus mode
;tonic
0x0055A048 0x00000001
Thats all there is to it...
Rep+++
Tags for this Thread
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
Bookmarks