發錯區, 請板主刪除......

hkghost

發錯區, 請板主刪除......

事先聲明, 我沒動手試過.
連基本hex editing, command prompt都不會的小白可以跳過.

裡面提到的工具應該都在這裡:
http://www.ps3news.com/PS3-Hacks ... -Key-GT5-Decrypted/

原文:
http://psx-scene.com/forums/645797-post5.html
------------------------------------
I've actually written this a few times and promptly lost it due to browser instability. Oops.
(作者)其實我已經寫了數遍, 但瀏覽器不穩定, 哎.

Anyway, this guide requires you to have some knowledge of how the SELF and ELF file formats are laid out. I don't have a quick tool to do this for me, but it takes maybe 5 minutes of my time to do it by hand.
總之, 這遍教程需要你對SELF和ELF檔(PS3的執行檔格式)有所認識, 我沒有什麼快速的工具包可以提供, 但這個過程對我只是五分鐘的事.

   1. Open EBOOT.BIN in a hex editor of your preference.
在Hex修改器下開啟EBOOT.BIN


   2. In EBOOT.BIN, look at the SELF control info, if you see anything resembling the game titleid, it's an NPDRM SELF and this guide won't work, give up.
看看EBOOT.BIN中的SELF控制訊息, 如果你看到類似遊戲TitleID(就是BLUSxxxxx之類的), 那該檔就是NPDRM的SELF, 那你不用繼續了, 放棄吧.

   3. Use readself on EBOOT.BIN to get information about the encrypted metadata sections.
用readself去取得metadata部分的加密數據

   4. unself EBOOT.BIN eboot.elf
把EBOOT.BIN解密成eboot.elf (應該工具包裡有)

   5. Open eboot.elf in a hex editor of your preference.
在Hex修改器下開啟eboot.elf

   6. In eboot.elf, go to every encrypted metadata section (now decrypted), copy its data, and replace the encrypted data in EBOOT.BIN.
把eboot.elf中加密的metadata部分, 逐份逐份複製到EBOOT.BIN

   7. In EBOOT.BIN, change SELF header to indicate it's FSELF.
在EBOOT.BIN, 改改SELF的header, 標成FSELF(這部分需要再深入研究)

   8. In EBOOT.BIN, change SELF section headers that are marked as encrypted to say they are not encrypted.
在EBOOT.BIN, 改改SELF的分段header, 標成非加密的(這部分需要再深入研究)

   9. If the game is a newer SDK version (like GT5, which is 3.50), in EBOOT.BIN, find the .sys_proc_param segment and change the SDK version to something earlier, such as 3.41. This will probably cause crashes in games that actually use newer SDK features that are not available in earlier SDK versions.
如果這個遊戲用的SDK版本是比較新的, 如GT5用的3.50, 那要在EBOOT.BIN裡再找找.sys_proc_param 分段, 再改成低版本的, 但由於新遊戲有可能用到新版本SDK的功能, 所以在低版本系統下有可能會當機.

  10. Save EBOOT.BIN
儲存EBOOT.BIN

  11. Cross fingers, run game, hope it works.
插上電子狗, 執行遊戲, 希望一下能成功.....

hkghost

發錯區, 請板主刪除......