Sponsored Links

Sponsored Links

Page 5 of 6 FirstFirst ... 3456 LastLast
Results 41 to 50 of 55



  1. #41
    Registered User ncfballkid's Avatar
    Join Date
    May 2007
    Posts
    6
    Sponsored Links
    Sponsored Links
    Do you know how the retail EBOOTs are encrypted ? I think all we would have to do is reverse the algorithm and we'd be good to go... extract the decrypted elf from the retail EBOOT , change the code to run from the hard drive and then use the make_fself_npdrm to make a debug EBOOT... what if we could write an app that loads the EBOOTs in the memory and then make a dump of the memory like onto a memory stick or something ... bc from my understanding .. the EBOOT is decrypted after it is ran in memory.

    Do you by chance know how the retail EBOOTS are encrypted and decrypted? What if we were to write a program that runs and then you get to choose any EBOOT to run into memory and then dump it on a USB drive ... im sure we could find the offsets for the decrypted self file...
    Last edited by ncfballkid; 09-12-2010 at 01:52 PM Reason: Automerged Doublepost

  2. #42
    Toucan Sam CJPC's Avatar
    Join Date
    Apr 2005
    Posts
    2,174
    Sponsored Links
    Sponsored Links
    From the looks of it, it seems the problem is that in some of the games you are actually overwriting data by replacing the dev_bdvd data, with dev_hdd0, if so try to remove 00 bits near that area, and then insert data as you can not overwrite actual data without consequences.

  3. #43
    Contributor cvp's Avatar
    Join Date
    May 2007
    Posts
    55
    Sponsored Links
    Sponsored Links
    @CJPC
    and you think we can fix this with a downgrade ? or will you achieve it all?

  4. #44
    Registered User pngo's Avatar
    Join Date
    Aug 2010
    Posts
    6
    Understood. I will give a try... removing 00 trailing fields and inserting new fields to match the proper path. however, I will probably have to insert new 00 fields anyway otherwise the resulting file might have a different size, which will prevent it from being re-fake-signed by make_fself_nodprm.

  5. #45
    Contributor cvp's Avatar
    Join Date
    May 2007
    Posts
    55
    CJPC, you know by chance if this is solved with the FW 1.50?

  6. #46
    Toucan Sam CJPC's Avatar
    Join Date
    Apr 2005
    Posts
    2,174
    Quote Originally Posted by pngo View Post
    Understood. I will give a try... removing 00 trailing fields and inserting new fields to match the proper path. however, I will probably have to insert new 00 fields anyway otherwise the resulting file might have a different size, which will prevent it from being re-fake-signed by make_fself_nodprm.
    Well no, it can be done ,for example say you have (where . 's are 00)

    . . . . . . . . /dev_bdvd/ps3_game/usrdir/eboot.bin A Z M Q
    And, you want: /dev_hdd0/game/BLES00000/USRDIR/eboot.bin
    Can then be:

    . . /dev_hdd0/game/BLES00000/USRDIR/eboot.bin A Z M Q

    See how the 00's were removed (or, overwritten?) Same thing applies if its close, if its not really close, you may run into problems.

  7. #47
    Registered User pngo's Avatar
    Join Date
    Aug 2010
    Posts
    6
    got it, I will fix the path starting from the last letter then going from right to left.

  8. #48
    Contributor cvp's Avatar
    Join Date
    May 2007
    Posts
    55
    you can make an example here? would be very nice!

    Code:
    74 65 6D 43 61 63 68 65 00 00 00 00 00 00 00 00 temCache........
    2F 64 65 76 5F 68 64 64 30 00 00 00 00 00 00 00 /dev_hdd0.......
    2F 64 65 76 5F 62 64 76 64 2F 50 53 33 5F 47 41 /dev_bdvd/PS3_GA
    4D 45 2F 55 53 52 44 49 52 2F 00 00 00 00 00 00 ME/USRDIR/......

  9. #49
    Toucan Sam CJPC's Avatar
    Join Date
    Apr 2005
    Posts
    2,174
    Quote Originally Posted by cvp View Post
    you can make an example here? would be very nice!

    Code:
    74 65 6D 43 61 63 68 65 00 00 00 00 00 00 00 00 temCache........
    2F 64 65 76 5F 68 64 64 30 00 00 00 00 00 00 00 /dev_hdd0.......
    2F 64 65 76 5F 62 64 76 64 2F 50 53 33 5F 47 41 /dev_bdvd/PS3_GA
    4D 45 2F 55 53 52 44 49 52 2F 00 00 00 00 00 00 ME/USRDIR/......
    Ok - that for example, since there is 00 padding to the right, you should be ok. - mind you, this hex is NOT right, but
    Code:
    74 65 6D 43 61 63 68 65 00 00 00 00 00 00 00 00 temCache........
    2F 64 65 76 5F 68 64 64 30 00 00 00 00 00 00 00 /dev_hdd0.......
    2F 64 65 76 5F 62 64 76 64 2F 50 53 33 5F 47 41 /dev_hdd0/game/BL
    4D 45 2F 55 53 52 44 49 52 2F 00 00 00 00 00 00 ES00001/USRDIR/..
    But , even easier if these things dont work ,there are 2 more you can try. One, serve the game from a pc, use "app_home/PS3_GAME/USRDIR" (a direct replacement for dev_bdvd - no length issues), or even use the BD emulator (no need to edit, at all!)

    Also a downgrade or 1.50 will not help this really - the simplest thing to do to ensure it works, is to use the BD EMU.

  10. #50
    Senior Member GotNoUsername's Avatar
    Join Date
    Feb 2007
    Posts
    319
    Is there a chance some one can do an auto Blu-ray to HDD game install Application , so we can paly games from HDD with no Blu-ray in Drive?

 

Sponsored Links
Page 5 of 6 FirstFirst ... 3456 LastLast
Affiliates - Contact Us - PS3 Downloads - Privacy Statement - Site Rules - Top - © 2014 PlayStation 3 News