http://ppt.cc/HIa0 Finally after only just over a month of waiting those owning still a v3.41 Jailbroken PS3 console, can finally fully enjoy both worlds of playing their own "homebrew" and still being able to enjoy the latest and hottest of the recently released PS3 Games that were originally complied by Sony only to work on later non-Jailbreakable v3.50 PS3 consoles. 经过将近一个月的等待，仍然没把主机升级到3.50版韧体的玩家终於等到这一天 的来临，终於有了兼顾执行自制程式，与享受$QNY用最新SDK350编译完成游戏的 方案。 TUTORIAL 教学 On how to modify Eboot.bin yourself to try to make it works! 如何自行修改Eboot.bin让游戏能在3.41版韧体上执行 Originally Posted by Veritas I've actually written this a few times and promptly lost it due to browser instability. Oops. Anyway, this guide requires you to have some knowledge of how the SELF and ELF file formats are laid out. I don't have a quick tool to do this for me, but it takes maybe 5 minutes of my time to do it by hand. 本篇教学需要读者具备一些SELF与 ELF档案格式知识作为基础。暂时没有傻 瓜工具，但亲自修改大概每次也只需要花我五分钟。 1. Open EBOOT.BIN in a hex editor of your preference. 将EBOOT.BIN档案下载到电脑，用二进位编辑器打开。 2. In EBOOT.BIN, look at the SELF control info, if you see anything resembling the game titleid, it's an NPDRM SELF and this guide won't work, give up. 先移动到SELF监控资讯的部份，如果有看到游戏ID相关的字串，那代表这 个游戏有数位签证的问题，本教学不适用，请左转出去。 3. Use readself on EBOOT.BIN to get information about the encrypted metadata sections. 使用readself读取EBOOT.BIN，取出加密相关的资讯。 4. unself EBOOT.BIN eboot.elf 使用unself将EBOOT.BIN还原成eboot.elf。 5. Open eboot.elf in a hex editor of your preference. 再将eboot.elf用二进位编辑器打开。 6. In eboot.elf, go to every encrypted metadata section (now decrypted), copy its data, and replace the encrypted data in EBOOT.BIN. 移动到加密的metadata区段（现在已经解密了），将内容复制出来，换掉 EBOOT.BIN同样的区段。 7. In EBOOT.BIN, change SELF header to indicate it's FSELF. 修改EBOOT.BIN，将SELF的标头修改成FSELF 的标头。 8. In EBOOT.BIN, change SELF section headers that are marked as encrypted to say they are not encrypted. 修改EBOOT.BIN，将SELF的标头里面标记为加密的部份修改成不加密。 9. If the game is a newer SDK version (like GT5, which is 3.50), in EBOOT.BIN, find the .sys_proc_param segment and change the SDK version to something earlier, such as 3.41. This will probably cause crashes in games that actually use newer SDK features that are not available in earlier SDK versions. 寻找 .sys_proc_param区段，将 SDK相关的资讯由3.50改成3.41，注意： 如果游戏有使用到SDK350才有的新函式的话，可能会造成当机。 10. Save EBOOT.BIN 储存EBOOT.BIN 11. Cross fingers, run game, hope it works. 是看看有没有办法执行。 ****** 非常需要技术与知识的一篇教学，我也是有看没有懂。 根据回报，目前GT5 美版(BCUS98114) 跟TOGF日版(BLJS10093) 都可以正常执行 。不急的人可以等3.50被解析完成後用更新韧体的方式执行游戏，而且我认为这 才是正确的解决方案，这个教学的方式虽然是取巧，但还是很厉害。 x3Max 可以收一收了，到现在还在忙着把自己的产品加上防护，谁还理他们啊？ ****** TOGF我测试的结果是不需要用正版光碟引导，主程式换掉後就可以直接使用免光 碟模式执行。测试平台CECH-2007 [email protected] + PSGrooPIC v2.04 DEV + Gaia Manager 1.04.1 -- ○ ____ _ _ _ _ ____ _ _ ____ _____ ____ 。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \ ｏ _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧ (____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★ ｏ --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 59.126.61.141 ※ 编辑: cassine 来自: 59.126.61.141 (01/04 09:25)