作者cassine (Savannah)
看板Modchip
标题Re: [PS3 ] 二代电子狗
时间Tue Oct 25 23:35:25 2011
: In summary it seems that JB2 is nothing special at all. What they
: seem to be doing is using something called a DEBUG EBOOT which is
: burned onto a disc, and is playable on the PS3. So all we technically
: need is the debug eboot's for each game which can be acquired via
: dev network (and people can get this via debug PS3's). So until
: Sony takes a stand against these debug eboots, the scene may have
: found their access to newer games.
: 大致上看来,这东西的原理并不令人惊讶。它只是单纯让主机执行 Debug版的主
: 程式而已,把从开发者网路下载下来的 Debug版主程式盖过原版光碟里头的主程
: 式,再把光碟内容烧进烧录片里头就结束了。因此,技术上我们需要想执行游戏
: 的 Debug版主程式(有些人有管道可以拿到),所以,除非SONY对这些 Debug版
: 的主程式进行反制,不然社群这边一路都能够玩到最新的作品。
所以取得 Debug版的 EBOOT.BIN游戏主程式是很关键的一步,如何取得呢?以下
是取得管道的说明:
Obtain PS3 Debug EBOOT file from Sony's Developer Network via Debug
console by one of the following methods:
可利用 Debug版主机,以下方式取得SONY开发者网路里的东西:
Boot up your PS3 to the XMB, make sure in debug settings that NP
environment is set to "sp-int" or "prod-qa", sign into PSN (with sp-int
or prod-qa credentials, you can use the quick sign-up), and launch the
game. If your in luck, it will say an update is available – download it!
To get the URL you have a few options. You could either sniff out the
connection with something like Wireshark – that takes a bit more setup.
Other times the URL is actually passed right to dtccons – so make sure
you have the debugging windows open. Or, you could use any number of the
PS3 Proxy applications to grab the link.
开机,然後到 Debug设定里头将NP environment变数值设为sp-int或prod-qa ,
然後登入 PSN网路,然後在连线的状态下执行游戏,运气好的话,会遇到「游戏
已有更新」的讯息,把更新档抓下来。在抓档的时候,利用一些封包监听的技巧
取得更新档的 URL位址。
Those who know their PS3 Game's Title ID and are seeking PS3 Game Update
Packages can now use this simple guide to grab them while they last.
知道游戏 GID的人可以利用这个方法抓档案,直到档案被移除为止。
Patch Retail PS3 Firmware to run a Debug EBOOT file
接着就是把零售版主机的韧体打上补钉,赋予其执行 Debug版主程式的能力
Dump and burn the PS3 3.60+ games to BD-DVD with the included Debug
EBOOT file
自正版游戏光碟将整个游戏内容备份至烧录片上,别忘了要把主程式换成 Debug
版的主程式
Add the DRM to the PS3 MFW/CFW that JB2 uses and validate it via the
dongle
将韧体打上补钉,开通将解密与验证路径导向电子狗的路径
The above process will likely continue to work until Sony locks down the
PS3 Debug EBOOT files.
利用以上的技巧可以享受游戏的乐趣,直到SONY对於 Debug版的 EBOOT档案做出
控管为止。
******
其实SONY的韧体一直有能力执行未加密的 Debug版主程式(至少3.41版可以),
而不需要修改韧体,所以除了利用二代电子狗将主程式解密之外,只要知道金钥
,也能自己透过电脑将正版光碟里的 EBOOT.BIN解密,然後打上Debug 版注记来
执行。
--
○ ____ _ _ _ _ ____ _ _ ____ _____ ____
。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \
o _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧
(____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★
o
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 122.117.54.160