PS3UserCheat 遊戲金手指 - 改機

http://ps3crunch.com/ps3usercheat-introduces-code-manager-game-cheats-ps3.html

Just what the scene needs. A new revolutionary dongle to jailbreak
your PS3 console from a well known PS3Break team. You can never go
wrong with onboard SLC NANDFLASH Memory of 128MB, high speed 32 bit
CPU processor clocked at 500MHz, a microSDHC slot which supports up
to 32GB memory size and one creepy looking man wearing a mask. Oh
wait, we can already jailbreak the PS3 for free and without
connecting any device!

Ok, enough with the crappy talk. I just want to highlight the Code
Manager that they come up with. From what i have seen, it is really
an intuitive application, yes there is already a way to do it
manually but this one right here is easy to use and they have many
game cheats to choose from.

Unfortunately, they didn't list the download package on their site,
maybe the CHT dongle comes pre-installed with the application as it
is the only exclusive feature they can think of to lure people buying
it. Now, it would be great if someone can leak it so that i can have
fun with my hostesses in Yakuza 4.

******

簡單說，就是PSJB團隊又重出江湖了，這次推出的產品：金手指管理員，一樣具
有高度話題性，不知道又會吸引多少買氣。

事實上這種東西老早就可以靠Lv2 Peek & Poke 達成，只要知道要修改的位址就
行，之前Mathieulh 公開的BDEMU 相容性修正就是最好的範例，透過備份管理員
在載入遊戲之前先對記憶體進行修改，讓模擬讀取光碟的指令可以正確動作。

總之這東西上市之後過不了多久各大備份管理員應該就會跟進了。

******

韌體需求：3.41，重點來了，官方說金手指管理員會檢查是否有插上CHT Dongle
，沒有就不給跑。

執行的方法是先用備份管理員選擇要啟動的遊戲，然後退回 XMB，原本應該要直
接出現遊戲光碟的/home_app/ps3_game選項卻是出現Code Manager，進入Code
Manager 後點選要啟動的金手指（當然要跟剛剛從備份管理員載入的相同），然
後按下[START] 鍵回到 XMB，隨便丟一片正版光碟進行引導，啟動遊戲。

因此可以猜出一些諸元：

1.使用的酬載(payload) 不是Hermes也不是PL3 ，故備份管理員不支援免光碟執
行，必須使用正版光碟引導

2.PSJB把自己的程式掛載在/home_app/ps3_game底下

******

反正現在都有 IDA，PSJB的程式一到手大概馬上就被反向編譯解析，應該很快就
有開放原始碼的程式會出來。

--

○ ____ _ _ _ _ ____ _ _ ____ _____ ____
。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \
ｏ _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧
(____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★
ｏ

--