Jump to content
  • Announcements

    • GregoryRasputin

      Say Hello, Make An Introduction Thread :)   11/20/2015

      We love having new members join the forum, what we like more is them being productive people and contributing a little bit to the forum. So if you are a new member, let us know who you are by saying hi in an introduction thread, you can find the forum section here: https://playstationhax.xyz/forums/forum/15-member-introduction/
zecoxao

[Tutorial] Retail <-> Debug Game Transfusion

Recommended Posts

zecoxao    1,305

This tutorial would not be possible without the help of my friend Charles. Thank you Charles, for making this possible :)

You will need:

 

* A retail ps4 on 1.76 fw
* A testkit or devkit on 1.76 fw, pre-activated (i will not go through details about the activation)
* A game you wish to backup (disc or psn, as long as it's activated on psn)
* hitodama's ps4sdk
* DumpFile modified to decrypt the game's binaries (again, you're on your own)

* An ftp payload to dump the files from app0

* Knowledge about the previous tutorials i wrote, namely pfs bypass and decrypt games

* (Optional) The game's icons (you'll need the original pkg for this and flatz's awesome python script)

* A resigner for AAAA00000 trophies (keys are on wiki, again, i won't go into much detail on this, but i'll update the tutorial later with info)
* Target Manager and Target Manager Server (they're out there, just find them, once again, i will not help you on this)

 

Some notes:
I won't go into much detail on this tutorial. If you have a brain, use it.

Savegames and Trophies now work.
Filenames are case sensitive!


Steps:
- Install the game
- Navigate to:
 

system_data/priv/appmeta/

on your ftp server and find the title id of your game (CUSAXXXXX)
- Copy the folder to a safe place (you'll need it)
- Navigate to:

/user/trophy/conf

on your ftp server and find the np comms id of your game (hint, it's mentioned in the title id folder, inside npbind) (NPWRXXXXX)

- Copy the folder to a safe place (you'll need it)

- Resign the TRP inside NPWR folder to debug (i'll put a tutorial after this telling how to do it)
- name it trophy00.trp
- Transfer the entire content of app0 on pfsmnt to your desktop (you should have two folders, one called sce_sys, and another called trophy inside sce_sys)
- Copy trophy00.trp to sce_sys/trophy
- Copy the contents of the CUSAXXXXX folder to sce_sys
- Decrypt the prx,sprx,eboot.bin contents of your app0 game using dumpfile modified
- replace the existing ones in your copied app0 directory with the ones you just decrypted (using the same name)
- now, on your activated testkit and devkit, launch the game using the configuration of eboot.bin as loading elf and elf directory as working directory
- You should have your own backup running on testkit/devkit. Enjoy :)

Here's the example of minecraft backup structure to serve as guide(take a closer look at sce_sys folder):
http://pastebin.com/HNHLrwG5

 

Here are two videos as proof (Courtesy of Charles)

 

 

Edited by zecoxao
  • Upvote 4

Share this post


Link to post
Share on other sites

:tw_love:  another master piece 

Share this post


Link to post
Share on other sites
user1    1

 now, on your activated testkit and devkit, launch the game using the configuration of eboot.bin as loading elf and elf directory as working directory
- You should have your own backup running on testkit/devkit. Enjoy :)

 

ifeq ($(strip $(PS4DEV)),)
  ifeq ($(strip $(DEVKITPS4)),)
  export PS4DEV := /usr/local/workingdir
  else
  export PS4DEV := $(DEVKITPS4)
  endif
 

endif

 

 

TARGET ?= $(notdir $(CURDIR))
  BUILDDIR ?= $(CURDIR)/build

 

 

 

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×