| Author | Message | ||
     ryan j Username: rjpullie Registered: N/A |
Hi guys, im quite new to Hex editing and am looking for help to decrypt my console hard drive by inserting a dummy data file onto the HD image then finding it, then using the partlog to extract data replacing dummy file?? The .bin file i have is 2.6gb so scrolling through all that looking for repeat pattern would be a nightmare as its 500000+records?? Is there a function in winhex or any other you can advise to find repeat patterns/blocks etc or has anyone got a quicker method ?? i would really appreciate any advice instructions im following are below Unplug the HDD and create a merged image (FIND & MERGE section of this tutorial) naming it: MasterImage_To_Encrypt_xxx.bin - Create a dummy file. Leave the default size as it is (2147483648). Browse to your flash drive and click 'Create Dummy File'. - Copy the dummy file from the flash drive to the PS3 HDD (in Music section) and create a merged image (FIND & MERGE section) naming it: MasterImage+Dummy_To_Decrypt_xxx.bin - Open your MasterImage+Dummy_To_Decrypt_xxx.bin file in WinHex and seek for a dummy sector; it's easy to understand where the dummy starts, all of the dummy sectors are equal in size (1 sector is 512 bytes). You just have to seek the entire HDD scrolling it down until you see a repetitive pattern different from the initial one - Note: Set Winhex this way: VIEW > RECORD PRESENTATION: put the 'v' in all 3 checkmarks, then fill these values: First Record at offset: 0 Record size in bytes: 512 - Remember to select a good background color in WinHex options (Options > General) or you won't notice where a sector starts! This way each sector will be displayed in an alternate color, making it easier to see different sectors. - Create a dummy data partlog using FIND & MERGE, chosing option "Find all HDD sectors starting with these 16 bytes". You'll obtain a partlog of the dummy data, keep it, you will need it frequently. |