atv offroad fury

[SimonBradley]

ATV Offraod Fury
--------------------------
[1] copy files to your hard drive and check for a volume label.
[2] size down the image. You can use one of the "male" or "female" PSS files to replace the larger files you will delete.
[3] We now set up the image in CD\DVD Generator matching, as always, the files as closely as possible to the original DVD. They should be identical in this case up to the point of the first movie you changed. When you're done, export your IML file but LEAVE CD\DVD GEN OPEN.
[4] Now it's time to edit the SLUS file(it's SCUS in this case). Open the file in Hex Workshop and do a search for our protection string. Many instances. The string you want to change is: A0AC 0200 0424. Though this doesn't seem very similar to the others at first, you'll notice that in our first example string we had: 040C 0200 0424. This is similarity #1. Next if we search the preceeding hex we see a 4010, also in the original string. And if we look further still we find an 0100 0424. replace the string in question and move along.
[5] this game IS dependent on LBAs. ATV contains what we will call, for lack of a better term, a "table." This table contains LBA information about each file on the DVD. The general format of this table is as follows: LBA Start Address,LBA End Address. Thus you'll have TWO entries to change for each file. Do a little experiment with me. Open Windows calculator and enter in the LBA address of the first file on the DVD. Now click the hex tab to see what the
hex value of this number is. Now, do a search for this number(040A). Chances are that you didn't find it. There's a reason for that. ATV is trying to be sneaky. They reverse the order of the hex in the table. Thus, if you had a value of 2C67 you would search for 672C.Using this information, try your search again with the hex reversed(0A04). You should now be at offset: 001CA6C8. This is the start of our table. Let's take a moment to disect...As we said the format of the table is: LBA Start address \ LBA end address. But we now see there's a little more to it than that. From the Start LBA to the End LBA there are 3 spaces. That is to say, this: 040A xxxx xxxx xxxx 040A. The in between hex is of no importance to us right now. Now the distance from the End LBA to the NEXT Start LBA is 15. That is, like so: 040A xxxx xxxx xxxx 0100 xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx xxxx NEXT. Again, the hex for the next LBA is reversed. Now go back to CD\DVD Gen and look at your LBAs. If you matched up the files as closely as possible to the original DVD, then you won't have too much to change in the table. For the sake of example, however, let's assume that you put the first file at LBA 12231. Using Windows Calculator we see the hex value for this is 2FC7. Remember that we must REVERSE this. So our replacement hex is C72F. We now go back to our table in Hex Workshop and replace 0A04 with C72F. Because our first file is SYSTEM.CNF, which only takes 1 LBA, our End LBA is the same. So, for the second value, replace 0A04 with C72F again. You will now go on to repeat this procedure for the remaining files. I will not go into exact LBAs for the remaining files because your LBAs might vary from person to person. But,
you know how the table works, and you know how to find the entries, and you know how to determine your replacement hex for Start and End, so you're good to go on your own from here on with the table. Once you have finished modifying the table, save your changes and exit Hex Workshop. You may now close CD\DVD Gen as well.
[6] Now that we've finished with the table and the DVD check we are FINALLY ready to build the ISo image. As we have done many times we enter: iml2iso atv.iml ATV.ISO. Once the ISo is done you can remove the files in the temp dir on your hard drive.
[7] Using CDRWin we burn our ISo
Taken from gokan edited for size