so select what cheats you want to add then go ahead and press apply. So phreaking would be complete at that point. the server should respond with cheats for that game. If we could put a breakpoint directly after the Powersaves Pro cardreader has read the header of the ROM, and inject our own 0x200 byte header from the game we want. Write the save to the cartridge by any means, (Gateway, NDS Adapter Pro, MM3, whatever you have) to get their server to sign our own saves.įind a cartridge which EEPROM is large enough for the save we want to edit. then packages it back up and sends it to us and is flashed into the cartridge. unless they have worked out how the hardware performs this operation. Now in this second case, they will have to unpack it, decrypt it, make the change, rehash it, re- AES-MAC it (which would have to come from a real console. Once authenticated it requests the savefile if you have asked for the save or extracts the save from your cartridge, compresses it ans sends it over to their server. Communication then authenticates software using your email_address and license_key from the file C:\Users\USERNAME\Powersaves3DS\Powersaves3DS.xml. This is then packaged up and the name of the CTR cartridge is then encrypted and sent to. I have it and been looking through what it does and how it does it.įrom what i can see, it extracts the first 0x200 bytes of the ROM header as thats all a save cartridge reader is able to get a hold of. Yeah, we have ASDA which was bought by Wallmart. I'd like to Map out as much of the save file as possible, is there anyone that wants to join in? I'm new to this forum and don't want to step on any toes. at offset 0x139F8 size is 0x408 (1032) bytesĬhances are that there's a couple of CRCs in there too for the encrypted data. at offset 0xBB50 size is 0x9B8 (2488) bytesĢ. There appears to be 2 blocks of encrypted data:ġ. There is a xorpad applied through the file, appears to be 0x2A30 bytes and it changes every time you save, so this will be interesting.
The system data is unreadable and i don't know where to start, but putting that aside as it may not be needed for modifying the save.
If i extract the save there are 2 files within, "system" and "user1". I'll put the information i have here and people can just jump in where they can. I'm using savedatafiler to extract the save from the system, and that is how i will inject it back in. I know that Datel's Powersaves Pro claim that they can do that already, but i don't want to have to buy one and think it would be better to make my own. I'm trying to make an editor for MH4U or at least the game save as that's really the only viable option at the moment.
0 kommentar(er)
