Jump to content

>
Viewing Profile

chillyp

Member Since 09 Mar 2006
Offline Last Active Jun 06 2009 04:50 PM

Posts I've Made

In Topic: New ROM Anti-Piracy Software

14 May 2009 - 06:38 AM

QUOTE(TheDarkSeed @ May 14 2009, 02:03 PM) <{POST_SNAPBACK}>
I'd feel bad about pirating DS games if they were good, but they're not, with the exeption of a few titles(VERY FEW).


Why would you pirate bad games then, personally, I'd rather not play bad games. Furthermore, do you happen to buy the good games that come out? If you're like most people I'd say no. Look at GTA: Chinatown Wars, that game got pirated to HELL and bombed in retail markets. This is exactly why developers are pushing for anti-piracy options on the DS, because its too convenient to download, drag it on to a micro SD card and play for free. Its pretty ironic that the people complaining about how they'll have to wait for patches are the reason why games are getting protected in the first place.

I noticed someone in this thread going on about how games are going to be signed with keys or something equally ridiculous. Nintendo doesn't allow individual signing of carts because they MASS produce them and it would be a waste of time and you are completely wrong. Instead - as the original post mentioned - it will be looking for patched segments of code.

DS games running on a flash cart need to be modified. Take for example saving. On a legitimate retail cart, there is a dedicated chip located on the cart which saves usually around 256kb of data. The Nitro SDK, which is used to develop DS games, comes with a chunk of code that allows a developer to read and write data to this chip. The majority of flash cards for DS lack this chip, for a good reason. In the GBA days, most games used around 64kb of Save memory, so many flash cards used a similar sized chip, until one day Nintendo started releasing games that used 256k, making games incompatible with a number of existing cards. To work around this lack of a save chip, the loader software searches a ROM for any function calls to Save or Load data, and redirects it to custom built function which reads and writes to a FAT filesystem. There are numerous other patches that need to be done to allow a game to work as a file loaded from a disk instead of a ROM chip.

I suspect this is where this particular protection is going to strike. I'll show some pseudo code:

CODE
checksum = CalculateChecksum(SaveDataA)

if (checksum != correctChecksum)
   enter_infinite_loop


A solution like this is easily crackable, and once it is you could find the hex location for its code, create a signature and after a flash cart firmware update it could be automatically patched away. The developer of this protection is likely going to customize the code to do different things in each game. Say the above code was included in Pokemon Gold, the following could be included in Pokemon Silver:

CODE
checksum = CalculateChecksum(LoadDataA)

if (checksum != correctChecksum)
   jump_to_random_address


It's just as crackable, but its significantly different enough that you couldn't get a signature for it and remove it. The beauty of this system is you could include multiple variants throughout the game, say the first one when you start the game, and the second one when you reach the first boss. Many scene crackers don't actually play the games very long as they are trying to release as fast as possible, and this sort of attack has been used successfully in a Playstation Spyro game which resulted in a fully working patch coming out 3 MONTHS after its initial release. Keep in mind that the majority of game sales are made in the first weeks - first month of being on shelves. Even a few days will frustrate casual pirates to go and buy the game if they want it badly enough.

Of course this protection will be crackable, the developer is absolutely correct, its just designed to piss off casual people enough that they will buy the game instead because its easier.

In Topic: New Japanese Wii Motherboard Blocks Modchips

25 May 2007 - 06:25 AM

QUOTE(FAST6191 @ May 25 2007, 01:15 PM)
Interesting development, wonder if it is just pins moved or whether you will have to etch down and solder on chip (which is about as fun as it sounds).


Looks like the pins have been sliced off the IC completely, judging by the soldering they probably did it just after programming it with initial firmware. Wouldn't this potentially make it harder to service bricked Wiis? I suppose Nintendo has weighed that up against the cost of losing software sales.

In Topic: New Japanese Wii Motherboard Blocks Modchips

25 May 2007 - 06:14 AM

I saw this coming when the first modchips were released. It wasn't going to take long for Nintendo to stop people from using the service pins from manufacturing to mod their Wiis. I was surprised that they haven't attempted to release firmware which detects them.

In Topic: Chishm hints at keeping DS ROM Dumping Method Secr

05 March 2007 - 02:39 PM

I hope this doesn't make people think less of chishm. The amount of work he puts into homebrew is incredible, along with Darkfader and others.

I'm glad he has chosen to stick to his principles and is not releasing the code to his dumper.

In Topic: GBA #2691 - Super Mario Advance 4 (Japan)

05 February 2007 - 03:48 PM

They might have ditched the E-Card Reader support. Haven't checked it out yet.