Hacking GATEWAY PUBLIC RELEASE 2.6

  • Thread starter Thread starter AmeenX
  • Start date Start date
  • Views Views 136,758
  • Replies Replies 712
  • Likes Likes 13
So the save editor will only work for card 2 cards? Or nand based saving games?
 
I'm not sure what you mean. I just crafted 1 item and gained 4 exp, the game then realized I had 59395 extra exp and just leveled me up until I needed more then what I had. Which for me was lvl 37.


Well, everytime you level you receive 2 points to distribute among your "skills" or something. So I made a biiiiiig number and lvled directly to 99 and I ended up receiving 136 points. So yeah, "cheating" like this with the lvl, also gives you those kind of points.

Nice, now I can lvl to 40 to help me end the main story quicker and buy the DLC :)

Thx for the finding.

EDIT:
Btw, I'll dig for the Dosh offset as well :)
 
  • Like
Reactions: supermalloch
Well, everytime you level you receive 2 points to distribute among your "skills" or something. So I made a biiiiiig number and lvled directly to 99 and I ended up receiving 136 points. So yeah, "cheating" like this with the lvl, also gives you those kind of points.

Nice, now I can lvl to 40 to help me end the main story quicker and buy the DLC :)

Thx for the finding.

EDIT:
Btw, I'll dig for the Dosh offset as well :)

If you want to have more points to distribute to stats 1FCC0 00 is where the number of points are. I changed mine to FF to get 255.
 
Thought I'd ask because I'm still not sure, has anybody tried or managed to get a normal NSMB2.3ds rom in the multirom menu to recognise the DLC.cia from the SD card? I don't like having the game on my homescreen, can't seem to manage it though.
 
Well, everytime you level you receive 2 points to distribute among your "skills" or something. So I made a biiiiiig number and lvled directly to 99 and I ended up receiving 136 points. So yeah, "cheating" like this with the lvl, also gives you those kind of points.

Nice, now I can lvl to 40 to help me end the main story quicker and buy the DLC :)

Thx for the finding.

EDIT:
Btw, I'll dig for the Dosh offset as well :)
The offset is the same just 2 columns to the left. Around 04~06.
MrFahrenheit39

It was a .rom i mounted bcuz the game saves inside.
Code:
BasicInfo:
  Title                  : "SaveData"
  CompanyCode            : "00"
  ProductCode            : "SaveDataFi"
  ContentType            : Application # Application / SystemUpdate / Manual / Child / Trial
  Logo                    : Nintendo # Nintendo / Licensed / Distributed / iQue / iQueForSystem
 
TitleInfo:
  UniqueId                : 0xff40a
  Category                : Application # Application / SystemApplication / Applet / Firmware / Base / DlpChild / Demo / Contents / SystemContents / SharedContents / AddOnContents / Patch / AutoUpdateContents
 
CardInfo:
  MediaType              : Card1 # Card1 / Card2
 
Option:
  UseOnSD                : true # true if App is to be installed to SD
  EnableCompress          : true # Compresses exefs code
  FreeProductCode        : true # Removes limitations on ProductCode
  EnableCrypt            : false # Enables encryption for NCCH and CIA
  MediaFootPadding        : false # If true CCI files are created with padding
 
ExeFs: # these are the program segments from the ELF, check your elf for the appropriate segment names
  ReadOnly:
  - .rodata
  - RO
  ReadWrite:
  - .data
  - RO
  Text:
  - .init
  - .text
  - STUP_ENTRY
 
PlainRegion: # only used with SDK ELFs
- .module_id
 
AccessControlInfo:
  UseOtherVariationSaveData : false
  ExtSaveDataId: 0xff40a
  SystemSaveDataId1: 0x00000000
  SystemSaveDataId2: 0x00000000
  OtherUserSaveDataId1: 0x00000
  OtherUserSaveDataId2: 0x00000
  OtherUserSaveDataId3: 0x00000
  FileSystemAccess:
  - CategorySystemApplication
  - CategoryFileSystemTool
  - Debug
  #- TwlCardBackup
  #- TwlNandData
  #- Boss
  - DirectSdmc
  - SaveDataMove
 
  IdealProcessor                : 0
  AffinityMask                  : 1
  Priority                      : 16
 
  MaxCpu                        : 0x9E # Default
 
  DisableDebug                  : true
  EnableForceDebug              : false
  CanWriteSharedPage            : false
  CanUsePrivilegedPriority      : false
  CanUseNonAlphabetAndNumber    : false
  PermitMainFunctionArgument    : false
  CanShareDeviceMemory          : false
  RunnableOnSleep              : false
  SpecialMemoryArrange          : false
 
  CoreVersion                  : 2
  DescVersion                  : 2
 
  ReleaseKernelMajor            : "02"
  ReleaseKernelMinor            : "33"
  MemoryType                    : Application # Application / System / Base
  HandleTableSize: 512
  IORegisterMapping:
  - 1ff50000-1ff57fff
  - 1ff70000-1ff77fff
  MemoryMapping:
  - 1f000000-1f5fffff:r
  SystemCallAccess:
    ArbitrateAddress: 34
    Break: 60
    CancelTimer: 28
    ClearEvent: 25
    ClearTimer: 29
    CloseHandle: 35
    ConnectToPort: 45
    ControlMemory: 1
    CreateAddressArbiter: 33
    CreateEvent: 23
    CreateMemoryBlock: 30
    CreateMutex: 19
    CreateSemaphore: 21
    CreateThread: 8
    CreateTimer: 26
    DuplicateHandle: 39
    ExitProcess: 3
    ExitThread: 9
    GetCurrentProcessorNumber: 17
    GetHandleInfo: 41
    GetProcessId: 53
    GetProcessIdOfThread: 54
    GetProcessIdealProcessor: 6
    GetProcessInfo: 43
    GetResourceLimit: 56
    GetResourceLimitCurrentValues: 58
    GetResourceLimitLimitValues: 57
    GetSystemInfo: 42
    GetSystemTick: 40
    GetThreadContext: 59
    GetThreadId: 55
    GetThreadIdealProcessor: 15
    GetThreadInfo: 44
    GetThreadPriority: 11
    MapMemoryBlock: 31
    OutputDebugString: 61
    QueryMemory: 2
    ReleaseMutex: 20
    ReleaseSemaphore: 22
    SendSyncRequest1: 46
    SendSyncRequest2: 47
    SendSyncRequest3: 48
    SendSyncRequest4: 49
    SendSyncRequest: 50
    SetThreadPriority: 12
    SetTimer: 27
    SignalEvent: 24
    SleepThread: 10
    UnmapMemoryBlock: 32
    WaitSynchronization1: 36
    WaitSynchronizationN: 37
  InterruptNumbers:
  ServiceAccessControl:
  - APT:U
  - $hioFIO
  - $hostio0
  - $hostio1
  - ac:u
  - boss:U
  - cam:u
  - cecd:u
  - cfg:u
  - dlp:FKCL
  - dlp:SRVR
  - dsp::DSP
  - frd:u
  - fs:USER
  - gsp::Gpu
  - hid:USER
  - http:C
  - mic:u
  - ndm:u
  - news:u
  - nwm::UDS
  - ptm:u
  - pxi:dev
  - soc:U
  - ssl:C
  - y2r:u
  - ldr:ro
  - am:app
  - am:u
  - pm:app
  - ns:s
 
SystemControlInfo:
  SaveDataSize: 512KB
  RemasterVersion: 5
  StackSize: 0x40000
  #JumpId: 0
  Dependency:
    ac: 0x0004013000002402L
    am: 0x0004013000001502L
    boss: 0x0004013000003402L
    camera: 0x0004013000001602L
    cecd: 0x0004013000002602L
    cfg: 0x0004013000001702L
    codec: 0x0004013000001802L
    csnd: 0x0004013000002702L
    dlp: 0x0004013000002802L
    dsp: 0x0004013000001a02L
    friends: 0x0004013000003202L
    gpio: 0x0004013000001b02L
    gsp: 0x0004013000001c02L
    hid: 0x0004013000001d02L
    http: 0x0004013000002902L
    i2c: 0x0004013000001e02L
    ir: 0x0004013000003302L
    mcu: 0x0004013000001f02L
    mic: 0x0004013000002002L
    ndm: 0x0004013000002b02L
    news: 0x0004013000003502L
    nim: 0x0004013000002c02L
    nwm: 0x0004013000002d02L
    pdn: 0x0004013000002102L
    ps: 0x0004013000003102L
    ptm: 0x0004013000002202L
    ro: 0x0004013000003702L
    socket: 0x0004013000002e02L
    spi: 0x0004013000002302L
    ssl: 0x0004013000002f02L
ctrtool --exheader=exheader.bin --exefs=exefs.bin --logo=logo.bin SaveDataFiler.3ds
ctrtool -t exefs --exefsdir=exefs exefs.bin --decompresscode
ctrtool -t exheader exheader.bin > exheader.txt

Makerom 0.13

makerom -f cia -rsf SaveDataFiler.rsf -target t -o SaveDataFiler.cia -icon icon.bin -banner banner.bin -exefslogo -code code.bin -exheader exheader.bin
This is spitting out an error on the last step. Unable to build ExHeader failed to build outfile.
Related PIC

EDIT: Thank you Huntereb for "Add "UseExtSaveData" and set it's value to "true"" It now compiles correctly.
 
  • Like
Reactions: Huntereb
If you want to have more points to distribute to stats 1FCC0 00 is where the number of points are. I changed mine to FF to get 255.
The offset is the same just 2 columns to the left. Around 04~06.

This is spitting out an error on the last step. Unable to build ExHeader failed to build outfile.
....

Sweet! Thx! I'll try it out!
 
And yes, this does work with PKHex! Pardon my language, but holy shit mah niggas!

aI8Dlo4.png
 
And yes, this does work with PKHex! Pardon my language, but holy shit mah niggas!
aI8Dlo4.png
Confirmed that using the SaveDataFiler install and Pokemon X via gateway you can dump your save, edit with PKHex, export as a Cyber save, and place it back on your 3ds.
2kAQiZ7.jpg

Christmas is coming early! Hellz yeah
 
is the GW save backup thingy for cart1 only? I get a FFFFFFB error or some such shit


If you're trying to backup saves from Pokémon, it's contained within the cartridge/ROM itself, so you'll have to dump the entire 2GB ROM.
 

Site & Scene News

Popular threads in this forum