Hacking World of Final Fantasy Hacking Thread (discussion)

Gootah

Well-Known Member
OP
Member
Joined
Aug 11, 2013
Messages
257
Trophies
0
Age
37
XP
506
Country
United States
Hey guys,

I've been racking my brain on hacking this game.

SaveData has a CRC and memory editors don't boot with it.

I've been trying every thing I can think of, but nothing works.

Looking for some more creative/capable minds.

Let me know what you guys have been experimenting with.

Thanks.
 

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
1. There is only a part protected from the file because everything after 4577F (284544 Bytes) is filled with FE
2. Cutting off the dummy part, save still works loading
3. There are always 15 differences after saving, there might be more than one crc inside.
  1. Offset 0 > 4 Bytes
  2. Offset 14 > 1 or 2 Bytes
  3. Offset 16 > 1 or 2 Bytes
  4. Offset 18 > 1 or 2 Bytes
  5. Offset 1A > 1 or 2 Bytes
  6. Offset 1C > 2 Bytes
  7. Offset 35 > 2 Bytes
  8. Offset 570 > 4 Bytes
  9. Offset 34A24 > 3 Bytes
  10. Offset 3B2B0 > 4 Bytes
  11. Offset 3B448 > 3 Bytes
  12. Offset 3B44C > 2 Bytes
  13. Offset 3B450 > 3 Bytes
  14. Offset 3B458 > 4 Bytes
  15. Offset 3B460 > 3 Bytes
There might be a falsepositive bcuz i guess i catched playtime too.
 

Gootah

Well-Known Member
OP
Member
Joined
Aug 11, 2013
Messages
257
Trophies
0
Age
37
XP
506
Country
United States
2. Cutting off the dummy part, save still works loading

Wow, nice find. What do you mean by the above?

I can make edits then delete a certain portion of the save and it will still load?

Edit: Or do you mean that if you delete the protected part without editing it will still load? So that part is not included in any CRC?
 
Last edited by Gootah,

gvargas

Well-Known Member
Newcomer
Joined
Jan 24, 2016
Messages
96
Trophies
0
Age
49
XP
130
Country
Mexico
1. There is only a part protected from the file because everything after 4577F (284544 Bytes) is filled with FE
2. Cutting off the dummy part, save still works loading
3. There are always 15 differences after saving, there might be more than one crc inside.
  1. Offset 0 > 4 Bytes
  2. Offset 14 > 1 or 2 Bytes
  3. Offset 16 > 1 or 2 Bytes
  4. Offset 18 > 1 or 2 Bytes
  5. Offset 1A > 1 or 2 Bytes
  6. Offset 1C > 2 Bytes
  7. Offset 35 > 2 Bytes
  8. Offset 570 > 4 Bytes
  9. Offset 34A24 > 3 Bytes
  10. Offset 3B2B0 > 4 Bytes
  11. Offset 3B448 > 3 Bytes
  12. Offset 3B44C > 2 Bytes
  13. Offset 3B450 > 3 Bytes
  14. Offset 3B458 > 4 Bytes
  15. Offset 3B460 > 3 Bytes
There might be a falsepositive bcuz i guess i catched playtime too.

You right, there's a checksum right before the text name of each section, hopefully the checksum fixer they release will fix them all... :unsure:
 

gvargas

Well-Known Member
Newcomer
Joined
Jan 24, 2016
Messages
96
Trophies
0
Age
49
XP
130
Country
Mexico
Has anyone tried to fix the checksum using the Generate Checksum Tool in Hex Workshop? I found this on internet:

Recalculating Checksums (Hex Workshop Tutorial)
1. Select the whole file except the first 4 bytes.
2. Go to Tools > Generate Checksum > Selection & CRC32 > OK.
3. The checksum will appear at the bottom-right.
4. Select the first 4 bytes and type in the checksum as you see it on the bottom-right. Copy-pasting could paste the values in the opposite order, so just type them in.
5. Save, and you should be done.
 
Last edited by gvargas,

Gootah

Well-Known Member
OP
Member
Joined
Aug 11, 2013
Messages
257
Trophies
0
Age
37
XP
506
Country
United States
Has anyone tried to fix the checksum using the Generate Checksum Tool in Hex Workshop? I found this on internet:

Recalculating Checksums (Hex Workshop Tutorial)
1. Select the whole file except the first 4 bytes.
2. Go to Tools > Generate Checksum > Selection & CRC32 > OK.
3. The checksum will appear at the bottom-right.
4. Select the first 4 bytes and type in the checksum as you see it on the bottom-right. Copy-pasting could paste the values in the opposite order, so just type them in.
5. Save, and you should be done.

This looks like it can create a checksum, but there's not guarantee that it will be the same algorithm as the on square is using.

Unless we've confirmed CRC32 and there is only one formula for it.

I'm not that deep on checksum.
 

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
No it's not a simple CRC32 unless it protects unknown areas and
differs from complete file except the first 4 bytes + dummy part.
 

gvargas

Well-Known Member
Newcomer
Joined
Jan 24, 2016
Messages
96
Trophies
0
Age
49
XP
130
Country
Mexico
GUYS I FOUND A WAY TO TRICK THE CHECKSUM!!! You already know each section has it's own checksum right? well what I did was copy all my items section offsets including the checksum of course, sell everything, save in a different slot, hex edit the save and paste the previously copied offsets over the new ones overwriting all the empty slots including the new checksum of course! Here is an example of my current items offsets:

2d63ba27d0.jpg


You can try and copy EXACTLY the offsets in the image, it should give you the following:

38 Potion
12 Phoenix Down
7 Antidote
10 Eye Drops
4 Mega Phoenix
8 Hi-Potion
19 Ether
14 Wobblestopper
1 Phoenix Pinion
3 Remember Herbs
8 Gold Hourglass
3 Fish Scale
2 Remedy
2 Fire Spellstone
1 Elixir
1 Smelling Salts

Total Cost: 42,650

If it works then that means the checksums are really independent of other sections regardless of the save file owner, if it doesn't then you'll have to work with your own items but at least is a start to solve the money problem, right now I'm the happy owner of 140,596 Gils and I only did the operation twice so it really works! :lol:

EDIT: Tomorrow I'm going to try to do the opposite and spend all the money and see if I can get it back... :)
 
Last edited by gvargas,
  • Like
Reactions: wurstpistole

wurstpistole

GBAtemp MVP
Member
Joined
Nov 19, 2015
Messages
4,654
Trophies
1
XP
5,415
Country
United Kingdom

Really nice idea! Would be a way to at least cheat some money.
I did not figure out though, how do I save to a different slot? It only loads and saves in the same slot for me.
 

liomajor

Well-Known Member
Member
Joined
Jun 10, 2008
Messages
1,468
Trophies
0
XP
1,373
Country
United States
GUYS I FOUND A WAY TO TRICK THE CHECKSUM!!!...
If it works then that means the checksums are really independent of other sections regardless of the save file owner...

No thats not going to work, sections might have their own crc, BUT changing one section will break the main crc > corrupt save data.

At least you can export / import save files decrypted from US > EUR and vise versa (tested it).
 
Last edited by liomajor,

wurstpistole

GBAtemp MVP
Member
Joined
Nov 19, 2015
Messages
4,654
Trophies
1
XP
5,415
Country
United Kingdom
No thats not going to work, sections might have their own crc, BUT changing one section will break the main crc > corrupt save data.

At least you can export / import save files decrypted from US > EUR and vise versa (tested it).

But it worked for him, didn't it?

Nice that you can confirm that region swapping is possible, thinking about switching to EUR version too... Not sure yet, don't really need German texts, played 5hrs on English now. Maybe it just confuses me if I switch to German now
 

gvargas

Well-Known Member
Newcomer
Joined
Jan 24, 2016
Messages
96
Trophies
0
Age
49
XP
130
Country
Mexico
No thats not going to work, sections might have their own crc, BUT changing one section will break the main crc > corrupt save data.

At least you can export / import save files decrypted from US > EUR and vise versa (tested it).

What part you say is not going to work? using my offsets in another save file? If that's the case then each of you should copy YOUR OWN offsets BEFORE selling everything because believe me it works! (tested it). The ITEMS offsets start right at 0x37580 as seen in the picture so you should copy from there to right where the FF FF FF FF starts.

Really nice idea! Would be a way to at least cheat some money.
I did not figure out though, how do I save to a different slot? It only loads and saves in the same slot for me.

You need to use Vita Save Manager or whatever method you want to dump save files:

1. Dump the first save file where all your items are and transfer it with VitaShell to your PC in slot1 folder.
2. Open that save file with hex editor and take note of the offsets where your items are (See my Image as a reference).
3. Play the game and sell everything and save again.
4. Dump that new save file in slot2 folder.
5. Hex edit the new save file and replace the items offsets with the offsets in step 2.
6. Save your file and copy it back to your PS Vita with VitaShell.
7. Import the save file with the Save Manager of your choice and play! :D

If someone can send me his save file (gamedata0000.sav) I can try and mod it for you with my offsets... ;)
 
Last edited by gvargas,

Gootah

Well-Known Member
OP
Member
Joined
Aug 11, 2013
Messages
257
Trophies
0
Age
37
XP
506
Country
United States
So if this works the best things to do is to build a maxed item set.

Perform this method, buy all your items to max and repeat.

That way it kind of takes less time to maximize gil and items.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: Well start walking towards them +1