Toggle sidebar

Hacking Henkaku Save Editing Thread

  • Thread starter Thread starter Sabishinbo
  • Start date Start date
  • Views Views 337,465
  • Replies Replies 869
  • Likes Likes 4
When I looked through the files in Henkaku I noticed that the Terraria saves are still in the standard .plr format that Terraria uses elsewhere, so I'm curious to see if the unencrypted .PLR files would work with a normal Terraria save editor
-
Will update later when I get around to doing it
 
Here are some offsets I found. (all 4 bytes, unless specified)
Remember to always make some form of backup (decrypted or encrypted)

Persona 4 Golden (US):
PHP: 
"Money"
1: 0x0058
PHP: 
"HP"
1: 0x0CDC (2 bytes)

"SP"
1: 0x0CDE (2 bytes)
PHP: 
"Persona"
1: 0x0A8E (2 bytes)

"Level"
1: 0x0A90 (2 bytes)

"Skill #1"
1: 0x0A98 (2 bytes)

"Skill #2"
1: 0x0A9A (2 bytes)

"Skill #3"
1: 0x0A9C (2 bytes)

"Skill #4"
1: 0x0A9E (2 bytes)

"Skill #5"
1: 0x0AA0 (2 bytes)

"Skill #6"
1: 0x0AA2 (2 bytes)

"Skill #7"
1: 0x0AA4 (2 bytes)

"Skill #8"
1: 0x0AA6 (2 bytes)

"Strength"
1: 0x0AA8 (1 byte)

"Magic"
1: 0x0AA9 (1 byte)

"Endurance"
1: 0x0AAA (1 byte)

"Agility"
1: 0x0AAB (1 byte)

"Luck"
1: 0x0AAC (1 byte)
PHP: 
"Persona"
1: 0x0DAE (2 bytes)

"Level"
1: 0x0DB0 (2 bytes)

"Strength"
1: 0x0DC8 (1 byte)

"Magic"
1: 0x0DC9 (1 byte)

"Endurance"
1: 0x00DCA (1 byte)

"Agility"
1: 0x00DCB (1 byte)

"Luck"
1: 0x00DCC (1 byte)
FFX HD (EU):
(In order for saves to work you need to fix checksum otherwise save will be corrupt. I used MemorySumChecker, there are many tutorials from ps3 version that work for vita if you're not sure about this part)
Confirmed: PS3 saves work on vita perfectly. Decrypt the "SAVE" file with Bruteforce and rename it "data00xx.bin", then ftp into game and you're done. This also means local cross-saving without psn.
PHP: 
"Gil"
1: 0x0014
2: 0x3D88
PHP: 
"HP"
1: 0x58F4
2: 0x590C
3: 0x5914

"MP"
1: 0x58F8
2: 0x5910
3: 0x5918
PHP: 
"HP"
1: 0x5610
2: 0x5628
3: 0x5630

"MP"
1: 0x5614
2: 0x562C
3: 0x5634
PHP: 
"HP"
1: 0x56A4
2: 0x56BC
3: 0x56C4

"MP"
1: 0x56A8
2: 0x56C0
3: 0x56C8
Hatsune Miku Project Diva f (EU):
PHP: 
"Diva Points"
1: 0x0150
2: 0x0154
Akiba's Trip Undead & Undressed (ALL):
PHP: 
"Money"
1: 0xB51C
PHP: 
"Base Attack"
1: 0x0608
PHP: 
"Base Defence"
1: 0x0604
PHP: 
//Converted into little endian, not personally tested
"Equipment Head Power Up Point 999"
0x00C4 E7030000

"Equipment Outer Power Up Point 999"
0x0124 E7030000

"Equipment Under Power Up Point 999"
0x0184 E7030000

"Equipment Weapon Power Up Point 999"
0x05A4 E7030000

"Player Exp 999999"
0x060C 3F420F00

"Player Datsui Skill All Max"
0x061C 64000000
0x0004 00000000

"All Use Item Stock 99"
0x42039FCC 63000000
0x405D0004 00000000

"All Food Stock 99"
0x4203A154 63000000
0x40170004 00000000

"All Innerwear Stock 15"
0x4003F740 0F000000
0x40330001 00000000
Senran Kagura Shinovi Versus (EU):
PHP: 
"Zeni"
1: 0x0008
Monster Monpiece (EU):
PHP: 
//Found in SystemData_0000.sav
"Money"
1: 0x01A724

"Rub P"
1: 0x01A728
I'll add more as I find them when I have time.
Hope this helps someone :)
 
Last edited by Rasa39,
  • Like
Reactions: Sourish Das, Gadorach and ness151
Here is a page with some values for Persona 4 Golden: https://amicitia.miraheze.org/wiki/Data0xx.bin

I just used HxD and used GoTo, make sure to select "dec" and not "hex". Ex: Money on this list is 88 with dec, and 58 with hex.
Modded my money, granted I ended up giving myself at least double what I calculated, hex values aren't exactly right.

Also, has anyone tried to see if save files are locked to one console?
For example, the actual save file for Persona 4 Golden is the data0XX.bin file, has anyone tried using someone else's save?
 
successfully modded Killzone Mercenary save, so it's really hit or miss on encryption from the developer.

The Cheat Engine "Open file" method also works great for easy values.
 
Darknova said:
I just used HxD and used GoTo, make sure to select "dec" and not "hex". Ex: Money on this list is 88 with dec, and 58 with hex.
Modded my money, granted I ended up giving myself at least double what I calculated, hex values aren't exactly right.
Click to expand...

Did you reverse the bytes when using hex? If not then that's probably why you got a different number from the one you calculated.

For example 999,999 is 000F423F in hex, but in hxd (or whatever hex editor you use) you need to flip the bytes and type in 3F420F00 in order to get that same number in the game.
 
Rasa39 said:
Did you reverse the bytes when using hex? If not then that's probably why you got a different number from the one you calculated.

For example 999,999 is 000F423F in hex, but in hxd (or whatever hex editor you use) you need to flip the bytes and type in 3F420F00 in order to get that same number in the game.
Click to expand...

OK, well there's my problem right there, I chose 007FFFFF to try and get 8,388,607 yen cause it sounded good, and ended up with ‭16,777,207‬ yen because it read it as 00FFFFF7.
Thanks, I'll have to remember that for next time.

Also, I am still wondering if it is possible to use other people's saves?

Here is my current save for Persona 4 Golden, if anyone wants to try and import it into their game, go ahead.
Save 1 is before the final battle in the True Ending for my 1st playthrough.
Save 2 is near the beginning of my second playthrough and includes the backup made before I modded it.
 

Attachments

Darknova said:
OK, well there's my problem right there, I chose 007FFFFF to try and get 8,388,607 yen cause it sounded good, and ended up with ‭16,777,207‬ yen because it read it as 00FFFFF7.
Thanks, I'll have to remember that for next time.

Also, I am still wondering if it is possible to use other people's saves?
Click to expand...

Glad it helped.

I've not tested this with P4G but considering the files seem to have no additional protection then it should work fine.
I did test with FFX HD and found that saves can be shared across accounts, as well as across platforms so long as you decrypt the ps3 save first (or encrypt the vita save if going to ps3) and fix the checksum. But P4G doesn't look like it has any extra security like that so it should work fine.

If I get the time though I'll test it out later with your save, I'm pretty sure it'll work though.
 
Rasa39 said:
Here are some offsets I found. (all 4 bytes, unless specified)
Remember to always make some form of backup (decrypted or encrypted)

Persona 4 Golden (US):
PHP: 
"Money"
1: 0x0058
PHP: 
"HP"
1: 0x0CDC (2 bytes)

"SP"
1: 0x0CDE (2 bytes)
PHP: 
"Persona"
1: 0x0A8E (2 bytes)

"Level"
1: 0x0A90 (2 bytes)

"Skill #1"
1: 0x0A98 (2 bytes)

"Skill #2"
1: 0x0A9A (2 bytes)

"Skill #3"
1: 0x0A9C (2 bytes)

"Skill #4"
1: 0x0A9E (2 bytes)

"Skill #5"
1: 0x0AA0 (2 bytes)

"Skill #6"
1: 0x0AA2 (2 bytes)

"Skill #7"
1: 0x0AA4 (2 bytes)

"Skill #8"
1: 0x0AA6 (2 bytes)

"Strength"
1: 0x0AA8 (1 byte)

"Magic"
1: 0x0AA9 (1 byte)

"Endurance"
1: 0x0AAA (1 byte)

"Agility"
1: 0x0AAB (1 byte)

"Luck"
1: 0x0AAC (1 byte)
PHP: 
"Persona"
1: 0x0DAE (2 bytes)

"Level"
1: 0x0DB0 (2 bytes)

"Strength"
1: 0x0DC8 (1 byte)

"Magic"
1: 0x0DC9 (1 byte)

"Endurance"
1: 0x00DCA (1 byte)

"Agility"
1: 0x00DCB (1 byte)

"Luck"
1: 0x00DCC (1 byte)
FFX HD (EU):
(In order for saves to work you need to fix checksum otherwise save will be corrupt. I used MemorySumChecker, there are many tutorials from ps3 version that work for vita if you're not sure about this part)
Confirmed: PS3 saves work on vita perfectly. Decrypt the "SAVE" file with Bruteforce and rename it "data00xx.bin", then ftp into game and you're done. This also means local cross-saving without psn.
PHP: 
"Gil"
1: 0x0014
2: 0x3D88
PHP: 
"HP"
1: 0x58F4
2: 0x590C
3: 0x5914

"MP"
1: 0x58F8
2: 0x5910
3: 0x5918
PHP: 
"HP"
1: 0x5610
2: 0x5628
3: 0x5630

"MP"
1: 0x5614
2: 0x562C
3: 0x5634
PHP: 
"HP"
1: 0x56A4
2: 0x56BC
3: 0x56C4

"MP"
1: 0x56A8
2: 0x56C0
3: 0x56C8
Hatsune Miku Project Diva f (EU):
PHP: 
"Diva Points"
1: 0x0150
2: 0x0154
Akiba's Trip Undead & Undressed (EU):
PHP: 
"Money"
1: 0xB51C
PHP: 
"Base Attack"
1: 0x0608
PHP: 
"Base Defence"
1: 0x0604
Senran Kagura Shinovi Versus (EU):
PHP: 
"Zeni"
1: 0x0008
I'll add more as I find them when I have time.
Hope this helps someone :)
Click to expand...
Wow, nice finds dude. You're doing Kami-sama's work. The Senran and AKB2 offsets are the same for US releases.

By the way, for anyone who save edits, Vitashell is a pretty convenient application. It allows you to rename the patch folder containing molecule without having to reconnect to a PC using FTP. (Not sure if you guys could do this already, I couldn't using MolecShell.)
 
Last edited by Sabishinbo,
How does one fix the checksum? I'm trying to modify Dungeon Travelers 2 and followed the guide on wololo. I know the save is decrypted because when I opened it using HxD without decryption I get random data whereas decrypting it showed the names of the items in my storage in text
 
Man whatever happened to editing lines of BASIC on my old Amstrad to get more money in Football Director, haha. When did life get so complicated >_<
 
Atelier Totori: Plus cheat table. Includes offsets for Health, Defense, and MP. The offsets were surprisingly easy to find with only a 2 byte(?) difference between H, D, and MP. I'll try and find the other offsets when I have some time.
Also, leveling up resets any changes made unfortunately. Gonna have to find the lvl offset and try to ameliorate that.
I'll eventually get around to including links to posts containing offsets in the Op.
 

Attachments

Last edited by Sabishinbo,
djricekcn said:
Any chance on meruru and sharuru
Click to expand...
Don't have those games unfortunately, but the values should be pretty easy to find.
Here's how I found mine after trudging through HxD for hours on end.
>Make maybe 3 saves.
>Level up a stat/Change money/ etc whatever on one save in the game so that the values will be different
>Decrypt the saves and load save 1 into cheat engine
>Input the value you want to change, open up the process list and switch to the second save.
>Values should have changed, input the new value that you want for this save
>Just like before, things should have changed, leaving you with 1-2 offsets. Try out different offsets.
Golden note: Once you find one offset then it should be incredibly easy to find the others. In Totori all of the stats only have a 2-byte different, making spotting them in the offset list easy.
 
Sabishinbo said:
Don't have those games unfortunately, but the values should be pretty easy to find.
Here's how I found mine after trudging through HxD for hours on end.
>Make maybe 3 saves.
>Level up a stat/Change money/ etc whatever on one save in the game so that the values will be different
>Decrypt the saves and load save 1 into cheat engine
>Input the value you want to change, open up the process list and switch to the second save.
>Values should have changed, input the new value that you want for this save
>Just like before, things should have changed, leaving you with 1-2 offsets. Try out different offsets.
Golden note: Once you find one offset then it should be incredibly easy to find the others. In Totori all of the stats only have a 2-byte different, making spotting them in the offset list easy.
Click to expand...
Thanks, but I don't know how to read it so I'm out of luck
 
i'm setting this up, but i don't really understand why i have to open the browser->near in the background...

i set it up so when i open my game, molecularshell opens, that is not enough?
the contents will still be encrypted?

and the fact that near is running 'on my game' will decrypt it, making the stuff i then get from molecularshell decrypted...? and if near is running, the files i get from ftp are no good?

i just want someone to clear this up, thanks :)
 

Site & Scene News

Go to forum More news

Popular threads in this forum

Vita TV Technical Issue

Repaired aliexpress 1000 3G motherboard, but the shop couldn't figure out how to fix headphone jack

Error code C1-2613-2

Tutorial  How to add friends on Vita Despite the error

C2-12828-1 Saved Core File Succeeded

PSX games without Adrenaline?

[WIP] PS Vita Trophy Archive Manager - Workaround for the 100 Trophy Title Limit

Port-begging thread