make commercial games work and please KEEP hacking this, i hate m3 for what they did to moonlight, M3 can suck on it!
Styles420 said:Just noticed something in the headers of some of the JP files - startnds and startgba both contain DSBooter in their headers. Menu, minigame and homebrew, when XORed by 0x07, also have DSBooter in the same location. So it seems that some headers are XOR encrypted, while some aren't, or only partially so. The pattern I've noticed is that JP files have a lot of 07's in them where Eng files would have 12's - it seems that this is the regional encoding built into the cards. I'm not positive yet since I still haven't made it past the OS selection, but my guess is that, for example, the JP cards XOR headers by 07, thereby leaving 00's in place of the 07's. So the Eng cards would use 12, and Asian cards would use 23.
So I'm off to try something new with the headers - converting all of them using this new information, to see if it gets me anywhere new.
SeaofTea said:I've been playing around with how much region information is needed to load g6dsload.jp/eng and this is what I've found:
0x00-0xc4
0xd4-0x1ff
DO NOT need to be encoded to boot
Thats as far as I got before my microsd card reader died. But I believe that it may only be like 8 bytes that need to be encoded with region information, possibly 0xcc - 0xd3. If we can find what information is needed then we can search the rest of the files for checks on that information and correct/remove them.
SeaofTea said:Styles420 said:Just noticed something in the headers of some of the JP files - startnds and startgba both contain DSBooter in their headers. Menu, minigame and homebrew, when XORed by 0x07, also have DSBooter in the same location. So it seems that some headers are XOR encrypted, while some aren't, or only partially so. The pattern I've noticed is that JP files have a lot of 07's in them where Eng files would have 12's - it seems that this is the regional encoding built into the cards. I'm not positive yet since I still haven't made it past the OS selection, but my guess is that, for example, the JP cards XOR headers by 07, thereby leaving 00's in place of the 07's. So the Eng cards would use 12, and Asian cards would use 23.
So I'm off to try something new with the headers - converting all of them using this new information, to see if it gets me anywhere new.
sorry I should have explained that also, I believe it has something to do with the way the information passes through the physical card it self. To decode any of the headers do bitwise XOR with the number you believe is meant to be 0, so if you wish to decode the jp header just XOR with 07 and you get a decoded header.
also the DSbooter stuff is just just a flashme/passme code.
I've been playing around with how much region information is needed to load g6dsload.jp/eng and this is what I've found:
0x00-0xc4
0xd4-0x1ff
DO NOT need to be encoded to boot
Thats as far as I got before my microsd card reader died. But I believe that it may only be like 8 bytes that need to be encoded with region information, possibly 0xcc - 0xd3. If we can find what information is needed then we can search the rest of the files for checks on that information and correct/remove them.
Oh, so you want me to remove all of the files in the SYSTEM folder, leaving only the g6dsload files in the folder, then start adding files one by one until I get a successful boot?Styles420 said:I'd say start by leaving only the g6dsload files and one of the other .jp files - I'm thinking menu, but I really don't know. What I'm hoping for is that you'll be able to get the menu that comes after selecting an OS (or the screen it boots to after the selection has already been saved) with the bare minimum files needed. Then we should be able to say with some certainty what file(s) are responsible for the menu, and that will be the next file I try to decrypt.
Dude, you're in Michigan...I'm in California and it's nearly 1am here! That must mean it's 3 or 4 am where you are! Get some rest man!Styles420 said:(Okay, so I'm cracking up a bit... it will all be better once this puzzle is solved, lol)
Hmmm, is there anyone following along with this thread who has a Chinese flashcart?Styles420 said:In other news, I've been doing more comparisons between decrypted headers for touch pod and Sakura, for all three regions. It seems that, in a lot of cases, the English files are actually more often identical to the Asian files.
Where have you been all this time?deviant.zero said:Yep! Right here. Don't know anything about hacking and programming though.. But I would be willing to try out builds after my net is uncapped on the 28th!