This is how to cheat Freedom Wars Savegame

Discussion in 'PS Vita - Hacking & Homebrew' started by liomajor, Sep 22, 2016.

  1. liomajor
    OP

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    This is how to cheat your savegame (make backup!):

    1. Write down your Value to cheat, ex. your points: 5625 > F9 15 HEX
    2. Export your savegame either with savemgr or manualy
      (eboot.bin from vitashell temp. replacement for games eboot)
    3. FTP transfer your decrypted save to your PC from savedata0:
    4. Use your fav hexeditor like HxD to open user_data000.dat
    5. Search and change the desired value (should be near your players first name)
    6. To make a valid file, we have to fix the first 4 bytes crc
      Code:
      Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
      
      00000000  1A C6 79 A6 04 00 00 00 54 4F 50 00 CF 86 06 00  .Æy¦....TOP.φ..
      00000010  01 00 13 00 19 00 00 00 04 00 00 00 41 46 44 00  ............AFD.
      00000020  68 00 00 00 01 00 01 00 C2 B1 9D 83 A8 FC E1 00  h.......±.ƒ¨üá.
      00000030  7C F9 43 A1 A8 FC E1 00 2A BE 2E A7 A8 FC E1 00  |ùC¡¨üá.*¾.§¨üá.
      
      Old CRC32 is 1A C6 79 A6 > A679C61A
      Select everything except the first 4 bytes (select block in HxD)
      Calculate the files new CRC32 (HxD > Analysis > Checksums > CRC32)
      Edit the first 4 bytes to match, ex. 01020304 gets > 04030201
    7. Save and transfer it back to your vita -Done-
    (Don't cheat online or you might get banned!)

    Have Fun
     
    cearp likes this.


  2. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Any idea about materials? Wouldn't that be hard to locate?
     
  3. rjshooter

    rjshooter Member

    Newcomer
    12
    5
    Sep 16, 2016
    Indonesia
    What possibility can we do with editing the savegame? More materials? Getting the weapon that we've never use before? (example: knuckle, pistol)
     
  4. liomajor
    OP

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    I guess someone will make a save editor since manipulating things is very easy.

    As a starter you will need known values or compare for/after new item/weapon pickup to receive unknowns.

    Cheat Engine, File 1 > File 2 > File 3...

    You could also cheat via DLC to get items easy, but both is limited and amend each other.

    Ex. for unclaimed (each DLC can only claimed once per gamestart) DLC (gift_setting.xml)

    SW_0041 > Auto-Resuscitator +
    SW_0001 > Frag Grenade
    WG1_0001 > EZ Katze II Ausf. G
    and so on...

    Item + Weapons
     
    Last edited by liomajor, Sep 22, 2016
    Skardale and cearp like this.
  5. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Dang. Now we just gotta compare files to see where the value are for to make it a late bloomer rank 1. And to do the modules.
     
  6. Sabishinbo

    Sabishinbo GBAtemp Regular

    Member
    196
    63
    Sep 27, 2015
    United States
    Nice find.
     
    Skardale likes this.
  7. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Are you by chance going to do research again on freedom wars?
     
  8. Rakidas

    Rakidas Gay Pirate Queen

    Member
    151
    22
    Aug 6, 2015
    Australia
    Oh my god perfect, works beautifully :) Cool 3 mil of EP. Just had a thought- would this same process be applicable to God Eater 2 Rage Burst or Resurrection???
     
  9. CollosalPokemon

    CollosalPokemon ばん。。。かい

    Member
    682
    342
    Oct 18, 2009
    United States
    Was kinda hoping this and the DLC trick would be kept quiet in case Freedom Wars 2 ever might have had a chance of happening. =/
    Anyways the cat's out of the bag by now. Might as well share some additional info.

    I'll say that with the DLC trick you can add pretty much any number of items using count= to your inventory, for example you can do

    <Item id="SW_0041" count="50000"/>

    and that will actually give you 50,000 Auto-Resuscitator +. This also works with any material(s) and civilians. note that the game will split the 50,000 into 50 slots of 999 (+ 1 slot of the remainder of 50000/999) so in order to receive all that you'll need that many item/material/civilian slots open!

    short answer:
    No.

    long answer:
    The God Eater games encrypt their saves using a custom encryption (underneath vita's save encryption) so first off you'd have to decrypt the save completely (both vita's encryption and the custom encryption). they use a unique encryption so knowing how to decrypt vita saves in general isn't enough.
    Then they have at least 1 MD5 protecting their save, which is a more secure hash than CRC32. so you also have that to deal with.
    Then you'd have to re-encrypt the save back using the custom encryption.

    side notes:
    the long answer describes the "proper" way to modify God Eater saves. If you know assembly there is another option, which is to skip encrypting/decrypting the save and not check the MD5 sum(s) when loading. however, doing that would make original saves not work on the modified version (and vice-versa).
    I'm personally not interested in cheating in the God Eater series. I love playing the game.

    also:
    Interestingly God Eater avatar cards are NOT encrypted (ie not beyond normal vita encryption) however they're protected with an MD5 as well.
    If you want to check those out you can find them along with SECURE.BIN if you've been online and traded avatar cards. the names are CXX.bin where XX is 00~99 (in order of who you traded avatar cards with).
     
    Last edited by CollosalPokemon, Sep 24, 2016
    cearp likes this.
  10. liomajor
    OP

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    There are nowadays more and more games with different checks to prevent cheating.

    Ex. Sword Art Online Lost Song does have 8 Bytes to protect the saves integrity and a counter.

    [​IMG]

    As long you can fix the check after manipulating the save, you are good to go.

    Worst was what i've seen so far, console encryption + own encryption + crc for section parts.

    Freedom Wars was annoying and bored me fast, i had more fun to fiddle with the save/dlc as playing it.

    I ended up creating my own special DLC to finish the game.

    Code:
      <MainWeapon id="WS2_0031" level="10" rarity="9">
         <Effector id="3"/><Effector id="3"/><Effector id="3"/>
         <Effector id="48"/><Effector id="48"/><Effector id="48"/>
         <Effector id="108"/><Effector id="108"/><Effector id="108"/>
         <Effector id="56"/><Effector id="56"/><Effector id="56"/>
       </MainWeapon>
    
    Most likely i'll never play the game again and i guess there will be no Freedom Wars 2.
     
    Skardale likes this.
  11. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    What does your custom dlc do? And does the codes make your weapon a random type for late, normal, early bloomer? And what is an effector?



    Do you by chance no the id(s) to where items are/civilians? I've already beat the game and atm have to replay value.
     
    Last edited by Skardale, Sep 24, 2016
  12. liomajor
    OP

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    It creates Excalibur with high rate level and elements.

    Sorry, i just edited and in the i didn't write them down.
     
    Last edited by liomajor, Sep 24, 2016
  13. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    So to make your own dlc you just make a code like yours into param file?
     
  14. liomajor
    OP

    liomajor GBAtemp Maniac

    Member
    1,463
    1,065
    Jun 10, 2008
    United States
    Just use a valid DLC and edit it.

    TITLEID = Games TitleID depending on Region
    E = EUR, U for US
    J can't conflict with real DLC

    addcont_plain > TITLEID > E000100ITM00900J > sce_sys > param.sfo (EP9000-PCSF00446_00-E000100ITM00900J / TITLEID)

    Edit "gift_setting.xml" with all items/stuff you want, claim ingame (no graphic, but it will work)

    J used? Next is K and so on, HF.
     
    Last edited by liomajor, Sep 24, 2016
    Skardale likes this.
  15. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Awesome now I just got to find a dlc I haven't used unless I can name my own dlc id.....gah gonna have fun finding the code for the addons on the weapon for attributes like attack up HL, attack up L, etc


    And civilians ugh
     
    Last edited by Skardale, Sep 24, 2016
  16. CollosalPokemon

    CollosalPokemon ばん。。。かい

    Member
    682
    342
    Oct 18, 2009
    United States
    I don't know many specific IDs but

    for combat items it's SW_XXXX where XXXX is between 1 and 47
    for materials it's RES_XXXXX where XXXXX is between 1 and 10080 (supposedly) although from what I've seen it seems more like between 1 and 600 or 700-ish.
    for civilians it's CIT_XXXX where XXXX is between 0 and 41
    for key items it's KEY_XXXX where XXXX is between 1000 and 2027 (WARNING: proceed with caution as these usually affect events!)

    IMPORTANT: all use leading zeroes, so like if you want to try civilian 27 then the ID would be CIT_0027 (however many zeroes let the number match the number of Xs)
     
    Skardale likes this.
  17. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Hummmmm I love you xD anyway now once I get food in my belly I'll be motivated now! Ima try and map out all the numbers for items and stuff. Does savemgr work for cartridge freedom wars? Not dumped?

    And do you know the location for items in inventory? And able to edit them? Like the weapon stats and attributes like attack up, damage to pod up, etc. I don't need the numbers for the corresponding attribute just location I'll figure out each one.
     
    Last edited by Skardale, Sep 24, 2016
  18. CollosalPokemon

    CollosalPokemon ばん。。。かい

    Member
    682
    342
    Oct 18, 2009
    United States
    Don't know. My copy was digital.

    Also I got those numbers from the game's code and while it seems those ranges are valid, not *every* ID inbetween those ranges is valid.
    If you happen to try a non-existent ID, nothing is given to you (effectively nothing happens).
     
  19. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Never mind. Someone on vita piracy beat me to it xD go look they have a good guide there.
     
  20. Skardale

    Skardale Member

    Newcomer
    39
    3
    Aug 18, 2016
    United States
    Ok having a problem. My entitlement points are 4757 so in hex that is 34373537....when I search for that says nothing found