View Full Version : Save editing - encryped or doing something wrong?
Drivium
01-03-2012, 07:10 AM
Ive successfully edited Ninja Blade and figured Id try a few other games. I attempted to edit Tony Hawk Project 8 to change the number of stokens. I am SURE I found the right value because I even tried a file compare and the value changed matched exactly, but when I modified it and reinjected/rehashed/resigned it will not load the save, says its corrupted. This game is OLD so I wouldn't think it would have encryption, but maybe. Same thing with Disney Universe, I found the value, changed it, reinjected/rehashed/resigned but will not load. Am I understanding correctly that encrypted saves cannot be modded? Or, are these not encrypted and require a different technique than Ninja Blade? I'm sorta leaning on them NOT being encrypted, because I wouldn't think I would be able to see the value...in other words, wouldn't the value for say stokens be represented by something other than the actual hex value? Any help would be much appreciated (ive read the tutorials here on hex editing). New to hexing xbox saves, but not new to hex editing in general. I'm using the latest version of horizon to work with the saves in case that matters.
kill_seth
01-03-2012, 08:11 AM
Doesn't really matter how old the game is. It's up to the developers to input any type of security. Tons of games don't have any type of encryption on campaign saves, they usually focus on multiplayer security. To figure out if you didn't just mess up when rehash and resigning, check the save by going to settings/storage on your xbox. Usually if you look in there before you loaded it up in the game it will show the status of the save. If the hashes are wrong it will show up as corrupted. Most of the time a game won't even display a save with bad hashes, so it most likely has security.
Drivium
01-03-2012, 02:51 PM
Yea, it shows up and looks normal...although, the little icon (picture) that usually shows up next to the save title is blank in both cases...is that an indication of anything?
Drivium
01-03-2012, 08:58 PM
So am I correct in thinking that encrypted saves cannot be modified?
EDIT: Read through some more forums and I've seen references to compression tools. Sounds like these are needed for encrypted games? Is that right? Also sounds like there are specific tool kits for different games? Looking to hex edit Tony Hawk Project 8 and Disney Universe. Both seem to be encrypted...?
Drivium
01-03-2012, 11:30 PM
Found this: http://www.thetechgame.com/Downloads/id=223/360gs-save-decrypter.html
Is this a fake? Or will this work? I'm totally naive to save decrypting at the moment and could use some direction. Is there a way I can create a decrypter for the games I want to decrypt via some specific technique? thx
Buddah
01-04-2012, 12:12 AM
Tony Hawk Games use a checksum. null the first 4 bytes then calculate a Crc32jam over the entire file (extracted from the package). if you are using hexworkshop i think its called crc32 then check the box that says 1s compliment
Drivium
01-04-2012, 02:26 AM
Using HxD. It has a checksum feature. I selected CRC-32... doesnt have the 1s thing you mentioned. Is there a tutorial on hex editing encrypted saves? Not sure what you mean by nulling 1st four bytes and don't know know how to calculate a crc jam....:( But, this does give me hope that it can be done...just need the knowledge now...
kill_seth
01-04-2012, 05:40 AM
Upload your save and I'll try to walk you though it.
Drivium
01-04-2012, 06:14 AM
Sweet! Wasn't sure how to attach a save here, so I just upped it elsewhere... http://www.mediafire.com/?w2bd9ov7ipdhg5b
I downloaded hexworkshop.
Drivium
01-05-2012, 02:04 AM
Need some tutorial lovin' over here.
Buddah
01-05-2012, 04:30 AM
Here is a tool to fix the hash of your gamesave.
Extract the save from the Package
Open the Tool => Open and Fix
then Re-Inject the save into the Package
Drivium
01-05-2012, 03:04 PM
Awesome, I'll give it a shot tonight. Was this necessary as a result of the file being encrypted? Or did it need a special rehash for another reason? Is this a complex process? Is that all that's stopping Disney Universe from being moddable too? I get the same corrupted game save message. I would still like to know how to go about this sort of thing on my own so I don't have to bug the forum every time I encounter this. Either way, thanks a million Buddah.
Buddah
01-05-2012, 10:26 PM
there is no encryption. you get the corruption error because the hashsum is incorrect when you modify the save. post a disney universe save and ill see if i can help you with that as well
Drivium
01-05-2012, 11:56 PM
Will do. Is this something that can only be achieved through an app like you posted? Or is this something I can learn to do manually? I guess I dont understand why the rehash and resign in Horizon isn't working for these games. Ive tried googling for this info, but I'm not sure I'm asking the right question. Teach me HOW to do this on my own oh wise Buddah...
On another site I see a reference to a hash block calculator - I think I downloaded one at one point...is this what I need? IF so...how to use it.....
http://www.se7ensins.com/forums/topic/135787-ezgt-21-not-working-again/
Buddah
01-06-2012, 01:48 AM
n o it has nothing to do with re-hashing the package. the save you extract from the package has a checksum. you can learn to manually fix them
Drivium
01-06-2012, 03:46 AM
I'm asking you to teach me how to fix the checksum issue PLEEEEEEASE, kind sir! Heres the saves: http://www.mediafire.com/?bqc1k5ydt9m431h
I included Disney Universe AND Spongebob truth or square. In the spongebob game, I can find the value for my current tokens (2427 = 097B), change them and resave it, and the save loads ok on the xbox, but the value is only changed on the overview screen. When I enter the actual gameplay screen, the value is still 2427. Not sure why this happens or how to find and edit the IN GAME value of 2427. Disney universe, the current token count in that game is 1799 which I can find, but as you know, the save won't load once modded.
Buddah
01-06-2012, 06:13 AM
for spongebob change both values of your search.... and for disney try this..
Drivium
01-06-2012, 07:24 AM
Trying to find my stats on tony hawk but no luck...I dont get it!! For example, in the save I sent you, for sarah, The grind stat shows 23256 experience which is 5AD8 in hex. I can't find 5AD8 at all! Same with the other stat experiences. Even tried D85A (reversing it). Tried searching in both HxD and Hexworkshop, same results. I've tried file compares, etc. The only value that is revealing itself is the Stokens (which is at 00005680 06, by the way). Any idea why this might be? Are these values hidden or split up in some other way?
Also, the disney universe save you sent back to me is still showing corrupt. Was there supposed to be another hash fix app included?
Emerald Lance
01-06-2012, 09:29 AM
It seems you're having trouble understanding the differences between security types, so I'll explain as best I can. A developer can choose to include any number of different security methods.
One such method is encryption, where the entire file is converted to a specific code that the game is designed to decipher; it's like if you share a special code language with your best friend that only you and your friend know, but if somebody else pays attention then they just might learn it too. That's generally how encryption works. The developers create their own special little language that the save file is converted to, and they build the cipher into the game itself so that the game can read the save but hackers can't, though a talented and intelligent hacker can sometimes figure the encryption out.
Checksums and hashes are slightly different from each other, but they serve the same general purpose: they don't actually encrypt the save itself, but a check/hash is a little line of code that scans the save and runs it against an algorithm (mathematic equation). The game then reads the save data, reads the check/hash, compares the two with the algorithm, and decides if the save has been tampered with or not (returning a "corrupt save" if it has). They're easier to figure out than full-blown encryption, but there could be more than one check/hash within the data, so it also has the potential to be a little trickier.
Then there's compression. Compression works similarly to encryption, but with one major difference in execution: instead of using a code to hide the data, it uses a code to shrink the data. It has the same end result: it creates a file that can easily be read by the game, but not by a hacker. Again, if a hacker is knowledgeable enough about this kind of stuff, they can find the compression method and decompress the save. (Side note, decompressors won't have any effect on encrypted saves, and vice versa for decryptors and compressed saves.)
While these are the most used methods, that doesn't mean they're the only ones. Developers come up with weird and crazy things to throw us hackers off all the time. Fable 3 comes too mind (checksum, compression, multi partition, scary shit). So, based on your original post, you were able to find the values you were looking for, but when you edited them the save came up corrupt; the save isn't encrypted or compressed (otherwise you wouldn't have found your values) but it does have a hash or a check. Another post says that you looked for the values but couldn't find them; the save could be encrypted/compressed, but chances are just portions of the save are encrypted/compressed and not the whole thing (which, to my understanding, makes fixing it harder because one doesn't know what to look for).
Personally, I can't help you. I don't know enough about checks/hashes or encryption/compression to fix anything for you. But I hope I helped explain things in a friendly and easy-to-understand way, so that better understanding can be had when asking about security. I hope you get your file modded.
Drivium
01-06-2012, 06:01 PM
THANK YOU! So it sounds like the portion of Tony Hawk where I found the "Stokens" is NOT encrypted or compressed...possibly. Both the areas that hold the stats may be. With the stokens, I noticed the value doesn't sit at the same address all of the time. If my number of stokens changes, about two entire lines of code shift. Maybe I'll throw a stat mod request in the requests forum. This is clearly beyond my current skill set! I really appreciate you taking the time to break it down like you did. I used to hex edit PS games back in the day (among every other console). Remember Gran Turismo hybrids? lol
Emerald Lance
01-06-2012, 08:56 PM
Now you're getting it! When a value isn't associated with a specific address, it's called a dynamic value (as opposed to a static value, which IS tied to an address). That said, the bigger a title is, the more likely it is to have security (new or old doesn't matter, it's more about how big the name is, with multiplayer also playing a factor). Tony Hawk isn't as big a name as it used to be, it's actually kinda been on the back burner for the past decade. That doesn't mean it has for sure doesn't have security, but I'm sure that if it does have security then it's more than likely lower end.
Buddah
01-06-2012, 09:24 PM
try this one for disney
Drivium
01-06-2012, 10:26 PM
Buddah - save still comes up corrupt. Again, no rehash app included, was it supposed to be? Emerald Lance - hopefully, with this being an old title, someone will still be willing to take a look for these stat addresses. My goal is to be able to achieve stats not possible otherwise. Such as super jump (by editing the Air stat), perfect balance, etc.
slyfuldragon
01-07-2012, 01:49 AM
Just to make sure.... after using the tools that Buddah is providing you.....you are rehashing/resigning (particularly NOT using Modio) right?
Drivium
01-08-2012, 08:46 PM
Yes, for tony hawk, the tool mods the hash, then I rehash/resign with Horizon and works great. Buddah did not provide a tool for Disney Universe. As far as I can tell, he maybe did something with the save and resent it to me - there were no tools included. I tried to load the save before I made any changes, but still corrupt.
vBulletin Solutions, Inc. All rights reserved.