Click here to join our newer Forum.
| Szymmy_Saurus.cia |
|
||
 GRAWR :3  Admin 2359 Posts |
Since nobody else did it yet and SaveDataFiler allows us to decrypt MK7 saves, I'll try to make some research on MK7 save files. I'm just making this thread to keep progress instead of documenting a discovery, so it's going to take a few posts until I figure something out. First, the file system goes like this:  Then like this:  For now my replay folders are empty, but I'm very curious, VERY curious if they are the same format as Staff Ghosts. So anyway, system2.dat has this unique header and it's mostly empty afterwards.  There are some E8 03s in latter part, but only a few. Repeating every 168 bytes.  And at the very end we have this.  System3.bin has exactly the same size and the most part is exactly the same. The header is the same, the E8 03s are exactly the same... But there are some differences.  I'm going to run through the shell cup and figure out what will it change in my save file. |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
3 stars, 40 points, unlocked Banana Cup and new character - Shy Guy. Created ExtData for Mario Kart Channel, got 34 coins. The first change was that system3.dat got replaced with system1.dat! But anyway, comparing files with 2.dat in name. The first change appeared rather quick.  The second one...  And the third... Make note that 01 appears multiple times. Four to be precise.  There are some 04s soon after. Also 4 to be precise.  And then it starts to get really different.  More of it:  And at the very end before it fades into 00s:  With the final two lines being different as well.  Tried to look for the coin amount (34, 22 in hex). It was only in one instance, on 4C28.  I'll try to edit it to FF and look if it works. |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
Not surprising. Time to make Banana Cup. https://d3esbfg30x759i.cloudfront.net/ss/zlCfzSrUOHkNHledG3 |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
I actually went for Time Trials now as I couldn't restore the save, even after making this byte back ;_; Here's the time I had: https://d3esbfg30x759i.cloudfront.net/ss/zlCfzSrUXhsC7QW-Ye 10 coins, Bowser Castle 1. I have no clue how are these files generated. I just had a System1 instead of System3, now I have a System4 as well instead of 2!  Was 7, is 11. Interesting. The only change there is in this file. And obviously a hash. I don't know, is it randomly generated or so? Maybe that was the reason why I failed to make the last edit?  And the other file is really interesting. IT'S MUCH DIFFERENT THAN WHAT IT WAS BEFORE! But I guess it's not that weird if you know that I just pulled my first time trials, so yeah. Then it gets as usual.  Then there's this 4E57 again...  And the hash.  There's also a matter of this replayxx.dat file.  And if I'm right... I'VE JUST FOUND WAY TO CREATE STAFF GHOSTS! Lazy Nintendo counterattacks :P 
|
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
It's CRC-32! :awesome: Time to haxx some things. |
| pabloh&g |
|
||
|
On 26/09/2014, at 9:25 pm, Yamilla Hoshi wrote:> ???? Members 167 Posts |
Interesting! |
| Gericom |
|
||
|
Feature-Length Nut Expansion Pak Moderator 1377 Posts |
I already thought it was a crc. Nice work! Try to document the format on the wiki. Very nice that those staff ghosts are in separate files. |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
Every time the game is booted, it creates a new system file and deletes the old one. There are two system files, one is a backup, the second one is a current save. What's interesting about it is that if the save data gets corrupted, it doesn't backup the old save. I'd love to work on editing saves, but there is just one tiny problem: I can never, never, never ever get it working when modifying files. Halp? |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
Aaand Staff Ghosts confirmed working. I wonder if we can extract them from ExtData as well. https://d3esbfg30x759i.cloudfront.net/ss/zlCfzSrV8joYKoFr27 |
| Solara-Chan |
|
||
|
Brigade Leader In-Training Moderator 124 Posts |
Interesting. Nice to see MK7 Hacking Progressing! |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
It's not progressing. Nobody wants to help me with the checksums, so we're stuck at read-onlyness :Okay: |
| MKGirlism |
|
||
|
I'm cutely evil, aren't I? Führer 8388607 Posts |
This Community is to small, for Team Work, which is why Geri must make Tools himself, which is why you must Research stuff yourself, which is why I have to Test everything myself, etc. |
| Haruhi Ermiiworth |
|
||
|
ERLLUMINATII CONFIRMED Moderator 9234 Posts |
I actually help Szymmy a lot. We figured out some neaty things yesterday, during a 3 hours long Team Viewer session, and it was fun :D |
| Méga-Mew |
|
||
|
Members 29 Posts |
Can you found the offset for VR race ? |
| Gericom |
|
||
|
Feature-Length Nut Expansion Pak Moderator 1377 Posts |
I want to help you, but currently I have a lot of other things to do aswell. |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
I had three saves ripped, one with 1000VR, other one with 1021, unfortunatelly before the last try became reality, someone has chosen Toad Circuit eventually leading me to force close. After the restart I got to 1041VR. By the way, 1000VR players are so lame I was able to outlap one player on both of the races :P
I converted 1021 to Hex and got 3FD, wrote it in search box... Then made the same with second file and 411... BINGO! The offset is 0x4E3C! :3
|
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
I took a look at the saves exported by PKHeX, edited one a bit and I realised two things: |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
List of everything that changed between Luigi Circuit 29 coins and Luigi Circuit 36 coins, I did exactly the same things in both cases before exporting new save: 4904 changed from 01 to 02 4972 changed from 01 to 02 4974 changed from 01 to 02 4996 changed from 01 to 02 49AA changed from 01 to 02 4C14 changed from 04 to 05 4C18 and 4C19 changed from 9087 to 4CAA (!) 4C28 changed from 1D to 24 4C2C changed from A0 to B6 4C30 changed from 11 to 14 4C34 changed from 52 to 5E 4C38 and 4C39 changed from 5232 to 9A46 (!) 4C3C changed from 28 to 2E 4C40 changed from 17 to 1D 4CC0 changed from 09 to 10 4D70 changed from 0E to 12 4D72 changed from 0C to 0E 4D8A changed from 02 to 04 4D92 changed from 02 to 04 4D98 changed from 05 to 07 4D9A changed from 05 to 06 4DBA changed from 01 to 02 4DC4 changed from 05 to 07 4DE0 and 4DE1 changed from 7C27 to 262F (!) 4DE8 and 4DE9 changed from 4628 to 9638 (?) 4E63 changed from 00 to 01 Line starting with 4F60 changed from 00 to FD 0B 00 00 BC 22 00 00 48 14 00 00 B8 21 00 00 00 00 00 00 0C 00 00 00 16 00 03 00 12 00 00 00 02 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 05 50CC, 50CD and 50CE changed from 03 03 03 to 04 04 04 I will make another save now and repeat the steps. |
| Szymmy_Saurus.cia |
|
||
|
GRAWR :3 Admin 2359 Posts |
4C18, 4C38, 4DE0 and 4DE8 officially confirmed to be checksums. But of what sort? |
| TSMKFail |
|
||
|
Members 289 Posts |
Well now to investigate. |
Page: 1 2 3