Savefile Manipulation - Revision history

Crediar at 22:18, 23 June 2024

2024-06-23T22:18:15Z

← Older revision		Revision as of 22:18, 23 June 2024
Line 1:		Line 1:
	Terranigma uses two checksum to verify its [[SRAM\|save file]], an ADD of all the bytes and a XOR of all the bytes.		Terranigma uses two checksum to verify its [[SRAM\|save file]], an ADD of all the bytes and a XOR of all the bytes.

	Due this ~~its~~ vulnerable to moving values around in the save file as long as the byte is at the same align.		Due this it's vulnerable to moving values around in the save file as long as the byte is at the same align.

	In the following POC three values are being moved around to achieve item duplication.		In the following POC three values are being moved around to achieve item duplication.

Crediar: Crediar moved page Savefile Corruption to Savefile Manipulation: This doesn't corrupt a savefile

2023-08-12T14:08:13Z

Crediar moved page Savefile Corruption to Savefile Manipulation: This doesn't corrupt a savefile

← Older revision

Revision as of 14:08, 12 August 2023

Crediar at 01:49, 5 March 2021

2021-03-05T01:49:25Z

← Older revision		Revision as of 01:49, 5 March 2021
Line 1:		Line 1:
	Terranigma uses two checksum to verify its [[SRAM\|save file]], an ADD of all the bytes and a XOR of all the bytes.		Terranigma uses two checksum to verify its [[SRAM\|save file]], an ADD of all the bytes and a XOR of all the bytes.

	Due this its vulnerable to moving values around in the save file as long as the byte is at the ~~some~~ align.		Due this its vulnerable to moving values around in the save file as long as the byte is at the same align.

	In the following POC three values are being moved around to achieve item duplication.		In the following POC three values are being moved around to achieve item duplication.

Crediar: Optimized Setup

2021-02-17T08:50:16Z

Optimized Setup

← Older revision		Revision as of 08:50, 17 February 2021
Line 7:		Line 7:
	Before:		Before:
	# Equipped Item (0x4C)		# Equipped Item (0x4C)
	# ~~Money~~ (0x00)		# Fluffy Position (0x00)
	# First Slot ID Item (0x10)		# First Slot ID Item (0x10)

	After:		After:
	# Equipped Item (0x00)		# Equipped Item (0x00)
	# ~~Money~~ (0x10)		# Fluffy Position (0x10)
	# First Slot ID Item (0x4C)		# First Slot ID Item (0x4C)

Line 19:		Line 19:
	Setup:		Setup:
	# Get item you want to duplication and nine small heals, since they will always be left most in the inventory		# Get item you want to duplication and nine small heals, since they will always be left most in the inventory
	~~# Have 10 money~~
	# Save to second slot		# Save to second slot
	# Equip item you want to dupe ~~and spent all your money~~		# Equip item you want to dupe
			# Put Fluffy on the top left door in the inventory
	# Save to first slot		# Save to first slot
	# Reset game		# Reset game
Line 28:		Line 28:
	# Delete all the small heals		# Delete all the small heals
	# Reenter the item inventory screen		# Reenter the item inventory screen
			# Place Fluffy on the 2nd row and the 4th slot
	# Save to first slot but as soon as the first slot item ID is written reset the system		# Save to first slot but as soon as the first slot item ID is written reset the system

	Example:		Example: (Note: This shows a way using money)

	[https://www.youtube.com/watch?v=RcuZShWzptU View]		[https://www.youtube.com/watch?v=RcuZShWzptU View]

Crediar: Started page

2021-02-16T20:28:05Z

Started page

New page

Terranigma uses two checksum to verify its [[SRAM|save file]], an ADD of all the bytes and a XOR of all the bytes.

Due this its vulnerable to moving values around in the save file as long as the byte is at the some align.

In the following POC three values are being moved around to achieve item duplication.

Before:
# Equipped Item (0x4C)
# Money (0x00)
# First Slot ID Item (0x10)

After:
# Equipped Item (0x00)
# Money (0x10)
# First Slot ID Item (0x4C)

Note: Terranigma automatically sorts the inventory but only when reentering the inventory screen.

Setup:
# Get item you want to duplication and nine small heals, since they will always be left most in the inventory
# Have 10 money
# Save to second slot
# Equip item you want to dupe and spent all your money
# Save to first slot
# Reset game
# Load second save file
# Unequip the item
# Delete all the small heals
# Reenter the item inventory screen
# Save to first slot but as soon as the first slot item ID is written reset the system

Example:
[https://www.youtube.com/watch?v=RcuZShWzptU View]