Jump to content

FE: Awakening Hacking Topic


VincentASM
 Share

Recommended Posts

Slot 1 Character Modifier (EU) [uNTESTED]:

D9000000 03BF3720

D4000000 00000008

D4000000 0000XXXX

B3CF2100 00000000

(00000074 00000000)

D6000000 00000064

D2000000 00000000

Can someone with an EU version of Awakening test this?

Link to comment
Share on other sites

  • Replies 877
  • Created
  • Last Reply

Top Posters In This Topic

Whew! After ~5 hours from start to finish of decrypting, properly extracting, and running into countless I-didn't-see-that-setting-so-it-didn't-work errors, I have finally succeeded in rebuilding a working unmoddified Awakening rom.

It got past the opening music, title screen, starting a new game and loading the prologue-Validar-dream map as well as all the portraits, and I turned it off after that.

I'm now going to try rebuilding it with Vincent's test file, and I should be able to report back tonight. I'll try to post a guide on how to properly rebuild the darn thing tommorow.

Edited by Bunny5390
Link to comment
Share on other sites

IT WORKED.

I don't have a way to take decent screenshots, but I'll try to post some crappy camera pictures sometime tommorow.

I got up to chapter two, but the game hard froze when I selected Sully, so I lost my save (Gateway can only write the save to the SD if the game closes gracefully). Thus, I won't be doing any more playtesting until tommorow.

I'm guessing that the freeze had to do with either Sully not having a myrmidon walking animation (is that possible? I'm not sure how map animations work) or because I selected her right after coming out of sleep mode (rarely games will randomly freeze within a few seconds of waking up).

[spoiler=Findings so far]

- Everything's vanilla in the Validar dream

- Chrom the conquerer clanks as he walks during the cutscenes

- The DLC skills show up as "Outrealm skill" because I only have the first DLC installed, but seem to work nonetheless (Chrom has resistance boosted by ten, Frederick has everything boosted by two, and Lissa's rally love seems to work properly). Lissa and Fredrick each have three, and Chrom has one.

- Chrom and Lissa have a support level of C

- Chrom is OP.

- Frederick is also OP, but not quite as much as Chrom.

- Cool side effect: On the world map, Chrom the Great rides from point to point atop his trusty steed!

- Everything worked fine up until selecting Sully on chapter two. I'm making sure to quit regularly now so that Gateway can properly write the save. I didn't try Virion. Everyone else works though.

Nothing more for tonight, It's 5 a.m. and I need sleep.

Link to comment
Share on other sites

Whew! After ~5 hours from start to finish of decrypting, properly extracting, and running into countless I-didn't-see-that-setting-so-it-didn't-work errors, I have finally succeeded in rebuilding a working unmoddified Awakening rom.

It got past the opening music, title screen, starting a new game and loading the prologue-Validar-dream map as well as all the portraits, and I turned it off after that.

I'm now going to try rebuilding it with Vincent's test file, and I should be able to report back tonight. I'll try to post a guide on how to properly rebuild the darn thing tommorow.

How were you able to do this process?

I gave up a few months ago with the current tools on GBATemp.

I don't need a super tutorial considering how I know how tiring figuring that out would be...

But can you outline what you did to repack the ROM?

Link to comment
Share on other sites

How to rebuild Fire Emblem: Awakening

We'll basically be following this tutorial, albeit with a few Awakening-specific steps: https://gbatemp.net/threads/tutorial-how-to-decrypt-extract-rebuild-3ds-roms-run-xy-oras-without-update.383055/

[spoiler=Instructions]

1. Download the pack mentioned in the tutorial, and install python (It says 2.7.7, but 2.7.9 worked fine for me and has some security fixes

2. Download RxTools (unless you don't have acess to the 3ds's browser, RxTools is the easier method by far). I think Notepad++ is just for editing, so you won't need it if you're just rebuilding.

3. Download SciresM's modified RomFS Extractor

4. As far as I know, you shouldn't need to fill slot0x25KeyX.bin because Awakening is an SDK <7 game.

5. Do both steps of the "with internet" part of the tutorial. Make sure the rom has a .3ds extention before decrypting it.

6. Put the decrypted rom in the "packhack" folder with all the tools for step two. Note that the file won't look much different after decrypting it.

7. In step two, make sure to type "no" when it asks if you want to decompress the code.bin. (3ds Builder will recompress it if you accidentally miss it, but probably better to leave it compressed in the first place).

8. Now, delete the "romfs" folder and "DecryptedRomFS.bin", as they are broken thanks to CtrTool.

9. Open a command prompt in the "packhack" folder, and run this command (without the quotes): "ctrtool -x --romfs=romfs.bin rom_filename_here.3ds". It will extract a romfs.bin file from your decrypted rom

10. Run "RomFS Extractor" and select the romfs.bin from step 9. Click go, and it will extract a "romfs_" folder

11. Make any edits you want (for example insert the test file from the first post here). You won't need to rebuild the romfs, as 3ds Builder will do it for you.

12. Run 3ds Builder. Click "Open Romfs" and select the "romfs_" folder.

13. Click "Open Exefs" and select the "exe" folder, then click yes when it prompts to rename code.bin. If it prompts you to recompress code.bin, do it.

14. Click "Open Exheader" and select "DecryptedExHeader.bin". It will detect Awakening and prompt to load defaults, click yes.

15. Uncheck "Media Device: Card2" and ignore the warning. I haven't tried Card2, but Awakening is originally a Card1 game, so I imagine Card1 would be the best setting. If someone tests and finds otherwise, tell me and I'll update this. The main difference as far as I know is that Card1 needs a separate save file, and Card2 saves data to the rom file itself.

16. Click "choose save loc.". Choose where you want to save it and what you want to name it, and then hit go. If all goes well, the program will build a fully playable .3ds!

How were you able to do this process?
I gave up a few months ago with the current tools on GBATemp.
I don't need a super tutorial considering how I know how tiring figuring that out would be...

But can you outline what you did to repack the ROM?

If you still have your decrypted rom, just download everything and follow from step 6 and you should be fine. If it doesn't work, try again from the start with a fresh dump.

Edited by Bunny5390
Link to comment
Share on other sites

I'm running into some odd glitches on chapter two. After Sully and Virion appear, selecting Chrom, Sully or Virion Freezes the game. Lissa's paired with Chrom, so I can't test if she freezes too. Edit: Lissa does not freeze the game.

I have a suspicion that it's related to either character diologue or help topics, because Chrom selected fine before Sully appeared. As a note, the help topics worked fine in Prologue and CH1. Also I'm on Lunatic if it matters.

3rd Edit:

[spoiler=more findings]

- Sully and Virion's death quotes and battle animations work fine

- Emmeryn has dual-coloured hair. She still has that halo-crown thingie, on top of blue marth hair, on top of her regular blonde double braids

- Game freezes if I click support from the world map

- Vaike looks epic

- Stahl best class swap

- Freeze free up until the start of chapter 3

- Sadly the good news ends there

Edited by Bunny5390
Link to comment
Share on other sites

Welp, looks like I've hit the end of the road. Chapter 3 seems to be un-winable due to freezes.

It has the worst freezing so far, every character save Avatar and Lissa freeze the game when selected, and the game freezes right after the "enemy phase" banner fades. I had the idea to try using the auto-move thingie to move the unselectable characters, which worked for a few of them (Stahl, chrom, Frederick and Sully), but froze when it got to others (Vaike and/or Virion), and made no difference to the enemy phase freezing.

Trading works fine, but interestingly, when I tried to pair up Lissa, the game froze bringing up the pair-up stats bubble when it tried to select Sully.

I'm going to try chapter 3 on another difficulty eventually, just in case it makes a difference.

Link to comment
Share on other sites

I haven't seen any posts containing the hexadecimal values for the hair colors of the non-child units, so I made a list of them. My list is currently missing some DLC characters and most of the MU hair colors. I hope someone finds this useful.

[spoiler=Hair Colors]

0x9A585DFF Anna
0xEDE9E3FF Aversa
0x211D1AFF Basilio
0xD48085FF Cherche
0x505C81FF Chrom
0xAF5454FF Cordelia
0x6E6376FF Donnel
0xDAD3BDFF Emmeryn
0xDCCFADFF Flavia
0x574C46FF Frederick
0xD28869FF Gaius
0x7C4554FF Gangrel
0xA3726BFF Gregor
0xECEBEAFF Henry
0x595655FF Kellam
0xCBC2A8FF Libra
0xDAD3BDFF Lissa
0x4C4C4CFF Lon'qu
0x505C81FF Lucina
0xF2E7C4FF Maribelle
0x532426FF Miriel
0xC2D6AEFF Nowi
0xEBCDD6FF Olivia
0x463E36FF Panne
0x56576EFF Priam
0xA57773FF Ricken
0x434343FF Say'ri
0x717266FF Stahl
0xAA6463FF Sully
0xA19791FF Sumia
0x484848FF Tharja
0xAFC19DFF Tiki
0xDED2B0FF Vaike
0x7A93A4FF Virion
0xEBEBEBFF Walhart
0xDBD6DBFF Yen'fay

MU Hair Colors:

0x7DBBC4FF Color #03
0xEEB1B1FF Color #06
0x5B5855FF Color #09
0x82678CFF Color #18

DLC Hair Colors:

0x54934BFF Alm
0x Catria
0x Celica
0x3CCDC8FF Eirika
0x Eldigan
0x00AA3CFF Elincia
0x Est
0x Ephraim
0x2D41B0FF Ike
0x Katarina
0x Leif
0x19820FFF Lyn
0xFFE6E6FF Micaiah
0x Palla
0x325AB4FF Pr. Marth
0xDC3400FF Roy
0x Seliph

Link to comment
Share on other sites

I posted the hair colors child units are given if they're generated with no parent a while back. All of them match their official art except for Yarne and Morgan. I planned to do what you did but fully complete. Even the appearance details for the Logbook avatars.

Link to comment
Share on other sites

Looks like we might owe SciresM another big thank you. This was released a few days ago: https://gbatemp.net/threads/release-3ds-builder.388858/

Awesome to see this getting used -- Fire Emblem: Awakening was actually one of the games I used to test the program before releasing it :)

(It's the only one I know of with Japanese filenames).

Edited by SciresM
Link to comment
Share on other sites

Dunno if anybody has said this. So regarding that list of characters from the character table, turns out the 54th entry may actually be the Maiden that is used for Chrom. The lists we have call it "Dummy" but I basically followed the parent pointer of my Maiden!Lucina.

lLn86OA.png

The list

1. Avatar_M
2. Avatar_F
3. Avatar_N
4. Chrom
5. Lissa
6. Frederick
7. Virion
8. Sully
9. Vaike
10. Stahl
11. Miriel
12. Kellam
13. Sumia
14. Lon'qu
15. Ricken
16. Maribelle
17. Panne
18. Gaius
19. Cordelia
20. Gregor
21. Nowi
22. Libra
23. Tharja
24. Olivia
25. Cherche
26. Henry
27. Lucina
28. Say'ri
29. Basilio
30. Flavia
31. Donnel
32. Anna
33. Owain
34. Inigo
35. Brady
36. Kjelle
37. Cynthia
38. Severa
39. Gerome
40. Morgan_M
41. Morgan_F
42. Yarne
43. Laurent
44. Noire
45. Nah
46. Tiki
47. Gangrel
48. Walhart
49. Emmeryn
50. Yen'fay
51. Aversa
52. Priam
53. Marth_FE1
54. Dummy
55. Unpromoted_Monster
56. Promoted_Monster
57. Merchant

Does anybody have an image of the breakdown of the character/support table bytes? This is basically static.bin right?

If I remember right, these character tables have the growth rates but it's encrypted, right? I think the creator of FEXNA wanted to know the growth rates of the Maiden.

And with Rey's nifty code thing. When I made a guest avatar that character, the only thing that changed was "Child: Lucina" was added, and there is no bio info on the avatar. So basically that character table does not have a name or portrait to go with it. It becomes "Unknown" if there is no Logbook pointer.

Edited by Jacien
Link to comment
Share on other sites

Haha, well yea. Just thought I'd bring it up, because I was wondering what the pointer would be for a Maiden!Lucina.

Man I hope If can be RAM dumped like Awakening, and I hope the structure is the same for the character roster at least. I must give my Kamui the same red hair color my Robin has lol.

EDIT: Oh, I get it. It's "Dummy" cause the player has to be a dummy if they don't have Chrom shipped by then. mirite (no just drunk)

Edited by Jacien
Link to comment
Share on other sites

Its sad, but I don't think ram hacking would work for FE:If because it probably need higher than 9.0.

We can spoof firmware now.

Also, I'm sure Vincent's probably the only one that can help me find out how Event files work in RAM.

X012.cmb

...like, finding the pointer to where the event text comes up so I can make a code that works every time to zero out the event flags.

So you can recruit both Morgans effortless... err... RELATIVELY effortlessly.

Edited by shadowofchaos
Link to comment
Share on other sites

And the browser exploit works all the way up to 9.5-22, by the way; was patched in 9.5-23.

If you have emuNAND, you can install the browser timewarp to get it working past that firmware.

Link to comment
Share on other sites

I just remembered, didn't FE Awakening have a demo download available?

Has anyone opened it up and looked for anything interesting?

I don't think so, but if anybody can decrypt it, I'd love to take a look.

Which reminds me, I still have the DLC files, which SciresM helped to decrypt.

For the most part, I know how to pull out the files, but FE if and other things have been eating at my time XD

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...