PS3 Need help modifying Assassin's Creed II save file

[bucanero]

great, thanks for sharing @Devildwarf

I'll create ".savepatch" files for all these new AC titles, even if we don't have cheats or more useful codes right now, having the CRC fixes will allow anyone to hex-edit saves now or in the future

AC games are popular so I'm sure someone will want to edit and mod saves

 

[ChestnutEnjoyer]

Today I modified my options file too and I can happily say it worked for me. I also took the opportunity to add all the missing content that can't be obtained nowadays. I've tried to extend the BSD script made by @bucanero , but I've never made one before, so could someone double check it?

;BLUS30364
; assassin creed 2
; crc fix by devildwarf

:OPTIONS

[Enable Auditore crypt Uplay map]
00000498 00000001

[Enable Uplay Altairs outfit]

00000486 00000001

[Enable Uplay knives upgrade]
00000474 00000001


[Enable Verizon App Store Bonus skin]
0000041A 00000001

[Update Custom CRC32 OPTIONS (Required)]
set crc_bandwidth:32
set crc_polynomial:0x4C11DB7
set crc_initial_value:0
set crc_output_xor:0x1bf3278a
set crc_reflection_input:1
set crc_reflection_output:1
set [size]:read(0x00,4)
set range:0x0008,[size]+7
set [hash]:crc
write at 0x0004:[hash]

I will also attach my Options file. It has a different region, though (BLES0669). Note: I had to upload the OPTIONS file as a .txt because the forums didn't allow me to upload it without any extension, but the file itself should have the extension removed.

 

[Devildwarf]

great, thanks for sharing @Devildwarf

I'll create ".savepatch" files for all these new AC titles, even if we don't have cheats or more useful codes right now, having the CRC fixes will allow anyone to hex-edit saves now or in the future

AC games are popular so I'm sure someone will want to edit and mod saves

Yeah hopefully it will allow people in the future to unlock Uplay content (providing they can figure out which file in OPTIONS they need to change) which can no longer be gotten.

Today I modified my options file too and I can happily say it worked for me. I also took the opportunity to add all the missing content that can't be obtained nowadays. I've tried to extend the BSD script made by @bucanero , but I've never made one before, so could someone double check it?
I will also attach my Options file. It has a different region, though (BLES0669). Note: I had to upload the OPTIONS file as a .txt because the forums didn't allow me to upload it without any extension, but the file itself should have the extension removed.

Just had a quick go of the script and it seems to work great, it patches the bytes listed with 01 and doesnt touch others and the CRC seems to be set correct, so it should be all good, region shouldn't matter (i say shouldn't but i also haven't tested every region to make sure, or with different patch versions)

 

[bucanero]

Today I modified my options file too and I can happily say it worked for me. I also took the opportunity to add all the missing content that can't be obtained nowadays. I've tried to extend the BSD script made by @bucanero , but I've never made one before, so could someone double check it?

Codes are Ok, thanks for sharing. I added them to Apollo for both BLES/BLUS titles

 

[bucanero]

Yeah hopefully it will allow people in the future to unlock Uplay content (providing they can figure out which file in OPTIONS they need to change) which can no longer be gotten.

Btw, I added the CRC fixes for the other AC games that you tested. But I was reviewing your save files and confirmed that some AC games are using double custom encryption on the game-save (but not on the OPTIONS file)

So from reviewing your 7zip saves, these are using custom encryption:
- AC Revelations (AC2_0.SAV)
- AC III (AC3_0.SAV)
- AC IV black flag (AC4_0.SAV)

But as mentioned, OPTIONS file on those games are not encrypted, so the CRC fix works fine.

If anyone has Apollo installed you can get the new patches easily, just go to "Settings" and select "update application data". (PS3 must be connected to the internet)

 

[Devildwarf]

Btw, I added the CRC fixes for the other AC games that you tested. But I was reviewing your save files and confirmed that some AC games are using double custom encryption on the game-save (but not on the OPTIONS file)

So from reviewing your 7zip saves, these are using custom encryption:
- AC Revelations (AC2_0.SAV)
- AC III (AC3_0.SAV)
- AC IV black flag (AC4_0.SAV)

But as mentioned, OPTIONS file on those games are not encrypted, so the CRC fix works fine.

If anyone has Apollo installed you can get the new patches easily, just go to "Settings" and select "update application data". (PS3 must be connected to the internet)

OK seems a error must have happened in BSD and they didnt decrypt properly, i looked at the files i uploaded and they are messed up, sorry about that, here are just the main saves again, decrypted properly this time, sorry again @bucanero
https://drive.google.com/file/d/1YWgit_CB1YEsoRSqpJ1lL09uopiWC2o4/view?usp=sharing
thats just the main saves since you said OPTIONS was ok, all appear to be decrypted properly this time, i wonder if maybe i removed my ID before decrypting or something by mistake on some saves ? either way im sorry.

 

[JediKnight007]

Ok took a quick look at this, im no expert on checksums and checks but here is what i have noticed so far, the first 8 bytes appear to be the check, if you look at the .SAV files first 8 bytes in a hex editor you will see something like the picture below,
after looking at the values the first 4 bytes i noticed they appear to be the length of the file WITHOUT the checksum itself so
00 01 BE F5
is the filelength minus the first 8 bytes (so the save itself is 0x01BEF5 long)
Now the real problem is the next 4 bytes,
99 96 4F 0E
they are most likely the actual checksum, we need to know how this checksum is generated to be able to edit saves,
Anyway i hope this info is useful to you, im going to keep looking into this but as i said above im not great at this sort of thing.
I also tried download a bunch of different saves of thetechguy site but none of them have the uplay map as far as i can see

I decrypted the Liberation OPTIONS file, and the first 4 bytes were...

00 00 05 5E

This is 1,374 decimal, but the file size is 51,200. 51,192 is C7F8 hex. Same thing with the bk_0.sav and ac3_0.sav files, first 4 bytes don't come close to matching the file size - 8 bytes. It seems this game is different than the other PS3 AC games.

 

[Devildwarf]

I decrypted the Liberation OPTIONS file, and the first 4 bytes were...

00 00 05 5E

This is 1,374 decimal, but the file size is 51,200. 51,192 is C7F8 hex. Same thing with the bk_0.sav and ac3_0.sav files, first 4 bytes don't come close to matching the file size - 8 bytes. It seems this game is different than the other PS3 AC games.

thats standard, OPTIONS and .SAV files are padded (filled with zero's) on all games after AC2, the actual data should still end where the first 4 bytes said, so if you remove the first 8 bytes (0x00 to 0x07) then jump to 055E address you will notice the data ends there (as in everything after will just be zero's)

 

[JediKnight007]

@Devildwarf

Is there any trick to knowing what byte controls what? I know you have to change a 00 to 01 to enable stuff, but there are a lot of 00s. Does it boil down to just changing random bytes and experimenting? I tried looking for a hex map like in this thread's first post, but no luck.

 

[Devildwarf]

@Devildwarf

Is there any trick to knowing what byte controls what? I know you have to change a 00 to 01 to enable stuff, but there are a lot of 00s. Does it boil down to just changing random bytes and experimenting? I tried looking for a hex map like in this thread's first post, but no luck.

Yeah without a "savemap" its hard to guess what the correct bytes are, in AC2 a lot of the uplay stuff is 0B 00 for locked and 0B 01 for unlocked but i have no idea if the other AC games use that, there is still a lot of testing that needs to be done for Uplay stuff, we are really in uncharted territory here, The savemap posted at the start of this thread was a great help for AC2 but without somthing similar the best we could probably do is compare saves that have it unlocked vs saves that don't and see which bytes are different (assuming you can find a save with it unlocked) Even a PC save might help to do this (PC saves are encrypted but there is a tool called "ACsavetool" which can decrypt them) if you can find saves on the net that have the rewards unlocked and ones that dont then compare them.

 

[bucanero]

OK seems a error must have happened in BSD and they didnt decrypt properly, i looked at the files i uploaded and they are messed up, sorry about that, here are just the main saves again, decrypted properly this time, sorry again @bucanero
https://drive.google.com/file/d/1YWgit_CB1YEsoRSqpJ1lL09uopiWC2o4/view?usp=sharing
thats just the main saves since you said OPTIONS was ok, all appear to be decrypted properly this time, i wonder if maybe i removed my ID before decrypting or something by mistake on some saves ? either way im sorry.

oh alright, I'll check again and compare, then test the CRC fix with the main data saves.

 

[Rogan]

If it may be of any use, I still have the uplay stuff unlocked for Brotherhood (except the Medici and Venetian cape as those were tied to the save files themselves and not the options file far as i remember) and Revelations. Can provide you my saves for research for those games aswell if needed

EDIT: Here's a link to a zip file with the saves for both Brotherhood and Revelations i've uploaded on my google drive (options files also included): https://drive.google.com/file/d/1qzPjOICBYLAUDoI2DhXQyEly9_HnxsB2/view?usp=drive_link

 

[EruditosNetwork]

Hello everyone!

I've been closely following this discussion and was thrilled when I found out you guys managed to successfully unlock this content for ACII on a OFW PS3. I'm gonna be honest, this achievement inspires me. So, I've decided to reach out to you with a proposal: I wanna create a video tutorial so everyone can unlock this content. Now, I'm not a pro doing this kind of things. So, if someone is willing to explain to me how to unlock it step-by-step, I can record everything, edit it, and upload it to YT. And rest assured, full credit will be given to those responsible for this remarkable feat.

I think it would be an amazing christmas present to the AC community in general.
What do you say?

 

[Devildwarf]

If it may be of any use, I still have the uplay stuff unlocked for Brotherhood (except the Medici and Venetian cape as those were tied to the save files themselves and not the options file far as i remember) and Revelations. Can provide you my saves for research for those games aswell if needed

EDIT: Here's a link to a zip file with the saves for both Brotherhood and Revelations i've uploaded on my google drive (options files also included): https://drive.google.com/file/d/1qzPjOICBYLAUDoI2DhXQyEly9_HnxsB2/view?usp=drive_link

Nice, thanks a lot for that i will take a look at that over the weekend if i get chance, it could help a lot for figuring out the bytes but on the other hand if you already have everything unlocked it might be possible for people to just use your OPTIONS file so this is extremely helpful either way.

Hello everyone!

I've been closely following this discussion and was thrilled when I found out you guys managed to successfully unlock this content for ACII on a OFW PS3. I'm gonna be honest, this achievement inspires me. So, I've decided to reach out to you with a proposal: I wanna create a video tutorial so everyone can unlock this content. Now, I'm not a pro doing this kind of things. So, if someone is willing to explain to me how to unlock it step-by-step, I can record everything, edit it, and upload it to YT. And rest assured, full credit will be given to those responsible for this remarkable feat.

I think it would be an amazing christmas present to the AC community in general.
What do you say?

OK well OFW can't run Apollo so i would
1 - Copy a save from AC2 to a USB on the PS3 then to your PC
2 - Install BruteForceSavedata and open it, then in Browse select the folder you copied the save from.
3 - Decrypt the save using the keys posted earlier in this thread (enter 0D0E0A0D0B0E0E0F0A0A0A0A0A0A0A0A into the games.conf in the BSD folder)
4 - Once decrypted i would try running the script posted above saved as .savepatch (although i haven't tested it in BSD it should work, i was testing it in Apollo)
5 - after running the script Encrypt the file again and copy back to PS3, it should work as long as the script does work in BSD itself (but again i haven't tested that)

*ALTERNATIVE*
Or if that doesnt work i would install RPCS3 and install OFW then install Apollo into RPCS3 and update it, then copy your save into
dev_hdd0\home\00000001\savedata
then use Apollo to patch the save then resign it then copy it back to your PS3.

on HFW,CFW or DEX i would just run Apollo and do it all from there. Good luck and if there is any part that doesn't work or you need a hand with i will try and help in my spare time.

 

[ChestnutEnjoyer]

1 - Copy a save from AC2 to a USB on the PS3 then to your PC.

I'm afraid step 1 won't work with OFW since AC2 is copy protected. Alternatively, you can use an OPTIONS file from the internet. I attached my OPTIONS file in a previous post in this forum and it already contains the Uplay stuff unlocked. You could use that OPTIONS file and follow the steps 2 to 5 that Devildwarf mentioned and then follow step 6:

6- Resign the OPTIONS file so that its region/TitleID, ConsoleID and UserID match your game's region/TitleId and your PS3's ConsoleID and UserID

The region/TitleID depends on your game's region. You can find it on bottom part of your game case's spine. For example, mine is BLES0669. The ConsoleID and UserID can be obtained from another save file of a different game that isn't copy-protected. You can copy that savefile to your USB and then load it using BruteForce Savedata so that it can extract the UserID and consoleID. Here's a video showing how to do it:

@EruditosNetwork Feel free to ask for more details! I really like the idea of making a video so that more people can enjoy this lost content on PS3.

 

[EruditosNetwork]

I attached my OPTIONS file in a previous post in this forum and it already contains the Uplay stuff unlocked.

Yes, I saw it. Does it contain also the Bloodlines weapons? ?

Feel free to ask for more details! I really like the idea of making a video so that more people can enjoy this lost content on PS3.

Will do! I'll be working on it on these next days. Gonna keep you posted through here in case I need further assistance.
Thank you very much! Fingers crossed!

 

[CptStarwind]

Wow, I never thought I would actually see that someone got this to work!

I was trying to figure this out this exact problem a couple of years ago, as Assassin's Creed II was the only game I never connected to the UPlay servers. I got as far as figuring out that the unlocks were linked to the options file, but gave up when I realized I might need to try hex editing, which went completely over my head. I did make a few posts around the web to see if I could find a game save with the options file, and at least one of those posts seems to have been linked to this thread. Good to know that I was at least on the right track with it!

Thanks everyone who was able to get this to work!

 

[ChestnutEnjoyer]

Yes, I saw it. Does it contain also the Bloodlines weapons? ?

Nope, I didn't unlock those because I wanted to unlock them in ye olde style.
I haven't tested this bruteforce savedata script myself, but it should unlock the bloodlines weapons too:

;BLUS30364
; assassin creed 2
; crc fix by devildwarf

:OPTIONS

[Enable Auditore crypt Uplay map]
00000498 00000001

[Enable Uplay Altairs outfit]

00000486 00000001

[Enable Uplay knives upgrade]
00000474 00000001

[Enable Verizon App Store Bonus skin]
0000041A 00000001

[Enable Maria Thorpe LongSword]
0000056B 00000001

[Enable Fredricks Hammer]
0000056C 00000001

[Enable Mace of the Bull]
0000056D 00000001

[Enable Dark Oracle Bone Dagger]
0000056E 00000001

[Enable Twins Rapier]
0000056F 00000001

[Enable Boucharts blade]
00000570 00000001

[Update Custom CRC32 OPTIONS (Required)]
set crc_bandwidth:32
set crc_polynomial:0x4C11DB7
set crc_initial_value:0
set crc_output_xor:0x1bf3278a
set crc_reflection_input:1
set crc_reflection_output:1
set [size]:read(0x00,4)
set range:0x0008,[size]+7
set [hash]:crc
write at 0x0004:[hash]

 

[ChestnutEnjoyer]

Wow, I never thought I would actually see that someone got this to work!

I was trying to figure this out this exact problem a couple of years ago, as Assassin's Creed II was the only game I never connected to the UPlay servers. I got as far as figuring out that the unlocks were linked to the options file, but gave up when I realized I might need to try hex editing, which went completely over my head. I did make a few posts around the web to see if I could find a game save with the options file, and at least one of those posts seems to have been linked to this thread. Good to know that I was at least on the right track with it!

Thanks everyone who was able to get this to work!

Lol, I remember searching for more info about this a few months ago and your nickname popped up in some google searches. I even tried to contact you at some point to see if you have managed to unlock it haha. Actually, I think the OPTIONS file I've used was downloaded from someone who replied to one of your messages. We've come full circle .

 

[CptStarwind]

Lol, I remember searching for more info about this a few months ago and your nickname popped up in some google searches. I even tried to contact you at some point to see if you have managed to unlock it haha. Actually, I think the OPTIONS file I've used was downloaded from someone who replied to one of your messages. We've come full circle .

Hahaha indeed we have.

Honestly, I lost interest in figuring this out when I couldn't find any leads a couple of years ago. I figured it was something I couldn't do myself, and I didn't want to bother anyone else with what I figured no one else but me cared about. My life has gotten extremely busy the last couple of years, even moreso in the last few months, so I didn't really have much more time to devote to this other than a cursory search every once and a while. I did actually find this thread a while ago but it looked dead at that point, and about the only thing I thought I could contribute (that the unlocks were linked to the options file) you already knew, so I figured there was no reason to necro the thread. It was honestly dumb luck that I decided to look yesterday and found that it was actually solved!

I do, however, think I have something to contribute now, if people are interested. Assassin's Creed II was the only game I wasn't able to connect to UPlay before the servers shut down. I have the rest of the Assassin's Creed Series (Brotherhood, Revelations, III, Black Flag, Liberation, and Rogue) for the PS3, and I was able to connect to UPlay and (at the very least) generate the options file for all of them, with the exception of Rogue, but that one is still online so I can even do that one, too. If people are serious about wanting to figure out the flags in the options files for the UPlay downloadables, I'd be willing to upload all that I have.