(adsbygoogle = window.adsbygoogle || []).push({}); Ok guys. I have made this thread because I am getting lots of questions about how to find. Edit patch and files contained within. If your stuck on a part ask the question here.

No questions about dycrypting hdd if you havnt figured how that works. The patch is gonna be far to complicated for you.

Also new ideas welcome

if my answer was helpfully don't forget the thanks and rep guys

oK found all the 78 da references but can't identify the end of them. I though it would be ff ff ff ff but its not in the file. Also my data recovery program only shows me cod images not zlib files when i run it. Some of the images are quite cool

What data recovery program are you using? R studio is what I used once it scanned it will tell you what file types are in the ff. Start byte and end byte

Can you give some more info about the *.ff files? Mines are 144kb is that correct? When I scan the files in R-Studio nothing is recognized.

Did you decrypt on 3.30 or lower firmware?

I used r studio, saved the patch as bin file so i could search an image and no ff files. Should I scan the whole decrypted bin or just the two iwff files?

Firmware is unimportant I dycrypted on 3.21 and 3.30both FAT format. And the file size for ff seems right

---------- Post added at 10:19 AM ---------- Previous post was at 10:15 AM ----------



You already found the ff so no need to scan for them. You need to scan for zlib blocks within the ff files

Is there and option in scan to get it to only search for zlib blocks or do you just scan all? I get extra files found then a folder called root with nothing in it. My files are both 129kb

Dude..... You don't need to recover data with r studio use it as a defence to find the first and end byte of zlib blocks then u use hxd to copy them bytes to a new file with a zlib extention. Then you can decompiled then recompile to same ratio. Get it?

1st time using r-studio so no idea?

I found the beginning of the zlib block,but I am having problems to find the end of the zlib block!!!!.
Is the end of the zlib block just before the second 78da block?