Haxchi first gains root access using [[Uhshax]]. It then takes advantage of the contenthax bug, which allows every part of a title except the actual code to be modified without invalidating it. In the case of Virtual Console games, this code is the emulator, not the game’s code, which means the game itself can be modified. Haxchi replaces the game’s code with a sequence of bytes that sets up ROP, and therefore can pass code execution to itself. Haxchi also replaces the title and banner of the game, since these are not checked either, to look like a different title. | Haxchi first gains root access using [[Uhshax]]. It then takes advantage of the contenthax bug, which allows every part of a title except the actual code to be modified without invalidating it. In the case of Virtual Console games, this code is the emulator, not the game’s code, which means the game itself can be modified. Haxchi replaces the game’s code with a sequence of bytes that sets up ROP, and therefore can pass code execution to itself. Haxchi also replaces the title and banner of the game, since these are not checked either, to look like a different title. |