Can anyone verify this Fire Red save file as 100% Legitimate?

[MichaelJackson]

I know this will take time I suppose (checking event flags, PIDs, amongst other miscellaneous data to truly verify, etc.) but I wanted to ask if anyone could verify the save file, including the Pokemon on it (not many). From what I am told, the save file is post-game and the individual released all Pokemon except ones of note (such as one-time encounters like the Legendary Birds, Mewtwo, Starter, etc.). They also have a Deoxys that they swear is 100% legitimate from the actual real life event back in the day as well as the Lugia from XD: GoD. Equally important, I am personally curious as to what, if anything, is not 100% legitimate.

 

So, yeah - in short, I just want to see if anyone would be kind enough to spare some time out of their day/night to do a deep dive on it.

Thank you! -MJ

FR_PostG_Legit_Deox-Lugia.sav

[Kaphotics]

• Did not receive Mystic Ticket, yet can travel to Navel Rock? Hasn't even shown the Aurora ticket to the captain, yet has the flags to be able to travel to both event islands.
• Every single pokemon in the boxes has default friendship.
• Articuno/Moltres/Zapdos all share the same unremarkable PID/IV. Possible modified from each other.
• Snorlax PID/IV is exactly the same as ^ except with the top bits flipped. Very suspicious.
• Eevee (leftmost) has the exact same IV spread. Extremely suspicious for an egg.
• Venusaur and Blastoise are level >90 and have 0 EVs. Venusaur has all ribbons (including contest stats) without any pokeblocks used. Insanely suspicious.
• The Suicune in the Roamer data does not match the Suicune they captured.
• Every single TM is owned (in bag), but multiple Pokemon have TM moves learned. Somewhat suspicious.
• Initial E4 clear has an entirely different Charizard PID (4A5E25BB) from the one in party (C2947D2E). Both are level 100. The TID/SID is different from the novelty TID of the save file, implying that the save file TID/SID was changed.
• The Hall of Fame only has 2 entries, implying the Hall of Fame was only cleared one extra time. Strange that the team has none of their OT present, and instead shows level 100s from various trainers instead.
• 4/6 party members have 3/3 PP Ups. All have 252/252/6 EVs (except Venusaur, as mentioned above, has no EVs).
• The save file has only been saved 60 times. Very suspicious for someone with 600 hours played.
• Only 124 Pokémon were captured. Very hard to fill out boxes with such a small amount.
• Only healed in the pokecenter 19 times. Crazy low amount.
• Only received ribbons once, which makes sense for the duplicate Hall of Fame clears.
• Used the daycare 8 times? hatched less than 2 dozen eggs? getting vgc-player vibes here.
• Only did 9 trades. lmao. You can't complete the pokedex with only 9 trades, sorry.
• Pokedex is complete, but Spinda's PID is still uninitialized (zero), implying the pokedex was cheated to complete.
• Lugia has the exact same IVs as the other 3 birds. Come on.
• Only traded 9 times, deoxys has been trained, yet still has 0 friendship. Entirely possible it was traded away then traded back and never touched again, still sus.
• Nickname trash bytes missing on every single pokemon is incredibly suspicious -- except the Ditto sequestered in the daycare (which has trash bytes as expected!).
• Zero link battles recorded, yet has the sticker for link battles. nope.

This is not a clean save file.

[MichaelJackson]

11 hours ago, Kaphotics said:

This is not a clean save file.

Thank you SO much for the detailed list. I let them know about this and this was their response to some of those points (copy and pasted from them)...I will just list your points with "Q" and theirs with "A".

Q: Articuno/Moltres/Zapdos all share the same unremarkable PID/IV. Possible modified from each other.
A: "i will admit i did generate legendary birds (and maybe even Lugia) at one point but i thought that was on a different save and not this one. regardless tho, that is literally how the program pkhex generated them (which they claim generates legit pokemon but apparently not if they give all same friendship and pid/ivs)."

Q: Venusaur and Blastoise are level >90 and have 0 EVs.
A: "i used vitamins or rare candies i believe"

Q: The Suicune in the Roamer data does not match the Suicune they captured.
A: "there's nothing stating it has to....i had/have multiple save files with the same trainer name so it was most likely traded over or something."

Q: Every single TM is owned (in bag), but multiple Pokemon have TM moves learned. Somewhat suspicious.
A: "what would be suspicious about that? you can trade games and teach moves."

Q: The save file has only been saved 60 times. / Only healed in the pokecenter 19 times. Crazy low amount. / Used the daycare 8 times? hatched less than 2 dozen eggs?
A: "where exactly in the program do you see this? i will download it and check it out myself."

Q: Pokedex is complete, but Spinda's PID is still uninitialized (zero), implying the pokedex was cheated to complete.
A: "what does this even mean and where do you see this?"

Q: Lugia has the exact same IVs as the other 3 birds.
A: "again, COULD have been generated that i mistaken for another save of mine. but if it was generated, that is pkhex's fault then for claiming to give legitimate pokemon"

Edited 4 hours ago by MichaelJackson

[theSLAYER]

54 minutes ago, MichaelJackson said:

Thank you SO much for the detailed list. I let them know about this and this was their response to some of those points (copy and pasted from them)...I will just list your points with "Q" and theirs with "A".

Q: Articuno/Moltres/Zapdos all share the same unremarkable PID/IV. Possible modified from each other.
A: "i will admit i did generate legendary birds (and maybe even Lugia) at one point but i thought that was on a different save and not this one. regardless tho, that is literally how the program pkhex generated them (which they claim generates legit pokemon but apparently not if they give all same friendship and pid/ivs)."

Q: Venusaur and Blastoise are level >90 and have 0 EVs.
A: "i used vitamins or rare candies i believe"

Q: The Suicune in the Roamer data does not match the Suicune they captured.
A: "there's nothing stating it has to....i had/have multiple save files with the same trainer name so it was most likely traded over or something."

Q: Every single TM is owned (in bag), but multiple Pokemon have TM moves learned. Somewhat suspicious.
A: "what would be suspicious about that? you can trade games and teach moves."

Q: The save file has only been saved 60 times. / Only healed in the pokecenter 19 times. Crazy low amount. / Used the daycare 8 times? hatched less than 2 dozen eggs?
A: "where exactly in the program do you see this? i will download it and check it out myself."

Q: Pokedex is complete, but Spinda's PID is still uninitialized (zero), implying the pokedex was cheated to complete.
A: "what does this even mean and where do you see this?"

Q: Lugia has the exact same IVs as the other 3 birds.
A: "again, COULD have been generated that i mistaken for another save of mine. but if it was generated, that is pkhex's fault then for claiming to give legitimate pokemon"

As it stands, this point below in itself is sufficient to prove that the save itself isn't clean. Everything else was just a really sweet and juicy cherry on top.

Quote

Did not receive Mystic Ticket, yet can travel to Navel Rock? Hasn't even shown the Aurora ticket to the captain, yet has the flags to be able to travel to both event islands.

You cannot legitimately trigger those flags in the wrong order. I am sorry to say that the save is definitely not clean and the story about receiving the ticket on this save is patently false, full stop.

Nothing they can say will change that ><

 

---

Not part of the main point, but rather just adding on:

Spoiler

Quote

what does this even mean and where do you see this?

It's either labelled in PKHeX (I can't remember), or the dev of PKHeX knows where to find it.
We're also not here to give instructions that potentially can be used to try to create/fake a clean save, do understand that not every point will be revealed.

 

[Kaphotics]

2 hours ago, MichaelJackson said:

Thank you SO much for the detailed list. I let them know about this and this was their response to some of those points (copy and pasted from them)...I will just list your points with "Q" and theirs with "A".

Q: Articuno/Moltres/Zapdos all share the same unremarkable PID/IV. Possible modified from each other.
A: "i will admit i did generate legendary birds (and maybe even Lugia) at one point but i thought that was on a different save and not this one. regardless tho, that is literally how the program pkhex generated them (which they claim generates legit pokemon but apparently not if they give all same friendship and pid/ivs)."

PKHeX generates "legal" Pokémon. "Legit" Pokémon are unmodified, naturally encountered. Terminology aside, this is how the program works when you use the encounter database. The program looks at what you wanted in the GUI editing tabs (criteria) and uses it when generating a new Pokémon from template. The Criteria tab is automatically populated with the "request" data when opening the form.

Q: Venusaur and Blastoise are level >90 and have 0 EVs.
A: "i used vitamins or rare candies i believe"

The suspicious part is that nobody farms the 80+ Rare Candy to dump into a Pokémon. The save file has no indication that Rare Candy was ever farmed, implying that either Rare Candy was injected to the player inventory, or the Pokémon's level was manually modified. Since the level is EXACTLY at 94, it's very weird as it would be expected to be used at least once after you dump that much resources into it. It (high-not-100 level & missing EVs) heavily implies it was externally modified and forgotten about.

Q: The Suicune in the Roamer data does not match the Suicune they captured.
A: "there's nothing stating it has to....i had/have multiple save files with the same trainer name so it was most likely traded over or something."

What kind of cope is this? The game generates the roamer when it is released for you to go find, and when you capture it, it takes on those properties. The Suicune, with your OT and TID/SID, do not match the Roamer data that it originated from. Just because you can reuse the same OT Name across save files does not mean that you can reuse OT-TID-SID exactly.

Q: Every single TM is owned (in bag), but multiple Pokemon have TM moves learned. Somewhat suspicious.
A: "what would be suspicious about that? you can trade games and teach moves."

If you have 1 single copy of every single-acquisition TM in the game, but have used said single acquisition TMs. The only way for this to make sense is that you traded for TMs/traded the PKM to another save file for THEM to use their single use TM, but again, the save file stats show the save file only traded 9 times.

Q: The save file has only been saved 60 times. / Only healed in the pokecenter 19 times. Crazy low amount. / Used the daycare 8 times? hatched less than 2 dozen eggs?
A: "where exactly in the program do you see this? i will download it and check it out myself."

Misc edits -> Records. Common mistakes with users who fudge their data, they inject whatever they want and toggle whatever seems appropriate, but they forget that the save file has to have signs of being played thoroughly to have thoroughly acquired all the resources.

Q: Pokedex is complete, but Spinda's PID is still uninitialized (zero), implying the pokedex was cheated to complete.
A: "what does this even mean and where do you see this?"

The game remembers what form (Unown) and spot pattern (Spinda) that you first witnessed when registering the species data in the Pokédex. The save file has a nonzero value for Unown, but Spinda (a not-FRLG species, must be traded) is still at the default PID value of 00000000, implying it was never received in a trade (and thus the Pokédex completion flags were hacked). This lines up with the fact that the save file records indicate only 9 trades. Didn't trade for much of anything, no less a Spinda. Block Data shows this property because the Pokédex editor provided in PKHeX is shared with Gen1/2 and not specialized for all Gen3 features.

Q: Lugia has the exact same IVs as the other 3 birds.
A: "again, COULD have been generated that i mistaken for another save of mine. but if it was generated, that is pkhex's fault then for claiming to give legitimate pokemon"

Again, not PKHeX's fault. The user forgot to update the generating criteria and thus re-generated the same data across templates. User error. The Pokémon themselves are legal in isolation, but clearly indicative of being externally modified by association. Nobody is using RNG abuse to encounter the exact same unremarkable trash spread to match the PID/IV of a Lugia from XD; it's obvious that things were generated (yet not precisely customized).

Response inline. They shouldn't be trying to make excuses for why their modifications are clearly detectable, they should just own up to it.

I wouldn't put any value on the save file, even if you only consider Lugia and Deoxys with the assumption that they were encountered without any cheats being active. They are simply unremarkable. Sure they may have completed XD legitimately, but they hacked in the event ticket item+flag to encounter Deoxys.

[MichaelJackson]

13 minutes ago, Kaphotics said:

I wouldn't put any value on the save file, even if you only consider Lugia and Deoxys with the assumption that they were encountered without any cheats being active. They are simply unremarkable. Sure they may have completed XD legitimately, but they hacked in the event ticket item+flag to encounter Deoxys.

Honestly, thanks you again, so much, for the responses. I will now let them know this info. and will not be buying the save/game from them.

I know it's a lot to ask, but they also have an Emerald save/game - at this point, based on this particular save file, it definitely could also be tampered with, but if you, or anyone, have any extra free time, I could upload that save file as well to this post after work to deep dive that one as well. Really appreciate everything.