Kaphotics

Does CyberGadget use the same technique as Datel for editing saves?

Same technique of gathering data and having the server deal with it.

However, they give you more freedom by allowing you to modify the save file instead of choosing from a set list of allowed codes.

We can inject WonderCards with the CyberGadget device and actually have them be added to the cart's savefile?

Yes; the output code will write to your save's wondercard data, effectively adding the wondercard.

So I have Japanese 3DS and all I need is this device, right? And after extracting save file using this device, what else do I have to do to edit it with PKHeX? The OP's link only suggests how to do it with Powersaves.

We don't know of anyone with the device (hasn't been 24h since they started support?) so I don't have an idea of how to handle the data.

Depending on what recon people provide in terms of what CyberGadget provides (Decrypted save size loading/etc) I can add in later releases.

Big thanks to Codemonkey85 for implementing the Box Data Report functionality. Guess you got what you wanted, thagrouch

07/24/14 - New Update:

• Fixed: Shinifying now behaves properly
  
• Fixed: Invalid ID/SIDs are now no longer enterable
  
• Added: Box Data Report - Generates a verbose info table with all of the data from the Pokemon loaded/imported in the boxes.
  
• Changed: Code Generator now exports codes compatible with the CyberGadget save editor. Currently, only Box and Wondercard insertion is supported.
  
  • Add 0xE8 to a Box Offset, 0x108 for Wondercards to change from Slot 1.
    

(TID ^ SID) >> 4 = TSV

((PID >> 16) ^ (PID & 0x10)) >> 4 = ESV

if TSV == ESV, it's shiny.

People find their egg's ESV and find a trainer with the same TSV to hatch it shiny.

As for getting the actual rate (amount of re-rolls done to the PID), it is not known at this time. There won't be ways to RNG in X/Y so the only sure way to get shinies is to abuse ESVs.

That's the amount of moves contained in the file.

You can always use KeySAV/Mass Dumper/KeySAV2 to dump the info of everything; then just search for the TSV in the printout.

07/20/14 - New Update:

• Fixed: Pokerus now saves properly, viewing was unaffected.
  
• Fixed: Memory viewing no longer errors out in some cases.
  
• Fixed: Incomplete Language translations no longer cause errors.
  
• Fixed: PP of Outrage fixed to 10.
  
• Fixed: Exporting filenames with invalid characters are now removed.
  
• Removed: Species button "nickname" ; functionality moved to clicking the Species label.
  
• Added: Unchecking Nickname will set the species name.
  
• Added: Preventing export of invalid IVs/EVs
  
• Added: Mega selection for the 4 ORAS megas revealed thus far. Ability/Stats are not implemented.
  
• Added: RAM Edit Code Generator
  
  • Exports codes for Tabs/Box Pokemon, and Wondercards. Specify the write offset.
    
  • Requires a hacked 3DS with redirected nand and a spawned thread running the code interpreter.
    

Do not ask how to use the Code Generator -- it requires a hacked 3DS with custom firmware and the interpreter is not finished.

Loaded Code (sample cheats.bin), and Tab Data

dump your data via KeySAV/KeyBV and open the pokemon in PKHeX to view your SID.

You cannot keep&restore backups of digital copies, so extracting is pretty useless besides dumping wondercards/pk6 data.

You have to dump from a box which has been [dumped while empty]. Move them to your 1st/2nd box and they should appear.

You have to save your key where it initially opens to; it's not a suggestion. The \data\ folder will store your keys and is where it will look when finding a given key.

more mii qr code info:

http://3dbrew.org/wiki/PSPXI:EncryptDecryptAes#Key_Types

http://3dbrew.org/wiki/NS

http://3dbrew.org/wiki/APT:Unwrap

http://3dbrew.org/wiki/APT:Wrap

Mii QR codes use keytype2 @ keyslot 0x31 and the wrap/unwrap commands to en/decrypt data with a 0x8 sized nonce.

ORAS secret bases are possibly using a 0xC nonce (at the start of the data[]) and follow a similar struct. Why change it if it already works?

byte[] qr = 0x24D

via http://www.thonky.com/qr-code-tutorial/data-encoding/

starting 4 bits is mode (since it is 0100 it is byte encoding)

qr code in picture is scaled by 2 to 162x162, normal dimensions are 81x81 - version 16 qr code.

next 16 bits are character length - 0x0238

01000000 00100011 1000[data][padding 0bits if bitlength%8!=0][EC 11 to fill max length]

so in summary:

qr[] =

4 bit mode (byte mode)

16 bit length (0x238)

byte[] 0x238 data

4 bit unused padding

remainder (0x12 byte) unused EC 11 pads.

data[] =

0xC header[](?)

0x4 zeros

0x228 data2[](?)

Mii QR Code structure & Encryption (3dbrew)

with that said, here's the trimmed data for the QR codes (just the data[])

qr_data.zip

I have not been able to keep up with ProjectPokemon since the release of X/Y so I don't know how to extract the Wonder Cards from the .SAV file but I have included my retail cart saves for both games. On each I have collected the Torchic (via Nintendo Network), Celebi (via Pokemon Bank) and Vivillon (via Nintendo Network). If someone can point me to the tools for extracting the information I will use that method in the future.

You'd either need a before-save or your encryption pad.

If you are using a digital/eshop copy, you have to have a save file backup before; then just XOR the saves together and extract your data from the related offset.

If you have a powersaves device you can get a piece of your encryption pad using the following method. Doing that you can decrypt your savegame and load it in PKHeX to view all the data you wish.

Then again... all of the events you've listed have already been contributed

What? Powersaves only collects data from your cartridge before sending it to their servers.

All alterations are done outside of their program, on their servers.

Communications work like this:

CartReader gets ROM data -> Transmit to Datel

Datel transmits back the encrypted card-reading commands (this is why online is required).

The CartReader gets the save data -> Codes / Options are now shown.

If you choose codes, you send off your ROM data and Save file, and then they apply the codes, send you back the edited save file, then the dongle writes the save using the stored card-reading commands.

It's not a simple process; the 3DS has some very intense encryption which cannot be emulated by a computer program. Your ideas are not new; if it was possible it would already be done.

Not possible; Powersaves will not re-sign save files that have been edited.

They verify that it hasn't been edited before applying their own codes.

edit save file on the flashcart to add files -> trade from flashcart to retail cart.

You have to edit the SAV in PokeGen to add the wondercard. Fake wondercard pokemon aren't "legit", they're legal as you cheated to get them in the game.

DeSmuME plays games, and do not ask for ROMs as sharing links/files is illegal.

play on an emulator,

edit the save file,

receive wondercard pokemon on emulator,

use pokegen to get pkm file,

generate AR code for pkm.

Basically, just header/hash and other save administrative stuff. Read more about it on PP's wiki as well as 3dbrew's savegame struct

Restore old backups, and if possible transfer everything you can to Bank. PowerSaves is known to break carts.

R4i dongle doesn't rip X/Y saves.

You didn't decrypt it.

PKHeX will interpret it as fully decrypted if it detects the DISA/DIFI blobs, or else it will ask you to load a given save.

Hello, first state that I am Spanish and use a translator, so sorry for errors.

I managed to successfully PKHEX read my getaway ... with the only question that I save changes from 1 to save 2, which the latter does not pose data ...

the fact is that even so I can see my starting pokemon and no problem ...

but .. What is the purpose of todoe this?

Is there way and then return the modified save my game?

I see truncated or pokemon Stock Hoppa and Volcarion.

How I can get them?

Please inform me if there are ways.

Thank you

If you read the first line of the first post, you'd know injection is not possible to YOUR save game at the moment. This tool can view dumped data, and can create data that you can inject to your RAM if you have a modded 3DS.

can you be so kind to link me the page of bond on projectpokemon en the link to his twitter ?

https://twitter.com/Bond697

Fixed 3->4 IV conversion for nicknamed Pokemon, and fixed 5th gen filenaming when PKM extension is selected.

Added a Open button for Wine Users who can't use drag & drop.

The uncertain data will auto-delete itself the more you use the program. The program observes the data on the save and can't know if A^B is (Empty,Full) or (Full,Empty) until it has observed another decryptable state.

KeySAV doesn't generate the entire XORpad when it breaks (it can't), and to help streamline things it can't assume anything. The more you use the program, the more will be unlocked. Try dumping with the boxes empty, then the boxes full, then move different data around and it shouldn't be marked.

As for the met game displayed: there's so much data that it's best that the user just opens it in PKHeX. If you really must have it, create a fork and add it! (In the source there is a class/structure that you can ez get data with)

^ Fixed