Jump to content

Kaphotics

Helpful Member
  • Posts

    7271
  • Joined

  • Last visited

  • Days Won

    362

Everything posted by Kaphotics

  1. more mii qr code info: http://3dbrew.org/wiki/PSPXI:EncryptDecryptAes#Key_Types http://3dbrew.org/wiki/NS http://3dbrew.org/wiki/APT:Unwrap http://3dbrew.org/wiki/APT:Wrap Mii QR codes use keytype2 @ keyslot 0x31 and the wrap/unwrap commands to en/decrypt data with a 0x8 sized nonce. ORAS secret bases are possibly using a 0xC nonce (at the start of the data[]) and follow a similar struct. Why change it if it already works?
  2. byte[] qr = 0x24D via http://www.thonky.com/qr-code-tutorial/data-encoding/ starting 4 bits is mode (since it is 0100 it is byte encoding) qr code in picture is scaled by 2 to 162x162, normal dimensions are 81x81 - version 16 qr code. next 16 bits are character length - 0x0238 01000000 00100011 1000[data][padding 0bits if bitlength%8!=0][EC 11 to fill max length] so in summary: qr[] = 4 bit mode (byte mode) 16 bit length (0x238) byte[] 0x238 data 4 bit unused padding remainder (0x12 byte) unused EC 11 pads. data[] = 0xC header[](?) 0x4 zeros 0x228 data2[](?) Mii QR Code structure & Encryption (3dbrew) with that said, here's the trimmed data for the QR codes (just the data[]) qr_data.zip
  3. You'd either need a before-save or your encryption pad. If you are using a digital/eshop copy, you have to have a save file backup before; then just XOR the saves together and extract your data from the related offset. If you have a powersaves device you can get a piece of your encryption pad using the following method. Doing that you can decrypt your savegame and load it in PKHeX to view all the data you wish. Then again... all of the events you've listed have already been contributed
  4. What? Powersaves only collects data from your cartridge before sending it to their servers. All alterations are done outside of their program, on their servers. Communications work like this: CartReader gets ROM data -> Transmit to Datel Datel transmits back the encrypted card-reading commands (this is why online is required). The CartReader gets the save data -> Codes / Options are now shown. If you choose codes, you send off your ROM data and Save file, and then they apply the codes, send you back the edited save file, then the dongle writes the save using the stored card-reading commands. It's not a simple process; the 3DS has some very intense encryption which cannot be emulated by a computer program. Your ideas are not new; if it was possible it would already be done.
  5. Not possible; Powersaves will not re-sign save files that have been edited. They verify that it hasn't been edited before applying their own codes.
  6. edit save file on the flashcart to add files -> trade from flashcart to retail cart.
  7. You have to edit the SAV in PokeGen to add the wondercard. Fake wondercard pokemon aren't "legit", they're legal as you cheated to get them in the game. DeSmuME plays games, and do not ask for ROMs as sharing links/files is illegal.
  8. play on an emulator, edit the save file, receive wondercard pokemon on emulator, use pokegen to get pkm file, generate AR code for pkm.
  9. Basically, just header/hash and other save administrative stuff. Read more about it on PP's wiki as well as 3dbrew's savegame struct
  10. Restore old backups, and if possible transfer everything you can to Bank. PowerSaves is known to break carts.
  11. R4i dongle doesn't rip X/Y saves. You didn't decrypt it. PKHeX will interpret it as fully decrypted if it detects the DISA/DIFI blobs, or else it will ask you to load a given save.
  12. If you read the first line of the first post, you'd know injection is not possible to YOUR save game at the moment. This tool can view dumped data, and can create data that you can inject to your RAM if you have a modded 3DS. https://twitter.com/Bond697
  13. Fixed 3->4 IV conversion for nicknamed Pokemon, and fixed 5th gen filenaming when PKM extension is selected. Added a Open button for Wine Users who can't use drag & drop.
  14. The uncertain data will auto-delete itself the more you use the program. The program observes the data on the save and can't know if A^B is (Empty,Full) or (Full,Empty) until it has observed another decryptable state. KeySAV doesn't generate the entire XORpad when it breaks (it can't), and to help streamline things it can't assume anything. The more you use the program, the more will be unlocked. Try dumping with the boxes empty, then the boxes full, then move different data around and it shouldn't be marked. As for the met game displayed: there's so much data that it's best that the user just opens it in PKHeX. If you really must have it, create a fork and add it! (In the source there is a class/structure that you can ez get data with)
  15. Move1 and Move2 are empty, but Move3 is Flamethrower. Shenanigans on "not tampering with anything".
  16. KeySAV2 - now supports ORAS (BV or digital SAV)! KeySAV2 is a conglomeration of two tools (KeySAV and KeyBV) that combines the features and includes more. Retail Games are supported via: SD Card Battle Videos // PowerSaves/Cyber Gadget Digital Games are supported via: SD Card Battle Videos & SD Card Save Games Features: Extra: TUTORIALS: Recommended: Extract KeySAV2 to its own folder somewhere -- it needs to make subfolders! Follow the same breaking process as KeySAV/KeyBV by using the Options Tab of KeySAV2. Source Code on my GitHub. ALTERNATE (X/Y only) BUILD - Contains more features, by ViolentSpatula. ALTERNATE (ORAS/XY) BUILDS: Cu3PO42's BUILD & GUIDE (double saving not required) Kaisonic's BUILD (double saving not required) Download Link: KeySAV2.zip KeySAV2 (ORAS).zip
  17. Try this method. Even though it fully decrypts the savegame data, it won't decrypt the header data needed for re-signing the save. That can only be done by decrypting with the 3DS's AES engine with the proper key.
  18. scripts don't set the trainer music, it's dependent on trainer class (nobody knows how to change it currently). drayano added/edited scripts via raw hex. http://projectpokemon.org/forums/showthread.php?29456-B2W2-Scripting-Thread
  19. pretty sure drayano added them beyond the list of default trainers. http://projectpokemon.org/forums/showthread.php?29170-Adding-New-Trainers-to-List-in-BWTE
  20. post the following info to receive help: AR code what game you're doing this on
  21. OBSOLETE, OUTDATED. JUST USE PKHEX Download Link At Bottom of Post Drag & Drop tool that emulates: Any official transfer method Fakes non-official transfer methods (backwards conversion) Converts a pkm/3gpkm file to any of the forward generation formats, depending on what the user selects. Download Page Source Code
  22. In order for anyone to 100% decrypt a save, they would have to do either of the following: 1. dump the specific AES Key for their savegame, feed it to a hacked 3DS to generate the XORpad, and re-sign/xor when edits are applied. 2. dump the decrypted save in the RAM, then piece back together the save and have the 3DS ignore the bad AES MAC (or re-sign it with custom code). PKHeX can detect if a save is 100% decrypted or not; if you can't do either of the above methods yourself, then you can't 100%decrypt or inject. You need more than just a Powersaves device... it's not a simple thing.
  23. Unless you can take care of the AES MAC at the top of the save, there is no 100% decryption or re-injection. These tricks in the thread allow decryption of the savedata; insertion is not possible.
  24. just re-save ingame; there is a backup and main save file in every 512KB save.
×
×
  • Create New...