Pokémon X & Y Pokémon format dumped, decrypted and documented.

[XXLANCEXX]

3DS game saves have long been dumped and had their initial decryption layer fiddled with but owing to an inability to inject content back in the have been few attempts to take it much further than that.

Pokemon uses a slightly different save type (This is one of the major issues currently plaguing Gateway 3DS users who wish to play Pokemon X and Y), but some are saying it might have been an online functionality derived hack. In some ways that would make more sense but the authors of the information are not commenting on the methods used at this point.

Either way, as with normal saves, at this point in time people can not modify Pokemon and reinsert them. However, the format the Pokemon take has been reverse engineered to some extent. Initial plans involve decoding the new structure and a checking program is to be made later, which is fitting as the owner of the popular Pokécheck website and a moderator at Project Pokemon are the ones responsible for this initial breakthrough.

Box pkxs are now 232 bytes, as opposed to 136 previously.
Pkxs store the current owner + the original OT for a given pokemon.
The encryption on the pkx files works slightly differently.
Hatched eggs save the moves they hatched with separately for the move relearner.

Structure Listing
Project Pokemon Announcement Thread
Source

 

[kyogre123]

Oh yes. I was about to make a thread about it. Eevee and decrypter downloaded, checking how this works now.

 

[drfsupercenter]

Awesome!

Am I the only person who doesn't think this is a bad thing? It might shed some light on how other 3DS saves work.

 

[driverdis]

this means nothing in terms of allowing people to use hacked pokemon in X/Y for people that are thinking so. there is no way so far to tamper with the saves which means there is no way to get any hacked pokemon into the game. it also seems X/Y use NAND save as the carts do not contain an EEPROM, which means the only place saves can go is onto the NAND. it may not be possible to flash saves to it from outside of the 3ds (and some sort of 3ds mode homebrew) without using a hardware NAND flasher.

 

[kyogre123]

this means nothing in terms of allowing people to use hacked pokemon in X/Y for people that are thinking so. there is no way so far to tamper with the saves which means there is no way to get any hacked pokemon into the game. it also seems X/Y use NAND save as the carts do not contain an EEPROM, which means the only place saves can go is onto the NAND. it may not be possible to flash saves to it from outside of the 3ds (and some sort of 3ds mode homebrew) without using a hardware NAND flasher.

So, is completely possible to get this at lv1 caught with a Premiumball?

 

[Lacius]

this means nothing in terms of allowing people to use hacked pokemon in X/Y for people that are thinking so. there is no way so far to tamper with the saves which means there is no way to get any hacked pokemon into the game. it also seems X/Y use NAND save as the carts do not contain an EEPROM, which means the only place saves can go is onto the NAND. it may not be possible to flash saves to it from outside of the 3ds (and some sort of 3ds mode homebrew) without using a hardware NAND flasher.

There are other ways to get hacked Pokemon onto a game (e.g. GTS spoofing).

Edit:

So, is completely possible to get this at lv1 caught with a Premiumball?

Bred Pokemon can be in Poke Balls other than normal red Poke Balls now. Offspring will be in whatever Poke Ball the mother is in in a non-Ditto breeding.
http://www.serebii.net/xy/breeding.shtml

 

[driverdis]

So, is completely possible to get this at lv1 caught with a Premiumball?

not sure, but I highly doubt they figured out how to encrypt and flash the save back and have the game not reject the save.

 

[Marinkmus]

I've actually been playing pokemon GBA ROM hacks on my wii (no ds-3ds yet :'(). It might be possible to get hacked pokemon with a method similar to that on XY.

 

[Bond697]

the gible with the awesome name was made by xfr, edited to be shiny, and injected. just a demonstration that it's possible. it's possible to inject stuff at the moment using some of the network-enabled features the games have. that said, it's not easy and certainly not something that will be available for everyone to do just yet. just demonstrations and samples of what's possible.

saves are certainly off limits at the moment. we're finding other ways to do what we need, though. still working on pokecheck for gen 6.

e: please excuse the quality of the code for the decrypter. we were up basically all last night working on that stuff and i just needed it to decrypt the new pkx format, not look nice.

 

[loco365]

...Let the cheating begin.

Pokécheck owner Xfr and Pokécheck administrator/Project Pokémon Super Mod Bond697 have dumped, decrypted, and documented the Pokémon X and Y Pokémon file format.

The Pokémon files have been given a new file type, PKX, to match their new format. They've grown quite a bit both in size and the types of data they contain. With the limited amount of information currently available, access to PKX files provides some new insights into how this latest generation of Pokémon titles functions internally. There is more information to come as they continue work on updating Pokécheck for gen 6.

Introducing Wireshark, the first Generation VI Hacked Pokémon.​

So now that the games' saves have been hacked, where do we stand in terms of
A) Decrypting game saves
B) Keeping a Generation of Pokémon legit (For the most part)

Source

 

[Saken]

the gible with the awesome name was made by xfr, edited to be shiny, and injected. just a demonstration that it's possible. it's possible to inject stuff at the moment using some of the network-enabled features the games have. that said, it's not easy and certainly not something that will be available for everyone to do just yet. just demonstrations and samples of what's possible.

saves are certainly off limits at the moment. we're finding other ways to do what we need, though. still working on pokecheck for gen 6.

e: please excuse the quality of the code for the decrypter. we were up basically all last night working on that stuff and i just needed it to decrypt the new pkx format, not look nice.

You guys are using Wireshark to check the flow of packets?

 

[CollosalPokemon]

Misleading title.

The saves are NOT dumpable/editable yet, and one of the devs confirmed :

the gible with the awesome name was made by xfr, edited to be shiny, and injected. just a demonstration that it's possible. it's possible to inject stuff at the moment using some of the network-enabled features the games have. that said, it's not easy and certainly not something that will be available for everyone to do just yet. just demonstrations and samples of what's possible.

saves are certainly off limits at the moment. we're finding other ways to do what we need, though. still working on pokecheck for gen 6.


e: please excuse the quality of the code for the decrypter. we were up basically all last night working on that stuff and i just needed it to decrypt the new pkx format, not look nice.

 

[Master X]

I was considering posting this topic - You ninja'd me though.

Anyway, keeping this generation legitimate was screwed when the bank was announced. While direct modification of 6th gen pokemon would be the biggest threat, it's not really that hard to make legitimate fakes and transfer them over.

I suppose it's just a matter of what will hit first - directly modifying 6th gen pokemon, or modified transfers.

 

[loco365]

Misleading title.

The saves are NOT dumpable/editable yet, and one of the devs confirmed :

I read from another source, which seemed to be unreliable, so I've edited my post to reflect the content of that post. If I can get the title updated to "Pokémon X & Y Pokémon Dumped, Decrypted, and Hacked", that'd be great.

 

[Ryukouki]

I read from another source, which seemed to be unreliable, so I've edited my post to reflect the content of that post. If I can get the title updated to "Pokémon X & Y Pokémon Dumped, Decrypted, and Hacked", that'd be great.

Slight modification, but wishes granted.

 

[Sheimi]

it also seems X/Y use NAND save as the carts do not contain an EEPROM

I don't know about the digital version. But I was able to load my friends Pokemon Y save data (retail) on my 3DS.

 

[UltraMew]

*Applauds* Spiritomb and hackémon, here we come!

 

[Yamagushi]

Pokemon is DOOOOOOMMMMED!!!

 

[UltraMew]

So, is completely possible to get this at lv1 caught with a Premiumball?

That could be a fake, breeder.

 

[loco365]

Slight modification, but wishes granted.

It's slight, but important