Hacking Got my Blue-Button Sky3DS... Some Template Questions

[drfsupercenter]

So, I downloaded the newest Disk Writer (104b5) from their website, and the newest "template" (1216)

Just trying it out now... but some of the more obscure ROMs I have aren't in the template file - like the kiosk demo cartridges. I wanted to see what would happen with those, since the real carts bypass the home menu entirely and boot straight to the game (they also DISABLE the home menu)

How would I go about updating my template file for these? Looking at it, it seems it's just a bunch of data from each ROM file...

 

[Yourstrulyxx]

There's so much to say regarding the template format, but i do remember it's all spread out on the gbatemp forums. The template file contains

4 byte = Cartridge Crypto //always 0x0 ?
4 byte = CHIP ID
4 byte = EEPROM ID //0xFFFFFFFF on nand save,
most cards use 0xC22211, 0xC22212, 0xC22213
2 byte = crc16 xor 0xFFFF // from 0x1000 - 0x11FF of rom
2 byte = crc16 // from 0x1000 - 0x11FF of rom
16 byte = "CTRIMAGE" + zeroes
16 byte = ??? hash or id // is not used by disk
writter directly, so unknown for now
16 byte = zeroes
16 byte = unique id // used for online play
48 byte = 0xFF
256 byte = Game Serial + zeroes //the updated disk
writter allows real name instead of serial
126 byte = zeroes/reserved
2 byte = crc16 from 0x0 - 0x1FD //from this template
structure, not rom

and a bunch of other things to look out for, someone on the forums also made a template generator, but it only works if you edit your rom or use an original dump with all the header/unique infor intact.

 

[drfsupercenter]

Ah, thanks for the info.

As for editing the ROM... isn't that what the Disk Writer does on the fly anyway? Literally every Scene release I drag in there gives me a message like this one:

Tried it with about 30 games and they all give me that. I just click yes to them all and they seem to work just fine, but I'm wondering what all it's changing in the files...

(In fact, what I'm doing right now is "backing up" the Pokémon X .3ds that the disk writer just put on my MicroSD, back to my hard drive, so I can hex-compare the two)

Someone mind linking me to that template generator?

 

[Yourstrulyxx]

the roms that are taken off the web have all the header/unique info redacted.. it's supposed to be located at 0x1200, it's interesting that the diskwriter keeps the info at 0x1400, either way i'm not too well versed with rom hacking/dumping. Plus i haven't seen what an actual legit rom dump looks like.

 

[drfsupercenter]

the roms that are taken off the web have all the header/unique info redacted.. it's supposed to be located at 0x1200, it's interesting that the diskwriter keeps the info at 0x1400, either way i'm not too well versed with rom hacking/dumping. Plus i haven't seen what an actual legit rom dump looks like.

I tried my own legit dump of Pokémon X and it still said it was missing data.

It seems like what it's doing is moving some of the info to an earlier spot in the ROM. The original file is just 0xFF at that offset.

 

[warnings]

Ah, thanks for the info.

As for editing the ROM... isn't that what the Disk Writer does on the fly anyway? Literally every Scene release I drag in there gives me a message like this one:

Tried it with about 30 games and they all give me that. I just click yes to them all and they seem to work just fine, but I'm wondering what all it's changing in the files...

(In fact, what I'm doing right now is "backing up" the Pokémon X .3ds that the disk writer just put on my MicroSD, back to my hard drive, so I can hex-compare the two)

Someone mind linking me to that template generator?

If you click no it will simply not install the game, I too have compared dumps from sky once installed, namely the EEPROM YES Base 10 games to try to figure out what makes it tick. The template generator is interesting as it will work for alot of sky dumps without any sky templates, but not all...it can be found here:
https://gbatemp.net/threads/how-to-create-your-own-sky3ds-template-entries.374775/
Other tools I found useful are 3dsexplorer and gateway rom patcher for header extraction/injection of sky3ds dumps...you can do some interesting stuff with the 3 above mentioned tools, wish there was more of a sky3ds audience...but sadly there isn't.

 

[drfsupercenter]

If you click no it will simply not install the game, I too have compared dumps from sky once installed, namely the EEPROM YES Base 10 games to try to figure out what makes it tick. The template generator is interesting as it will work for alot of sky dumps without any sky templates, but not all...it can be found here:
https://gbatemp.net/threads/how-to-create-your-own-sky3ds-template-entries.374775/
Other tools I found useful are 3dsexplorer and gateway rom patcher for header extraction/injection of sky3ds dumps...you can do some interesting stuff with the 3 above mentioned tools, wish there was more of a sky3ds audience...but sadly there isn't.

Thanks for the link. I'll play around with it later and see what happens.

From what I can tell, EEPROM "yes" just means it has to emulate a save flash, and the "no" games are CARD2 ones that store it in the same data as the ROM. Interestingly, Pokémon X works with Powersaves once I put it on the Sky3DS and switch to it using the button - but other games like Mario Kart 7 don't. They either show no valid codes or say "invalid game"... probably, again, because of how the emulated save data is being written.

I'd be curious to see if it works with the Save Data Transfer Tool, I know Gateway works with it only for CARD2 games.

 

[Yourstrulyxx]

Ah, thanks for the powersave mention. I don't have a 4.5 console so i'm just on sky3ds + cyber save editor. What's interesting i'm at a point where i CAN get cyber save to recognize/decrypt the save but unfortunately the save that is re-encrypted and sent back all turn up with 'invalid/corrupt' save errors.

What's funny is that even cybersave can't open/decrypt the save that is sent back.

 

[pandaboii]

guys could someone give me a template file for ORAS eu or Donkey kong country returns 3d eu

 

[Multiboy2k]

Panda, go on the Sky3ds site and download one of the older templates from November OT download the latest writer 1.05 and the latest template which would be at the top and the latest template posted.

 

[pandaboii]

Panda, go on the Sky3ds site and download one of the older templates from November OT download the latest writer 1.05 and the latest template which would be at the top and the latest template posted.

i tried all of the templates. none of them work for ORAS eu or DK eu

 

[Judas18]

i tried all of the templates. none of them work for ORAS eu or DK eu

So if you have a UK console you're fucked with ORAS?

 

[xps2]

i tried all of the templates. none of them work for ORAS eu or DK eu

try this template http://filetrip.net/dl?xnwl0jVDjn tell it it work or not

 

[Multiboy2k]

try this template http://filetrip.net/dl?xnwl0jVDjn tell it it work or not

thanks xps2 you beat me to it. I was going to refer him to that one too.
Im playing the game now. It works fine on the USA one. Im not sure about the EUR version though.

 

[pandaboii]

thanks xps2 you beat me to it. I was going to refer him to that one too.
Im playing the game now. It works fine on the USA one. Im not sure about the EUR version though.

Nope doesnt work for the european version. Is there a chance it could be a bad rom or something?

 

[xps2]

are you sure you can not burn it try this then http://filetrip.net/dl?iQSBjQIazS

 

[pandaboii]

are you sure you can not burn it try this then http://filetrip.net/dl?iQSBjQIazS

doesnt work either im using omega ruby as i cant find any european alpha sapphires. what should i do then? as im tired of waiting for a new template that doesnt work

 

[drfsupercenter]

Ah, thanks for the powersave mention. I don't have a 4.5 console so i'm just on sky3ds + cyber save editor. What's interesting i'm at a point where i CAN get cyber save to recognize/decrypt the save but unfortunately the save that is re-encrypted and sent back all turn up with 'invalid/corrupt' save errors.

What's funny is that even cybersave can't open/decrypt the save that is sent back.

You know, that brings up something interesting I'd want to try.

Cyber Gadget still only works with the Japanese versions of X/Y, right? (Do they support OR/AS yet?)
Now, I only have a retail USA copy, a Japanese one would be useless since I'd have to use my Gateway console every time to play it in Classic Mode, and I'm not going to spend a bunch of money importing a Japanese cart just to Pokébank edited Pokémon either.

But, let's say I put a Japanese ROM on the Sky3DS. Theoretically, it should show up the same as a retail cart, as it does to Powersaves as well. I already know that you can swap save files between different regions of X/Y ROMs (you just can't use an X save in Y or vice versa) - so let's say I took my retail copy of X which I use Powersaves with, and just inject the save into that Japanese ROM. I should then be able to edit it with Cyber Gadget, and then just swap the save back to the USA copy... right?

The big question I have at this point is how to use my own unique cartridge header with the Sky3DS - and I made a thread asking about that as well. Their template seems to be the equivalent of just using .3ds files on Gateway, it ignored my .3DZ and corrupted the save regardless.

 

[cormaltes]

With the "backup/restore save" feature of diskwiter, Is that backups are usable with PkHex for the saves of Pokémon for example.

Backups (.sav) diskWriter does not appear to be usable with 3dsExplorer.

For the cyber-gadget, it is read directly with the Sky3ds inside?

 

[drfsupercenter]

Is PkHex the same thing as Cyber Gadget? I'm a bit confused on terminology.