Opens profile photo
Follow
Michael
@SciresM
Pokemon researcher@ ProjectPokemon.org. Console hacker/Horizon OS Proselytizer/B9S & Atmosphère dev (Joyeux 15 juin!). !t.3fxzeyWo i.imgur.com/98xMuQz.png
ProjectPokemon.orgJoined October 2014
69 Following
45K Followers

Michael’s Tweets

Michael
@SciresM
Pokemon Sword/Shield's code guarantees that any pokemon too high level for you to catch cannot be shiny.
204
8,369
Michael
@SciresM
Well, that wasn't so hard. Needs a ton more work, of course, but it's pretty cool to see it functioning.
Image
186
4,568
Michael
@SciresM
Okay, yeah. Pokemon from dynamax adventures are rolled to be forced shiny. Odds are exactly 1/300 without shiny charm, exactly 1/100 with shiny charm. This uses cryptographically secure randomness, so no RNG. All shinies found this way will be stars (xor result = 1).
89
2,497
Michael
@SciresM
Replying to
@SciresM
Animation on entering battle is pretty broken, but it works okay other than that. Obviously stats are broken (didn't fix the personal entry yet), and this was originally an edited yamper that I didn't bother giving legitimate moves.
Embedded video
0:21
59
2,019
Michael
@SciresM
Tired: Revealing new games during an E3 presentation Wired: Announcing new games by pushing an update for them to the eShop.
Image
55
1,898
Michael
@SciresM
Some newly gathered information on shiny pokemon: Certain static encounters use csrng (cryptographically secure/true random, not manipulatable/seeded), and are unaffected by the shiny charm. This includes the regis in crown tundra, impidimp in glimwood tangle, possibly others.
109
1,748
Michael
@SciresM
One of the funniest bugs I've ever dealt with: Code is built with -nostartfiles and -nostdlib, so it needs to include its own memcpy. Compiler sees that the memcpy implementation is memcpy..and "optimizes" it into memcpy. Thus instead of copying memory, it infinitely recurses.
Image
28
1,510
Michael
@SciresM
Loving the art in mystery dungeon (attached is the Friend Areas background). The world map is 4096x2880, super high res :)
Image
10
1,296
Michael
@SciresM
The Crown Tundra leak we've been waiting for: confirmed at least 898 pokemon. #894/895 are (unconfirmed but almost certainly) the new regis. #896 = "HAKUBA" #897 = "KOKUBA" #898 = "KURAUN" (Calyrex). 896/897 can combine with Calyrex in some way ("HAKURAUN", "KOKURAUN").
57
1,171
Michael
@SciresM
Pokemon Legends: Arceus does not have classic-style encounter tables (or cutaway encounters at all); instead, it litters the 3D map with "spawners" which perform a lottery on slots to spawn pokemon within a radius. Bad news: harder to data dump. Good news: fun to visualize?
Image
20
1,251
Michael
@SciresM
Haha, it looks like gamefreak fucked up. The code that guarantees too strong encounters aren't shiny only covers normal wild encounters, not the 200+ static Pokémon Gamefreak littered the routes with to make first visits to them more exciting: github.com/kwsch/PKHeX/bl
Quote Tweet
Bobby
@Regiultima115
This showed up in one of my Discord servers @mattyoukhana_ @SciresM @Kaphotics
Image
35
1,070
Michael
@SciresM
Here's your full pokemon snap roster! Blank spaces are reserved pokemon IDs with empty data (could change in a future update, maybe). Expect the usual datamining tools release from
@Kaphotics
and I later today :)
Image
113
1,136
Michael
@SciresM
Replying to
@SciresM
Since apparently this needs clarification: yamper is still in the game with this edit. This is a new entry inserted into the model table using Omastar's species ID (139). The one in my party/shown in battle was a yamper that I just lazily edited the species of with PKHeX.
19
916
Michael
@SciresM
SHA256(Mariko Boot Encryption Key) = 491A836813E0733A0697B2FA27D0922D3D6325CE3C6BBEA982CF4691FAF6451A SHA256(Mariko Key Encryption Key) = ACEA0798A729E8E0B3EF6D83CF7F345537E41ACCCCCAD8686D35E3F5454D5132
Image
34
906
Michael
@SciresM
I rarely tweet about this kind of non-technical thing, but Legends: Arceus is the first pokemon game that I've really enjoyed playing in a long time. Definitely not without flaws, but unlike other recent games I'm not feeling like I'm slogging through for datamining. Recommend.
17
953
Michael
@SciresM
~16 hours of work, ~8 qlaunch/NIM/NS patches, and a complicated setup involving three consoles later... ...Successfully forced an 8.1.1 Switch Lite to share its update data to a vulnerable haxx unit over local wifi. Now to dump 8.1.1 and see what's different in it :D
Image
32
869
Michael
@SciresM
By the way, some fun additional confirmation: Dark void NERFED. Accuracy lowered to 50%, and ONLY USABLE BY DARKRAI.
68
793
Michael
@SciresM
Kind of like Pokemon Legends: Arceus, Scarlet and Violet do not have classic-style encounter tables, but instead use a spawner system. However, PLA still had tables, kind of, on a per-spawner basis. SV does not! Here're some details on how encounters work in SV.
5
919
Michael
@SciresM
The new System Update (13.0.0) is (like 12.0.0 before it) particularly major under the hood, and Atmosphere will need more time than usual to add support for it. I'll do my best as always, and thank you for your patience.
Quote Tweet
ylws8bot (@ylws8bot@infosec.exchange)
@ylws8bot
Automated
Sysupdate detected for Switch: yls8.mtheall.com/ninupdates/rep
66
861
Michael
@SciresM
This isn't new information, but since it seems unclear to people: The extra rerolls that you have a 3% chance of getting if you've battled 500+ of a pokemon are only for wild encounters, not static encounters. This means that legendaries like the regis/etc don't benefit.
68
816
Michael
@SciresM
Why would you announce a new service to bring Pokémon from old games into sword and shield, specifically marketing how old time players have brought their old favorites from game to game, and then a week later go "lol you can't bring your old favorites"? I'm baffled.
27
775
Michael
@SciresM
Replying to
@SciresM
Also, there are some new skins in the test. (Sorry that the montage is made kind of haphazardly, but it's what magick montage output)
Image
45
834
Michael
@SciresM
Happy birthday, Switch! Hard to believe it's been two years, and that only a year ago Atmosphère could barely turn on the console's CPU... Looking forward to many more June 15ths this year :)
Image
23
745
Michael
@SciresM
So I guess our job as hackers this time is to fix this shit. Probably similar data structures to Let's go, guess we've got five months to start trying to figure out how to add old Pokémon back in....
56
750
Michael
@SciresM
Something a little crazy I just realized: as of one week ago, I've been working on Atmosphère for five years. (First commit was Feb 17, 2018). That's just nuts. I definitely didn't realize how much work it would be, but I'm glad it's been my labor of love for such a long time.
Quote Tweet
Michael
@SciresM
Happy June 15th! Atmosphere 1.5.0 is now in pre-release: github.com/Atmosphere-NX/ Support was added for 16.0.0 -- If you encounter any problems, please don't hesitate to report them. I hope you all enjoy! :)
47
827
47.5K
Michael
@SciresM
Pokemon Home transfers handle met location...poorly. BDSP/PLA -> SWSH wipes met location. Transfers to BDSP prefer data from SWSH, LGPE, PLA in order. Transfers to PLA prefer data from BDSP, SWSH, LGPE, in order. PLA -> BDSP preserves metloc. PLA -> SWSH -> BDSP wipes it.
30
770
Michael
@SciresM
Replying to
@SciresM
The chance of being forced shiny on a dynamax adventure is applied to every pokemon you defeated, including the legendary, to be extra clear. Thus overall odds of at least one shiny in adventure results are ~4/300 = 1/75 without shiny charm, ~4/100 = 1/25 with shiny charm.
27
734
Michael
@SciresM
So, some exciting news (which may be disappointing to some). Per usual, GF doesn't really understand how to scrub their games of upcoming content With that said, here are some spicy Crown Tundra leaks sourced from the Isle of Armor update. (Spoiler: most is revealed already).
12
690
Michael
@SciresM
Well, that's the worst of it done. Still more to do (e.g. emummc is not updated yet, and I'm sure there are bugs to work out in the thousands of lines of code I just wrote), but it's always nice to get to this point.
Image
63
744
Michael
@SciresM
Still lots to do (big ncm changes not implemented yet, reverse engineering needed to verify I'm not missing anything else major), but this is always a rewarding point to reach, in the Atmosphere updating process.
Image
39
761
58.1K
Michael
@SciresM
Joyeux 15 Juin ! Atmosphère 0.9.0 vient de sortir : get.atmos.phe.re * Ajout de la redirection de l'eMMC. * Amélioration globale de la stabilité de la console pour une expérience utilisateur optimale. J'espère que cette nouvelle version vous plaira ! :)
69
680
Michael
@SciresM
It's always nice to get to this point, after a new major system update drops. Still more to do before it's ready (as usual), but the worst is done. :)
Image
55
743
Michael
@SciresM
Replying to
@pkmncast
and
@Lewchube
BDSP is a unity game. The normal Pokémon games, including home, are C++ using a custom engine ("gflib"/gamefreak lib). BDSP is a unity game and saves are literally a C# object serialized to disk without specifying offsets which can change between versions. (1/2)
10
660
Michael
@SciresM
Interesting: Home has pokedex text for "x", "y", "alpha", "omega", "sun", "moon", "ultrasun", "ultramoon", "letsgo", "sword", "shield" ... and "omega_nx" + "alpha_nx". Was gamefreak experimenting with an ORAS port to Switch?
18
617
Michael
@SciresM
Ha, Nintendo finally fixed their leaky metadata server. Might as well post everything I've got. Attached: ML:SSDX, Ever Oasis icons.
25
520
Michael
@SciresM
There's still some more testing to do, but the hard part is over :) Should be out later today (PDT).
Image
47
599
Michael
@SciresM
This is a really large update under the hood, so please give atmosphere a day or two to get updated with support. I'll be working my hardest/doing my best :)
37
588
Michael
@SciresM
Some delightful facts I learned while working on saving memory for Atmosphere today: * 0x69000 = 420 KiB * Nintendo's kernel is 420 KiB
26
588
Michael
@SciresM
Replying to
@SciresM
Also, to be explicit: save data is not at risk at all. Saves are stored on the internal NAND, which uses FAT32/doesn't corrupt. The only data at risk are downloaded games/other SD card files, and those can be redownloaded. The absolute worst case is you lose some screenshots.
19
559
Michael
@SciresM
"During the preview, level scaling was discovered when the first trainer battle had been scaled to the highest level Pokemon in the player's party." lol nope Pokémon level in party has zero impact on Isle of Armor battle levels.
23
557
Michael
@SciresM
Well everyone, it's finally June 15th: Atmosphère 0.7.0 has released: github.com/Atmosphere-NX/ … Releases should be a *lot* more frequent from now on. Enjoy! :) (Please note, at least one major bug has been fixed since the pre-release that went up ~12 hours ago!)
github.com
Release Atmosphère 0.7.0 · Atmosphere-NX/Atmosphere
0.7.0 is Atmosphère's first official release. It supports the following featureset: Fusée, a custom bootloader. Supports loading/customizing of arbitrary KIPs from the SD card. Supports loadi...
35
537
Michael
@SciresM
Atmosphère (quietly) turned 3 years old five days ago, and we hit another fun milestone today, too. Hard to believe so much time has passed. The project has been and continues to be a labor of love -- many thanks to everyone who's helped enable me to spend so much time on it :)
Image
27
576
Michael
@SciresM
Well, that's the hard part done. Still more work to do before it's ready (some crashes/support stuff to fix), but we're pretty close to there.
Image
30
549
Michael
@SciresM
Looks like we've got confirmation that Nintendo is banning gamecart certificates (I guess people aren't taking my advice...). The relevant error for trying to use a gamecard with a banned cert is 0x1F727C -- 2124-4025.
37
515
Michael
@SciresM
Man, I've been so excited for sword and shield, and this kind of totally fucking ruins it. It's salvageable if they add old mons via patches, but what a complete and utter load of shit. All the assets are already complete and usable.
34
512
Michael
@SciresM
Just successfully used Atmosphere's FS MitM to replace content in Odyssey for the first time! Stuff is not ready/usable with that right now, but in the next few days (barring some unforeseen issue) people should be able to use layeredfs to easily make/play ROM hacks for games :)
31
500
Michael
@SciresM
Happy June 15th! Atmosphere 1.4.0 is now in pre-release: github.com/Atmosphere-NX/ Support was added for 15.0.0, and a bunch of other minor fixes/improvements made it in too. If you encounter any problems, please don't hesitate to report them. I hope you all enjoy! :)
github.com
Release Atmosphère 1.4.0 · Atmosphere-NX/Atmosphere
1.4.0 is Atmosphère's sixty-seventh official release. Please be sure to update fusee when upgrading to 1.4.0. fusee-primary no longer exists, and will not work any more. Note: The following was...
32
562
Michael
@SciresM
Pokemon UNITE's network test features a whole load of new crypto. It's mostly implemented, but there's some stuff to figure out to get UntieUnite to support it (notably, the unity asset bundles are a non-standard format). In the meantime, the roster now has 23 pokemon.
Image
36
527
Michael
@SciresM
The two biggest hurdles for Atmosphere's 12.0.0 support (kernel update, implementing the completely new ipc protocol that sm uses now) are both done, finally. Been lots of work and there's still more to do, but we're solidly in the later stages. Probably just a few days left :)
32
525
Michael
@SciresM
Wild shiny odds (including the logic failure that causes wild pokemon to be squares instead of stars almost all the time) are completely unchanged in swish 1.1.0 versus 1.0.0. Wild generation func at .text + CE30E0 in 1.1.0.
20
493
Michael
@SciresM
Atmosphere 7.0.0 bring-your-own-keys basic support: done. It may take a few days to a week or two for me to get non-bring-your-own-keys support working, but it's a work in progress. :)
Image
44
482
Michael
@SciresM
Happy June 15th! Atmosphere 0.9.4 has released: get.atmos.phe.re Full support for 9.0.0 (including a temporary hid mitm to give devs time to recompile homebrew), and a number of bugs fixed. I hope you all enjoy! :)
68
492
Michael
@SciresM
Still got more work to do before AMS is fully compatible (and still have more testing to do to make sure nothing's broken), but the biggest hurdle is over. Hopefully shouldn't be too much longer :)
Image
45
490
Michael
@SciresM
Looks like 11.8.0 backports the Switch's aauth ideas to 3ds -- network comms now send an encrypted(?) copy of app ticket to the server. They may not act on it immediately, but like on Switch this lets N perfectly detect pirate accesses vs normal ones, and ban however they like.
66
455
Michael
@SciresM
Not so surprisingly, only three new species IDs in the DLC (thanks, Pokemon HOME). Looks like most of the actually interesting assets are server-side, and so will have to wait for the maintenance to end. Still, nice to confirm: #891 = Kubfu #892 = Urshifu #893 = Zarude
13
467
Michael
@SciresM
Replying to
@SciresM
Model table is just a flatbuffer, so convert to json -> edit to insert new entries -> convert back to binary is readily doable.
Image
3
424
Michael
@SciresM
Main series pokemon game on Nintendo Switch in the next year or two? Time to buckle down and hack the console.
11
421
Michael
@SciresM
Pretty excited for 00040000001A4800 (Ever Oasis) and 00040000001B8F00 (Mario & Luigi: Superstar Saga DX).
35
390
Michael
@SciresM
Bad News: Reports of new Switches in the wild not being vuln to f-g... probably updated ipatches. Good news: they're coming with 4.1.0 for now, which is vuln to deja vu. Friendly reminder: if you want a hacked switch, don't update. The lower the better. This is still very true.
29
415
Michael
@SciresM
"An Atmosphere developer declined an opportunity to comment for this story on behalf of the team." No Atmosphere developer was contacted. Also: not really spooked, at all. They had it coming.
Quote Tweet
Square profile picture
Ars Technica
@arstechnica
Console hackers are shocked after DOJ arrests prominent mod-chip makers arstechnica.com/gaming/2020/10 by @KyleOrl
11
428
Michael
@SciresM
Happy June 15th! Atmosphere 0.8.5 has released: github.com/Atmosphere-NX/ Per-title content override key combinations, better support for hekate, support for cheat codes (full backwards compatibility with existing codes + bugfixes + new features)... I hope you all enjoy! :)
github.com
Release Atmosphère 0.8.5 · Atmosphere-NX/Atmosphere
0.8.5 is Atmosphère's twelfth official release. fusee-primary was last updated in: 0.8.4. With thanks to the @switchbrew team, Atmosphère 0.8.5 is bundled with hbl 2.1, and hbmenu 3.0.1. The fo...
30
417
Michael
@SciresM
For what it's worth, there is literally zero evidence in firmware/code that Nintendo is working on any other/new hardware at the moment. Zero indication of unknown devkits and no firmware support. For Lite ("hoag") and OLED ("Aula") we had about 1.5 years of advance signs in fw.
11
446