Leaderboard

Hello all, For those who do not know me, I studied under a video game development program in the early 2000's. While I did not end up pursuing development as a career, I still actively apply the knowledge to trying to understand what's under the hood of the franchise that first made me want to go into video game development: Pokémon. I am not a code hunter. I am more of enthusiast who enjoys sharing this information with the masses so we all can maintain a database of LIVE RAM Edits for the insight and befenfit of the community as a whole to increase the overall understanding of what is and isn't possible with the games. The Atmosphere CFW OS for CFW uses a built-in cheat app called Edizon which means every single CFW Switch owner with Atmosphere OS are forced to use it. The homebrew app Edizon does not allow for a manual ON/OFF of individual codes which means people interested in experimenting have to maintain their own database of codes and go through the hassle of deleting and re-adding codes to the .TXT file for the codes for the game on a FREQUENT basis. The Atmosphere OS Live requires codes to be located under a specific system folder which is sorted into folders under the TitleID of each game with separate .TXT file for each BuildID (aka version of the game): GAME TitleID BuildID (for v1.2.1) Pokémon Shield 01008db008c2c000 896900182175428b Pokémon Sword 0100abf008968000 157abfb96262aeb9 (New Encountered Wild/Egg/Fossil Pokemon) Shiny Codes [Always Shiny Star Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 007702D4 1400003A 04000000 007702E4 14000036 04000000 00780E54 52000C29 [Always Shiny Square Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 007702D4 1400003A 04000000 007702E4 14000036 04000000 00780E54 2A0103E9 (New Encountered Wild/Egg/Fossil Pokemon) IV Codes (Custom) [Always "Best" Hit Point (HP) IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AD4 528003E1 [Always "Worst" Hit Point (HP) IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AD4 528003E0 [Always "Best" Attack IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AE0 528003E1 [Always "Worst" Attack IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AE0 528003E0 [Always "Best" Defense IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AEC 528003E1 [Always "Worst" Defense IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AEC 528003E0 [Always "Best" Sp. Attack IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AF8 528003E1 [Always "Worst" Sp. Attack IV Wild/Egg/Fossil Pokemon (v1.2.0)] 04000000 00770AF8 528003E0 [Always "Best" Sp. Defense IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B04 528003E1 [Always "Worst" Sp. Defense IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B04 528003E0 [Always "Best" Speed IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B10 528003E1 [Always "Worst" Speed IV Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B10 528003E0 (New Encountered Wild/Egg/Fossil Pokemon) IV Codes (Pre-Sets) [Always 31/31/31/31/31/31 IVs Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AD4 528003E1 04000000 00770AE0 528003E1 04000000 00770AEC 528003E1 04000000 00770AF8 528003E1 04000000 00770B04 528003E1 04000000 00770B10 528003E1 [Always 31/0/31/31/31/31 IVs Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AD4 528003E1 04000000 00770AE0 528003E0 04000000 00770AEC 528003E1 04000000 00770AF8 528003E1 04000000 00770B04 528003E1 04000000 00770B10 528003E1 [Always 31/31/31/31/31/0 IVs Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AD4 528003E1 04000000 00770AE0 528003E1 04000000 00770AEC 528003E1 04000000 00770AF8 528003E1 04000000 00770B04 528003E1 04000000 00770B10 528003E0 [Always 31/0/31/31/31/0 IVs Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770AD4 528003E1 04000000 00770AE0 528003E0 04000000 00770AEC 528003E1 04000000 00770AF8 528003E1 04000000 00770B04 528003E1 04000000 00770B10 528003E0 (New Encountered Wild/Egg/Fossil Pokemon) Gender Codes [Always Female Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A88 52800021 [Always Male Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A88 52800001 [Always Genderless Wild/Egg/Fossil Pokemon(v1.2.1)] 04000000 00770A88 52800041 [Always Species Default Gender Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A88 79406261 (New Encountered Wild/Egg/Fossil Pokemon) Nature Codes [Always Adamant Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800061 04000000 00770A7C 52800061 [Always Bashful Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800241 04000000 00770A7C 52800241 [Always Bold Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528000A1 04000000 00770A7C 528000A1 [Always Brave Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800041 04000000 00770A7C 52800041 [Always Calm Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800281 04000000 00770A7C 52800281 [Always Careful Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528002E1 04000000 00770A7C 528002E1 [Always Docile Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528000C1 04000000 00770A7C 528000C1 [Always Gentle Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528002A1 04000000 00770A7C 528002A1 [Always Hardy Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800001 04000000 00770A7C 52800001 [Always Hasty Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800161 04000000 00770A7C 52800161 [Always Impish Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800101 04000000 00770A7C 52800101 [Always Jolly Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528001A1 04000000 00770A7C 528001A1 [Always Lax Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800121 04000000 00770A7C 52800121 [Always Lonely Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800021 04000000 00770A7C 52800021 [Always Mild Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800201 04000000 00770A7C 52800201 [Always Modest Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528001E1 04000000 00770A7C 528001E1 [Always Naive Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528001C1 04000000 00770A7C 528001C1 [Always Naughty Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800081 04000000 00770A7C 52800081 [Always Quiet Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800221 04000000 00770A7C 52800221 [Always Quirky Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800301 04000000 00770A7C 52800301 [Always Rash Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800261 04000000 00770A7C 52800261 [Always Relaxed Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528000E1 04000000 00770A7C 528000E1 [Always Sassy Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 528002C1 04000000 00770A7C 528002C1 [Always Serious Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800181 04000000 00770A7C 52800181 [Always Timid Nature Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770A70 79406661 04000000 00770A7C 79406661 04000000 00770A70 52800141 04000000 00770A7C 52800141 (New Encountered Wild/Egg/Fossil Pokemon) Ability Codes [Always 1ST Ability Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B20 3940D262 04000000 00770B38 3940D268 04000000 00770B4C 3940D268 04000000 00770B60 3940D268 04000000 00770B20 52800002 04000000 00770B38 52800008 04000000 00770B4C 52800008 04000000 00770B60 52800008 [Always 2ND Ability Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B20 3940D262 04000000 00770B38 3940D268 04000000 00770B4C 3940D268 04000000 00770B60 3940D268 04000000 00770B20 52800022 04000000 00770B38 52800028 04000000 00770B4C 52800028 04000000 00770B60 52800028 [Always Hidden Ability Wild/Egg/Fossil Pokemon (v1.2.1)] 04000000 00770B20 3940D262 04000000 00770B38 3940D268 04000000 00770B4C 3940D268 04000000 00770B60 3940D268 04000000 00770B20 52800042 04000000 00770B38 52800048 04000000 00770B4C 52800048 04000000 00770B60 52800048 A Few Words about LIVE RAM Editing in Sword & Shield: In order to accomodate new features in v1.2.0, the stored memory active in RAM witnessed drastic changes. The change from v1.1.1 to v1.2.0 shifted the location in memory of all the ENCOUNTERS handling BUT thankfully the entirety of it was moved together. The memory shift was found and applied to all the existing ENCOUNTERS related codes. The Sword & Shield titles ONLY have error handling for "impossible" Pokémon. There are no such "legality" checks built into the mainline Pokémon games furthermore GameFreak currently has no such services immplimented on the Pokémon Home servers. There is an error handler for Pokémon encountering mons outside of the National Dex range which drops in a Pikachu called "Egg." There is also an error handler for illegal gendered Pokémon (for example: Female Mew OR Genderless Charmander) which is displayed in-game by replacing the 2D sprite shown in menus or on Raid preview screens with a 2D sprite of a black PokéBall symbol. Since there's no error handling for "legit" Pokémon, the game is not tracking for LIVE RAM Edits. This means there's no error handling to correct a mistake you make (like that Genderless Charmander) and as such the game will allow it to occur. When a new Pokémon is encountered (whether it's in-game trade, wild, Raid, or even newly discovered Egg), there's a module which puts together all of the pieces of data which make up that Pokémon in a single sector of memory. The single module uses the EXACT same sector of memory for ALL types of encountered Pokémon from in-game Gift Pokémon to Fossil Pokémon, from eggs to Pokémon in tall grass. The module checks for any all the known (predetermined information like how in-game Gift Pokémon have pre-determined IVs) and plugs those values in. Next, the module randomizes any of the unknowns (like Nature when not Synconized OR Ability two ability mons.) After assembling the COMPLETED the module sends the whole Pokémon back to the game's code to use. Since all Pokémon are passing throught the same sector of memory, we can apply LIVE RAM Edits/codes to set the results of one or more charactistics which over-writes randomization and predetermined values. (Once again, the game will not attempt to correct any mistakes you make like assigning a Hidden Ability to a Route 1 wild Pokémon.) Since there's currently neither the mainline games nor Home are preforming any legality checking, you can VERY easily make ILLEGAL Pokémon. LIVE RAM Editing should be something in which is not taking lightly to ensure no ILLEGAL Pokémon spawn in-game as a result. While the game may not show your mistakes now, PKHeX will and down the road one day maybe even Pokémon Home will but when that happens chances are the mon will be deleted from the server. Everyone here is against the creation and sharing of ILLEGAL Pokémon so keep that in mind!

Long-winded story in the spoiler tag. TL;DR: Rather than the games checking the compatibility header, the distribution ROM does. Patch instructions below. (If anyone wants to make an IPS/UPS/BPS patch, go ahead! I just don't feel like downloading one more program for this project to make one.) Due to space constraints, it is impossible to patch a fix in to the same location. However, it is possible to patch out the check completely. Replacing 0x714C through 0x7173 (inclusive) with 0x00 patches out the region, game, and language checks. It leaves the sanity check, however. (Also, see below regarding the language check.) Why does this matter? Using direct injection, I already knew that it is possible to use "comparefarbytetobyte 0x80000AE 'E'" (ASCII 'E', not the proprietary encoding 'E') to check for whether a game is Emerald or not. "comparefarbytetobyte 0x80000AF" can also be used to check for language. Thus, while scripts for both versions - and texts for all languages - would need to fit into 1000 bytes, it is now possible to make a multi-version multi-language distribution ROM. One last thing. I found a glitchcity forum post (Reply #35 at https://forums.glitchcity.info/index.php?topic=7114.30) that confirmed my suspicions regarding the CheckCompatibility function. FireRed, LeafGreen, and Emerald act as Japanese cartridges, regardless of their actual language. This carries over to ValidateMEventClientHeader. Thus, all games can receive the Mystery Gift, regardless of the language of the distribution. This does leave a question as to how the European distribution ROM knew which version to send. It may be the case that only English carts act as Japanese carts. However, without a European decompilation, and without a European cart of my own, I'm left without means to test this hypothesis.

When you hack on TR moves without setting the TR flag, then yes, that's illegal.

This is what I said in the first message, how you can't load gen 7 events in different generations. This problem is still caused because your gen 8 information is being used for a gen 7 event, making the program think you SwSh file self-obtained a gen 7 Pokemon Bank event. This still results in illegal Pokemon. Your fix this time is to change the OT, ID or SID on the Incineroar so it doesn't match the details of the file you're trying to load it in to. Again, you can't be the OT on a different generation event.

See the green square? That's how the program shows you who is currently holding the Pokemon. Remember that OT changes between different generation. Something hatched in gen 7, its OT is gen 7, not any other generation. Even when it gets traded to someone else in gen 7, that other person is not the OT. So the Not OT handler gets updated, because it wouldn't currently be in the possession of the OT. It's the same thing if the gen 7 OT transfers it to their gen 8 game. The gen 8 OT is not the person who hatched the gen 7 egg, so the Not OT handler gets updated. Re-set the Horsea (Right Click -> View and then Right Click -> Set), or click on the box labeled Latest (not OT) Handler to manually set the current person who is handling them, because they wouldn't currently be in the possession of the OT.

I’m not aware of any issues with wine-stable-5.0.1 that would prevent .Net from being installed. As I spend the majority of my time in macOS I use a CrossOver-19 based compile (Wine-4.12.1 with thousands of patches) Just make a clean 32Bit prefix then run winetricks -q dotnet46 Once that’s done you should be all set as long as all wines requirements are installed

No legal zarude release yet. Will be release August with pokemon movie JPN

PKHeX can be ran using wine ether the version of wine your using had bugs/built wrong/missing libraries or you didn’t install the required version of .Net using winetricks.

Local wireless does not have hack checks. Anything online will use the online hack check.

Read the stickied threads instead of making useless threads.

Or just rename the exe to PKHaX, or open up the settings with the secret key modifier (alt or shift or control, idk) and set the force HaX on launch.

Delete whatever you downloaded. Redownload PKHeX from here https://projectpokemon.org/home/files/file/1-pkhex/ Put this batch file into the same folder as PKHeX.exe PKHaX.bat Now just run that file to get into PKHaX mode.

Editing an old save causes the seeds to advance, btw. Seed check whatever you catch to ensure it's from the right seed and not a later frame.

Does this hack have the physical special split from the original game or the updated one?

You are loading an unhatched egg in an illegal save. Remember that you are not allowed to transfer eggs to higher generations, you need to hatch them in the specific generation first, then transfer the hatched one. What the program says you're doing is you're obtaining a gen 5 unhatched egg with the game information of a gen 8 game. You can see you have 10 options in the search. Try using the 6 that are not eggs.

Are you transferring the save over TFP?, if you are set the transfer type to binary. Those are macOS Catalina and later security settings, I allowed my PKHeX wrapper access to the listed locations If those security setting are not set PKHeX won’t have access to the listed locations, well unless you have SIP disabled but I don’t expect a normal user to ever have SIP disabled

Just check the "Infected" or "Cured" checkbox in the Main tab.

bro thanks so much it worked

I am wondering if it would be possible to recreate or revive Pokémon Dream World. It looks like a really fun game, and I would really like to play it. I think that you can download the game's .swf files somewhere on the Internet. I hope something like this is possible...

=Species=3 .Ball=11

No I skipped checking it since wine-crossover-19.0.1 works. I didn’t see much point testing CrossOver-19 since there the same thing just CodeWeavers shinny GUI and pearl wrappers are used

I've been lurking for a while now, but I think I'm finally ready to add what information I know about the distribution ROM. I apologize if I repeat something that was already known, but I checked the last 5 or so pages, and I didn't find the information I have. The actual script data for the Aurora Ticket distribution starts at 0x12728. It is the raw data - unencrypted and uncompressed. Noteworthy is the fact that the checksum and header are not stored here. I edited the script to give me both the Aurora Ticket and Mystic Ticket, and it worked! This means the checksum is calculated dynamically, rather than stored elsewhere on the ROM. The Wonder Card starts at 0x14FB8. At least, that is where the checksum would be. I haven't confirmed if the checksum is calculated dynamically, but I can't find it stored anywhere in the ROM, so I'm assuming it's dynamic. I tried my hand at disassembly. Here's what I've learned: The disassemblers designed for generic ARM7-TDMI code don't like disassembling THUMB code. The disassemblers designed specifically for the GBA (e.g. luvdis) don't like disassembling ARM code. Overall, I'm bad at reading assembly code. Something (maybe) useful: the Wireless Adapter uses the 32-bit "normal" serial communication mode. (It sends data by writing to register 0x04000120.) Not strictly about the distribution ROM, but the "virtual" script functions (opcodes B8 through BF) can access data in the Wonder Card and Wonder News sections. Thus, a properly crafted Wonder Card could add an additional 320 bytes of script data. Finding a way to distribute Wonder News would add another 440 bytes of usable script data. I've been doing some digging into the decompilation projects, and I've found two functions that might be responsible for Emerald rejecting the distribution: "ValidateMEventClientHeader" / "sub_801B6A0" FireRed: https://github.com/pret/pokefirered/blob/2880cf2a51ea36fa36f00d9ecf07177e5955c882/src/mevent.c#L788 Emerald: https://github.com/pret/pokeemerald/blob/4dd3cc7b7691afb8ecd2e8af8b2ebfa717dd2414/src/mevent2.c#L380 "CheckCompatibility" Ruby: https://github.com/pret/pokeruby/blob/f839afb24aa2c7b70e9c28a5c069aacc46993099/src/mystery_event_script.c#L38 FireRed: https://github.com/pret/pokefirered/blob/2880cf2a51ea36fa36f00d9ecf07177e5955c882/src/mystery_event_script.c#L30 Emerald: https://github.com/pret/pokeemerald/blob/4dd3cc7b7691afb8ecd2e8af8b2ebfa717dd2414/src/mystery_event_script.c#L28 Given that "ValidateMEventClientHeader" appears in FRLG and Emerald, but not RS, I suspect it is this function that is used for the Wireless Adapter, while "CheckCompatibility" is used for the eReader. Regardless, as long as it is one of these two functions, the remedy is the same. Replace a 0x1 somewhere with 0x5, and replace a 0xF with 0x20F or 0x38F. Unfortunately, like the checksums, these values do not appear to be stored directly on the ROM. They are likely caused by MOVS or ADDS instructions, instead. I hope this helps, and let me know if there's anything else I can do to help.

Hoping this is ok to post on a thread that hasn't been touched in a couple of years... I joined up just to say thanks for the amazing work you guys have done on this. Thanks to your hard work I have 3 freshly purified English language e-reader pokemon in 2020 that I never thought I'd be able to get. I did have an idea that I unfortunately don't have the knowhow to implement, but here it is anyway: Using the action replay codes here (https://www.gc-forever.com/forums/viewtopic.php?t=2023) it's possible to replace trainer battles using their associated code, ie replacing "trainer xxxx" with "trainer yyyy" Trainer Battle Replacer [Ralf] 04004300 2803xxxx 04004304 40820008 04004308 3860yyyy 0400430C 5460043F 04004310 4820E238 04212544 4BDF1DBC Is it possible to find the code for the 3 e-reader shadow pokemon trainers so the battles could be accessed with nothing more than an action replay or emulator? Am I right in thinking that they would be in the game somewhere already as the e-reader code itself surely isn't big enough to contain all the trainer/pokemon data.

I did this just yesterday and came across Pikaedit. (Hope it's okay to link files like this). You'll find it under "DLC", and it definitely works. PikaeditGen5C.zip