Jump to content


  • Posts

  • Joined

  • Last visited

Posts posted by SciresM

  1. Download links at the bottom of this post.

    Please do not submit wondercards edited with this program to the Event Contributions.


    This is a program that allows you to view the details of (and edit) 6th Generation Wondercard (.wc6) files.

    If you want to inject a wondercard in to your save, use PKHeX.


    • Kaphotics, for making PKHeX, without which this program could not exist.

    Update History:

    12-11-14: Added support for ORAS exclusive stuff.

    8-10-14: Fixed "Flawless" mistake as well as added OTGender control.


    WC6 Editor.zip

    WC6 Editor (ORAS Support).zip

    WC6 Editor.zip

    WC6 Editor (ORAS Support).zip

    • Like 3
  2. O_O Oh my gosh, where did you find that link?! I thought I'd looked everywhere on their site and couldn't find it, so have been (most likely) annoying everyone in sight of this forum for that!!! THANK YOU! (So hope it works using the AR ProActionSave hardware... otherwise I'll cry...)

    edit: sob... figures that's how it'd be... Probably no one has a way to make it recognize the PowerSave adapter instead of the Cyber one? (Are they really that different?)

    Not possible.

    They really are that different.

  3. Download links at the bottom of this post.

    You need a Japanese 3DS, a Japanese Pokemon X/Y/OR/AS cartridge, and the CyberGadget save device to use this.

    If you have trouble running this program, try running it as an administrator.


    This is a modified version of the Cybergadget 3DS Save Editor executable that is both in English (though a japanese version is provided as well) and allows for direct editing of one's pokemon x/y save with PKHeX.

    You still need a Japanese 3DS, a Japanese Pokemon X/Y/OR/AS cartridge, and the CyberGadget save device to use this.

    Use 3DSSaveEditor_en.exe for English, and 3DSSaveEditor_ja.exe for Japanese.


    0. Install the Cybergadget save editor software from the disc that comes with the device. This is necessary for you to have the drivers to detect the USB dongle.

    1. Download the modified exe below, place it in the folder with your normal 3DSSaveEditor.exe, and right click your game's name to open it in advanced mode per normal.

    2. Change any byte, and hit apply.

    3. After saying yes to the warning about potentially corrupting your save, the program will pause with an interrupt, as depicted in the screenshot above.

    4. At this point, open PKHeX and file->open the "main" file located in /users/{USERNAME}/appdata/Local/Temp/3DSSE/root/.

    5. Make any changes you want to your save in PKHeX.

    6. Go to the "SAV" tab in PKHeX and hit "Export save" -- save the edited file over the "main" file you opened. (Replace the old main with the edited one.)

    7. Hit okay in the interrupt in Cyber editor, and the edited save will be signed and written to your cartridge.


    • Glitch, for providing me with translations for all the strings contained in the cybergadget executable.
    • Kaphotics, for modifying the exe to interrupt and allow for direct editing with PKHeX.






  4. In ORAS you can share secret bases via QR code.

    This seems like an obvious thing to try to decrypt.

    There are a few qrs posted to the various foreign language websites (Example: http://www.pokemonrubysapphire.com/_ui/img/_en/july/screenshots/july_p26_07_bbp.jpg ), and I'm attaching the binaries the QR codes detail in a zip here:


    I know we're almost certainly not going to be able to figure out much until ORAS release and we can generate QR codes ourselves, but if anyone sees anything notable post it here.

    Initial things of interest: Lots of 0x11EC at the end, all of them start with "40 23".


  5. Guide to completely decrypting Save1:

    Download my brute forcer: http://www.mediafire.com/download/sk2o1qt9t161j6q/Pokemon_XY_Save_File_Brute_Forcer.exe

    Complete the steps listed in my earlier post on getting saves open with PKHeX: http://projectpokemon.org/forums/showthread.php?37269-X-Y-Save-File-Research&p=183148

    In the first brute forcer box, select + open save1keystream.bin.

    Now (make sure you have a backup of your current save file before doing this), Delete your save file from the in-game menu (hit up+x+b at title screen) and start a new game. Save once. ONLY SAVE ONCE. THIS IS IMPORTANT.

    Backup your save using powersaves. In the second brute forcer box, select this backup.

    Now, apply the "Master Ballsx999" cheat over your new game in powersaves. Remove your cart from the dongle. Re-insert your cart into the dongle. (Doing that is ALSO important.)

    Backup your save with the cheat applied using powersaves. In the third brute forcer box, select this backup.

    Now, hit the "Brute force saves" box. If all goes well (And it should), you should get a success message and the ability to save Save1Key.bin.

    Save Save1Key.bin wherever you want. You can now use it the way you used save1keystream.bin before now, but it completely 100% decrypts all of save1. (50% of your saves will open with no "hash verification failed" messages in PKHeX". Before Datel patched my exploit, this allowed you to inject things into the game. You can no longer use this to inject new things.)

  6. Here's my world of problems after attempting everything, step by step, you said to do Scires. Unless I'm missing something? Perhaps a tutorial with pictures/step by step, or a video on youtube or something might help those of us who apparently can't get it right. Namely Newbs like me.

    Note 1-

    I did it again, following the instructions to a T and it did the same issue whenever I tried to open the edited file with FF's. Is there a specific block I am supposed to FF up to? Or not go past? My method thus far has been to FF a chunk then copy and paste that over all the other blocks so I didn't have to hold down FF the entire time, unless that's what I'm supposed to do? Does it matter that I copy and pasted the FF's since they all turned to y's on the side anyhow? - Also, is there a trick I'm missing when it comes to loading the edited file? The back up that HxD made (looking exactly like the first one) is read by Powersaves (bin file) but not the one I edited. It has the same header, same everything, and without the -FIX'd at the end. Btw, the files yours create are just 'files' so I have to delete the FIXED part and add in .bin myself. Still doesn't read. I know I'm missing something critical here but for the life of me I can't figure out what.

    Pics of the Issues/Errors

    This below is the error message I got while trying to do the Datel Checksum from your program.

    See the end of this message for details on invoking

    just-in-time (JIT) debugging instead of this dialog box.

    ************** Exception Text **************

    System.IndexOutOfRangeException: Index was outside the bounds of the array.

    at Datel_Checksum_Fixer.Form1.button1_Click(Object sender, EventArgs e)

    at System.Windows.Forms.Control.OnClick(EventArgs e)

    at System.Windows.Forms.Button.OnClick(EventArgs e)

    at System.Windows.Forms.Button.OnMouseUp(MouseEventArgs mevent)

    at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)

    at System.Windows.Forms.Control.WndProc(Message& m)

    at System.Windows.Forms.ButtonBase.WndProc(Message& m)

    at System.Windows.Forms.Button.WndProc(Message& m)

    at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)

    at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)

    at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

    ************** Loaded Assemblies **************


    Assembly Version:

    Win32 Version: 4.0.30319.18449 built by: FX451RTMGDR

    CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v4.0.30319/mscorlib.dll


    Datel Checksum Fixer

    Assembly Version:

    Win32 Version:

    CodeBase: file:///C:/Users/Riptor.000/Desktop/Datel%20Checksum%20Fixer.exe



    Assembly Version:

    Win32 Version: 4.0.30319.18046 built by: FX45RTMGDR

    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll



    Assembly Version:

    Win32 Version: 4.0.30319.18022 built by: FX45RTMGDR

    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll



    Assembly Version:

    Win32 Version: 4.0.30319.18045 built by: FX45RTMGDR

    CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll


    ************** JIT Debugging **************

    To enable just-in-time (JIT) debugging, the .config file for this

    application or computer (machine.config) must have the

    jitDebugging value set in the system.windows.forms section.

    The application must also be compiled with debugging


    For example:


    <system.windows.forms jitDebugging="true" />


    When JIT debugging is enabled, any unhandled exception

    will be sent to the JIT debugger registered on the computer

    rather than be handled by this dialog box.

    File length should be 0x10009C. Only set 0x9C-0x10009C to 0xFF.

    Also, if you want Powersaves to see a save file, it needs to end in after the last ")" in the name -- remove the " - copy" for powersaves to detect it.

  7. Guide to getting your save file open in PKHeX:

    Make a backup with Powersaves.

    Make a copy of that backup, and replace all of the bytes in the copy past 0x9C with FF: http://i.snag.gy/lem0O.jpg

    Next, download my Datel checksum corrector ( http://www.mediafire.com/download/kn2am0u4ae66s21/Datel_Checksum_Fixer.zip ). Open it up and open the edited copy, then hit save. (Remove the " - [fixed]" from the savename so that powersaves will see it.).

    Now, open powersaves, and restore the edited FF save file. (You should see two saves with identical names, it's the second one.).

    Put your cartridge into your 3ds, and go to the main menu. Then, close the game and put the cartridge back in the powersaves dongle.

    In powersaves, apply the "Slot 1 x999 modifier code." After doing that, remove your cart from the powersaves dongle, then stick it back in. Now make a backup of your cartridge's save file.

    At this point, you can restore your original save file backup.

    The backup you just made after applying the code, removing the cart, and putting it back in has garbage default data in SAVE2, but a completely blank SAVE1 -- this means it is just your xorpad for save1.

    At this point, make a copy of the backup you just made and rename it save1keystream.bin for easy remembering ability.

    You can now use this to open a save in PKHeX! If you want to open a save, XOR save1keystream.bin with the powersaves backup of whatever save you want to check out (I recommend http://www.nirsoft.net/utils/xorfiles.html ), and then delete the first 0x9C bytes in a hex editor (I use HxD). Save the file with the 0x9C header removed, and you can open it in PKHeX totally fine: http://i.snag.gy/x2jJ8.jpg

  8. I found, after much searching, where "Lumiose Style" is stored in the save. It's a single integer value ranging from 0-255. Buying something increases style by 2. Asking alexa to show you around increases style by 5. More values to come when I catalog them.

    Discounts are as follows on the megastone in the stone emporium (Thanks, Kaphotics, for the chart):










    Edit: I got around to logging how much style everything in lumiose is worth: https://docs.google.com/spreadsheet/ccc?key=0AgF4wNipOQuCdC1obHRfU3JnUG5JZ0ZCNmRnMW1Xd1E

  9. Just dumped the item numbers for most of the Key items and all of the new TMs:

    Town map - 1BA - 442

    Holo Caster - 281 - 641

    Adventure Rules - 2BF - 703

    Roller Skates - 283 - 643

    Exp Share - 0D8 - 216

    Sprinklotad - 2B1 - 689

    Dowsing Machine - 1D7 - 471

    Intriguing Stone - 2B9 - 697

    Mega Ring - 2B8 - 696

    Power Plant Pass - 2B7 - 695

    Elevator Key - 2BC - 700

    Honor of Kalos - 2BE - 702

    TMV Pass - 2BD - 701

    Vs Recorder - 1D1 - 465

    Pokeradar - 1AF - 431

    Bicycle - 1C2 - 450

    Super Rod - 1BF - 447

    Shiny Charm - 278 - 632

    Oval Charm - 277 - 631

    Lens Case - 2C1 - 705

    Looker Ticket - 2C8 - 712

    Prof's Letter - 282 - 642


    TM100 - 2B6 - 694

    TM99 - 2B5 - 693

    TM98 - 2B4 - 692

    TM97 - 2B3 - 691

    TM96 - 2B2 - 690

    Edit: Got Lens Case and Looker Ticket

    Edit 2: Got Prof's Letter

  • Create New...