Determine one's Secret ID in Gen III with Mail Glitch

 												----~~~~ Déterminer son ID Secret sur 3G ~~~~-----


Sommaire :
- Préparatifs -
- Liens utiles -
1) Pokémon Glitch pour le Glitch Grena Instantané
2) Réaliser le Glitch Grena Instantané et le Mail Glitch
3) Test des Spinda
4) Détermination de l'ID Secret
4.1) Détermination de l'identifiant hexadécimal associé au mot non-glitch
4.2) Détermination du PID du Spinda
4.3) Détermination de "donnée décryptée"
4.4) Calcul de l'ID Secret
- Notes -

Video tied to the procedure : https://www.youtube.com/watch?v=3Vp8x--EYYE
(It is in French and a bit messy, though)

- Preparations -
- The in-game traded Seedot
- The in-game traded Plusle
- 30 Spinda from the version where you want to know your Secret ID.
On Emerald, save and reset right before starting your Spinda catches.
On RS, if you have a dead battery, save and reset right before starting your Spinda catches.
On RS, catch these Spinda then send them to Emerald.
On FrLg, make 30 Spinda Eggs, hatch them, then send them to Emerald.
/!\ These 30 Spinda must be different, so cloning them is useless.
- At least 50 mails.
- A party to perform Pomeg Glitch
(will be used to obtain a Glitch Pokémon)
- Some Pomeg Berries, HP Up, Fluffy Tails, Revives, Full Heal, Balls
(to perform Pomeg Glitch and obtain a Glitch Pokémon)
- Some HP Up and Protein
(to train a Seedot clone in order to obtain a Glitch Pokémon)

- Useful links -
- xor calculator : http://xor.pw/
- Pastebin "How to obtain any Pokémon/Item/Move" :
- Video "How to obtain any Pokémon" (from Chickasaurus) :
- Substructures of a Gen III Pokémon : https://bulbapedia.bulbagarden.net/wiki/Pok%C3%A9mon_data_substructures_in_Generation_III
- List of hexadeximal identifiants of Gen III Pokémon : https://bulbapedia.bulbagarden.net/wiki/List_of_Pok%C3%A9mon_by_index_number_(Generation_III)
- List of hexadecimal identifiants of mail words (by NPO) : https://pastebin.com/s53DQyxX
- IV Calculator : http://www.psypokes.com/dex/iv.php
- NPO's Glitchcity thread about the method (he discovered it) : https://forums.glitchcity.info/index.php?topic=8289.0


1) Obtain a Glitch Pokémon for Instant Pomeg Glitch
- Follow the pastebin on double-corruption (or Chickasaurus' video) in order to obtain a Glitch Pokémon that can perform Instant Pomeg Glitch : [...]

Identifiant of the Glitch Pokémon for Instant Pomeg Glitch :
Emer Fr: 0x29C8 (41 Atk,200 HP) | Emer US : 0x29C0 (41 Atk,192 HP) | Emer Spa : 0x948C (148 Atk,140 HP) | Emer Ger : 0x29C9 (41 Atk, 201 HP) | Emer Jp : 0x4360 (67 Atk,96 HP) | Emer Ita : 0x9481 (148 Atk,129 HP) |

If you already obtained this Pokémon for another Glitch (shinyhunt at battle Pyramid or unlock Faraway Island/Birth Island), you don't need to obtain it again.

- During your corruptions, keep 2 Bad Eggs.
Else, get 2 Eggs at Day Care.

- Move away all Pokémon in Box 2.
- Save.


2) Perform Instant Pomeg Glitch and Mail Glitch
- Go to Slateport.
- Enter Pokémon Center and save in front of the PC.
- Open the PC and deposit all party Pokémon except a Pokémon with Fly.
- Withdraw your 2 Eggs/Bad Eggs, then the Glitch Pokémon for Instant Pomeg Glitch.
If the game freezes during the withdrawal of this Pokémon, reset and try again.

- Close the PC, and reorder your party as : Egg/Bad Egg - Egg/Bad Egg - Glitch Pokémon - Pokémon with Fly.
(it is important to have less than 6 party Pokémon or the next steps will not work well)
- If your Pokémon with Fly is holding an Item, take it back.

- Go to the Poké Fan Club and talk to the reporter.
Hit A to start talking to him then hit B to not answer his questions.

The reporter will read the species name of the Glitch Pokémon. This will corrupt some data in memory, which will turn the 1st party Pokémon into an empty slot. (which allows Instant Pomeg Glitch)

- Save.
If tou don't want to keep the Mail Glitch on your party forever (there is no method to remove it yet), then ignore the future save indications. (If you are forced to reset in certain cases, you will have to restart from here)
- Open your party.

- Pattern to follow in order to setup Mail Glitch :
Push Up 2 times.
Push A.
Give a mail to the selected Pokémon. (It is the Pokémon from party slot 256)
Fill the mail with one word and hit O.K. to give it to the Pokémon.

- Repeat this pattern 5 more times.
(Be careful to not look at the summary of the selected Pokémon, as this would freeze the game).

- Repeat this pattern another time, but in the mail edition screen, pish B, then Up, then A, to not change the mail.
This time, the mail will not be empty when you will try to give it to the Pokémon.

- Close the party and open it again.
- Repeat the pattern one more time.
- Repeat this pattern another time, but in the mail edition screen, pish B, then Up, then A, to not change the mail.
This time, the mail will not be empty when you will try to give it to the Pokémon.

- Close the party and open it again.
- Repeat the pattern one more time.
- Repeat this pattern another time, but in the mail edition screen, pish B, then Up, then A, to not change the mail.
This time, the mail will not be empty when you will try to give it to the Pokémon.

- Close the party and open it again.
- Push Down 3 times and give a mail to the Pokémon with Fly.
If the mail is full of "???", then the Mail Glitch is triggered and you can go to the next step.

If this mail is empty, then the Mail Glitch isn't triggered.
In this case, close the party, reopen it, and repeat the previous pattern 2 more times.

- Switch the Pokémon with Fly to the first party slot, then close the party.
(This breaks the Instant Pomeg Glitch)

3) Testing the Spinda
- Go back to the Pokémon Center and go in front of the PC.
- You can save here, but if you do not want to keep the Mail Glitch, then don't save.

- Multi-select 24 Spinda with Select, and move it to Box 2, in slots 1 to 24 (the first 4 lines).

- Grab a Spinda and deposit it at Box 2 Slot 27.
If there was a Pokémon at this slot, move it away.
- Close the PC.
- Open the party, and give a mail to the Pokémon with Fly.
(You can also open the Bag and give a letter to this Pokémon)
- Look at the 4 words on the right column of the mail.

- If the 4 words on the right column are "???", then this Spinda is not good.
Close the party/Bag, open the PC, and redo the operation with another Spinda.

- If all of your 30 Spinda are not good, then catch 30 new Spinda.
(The success chance is between 1/20 and 1/40, so you may have to test 60 or 90 Spinda before finding a Spinda that works.)

- If one of the 4 words on the right column isn't "???", close the mail. Your Spinda will work for this method.
(You may have multiple words appearing in the right column, bur one of them will be enough for the next part of the procedure)


4) Determine your Secret ID
4.1) Determine the hexadecimal identifiant associated to the non-glitch word

- You can save here, but if you do not want to keep the Mail Glitch forever, don't save.
Note which Spinda worked with the Mail Glitch in case you have to reset for some reason.

-- Note the word (or words) that appeared in the right column of the mail, as well as the lines at which they appeared.
(Ex : "HUGE POWER" appeared at lines 1 and 2.)

-- If the word isn't a Pokémon name, search it in this list : https://pastebin.com/s53DQyxX
And note its hexadecimal identifiant.

As this list only contains the english words, you will need to find the english equivalent of your word in the game (if you are not playing on an english version).

- To do this, search first the category in which your word appears.
Give another mail to the Pokémon with Fly and look at all the word categories to find the one that contains your word.

These categories are :
Categories in French (Catégories in English) | Hexadecimal values associated
Dresseur (Trainer) | from 0x0200 to 0x021B
Status (Statut) | from 0x0400 to 0x046D
Combat (Battle) | from 0x0600 to 0x063f
Politesses (Greetings) | from 0x0800 to 0x082a
Personnes (People) | from 0x0a00 to 0x0a4b
Réactions (Voices) | from 0x0c00 to 0x0c3f
Discours (Speach) | from 0x0e00 to 0x0e3c
Liaison (Endings) | from 0x1000 to 0x1045
Emotions (Feelings) | from 0x1200 to 0x1245
Etat (Conditions) | from 0x1400 to 0x1445
Actions (Actions) | from 0x1600 to 0x164e
Vie Quotidien. (Lifestyle) | from 0x1800 to 0x182d
Hobbies (Hobbies) | from 0x1a00 to 0x1a36
Temporalité (Time) | from 0x1c00 to 0x1c2d
Divers (Misc) | from 0x1e00 to 0x1e2a
Qualificatifs (Adjectives) | from 0x2000 to 0x2024
Evènements (Events) | from 0x2200 to 0x221d
Capacité 1 (Move 1) | from 0x2400 to 0x249a
Capacité 2 (Move 2) | from 0x2600 to 0x26c8
Phrases to la mode (Trendy Saying) | 0x2800 to 0x2821 (invisible category)

Thi will limit the field of possible words that can be the english equivalent of your word.
Then, use a translator and/or bulbapedia (if the word is an Ability for example) to find an english equivalent of your word.

If the result is clear, you have obtained your english equivalent, and the list gives you the hexadecimal identifiant tied to it. (Ex : "Huge Power" has an hexadecimal identifiant of 0436)
If the result of the translation is vague, look at every english word in the same category as your word, and look if their translation matches with the word you have.
If you are really unsure, ask someone who is good at english for help.

-- If the word is a Pokémon name, there are multiple cases.

Pokémon names fall into two categories : "Pokémon" and "Pokémon 2".
Words in the "Pokémon" category are the names of all the Pokémon in the Hoenn Dex, and the hexadecimal identifiant of a word in this category is the Gen III hexadecimal identifiant of the Pokémon associated to this word.
List of Gen III hexadecimal identifiants : https://bulbapedia.bulbagarden.net/wiki/Pok%C3%A9mon_data_substructures_in_Generation_III
(Ex : Pokémon Seviper has an hexadecimal identifiant of 17B. The hexadecimal identifiant of the word "SEVIPER" is then 017B)

Words in category "Pokémon 2" are the names of all Gen 1 and Gen 2 Pokémon.
The hexadecimal identifiant of the words in this category are of the form 2Axx, where xx is the hexadecimal identifiant of the Pokémon tied to the word.
(Ex : Pokémon Ho-Oh has an hexadecimal identifiant of FA. Thus, the word "HO-OH" has an hexadecimal identifiant of 2AFA)

- If the name is the one of a Gen 3 Pokémon, it is in the category "Pokémon".
- If the name is the one of a Gen 1 /Gen 2 Pokémon that isn't in the Hoenn Dex, then it is in the category "Pokémon 2".

- If the name is one of a Gen 1/Gen 2 Pokémon that is in the Hoenn Dex, it can be in either category "Pokémon" or category "Pokémon 2".
(Ex : The word "ABRA" from category "Pokémon" has an identifiant of 003F, while the word "ABRA" from category "Pokémon 2" has an identifiant of 2A3F)
To determine the correct value in this case, give once again a mail to the Pokémon with Fly, and change the word in question in the mail by the same word from the category "Pokémon 2".
Then, hit "O.K."
If the game tells you about not giving the mail to the PKMN, then the word comes from the category "Pokémon 2".
If the game lets you edit the mail, then the word comes from the category "Pokémon".
You will have to reset your game in this case as this will modify the data of Spinda and turn it into a Bad Egg, and we need it for the next step.


4.2) Determine the PID of a Spinda
- Open the PC and look at the Spinda at Box 2 Slot 27.
- Use the page : http://www.freewebs.com/gatorshark/Spinda%20Painter.htm
in order to find back the PID of this Spinda thanks to its spots.

- To make the things easier, take a picture of your console screen and zoom it in order to distinguish the pixels of each spot more clearly.

- The upper-left spot is a bit different in Gen III. Its down-left side has a pixel less than in the "Spinda Painter", which can cause confusion. You can see the difference in my video, for example.

- If you Spinda only has 2 or 3 spots, you will have multiple patterns possible. (16 if the bottom-left spot is missing, 2 if the upper-left spot is missing, 32 if both are missing)
If, among all possible combinations, only one possesses the same gender and nature as your Spinda, then you will have found the right spot pattern.
Else, you will not be able to find the right spot pattern (and thus the right PID) (unless you are on Emerald/dead battery RS and use RNG Reporter). In this case, you will have to redo step 3 to find another Spinda.

- Once you have found the right spot pattern, check that the nature and the gender of the Spinda are matching.
- Note the hexadecimal and decimal values of the PID of your Spinda.

- Note "high-PID".
"high-PID" is obtained by taking the 4 leftmost hexadecimal characters of the PID.
(EX : If the PID is 08F0FF0E, then high-PID is 08F0)

- Take the decimal value of Spinda's PID and compute : (PID) modulo 24.
If you don't have Windows calculator, type this in google and you will have the answer.
The result is a value between 0 and 23.

- Go at : https://bulbapedia.bulbagarden.net/wiki/Pok%C3%A9mon_data_substructures_in_Generation_III
And look at the table in the section "Substructure order"
Note the 4 letters that correspond to the value "PID modulo 24" that you obtained.
(Ex : If "PID modulo 24" is 0, then I note GAEM.)

4.3) Determine "uncrypted data"
- Find this value in the list below with the instructions given.
This list is made of 4 categories, one per different letter (A,G,E, and M).

- To determine the category that you need to look at, take the sequence of 4 letters that you obtained previously.
If the non-glitch word appeared on line 1 or line 2, look at the category associated to the second letter.
If the non-glitch word appeared on line 3 or line 4, look at the category associated to the third letter.

- All the cases except the case of category (G) and lines 1/4 can be easily determined.
- If you have multiple non-glitch words that appeared, chose one and search the value of "uncrypted data" for this word only.
However, try to avoid the non-glitch word that would give you category (G) and line 1 or line 4.

(The value of "uncrypted data" depends on the non-glitch word you choose, as it depends on the line you choose)

(Ex : The non-glitch word appeared at line 4. I obtained the letters "GAEM" with the "Substructure order" table.
As the non-glitch word appeared at line 4, I look at the third letter, which is "E".
If will look at the "uncrypted data" in category (E) EVs and Contest.
The hexadecimal value of "uncrypted data" associated to category (E) and line 4 is 0000.
Thus, I note "uncrypted data"=0000.)


(G) Growth  :
Line of the non-glitch word | Hexadecimal value of "uncrypted data"
1 | 0x0000 (high bits of Experience, they are at 0000 since Spinda has less than 65.536 exp)
2 | 0x0000 (always 0000)
3 | 0x0000 If Spinda doesn't hold anything (Held Item)
3 | 0x0086 If Spinda holds a Chesto Berry (Held Item)
4 | 0x0000 (high bits of Experience, they are at 0000 since Spinda has less than 65.536 exp)

(A) Attacks :
Line of the non-glitch word | Hexadecimal value of "uncrypted data"
1 | 0x003C If Spinda has Psybeam (Move n°4)
1 | 0x0000 If Spinda doesn't have Psybeam (Move n°4)
2 | 0x1414 If Spinda has Psybeam (256*PP4 + PP3)
2 | 0x0014 If Spinda doesn't have Psybeam (256*PP4 + PP3)
3 | 0x00FD (Move 2, Uproar)
4 | 0x003C If Spinda has Psybeam (Move n°4)
4 | 0x0000 If Spinda doesn't have Psybeam (Move n°4)

(E) EVs et Contest stats :
Line of the non-glitch word | Hexadecimal value of "uncrypted data"
1 | 0x0000 (256*(Beauty)+Coolness )
2 | 0x0000 (256*(Feel)+Toughness )
3 | 0x0000 (256*(EVs Speed)+(EVs Def) )
4 | 0x0000 (256*(Beauty)+Coolness  )


(M) Divers :
Line of the non-glitch word | Hexadecimal value of "uncrypted data"
1 | To compute
Compute (floor((Speed IV)/2))+16*(Special Atk IV) + 512*(Special Def IV), then convert the result in hexadecimal.
2 | 0x0000 (Ribbons and obedience)
3 | To compute
Calculez : Met Lv + (Origin version)*128 + (Ball)*2048 + (Trainer gender)*32.768 in decimal.
4 | To compute
Compute (floor((Speed IV)/2))+16*(Special Atk IV) + 512*(Special Def IV), then convert the result in hexadecimal.

- Use an IVs calculator like : http://www.psypokes.com/dex/iv.php
to compute the IVs of your Spinda
You will need its exact IVs.
For that, you will need to give him Rare Candies and write its stats at different levels. (You will need to clone a Rare Candy 20-40 times)
If you caught your Spinda on Emerald/dead battery RS, you can find back its IVs with its PID via RNG Reporter. Else, you will need an IV calculator.

Origin version is 3 for Emerald
Ball is 1 for Master Ball, 2 for Ultra Ball, 9 for Repeat Ball.
Trainer gender is 0 for male and 1 for female
For the whole possible values, check bulbapedia's page : https://bulbapedia.bulbagarden.net/wiki/Pok%C3%A9mon_data_substructures_in_Generation_III



4.4) Compute your Secret ID
- With an hexadecimal calculator (Windows calculator or http://xor.pw/), compute :
Value1 = (high-PID) xor (identifiant of non-glitch word)
Value2 = (Value1) xor (uncrypted data)

- Convert "Value2" in decimal.
You have now obtained your Secret ID, congratulations !!

(Ex : With "HUGE POWER" as a non-glitch word at line 4, a high-PID of 08F0, and an "uncrypted data" of 0000, I have :
08F0 xor 0436 = 0CC6
0CC6 xor 0000 = 0CC6
CC6 in hexadecimal gives 3270 in decimal. My Secret ID is then 3270.)


- Notes -