# smf_messages

subject: Re: Help to emulate the Egg Ticket Event in Pokemon Crystal (JP)
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=HÃ¡Äky link=topic=8045.msg206458#msg206458 date=1502918013]<br />[quote author=Parzival link=topic=8045.msg206457#msg206457 date=1502907708]<br />[quote author=HÃ¡Äky link=topic=8045.msg206452#msg206452 date=1502861965]<br />(It assumes that the PokÃ©mon available using the Egg Ticket were the same ones, with the same probabilities, as in the English versionâ€™s Odd Egg event; I donâ€™t know for sure that this assumption is correct.)<br />[/quote]From (ECCH) Bulbapedia:<br />[quote]In the Japanese version of PokÃ©mon Crystal, there is a 50% chance the hatched PokÃ©mon will be Shiny (IVs 2/10/10/10) and a 50% chance it will not (IVs 0/0/0/0).<br />In the international versions of PokÃ©mon Crystal, there is a 14% chance the hatched PokÃ©mon will be Shiny (IVs 2/10/10/10) and an 86% chance it will not (IVs 0/0/0/0), but the chance of any particular PokÃ©mon species hatching from the Egg and the chance of any given species being Shiny are not uniform.[/quote]<br />[/quote]<br /><br />Bulbapedia originally said that the Odd Egg had a [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=prev&amp;oldid=54588]50% chance of being shiny in [i]all[/i] versions[/url], then that it was [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=prev&amp;oldid=326412]50% for the Japanese event but 12.5% in the English version[/url], then reverted back to [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=prev&amp;oldid=870182]50% for all versions[/url] until someone finally came up with the correct [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=1499762&amp;oldid=1499352]14% figure from the localizations[/url]. I have no reason to believe that the 50% figure is anything more than someoneâ€™s guess thatâ€™s been propagated as fact.<br />[/quote]Fuck it. At least we can say we tried.


subject: Re: Emulating the Mobile Adapter GB
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  I wonder how awkward that MD5 implementation is...<br /><br />Game Freak&#039;s parser bugs don&#039;t surprise me. An RCE vector here would allow for some interesting custom servers; however RCE via trades exists too, which would be the more dangerous, in my opinion, as any player could trigger it. I guess a custom server would have to somehow detect it (given this RCE vuln would be in the P2P communication with &quot;phone numbers&quot; etc).<br /><br />And now I&#039;m thinking about a server with its own partial GB emulator, MITMing the connection if it detects an RCE via trading, and specifically implementing GB Mobile Adapter emulation itself so the payload can get any further data... Saved off for further reversing/analysis of course.<br />


subject: Re: Emulating the Mobile Adapter GB
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Maybe when Mobile Adapter GB emulation is finished, a patch should be distributed to modify the ROM to add some checking ?<br />Also, is there any chance to allow homebrew games to use the Adapter ? I know I&#039;m getting ahead of everything, but...


subject: Re: Easiest way to obtain Celebi on Japanese Gold and Silver?
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  im wondering does trading a bad clone you made with coin case ace work as a method of getting a bad clone in crystal


subject: cloneing glitch gone wrong
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  tried to clone a pokemon in crystal but when i tried to open up the pc box the screen turns white and the game locks up


subject: Re: Easiest way to obtain Celebi on Japanese Gold and Silver?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=forsyz link=topic=8044.msg206464#msg206464 date=1502943900]<br />im wondering does trading a bad clone you made with coin case ace work as a method of getting a bad clone in crystal<br />[/quote]<br /><br />You might be able to trade a stable ????? to Crystal yes. In the past I&#039;ve been able to trade those, and curiously they may add to the number of PokÃ©mon in the PokÃ©dex like if you hatched them.<br /><br />Normally bad clones begin as unstable hybrids (hence are possibly untradeable), but stabilized ones or stable ????? obtained directly aren&#039;t unstable hybrids.


subject: Re: cloneing glitch gone wrong
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=forsyz link=topic=8047.msg206465#msg206465 date=1502944044]<br />tried to clone a pokemon in crystal but when i tried to open up the pc box the screen turns white and the game locks up<br />[/quote]<br /><br />Hmm, I know sometimes when the game locks up and you have a bad clone in the box the freeze can be avoided by performing certain actions.<br /><br />The freezes could be due to the game printing the ? marks (freeze avoidable, may only happen in Crystal), or 0 maximum HP (freeze unavoidable).<br /><br />Unfortunately I don&#039;t know of specifics but try saving and resetting, doing it at PokÃ©mon Centers in different locations, using items to get the unusable message before opening the box, going to toss an item in the bag but not tossing it, saving and resetting, etc.<br /><br />Hope that helps.


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I absolutely hate communists because they destroyed (and continue to further destroy) my country. So no I don&#039;t care if a couple of the dogs get run over, pepper sprayed or maced.


subject: Re: Emulating the Mobile Adapter GB
poster_name: ajxpk
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ajxpk
icon: xx
body:
  Hey @HÃ¡Äky. Finally I decided to register here. I&#039;m following this project for quite a while now and I think it&#039;s great.<br />Even knowing that this is something for the future... how awesome it would actually be to see people battling and trading online on servers using the Japanese Crystal Version?<br /><br />There&#039;s one thing I wanted to ask you about, is there any chance you might update the Python Script from last year to support the News System?<br />Possibly so that it downloads the so-called &quot;First Issue&quot; from the localized versions? I mean it&#039;s unlikely that we would be able to reconstruct what was actually distributed, even some of the later News have been documented by Kakeru... but there might be small details missing. I think with the &quot;first issue&quot; we are as close as we could get IMO.


subject: Database Wikification - Would anyone like to assist?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  I spoke with Abwayax yesterday about our dex extension, and due to persisting errors we decided to disable it. This has for a second time broken all of the dex pages that aren&#039;t already converted. However fortunately the data is still there other than base stats, which are relatively easy to find if you have the ROM and a hex editor (see [url=https://web.archive.org/web/20100905194116/http://www.romendo.net/stag019/missingno_explained.html]this article by Stag019[/url]) and are also mainly documented on Bulbapedia.<br /><br />Due to computer addiction however I&#039;ve allocated a maximum of 5 hours each on Mondays and Thursdays to fill out Generation I glitch PokÃ©mon data in the format below (the rest of the days are for my other projects (YouTube and Starfy 1 translation project) also with a five hour cap):<br /><br />http://glitchcity.info/wiki/User:Torchickens/Sample_RBY_glitch_Pok%C3%A9mon<br /><br />Even with this however, finishing the GlitchDex will likely still take a few weeks.<br /><br />For this reason I&#039;m asking whether if anybody like to team up and split the work please? :) <br /><br />Here is an article that is already finished for further reference:<br /><br />http://glitchcity.info/wiki/GlitchDex/Y:000<br /><br />If you&#039;d also want to work on the AttackDex or ItemDex and the newer TypeDex, UnownDex (e.g. wikifying and tidying individual move, item articles, adding more articles, finishing a front page with [url=http://tools.wmflabs.org/excel2wiki/]excel to wiki[/url]), I&#039;d also be very grateful, I&#039;ve wanted to get these finished as a priority before adding new glitch pages. Thanks in advance!


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: Spoink
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Maybe I could try after I finally finish Poke`mon Yellow? I do believe that the previous wiki entries were messy. However those red and blue colours hurt my eyes. Maybe replace them? The red could be FFC0C0 instead of FF0000, and the blue could be C0C0FF instead of 0000FF? Or maybe they could be averaged towards grey instead of getting lighter. Yellow and green are fine imho.<br /><br />I don&#039;t know, the latter half of that paragraph was kind of nitpicky and off-topic.


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=drc link=topic=8048.msg206474#msg206474 date=1502983395]<br />Maybe I could try after I finally finish Poke`mon Yellow? I do believe that the previous wiki entries were messy. However those red and blue colours hurt my eyes. Maybe replace them? The red could be FFC0C0 instead of FF0000, and the blue could be C0C0FF instead of 0000FF? Or maybe they could be averaged towards grey instead of getting lighter. Yellow and green are fine imho.<br /><br />I don&#039;t know, the latter half of that paragraph was kind of nitpicky and off-topic.<br />[/quote]<br /><br />Hmm, FFC0C0 is a pink, which doesn&#039;t really suit the template, but that shade of blue is nice. I changed the red to D5111B and the blue to your shade of blue. How does it look now?<br /><br />[quote author=drc link=topic=8048.msg206474#msg206474 date=1502983395]<br />Maybe I could try after I finally finish Poke`mon Yellow?<br />[/quote]<br /><br />Thanks! Do you mean the research document you made? I think I already gathered most of the data except for the name bytes and palette attribute data and added them to the non-wikified articles so that may save you time. :)


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: Spoink
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote=&quot;Torchickens&quot;]Hmm, FFC0C0 is a pink, which doesn&#039;t really suit the template, but that shade of blue is nice. I changed the red to D5111B and the blue to your shade of blue. How does it look now?[/quote]<br />Looks great! I also like how there&#039;s more technical information about the PokÃ©mon than Bulbapedia&#039;s pages, that&#039;s something I always thought was missing.


subject: Re: Riots
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I don&#039;t see how this slipped from &quot;anti-racism&quot; to &quot;communist&quot;, but please fill me in.


subject: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: rortik
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  On a similar note, is there a list of all the glitch moves and their effects? I&#039;ve been messing with my Emerald cart a bit and have gotten some cool stuff like higher-than-protect priority moves and ones that glitch out the battle, but it&#039;s all random &quot;corrupt stuff then pray I get cool things&quot; without any method to the madness.


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8046.msg206477#msg206477 date=1502991741]<br />I don&#039;t see how this slipped from &quot;anti-racism&quot; to &quot;communist&quot;, but please fill me in.<br />[/quote]Some of the rioters are Communists and Anarchists.


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8046.msg206477#msg206477 date=1502991741]<br />I don&#039;t see how this slipped from &quot;anti-racism&quot; to &quot;communist&quot;, but please fill me in.<br />[/quote]<br /><br />Antifa is a staunchly anarchist/communist organization. They can go to hell. 


subject: Red Decamark from egg?
poster_name: WildShinyEgg
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: WildShinyEgg
icon: xx
body:
  Exactly what the title says. I got a red Decamark out of an egg. And no matter how hard I try I can&#039;t get it to work again since I saved too early.<br />I did Glitzer Popping on that route with the Winstrate house, talked to the trainers there expecting gibberish (spoiler: it was just normal dialogue), did it again (I had used a Fluffy Tail in the first try), forgot I had run out of Fluffy Tails, did the whole scrolling up thing and whited out, which teleported me back to Lilycove. Checking the PC I found a normal Egg in a pile of Bad Eggs, in Box 2 slot 12. I withdrew it thinking it was a normal Egg, planning to go catch a Slugma to make it hatch faster. I turned off the PC and it probably took two steps for the Egg to hatch. It hatched into a red Decamark that made the game reset.<br />The PokÃ©mon that was in Box 2 slot 12 before that Egg was a Japanese Pikachu with the fateful encounter thing holding a Light Ball, could this have something to do with the fact it turned into an Egg containing a Glitch PokÃ©mon?<br />Also, did anyone else get this to happen? How can I get it to happen again?<br /><br />tl;dr: Got edgy Decamark recolor, it made the game reset and I can&#039;t manage to get it again<br /><br />EDIT: Got it again except with shittier colors and it took longer to hatch<br />[img]http://i.imgur.com/RCiVYEy.png[/img]<br />EDIT2: Managed to get it again, took longer to hatch, currently trying to get it to battle<br />[img]http://i.imgur.com/4e3iNCo.png[/img]<br />Also got a blue one<br />[img]http://i.imgur.com/H4XGrHD.png[/img]


subject: how safe is the cloneing glitch
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  i&#039;ve done it a few times on a new save so i don&#039;t lose any thing and i have not courrpted my save yet im asking this because i want to do this glitch on a file that i&#039;ve completed and have legit shinys on


subject: Re: Riots
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Okay but then, ravioli, you&#039;re derailing the subject, if they were there for the anti-racism who cares what the rest of their convictions are ...?<br />Well whatever, since I know nothing about these riots I should probably stop butting in?


subject: Re: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  On a list of invalid moves and their effects, not yet. And most invalid moves basically are the Gen III equivalent of Super Glitch because of not only the move / type(?) names being very long (I can&#039;t remember if type names inside battle get length-capped or not) but also the &quot;a TYPE move&quot; mechanic (an invalid type here overflows the pointer array, causing the shown move name when used to be also potentially very long). For an invalid move to not have these effects it needs to have a short enough name and a valid type.<br />(This is also the cause of the &quot;Instant Win&quot;, &quot;Instant Flee&quot; etc moves, the long strings getting copied around overwrites the battle type)


subject: Re: Riots
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  What ISSOtm doesn&#039;t tell you is that he is a supporter of the french far-left party which is associated with the french communists :P (sorry dude&nbsp; ;D)


subject: Re: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Yeah it&#039;s very possible fortunately. :)<br /><br />If you use the in-game trade Plusle in Emerald (known as Pluses), its first move will always be controlled by its Attack and HP EVs, with the Attack EV being the most significant byte and the HP EV being the least significant byte.<br /><br />The move IDs for valid moves can be found [url=https://bulbapedia.bulbagarden.net/wiki/List_of_moves]here[/url] in decimal (which you&#039;ll have to convert to hexadecimal to know what the most significant byte is and convert it back). So for instance you want Psycho Boost. That is ID 354. Converted to hexadecimal it is 01 62. Convert them back and we get the most significant byte as 1 (1 Attack EV) and the least significant byte as 98 (98 HP EVs).<br /><br />Though it&#039;s not exhaustive, Metarkrai has a list of useful effect glitch moves in [url=https://pastebin.com/2kJpBQCr]this Pastebin[/url].<br /><br />Hope that helps!


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=drc link=topic=8048.msg206476#msg206476 date=1502986872]<br />[quote=&quot;Torchickens&quot;]Hmm, FFC0C0 is a pink, which doesn&#039;t really suit the template, but that shade of blue is nice. I changed the red to D5111B and the blue to your shade of blue. How does it look now?[/quote]<br />Looks great! I also like how there&#039;s more technical information about the PokÃ©mon than Bulbapedia&#039;s pages, that&#039;s something I always thought was missing.<br />[/quote]<br /><br />Awesome! I&#039;m glad it now looks OK. :)<br /><br />Yeah, I feel it&#039;s always a good thing to have extra information and it reminds me of Wikipedia&#039;s articles on stars, planets, etc. They have a lot of information making it a good database.<br /><br />I don&#039;t want GCL wiki to become redundant over Bulbapedia&#039;s glitch articles but at the same time I support Bulbapedia and think it&#039;s amazing how they have covered so much information on the PokÃ©mon franchise. If Bulbapedia are interested when GCL wiki is more complete I&#039;d personally like us to become affiliates and maybe we could even form a glitch network similar to NIWA.<br /><br />Though Super Mario Wiki and Donkey Kong Wiki for instance are both in NIWA they don&#039;t take each other&#039;s information, so as long as people don&#039;t copy information word for word I feel that would be fine. In many cases GCL wiki could have more technical information on glitches and perhaps Bulbapedia could have a template that says &quot;for more technical information, Glitch City Wiki also have an article on this glitch&quot; or similar.


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Parzival
icon: xx
body:
  Some of these riots could be stopped if people went from supporting [i]parties[/i] (almost used Discord-format italics) to supporting [i]individual people[/i]. <br /><br />&quot;WE HATE REPUBLICANS&quot;<br />And yet I see the &quot;MAGA&quot; hat on your head.<br />&quot;Well, Trump&#039;s alright, I guess...&quot;<br />Support candidates, not parties, and you could be off doing other s**t than here being an arsehole.<br />&quot;But you can&#039;t.&quot;<br />Yes, you can.<br />&quot;Our country isn&#039;t set up for that!&quot;<br />Yes, it is.


subject: Re: Red Decamark from egg?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [url=http://glitchcity.info/wiki/Pomeg%20corruption%20glitch]Start here. Figure out where everything went horribly, horribly wrong.[/url]


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: camper
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Bulbapedia glitch articles are more based on observations (sometimes special cases that rarely happen) while ours are more about what actually happens and how you can replicate it.


subject: Re: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: Metarkrai
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You can do a &quot;list&quot; of all glitch moves (name, and effect) from a Gen III Rom then use a program to search through that list for glitch moves with certain characteristics.<br />For example, if you want a move with high power, more than 100 accuracy, and some priority, using a tool like that will make things easier for you.<br />If you&#039;re interested into this, I can give you the scripts that ThezzAzzGlitch kindly made for me (even though they aren&#039;t very deep) and indicate you where the lists start from.<br /><br />Since the parts of the Rom that is used to determine the name and effects of glitch moves is not the same through all games (R/S/E/Fr/Lg) and through all languages (Eng/Fr/Ita/Spa/Ger/Jpn), the name and effect of most glitch moves are different from a version to another. <br />In general, the first thousand glitch moves have the same characteristics on every language, as well as between R/S or Fr/Lg, but aside from that you have to expect that glitch move 0x547A is quite different in Emerald Fr than in Emerald Eng.<br /><br />Glitch Moves can be used or can crash/freeze the game in many ways.<br /><br />If a glitch move doesn&#039;t have a valid effect, it always seems to freeze the game. (I haven&#039;t tried all invalid effects but it always seems to be the case)<br /><br />If a glitch move name is too long (more than ~1100 characters or something like that), opening the &quot;Fight&quot; menu during a battle will crash the game because the game overwrites some values that manage the fight. (The game forces itself to write the whole glitch move name when you open the fight menu, and overwrites many RAM values in the process).<br />You can change certain RAM values with a glitch move name, but it&#039;s restricted to a block of ~1000 bytes somewhere in RAM. (While some uses have been found, some nice gimmicks could be found if you can find one RAM value or two in that block that have a specific use)<br /><br />When you use a glitch move, the name of the move you use is often different from the name you have in the &quot;Fight&quot; menu.<br />I still don&#039;t know why this thing happens, but this is another souce of crash as certain character sequences that the game displays can freeze the game (especially the ones with the &quot;oe oe oe oe....&quot;)<br />If the glitch moves have valid types, then the move name isn&#039;t displayed and the game uses the &quot;a TYPE move&quot; sentence instead, as Wack0 said. (which is quite useful in speedrun as it saves many frames since there are way less characters to type onscreen)<br />The name that is displayed when a glitch move is used seems to mainly depend on the move&#039;s effect. (For example, when you use a move with Guillotine&#039;s effect, the name displayed when you use the move always end up with &quot;the great new hope !&quot;) However, I don&#039;t know why or how this happens, as it is not true for all effects.<br /><br />A glitch move&#039;s name can also freeze the game on some other cases where the game tries to store the move&#039;s name somewhere and ends up erasing important values/in an overwriting loop.<br />This can happen when trying to forget/learn a glitch move, or when certain moves in battle will have an effect on the previously used glitch move (like Sketch for example).<br />As previously, if the glitch move&#039;s lenght is not important, you will not freeze.<br /><br />The sprite for Glitch Types can also crash the game when you see them in a PokÃ©mon&#039;s summary. (Many do but some don&#039;t. There are even some glitch types that only crash the game after a few seconds, leaving you some time to enjoy the show or prevent the crash.)<br /><br />There is a safety measure in emerald that prevents the game from overwriting data when writing a name that is longer than intended, but this feature is only used in a PokÃ©mon summary.<br />As such, long glitch move names have no effect in a PokÃ©mon summary and don&#039;t crash the game.<br />Viewing the description of a glitch move name has no side effect too.<br /><br />For everything related to the summary, things are different in RS and FrLg as they are coded differently.<br />In RS, you won&#039;t crash from a Glitch Type sprite, but long glitch names do overwrite some RAM data (I used that to remove the Safari Mode while inside Safari Zone).<br />In FrLg, every page of the summary is loaded in advance, and many things aren&#039;t treated the same way, and glitch moves (as well as glitch pokÃ©mon) can induce many graphical glitches as well as some boundary breakers (allowing you to scroll beyond the 6th party slot or beyond the 30th PC slot for example).<br /><br />In RS, having glitch moves in the &quot;Fight&quot; menu also causes graphical hindrance with many japanese characters (this can also crash the game during the process).<br />A few nice things can be seen this way.<br /><br />The adresses for glitch moves animations are also read on a certain part of ROM. Almost all glitch moves animations will crash the game in some way.<br />Some Glitch Moves animations can show different effects over multiple attempts. (some can be cool like changing the music or throwing a Ball, but it&#039;s not something you can efficiently reproduce)<br /><br />Regarding trades, you can&#039;t trade a PokÃ©mon knowing a glitch move from one version to another if this glitch move has a long name (more than 10/11 characters) in one of the two versions.<br />However, you can use the wireless trade station thing (like GTS) in E/FrLg to trade PokÃ©mon with Glitch moves without any issue.<br />Else, you have to use the in-game traded Plusle and follow several steps to transfer any Glitch Move to any Gen III game (https://pastebin.com/237FpUTf ).<br /><br /><br />Thus, the known useful uses of glitch moves are as follow :<br />-Use Glitch moves with super strong effects/accuracy/pps/priority to easily go through some battles.<br />-Use Glitch Moves names to change the battle type to allow bag usage and PokÃ©mon capture.<br />-Use Glitch Moves names to change the battle type into a dev type that ends the fight when B is pressed.<br />-Use Glitch Moves to do fun stuff in FrLg PokÃ©mon summary or in RS Fight menu.<br />-Use Glitch Moves Animations to call certain RAM areas and execute arbitrary code (needs setup but doable, I still haven&#039;t finished writing down a good procedure)<br />-Use Glitch Moves names to get into RS Safari Zone but without Safari Mode.<br />-One or two things I may have forgotten.<br /><br /><br />Also, for the speedrunning case, I would like to emphasize that even though some PokÃ©mon/glitch moves combinations can make battle Frontier/battles really easy, it is not that easy to get a working combination in an optimal time. (I am still struggling about the moves combination for the Battle Palace team in order to remove most of the bad luck scenarios.)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Is there a quick cloning method known in red and blue? I found an easy way, but I wanted to know if it&#039;s common knowledge by now.


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=camper link=topic=8048.msg206491#msg206491 date=1503076591]<br />Bulbapedia glitch articles are more based on observations (sometimes special cases that rarely happen) while ours are more about what actually happens and how you can replicate it.<br />[/quote]Like instead of &quot;the game crashes&quot;, we say &quot;We hit an FF, thereby overwriting all of memory and going into an infinite loop&quot;.<br />Sorry, just making an example to help clear it up because I&#039;m tired.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=6638.msg206493#msg206493 date=1503079133]<br />Is there a quick cloning method known in red and blue? I found an easy way, but I wanted to know if it&#039;s common knowledge by now.<br />[/quote]<br />http://glitchcity.info/wiki/Pok%C3%A9mon_cloning_(Generation_I)


subject: Re: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Metarkrai link=topic=8049.msg206492#msg206492 date=1503077153]<br />When you use a glitch move, the name of the move you use is often different from the name you have in the &quot;Fight&quot; menu.<br />I still don&#039;t know why this thing happens, but this is another souce of crash as certain character sequences that the game displays can freeze the game (especially the ones with the &quot;oe oe oe oe....&quot;)<br />[/quote]<br /><br />Same reason as &quot;a TYPE move&quot;, basically there&#039;s an array of pointers to these strings in the ROM (starts at 0x401604 in EN Ruby), and the array is indexed by the type-id without any checks, thus some uint32 past this array is used as a pointer to the move-string.


subject: Re: Red Decamark from egg?
poster_name: WildShinyEgg
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8050.msg206490#msg206490 date=1503067548]<br />[url=http://glitchcity.info/wiki/Pomeg%20corruption%20glitch]Start here. Figure out where everything went horribly, horribly wrong.[/url]<br />[/quote]<br /><br />Nothing went wrong, I wasn&#039;t trying to get legends from Eggs or anything. I was just messing around with the glitch. I&#039;m just surprised this happened. Usually my PC just gets choke-full of Bad Eggs, normal PokÃ©mon with corrupted nicknames and some random PokÃ©mon I caught turned into an Egg that gains two glitch moves when hatched (like that Minun from my avatar). This kind of thing (as in, hatching glitch PokÃ©mon) never happened to me.


subject: Re: Riots
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Also I must point out that &quot;some&quot; relate the FI to the communists, but I don&#039;t agree that it is. Again, the people, not the party.<br /><br />And yes, I didn&#039;t vote for the FI but rather for the ideas that they brought in.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=6638.msg206496#msg206496 date=1503080469]<br />[quote author=DoubleNegative link=topic=6638.msg206493#msg206493 date=1503079133]<br />Is there a quick cloning method known in red and blue? I found an easy way, but I wanted to know if it&#039;s common knowledge by now.<br />[/quote]<br />http://glitchcity.info/wiki/Pok%C3%A9mon_cloning_(Generation_I)<br />[/quote]<br /><br />I found an 8F setup that can be used for cloning. It&#039;s way safer than save corruption and also probably faster. Should I post it here?


subject: Pokemon and item duplication using save corruption!
poster_name: Gravedigger
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Gravedigger
icon: exclamation
body:
  So, this is extremely tricky but from my testing this won&#039;t mess your savefile up. (Its at your own risk though)<br />The idea comes from bad egg cloning in other generations, except in gen IV its way harder to pull of.<br /><br />So, here is how you do it:<br />1) save underneath a pc box, this is not required but its extremely unlikely you&#039;ll get it first time. <br />2) put one (or more) pokemon in the box. So far I only got it to work with one pokemon, but it might be possible and easier with more than one.<br />3) save the game, count the cycles of the clock. Usually it stops at 9 and 7/8 rounds. We want to reset your game precisely on 9.7/8 but before the clock gets removed from screen or it actually saves. too soon makes the game put you back without saving the box, too late saves the party as it currently is too. We need the game to save the box, but rollback your party to an older save. <br />4) reset game; if everything went smoothly your screen should go blue and say your savefile was corrupted and its going to use an older savefile.<br />Once thats over, check your box. With some luck you will have duplicated your pokemon and item!<br /><br />https://www.youtube.com/watch?v=hbvYY-B5Vik <br /><br />Important things to notice: as you rollback your party new pokemon put into it will get wiped from your game! This does however make for a gen 4 bad egg removal trick too!<br /><br />If anyone gets corrupted clones from doing this please comment on species, moves, whatever is different from the original! My bidoof was an exact copy, and even though its awesome you can duplicate I&#039;m more interested in its uses for potential use of glitchmoves.


subject: Re: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: rortik
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I got some more glitch moves and had some fun stealing wild Pokemon from the Pike, too bad there&#039;s not a good way to catch trainer Pokemon.<br /><br />I wonder if there&#039;s some way to steal Factory Pokemon -.-


subject: Re: Riots
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I know that, I&#039;m just teasing you :)<br /><br />But to be fair, it&#039;s not that people associate them, they associate themselves. Many if not most far-left ideas were once French communist ideas (we&#039;re obviously not talking about Soviet communism here) but they had less exposure then because nobody wanted to listen to commies. So now they say they are far-leftists :p<br /><br />Anyway back to the debate!<br /><br />


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  Hello Gravedigger,<br /><br />Great discovery! I only knew that it was possible to clone through trade in Gen IV and V. This is above in so many ways, I need to try :)


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Gravedigger
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Probaply should add save time is affected by coordinate changes, party box changes and flagchanges (probaply more). If you can&#039;t get the timing to work try to count the cycles yourself and reset the game just before it hits save! It can take a lot of attempts so I wish you lots of luck!


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Easy (ish) cloning: <br />Prerequisite: box 1 is empty and the pokemon to clone is in another box. The pokemon to clone also cannot have any HMs.<br />You will also need the standard 5 pokemon 8F setup.<br /><br />Inventory:<br />* any item x any<br />* 8F<br />* Lemonade x 19<br />* X accuracy x 128&nbsp; &nbsp; (127 if using yellow, but then I don&#039;t know how wsm works.)<br />* Carbos x 218<br />* Poke ball x 119<br />* TM01 x any<br /><br />Procedure:<br />* Change to box 1 and use 8F<br />* Move the pokemon to clone into box 1<br />* Release all the pokemon in box 1 by releasing from the top of the list repeatedly until the box is empty.<br />* Use 8F again. The box is now filled with unstable hybrids of your pokemon and &#039;M (FF)<br />* Withdraw as many as you want and use the daycare to stablize the hybrids. They should all stablize to be the originally deposited pokemon.<br /><br />The last step is not necessary if you want to transfer the clones to sun/moon. Just transfer the box, toss 18 lemonade, use 8F, and withdraw the original pokemon.


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Caveat
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Jeez, Gravedigger, you&#039;re discovering all kinds of stuff now!<br /><br />I&#039;ll try it whenever I can get my hands on my Platinum game...


subject: Re: Perfect opportunity
poster_name: natanelho
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  get a magnet and a ds cart and do magnethax. extra points if you use the jpn pokemon g/s &quot;gb cartridge&quot; magnets


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Gravedigger
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It 100% works on platinum, but other version haven&#039;t been confirmed. Theorethicly it should work at least on Diamond and pearl too, and maybe even HG/SS.


subject: Re: Copycat/Protect Bug
poster_name: Shrew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=MegaLuxray link=topic=8042.msg206400#msg206400 date=1502562786]<br />i think this is because Dark types are immune to moves affected by Prankster, which I assume was Liepard&#039;s Ability. And this includes moves called by moves like Metronome, Assist, Copycat, and Sleep Talk.<br />[/quote]<br /><br />[i]Oh[/i], you&#039;re right. Thanks for figuring that out!&nbsp; :D 


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  I&#039;ve been discussing with MAP on PRAMA&#039;s Discord, who also did it in Platinum. We should confirm this in OHG/ASS also, unfortunately I don&#039;t have access to my cartridges now, so I may only try with emulated games.<br /><br />It is also very important to test this on Gen 5 games, since cloning in Generation 5 is only performed through trade at this time but is very hard.


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Gravedigger
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Gravedigger
icon: xx
body:
  I have two nintendo&#039;s and black and white on me, I&#039;ll test it for bothe rn. <br /><br />edit: if it is possible testing it should be in between 4-5 blue balls, as those seem to be the time in which parties and boxes get saved<br />


subject: Re: Perfect opportunity
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=natanelho link=topic=8031.msg206510#msg206510 date=1503159731]<br />get a magnet and a ds cart and do magnethax. extra points if you use the jpn pokemon g/s &quot;gb cartridge&quot; magnets<br />[/quote]Nice idea, but I have no SLOT1 access.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: natanelho
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=6638.msg206508#msg206508 date=1503154011]<br />Easy (ish) cloning: <br />Prerequisite: box 1 is empty and the pokemon to clone is in another box. The pokemon to clone also cannot have any HMs.<br />You will also need the standard 5 pokemon 8F setup.<br /><br />Inventory:<br />* any item x any<br />* 8F<br />* Lemonade x 19<br />* X accuracy x 128&nbsp; &nbsp; (127 if using yellow, but then I don&#039;t know how wsm works.)<br />* Carbos x 218<br />* Poke ball x 119<br />* TM01 x any<br /><br />Procedure:<br />* Change to box 1 and use 8F<br />* Move the pokemon to clone into box 1<br />* Release all the pokemon in box 1 by releasing from the top of the list repeatedly until the box is empty.<br />* Use 8F again. The box is now filled with unstable hybrids of your pokemon and &#039;M (FF)<br />* Withdraw as many as you want and use the daycare to stablize the hybrids. They should all stablize to be the originally deposited pokemon.<br /><br />The last step is not necessary if you want to transfer the clones to sun/moon. Just transfer the box, toss 18 lemonade, use 8F, and withdraw the original pokemon.<br />[/quote]can you please write the asm code? I really dont understand why people dont do it... that&#039;s very easy to do, pretty useful for the ones who want to know what exactly it does and it doesn&#039;t do any harm to anyone...


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=natanelho link=topic=6638.msg206516#msg206516 date=1503260426]<br />can you please write the asm code? I really dont understand why people dont do it... that&#039;s very easy to do, pretty useful for the ones who want to know what exactly it does and it doesn&#039;t do any harm to anyone...<br />[/quote]He... did.<br />The items script is [b]LITERALLY GBz80ASM[/b].<br />It&#039;s a simple conversion with ISSOtm&#039;s converter, which can be found in the &quot;Useful Tools&quot; section of the sidebar, [url=http://glitchcity.info/wiki/GBz80%20to%20Items]or here[/url].


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=natanelho link=topic=6638.msg206516#msg206516 date=1503260426]<br />can you please write the asm code? I really dont understand why people dont do it... that&#039;s very easy to do, pretty useful for the ones who want to know what exactly it does and it doesn&#039;t do any harm to anyone...<br />[/quote]<br /><br />lemonade x 19&nbsp; &nbsp; &nbsp;  ld a,$13 ; box capacity is $14 so use that - 1 to bring box to near full<br />X accuracy x 128&nbsp; &nbsp; ld l,$80&nbsp; ; low byte of box size address <br />Carbos x 218&nbsp; &nbsp; &nbsp; &nbsp;  ld h,$DA ; high byte of box size address<br />Poke ball x 119&nbsp; &nbsp; &nbsp; inc b ; not important&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  ld (hl),a ; make box 1 currently have 19 pokemon<br />TM01 x any&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  ret<br /><br />This setup is explained in an earlier post and is called the pseudo-gameshark.


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  That&#039;s lame because the game still use the clock counter for trades. That&#039;s why trade-cloning in Gen V was easily adapted from trade-cloning in Gen IV.<br /><br />They didn&#039;t change that but they changed the system in single-player game. Weird.


subject: Re: Pokemon and item duplication using save corruption!
poster_name: Gravedigger
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It has a clock and the blue balls, I just haven&#039;t taken the time to convert the time to clockrounds. I&#039;ll do that later today :)


subject: Re: Riots
poster_name: Spoink
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I think riots are dumb. A lot of people (myself included) look at others who steal and break into stores for their &#039;cause&#039; as idiots and gravitate further away from whatever cause that is, rather than joining it.


subject: Re: Riots
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Obviously, AntiFa is only breaking into those stores so they can smash capitalism and distribute the ends of production to the common man.


subject: Newly-Accessible Debug Menus in Pokemon Ruby
poster_name: Cryo
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Cryo
icon: xx
body:
  In addition to the two existing debug menus found on [url=https://tcrf.net/Pok%C3%A9mon_Ruby_and_Sapphire/Debug_Menus]TCRF&#039;s Ruby/Sapphire Debug Menus[/url] article (Sound Test and Pokeblock Test), I&#039;ve found a way to access three other debug menus in Pokemon Ruby and Sapphire. I&#039;ve included the addresses where each debug menu can be found, as well as GameShark codes that can be used to access the menus on actual hardware.<br /><br />Note: All addresses below are specific to Pokemon Ruby v1.0 (U).<br /><br /><br /><br />[b][u]SOGABE Menu[/u][/b]<br /><br />Function Address: [b]0814A414[/b]<br /><br />This one isn&#039;t that impressive, but it&#039;s a debug menu nonetheless. The options are as follows:<br /><br />[tt]1. 1st round<br />2. 2nd round<br />3. 3rd round<br />4. 4th round<br />5. 5th round<br />6. 6th round<br />7. 7th round<br />8. 8th round[/tt]<br /><br />I&#039;m not really sure what these do, but it might be associated with badge limitations or something.<br /><br />[img]http://i.imgur.com/ABeV2qh.png[/img]<br /><br />[tt][u]GameShark Code[/u]<br />A6696B14 E11802B1<br />872FAA40 5896C524<br /><br />Press RIGHT+SELECT while paused<br />to access the SOGABE menu.[/tt]<br /><br /><br /><br />[b][u]MORI Menu[/u][/b]<br /><br />Function Address: [b]08083F6C[/b]<br /><br />This one&#039;s a bit more useful. The options are as follows:<br /><br />[tt]1. Search a child<br />2. Egg<br />3. Egg (male)<br />4. 1000 steps<br />5. 10000 steps<br />6. MOVE TUTOR<br />7. Breed an egg<br />8. Long name<br />9. Pokeblock Case[/tt]<br /><br />Most are intuitive as to what they do, but #1, #8, and #9 might be confusing. &quot;Search a child&quot; shows the contents of an egg if it&#039;s at the front of your party, while &quot;Long name&quot; replaces the name of the first Pokemon in your party with a long, generic name (ãªãŒã„ãªã¾ãˆã½ã‘ã‚‚ã‚“, or &quot;Long Pokemon name&quot;). &quot;Pokeblock Case&quot; deletes all of the Pokeblocks in your Pokeblock Case.<br /><br />[img]http://i.imgur.com/5sSBB87.png[/img]<br /><br />[tt][u]GameShark Code[/u]<br />4734D246 90FE8764<br />CC42BB92 3A9D71F0<br /><br />Press SELECT while paused<br />to access the MORI menu.[/tt]<br /><br /><br /><br />[b][u]MATSUDA Menu[/u][/b]<br /><br />Function Address: [b]080A9B28[/b]<br /><br />Lastly, there&#039;s the MATSUDA menu, which mostly deals with Contests. The options are as follows:<br /><br />[tt]1. Contest<br />2. Contest results<br />3. Contest (comm.)<br />4. Init comm. data<br />5. Set highest score<br />6. Reset highest score<br />7. Set all art museum items[/tt]<br /><br />[img]http://i.imgur.com/1w6PWgP.png[/img]<br /><br />If you select the &quot;Contest&quot; or &quot;Contest (comm.)&quot; options, you&#039;ll be brought to an interesting interface. Here, you can set all of the parameters for a Contest (trainers, Pokemon, stats, rank, moves, etc.) and initiate the Contest by pressing the START button. The bottom-right option exits the interface.<br /><br />[img]http://i.imgur.com/Y0SB3ID.png[/img]<br /><br />[tt][u]GameShark Code[/u]<br />E7F53B53 68B223B0<br />4C529E3E 7EB9CBA6<br /><br />Press LEFT+SELECT while paused<br />to access the MATSUDA menu.[/tt]


subject: Re: Emulating the Mobile Adapter GB
poster_name: catsinabucket
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: catsinabucket
icon: xx
body:
  Hi!<br /><br />Like ajxpk, I have also just registered here and have been watching this for a while.<br /><br />I just wanted to ask, does the mobile link cable itself work much differently to a standard link cable? (Apologies if this has already been said)<br /><br />I ask because I have seen a product that allows a Game Boy to interface with an Arduino board and the like via a link cable (https://www.tindie.com/products/Fchaos/gameboy-coloradvancesp-link-cable-breakout-board/?pt=full_prod_search), and I was wondering if it would be possible to use this to emulate the Mobile Adapter with physical hardware.<br /><br />Thanks, and keep up the good work! Really excited to see where this will go :)<br />


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=8046.msg206523#msg206523 date=1503366957]<br />Obviously, AntiFa is only breaking into those stores so they can smash capitalism and distribute the ends of production to the common man.<br />[/quote]Even if big businesses lose... say, 5% of their worth in these break-ins, they&#039;re not gonna crumble. Ever. Capitalism is too engrained into the US to disappear over riots.


subject: Re: Emulating the Mobile Adapter GB
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Think of the standard link cable like connecting two PCs via a Local Area Network, while the Mobile Adaptor GB is like connecting them via modem. Because that&#039;s literally what you&#039;re doing.


subject: Re: Riots
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8046.msg206526#msg206526 date=1503407127]<br />[quote author=DoubleNegative link=topic=8046.msg206523#msg206523 date=1503366957]<br />Obviously, AntiFa is only breaking into those stores so they can smash capitalism and distribute the ends of production to the common man.<br />[/quote]Even if big businesses lose... say, 5% of their worth in these break-ins, they&#039;re not gonna crumble. Ever. Capitalism is too engrained into the US to disappear over riots.<br />[/quote]<br /><br />Bigger issues arise when they attack small businesses. Either way, rioting that way is illegal, so bring in law enforcement and let them do their job.


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=8046.msg206528#msg206528 date=1503408733]<br />[quote author=Parzival link=topic=8046.msg206526#msg206526 date=1503407127]<br />[quote author=DoubleNegative link=topic=8046.msg206523#msg206523 date=1503366957]<br />Obviously, AntiFa is only breaking into those stores so they can smash capitalism and distribute the ends of production to the common man.<br />[/quote]Even if big businesses lose... say, 5% of their worth in these break-ins, they&#039;re not gonna crumble. Ever. Capitalism is too engrained into the US to disappear over riots.<br />[/quote]<br /><br />Bigger issues arise when they attack small businesses. Either way, rioting that way is illegal, so bring in law enforcement and let them do their job.<br />[/quote]This is true. And law enforcement&#039;s typically off containing riots.


subject: Re: Newly-Accessible Debug Menus in Pokemon Ruby
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Actually, the &quot;PokÃ©block Case&quot; one wasn&#039;t even in the leaked debug ROM... :thinking:


subject: Re: Newly-Accessible Debug Menus in Pokemon Ruby
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  By the way, all the stuff in the SOGABE menu sets some unknown stuff in saveblock2, according to pokeruby.


subject: Re: Newly-Accessible Debug Menus in Pokemon Ruby
poster_name: Cryo
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Charmy link=topic=8053.msg206531#msg206531 date=1503480751]<br />Actually, the &quot;PokÃ©block Case&quot; one wasn&#039;t even in the leaked debug ROM... :thinking:<br />[/quote]<br /><br />[img]http://i.imgur.com/OnfOExm.png[/img]<br /><br />[img]http://i.imgur.com/RtSklPg.png[/img]<br /><br /><br />[quote author=Wack0 link=topic=8053.msg206532#msg206532 date=1503489182]<br />By the way, all the stuff in the SOGABE menu sets some unknown stuff in saveblock2, according to pokeruby.<br />[/quote]<br /><br />Oh awesome, I&#039;ll definitely have to look into that more. Thanks for the heads-up! ;D


subject: Just Begining
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Hey there! I am new to doing this and I would like to know how and where to start glitching my copy of pokemon blue (on the VC for 3DS). I mean I have looked up where to start but I get nothing. So if any one can help I would love it and glitching looks fun. Thanks!<br /><br />(Also if this is the wrong place to post this I am sorry I am new to these forums&nbsp; :-\ )


subject: Re: Just Begining
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You want to glitch out Blue ? Pick anything from [url=http://glitchcity.info/wiki/Category:Generation_I_glitches]here[/url], and enjoy !<br />There&#039;s no place to really start ; just, if something looks too complicated (such as Arbitrary Code Execution), you can keep it for later.<br />Also, welcome !


subject: Re: Just Begining
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Welcome Olliecyclops! :)<br /><br />Yeah, you can try anything from the list ISSOtm posted. What I do if I don&#039;t understand the technical details is follow the steps carefully and if I want analyze what happens later.<br /><br />Good luck and have fun!


subject: Nidoking (Gengar) EXP underflow help
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Olliecyclops
icon: xx
body:
  (If there is a better place to post this just tell me. I don&#039;t want to spam&nbsp; :P )<br /><br />So right now I am trying to get either a Nidoking or Gengar using the Lv 100 before brock glitch but I am having some problems. At first I tried Nidoking and it worked up until I got to the point of actually encountering Nidoking. What happened is the trainer battle initiated once I when back in to Viridian Forest, I beat him but then battled him again. After that I got out of the battle screen and started walking through the forest but walking was slow and other trainers in the forest didn&#039;t see me until I spoke with them (I know this is a thing, I just forget the name). So I tried this several more times and then gave up on using Pidgeys Spc stat plus growl to get the level one Nidoking and then went for using Blue&#039;s Squirtle&#039;s spc stat to get Gengar insted and that worked. Once I got into the battle with the Gengar the text box kept saying &quot;You missed the Pokemon!&quot;<br /><br />So my two questions are:<br /><br />Why isn&#039;t getting the Nidoking working? and Why do I keep missing the pokemon?<br /><br />Thanks! 


subject: Re: Nidoking (Gengar) EXP underflow help
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  If I remember rightly the glitch you describe (called the [url=http://glitchcity.info/wiki/Walking_lag_glitch]walking lag glitch[/url] but it&#039;s more accurately a glitch script initiation glitch) will happen for the death warp variation of the Trainer-escape glitch if you don&#039;t flash the start menu before returning to Virdian Forest (even if you encounter another PokÃ©mon in between), so make sure to always try that.<br /><br />Missing the PokÃ©mon is normal and can happen at times (in normal gameplay it could happen against the legendary birds for instance), so you just need to lower the PokÃ©mon&#039;s HP and keep trying until it doesn&#039;t miss and you successfully catch it.<br /><br />Hope that helps!


subject: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  Hey there,<br /><br />Here&#039;s an unusual setup for Yellow games only, using 2 PokÃ©mon only (and a third one but temporarly and not in the PC), instead of 10.<br /><br />You can use the celadon loop trick to get 4F / S3 (german) / P3 (italian) / 3EME ETAGE. You have to perform 4 steps less than for wslm. Original discovery of the behavior of the 4F item is from Tagada67 on PRAMA&#039;s board: http://forum.prama-initiative.com/viewtopic.php?f=3&amp;t=680&amp;p=6192#p6186<br /><br />4F executes from Echo RAM $FA64. In English games, this is the catch rate of the last PokÃ©mon that visited the Day Care (or the current one). In European non-english games, it&#039;s the first current HP byte of that PokÃ©mon.<br /><br />Note that if you never placed a PokÃ©mon in the Day Care, this item nops until stored PokÃ©mon, so it behaves EXACTLY like wslm, meaning the traditional setup works with 4F. Otherwise, placing (and immediately withdrawing) any lvl25 PokÃ©mon (lvl29 in non-english games) with currently 24 HP will make it jump to stored PokÃ©mon, so it will work also.<br /><br />Now here&#039;s the setup:<br /><br />[u]English game[/u]<br /><br />- Place and withdraw (or not) at the Day Care a Nidorina (that apparently should not be evolved from a Female Nidoran), with Bite, Fury Swipes, Double Kick and Growl (the first two moves are placeholders and can be something else, the last two are learned)<br /><br />- Store in the active PC Box:<br />1. Any lvl25 PokÃ©mon with currently 24 HP, 33 PP currently for the first AND second move, 19 PP currently for the third move (3 PP Up used) and no fourth move or no PP currently on it<br />2. Clefairy, Male Nidoran or Spearow (among many possibilities) with 233 HP<br /><br />- Execute code with your items<br /><br />[code]<br />WRA1:DA64	78		ld a,b<br />WRA1:DA65	2C 		inc l<br />WRA1:DA66	9A		sbc d <br />WRA1:DA67	18 2E 		jr DA97<br />WRA1:DA97	18 19		jr DAB2<br />WRA1:DAB2	21 21 D3	ld hl,D321<br />WRA1:DAB5	00		nop<br />WRA1:DAB6	04		inc b<br />WRA1:DAB7	00		nop<br />WRA1:DAB8	E9		jp hl<br />[/code]<br /><br />[u]European non-english game[/u]<br /><br />- Place and withdraw (or not) a lvl80 PokÃ©mon with currently 24 HP in the Day Care.<br /><br />- Store in the active PC Box:<br />1. Any PokÃ©mon with 33 PP currently for the first move, 38 PP currently for the second move, 19 PP currently for the third move (3 PP Up used) and no fourth move or no PP currently on it<br />2. Clefairy, Male Nidoran or Spearow (among many possibilities) with 233 HP<br /><br />- Execute code with your items<br /><br />[code]<br />WRA1:DA64	00		nop<br />WRA1:DA65	18 50 		jr DAB7<br />WRA1:DAB7	21 26 D3	ld hl,D326<br />WRA1:DABA	00		nop<br />WRA1:DABB	04		inc b<br />WRA1:DABC	00		nop<br />WRA1:DABD	E9		jp hl<br />[/code]<br /><br />This setup is still perfectible though so don&#039;t hesitate if you can improve it :D


subject: Re: Nidoking (Gengar) EXP underflow help
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8055.msg206540#msg206540 date=1503524916]<br />Ahhhh ok that&#039;s the name it! Thanks!<br />[/quote]<br /><br />You&#039;re welcome :)


subject: Re: Is there a way to control what glitch moves I get using the Pomeg glitch?
poster_name: Metarkrai
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=rortik link=topic=8049.msg206503#msg206503 date=1503122935]<br />I got some more glitch moves and had some fun stealing wild Pokemon from the Pike, too bad there&#039;s not a good way to catch trainer Pokemon.<br /><br />I wonder if there&#039;s some way to steal Factory Pokemon -.-<br />[/quote]<br /><br />I found a way to get some the Battle Factory PokÃ©mon by using ACE&nbsp; to execute an overworld script that replaces your current team by a team made with your last rented party. (the nÂ° and the PID of the last 3 Battle Frontier PokÃ©mon you rented are stored somewhere in RAM and stay there nicely)<br /><br />Aside from that, if you could determine the order of your save blocks, you could maybe use ACE to copy the opponent&#039;s party stored in a battle video and paste it in PC.<br />Now that I think of it, if there&#039;s an overworld script that can be used to move PokÃ©mon from party slots 7-13 (or opponent&#039;s PokÃ©mon) to other party slots or towards PC, this script could be used to steal PokÃ©mon from a battle video. (You use ACE to change the RAM adresse that manages the script of an NPC loaded on the map to redirect it towards your script. Then you open your battle video, close it, and talk to the NPC to execute the script and get the PokÃ©mon.)


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (4-PokÃ© setup if game is english)
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Wow this is a nice find. :D<br /><br />Thanks for sharing Krys3000. I think I remember seeing luckytyphlosion&#039;s pointer list and thinking one of the other F items could activate arbitrary code but I didn&#039;t know it would be that easy.<br /><br />I don&#039;t quite understand the steps. Do you have to place and withdraw all the requirements you post, and where do you place them (which ones go in the Day Care and which ones go in the PC)?<br /><br />(These)<br /><br />[quote author=Krys3000 link=topic=8056.msg206542#msg206542 date=1503573430]<br />- Place/withdraw at the Day Care a Female Nidoran with Bite, Fury Swipes, Double Kick and Growl (the first two moves are placeholders and can be something else)<br /><br />- Store :<br />1. Any lvl25 PokÃ©mon with currently 24 HP, 33 PP currently for the first AND second move, 19 PP currently for the third move (3 PP Up used) and no fourth move or no PP currently on it<br />2. Clefairy, Male Nidoran or Spearow (among many possibilities) with 233 HP<br /><br />Enjoy!<br />[/quote]


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  I&#039;ve edited the first post because at first I had a 4-PokÃ©mon setup for english games, so it&#039;s more complete now.<br /><br />Sorry for the confusion. The idea is that the PokÃ©mon in the Day Care (Nidorina in english games) can be taken back immediately, or not. As you wish.<br /><br />The 2 other PokÃ©mon must be in the active PC box. I will edit that and I intend to make it clear with asm code etc. asap&nbsp; :P<br /><br />EDIT : I&#039;ve added asm and corrected a mistake for english setup, Nidorina should be used, not Nidoran.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: DoubleNegative
icon: xx
body:
  Is there a simple memory hex editor script for English Blue yet? I saw a version of one on a Japanese game which worked by reading from a toss item menu. Also, I want to use it to edit box pokemon data, so it can&#039;t be stored there.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  There&#039;s the old memory writer setup. It&#039;s a bit long, but it works.<br />Look for TheZZAZZGlitch&#039;s &quot;Jailbreaking the Gameboy&quot; video, and edit the setup a bit to repoint the written data.


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Krys3000 link=topic=8056.msg206546#msg206546 date=1503592451]<br />I&#039;ve edited the first post because at first I had a 4-PokÃ©mon setup for english games, so it&#039;s more complete now.<br /><br />Sorry for the confusion. The idea is that the PokÃ©mon in the Day Care (Nidorina in english games) can be taken back immediately, or not. As you wish.<br /><br />The 2 other PokÃ©mon must be in the active PC box. I will edit that and I intend to make it clear with asm code etc. asap&nbsp; :P<br /><br />EDIT : I&#039;ve added asm and corrected a mistake for english setup, Nidorina should be used, not Nidoran.<br />[/quote]<br /><br />Np. Thanks Krys3000! :D


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=ISSOtm link=topic=6638.msg206550#msg206550 date=1503654297]<br />There&#039;s the old memory writer setup. It&#039;s a bit long, but it works.<br />Look for TheZZAZZGlitch&#039;s &quot;Jailbreaking the Gameboy&quot; video, and edit the setup a bit to repoint the written data.<br />[/quote]<br /><br />Alternatively as well there is the [url=http://forums.glitchcity.info/index.php?topic=6638.msg200510.html#msg200510]reusable RAM writer[/url] which you can then use to set up [url=https://forums.glitchcity.info/index.php?topic=7773.0]offgao&#039;s memory editor[/url] and similar. :)<br /><br />It works in a simple way and uses 11 items (not that hard to get), and when you write a value to the address you want the quantities reset back to 0 (256), which can be tossed from without any issues to get any value to write or RAM address to write to.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I didn&#039;t see that post so I rewrote the ram writer in the mean time, but with a slightly different setup.<br /><br />Lemonade x ?? <br />Carbos x ??<br />X Accuracy x ??<br />PokÃ© Ball x 119 <br />Thunderstone x 35<br />TM10 x 36<br />Escape Rope x 175 <br />Great Ball x 119 <br />HP Up x 35 <br />Elixer x 119<br />Antidote x 44<br />Super Potion x 44 <br />Ice Heal x 119 <br />TM01 x 1<br /><br />It would be helpful if there was a way to switch between using it like this and using it as a sequential editor. As if the X accuracy is incremented each use, and incrementing carbos when it reaches 0.


subject: Getting a Level 223 Mew with the Pikachu Glitch/Off-screen Glitch
poster_name: Addri Trainer
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: LanceAndMissingNo.
icon: xx
body:
  Hi, everybody. I want to write a topic about this method to obtain Mew in PokÃ©mon Yellow because I haven&#039;t read or seen anything at Internet. I hope that my bad english doesnâ€™t cause any problem. <br /><br />Time ago I was searching with the Pikachu Glitch/Off-Screen Glitch to get PokÃ©mon with levels and stats over level 100. Now, I have discovered a lot of PokÃ©mon with high levels like Arcanine, Gyarados, Exeggutor or Gengar. Recently, I found a specific trainer that give me a level 233 Mew. This could be other method to obtain this PokÃ©mon in a game. But this glitch has high failure probabilities, I want to create a method to obtain battles with wild Mew without any problems. Here are some videos about this event:<br /><br />https://www.youtube.com/watch?v=lbXJGAwZkwE<br /><br />Another weird thing about this event was that after catched Mew, if you use Fly, you can&#039;t find any wild PokÃ©mon, and if you fight against a trainer, the game get frozen. This was the reason because I lost the battle and I thought that I found a method to continue the game without crashes. But sometimes this problem doesnâ€™t happen, I used Fly and I can battle with trainers and wild PokÃ©mon. Any explanation for this?<br /><br />https://www.youtube.com/watch?v=y1uyW3LsZAs<br /><br />(In this video I&#039;m just doing the glitch to obtain Mew in PokÃ©mon Amarillo, the spanish version)<br /><br />This Mew has his stats between 450-550 and his PS has between 650-730. His moveset always is the same, Transformation (this is why we can catch a level 223 Ditto), Mega-Punch, Metronome and Psychic. If this PokÃ©mon goes to 100 would have a 200-300 stats. At the beginning I knew that the PokÃ©mon after 100 level only they were used to go down to 100 level or connect Cable Link for make tradings or make battles with a friends. For my surprise, after catched Mew and used Fly, when I am going to connect the cable link, this does not works. This is really weird and I don&#039;t know why this happens. But I think that I have discovered a way to make it works:<br /><br /><br />When I repeat the Pikachu Glitch and I fight against one PokÃ©mon or trainer, the cable link is detected (you can win or lose againts the wild PokÃ©mon/trainer). After that I am going to talk with the girl and, where is when I am confused: <br /><br />1) The games freezes. After this I save the game and reset. Now, the game can detect the cable link but sometimes, the other game can freeze (I don&#039;t show this in my video). If this happens, I reset the game, and usually, the game can detect the cable link without problems.<br /><br />2) The game freezes, but can connect the games with a little patience. Sometimes, the other game freezes and the game whit Mew works! (This neither appear in the video) When the trade begin, this is what happens:&nbsp; <br /><br />[img]https://i.gyazo.com/23fe703c777d58b88e48b57988a2f11c.png[/img]<br /><br />Obviusly, I canâ€™t trade any PokÃ©mon because the game freezes.I have to reset the game. Well, when I choose Colosseum to fight, the game react like â€œZzazzâ€ appears. This match, practically, is like the fight againts Zzazz.<br /><br />Well, right now, If I want to trade Mew to other game succesfully I have to repeat the glitch and fight againts a trainer or a wild PokÃ©mon having done the glitch. For the moment, I can&#039;t check what does this PokÃ©mon in GSC or, If this is possible, can trade to 6th or 7th gen. What do you think? This could be possible? Or could be easier with other method? Thank you for read.


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Marv231
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Nice and easy Setup&nbsp; :D<br /><br />Thank you for it&nbsp; :)<br />As a good Effekt of this Setup, you can have as many other Pokemon in the Box, as you want.<br />Makes it easier to farm Pokemon. <br />When you catch them and they go in your team, you can deposit them in the actual Box, so no need to switch them, deposit and switch back.<br /><br /><br />Is it only for me, that the Move Tackle for Nidorina on the first or second Slot freezes the Game (Pokemon Yellow, englisch Version) ? <br />When I replaced the Move with any other Attack, all works fine.<br /><br />I only tested it on this game, so I don`t know, if itÂ´s the same for Red and Blue.<br /><br /><br />


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Never mind. I figured out the script on my own. here:<br />any item x any<br />8F<br />Lemonade x 0<br />X Accuracy x 0<br />Carbos x 0<br />PokÃ© Ball x 119<br />Escape Rope x 175<br />Carbos x 211<br />X Accuracy x 35 <br />Super Potion x 34<br />Rare Candy x 5<br />HP Up x 34<br />HP Up x 34<br />TM01 x 35<br />Full Heal x 47 <br />Fire Stone x 5<br />Potion x 35<br />HP Up x 52<br />Fresh Water x 201<br />Burn Heal x 13<br /><br /><br />By default, it edits bytes sequentially, resetting lemonades to 0 after each use. Swapping Burn Heal x 13 for Rare Candy x 5 turns it into that reusable ram editor.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: natanelho
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=6638.msg206517#msg206517 date=1503265464]<br />[quote author=natanelho link=topic=6638.msg206516#msg206516 date=1503260426]<br />can you please write the asm code? I really dont understand why people dont do it... that&#039;s very easy to do, pretty useful for the ones who want to know what exactly it does and it doesn&#039;t do any harm to anyone...<br />[/quote]He... did.<br />The items script is [b]LITERALLY GBz80ASM[/b].<br />It&#039;s a simple conversion with ISSOtm&#039;s converter, which can be found in the &quot;Useful Tools&quot; section of the sidebar, [url=http://glitchcity.info/wiki/GBz80%20to%20Items]or here[/url].<br />[/quote]<br />I know you can easily convert asm to item list but I wanted to understand the code, not just to use it, and afaik there&#039;s no simple converter to convert item list back to asm.....


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  To convert back, you can set up the list in BGB, then go into the &quot;debugger&quot; panel, then hit Ctrl+G, then type $D322 (US R/B), and read the code.<br /><br />Or you can convert into hex using [url=http://glitchcity.info/wiki/The%20Big%20HEX%20List]the Big HEX List[/url] and then into ASM (either doing it by hand or with BGB) ; or directly into ASM still using the List.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: natanelho
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=6638.msg206559#msg206559 date=1503739321]<br />To convert back, you can set up the list in BGB, then go into the &quot;debugger&quot; panel, then hit Ctrl+G, then type $D322 (US R/B), and read the code.<br /><br />Or you can convert into hex using [url=http://glitchcity.info/wiki/The%20Big%20HEX%20List]the Big HEX List[/url] and then into ASM (either doing it by hand or with BGB) ; or directly into ASM still using the List.<br />[/quote]<br />I know all this, but I think we can agree that its a lot more of a hassle then just copy-paste your own asm code...


subject: Re: Getting a Level 223 Mew with the Pikachu Glitch/Off-screen Glitch
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Wow, fascinating glitch LanceAndMissingNo. :) I didn&#039;t think getting Mew with off-screen glitch was viable, great to hear you can after all.<br /><br />Normally the reason why you encounter PokÃ©mon over trainers with Pikachu off-screen glitch&#039;s Trainer mutation glitch is that the addresses where the Trainer class/roster on the route are supposed to be are corrupted, and usually the only values possible are those based on the direction Pikachu took when walking (south/north/west/east 01-04), so Rhydon, Kangaskhan, Nidoranâ™‚ and Clefairy are all possible.<br /><br />It seems though as you have demonstrated before you can get more than just 01-04. Perhaps it is something about the Glitch City you used that allowed for 0x15; the value for Mew. Maybe a specific glitch tileblock Pikachu walks through (food for thought).


subject: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Hi there!<br /><br />I was wondering how I would be able to back up my Virtual Console save of Pokemon Blue (I am doing a glitch run of it and I really don&#039;t want my save wiped). I have New 3DS XL and my computer can read regular SD cards but not the microSD cards that the New 3DS&#039;s use. Could anyone help? <br /><br />Thanks!&nbsp; :D


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206564#msg206564 date=1503793525]<br />Hi there!<br /><br />I was wondering how I would be able to back up my Virtual Console save of Pokemon Blue (I am doing a glitch run of it and I really don&#039;t want my save wiped). I have New 3DS XL and my computer can read regular SD cards but not the microSD cards that the New 3DS&#039;s use. Could anyone help? <br /><br />Thanks!&nbsp; :D<br />[/quote]<br /><br />I&#039;m assuming your 3DS has CFW or homebrew, given that you need it for save backups.<br /><br />Just use JKSM or another save manager homebrew like usual, and use some FTP homebrew to transfer the file from the SD card. Or you can use Nintendo&#039;s microSD management app from Settings, but their SMB implementation kinda sucks.


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  No my 3DS dose not have eather CFW or homebrew (Been to scared that if I tryed any thing it would mess up my 3DS and I REALLY don&#039;t want that). Also I am no tech genius (Even though I am studying) so is there any guide online that takes me through step by step because once again I really don&#039;t want to mess up my 3DS<br /><br />Thanks!


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206567#msg206567 date=1503795721]<br />No my 3DS dose not have eather CFW or homebrew (Been to scared that if I tryed any thing it would mess up my 3DS and I REALLY don&#039;t want that). Also I am no tech genius (Even though I am studying) so is there any guide online that takes me through step by step because once again I really don&#039;t want to mess up my 3DS<br /><br />Thanks!<br />[/quote]<br /><br />Yes, there is, it&#039;s at https://3ds.guide/ :)


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206571#msg206571 date=1503833648]<br />Uhhh hey is there a video? I want to be really sure i am doing it right. <br /><br /><br />Thanks!<br />[/quote]<br /><br />No, because videos can get outdated. On the guide site there&#039;s a link to a discord server where you can ask for help though.


subject: Memory Corruption Hack.
poster_name: ElectricPotato
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: clip
body:
  TheZZAZZGlitch has an ASM hack where you can sit back and let the game corrupt itself. I did some testing, and although I didn&#039;t get some of it on camera, you could:<br />-Get Shiny Pokemon<br />-Turn doors into random warps<br />-See glitch textboxes<br />AND MORE!<br /><br />[url=https://www.youtube.com/watch?v=nHtXSTcCCJ8]https://www.youtube.com/watch?v=nHtXSTcCCJ8[/url]<br /><br />


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So this guide only works for version 9.0.0 through 11.3.0 and my 3DS is on 11.5.0. (I also don&#039;t have 2 3DS&#039;s) What do I do?


subject: Re: Change your trainer ID and name
poster_name: Marv231
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You can use this to change your ID <br /><br /><br /><br />Change Trainer ID<br />8F<br />any item<br />Lemonade x (xx)<br />Repel x (yy)<br />Carbos x 211<br />X Accuracy x89<br />Water Stone x115<br />TM01 x(any)<br /><br /><br />Use a Hexadecimal Converter and enter the ID, you want as decimal.<br />Write down the 4 digits in hexadecimal.<br />Take the first two digits, convert them into decimal for the number of Lemonades.<br />Same with the last two digits for the number of repels.<br /><br />Use 8F once and you have your ID


subject: Re: Backing Up my Virtual Console save
poster_name: Marv231
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206578#msg206578 date=1503874652]<br />So this guide only works for version 9.0.0 through 11.3.0 and my 3DS is on 11.5.0. (I also don&#039;t have 2 3DS&#039;s) What do I do?<br />[/quote]<br /><br /><br />I use Rpwng and Homebrew for Backing Up saves <br />It maybe working, if Nintendo doesnÂ´t&nbsp; fixed it already<br /><br />https://mrnbayoh.github.io/rpwng/


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Oh god what I would give for a video&nbsp;  :-\&nbsp; Oh well here goes nothing (I swear if this is a virus I will... scream at your post because there is nothing I can do legally to you) 


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I can&#039;t do it. I am too scared that I am going to do something wrong and screw up my 3DS. What do I do? I have the homebrew starter kit downloaded and my 3DS&#039;s microSD card in the card reader and pulled up but where do I put the starter kit?


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206582#msg206582 date=1503880892]<br />I can&#039;t do it. I am too scared that I am going to do something wrong and screw up my 3DS. What do I do? I have the homebrew starter kit downloaded and my 3DS&#039;s microSD card in the card reader and pulled up but where do I put the starter kit?<br />[/quote]<br /><br />Extract the starter kit to the root of your SD card.


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Marv231 link=topic=8059.msg206580#msg206580 date=1503879031]<br />[quote author=Olliecyclops link=topic=8059.msg206578#msg206578 date=1503874652]<br />So this guide only works for version 9.0.0 through 11.3.0 and my 3DS is on 11.5.0. (I also don&#039;t have 2 3DS&#039;s) What do I do?<br />[/quote]<br /><br /><br />I use Rpwng and Homebrew for Backing Up saves <br />It maybe working, if Nintendo doesnÂ´t&nbsp; fixed it already<br /><br />https://mrnbayoh.github.io/rpwng/<br />[/quote]<br /><br />So when do the codes come out usually? (On their twiter RN none of the codes work) 


subject: Re: Backing Up my Virtual Console save
poster_name: Marv231
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  They fixed it Unfortunately, so that uploades of these files got deleted in a few seconds.&nbsp; :-\<br /><br />I donÂ´t know any other ways of backing up 3DS saves<br /><br />Maybe, you make a glitched run on an emulator and make Savestates, so if something went wrong, load the quicksave. <br />


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206578#msg206578 date=1503874652]<br />So this guide only works for version 9.0.0 through 11.3.0 and my 3DS is on 11.5.0. (I also don&#039;t have 2 3DS&#039;s) What do I do?<br />[/quote]<br /><br />You can use ntrboothax using a compatible DS flashcart and an old DS/DS Lite, by the way. If you&#039;re willing to wait, more flashcarts will be made compatible eventually.<br /><br />If you don&#039;t have an old DS/DS Lite, powersaves support should happen in time, you can get those on amazon for a price cheaper than a second hand DS phat/lite.


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Olliecyclops
icon: xx
body:
  do you have a link with a guide on the powersave option (My old DS broke long ago). Also what do you mean &quot; powersaves support should happen in time&quot;, I mean I am willing to spend the money [u]IF[/u] I need to but I don&#039;t want to just go spend my money on random things.<br /><br />EDIT: Wait is it possible to dump the save on my computer and if Blue&#039;s save gets corrupted then I can just restore it by copying the save back to my 3DS?


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206589#msg206589 date=1503925743]<br />Also what do you mean &quot; powersaves support should happen in time&quot;<br />[/quote]<br /><br />I mean using powersaves to flash ntrboothax to a supported DS flashcart is still being worked on.


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Oh when do you think it will be ready? <br /><br />BTW thanks to everyone for helping! It really means a lot!


subject: Re: Backing Up my Virtual Console save
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Olliecyclops link=topic=8059.msg206592#msg206592 date=1503962327]<br />Oh when do you think it will be ready? <br />[/quote]<br /><br />I have no idea.


subject: Re: Backing Up my Virtual Console save
poster_name: Olliecyclops
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Well it seems like this is a lost cause. I wish the 3DS&#039;s life wasn&#039;t over just yet or I had tried to do this a year ago.<br /><br />Well thanks any ways :-\


subject: Re: &quot;ZZAZZ glitch&quot;?
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Nope, that&#039;d just save, but keep your file corrupted.<br />You&#039;d have to fix your name then save.


subject: &quot;Unidentified poster showing early names for Generation I PokÃ©mon&quot;
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [url=https://archives.bulbagarden.net/wiki/File:Generation_I_prototype_English_names.jpg]This one[/url], from Bulbapedia.<br />I have a few questions pertaining to it, hope someone can answer.<br /><br />1) Who did this photo? Did they provide any background info?<br /><br />2) Why are some artworks on it slightly diffirent from any Gen1 arts I&#039;ve ever seen? I was trying to make a version without yellow text (to print out and hang on my wall*), and turns out that pictures availible separately (like Omanyte) aren&#039;t an exact match.<br /><br />3) What kind of font it uses? It looks similar to &quot;Andy Bold&quot; (&quot;Gotta catch&#039;em all&quot; font), but doesn&#039;t match, few details are diffirent and it&#039;s more vertically stretched.<br /><br />* I just kept changing things in it (swapped Butterfree and Venomoth, replaced Mewtwo with Mew and few artworks with fanmade ones...you can see latest result [url=https://sta.sh/0mi2qxxrq0j]here[/url]), so it occured to me that, as it&#039;s no longer authentic, I&#039;d rather make my own version, close in style but diffirent.Hence me asking about font and art. 


subject: Re: Memory Corruption Hack.
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8060.msg206598#msg206598 date=1504009737]<br />Ecch, VBA.<br />[/quote]EWW<br />[b]GET IT AWAY<br />[size=12pt]KILL IT[/size]<br />[size=18pt]KILL IT[/size][/b]


subject: Re: &quot;ZZAZZ glitch&quot;?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=kaikun97 link=topic=1386.msg204235#msg204235 date=1486506731]<br />[quote author=Unused Trainer 6link=topic=1386.msg204224#msg204224 date=1486386012]<br />So the saving the game is not falling?<br />[/quote]<br />Well normally saving the game will either work and say its saved but then on a reboot the save file will be gone (The game deletes it due to thinking its corrupted with the invalid name) or you can&#039;t save because the Yes/No dialoge box becomes corrupted and the game crashes.<br /><br />However for some it seems they are able to load the save file even with an invalid name so I am thinking there is more to this.<br />[/quote]I once (accidentally) saved (and freaked out) and successfully reloaded while under some pretty bad Super Glitch effects. Shit happens. Sometimes you just get that corruption that sums right.


subject: Re: &quot;Unidentified poster showing early names for Generation I PokÃ©mon&quot;
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I think I&#039;ve seen one of those before... The douchebag who lived across from me in my last neighborhood had a lot of obscure gaming shit. In fact, those even look like the walls in his house... :thonkang:<br />Anyway, it&#039;s a nice find at any rate.


subject: Re: Getting a Level 223 Mew with the Pikachu Glitch/Off-screen Glitch
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I replicated it with the o (hex:94) glitch item. The reason Mew appears is because the game shifts back a hex:15 that was originally a roster value for one of the trainers.<br /><br />https://www.youtube.com/watch?v=szTH5bbPG8A


subject: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  Hi folks,<br /><br />Following my recent work on [url=http://forums.glitchcity.info/index.php?topic=8056.0]an easier Yellow ACE using the Day Care and the 4F item[/url], I wanted to demonstrate that the not-so-well known Pikachu Off-Screen ACE can be improved to avoid the ~75 PokÃ©mon battles.<br /><br />If you don&#039;t know about POS Code Execution, see [url=https://www.youtube.com/watch?v=evdxp0UgunQ]this video from Torchickens[/url].<br /><br />Anyway, instead of using the trained PokÃ©mon, I suggest we use one of the five following configurations:<br /><br />[u]4 moves configuration[/u]<br /><br />- 5th PokÃ©mon would be a Nidorina or Nidorino. It has to have been traded to G/S/C, hold a Moon Stone there and then be traded back to Yellow.<br />- This PokÃ©mon must have 2 &#039;placeholder moves&#039; (typically Bite and Fury Swipes, since it learns both) followed by Double Kick (also learned) and Bubblebeam (TM11).<br />- The 6th PokÃ©mon can be anything but requires currently 3 PP on its first move (with 3 PP Up used), 33 PP on the second move, and 19 PP for the third move (with 3 PP Up used also).<br />- The code starts from item 3, so it is performed in a similar fashion than using 4F/wslm.<br /><br />[code]<br />WRA1:D221	08		[cc execute]<br />WRA1:D222	2C 		inc l<br />WRA1:D223	9A		sbc d <br />WRA1:D224	18 3D		jr D263<br />WRA1:D263	C3 21 D3	jp D321<br />[/code]<br /><br />[u]2 moves + HP/Box Level configuration[/u]<br /><br />- 5th PokÃ©mon would be a Nidorina or Nidorino. It has to have been traded to G/S/C, hold a Moon Stone there and then be traded back to Yellow.<br />- This PokÃ©mon must have Double Kick (learned) as first move and Take Down (TM09) as second.<br />- The 6th PokÃ©mon can be anything but must have 24 HP currently and also have been lvl24 last time it was stored in the PC.<br />- This PokÃ©mon requires currently 3 PP on its first move (with 3 PP Up used), 33 PP on the second move, and 19 PP for the third move (with 3 PP Up used also).<br />- The code starts from item 3, so it is performed in a similar fashion than using 4F/wslm.<br /><br />[code]<br />WRA1:D221	08		[cc execute]<br />WRA1:D222	18 24		jr D248<br />WRA1:D248	00 		nop<br />WRA1:D249	18 18		jr D263<br />WRA1:D263	C3 21 D3	jp D321<br />[/code]<br /><br />[u]4 moves + Glitch PokÃ©mon configuration[/u]<br /><br />- 5th PokÃ©mon would the glitch PokÃ©mon PKMN pã‚¥ã ã‚¥ã‡, that can be obtained via several glitches (although not the Ditto Trick - best is probably LOL Glitch), Equivalent Trade or Time Capsule Exploit.<br />- This PokÃ©mon must have Ice Punch, DoubleSlap, Double Kick and BubbleBeam (all can be learned except Bubblebeam which is TM11)<br />- The 6th PokÃ©mon can be anything but requires currently 3 PP on its first move (with 3 PP Up used), 33 PP on the second move, and 19 PP for the third move (with 3 PP Up used also).<br />- The code starts from item 3, so it is performed in a similar fashion than using 4F/wslm.<br /><br />[code]<br />WRA1:D221	2D		[not read]<br />WRA1:D222	08		[cc execute]<br />WRA1:D223	03		inc bc <br />WRA1:D224	18 3D		jr D263<br />WRA1:D263	C3 21 D3	jp D321<br />[/code]<br /><br />[u]Untrained Hitmonchan configuration[/u]<br /><br />Since all previous setup require trading or glitching, here is the only tradeless/glitchless/trainless setup that will work most times.<br /><br />- 5th PokÃ©mon would be Hitmonchan<br />- This PokÃ©mon must never have been trained, but must know Strength (HM), Agility, Fire Punch and Ice Punch. This requires rising it to lvl 38 with Rare Candies.<br />- This PokÃ©mon must also have 00 PP currently at Strength, 24 at Agility, 14 at Fire Punch (Ice Punch doesn&#039;t matter)<br />- The 6th PokÃ©mon can be anything but must be lvl25, requires currently 24 HP, 3 PP on its first move (with 3 PP Up used), 33 PP on the second move, and 19 PP for the third move (with 3 PP Up used also).<br />- The code starts from item 3, so it is performed in a similar fashion than using 4F/wslm.<br /><br />The code can be broken at any time by Hitmonchan&#039;s IV. The best way is to reset the pick of Hitmonchan to make sure that yours work. [b]For this setup to work, you must check that when converted into hexadecimal, Hitmonchan&#039;s trainer ID won&#039;t trigger invalid opcodes or many-bytes opcodes[/b]<br /><br />[code]<br />WRA1:D221	2D		[not read]<br />WRA1:D222	46 		[not read]<br />WRA1:D223	61		[not read] <br />WRA1:D224	07		[not read]<br />WRA1:D225	08		[cc execute]<br />WRA1:D226	??		depends on the trainer ID<br />WRA1:D227	??		depends on the trainer ID<br />WRA1:D228-D234	00		nop<br />WRA1:D235	??		depends on Hitmonchan&#039;s IV<br />WRA1:D236	??		depends on Hitmonchan&#039;s IV<br />WRA1:D237	00		nop<br />WRA1:D238	18 0E		jr D248<br />WRA1:D248	18 19		jr D263		<br />WRA1:D263	C3 21 D3	jp D321<br />[/code]<br /><br />[u]Underflow-based configuration[/u]<br /><br />For informations about a way to use the expanded item pack for an easy setup, see here: http://forums.glitchcity.info/index.php?topic=8063.msg206641#msg206641<br /><br />I wanted to adapt these to european non-english games, though the POS ACE does not seem to work in non-english games - or at least doesn&#039;t seem to read from $D221.


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Marv231 link=topic=8056.msg206555#msg206555 date=1503681375]<br />Nice and easy Setup&nbsp; :D<br /><br />Thank you for it&nbsp; :)<br />As a good Effekt of this Setup, you can have as many other Pokemon in the Box, as you want.<br />Makes it easier to farm Pokemon. <br />When you catch them and they go in your team, you can deposit them in the actual Box, so no need to switch them, deposit and switch back.<br /><br /><br />Is it only for me, that the Move Tackle for Nidorina on the first or second Slot freezes the Game (Pokemon Yellow, englisch Version) ? <br />When I replaced the Move with any other Attack, all works fine.<br /><br />I only tested it on this game, so I don`t know, if itÂ´s the same for Red and Blue.<br />[/quote]<br /><br />Yeah, with Tackle the move spells out ld hl,xxyy; which I suspect would cause the game to ignore executing the following code (a relative jump to DA97). To be safe it&#039;s best to catch a low level Nidorina on Route 9 and level it up to have Krys3000&#039;s moves.<br /><br />Furthermore it&#039;s indeed important to not evolve the Nidoranâ™€ (unless probably if you&#039;re using the VC version which ignores invalid opcodes). The 0x78 in Krys3000&#039;s copy of the code is Nidorina&#039;s catch rate (ld a,b). If you catch a Nidoranâ™€ and evolve it this byte will instead be 0xEB which is an invalid opcode that will freeze the game on non-3DS versions.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Wow, this looks great! Thanks Krys3000. :D Nice to know this otherwise difficult glitch can be made easier.<br /><br />May test this out soon.


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I didn&#039;t know about that difference between GB and VC games. Thanks Torchickens, that&#039;s really interesting in terms of ACE codes to have some other &#039;placeholder&#039; opcodes to deal with :D


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  You&#039;re welcome. :)<br /><br />Bad news though. :( I notice you don&#039;t have the 08 at D221. After testing the code it otherwise works perfectly (provided you change hl to a pointer that points to a 00 byte or 50 byte afterwards in your items code to avoid a bad text box). However the 08 is needed to tell the game to begin executing code after it because it is a text command (normal text boxes begin with 00, 80 executes code). <br /><br />If you can trade however the following extra step can work. Trade the Nidorina to Generation II and give it a Moon Stone to hold (ID 08, don&#039;t use it though), trade it back to change the catch rate value to 08.


subject: Re: 2-PokÃ©mon Yellow ACE setup using 4F item (works in all games now)
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Krys3000 link=topic=8056.msg206609#msg206609 date=1504096427]<br />I didn&#039;t know about that difference between GB and VC games. Thanks Torchickens, that&#039;s really interesting in terms of ACE codes to have some other &#039;placeholder&#039; opcodes to deal with :D<br />[/quote]<br /><br />You&#039;re welcome :).<br /><br />I didn&#039;t know either until somebody said (possibly somewhere else on the forums if I remember rightly). TheZZAZZGlitch has a thread and video about this subject here:<br /><br />http://forums.glitchcity.info/index.php?topic=7559<br />https://www.youtube.com/watch?v=oQZMVo_Fmrs


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Ah yes! I recall now, that&#039;s why I couldn&#039;t make it work recently.<br /><br />I&#039;ll work on a workaround later. Also I need to see if this is an issue in non-english games.<br /><br />Thanks a lot!


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Pleasure! :)<br /><br />Actually it seems from my video that the 08 can be some place after D221 (the game could read it after a text byte representing a cry), so it doesn&#039;t need to be at the beginning byte for D221 fortunately. Maybe you could use a PokÃ©mon with Ice Punch (08).


subject: Re: Backing Up my Virtual Console save
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  NINJHAX has apparently been updated for v11.5, so that&#039;s an option to run a save-extract utility.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Also these setups have the side effect of NOT working by `jp hl`, so some codes (such as the `dec hl \ dec [hl]` one to obtain a x0 stack) won&#039;t work (because hl doesn&#039;t point to D322)


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I don&#039;t think Nidorinx learn Ice punch but yeah there is probably room for something, to avoid trading to a 2G game. I&#039;ll try everything I can think of later today!


subject: PokÃ©mon Yellow in 0x A-presses or even 0x any button
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  This is a way to beat PokÃ©mon Yellow in 0x A-presses using an external device, and a theory on how to beat PokÃ©mon Yellow with no A-presses without any external device.<br /><br />1. Use cart-swap arbitrary code execution and OAM DMA hijacking to change C57E to 87. After &quot;Game Freak&quot; appears, the game should jump right into a file as if Continue or New Game was chosen.<br />2. Have other addresses manipulated at the same time to trigger the Hall of Fame script.<br /><br />;as such:<br /><br />D164: FF (&#039;good&#039; party to avoid many glitch PokÃ©mon entries)<br />D36D: 1D D3 (map script is in inventory)<br /><br />@D31D:<br />0E 16 26 64 2E 56 41 CD 84 3E C9<br /><br />3. Mash B.<br />4. Congratulations, you just won PokÃ©mon Yellow with no A-presses!<br /><br />Maybe as well you could run the credits without having to press anything if we just use a different address to run at D31D.<br /><br />Technically you need to press buttons on another game to set this up of course, but that&#039;s probably as far as we&#039;ll go without ROM hacking/physical hijacking of the game.<br /><br />You can also use a GameShark and enter the following codes:<br /><br />01FF64D1<br />01C927D3<br />013E26D3<br />018425D3<br />01CD24D3<br />014123D3<br />015622D3<br />012E21D3<br />016420D3<br />01261FD3<br />01161ED3<br />010E1DD3<br />01D36ED3<br />011D6DD3<br />01877EC5<br /><br />Hope TheZZAZZGlitch likes this if he sees it. :)


subject: 'Wild appeared' corruption in Generation II
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  In Gold/Silver I have a party of 29 PokÃ©mon I got from ????? party overloading. When I entered a battle I noticed something rather interesting:<br /><br />Memory addresses near D0ED (the opposing PokÃ©mon) including D0ED were replaced with values 0x31-0x33!<br /><br />[img]http://i.imgur.com/de61JxG.png[/img]<br /><br />These are the same values in wild appeared corruption from Generation I, which TheZZAZZGlitch explains [url=http://forums.glitchcity.info/index.php?topic=6991.msg195984#msg195984]here[/url].<br /><br />Note though that in Generation I you could trigger it with 0 PokÃ©mon. You can&#039;t do that in Generation II due to an error handler that makes sure the battle doesn&#039;t start. Furthermore in Generation I you needed 239 or more PokÃ©mon (or 0 PokÃ©mon) to corrupt the enemy PokÃ©mon. Here in Generation II it seems like you can corrupt this with a lot less PokÃ©mon.<br /><br />Upon throwing a Master Ball the enemy PokÃ©mon turned out to be a Dugtrio. At one point it appeared as a Dugtrio with Venomoth&#039;s sprite strangely, which I suspect may be because I think the battle addresses have two species bytes as well (and 0x31 Venomoth is one of the possible bytes).<br /><br />[img]http://i.imgur.com/jxMsnhn.png[/img][img]http://i.imgur.com/fJjH3uD.png[/img]<br /><br />I wonder what else you can corrupt with this and also if the FF terminator at the top only thing (international dokokashira door glitch) is in Generation II.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  Interestingly enough (although being not that useful) there are glitch PokÃ©mon that meet all requirements: 4 4 (hex:BF) is one of them.<br /><br />Its catch rate (hex:14) is a good placeholder since it does not print a &#039;bad&#039; character, while it learns Ice Punch, Double Kick and Aurora Beam, allowing to jump to $D263.<br /><br />However, since this last move is only learned at lvl 109 (I&#039;m not sure it&#039;s possible then), a better solution would be PkMn pã‚¥ã ã‚¥ã‡(hex:CE) with Ice Punch, DoubleSlap, Double Kick and Bubblebeam (TM11).<br /><br />I wonder if people will find less annoying to use a glitch, catch a glitch PokÃ©mon and then perform ACE, or to train a Graveler/normal PokÃ©mon to do it&nbsp; ;D<br /><br />Still working on a glitchless/tradeless solution but it&#039;s not easy since no PokÃ©mon knowing Ice Punch learns a move compatible with jumps.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Ooh interesting!&nbsp; Nice finds Krys3000. ;D<br /><br />From personal experience Rival LOL glitch isn&#039;t too bad to set up once you get used to it, you can move the Ethers/x80 in your bag if they are in a an unsuitable place, and I used it to get a stored PokÃ©mon setup for ws m.<br /><br />You could use that to get PkMn pã‚¥ã ã‚¥ã‡ at a level over 100 and theoretically if it doesn&#039;t know Ice Punch, DoubleSlap, Double Kick level it beyond 255 until it learns them. It looks like the glitch PokÃ©mon&#039;s IVs could potentially be a problem because Double Kick and Bubblebeam goes one byte forward less than Double Kick and Aurora Beam (rather than landing on its first PP byte), but it seems like it&#039;s faster than training the Graveler/normal PokÃ©mon.<br /><br />Perhaps there&#039;s a chance Rival LOL glitch could be modified to obtain the PokÃ©mon at Level 101-108. Failing that maybe you could hybridize 4 4 (hex:BF) with a glitch PokÃ©mon of a really fast experience curve to give it enough experience to level past Level 100, as the learnset is taken from the &#039;donor&#039; byte (which would be 4 4) if I remember rightly. In fact that may even work with Chansey (4 4/Chansey hybrid) up to a few levels past 100 and you could use Rare Candies for it to go further and reach Level 109.


subject: Re: Map distortion glitch help wanted for Gold
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Looking at the first six PokÃ©mon max HP second bytes, they go as such: DA4F, DA7F, DAAF, DADF, DB0F, DB3F. There is an addition of 0x30 each time.<br /><br />Hence to get any PokÃ©mon max HP byte 2, perhaps we can extrapolate backwards and get: DA1F+(30*Party Slot)=Address.<br /><br />I&#039;ll be redoing this glitch and using memory editor to set maximum HP values of 0 to a non-00 value another day and post the results. Perhaps if you have well-trained PokÃ©mon cloned you can force a lower number of 00-bytes in the data where max HP byte 2s lie and avoid the freeze.<br /><br />PokÃ©mon 1: DA4F<br />PokÃ©mon 2: DA7F<br />PokÃ©mon 3: DAAF<br />PokÃ©mon 4: DADF<br />PokÃ©mon 5: DB0F<br />PokÃ©mon 6: DB3F<br />PokÃ©mon 7: DB6F<br />PokÃ©mon 8: DB9F<br />PokÃ©mon 9: DBCF<br />PokÃ©mon 10: DBFF<br />PokÃ©mon 11: DC2F<br />PokÃ©mon 12: DC5F<br />PokÃ©mon 13: DC8F<br />PokÃ©mon 14: DCBF<br />PokÃ©mon 15: DCEF<br />PokÃ©mon 16: DD1F<br />PokÃ©mon 17: DD4F<br />PokÃ©mon 18: DD7F<br />PokÃ©mon 19: DDAF<br />PokÃ©mon 20: DDDF<br />PokÃ©mon 21: DE0F<br />PokÃ©mon 22: DE3F<br />PokÃ©mon 23: DE6F<br />PokÃ©mon 24: DE9F<br />PokÃ©mon 25: DECF<br />PokÃ©mon 26: DEFF<br />PokÃ©mon 27: DF2F<br />PokÃ©mon 28: DF5F<br />PokÃ©mon 29: DF8F


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Well, I didn&#039;t think about continuing to level up 4 4 until it learns Ice Punch and Double Kick (lvl 3 and 4 normally). That&#039;s nice&nbsp; :D ! I think that you&#039;re right about LOL/Cooltrainer glitch to get it above 100, we should be able to do that. 4 4 is a Medium Fast PokÃ©mon, so the idea of hybridization is also a good idea. IIRC Fast PokÃ©mon hybrids can go up to 105 :)<br /><br />Regarding PkMn pã‚¥ã ã‚¥ã‡, there is no lvl up problem since all moves can be learned before lvl 100, except for Bubblebeam which is a TM. The idea here would be to put DoubleSlap (or some other move) as second move, before Double Kick, so we can use BubbleBeam as fourth move (3D) for a relative jump to the same location than Aurora Beam as third move (3E) would do. It probably take less time than preparing 4 4&nbsp; :P


subject: Re: PokÃ©mon Yellow in 0x A-presses or even 0x any button
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Um...<br />This breaks a few rules set in the second video.<br />Mainly, no external devices, which I&#039;m sure goes toward cartswap.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Krys3000 link=topic=8063.msg206623#msg206623 date=1504126730]<br />Well, I didn&#039;t think about continuing to level up 4 4 until it learns Ice Punch and Double Kick (lvl 3 and 4 normally). That&#039;s nice&nbsp; :D ! I think that you&#039;re right about LOL/Cooltrainer glitch to get it above 100, we should be able to do that. 4 4 is a Medium Fast PokÃ©mon, so the idea of hybridization is also a good idea. IIRC Fast PokÃ©mon hybrids can go up to 105 :)<br /><br />Regarding PkMn pã‚¥ã ã‚¥ã‡, there is no lvl up problem since all moves can be learned before lvl 100, except for Bubblebeam which is a TM. The idea here would be to put DoubleSlap (or some other move) as second move, before Double Kick, so we can use BubbleBeam as fourth move (3D) for a relative jump to the same location than Aurora Beam as third move (3E) would do. It probably take less time than preparing 4 4&nbsp; :P<br />[/quote]<br /><br />I see, thanks! I looked at the code again and confirmed with BGB&#039;s debugger to make sure, the 18 3D at D224 indeed is a jump to D263 (PP move 1).<br /><br />I notice one small error in your top post you might want to fix.<br /><br />[quote author=Krys3000 link=topic=8063.msg206606#msg206606 date=1504094972]<br />[code]<br />WRA1:D221	2C		[not read]<br />WRA1:D222	08		[cc execute]<br />WRA1:D223	03		inc bc <br />WRA1:D224	18 3E		jr D263<br />WRA1:D263	C3 21 D3	jp D321<br />[/code]<br />[/quote]<br /><br />The 3E byte should be 3D (Bubblebeam) as 3E is Aurora Beam.<br />Edit: I think PkMn pã‚¥ ã‚¥ [CE]&#039;s catch rate is 0x2D as well, [url=http://glitchcity.info/wiki/GlitchDex/Y:206]according to my edit on the wiki page[/url], which shouldn&#039;t be a problem as long as you address it&#039;s a dec l in your inventory.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Krys3000 link=topic=8063.msg206628#msg206628 date=1504130251]<br />Yep, typical copy/paste mistake. Fixed, thanks!<br />[/quote]<br /><br />You&#039;re welcome! :)<br /><br />I successfully got this to work with a cheated PkMn pã‚¥ã ã‚¥ã‡ (CE) with the right moves (and the catch rate was indeed 0x2D, not 0x2C so that may need changing in your post as well if you don&#039;t mind) in slot 5 and Metapod in slot 6 with the right PPs. This should work with a LOL glitch PkMn pã‚¥ã ã‚¥ã‡ (CE) provided you obtain it with the catch rate unchanged from its default (I&#039;m not actually sure if a memory address could get corrupted that changes the catch rate, but from experience with using the CascadeBadge to increase the catch rate of a PokÃ©mon the game didn&#039;t keep the changed catch rate, so you probably catch it with the default catch rate).


subject: Re: The Member's Guide to Topiclessness
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  http://puu.sh/xnCIz/4b7ab73127.png<br />I managed to write this before my PC finished starting up (and subsequently crashed).<br />They&#039;re to the tune of &quot;Escape from the City&quot;,


subject: Re: Memory Corruption Hack.
poster_name: ElectricPotato
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Okay so I understand that VBA is not the greatest emulator, but I&#039;ve used it for years, so I&#039;m the most accustomed to it.<br /><br /><br /><br /><br /><br /><br /><br />pliz no hate for vba


subject: Re: Easiest way to obtain Celebi on Japanese Gold and Silver?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So about two weeks ago I was able to put the theory into practise and came up with a way to get Celebi with no Sneasel (which only appears in Mt. Silver available after beating Lance and getting 16 badges), using a PokÃ©mon with 251 experience. The Bug-Catching Contest data copy glitch can be used to force this Celebi into an Egg if an Egg is in slot 2. Upon hatching it, it is registered in the PokÃ©dex.<br /><br />https://www.youtube.com/watch?v=e2d6yZPHJog&amp;<br /><br />I decided to look to see if there were any more developments, and it turns out Nakayoshibaddi (also known as EXE) who might be the owner of the blog has prepared a really impressive method using a ????? from Bug-Catching Contest data copy glitch to set up arbitrary code execution with TM17 in Japanese Gold!<br /><br />This is done with three Bicycles (ã˜ã¦ã‚“ã—ã‚ƒ) they obtain from byte shifting with ????? as PokÃ©mon held items, which are placed in the key items pocket to corrupt the Balls pocket and later obtain TM17 from shifting x208 Master Balls (tossed from x255 Master Balls, and shifted back to become item ID 208 (TM17)).<br /><br />They use a Wooper holding a TM02 with Return as the first move, similar to English version arbitrary code setups, and setup their code with Japanese box names. Mail strings are also involved in some way.<br /><br />This means Shiny Celebi, Shiny Mew, warping to the Safari Zone, etc. is definitely possible in the Japanese version. I don&#039;t know where Japanese Gold&#039;s TM17 executes code yet though.<br /><br />Diary post and video:<br /><br />http://nakayoshibaddi.hatenadiary.jp/entry/2017/08/15/223932<br /><br />http://www.nicovideo.jp/watch/sm31797349<br />No account version: http://www.mmcafe.com/nico.html#http://www.nicovideo.jp/watch/sm31797349<br /><br />Warping is even demonstrated in another one of their videos:<br />http://www.nicovideo.jp/watch/sm31793145<br />http://www.mmcafe.com/nico.html#http://www.nicovideo.jp/watch/sm31793145<br /><br />As well as what looks like a complex Shiny Celebi glitch (I haven&#039;t watched all of it yet, but it looks like this one maybe doesn&#039;t use arbitrary code like gia&#039;s Shiny Celebi glitch).<br /><br />http://www.nicovideo.jp/watch/sm31819922<br />http://www.mmcafe.com/nico.html#http://www.nicovideo.jp/watch/sm31819922<br /><br />I feel it&#039;s definitely worth seeing if there is a glitch like [url=https://www.youtube.com/watch?v=W-yPxRpoKyI]Type 0xD0 arbitrary code execution[/url] in Japanese Gold/Silver as well, which could be potentially another way to execute arbitrary code.


subject: Re: Memory Corruption Hack.
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Yeah I feel it&#039;s not fair to bash VBA.<br /><br />Sure it is inaccurate in various ways, but it mainly does things right (except for incorrect Echo RAM emulation on older versions and [url=http://forums.glitchcity.info/index.php?topic=7559]some other details relating to the hardware[/url]) and also has a convenient feature for recording videos.<br /><br />It can be a little inaccurate for PokÃ©mon Crystal however, in which graphical errors can occur for unknown reasons (maybe something to do with banked RAM?).


subject: Serious emulation problem with Monster Race (GB)?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  A while ago now I picked up this interesting Japanese game called Monster Race (ã‚‚ã‚“ã™ãŸã‚â˜…ãƒ¬ãƒ¼ã‚¹) in which you collect and race with monsters.<br /><br />It turns out saving twice in that game (or even once) on both BGB(!) and VBA may cause a &#039;glitch&#039; that creates a Glitch City and allows you to skip parts of the game, but I haven&#039;t been able to get that to work on a real Game Boy Advance SP or a physical Super Game Boy.<br /><br />[img]https://media.giphy.com/media/3ov9jXU9bdDDi1IYCI/giphy.gif[/img]<br /><br />Ryuto138 has a TAS video that exploits the error to complete the game quickly.<br /><br />https://www.youtube.com/watch?v=xJ9RqF8KGV4


subject: Re: Memory Corruption Hack.
poster_name: camper
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It has no graphical issues in VBA-RR v21, but has glitched tiles during battles in v23 and v24. Not sure about VBA-M.


subject: Re: PokÃ©mon Yellow in 0x A-presses or even 0x any button
poster_name: jfb1337
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Or perhaps the rule that if multiple games are used, each one has to start from a blank save file, and total A presses are counted over all games used


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Parzival
icon: xx
body:
  Might be a game-specific problem. Or just s**t code. I&#039;ll do some testing.<br />EDIT: This works on shitty emulators, hyper-accurate emulators, and emulators that force GB mode. Strange.<br />EDIT 2: aaaaaand i&#039;ve raped the game. Not a suprise.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  Great that it works! I fixed the mistake.<br /><br />If we analyze the structure of a PokÃ©mon in WRAM to discuss what we can manipulate, what we can at least see, and what we must pray for. Here&#039;s what we have:<br /><br />- Catch rate is not an issue.<br />- Moves can be dealt with: it requires 4 moves to avoid hex:00 if you use the EV technique.<br />- Trainer ID is an issue you must pray for, but you can convert it to hexadecimal to check quickly if you&#039;re f*cked or not.<br />- Experience can be avoided with the experience underflow glitch in the EV technique. You can also just convert it to hexadecimal (or is it BCD?) to check if the PokÃ©mon can be used. If not, you can just use another.<br />- EVs are used to execute, if you are ready to fight 74 PokÃ©mon battles.<br /><br />There may be a way to reduce the PokÃ©mon battles, maybe by attempting to put hex:0508 HP EV but it wouldn&#039;t be much worth it.<br /><br />[u]Untrained hitmonchan configuration[/u]<br /><br />A good theorical PokÃ©mon for a tradeless/glitchless technique would be an untrained Hitmonchan, rose up from lvl30 to lvl38 with Rare Candies. <br />- Its catch rate is 2D.<br />- At this level it will know Comet Punch, Agility, Fire Punch and Ice Punch. Comet Punch has to be replaced with a TM/HM (Strength will do the job).<br />- Trainer ID is still an issue, although here you must not just avoid 00 and 08 but pretty much every invalid opcodes.<br />- Experience is stable at 27000 (hex:6978) if untrained, and it&#039;s fine for your code.<br />- EVs will be 0 if untrained, noping the code until IVs.<br />- IVs cannot be controled. Unfortunately you can&#039;t just catch plenty of them, so you&#039;ll have to test it and reset it if it&#039;s not working.<br />- 00 PP currently at first move, 24 at Agility, 14 at Fire Punch should push until PokÃ©mon 6&#039;s HP (second byte) and then we may push to its PP.<br /><br />If you haven&#039;t picked your Hitmonx yet, it could be an interesting alternative maybe.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Cool thanks!<br /><br />That&#039;s interesting. :)<br /><br />Wait a moment, I have an idea. Your Trainer ID can be manipulated from the expanded items pack by changing item 30&#039;s quantity and item 31, and then you could catch a PokÃ©mon with a good catch rate with four moves and the Trainer ID of your choice.<br /><br />If the second byte of the Trainer ID was a Safari Ball (08) e.g. from an x-coordinate of 08, it could probably set up the text box arbitrary code execution following it. <br /><br />Following Trainer ID is the PokÃ©mon&#039;s experience. The first byte could be a 00 (a nop), the second two bytes could be 18 38 (jr D263), where your sixth PokÃ©mon with specific PPs would go (e.g. a Metapod evolved from Caterpie). Total experience is indeed stored as a normal three byte hexadecimal value, so the 001838 converts to 6200 total experience.<br /><br />This does need the expanded items pack sadly, but then again the glitch PokÃ©mon method to get the items for Rival LOL glitch probably does as well. Thinking about it I guess you can use a custom map script (D36D-D36E&#039;s pointer; which can be redirected to RAM) instead of POS or a glitch item for setting up your first arbitrary code execution as well.<br /><br />Hopefully the game doesn&#039;t mind a 08 00 sequence.<br />Edit: 08 00 18 38 is fine, so this should indeed work provided the catch rate and moves are good.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Parzival link=topic=8066.msg206638#msg206638 date=1504184070]<br />Might be a game-specific problem. Or just s**t code. I&#039;ll do some testing.<br />EDIT: This works on shitty emulators, hyper-accurate emulators, and emulators that force GB mode. Strange.<br />EDIT 2: aaaaaand i&#039;ve raped the game. Not a suprise.<br />[/quote]<br /><br />Thanks for testing! Yeah, I thought so too after it worked on BGB (otherwise known as an accurate emulator). Which emulators did you try may I ask?


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  That&#039;s a very good plan! I did not think about it. This way, we can try to get the correct XP or even catch several PokÃ©mon until finding one for which the moves, experience and IV are friendly, then it would nop until PPs that we can manipulate (learning 40 PP moves via TM would help).<br /><br />The issue with expanded item pack in Yellow is mainly that it requires MissingNo., but there is still the possibility to use Glitch City RAM Manipulation.<br /><br />Among all techniques, this one may be the less painful one :D


subject: Re: PokÃ©mon Yellow in 0x A-presses or even 0x any button
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  The actual question is how &quot;external&quot; is defined ; since the other cartridge is &quot;legit&quot; licensed hardware, I believe this doesn&#039;t count, in the same way as linking two cartridges together.<br />However, on the topic of using two carts, it had been deemed that the number of A presses would be counted towards both carts.


subject: Re: Press Ctrl+V or Cmd+V or whatever and post
poster_name: Zowayix
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Family Party: 30 Great Games Obstacle Arcade (WIIU)<br />Ride to Hell: Retribution (PC)<br />Yaris (X360)<br />Leisure Suit Larry: Box Office Bust (PS3)<br />Vroom in the Night Sky (Switch)<br />Double Dragon II: Wander of the Dragons (X360)<br />SPOGS Racing (WII)<br />Ride to Hell: Retribution (X360)<br />Alone in the Dark: Illumination (PC)<br />Deal or No Deal (DS)<br />Leisure Suit Larry: Box Office Bust (PC)<br />Infestation: Survivor Stories (The War Z) (PC)<br />Afro Samurai 2: Revenge of Kuma Volume One (PS4)<br />Drake of the 99 Dragons (XBOX)<br />Fast &amp; Furious: Showdown (X360)<br />Rambo: The Video Game (PS3)<br />Charlie&#039;s Angels (GC)<br />Homie Rollerz (DS)<br />FlatOut 3: Chaos &amp; Destruction (PC)<br />Fighter Within (XONE)<br />Pulse Racer (XBOX)<br />Legends of Wrestling II (GBA)<br />Game Party Champions (WIIU)<br />Postal III (PC)<br />Gravity Games Bike: Street Vert Dirt (PS2)<br />Terrawars: New York Invasion (PC)<br />NBA Unrivaled (PS3)<br />Cruis&#039;n (WII)<br />NBA Unrivaled (X360)<br />Stalin vs. Martians (PC)<br />Batman: Dark Tomorrow (XBOX)<br />Call for Heroes: Pompolic Wars (PC)<br />Dragon Ball Z: Ultimate Battle 22 (PS)<br />AMY (X360)<br />Game Party (WII)<br />Leisure Suit Larry: Box Office Bust (X360)<br />World War II Combat: Iwo Jima (PC)<br />Jenga World Tour (WII)<br />Survivor (2001) (PC)<br />Aquaman: Battle for Atlantis (XBOX)<br />Tenkai Knights: Brave Battle (3DS)<br />Deca Sports Freedom (X360)<br />KISS Pinball (PS)<br />R.I.P.D. The Game (PC)<br />Charlie and the Chocolate Factory (PC)<br />HBO Boxing (PS)<br />Stake: Fortune Fighters (XBOX)<br />Mucha Lucha! Mascaritas of the Lost Code (GBA)<br />Fray (PC)<br />Rogue Warrior (PS3)<br />GoDai: Elemental Force (PS2)<br />Aquaman: Battle for Atlantis (GC)<br />Looney Tunes: Acme Arsenal (WII)<br />Basement Crawl (PS4)<br />Chicken Shoot (WII)<br />Raven&#039;s Cry (PC)<br />Dragon Ball: Evolution (PSP)<br />Mortal Kombat: Special Forces (PS)<br />American McGee Presents Bad Day LA (PC)<br />Thundercats (DS)<br />Sneakers (XBOX)<br />Rogue Warrior (X360)<br />Rambo: The Video Game (X360)<br />Godzilla Unleashed: Double Smash (DS)<br />Ping Pals (DS)<br />Duke Nukem: Critical Mass (DS)<br />Batman: Dark Tomorrow (GC)<br />Jumper: Griffin&#039;s Story (X360)<br />Rogue Warrior (PC)<br />Game Party 2 (WII)<br />Hoodwink (PC)<br />Tunnel Rats: 1968 (PC)<br />Power Rangers Megaforce (3DS)<br />Transformers: Dark of the Moon - Stealth Force Edition (3DS)<br />Air Conflicts: Vietnam Ultimate Edition (PS4)<br />Fear Factor: Unleashed (GBA)<br />Soda Drinker Pro (XONE)<br />ShellShock 2: Blood Trails (X360)<br />Vampire Rain: Altered Species (PS3)<br />MTV&#039;s Celebrity Deathmatch (PC)<br />Ghostbusters (PS4)<br />Crime Life: Gang Wars (XBOX)<br />Robocop (XBOX)<br />ESPN Sports Connection (WIIU)<br />Big Oil: Build an Oil Empire (PC)<br />Smash &#039;N&#039; Survive (PS3)<br />CID The Dummy (WII)<br />Dream Chronicles (PS3)<br />Dino Dini&#039;s Kick Off Revival (PS4)<br />Forever Worlds - Enter the Unknown (PC)<br />DreamWorks Kung Fu Panda 2 (PS3)<br />The Asskickers (PC)<br />Toy Shop (DS)<br />Tony Hawk&#039;s Pro Skater 5 (PS4)<br />The Simpsons Wrestling (PS)<br />Ghostbusters (XONE)<br />Magus (PS3)<br />Pool Party (WII)<br />Kabuki Warriors (XBOX)<br />Coliseum (PC)


subject: Game Genie for Sega Genesis
poster_name: xtreme713ify
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: xtreme713ify
icon: xx
body:
  I just bought a Game Genie for Sega Genesis, and I&#039;ve had no luck finding any codes myself (I did find a pretty funny one for ToeJam and Earl: Panic on Funkotron on some website, but that&#039;s just one). However, I noticed it doesn&#039;t work with the 6-pak. Could someone test that for me?<br /><br />Edit: I got the 6-Pak working. I might post some codes when I find &#039;em.


subject: Re: What Football Will Look Like in the Future
poster_name: Zowayix
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8011.msg206165#msg206165 date=1499795812]<br />Great page.<br />[img]http://i.imgur.com/y4peRyG.png[/img]<br />[/quote]<br /><br />That&#039;s what football will look like in the future. Didn&#039;t you hear? [url=https://www.csmonitor.com/Commentary/Opinion/2012/1019/Millennial-generation-could-kill-the-NFL]Millennials are killing football now.[/url]


subject: Re: PokÃ©mon Yellow in 0x A-presses or even 0x any button
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8064.msg206637#msg206637 date=1504183933]<br />This&#039;d render the [i]post[/i] useless.<br />[/quote]<br /><br />With all due respect, I wouldn&#039;t say that. Torchickens posted a thread for theory discussion and it&#039;s still interesting though.<br /><br />Regardless of what she proposed, in my opinion, no debate thread is useless :)


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Gambatte, mGBA, LameboyDS, and DSBoy.<br />All of them had the problem. I also tried a friend&#039;s flashcart on his GBA SP, and it was present there, albeit inconsistent. This kinda makes me believe that a bad dump was hashed as the known-good.<br />(Also, if you can find the item in the starting town and use it, you can see your expanded party. lel)


subject: Re: PokÃ©mon Yellow in 0x A-presses or even 0x any button
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Krys3000 link=topic=8064.msg206648#msg206648 date=1504262665]<br />[quote author=Parzival link=topic=8064.msg206637#msg206637 date=1504183933]<br />This&#039;d render the [i]post[/i] useless.<br />[/quote]<br /><br />With all due respect, I wouldn&#039;t say that. Torchickens posted a thread for theory discussion and it&#039;s still interesting though.<br /><br />Regardless of what she proposed, in my opinion, no debate thread is useless :)<br />[/quote]I meant from a practicality point, it&#039;s unusable due to the rules of the challenge. Theory-wise, though, yes, it&#039;s a good post. Probably should&#039;ve clarified that in the earlier post. xD<br /><br />[quote author=ISSOtm link=topic=8064.msg206644#msg206644 date=1504220382]<br />The actual question is how &quot;external&quot; is defined ; since the other cartridge is &quot;legit&quot; licensed hardware, I believe this doesn&#039;t count, in the same way as linking two cartridges together.<br />However, on the topic of using two carts, it had been deemed that the number of A presses would be counted towards both carts.<br />[/quote]Which would most likely only extend the number of button presses far enough to make it unusable.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  This post got me thinking about whether or not there&#039;d be a way to create a universal ACE setup. Which&#039;d be cool.<br />...on-topic, I&#039;ve got nothing to say but &quot;That&#039;s awesome!&quot;.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  [quote author=Parzival link=topic=8066.msg206650#msg206650 date=1504275370]<br />I also tried a friend&#039;s flashcart on his GBA SP, and it was present there, albeit inconsistent.<br />[/quote]<br /><br />I&#039;m assuming you mean a GB(C) flashcart like the old parallel-port ones from Bung?<br /><br />By the way, another possible cause of this could be some form of anti-flashcart protection that is hit by emulators too.


subject: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Has anyone given any thought to how international glitch PokÃ©mon would be documented on the wiki?<br /><br />The obvious candidates here would obviously be invalid PokÃ©mon in RG/B/Y JP, but there are differences in invalid PokÃ©mon in non-English European versions too, one of which being index 0 of Spanish Red/Blue, which among a number of differences to its more well-known English-version counterpart, learns a number of moves by leveling up.<br /><br />I&#039;m sure our friends at PRAMA could help with the French side. On that note, perhaps there are other PokÃ©mon glitch research websites focusing on the other non-English European languages who may be willing to affiliate with us?<br /><br />Another thing to consider, albeit slightly offtopic: I remember reading somewhere that all non-Japanese Generation I games are link-compatible. If this is indeed true, it could expand the number of invalid PokÃ©mon obtainable via Trainer-Fly and equivalent trade, for all non-Japanese games.


subject: Re: Memory Corruption Hack.
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  The problem is that VBA is a bad emulator, and people [i]still[/i] use it.<br />It&#039;s a bad AND dead project, it needs to be not used anymore - like Windows XP. I wouldn&#039;t bash Win XP because it&#039;s not as bad.<br /><br />VBA is inaccurate af because it has several emulation errors (memory access timings, lack of support of several features, etc), some of which both make the system an inaccurate thing, but also makes playing with glitches either different (not always in a bad way, but it&#039;s an emulation artifact so it has no worth) or impossible (example : Dokokashira Door Glitch, impossible to use because of a lack of Echo RAM).<br />Also, it lacks SRAM locking, meaning your save has much more chances to be corrupted on VBA, for example. Some of these issues are problematic to the player, I&#039;m not looking for small bugs.<br /><br />Now, even BGB had these issues. Problem is, VBA is a dead project. Yet it&#039;s still massively used, even though good alternatives exist. VBA-M keeps most of the interface (90% at worst), but is already MUCH better. If you want better stuff and you&#039;re ready to change, get BizHawk, Gambatte, RetroArch even. If you want to do technical stuff, use BGB.<br /><br /><br />So yeah, I&#039;ll keep bashing VBA as long as I see people use it. tl;dr : because it&#039;s crap, and worse, unmaintained, non-updated, dead crap, and worser, there are good alternatives.<br /><br />(@Torchickens : Oh god no, VBA does only so many things right. But it does enough that it &quot;works okay&quot;.). For the recording, you can use BizHawk (AND you won&#039;t have any pesky audio syncing issues ! And if you&#039;re okay with the emulator going at 10 fps you can even add an overlay :p), or any screen recorder.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=8068.msg206654#msg206654 date=1504304496]<br />Has anyone given any thought to how international glitch PokÃ©mon would be documented on the wiki?<br />[/quote]<br />Format-wise? Just add an extra column for language/version, or have the &quot;GlitchDex&quot; link go to a disamb with the different languages/versions on it.<br />Otherwise, document them like the rest.<br />


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=8066.msg206653#msg206653 date=1504296107]<br />[quote author=Parzival link=topic=8066.msg206650#msg206650 date=1504275370]<br />I also tried a friend&#039;s flashcart on his GBA SP, and it was present there, albeit inconsistent.<br />[/quote]<br />I&#039;m assuming you mean a GB(C) flashcart like the old parallel-port ones from Bung?<br />[/quote]It&#039;s some weird-ass GBA cart... &quot;GBA Movie player&quot; or some such. Takes those stupid fucking CompactFlash cards. He&#039;s got an 8MB... drive? card? in it, but he says it takes max. 256MB ones, and he can&#039;t find one that size.<br />Looks like this, but the card&#039;s flush with the cart end. <br />[img]https://i.imgur.com/Tx56XD0.jpg[/img]


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8066.msg206657#msg206657 date=1504314839]<br />[quote author=Wack0 link=topic=8066.msg206653#msg206653 date=1504296107]<br />[quote author=Parzival link=topic=8066.msg206650#msg206650 date=1504275370]<br />I also tried a friend&#039;s flashcart on his GBA SP, and it was present there, albeit inconsistent.<br />[/quote]<br />I&#039;m assuming you mean a GB(C) flashcart like the old parallel-port ones from Bung?<br />[/quote]It&#039;s some weird-ass GBA cart... &quot;GBA Movie player&quot; or some such. Takes those stupid fucking CompactFlash cards. He&#039;s got an 8MB... drive? card? in it, but he says it takes max. 256MB ones, and he can&#039;t find one that size.<br />Looks like this, but the card&#039;s flush with the cart end. <br />[img]https://i.imgur.com/Tx56XD0.jpg[/img]<br />[/quote]<br /><br />So, it&#039;s a cart that runs in GBA mode, and probably uses a GB emulator then.


subject: Cause of Special Menu Select glitches (JP)
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Couldn&#039;t get to sleep, so why not look into the cause of a glitch that hasn&#039;t been documented very well?<br />I used luckytyphlosion&#039;s pokered-jp disassembly (a fork of pokered that aims to be a disasm of JP R/G) to help me.<br /><br />This glitch is caused entirely by the [url=https://github.com/luckytyphlosion/pokered-jp/blob/master/engine/menu/swap_items.asm]HandleItemListSwapping[/url] function. As you can probably see by the helpful comments, the direct cause is the wrong conditional jump was used, and the jump back to the item menu loop happens when carry flag is set, instead of when zero flag is not.<br /><br />The function can only handle item swapping, and special item lists are just lists of item indices, without quantities.<br />So, swapping items 1 and 2 cause items 1 and 2 to be swapped with 3 and 4, as items 1 and 2 are interpreted as item+quantity of item 1, and items 3 and 4 as item+quantity of item 2.<br /><br />Going by the sets of swaps in the wiki article, the last swap swaps items 7 and 8, that is, bytes 14-15 and 16-17. These bytes are located after the FF array terminator. The buffer in WRAM where the item list is located is in fact only 16 bytes long (and the first byte is the list quantity). Directly after this buffer is a pointer to the item list itself, so this pointer is swapped with some undefined data beyond the list terminator but still within the buffer.<br /><br />I have not yet determined why this causes corruptions to other parts of memory.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Hell yes, glitch PokÃ©mon are very different in French games.<br /><br />Making a French glitchdex is something that we want to for years, but it never was the top priority at the moment. Yes sure we can help for such a project :)


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: camper
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Missingno. is safe the first time you encounter it, so you just have to make sure you capture it to get a x255 stack.


subject: Re: Memory Corruption Hack.
poster_name: camper
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Any screen recorder you recommend that records sound as well and is FREE?<br /><br />But even then, screen recorder won&#039;t pause when you switch windows. You either have to record the whole thing in one go, or you have to edit the video afterwards.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=camper link=topic=8063.msg206661#msg206661 date=1504349033]<br />Missingno. is safe the first time you encounter it, so you just have to make sure you capture it to get a x255 stack.<br />[/quote]<br /><br />Yeah. This may assume you erased your previous save file with Up+Select+B (other times unstable MissingNo. may freeze the game even if it&#039;s the first encounter with it), but I remember doing that with Viridian Forest unstable MissingNo. to have it not freeze the game the first time the first time I set up the expanded items pack in the Virtual Console release. This also works on a physical cartridge.<br /><br />However, if you don&#039;t want to do that or get a Special stat of 182, 183, 184 for fossil/ghost MissingNo. there are two other methods for Trainer-Fly:<br /><br />1. [url=https://www.youtube.com/watch?v=73fAlzIbi9k]Double Trainer-Fly from the Level 80 Starmie you get from interacting with the Cubone trade girl[/url] (found by a speedrunner based on Paco81&#039;s special Trainer-Fly yield finds, I&#039;m afraid I can&#039;t remember the person who discovered this trick specifically)<br /><br />2. [url=https://forums.glitchcity.info/index.php?topic=7436.msg200683#msg200683]Lost-Paisley&#039;s underflowed L100 Nidoqueen method[/url]


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Wack0 link=topic=8068.msg206654#msg206654 date=1504304496]<br />Has anyone given any thought to how international glitch PokÃ©mon would be documented on the wiki?<br /><br />The obvious candidates here would obviously be invalid PokÃ©mon in RG/B/Y JP, but there are differences in invalid PokÃ©mon in non-English European versions too, one of which being index 0 of Spanish Red/Blue, which among a number of differences to its more well-known English-version counterpart, learns a number of moves by leveling up.<br /><br />I&#039;m sure our friends at PRAMA could help with the French side. On that note, perhaps there are other PokÃ©mon glitch research websites focusing on the other non-English European languages who may be willing to affiliate with us?<br />[/quote]<br /><br />I think we could document these much like the same as the English articles, but the GlitchDex article could be have a language code in the title like this: GlitchDexDE, GlitchDexFR, GlitchDexES, GlitchDexIT, GlitchDexJP and GlitchDexKO, so GlitchDexJP/RG:000 would be the article for Japanese Red/Green No. 000, and so on.<br /><br />I feel it would be good to list the moves these glitch PokÃ©mon learn in both English and the source game&#039;s language, that way people who don&#039;t understand English could refer to them.<br /><br />After all the English Dex projects are finished I&#039;m interested in creating articles for international MissingNo. data, the different ã‚¢ãƒã‚›ãƒ‡ãƒ‘ãƒŸ/RGBY hex:FF glitch PokÃ©mon, the RGBY hex:00 glitch PokÃ©mon and international Generation II glitch PokÃ©mon because I feel these ought to have recognition.<br /><br />I&#039;d love to work on relatively complete GlitchDexes for each language, but because it&#039;s very time consuming its an ambitious thing to do alone that needs a lot of dedication. However if anyone wants to work on a GlitchDex in another language with [url=http://glitchcity.info/wiki/User:Torchickens/Sample_RBY_glitch_Pok%C3%A9mon]the new formatting[/url] it would be amazing and I&#039;d appreciate it tons, even if some of the data is incomplete.<br /><br />At the moment after the English Dexes are done I want to focus on updating the wiki so it covers the contents of all of TheZZAZZGlitch, Crystal_&#039;s, Metarkrai, hibiki ganaha&#039;s and my own videos, because our coverage of glitch techniques on the wiki is inexhaustive (from what is known and what we have gathered) and it&#039;d be nice to only have to worry about adding new discoveries as they come.<br /><br />[quote author=Wack0 link=topic=8068.msg206654#msg206654 date=1504304496]<br />Another thing to consider, albeit slightly offtopic: I remember reading somewhere that all non-Japanese Generation I games are link-compatible. If this is indeed true, it could expand the number of invalid PokÃ©mon obtainable via Trainer-Fly and equivalent trade, for all non-Japanese games.<br />[/quote]<br /><br />That&#039;s cool, I didn&#039;t know that thanks Wack0! It looks like that&#039;s quite possible then. :) I know for sure not all of the glitch PokÃ©mon 190-199 that freeze the game on the English version freeze the game on another version. The German version of Red/Blue also has Ã„, Ã–, Ãœ, Ã¤, Ã¶, Ã¼ characters available from the new name menu which can be used to encounter glitch PokÃ©mon 192-197.<br /><br />Ã¶ ã‚¥ (C1), the equivalent of the English version&#039;s normally freezing ã‚¥ (C1) in the German version is available from Ã–. Ã¤POKÃ© (hex:C4) the equivalent of POKÃ©WTRAINER is available from Ã¶ and it also does not freeze the game. The equivalent of â™€pã‚¥ ã‚¥ã‚¥T (hex:C7) named â™€pã‚¥Ã®ã‚¥Ã®ã‚¥Y (hex:C7) in the German version found with Special stat 199 also doesn&#039;t always freeze the game.<br /><br />[quote author=Krys3000 link=topic=8068.msg206660#msg206660 date=1504341757]<br />Hell yes, glitch PokÃ©mon are very different in French games.<br /><br />Making a French glitchdex is something that we want to for years, but it never was the top priority at the moment. Yes sure we can help for such a project :)<br />[/quote]<br /><br />Thank you Krys! ^^


subject: Re: Cause of Special Menu Select glitches (JP)
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=8069.msg206659#msg206659 date=1504318785]<br />Couldn&#039;t get to sleep, so why not look into the cause of a glitch that hasn&#039;t been documented very well?<br />I used luckytyphlosion&#039;s pokered-jp disassembly (a fork of pokered that aims to be a disasm of JP R/G) to help me.<br /><br />This glitch is caused entirely by the [url=https://github.com/luckytyphlosion/pokered-jp/blob/master/engine/menu/swap_items.asm]HandleItemListSwapping[/url] function. As you can probably see by the helpful comments, the direct cause is the wrong conditional jump was used, and the jump back to the item menu loop happens when carry flag is set, instead of when zero flag is not.<br /><br />The function can only handle item swapping, and special item lists are just lists of item indices, without quantities.<br />So, swapping items 1 and 2 cause items 1 and 2 to be swapped with 3 and 4, as items 1 and 2 are interpreted as item+quantity of item 1, and items 3 and 4 as item+quantity of item 2.<br /><br />Going by the sets of swaps in the wiki article, the last swap swaps items 7 and 8, that is, bytes 14-15 and 16-17. These bytes are located after the FF array terminator. The buffer in WRAM where the item list is located is in fact only 16 bytes long (and the first byte is the list quantity). Directly after this buffer is a pointer to the item list itself, so this pointer is swapped with some undefined data beyond the list terminator but still within the buffer.<br /><br />I have not yet determined why this causes corruptions to other parts of memory.<br />[/quote]<br /><br />Nice research Wack0. Thanks! :)<br /><br />I recently did some other research about this on another thread (http://forums.glitchcity.info/index.php?topic=7984.msg205778#msg205778) and came to similar conclusions; swapping an entry switches pairs of bytes as if they were item/quantity pairs even though the list is displayed as item-item-item, and it is possible to change the list location pointer (including the number of entries on the list) that way illustrated in the thread.<br /><br />I didn&#039;t look into why a Super-Glitch-esque effect can occur though.


subject: Re: Easier way to perform the Pikachu Off-Screen ACE in Yellow
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Related to Wacko&#039;s thread on international glitchdex, I think it&#039;s very interesting that in French games, MissingNo. freezes the game in R/B (via instant encounter) but not in Yellow, whereas in English games, you can get it in R/B but it&#039;s difficult in Yellow. That says a lot about the differences between localizations.<br /><br />Fossil/Ghost MissingNo. is the better option, provided that you can Trainer-Fly. The existence of RAM Glitch City ensures that you can do it even without trainers if necessary.<br /><br />I&#039;ll update the first post with this new possibility.<br /><br />


subject: Re: Cause of Special Menu Select glitches (JP)
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8069.msg206665#msg206665 date=1504352843]<br />I didn&#039;t look into why a Super-Glitch-esque effect can occur though.<br />[/quote]<br /><br />I just tried looking into it, but couldn&#039;t figure it out from static analysis alone. I guess some work in the debugger would be required.<br /><br />I guess it depends on what ends up in wListPointer? The wiki page does say the effects don&#039;t happen every time.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Regarding the new page layout, it seems that a script could be created that could automatically fill in most of that information, a la the original Melchior project?<br /><br />The script could output wiki markup and mark the pages as stubs, allowing for someone else to come in and finish the final parts.<br /><br />Bonus points if it could create a PokÃ©dex screenshot too, which is theoretically possible.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Caveat
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Maybe it only works on normal Game Boys, like that glitch where the player&#039;s sprite gets corrupted when using an Escape Rope?


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Given that I own a DMG, a CGB and a GBASP plus two flashcarts, I&#039;d be eager to test this - however I don&#039;t have the necessary ROM.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8066.msg206671#msg206671 date=1504370212]<br />Given that I own a DMG, a CGB and a GBASP plus two flashcarts, I&#039;d be eager to test this - however I don&#039;t have the necessary ROM.<br />[/quote]<br /><br />You can&#039;t search the Internet for it?<br />


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Double posting here, as I just realised that if all non-Japanese Generation I games really are link compatible, it means that the trade linkup derivative of the left-facing shore tile trick could be used to encounter 192-197 on non-German games (as far as i can tell, using the walk-through-walls ledge trick first in Italian and Spanish versions, making sure to visit the Cinnabar Island PokÃ©mon Center beforehand).


subject: I'm new to this, and looking for some tips?
poster_name: PikaPerfect
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: question
body:
  Firstly, hi! I just joined this forum about an hour ago, and after reading the forum rules, scanning over a few threads, and trying to find the ones that interest me most (Which is nearly all of them...), I decided that I&#039;d like to make a little post with some questions I have. I sincerely apologize if this is the wrong place to post this, as I wasn&#039;t able to find any sort of question board or help ticket system? If anybody knows where either of those things (Or anything similar) are, I&#039;d appreciate the help haha <br /><br />Anyway, back on topic. I&#039;ve been heavily interested in glitches, quirks, unused content, data mining, and much, much more in all PokÃ©mon games for at least 5 years (right now I&#039;m most interested in R/S/E), and I&#039;ve finally decided to make an account on likely the most infamous PokÃ©mon glitch community website. That said, as much as I&#039;ve looked into these things, there are still a lot of things I don&#039;t understand or know yet, and what better way to learn then to go to a place where (almost) everyone knows the answers? I guess my big question here is where should I start looking? What threads contain the most helpful information on PokÃ©mon glitches (for any generation of games, not just Ruby, Sapphire, and Emerald), and which ones are the most interesting/active? Where should I start looking for glitches that are dangerous enough to brick your cartridge, and where should I start looking for ones that just scramble the graphics and get fixed upon reset? There&#039;s a lot more I&#039;d like to know, but (a) this post is getting cluttered, and (b) this post is getting long ^^;<br /><br />Thank you to anyone who can either get this thread where it&#039;s supposed to be if this is wrong, or help me with my questions! I&#039;m very excited to finally become more active in a community I&#039;ve been sitting and watching for for years.


subject: Re: I'm new to this, and looking for some tips?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I moved this topic to a better place.<br />I&#039;d suggest to look at the stickied threads around the PokÃ©mon Glitch Discussion section. Also, looking at the wiki should also be able to help you :)<br />


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Wack0 link=topic=8068.msg206673#msg206673 date=1504371943]<br />Double posting here, as I just realised that if all non-Japanese Generation I games really are link compatible, it means that the trade linkup derivative of the left-facing shore tile trick could be used to encounter 192-197 on non-German games (as far as i can tell, using the walk-through-walls ledge trick first in Italian and Spanish versions, making sure to visit the Cinnabar Island PokÃ©mon Center beforehand).<br />[/quote]<br /><br />Ah, of course! I didn&#039;t think of that. Thanks Wack0.<br /><br />Yeah in the French, German versions the old man trick wasn&#039;t fixed at all but in the Spanish and Italian versions you must use a walk through walls glitch to avoid Tentacool encounters, as you say.&nbsp; Although the French, German and Italian versions gave encounters from the player&#039;s name I wasn&#039;t able to get them in the Spanish version; only Pidgey/Rattata from the previous rate which was odd because D88C (encounter table) contained values from the player&#039;s name.<br /><br />I don&#039;t know whether I was just extremely unlucky but with so many tries I wonder whether something else is going on there or even whether there&#039;s a bug with Spanish version encounter tables (where on Route 1 the beginning bytes are 19 03 24 03 A5 03 which are expected PokÃ©mon on that route).<br /><br />[quote author=Wack0 link=topic=8068.msg206669#msg206669 date=1504360436]<br />Regarding the new page layout, it seems that a script could be created that could automatically fill in most of that information, a la the original Melchior project?<br /><br />The script could output wiki markup and mark the pages as stubs, allowing for someone else to come in and finish the final parts.<br /><br />Bonus points if it could create a PokÃ©dex screenshot too, which is theoretically possible.<br />[/quote]<br /><br />That sounds like good idea. Also we could use a more elaborate template that already has the headers like starting move, methods to obtain, evolutions, base stats. Basically one massive template where all you need to input are the variables.<br /><br />In theory a bot could just take them from a database (which possibly exists on an old version of Glitch City as the Melchior data) and create the pages automatically like what was done before but this time in proper wiki format, although it would take work to put the theory into practise and also program the bot.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8068.msg206676#msg206676 date=1504376067]<br />I don&#039;t know whether I was just extremely unlucky but with so many tries I wonder whether something else is going on there or even whether there&#039;s a bug with Spanish version encounter tables (where on Route 1 the beginning bytes are 19 03 24 03 A5 03 which are expected PokÃ©mon on that route).<br />[/quote]<br /><br />I guess you could put a write breakpoint on the EU equivalent of CFD8 (CFD3? CFDD? Can&#039;t remember...).


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Wack0 link=topic=8068.msg206677#msg206677 date=1504377032]<br />[quote author=Torchickens link=topic=8068.msg206676#msg206676 date=1504376067]<br />I don&#039;t know whether I was just extremely unlucky but with so many tries I wonder whether something else is going on there or even whether there&#039;s a bug with Spanish version encounter tables (where on Route 1 the beginning bytes are 19 03 24 03 A5 03 which are expected PokÃ©mon on that route).<br />[/quote]<br /><br />I guess you could put a write breakpoint on the EU equivalent of CFD8 (CFD3? CFDD? Can&#039;t remember...).<br />[/quote]<br /><br />Yeah it should be CFDD. Good idea.<br /><br />Edit: On BGB I encountered the glitch PokÃ©mon 0 &#039;MÃ¹ Ã¹ (hex:00) in Spanish version using the old man trick even when I went to Route 1 before watching the old man&#039;s demonstration, so I&#039;m unsure why it wasn&#039;t working before. However my player&#039;s name this time was simply &quot;A&quot;. Before it was the default &quot;ROJO&quot; name (which may have had other data following the 0x50 if it was selected as a preset name from the new name menu).


subject: Re: Memory Corruption Hack.
poster_name: ElectricPotato
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Okay, thanks Torchickens. I understand VBA is terrible for glitching, and the numerous emulation errors get in the way, but I am still new to glitching pokemon gen 1 and 2. I dont think emulation errors will effect me.<br /><br />If you are looking for a screen recorder, use OBS. Completely free and will help you out when you are stuck. Don&#039;t just exit using the x button tho.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I was just wondering how you&#039;d do the trade linkup derivative of the left-facing shore tile glitch directly after the walk-through-walls ledge trick.<br /><br />It took me a while to realise: go into the Safari Zone, save and reset then head out of the Safari Zone, get two PokÃ©mon poisoned, go to Cinnabar and deposit all but one of the poisoned PokÃ©mon, jump off a ledge with your 500th step, walk around the Safari Zone entrance until whiteout, withdraw your other poisoned PokÃ©mon and deposit the healthy one, go link with another game, run around the trade center until whiteout, leave the PokÃ©mon Center and walk up and down the right coast.


subject: Re: Change your trainer ID and name
poster_name: yecho
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: yecho
icon: xx
body:
  I want to do the same on my pokemon yellow EU version. Do you have a code to do this ? <br /><br />And then, can anyone give me the good process to receive a gifted mew level 2 or 5 fastly instead of doing the ditto glitch but with the &quot;ws m&quot; glitch ?<br /><br />Thank you for advance.


subject: Re: Change your trainer ID and name
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=yecho link=topic=7994.msg206682#msg206682 date=1504448055]<br />I want to do the same on my pokemon yellow EU version. Do you have a code to do this ? <br /><br />And then, can anyone give me the good process to receive a gifted mew level 2 or 5 fastly instead of doing the ditto glitch but with the &quot;ws m&quot; glitch ?<br /><br />Thank you for advance.<br />[/quote]<br /><br />For the ID code, if your EU version is English Yellow change the x89 to x88. If it&#039;s a French, German, Spanish or Italian Yellow it should work if you change the x89 to x93.<br /><br />For the gift PokÃ©mon code. If EU English Yellow (Level 2 PokÃ©mon):<br /><br />* Any item<br />* ws m<br />Repel&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x21 (Mew&#039;s ID, can be a different quantity)<br />X Speed&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x14<br />Ultra Ball&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x64<br />TM05&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x89<br />Lemonade&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x201<br /><br />If EU French, German, Spanish or Italian Yellow (Level 2 PokÃ©mon), try these:<br /><br /><br />French:<br /><br />* Any item<br />* ws l&#039;m<br />Repel&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x21 (Mew&#039;s ID, can be a different quantity)<br />X Speed&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x14<br />Ultra Ball&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x64<br />TM05&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x92<br />Lemonade&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x201<br /><br />German:<br /><br /><br />* Any item<br />* ws &#039;lm<br />Repel&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x21 (Mew&#039;s ID, can be a different quantity)<br />X Speed&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x14<br />Ultra Ball&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x64<br />TM05&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x94<br />Lemonade&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x201<br /><br />Spanish:<br /><br /><br />* Any item<br />* ws &amp; m<br />Repel&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x21 (Mew&#039;s ID, can be a different quantity)<br />X Speed&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x14<br />Ultra Ball&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x64<br />TM05&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x94<br />Lemonade&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x201<br /><br />Italian:<br /><br /><br />* Any item<br />* ws &amp; m<br />Repel&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x21 (Mew&#039;s ID, can be a different quantity)<br />X Speed&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; x14<br />Ultra Ball&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x64<br />TM05&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x87<br />Lemonade&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  x201<br /><br />You will need the relevant bootstrap code for your language, such as [url=http://forums.glitchcity.info/index.php?topic=6638.msg192543#msg192543]this one[/url] if your language isn&#039;t the English release. Hope this helps. :)


subject: Re: How can I correct a mistake I've made with the 8f ?
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  While we were discussing Marv231&#039;s code on PRAMA&#039;s Discord, we noticed there was no asm. So here it is!<br /><br />Note: Yellow uses the same code with D32C=7B (123 X Accuracy)<br /><br />[code]WRAM1:D327	3A	LD A,(HL-)	A=?? HL=D326<br />WRAM1:D328	3A	LD A,(HL-)	A=59 HL=D325<br />WRAM1:D329	25	DEC H		H=D2<br />WRAM1:D32A	25	DEC H		H=D1<br />WRAM1:D32B	2E 7C	LD L,7C		L=7C<br />WRAM1:D32D	22	LD (HL+),A	(D17C)=59 HL=D17D<br />WRAM1:D32E	3E 0C	LD A,0C		A=0C<br />WRAM1:D32F	32	LD (HL-),A	(D17D)=0C HL=D17C<br />WRAM1:D330	04	INC B<br />WRAM1:D331	2B	DEC HL		HL=D17B<br />WRAM1:D332	0B	DEC BC		<br />WRAM1:D333	2B	DEC HL		HL=D17A<br />WRAM1:D334	24	INC HL		H=D2<br />WRAM1:D335	3E 4F	LD A,4F		A=4F<br />WRAM1:D337	3C	INC A		A=50<br />WRAM1:D338	0D	DEC C<br />WRAM1:D339	32	LD (HL-),A	(D27A)=50 ; HL=D279<br />WRAM1:D33A	3E 85	LD A,85		A=85<br />WRAM1:D33C	03	INC BC<br />WRAM1:D33D	32	LD (HL-),A	(D279)=85 ; HL=D278<br />WRAM1:D33E	3C	INC A		A=86<br />WRAM1:D33F	22	LD (HL+),A	(D278)=86 ; HL=D279<br />WRAM1:D340	C9	RET[/code]


subject: Re: Change your trainer ID and name
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  For the record, Yecho&#039;s game is French. We assisted him on PRAMA&#039;s Discord during the process of getting its GF Mew by changing its Trainer ID and then catching a Mew using the single-address value changing ACE code :)


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Regarding linking two European Generation I games, I&#039;ve been talking about it like it may be possible based on what I&#039;ve read.<br /><br />Turns out Torchickens successfully did this to show &quot;changing OT names&quot; with regards to NPC traded PokÃ©mon with an OT name of [tt]5D 50 ...[/tt], between an English and a Spanish Generation I game, in a video in 2012: https://youtube.com/watch?v=Zum_-joPerw<br /><br />So it is indeed possible. I think the doubt is because of structure changes between Japanese Generation I/II games and all localisations, causing link incompatibility between a Japanese and non-Japanese Generation I or II game.<br /><br />I&#039;m not sure if the Virtual Console emulator allows links between Generation I games of different languages (no matter if they would be compatible or not), though.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Sorry, I did not understand that this was an interrogation.<br /><br />I&#039;ve been doing trades with my Italian cousins when I was young so indeed it works :)


subject: Re: Memory Corruption Hack.
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Well the biggest issue with VBA is that its emulation errors [i]actually[/i] get in the way of glitching, the largest culprit being the lack of Echo RAM emulation.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I tried but it yielded no valid result (now I get why, I typo&#039;d the name)<br />This didn&#039;t work on my GBC, and Torchickens mentioned it didn&#039;t work on her GBA SP, so I believe the cart was faulty.


subject: Re: Memory Corruption Hack.
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  If I can add something about this.<br /><br />I&#039;ve learned GB emulation through VBA and for long, I had difficulties in dropping it because it is, by far, the most accessible and easy to use emulator for newbies. In a certain way, people with knowledge in programming often don&#039;t realize how it is for newbies to deal with complex functions. BGB&#039;s debugger is powerful in so many ways, but it&#039;s clearly not appealing for people who don&#039;t know what an opcode is, and let&#039;s be frank - you don&#039;t need those functions if you just want to change or follow the value of a RAM address in order to perform whatever you want.<br /><br />Because of this, while ISSOtm and Haxel told me repeatedly not to, I always wanted to keep VBA for download at PRAMA. However, I now feel that this was a mistake, for several reasons. The &#039;original&#039; version of VBA has indeed a terrible emulation and, research-wise, some behaviour that you think is the discovery of an in-game glitch will just be related to it. Thus, regardless of how BGB is useful for code execution, the problem with Echo RAM in VBA makes it unable to perform thorough ACE tests.<br /><br />But the main issue is that VBA has a major flaw which can allow someone to execute code ON YOUR PC. I feel bad that people could get screwed with a software that they downloaded on my website. As far as I know, this flaw cannot be used in VBA-M.<br /><br />I&#039;m just saying this but, if you don&#039;t want to jump to a complicated emulator like BGB (even now that I&#039;ve learned how to use it, it has things that still makes me mad) you may want to use VBA-M which is very similar and just requires a bit of adaptation to find your usual functions. But, on a much larger scale, you should experiment using BGB and make a (slow) transition to it. The faster the better in fact, because VBA&#039;s savestates are not compatible with BGB so it&#039;s best if you don&#039;t have many yet :)


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Parzival
icon: xx
body:
  [quote author=Caveat link=topic=8066.msg206670#msg206670 date=1504364367]<br />Maybe it only works on normal Game Boys, like that glitch where the player&#039;s sprite gets corrupted when using an Escape Rope?<br />[/quote]I tested in BGB in CGB mode, and it&#039;s present.<br />[quote author=ISSOtm link=topic=8066.msg206690#msg206690 date=1504517446]<br />I tried but it yielded no valid result (now I get why, I typo&#039;d the name)<br />This didn&#039;t work on my GBC, and Torchickens mentioned it didn&#039;t work on her GBA SP, so I believe the cart was faulty.<br />[/quote]The glitch doesn&#039;t work? In that case, BGB is shit, VBA rules, and everyone&#039;s dead.<br />Seriously though, if [i]even[/i] BGB fucks it up at 99.97% or so accuracy, there&#039;s something horribly wrong.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  I didn&#039;t think about that, maybe the ROM I used was indeed a bad dump (causing the errors on an emulator) and my physical cartridge (being official) was a good dump hence didn&#039;t have the glitch on GBA SP and my physical SNES/Super Game Boy.<br /><br />This is the MD5 checksum of the ROM I used on emulator.<br />6C124C8C7FBF7D330EBC2F06DAD7E270<br /><br />DAT-o-MATIC [url=http://datomatic.no-intro.org/?page=show_record&amp;s=46&amp;n=0818]says this is a trusted dump[/url], but with the information now maybe that was a false positive.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8066.msg206693#msg206693 date=1504541247]<br />I didn&#039;t think about that, maybe the ROM I used was indeed a bad dump (causing the errors on an emulator) and my physical cartridge (being official) was a good dump hence didn&#039;t have the glitch on GBA SP and my physical SNES/Super Game Boy.<br /><br />This is the MD5 checksum of the ROM I used on emulator.<br />6C124C8C7FBF7D330EBC2F06DAD7E270<br /><br />DAT-o-MATIC [url=http://datomatic.no-intro.org/?page=show_record&amp;s=46&amp;n=0818]says this is a trusted dump[/url], but with the information now maybe that was a false positive.<br />[/quote]<br /><br />Actually, it seems as if that ROM is a bad dump.<br />DAT-o-MATIC says that two dumps were made in 2014 and both have MD5 hash of 3029C962C483DF174FC6F5C9202326E3.<br />


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=8066.msg206694#msg206694 date=1504542991]<br />[quote author=Torchickens link=topic=8066.msg206693#msg206693 date=1504541247]<br />I didn&#039;t think about that, maybe the ROM I used was indeed a bad dump (causing the errors on an emulator) and my physical cartridge (being official) was a good dump hence didn&#039;t have the glitch on GBA SP and my physical SNES/Super Game Boy.<br /><br />This is the MD5 checksum of the ROM I used on emulator.<br />6C124C8C7FBF7D330EBC2F06DAD7E270<br /><br />DAT-o-MATIC [url=http://datomatic.no-intro.org/?page=show_record&amp;s=46&amp;n=0818]says this is a trusted dump[/url], but with the information now maybe that was a false positive.<br />[/quote]<br /><br />Actually, it seems as if that ROM is a bad dump.<br />DAT-o-MATIC says that two dumps were made in 2014 and both have MD5 hash of 3029C962C483DF174FC6F5C9202326E3.<br /><br />[/quote]Welp. My tests are out the window too, then. I have Torchicken&#039;s hash.


subject: Re: Memory Corruption Hack.
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  There&#039;s also Gambatte, whose accuracy is on par with BGB&#039;s. There&#039;s the standalone version (very light, btw), and it&#039;s packaged in BizHawk&#039;s defaults. (I promote BizHawk because it packs a bunch of accurate emulators, though I agree it doesn&#039;t have a terrible UI)


subject: Re: The Member's Guide to Topiclessness
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Parzival
icon: xx
body:
  This link only works with recent versions of Chrome, but it&#039;s cool.<br /><br />chrome://inducebrowsercrashforrealz/


subject: Re: Riots
poster_name: Missing? NO!
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Protesting is one thing. Rioting is another.<br />I think the only time a riot was justified was in Charlottesville. When Neo-Nazis and white supremacists are demonstrating like that, I feel as if riots and violence to stop them is justified. Yes, everyone is entitled to their own free-speech and the right to demonstrate, but, when those viewpoints are hateful, discriminatory, and as toxic as a Nazi ideology is, then yes, &quot;punching a Nazi&quot; is justified.<br /><br />However, that&#039;s the only case where rioting is justified. Looting stores, attacking police, and punching those who disagree with you are no ways to get a point across and affect how your viewpoint is perceived. Attacking people simply because they do not agree with a viewpoint you&#039;ve presented merely harms the validity of your own argument. While they may be rioting for a good cause, as racism and race inequality is prevalent even in today&#039;s society, there are tons of better ways to get that argument across rather than rioting. Peaceful protests, kneeling for the anthem (shoutouts to Colin Kaepernick), and talking with government officials have a much better chance of getting things done than violent rioting does. When options like this exist, rioting cannot be justified.


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: camper
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=8068.msg206681#msg206681 date=1504447824]<br />I was just wondering how you&#039;d do the trade linkup derivative of the left-facing shore tile glitch directly after the walk-through-walls ledge trick.<br /><br />It took me a while to realise: go into the Safari Zone, save and reset then head out of the Safari Zone, get two PokÃ©mon poisoned, go to Cinnabar and deposit all but one of the poisoned PokÃ©mon, jump off a ledge with your 500th step, walk around the Safari Zone entrance until whiteout, withdraw your other poisoned PokÃ©mon and deposit the healthy one, go link with another game, run around the trade center until whiteout, leave the PokÃ©mon Center and walk up and down the right coast.<br />[/quote]<br />Going into the Pokemon Center breaks the WTW.<br /><br />[quote author=Wack0 link=topic=8068.msg206669#msg206669 date=1504360436]<br />Regarding the new page layout, it seems that a script could be created that could automatically fill in most of that information, a la the original Melchior project?<br /><br />The script could output wiki markup and mark the pages as stubs, allowing for someone else to come in and finish the final parts.<br /><br />Bonus points if it could create a PokÃ©dex screenshot too, which is theoretically possible.<br />[/quote]<br />Most of the Pokedex screenshots are just empty with Rhydon&#039;s weight and height. The only interesting part would be the Pokemon Category.


subject: Re: Change your trainer ID and name
poster_name: Nostalgia
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=camper link=topic=7994.msg206591#msg206591 date=1503940475]<br />Or you can just change item 32 quantity and item 33. Easier than setting up 8F.<br />[/quote]<br /><br />Could you elaborate on this? I&#039;m interested in this too, but I&#039;m just not familiar with any ACE stuff on Pokemon Red, only with Pokemon Yellow using ws m. I&#039;m thinking of doing a playthrough of Red again, so learning about this and other stuff with 8F would be helpful. 


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  [quote author=camper link=topic=8068.msg206700#msg206700 date=1504668964]<br />Going into the Pokemon Center breaks the WTW.<br />[/quote]<br /><br />The PokÃ©mon Center is only entered on poison whiteout, and when the Safari Zone step counter is still active.<br /><br />EDIT: wait a minute, Gen I quirkiness strikes again, doesn&#039;t it? Whiting out puts you outside of the PokÃ©mon Center, doesn&#039;t it?<br /><br />In that case going into the Trade Center and whiting out in there would have to be done while the Safari Zone&#039;s step counter is running.


subject: Re: Change your trainer ID and name
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  First of all, I think it&#039;s actually item 30 quantity and item 31. To explain this, you should know that when an expanded item pack is available, every item beyond the 20th in your item pack controls a specific game value.<br /><br />By changing the quantity of item 30 and the nature of item 31, you can manipulate your Trainer ID. Say that you want your trainer ID to be 22796 (hexadecimal:590C). That means you want the quantity of item 30 must be hex:59 (dec:89) and item 31 must be hex:0C (Burn Heal). By just switching a Burn Heal with item 31, and tossing/adding some of whatever item 30 is, you can easily have this Trainer ID.<br /><br />To trigger an expanded item pack, the easiest solution during a game is to perform the &#039;dry variant&#039; of the item underflow glitch, that can be performed with a x255 item, available either through MissingNo. or through RAM Glitch City tree-cutting. Obviously, if you start a new game, using Save Abuse (that gives you 255 PokÃ©mon) will allow you to switch PokÃ©mon 1-9 with PokÃ©mon 10 and this also triggers the expanded item pack.


subject: Re: Serious emulation problem with Monster Race (GB)?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I finally took a look at the &quot;bad dump&quot;, turns out it&#039;s not really a &quot;bad dump&quot;, someone modified the ROM.<br /><br />Entry point jumps to 0:00e0, which is just nops in the good dump, but this space was used to add the following code:<br /><br />[tt]<br />ld a,0<br />ld [$6000],a<br />ld a,$30<br />ld [$6000],a<br />jp $0150<br />[/tt]<br /><br />This code makes no sense, the header says it uses MBC1, where $6000 is a 1-bit wide register that flips between two different banking modes. Maybe this is for flashcart compatibility?<br /><br />In addition, a [tt]ld a,1[/tt] got patched to [tt]ld a,0[/tt] at 00:024C, and again at 01:488E.<br /><br />Finally, the header checksum got patched.<br />


subject: Re: Getting a Level 223 Mew with the Pikachu Glitch/Off-screen Glitch
poster_name: Addri Trainer
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8058.msg206605#msg206605 date=1504094393]<br />I replicated it with the o (hex:94) glitch item. The reason Mew appears is because the game shifts back a hex:15 that was originally a roster value for one of the trainers.<br /><br />https://www.youtube.com/watch?v=szTH5bbPG8A<br />[/quote]&nbsp; :o 255 level! Interesting, I wonder if this glitch could works in indoor places, like caves or Rocket&#039;s hideout.<br /><br />Btw, I just uploaded a compilation with all PokÃ©mon you can catch with this glitch. There are a number of 22 PokÃ©mon:<br />https://www.youtube.com/watch?v=b530hMre3hs&amp;lc=z23ev1twomy4v12szacdp433iap11persx01ktjxp01w03c010c<br /><br />If one PokÃ©mon over 100 level is traded to G/S/C or PokÃ©mon Stadium, this automatically dims to level 100? I think I read that somewhere.


subject: Re: General Pokemon Glitchiness
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It&#039;s not a glitch per se,but I was using modding tools on Blue and accidentally nuked the whole intro after Oak&#039;s speech (it shows error in its end,then cuts to the player&#039;s house).And I ended with my character being named NINTEN,and rival named SONY.I didn&#039;t touch them,so it&#039;s kinda weird.


subject: Re: General Pokemon Glitchiness
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  No, that&#039;s intended, it&#039;s a feature.<br />When a new game is loaded, the default names are this ; there&#039;s a debugging feature that allows skipping the whole intro, and this sets the names to this.


subject: Hurricane Irma
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I live in Miami and the hurricane is supposed to hit tommorow. I&#039;m probably going to lose my house. We didn&#039;t have money for shutters so we plastered the windows with furniture and blankets. <br />Time to truly live


subject: Re: General Pokemon Glitchiness
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [b]ISSOtm[/b], oh, I see, thanks for clarifying ^^<br /><br />I always end with odd errors if I try to mod gb/gbc games - there&#039;s this (I just replaced text of the first Oak screen, nothing else), and then there&#039;s that thing with Telefang (using the text editor made all the attacks - which I didn&#039;t even touch - into DUMMY...and after I reversed the changes,that one text string I intended to change [url=http://68.media.tumblr.com/18948eebee91d9504b9cd48dfdcf7023/tumblr_nirugsjlA01r6yohpo1_250.png]remained changed somehow[/url])...Oh well, my hands aren&#039;t wired to do this)


subject: Re: General Pokemon Glitchiness
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Globally, to mod GB(C) games, you&#039;ll need to understand how it works, how it&#039;s stored.<br />Rule of thumb : if you write a string larger than the original one it&#039;ll end up badly.


subject: Re: General Pokemon Glitchiness
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I know the string lenght rule,but I usually use editors,not mod rom by hand,so I assume people who did them know how to avoid errors?


subject: Re: Hurricane Irma
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8072.msg206711#msg206711 date=1504879207]<br />Well... all you can do is leave now.<br /><br />[s]OCEAN MAN[/s]<br />[/quote]<br /><br />I can&#039;t leave. The traffic is up to 1 billion and I&#039;m just staying in a shelter. 


subject: Re: Hurricane Irma
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ravioli link=topic=8072.msg206714#msg206714 date=1504895866]<br />[quote author=Parzival link=topic=8072.msg206711#msg206711 date=1504879207]<br />Well... all you can do is leave now.<br /><br />[s]OCEAN MAN[/s]<br />[/quote]<br /><br />I can&#039;t leave. The traffic is up to 1 billion and I&#039;m just staying in a shelter.<br />[/quote]Owow. Are ya gonna be alright? And do you have a data plan/cellphone?


subject: Re: General Pokemon Glitchiness
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Mefista link=topic=715.msg206713#msg206713 date=1504891135]<br />I know the string lenght rule,but I usually use editors,not mod rom by hand,so I assume people who did them know how to avoid errors?<br />[/quote]A tool&#039;s only as good as the person using it. Plain and simple


subject: Re: General Pokemon Glitchiness
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Mefista
icon: xx
body:
  Well, I am on a disability due to mental health problems,so you can figure out just how &quot;good&quot; of a person I am &gt;&lt;


subject: Re: General Pokemon Glitchiness
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Mefista link=topic=715.msg206717#msg206717 date=1504906542]<br />Well, I am on a disability due to mental health problems,so you can figure out just how &quot;good&quot; of a person I am &gt;&lt;<br />[/quote]100% Certified Autistic. I know how you feel. But you can overcome. Neuroplasticity is a beautiful thing.


subject: Re: General Pokemon Glitchiness
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=715.msg206718#msg206718 date=1504914977]<br />[quote author=Mefista link=topic=715.msg206717#msg206717 date=1504906542]<br />Well, I am on a disability due to mental health problems,so you can figure out just how &quot;good&quot; of a person I am &gt;&lt;<br />[/quote]100% Certified Autistic. I know how you feel. But you can overcome. Neuroplasticity is a beautiful thing.<br />[/quote]<br />Thanks for being supportive *hugs*.I am diagnosed shizophrenic,but my doctor also said &quot;You may also have Asperger&#039;s,but it&#039;s not diagnosed in Russia&quot; (still no clue what that means).My mental state is more or less stable,but it&#039;s frustratingly hard for me to learn new things.<br /><br />But seriously,the only game that I was able to mod a bit was Telefang, and it&#039;s due to the way it stores monster sprites (very neatly, in one piece and with spaces between them, so replacing is easy) and there are few very easy-to-use tools.<br /><br />Pokemon won&#039;t budge (after disaster mentioned in this tread I haven&#039;t touched it...besides,most tools won&#039;t open on my computer for some reason), let alone Dragon Warrior Monsters (I wanted to do a russian translation so more people would play it + modify few sprites and insert custom text with me listed as a translator, so no-one&#039;ll claim it).


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Missing? NO! link=topic=8046.msg206699#msg206699 date=1504640773]<br />Protesting is one thing. Rioting is another.<br />I think the only time a riot was justified was in Charlottesville. When Neo-Nazis and white supremacists are demonstrating like that, I feel as if riots and violence to stop them is justified. Yes, everyone is entitled to their own free-speech and the right to demonstrate, but, when those viewpoints are hateful, discriminatory, and as toxic as a Nazi ideology is, then yes, &quot;punching a Nazi&quot; is justified.<br />[/quote]<br /><br />So when you support an ideology which inadvertently supports an ideology which does not function and will always bring upon a hateful and discriminatory society, its justified to protest in favour of it? Because that&#039;s what Marxism is. A failed ideology which when tried to achieve socialism fails every time and crumbles in despair and are miles away from achieving communism. <br />


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ravioli
icon: xx
body:
  [quote author=ISSOtm link=topic=8046.msg206483#msg206483 date=1503047255]<br />Okay but then, ravioli, you&#039;re derailing the subject, if they were there for the anti-racism who cares what the rest of their convictions are ...?<br />Well whatever, since I know nothing about these riots I should probably stop butting in?<br />[/quote]<br /><br />So, lets create an alternate situation. Let&#039;s say a group of anti-racists sprout up, but they also stand for forcing everybody to put cereal in their arsehole 5 times a day. Would you support them? Because it&#039;s the same case as supporting an anti-racist organization, but also spout communist dogma and support communism.<br /><br />Let&#039;s think of the argument for disgruntled marriages with domestic violence. The man hits the woman, but he buys him flowers after. Does one right fix the disgusting wrong? The answer is no, it doesn&#039;t.<br /><br /><br /><br /><br />[quote author=Parzival link=topic=8046.msg206526#msg206526 date=1503407127]<br />[quote author=DoubleNegative link=topic=8046.msg206523#msg206523 date=1503366957]<br />Obviously, AntiFa is only breaking into those stores so they can smash capitalism and distribute the ends of production to the common man.<br />[/quote]Even if big businesses lose... say, 5% of their worth in these break-ins, they&#039;re not gonna crumble. Ever. Capitalism is too engrained into the US to disappear over riots.<br />[/quote]<br /><br />What big businesses are in local surburbia? Nobody riots and breaks into a fucking Burger King, they riot and loot into Matt&#039;s Grocery Store, (an example of a local buissness). People don&#039;t attack big businesses. That is rare.<br /><br />The thing about capitalism is that most people think it is so over-monopolized than it really is. Look around your local town square, and look at your local economy for experience.


subject: Re: Hurricane Irma
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8072.msg206715#msg206715 date=1504896144]<br />[quote author=ravioli link=topic=8072.msg206714#msg206714 date=1504895866]<br />[quote author=Parzival link=topic=8072.msg206711#msg206711 date=1504879207]<br />Well... all you can do is leave now.<br /><br />[s]OCEAN MAN[/s]<br />[/quote]<br /><br />I can&#039;t leave. The traffic is up to 1 billion and I&#039;m just staying in a shelter.<br />[/quote]Owow. Are ya gonna be alright? And do you have a data plan/cellphone?<br />[/quote]<br /><br />I&#039;m safe. I will also have my cellphone with me but if it goes down it goes down.


subject: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  I found out today that it&#039;s possible to manipulate the Day Care PokÃ©mon from ????? party overloading. Specifically withdrawing a 24th PokÃ©mon will modify the species of the stored PokÃ©mon by the Day Care Lady (DC90 in Gold/Silver) based on the ninth character of the nickname of the PokÃ©mon you withdraw. According to the [url=https://github.com/pret/pokecrystal/blob/master/wram.asm]PokÃ©mon Crystal disassembly&#039;s WRAM map[/url], the roamer data isn&#039;t far away from here.<br /><br />Crystal:<br /><br />wRoamMon1:: roam_struct wRoamMon1 ; dfcf<br />wRoamMon2:: roam_struct wRoamMon2 ; dfd6<br />wRoamMon3:: roam_struct wRoamMon3 ; dfdd<br /><br /><br />Is it therefore possible to create a custom roamer PokÃ©mon? Perhaps it could even be a glitch PokÃ©mon, which would be (one of, perhaps a battle could be triggered without cheating by an out of bounds Glitch City too) the only way(s) of encountering a glitch PokÃ©mon in the wild without arbitrary code execution.<br /><br />What is the roaming PokÃ©mon structure like?<br /><br />Wonder if anyone has any input on this. Thanks in advance!<br /><br />Edit: It seems to have a structure like this.<br /><br />(Species one byte) (Level one byte) (Location; two bytes) (Unknown three bytes)<br /><br />Edit 2: Gold/Silver roamer addresses seem to start at DD1A.


subject: Re: Bugs fixed in v1.2
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So regarding Scatterbug Egg Moves, my assumption is that whether the bug occurs depends on the pattern of Vivillon it corresponds to. In my game, I was able to replicate the bug; my Scatterbug correspond to River Pattern.<br /><br />I would appreciate if people who have not updated their games could test this with their own Vivillon patterns and provide their results. Be aware that Stun Spore is both a level up and Egg Move for Scatterbug, so it is not a good move to test for.


subject: Re: PokÃ©mon Bank Generation I transfer experiments
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  The latest PokÃ© Transporter patch apparently fixes the Shiny check to match Gen II, and also makes gender dependent on DVs in the same way as Gen II.<br /><br />It would be worthwhile double-checking that the issue for unnicknamed Mr. Mime and French PokÃ©mon with diacritics or ligatures in their names are still present.


subject: Re: Memory Corruption Hack.
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It&#039;s a bit like me, before I found out about BGB, I was using VBA, but now I understand VBA is absolute crap for GB(C) emulation


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  In my Gold game in which no roamer has been caught, I have indeed this structure.<br /><br />F3 28 (Raikou lvl40) followed by localization and the three bytes. Then, F4 28, localization, three bytes, F5 28, localization, three bytes. No clue about what they are (obviously not the moves), they are different for all three roamers.<br /><br />Things are however different in Crystal, and as of now we can only try to guess things. Indeed, in my Crystal, Entei and Suicune are caught but not Raikou. Thus, the structure is F3 28, localization, three bytes (which are 00 00 00 - it may be related to previous encounters?). Then, it says 00 28 FF FF instead of Entei (F4). It is possible than once caught, the PokÃ©mon&#039;s species goes to 00 and the localization goes to FF.<br />Interestingly enough, Suicune&#039;s structure is 00 00 FF FF ; the level also does not appear. Suicune is not a roamer in Crystal, suggesting that this data is unused. It is however worth noting that it has values on the three unknown bytes.<br /><br />


subject: &quot;The Ghost of Glitch City&quot;
poster_name: Scaredschwifty
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: question
body:
  Hi there!<br /><br />I&#039;m going to be completely honest - im fairly new to looking at all of the coding behind the older Pokemon games, so excuse me if i sound rather uneducated (I am, but am trying to learn). <br /><br />None the less, i came across this video ([url=https://www.youtube.com/watch?v=FgY52E5qMEo]https://www.youtube.com/watch?v=FgY52E5qMEo[/url]) <br /><br />To summarise, the user walks out of bounds (using codes, not by any external glitches) in the bedroom from when you first start out the game.&nbsp; He does some rather specific movements in order to reach this glitch trainer (and eventually fights later in the video but i don&#039;t have any questions regarding that aspect).<br /><br />(I haven&#039;t looked too much into how glitch trainers work, so again, excuse my lack of knowledge on the subject!)<br /><br />The questions i wanted to ask were ;<br /><br />[list] - I initially presumed that he walked in a specific pattern to avoid crashing the game, but later on he walks around the trainer with little issue. Why the specific movements?<br /><br />- What determines the stuff that the trainer says? <br /><br />- (also probably a very noob-ish question) what is auto input?<br />[list][li][/li]<br />[li][/li]<br />[/list][/list]<br /><br />Again, i can&#039;t apologise enough for not knowing too much about this stuff - i attempted to learn around myself but i don&#039;t think i&#039;ve been searching in the right places. Answers would be greatly appreciated!


subject: Re: You know you've been playing PokÃ©mon too long when...V2
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  When your thoughts are clouded by thoughts of your favorite gym leader in a swim suit just cuz you drew a picture of that a few days ago and can&#039;t get it out of your head.... :-[ :P


subject: Re: 1000 things not to do on or to a Pokemon Game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  613 Add hentai of your favorite character to the game :D<br />614 Then sell the game to a kid<br />615 Then get in serious trouble for it :P xD


subject: Re: Point the pokedex!
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  *point&#039;s dex at my mom*<br />She gave birth to the glitchy autistic life form known as Jirachu.<br /><br />She win&#039;s the internet for that on some level, as Jirachu will one day take over the web :P And maybe turn every site on it into a fan page about her lovely Korrina. And [b]EVERYONE ELSE WILL LEARN NOT TO MIND THIS....[/b] :U


subject: Re: The throw an object at the next poster game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I&#039;m gonna throw the doom song now 8)<br /><br />DOOM DOOM DOOM DOOM DOOM da DOOM DOOM doomdoomdoom! DOOM, DOOM, DA DOOM DOOM DOOOOOOOM doom doom doom!


subject: Re: 1000 Things you can do with a Pokemon game.
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  129 Train a whole team of level 100 Lucario :U<br />130 Name yourself after Lucario&#039;s dex number<br />131 Aura Sphere. Everyone.


subject: Re: 1000 Ways to get kicked out of Wal-Mart/Target
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  204 Kiss an employee on the lips, then tell them hot things about their looks, then kiss them AGAIN, and.... ::) Get kicked out for being worse than Brock with a random person you barely even know! And likely wanted you just in their &#039;friend zone&#039; overall...


subject: Re: Weird Questions
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Because MissingNo. is real. And he killed your interwebz 8)<br /><br />Why is &#039;interwebz&#039; cooler to say than &#039;internet&#039;?


subject: Re: The If game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I&#039;ll sue the entire internet for it....muwahahahahaha :-* THEN I&#039;LL BE THE RICHEST POKEMON LOVING FAN GIRL WEIRDO IN DAH UNIVERSE!!!!!! :XD:<br /><br />Will you bow before me if this were to happen? :3


subject: Re: Getting gen 1 Mew in Yellow VC in pokemon sun/moonF
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I truely don&#039;t understand what the problem in this topic is and what you are trying to do. The European setup for wslm is usually Tangela 233 HP, Nidoking, Metapod, Spectrum, Flareon, Parasect, Kadabra, Tentacool, Grimer, Another PokÃ©mon and that&#039;s it. But I always prefer to use the 2-PokÃ©mon setup with the item 4F.<br /><br />I&#039;m not sure what I say here is useful because I don&#039;t understand well what your problem is. Maybe you can tell me in Italian.<br />


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Thanks for looking into it Krys3000.<br /><br />I set a breakpoint to DFD6, DFDD, DFDF on Crystal.<br /><br />For some reason after withdrawing a 16th PokÃ©mon, the game moved the value of FFB6 to DFD6.<br /><br />I believe at one point I got a Squirtle, but this time DFD6 became 14, DFDD became 00 and DFDF became 00.<br /><br />Upon viewing Raticate (0x14)&#039;s PokÃ©dex entry, it seems like it worked and Raticate&#039;s location values became 00 0D.<br /><br />[img]http://i.imgur.com/hmSwfbX.png[/img]<br /><br />These were taken from the values of FFB5, FFB6 during the 16th PokÃ©mon withdrawal.<br /><br />This Raticate doesn&#039;t want to move when I change routes though.<br /><br />I wonder if you can manipulate what FFB5 and FFB6 are during the withdrawal.<br /><br />Edit: I was able to get the location values to change again after flying away, so the location shouldn&#039;t be an issue (maybe unless registered as caught or defeated).<br /><br />Edit 2: Level 0 roamer Raticate. I manually edited the location value but it may be possible without the need to do that. The legendary beast music was playing. It had no moves upon capture and it had 23/10 HP. <br /><br />[img]http://i.imgur.com/VYmyQh3.png[/img]<br /><br />Edit 3: Wow! DFD6 is based on the PokÃ©mon&#039;s Attack stat, meaning we should be able to encounter roaming Egg (possibly other ????? variants now) in the wild.<br /><br />So interestingly it seems we can encounter every ????? as well as Egg this way, or get another Mew/Celebi etc. even though 00 appears as a species value in the structure.


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Spicr
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Is retire the only currently known way to trigger a cript on a map at will? The great marsh retire option doesn&#039;t do anything on other maps aside from warping you back to the great marsh building, and both the underground and union room menus don&#039;t seem accessible because of the error message when you leave the area with walk through walls. You can&#039;t interact with followers either because as soon as you leave their intended map they disappear. Is there a way to load NPCs or objects onto a map they don&#039;t belong on in the void, so that talking to them would trigger other scripts on that map?


subject: Re: General Pokemon Glitchiness
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I heavily doubt tools made for GB(C) games are smart enough to avoid overwrite issues.<br />Don&#039;t assume, try. Try a string shorter than the original one, then a longer one. Verify your assumptions first.


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Aera
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Spicr link=topic=7770.msg206748#msg206748 date=1504970731]<br />Is retire the only currently known way to trigger a cript on a map at will? The great marsh retire option doesn&#039;t do anything on other maps aside from warping you back to the great marsh building, and both the underground and union room menus don&#039;t seem accessible because of the error message when you leave the area with walk through walls. You can&#039;t interact with followers either because as soon as you leave their intended map they disappear. Is there a way to load NPCs or objects onto a map they don&#039;t belong on in the void, so that talking to them would trigger other scripts on that map?<br />[/quote]<br /><br />NPCs unload as soon as you exit the map they&#039;re located in, so doing such a thing as of now is impossible. This also means that RETIRE is the only way of doing this.


subject: Re: General Pokemon Glitchiness
poster_name: Mefista
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  One of the Telefang tools overwrote every single attack name with DUMMY,so yeah,there&#039;s that.<br /><br />Well,I will try it later)


subject: Re: Map distortion glitch help wanted for Gold
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  Mysteriously on my recent save file, map distortion glitch has started working.<br /><br />While indeed PokÃ©mon 1-6 must not have 0 maximum HP and over 0 current HP, it seems you can get away with PokÃ©mon in slot 7 and beyond having 0 maximum HP, unless the addresses above are incorrect, because after browsing the summaries the game didn&#039;t freeze.<br /><br />However testing another file with PokÃ©mon 1-6 with above 0 maximum HP the game still froze. I wonder why :/<br /><br />Edit: OK, I solved through a lot of trial and error this may work if max HPs are correct and DBFF, DC2F, DC5F, DC8F, DCEF are all 50, for when you have 24 PokÃ©mon. It seems you don&#039;t need a 50 on DCBF. I don&#039;t know how post-6 names work and why this was the case, wonder if anyone has any technical insight on this please?<br /><br />Edit 2: Going deeper, those addresses can be a value 04 or greater which seems odd. This would may make the party overloading prep easier though.<br /><br />Edit 3: Turns out all those addresses were already listed as HP addresses. Weird that they had to have a value over 3, and after further analysis that is not necessarily true. With 26 PokÃ©mon the rule (or similar non-00 value rule) applies all the way up to DE6F, but this time when DE6F was 1 it worked. I wonder if the current HP is involved.<br /><br />Edit 4: So it looks like as long as we meet those values everything is fine. Using werster&#039;s method of fainting the top six PokÃ©mon (without converting the ????? 00 to ????? FF), moving the ????? 00 to the bottom and depositing PokÃ©mon 2 over and over again) we can end encounters immediately and beat the game, provided the distortions work properly.


subject: The Zhuangzi Game
poster_name: Caveat
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  AKA: &quot;Simon&#039;s back on their bullshit again&quot;.<br /><br />In all seriousness, I found somebody talking about this on Tumblr, and basically nobody else has even heard of it, so WHY NOT SPREAD IT?!?<br /><br />[url=https://www.youtube.com/channel/UCIEHuVZTq5BXVQkeiKhLo0g]Boop![/url]<br /><br />I don&#039;t really have any semblance of what&#039;s going on, but there IS a Discord server. So that&#039;s nice.


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Charmy
icon: xx
body:
  So, yet another way to get Celebi? How many different ways is that, like 10?<br />I actually want to know<br />[s]a)how many PokÃ©mon do you need to withdraw to cause roamer corruption[/s] blame me for not reading the first post<br />b) how the withdrawn PokÃ©mon&#039;s data structure translates to the roamer structure...


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  If I understand correctly, you might be able to change the species of the roamer using the Attack Stat of another PokÃ©mon? That would be a truely nice finding!


subject: Re: What odd traits do you have?
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  And for some reason, I can &quot;&quot;&quot;foresee&quot;&quot;&quot; what someone says 5 seconds before they do, not always succeeds but most of the time it does...<br />What the f**k is wrong with me...


subject: Re: Newly-Accessible Debug Menus in Pokemon Ruby
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Cryo link=topic=8053.msg206533#msg206533 date=1503491454]<br />[quote author=Charmy link=topic=8053.msg206531#msg206531 date=1503480751]<br />Actually, the &quot;PokÃ©block Case&quot; one wasn&#039;t even in the leaked debug ROM... :thinking:<br />[/quote]<br /><br />[img]http://i.imgur.com/OnfOExm.png[/img]<br /><br />[img]http://i.imgur.com/RtSklPg.png[/img]<br /><br /><br />[quote author=Wack0 link=topic=8053.msg206532#msg206532 date=1503489182]<br />By the way, all the stuff in the SOGABE menu sets some unknown stuff in saveblock2, according to pokeruby.<br />[/quote]<br /><br />Oh awesome, I&#039;ll definitely have to look into that more. Thanks for the heads-up! ;D<br />[/quote]<br />I meant, the option was called differently...


subject: Re: 1000 Things NEVER to do on Glitch City Laboratories
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  803. He begins to write something and draw it with a small text because it was boring and nothing happened.<br /><br />(803. Start writing something then put it through a text obfuscator because I was bored and didn&#039;t have anything to do.)


subject: Re: Bugs fixed in v1.2
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Well, this isn&#039;t a big but I noticed something was wrong when I was looking thru PokÃ©mon while choosing one to wonder trade, as I was before able to simply tap on a PokÃ©mon, but without releasing the stylus, moving it away from the PokÃ©mon and not trigger the &quot;Do what with (PokÃ©mon)&quot; selection box, and now I&#039;m no longer able to do that. Maybe someone can confirm this? It may be my memory tricking me again.


subject: Re: The throw an object at the next poster game
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  you get an SNES copy of doom then<br /><br />I throw a totally not hacked shiny I got from wonder trade at the next poster Kappa


subject: Re: Database Wikification - Would anyone like to assist?
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  http://glitchcity.info/wiki/GlitchDex/Y:191<br />here&#039;s an example of a page that wasn&#039;t converted yet. Or at least partially converted.


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Caveat
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I love it when you can basically perform brain surgery on the game like this.<br /><br />I would try it, but I&#039;m currently iPad-bound... Maybe when VC comes out?


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  BTW, roamer struct is:<br /><br />byte species; byte level; byte map_group; byte map_number; byte HP; word DVs;<br /><br />source: https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/macros/wram.asm#L201<br /><br />When moving roamers, the code checks if map_group is $FF, this means the roamer is no longer available to catch; the roamer-encounter code only checks if you&#039;re on the same map as it (so it seems that you can indeed encounter a roaming ????? (00)) - this basically means that if you&#039;ve caught at least one roamer, glitch map [tt]FF FF[/tt] has at least one roaming ????? (00) in it: https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/engine/wildmons.asm#L722<br /><br />And, even more hilariously, there&#039;s a function that sanity checks a wild PokÃ©mon&#039;s species, returning with carry on if it&#039;s invalid (00, &gt; FC); unfortunately, Game Freak forgot a [tt]ld a,b[/tt] before calling it (alternatively, they wrote [tt]ld b,[hl][/tt] instead of [tt]ld a,[hl][/tt]), so what is checked isn&#039;t the wild PokÃ©mon&#039;s [i]species[/I], but its [i]level[/i]! https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/engine/wildmons.asm#L825<br /><br />Not that this matters; the sanity check is done on the in-ROM wild PokÃ©mon data before the battle starts, and besides, the only call to this function is done with code dealing with wild PokÃ©mon data, which is completely skipped in the case of a roamer anyway. https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/engine/wildmons.asm#L332<br /><br />Torchickens: did you try Flying away to reset the location value to something random? Just moving routes wouldn&#039;t work because the game won&#039;t find the location in the roamer-moving data (it does this before anything else), whereas Flying just checks if map_group if $FF or not.


subject: Re: Creating custom roamers with beyond slot 6 corruption in Generation II?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Thanks for the research Wack0. :)<br /><br />[quote author=Wack0 link=topic=8073.msg206766#msg206766 date=1505061428]<br />Torchickens: did you try Flying away to reset the location value to something random? Just moving routes wouldn&#039;t work because the game won&#039;t find the location in the roamer-moving data (it does this before anything else), whereas Flying just checks if map_group if $FF or not.<br />[/quote]<br /><br />That&#039;s right, I thought it was interesting how it didn&#039;t update without flying/teleporting.<br />


subject: Re: Getting gen 1 Mew in Yellow VC in pokemon sun/moonF
poster_name: Marv231
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  This works in the Italian and German Version of Pokemon Yellow.<br /><br />The easyest Way to set it up is the 2 Pokemon Setup from Krys3000, who can be found here&nbsp; <br /><br />http://forums.glitchcity.info/index.php?topic=8056.0<br /><br />I used it with a Charmander at Level 12 with the following Moves:<br /><br />Scractch&nbsp; 33/35<br />Howl&nbsp; &nbsp; &nbsp;  38/40<br />Ember&nbsp; &nbsp;  19/40&nbsp; (use 3 PP Up on this move)<br />no 4. move<br /><br />And a Nidoran male with 233 HP<br /><br />First Charmander, then Nidoran male in an empty box.<br /><br />Then, use P3 (Italian) or S3 (German) instead of&nbsp; wslm for your Item Setup. <br />To get this Item, use the Celadon Loop Trick, explained here<br />https://glitchcity.info/wiki/Celadon_looping_map_trick<br />


subject: Re: Easiest way to obtain Celebi on Japanese Gold and Silver?
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Charmy
icon: xx
body:
  Actually, did the bank receive an update already, if yes, we could look at the celebi valid OTs/IDs and possibly ACE them onto a celebi like we did with mew in general 1 VC...<br />If yes, bank compatible celebis may be a thing soon, and one of these days could help us get it.


subject: Re: Easiest way to obtain Celebi on Japanese Gold and Silver?
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Charmy link=topic=8044.msg206773#msg206773 date=1505138195]<br />Actually, did the bank receive an update already, if yes, we could look at the celebi valid OTs/IDs and possibly ACE them onto a celebi like we did with mew in general 1 VC...<br />If yes, bank compatible celebis may be a thing soon, and one of these days could help us get it.<br />[/quote]<br /><br />Yeah, I suppose maybe an event Celebi could have been programmed in, and we should be able to do that if official VC Celebi are released, such as with specific box names.<br /><br />According to Serebii though there is this fix:<br /><br />[quote]<br />Edit @ 19:24: The update doesn&#039;t seem to include Gold &amp; Silver compatibility but does fix a glitch that existed when determining shiny PokÃ©mon where it took the wrong IV in Gen 1 to determine shinieiss<br />[/quote]<br /><br />Possibly Shininess is determined the original way now for compatibility with Red Gyarados, random Generation II shinies.


subject: Re: 2nd Gen Roaming Mechanics
poster_name: Metarkrai
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Wow, what a nice guide with many resourceful explanations !<br /><br />I worked on routines to find the roamers as fast as possible in order to shinyhunt them, and your data would have helped me a lot on that.<br /><br />I ended up with 3 different methods that give the fastest average times with different ratios for each beast :<br />- Save before the generation, generate the roamer, search for a roamer in Route 37. (good for Crystal)(can be done with/without PokÃ©dex entries)<br />- Save before the generation, generate the roamer, use an Escape Rope, search for a roamer in Route 37 (good for GS)(can be done with/without PokÃ©dex entries)<br />- Have the roamers in the PokÃ©dex thanks to the Celebi Egg Trick, go to Cherrygrove, save, reset until the roamer is on a good route, then follow a certain pattern of routes while checking the PokÃ©dex.<br /><br />More detailed procedure to hunt for the roamers : https://pastebin.com/4CGM4rmA<br /><br />Since your explanations about the determination of a roamer&#039;s new location is a bit different from what I knew back then, most of the percentages and average times are incorrect, but maybe not that far from more accurate values (I don&#039;t know the size of the margin of error).


subject: New Viridian Forest arbitrary code execution method
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It looks like an interesting new arbitrary code execution has been discovered, which with luck manipulation might be the fastest (and A-pressless) method so far. I don&#039;t know who discovered it though.<br /><br />This method involves death-warping at the final Bug-Catcher in Viridian Forest. If you then return to the forest without pressing Start, it will trigger a battle with the Bug-Catcher again and activate meta-map script 06 (D618=06). Defeating him will trigger yet another battle, but if you win this one you&#039;re free to walk around with [url=http://glitchcity.info/wiki/Glitch_meta-map_script_activation]glitch script initiation[/url] active.<br /><br /><br />Then for some reason if you proceed to mash A in front of and defeat this Bug-Catcher;<br /><br />[img]http://i.imgur.com/Yje5Nd7.png[/img]<br /><br />The game will execute F8FF in Echo RAM, which falls through to F9AC (D9AC); a copy of your player&#039;s name. Then if your player&#039;s name is mMna.â™€tF (ac e2 a0 f2 f5 b3 85 50), with some specific other requirements it is yet another way of entering the Hall of Fame.<br /><br />I only just found out about this method today, but there is more information about this glitch in this document:<br />https://docs.google.com/document/d/1l10apKvZgTeOSEKeuhgHVGC73z9-f2FTkuUKHZaPVEA/edit<br /><br />If we can modify this glitch for non-speedrunning purposes perhaps it could be useful for those wanting to do other things or obtain the expanded items pack without MissingNo.<br /><br />Video by entrpntr:<br />https://www.youtube.com/watch?v=rhvyKspOsoo


subject: Re: The &quot;If Pokemon were real...&quot; Game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Infinate chocolate? No, wait, that would mean more cavities...uhhhhh :-\ INFINITE RARE CANDIES! For my pokemon, not me XD Infinite roses for Korrina...works too.... :P hehehe<br /><br />What if a MissingNo. stole your ice cream cone?


subject: This place feels dead
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I&#039;ve been logged in again lately, and no one else seems to ever be on when i am now :-\ Yeah....i guess everyone else got bored of this place too?


subject: Re: This place feels dead
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  That&#039;s because it&#039;s dying. Community is getting smaller and smaller. Kinda sad but everything passes.


subject: Re: This place feels dead
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You could say it&#039;s dying but it&#039;s certainly not dead. There is a lot of glitch discussion here, it&#039;s still the place to be and the place where you will find help.<br /><br />However, remaining people are probably not much interested in off-topic discussions or board games.


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Very interesting! I&#039;ll work on this asap. There should be a way to use it smoothly. Ways to get the expanded item packs without MissingNo. are game changers for all those games who can&#039;t do it :)


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: TheZZAZZGlitch
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: TheZZAZZGlitch
icon: xx
body:
  I analyzed how this works:<br />- The deathwarp and the two trainer battles advance the map script index to 0x06 (three trainer encounters in total, each one advances the index twice; [url=https://www.youtube.com/watch?v=f0tx96EkkrM]Crystal_ once did a nice video explaining how trainer battles affect the script index values[/url]).<br />- Viridian Forest script 0x06 happens to point to $5180, bank 0x18.<br />- At this address we have some accidental code, created by interpreting the trainer encounter text (ViridianForestText4) as CPU instructions:<br />[tt]ViridianForestText4:<br />&nbsp; ld ($5A21), sp<br />&nbsp; ld d, c<br />&nbsp; call TalkToTrainer<br />&nbsp; jp TextScriptEnd[/tt]<br />Which triggers a glitch textbox, but thankfully, does nothing harmful to the game.<br />- Then, we trigger another trainer battle in Viridian Forest, which advances the current map script to index 0x08.<br />- Viridian Forest script 0x08 happens to point to $24F4.<br />- Again some accidental code, but this time, it was sourced from the item pick up text (PickUpItemText):<br />[tt]PickUpItemText:<br />&nbsp; ld ($5C3E), sp<br />&nbsp; call Predef<br />&nbsp; jp TextScriptEnd[/tt]<br />This one however isn&#039;t so nice to the game, since it executes an invalid predefined function 0xF4 (calling Predef with A=0xF4).<br />- Predef 0xF4 happens to execute code from $F808. Which is the echo RAM equivalent of $D808<br />- Arbitrary code execution magic happens<br /><br />Any trainer can be fought as the last one - I believe the only reason they chose the Bug Catcher closest to the entrance is because he would be the fastest to get to in a speedrun.<br /><br />Adapting this exact method for general use is most likely impossible, since it requires insane levels of luck manipulation, and planning for it from the very beginning of the game. But a similar procedure can most likely be applied to any other map - so there should be a way to find a different route with different trainers, where the code execution happens from a more predictable location (like Pokemon boxes or inventory data).<br /><br />Also, it&#039;s funny to look how a strategy originally meant for the A Button Challenge has inspired a new speedrun route, along with a new way of achieving arbitrary code execution.


subject: Re: The &quot;If Pokemon were real...&quot; Game
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  it would rather kill me as it&#039;s a huge monstrosity and doesn&#039;t even have hands...<br />What if your Eevee evolves into an Umbreon and steals your stuff...


subject: Re: This place feels dead
poster_name: Charmy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  If you want a more active community, join our official Discord server.<br />That&#039;s really all I have to say...


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ravioli link=topic=8046.msg206721#msg206721 date=1504922711]<br />The thing about capitalism is that most people think it is so over-monopolized than it really is. Look around your local town square, and look at your local economy for experience.<br />[/quote]My local economy is drugs, a Yamaha watercraft monopoly, and a Toyota monopoly.


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Krys3000 link=topic=8076.msg206784#msg206784 date=1505210646]<br />Very interesting! I&#039;ll work on this asap. There should be a way to use it smoothly. Ways to get the expanded item packs without MissingNo. are game changers for all those games who can&#039;t do it :)<br />[/quote]<br /><br />Yeah :) at the very least it&#039;s a nice curiosity you can beat the game this early.<br /><br />[quote author=TheZZAZZGlitch link=topic=8076.msg206785#msg206785 date=1505218952]<br />Adapting this exact method for general use is most likely impossible, since it requires insane levels of luck manipulation, and planning for it from the very beginning of the game. But a similar procedure can most likely be applied to any other map - so there should be a way to find a different route with different trainers, where the code execution happens from a more predictable location (like Pokemon boxes or inventory data).<br />[/quote]<br /><br />Thanks for your research TheZZAZZGlitch! I thought so too in regards to game completion, but turns out if you have a Link Cable and a game with the 61896 (F1C8) ID (available from item 30&#039;s quantity and item 31 in item underflow) you could in theory trade it over to the other game. The 61896 manip for a real console/BGB as well might not be too hard.<br /><br />I don&#039;t understand the FFF1 (Charmander) and FEF0 (Bulbasaur) Spearow manips though. Maybe those aren&#039;t needed if you&#039;re not speedrunning and just give Spearow with high enough stats to survive the battles.<br /><br />I did some tests on BGB and I was able to replicate what they did in the speedrun (without the manips and a cheat code to apply the right ID) and the glitch worked, sending me to the Hall of Fame.&nbsp; I think it&#039;s amazing how they could manipulate that with just two instances of the player&#039;s name and the F1C8.<br /><br />When I tried the glitch on VBA though multiple times it didn&#039;t work, so maybe VBA doesn&#039;t emulate it correctly or I was just really unlucky.


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8046.msg206792#msg206792 date=1505229842]<br />[quote author=ravioli link=topic=8046.msg206721#msg206721 date=1504922711]<br />The thing about capitalism is that most people think it is so over-monopolized than it really is. Look around your local town square, and look at your local economy for experience.<br />[/quote]My local economy is drugs, a Yamaha watercraft monopoly, and a Toyota monopoly.<br />[/quote]<br /><br />So you don&#039;t buy groceries anywhere? Where do you buy car parts? Where is the local car garage? Local gun store?<br /><br />Come on now.


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: Caveat
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Cool! This could REALLY decrease the amount of A-presses!<br /><br />It still amazes me that we can still find things in these games.


subject: Re: This place feels dead
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  The community has a bunch of &quot;core&quot; members which are still active - many Distinguished Mebers, notably - but they aren&#039;t very active on the forums, so I understand if it feels dead.<br />Torchickens produces new videos very often.<br />There&#039;s also a Discord server which is still rather active.


subject: Re: This place feels dead
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8077.msg206796#msg206796 date=1505260432]<br />The community has a bunch of &quot;core&quot; members which are still active - many Distinguished Mebers, notably - but they aren&#039;t very active on the forums, so I understand if it feels dead.<br />Torchickens produces new videos very often.<br />There&#039;s also a Discord server which is still rather active.<br />[/quote]<br /><br />Where is that?


subject: Re: This place feels dead
poster_name: Terry
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It may not have a high post rate, but the quality of the posts are far, far greater than that of nearly all other forums with this kind of traffic. It&#039;s a niche forum in the first place, and the oldest games of a generation don&#039;t typically get as much foot traffic as something new does it?<br /><br />It may be a week or more between heavily insightful posts but I still find myself checking the forums several times a week for new information I might have missed or don&#039;t know of yet. As a trade-off I think it&#039;s worth it.


subject: Re: This place feels dead
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Terry link=topic=8077.msg206799#msg206799 date=1505294142]<br />It may not have a high post rate, but the quality of the posts are far, far greater than that of nearly all other forums with this kind of traffic. It&#039;s a niche forum in the first place, and the oldest games of a generation don&#039;t typically get as much foot traffic as something new does it?<br /><br />It may be a week or more between heavily insightful posts but I still find myself checking the forums several times a week for new information I might have missed or don&#039;t know of yet. As a trade-off I think it&#039;s worth it.<br />[/quote]Don&#039;t forget when the forum explodes over the course of an hour.[quote author=ravioli link=topic=8077.msg206798#msg206798 date=1505272055]<br />[quote author=ISSOtm link=topic=8077.msg206796#msg206796 date=1505260432]<br />The community has a bunch of &quot;core&quot; members which are still active - many Distinguished Mebers, notably - but they aren&#039;t very active on the forums, so I understand if it feels dead.<br />Torchickens produces new videos very often.<br />There&#039;s also a Discord server which is still rather active.<br />[/quote]<br /><br />Where is that?<br />[/quote]Check General for &quot;Yeniaul&#039;s discord server and rules&quot;


subject: Re: Glitch PokÃ©mon cries for the wiki
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  *tips hatstack*<br />Well done. At the current renovation rate of important articles, we&#039;ll show the Bulbapedia normies that we are superior here quick. We&#039;re already even with them as of now.<br /><br />Turf wars aside, great content. Also, is [s]God[/s] Abwayax the only one that can fix that kind of thing?


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ravioli link=topic=8046.msg206794#msg206794 date=1505241602]<br />[quote author=Parzival link=topic=8046.msg206792#msg206792 date=1505229842]<br />[quote author=ravioli link=topic=8046.msg206721#msg206721 date=1504922711]<br />The thing about capitalism is that most people think it is so over-monopolized than it really is. Look around your local town square, and look at your local economy for experience.<br />[/quote]My local economy is drugs, a Yamaha watercraft monopoly, and a Toyota monopoly.<br />[/quote]<br /><br />So you don&#039;t buy groceries anywhere? Where do you buy car parts? Where is the local car garage? Local gun store?<br /><br />Come on now.<br />[/quote]Walmart (an ongoing monopoly attempt, i&#039;m counting it as a monopoly because they&#039;re almost done), 30 miles out (or online), 40 miles out, 60 miles out.<br />Come now, gimme harder questions.


subject: Re: The Official ACE Guide - READ THIS IF YOU ARE NEW TO ACE
poster_name: Legerepze
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I try using ACE for the first time to change my ID in pokemon Yellow, but I canÂ´t change more than the last 3 digits and I doÂ´t know what I&#039;m doing wrong.<br /><br />HereÂ´s what I am doing:<br /><br />Version: Pokemon Yellow<br />Region: Other (Europe-Spanish)<br />Method: ws#&#38;#m#<br /><br />Bootstrap (PC):<br />11 PokÃ©mon in your current PC box<br />Seel as the 1st PokÃ©mon in the current PC box<br />Parasect as the 2nd PokÃ©mon in the current PC box<br />Growlithe as the 3rd PokÃ©mon in the current PC box<br />Magikarp as the 4th PokÃ©mon in the current PC box<br />Psyduck as the 5th PokÃ©mon in the current PC box<br />Flareon as the 6th PokÃ©mon in the current PC box<br />Tentacool as the 7th PokÃ©mon in the current PC box<br />Female Nidoran as the 8th PokÃ©mon in the current PC box<br />Three more PokÃ©mon<br />Finally, Seel&#039;s HP must be 233<br /><br />Bag set:<br />any item (Masterball x108)<br />ws# #m#<br />Lemonade x89<br />Repel x12<br />Carbos x 211<br />X Accuracy x94<br />Water Stone x115<br />TM01 x(1)<br /><br />When I use ws#&#38;#m#, I change my ID from 47337 to 47271, but that&#039;s all.<br />Thanks and sorry for my bad english.<br />


subject: Re: The Official ACE Guide - READ THIS IF YOU ARE NEW TO ACE
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: DoubleNegative
icon: xx
body:
  In yellow, many addresses are shifted one over. by the looks of it, you are trying to get the game freak mew id. try this: replace your setup with one that doesn&#039;t use e. Then toss 1 x accuracy, use wsm, buy another x accuracy, toss 77 lemonade, and use wsm again.


subject: Day Care Corruption Oddity
poster_name: GlitchedPhoenix
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So, I discovered something while screwing around with Glitzer Popping on Emerald today. After a successful Seasor corruption, I checked the Day-Care to see the damage. I got a PokeNav call while running there. What&#039;s odd was that the glitch Pokemon in the day-care had the name of the trainer who called me. I reset, and checked again. With no call, it&#039;s name was several blank spaces, followed by Bad EGG. After a few resets, I&#039;ve learned this also works when viewing a Pokemon&#039;s summary, checking a bag item, calling someone who mentions their name (i.e. &quot;Hi, &lt;player&gt;, it&#039;s &lt;trainer name&gt;&quot;), etc., where the Day-Care man mentions the Pokemon&#039;s name, the item, and the trainer&#039;s name respectively. I don&#039;t know if this trick has been chronicled or not, but I have a video of it at https://youtu.be/JnzZLMThuw4


subject: Re: The Official ACE Guide - READ THIS IF YOU ARE NEW TO ACE
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  First of all, if your game is not english, an english code won&#039;t work. Adresses in European non-english Yellow are +4 from the English R/B (+5 from English Y). Everything must be adapted accordingly.<br /><br /><br /><br />


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8046.msg206803#msg206803 date=1505314767]<br />[quote author=ravioli link=topic=8046.msg206794#msg206794 date=1505241602]<br />[quote author=Parzival link=topic=8046.msg206792#msg206792 date=1505229842]<br />[quote author=ravioli link=topic=8046.msg206721#msg206721 date=1504922711]<br />The thing about capitalism is that most people think it is so over-monopolized than it really is. Look around your local town square, and look at your local economy for experience.<br />[/quote]My local economy is drugs, a Yamaha watercraft monopoly, and a Toyota monopoly.<br />[/quote]<br /><br />So you don&#039;t buy groceries anywhere? Where do you buy car parts? Where is the local car garage? Local gun store?<br /><br />Come on now.<br />[/quote]Walmart (an ongoing monopoly attempt, i&#039;m counting it as a monopoly because they&#039;re almost done), 30 miles out (or online), 40 miles out, 60 miles out.<br />Come now, gimme harder questions.<br />[/quote]<br /><br />I would appreciate it if you stopped cherry picking big consumer brands around your area because I&#039;m fairly certain they are NOT the only businesses around your area. 


subject: Re: Riots
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: DoubleNegative
icon: xx
body:
  [quote author=Missing? NO! link=topic=8046.msg206699#msg206699 date=1504640773]When Neo-Nazis and white supremacists are demonstrating like that, I feel as if riots and violence to stop them is justified. Yes, everyone is entitled to their own free-speech and the right to demonstrate, but, when those viewpoints are hateful, discriminatory, and as toxic as a Nazi ideology is, then yes, &quot;punching a Nazi&quot; is justified.<br />[/quote]<br /><br />The issue with this is that you cannot objectively categorize viewpoints like this without lumping in other ideas that you would consider fine.<br /><br />&quot;Hateful&quot; - expressing hate towards something is free speech. Calling for violence is incitement, which is an actual crime.<br /><br />&quot;Discriminatory&quot; - the definition of discrimination means taking note of differences. You discriminate between friends and aquaintences. Discrimination is only illegal when it is done arbitrarily in hiring or pricing, or generally in economic relationships.<br /><br />&quot;Toxic&quot; - a poison produced by biological processes. This probably isn&#039;t the word you&#039;re looking for.


subject: Re: Riots
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=8046.msg206810#msg206810 date=1505353908]<br />[quote author=Missing? NO! link=topic=8046.msg206699#msg206699 date=1504640773]When Neo-Nazis and white supremacists are demonstrating like that, I feel as if riots and violence to stop them is justified. Yes, everyone is entitled to their own free-speech and the right to demonstrate, but, when those viewpoints are hateful, discriminatory, and as toxic as a Nazi ideology is, then yes, &quot;punching a Nazi&quot; is justified.<br />[/quote]<br /><br />The issue with this is that you cannot objectively categorize viewpoints like this without lumping in other ideas that you would consider fine.<br /><br />&quot;Hateful&quot; - expressing hate towards something is free speech. Calling for violence is incitement, which is an actual crime.<br /><br />&quot;Discriminatory&quot; - the definition of discrimination means taking note of differences. You discriminate between friends and aquaintences. Discrimination is only illegal when it is done arbitrarily in hiring or pricing, or generally in economic relationships.<br /><br />&quot;Toxic&quot; - a poison produced by biological processes. This probably isn&#039;t the word you&#039;re looking for.<br />[/quote]Extremist-level hate, discrimination rendered illegal (at this level) long ago, the words they spew might as well be poison from the depths of their body.<br />Let&#039;s not pick apart arguments on technicalities like this, now.[quote author=ravioli link=topic=8046.msg206809#msg206809 date=1505343436]<br />[quote author=Parzival link=topic=8046.msg206803#msg206803 date=1505314767]<br />[quote author=ravioli link=topic=8046.msg206794#msg206794 date=1505241602]<br />[quote author=Parzival link=topic=8046.msg206792#msg206792 date=1505229842]<br />[quote author=ravioli link=topic=8046.msg206721#msg206721 date=1504922711]<br />The thing about capitalism is that most people think it is so over-monopolized than it really is. Look around your local town square, and look at your local economy for experience.<br />[/quote]My local economy is drugs, a Yamaha watercraft monopoly, and a Toyota monopoly.<br />[/quote]<br /><br />So you don&#039;t buy groceries anywhere? Where do you buy car parts? Where is the local car garage? Local gun store?<br /><br />Come on now.<br />[/quote]Walmart (an ongoing monopoly attempt, i&#039;m counting it as a monopoly because they&#039;re almost done), 30 miles out (or online), 40 miles out, 60 miles out.<br />Come now, gimme harder questions.<br />[/quote]<br /><br />I would appreciate it if you stopped cherry picking big consumer brands around your area because I&#039;m fairly certain they are NOT the only businesses around your area. <br />[/quote]I would like to say I was cherry-picking this. The last local businesses only sell products from one brand each, so it&#039;s still technically monopolized. Unless you&#039;ve been here, you&#039;ll complain forever about the impossibility, but it&#039;s completely true.


subject: Re: Day Care Corruption Oddity
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  These names showing up like this are due to [b]control characters[/b] that the devs used so that they didn&#039;t have to hardcode in every possible item and trainer name, etc. for all textboxes that needed them. Instead, they made the game look up variables a textbox needed and just slot them into place. However, [b]the variables stay in these areas used for display until they are overwritten.[/b]<br />This is what&#039;s going on with your Daycare &#039;mon&#039;s name. It&#039;s got spaces the game sees as needing things slotted into.


subject: Re: Riots
poster_name: ravioli
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=8046.msg206812#msg206812 date=1505393940]<br />[quote author=DoubleNegative link=topic=8046.msg206810#msg206810 date=1505353908]<br />[quote author=Missing? NO! link=topic=8046.msg206699#msg206699 date=1504640773]When Neo-Nazis and white supremacists are demonstrating like that, I feel as if riots and violence to stop them is justified. Yes, everyone is entitled to their own free-speech and the right to demonstrate, but, when those viewpoints are hateful, discriminatory, and as toxic as a Nazi ideology is, then yes, &quot;punching a Nazi&quot; is justified.<br />[/quote]<br /><br />The issue with this is that you cannot objectively categorize viewpoints like this without lumping in other ideas that you would consider fine.<br /><br />&quot;Hateful&quot; - expressing hate towards something is free speech. Calling for violence is incitement, which is an actual crime.<br /><br />&quot;Discriminatory&quot; - the definition of discrimination means taking note of differences. You discriminate between friends and aquaintences. Discrimination is only illegal when it is done arbitrarily in hiring or pricing, or generally in economic relationships.<br /><br />&quot;Toxic&quot; - a poison produced by biological processes. This probably isn&#039;t the word you&#039;re looking for.<br />[/quote]Extremist-level hate, discrimination rendered illegal (at this level) long ago, the words they spew might as well be poison from the depths of their body.<br />Let&#039;s not pick apart arguments on technicalities like this, now.<br />[/quote]<br /><br />Do you think Antifa harasses any actual &#039;&#039;nazis?&#039;&#039;. No. They harass ANYBODY from the right wing or who they deem is fascist, like veterans, trump supporters, etc etc. 


subject: Re: The Official ACE Guide - READ THIS IF YOU ARE NEW TO ACE
poster_name: TheZZAZZGlitch
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: TheZZAZZGlitch
icon: xx
body:
  I think we should isolate all of these questions into a nicely formatted Wiki page, and refer any newcomers there.<br />I might even help create such a short guide in my free time.<br /><br />Also, giving this thread an official name and explicitly inviting newcomers here, while everything over here is still under construction, might not have been a very good idea.<br /><br />Some common questions that will need to be addressed:<br />- What is ACE<br />- What is the most simple, up-to-date method of obtaining 8F<br />- What is bootstrapping, how to bootstrap 8F<br />- Will 8F work on all languages and game revisions? What are the alternatives?<br />- 8F just crashes the game, wat do<br />- 8F worked previously without any problems, but now it crashes...<br />- I tried this specific setup, and it didn&#039;t work! What happened?<br />- My game crashed and the save file got corrupted... is there any way to recover it?<br />- Are there any safety precautions I can take to make sure my save will never get corrupted by accident?<br />- Can I permanently modify the game using ACE?<br />- Is there anything that ACE can&#039;t do at all? Are there any limits?<br />- I&#039;ve seen the &quot;universal pseudo-Gameshark setup&quot;, but it needs a &quot;memory address&quot; and a &quot;value&quot;. What are those things?<br />- How do I know which memory addresses do specific things I need? Is there any documentation on that?<br />- I have a memory address from English R/B - is there any way to find out the equivalent address in Yellow and other games?<br />- I&#039;ve seen some complex setups that did incredible things, like making Mew appear under the truck. How do I do that?<br />- I want to write my own scripts. Where should I start? Are there any resources on this topic?<br />- How do I convert gbz80 assembly code to an item list and vice versa?<br />- I&#039;m converting my code into an item list, but I keep getting glitch items, which are hard to obtain. Can I do anything about it?<br />- I looked into some setups, and some instructions in them did seemingly useless things...<br />- Having to write codes by using items is starting to drive me insane... Is there a better option for getting my code into the game?<br />- How do I know the address of a specific subroutine in the game, like GivePokemon?<br />- I&#039;ve seen save files that automatically run some code. How does this work? How do I do that?<br />- Is there any way to have my code run continuously in the background, to have it persist between maps for example?<br /><br />And potentially a lot more.<br />But most importantly:<br />- All I care about is getting a GameFreak Mew to transfer into Pokemon Bank. Show me the easiest way of accomplishing just that.


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Spicr link=topic=7770.msg206816#msg206816 date=1505428819]<br />do any maps contain glitchy scripts in slots not accessible by retire?<br />[/quote]Probably. However, DS games don&#039;t have the same one-file structure that older consoles do. NDS-format ROMs are basically zip files, with lots and lots of files inside. You can&#039;t load part of one from another, either. Keep this in mind when thinking about things like this in Gen 4 and above.


subject: Re: The &quot;If Pokemon were real...&quot; Game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I try to roller blade like Korrina to go after it :D Or cry...or call the police....or animal control.....<br /><br />What if you had a major crush on someone from pokemon, and they suddenly became real? :o


subject: Re: The Prediction Game!
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Uhhh. Why wouldn&#039;t I be? D: Please ask a question thats more logically yes or no next time...<br /><br />NP has crushed on Misty as a kid? :P


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Spicr
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Parzival link=topic=7770.msg206817#msg206817 date=1505432320]<br />[quote author=Spicr link=topic=7770.msg206816#msg206816 date=1505428819]<br />do any maps contain glitchy scripts in slots not accessible by retire?<br />[/quote]Probably. However, DS games don&#039;t have the same one-file structure that older consoles do. NDS-format ROMs are basically zip files, with lots and lots of files inside. You can&#039;t load part of one from another, either. Keep this in mind when thinking about things like this in Gen 4 and above.<br />[/quote]<br /><br />um yea http://i.imgur.com/gGqjFpw.jpg


subject: Re: The &quot;If Pokemon were real...&quot; Game
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Jchu link=topic=1350.msg206819#msg206819 date=1505433991]<br />I try to roller blade like Korrina to go after it :D Or cry...or call the police....or animal control.....<br /><br />What if you had a major crush on someone from pokemon, and they suddenly became real? :o<br />[/quote]You start with a good, clean rubber.<br />What if the Cascade Glitch was real? And North Korea did it to try to kill us all?


subject: Re: The Prediction Game!
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Nope. Not even a &quot;girls are gross&quot; reaction. Just a roadblock, plain aand simple.<br /><br />NP has pirated over 500GB of various files. (I&#039;m at like 13TB lifetime.)


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Spicr
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Spicr
icon: xx
body:
  does that count as glitchy? https://streamable.com/1urw3 it&#039;s certainly funny...<br /><br />(did it with a cheat btw)


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Yes... but...<br />we don&#039;t use cheats here. Not unless we absolutely have to.<br /><br /><br />Mainly due to making our own, but you get the point.


subject: Re: The &quot;If Pokemon were real...&quot; Game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I&#039;d make sure all call of duty games get burned. I&#039;m sure people playing those has lead to this... &gt;:(<br /><br />What if rare candies were real? XD


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Spicr
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  btw why doesn&#039;t the retire from the great marsh do anything special? did they program both retires differently?


subject: Re: Using RETIRE to heal yourself and break all graphics.
poster_name: Spicr
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  so, I got a similar effect by using a warp cheat (there is only one if you google it...) and changing the map id part to regigigas room (11b) (i don&#039;t actually know what the cheat does it&#039;s really weird). anyway, about 10% of the time when i soft reset the game and talk to the same specific trainers I get the healing/graphics breaking thing. Sometimes I also get a glitch battle. here are videos<br /><br />https://streamable.com/99egw<br /><br />https://streamable.com/xdld9<br /><br />what I find weird is how sometimes nothing happens, sometimes i get healed and sometimes there is a glitch battle. it could obviously also be because of the emulator/rom/cheats that are messing with things.


subject: Re: Using RETIRE to heal yourself and break all graphics.
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  ROMs are verified easily by summing it then comparing it to the sum on DAT-o-MATIC.<br />Cheats can be rectified by providing it. We&#039;ll try to see what it does, if possible.<br />Emulator... is it a NDS rom? If so, throw your SAV and NDS into a zip, upload it somewhere (i recommend FileNurse) and send me a link and the cheat over PM. I&#039;ll test it on console.


subject: Re: Yeniaul's Discord Server (and rules)
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Since the server is now official :<br />- Pin this topic ?<br />- Rename it ? &quot;GCL&#039;s Discord server&quot; ?<br />- Add it in the news on the home page ? (Along &quot;this is a beta blublublub&quot;)


subject: Re: Obtaining Arceus via the Void Glitch
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=7770.msg206831#msg206831 date=1505551728]<br />Yep. How exactly I don&#039;t know, though.<br />[/quote]My guess is either pointers (hardcoded or not) or they went &quot;lel why tF not?&quot;


subject: Re: Yeniaul's Discord Server (and rules)
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  &#039;Cause you can&#039;t send messages but in #guest unless you are granted permission to.<br />Should&#039;ve asked there (or here, it works too). I gave you the role.


subject: New walk through walls with 8f
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: thumbup
body:
  For this to work you do not need to jump off a ledge just run the code and your done. To stop the code go into a building. This code causes problems with cutscenes where the players walk.<br />Heres the code (starting from item slot 3)<br />Lemonaid 1<br />TM34 56<br />TM05 201


subject: Re: New walk through walls with 8f
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=6638.msg189536#msg189536 date=1366986049]<br /><br />so in theory, 01xxyyzz gameshark codes could easily be converted for use with 8F with following asm skeleton:<br /><br />[code]D322 : 3E xx&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ld a, xx&nbsp; &nbsp; &nbsp; ; register a = xx<br />D324 : EA yy zz&nbsp; &nbsp; &nbsp;  ld (zzyy),a&nbsp;  ; memory address zzyy = register a<br />D327 : C9&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  ret&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  ; does this even need explaining?![/code]<br /><br />...which corresponds to following items:<br />[code]Item3: Lemonade, quantity xx<br />Item4: TM34, quantity yy<br />Item5: Item with hex zz, quantity 201[/code]<br /><br />...and if hex zz corresponds to glitch item or otherwise unobtainable item, one can change the second item using TheZZAZZGlitch&#039;s code above.<br />[/quote]<br />I forgot to credit wack0 for posting this on the zzazz glitches post about 8f. This is what let someone who does not know how to make codes make this.


subject: Re: Save restoreation with 8F
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Ok I have been doing some work and I am planing a way to do this very quickly. But I will need help. How can I use item underflow to go to any building in celadon(Ideally the department store) and from there to a building on cinnabar (ideally the pokemon center) I will also need to be able to fly without the badge and I already know how to do that by surfing. Once I get that info I should be able plan it out from there. (Remember I can&#039;t save, switch boxes, beat the elite four, etc.)


subject: Re: Glitch PokÃ©mon cries for the wiki
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: likebeingawesome
icon: xx
body:
  dd.wav (In the dungeon soundtrack)is 666 KB lol. Also why are there lots of really long glitch pokemon cries and whats up with them being like songs in the game but with speed or pitch changes for example. Like bf.wav (In the Dungeon soundtrack)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Storyreader21
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Hey, I was wondering I have seen US pokemon blue 8f codes for changing pc pokemons dv to 10 attack, 10 defense, 10 speed, and 10 special, as well as one with 14 attack iv, 10 defense, 10 speed, and 10 special, but although both give shiny pokemon when traded to Gold/silver a lot of times they are male.&nbsp; I want pokemon that are still shiny, but except for pokemon with a 1:7 female:male gender ratio (starters, eeveelutions, pokemon like that) would be female so I would need a dv set of 2 attack, 10 defense, 10 speed, and 10 special, what is a US Pokemon Blue 8f code for that? 


subject: Re: Save restoreation with 8F
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You can&#039;t fly without the badge. Like, period. Except with ACE, again, but it&#039;s not straightforward.<br /><br />To do that warp thingy, you have to toss item 36 (I think ?) while in a building to make the exit of the building point to another map.<br />&#039;Careful, warp IDs can be pretty tricky at times.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [code]<br />8F<br />Any item x Any qty<br />X Accuracy x178<br />Carbon x218<br />Max Revive x170<br />PokÃ© Ball x201[/code]<br /><br />This will edit the first PokÃ©mon in your active box.<br /><br />Use once.<br />Toss 1 X Accuracy (you have 177).<br />Toss ?? Max Revives (you have 42).<br />Use once.<br /><br />Done !


subject: Re: Yeniaul's Discord Server (and rules)
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=7855.msg206835#msg206835 date=1505568607]<br />&#039;Cause you can&#039;t send messages but in #guest unless you are granted permission to.<br />Should&#039;ve asked there (or here, it works too). I gave you the role.<br />[/quote]<br />i think they can post in #general too. Abwayax might&#039;ve fixed it, but still...


subject: Re: G/S/C glitch discussion
poster_name: asphere
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=asphere link=topic=6594.msg205984#msg205984 date=1498921300]<br />[quote author=ISSOtm link=topic=6594.msg205982#msg205982 date=1498920704]<br />It is possible to do so with ACE - you&#039;d need to write to the two bytes containing the Trainer ID - but I&#039;m not a Gen II ACE expert, so I&#039;ll pass. (And writing the &quot;save restoration&quot; 8F sucked up all my energy x)<br /><br />First you&#039;d have to choose which method of ACE you pick. There are a couple different ones, one requiring for example two Secret Potions and two Machine Parts to get TMs in the wrong pocket. I think that can be done with cloning, but the &quot;standard&quot; way of doing it is by trading. But if you have only one game/console, you&#039;d have to use another method, etc. I don&#039;t think they are mentioned on the wiki (yet).<br />[/quote]<br /><br />yes i have 1 only gameboy, but anyway i don t undrstand.. can u post for me how i should do? is like on pkmn yellow 1st gen or change? i didn t find wich mode there are for ACE on gen 2.<br />[/quote]<br />THERE ARE SOME NEWS GUYS? CRYSTAL OR TORCHIKS?<br />HEY can you help me? is possible to change ID number on pokemon Silver 2gen italian?<br />if yes can you explain to me?<br />thanks in advance


subject: Re: Save restoreation with 8F
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=7996.msg206134#msg206134 date=1499631396]<br />No, as I said, it&#039;s for ws m. The setup is different for Red/Blue.<br />[/quote]<br />Wait whats the rb setup or is the item menu for rb and box for yellow


subject: Re: Save restoreation with 8F
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: likebeingawesome
icon: xx
body:
  Ok so you will need to make your name A at the moment I do not think your starter matters. <br />Now play through the game normally (but make sure to catch an abra and consistently have 6 items at least in your bag) untill you get access to cut.<br /> Once that happens go back to cerulian city now cut the tree that blocks you from going to the route to the right of cerulian. Go through the route like normal (but battle as few trainers as posible) untill you reach the part with a pokemon center, a female trainer, and four trees to cut down. Go in that pokemon center now go back down the route to the long range trainer (REMEMBER DO NOT SAVE IN FRONT OF HIM) take extra care not to battle him(if you do lose the battle). It may also be a good idea to practice trainer fly before this. <br />To trainer fly from him use the Abra you caught earlyer if you did everthing right you will go back to the pokemon center on that route. Now battle the female trainer I mentioned earlier make sure to beat her first pokemon but lose on her second&nbsp; pokemon.&nbsp; <br />Remember to have at least six items in your bag and open the start menu. <br />Now make your way back to the long range trainer. The start menu will open on its own and missingno will appear run from missingno toss 2 items in your 6th slot. <br />Now do it again this time around though you can defeat her if you like. Now go back and run from missingno again do not toss any items this time.<br />Go into the pokemon center move the items in the 6th slot into the third now toss the items in the second slot of your inventory do the same with the first slot toss the items in the first slot untill you only have access to the first and second slots toss all but 3 of the items in the first slot and combine it with the items in slot 2 combine this new stack with the items in slot one you will now have a slot with &quot;0&quot; items in it you will be in item underflow. <br />I am unsure what you exactly need to do next but you need to warp to celadon and use the pokemon center there and then go to cinabar use the pokemon center there (you need to use the pokemon centers so you can fly to the locations) give yourself sabrinas badge so you can use fly, get access to the hm to teach fly, get a stack of jitems, and lasty give yourself maximum money. From there you set up the code.


subject: Re: This place feels dead
poster_name: Missing? NO!
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I actually think this place is more on an upswing lately. More users and more posts than in years past. Sure, it&#039;s not what it was during the peak years of 2007-2009, but it&#039;s a lot more active than it was in 2012-2013.<br /><br />I do miss the peak activity though.


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8076.msg206848#msg206848 date=1505663651]<br />I think 14<br />[/quote]I thought this make like 25 or something. Isn&#039;t there a list floating around somewhere?


subject: Re: Glitch PokÃ©mon cries for the wiki
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=likebeingawesome link=topic=7952.msg206840#msg206840 date=1505597030]<br />dd.wav (In the dungeon soundtrack)is 666 KB lol. Also why are there lots of really long glitch pokemon cries and whats up with them being like songs in the game but with speed or pitch changes for example. Like bf.wav (In the Dungeon soundtrack)<br />[/quote]<br />This explains it, even though it&#039;s about textboxes. It&#039;s pretty much exactly the same.<br />https://www.youtube.com/watch?v=E-CQS5B2sjY


subject: Re: GlitchDex: International glitch PokÃ©mon?
poster_name: Raven Freak
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I&#039;ve honestly been wondering when the documentation on International Glitch Pokemon would be added to the wiki. While I haven&#039;t updated any of my research in forever, it&#039;ll still be cool to see the documentation on the wiki in the future. :)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So I have been thinking about glitch text in red and blue (like what you see in stacks of over 100 items) and I though well all that text have hex values that when put in an encounter table would have a value of 15 what you need for mew. So what I need is a way to change your name to have those characters (I guess with 8F cause thats the point of this topic) to find mew with the old man glitch.


subject: Re: G/S/C glitch discussion
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  This is I guess an early warning to the people who use this thread or help people who ask questions on it and have not realized this already but it is going to light up soon with people who got gold and silver virtual console trying to get lots of good and shiny pokemon into sun and moon and in November ultrasun and ultra moon.


subject: Re: G/S/C glitch discussion
poster_name: asphere
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=likebeingawesome link=topic=6594.msg206862#msg206862 date=1505697917]<br />This is I guess an early warning to the people who use this thread or help people who ask questions on it and have not realized this already but it is going to light up soon with people who got gold and silver virtual console trying to get lots of good and shiny pokemon into sun and moon and in November ultrasun and ultra moon.<br />[/quote]<br /><br />I don t understand what u want mean but anyway if u can read my post i need only change ID, no need shiny pkmn...


subject: Re: G/S/C glitch discussion
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=asphere link=topic=6594.msg206863#msg206863 date=1505719386]<br />[quote author=likebeingawesome link=topic=6594.msg206862#msg206862 date=1505697917]<br />This is I guess an early warning to the people who use this thread or help people who ask questions on it and have not realized this already but it is going to light up soon with people who got gold and silver virtual console trying to get lots of good and shiny pokemon into sun and moon and in November ultrasun and ultra moon.<br />[/quote]<br /><br />I don t understand what u want mean but anyway if u can read my post i need only change ID, no need shiny pkmn...<br />[/quote]<br />In four days gold and silver come out for&nbsp; virtual console which means people who want help with glitches and stuff such as getting shiny celabe.


subject: The big hex list
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So I use the big hex list alot and I feel like it needs updating to add things like quantity ids(what numbers are worth in Hexadecimal) , text and tile ids, building ids, etc. Unfortunately I am not the most knowledgeable on these subjects so I may not be of much help.


subject: Re: The big hex list
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=likebeingawesome link=topic=8081.msg206865#msg206865 date=1505735599]<br />So I use the big hex list alot and I feel like it needs updating to add things like quantity ids(what numbers are worth in Hexadecimal) , text and tile ids, building ids, etc. Unfortunately I am not the most knowledgeable on these subjects so I may not be of much help.<br />[/quote]<br /><br />Quantity IDs are on the table already if you look under decimal (ID) and refer to the other fields like hexadecimal (ID), ASM instruction on the row.<br /><br />Adding what the glitch tiles in hexadecimal mean for every tileset sounds good though. :)<br /><br />There is a tileblock dex already actually that was done by the people at PRAMA, but we might not have a tiledex. <br /><br />http://glitchcity.info/wiki/File:TileBlockDex.png


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=8076.msg206797#msg206797 date=1505260719]<br />If it uses Echo RAM it&#039;s not going to work in VBA lel<br />[/quote]<br /><br />This was done on a version of VBA that supports Echo RAM. The problem may have been related to how the code changes HRAM and/or incorrect VRAM inaccessibility emulation (which apparently means the execution is done at F8FF instead of F80F according to entrpntr in the above video&#039;s comments).


subject: Re: The big hex list
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So other things I thought of that should be on the table are type ids and the ids the game uses for trainer battles (If that&#039;s how it works)


subject: Re: The big hex list
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=likebeingawesome link=topic=8081.msg206868#msg206868 date=1505756020]<br />So other things I thought of that should be on the table are type ids and the ids the game uses for trainer battles (If that&#039;s how it works)<br />[/quote]<br /><br />That&#039;s a good idea re: types :). I think the only issue with adding more columns is that it can restrict the space available to view on one page without having to scroll (i.e. with â–·).<br /><br />With trainer battles all wild PokÃ©mon IDs decimal 200-255 (hexadecimal: C9-FF) automatically become trainers when an encounter is initiated and a PokÃ©mon hasn&#039;t already been sent out.<br /><br />I believe 200 is actually glitch trainer class 0. 201 is Youngster, 202 is Bug Catcher (class 1, 2) and so on with 248-255 also being glitch Trainer classes (this split is on the table but may be hard to notice at first). Perhaps with a Game Genie code you could access otherwise unavailable classes with IDs which -200 are 56+, but I don&#039;t know much more about how this works and you might not be able to do it without modifying the ROM (which the Game Genie simulates by essentially making temporary ROM patches).


subject: Re: The Member's Guide to Topiclessness
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I had a dream Paco81 came back to Glitch City Labs and made a contribution on a recently discovered glitch and made a question about another glitch. I miss Paco and I wonder where he&#039;s been and if he still lurks these forums from time to time.


subject: Re: The Member's Guide to Topiclessness
poster_name: Missing? NO!
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I remember Paco! I haven&#039;t seen him in forever, along with a bunch of old members. Led Zeppelin, Axaj, FiveX, ACE91, Chaos, Yami Mutou, the list goes on...


subject: Re: The big hex list
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I just took a look.<br /><br />It seems if you&#039;re willing to replicate the initial battle initialisation code, put the trainer class index in the a register then jump to the middle of InitBattleCommon, you can set up a trainer battle with any trainer class.<br /><br />[url=https://github.com/pret/pokered/blob/7a9a1b1e55f4a7f6c339a86d8cdb7fbf1bee7838/engine/battle/core.asm#L6861]https://github.com/pret/pokered/blob/7a9a1b1e55f4a7f6c339a86d8cdb7fbf1bee7838/engine/battle/core.asm#L6861[/url]<br /><br />To be more clear, your payload would be doing everything up to the bankswitched call to InitBattleVariables, setting the a register then jumping to [tt]ld [wTrainerClass],a[/tt].<br />


subject: Re: The Member's Guide to Topiclessness
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Missing? NO! link=topic=3088.msg206871#msg206871 date=1505781956]<br />I remember Paco! I haven&#039;t seen him in forever, along with a bunch of old members. Led Zeppelin, Axaj, FiveX, ACE91, Chaos, Yami Mutou, the list goes on...<br />[/quote]<br /><br />Yeah. Thinking about the older Glitch City Laboratories days makes me feel nostalgic ha ha.


subject: Re: The big hex list
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=Wack0 link=topic=8081.msg206872#msg206872 date=1505785505]<br />I just took a look.<br /><br />It seems if you&#039;re willing to replicate the initial battle initialisation code, put the trainer class index in the a register then jump to the middle of InitBattleCommon, you can set up a trainer battle with any trainer class.<br /><br />[url=https://github.com/pret/pokered/blob/7a9a1b1e55f4a7f6c339a86d8cdb7fbf1bee7838/engine/battle/core.asm#L6861]https://github.com/pret/pokered/blob/7a9a1b1e55f4a7f6c339a86d8cdb7fbf1bee7838/engine/battle/core.asm#L6861[/url]<br /><br />To be more clear, your payload would be doing everything up to the bankswitched call to InitBattleVariables, setting the a register then jumping to [tt]ld [wTrainerClass],a[/tt].<br />[/quote]<br /><br />Awesome. Thanks Wack0! It seems that possibly TrainerClassDex could be yet another project then. :)<br />Thinking about it we could add TheZZAZZGlitch&#039;s trainer data (as a TrainerDex) to the wiki as well.


subject: Curious about cloning
poster_name: xtreme713ify
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Any progress made on a reliable Pokemon cloning glitch yet? It&#039;s practically a tradition at this point.


subject: Seemingly unprovoked audio glitch
poster_name: xtreme713ify
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I&#039;m playing Pokemon Red at the moment, and for some reason when Gary sent out his Abra, Gastly&#039;s cry was played. This isn&#039;t the first time this has happened I just happened to have the page open. Why does this happen?


subject: The very first glitchmon to encounter? Is it possible to &quot;glitchLocke&quot;
poster_name: ExodusCDrake
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ExodusCDrake
icon: xx
body:
  What is the first glitch Pokemon that can be encountered in the first gen games, Other than level 100 nidoking?<br /><br />


subject: Re: Seemingly unprovoked audio glitch
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=xtreme713ify link=topic=8083.msg206876#msg206876 date=1505885958]<br />I&#039;m playing Pokemon Red at the moment, and for some reason when Gary sent out his Abra, Gastly&#039;s cry was played. This isn&#039;t the first time this has happened I just happened to have the page open. Why does this happen?<br />[/quote]<br /><br />If this happened when your PokÃ©mon was on low HP this is a known occurrence. PokÃ©mon cries are stored in the format base, pitch, length, and out of the 151 PokÃ©mon there are a limited number of base cries (only 38).<br /><br />When the PokÃ©mon is sent out when red bar sound is active it appears that the pitch is set to 0, hence some PokÃ©mon can sound like other PokÃ©mon when you&#039;re on low HP.<br /><br />Exploiting &#039;redbar&#039; is also a known technique in speedrunning.<br /><br />I have more information about this here:<br />https://pastebin.com/gM5dEu28<br /><br />Hope this helps :)


subject: Re: The very first glitchmon to encounter? Is it possible to &quot;glitchLocke&quot;
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ExodusCDrake link=topic=8084.msg206877#msg206877 date=1505889180]<br />What is the first glitch Pokemon that can be encountered in the first gen games, Other than level 100 nidoking?<br />[/quote]<br /><br />If you use the [url=http://glitchcity.info/wiki/SRAM_glitch]save corruption glitch[/url] you get access to Q (FF)/&#039;M (FF) and other glitch PokÃ©mon from the expanded party. So possibly you might be able to deposit glitch PokÃ©mon that appear there and do a glitchLocke with them.<br /><br />Otherwise the first PokÃ©mon you can encounter is possibly MissingNo., such as from Misty&#039;s Starmie or a trainer in Saffron City&#039;s Fighting Dojo (available early with [url=http://glitchcity.info/wiki/Brock_Through_Walls]Brock Through Walls[/url]) but be warned that in Yellow this MissingNo. (one of the regular MissingNo.) will freeze the game unless it&#039;s the first time you encountered a glitch PokÃ©mon and you wiped your save file with Up+Select+B.<br /><br />Other glitch PokÃ©mon are possible with Special stats 191-199, and it&#039;s possible an underflowed Level 100 PokÃ©mon could have the Special stat you need.<br /><br />This image is also useful for showing the PokÃ©mon you can obtain with trainers in Red/Blue:<br /><br />https://puu.sh/257S<br /><br />Hope this helps. :)


subject: Re: G/S/C glitch discussion
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  when trading from gen 2 to 1 using johto guard, do the type bytes of the pokemon stay the same, or are they set to whatever type the gen 1 equivalent is?<br /><br />ie: use johto guard to trade lugia to gen 1, is it still psychic/flying type?


subject: Re: Curious about cloning
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I don&#039;t think that&#039;s been found yet. If you want, though, you can start breaking shit and help us find one!


subject: Re: The very first glitchmon to encounter? Is it possible to &quot;glitchLocke&quot;
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8084.msg206879#msg206879 date=1505896919]<br />[quote author=ExodusCDrake link=topic=8084.msg206877#msg206877 date=1505889180]<br />What is the first glitch Pokemon that can be encountered in the first gen games, Other than level 100 nidoking?<br />[/quote]<br /><br />If you use the [url=http://glitchcity.info/wiki/SRAM_glitch]save corruption glitch[/url] you get access to Q (FF)/&#039;M (FF) and other glitch PokÃ©mon from the expanded party. So possibly you might be able to deposit glitch PokÃ©mon that appear there and do a glitchLocke with them.<br /><br />Otherwise the first PokÃ©mon you can encounter is possibly MissingNo., such as from Misty&#039;s Starmie or a trainer in Saffron City&#039;s Fighting Dojo (available early with [url=http://glitchcity.info/wiki/Brock_Through_Walls]Brock Through Walls[/url]) but be warned that in Yellow this MissingNo. (one of the regular MissingNo.) will freeze the game unless it&#039;s the first time you encountered a glitch PokÃ©mon and you wiped your save file with Up+Select+B.<br /><br />Other glitch PokÃ©mon are possible with Special stats 191-199, and it&#039;s possible an underflowed Level 100 PokÃ©mon could have the Special stat you need.<br /><br />This image is also useful for showing the PokÃ©mon you can obtain with trainers in Red/Blue:<br /><br />https://puu.sh/257S<br /><br />Hope this helps. :)<br />[/quote]Wait. I forgot how the Brock Nidoking thing worked. It&#039;s a variant of the Mew Glitch, right? If so, is there a way to find the right Pokemon to trigger a low-index Missingno. or something? (I doubt any of them will have stats high enough to get into the 100s range before Brock, but still...)


subject: Re: G/S/C glitch discussion
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=6594.msg206881#msg206881 date=1505937697]<br />when trading from gen 2 to 1 using johto guard, do the type bytes of the pokemon stay the same, or are they set to whatever type the gen 1 equivalent is?<br /><br />ie: use johto guard to trade lugia to gen 1, is it still psychic/flying type?<br />[/quote]Most likely, as IIRC the type bytes weren&#039;t shuffled around between the two. Give it a shot!


subject: Re: The Member's Guide to Topiclessness
poster_name: Ketsuban
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I miss the old GCLf :&lt;<br /><br />I also wish I had a car so I didn&#039;t have to sit on a bus for four hours every Monday and Wednesday just to do SCIENCE while sitting down. I&#039;m too fat to stand for three hours.


subject: Re: The Prediction Game!
poster_name: Ketsuban
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Proly.<br /><br />The person below me has played on major consoles from at least three different manufacturers.


subject: Re: Point the pokedex!
poster_name: Ketsuban
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  *opens PokÃ©dex app and points at microwave*<br /><br />â€œRotom, the Machine Spirit PokÃ©mon, and the evolved form of MissingNo.â€


subject: Re: You know you've been playing PokÃ©mon too long when...V2
poster_name: Ketsuban
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  When your thoughts are clouded by thoughts of your favorite gym leaders in decidedly far less than a swimsuit.


subject: Re: The If game
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  It&#039;d probably get shot. Weird shit happens here, and it wouldn&#039;t make it *TO* the door because of my neighbors thinking it&#039;s a demon or something. Because, y&#039;know, tripping acid.<br /><br /><br /><br /><br /><br />Oh, and I might freak out and snap its neck, so there&#039;s that.


subject: Re: The throw an object at the next poster game
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You MISSED!<br />*hurls a pebble now traveling at high fractions of the speed of light directly at the next poster&#039;s left leg*


subject: Re: The Prediction Game!
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  From where I&#039;m at now, I can see my PS2, PS3, Wii, Xbox 360, and Xbox One.<br />I&#039;d go and give you an entire list, but that&#039;d mean having to move.<br /><br />NP has a cat in their lap as they post.


subject: Re: Help to emulate the Egg Ticket Event in Pokemon Crystal (JP)
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: SnorlaxMonster
icon: xx
body:
  [quote author=HÃ¡Äky link=topic=8045.msg206458#msg206458 date=1502918013]<br />[quote author=Parzival link=topic=8045.msg206457#msg206457 date=1502907708]<br />[quote author=HÃ¡Äky link=topic=8045.msg206452#msg206452 date=1502861965]<br />(It assumes that the PokÃ©mon available using the Egg Ticket were the same ones, with the same probabilities, as in the English versionâ€™s Odd Egg event; I donâ€™t know for sure that this assumption is correct.)<br />[/quote]From (ECCH) Bulbapedia:<br />[quote]In the Japanese version of PokÃ©mon Crystal, there is a 50% chance the hatched PokÃ©mon will be Shiny (IVs 2/10/10/10) and a 50% chance it will not (IVs 0/0/0/0).<br />In the international versions of PokÃ©mon Crystal, there is a 14% chance the hatched PokÃ©mon will be Shiny (IVs 2/10/10/10) and an 86% chance it will not (IVs 0/0/0/0), but the chance of any particular PokÃ©mon species hatching from the Egg and the chance of any given species being Shiny are not uniform.[/quote]<br />[/quote]<br /><br />Bulbapedia originally said that the Odd Egg had a [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=prev&amp;oldid=54588]50% chance of being shiny in [i]all[/i] versions[/url], then that it was [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=prev&amp;oldid=326412]50% for the Japanese event but 12.5% in the English version[/url], then reverted back to [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=prev&amp;oldid=870182]50% for all versions[/url] until someone finally came up with the correct [url=https://bulbapedia.bulbagarden.net/w/index.php?title=PokÃ©mon_Egg&amp;diff=1499762&amp;oldid=1499352]14% figure from the localizations[/url]. I have no reason to believe that the 50% figure is anything more than someoneâ€™s guess thatâ€™s been propagated as fact.<br />[/quote]<br />To the best of my knowledge, the 50% figure was [url=https://web.archive.org/web/20011007030448/http://www.geocities.com:80/meowth346/gs/faq/EggTicket/EggTicket.htm]originally determined[/url] by Meowth346 of PokÃ©mon Forever. Since he did have the exact properties of the Odd Egg in 2001, I don&#039;t think it was purely guesswork. (That page also appears to be the basis for the [url=http://upcarchive.playker.info/0/upokecenter/content/pokemon-crystal-odd-egg.html]UPC page[/url], unless it&#039;s the other way around.)<br /><br />I have been in contact with Meowth lately, so I&#039;ll see if he can remember anything about how he came to that conclusion (but since it was 15 years ago, I imagine it&#039;s going to be difficult).


subject: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  PokÃ©mon Gold and Silver come out for 3DS Virtual Console on September 22, and as of now in Japan, Australia and New Zealand are already available to download.<br /><br />Discuss glitches here.<br /><br />Does the Coin Case glitch work? I&#039;m waiting until the game comes out in Europe and will try it if the answer hasn&#039;t been found before.<br /><br />


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Let&#039;s just point out that VBA doesn&#039;t correctly emulate multi-byte read instructions, i.e. it reads sooner than it should. The implication here is that maybe the timing until VRAM locks is tight enough to be that.<br />Also is VRAM locking emulated at all ?


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: forsyz
icon: xx
body:
  yes it does i tested it coincase and cloning do work. when you press print or try to print your pokemon team with that guy in that house it doesn&#039;t let you use yes. mystery gift also does work to.


subject: Re: Save restoreation with 8F
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ISSOtm
icon: xx
body:
  Misty can also be used to get Missingno. Second PokÃ©, so you can win instead of losing the second encounter.<br /><br />Both are for Yellow, and you need BOTH at the same time for the setup to work. To put it differently, the bag is too small to fit the whole thing.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You could just set 8F to make you encounter Mew. Just saying.<br /><br />You should edit D15A/5C/5E to $0F, then.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=forsyz link=topic=8086.msg206909#msg206909 date=1506006261]<br />yes it does i tested it coincase and cloning do work. when you press print or try to print your pokemon team with that guy in that house it doesn&#039;t let you use yes. mystery gift also does work to.<br />[/quote]<br /><br />Awesome. Thanks for testing it on VC! Did you test just the Glitch Dimension? Hopefully arbitrary code execution works as well.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Wack0
icon: xx
body:
  Here are the patches: https://a.pomf.cat/ojjism.7z<br /><br />Interestingly there are patch files for Crystal included, meaning that a Crystal VC release may still happen (or perhaps they abandoned it after realising they&#039;d need to do something about the GB Mobile Adaptor in the Japanese version).<br /><br />As with R/B, the patch files include comments with some IDA output and some actual src:<br /><br />[code]<br />;0x29e97<br />;&nbsp; call	ir_main<br />; 	ld	d,a			; IR_STAT<br />;	xor	a<br /><br /><br /><br /><br />;&nbsp;  _IRcomm_end&nbsp;  0x2a1b9<br />; ld	hl,ir_read_buf&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp;  21 50 c7&nbsp; <br />;	ld	de,ir_read_buf_stk&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |&nbsp; &nbsp; &nbsp;  11 00 c8<br />;	ld	bc,15&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  |<br />;	call	block_move&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; |<br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  |<br /><br /><br />;3e 3f 21 92 51 cf cd df 65 00&nbsp; &nbsp; <br />; -------&gt;<br />; BCALL	G_BANK0b,set_send_data2<br />;	call	read_buf_clr<br />;<br />[/code]<br /><br />Interesting that the &quot;official&quot; bankswitched call macro takes a bank as well as function address. I guess the official GB/C compiler and linker are inferior to rgbds and doesn&#039;t have an inbuilt feature to get the bank number that a symbol is in.


subject: Re: Curious about cloning
poster_name: xylo
poster_ip: ***.***.***.***
icon: xx
body:
  Not found yet, though I feel it&#039;d be possible through trading. Doesn&#039;t Gen 7 lock you out of online if you try to exit during a trade though?


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SatoMew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Thanks, Wack0! <br /><br />Seems like the patches target Japanese Gold and Silver 1.1 and English Crystal 1.1.<br /><br />The first patch in [tt]CGBBXTJ0.534.patch[/tt] (Japanese Crystal) concerns the Mobile Adapter GB:<br /><br />[code]<br />[MAcheck]<br />Mode = 1<br />Address = 0x16C000<br />Fixcode = 0xC9<br />[/code]<br /><br />[url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/misc/mobile_5b.asm#L1-L30]The relevant function in the English version disassembly[/url].<br /><br />The original value of address [tt]16C000[/tt] is [tt]F0[/tt]. This disables the Mobile System GB boot screen but does not seem to affect the availability of the Mobile System GB features in save files on which it has already been unlocked.<br /><br />The string &quot;MURIYARI&quot; also appears as a comment immediately before some link-related modifications. I initially thought it was a staff member&#039;s name ([url=https://bulbapedia.bulbagarden.net/wiki/Staff_of_PokÃ©mon_Crystal]full list[/url]) but the word ã€Œç„¡ç†ã‚„ã‚Šã€refers to doing something against someone&#039;s will so I wonder what exactly is the meaning here.<br /><br />Jynx&#039;s color was also changed in Japanese versions since only Western Gold, Silver, and Crystal had censored the design back in 2000 and 2001. Korean Gold and Silver originally use the Japanese sprites and I&#039;m not seeing Jynx mentioned on the Korean patches (the Japanese patches clearly state it directly).


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: HÃ¡Äky
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote=CGBBXTJ0.534.patch][code];0004e433h: A5 01 00 00 FF 00 FF 00 FF 00 FF 00 FF 00 FF 00 ; ?..ï£µ.ï£µ.ï£µ.ï£µ.ï£µ.ï£µ.<br />;0004e443h: FF 00 FF 00 FF 00 FF 00 FF 10 00 00 FF 00 FF 00 ; ï£µ.ï£µ.ï£µ.ï£µ.ï£µ...ï£µ.ï£µ.<br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  <br />;00023a9fh: C0 01 00 00 FF 00 FF 00 FF 00 FF 00 FF 10 00 00 ; ?..ï£µ.ï£µ.ï£µ.ï£µ.ï£µ...&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  <br />;00023aafh: FF 01 00 00 0A 10 00 00 0A 01 00 00 FF 00 FF 00 ; ï£µ...........ï£µ.ï£µ.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  <br />;change to below&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  <br />;00023a9fh: FF 00 E0 01 00 00 FF 00 FF 10 00 00 FF 01 00 00 ; ï£µ.?..ï£µ.ï£µ...ï£µ...&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  <br />;00023aafh: 0A 10 00 00 0A 01 00 FF FF 00 FF 00 FF 00 FF 00 ; .......ï£µï£µ.ï£µ.ï£µ.ï£µ.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  <br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />[teaching movie]&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />Mode = 1&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />Address = 0x4e433&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />Fixcode = a32:FF 00 E0 01 00 00 FF 00 FF 10 00 00 FF 01 00 00 0A 10 00 00 0A 01 00 FF FF 00 FF 00 FF 00 FF 00&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  [/code][/quote]<br /><br />As SatoMew pointed out to me once, thereâ€™s a minor issue in Japanese Crystal (but not Gold and Silver, I thought?) with an unusually long delay during the Dudeâ€™s catching tutorial. This patch is applied in all Japanese versions; $2ea9f is the address in Gold and Silver while $4e433 is the Crystal equivalent. I never found out what caused the delay, so I donâ€™t know if this fixes it.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  SatoMew, would you mind releasing a mirror of the patches on a website like Mega please, as I can&#039;t access Wack0&#039;s link for some reason. Thanks!<br /><br />I&#039;ll also mirror the patch notes here:<br />https://sites.google.com/site/torchickens2/pokemon-file-comparions<br /><br />[quote author=SatoMew link=topic=8086.msg206918#msg206918 date=1506017856]<br />The string &quot;MURIYARI&quot; also appears as a comment immediately before some link-related modifications. I initially thought it was a staff member&#039;s name ([url=https://bulbapedia.bulbagarden.net/wiki/Staff_of_PokÃ©mon_Crystal]full list[/url]) but the word ã€Œç„¡ç†ã‚„ã‚Šã€refers to doing something against someone&#039;s will so I wonder what exactly is the meaning here.<br />[/quote]<br /><br />Perhaps it&#039;s related to link code where the VC forces something to happen. According to the JWPce dictionary this also means &quot;forcibly&quot;.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Here&#039;s a mirror: https://cdn.discordapp.com/attachments/229019211366793216/360481979357200394/GSCpatches.7z


subject: Re: G/S/C glitch discussion
poster_name: HÃ¡Äky
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=6594.msg206881#msg206881 date=1505937697]<br />when trading from gen 2 to 1 using johto guard, do the type bytes of the pokemon stay the same, or are they set to whatever type the gen 1 equivalent is?<br /><br />ie: use johto guard to trade lugia to gen 1, is it still psychic/flying type?<br />[/quote]<br /><br />Yes. When converting the PokÃ©mon to Generation I format, the Generation II game looks up its types from its own data. (An exception is made for Magnemite and Magneton.) This also means the resulting glitch PokÃ©mon can be traded back to Generation II and become a Lugia again, since the type data is used to check whether a PokÃ©mon is â€œabnormalâ€.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Wack0 link=topic=8086.msg206921#msg206921 date=1506018746]<br />Here&#039;s a mirror: https://cdn.discordapp.com/attachments/229019211366793216/360481979357200394/GSCpatches.7z<br />[/quote]<br /><br />Thanks Wack0!&nbsp; :D I&#039;ve just uploaded it on to my Google Sites as well.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SatoMew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=HÃ¡Äky link=topic=8086.msg206919#msg206919 date=1506017929]<br />As SatoMew pointed out to me once, thereâ€™s a minor issue in Japanese Crystal (but not Gold and Silver, I thought?) with an unusually long delay during the Dudeâ€™s catching tutorial. This patch is applied in all Japanese versions; $2ea9f is the address in Gold and Silver while $4e433 is the Crystal equivalent. I never found out what caused the delay, so I donâ€™t know if this fixes it.<br />[/quote]<br /><br />Japanese Crystal only iirc, will test this later! :)<br /><br />[quote author=Torchickens link=topic=8086.msg206920#msg206920 date=1506018341]<br />SatoMew, would you mind releasing a mirror of the patches on a website like Mega please, as I can&#039;t access Wack0&#039;s link for some reason. Thanks!<br />[/quote]<br /><br />I was getting malware warnings as well. Here&#039;s another mirror: https://tknk.io/947X


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote=DMGAAUP0.J56]<br />;-----111111111111111144444444444444----0xc902 no ..............Mem Write: pc32 = 0xcc46a addr = 0xc902 value = 0xd&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4461=FA 000CC461&nbsp; LY:006 AF:0080 BC:E401 DE:0001 HL:C900 SP:DFAB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4464=FE 000CC464&nbsp; LY:006 AF:0080 BC:E401 DE:0001 HL:C900 SP:DFAB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4466=D0 000CC466&nbsp; LY:006 AF:0070 BC:E401 DE:0001 HL:C900 SP:DFAB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4467=CD 000CC467&nbsp; LY:006 AF:0070 BC:E401 DE:0001 HL:C900 SP:DFAB -----&nbsp; happend only once while the explosive animation begin.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;000cc471h: FA 19 CA FE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br /> <br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf7e value = 0x8f<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf7f value = 0x91<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf80 value = 0x84<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf81 value = 0x92<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf82 value = 0x84<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf83 value = 0x8d<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf84 value = 0x93<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf85 value = 0x50<br />[/quote]<br /><br />DMGAAUP0 seems to be one of the English Golds. Interestingly CF7E-CF85 is a string buffer and this appears to be to do with the string &quot;PRESENT&quot; (8F 91 84 92 84 8D 93 50).<br /><br />The only Present oddities I know are the [url=https://www.youtube.com/watch?v=XJaQoKtrEuw]Present damage glitch[/url] and this little text glitch:<br /><br />[img]https://i.imgur.com/ExSjsZc.png[/img]<br /><br />Edit: But also, it seems you can use Present when the foe is at full HP and not get the above overlapping message (this happens during the explosive animation as well).


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: HÃ¡Äky
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8086.msg206925#msg206925 date=1506020010]<br />[quote=DMGAAUP0.J56]<br />;-----111111111111111144444444444444----0xc902 no ..............Mem Write: pc32 = 0xcc46a addr = 0xc902 value = 0xd&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4461=FA 000CC461&nbsp; LY:006 AF:0080 BC:E401 DE:0001 HL:C900 SP:DFAB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4464=FE 000CC464&nbsp; LY:006 AF:0080 BC:E401 DE:0001 HL:C900 SP:DFAB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4466=D0 000CC466&nbsp; LY:006 AF:0070 BC:E401 DE:0001 HL:C900 SP:DFAB&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;PC:51-4467=CD 000CC467&nbsp; LY:006 AF:0070 BC:E401 DE:0001 HL:C900 SP:DFAB -----&nbsp; happend only once while the explosive animation begin.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br />;000cc471h: FA 19 CA FE&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <br /> <br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf7e value = 0x8f<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf7f value = 0x91<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf80 value = 0x84<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf81 value = 0x92<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf82 value = 0x84<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf83 value = 0x8d<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf84 value = 0x93<br /> ; ******0xcccccccccffffffff8***********---------------&nbsp;  Mem Write: pc32 = 0x3180 addr = 0xcf85 value = 0x50<br />[/quote]<br /><br />DMGAAUP0 seems to be one of the English Golds. Interestingly CF7E-CF85 is a string buffer and this appears to be to do with the string &quot;PRESENT&quot; (8F 91 84 92 84 8D 93 50).<br /><br />The only Present oddities I know are the [url=https://www.youtube.com/watch?v=XJaQoKtrEuw]Present damage glitch[/url] and this little text glitch:<br /><br />[img]https://i.imgur.com/ExSjsZc.png[/img]<br />[/quote]<br />Thatâ€™s for blurring/dimming the move animation, which includes rapid flashing. I donâ€™t see any indication of either glitch being fixed.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SatoMew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=SatoMew link=topic=8086.msg206924#msg206924 date=1506018947]<br />Japanese Crystal only iirc, will test this later! :) <br />[/quote]<br /><br />I still get a delay but something did change in the tutorial: you now manually close it instead of waiting for the game to do it (input from the A button is ignored), which fixes the delay, but the initial part remains intact so it still has the issue. I assume they did the same thing for Gold and Silver.


subject: Re: G/S/C glitch discussion
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Thanks, I was wondering if I could get 2 lugias by trading one to blue and having a wild ghost missingno copy its type.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: forsyz
icon: xx
body:
  [quote author=Torchickens link=topic=8086.msg206913#msg206913 date=1506007138]<br />[quote author=forsyz link=topic=8086.msg206909#msg206909 date=1506006261]<br />yes it does i tested it coincase and cloning do work. when you press print or try to print your pokemon team with that guy in that house it doesn&#039;t let you use yes. mystery gift also does work to.<br />[/quote]<br /><br />Awesome. Thanks for testing it on VC! Did you test just the Glitch Dimension? Hopefully arbitrary code execution works as well.<br />[/quote]<br />ace,Glitch Dimension and *which move?PP of all work have not tried out the other ones yet. not surprising because they did not fix any of the glitches in rby vc.<br />


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=forsyz link=topic=8086.msg206931#msg206931 date=1506028860]<br />[quote author=Torchickens link=topic=8086.msg206913#msg206913 date=1506007138]<br />[quote author=forsyz link=topic=8086.msg206909#msg206909 date=1506006261]<br />yes it does i tested it coincase and cloning do work. when you press print or try to print your pokemon team with that guy in that house it doesn&#039;t let you use yes. mystery gift also does work to.<br />[/quote]<br /><br />Awesome. Thanks for testing it on VC! Did you test just the Glitch Dimension? Hopefully arbitrary code execution works as well.<br />[/quote]<br />ace,Glitch Dimension and *which move?PP of all work have not tried out the other ones yet. not surprising because they did not fix any of the glitches in rby vc.<br />[/quote]<br /><br />Yay! Thanks. I know what I&#039;ll be doing tomorrow (in the UK) morning then. :)<br /><br />Edit: Now it&#039;s past midnight the games are out here. As expected ACE worked perfectly without a problem.<br /><br />Do note if you want to import your save files with JK&#039;s save manager then depending on your emulator you exported the save from you&#039;ll have to either delete bytes to fix the file size and fix the checksums (see https://twitter.com/mattyoukhana_/status/910875545390473217) or if the save file is exactly $8000 bytes, append the following data to make it end at $800F in a hex editor: 05 01 00 00 00 00 00 00 7B 72 6B 86 1F 00 00 00


subject: Re: Save restoreation with 8F
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=7996.msg206910#msg206910 date=1506006634]<br />Misty can also be used to get Missingno. Second PokÃ©, so you can win instead of losing the second encounter.<br />[/quote]<br />The reason why you need to lose to the second one is because you need to encounter missingno twice for item under flow as for the warping I figured it out as well as getting the fly badge. You will need to go to bill though for the s.s. Ticket which you need for the badges. You are correct about misty though but in my testing I made the mistake of thinking she was not possible to battle with trainer fly thanks to needing to talk to her but all you need to do is battle the trainer that you need to battle before here lose to Misstys second PokÃ©mon go see missingno toss 2 items in slot 6, trainer fly and use the swimmer in here gym.


subject: Re: Curious about cloning
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=xylo link=topic=8082.msg206917#msg206917 date=1506016833]<br />Not found yet, though I feel it&#039;d be possible through trading. Doesn&#039;t Gen 7 lock you out of online if you try to exit during a trade though?<br />[/quote]<br />You can clone with that method but at a rate of like 1 per hour because of being locked out of trading.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=8086.msg206936#msg206936 date=1506038416]<br />Does time capsule trading work?<br />[/quote]<br /><br />I haven&#039;t tried it myself but I&#039;m 99.9% sure it does, and it&#039;s officially advertised as so.<br /><br />[quote author=Nintendo UK]<br />In addition, these titles are compatible with the Time Capsule function, allowing players to Link Trade PokÃ©mon between the Virtual Console versions of PokÃ©mon Gold Version or PokÃ©mon Silver Version and the Virtual Console versions of PokÃ©mon Red Version, PokÃ©mon Blue Version, or PokÃ©mon Yellow Version: Special Pikachu Edition in PokÃ©mon Centres within the games.<br />[/quote]<br /><br />http://www.nintendo.co.uk/Games/Game-Boy-Color/Pokemon-Gold-Version-266076.html


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I haven&#039;t tried it yet, but [url=https://twitter.com/PP_theSLAYER/status/910855127480729603]according to theSlayer[/url], you can&#039;t soft reset using the button combination while the game is saving.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=SnorlaxMonster link=topic=8086.msg206939#msg206939 date=1506052578]<br />I haven&#039;t tried it yet, but [url=https://twitter.com/PP_theSLAYER/status/910855127480729603]according to theSlayer[/url], you can&#039;t soft reset using the button combination while the game is saving.<br />[/quote]<br /><br />That&#039;s interesting. I&#039;ve just confirmed it on the VC version as well, but after further testing on my English Gold cartridge on a Game Boy Advance SP it seems you can&#039;t use the button combination to reset the game either.<br /><br />The same also applies to Red/Blue (both VC and cartridge) with the buttons disabled until the first character of your name in &quot;(PLAYER) saved the game!&quot; is printed. As for Yellow something similar applies for VC and cartridge; you may just have to wait until the &quot;S&quot; in &quot;Saving...&quot; is printed before you can reset during the saving session but (at least) most of the actual saving is done before that.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8086.msg206932#msg206932 date=1506032012]<br />[quote author=forsyz link=topic=8086.msg206931#msg206931 date=1506028860]<br />[quote author=Torchickens link=topic=8086.msg206913#msg206913 date=1506007138]<br />[quote author=forsyz link=topic=8086.msg206909#msg206909 date=1506006261]<br />yes it does i tested it coincase and cloning do work. when you press print or try to print your pokemon team with that guy in that house it doesn&#039;t let you use yes. mystery gift also does work to.<br />[/quote]<br /><br />Awesome. Thanks for testing it on VC! Did you test just the Glitch Dimension? Hopefully arbitrary code execution works as well.<br />[/quote]<br />ace,Glitch Dimension and *which move?PP of all work have not tried out the other ones yet. not surprising because they did not fix any of the glitches in rby vc.<br />[/quote]<br /><br />Yay! Thanks. I know what I&#039;ll be doing tomorrow (in the UK) morning then. :)<br /><br />Edit: Now it&#039;s past midnight the games are out here. As expected ACE worked perfectly without a problem.<br /><br />Do note if you want to import your save files with JK&#039;s save manager then depending on your emulator you exported the save from you&#039;ll have to either delete bytes to fix the file size and fix the checksums (see https://twitter.com/mattyoukhana_/status/910875545390473217) or if the save file is exactly $8000 bytes, append the following data to make it end at $800F in a hex editor: 05 01 00 00 00 00 00 00 7B 72 6B 86 1F 00 00 00<br />[/quote] if your saves from the vc inject versions you don&#039;t need to do this


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: theSLAYER
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I also wanna confirm I was able to swap in an ENG Crystal, and the trading works!<br />Swapping in JPN Crystal broke the VC and 3DS.<br /><br /><br />Also, cloning glitch works, by using &quot;reset&quot; button at the bottom screen of the VC menu.


subject: changeing item pokemon holds with this coincase ace setup
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  https://www.youtube.com/watch?v=NeC36_MhSBA how would i make it so you can change the item on the first pokemon in the party hence being able to easily get items for other ace tricks


subject: Re: The very first glitchmon to encounter? Is it possible to &quot;glitchLocke&quot;
poster_name: likebeingawesome
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Torchickens link=topic=8084.msg206879#msg206879 date=1505896919]<br />[quote author=ExodusCDrake link=topic=8084.msg206877#msg206877 date=1505889180]<br />What is the first glitch Pokemon that can be encountered in the first gen games, Other than level 100 nidoking?<br />[/quote]<br /><br />If you use the [url=http://glitchcity.info/wiki/SRAM_glitch]save corruption glitch[/url] you get access to Q (FF)/&#039;M (FF) and other glitch PokÃ©mon from the expanded party. So possibly you might be able to deposit glitch PokÃ©mon that appear there and do a glitchLocke with them.<br /><br />Otherwise the first PokÃ©mon you can encounter is possibly MissingNo., such as from Misty&#039;s Starmie or a trainer in Saffron City&#039;s Fighting Dojo (available early with [url=http://glitchcity.info/wiki/Brock_Through_Walls]Brock Through Walls[/url]) but be warned that in Yellow this MissingNo. (one of the regular MissingNo.) will freeze the game unless it&#039;s the first time you encountered a glitch PokÃ©mon and you wiped your save file with Up+Select+B.<br /><br />Other glitch PokÃ©mon are possible with Special stats 191-199, and it&#039;s possible an underflowed Level 100 PokÃ©mon could have the Special stat you need.<br /><br />This image is also useful for showing the PokÃ©mon you can obtain with trainers in Red/Blue:<br /><br />https://puu.sh/257S<br /><br />Hope this helps. :)<br />[/quote]<br />That may not be possible if the glitch PokÃ©mon register stuff as caught in the pokedex. There is a glitch with oaks parcel where if you register 2 PokÃ©mon to your pokedex before you deliver it where he will never accept it and just rate your pokedex


subject: Re: The very first glitchmon to encounter? Is it possible to &quot;glitchLocke&quot;
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Good point, but actually I think it&#039;s possible to do swaps after expanding the items pack that ensure you have 0-1 PokÃ©mon owned, as somebody from PRAMA did that before. I&#039;m not sure of the details anymore though I&#039;m afraid.<br /><br />You can also change the exit quantity to 02 (Pewter City) so the old man doesn&#039;t block you. Also if you set up dry underflow in the PC you can change the quantity of item 91 to 19 (13 to D5EF). This makes Professor Oak give you the PokÃ©dex even if you don&#039;t have only one PokÃ©mon or Oak&#039;s Parcel. The only side effect might be a lingering music glitch.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I was on my phone and I hate it, so I didn&#039;t bother to check if it was 15 or 0x15.<br />Also please leave my life out of this, thank you.


subject: Re: G/S/C glitch discussion
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=ISSOtm link=topic=6594.msg206947#msg206947 date=1506091808]<br />Hm, but the lookup will fail for PokÃ©mon not in the table, no ?<br />[/quote]<br /><br />PokÃ©mon not in the table when traded from Generation I to Generation II convert according to values extrapolated beyond the table. According to Hacky for PokÃ©mon not in the table traded from Generation II to Generation I the game searches until it finds the relevant Generation II value beyond the table (so for Celebi it would be FB, for Egg it would be FD and for the ????? 00, FC, FE and FF I think).<br /><br />The offset will then determine the Generation I PokÃ©mon. For Celebi and Egg in English Gold/Silver, the game searches beyond the end of the ROM bank and into RAM, which is why the predictions are hard to predict (apparently much like CoolTrainer&#039;s success rate).<br /><br />Lugia is defined in the table so that MissingNo. (Ghost-form) converts into Lugia and Lugia converts back into MissingNo. (Ghost), and since MissingNo. (Ghost) can copy the stored types of a PokÃ©mon in the party after catching it if there was an (internally stored) Psychic/Flying PokÃ©mon you could use that to trade MissingNo. (Ghost) on to Generation II (another method&nbsp; is by using arbitrary code execution to change the internal types).<br /><br />I believe the abnormal PokÃ©mon trap doesn&#039;t apply to Generation II to Generation I trades, so the game won&#039;t mind in that case that Lugia is Psychic/Flying and MissingNo. Ghost can be a different type. Therefore in theory, as DoubleNegative says you should be able to get two Lugia by trading one (via Time Capsule exploit) to Generation I and catching MissingNo. (Ghost).


subject: Re: Seemingly unprovoked audio glitch
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=xtreme713ify link=topic=8083.msg206949#msg206949 date=1506101066]<br />Oh alright, thanks!<br />[/quote]<br /><br />Anytime. :)


subject: Re: The dream thread
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I had the weirdest dream there was a chicken singing ã‚ãã‚‰ã‚Œã°ãã† (akurarebasou) in Japanese. I don&#039;t even know what that means lol.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [url=https://twitter.com/Prof9/status/911245534563794944]Apparently[/url], HP bars are not hidden during move animations, which can have some strange side-effects.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Blaziken257
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I instantly noticed the same thing as soon as I started playing Silver on the VC (where HP bars aren&#039;t hidden during move animations). I wonder why that was changed?


subject: Spanish OTs in other language games
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  In the Spanish versions of Gold, Silver, and Crystal, there are two trade/gift PokÃ©mon with diacritic characters in their OT names that the player cannot normally enter. The in-game trade Voltorb has the OT FALCÃN, while the gift Shuckle has the OT MANÃA.<br /><br />Notably, these characters are not [url=https://bulbapedia.bulbagarden.net/wiki/Character_encoding_in_Generation_II]encoded in the English games[/url]. Apparently they&#039;re 0xBF (Ã) and 0xC9 (Ã), which has no documented equivalent in the English Generation II games; in the English Generation I games, 0xBF [url=https://bulbapedia.bulbagarden.net/wiki/Character_encoding_in_Generation_I]encodes[/url] &#039;v.<br /><br />So, I have a few questions. If you trade these PokÃ©mon to non-Spanish games, how does it display in each language and generation?&nbsp; (I would speculate that FALCÃN is displayed as FALC&#039;vN in English Generation I.) And now that Generation II is available on Virtual Console, what happens if you trade Voltorb back to Generation I and send it through PokÃ© Transporter?<br /><br />It&#039;s worth noting that a [url=https://bulbapedia.bulbagarden.net/wiki/List_of_glitches_in_Generation_IV#Pal_Park_name_encoding_glitch]similar quirk[/url] occurred in Generation III and IV, where diacritic characters from in-game trades got converted to Japanese characters by Pal Park.


subject: Re: PokÃ©mon Bank Generation I transfer experiments
poster_name: SnorlaxMonster
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  In the Japanese versions of the Generation II games, there are several characters that you can now enter in nicknames/OTs that you couldn&#039;t before (the kana ã‚’ / ãƒ², small vowel katakana, question mark, and exclamation mark).<br /><br />If you put these characters in a PokÃ©mon&#039;s nickname or OT, you can trade it back to Gen I and send it to Bank using Transporter. However, Game Freak forgot to support all of them.<br /><br />ã‚’ / ãƒ² are handled properly and appear in the nickname in Gen VII as well. However, it [url=https://twitter.com/PP_theSLAYER/status/911462759451189253]turns out[/url] that ! and ? are instead just ignored and converted to spaces. This is not an issue in the European language games, where the question and exclamation mark characters can normally be entered in Generation I and II, so they convert properly.


subject: Re: The very first glitchmon to encounter? Is it possible to &quot;glitchLocke&quot;
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Yeah, I did something like that once, but I&#039;m not sure to remember the exact swap either. I could possibly find it again, though :)


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Flandre Scarlet
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Flandre Scarlet
icon: xx
body:
  Is there any method to make a pokemon learn a specific move with the coin case? Mainly so that I could get Aeroblast on Lugia in Gold Version since that isn&#039;t possible otherwise. Using the method where you only use Box Names if possible similar to this video by Torchikens https://youtu.be/NeC36_MhSBA


subject: Re: New Viridian Forest arbitrary code execution method
poster_name: entrpntr
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: entrpntr
icon: xx
body:
  [quote author=Torchickens link=topic=8076.msg206793#msg206793 date=1505233198]<br />I don&#039;t understand the FFF1 (Charmander) and FEF0 (Bulbasaur) Spearow manips though. Maybe those aren&#039;t needed if you&#039;re not speedrunning and just give Spearow with high enough stats to survive the battles.<br />[/quote]<br /><br />Just to clarify, Spearow&#039;s purpose in the speedrun is indeed entirely unrelated to the ACE. It is the fastest PokÃ©mon to beat the endgame bug catcher boss rush, and attack/speed/defense/HP are to make the fights as efficient/safe as can be. The bad special is to die to Pikachu faster, and Spearow&#039;s nickname is part of luck manipulation that yields a Pika Thundershock crit to OHKO Spearow. (EDIT: Successfully catching Spearow is also manipulated, but this requires different setups for Charmander vs Bulbasaur, which is why multiple manipulations were listed in the route document.)


subject: Re: The Prediction Game!
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  No cuz i do not live with a cat XD But I do live with a dog :)<br /><br />NP also live&#039;s with a dog :)


subject: Re: 1000 things not to do on or to a Pokemon Game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  617. Make all the characters look like Korrina<br />618. Get drool all over the game due to this and thus destroy it<br />619. SELL THE BROKEN GAME ON EBAY<br /><br />:P


subject: Re: 1000 ways to FAIL
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  53. Only talk about Korrina and nothing else<br /><br />Looks like I know the right ways to annoy the internet 8)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  You can use this website&#039;s [url=http://glitchcity.info/wiki/GlitchDex]glitchdex[/url]. Clicking on a glitch PokÃ©mon will give you these informations. In case of missing data, Bulbapedia also has it :)


subject: Re: Save restoreation with 8F
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  The equivalent setup for R/B would be quite different due to function indexes, and I&#039;m not really into it anymore. Sorry.


subject: Re: Official 1st Gen (Red/Blue and Yellow) Glitch Discussion
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  What happens to the type bytes when glitch pokemon evolve? If I make a â€¦â€¦ (E2) / squirtle hybrid evolve into missingno, does it keep the water type, or does it become normal &amp; bird?


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SatoMew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  SnorlaxMonster recently pointed out that the Virtual Console manual mentions that PokÃ©mon holding Mail are not allowed in the Time Capsule, [url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/maps/PokeCenter2F.asm#L303-L335]which is confirmed by the English Crystal disassembly[/url]. As this has been somewhat overlooked, can the Time Capsule exploit be used to bypass this additional requirement?<br /><br />Also, [url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/maps/PokeCenter2F.asm#L22-L28]a trigger in SPECIAL[/url] suggests that the Mystery Gift delivery man&#039;s appearance relies on a flag set by receiving PokÃ© Balls from Kurt. How exactly and is the player informed about this in-game?


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Stackout
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [url=https://github.com/pret/pokecrystal/blob/f0209d6ed6a0cd0e759dff49bdfe4d8171229c29/engine/link.asm#L2054]According to the disassembly,[/url] it can not (the Time Capsule exploit only bypasses the species check).


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  The Johto Guard Glitch cannot be used to smuggle mail into Gen I. (Below is a detailed explanation using the disassembly, but I didn&#039;t test it in-game)<br /><br /><br />The function that checks for Gen I compatibility is called SpecialTimeCapsuleCompatibility (https://github.com/pret/pokecrystal/blob/f0209d6ed6a0cd0e759dff49bdfe4d8171229c29/engine/link.asm#L2054-L2133).<br />It&#039;s basically composed of three loops which check one part of the compatibility each.<br />The first loop parses species, and this is how it returns : [url=https://github.com/pret/pokecrystal/blob/f0209d6ed6a0cd0e759dff49bdfe4d8171229c29/engine/link.asm#L2066]until it encounters a $FF species[/url].<br />The [url=https://github.com/pret/pokecrystal/blob/f0209d6ed6a0cd0e759dff49bdfe4d8171229c29/engine/link.asm#L2075]second[/url] and [url=https://github.com/pret/pokecrystal/blob/f0209d6ed6a0cd0e759dff49bdfe4d8171229c29/engine/link.asm#L2093]third[/url] loop instead use the counter counting the number of PokÃ©mon in the party.<br /><br />Thus, only the PokÃ©mon species check is affected by the Johto Guard Trick. Quite a shame, but oh well.<br /><br /><br />As for the Mystery Gift trigger being tied to Kurt, [url=https://github.com/pret/pokecrystal/search?p=1&amp;q=EVENT_RECEIVED_BALLS_FROM_KURT&amp;type=&amp;utf8=%E2%9C%93]a quick search about the flag[/url] turns up that for some reason it&#039;s also used by a bunch of other triggers. So I believe something else is going on there, probably that this flag is used as a temporary by different scripts ?<br />I don&#039;t really know what&#039;s going on there, but here are the elements I found :<br />- The delivery guy is [url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/maps/PokeCenter2F.asm#L1052]directly tied[/url] to the mystery gift flag. (I don&#039;t know how for sure)<br />- When the delivery guy appears, [url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/maps/PokeCenter2F.asm#L55]he sets Kurt&#039;s flag again[/url].


subject: Re: G/S/C glitch discussion
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=6594.msg206947#msg206947 date=1506091808]<br />Hm, but the lookup will fail for PokÃ©mon not in the table, no ?<br />[/quote][quote author=Torchickens link=topic=6594.msg206948#msg206948 date=1506096915]<br />PokÃ©mon not in the table when traded from Generation I to Generation II convert according to values extrapolated beyond the table.<br />[/quote]Did we [i]really[/i]expect anything else? Honestly?<br />ISSOtm, why did you have to ask? This [i][b]IS[/b][/i] Gens 1+2 we&#039;re talking about here.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: ajxpk
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ajxpk
icon: xx
body:
  Wow! Great discovery! I didn&#039;t knew that. The combination Mystery Gift, deliveryguy and PokÃ©mon Center 2F made me almost think like this is a GS Ball Event. Appearently the Officer Sprite was used for the deliveryguy here. 


subject: Re: Curious about cloning
poster_name: xylo
poster_ip: ***.***.***.***
icon: xx
body:
  Don&#039;t you get locked out of online for like 2 days? I exited during a battle (3ds ran out of battery) and got a 2 day ban.


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: FMK
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Flandre Scarlet link=topic=6716.msg206958#msg206958 date=1506172698]<br />Is there any method to make a pokemon learn a specific move with the coin case? Mainly so that I could get Aeroblast on Lugia in Gold Version since that isn&#039;t possible otherwise. Using the method where you only use Box Names if possible similar to this video by Torchikens https://youtu.be/NeC36_MhSBA<br />[/quote]<br /><br />It&#039;s most certainly possible -- and actually extremely simple for Aeroblast in particular, though to use any of my Coin Case ACEs you need to do the following first:<br /><br />[code][REQUIRED] One-off code so all future codes don&#039;t need the &#039;return to game&#039; code:<br />Box 1 : Ap0w&#039;vA55&nbsp; &nbsp; (XOR A; OR b6; SUB 0x80)<br />Box 2 : Ã©&#039;m2p&#039;v7&#039;v&#039;d (LD [d2f8], A; XOR A; SUB fd; SUB d0)<br />Box 3 : Ã©A355555&nbsp; &nbsp;  (LD [80f9], A)<br />Box 4+: 55555555&nbsp; &nbsp;  (Safe filler code)<br />Box 13: 5555pÃ©D9&nbsp; &nbsp;  (XOR A; LD [83ff], A)<br />Box 14: &#039;l&#039;lA&#039;lx&#039;d55 (POP DE; POP DE; INC SP; POP DE; OR A; RET NC)<br /><br />Pokemon 5, Move 4 Modifier (Aeroblast) - Box 1, change r to whatever and replace 5555 with &#039;v(Letter)55 or &#039;v(Letter)&#039;v(Letter) when needed:<br />Box 1: Ap0r5555&nbsp;  (XOR A; OR b1)<br />Box 2: Ã©â™‚455555&nbsp;  (LD [efda], A)<br />Box 3+: 55555555<br />Box 13 and 14: Should never be modified after using the required code.[/code]<br /><br /><br />Other simple, randomish codes, for any interested (All boxes not used for code should all be 5&#039;s, except 13 and 14):<br /><br />[code]255x Ball 1, Master Ball:<br />Box 1: Ap09Ã©8&#039;t5&nbsp; (XOR A; OR ff; LD [fed5], A)<br />Box 2: p0B&#039;vAÃ©7&#039;t (XOR A; OR 0x81; SUB 0x80; LD[fdd5], A)<br /><br />Player Sprite Modifier - Permanent (Old Man; Change &#039;s and A to different values for different results, can replace the 55 for Box 1 with &#039;v(Another Letter) too, if desired value is unobtainable):<br />Box 1: Ap0&#039;s&#039;vA55 (XOR A; OR d4; SUB 0x80)<br />Box 2: Ã©9&#039;l55555&nbsp; (LD [ffd1], A)<br /><br />Tons of Money:<br />Box 1: Ap0/&#039;vA55&nbsp; (XOR A; OR f3; SUB 0x80)<br />Box 2: Ã©&#039;m2p0955&nbsp; (LD [d2f8], A; XOR A; OR ff)<br />Box 3: Ã©A&#039;t55555&nbsp; (LD [80d5], A)<br /><br />Tons of Coins:<br />Box 1: Ap04&#039;vA55&nbsp;  (XOR A; OR fa; SUB 0x80)<br />Box 2: Ã©&#039;m2p0955&nbsp;  (LD [d2f8], A; XOR A; OR ff)<br />Box 3: Ã©A&#039;t55555&nbsp;  (LD [80d5], A)<br /><br /><br />Kudos to Torchickens for the following, just stripped off the RTG code.<br /><br />Turn PokÃ©mon 1 Shiny:<br />Box 1: Ap0&#039;d&#039;vR55&nbsp; (XOR A; OR d0; SUB 0x91)<br />Box 2: Ã©&#039;m2pp045&nbsp;  (LD [d2f8], A; XOR A; XOR A; OR fa)<br />Box 3: Ã©A4p0&#039;d&#039;vQ&nbsp; (LD [80fa], A; XOR A; OR d0; SUB 0x90)<br />Box 4: Ã©?2p0k55&nbsp; &nbsp; (LD [e6f8], A; XOR A; OR aa)<br />Box 5: 55Ã©A4555&nbsp; &nbsp; (LD [80fa], A)<br /><br />Change Pokemon 1 (Celebi) - Box 2, change the first 5 to whatever and the last two 55&#039;s to &#039;v(Letter) when needed:<br />Box 1: Ap0k&#039;vA55&nbsp; (XOR A; OR aa; SUB 80)<br />Box 2: Ã©&#039;m2p0555&nbsp; (LD [d2f8], A; XOR A; OR fb)<br />Box 3: Ã©A455555&nbsp;  (LD [80fa], A)[/code]


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Raven Freak
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I tried cloning a Bellsprout about an hour ago in Silver. Instead, the game cloned the previous Pokemon I sent to the box, which was a Level 8 Hoothoot. It also started me at the last spot I saved, rather than having me be next to the computer. I didn&#039;t reset the game via the menu, instead I pressed the home button and closed the game. I haven&#039;t tested out using the other method yet, I was pretty upset that I had to look for another Bellsprout to trade to get Onix. :P It took me a while to find the darn thing...


subject: Re: This place feels dead
poster_name: Raven Freak
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Yeah it&#039;s a bit quiet, definitely not how it was when I first joined back in &#039;06. Still there is some activity going on, and since G/S was recently released on VC I think more activity will pick up once people start testing glitches on this version.


subject: Re: The throw an object at the next poster game
poster_name: Jchu
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I catch your rare candy and level up my whole y team with it XD<br /><br />I throw an angry team skull member XD


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  a code that makes a pokemon hold any item using box names would be useful means you can still do some coincase item setups even if you have already used the tms and forgot to clone them


subject: Re: The throw an object at the next poster game
poster_name: Parzival
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Jchu link=topic=23.msg206988#msg206988 date=1506418537]<br />I catch your rare candy and level up my whole y team with it XD<br /><br />I throw an angry team skull member XD<br />[/quote]I press a button on my belt and appear behind the next poster.<br />I throw a GBC cart at the back of NP&#039;s head from 6 inches away.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SatoMew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Thank you both, Wack0 and ISSOtm. I have also checked the PokÃ©mon Trainer&#039;s Guide of my UK Gold and Nintendo of Europe back then did not mention the Mail restriction on the manual, only the new PokÃ©mon and moves.<br /><br />[quote author=ajxpk link=topic=8086.msg206976#msg206976 date=1506296508]<br />Wow! Great discovery! I didn&#039;t knew that. The combination Mystery Gift, deliveryguy and PokÃ©mon Center 2F made me almost think like this is a GS Ball Event. Appearently the Officer Sprite was used for the deliveryguy here. <br />[/quote]<br /><br />Hey, ajxpk! I&#039;d like to take the opportunity to say that we&#039;re all very grateful to you and others for [url=https://projectpokemon.org/home/forums/topic/35903-gen-3-mystery-eventgift-research/]your tremendous research on the Mystery Events and Mystery Gift systems of the Generation III PokÃ©mon games[/url], you guys worked hard to preserve the most you could out of those old events :) <br /><br />As to the Mystery Gift system in the Generation II games, yes, the delivery man uses the same sprite as Officers and it was never used for event items afaik. The GS Ball, Mirage Mail, Bluesky Mail, and possibly others were distributed using the Mobile System GB of Japanese Crystal, which is independent of Mystery Gift.<br /><br />In non-Japanese Crystal, [url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/maps/GoldenrodPokeCenter1F.asm#L18-L80]the GS Ball event[/url] can be triggered by simply assigning a value of [tt]0B[/tt] to address [tt]BE3C[/tt] while inside the Goldenrod PokÃ©mon Center and then stepping on the ground floor&#039;s mat tiles (not all emulators seem to handle this well for some reason so, if it doesn&#039;t work, [url=https://tcrf.net/Talk:PokÃ©mon_Crystal#0xBE3C_Problems]try editing the save file directly[/url]). The disassembly refers to a [tt]GOLDENRODPOKECENTER1F_LINK_RECEPTIONIST[/tt] but she is actually the Trade Corner attendant of the PokÃ©Com Center, which has blue hair unlike the Cable Club and PokÃ©Com Club attendants on the second floor, which have green hair. She comes from and returns to the second floor in the localized event ([url=https://www.youtube.com/watch?v=iO2AKwWE6WM]video[/url]).<br /><br />That same PokÃ©mon Center does have something to do with Mystery Gift: you need to use the system to receive Eon Mail and then exchange it for a Revive from [url=https://github.com/pret/pokecrystal/blob/700321a7fb2d6c852ffc91cc0b8867526cb76813/maps/GoldenrodPokeCenter1F.asm#L88-L107]the female NPC[/url] that was added to the localizations and which replaces the male NPC from Gold and Silver that comments on something related to the amount of PokÃ©mon that have been discovered iirc.


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=FMK link=topic=6716.msg206982#msg206982 date=1506371666]<br />[quote author=Flandre Scarlet link=topic=6716.msg206958#msg206958 date=1506172698]<br />Is there any method to make a pokemon learn a specific move with the coin case? Mainly so that I could get Aeroblast on Lugia in Gold Version since that isn&#039;t possible otherwise. Using the method where you only use Box Names if possible similar to this video by Torchikens https://youtu.be/NeC36_MhSBA<br />[/quote]<br /><br />It&#039;s most certainly possible -- and actually extremely simple for Aeroblast in particular, though to use any of my Coin Case ACEs you need to do the following first:<br /><br />[code][REQUIRED] One-off code so all future codes don&#039;t need the &#039;return to game&#039; code:<br />Box 1 : Ap0w&#039;vA55&nbsp; &nbsp; (XOR A; OR b6; SUB 0x80)<br />Box 2 : Ã©&#039;m2p&#039;v7&#039;v&#039;d (LD [d2f8], A; XOR A; SUB fd; SUB d0)<br />Box 3 : Ã©A355555&nbsp; &nbsp;  (LD [80f9], A)<br />Box 4+: 55555555&nbsp; &nbsp;  (Safe filler code)<br />Box 13: 5555pÃ©D9&nbsp; &nbsp;  (XOR A; LD [83ff], A)<br />Box 14: &#039;l&#039;lA&#039;lx&#039;d55 (POP DE; POP DE; INC SP; POP DE; OR A; RET NC)<br /><br />Pokemon 5, Move 4 Modifier (Aeroblast) - Box 1, change r to whatever and replace 5555 with &#039;v(Letter)55 or &#039;v(Letter)&#039;v(Letter) when needed:<br />Box 1: Ap0r5555&nbsp;  (XOR A; OR b1)<br />Box 2: Ã©â™‚455555&nbsp;  (LD [efda], A)<br />Box 3+: 55555555<br />Box 13 and 14: Should never be modified after using the required code.[/code]<br /><br /><br />Other simple, randomish codes, for any interested (All boxes not used for code should all be 5&#039;s, except 13 and 14):<br /><br />[code]255x Ball 1, Master Ball:<br />Box 1: Ap09Ã©8&#039;t5&nbsp; (XOR A; OR ff; LD [fed5], A)<br />Box 2: p0B&#039;vAÃ©7&#039;t (XOR A; OR 0x81; SUB 0x80; LD[fdd5], A)<br /><br />Player Sprite Modifier - Permanent (Old Man; Change &#039;s and A to different values for different results, can replace the 55 for Box 1 with &#039;v(Another Letter) too, if desired value is unobtainable):<br />Box 1: Ap0&#039;s&#039;vA55 (XOR A; OR d4; SUB 0x80)<br />Box 2: Ã©9&#039;l55555&nbsp; (LD [ffd1], A)<br /><br />Tons of Money:<br />Box 1: Ap0/&#039;vA55&nbsp; (XOR A; OR f3; SUB 0x80)<br />Box 2: Ã©&#039;m2p0955&nbsp; (LD [d2f8], A; XOR A; OR ff)<br />Box 3: Ã©A&#039;t55555&nbsp; (LD [80d5], A)<br /><br />Tons of Coins:<br />Box 1: Ap04&#039;vA55&nbsp;  (XOR A; OR fa; SUB 0x80)<br />Box 2: Ã©&#039;m2p0955&nbsp;  (LD [d2f8], A; XOR A; OR ff)<br />Box 3: Ã©A&#039;t55555&nbsp;  (LD [80d5], A)<br /><br /><br />Kudos to Torchickens for the following, just stripped off the RTG code.<br /><br />Turn PokÃ©mon 1 Shiny:<br />Box 1: Ap0&#039;d&#039;vR55&nbsp; (XOR A; OR d0; SUB 0x91)<br />Box 2: Ã©&#039;m2pp045&nbsp;  (LD [d2f8], A; XOR A; XOR A; OR fa)<br />Box 3: Ã©A4p0&#039;d&#039;vQ&nbsp; (LD [80fa], A; XOR A; OR d0; SUB 0x90)<br />Box 4: Ã©?2p0k55&nbsp; &nbsp; (LD [e6f8], A; XOR A; OR aa)<br />Box 5: 55Ã©A4555&nbsp; &nbsp; (LD [80fa], A)<br /><br />Change Pokemon 1 (Celebi) - Box 2, change the first 5 to whatever and the last two 55&#039;s to &#039;v(Letter) when needed:<br />Box 1: Ap0k&#039;vA55&nbsp; (XOR A; OR aa; SUB 80)<br />Box 2: Ã©&#039;m2p0555&nbsp; (LD [d2f8], A; XOR A; OR fb)<br />Box 3: Ã©A455555&nbsp;  (LD [80fa], A)[/code]<br />[/quote]<br /><br />This is great, thank you FMK!&nbsp; :)<br /><br />I&#039;ve come up with a code that allows you to obtain 49 of every TM/HM in the TM/HM pocket. It only just fit box 1-box 6, and the name for box 7 is completely changed. It is x49 because register a is still 0x31, the least significant byte of ByteFill.<br /><br />First off use the one-off code in FMK&#039;s post.<br /><br />Secondly, name the boxes from box 1-6 the following:<br /><br />Ap&#039;vCÃ©025<br />&#039;vj&#039;vuÃ©â™€25<br />&#039;v.Ã©32p&#039;v9<br />Ã©22pÃ©425<br />&#039;vuÃ©62&#039;v 5<br />Ã©52&#039;v:Ã©72<br />55â™€55555<br /><br />And use the Coin Case after following the usual steps.<br /><br />What this code does is call $314C with parameters hl=D57E and bc= $0x39.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: ajxpk
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ajxpk
icon: xx
body:
  Thank you very much! I know you guys pretty well too and really appreciate your work.<br /><br />Thanks for the info, most of these things I already knew.<br />Currently I&#039;m doing some Research about Japanese Gen 1 and Gen 2 Events. I try to gather as much information as I can.<br />The Thread can be found [url=https://projectpokemon.org/home/forums/topic/41541-information-about-japanese-gen-1-gen-2-event-pokÃ©mon/]right here[/url] in case you&#039;re interested.<br /><br />I&#039;m keenly interested in what you guys doing and what Hacky did with his Python Scripts is awesome.<br />I was a silent reader for a long time until I decided to register just recently.<br /><br />What I tried to say is that I almost felt like this could have been something like an unused GS Ball Event.<br />But then I had read in the asm that it&#039;s about &quot;balls&quot;... plural... I guess it refers to the Balls made by Kurt and has nothing to do with it.<br />It would still be interesting to see it come to action and see how it works.<br /><br />


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: SatoMew
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  You&#039;re welcome! :) The thread you started about those Japanese events and how Mew had an unusual sprite reminds me of the November 1996 issue of CoroCoro in which multiple PokÃ©mon such as Mewtwo were depicted with sprites that don&#039;t match those seen in the actual release of Blue ([url=http://d.hatena.ne.jp/poke_age/20120601]source[/url], [url=https://cdn-ak.f.st-hatena.com/images/fotolife/p/poke_age/20120601/20120601163639.jpg]direct image link[/url]), suggesting these were early sprites.<br /><br />That June 1997 issue has artwork of Mew I haven&#039;t seen before. And it looks like PokÃ©mon Yellow was announced in Japan on April 1998 (May 1998 issue of CoroCoro), exactly one month before Red and Blue were announced at E3 1998.


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  No matter what I try, I keep getting a glitch dimension instead of box name code. My slide pokemon is the hatched togepi and I&#039;m using a wooper holding sweet scent. It&#039;s a bit of a pain, but I can get headbutt, but I tried that once already.


subject: glitched my party with ????? hex 00
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: forsyz
icon: xx
body:
  yeah i put more then 6 pokemon in my party and now my partys glitched and idk how to fix it my pokedex also got messed up and some pokemon are seen i did not see etc


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=DoubleNegative link=topic=6716.msg207000#msg207000 date=1506479140]<br />No matter what I try, I keep getting a glitch dimension instead of box name code. My slide pokemon is the hatched togepi and I&#039;m using a wooper holding sweet scent. It&#039;s a bit of a pain, but I can get headbutt, but I tried that once already.<br />[/quote]<br /><br />If you&#039;re using one of my or FMK&#039;s codes the TM12 Sweet Scent won&#039;t work as it would end up skipping the first twelve box name characters instead of only skipping the first character (for when you use TM02 Headbutt). I think it&#039;s easiest just to use the TM02 Headbutt.<br /><br />I don&#039;t know how reliable Togepi are but if you haven&#039;t already try catching many PokÃ©mon west of New Bark Town on Route 29 (even if you end up catching 20 or more and try each one, as some people have been really unlucky).<br /><br />Wooper is used in speedruns instead of Quagsire, but because the jump is conditional (jp nz,$xxyy) to be safe it may be best to use Quagsire which has a jump without a conditional (jp, $xxyy).


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  I discovered a way to get the transferrable GF Mew with Coin Case glitch.<br /><br />First off you will need a Mew. The Mew can either be traded from Generation I or obtained with the following box names (Return Quagsire holding TM02):<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2pp0X5<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Video demonstration:<br />https://www.youtube.com/watch?v=NeC36_MhSBA<br /><br />Once you get a Mew, put it in slot 1 and use three more codes.<br /><br />Get GF Mew (Return Quagsire holding TM02 box names method):<br /><br />First use FMK&#039;s &quot;required&quot; code:<br /><br />[REQUIRED] One-off code so all future codes don&#039;t need the &#039;return to game&#039; code:<br />Box 1 : Ap0w&#039;vA55&nbsp; &nbsp; (XOR A; OR b6; SUB 0x80)<br />Box 2 : Ã©&#039;m2p&#039;v7&#039;v&#039;d (LD [d2f8], A; XOR A; SUB fd; SUB d0)<br />Box 3 : Ã©A355555&nbsp; &nbsp;  (LD [80f9], A)<br />Box 4+: 55555555&nbsp; &nbsp;  (Safe filler code)<br />Box 13: 5555pÃ©D9&nbsp; &nbsp;  (XOR A; LD [83ff], A)<br />Box 14: &#039;l&#039;lA&#039;lx&#039;d55 (POP DE; POP DE; INC SP; POP DE; OR A; RET NC)<br /><br /><br />After using it, enter and use the part 1 and part 2 codes below:<br /><br />Part 1 - &quot;GF&quot; OT:<br /><br />Box 1: Ap0&#039;d&#039;vG55<br />Box 2: Ã©22&#039;v9Ã©(multiplication x)2<br />Box 3: &#039;v9Ã©&amp;2555<br />Box 4: 55555555<br />Box 5: p0&#039;d&#039;vAÃ©A5<br />Box 6: 5p0FÃ©A55<br />Box 7: &#039;v9Ã©A5555<br /><br />Part 2 GF 22796 ID number:<br /><br />Box 1: Ap&#039;v&#039;dÃ©&#039;s25<br />Box 2: &#039;v9Ã©(multiplication x)2p09<br />Box 3: &#039;vgÃ©A4p0M<br />Box 4: &#039;vA555555<br />Box 5: 55555555<br />Box 6: 5555Ã©A45<br />Box 7: &#039;v9Ã©A5555<br /><br />Note: The &#039;multiplication x&#039; is the &quot;x&quot; left of &quot;(&quot; on caps mode.<br /><br />The Mew can be uploaded to PokÃ© Transporter and PokÃ©mon Bank if traded back to Generation I:<br /> <br />[img]https://i.imgur.com/csqN4MY.png[/img]<br />[img]https://i.imgur.com/R0YSSML.png[/img]


subject: Re: glitched my party with ????? hex 00
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=forsyz link=topic=8089.msg207001#msg207001 date=1506482304]<br />yeah i put more then 6 pokemon in my party and now my partys glitched and idk how to fix it my pokedex also got messed up and some pokemon are seen i did not see etc<br />[/quote]<br /><br />I don&#039;t know for sure re:details but if you enter the Bug-Catching Contest on Tuesday, Thursday or Saturday and quit it&#039;s possible to fix your party.<br /><br />This works if one of the ????? in the party is an FF in slot 1-6 (and 7?). The game will consider the FF as the end of the list and only give you back the PokÃ©mon up to the FF. So for instance if FF is in slot 2 you will only get the PokÃ©mon in slot 1 back.<br /><br />I know when you have ????? (00) at the top of the party and use move PkMn w/o mail to move a new PokÃ©mon on top the second PokÃ©mon becomes a stable ????? (FF) when you take it into the Day Care and out, but without further details of what you did I&#039;m afraid I&#039;m unsure if you&#039;ll have a ????? (FF). <br /><br />If it&#039;s possible to open the party PokÃ©mon menu, you may be able to view a summary and scroll through until you find a ????? (FF), exit and switch it up (though note this is intricate and you can get freezes by staying on the menu too long).<br /><br />If one of the Bug-Catching Contest days is too far away if you have the Unown listing try scrolling through the Unown to see if you have a corrupted Unown. If you do it&#039;s possible one (such as Unown 0x84) could cause a Glitch Dimension that prompts you to reset the clock. However I don&#039;t know of all the Unowns that do this and if that still works on Virtual Console.<br /><br />Another way of resetting the clock might be with a clock reset password generator with the clock reset menu via Down+Select+B on the title screen (although in the past I&#039;ve had bad luck with this).<br /><br />http://www.psypokes.com/gsc/timechange.php


subject: Re: glitched my party with ????? hex 00
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Sorry to hear that. Yeah it&#039;s a shame it does that :(.<br /><br />If you can get back a normal party then it should be possible to use Coin Case ACE to fix whichever entries were lost.


subject: Re: glitched my party with ????? hex 00
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  i just backed up my old save i lost some progress but i lost some of my pokemon by putting them into the part


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: forsyz
icon: xx
body:
  [quote author=Torchickens link=topic=6716.msg207004#msg207004 date=1506483223]<br />I discovered a way to get the transferrable GF Mew with Coin Case glitch.<br /><br />First off you will need a Mew. The Mew can either be traded from Generation I or obtained with the following box names (Return Quagsire holding TM02):<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2pp0X5<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Video demonstration:<br />https://www.youtube.com/watch?v=NeC36_MhSBA<br /><br />Once you get a Mew, put it in slot 1 and use three more codes.<br /><br />Get GF Mew (Return Quagsire holding TM02 box names method):<br /><br />First use FMK&#039;s &quot;required&quot; code:<br /><br />[REQUIRED] One-off code so all future codes don&#039;t need the &#039;return to game&#039; code:<br />Box 1 : Ap0w&#039;vA55&nbsp; &nbsp; (XOR A; OR b6; SUB 0x80)<br />Box 2 : Ã©&#039;m2p&#039;v7&#039;v&#039;d (LD [d2f8], A; XOR A; SUB fd; SUB d0)<br />Box 3 : Ã©A355555&nbsp; &nbsp;  (LD [80f9], A)<br />Box 4+: 55555555&nbsp; &nbsp;  (Safe filler code)<br />Box 13: 5555pÃ©D9&nbsp; &nbsp;  (XOR A; LD [83ff], A)<br />Box 14: &#039;l&#039;lA&#039;lx&#039;d55 (POP DE; POP DE; INC SP; POP DE; OR A; RET NC)<br /><br /><br />After using it, enter and use the part 1 and part 2 codes below:<br /><br />Part 1 - &quot;GF&quot; OT:<br /><br />Box 1: Ap0&#039;d&#039;vG55<br />Box 2: Ã©22&#039;v9Ã©(multiplication x)2<br />Box 3: &#039;v9Ã©&amp;2555<br />Box 4: 55555555<br />Box 5: p0&#039;d&#039;vAÃ©A5<br />Box 6: 5p0FÃ©A55<br />Box 7: &#039;v9Ã©A5555<br /><br />Part 2 GF 22796 ID number:<br /><br />Box 1: Ap&#039;v&#039;dÃ©&#039;s25<br />Box 2: &#039;v9Ã©(multiplication x)2p09<br />Box 3: &#039;vgÃ©A4p0M<br />Box 4: &#039;vA555555<br />Box 5: 55555555<br />Box 6: 5555Ã©A45<br />Box 7: &#039;v9Ã©A5555<br /><br />Note: The &#039;multiplication x&#039; is the &quot;x&quot; left of &quot;(&quot; on caps mode.<br /><br />The Mew can be uploaded to PokÃ© Transporter and PokÃ©mon Bank if traded back to Generation I:<br /> <br />[img]https://i.imgur.com/csqN4MY.png[/img]<br />[img]https://i.imgur.com/R0YSSML.png[/img]<br />[/quote]<br /><br />would it work with celebi to. also a challenge would to make a memory editor with box names so you can do almost any thing with one box name setup


subject: CHANGE ID NUMBER IN POKEMON SILVER VC ITALIAN VERSION
poster_name: asphere
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Hello, i decide to open a post for my request becouse in others topics there are too many request per person.<br />Well as the title say i need to know how i can change ID NUMBER in pokemo silver VC italian version. I think there are some people that know or can create a way for achive it. I pray this people to help me becouse i unfortunatelly don&#039;t know how glitchs here work. If someone work on this project for me i can support him, just contact me. Anyway i say Thanks in advance to this comunity which always tends to help people like me.<br />I&#039;ll Wait some news.<br />Cya and good game!


subject: Re: CHANGE ID NUMBER IN POKEMON SILVER VC ITALIAN VERSION
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  (at first, let me tell you that I&#039;m speaking here in english for everyone to understand - but I&#039;m a native italian speaker, just in case there is something you don&#039;t get, and want me to say in italian).<br /><br />Doing such a thing is possible, and possibly through several methods. At the time, only one method is known to work in non-english games, although it&#039;s rather hard (other methods should be tested asap). The process of this method is the following:<br /><br />- You must get two &quot;Machine Part&quot;, and two &quot;SecretPotion&quot;. It can work with other rare items, but if you change them, you must first make sure that in [url=https://glitchcity.info/wiki/The_Big_HEX_List]this table[/url] one of them is BEFORE Hexadecimal 64 and the other is AFTER. Since Rare Items cannot be attached to PokÃ©mon, thus cannot be cloned, getting two rare items can only be done through using another glitch like [url=https://glitchcity.info/wiki/Bad_clone_glitch]Bad Clone Trick[/url] or using 8F/4F/wslm in a Red/Blue/Yellow game. We can guide you through this.<br /><br />- Then, you must perform [url=https://forums.glitchcity.info/index.php?topic=6723.0]this simple glitch[/url] to allow an access to your PC items from your bag.<br /><br />- You must then have at the second position in your party a PokÃ©mon which has the specific Exp. Stats for the glitch to work, that is to say precisely hex:XXC3 for Defense and precisely hex:17D6 for Speed. This is incredibly hard to do at hand, although we may provide a way to do it with in-game battles. The best method may be to use code execution in a R/B/Y game to modify a PokÃ©mon.<br /><br />- Finally, you must store in the PC several items (we can help you figuring out exactly which ones) followed by a TM25, and use this TM25.<br /><br />If you&#039;re interested in a detailed process for this very complex thing, I can write it for you. When I know more about other methods in italian games, I&#039;ll tell you.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Str8rush
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Hello guys, <br /><br />I just started with 8F and ACE today on a German Pokemon Blue game, let me shortly explain what I would like to know:<br /><br />I am planning to use 8F to generate legit PokÃ©mon on the Blue to trade over to my Gold, mostly PokÃ©mon that are Version exclusive to PokÃ©mon Silver. The thing is that I bought Gold VC on my 3DS and nobody near me owns Silver, and having to buy another game for only about 4 PokÃ©mon is nonsense in my opinion. However, my brother already owns a Blue VC on his 3DS, (but does not really care for Gen2), so trading between both games is no problem. <br /><br />I already managed to get myself a 8F item and also generated a Index 52 Missigno (Ho-Oh) on Blue.<br /><br />In some post in this topic I read that it would be possible to change the PokÃ©monâ€˜s types with the help of 8F, which is necessary to get the TimeCapsule working right. The Gold Version identifies Missigno as Ho-Oh, but hence itâ€™s typing is 99/Normal, it gets rejected. I found Someone in another forum who wrote that he was able to transfer his â€žHo-Ohâ€œ after modifying the types.<br /><br />Iâ€˜ll link the reply down here, so hopefully my problem can be solved with your help. As the author states, I need a certain amount of lemonades, corresponding to the PokÃ©monâ€˜s types it should get, but how do I know how many lemonades are equivalent to which Type?<br /><br />The pokemon i want to generate are most importantly Phanpy (Ground, Missigno Index 122), Skarmory (Steel/Flying, Missigno Index 94), Ledyba (Bug/Flying, Index 204) and Delibird (Ice/Flying, Index 86).<br /><br />I donâ€˜t know if it is relevant or not, since I am using German Version, if I wanted to change the OT of Mew to GF, I read that it would be recommended to use Graveler over Onix in the party, so my question is if and adaptions have to be made to make any other code working using a German Version? Especially the Shiny-Code of further interest to me, having a Shiny Ho-Oh would be very very nice.<br /><br />I hope someone can aid me in the process of generating these pokemons via 8F and successfully trade them over to my Gold Version :)<br /><br /><br />[quote author=hashtag link=topic=6638.msg200419#msg200419 date=1463699124]<br />Hey, first post!<br />Using the Wack0&#039;s simple Gameshark script to do a couple things, and i&#039;m curious as to what you are supposed to do when the code requires you to enter a 00<br /><br />for example I have a code that modifies the typing of the current box slot one pokemon. it should look like this<br /><br />any item<br />8f<br />Lemonade * number corresponding to type<br />X-accuracy * 155 for primary type and 156 for secondary type<br />Carbos * 218<br />Pokeball * 119<br />Fresh Water * 201<br /><br />This code works perfectly, and i have used it to replace Aerodactyl&#039;s flying typing with ghost as a proof of concept. the only problem is that when i want to make something a normal type i would have to have 0 lemonades because 00 is the hex that corresponds with normal. I have tried it just without any lemonades and it freezes the game, as expected. Is it possible to make the game read as having 0 lemonades by somehow rolling it over to 256, or anything like that? Thanks!<br />[/quote]


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  Here is the hex ID of every type. <br /><br />00 : Normal<br />01 : Fighting<br />02 : Flying<br />03 : Poison<br />04 : Ground<br />05 : Rock<br />07 : Bug<br />08 : Ghost<br />14 : Fire<br />15 : Water<br />16 : Grass<br />17 : Electric<br />18 : Psychic<br />19 : Ice<br />1A : Dragon<br /><br />As you can guess, you must convert it into decimal for use as the quantity of an item in a 8F code, and you can use [url=http://glitchcity.info/wiki/TypeDex]the full list[/url] to help you. Also, since you&#039;re not playing an english game, you should also convert your code for it to work in the german game. It&#039;s better to explain rather than give the answer, so here&#039;s what you have to do.<br /><br />- Go there: http://datacrystal.romhacking.net/wiki/Pokemon_Red:RAM_map and note the address you want to change. Let&#039;s say that if would be D170 and D171, the types of your current first PokÃ©mon. Note that an address can be represented as a XXYY couple.<br />- Because you play a european non-english game, add 5 to those. You get D175 and D176.<br />- Determine the value you want for these. Let&#039;s say you want your PokÃ©mon to be Flying type, so the value is 02.<br />- Use the following items in an 8F code<br />Anything<br />8F<br />Lemonade *(decimal convertion of the value, in this case of the type&#039;s hex - flying would be 2, but fire, would then be 20)<br />X-accuracy *(decimal convertion of YY, in this case 117 for the first type and 118 for the second)<br />Carbos *(decimal convertion of XX, in this case 209)<br />Pokeball * 119<br />Fresh Water * 201<br /><br />That should do the job. Now if you want the exact equivalent of the code you quote, which modifies the first PokÃ©mon in your PC, then you could apply this to find it!&nbsp; ;)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Str8rush
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Str8rush
icon: xx
body:
  Thank you, that was really helpful. Iâ€˜ll look deeper into that tomorrow. Did I understand it right that I have to have certain PokÃ©mon in my party or do I just need to have these Items in my bag?<br /><br />Edit: since all of the PokÃ©mon I would want to have have two types except for Phanpy being a Ground-only PokÃ©mon, what do I do to â€žremoveâ€œ a second type?<br /><br />By scrolling through the list you linked, I came across the â€žMoveâ€œ section to modify attacks. How does this work, especially for Gen2 Moves, like Sacred Fire for Ho-Oh or Extreme Speed/Curse Dratini? Is there a list of move Indexes or something like that?


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Str8rush link=topic=6638.msg207015#msg207015 date=1506548175]<br />Thank you, that was really helpful. Iâ€˜ll look deeper into that tomorrow. Did I understand it right that I have to have certain PokÃ©mon in my party or do I just need to have these Items in my bag?<br /><br />Edit: since all of the PokÃ©mon I would want to have have two types except for Phanpy being a Ground-only PokÃ©mon, what do I do to â€žremoveâ€œ a second type?<br /><br />By scrolling through the list you linked, I came across the â€žMoveâ€œ section to modify attacks. How does this work, especially for Gen2 Moves, like Sacred Fire for Ho-Oh or Extreme Speed/Curse Dratini? Is there a list of move Indexes or something like that?<br />[/quote]<br /><br />The big hex list provides a translation from hex to certain moves shown here: https://glitchcity.info/wiki/The_Big_HEX_List. Gen-2 specific moves can be put on pokemon prior to trade (tested this with a hidden power alakazam from blue). For single types, the game stores a copy of the type in the second slot, so a ground type looks like&nbsp; Ground/Ground in terms of bytes. if you want 0 of an item, just point your memory loader into the quantity of lemonades, then insert an escape rope x 175 right after the carbos.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Two more things to note, the bootstrap for 8F is written in party pokemon, so your party has to be one of the few that actually work. Also, some gen 2 moves correspond to superglitch moves, so do not view the moves of pokemon you give gen-2 moves to.


subject: Re: Curious about cloning
poster_name: xtreme713ify
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Damn that sucks. They&#039;ve been cracking down on this shit since 3rd gen, but now it&#039;s getting ridiculous.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  As said, there is no such thing as &quot;having only one type&quot;. In fact, you have the same type both, that&#039;s it! So you have to use the same quantity of lemonade with both codes.<br /><br />Please make sure to use a european non-english bootstrap code in your Party. An example would be:<br />Pidgey with 233 HPs currently (not necessarily max)<br />Parasect<br />Graveler<br />Tentacool<br />Kangaskhan<br />no PokÃ©mon<br /><br />With the informations provided by DoubleNegative, you should be able to write item codes to change a PokÃ©mon&#039;s attacks also, in order to put the 1G glitch equivalent of the 2G legit move on it, before trading. His warning about Super Glitch moves is very important because if you look at a Super Glitch move (hex:A6 to hex:C3, either through a battle or the summary of the PokÃ©mon) without taking some precautions, it will cause a global corruption of your game.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Str8rush
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Okay, I think I got it know, mostly. I found this for making PokÃ©mon Shiny by modifying their IVs, using this 8F Item list:<br /><br />any item (any #),<br />8F,<br />Lemonade x170,<br />X Acc x178/177,<br />Carbos x218,<br />Pokeball x119,<br />Fresh Water x201<br /><br />As Carbos and X Acc are refering to XXYY, which would be DA and B1/2. Do I simply add +5 to that, so it would be DA and B6/7? Which would mean I would have to have 182 respectively 183 X Accs?


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  To make a PokÃ©mon have a Normal type, you can have 1 Lemonade, and, either you replace the PokÃ© Balls with a Soda Pop, or you add a &quot;Soda Pop x3&quot; stack between the Lemonades and the PokÃ© Balls (anywhere is fine, just in-between both), or you add a &quot;Great Ball x61&quot; stack with the same position requirement as the Soda Pop x3 stack.<br /><br />(Lemonade x1 sets a to 1, and 61 items/Soda Pop decrements it. Thus, 0 !)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=Str8rush link=topic=6638.msg207021#msg207021 date=1506592802]<br />Okay, I think I got it know, mostly. I found this for making PokÃ©mon Shiny by modifying their IVs, using this 8F Item list:<br /><br />any item (any #),<br />8F,<br />Lemonade x170,<br />X Acc x178/177,<br />Carbos x218,<br />Pokeball x119,<br />Fresh Water x201<br /><br />As Carbos and X Acc are refering to XXYY, which would be DA and B1/2. Do I simply add +5 to that, so it would be DA and B6/7? Which would mean I would have to have 182 respectively 183 X Accs?<br />[/quote]<br /><br />Yes, that would be the way to translate your code to a non-english european game :)


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  can&#039;t get walkthough walls to work https://www.youtube.com/watch?v=1w2iQdAHPh4 it crashes the game


subject: Coin Case Glitch: Hatching Pokemon with Box Code names
poster_name: SpunkyBandy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  https://www.youtube.com/watch?v=NeC36_MhSBA<br /><br />Based from the glitch performed by ChickasaurusGL, this is a glitch no one seems to talk about a whole lot, and I was wondering if I could contribute<br />to this by adding in glitches, plus I&#039;ve seemingly discovered that roaming Pokemon (Raikou, Entei and Suicine) gets completely disabled when performing it with the Coin Case. Tutorials can be found on her video and thank you for re-discovering for such an amazing glitch.<br /><br />List of codes:<br /><br />Celebi code:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2pp055<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Mew code:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2pp0X5<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Turn PokÃ©mon 1 Shiny:<br /><br />Box 1: Ap0&#039;d&#039;vR55<br />Box 2: Ã©&#039;m2pp045<br />Box 3: Ã©A4p0&#039;d&#039;vQ<br />Box 4: Ã©?2p0k55<br />Box 5: 55Ã©A4ppp<br />Box 6: &#039;v7&#039;v&#039;dÃ©42p<br />Box 7: Ã©D9&#039;l&#039;lA&#039;lx<br />Box 8: &#039;d5555555<br /><br />Bulbasaur:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0B&#039;vA<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Charmander:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0E&#039;vA<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Squirtle:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0H&#039;vA<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Omanyte:<br /><br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0K55<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br /><br />Kabuto:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0M55<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br /><br />Articuno:<br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0Q55<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Zapdos:<br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0R55<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Moltres:<br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0S55<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Mewtwo:<br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0W55<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br /><br />Houndour:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0-&#039;v9<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5<br />


subject: Re: Coin Case Glitch: Hatching Pokemon with Box Code names
poster_name: SpunkyBandy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Pikachu code:<br /><br />Box 1: Ap0k&#039;vA55<br />Box 2: Ã©&#039;m2p0Z&#039;vA<br />Box 3: Ã©A4p&#039;v7&#039;v&#039;d<br />Box 4: Ã©(male)2pÃ©D9&#039;l<br />Box 5: &#039;l5555555<br />Box 6: 555A&#039;lx&#039;d5


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=forsyz link=topic=6716.msg207025#msg207025 date=1506607960]<br />can&#039;t get walkthough walls to work https://www.youtube.com/watch?v=1w2iQdAHPh4 it crashes the game<br />[/quote]<br /><br />The reason for this may be a bad emulation problem on the 3DS Virtual Console. I think the OAM DMA exploit (used there for walk through walls) working relies on an obscure hardware detail that only platforms like real hardware or BGB emulator correctly emulate.


subject: Re: Coin Case Glitch: Hatching Pokemon with Box Code names
poster_name: Nostalgia
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  And if you hatch the Pokemon in this way does it register in the Pokedex on the 3DS? I seem to recall it working in the originals. If you just use the coin case to turn one Pokemon into another it doesn&#039;t register - unless you trade and trade back - and for those that have the new 3DS games it&#039;s helpful if they don&#039;t have another game to trade with.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Str8rush
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  One last thing before I get started with everything:<br /><br />Would the code for the attacks be:<br /><br />Any item<br />8F<br />Lemonades * 221 (Sacred Fire e.g.)<br />X Acc * 128 (75 +5 for Move 3)<br />Carbos * 209 (D1)<br />PokÃ©ball * 119<br />Fresh Water * 201<br /><br /><br />And while checking the different values for the typings, I noticed that due to the fact that the Steel Type of Skarmory did not exist in Gen1, there is no value. What do I do with this special case? 


subject: Re: Coin Case Glitch: Hatching Pokemon with Box Code names
poster_name: SpunkyBandy
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Indeed it does register the Pokemon after hatching. And I would consider it immensely less time consuming then item PC box management.<br /><br />Now I&#039;m figuring out how to get version exclusive Pokemon to work and the three Legendary Beasts codenames. (I&#039;m playing on Silver VC btw)


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: DoubleNegative
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  I think it should be 122 not 128. Correct me if i&#039;m wrong, im not used to non-english versions. I think you could replace the steel type with the gen 1 corresponding glitch type. Also, you&#039;re lucky you can actually view the name of sacred fire without superglitch effects. Moves with index between sketch and perish song are the superglitch moves.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: ajxpk
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ajxpk
icon: xx
body:
  Yeah, I remember these sprites. How much I would love to see this beta... <br />I think the Mew software must have been made while they were working on Pocket Monsters Blue. <br /><br />My favorite is [url=http://dogasu.bulbagarden.net/features/pokemon_in_1996/corocoro_comics/05_may_1996/page060-061_mew.png]this one[/url]. ([url=http://dogasu.bulbagarden.net/features/pokemon_in_1996.html]Source[/url])<br />IMO an interesting coincidence that the name of the first Mew Screenshot ever shown has the OT Name ã‚²ãƒ¼ãƒ•ãƒª.<br />The same name you can find as default name in Pocket Monsters Blue.<br /><br />Btw. is there any glitch for the Japanese GS versions to get Celebii? <br />From what I remember the Coin Case glitch was for the English Versions only...<br />So there&#039;s only the bad clone glitch? It&#039;s been a while since I glitched in GS and C.


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Str8rush
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Str8rush
icon: xx
body:
  It seems I got a little bit confused, I used the wrong code. I donâ€™t want pidgey to learn a certain Move but the PokÃ©mon stored in Slot 1. So it would be DAA0 for Move 3 in english and DAA5 in non-english games, resultiert in 218x Carbos and 165 X-Accs. Iâ€˜ll definetely give it a try tomorrow and let you know if it worked or not :-)<br /><br /><br />Edit: Which Type corresponds to the Steel Type in Gen1? I didnt find anything in the lists linked above that made any sense to me.


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: forsyz
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: forsyz
icon: xx
body:
  [quote author=Torchickens link=topic=6716.msg207028#msg207028 date=1506618869]<br />[quote author=forsyz link=topic=6716.msg207025#msg207025 date=1506607960]<br />can&#039;t get walkthough walls to work https://www.youtube.com/watch?v=1w2iQdAHPh4 it crashes the game<br />[/quote]<br /><br />The reason for this may be a bad emulation problem on the 3DS Virtual Console. I think the OAM DMA exploit (used there for walk through walls) working relies on an obscure hardware detail that only platforms like real hardware or BGB emulator correctly emulate.<br />[/quote]<br />i forgot to use the letters with the commas in front my bad it works now on the vc version


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  I&#039;m not sure it is valid for Japanese versions, but for european games, getting Celebi can be performed through:<br />- Bad Clone Trick<br />- Coin Case ACE (english versions only)<br />- TM ACE (requires either a Bad Clone or a 1G game)<br />- Bad Clone ACE (requires a Bad Clone)<br />- Move-0 Type ACE (requires a Red/Blue game)<br />- ????? party overload corruption, either as Daycare data corruption or Roaming data corruption (requires a Bad Clone or any ACE)<br /><br />So yeah, unless you&#039;re able to use a 1G game, you will have to use a Bad Clone. But I think there is another glitch in japanese games using bug contest, no?


subject: Re: Arbitrary code execution in Red/Blue using the &quot;8F&quot; item
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  These are the hex ID of types in 2G games.<br /><br />01-Fighting&nbsp; &nbsp; <br />02-Flying&nbsp; &nbsp; <br />03-Poison&nbsp; &nbsp; <br />04-Ground&nbsp; &nbsp; <br />05-Rock&nbsp; &nbsp; <br />06-Bird (why the heck is this thing still available?) <br />07-Bug&nbsp; &nbsp; <br />08-Ghost&nbsp; &nbsp; <br />09-Steel&nbsp; &nbsp; <br />0A-Normal&nbsp; &nbsp; <br />14-Fire&nbsp; &nbsp; <br />15-Water&nbsp; &nbsp; <br />16-Grass&nbsp; &nbsp; <br />17-Electric&nbsp; &nbsp; <br />18-Psychic&nbsp; &nbsp; <br />19-Ice&nbsp; &nbsp; <br />1A-Dragon&nbsp; &nbsp; <br />1B-Dark&nbsp;  <br /><br />So an educated guess would be that putting 09 as a type in a 1G game (which would be a glitched type appearing as NORMAL) and trading that PokÃ©mon to 2G would make him Steel.


subject: &quot;RESET&quot; option in menu that actually resets the game, what is that
poster_name: aky
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  https://youtu.be/AmTWG3wDYLM<br /><br />I used that&nbsp; glitch in pokemon blue that you turn off at a specific frame while saving for the 1st time and it gives you 255 pokemon (if im not mistaken!!)<br /><br />By moving down the 10th pokemon enough times this menu option pops up instead of save and you cant select anything from the menu if you close it and open it again BUT if you dont close the menu it resets the game?? WTF can you point me to an explanation lol i didnt find anything.... is this some kind of debug feature??


subject: Re: &quot;RESET&quot; option in menu that actually resets the game, what is that
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Krys3000
icon: xx
body:
  [i]Si, sembra essere una debug feature. Probabilmente conosciuta, ma personalmente non sapevo che era possibile. Sul video, hai usato il PokÃ©mon 9 (non il 10) e dovrebbe funzionare con ovunque PokÃ©mon tra 1 e 9. Anzi, se lo fai direttamente con il PokÃ©mon 34 dovrebbe anche funzionare, il resto sembra inutile... e sembra pure normale perche il PokÃ©mon 33 Ã¨ l&#039;inizio della zona memoria controllando i flags. Bella scoperta comunque![/i]<br /><br />Yes it seems that it is a debug feature. Probably known, but I had no knowledge of it. In the video, you use PokÃ©mon 9 (not 10) and it should be working with any PokÃ©mon from 1 to 9. In fact, if you do it directly with PokÃ©mon 34 it should work too, the other steps seem useless... and that seems even normal since PokÃ©mon 33 is the beginning of the memory area controlling flags. Nice finding anyway!


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Also OAM DMA doesn&#039;t rely on any obscure detail, only on a simple feature used by almost all games. It couldn&#039;t be emulated incorrectly, no matter how crappy the emulator.<br />[size=1pt]And god knows the VC is a crappy one.[/size]


subject: Re: &quot;RESET&quot; option in menu that actually resets the game, what is that
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Possibly, meaning the (1-9)-34 switch would change the current mode for a &quot;cable club mode&quot; or something?


subject: Re: &quot;RESET&quot; option in menu that actually resets the game, what is that
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Yeah. The RESET option is not unused, and it replaces SAVE while you are in the Cable Club.<br /><br />There is indeed an address you can modify to force it to appear anywhere, but I can no longer remember the details.


subject: Re: PokÃ©mon Gold/Silver Virtual Console glitch confirmation
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  [quote author=ajxpk link=topic=8086.msg207034#msg207034 date=1506635980]<br />Btw. is there any glitch for the Japanese GS versions to get Celebii? <br />From what I remember the Coin Case glitch was for the English Versions only...<br />So there&#039;s only the bad clone glitch? It&#039;s been a while since I glitched in GS and C.<br />[/quote]<br /><br />This one should be the easiest method. The Bug-Catching Contest glitch means you don&#039;t have to attempt the cloning glitch wrong (potentially for a long time) for a bad clone.<br /><br />https://www.youtube.com/watch?v=e2d6yZPHJog<br /><br />Though wrong TM/HM pocket, glitch PokÃ©dex mode(?) ACE, Hall of Fame SRAM glitch(?) is also an option for Japanese versions of Gold/Silver. I&#039;m unsure if there is a bad move type ACE in the Japanese versions.


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: spamviech
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=FMK link=topic=6716.msg206982#msg206982 date=1506371666]<br />[quote author=Flandre Scarlet link=topic=6716.msg206958#msg206958 date=1506172698]<br />Is there any method to make a pokemon learn a specific move with the coin case? Mainly so that I could get Aeroblast on Lugia in Gold Version since that isn&#039;t possible otherwise. Using the method where you only use Box Names if possible similar to this video by Torchikens https://youtu.be/NeC36_MhSBA<br />[/quote]<br /><br />It&#039;s most certainly possible -- and actually extremely simple for Aeroblast in particular, though to use any of my Coin Case ACEs you need to do the following first:<br /><br />[code][REQUIRED] One-off code so all future codes don&#039;t need the &#039;return to game&#039; code:<br />Box 1 : Ap0w&#039;vA55&nbsp; &nbsp; (XOR A; OR b6; SUB 0x80)<br />Box 2 : Ã©&#039;m2p&#039;v7&#039;v&#039;d (LD [d2f8], A; XOR A; SUB fd; SUB d0)<br />Box 3 : Ã©A355555&nbsp; &nbsp;  (LD [80f9], A)<br />Box 4+: 55555555&nbsp; &nbsp;  (Safe filler code)<br />Box 13: 5555pÃ©D9&nbsp; &nbsp;  (XOR A; LD [83ff], A)<br />Box 14: &#039;l&#039;lA&#039;lx&#039;d55 (POP DE; POP DE; INC SP; POP DE; OR A; RET NC)<br /><br />Pokemon 5, Move 4 Modifier (Aeroblast) - Box 1, change r to whatever and replace 5555 with &#039;v(Letter)55 or &#039;v(Letter)&#039;v(Letter) when needed:<br />Box 1: Ap0r5555&nbsp;  (XOR A; OR b1)<br />Box 2: Ã©â™‚455555&nbsp;  (LD [efda], A)<br />Box 3+: 55555555<br />Box 13 and 14: Should never be modified after using the required code.[/code]<br />[/quote]<br /><br />I&#039;m having some trouble using your code.<br />Doing the Glitch with the required no further return-to-game code as my boxnames my Game freezes after using the Coin Case.<br />I&#039;m using the same slide-PokÃ©mon and Quagsire as with the (working) Shinify/Turn-Egg-to-Celebi codes from Torchickens&#039; video.<br />Does anyone by chance have a Screenshot/Video of the box-names so I can check if I missed some [b]&#039;[/b] flying around unnoticed.<br /><br />I&#039;m using PokÃ©mon Silver VC if that matters.<br /><br />Oh and out of curiosity:<br />Where on the slide-mon does the code start to run and can you use this to predict success just by looking at stats?


subject: Re: &quot;RESET&quot; option in menu that actually resets the game, what is that
poster_name: Krys3000
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  Well, now we can say it has to be located between $D717 and $D743 (english addresses) to be affected by this switch :)


subject: Re: &quot;RESET&quot; option in menu that actually resets the game, what is that
poster_name: aky
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  So it was the cable club menu after all, I see... <br />Thanks for the answers, I got really excited about thiss


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: Torchickens
icon: xx
body:
  The first party address that the code starts to run is at FA98 (DA98). This is the second byte of the Attack stat experience of PokÃ©mon 3 (the slide PokÃ©mon).<br /><br />Following this is Defense, Speed, Special stat experience as well as DVs, PPs, happiness, PokÃ©rus, level, status, stats. You can probably predict whether the PokÃ©mon will work by looking at the stats but I don&#039;t know the details sadly.<br /><br />Since your slide PokÃ©mon no longer works it&#039;s possible the problem could be due to one of the above variables changing, such as happiness increasing to a &#039;bad&#039; opcode; the solution being to increase or decrease the happiness until it works. Another cause could be if you made your slide PokÃ©mon gain some experience.


subject: Re: Arbitrary code execution in Gold/Silver UE using the Coin Case
poster_name: Torchickens
poster_email: *****@*****
poster_ip: ***.***.***.***
icon: xx
body:
  [quote author=ISSOtm link=topic=6716.msg207043#msg207043 date=1506681891]<br />Also OAM DMA doesn&#039;t rely on any obscure detail, only on a simple feature used by almost all games. It couldn&#039;t be emulated incorrectly, no matter how crappy the emulator.<br />[size=1pt]And god knows the VC is a crappy one.[/size]<br />[/quote]<br /><br />I see. I was thinking about the &quot;RNG Plays PokÃ©mon&quot; 8F code though. It&#039;s an OAM DMA exploit that works on BGB and real hardware but not VBA. However it&#039;s good that the walk through walls exploit works on VC.<br /><br />http://forums.glitchcity.info/index.php?topic=7155.0


subject: ????? party overloading - analysis and exploitation
poster_name: ISSOtm
poster_email: *****@*****
poster_ip: ***.***.***.***
modified_name: ISSOtm
icon: xx
body:
  Krys3000 asked me to take a look at &quot;????? party overloading&quot;. Since that glitch has quite some potential, I figured it would be a good idea to check out how it works, to make developing techniques using it easier.<br /><br />First, let&#039;s quickly recap how it&#039;s done :<br />- Have a ????? (species FF) at the top of a 6-PokÃ©mon party (Example below)<br />[img]http://puu.sh/xLJH4/7fb5545668.jpg[/img]<br />- Use &quot;Move Pkmn w/o Mail&quot; to place a PokÃ©mon on the first party slot<br />- Select &quot;Withdraw&quot; and start withdrawing PokÃ©mon, which can be done even though there are more than 6.<br />Each PokÃ©mon withdraw will overwrite an area of memory, such as roaming PokÃ©mon structs, etc.<br /><br /><br />Now, I&#039;m going to explain how it works, so you can get an idea on this glitch&#039;s internals.<br /><br />I&#039;ll use Crystal as a reference because it&#039;s way more documented (disassembly-wise) than Gold/Silver, and the glitch works there too.<br />As to how the glitch works, there are two culprits :<br /><br />The first culprit is [url=https://github.com/pret/pokecrystal/blob/217b7b8d9ba0d243ccbd9d4ae0a5b3ac7ab856e8/engine/billspc.asm#L1455]CopyBoxmonSpecies[/url]. This function copies the target &quot;box&quot; (the party is considered a box there), and updates wBillsPC_NumMonsInBox to contain the correct number of PokÃ©mon. Problem is, the function stops its copy as soon as it finds a $00 or $FF byte (I&#039;m not sure why the programmers decided that both of these would be terminators, but... that&#039;s how it works !). Thus, only the $FF PokÃ©mon&#039;s species is copied into the buffer, which tricks [url=https://github.com/pret/pokecrystal/blob/217b7b8d9ba0d243ccbd9d4ae0a5b3ac7ab856e8/engine/billspc.asm#L1612]BillsPC_CheckSpaceInDestination[/url] into thinking there are exactly 0 PokÃ©mon into our party.<br />Because this function is meant to allow or refuse transfers to our party, it will let us obtain a party containing more than 6 PokÃ©mon. This lets us slide into part 2...<br />(I didn&#039;t investigate more &quot;Move PkMn w/o Mail&quot;, and I don&#039;t think it would yield a very different corruption than Withdrawing. I may be wrong, though.)<br /><br />The second culprit is [url=https://github.com/pret/pokecrystal/blob/master/engine/move_mon.asm#L437]SentGetPkmnIntoFromBox[/url] (names like that can&#039;t be made up), which is called by [url=https://github.com/pret/pokecrystal/blob/master/engine/billspc.asm#L1874]TryWithdrawPokemon[/url].<br />This function is responsible for moving PokÃ©mon around (party, boxes, Daycare). Here, it&#039;s called with wPokemonWithdrawDepositParameter being 0, which prompts it to [url=https://github.com/pret/pokecrystal/blob/master/engine/move_mon.asm#L448]check if the party isn&#039;t full[/url]. Unfortunately (for the programmers), the check only checks if there are [url=https://github.com/pret/pokecrystal/blob/master/engine/move_mon.asm#L467]EXACTLY 6 PokÃ©mon in the party[/url] !<br />Because &quot;part 1&quot; allowed us to obtain a 7-PokÃ©mon party, the check returns non-zero and we are allowed to nicely proceed.<br /><br /><br />For the rest of this explanation, I&#039;ll use a small shortcut : N will represent the number of PokÃ©mon in the party prior to withdrawing.<br /><br />So, what happens when we withdraw a PokÃ©mon ?<br />First, the game writes the PokÃ©mon&#039;s species at (DCD8 + N).<br />Then it writes a $FF at (DCD8 + N + 1) to properly terminate the list.<br />Then, it copies the boxed PokÃ©mon&#039;s data (0x20 bytes) to (DCDF + N * 0x30)<br />[ApartÃ© : a boxed PokÃ©mon is 0x20 bytes large ; a party PokÃ©mon is 0x30 bytes large, the first 0x20 being the same bytes as its boxed counterpart, with the remaining 0x10 bytes being the status, an unused byte, and the stats]<br />Then, it copies the PokÃ©mon&#039;s OT name (11 bytes) to (DDFF + N * 11).<br />Then it copies the PokÃ©mon nickname (11 bytes) to (DE41 + N * 11).<br />The game then calculates its level, resets its status, and writes its stats. It also sets its HP to its max HP (except if it&#039;s an egg, then it sets HP to 0).<br /><br /><br />[b]SO ! Let&#039;s recap the corruption that occurs.[/b] Here&#039;s a handy list of all the writes that occur, by order of appearance ([u]meaning some could override others !![/u]) :<br />(Note : I&#039;m not certain about endianness, but assume big-endian unless otherwise stated)<br />[table][tr]<br />[td][b]Start[/b][/td][td][b]| End[/b][/td][td][b]| Content[/b][/td]<br />[/tr]<br />[tr]<br />[td]DCD8 + N[/td][td]| DCD8 + N[/td][td]| Species[/td]<br />[/tr]<br />[tr]<br />[td]DCD8 + N + 1[/td][td]| DCD8 + N + 1[/td][td]| $FF[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30[/td][td]| DCDF + N * 0x30[/td][td]| Species[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 1[/td][td]| DCDF + N * 0x30 + 1[/td][td]| Held item[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 2[/td][td]| DCDF + N * 0x30 + 2[/td][td]| Move 1[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 3[/td][td]| DCDF + N * 0x30 + 3[/td][td]| Move 2[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 4[/td][td]| DCDF + N * 0x30 + 4[/td][td]| Move 3[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 5[/td][td]| DCDF + N * 0x30 + 5[/td][td]| Move 4[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 6[/td][td]| DCDF + N * 0x30 + 7[/td][td]| OT ID[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 8[/td][td]| DCDF + N * 0x30 + 10[/td][td]| Experience[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 11[/td][td]| DCDF + N * 0x30 + 12[/td][td]| HP stat experience[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 13[/td][td]| DCDF + N * 0x30 + 14[/td][td]| ATK stat experience[/td]<br />[/tr]<br />[tr]<br />[td]DCDF + N * 0x30 + 15[/td][td]| DCDF + N * 0x30 + 16[/td][td]| DEF stat experience<br />[/td]<br />[/tr]<br />[tr][td]DCDF + N * 0x30 + 17[/td][td]| DCDF + N * 0x30 + 18[/td][td]| SPD stat experience<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 19[/td][td]| DCDF + N * 0x30 + 20[/td][td]| SPE stat experience<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 21[/td][td]| DCDF + N * 0x30 + 22[/td][td]| DVs<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 23[/td][td]| DCDF + N * 0x30 + 23[/td][td]| Move 1 PP<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 24[/td][td]| DCDF + N * 0x30 + 24[/td][td]| Move 2 PP<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 25[/td][td]| DCDF + N * 0x30 + 25[/td][td]| Move 3 PP<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 26[/td][td]| DCDF + N * 0x30 + 26[/td][td]| Move 4 PP<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 27[/td][td]| DCDF + N * 0x30 + 27[/td][td]| Happiness<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 28[/td][td]| DCDF + N * 0x30 + 28[/td][td]| PokÃ©rus status<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 29[/td][td]| DCDF + N * 0x30 + 30[/td][td]| Caught data<br />[/td][/tr]<br />[tr][td]DDFF + N * 11[/td][td]| DDFF + N * 11 + 10[/td][td]| OT name[/td][/tr]<br />[tr][td]DE41 + N * 11[/td][td]| DE41 + N * 11 + 10[/td][td]| Nickname[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 31[/td][td]| DCDF + N * 0x30 + 31[/td][td]| Level<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 32[/td][td]| DCDF + N * 0x30 + 32[/td][td]| Status<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 34[/td][td]| DCDF + N * 0x30 + 35[/td][td]| Max HP (or 0 if Egg)<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 36[/td][td]| DCDF + N * 0x30 + 37[/td][td]| Max HP<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 38[/td][td]| DCDF + N * 0x30 + 39[/td][td]| Attack stat<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 40[/td][td]| DCDF + N * 0x30 + 41[/td][td]| Defense stat<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 42[/td][td]| DCDF + N * 0x30 + 43[/td][td]| Speed stat<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 44[/td][td]| DCDF + N * 0x30 + 45[/td][td]| Special attack stat<br />[/td][/tr]<br />[tr][td]DCDF + N * 0x30 + 46[/td][td]| DCDF + N * 0x30 + 47[/td][td]| Special def stat<br />[/td][/tr]<br />[/table]<br /><br />This is quite interesting in Crystal, because these are located very near the end of WRAM, thus near the beginning of Echo RAM. At the beginning of Echo RAM is the stack, which could allow for another ACE method ! My next goal is to research ACE on Crystal using this.<br /><br /><br />Shoutouts to SMF for not allowing borders on their tables. Geniuses.


