Re: CoolTrainer (and non hex:00 Super Glitch) yields documentation thread
Posted by: Torchickens
Date: 2015-05-21 12:33:56
You're right; there are a selection of sources; however, I don't know what determines the selection. At the moment for me on a save that won't work (link) the source is always around D2A5 and since this is Trainer name for party Pokémon data there would be 0x50 here. So if the source is not going to change you would have to use arbitrary code execution or maybe get over six Pokémon and swap some with un-terminated names up (with Q above to prevent a freeze) to get it to work.
In BGB, if you set a breakpoint on write to CD6D via Debug>Access breakpoints; you can see that hl is copied into CD6D (where CD6D is 'de'); and this way you can check the source of the name each time.
I got a different selection of hl pointers for another save where the glitch works.
I think it's important to know, so I have just asked TheZZAZZGlitch on Youtube if he can look into where the pointer comes from.