"てへ" and "-g m" arbitrary code execution (Red/Green and Red/Blue)

Subscribers:
17,700
Published on ● Video Link: https://www.youtube.com/watch?v=B1E4msXNaYY



Duration: 10:30
2,818 views
41


Read description for more information:

These are glitch items where it is easier to set up arbitrary code than 8F and 5かい.

As is known, 8F and its Japanese equivalent 5かい (5 Kai) lets you execute arbitrary code in Pokémon Red and Blue from the beginning of party Pokémon data.

Thanks to "memdump" from Glitch City Laboratories forums, we have two alternatives to those items. http://forums.glitchcity.info/index.php/topic,6638.msg196498.html#msg196498

Red/Green, てへ ("Tehe"):

Index number is $7B. Executes code from D806 in both v1.0 and v1.1 of Red/Green. This address represents the wild Pokémon data. When you talk to the old man and watch his demonstration, your name data is stored here after a 00. There is just enough space to make a jump here. The name "(anything)てルめ" makes the game run $C3 $A6 $D2 which in ASM is 'jp D2A6' (3rd item). This means you can run your code in the items without a Pokémon bootstrap code at all! All you have to do once you get the item is talk to the old man and have your code set up.

There is apparently a similar item (hex:7E) that executes code from wild Pokémon data in Red and Blue, but the selection of useful characters in a name is limited in the English versions; you can't have a jump without an invalid name, and I'm not sure if it causes the Yami Shop glitch.

Item $7B works in Japanese Blue like てへ as a long-name glitch item with a different name (note that you may have to use this item in a safe spot with a hex:50/bottom-left corner of a bush tile to avoid a freeze).

-g m:

Index number is $6A. It executes code from DA47, which is hex:39 bytes before DA80, the first stored party Pokémon. Safari Ball data and daycare data is stored between these addresses, so if you've never stored any Daycare Pokémon or entered the Safari Zone, it will work like Yellow's w sm. This is a plus because 8F's specific party Pokémon requirements are harder. '-g m' or ws m only requires species of a certain kind being in a box mainly. It seems more viable to use -g m for a speedrun than 8F.

Here is a working bootstrap code; which the same as one of pigdevil2010's codes for ws m. The only thing that needed porting was changing Growlithe (21) to Onix (22) to get to item 3 (D322), but it would still work with Growlithe, only your item code would start at item 2's quantity:

Tangela with 233 HP
Nidoking
Metapod
Haunter
Flareon
Parasect
Onix
Tentacool
Grimer
Any Pokemon

Getting てへ:

Note, I tried the Yami Shop glitch, but "てへ" turned into a ticket when I bought it :(. Also, $7B (てへ's index number) can't be represented by a valid letter in a Pokémon's name, meaning the item creation glitches wouldn't be suitable unless you had a certain glitch Pokémon with that character in its name, so I hard to settle for the following harder methods.

Method 1)

1) Have a Pokémon name with a 3rd character symbol greater than 1F (so something like 'アアアアア' would work. The 3rd character will represent the number of items you get. Also bring a Pokémon with Teleport and Fly.

2) Press select on the 13th item, enter battle, switch out the Pokémon with the name.

3) Go to Cycling Road, then go to this position. http://i.minus.com/jbzuc95KtPEKG8.png

This is the left-most point you can go from north-south. This spot seems to be easiest for item scrolling, at least for me. It can be a real problem for other places at the same y coordinate.

4) Open the items pack, scroll down and you should see a てへ. Bring it up to the first position, and then Teleport away. You will likely get stuck if you don't teleport.

Method 2):

Do the number of items underflow glitch (https://www.youtube.com/watch?v=w4Yr2Nz4rFU) and then do the previously mentioned steps 3 and 4.

Getting -g m:

Thanks TheZZAZZGlitch for the basic idea. https://www.youtube.com/watch?v=98_azamLeh4

1) Do the number of items underflow glitch with an X Special x255 in the second position.
2) Fly to Celadon City, and go to the east-most corner of the map (before the palette changes/the Town Map says you're in Route 7.
3) Toss 255 X Special, and then switch it with the Nugget x1 (35th item). Keep the cursor in this position. It represents the x coordinate.
4) Keep walking right to increase the x coordinate byte until it's equal to -g m (hex:6A). When I got to the right spot the map looked like this. http://i.minus.com/jbnXpNklZfdjaI.png
5) Swap -g m to the top of the items list to keep it, then fly away.




Other Videos By Evie (ChickasaurusGL) 🌺


2014-11-01New line arrow glitch (Emerald, FireRed/LeafGreen)
2014-10-25Freeze status 0 PP move selection glitch (Generation I)
2014-10-25Hyper Beam and switch PP underflow glitches + PP reset trick (Generation I)
2014-10-19CoolTrainer♀ forced 'instant' victory glitch (Pokémon Red/Blue)
2014-10-18"Coin Case music box", a cool coincidence (Pokémon Gold and Silver EN only)
2014-10-12Effects of visiting glitch map 0xFE with a freeze workaround (Pokémon Yellow)
2014-10-08Using a Super Glitch item and battle escape item to get Pokémon ("LOL glitch") Gen I
2014-10-06Glitch Poké Ball throwing effects caused by invalid D057/6 values (Generation I)
2014-10-01Fuchsia City misplaced 'sign' text (Generation I)
2014-09-30Yet another Coin Case trick - Infinite Rare Candies (Pokémon Gold/Silver EN only)
2014-09-29"てへ" and "-g m" arbitrary code execution (Red/Green and Red/Blue)
2014-09-02Trainer mutation glitch (Red/Green/Blue JP)
2014-09-01ゃパ (hex:DC)'s evolution into Mew (Pokémon Red/Green JP)
2014-08-30"Blind Pikachu" without cheats (Pokémon Yellow)
2014-08-29Text pointer encounter manipulation (Generation I)
2014-08-29Vivillon Wonder Card glitch (Pokémon X and Y)
2014-08-20Guide music in a building (Generation I)
2014-08-19"Brock Through Walls" - Youngster path manipulation and walk through walls (Red/Blue)
2014-08-17Custom map script (Generation I, arbitrary code execution)
2014-08-13Hex:F0's conditionally infinite name (Pokémon Roja y Azul ES)
2014-08-12Play battle music and non-Champion win music out of battle (Generation I)



Tags:
Pokémon
Red
Blue
Green
Midori
Aka
glitch
bug
Pokemon



Other Statistics

Pokémon Red and Blue Statistics For Evie (ChickasaurusGL) 🌺

Currently, Evie (ChickasaurusGL) 🌺 has 1,628,878 views for Pokémon Red and Blue across 241 videos. There's over 1 day worth of watchable video for Pokémon Red and Blue published on his channel, or 21.83% of the total watchable video on Evie (ChickasaurusGL) 🌺's YouTube channel.