Frame block copier arbitrary RAM modification (Generation I)

Channel:
Evie (ChickasaurusGL) 🌺
Subscribers:
17,700
Published on ● Video Link: https://www.youtube.com/watch?v=Y2fJBTHjTVA


Duration: 2:10
714 views
20

A technique I found to copy battle animation data from one place to another (intended to be in the OAM address from OAM DMA). It currently requires a previous arbitrary code execution method to lock addresses D09C-D09D (destination pointer), and D09E (frame block mode) because otherwise the game will reset these to the indended place (in the C3XX region) and mode.

For example, setting the destination pointer to D300 will corrupt the player's bag after viewing a battle animation (including the glitchy balls animations from Tile Chaos as well).

Bytes at DA7F: 21 82 FF 3E DA 32 3E 8C 32 3E C3 32 C9 21 9B D0 3E D3 22 3E 1D 22 3E 04 22 C9

See https://glitchcity.wiki/wiki/Frame_bl...



Other Videos By Evie (ChickasaurusGL) 🌺


2023-12-19Freeze when returning to the title screen from the file menu (Red/Green JP)
2023-12-19Any% ZZAZZ glitch concept (Generation I silly speedrun concepts)
2023-12-19Starter Pokédex entries owned Ivysaur oversight and a few relevant ACE exploits (Generation I)
2023-12-04Fish/Surf in S.S. Anne wall (water/coast tiles tileset oversight) (Generation I)
2023-11-07Left-facing shore tile (Cinnabar coast glitch) at beginning of game for 'M 00 (no old man, Red/Blue)
2023-11-06Manipulate any Game Corner Pokémon, can also be used for Shiny hunting (Red edition)
2023-11-05Mimic empty moves list lock-up (Generation I)
2023-10-31Loss of OT Gender marker data (Pokémon Crystal w/Generation I)
2023-10-31Static paralysing both sides after Double Kick (Ruby/Sapphire/FireRed/LeafGreen)
2023-10-31Memory editing exploit (D8BF-E1BE) by naming boxes beyond Box 14 (Generation II ACE)
2023-09-08Frame block copier arbitrary RAM modification (Generation I)
2023-06-20Get any Pokémon w/any move+set of internal types (AncientPower Bulbasaur in video) (No ACE) (Yellow)
2023-06-01The uppercut invulnerability exploit (Game Freak's 1994 Pulseman) (warning: flashing lights)
2023-05-27Exploiting Game Boy Camera's SRAM storage to run minigames via cart swap (w/shoddy "Snek Fly" game)
2023-04-18NamingScreenType (D07D/C) arbitrary code execution (Generation I)
2023-04-18Agatha's badge describer glitch and arbitrary code execution from Antidote badge (Pokémon Red/Blue)
2023-04-18Special text box IDs during Trainer-Fly that work independent of maps (Generation I)
2023-04-18Use DHNhIT4 89 ゥ N (0x74) to obtain the 0xFF PP value without PP underflow glitch (Pokémon Yellow)
2023-03-21Using Dex dump glitch to simulate the expanded party and almost filling our Pokédex (Generation I)
2023-03-21PP copier glitch - Corrupting a Pokémon's nickname and making it over Level 100 (Generation I)
2023-03-21Glitch blackboard text arbitrary code execution (Generation I)