Duration: 1:29

898 views

35

Notes: Inspired by FrostedGeullesia after they modified a randomiser to allow glitch item balls, here is a method to neatly do that with the 4F (0x59) glitch item with arbitrary code execution, except you won't see the item name but effectively get the glitch item. Glitch items such as 0x80 cause the same type of buffer overflow as unterminated name items, CoolTrainer move, etc.;


;At DA65 (FA65) for 4F -
3E C9 EA 80 FF 21 82 FF 3E DA 32 3E 77 32 3E C3 32 C9 3E 50 EA A0 C4 3E 15 EA 7B CE 3E 80 EA 3D CD AF B7 FA D8 CF D6 15 FE 01 38 02 C9 00 3E C9 EA 81 DA C9

We lock C4A0 to 50 to force a 0x50 sub-tile where appropriate to end the corruption, 0x15 to CE7B to force Mew to be written into D059 (instant encounter) during the corruption, and 0x80 into CD3D (pick up item is managed as the 0x80 glitch item or PC). The rest of the code unlocks CD3D after the battle starts, so when we catch Mew the ball doesn't roll 128 (or more?) times.

This could also be seen as similar to a CoolTrainer, LOL glitch (LG), unterminated name item exploit and so on, but that's starting to become overly used.