User talk:MrMissingNo72

From Glitch City Wiki
Jump to navigation Jump to search

This is my talk page, only arbitrary code execution is allowed here.

Artificial trainer classes

NOTE: This is for English Pokémon Yellow only.

Naturally, only 56 trainers can be encountered via the trainer escape glitch (Special stats of 200-255, trainer IDs 0 to 55).


However, with arbitrary code execution, you can encounter artificial trainer classes with the routine at 3D:5FF2 with these very specific items:

1. ws m (0x63), any

2. 4F (0x59), any

3. Lemonade (0x3E), x61

4. Thunderstone (0x21), x242

5. 10F (0x5F), x1

6. X-Special (0x44), x2

7. Max Potion (0x11), x127

8. TM18 (0xDA), x205

9. Item 0x9D, x0

10. TM01 (0xC9), x33

11. Item 0xBB, x218

12. Lemonade (0x3E), x62

13. Water Stone (0x22), x4

14. Lemonade (0x3E), x(class)

15. Water Stone (0x22), x4

16. Lemonade (0x3E), x255

17. TM34 (0xEA), x88

18. TM08 (0xD0), x4

19. Poké Ball (0x04), x6

20. Soda Pop (0x3D), x33

21. Item 0x7F, x218

22. TM05 (0xCD), x132

23. Lemonade (0x3E), x201


Before you use ws m and 4F, make sure the bytes (C3, 21, D3) are located at DA7F and the bytes (C3 30 D3) are at DA64 (FA64).


Code:

For "ws m" (0x63):

- ld a, 3D

- ld hl, 5FF2

- ld bc, 0244

- ld de, DA7F

- call 009D

- ret


This code calls "FarCopyData" with its source being 3D:5FF2, the bytes to copy being 0x244, and the destination as DA7F.


For "4F" (0x59):

- ld hl, DABB

- ld a, 3E

- ldi (hl), a

- inc b

- ld a, (class)

- ldi (hl), a

- inc b

- ld a, FF

- ld (D058), a

- inc b

- inc b

- ld b, 3D

- ld hl, DA7F

- call 3E84

- ret


bytes needed at D31C:

17 63 BE 59 BE 3E 3D 21 F2 5F 01 44 02 11 7F DA CD 9D 00 C9 21 BB DA 3E 3D 22 04 3E xx 22 04 3E FF EA 88 04 06 3D 21 7F DA CD 84 3E C9 FF note: replace "xx" with the desired real trainer class ID in hexadecimal, for example, if you want to fight ゥ, A, replace "xx" with 37 (this value is hexadecimal).

additional notes:
- the three bytes you placed at DA7F and DA64/FA64 are all saved with your save file.

List of arbitrary code execution items

This is a list of arbitrary code execution items.

4F (0x59) in Red, Blue, and Yellow

Effect pointer: FA65 (Red/Blue)/FA64 (Yellow)

Effect pointer is Echo RAM for DA65/DA64.


8F (0x5D) in Red and Blue

Effect pointer: D163

Effect pointer is the number of Pokémon in your party.

7F (0x5C) in Red and Blue

Effect pointer: FA0F

Effect pointer is Echo RAM for DA0F.




Mr. MissingNo. 13:37, 18 June 2023 (UTC)

memory map Red/Blue

This is a full memory map of Red/Blue

[SECTION_ROM]

ROM starts at 0000 and ends at 7FFF.

  • $0000 to $0038 = RST instructions
  • 009D = FarCopyData

[SECTION_VRAM]

VRAM starts at 8000 and ends at 9FFF.

[SECTION_SRAM]

SRAM starts at A000 and ends at BFFF.

[SECTION_WRAM]

WRAM starts at C000 and ends at DFFF.

[SECTION_HRAM]

HRAM starts at FF80 and ends at FFFE. Mr. MissingNo. 21:24, 27 June 2023 (UTC)Reply[reply]

Please stop using your this wiki as your own personal wiki

Hi, I've been watching your usage of our wiki for a bit and after noticing you attempting to clone the GlitchDex in your userpages, I felt the need to step in. Many of your pages are redundant to already existing data on the wiki or outside the scope of our expertise. This is not the intended usage of our wiki or the user spaces. If you wish to add information to our wiki, you are free to do so, but trying to create alternative versions of the wiki in your user space is not appropriate wiki usage. CytricAcid (talk) 01:29, 15 July 2023 (UTC)Reply[reply]