Coin Case glitches

From Glitch City Wiki
Revision as of 12:15, 7 March 2017 by >Torchickens
Jump to navigation Jump to search
Major glitches of the Pokémon series


Arbitrary code execution

0x1500 control code arbitrary code execution (Crystal) | Cart-swap arbitrary code execution | Generation I custom map script pointer | Generation I invalid meta-map scripts | Generation I item ("8F", "ws m", "-g m", "5かい", "てへ" etc.) | Generation I move ("-", "TM42") | Generation I Trainer escape glitch text boxes | Generation II bad clone | Generation II Burned Tower Silver | Japanese Crystal Pokémon Communication Center SRAM glitches | Coin Case glitch | Generation II glitch Pokédex sortings | Pikachu off-screen glitch ACE | OAM DMA hijacking | Pikachu glitch emote | Generation III glitch Pokémon summary | Generation III glitch move animation) | Remote code execution | TM/HMs outside of the TM/HM pocket | ZZAZZ glitch Trainer FC


No further extensions

Cloning | Item duplication glitch (Generation I) | Pokémon merge glitch ("Q Glitch", Generation I) | Time Capsule exploit | Bug-Catching Contest data copy glitch (Generation II, Japan only) | Berry glitch | Battle Tower Lati@s glitch (Generation III) | (Mimic) Transform Rage glitch (Generation IV)

Transform held item glitch (Generation IV, Japan only) | Mimic glitch (Generation IV, Japan only)


Buffer overflow techniques

99 item stack glitch | LOL glitch | Rival LOL glitch | Instant LOL glitch | RAM LOL glitch | Out of bounds LOL glitch | blockoobLG | Instant encounter infinite chain glitch | LGFly | Super Glitch (Generation I) | Party remaining HP glitch | Super Glitch (Generation III) | Text pointer manipulation mart buffer overflow glitch | CoolTrainer♀-type move | Double distort CoolTrainer♀ corruption | Yami Shop glitch | Party Pokémon box data shift glitch | Unterminated name glitch item instant encounter (Japanese Red/Green)


Item stack duplication glitch (Generation I)

Generation I expanded items pack (Glitch Rocket HQ maps, Map FE (English and non-English European Yellow) | Map script pointer manipulation (arbitrary code execution | Map script pointer item ball manipulation) | Text pointer manipulation (arbitrary code execution | Item ball manipulation | Mart buffer overflow) | Trainerless instant encounter glitch


Bad clone glitch (Generation II)

????? party overloading (Type 0xD0 move glitch | ????? map corruption | Celebi trick | Celebi Egg trick | Shiny Celebi trick | Glitch move map corruption | Overloaded party map corruption | Glitch Unown (Glitch Unown map corruption) | Duplicate key items glitch (Infinite items and item creation, Expanded Balls pocket (Wrong pocket TM/HMs, Glitch Pokédex categories))


Closed menu Select glitches (Japanese Red/Green)

Dokokashira door glitch (International) | Fossil conversion glitch (international) | Second type glitch | Skip to Level 100 glitch | Trainer mutation glitch | Walk through walls (International) | Lift glitch | Badge describer glitch


Pomeg glitch (Generation III)

Pomeg data corruption glitch ("Glitzer Popping") | Charm glitch


Voiding (Generation IV)

Tweaking

Broken escalator glitch (Japan only) | Elite Four door glitch (Japan only)


2x2 block encounter glitches (Generation I)

Left-facing shore tile glitch (in-game trade shore encounter trick, Old man trick, Trade link up shore encounter trick, Fight Safari Zone Pokémon trick) | Viridian Forest no encounter grass tiles glitch


Glitch City

Safari Zone exit glitch | RAM manipulation | Out of bounds Glitch City (Generation II) | Slowpoke Well out of bounds corruption (French Gold/Silver/Crystal)


Large storage box byte shift glitch

Storage box remaining HP glitch | Generation I max stat trick


Pikachu off-screen glitch

Trainer corruption glitch


SRAM glitches

Generation I save corruption | 255 Pokémon glitch | Expanded party encounter table manipulation (Generation I) | Send party Pokémon to a new game (Generation I) | Generation II save corruption | Mailbox glitches | Mystery Gift item corruption | Trainer House glitches


Trainer escape glitch

Death-warp | Ditto trick | Experience underflow glitch | Mew trick | Text box ID matching | Meta-map script activation


Walk through walls

Ledge method | Museum guy method | Rival's effect | Select glitch method (International Select glitch method), Brock Through Walls


Surf down glitch

Grass/rock Surfing glitch (Spanish/Italian only) (adaptions: Submerge glitch (international)) | 8 8 (0x7C) grass/rock surfing glitch (English Red/Blue))

(view, talk, edit)
This article is a summary page for different variations of a glitches, etc. when talked about as a whole.
This article is incomplete. Please feel free to add any missing information about the subject. It is missing: {{{1}}}.
A glitch dimension caused by listening to Machop or Bellsprout's cry then viewing the Coin Case.

The Coin Case glitch is a glitch that is exclusive to the English versions of Pokémon Gold and Silver. It does not exist in any other localization of the game, such as the Japanese version, and it does not exist in Pokémon Crystal.

The Coin Case glitch was previously thought to be relatively useless, with things like Glitch Dimensions, 'glitchy coin counts' and freezes, being the only effects found, however, after Sanky and TheZZAZZGlitch researched the glitch, it was found that is possible to execute execute arbitrary code with it to do many things which began with exploits such as causing a custom message to be displayed by the Coin Case, warping to Mt. Silver and enabling Red, and obtaining Celebi or a ????? (FF).

Cause

In the Japanese versions of Pokémon Gold and Silver, after the hiragana 'まい' in the dialog "あなたの コイン (n)まい" (your number of coins) appears, a hex:57 control character is used (at offset 0xF9FE, in both versions, and in both revisions v1.0 and v1.1), and it is valid as a terminator in these versions.

The hex:57 character is still used as a terminator for "Coins: (x)" in the English versions (at offset 01985B0), but it is no longer a valid terminator there. The game jumps into memory at echo RAM address E112, which is essentially C112 and executes arbitrary code from there. This section of the memory can be changed by listening to cries, but if the player didn't listen to any cry, it is mainly 00, so 'nothing happens'.

When the player listens to a certain Pokémon cry before using the Coin Case, the game will execute code that has a noticeable effect, including glitch dimensions, altered number of coins text and freezes, due to the data no longer being mainly 00.

Machop, Bellsprout and other Pokémon's cries are special because they put a hex:33 at ECHO:E117. This is read as the opcode 'inc sp' (increment stack pointer) causing the next 'ret' (return) to go elsewhere, specially to EB12, which contains overworld data. Even though there is no known way to predict the contents of this data, the results are consistent if you move in a specific pattern.

By having useful overworld data here, which can be manipulated by moving around, it is possible for the game to jump to an address that can reasonably be manipulated (i.e. to make the game jump to at least[clarification needed] ECHO:FA98 (essentially DA98), which is the second byte of the third Pokémon's attack stat experience).

This glitch was patched in language versions later than the English version and never occurred in the original Japanese versions; Kin/Gin. Foreign versions other than the Japanese versions use the valid hex:50 terminator instead of a hex:57 'terminator' in at least the French, German, Italian and Spanish versions. While Pocket Monsters Kin/Gin use a hex:57 character, it is a valid terminator here.

It does not exist in English Pokémon Crystal, which also uses the correct 50 terminator (at offset 1C5C88).

(Thanks to Sanky from the forums for the explanation, Wack0 for pointing out the changes to 50 in foreign non-Japanese versions and Torchickens for noticing there is a 57 as a terminator in the Japanese version)

Get Celebi with Coin Case arbitrary code execution

YouTube video by TheZZAZZGlitch


This trick allows you to change the recipient byte of a Pokémon in Day-Care south of Goldenrod City to hex:FB, the same as Celebi. It was made by TheZZAZZGlitch.

Since withdrawing a Pokémon from Day-Care makes the game match the donor byte to the value in the recipient byte, it will be a perfectly stable Celebi when it is withdrawn.

Requirements

This glitch requires specific items in the player's item storage system (see below), and they need to be in the exact order they appear in the table, from top to bottom. For this trick, when it is done correctly, the last jump the game makes will be to the address which governs the item storage system's quantity of the second item (D61A).

Item Quantity
[ANY ITEM] [ANY QUANTITY]
[ANY ITEM] x38
TM27 x2
Fresh Water x42
Lovely Mail x1
HM07 x1
Poke Ball x65
Great Ball x4
Everstone x1
[ANY ITEM] [ANY QUANTITY]
Surf Mail x51
Full Heal x18
Flower Mail x46
HM03 x1
X Speed x1
TM06 x1
[ANY ITEM] [ANY QUANTITY]
TM41 x1

When the items above exist in the PC, the player will also need in the party:

  • A freshly caught low level Pokémon.
  • A Quagsire holding a HP UP, with Sleep Talk as the first move.
  • Any Pokémon (this will become Celebi).

The player also needs:

  • The Coin Case
  • A Pokémon including Bellsprout, Machop, Machoke or Omanyte registered in the Pokédex.
  • Access to the Pokémon Day-Care on Route 34 and New Bark Town via Fly.

Steps

First confirm that you meet the requirements above.

  1. Put the low level Pokémon in your third slot. Put your Quagsire in your 4th slot. Put the chosen Pokémon (which will become Celebi) in your first slot.
  2. Fly to New Bark Town and enter Prof. Elm's lab. Save and reset.
  3. Step out of Prof. Elm's lab, take four steps right (so you are below the tree), then open the Pokédex and listen to either Bellsprout, Machop, Machoke or Omanyte's cry.
  4. Exit the Pokédex, and open the items pack and switch over to the Key Items pocket. Switching pockets before viewing the Coin Case after listening to the cry in the current session is important, otherwise the trick won't work properly.
  5. Use the Coin Case. If you followed the steps properly the game won't cause a glitch dimension or freeze.
  6. Fly over to Goldenrod City and walk south to the Pokémon Day-Care Center. Enter it.
  7. Deposit the chosen Pokémon (do not deposit another Pokémon) with the Day-Care man or lady and get it back to get Celebi. Its name will not be changed (e.g. it may be still called 'Rattata'), so you will have to rename it at the Name Rater in Goldenrod City north of the Magnet Train station. It will also have its old moves, but you can remove illegal moves at the Move Deleter in Blackthorn City at the house west of the Poké Mart.

Get ????? (FF) with arbitrary code execution

To get ????? (FF), you can do the exact same Celebi trick described above, but with two extra stacks of Great Ball x4 below the first one (item 8). This is because Great Ball x4 corresponds to two of the opcodes 'inc b' (as one address is for the item identifier, and another is for the quantity), and the opcode 'inc b' increases the register 'b' by one. Normally the result here is FB; Celebi's index number, but having two extra Great Ball x4 adds four inc b, and FB + 4 = FF, which is ????? (FF)'s index number.

"Hello world" program

Some parts of this article have not yet been fully reviewed by a member of this wiki's staff or QC team.

Data from the Internet can be inaccurate or false, and it is easy to misremember information. For this reason there is more likely to be incorrect information in this article. This template will be removed once the information is peer-reviewed and tested by a staff or QC member.


YouTube video by TheZZAZZGlitch


This trick was made by TheZZAZZGlitch and lets the player change the 'number of coins' to a Pokémon's nickname.

Requirements

Like the Celebi trick described above, this trick requires certain items in the PC, and the order matters. They are listed below.

Item Quantity
[ANY ITEM] [ANY QUANTITY]
[ANY ITEM] x38
TM27 x2
Nugget x1
[ANY ITEM] [ANY QUANTITY]
Surf Mail x46
Charcoal x1
[ANY ITEM] [ANY QUANTITY]
Squirtbottle x1
[ANY ITEM] [ANY QUANTITY]
Leaf Stone x1
[ANY ITEM] [ANY QUANTITY]
Ice Heal x62
Revive x7
Lovely Mail x60
Ultra Ball x34
Flower Mail x51
Max Repel x43
TM37 x1
[ANY ITEM] [ANY QUANTITY]
Full Heal x18
Portraitmail x46
HM03 x1
[ANY ITEM] [ANY QUANTITY]
TM41 x1

Like the species changing trick described above, a freshly caught low level Pokémon is needed, as well as a Quagsire holding a HP UP with Sleep Talk as its first move. Other requirements include the stored items above, the Coin Case, access to the Name Rater in Goldenrod City and the ability to use Fly to Goldenrod City and New Bark Town.

Steps

  1. Put the low level Pokémon in the third slot.
  2. Put the Quagsire in the fourth slot.
  3. Go to the Name Rater north of the Magnet Train station and change the first Pokémon's nickname to something that is 10 characters ('AAAAAAAAAA' is used in the video).
  4. Afterwards, change the nickname of the first Pokémon to something nine characters long, which will be what you want the Coin Case to display.
  5. Fly to New Bark Town and enter Prof. Elm's laboratory, save the game and reset.
  6. Exit the lab, take four steps right (so you're below the tree), then open the Pokédex and listen to Machoke's cry (other cries like Bellsprout may work, but they are unconfirmed).
  7. Switch to the Key Items pocket (it is important that you do the switch after listening to the cry and before using the Coin Case), then use the Coin Case.
  8. The first Pokémon's nickname will be displayed under 'Coins:' instead of the current amount of coins.

Known 'random' but consistent effects

This section lists effects that happen randomly, but may happen consistently after a player listens to a Pokémon's cry.

A Pokémon listed under any of these effect headers does not mean it will always cause the effect, but simply that it may without further manipulation.

The effects here happen for:

Saving the game and resetting next to the Machop in Vermilion City, and not moving before or after listening to the Pokémon's cry. But they commonly happen in other circumstances.

Glitch Dimension

Main article: Glitch Dimension

This was one of the first known applications of the glitch, and the described requirements were talking to the Machop flattening out the land in Vermillion City and then using the Coin Case.

However, the player does not need to talk to that particular Machop; the cry of any Machop may cause the same effect (not when following one of the arbitrary code execution steps described in earlier sections).

The cries of the following Pokémon in the Pokédex can be used to start a Glitch Dimension.

  1. Bulbasaur[citation needed]
  2. Caterpie[citation needed]
  3. Metapod[citation needed]
  4. Weedle[citation needed]
  5. Kakuna[citation needed]
  6. Beedrill[citation needed]
  7. Pidgey[citation needed]
  8. Arbok[citation needed]
  9. Pikachu[citation needed]
  10. Raichu[citation needed]
  11. Nidoran♀[citation needed]
  12. Nidorina (without switching item pockets)
  13. Nidorino[citation needed]
  14. Clefairy (may require not having switched items pockets)
  15. Clefable (may require not having switched items pockets)
  16. Vulpix[citation needed]
  17. Ninetales[citation needed]
  18. Jigglypuff[citation needed]
  19. Wigglytuff[citation needed]
  20. Zubat[citation needed]
  21. Oddish[citation needed]
  22. Paras[citation needed]
  23. Diglett[citation needed]
  24. Dugtrio[citation needed]
  25. Psyduck[citation needed]
  26. Mankey[citation needed]
  27. Poliwhirl[citation needed]
  28. Abra[citation needed]
  29. Machop
  30. Machoke
  31. Machamp[citation needed]
  32. Bellsprout (works like Machop)
  33. Tentacool[citation needed]
  34. Geodude[citation needed]
  35. Magnemite[citation needed]
  36. Farfetch'd (after switching item pockets)
  37. Doduo[citation needed]
  38. Seel[citation needed]
  39. Drowzee[citation needed]
  40. Krabby[citation needed]
  41. Voltorb[citation needed]
  42. Hitmonlee[citation needed]
  43. Horsea
  44. Meganium (without switching item pockets)
  45. Cyndaquil[citation needed]
  46. Totodile[citation needed]
  47. Croconaw[citation needed]
  48. Natu[citation needed]
  49. Xatu[citation needed]
  50. Mareep[citation needed]
  51. Flaaffy[citation needed]
  52. Miltank[citation needed]
  53. Celebi

"Which move?he PP of." (Dratini glitch)

This effect is also known as the "Dratini glitch". It will cause the text "Coins:Which move?PP of." to pop up after viewing a certain cry and using the Coin Case. This text is long enough to go outside of the text box border.

The following cries have been confirmed to work:

  1. Charmander
  2. Charmeleon
  3. Squirtle
  4. Wartortle
  5. Butterfree
  6. Ekans
  7. Sandshrew
  8. Gloom
  9. Dratini
  10. Articuno
  11. Moltres
  12. Larvitar

"Which move?"

This effect will cause the text 'Coins:Which move?PP of.' to pop up after viewing a certain cry, not switching item pockets, and using the Coin Case.

The cries of the following Pokémon have been confirmed to work.

  1. Venusaur
  2. Dragonair
  3. Ho-oh
  4. Lugia
  5. Tyranitar
  6. Pupitar

Other effects

Other Coin Case glitch effects include game freezes and 'random' tiles being placed on the screen. The effects may depend on whether the player switched item pockets before viewing the Coin Case.

Here is a list of Pokémon that can cause effects other than a Glitch Dimension or the effects 'which move?he PP of.' or 'Which move?':

  1. Clefairy[citation needed]
  2. Clefable[citation needed]
  3. Paras (switching pockets before viewing the Coin Case may cause a different effect, including a tile being placed on the screen)
  4. Dodrio (may require not switching item pockets)
  5. Nidorina (after switching item pockets it may place a tile on the screen)
  6. Farfetch'd (without switching item pockets, it may freeze the game)
  7. Meganium (after switching item pockets the game may print a glitch character after the number of coins)

See also

  1. Arbitrary code execution.
  2. Glitch Dimension - One of the effects which can be caused by a Coin Case glitch.
  3. Game freeze.

External Links