Connection copier

From Glitch City Wiki
Revision as of 16:35, 20 June 2018 by >Torchickens
Jump to navigation Jump to search
Arbitrary code execution in the Pokémon series

0x1500 control code arbitrary code execution (Crystal) | Cart-swap arbitrary code execution | Generation I custom map script pointer | Generation I invalid meta-map scripts | Generation I item ("8F", "ws m", "-g m", "5かい", "てへ" etc.) | Generation I move ("-", "TM42") | Generation I Trainer escape glitch text boxes | Generation II bad clone | Generation II Burned Tower Silver | Japanese Crystal Pokémon Communication Center SRAM glitches | Coin Case glitch | Generation II glitch Pokédex sortings | Pikachu off-screen glitch ACE | OAM DMA hijacking | Serial interrupt ACE | Pikachu glitch emote | Generation III glitch Pokémon summary | Generation III glitch move animation) | Remote code execution | TM/HMs outside of the TM/HM pocket | Type 0xFF mail arbitrary code execution (Japanese Crystal) | ZZAZZ glitch Trainer FC


List of arbitrary code execution programs

(view, talk, edit)
Flying away after applying the changes (and a Glitch City)

Connection Copier is an exploit in Pokémon Red, Blue, and Yellow. It allows the player to copy (x) number of bytes (up to 255) from one location to another, by exploiting how map connections work.

Requirements

1. Expanded items pack

2. Specific items

3. For Red/Blue, 10F (optional)

4. A Pokémon with Fly

Steps

1. Add the following items to the following positions:

Any item x 127 (item 37)

Any item x 250 (item 38)

(Source pointer byte 2 item) x (Source pointer byte 1 quantity) (item 43)

(Destination pointer byte 2 item) x (Destination pointer byte 1 quantity) (item 44)

Item ID representing bytes to copy x 0 (item 45)

2. Save and reset the game (or use 10F), and the game will transfer the data (or code) to the location you told it to.


3. Adjust the quantity of item 37 to x0 to enable Flying away, and then use Fly to escape the Glitch City.

Example

If you want to copy party Pokémon 6's name into your name for Red/Blue, item 43 will be TM36 (0xEC) x 210 (0xD2) (party Pokémon slot 6 name), and item 44 will be 3F (0x58) x 209 (0xD1) (your name).

If you wanted to copy 11 bytes, you would have the item ID in slot 45 as Antidote (item 0x0B, or decimal 11)


Credits

  • Gifvex, luckytyphlosion: Discovery, documentation
  • ChickasaurusGL: Further documentation, text in this article

YouTube video

YouTube video by ChickasaurusGL
This article or section is a stub. You can help Glitch City Wiki by expanding it.