Jump to content

Dex dump glitch: Difference between revisions

no edit summary
(Created page with "The '''Dex dump glitch''' is a buffer overflow glitch in Generation I which occurs with very long unterminated Pokédex entries, due to the game attempting to print characters for the Pokédex category off the screen. The first character in the Pokédex category corresponds with memory address 0xC3F9 (wTileMap+0x59), but very long Pokédex categories exceed the wTileMap buffer, so corrupt unrelated memory addresses. ==Example and requirements== [...")
 
No edit summary
 
(4 intermediate revisions by 2 users not shown)
Line 20:
*Entering the Hall of Fame with only a Level 80 (0x50 in hex) Pokémon in slot 1 on induction number 37 (this is before the B372 which would corrupt CD6B (wJoyIgnore) with 0xFF), ideally entering the Hall of Fame on induction number 36. This should also be done in an unintended way to avoid terminating bytes earlier in the memory. The player should have never entered the Hall of Fame before, but enter it after altering the quantity of PC item 52 to x36 (D5A2=0x24), tricking the game into writing the 37th entry without overwriting entries 1 through 36.
 
After setting these preparations, glitch Pokémon 0xDC can be caught with [[Rival LOL glitch]]. This glitch has its own requirements, namely (for example) a six letter long rival name, Master Balls, [[ItemDex/RB:094|9F (0x5E)]] and [[ItemDex/RB:158|4# 8# 4# 8# #H##### (0x9E)]]; these items can be dug up from the expanded item pack and the [[Celadon looping map trick]] can be used if the player can't find them. Additionally, the player may want to use the [[TM52 (glitch item)ItemDex/RGBY:252|TM52]] on Route 1 to teach a Pokémon Fly, and adjust item 29 (wObtainedBadges) to enable flying away (a Pokémon with Teleport, Dig, or the Escape Rope item can also be used; for using Escape Rope to escape from Fuchsia City, change item 37 quantity wCurMapTileset to e.g. 3).
 
This Dex dump glitch corrupts data before CD6B, including the current position of the cursor menu. The player can go into the Pokémon menu and simulate the [[expanded party]], similar to [[No expanded party international Select glitching|this map size memory corruption glitch]]. One example of a use is swapping Pokémon 144 with Pokémon 10, which may give the player a lot of Pokédex entries (but not all of them).
 
==Corruptions up to 0xBFFF (single-length characters, no terminator)==
This is for glitch Pokémon 0xDC's corruption in Pokémon Red and Blue. In practice, the game may freeze (such as the previously mentioned corruption of CD6B disabling controls) but with a specifically crafted save file more powerful corruptions may be possible.
 
{| class="wikitable"
! Modification !! SRAM to change
|-
| 0xC3F9 || 0xAA00
|-
| 0xC3FA || 0xAA01
|-
| ... || ...
|-
| ''addr'' (any address in-between) || ''addr'' - 0x19F9
|-
| ... || ...
|-
| 0xD9F8 || 0xBFFF
|}
 
==YouTube video==
182

edits

Cookies help us deliver our services. By using our services, you agree to our use of cookies.