ItemDex/RB:085
(↑ Back to the ItemDex index.)
Name (transcribed): B1F Identifier (HEX): 55 Identifier (DEC): 085 Effect pointer: A7D0 Unterminated name glitch item?: No Tossable/Sellable?: Yes Buy Price: 0 Sell Price: 0 Name bytes: {{{9}}}
|
(hex:55) is a glitch item in Pokémon Red and Blue. Its name is taken from lists of lift destinations.
Using this glitch item will execute arbitrary code at A7D0 in the SRAM region. SRAM may be locked resulting in a rst $38 freeze; however, viewing a Pokémon summary in the party just before using the item will unlock the SRAM (in bank 0).
0:A7D0 under normal circumstances
Assuming the Hall of Fame was never corrupted, 0:A7D0 can be touched normally in a reliable way. Hall of Fame data starts at A598 and writes (6*0x10)*N bytes, where N is the number of inductions (up to 0x32/dec:50). Entering the Hall of Fame 6 times will write data up to A7D7, and D2F2 onward is moved into A7D0 onward. This begins from the nickname's seventh character of the sixth Pokémon in the party; so code can be written from there (and redirected with a jump or call for more space, if necessary). If the player has entered the Hall of Fame too many times or wants to skip to the sixth induction, they can change D5A2 (the number of inductions) from the expanded PC items.
However, the available opcodes are limited using a normal Pokémon nickname. It may still be possible to craft the Pokémon nickname without arbitrary code execution or connection copier (connection copier serves as a pseudo-GameShark similar to a RAM write from arbitrary code execution) but a method to do this has not been published yet.
Hall of Fame corruptions
With a specific series Hall of Fame corruptions, it is possible to manipulate the data here to do what the player wants upon using B1F, although the logistics of finding out which corruptions will work can be very difficult without a bot, and it can take many hours just to make simple corruptions that the player wants.
YouTube videos
| |
| |
| |