Player coordinates RAM writer: Difference between revisions
Jump to navigation
Jump to search
Content added Content deleted
>Torchickens No edit summary |
>Torchickens (Tidy up and add coordinates image.) |
||
Line 1: | Line 1: | ||
{{incomplete}} |
|||
'''WHAT'S JAIL BREAKING?''' |
|||
Using [[arbitrary code execution]], it is possible to create and run large programs such as homebrew software in a Pokémon game. |
|||
==Using 8F in {{RB}}== |
|||
Jailbreaking is a hack to restart the game with 8F in "any way" you want depending on how many bytes you execute. |
|||
This technique is referred to in TheZZAZZGlitch's video as 'jailbreaking' the Game Boy. |
|||
[http://forums.glitchcity.info/index.php/topic,6638.0.html This post] shows how to obtain 8F. |
|||
⚫ | |||
'''HOW TO JAILBREAK''' |
|||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
===Steps=== |
|||
⚫ | |||
⚫ | |||
⚫ | |||
#There will now be a TM34 x21 instead of x20. |
|||
⚫ | |||
⚫ | #Swap TM17 and TM15 back, toss TM34 until only one of them remains and use a Bicycle. The program is now in 'entering mode', and upon using 8F one byte is written to address D901 (and onward for each use) with its value depending on your X and Y positions where the Y position represents the high nybble and the X position represents the low nybble. For example, a coordinate of y=0C, x=09 would write a C9 (see image below). |
||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
⚫ | |||
Video: |
|||
⚫ | |||
{{youtube|1=D3EvpRHL_vk|2=TheZZAZZGlitch}} |
|||
⚫ | |||
===Route 1 coordinates map=== |
|||
⚫ | |||
This map (below) tells us the coordinates for spots in [[bp:Kanto Route 1|Route 1]] for writing the code.<br> |
|||
[[File:Route 1 coordinates.png]] |
|||
[[Category:Arbitrary code execution]] |
[[Category:Arbitrary code execution]] |