ItemDex/RB:106: Difference between revisions

Jump to navigation Jump to search
A more informative introduction
>Sherkel
No edit summary
>Bbbbbbbbba
(A more informative introduction)
Line 15:
Its name is taken from the untranslated string "ゴールドバッヂ" (GoldBadge) from the Japanese versions, resulting in [[mojibake]] in English versions. ゴールドバッヂ is also the name of the hex:6A glitch item in Japanese versions.
 
This glitch item's effect pointer is DA47 in WRAM, which stores the number of Safari Balls remaining, followed by the Day Care data and stored Pokémon data, similar to Japanese Red/Green/Blue's [[ItemDexJP/RGB:103|なかよしバッジ]]. However, it is slightly harder to use for [[arbitrary code execution]] than its Japanese counterpart, because in the English version, none of the characters available for Pokémon nicknames corresponds to a useful jump instruction.
Using this glitch item will cause [[arbitrary code execution]] at DA47. This is ideal for arbitrary code execution from Day Care data, Safari Zone data and stored Pokémon data, where a payload can be prepared to the inventory or elsewhere.
 
Regardless, using the Day Care data for bootstrapping can result in a quicker and less obtrusive setup than other ACE items like [[ItemDex/RB:093|8F]] (whose bootstrapping setup takes up space in the party). A setup, designed by luckytyphlosion, gets around the character set problem by nicknaming the Day Care Pokémon with a glitch character (corresponding to a jump instruction) ''after'' the 0x50 terminator, which is achieved through manipulation of a text buffer.
 
{{clr}}
Anonymous user
Cookies help us deliver our services. By using our services, you agree to our use of cookies.

Navigation menu