Jump to content

Type 0xFF mail arbitrary code execution (Japanese Crystal): Difference between revisions

 
Line 11:
*D9D9 must represent code which opens and writes to SRAM. D9D9 corresponds to Balls pocket item 135, so an overflow/underflow with [[duplicate key items glitch]] or [[????? map corruption]] is necessary (both can be set up with the [[bad clone glitch]], or key items can be traded over from Generation I (e.g. by modifying the catch rate/held item with Generation I arbitrary code execution)).
 
For example, the following nineten item long code replaces the species of the first boxed Pokémon to Celebi (note some adjustments may need to be taken to achieve the same effect practically). This does not interfere with the save checksum.
 
===Bytes===
Cookies help us deliver our services. By using our services, you agree to our use of cookies.