User:Zeroman/4F (0x59) memory write arbitrary code execution: Difference between revisions

From Glitch City Wiki
Jump to navigation Jump to search
Content added Content deleted
VisualWikitext
(started this memory write ACE for 4F (0x59))
No edit summary
Line 22: Line 22:


== items ==
== items ==
1. 4F (0x59), quantity does not matter
# 4F (0x59), quantity does not matter
2. Master Ball (0x01), 0x63
# Master Ball (0x01), x99
3. Carbos (0x26), x205
# Carbos (0x26), x205
4. X Accuracy (0x2E), x56
# X Accuracy (0x2E), x56
5. Lemonade (0x3E), x1
# Lemonade (0x3E), x1
6. Item 0x77, x209
# Item 0x77, x209
end of list.
end of list.

Revision as of 13:20, 13 December 2023

In Pokémon Red, Blue, and Yellow, 4F (0x59) will execute FA65/FA64 (Echo RAM for DA65/DA64) when used, which makes it useful for arbitrary code execution. With the correct setup at DA65/DA64 and D322, it can be used to write to memory.

bytes needed

at DA65/DA64:

  • C3 22 D3 (Red/Blue
  • C3 21 D3 (Yellow

at D322/D321:

  • 26 CD 2E 38 3E 01 77 C9 FF

instructions

at DA65/DA64:

  • jp D322 (Red/Blue
  • jp D321 (Yellow

at D322/D321:

  • ld h, $CD
  • ld l, $38
  • ld a, $01
  • ld [hl],a
  • ret

items

  1. 4F (0x59), quantity does not matter
  2. Master Ball (0x01), x99
  3. Carbos (0x26), x205
  4. X Accuracy (0x2E), x56
  5. Lemonade (0x3E), x1
  6. Item 0x77, x209

end of list.

Retrieved from "https://glitchcity.wiki/wiki/User:Zeroman/4F_(0x59)_memory_write_arbitrary_code_execution?oldid=43439"