User:Zeroman: Difference between revisions
Jump to navigation
Jump to search
Content added Content deleted
(added link to my memory writer) |
No edit summary |
||
Line 44: | Line 44: | ||
* [[User:Zeroman/Candidate items for ACE|Items you can use for ACE in Generation I]] |
* [[User:Zeroman/Candidate items for ACE|Items you can use for ACE in Generation I]] |
||
* [[User:Zeroman/Item 0x6B memory writer|Item 0x6B memory writer]] |
* [[User:Zeroman/Item 0x6B memory writer|Item 0x6B memory writer]] |
||
== other projects == |
|||
* [[User:Zeroman/GameBoy GBZ80 opcodes list|GameBoy GBZ80 opcodes list]] |
Revision as of 12:23, 30 April 2024
Just a completely random stranger from California.
What are the corruptions?
- Wild appeared! can corrupt 250 bytes from CEEF to CFE9.
- The Hooked Dragonite can corrupt 0x382 bytes from CCE9 to D06B.
My method of arbitrary code execution
In Pokémon Red, Blue, and Yellow, I use 4F (0x59) for arbitrary code execution.
Memory addresses (WRAM)
Disassembly label | Pokémon Red/Green/Blue/Yellow (JP) | Pokémon Red/Blue (US) | Pokémon Yellow (US) | Pokémon Red/Blue (EU) | Pokémon Yellow (EU) |
---|---|---|---|---|---|
wPlayerName | D11D-D122 | D158-D162 | D157-D161 | D15D-D168 | D15C-D167 |
wSimulatedJoypadStatesIndex | CD38 | CD38 | CD38 | CD38 | CD38 |
resources by me
- 4F (0x59) memory write ACE
- Write to WRAM using the item pack
- Items you can use for ACE in Generation I
- Item 0x6B memory writer