Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - Princess Torchic ❤

Pages: [1] 2 3 ... 23
This may not be significant but wanted to note it, just in case.

Several months ago I did another playthrough of Pokémon White 2, and noticed after the Plasma Frigate event (the one with the puzzles where you confront Colress), after defeating Zinzolin in the Double Battle that the game would take you out without healing your party Pokémon.

If this battle was a tie (using Selfdestruct/Explosion) could you end up with all fainted Pokémon? It's unlikely, but would be interesting if it did and could open up something bigger.

Video of this point (not mine but from Lueroi)
Has anyone else thought of this idea?

Basically in the Generation I game you take a hybrid glitch Pokémon of a real Pokémon, and assign its nickname to that Pokémon, then use Poké Transporter to get it in Generation VII as if you brought over a glitch Pokémon into Generation VII.

You could try for example, a Nidorino named ァ / g J 1.

You could also possibly try this with Pokémon like a Kangaskhan named 'M evolved from 'M (00). Sadly the nickname may go away from this method and illegal moves are blocked, but you could still use another glitch or hacking to get those names.
Generation II Glitch Discussion / Glitch weather conditions
« on: February 23, 2018, 05:09:20 pm »
I came across this code on our Pokémon Gold and Silver GameShark codes page:


(It was wrong at first as 01xxE9CB so I fixed it)

The available values are said to be:

Weather Mod
00 - Nothing
01 - Rain
02 - Sun
03 - Sandstorm
04 - Rain dying
05 - Sun fading
06 - Sandstorm fading
07 and up - nothing but lond delay after attack

However the effect described for 07 and up is just one effect, and it looks like there are more glitch weathers. Two of them so far have displayed an error code "(x)Df-" for its text every turn, with another resetting the game in a Glitch Dimension.

I wonder what other interesting glitch weather conditions exist?

Edit: I got weather effect 0x10 to execute FA57 in Echo RAM (in the party slot 1 data where a slide Pokémon could be)
Edit 2: 0x12 executed DEE0 as well (enemy 4 nickname slot 2), which is nice. But how could we force it to the other opponent using ACE when linked?
It took a while, but the GlitchDex, AttackDex and ItemDex pages have now been converted into MediaWiki format with information that they were missing before.

Due to many of the glitch moves in the AttackDex being virtually the same between Red/Blue/Yellow, some of the AttackDex articles have been moved to have the format RBY indicating they are the same between Red/Blue/Yellow instead of just Red/Blue.

I took the time to do this with the TypeDex as well, and also create a stub for the StatDex (documenting glitch stats which can be changed by glitch moves).

From now on I will be working on finishing the UnownDex in depth including details like induced Trainer House trainers and Mystery Gifts (which will take relatively a lot of time to complete), and adding missing articles for the TrainerDex.

TMHMDex (wrong pocket TM/HM data), DexDex (glitch Pokédex modes) and PhoneDex (glitch Pokégear contacts) may follow.
Just posting this here in case it does have an effect.

Wrong pocket TM23 executes 03:01FE. Outside of Nintendo 3DS Virtual Console, it results in an unknown opcode freezing the game. But within Nintendo 3DS Virtual Console the game doesn't freeze and returns back to the game with seemingly no problems.

Does anyone know if this glitch item has a use?
If you somehow register glitch contact 0xAF (01AFC6D9) and call them in the morning (not during the day or at night), it's possible to contact them without getting a message that they are out of the area, and will give you a Master Ball.

In the past it was reported that you'd get a Glitch Dimension after the message. However the game will actually execute F7CD (D7CD; somewhere in the event flags). This may actually be reachable from the expanded Balls pack. If there is a 0xC9 around here (I placed mine at D7CE) then you can actually get a Master Ball with no freeze. A whopping 52 in fact!

It's a shame glitch contacts are arbitrary code execution only for now, but maybe in the future we can put this to use without arbitrary code execution (even though Balls pocket corruption allows for those many Master Balls already).

Wiki Discussion / How to work around the loss of session data error
« on: February 12, 2018, 11:52:27 am »

Sometimes when you try to upload a file on our wiki, it will say "Sorry! We could not process your edit due to a loss of session data."

There is a simple solution to this. Edit any non-file page to get the error message once. Try to submit the page a second time and it should work.

Then the next time you upload a file it should upload properly.

Note: This has only been tested by me on Chrome. Since I'm a sysop it's possible that it doesn't work for non-sysops. Could anyone without sysop or QC rights test this please? Thanks.
(Edit: I overlooked that you can stabilize the glitch Pokémon from Pokémon Bank hex:FF glitch into a 3TrainerPoké, so rather this is a way to get 3TrainerPoké with moves specific to it)

This makes use of Yellow 'Pokédex' glitch item move 0x00 corruption. While technically possible with expanded party encounter table manipulation (a glitch I put together mainly just for the purpose of finding 3TrainerPoké in the wild), it is easier and less complicated.

If you're like me (and Abwayax if I remember correctly) 3TrainerPoké is one of my favourite glitch Pokémon and it's a bit of a shame it could only be obtained without trading with arbitrary code execution.

Do note this glitch may suffer the same issues as Red/Blue move 0x00, where eventually due to how its internal name is found (0x50 bytes into RAM) the glitch may stop working with no definite way to fix it other than maybe adjusting the 0x50 bytes in memory.

Getting 3TrainerPoké is normally not possible with Rival LOL glitch because 0x00 double serves as a control character there.

Initial requirements:

You will need a Pokémon with move 0x00 as move 1.

This is possible without arbitrary code execution with one of at least three glitches:

1. Level up a glitch Pokémon (refer to In order for it to learn move 0x00 as move 1, it must already have four moves.

One of these glitch Pokémon (♀ . (C1)) learns it at Level 16 and Level 22. Note it does have a solid black glitch screen, so in order to see what's happening on the items and Pokémon menu better you may play the game in Super Game Boy mode (or DMG mode?).

1i) Before you raise it (such as with Rare Candies) it's best to use the items pack in the safe spot to avoid any potential move 0x00 corruption that could freeze the game (and possibly destroy the save file).

2. The Pokémon Bank hex:FF glitch will give you a Q (FF) with no moves. If I remember rightly Struggle can be avoided by giving the glitch move PP. I'm not sure if it has since been patched however.

3. Trade a Ditto from the swapping Transform moves glitch from Red/Blue to Yellow (as this glitch does not work in Yellow).

4. Byte shift glitches (unconfirmed, I tried the large storage box data shift glitch but there was an issue; possibly problematic experience points?)

5. Expanded party from Super Glitch or the SRAM glitch at the beginning of the game (unconfirmed but should be possible)

You will also need to have set up the expanded items pack and obtained the Pokédex (hex:09) glitch item.


1. Prepare a box with at least 17 Pokémon. Pokémon slot 16 must be 0x91 (Marowak), because 0x91 is an 'empty' map building block in the TileBlockDex. Pokémon slot 17 must be Magmar (0x33), which is not normally available but can be obtained with Trainer escape glitch or Rival LOL glitch (you will need to have obtained the expanded items pack for the Pokédex glitch item by this point).

2. Prepare Rare Candy x127 and TM18 (this will spell out your map pointer as DA7F).

3. Get a wild Pokémon encounter here (you may need to open up the Pokémon menu here too):

4. Open the items pack and swap the Rare Candy x127 into item 33 and TM18 into item 34. It's easiest to do item 34 first because you can press Select on item 33 on the way back up and save a bit of time/navigate the menu better. Item 34 should initially be a HM04, so if you spot one you've probably found it.

5. Open the Pokédex and close it. The battle should now look something like this. Depending on your Pokémon count and the Pokémon up to slot 17/18, as well as data after those addresses the screen will look different. However the essential part is in the rectangle in the image below. If it doesn't have those tiles in that position (from BGB coordinates x=01, y=06; note greater y values are further down here), something must have gone wrong.

6. Open the items menu again (really important) and keep scrolling the Fight menu until (possibly) the music fades out. Exit the fight menu (but don't run away) and throw a Master Ball.

Congratulations! 3TrainerPoké is yours. :)

Escaping the Glitch City:

After the battle finishes, we will be placed in a Professor Oak's Lab Glitch City.

Using the expanded items pack however, we can change the map type to allow us to Fly away.

All you need to do is access item 37 and then swap it with any item x0, with a Pokémon with Fly already prepared.
TheZZAZZGlitch, do you know how we can port your memory editor for use on Pokémon Yellow?

Does anybody know what ways might be possible for writing save files to Game Boy Advance cartridges?

So say you memory edited a Pokémon in an Emerald ROM to have the stats for Pomeg data corruption instead of EV training, could you then apply the changes to a cartridge?

I think there is an obscure Game Boy Advance save backup tool in Japan called Save Data Bank, but I'm not aware of any others.

I suppose one could try disassembling the cartridge and physically replacing the save but not sure how that would work.

Or maybe you could use an elaborate cheating device-GameCube Game Boy Advance Link exploit to write a save.

Thanks.  :)
VaeporSage/VaePomegGlitch's thread about the Pokémon XD floating platforms reminded me at around the time (May 2017) I tried to replicate it, I also used my GameCube's Action Replay to get a Bonsly in the party (normally unique to the Battle Bingo minigame) and Munchlax (normally an NPC's Pokémon).

What surprised me is that the Bonsly could be traded to Ruby with no errors whatsoever (although it became a Decamark hex:019D; the same as Bonsly in XD) with a freezing summary, the party loaded though). So maybe if we use Pomeg data corruption glitch to obtain 0x19D in Emerald we can do all that without a cheating device. Munchlax would in theory also require the 0x19E Decamark. If those glitch Pokémon don't want to hatch or freeze after viewing them (from double corruption) though that could be a problem.
Generation I Glitch Discussion / Pokémon Yellow Pokédex CoolTrainer?
« on: February 01, 2018, 01:40:28 pm »
This trick which makes use of both move 0x00 and the Pokédex glitch item might be an alternative to LOL glitch.

TheZZAZZGlitch has stated you can't bring screen data from outside of battle into battle with CoolTrainer in Yellow in the same way as Red/Blue, but if you use the Pokédex and exit it the game will bring up tiles in battle (where we can proceed to flash the items menu) based on where you are (you may need to flash a menu before battle to update it first).

In theory then having the Pokédex glitch item print a 0x15 at BGB coordinates x=01 y=06 may allow you to get a Mew using a Yellow CoolTrainer.

I'm unsure how it brings up the tiles at the moment though as they aren't arranged in the same way as before battle.  Hmm.

Edit: I confirmed it worked (but with Hitmonchan and a Route 1 setup). This means Yellow CoolTrainers are a thing now, yay! :)

Pokémon Discussion / Shiny hunting
« on: January 22, 2018, 09:59:41 am »
Talk about Shiny hunting here.

Who else is going to collect Shinies from the Odd Egg in non-Japanese Crystal when it comes out for 3DS Virtual Console? The chance of getting a Shiny from it is only 14%! (Similar to how it's relatively easy to get an Ultra Wormhole Shiny in Ultra Sun/Ultra Moon now).

You can get Shiny Pichu, Cleffa, Igglybuff, Tyrogue, Smoochum, Elekid and Magby. I would like the Cleffa.
A user named DaWoblefet (who also has an account on these forums if I remember correctly) recorded this glitch previously documented by DragonWhale93. It has been known for quite a while now since July 2017, but I haven't noticed many people talking about it.

Apparently in Pokémon Sun/Moon if you save at the exact position in a Pokémon Center that the delivery man would appear, obtain a new Mystery Gift (you could possibly do it with a Pokémon Bank subscription) it is then possible to walk out of bounds into the void. However it's not known if there is anything extra you can do with this glitch.
The types of already documented buffer overflow techniques that allow memory manipulation from the screen data so far include:

1. Super Glitch: Corruption of data from $CF4B, $D0E1
2. - (move): Corruption of data from $CF4B
3. Unterminated name glitch item: Corruption of data from $CF4B
4. Glitch location names on the Fly menu. This is an obscure one and I'm unsure how it works.
5. Unterminated name glitch Pokémon (when selected from a box): Also corruption of $CF4B onward if I remember rightly. Used in oobLG.

I think I found another one for us to look into, this time with glitch Trainer class names.

D031 (Red/Blue) and D030 (Yellow) partially control the opposing trainer class in battle. I found a Trainer name in Yellow (hex:77) which may have an extremely long trainer name. If you defeat the foe with this value set on D031/D030 (may require avoiding a problematic AI) and they have victory text, their name will be printed on the screen, and it appears that like the other buffer overflows what is corrupted after battle depends on the screen data.

I noticed 9153 in VRAM would control CFD7 (enemy Pokémon), and that this happens to be part of the foe's sprite that is displayed after you beat them. With Lorelei I get FF. Not sure whether this is due to VRAM inaccessibility or if that address is really FF but what's good about this is that the picture pointer of the opposing Trainer can be modified by manipulating the two bytes at D033 (D032 in Yellow). This doesn't have to include valid sprite pointers, hence in theory you can get many more CFD7 values by trying out different pictures and glitch pictures (which could even be in RAM).

The glitch pictures can also be used for their own unique corruption effects (possibly related to things like their dimensions). I tried 99 99 (pointing to VRAM) and it interestingly also corrupted the name you get at the end of the battle, but then I got this lovely corruption:

(I tried this two times and the first time it flew me to a glitch location, but didn't screenshot it, sorry)

Despite the fact that during experimenting the CFD7 value would stay at its corrupted value, it seems D056 (and D058 as well so instant encounter may not be possible either) is reset back to 00 meaning you can't capture Q (or theoretically Charizard 'M if this works similarly in Red/Blue) this way, which is a little sad.

Hopefully we can still exploit this to do useful things though, even though in Yellow the only way I know is through arbitrary code execution (and in Red/Blue possibly with Super Glitch as well).
Pages: [1] 2 3 ... 23