Main Menu
Main Page
Forums
Recent changes
Random page
Help

Databases
GlitchDex
AttackDex
AreaDex
DexDex
ItemDex
TMHMDex
TypeDex
More

Major Glitches
Trainer escape glitch
Old man trick
Celebi Egg trick
SRAM glitch
Buffer overflow techniques
Pomeg glitch data corruption (Glitzer Popping)
Tweaking
Pokémon cloning
Select glitches (Japan)
Time Capsule exploit
Arbitrary code execution
More

Other Glitch Categories
Glitches by generation
Japan-only/language specific glitches
Natural glitches
Non-core series glitches
Non-Pokémon glitches
Recurring glitches
More

References
Pokémon GameShark codes
The Big HEX List
GB programming
Curiosities
Debugging features
Error traps
Non-glitch exploits
Pokémon glitch terminology
Unused content and prerelease information
More

Useful Tools
8F Helper
GBz80 to Items
Old man trick name generator
PATH (Prama's Advanced Tweaking Heaven)
Save file editors
Special stat/Pokémon converter
Trainer escape Trainer Pokémon finder

Affiliates
Legendary Star Blob 2 (Hakuda)
Pokémon Speedruns wiki
PRAMA Initiative
Become an affiliate!

Technical
Site Source Code

Search Wiki

 

Search Forums

 

Author Topic: New cloning glitch with Poke Transporter  (Read 840 times)

0 Members and 1 Guest are viewing this topic.

Wanderer1391

  • GCLF Member
  • Offline Offline
  • CHARIZRAD 'M ROXORX or is it.
    • View Profile
New cloning glitch with Poke Transporter
« on: January 11, 2018, 10:14:36 pm »
So a new glitch was found recently involving the cloning glitch and Poke Transporter as seen in this video by the person who found it:
https://www.youtube.com/watch?v=itk0KpIQjhE

Said glitch works with both the English and Japanese versions of Gen 2 but I'm personally not sure on any other versions such as Korean Gold/Silver.

The thing I'm curious about though is what is actually happening here. Is the Transporter being tricked into reading another box as box 1 or are the Pokemon being partially cloned somehow as leftover data into box 1 as any Pokemon in box 1 end up being deleted?

Torchickens

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • The Torchic Princess 🌸🦋
    • View Profile
Re: New cloning glitch with Poke Transporter
« Reply #1 on: January 12, 2018, 05:08:52 am »
Ooh this is cool. :)

The steps seems to be:

1. Fill a box that isn't box 1 (box 5 JP? box 6 EN?) with 20 (EN)/30 (JP) Pokémon (or possibly less if you don't plan to clone as many Pokémon)
2. Switch to box 1; must be empty.
3. Switch to the other box but reset the game early while saving.
4. Press the Home menu with the game running, load Poké Transporter.

; Poké Transporter thinks box 1 has the Pokémon from the other box when it is actually empty.

The glitched Pokémon counter might be related to the game reducing 20/30 from 0 (box 1's amount) and getting a glitched box amount value that is 256-(other box's amount). However that's just an educated guess as haven't tried this yet.

The thing I'm curious about though is what is actually happening here. Is the Transporter being tricked into reading another box as box 1 or are the Pokemon being partially cloned somehow as leftover data into box 1 as any Pokemon in box 1 end up being deleted?

Not sure, sorry. I'd guess the former because AD6C in SRAM (Pokémon in current box) would be wiped, so maybe:

1. The game updates the box data but not the box number yet.
or 2.  The game looks up which box to take data from this structure (probably not because you can only ever take Pokémon with the Poké Transporter from box 1):

Quote from: pokecrystal/sram.asm
SECTION "Boxes 1-7",  SRAM, BANK [2]

   box sBox1
   box sBox2
   box sBox3
   box sBox4
   box sBox5
   box sBox6
   box sBox7

I'm curious whether you can do anything else with the glitched box counter.
« Last Edit: January 12, 2018, 05:16:51 am by Princess Torchic ❤ »
Hi! I identify as female.  She/her pronouns, please.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thank you Captain Piika for my avatar.

Thanks too Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).

Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Always be yourself.

Wack0

  • Coder, reverser, beta collector [BetaArchive staff]
  • Staff
  • *****
  • Offline Offline
  • Gender: Male
  • cBRH - Doing nothing since 2k7
    • View Profile
Re: New cloning glitch with Poke Transporter
« Reply #2 on: January 13, 2018, 06:41:23 pm »
https://github.com/pret/pokecrystal/blob/82a05a1752b476caab8951fe03f539dcc1a63669/engine/save.asm#L41

Current box contents are saved to SRAM, then the box number in WRAM is changed and the new box loaded from SRAM.

Interestingly I don't think the box number in SRAM ever gets touched by simply changing boxes.
C H E C K E D . B U I L D S . A R E . A W E S O M E N E S S

BetaArchiveSoftHistory Forumsirc.rol.im #galaxy,#softhistory

Also known as The Distractor.

Shane, please stop telling children that there's a Mew outside under the delivery trucks. - Management

Pokémon: arbitrary code execution 1996-2016

SgvSth

  • GCLF Member
  • Offline Offline
  • Or is it SthSgv?
    • View Profile
Re: New cloning glitch with Poke Transporter
« Reply #3 on: February 07, 2018, 05:37:49 pm »
Well, I have been testing this a bit and it basically can do a bit of corruption to Pokémon sent to Box 1.  Had a few Dittos from my party that were renamed to be first "ILVER" and then "LVER" based on my actual IGN of SILVER after I deposited two using the Move Pkmn W/O Mail option while cutting out the music or corrupting it heavily. The OT is now just a ? instead of SILVER.

Not sure what would happen if I kept going until a Ditto ran out of Letters for its name, but I would rather not try until I am ok with losing save data, should it occur.

When catching a Pokémon that is unnicknamed, the game will give it a nickname based on the player's IGN minus the number of deposits.  Thus, I caught a Drowzee that was given the nickname "VER".  This did not really matter as the Drowzee was not in Box 1 when I went to withdraw. 

Thankfully it was not a shiny.  :P

If a caught Pokémon is given a nickname, then it does keep it for the two seconds that it exists before being deleted by Box 1.  Also, depositing a Pokémon into Box 1 will delete it.  (Goodbye, LVER...)

So, outside of the creepy renaming, music corruption, and Pokémon deletion, this does not seem to have any bad effects at all.  :P

---

Edit: I do want to note that I used English Box 4 to do the cloning, that it does not need to be a full box, and that if you have a non-corrupt Box 1 with 2 Pokémon and you use this glitch to clone 1 Pokémon, then you only lose one Pokémon in Box 1 and the box does not get corrupted.  It only gets corrupted when you clone more Pokémon than what Box 1 had.

---

Second Edit: So, playing with it has led to the following:

The game corrupts the name of the Pokémon with one less character based on the player's name.  Thus, from SILVER, we had ILVER, LVER, VER, ER, and R.  After R, we get a blank space that is treated as eight question marks.  (I will assume for now that this is due to nothing existing after the R in SILVER, so it is treated differently.)  Finally, after space/eight question marks, we get "nothing" which is treated as one question mark.  And by nothing, I mean that you will see "Go! !" and "'s attack missed!" as if there is nothing to the name.  Interestingly, they can still be Transported up to Bank, which will revert the name of "nothing"/one question mark back to its species name while changing the OT to blank spaces.

As for catching Pokémon, still nothing.  They all get deleted after the name change.  Not to mention that the Dittos retained their positions in the box, so it looks like this is where the glitch ends.
« Last Edit: February 14, 2018, 12:19:51 am by SgvSth »

Krys3000

  • The frenchie
  • Distinguished Member
  • *
  • Offline Offline
  • Gender: Male
  • Head admin of the PRAMA Initiative
    • View Profile
    • PRAMA Initiative - Main french Pokémon glitch website
Re: New cloning glitch with Poke Transporter
« Reply #4 on: May 20, 2018, 03:12:42 am »
There has been an interesting post on PRAMA by Alkan (original post, regarding a way to use the Poké Transporter to send some Pokémon in recent gens while not losing them in G/S/C. This is different than the glitch explained in this thread but I'd like to know if this was known before?

The idea is :
- Store a number of useless Pokémon in box 1, then save.
- Replace the Pokémon by the same amount of Pokémon you want to clone. Quit the game WITHOUT SAVING.
- For some reason Poké Transporter will behave as if the G/S/C game was saved and propose to send these Pokémon.
- Once done, the Pokémon will now be in both game, as the G/S/C game was not saved!

Here's a video:
https://www.youtube.com/watch?v=LKT-RGic9-o&feature=youtu.be

Admin of the PRAMA Initiative, the main french Pokémon glitch website
http://www.prama-initiative.com
“Anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'” - Isaac Asimov

Krys3000

  • The frenchie
  • Distinguished Member
  • *
  • Offline Offline
  • Gender: Male
  • Head admin of the PRAMA Initiative
    • View Profile
    • PRAMA Initiative - Main french Pokémon glitch website
Re: New cloning glitch with Poke Transporter
« Reply #5 on: May 21, 2018, 01:40:12 pm »
Sorry for double-posting but I can't confirm that Pokémon stored in box 1 indeed appears in the Transporter app, even though the game was not saved and therefore the Pokémon are not effectively in this box.

I haven't tried to transfer but I'm sure it works as said by Alkan.

I can't explain that glitch. How can Poké Transporter know of a progression that wasn't saved?

Admin of the PRAMA Initiative, the main french Pokémon glitch website
http://www.prama-initiative.com
“Anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'” - Isaac Asimov

Torchickens

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • The Torchic Princess 🌸🦋
    • View Profile
Re: New cloning glitch with Poke Transporter
« Reply #6 on: May 21, 2018, 01:44:50 pm »
I suspect this might be something to do with the fact that stored Pokémon data is stored in the SRAM region (so the game may be accessing SRAM even though the player didn't save and reset the game yet), but that's interesting, I'm not sure either.
Hi! I identify as female.  She/her pronouns, please.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thank you Captain Piika for my avatar.

Thanks too Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).

Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Always be yourself.

ISSOtm

  • The French Lord of Laziness (and a huge The Legend Of Zelda fan)
  • Staff
  • *****
  • Offline Offline
  • Gender: Male
  • Pewter City (B)rocks !
    • View Profile
    • My Little Website
Re: New cloning glitch with Poke Transporter
« Reply #7 on: May 22, 2018, 12:22:34 am »
The game does store the current box in SRAM, but normally the game reverts it when you haven't saved. (I think it copies the current box to the actual boxes, but I'm not as knowledgeable about Gen II)
"THOU SHALL NOT PASS !!"  RIVAL's effect, Gandalf.

Proudly glitching Pokémon Red and Yellow on a Black & White GB, Pocket GB, GB Color, GBA SP and new 3DS.

My Twitter (beware, I'm French)
My YouTube (same warning)

Here is an online tool to build 8F setups : GBz80 to Items !

They see me layzin', they ha-tin'...
Heavy contributor of the global augmentation of entropy (my room's is too damn high !)

Krys3000

  • The frenchie
  • Distinguished Member
  • *
  • Offline Offline
  • Gender: Male
  • Head admin of the PRAMA Initiative
    • View Profile
    • PRAMA Initiative - Main french Pokémon glitch website
Re: New cloning glitch with Poke Transporter
« Reply #8 on: May 22, 2018, 09:13:59 am »
Yeah, that's what I would have thought, but I was considering asking you on Discord since I don't know much of the way SRAM works. Could the SRAM be somehow kept in the current state in the whatever way the VC emulator has to keep the progress and only reverted when the game is restarted (and not only closed)? But then, how does it keep track of what should be reverted, does it have an extra copy? I don't get it.

Admin of the PRAMA Initiative, the main french Pokémon glitch website
http://www.prama-initiative.com
“Anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'” - Isaac Asimov

ISSOtm

  • The French Lord of Laziness (and a huge The Legend Of Zelda fan)
  • Staff
  • *****
  • Offline Offline
  • Gender: Male
  • Pewter City (B)rocks !
    • View Profile
    • My Little Website
Re: New cloning glitch with Poke Transporter
« Reply #9 on: May 25, 2018, 09:14:31 am »
Normally, when you save your game, the active box's contents are copied to the nth box instead. When you load the game, the active box is overwritten with the nth box.
Looks like Poké Transporter reads the active box anyways, which is written to directly in SRAM (thus always "saved"), but discarded by the game unless you save. I guess the PokéBank team thought the behavior was the same as RBY!
"THOU SHALL NOT PASS !!"  RIVAL's effect, Gandalf.

Proudly glitching Pokémon Red and Yellow on a Black & White GB, Pocket GB, GB Color, GBA SP and new 3DS.

My Twitter (beware, I'm French)
My YouTube (same warning)

Here is an online tool to build 8F setups : GBz80 to Items !

They see me layzin', they ha-tin'...
Heavy contributor of the global augmentation of entropy (my room's is too damn high !)

Krys3000

  • The frenchie
  • Distinguished Member
  • *
  • Offline Offline
  • Gender: Male
  • Head admin of the PRAMA Initiative
    • View Profile
    • PRAMA Initiative - Main french Pokémon glitch website
Re: New cloning glitch with Poke Transporter
« Reply #10 on: May 25, 2018, 12:03:22 pm »
Oh, I see it's clear now. Thanks!

I can't believe they didn't check that. Anyway that gives us a very easy cloning trick, so I think I may add it to wiki and PRAMA soon!

Admin of the PRAMA Initiative, the main french Pokémon glitch website
http://www.prama-initiative.com
“Anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'” - Isaac Asimov