Main Menu
Main Page
Forums
Recent changes
Random page
Help

Databases
GlitchDex
AttackDex
AreaDex
DexDex
ItemDex
MetascriptDex
TMHMDex
TrainerDex
TypeDex
UnownDex
More

Major Glitches
Trainer escape glitch
Old man glitch
Celebi Egg glitch
SRAM glitch
Buffer overflow techniques
Pomeg glitch data corruption (Glitzer Popping)
Tweaking
Pokémon cloning
Select glitches (Japan)
Time Capsule exploit
Arbitrary code execution
More

Other Glitch Categories
Glitches by generation
Japan-only/language specific glitches
Natural glitches
Non-core series glitches
Non-Pokémon glitches
Recurring glitches
More

References
Pokémon GameShark codes
Pokémon Game Genie codes
Disassembly projects
The Big HEX List
GB programming
Curiosities
Debugging features
Error traps
Non-glitch exploits
Pokémon glitch terminology
Unused content and prerelease information
More

Useful Tools
8F Helper
GBz80 to Items
Old man trick name generator
PATH (Prama's Advanced Tweaking Heaven)
Save file editors
Special stat/Pokémon converter
Trainer escape Trainer Pokémon finder

Affiliates
Legendary Star Blob 2 (Hakuda)
Pokémon Speedruns wiki
PRAMA Initiative
Become an affiliate!

Technical
Site Source Code

Search Wiki

 

Search Forums

 

Author Topic: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption  (Read 371 times)

0 Members and 1 Guest are viewing this topic.

entrpntr

  • GCLF Member
  • Offline Offline
  • $FF The Police
    • View Profile
From the "How Did No One Notice?" department ...

This was discovered by gifvex in August. He outlined 3 very simple steps to be performed on Pokémon Gold:
1) clear save
2) defeat elite four without saving
3) https://streamable.com/oc2er

The reason why this works is the Hall of Fame save does not initialize box terminators. All other saving methods initialize the terminators, hence why you cannot save prior to the Hall of Fame. Depositing into a box also initializes the terminator for that particular box, so you must use Move Pkmn w/o Mail.

The video above demonstrates moving two Pokémon into an uninitialized box. The second one creates an off-by-one error, and turns one of the Pokémon into a 00 species, which you can give to the daycare to morph into the glitch hex00.

A second video demonstrates a way to create hex00 without even needing to go through the daycare: https://streamable.com/6571t. Doing this particular method with the hatched Togepi egg allows you to get a second Squirtbottle, which of course sets the table for the regular fare of key item pocket glitches.

This glitch was patched in Crystal, perhaps because someone at Game Freak eventually did notice.

Evie Torchic the Glitch Scientist

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • Thank you for this lovely artwork Nyapon!
    • View Profile
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #1 on: February 04, 2018, 08:42:02 am »
Thanks for sharing, though this is already known.

Sally shared this with me on August 30th 2017

https://www.youtube.com/watch?v=lxkQ7QdfdqM

Quote from: Sally
Hey Chickasaurus! I have recently come across an oversight in Pokémon Gold that I wanted to share with you.

When the player saves the game through the start menu, changing boxes, Move Pokémon w/o Mail, or link communications, a new save will be initialized if a previous save does not exist, or if one does exist and the trainer ID is different. Initializing a save includes erasing Pokémon box data and placing a terminator ($FF) at the start of each box's list of Pokémon.

There is another way to save the game: by entering the Hall of Fame. The save operations performed there do not check to do initialization if needed, leaving Pokémon box data as is, but still otherwise saves the game which meets the criteria for "initialized". The player will then have access to the existing Pokémon box data since the other operations will no longer erase it.

Here are three ways to exploit this oversight:

1) Pokémon $00

The player can fill cartridge RAM with $00 bytes by pressing up+select+B on the title screen to clear save data. (This is important to do even if no "continue" option is present on the file select screen due to random data possibly existing in cartridge RAM.) After entering the Hall of Fame without saving beforehand, the player will have Pokémon boxes of entirely $00 bytes, notably missing the $FF byte initialization is supposed to place in the Pokémon list.

Inserting a Pokémon into a box using Move Pokémon w/o Mail will shift the Pokémon list by 1 until it reaches an $FF byte. Here an $FF byte doesn't exist until the end of the Hall of Fame data which is just after Pokémon box data, shifting the entire box by 1 before writing the Pokémon data.

Upon inserting a second Pokémon into an uninitialized box, the first Pokémon that was inserted will have a $00 byte shifted into species. It can be withdrawn from the PC then deposited to and withdrawn from the Pokémon Day Care to update its entry in the Pokémon list to $00 as well. A $00 byte in the Pokémon list leads to glitches such as the Celebi trick.

2) Duplicate key items

The above Pokémon $00 setup with a Togepi as the first Pokémon inserted into the box will have a SquirtBottle shifted onto its held item. A held key item leads to glitches such as the expanded items pack. If the player entered the Hall of Fame without using glitches or cheats, both a Togepi (egg) and SquirtBottle will be available for this setup.

3) Previous Pokémon

Clearing save data is only required when no terminator is desired and can be skipped to instead allow the player to access Pokémon box data from the existing save. This can be done to obtain multiple exclusive Pokémon such as starter Pokémon or to reunite with the player's team from the previous playthrough, but still requires the Hall of Fame to be entered without saving since a new game was selected.

Some notes:

All of my testing was done on the English version of Pokémon Gold. Everything should work on the English version of Pokémon Silver, I do not know if anything will work on other language releases, and everything does not work in the English version of Pokémon Crystal. Pokémon Crystal added code to the Hall of Fame save that initializes the save data if it was not previously erased.

For quick testing, the memory addresses $D9F6 and $D9F7 represent the backup map group and number, which are used for the return location of generic maps. Going to the second floor of a Pokémon Center and editing the values to $10 and $08 respectively will cause returning to the first floor to instead take you to the Hall of Fame.

I really love natural glitches like this (just enter the Hall of Fame without saving!) so let me know if you have any questions.

Thanks! ~Sally

But it's interesting this email was also sent on August last year.
This makes me unsure whether Sally found it or forgot to attribute gifvex, or by coincidence they both found it.
« Last Edit: February 04, 2018, 02:21:36 pm by Princess Torchic ❤ »
Hi!

I'm Evie.

I'm a transgender person, but any pronouns are fine. She/her preferred.

Unfortunately due to legal concerns I won't be using emulators and unauthorised copies of ROMs anymore, just real hardware with official cartridges and a cheating device (Xploder) to aid research, sorry.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thanks Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).




Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Faith (which doesn't have to be religious) and a positive attitude/optimism is half the battle for well-being.

Fun times come and go, we may argue what is the point if nothing in this world is permanent; and all energy is believed to be subject to transformation. I guess in the temporary absence of it though, we value those times more and even though some things seem to be lost, they return in other forms.

Krys3000

  • The frenchie
  • Distinguished Member
  • *
  • Offline Offline
  • Gender: Male
  • Head admin of the PRAMA Initiative
    • View Profile
    • PRAMA Initiative - Main french Pokémon glitch website
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #2 on: February 04, 2018, 10:15:29 am »
I think I was aware of this at some point but forgot it. Thanks for posting about this! It's a very interesting technique. I guess most people won't use it because it takes a lot of time, but if you're desperate about not managing to do the Bad Cloning process, that's an alternative ^^


Admin of the PRAMA Initiative, the main french Pokémon glitch website
http://www.prama-initiative.com
“Anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'” - Isaac Asimov

Evie Torchic the Glitch Scientist

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • Thank you for this lovely artwork Nyapon!
    • View Profile
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #3 on: February 04, 2018, 01:39:08 pm »
I think I was aware of this at some point but forgot it. Thanks for posting about this! It's a very interesting technique. I guess most people won't use it because it takes a lot of time, but if you're desperate about not managing to do the Bad Cloning process, that's an alternative ^^



Yeah. I feel if it works on Virtual Console it's quite good as bad clones are harder without Stadium 2, and it's easier to leave your 3DS in Sleep Mode (where that was not an option for the Pokémon games when run on a Game Boy Color or Game Boy Advance) and keep it charged when needed. I like too how this only requires one copy of the game/3DS (though there is Coin Case glitch some might prefer this glitch, especially if it works on non-English games(?))
« Last Edit: February 04, 2018, 01:40:49 pm by Princess Torchic ❤ »
Hi!

I'm Evie.

I'm a transgender person, but any pronouns are fine. She/her preferred.

Unfortunately due to legal concerns I won't be using emulators and unauthorised copies of ROMs anymore, just real hardware with official cartridges and a cheating device (Xploder) to aid research, sorry.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thanks Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).




Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Faith (which doesn't have to be religious) and a positive attitude/optimism is half the battle for well-being.

Fun times come and go, we may argue what is the point if nothing in this world is permanent; and all energy is believed to be subject to transformation. I guess in the temporary absence of it though, we value those times more and even though some things seem to be lost, they return in other forms.

Evie Torchic the Glitch Scientist

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • Thank you for this lovely artwork Nyapon!
    • View Profile
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #4 on: February 04, 2018, 02:21:55 pm »
Oops, I meant August 2017.

Thanks for pointing that out.
Hi!

I'm Evie.

I'm a transgender person, but any pronouns are fine. She/her preferred.

Unfortunately due to legal concerns I won't be using emulators and unauthorised copies of ROMs anymore, just real hardware with official cartridges and a cheating device (Xploder) to aid research, sorry.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thanks Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).




Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Faith (which doesn't have to be religious) and a positive attitude/optimism is half the battle for well-being.

Fun times come and go, we may argue what is the point if nothing in this world is permanent; and all energy is believed to be subject to transformation. I guess in the temporary absence of it though, we value those times more and even though some things seem to be lost, they return in other forms.

entrpntr

  • GCLF Member
  • Offline Offline
  • $FF The Police
    • View Profile
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #5 on: February 04, 2018, 03:13:50 pm »
Aha, I looked through threads, but not youtube videos, to see if this had been posted yet.

Everything from my initial message was posted into the PSR Discord by gifvex on 29 Aug 2017. Some things about Sally's message, such as the specific mention about Togepi, signals to me this was very likely not just a coincidence. But Sally clearly did her own testing and did not wait 5+ months to document it, so the credit is still deserved, regardless.

Evie Torchic the Glitch Scientist

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • Thank you for this lovely artwork Nyapon!
    • View Profile
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #6 on: February 04, 2018, 03:38:17 pm »
Aha, I looked through threads, but not youtube videos, to see if this had been posted yet.

Everything from my initial message was posted into the PSR Discord by gifvex on 29 Aug 2017. Some things about Sally's message, such as the specific mention about Togepi, signals to me this was very likely not just a coincidence. But Sally clearly did her own testing and did not wait 5+ months to document it, so the credit is still deserved, regardless.

I see. Makes sense and it's very easy to miss.

Gifvex deserves the original credit though (and I feel bad as I credited it to Sally if it was gifvex who found it).
Hi!

I'm Evie.

I'm a transgender person, but any pronouns are fine. She/her preferred.

Unfortunately due to legal concerns I won't be using emulators and unauthorised copies of ROMs anymore, just real hardware with official cartridges and a cheating device (Xploder) to aid research, sorry.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thanks Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).




Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Faith (which doesn't have to be religious) and a positive attitude/optimism is half the battle for well-being.

Fun times come and go, we may argue what is the point if nothing in this world is permanent; and all energy is believed to be subject to transformation. I guess in the temporary absence of it though, we value those times more and even though some things seem to be lost, they return in other forms.

Evie Torchic the Glitch Scientist

  • Administrator
  • *****
  • Offline Offline
  • Gender: Female
  • Thank you for this lovely artwork Nyapon!
    • View Profile
Re: (G/S) "Bad Clone" (hex00) acquisition without ACE or Save Corruption
« Reply #7 on: March 23, 2018, 10:03:37 am »
*bump*

SM has confirmed that this works in Korean Gold/Silver on Virtual Console, so this is a likely indicator it works on the other non-English localizations as well.

https://www.youtube.com/watch?v=NXvpmSmhtYU
Hi!

I'm Evie.

I'm a transgender person, but any pronouns are fine. She/her preferred.

Unfortunately due to legal concerns I won't be using emulators and unauthorised copies of ROMs anymore, just real hardware with official cartridges and a cheating device (Xploder) to aid research, sorry.

Online I most often use the username Torchickens or Chickasaurus.

Ah.. koucha ga oishii ♪





Thanks Aeriixion for the cute sprite above! :) Roelof also made different variations of the sprite (which I animated).




Contact:
If you like, please contact me by private message here on the forums as I no longer check other places very often.

YouTube: http://www.youtube.com/user/ChickasaurusGL

I like to collect interesting video games. ^_^
https://www.vgcollect.com/Torchickens

Faith (which doesn't have to be religious) and a positive attitude/optimism is half the battle for well-being.

Fun times come and go, we may argue what is the point if nothing in this world is permanent; and all energy is believed to be subject to transformation. I guess in the temporary absence of it though, we value those times more and even though some things seem to be lost, they return in other forms.