Main Menu
Main Page
New pages
Recent changes
Random page

Arbitrary code execution
Pokémon cloning
Pomeg glitch
Glitches by generation
Glitch categories

Disassembly projects
The Big HEX List
Pokémon cheat codes
Pokémon glitch terminology
Useful tools

Legendary Star Blob 2 (Hakuda)
Pokémon Speedruns wiki
PRAMA Initiative
Become an affiliate!

Site source code

Search Wiki


Search Forums


Author Topic: ACE within Pikachu's Beach  (Read 120 times)

0 Members and 1 Guest are viewing this topic.

Eve the Bird Mother ❤✿

  • Always believe in yourself first. ✿ Aspiring to be a mother. 🦋
  • Head Administrator
  • *****
  • Online Online
  • Gender: Female
  • Characters © Tsuburaya, Sanrio, Nintendo/TOSE
    • View Profile
ACE within Pikachu's Beach
« on: December 07, 2018, 07:22:17 pm »
C5D1 controls the Pikachu's Beach script. Some values cause arbitrary code execution. The best one I could find was value 0x5B, which executes D3EA. This is within wWarpEntries, but it can be accessed with the expanded items pack from item 103's quantity and will usually stay even after saving/changing maps.

You can place any code you like at item 103's quantity. If the effects of the code apply outside of the minigame, simply press Select to leave the minigame and return to the overworld (you may need to have played the minigame at least once, not sure?). You can still do things like writing 0x15 (Mew encounter) to D058, so that you encounter a Mew immediately after leaving the minigame.

There may be more than one approach to doing this. Unfortunately a modified C5D1 value isn't kept before Pikachu's Beach, but in theory you could just run a modified Pikachu's Beach routine (likely from another ACE method) that only runs script 0x5B. Another approach would be to use OAM DMA hijacking to lock C5D1 to 0x5B.

Though we already have ACE and this likely requires ACE to begin with, this could be a cool way of causing arbitrary code execution if you wanted to do something in the minigame (like the creation of a cheat mode).
« Last Edit: December 07, 2018, 07:25:41 pm by Evie Torchic the Glitch Scientist »

(Image © Sanrio, Nintendo, HAL Laboratory)

✿ Hi! I'm Evie. I'm a transgender woman, but any pronouns are fine. She/her preferred. ✿ 🦋

Please note:

While I'm one of the staff who runs the site, Abwayax is the founder and manages the technical side of the site (specifically the server, but I can do forum/wiki stuff if you like, I suggest if you do to make a thread about it to gather a consensus). Still feel free to contact me about higher site issues though; I will forward them to Abwayax if needed. :)

Forgiveness is timeless, and moments we look back on humble the soul.

Thank you Nyapon for this lovely artwork. :3