Advertisement
fggkyle

Untitled

Dec 6th, 2019
148
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.44 KB | None | 0 0
  1. 1. We manipulate a specific pot to load at a very specific memory address by going in and out of the loading plane and pulling a bomb (the specific address is 0x410F80)
  2.  
  3. 2. We superslide off the pot (making sure not to break it) and go through the loading plane - this lets you pick up the pot after it unloads
  4.  
  5. 3. When you pick something up, the game remembers the memory location of the thing you pick up. Also, when you're holding an actor (like a pot), the game updates data stored within that actor (like its position and angle and stuff to make it look like you're holding it).
  6.  
  7. 4. When we pick the pot up after it unloads, the game still remembers the location of the thing we picked up (again, location is 0x410F80 in this setup), but the pot unloaded. However, the data at that memory location is still being updated even though the pot is unloaded. (this is why it's called SRM - we're holding a stale reference, i.e. a reference to something that isn't actually loaded)
  8.  
  9. 5. When we go into the other room with the guards, the guard loads in a place in memory near where the pot was (0x410D80). This means that the data that is supposed to be written to the pot (which isn't loaded anymore) is being written to the guard instead.
  10.  
  11. 6. The value of the unloaded pot's Z position is being written to the deku guard's entrance value thingy (the game uses it to determine where to load you when you get thrown out). Basically, we overwrite that value to the moon.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement