Torchickens

Fix OT ID box breaker glitch 0x10 box Pokémon creation

Jun 21st, 2023 (edited)
82
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.16 KB | None | 0 0
  1. This guide is an extension of https://youtu.be/1ZN0SxY3OLI
  2.  
  3. OT Change:
  4.  
  5. 1. Use text move abuse with the Route 1 Potion NPC method and the following bag (swap second item into item 40 before talking to NPC) to acquire a party of 19 Pokémon:
  6.  
  7. https://glitchcity.wiki/wiki/Text_move_abuse
  8.  
  9. *Top item Thunderstone x 211
  10. *Second Escape Rope x211
  11. *Third Great Ball x98
  12. *Fourth TM09 x0
  13. *Fifth Super Potion x 87
  14. to give yourself 19 Pokémon.
  15.  
  16. 2. Express from item 6 quantity the OT name you want. (To do this, you can use the above Big Hex List to convert from quantities, items into letters; the bag structure will go quantity-item-quantity-item (...) so x128 would be "A" the next 0x81/129 (B) would be the glitch item at 0x81 and so on.
  17.  
  18. 3. With your new expanded party, move the Pokémon you created to slot 1 (don't move it to any of the slots below 6 or above 1 in between).
  19.  
  20. 4. Next, switch it to slot 19 by moving it two slots up, one slot down.
  21.  
  22. 5. Viewing the summary, it will now appear as a 3TrainerPoké but this is only a hybrid with 3TrainerPoké as the donor so you can fix it in the Day Care again later. However, if you can't/don't want to put it in the Day Care you can repeat text move abuse with the same configuration later, except replace the Great Ball quantity with x99 (modify slot 1 species byte 1) and Super Potion with (item corresponding to desired Pokémon).
  23.  
  24. 6. Move all the item 6 quantity (below) you introduced seven slots down (item 13 quantity onward). This will make the OT name instantly change based on the contents of the items (GOLD in the video). Note there are complications; for example "GOLD" is actually "GOLD 0x50 followed by six 00 bytes". I overlooked in the video that I had a Cancel within the 11 byte range after the 0x50 byte, so I had to rename it using Pokémon Silver's wrong pocket HM01 later. https://glitchcity.wiki/wiki/TMHMDex/S:243 but the hidden 0xFF byte renamed in the OT name. If you know the exact position (and memory address the hidden byte(s) are), you can just change it with arbitrary code execution later https://glitchcity.wiki/wiki/Reusable_RAM_writer
  25.  
  26. Also note that the preset names in Generation I have different hidden bytes, corresponding to the preset names stored one after the other (within the 11 byte limits), such as RED(0x50)ASH(0x50)JAC. This doesn't apply in Generation II, where the preset names are (NAME)(0x50)(00 bytes filling the 11 character limit).
  27.  
  28. If you want to do an ACE method instead, target D272 to D27C with reusable RAM writer.
  29.  
  30. 7. Move Pokémon 19 to slot 1 to have it in the normal party range.
  31.  
  32. 8. Repeat the text move abuse glitch with the original setup to get 19 Pokémon, but replacing Super Potion x87 with Poké Ball x87 (this will give you a party of 4 Pokémon and it doesn't matter if you had 5/6 as you can catch/withdraw(?) more to fix the glitched party)
  33.  
  34. ID Change:
  35.  
  36. Do a text move manip with Route 1's Potion NPC with the following:
  37.  
  38. *Top item Thunderstone x 211
  39. *Second Escape Rope x211 (move to item 40 as usual)
  40. *Third Great Ball x118
  41. *Fourth TM09 x0
  42. *Fifth (ID byte 1) x (ID byte 2)
  43. *Sixth 2F x any
  44.  
  45. To apply the new Trainer ID. To find byte 1 and byte 2, you can enter the ID number in decimal on Windows Calculator (programmer mode), then swap it to hexadecimal. The left most two digits are byte 1, and the rightmost are byte 2. So for example, 12345 becomes 3039; ID byte 1 is 0x30 and ID byte 2 is 0x39. That corresponds with item 0x30 (Card Key) x 57. Preferably you'll want to avoid using key items as they can't be tossed in bulk from the bag and you can't view how many you have, but you could get key item x0 (which is really x256) with Celadon looping map glitch (to check if it's x0, check the item in the coordinate 1 step west or east from it) and deposit it in the PC 199 (256-57) times.
  46.  
  47. Note unfortunately due to a limitation, byte 1 and byte 2 cannot contain a control character (such as 0x50, a list is at https://glitchcity.wiki/wiki/The_Big_HEX_List ). To get those, target D176 and D177 with reusable RAM writer.
  48.  
  49. Nickname Change:
  50.  
  51. Trade to a game with matching OT and ID (including Generation II) and use the Name Rater, as if that game originally owned the Pokémon.
  52.  
  53. If for whatever reason it doesn't let you, you can trade to an EN Pokémon Silver (not EN Gold) with arbitrary code execution set up (you can get wrong pocket HM01 with Coin Case glitch) and use wrong pocket HM01 to nickname it. In this video my party contains 2 Pokémon, and I swap the Pokémon with the nickname to change from slot 1 to slot 2 beforehand. https://glitchcity.wiki/wiki/TMHMDex/S:243
  54.  
  55. If you don't want to trade, you can either match the OT and ID and use the Name Rater, or target D2B4 to D2BE with reusable RAM writer.
  56.  
  57. DV Change:
  58.  
  59. The DVs for party slot 1 are at D185 (Attack/Def) and D186 (Speed/Special) (HP DV is generated automatically so you don't have to worry re: that). A Shiny Pokémon with the highest possible DVs corresponds with FA in D185 and AA in D186. So, you can do this text move manip with the same Route 1 NPC to turn Pokémon 1 into a Shiny:
  60.  
  61.  
  62. Attack/Defense DVs:
  63.  
  64. *Top item Thunderstone x 211
  65. *Second Escape Rope x211
  66. *Third Great Ball x133
  67. *Fourth TM09 x0
  68. *Fifth TM50 (FA) x 170 (AA)
  69. *Sixth 2F x any
  70.  
  71. Note unfortunately due to a limitation, byte 1 and byte 2 cannot contain a control character (such as 0x50, a list is at https://glitchcity.wiki/wiki/The_Big_HEX_List ). To get those, target D185 and D186 with reusable RAM writer.
  72.  
  73.  
  74. Skipping the previous steps to just change your moves:
  75.  
  76. You can do a text move abuse like before except with this configuration:
  77.  
  78. *Top item Thunderstone x 211
  79. *Second Escape Rope x211
  80. *Third Great Ball x114
  81. *Fourth TM09 x0
  82. *Fifth (Corresponding Move 1 item) x (Corresponding Move 2 quantity)
  83. *Sixth (Corresponding Move 3 item) x (Corresponding Move 4 quantity)
  84. *Seventh 2F x any
  85.  
  86. ''' Just to change internal types (note as above you can't check them after applying them, and if they don't match the species they will give an abnormal Pokémon message in Generation II):
  87.  
  88. Note unfortunately due to a limitation, byte 1 and byte 2 cannot contain a control character (such as 0x50 (so no Petal Dance etc)), a list is at https://glitchcity.wiki/wiki/The_Big_HEX_List ). To get those, target D172 to D175 with reusable RAM writer.
  89.  
  90. Skipping the previous steps to just change your types:
  91.  
  92. You can do a text move abuse like before except with this configuration:
  93.  
  94. *Top item Thunderstone x 211
  95. *Second Escape Rope x211
  96. *Third Great Ball x111
  97. *Fourth TM09 x0
  98. *Fifth (Corresponding Type 1 item) x (Corresponding Type 2 quantity)
  99. *Sixth 2F x any
  100.  
  101. Note unfortunately due to a limitation, byte 1 and byte 2 cannot contain a control character. To get those, target D16F and D170 with reusable RAM writer. However, this is normally not an issue for most non-glitch types (other than 00 Normal) which range between 0x01 Fighting to 0x1A Dragon (or 0x1B Dark for a Generation II transfer).
  102.  
  103. --
  104. Additionally, glitch Pokémon can be transferred to Generation II and convert based on https://glitchcity.wiki/wiki/Time_Capsule_exploit if their (often altered) internal types correspond with the Generation II Pokémon and they are within Level 1-100.
  105. --
Add Comment
Please, Sign In to add comment