Look Who it Was Random video

Manipulating the Sea Route 21 hex:44 glitch text box (Pokémon Yellow)

3,584 views · Published 21 April 2015 · 21:53 · Indexed 23 September 2026

Channel: Evie (ChickasaurusGL) 🌺 · 2015 · Gaming

Watch on YouTube

Read description for more information:
In this video I bring up a glitch text box that you can get with just the Trainer-Fly glitch with data from a writable source (D2C3). In the first part I manipulate its data to bring up some pre-set text boxes of my choice (including an unused "Switch on!" PC text box). In the second part I execute arbitrary code with the glitch text box and prove you can do it without other arbitrary code execution.

Many of you may be familiar with the Trainer-Fly glitch; the basis of the Mew glitch.

The most known variation of it is:
1) You escape from a Trainer and start gets disabled /A gets partially disabled (this also sets a script on the map).
2) You battle another Trainer and this brings the buttons back to normal (and also clears the byte $CD60; required for the script to run)
3) You flash the start menu and return to the route for the start menu to pop up (as part of the script). Upon closing it, you will encounter a Pokémon (or Trainer if the value modulo 256 is greater than 199) based on the last Pokémon in memory or no Pokémon if the Special stat is 0, 256, 512, etc.

For more specific details, this may be useful. http://forums.glitchcity.info/index.php/topic,7256.0.html

If you do not flash the start menu before returning to the route, then it's possible that the address $CF13 is no longer 0. When $CF13 (managing what kind of text box appears) is 0, the start menu will pop up, and you can make this value 0 by flashing the start menu or entering certain buildings.

When you bring up a non-start menu text box through interaction with A such as the Cerulean City sign "Heal your POKéMON! POKéMON CENTER", it changes the value at $CF13 (e.g. to 07 in this example).

If you return to the route you escaped from the Trainer with the non-00 $CF13 value, the game will bring up the equivalent text box that shares the same value. This is a trick that I personally call "text-box matching".

An example is one Cerulean City NPC having a CF13 value of 04 "That bush in front of the shop is in the way. There might be a way around." On Route 24, a value of 04 corresponds to "I did my best, so I've no regrets!"

Note: The text may differ if it is from a Trainer and you haven't defeated them. If you haven't defeated them, you can battle them.

Sometimes, there is a text box with a CF13 value which is valid in one map and invalid in another. This means that you can force a glitch text box.

Many of them are just error codes ("[n] error") where n is the CF13 value (note: error codes appear when there is a 00 value in the middle of the text box). Other glitch text boxes will bring up nonsense and/or play glitch sounds.

There are multiple text-box matching tricks where the source of a text box is in writable memory (RAM) that you can manipulate. A list can be found here. http://forums.glitchcity.info/index.php/topic,7267.0.html

I decided to focus on:
1) Escaping from a long-range Trainer on Sea Route 21.
2) Enabling a text box when you go there (by changing boxes, resetting and being guided by the Pewter City museum guy).
3) 'Talking to' the shelves of Pokémon goods in Cinnabar Mart and returning to Sea Route 21 (CF13=44).

This hex:44 text box's script location is found at D2C3 in WRAM; which is the fifth character of the second Pokémon's nickname.

In the first part of the video I alter the first byte of that data with the glitch item ws m to get a predefined text box chosen by me.

Shown:
FF (fifth character is "9") =Pokémon Center
FE ("8") =Poké Mart (has glitch items)
FD ("7") =PC for Pokémon storage only (unused! "Switch on!" text)
FC ("6") =PC for items only
F9 ("3")=Normal PC
F7 ("1")=Game Corner Pokémon prize menu
F6 ("0")=Cable Club
F5 ("♀")=Vending machine

In the second part of the video I use the 08 text code function to execute arbitrary code following the 08 that will give me Mew as a 'gift Pokémon' in addition to the Trainer-Fly Pokémon that was stored. This time no arbitrary code execution other than from the D2C3 text box is used.

To do that I used a method that's a little messy (shown in the video) to write the arbitrary code for D2C3 in Pokémon nicknames. It involves Super Glitch and swapping up Pokémon beyond slot 6. (I have specific items that I convert into Pokémon nicknames).

Note: I did not battle another Trainer after escaping from Sea Route 21. That would work, but to get the text box to appear, you can simply change boxes, reset and be guided by the Pewter Museum guy.

More from this channel