C109 (facing direction) arbitrary code execution expanded party method (Pokémon Yellow) @ChickasaurusGL

Evie (ChickasaurusGL) 🌺 | C109 (facing direction) arbitrary code execution expanded party method (Pokémon Yellow) @ChickasaurusGL | Uploaded May 2022 | Updated October 2024, 11 hours ago.
For the original exploit, see youtube.com/watch?v=5aOVYyr3uTw

Turns out you can also do this with the expanded inventory ^^, provided you corrupt your coordinates to be -0x33 and -0x80 of a spot adjacent to the map's entrance with the expanded inventory first, because after the Pokémon 91 swap, Lg- added 0x33, 0x80 to y/x, and 0x33 and 0x80 (y block/x block). Too bad after the credits, we 'bricked' our save file.

For more information, see https://glitchcity.wiki/Pok%C3%A9mon_Yellow_C109_ID_0x0F_arbitrary_code_execution#Expanded_party_method

Strain 0 Pokérus glitch (Generation II/Ruby and Sapphire, Generation II version)

CoolTrainer♀ 10-20% HP switch chance coding flaw (Generation I)

Arbitrary sprites sequence concept but my code is glitchy (Pokémon Yellow)

Making Kirby a Pokémon with arbitrary code execution (back sprite and menu sprite) (Pokémon Yellow)

Hall of Fame party menu pseudo-OAM buffer (CC5B) art creation exploit (Pokémon Yellow)

255 Pokémon Trainer battle corruption introduction (Generation II)

The Poké Seer only reports caught origin levels modulo 64 (Pokémon Crystal)

(Another) Pokémon Red link battle experiment with glitch Pokémon (VS. RNG controlled player)

Unused jingles 0x2D (045) and 0x92 (146) (Replacing caught jingle) (Generation II)

Surf on an artificial water tile originating from glitch item text (Pokémon Red and Blue)

Cloning over/deleting a corrupted box contents w/arbitrary code execution (Gold/Silver EN request)