TheZZAZZGlitch | Pokemon Blue: Arbitrary code execution using the "8F" item @TheZZAZZGlitch | Uploaded April 2013 | Updated October 2024, 4 days ago.
For more information and item lists visit: forums.glitchcity.info/index.php/topic,6638.0.html
8F is a Red/Blue equivalent of JP Red/Green's 5かい - an item executing machine code starting from $D163 (Number of Pokemon) upon use. As address $D163 contains re-writeable data, it is possible to redirect the instruction pointer to the item list with relative jumps and easily run arbitrary code just by spelling the opcodes with items.
For more information and item lists visit: forums.glitchcity.info/index.php/topic,6638.0.html
8F is a Red/Blue equivalent of JP Red/Green's 5かい - an item executing machine code starting from $D163 (Number of Pokemon) upon use. As address $D163 contains re-writeable data, it is possible to redirect the instruction pointer to the item list with relative jumps and easily run arbitrary code just by spelling the opcodes with items.
![[APRIL FOOLS] Pokemon Blue: Togepi exists in Generation I!](https://i.ytimg.com/vi/T1FCNyM2V98/hqdefault.jpg "[APRIL FOOLS] Pokemon Blue: Togepi exists in Generation I!
Save file with pre-entered 8F code: https://sites.google.com/site/thezzazzglitch/home/Togepi8FSave2.SAV
It turns out Togepi exists in the first generations coding. An unreferenced ROM chunk at $7CF50 contains base stat table, sprite data and moveset/evolution data for Togepi. I used 8F to properly load this data into memory.")
