🐾 flag3

This is a translation of the original article:

📄ポケットモンスター 金・銀 バイナリエディタ レポートバグあり

The RAM Writer is the ultimate arbitrary code execution tool for first-generation Pokémon games. The RAM Writer introduced here is a version ported for the second-generation games. With this writer, you can read and write any value to any memory address. You can even write and execute entire programs, making it a powerful tool for installing and playing games.

This guide only works with the Japanese versions of Pokémon Gold, and Silver. It does not work with Pokémon Crystal or non-Japanese versions. It also does not work with Pokémon Stadium 2's GB Tower or some emulators. This guide assumes starting a new game and uses the SRAM Glitch, which involves hard resetting at specific timings when saving. This is an advanced guide as it requires doing a hard reset with a 1-1.5 frame twice. The guide that do not use the SRAM Glitch, and RAM Writer installation in Pokémon Crystal, please refer to the following articles.

📄RAM Writer in Pokémon Gold/Silver (JP)

📄RAM Writer in Pokémon Crystal (JP)

1. Set the player's name to "えてびま". If you are having trouble with the Japanese input method, please refer to the following page.
   Vite Input for Game Boy Pokémon

   

   https://flag3.github.io
2. You will use the starter later, but any starter works.
3. Catch one Pokémon and nickname it "クグ".
4. Defeat Falkner, obtain TM31, and get a Togepi Egg.

It's good to buy Mail from the Violet City Poké Mart.

1. Save the game.
2. Deposit Pokémon from your party into the Box.
3. Select "ボックスをかえる (Change Box)".
4. When saving to switch to another box, do a hard reset while "ポケモンレポートに　かきこんでいます" is displaying.

By following the above steps, the Pokémon you deposited in the box will be duplicated. Please prepare two or more "クグ" caught in Step 1. To ensure a larger timing for the hard reset, it is recommended to have 18-25 Pokémon deposited in the box.

1. Put your starter Pokémon in your party and save.
2. Deposit your starter Pokémon. Select "ボックスせいり／メールはずしてね", press "はい (Yes)" to "、レポートにうえからかいてもいいですか？ (Overwrite report?)", and do a hard reset immediately after "でんげんをきらないでください (Do not turn off the power)" is fully displayed.
3. Confirm that the deposited starter Pokémon is a Level 0 female with a blank nickname. If not, retry 2. If the Pokémon is not deposited, the reset was too early. If the Pokémon is deposited correctly, the reset was too late.
   • The timing for a successful hard reset to obtain a Level 0 glitched Pokémon is 1-1.5 frames, 149 frames after pressing "Yes".
4. If the Level 0 female Pokémon with a blank nickname shows "000" in its status screen, it's a success. If not, retry 2.

Note that in this step, do not let the number of Pokémon in the box reach 30. If it's about to get 30, release some Pokémon to reduce the number.

Withdraw the Level 0 starter Pokémon and teach it Mud-Slap using TM31. Duplicate Pokémon in your party using the method in Step 2 to increase the number of Pokémon so that the 30th Pokémon in the box becomes the glitched Pokémon that knows Mud-Slap.
After confirming that the 30th Pokémon in the box is the glitched Pokémon that knows Mud-Slap, release Pokémon in the box to reduce the number of Pokémon in the box to 28 or fewer.

1. Put an Egg in your party and save.
2. Deposit the Egg. Select "ボックスせいり／メールはずしてね", press "はい (Yes)" to "レポートにうえからかいてもいいですか？ (Overwrite report?)", and do a hard reset immediately after "でんげんをきらないでください (Do not turn off the power)" is fully displayed.
3. Confirm that the deposited Egg has a blank name. If not, retry 2. If the Egg is not deposited, the reset was too early. If the Egg is deposited correctly, the reset was too late.
   • The timing for a successful hard reset to obtain an Egg with a blank name is 1-1.5 frames, 149 frames after pressing "Yes".
4. If the Egg's status screen shows "もうすぐうまれそう (It's about to hatch)", it's a success. If not, retry 2.
5. Hatch the Egg. A glitched Pokémon will hatch if a glitched Pokémon does not hatch. Retry 2.

Note that in this step, do not let the number of Pokémon in the box reach 30. If it's about to get 30, release some Pokémon to reduce the number.

1. Arrange your party Pokémon in the following order:
   🐭

   Any non-EGG

   Any non-EGG

   Any non-EGG

   Glitched Pokémon obtained in Step 5

   Pokémon nicknamed クグ

   Pokémon nicknamed クグ

2. From the PC, select "ボックスせいり／メールはずしてね" and add a non-egg Pokémon to the front of your party. Make sure to leave Pokémon with the original trainer name "えてびま" in the box.
3. Swap the 1st and 6th Pokémon in your party.
4. Swap the 1st and 7th Pokémon in your party.
5. Swap the 1st and 7th Pokémon in your party again.
6. Obtain a じてんしゃ (Bicycle) by taking an item from the 7th Pokémon in your party.
7. Swap the 1st and 7th Pokémon in your party.
8. Obtain another じてんしゃ (Bicycle) by taking an item from the 7th Pokémon in your party.

1. From the PC, select "ポケモンをあずける (Deposit Pokémon)" and deposit the top 2 Pokémon from your party. Then, take out the Pokémon in the box whose original trainer name is "えてびま".
2. Swap the 4th and 6th Pokémon in your party to place the Pokémon with the original trainer name "えてびま" in the 4th position.
3. Open the Ball Pocket and make sure you only have Poké Balls, and the quantity is 1, 2, 4, or 5.
4. Open the Key Items Pocket, press SELECT on the first Bicycle, then press SELECT on the second Bicycle.
5. Poké Balls with a quantity of 255 will appear in the Ball Pocket, so discard them until 17 remain.
6. From the PC, select "どうぐをあずける (Deposit Item)" and deposit the 17 Poké Balls and Bicycles in order.
7. Move the 17 Poké Balls in the 14th slot of the Ball Pocket to the 65th slot of the Ball Pocket.
   • The 64th slot of the Ball Pocket will have a non-zero number, so use this as a guide to move to the 65th slot.
   • After moving, confirm that the 65th slot has 17 Poké Balls.
8. If the Pokégear disappears from the menu, the arbitrary code execution environment setup is complete.

Change the Box names as follows:

After changing the Box names, give a Pokémon the following Mail:

If you are having trouble with the Japanese input method, please refer to the following page.

Vite Input for Game Boy Pokémon

https://flag3.github.io

After creating the Mail, read its contents. Then, you can start the simplified RAM Writer by opening the Pokédex.

From now on, you can start the simplified RAM Writer each time you read the above Mail and then open the Pokédex.

D6E6 on the left is the memory address being written to, and 00 on the right is its content. Note that the display of A, B, and C is abnormal in this simplified RAM Writer. A is g, B is a horizontal line, and C is a phone icon.

Use the simplified RAM Writer to input the RAM Writer program. Once input is complete, you can start the RAM Writer by pressing the Select button. It is recommended to press the Start button to exit the simplified RAM Writer and save before starting the RAM Writer.

From now on, you can start the RAM Writer each time you start the simplified RAM Writer and press the Select button.

The 10 on the top of the screen is the current ROM bank and SRAM bank.

Use the RAM Writer to change the contents of addresses D418-D41A and DD90-DD9B as follows:

After changing, put the cursor on address DD90 and press SELECT+A to obtain TM33 in the key items pocket. Each time you use this TM33, you can directly start the RAM Writer.

Various side effects occur from the RAM Writer setup.

• Player's name
• Ball pocket
• PC Items
• Pokégear
• Pokédex
• Box names
• Party Pokémon
• Box deposited Pokémon

Set the ROM bank to 01, move the cursor to address 6237, and press SELECT+A to set the player's name. After naming, press the START button once to exit the RAM Writer.

Set the contents of addresses D5EF to D5F4 to 02 A0 01 05 02 FF to normalize the Ball pocket.

Set the content of address D60A to FF to restore the PC Items section.

Move the content of address D66D to address D66F and set the content of address D670 to 00 to restore it.

Set the content of address D671 to 00 to normalize the Pokédex.

After setting up the RAM Writer with TM33, you can change Box names as you like.

Set the ROM bank to 01, move the cursor to address 5D16, and press SELECT+A to reset Box names to their defaults.

Set your first Pokémon as the party leader, set the content of address D9E8 to 01, and set the content of address D9EA to FF to make your party consist of only your first Pokémon.

You can empty the contents of the boxes by setting the SRAM bank to 01 and changing the contents of addresses AD10 and AD11 to 00 FF.

Use the RAM Writer to change the contents of addresses DDA0-DDAB as follows:

After changing, move the cursor to address DDA0 and press SELECT+A to change the OT name of your first party Pokémon to the protagonist's name.

Once you have installed a RAM Writer, see the following article to learn how to use it.

📄RAM Writer Usage Guide in Pokémon Gold/Silver/Crystal (JP)

Do not edit addresses D418-D41A, and D6E6-D799 with the RAM Writer.

Guides:Glitch Pokédex Mode ACE setup (JP) v2 - Glitch City Wiki

This page serves as a repository for a Glitch Pokédex Mode ACE setup for the Japanese versions of Pokémon Gold & Silver. It is part of the TimoVM’s Gen 2 ACE setups…

https://glitchcity.wiki