A:A2 X:10 Y:00 S:11 P:nvubdIZCA:00 X:10 Y:00 S:11 P:nvubdIZC $0310:01 00 ORA ($00,X) @ $B549 = #$A21) I'd very much like to see the disassembled ROM! PM me or post it publicly. 2) If you happen to know, what is stored in address range $294-$2D9? I'll research it myself in the meantime, but so far I'm stumped. 3) What happens if you climb the stairs, say, another 70 times? Since 256 and 7 are coprime, maybe we have some leeway as to where the stack corruption takes us. I'm not very good with assembly language and it's hard for me to interpret what you've written, so I'm exploring that very slowly. 4) The glitch actually sets the program counter to $30A and it eventually increments to $312. What is in the $30A-$311 range? In my latest test, the first three instructions were garbage ($80) but the instruction at $310 happened to be $01 00 corresponding to ORA ($00, X). If as many as 8 more bytes can be directly manipulated, I'm confident we can get arbitrary code execution to work.
Edit: Here's a quick update to report on what I thought was a promising lead. I discovered that a flag at $62CA dictates whether the black orb is present in the Temple of Fiends. I cheated it to 0 (corresponding to it being gone) and the tile is not traversible. I suppose you really do need the four orbs shining to step forward through the altar. Oh well. Of the other skips we might reasonably execute, I'm wondering whether it would be better to get the early airship (it may depend where it shows up) or skip the air orb, which would also obsolete the Waterfall, Leffein, and parts of the Sea Shrine and the return to Melmond.
This is very cool! Could it be possible to execute multiple hacks by resetting and starting a new party? Or by changing your party's order and doing another loop?
About various skips, Ice Cave skip would have some issues. Ice Cave is the best place to get the gold you need to buy the bottle. Plus it has the flame sword that ends up being the best equippable weapon for the normal TAS.
Skipping orbs would be more valuable. If we can skip them all we just need to figure out how to beat the final dungeon. Earth Orb would probably be the biggest gain to skip since you could completely ignore Earth Cave.
If the question is how to beat the final dungeon if we can go straight to it, white mages might be most useful. All the bosses have magic and so if they get muted there is a chance to do nothing. To get a quick kill we would need to grind quite a bit to get level 5 magic for BANE. It might be better to just do the Sky Palace and get the sky orb. As far as game flags, some other ideas: -There is a flag for learning Lefeinish. If we set that we can go to Sky Palace without visiting Sea Shrine. Still need the waterfall but that is easy.
-We could go straight from ship to airship by combining airship flag with canal and Earth Orb or canoe.
If I could only skip one thing I might pick Earth orb over air orb. Earth Cave is loooong. My first thoughts for four flags would be Earth Orb, Water Orb, Lefeinish, canoe. You could head straight to Ice Cave after getting the ship, then get the airship. Need to hit the waterfall and Lefein before entering Mirage Tower. Get bane sword and light the remaining orbs. Now final dungeon will be easy. A more direct approach would be to light all the orbs. Pick a fighter and three white mages. Head to the peninsula of power and grind on zombulls. Then use mute to beat the final dungeon. Black mages could get BANE but it would be tricky to grind them up efficiently. Fighting is slow. Edit: Yeah, definitely Earth Cave if it's just one skip. Looking through my run, that would save about 12 minutes. At first glance air orb might skip more but unfortunately it skips the most important weapon.
; p2 name:
LDA $abs ; load pretty much any value from a 16-bit rom addr
BCS ; next byte after name is +$15
; brief trip through lala land then we land in p4 name
; provided we choose p4 class 04
; p4 name:
TAX ; index the desired byte of save state
JMP $ab90 ; jump into save loop
ad 80 c3 b0aa 4c 90 abIs it preferred to avoid save corruption?
So for example, you can start the game normally and save to get a clean file. Then reset, and start a new game. Choose the namesandad 80 c3 b0to modify the save file to have the earth orb. You can then reset and do it again to get whatever else. Note though that you should work up from lower numbered inventory addresses, to avoid overwriting WRAM with the ROM values on subsequent saves.aa 4c 90 ab
ad 7e 72 b0
aa 4c 90 abad 9a 71 b0
aa 4c 90 abad 4d 71 b0
aa 4c 90 abad 80 c3 b0
aa 4c 90 ab4c 91 99using this namewill jump to something related to switching the party order and fill a bunch of stats and weapon/armor slots with garbage, mostly 0's. would it be possible to use a 2 line name, similar to the way you can edit the saves, to fill the stats with some other nonzero garbage?4c 91 99
Which stats can you alter? Most of them are worthless. What you really need is an instant kill ability. Either the Bane sword or instakill spells like BANE or RUB with MP to use them. Hacked level or experience on a black mage could work, just need to reach Melmond for BANE.
a8 a5 4c b0 / a8 4c b9 a3ae 56 c2 b0 / a8 4c a2 abI haven't found a way to skip or directly acquire the Key yet. Closest I've got is to use 4caf93 to get the medicine and take that to Elfland.
I've been doing glitched runs this week and got it down to a 59 minute RTA today. I think a TAS with the same approach would be less than 40 minutes. I do some slow safety strats for RTA that are unnecessary with minor manipulation.
I haven't found a way to skip or directly acquire the Key yet. Closest I've got is to use 4caf93 to get the medicine and take that to Elfland. Would save quite a bit of time to avoid that trip.
Here's the basic route I have in mind: - Glitch 4 orbs. ad7e72b0/aa4c90ab ad9a71b0/aa4c90ab ad4d71b0/aa4c90ab ad80c3b0/aa4c90ab - Glitch medicine. 4caf93 - Glitch level of second character. ad56a3b0/aa4c8593 - Move second character to party lead. - Walk to ToF and trigger Garland fleeing. Warp back and get the lute and bridge. - Walk to Pravoka and trigger pirates fleeing. Get the boat. - Sail to Elfland and get the Key. - Sail home and walk to ToF. - Walk through ToF triggering all bosses to flee. As much as possible you want to manipulate enemies to surprise you and bosses/unrunnable encounters to go first in the turn order. If you can kill off your other party members without losing time, that might turn a profit with a reduced number of commands to input.
ad56a3b0/aa4c8593 sets the level of the second character to 102 (effectively 103 for morale calculations) which guarantees everything but bosses who have about a 2/3rds chance to run. Should be easy to manipulate without costing much time. I'd like to make it higher but loading accumulator values over $7F sets the N flag which leads to a crash down the line.
1. New game, buy some heals and save at inn so you have 10G left. 2. Use 4ca9a6 to underflow gold. 3. Buy up to exactly 58 heals.* 4. Get yourself to a house shop and buy exactly 76 houses.* 5. Underflow your pure potion count to 255 using a2719ab0/984c5ab3. 6. Go fight some imps and have all your characters drink ineffectually until you have exactly 201 pures.* 7. Run 4c59a6.