#5594: pirohiko's SNES Wizardry V: Heart of the Maelstrom "SRAM glitch" in 00:23.01

Game objectives

Emulator used: lsnes rr2-beta17
Uses sub-frame resets
Corrupts save data
Uses a game restart sequence
Abuses programming errors
Uses Japanese version
Genre: RPG

Character Data Address

WRAM 0x1000-0x19FF = SRAM 0x0000-0x09FF = SRAM Millor 0x0A00-0x13FF

SRAM	Address+0x80*X
0000	Existence state
0001	Characters number
0002-0009	Character string
000A 2bit	0b******XX Alignment
000A 3bit	0b*YYY Class
000A 3bit	0bZZZ***** Tribes
000B	Strength
000C	I.Q.
000D	Piety
000E	Vitality
000F	Agility
0010	Luck
0011-0016	Gold
0017-001C	E.P
001D-001E	Current H.P.
001F-0020	MAX H.P.
0021-0022	Level
0023	Status
0024	Age Year
0025	Age Week
0026	A.C.
0027-002D	Mage M.P.
002E-0034	Priest M.P.
0035-003B	Mage Spell
003C-0042	Priest Spell
0043-004A	Item Status
004B	Item #1 ID
004C	Item #2 ID
004D	Item #3 ID
004E	Item #4 ID
004F	Item #5 ID
0050	Item #6 ID
0051	Item #7 ID
0052	Item #8 ID
0053	Item possession number
0054	Poison damage strength
0055	Current X
0056	Current Y
0057	Current Floor
0058	@Mark
0059-005A	Swim E.P
005B	Milwa Counter
005C-005D	Maporfic Counter
005E	Latumapic Counter
005F	Litofeito Counter
0060-0062	Magic restriction Counter
0063-0068	Marks
0069-006A	Rip
006B-006F	Maze state
0070-0077	Each floor state
0079	Previous X
007A	Previous Y
007B	Previous Floor
007E-007F	16bit CRC Value

Corrupts save data

When beginning a game for the first time, initial full data of 6 people are written to the SRAM. Only each existence flag and CRC value are renewed by 14 people who don't exist. In case of Bizhawk and Lsnes, their CRC value will be 0x4EE4. The error detection and correction is made an SRAM of this game using CRC-16-CCITT (Initial Value is 0xFFFF). I generated the arbitrary CRC value by adjusting several parameters of the new character to pass that fastest. The person who has 255 items is generated by precise sub-frame reset when saving data.

SRAM	00	01	02	03	04	05	06	07	08	09	0A	0B	0C	0D	0E	0F
0300	00	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0310	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0320	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0330	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0340	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0350	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0360	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0370	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	4E	E4

SRAM	00	01	02	03	04	05	06	07	08	09	0A	0B	0C	0D	0E	0F
0300	05	01	91	20	20	20	20	20	20	20	6D	08	0A	0B	FF	FF
0310	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0320	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0330	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0340	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0350	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0360	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF
0370	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	FF	4E	E4

Hiragana	あ	い	う	え	お	は	ひ	ふ	へ	ほ	ん	゛	゜
HEX Value	91	92	93	94	95	EA	EB	EC	ED	EE	FD	DE	DF
Hiragana	か	き	く	け	こ	ま	み	む	め	も	ぁ	ぃ	ぅ
HEX Value	96	97	98	99	9A	EF	F0	F1	F2	F3	87	88	89
Hiragana	さ	し	す	せ	そ	や		ゆ		よ	ぇ	ぉ	っ
HEX Value	9B	9C	9D	9E	9F	F4	20	F5	20	F6	8A	8B	8F
Hiragana	た	ち	つ	て	と	ら	り	る	れ	ろ	ゃ	ゅ	ょ
HEX Value	E0	E1	E2	E3	E4	F7	F8	F9	FA	FB	8C	8D	8E
Hiragana	な	に	ぬ	ね	の	わ				を	ー	En	d.
HEX Value	E5	E6	E7	E8	E9	FC	20	20	20	86	B0

Katakana	ア	イ	ウ	エ	オ	ハ	ヒ	フ	ヘ	ホ	ン	゛	゜
HEX Value	B1	B2	B3	B4	B5	CA	CB	CC	CD	CE	DD	DE	DF
Katakana	カ	キ	ク	ケ	コ	マ	ミ	ム	メ	モ	ァ	ィ	ゥ
HEX Value	B6	B7	B8	B9	BA	CF	D0	D1	D2	D3	A7	A8	A9
Katakana	サ	シ	ス	セ	ソ	ヤ		ユ		ヨ	ェ	ォ	ッ
HEX Value	BB	BC	BD	BE	BF	D4	20	D5	20	D6	AA	AB	AF
Katakana	タ	チ	ツ	テ	ト	ラ	リ	ル	レ	ロ	ャ	ュ	ョ
HEX Value	C0	C1	C2	C3	C4	D7	D8	D9	DA	DB	AC	AD	AE
Katakana	ナ	ニ	ヌ	ネ	ノ	ワ				ヲ	ー	En	d.
HEX Value	C5	C6	C7	C8	C9	DC	20	20	20	A6	B0

Number	0	1	2	3	4	5	6	7	8	9	!	?	#
HEX Value	30	31	32	33	34	35	36	37	38	39	21	3F	23
Uppercase	A	B	C	D	E	F	G	H	I	J	$	%	&
HEX Value	41	42	43	44	45	46	47	48	49	4A	24	25	26
Uppercase	K	L	M	N	O	P	Q	R	S	T	/	(	)
HEX Value	4B	4C	4D	4E	4F	50	51	52	53	54	2F	28	29
Uppercase	U	V	W	X	Y	Z		.	-	+	:	En	d.
HEX Value	55	56	57	58	59	5A	20	2E	2D	2B	3A

Number	0	1	2	3	4	5	6	7	8	9	♠	♥	♣
HEX Value	30	31	32	33	34	35	36	37	38	39	80	81	82
Lowercase	a	b	c	d	e	f	g	h	i	j	◆	○	●
HEX Value	61	62	63	64	65	66	67	68	69	6A	83	84	85
Lowercase	k	l	m	n	o	p	q	r	s	t	･	“	_
HEX Value	6B	6C	6D	6E	6F	70	71	72	73	74	A5	22	5F
Lowercase	u	v	w	x	y	z		=	of	’	;	En	d.
HEX Value	75	76	77	78	79	7A	20	3D	A0	27	3B

Comments

I reset to cut a company's name logo.
CRC value makes the new character which becomes 0x4EE4 at the training grounds.
- The name was the fastest 1 character "あ(0x91)" and be "blank(0x20)" 7 characters.
- Neutral(+0x01)-Thief(+0x0C)-Gnome(+0x60) was made to adjust a parameter to 0x6D.
- Strength is 0x08, I.Q. is 0x0A, Piety is 0x0B, those were chosen for the CRC value adjustment.
- A lowest value of a bonus point is 7, so the rest points were given to Vitality and Agility necessary to the Thief.
- After sub-frame reset was done, his CRC value agreed with 0x4EE4.
His order was changed at the training grounds, and the next person was re-named a diamond(0x83).
When he returns from the maze, he has the "Heart of ABRIEL(0x83)" as the 54th item, so he reaches credit.

Fog: Judging.

Fog: Another well executed run from pirohiko!

However, with the run now essentially devoid of all gameplay along with the relatively mediocre audience response, I will be downgrading this run to Vault.

Accepting to Vault as an improvement to the previous game end glitch publication.

feos: Let's pub some tiny ones while Sabre Wulf is being sorted out.

Submission #5594: pirohiko's SNES Wizardry V: Heart of the Maelstrom "SRAM glitch" in 00:23.01

Submission Comments

Game objectives

Character Data Address

Corrupts save data

Comments