For those thinking the japanese versions of Pokémon are the only ones that could be completed extremely fast with the use of glitches, well, the UE versions can be completed even faster.
By breaking the game into allowing the modification of its internal variables the main character gets into the Hall of Fame without receiving his first pokemon, yet his pokedex marks 152 out of 151 pokemon.

Game Objectives

  • The objective is to get to the credits as fast as possible.
  • Uses save and restart.
  • Displays extreme breaking of the game.
  • Uses mysterious warping.

Emulator used

  • Visual Boy Advance re-recording v19.3

Stupid Comments

This is an anime themed run! It gets to show Ash is a known cheater and definitely sharked his Pikachu and set his pokedex to mark 152 when there only existed 151 pokemon at the time.
At first it looked like he was going to have a normal day and meet Oak and get his first pokemon, but no, he had to beat Gary in getting to the league. And for that he had obtained a Game Shark.
First, he sharked balls for he wanted to be tripping them. Then he did the same with his items. While the items are scrolled we get to see the game scream OH S... in disbelief of what is going to happen. But nothing would stop it he was only thinking on himself.
After leaving Pallet, a wild Pidgey tried to steal his gameshark so he was forced to enter codes to summon his precious, the over nine thousand poké, so inmensely powerful it even raised the health of its enemy with only its presence.
Realizing that the road was going to be full of obstacles Ash hacked some more. On his mind there was only hate towards his enemy, and figures that resemble yellow and red Ponytas. He teleported straight to the Hall of Fame. What a surprise that Oak greeted him, he was supposed to wait for him at his lab! Oh crap, "Gary was here" written on the desk!?
"Well not only that, when you were out Team Rocket slammed into the lab, and hacked your pokedex leaving this message..."
(They also stole Pikachu)

Serious Comments

Hello, this is my first TAS. I found luck manipulation to be a chore, no idea how you guys do it manually and several times for a single run, if any of you do so of course.
Since I had to be staring at each frame while making this I had enough time to notice patterns or shapes on the glitches and make up a story as I went. If you feel lazy you can try to find what I used as inspiration by watching with frame advance.
Pokemon Yellow is the less buggy out of the first generation Pokemon games. Having been released last, there was time to patch errors like the well known Old Man (MissingNo.) glitch. It also lacks the Brock skip glitch for instance. Well it doesn't matter, it can be finished as quick as Red or Blue can.
Yes, the three games can be finished with this exact same route. Yellow is the slowest for the simple fact that it has ONE extra tile on its map which means you have to walk one extra step. Red and Blue lack this step. Out of the two, Red is the fastest because its first name choice for the protagonist is Red which has one less letter than Blue for Pokemon Blue. The name gets printed three times, for a total of 3 frames advantage for the red version.
Initially I didn't want to use an anime theme, I wanted to use Yellow as the protagonist and Blue as the rival's name. But the second option is Ash and it has much fewer letters than Yellow, for 5 frames advantage (9 minus 4 it takes to select the name). My main goal was not to get 2 minutes on the clock so I decided to save these frames just in case.
(That meant I had to name the rival Gary, despite Blue being the faster option (4 frames again). It would be a mistake not to go with the theme after naming the protagonist Ash on Pokemon Yellow, the Pikachu version... the one that after all tries to resemble the anime.-Scratch this) After a bit of testing, by using a custom name for the rival I eliminate a huge chunk of "lag" while scrolling items. This is not lag per se but the game glitching out due to the items it tries to display do not have valid item values and forcing you to press the B button several times. While scrolling the items I have to pass by the rival's name addresses, so I gave him a name that has values that correspond with actual items taking out the glitchiness (which could be considered bad because now the screen is less glitchy). I also used one of the "letters" to skip Oak. I used to go out of the way to get a value to skip him, but instead this is on the way and I don't lose time other than doing the item switch.
To be able to pull this route, I had to spawn with a trainer id of 76 in hexadecimal (on the lower byte, D359). This has a 1 in 256 chance of happening, and is set when you select New Game, but the random number generator at that time can't be manipulated without inserting idle frames. These frames can be inserted before any valid input given to the game and will modify the generator differently. Before choosing new game there are four valid inputs (first for Game Freak logo, second for intro, third for game logo, and fourth for New Game itself).
I checked manually the combinations of up to four idle frames, but didn't get the 76 I needed. So instead I made two programs do the work for me: One that created movies with every combination of idle frames and another that played these non stop until it found one that worked. I modified tas-movie-editor and Visual Boy Advance for this. They found the best combination quickly, at iteration 74 which corresponds with 5 idle frames.
With the first part of the puzzle I could continue with the plan. First I walked up to the point where I stop... yeah... Ok, it has some significance, one tile forward and the Oak skip trick won't work because the closest value that gets this done doesn't work one tile forward. It also makes it wait until the last moment to show that it is not going to be a normal run, I mean I could have saved as soon as the game started.
I use a save corruption exploit, reset while saving and your file may get corrupted, reset at a specific frame, and you will still be able to load your corrupted file. The corruption fills your owned pokemon data -which you have zero atm- with FFs, or 255 in decimal (if you watch the address D200 -VBA's Memory Watch window- you will see this after resetting). That area includes the pokemon owned counter, in other words the game thinks you have 255 pokemon on your belt, that's a lot of balls.
When Chamale wrote that this exploit gave him over 25 pokemon it rang my bell. I had been testing the ZZAZZ glitch since hanzou introduced it at the forum, this glitch ultimately ends with the overwriting of the items counter and subsequent memory shuffling that allows for a teleport to Hall of Fame as demostrated by hanzou. Since the game only has room for 6 pokemon but think you got 255, pokemon can be switched and that means overwriting data that are not pokemon with whatever data the pokemon had, and not only is this cool, the belt data is right before the owned items data, and having as values FF is perfect.
Switch your first pokemon with the tenth and you will overwrite the items counter, since you will be placing FF in there, now you will have 255 items, but 20 is the regular maximum! Below the item data there is important data, like your current area (D35D), coordinates (D35E, D360-D361 and D362-D363), badges (D355), trainer id (D358-D359), the rival's name, etc. So by manipulating your belt you can manipulate your items and then get access to manipulate this. Items use two bytes, the first for the item, the second for its quantity, so when you switch items you are exchanging four addresses (the two you switch from and the two you switch to). Tossing items modify the address on the quantity byte, these are the even addresses (0-2-4-etc). Completely tossing all of the item will shift all bytes by two, this will most of the time crash your game. The item with value FF is read as the Cancel button, and can't be tossed nor switched, unless the text Cancel doesn't show (and if you do you'll cause a single byte shift).
Now with access to this data from the items menu, I overwrite the area value to be able to get to Route 1 without triggering Oak. The closest value that doesn't crash the game (is FD and is quite far away, but it works -Scratch this too) is E7 and corresponds to the third character "!" given to the rival as his name, it is on the way while scrolling so no time is lost. Please keep in mind that Pokemon Red and Blue accept more values (they don't crash/freeze), like the Card Key item (30) that is on the way as well.
Now in Route 1 I proceed with the final step of a ZZAZZ attempt, to generate a teleport to another area. Get into a wild battle, and switch the area value with whatever value you want, then end the battle through whatever means. You'll spawn at the new location.
First things first, I needed a random encounter on the first possible step. You can't get a random encounter in Pallet so I had to get to Route 1. You can't get a random encounter on the step in which you enter Route 1, and you can't move right because the collision model is actually one tile to the left, (due to my playing with values to skip Oak) which means you are actually next to the wall. Moving left won't trigger a random battle because the grass is not there (in other words the grass is not shifted, only the collision). So the only way is up.
There are two pokemon that can be triggered, Pidgey and Rattata. Pidgey is 6 frames faster and I lucked out in getting one within two frames of optimal while recording the movie. There's no way to manipulate the RNG without adding idle frames. To manipulate it without them like for example primo's do, you have to hold the input when accepting text dialogs. There are none of those after I reset.
I used the bots again, this time there are more than 60 inputs, not four, before the random battle. That means anything bigger than 3 frames and it's hell (3 frames have like 90,000 combinations, which is still doable but would take several days). Since I already had a Pidgey within 2 frames though, the bots only had to check the combinations for one idle frame, which is nothing, and they found one valid run, on the last combination possible, getting a Pidgey with just one frame lost.
I wrote a small program to calculate the number of combinations for 'n' idle frames inserted before 68 possible inputs, lucky me I only had to do number 1:
  1. 68
  2. 2414
  3. 57154
  4. 971635
  5. 13991544 <- 13 Million something
  6. 170230452
  7. 1799579064 <- 1 Billion something
Anyway, the 76 I manipulated earlier as the trainer id is also the code for Hall of Fame, and the data is right next to each other so I don't waste time switching "items". When I switch, the data from one address goes to the other, so I am setting my area value as 76.
This is not the only switch required, because my current coordinate position values would get me out of the map at Hall of Fame and the game would crash. So I switch another item on top of their values keeping things cool.
Then I just run from the battle and profit. Oak is a smart man and can't be fooled easily, he proceeds with the registration but he knows what I did there.
By the way, the pokedex data is between your belt and the items, so when I switch pokemon I also complete the pokedex, in fact it now says 152 out of 151.
Since this wouldn't be complete without Team Rocket, well, they had to make an unexpected appearance, I wasn't expecting that the first time, with a dark tone for music change and everything. Even though the game is about to end, there is trouble ahead...
My RAM map is not complete, so there could be another method to teleport to Hall of Fame, even from the starting room, by creating a patch of grass, setting the exit or escape roping to the final room, or similar. Also, due to the variability of input and frames a couple frames improvement could be found by varying the button presses, I think this is called a "frame rule". But their effect is random, sometimes a combination will speed you a frame here and then slow you down in another place, and usually it is that it can't be sped up.
I DID use a "constant" combination I found and had no chance to use during the movie, I used it on the last dialog, pressing A then the next frame B on a dialog without an "arrow" makes it close 1 frame earlier. The movie's input ends at the same frame though because it's the last dialog.
For those wondering, the run is around 1 minute and 13 seconds according to the ingame timer (which only displays the minutes). DA3F is the address for the hour, then it goes to minutes, seconds and frames (60 fps). A 0:00 run sounds unlikely and the addresses are not even within range for manipulation so that's a no as well ;o

Other comments

I suggest you turn on Input Display, open Memory Watcher, enlarge its height to the max, and set it to watch the address D200 to D350 so you can "see" what happens in memory.
I don't think many people will get what is going on even if they know the Pokémon games. It is very possible to execute these glitches and NOT teleport to the end and instead play some more to make it more friendly to them, but my goal was to find out the final screen time display upon completion, was it going to be 0:00, 0:01 or 0:02? I got a movie where I "walk" to the Hall of Fame and it takes six minutes (perhaps five if optimized), but my goal was speed so I finished this one. All in all, there are enough glitches to perhaps do a glitchfest run, some walk on water, glitched battles, changing the music tempo, palettes, battling gym leaders but changing their pokemon, etc, (yes all that is possible, at the same time may not be so possible but that's what planning is for).
It may be possible to break a frame rule by using a different input combination on certain dialog. Usually it doesn't make a difference but sometimes pressing A alone is faster, or B the frame before then A, or A the frame before then B, or holding B and pressing A the frame that it has to be pressed, etc. When it doesn't work it usually makes you lose one frame instead. This frame advantage can be lost arbitrarily if the game wants to though, for example when you name yourself or your rival, or at reset. And of course a faster way to teleport to the end will also improve the run.
Suggested screenshots:

Bisqwit: Author submitted a replacement movie. Submission updated. Quoting Gia:
I missed a quite obvious optimization and after applying it I also lucked out with the random encounter, the improvement is 672 frames though, not 10.

NesVideoAgent: Hi! I am a robot. I took a few screenshots of this movie and placed them here.
Bisqwit: But the movie desynced for NVA, as it did for me. Removing the said screenshots.

adelikat: The glitching presented here is different enough to warrant a new category. So accepted for publication but not to obsolete the green run.


TASVideoAgent
They/Them
Moderator
Joined: 8/3/2004
Posts: 15594
Location: 127.0.0.1
This topic is for the purpose of discussing #1958: gia's GBC Pokémon: Yellow Version "save glitch" in 02:06.28
Post subject: words fail me
Banned User
Joined: 12/23/2004
Posts: 1850
what
Perma-banned
Mitjitsu
He/Him
Banned User
Joined: 4/24/2006
Posts: 2997
MIND BLOWING And yes this should obselete the glitched green run.
Joined: 1/27/2008
Posts: 236
Location: Somewhere
This run is absolutely........ see, it's speechless. I can't say anything but what AKA said should be put up above the Eifle Tower, the Tokyo Tower, and the Statue of Liberty. MIND BLOWING! YES!
See Youtube page (GIRfanaticTAS) for all runs and stuff.
Joined: 2/26/2007
Posts: 1365
Location: Minnesota
It should be highlighted that this run uses VBA v19 ?_? I have no clue what happened, but I think I should vote yes...
adelikat wrote:
I very much agree with this post.
Bobmario511 wrote:
Forget party hats, Christmas tree hats all the way man.
Post subject: SECURITY ALERT
Joined: 6/6/2004
Posts: 223
TAS Advisory: TAS1958 Release Date: 2008-04-29 Critical: (5) Extremely critical Impact: Item forgery Location warping Doing whatever the hell you feel like doing Where: From local Solution Status: Who needs a solution when you have this? Software: Pokémon Red Pokémon Blue Pokémon Yellow Description: A buffer overflow exploit has been found in first-generation Pokémon games via a race situation when writing to the save file. When exploited, the player/attacker can write almost arbitrary values to practically any memory location. Solution: This is TASvideos. To exploit this vulnerability is the solution.
Joined: 7/16/2006
Posts: 635
When I saw this run, my first thought was "pff, over 2 hours? please." Then I noticed the decimal point. Definite yes.
Banned User
Joined: 12/23/2004
Posts: 1850
stickyman05 wrote:
It should be highlighted that this run uses VBA v19
It is mentioned in the submission text. Although you get the same result in VBA 20 too, it's just cleaner.
Perma-banned
Joined: 2/26/2007
Posts: 1365
Location: Minnesota
Xkeeper wrote:
stickyman05 wrote:
It should be highlighted that this run uses VBA v19
It is mentioned in the submission text. Although you get the same result in VBA 20 too, it's just cleaner.
Yeah, for some reason it did not wish to show itself so nicely when I went a looking. However, I am confused about what you mean about VBA 20, because three roms, which matched the movie, all de-synched for me. Granted it doesn't matter, since "Use 19" is in the text.
adelikat wrote:
I very much agree with this post.
Bobmario511 wrote:
Forget party hats, Christmas tree hats all the way man.
Banned User
Joined: 12/23/2004
Posts: 1850
stickyman05 wrote:
Xkeeper wrote:
stickyman05 wrote:
It should be highlighted that this run uses VBA v19
It is mentioned in the submission text. Although you get the same result in VBA 20 too, it's just cleaner.
Yeah, for some reason it did not wish to show itself so nicely when I went a looking. However, I am confused about what you mean about VBA 20, because three roms, which matched the movie, all de-synched for me. Granted it doesn't matter, since "Use 19" is in the text.
The game still explodes :P By "cleaner" I mean it just doesn't glitch out; it just stops working.
Perma-banned
Player (121)
Joined: 2/11/2007
Posts: 1522
This is a great run and I look forward to the ongoing exploitation of these games.
submission text wrote:
It would be a mistake not to go with the [anime] theme after naming the protagonist Ash on Pokemon Yellow, the Pikachu version... the one that after all tries to resemble the anime.
You don't really stick with anything else in the "anime" and your audience will be entirely confused anyways, so I think next time you could just use the faster Ash and Blue ;) You should also try your bots on King's Bounty next. On a side note, does anyone know why even though I had it on mute, it said "Pika!" in a horribly digitized voice during the title sequence?
I make a comic with no image files and you should read it. While there is a lower class, I am in it, and while there is a criminal element I am of it, and while there is a soul in prison, I am not free. -Eugene Debs
Joined: 2/26/2007
Posts: 1365
Location: Minnesota
alden wrote:
On a side note, does anyone know why even though I had it on mute, it said "Pika!" in a horribly digitized voice during the title sequence?
Maybe VBA has a thing for yellow rats, too? *GASP!* Maybe Bisqbot has a crush, too! My girlfriend's car radio has a mute all, but it only knocks the volume down 10 notches, or so. Maybe that is what is happening here?
adelikat wrote:
I very much agree with this post.
Bobmario511 wrote:
Forget party hats, Christmas tree hats all the way man.
Joined: 5/15/2006
Posts: 102
This is the typical movie in which the vote option "What?" would come in handy! HAHA And that ain't a bad thing! Yes vote from me, that was a yet another damn incredible glitchy find.
gia
Player (109)
Joined: 5/3/2006
Posts: 223
There's a huge pikachu, ash, gary, rattata leaving pallet and rocket with special music at the end and the lame story I wrote to fit the stuff together :P Basically, to me Ash+Blue didn't make sense, it was Yellow+Blue (and Red+Blue and Blue+Red) or Ash+Gary. But if more people would prefer it that way you can voice now and I'll edit the movie, it would only be a problem if there's no random battle within two frames, because 3 frames on this pc would take like 2 weeks straight and I have to use it. If somebody wants to offer processing power to search for a pidgey within 3 frames though say it now. About Kings Bounty I had just read that topic a couple days ago!, my bot is for VBA not Genesis, if the emulator's code is public I suppose I could write a quick movie bot provided I don't get lost in the code, but I'd definitely not run it, Aqfaq might be interested though. btw why am I given the option to vote on my run.
Former player
Joined: 6/25/2006
Posts: 138
Location: Fort Collins, CO
Cool find, yes vote. Also nice submission text! I like your second suggested screenshot, that's what I'd go with.
Skilled player (1827)
Joined: 4/20/2005
Posts: 2161
Location: Norrköping, Sweden
What in the name of God just happened? :O Yes vote.
Joined: 11/11/2006
Posts: 1235
Location: United Kingdom
So this resets the game during a save causing corruption to progress? Hmm sounds a teeny bit sketchy, but you won't hear any complaints from me at least. I'll be watching this when I have access to my emulators.
<adelikat> I am annoyed at my irc statements ending up in forums & sigs
Senior Moderator
Joined: 8/4/2005
Posts: 5777
Location: Away
gia wrote:
btw why am I given the option to vote on my run.
That's because our liberal forum software doesn't discriminate. :D Also, much respect for the run. I haven't watched it yet, but gamebreaking is always a notable thing.
Warp wrote:
Edit: I think I understand now: It's my avatar, isn't it? It makes me look angry.
Editor, Expert player (2330)
Joined: 5/15/2007
Posts: 3933
Location: Germany
Watched it on youtube Amazing run! Yes vote!
Joined: 4/3/2005
Posts: 575
Location: Spain
My suggestion for the screenshot is on 2:12 on the youtube video, when professor Oak tells Ash that this room is where champions are "honored for their exploits". I would even suggest an animated GIF just to fit all text on the screenshot. I were waiting for this run, expecting a final time of about 45 minutes, and this is absolutely astounding! I got you, Gia! (o")º ( Ø )
No.
Tompa
Any
Editor, Expert player (2216)
Joined: 8/15/2005
Posts: 1942
Location: Mullsjö, Sweden
This is insane... Poor game... :( Awesome run though, one of the most glitches I've ever seen.
Post subject: Screenshots and animated gif.
Joined: 11/11/2006
Posts: 1235
Location: United Kingdom
DrJones wrote:
[...]when professor Oak tells Ash that this room is where champions are "honored for their exploits". I would even suggest an animated GIF just to fit all text on the screenshot.
Ask and you shall receive. Also: Go! 9999999999999999999999999999999999!
<adelikat> I am annoyed at my irc statements ending up in forums & sigs
Former player
Joined: 12/22/2006
Posts: 193
Location: Flowood, MS
I vote for the former; the latter is just too hilarious a moment to spoil.
<adelikat> tony hawk is porn for me <Comicalflop>my mom is hot
Senior Moderator
Joined: 8/4/2005
Posts: 5777
Location: Away
Even if using gif as a screenshot won't work out, even the last frame of the animation will be sufficient for conveying delicious engrish-spiced irony.
Warp wrote:
Edit: I think I understand now: It's my avatar, isn't it? It makes me look angry.
Joined: 11/11/2006
Posts: 1235
Location: United Kingdom
moozooh wrote:
Even if using gif as a screenshot won't work out, even the last frame of the animation will be sufficient for conveying delicious engrish-spiced irony.
I don't see why it wouldn't be. Since only 3 colours are used in that whole scene, the filesize is tiny. While a compressed 8-bit png would be rediculously small file also, I feel the gif portrays more information than a static image.
<adelikat> I am annoyed at my irc statements ending up in forums & sigs