This is a new unnecessarily complex way to force a Pokémon encounter I came across that doesn't require arbitrary code execution per se, but it does require an out of bounds write from having too many Pokémon. The mechanics of this glitch (which involves having 9 or more Pokémon) are based on the participant Pokémon byte D058 (D057 in Yellow), which controls which Pokémon took part in battle and thus gain experience at the end of the battle.
In order for the game to register Pokémon that took part in battle, bits are set in address D058 (D057 in Yellow) for participant Pokémon 1-8. The problem is that the game does not restrict Pokémon 9 and 10 settings flags in the following bytes and the next byte D059 (D058 in Yellow) happens to be the instant encounter address.
This means we can send out Pokémon to corrupt the memory, and specifically sending out Pokémon 9, 11 and 13 will write hex:15 (Mew) to D059/8. While it is normally impossible to escape a battle without clearing D059/8 to 'no encounter', we can partially escape battle with a specific glitch item such as -g m (hex:6A) in Yellow or 9F (hex:5E) in Red/Blue.
In order to get this to work without arbitrary code execution you will need to do the following steps:
1) Obtain a Pokémon with Super Glitch as move 1 (e.g. ゥ ( Z4 hex:C3) at Level 35) and have a Nidoqueen/Z4 hybrid in the box (possible with Pokémon merge glitch) know Mega Punch Horn Drill, Reflect and Super Glitch.
2) Store a Grimer in box 1.
3) Save in front of a box in Cerulean Pokémon Center and then go to deposit the first Z4 in slot 1 but view its summary on the box menu before depositing.
4) Go to deposit again. If lucky you will now have 0 Pokémon and depositing a Pokémon will underflow the counter and give you 255. If your party menu doesn't corrupt try again with Z4 in slot 1.
5) Withdraw Grimer to get a party counter of 13 Pokémon.
6) Swap Pokémon 1 with Pokémon 2. If you don't do this you may get a Glitch City that requires Yellow's 9F to remove.
7) Use a Rare Candy on Pokémon 11 to avoid a freeze (possibly caused by zero maximum HP).
8) Enter a battle and use Full Heals on Pokémon 9, 11 and 13 and then send all of them out.
9) Use -gm (etc.) and Mew will appear.
10) Throw a Master Ball and the Mew should register in the Pokédex.
11) If you save your game now you will get a glitch boxset unless you go to heal Pokémon/switch boxes and if you do save your save file will be erased due to your name having no hex:50 terminator. To avoid this deposit all Pokémon above Cancel and then withdraw the Nidoqueen/Z4 hybrid...
12) Go to this spot ( and continuously view the summary of the hybrid (preferably many times) as certain attempts may not work. Your name should now be terminated.
13) Save by changing boxes, and then reset. Congratulations! You registered Mew in the Pokédex.
Note that sadly catching Mew with 13 Pokémon in the party will not add it to the party.
This glitch is similar to the multi-hit Pay Day earnings glitch (see
Unfortunately it seems you cannot use Red/Green v1.0's partial switch glitch (see to do this glitch while avoiding Super Glitch.
0 Comments