SMW ǀ Arbitrary Code Execution (ACE) ǀ X-Position Indicator [RTA]
Uploader: The Unintended Gamer
Original upload date: Wed, 24 Jun 2020 00:00:00 GMT
Archive date: Wed, 01 Dec 2021 08:36:56 GMT
Join SMW Discord: https://discord.gg/GhRyXcj
Discord: The_Unintended_Gamer
This is my attempt at a tutorial explaining how to perform unintended Arbitrary Code Execution (ACE) in Super Mario World.
Show more...
Super Mario World is a notoriously glitchy game, allowing the player to go beyond what was intended by the game designers. ACE allows modifying specific values in the game by executing pixel-perfect manipulations. With ACE, you can do pretty much what you want with the game… You can modify Mario’s Powerup Status (this video). You can also finish the game very quickly within Yoshi’s Island 2 (https://www.youtube.com/watch?v=NH1jvznymiI). You can even play Flappy Bird within SMW (https://www.youtube.com/watch?v=hB6eY73sLV0)!
Here, I want to perform an ACE to get Mario’s X-position display in the coin counter. The X-position indicator is required to install the Jailbreaker within a SMW Cartridge. The Jailbreaker, created by Seth Bling, allows to see and manipulate specific values within the game, like Mario’s powerup status (see the excellent work of Seth Bling: https://www.youtube.com/watch?v=_ZdiLOboLmE and https://docs.google.com/document/d/1uglrDhpT2Bwgx1jycMPCtU7n5k_-1dneo-hYCr-SOUI/edit). The X-position indicator can also be helpful to master the powerup incrementation glitch.
The X-position indicator ACE requires to have infinite time. For this, we perform also an ACE (see tutorial https://www.youtube.com/watch?v=PXCSKhVnlV4&t=7s for details). The Infinite time ACE glitches the first digit of the time counter. It will never be blank. For this first ACE, we have to put Mario at Powerup Status 5 through the Powerup Incrementation glitch (see https://www.youtube.com/watch?v=WSUzkRNTvbE for tutorial). At Power Status 5, go to Yoshi’s Island 2, where the ACE actually take place. To get infinite time, we perform 3 ACEs. There, with Yoshi, we grab Red Koopa and spit Fire at pixel perfect position several times. The first ACE allows to use the P-Switch for subsequent ACEs. The second ACE puts Mario at powerup status 21. Infinite time is obtained after the third ACE.
For the 4th ACE, with Yoshi, we grab Red Koopa and spit Fire at pixel perfect position several times. The ACE is done by grabbing the Mushroom from the Item box with the P-Switch, Yoshi and Mario precisely positioned. This ACE allows the use of the position of the P-Switch, Yoshi and Mario to perform subsequent ACEs. So by positioning them and grabbing the Mushroom from the Item box, we do seven more ACEs. At the end, the X-position of Mario is displayed in the coin counter. The values vary from 0 to P5 (255). If we collect a coin when the X-position indicator has a value higher than 99, then you get a life! Also, this ACE glitches a little bit the graphics. When Mario interacts with a sprite, it leaves a frozen image sprite on screen…
For more stuff on ACE in SMW see Dotarecool (https://www.youtube.com/user/dotsarecoo), Supernickid (https://www.youtube.com/user/SuperNickid) and Seth Bling (https://www.youtube.com/user/sethbling) channels.
Of note: My game file display A5 because I did several unintended exits. So, this file contains the 95 regular exits (all exits except the normal exit of Funky level, because I prefer Spring mode vs Autumn mode) plus:
-Bowser Front Door, normal exit (96)
-Bowser Back Door, normal exit (97)
-Yoshi’s House, normal exit (98)
-Funky, secret exit (99)
-101st exit (Yoshi’s Island 1 Wrong Warp exit) (100 or A0)
-102nd exit (TEST level normal exit) (101 or A1)
-104th exit (Forest of Illusion 4 Wrong Warp exit) (102 or A2)
-105th exit (Chocolate Secret, secret exit) (103 or A3)
-106th exit (Choco-Ghost House, secret exit) (104 or A4)
-108th exit (Chocolate Island 5, wrong warp + secret exit) (105 or A5)
Hope this video can help you in your quest to master SMW famous (and awesome) glitches.
My setup: I use an original Japanese Super Mario World cartridge played on a Super Retro Trio 3 Console (PAL version); I thus played in Real-Time Attack [RTA] without Saved States. Video and sound captured using a ‘Dazzle’ and ‘EasyCAP’ USB adapters (Composite signals) and ‘Debut’ software. Video editing done using Shotcut free software.
#SMW
#Glitch
#Tutorial