Invalid Text Command

The game uses a jump table to call the various text commands that are in the game but it never checks if they are valid, so any invalid commands jumps to whatever offset is found at the offset in the jump table.

In our example we use 0xE9 which quite quickly leads to the buttons and then we can just hold a certain combination to jump to our code in SRAM.

Buttons:

• Player 1: Select + left
• Player 2: Select + Y
• Player 3: L

There whatever code is present is being executed, we prepared some code that fixes the string in the save file so it won't crash again and set the final day flag and then just save the game.

Now the second save file will forever directly go to the credits.

Example: View