Skip to content
0:00 / 0:00

#arbitrarycodeexecution#supermarioworld#openbus

Using Lakitu's Cloud to Defeat Bowser Quickly

Retro Game Mechanics Explained

254K subscribers • 6 videos on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.

Advanced. Deep dive for people who know the field.

527K views3 years ago1 recommendation

Game developmentSystems programmingRetro games and consolesGame programmingExploits and vulnerabilities

An in-depth explanation of how arbitrary code execution and memory corruption glitches work in Super Mario World.

Why does Lakitu's cloud manipulate Bowser? And how do you get one in the first place? It's all explained right here. LINKS Support the channel on Patreon: patreon.com/rgmechex Support the channel on SubscribeStar: subscribestar.com/rgmechex Join the RGMechEx Discord Server: discord.rgmechex.com Follow RGMechEx on Twitter: twitter.com/RetroGameMechEx Follow RGMechEx on Cohost: cohost.org/RGMechEx INLINE LINKS Bismuth's 11 Exit Speedrun Explained: youtube.com/watch?v=OnfZgk3QL5U More about the Item Swap: youtu.be/1SGfYkXoGjg?t=1042 More about open bus: youtu.be/PvfhANgLrm4 CHAPTERS - Intro - Eating a Football Player - Magic Open Bus Ride - There's Glitches in my Cloud - Cloudy with a Chance of Mechakoopas - Outro CORRECTION At , replace all instances of $5C with $4C! $4C is the JMP instruction. $5C is the JML instruction, which takes 3 operand bytes. It would also get stuck in a loop with the program counter executing from $5C5C5C over and over instead of $014C4C.

Why it's here

1 person recommends this

What people say. Recommended as an exceptionally detailed explanation of arbitrary code execution and hardware-level glitches in Super Mario World.

u/rolfrin r/ReverseEngineering • Recommends

Retro Game Mechanics Explained - Using Lakitu's Cloud to Defeat Bowser Quickly YouTube, explanation of arbitrary code execution and other glitches