VineCorrupt was started as a college class project and was originally inspired from Vinny's corruption videos and a program made by Rikerz called The Vinesauce ROM Corrupter. I noticed that Rikerz's program was designed to work with the NES and had many features associated with only that console. Range corruption, automation of corruption/testing, specification of bytes and bits to change inside. Corrupt randomly an existing file. Select an existing file from your computer and define how much do you want to corrupt it. VineCorrupt is an easy tool that allows you to corrupt ROM files and discs which create weird and interesting results.

Emulator Game Memory corruption

Edit on Github | Updated: 15th May 2021

Game corruption has become a hot topic recently due to many you tubers playing through games that have in some way had their memory corrupted.

This practise can cause the game to produce some weird and wonderful effects which can be entertaining to watch.

However game memory corruption can also be a very effective tool for reverse engineering games.

One of the troubles with reversing games is that there are no variable names so the memory is one giant blob of bytes that are unlabelled. By corrupting this memory and watching the effect on the game you can start to figure out what part of memory does what.

You can then map the memory reads/writes back to the game code to get an indication of what a function or piece of assembly code is doing for the game.

ROM Corruptors have existed since the year 2000 with many no longer being updated, however there are 2 main corruptors that are still in use today ¹:

Vinesauce ROM Corruptor
Real Time Corruptor

Vinesauce ROM Corruptor

The Vinesauce ROM Corruptor was developed due to inspiration from YouTuber Vinesauce rom corruption videos. It corrupts the ROM file itself rather than memory, so technically it can be used on any file ².

Real Time Corruptor

The Real Time Corruptor was developed by Phil Girard and Dan Barreiro as a way to corrupt emulated games in an easy to use manner.

RTC Engines

There are a number of different “Engines” available in RTC, these are basically different ways to corrupt the data, the corruptors available are:

Nightmare engine - throws random bytes at the selected memory regions
Hellgenie Engine (cheats) - applies random cheats (e.g game engine codes)
Distortion Engine (Bytes) - creates blast backups and re-applies them later
External ROM Plugin - use with Glitch Harvester

Error Delay

The error delay chooses how much time to wait between each blasted byte.

Memory Zones

Memory Zones are areas of memory that are allowed to be corrupted. For example you could only select Video RAM for only graphical glitches ³.

Blast Radius

The blast radius controls how it corrupts memory, there are a few options:

SPREAD - spreads corruptions random across selected memory
CHUNK - corrupts all the memory in one chunk
BURST - same as chunk but split into 10 different areas

Blast Type

Blast type chooses how to change the bytes that are to be blasted. Basically how it selects the value to replace the old memory value. There are three blast types:

Random - Random value is placed at that byte location
Tilt - it will go up or down a value
Random Tilt - both combined

If you are looking for a specific thing in the game it is good to set the region of memory that would most likely contain that data along with setting the Blast Radius to CHUNK.

Time Flow & Time Map

Emulator Corruptor

If you choose to use TimeStack it will keep creating a save state every X number of seconds (configurable).

The time map consists of a green line that represents time, orange line is fast forward and the blue line is rewinding.

This basically allows you to keep track of what is happening in the game while you corrupt, so you can go back in time to undo corruptions.

Glitch Harvester

The Glitch Harvester comes as part of RTC but works in a very different manner. It works on save states, allowing you to quickly try different random corruptions and save the ones you like.

It works with RTC as it still uses the selected engine and settings from RTC, it just provides an additional interface for save state management.

Blast Editor

Mac spider solitaire free. Not currently available but will be very useful int he future to see the exact bytes that were corrupted and what their new value is.

This section covers techniques for corrupting games for specific consoles.

Nintendo Entertainment System

One Lone Coder on youtube has quite a fun video showing random NES memory corruption. Unfortunately it doesn’t mention any source code release of the changes made to the emulator and it doesn’t mention how much memory gets corrupted at a time.

But it is quite fun to watch as the levels get more and more corrupted as it seems the corruption happens after a set number of frames.

Nintendo 64

Nintendo 64 corruption is covered in depth on the Corrupt.Wiki site available here:Basic/Advanced ROM Corruption - Corrupt.wiki

Gamecube & Wii (Dolphin)

This uses the Real Time Corruptor which is a tool for specifically corrupting the memory of emulated games ⁴.

Emulator Corruptor

[(416) RTC Guide Part 1 Main Program - YouTube](https://www.youtube.com/watch?v=sIELpn4-Umw)

Nes Corruptor Emulator

Consoles to Corrupt‎ > ‎

NES Games

This page will tell you how to corrupt NES games.

These programs up top just run the ROMs. We're now going to get a program to mess with the memory of these ROMs. There are many corruptors to use. The Real Time Corrupter is an emulator with a built-in corrupter. So, that won't be included in the list of corruptors. There is a main one that I will be using here. It is called the Vinesauce Corruptor.

Though, I'll mention the RTC. Now, after downloading a corrupter, an emulator, and a ROM, we can have some fun!

Here is a simple video on corrupting with the Vinesauce Corrupter. Keep in mind that understanding the place in the memory that will affect the game play is key to good corruptions.

Something else worth noting: The video is showing how to corrupt SNES Games. Nothing is different for NES Games, just put your NES emulator in the emulator directory.

Vinesauce Corruptor

To understand where to corrupt, you'll need understanding of the programming structure of these ROM files. Luckily, there is some information on the topic. Click here to learn more.

It is very simple once you get on the right track. A good increment is helpful for corrupting. Make this small. To ensure amazingly entertaining corruptions, make sure to have the start byte low. Automatically ending the end byte is good in some cases. If you start the start byte low, it well most likely crash. Now it is a fight against trial and error. You will eventually get a really cool one, but you don't, and get to the end of the ROM, change the increment and start over.

RTC

In RTC, there will be no 'bytes', it will contain many different engines:

Nightmare Engine (Bytes)
Hellgenie Engine (Cheats)
Distortion Engine (Graphics)

The one