By understanding how the GB/GBC CPU works. Since the memory is not cleared on power off, you can inject data (and code) into it. These CPUs use fixed memory addresses, so if you get the credit screen’s address in an emulator, you can inject it into the memory and, eventually, the code will be executed by the CPU.