Mobile script

From Glitch City Wiki
Jump to navigation Jump to search
This article is incomplete. Please feel free to add any missing information about the subject. It is missing: Lots of general information, intended behaviors.

The mobile scripts are scripts in Pokémon Crystal which use the control character 0x15, followed by a parameter used to specify the mobile function. These scripts originated in the Japanese version for the Mobile System GB service, but it is still possible to exploit them in the English versions.

In particular, while these scripts were meant to range from 0x01 to 0x0F, there is no error prevention for the sequence 0x15 0x00; now the subject of a popular arbitrary code execution method (see 0x1500 control code arbitrary code execution).

Documentation

For more information, see here.

  • 15 00 - Invalid (arbitrary code execution at WRAM CD46 in Japanese versions, or at WRAM CD52 in English versions).
  • 15 01 - Function17f081 (in the disassembly documentation this is function 0)
  • 15 02 - Function17f0f8
  • 15 03 - Function17f154
  • 15 04 - Function17f181
  • 15 05 - Function17f1d0
  • 15 06 - Function17f220
  • 15 07 - Function17f27b
  • 15 08 - Function17f2cb (can print the value of a number that varies based on player's position on the map when forced in a player's name in the Japanese version).
  • 15 09 - MobileScript_PlayerName (capable of arbitrary code execution or freezes in general in the Japanese version, when 15 09 is in various strings such as the player's name or a Pokémon's nickname)
  • 15 0A - MobileScript_Prefecture (prints a prefecture name, e.g. Aichi prefecture; あいちけん).
  • 15 0B - Print some digits (e.g. 000).
  • 15 0C - "Hello!" (こんにちは !), followed by other text (email form?).
  • 15 0D - Function17f3f0
  • 15 0E - Function17f41d
  • 15 0F - Terminate mobile script?
  • 15 10+ - Terminate mobile script (in the disassembly documentation this is function f)
This article or section is a stub. You can help Glitch City Wiki by expanding it.