Possible to do? :confused:
You could use a patch code.
Use the F6 codetype (region free) to find the button activator and then send the activator to the 0x80001500 memory range.
Button Activator Adress: 8065B89C (MH3 PAL)
Attempt (Adress: 80042508)
lis r12, 0x8000 # load upper address
ori r12, r12, 0x1500 # load lower adress
lwz r11, 204 (r30) # load 32bit value into r11
stw r11, 204 (r30) # store r11 into r30 + 204 (converted to HEX)
lhz r3,204(r30) # original instruction
[spoiler]
CR:24222488 XER:20000000 CTR:00000000 DSIS:00400000
DAR:8065B89C SRR0:80042508 SRR1:00009032 LR:800422CC
r0:00000000 r1:807AFC00 r2:8079FF60 r3:00000000
r4:00000000 r5:0000000C r6:8065B8CB r7:00000000
r8:8065B899 r9:00000001 r10:00070009 r11:807AFBD0
r12:00070009 r13:8079B2E0 r14:00000000 r15:00000000
r16:00000000 r17:00000000 r18:00000000 r19:00000000
r20:00000000 r21:00000000 r22:00000000 r23:80581650
r24:8065D310 r25:8065B8CC r26:8065B808 r27:8065B868
r28:8065B832 r29:00000000 r30:8065B7D0 r31:8065AA60
f0:3F800000 f1:07E00890 f2:15E01120 f3:1ED81BA8
f4:24C01F10 f5:3F800000 f6:3D886B67 f7:3EAAAAAA
f8:3E124924 f9:3DBA2E6E f10:3D886B35 f11:3D4BDA7A
f12:34055607 f13:36FFD9FC f14:00000000 f15:00000000
f16:00000000 f17:00000000 f18:00000000 f19:00000000
f20:00000000 f21:00000000 f22:00000000 f23:00000000
f24:00000000 f25:00000000 f26:00000000 f27:00000000
f28:00000000 f29:00000000 f30:00000000 f31:00000000
[/spoiler]
[spoiler]80042088: 9421FFA0 stwu r1,-96(r1)
8004208C: 7C0802A6 mflr r0
80042090: 90010064 stw r0,100(r1)
80042094: 39610060 addi r11,r1,96
80042098: 484153DD bl 0x80457474
8004209C: 7C761B78 mr r22,r3
800420A0: 3C004330 lis r0,17200
800420A4: 90010020 stw r0,32(r1)
800420A8: 3C004330 lis r0,17200
800420AC: 90010028 stw r0,40(r1)
800420B0: 1FA30350 mulli r29,r3,848
800420B4: 3C608066 lis r3,-32666
800420B8: 3B03B7D0 subi r24,r3,18480
800420BC: 7FF8EA14 add r31,r24,r29
800420C0: 3B9F0062 addi r28,r31,98
800420C4: 3B7F0098 addi r27,r31,152
800420C8: 3B5F0038 addi r26,r31,56
800420CC: 3C608066 lis r3,-32666
800420D0: 3BC3D2D0 subi r30,r3,11568
800420D4: 3C608058 lis r3,-32680
800420D8: 3B231630 addi r25,r3,5680
800420DC: A01F00D6 lhz r0,214(r31)
800420E0: B01F00D8 sth r0,216(r31)
800420E4: A01F00DE lhz r0,222(r31)
800420E8: B01F00E0 sth r0,224(r31)
800420EC: 3C608066 lis r3,-32666
800420F0: 3863AA60 subi r3,r3,21920
800420F4: 818308D8 lwz r12,2264(r3)
800420F8: 7D8903A6 mtctr r12
800420FC: 4E800421 bctrl
80042100: 28030001 cmplwi r3,1
80042104: 40820010 bne- 0x80042114
80042108: 7EC3B378 mr r3,r22
8004210C: 48000785 bl 0x80042890
80042110: 480006C8 b 0x800427d8
80042114: 7FF7FB78 mr r23,r31
80042118: 7EC3B378 mr r3,r22
8004211C: 389F0034 addi r4,r31,52
80042120: 484ACF21 bl 0x804ef040
80042124: 90770030 stw r3,48(r23)
80042128: 2C160000 cmpwi r22,0
8004212C: 40820018 bne- 0x80042144
80042130: 80170030 lwz r0,48(r23)
80042134: 900DBA20 stw r0,-17888(r13)
80042138: 7FE3FB78 mr r3,r31
8004213C: 80030034 lwz r0,52(r3)
80042140: 900DBA24 stw r0,-17884(r13)
80042144: 80170030 lwz r0,48(r23)
80042148: 2C00FFFE cmpwi r0,-2
8004214C: 41820010 beq- 0x8004215c
80042150: 483F3F51 bl 0x804360a0
80042154: 28030001 cmplwi r3,1
80042158: 40820010 bne- 0x80042168
8004215C: 7EC3B378 mr r3,r22
80042160: 480007C1 bl 0x80042920
80042164: 48000674 b 0x800427d8
80042168: 80170030 lwz r0,48(r23)
8004216C: 2C000000 cmpwi r0,0
80042170: 40820068 bne- 0x800421d8
80042174: 3C608066 lis r3,-32666
80042178: 3803B7D0 subi r0,r3,18480
8004217C: 7C60EA14 add r3,r0,r29
80042180: 80030034 lwz r0,52(r3)
80042184: 28000001 cmplwi r0,1
80042188: 41820010 beq- 0x80042198
8004218C: 28000002 cmplwi r0,2
80042190: 41820010 beq- 0x800421a0
80042194: 48000014 b 0x800421a8
80042198: 7F78DB78 mr r24,r27
8004219C: 48000010 b 0x800421ac
800421A0: 7F98E378 mr r24,r28
800421A4: 48000008 b 0x800421ac
800421A8: 7F58D378 mr r24,r26
800421AC: 7EC3B378 mr r3,r22
800421B0: 7F04C378 mr r4,r24
800421B4: 484AD81D bl 0x804ef9d0
800421B8: 7EC3B378 mr r3,r22
800421BC: 7F04C378 mr r4,r24
800421C0: 38A00002 li r5,2
800421C4: 484B683D bl 0x804f8a00
800421C8: 7EC3B378 mr r3,r22
800421CC: 7F04C378 mr r4,r24
800421D0: 38A00001 li r5,1
800421D4: 484B698D bl 0x804f8b60
800421D8: 80170030 lwz r0,48(r23)
800421DC: 2C000000 cmpwi r0,0
800421E0: 408200C4 bne- 0x800422a4
800421E4: 3C608066 lis r3,-32666
800421E8: 3803B7D0 subi r0,r3,18480
800421EC: 7C60EA14 add r3,r0,r29
800421F0: 80030034 lwz r0,52(r3)
800421F4: 28000002 cmplwi r0,2
800421F8: 408200AC bne- 0x800422a4
800421FC: A09C002A lhz r4,42(r28)
80042200: 38600000 li r3,0
80042204: 38A00000 li r5,0
80042208: 38000004 li r0,4
8004220C: 7C0903A6 mtctr r0
80042210: A01E0000 lhz r0,0(r30)
80042214: 7C800038 and r0,r4,r0
80042218: 2C000000 cmpwi r0,0
8004221C: 41820010 beq- 0x8004222c
80042220: A0190000 lhz r0,0(r25)
80042224: 7C600378 or r0,r3,r0
80042228: 5403043E rlwinm r3,r0,0,16,31
8004222C: A01E0002 lhz r0,2(r30)
80042230: 7C800038 and r0,r4,r0
80042234: 2C000000 cmpwi r0,0
80042238: 41820010 beq- 0x80042248
8004223C: A0190002 lhz r0,2(r25)
80042240: 7C600378 or r0,r3,r0
80042244: 5403043E rlwinm r3,r0,0,16,31
80042248: A01E0004 lhz r0,4(r30)
8004224C: 7C800038 and r0,r4,r0
80042250: 2C000000 cmpwi r0,0
80042254: 41820010 beq- 0x80042264
80042258: A0190004 lhz r0,4(r25)
8004225C: 7C600378 or r0,r3,r0
80042260: 5403043E rlwinm r3,r0,0,16,31
80042264: A01E0006 lhz r0,6(r30)
80042268: 7C800038 and r0,r4,r0
8004226C: 2C000000 cmpwi r0,0
80042270: 41820010 beq- 0x80042280
80042274: A0190006 lhz r0,6(r25)
80042278: 7C600378 or r0,r3,r0
8004227C: 5403043E rlwinm r3,r0,0,16,31
80042280: 3BDE0008 addi r30,r30,8
80042284: 3B390008 addi r25,r25,8
80042288: 38A50003 addi r5,r5,3
8004228C: 4200FF84 bdnz+ 0x80042210
80042290: B07F00D6 sth r3,214(r31)
80042294: 7EC3B378 mr r3,r22
80042298: 7FE4FB78 mr r4,r31
8004229C: 48000D41 bl 0x80042fdc
800422A0: 4800002C b 0x800422cc
800422A4: 38000000 li r0,0
800422A8: B01F00D6 sth r0,214(r31)
800422AC: B01F00DE sth r0,222(r31)
800422B0: B01F00E8 sth r0,232(r31)
800422B4: B01F00E6 sth r0,230(r31)
800422B8: B01F00EC sth r0,236(r31)
800422BC: B01F00EA sth r0,234(r31)
800422C0: 7EC3B378 mr r3,r22
800422C4: 7FE4FB78 mr r4,r31
800422C8: 48000D15 bl 0x80042fdc
800422CC: A07F00D6 lhz r3,214(r31)
800422D0: A01F00D8 lhz r0,216(r31)
800422D4: 7C600078 andc r0,r3,r0
800422D8: 5400043E rlwinm r0,r0,0,16,31
800422DC: B01F00DA sth r0,218(r31)
800422E0: A07F00D8 lhz r3,216(r31)
800422E4: A01F00D6 lhz r0,214(r31)
800422E8: 7C600078 andc r0,r3,r0
800422EC: 5400043E rlwinm r0,r0,0,16,31
800422F0: B01F00DC sth r0,220(r31)
800422F4: A07F00DE lhz r3,222(r31)
800422F8: A01F00E0 lhz r0,224(r31)
800422FC: 7C600078 andc r0,r3,r0
80042300: 5400043E rlwinm r0,r0,0,16,31
80042304: B01F00E2 sth r0,226(r31)
80042308: A07F00E0 lhz r3,224(r31)
8004230C: A01F00DE lhz r0,222(r31)
80042310: 7C600078 andc r0,r3,r0
80042314: 5400043E rlwinm r0,r0,0,16,31
80042318: B01F00E4 sth r0,228(r31)
8004231C: 38800000 li r4,0
80042320: B09F00F8 sth r4,248(r31)
80042324: A07F00D8 lhz r3,216(r31)
80042328: A01F00D6 lhz r0,214(r31)
8004232C: 7C030040 cmplw r3,r0
80042330: 40820030 bne- 0x80042360
80042334: A07F00FA lhz r3,250(r31)
80042338: 38030001 addi r0,r3,1
8004233C: B01F00FA sth r0,250(r31)
80042340: A01F00FA lhz r0,250(r31)
80042344: 2800000C cmplwi r0,12
80042348: 4081001C ble- 0x80042364
8004234C: 3800000A li r0,10
80042350: B01F00FA sth r0,250(r31)
80042354: A01F00D6 lhz r0,214(r31)
80042358: B01F00F8 sth r0,248(r31)
8004235C: 48000008 b 0x80042364
80042360: B09F00FA sth r4,250(r31)
80042364: 3C608066 lis r3,-32666
80042368: 3803B7D0 subi r0,r3,18480
8004236C: 7FC0EA14 add r30,r0,r29
80042370: 3B3E00FC addi r25,r30,252
80042374: 3C608066 lis r3,-32666
80042378: 3B03D2F0 subi r24,r3,11536
8004237C: 3C608058 lis r3,-32680
80042380: 3AE31630 addi r23,r3,5680
80042384: A01E00CA lhz r0,202(r30)
80042388: B01E00CC sth r0,204(r30)
8004238C: A0190000 lhz r0,0(r25)
80042390: B0190002 sth r0,2(r25)
80042394: A0190008 lhz r0,8(r25)
80042398: B019000A sth r0,10(r25)
8004239C: 801E0030 lwz r0,48(r30)
800423A0: 2C000000 cmpwi r0,0
800423A4: 40820148 bne- 0x800424ec
800423A8: 3C608066 lis r3,-32666
800423AC: 3803AA60 subi r0,r3,21920
800423B0: 7FE0B214 add r31,r0,r22
800423B4: 881F07E4 lbz r0,2020(r31)
800423B8: 28000001 cmplwi r0,1
800423BC: 4082003C bne- 0x800423f8
800423C0: 881F07E0 lbz r0,2016(r31)
800423C4: 7C000774 extsb r0,r0
800423C8: 2C000078 cmpwi r0,120
800423CC: 4082002C bne- 0x800423f8
800423D0: 7EC3B378 mr r3,r22
800423D4: 1CB60018 mulli r5,r22,24
800423D8: 3C808066 lis r4,-32666
800423DC: 3804D250 subi r0,r4,11696
800423E0: 7C802A14 add r4,r0,r5
800423E4: 3CA08004 lis r5,-32764
800423E8: 38A51F08 addi r5,r5,7944
800423EC: 484ACFD5 bl 0x804ef3c0
800423F0: 38000000 li r0,0
800423F4: 981F07E4 stb r0,2020(r31)
800423F8: 3C608066 lis r3,-32666
800423FC: 3803AA60 subi r0,r3,21920
80042400: 7C80B214 add r4,r0,r22
80042404: 886407E0 lbz r3,2016(r4)
80042408: 7C600774 extsb r0,r3
8004240C: 2C000000 cmpwi r0,0
80042410: 4081000C ble- 0x8004241c
80042414: 3803FFFF subi r0,r3,1
80042418: 980407E0 stb r0,2016(r4)
8004241C: 3C608066 lis r3,-32666
80042420: 3803B7D0 subi r0,r3,18480
80042424: 7C60EA14 add r3,r0,r29
80042428: 80030034 lwz r0,52(r3)
8004242C: 28000001 cmplwi r0,1
80042430: 41820010 beq- 0x80042440
80042434: 28000002 cmplwi r0,2
80042438: 41820010 beq- 0x80042448
8004243C: 48000014 b 0x80042450
80042440: A09B0000 lhz r4,0(r27)
80042444: 48000010 b 0x80042454
80042448: A09C0000 lhz r4,0(r28)
8004244C: 48000008 b 0x80042454
80042450: A09A0000 lhz r4,0(r26)
80042454: 38600000 li r3,0
80042458: 38A00000 li r5,0
8004245C: 38000004 li r0,4
80042460: 7C0903A6 mtctr r0
80042464: A0180000 lhz r0,0(r24)
80042468: 7C800038 and r0,r4,r0
8004246C: 2C000000 cmpwi r0,0
80042470: 41820010 beq- 0x80042480
80042474: A0170000 lhz r0,0(r23)
80042478: 7C600378 or r0,r3,r0
8004247C: 5403043E rlwinm r3,r0,0,16,31
80042480: A0180002 lhz r0,2(r24)
80042484: 7C800038 and r0,r4,r0
80042488: 2C000000 cmpwi r0,0
8004248C: 41820010 beq- 0x8004249c
80042490: A0170002 lhz r0,2(r23)
80042494: 7C600378 or r0,r3,r0
80042498: 5403043E rlwinm r3,r0,0,16,31
8004249C: A0180004 lhz r0,4(r24)
800424A0: 7C800038 and r0,r4,r0
800424A4: 2C000000 cmpwi r0,0
800424A8: 41820010 beq- 0x800424b8
800424AC: A0170004 lhz r0,4(r23)
800424B0: 7C600378 or r0,r3,r0
800424B4: 5403043E rlwinm r3,r0,0,16,31
800424B8: A0180006 lhz r0,6(r24)
800424BC: 7C800038 and r0,r4,r0
800424C0: 2C000000 cmpwi r0,0
800424C4: 41820010 beq- 0x800424d4
800424C8: A0170006 lhz r0,6(r23)
800424CC: 7C600378 or r0,r3,r0
800424D0: 5403043E rlwinm r3,r0,0,16,31
800424D4: 3B180008 addi r24,r24,8
800424D8: 3AF70008 addi r23,r23,8
800424DC: 38A50003 addi r5,r5,3
800424E0: 4200FF84 bdnz+ 0x80042464
800424E4: B07E00CA sth r3,202(r30)
800424E8: 4800000C b 0x800424f4
800424EC: 38000000 li r0,0
800424F0: B01E00CA sth r0,202(r30)
800424F4: A07E00CA lhz r3,202(r30)
800424F8: A01E00CC lhz r0,204(r30)
800424FC: 7C600078 andc r0,r3,r0
80042500: 5400043E rlwinm r0,r0,0,16,31
80042504: B01E00CE sth r0,206(r30)
80042508: A07E00CC lhz r3,204(r30) #Break
8004250C: A01E00CA lhz r0,202(r30)
80042510: 7C600078 andc r0,r3,r0
80042514: 5400043E rlwinm r0,r0,0,16,31
80042518: B01E00D0 sth r0,208(r30)
8004251C: 38800000 li r4,0
80042520: B09E00D2 sth r4,210(r30)
80042524: A07E00CC lhz r3,204(r30)
80042528: A01E00CA lhz r0,202(r30)
8004252C: 7C030040 cmplw r3,r0
80042530: 40820030 bne- 0x80042560
80042534: A07E00D4 lhz r3,212(r30)
80042538: 38030001 addi r0,r3,1
8004253C: B01E00D4 sth r0,212(r30)
80042540: A01E00D4 lhz r0,212(r30)
80042544: 2800000C cmplwi r0,12
80042548: 4081001C ble- 0x80042564
8004254C: 3800000A li r0,10
80042550: B01E00D4 sth r0,212(r30)
80042554: A01E00CA lhz r0,202(r30)
80042558: B01E00D2 sth r0,210(r30)
8004255C: 48000008 b 0x80042564
80042560: B09E00D4 sth r4,212(r30)
80042564: 887901A8 lbz r3,424(r25)
80042568: 38030001 addi r0,r3,1
8004256C: 5400073E rlwinm r0,r0,0,28,31
80042570: 981901A8 stb r0,424(r25)
80042574: 3C608066 lis r3,-32666
80042578: 3803B7D0 subi r0,r3,18480
8004257C: 7C80EA14 add r4,r0,r29
80042580: 80040030 lwz r0,48(r4)
80042584: 2C000000 cmpwi r0,0
80042588: 40820128 bne- 0x800426b0
8004258C: 80040034 lwz r0,52(r4)
80042590: 28000001 cmplwi r0,1
80042594: 4082011C bne- 0x800426b0
80042598: A01E00CA lhz r0,202(r30)
8004259C: B0190000 sth r0,0(r25)
800425A0: A01E00CC lhz r0,204(r30)
800425A4: B0190002 sth r0,2(r25)
800425A8: A01E00CE lhz r0,206(r30)
800425AC: B0190004 sth r0,4(r25)
800425B0: A01E00D0 lhz r0,208(r30)
800425B4: B0190006 sth r0,6(r25)
800425B8: A01E00D2 lhz r0,210(r30)
800425BC: B0190022 sth r0,34(r25)
800425C0: A01E00D4 lhz r0,212(r30)
800425C4: B0190024 sth r0,36(r25)
800425C8: 7EC3B378 mr r3,r22
800425CC: 48000CF5 bl 0x800432c0
800425D0: A81B0002 lha r0,2(r27)
800425D4: C8228050 lfd f1,-32688(r2)
800425D8: 6C008000 xoris r0,r0,32768
800425DC: 90010024 stw r0,36(r1)
800425E0: C8010020 lfd f0,32(r1)
800425E4: EC000828 fsubs f0,f0,f1
800425E8: 881901A8 lbz r0,424(r25)
800425EC: 1C00000C mulli r0,r0,12
800425F0: 7C790214 add r3,r25,r0
800425F4: D00300E8 stfs f0,232(r3)
800425F8: A81B0004 lha r0,4(r27)
800425FC: 6C008000 xoris r0,r0,32768
80042600: 9001002C stw r0,44(r1)
80042604: C8010028 lfd f0,40(r1)
80042608: EC000828 fsubs f0,f0,f1
8004260C: 881901A8 lbz r0,424(r25)
80042610: 1C00000C mulli r0,r0,12
80042614: 7C790214 add r3,r25,r0
80042618: D00300EC stfs f0,236(r3)
8004261C: A81B0006 lha r0,6(r27)
80042620: 6C008000 xoris r0,r0,32768
80042624: 90010024 stw r0,36(r1)
80042628: C8010020 lfd f0,32(r1)
8004262C: EC000828 fsubs f0,f0,f1
80042630: 881901A8 lbz r0,424(r25)
80042634: 1C00000C mulli r0,r0,12
80042638: 7C790214 add r3,r25,r0
8004263C: D00300F0 stfs f0,240(r3)
80042640: A81B002A lha r0,42(r27)
80042644: 6C008000 xoris r0,r0,32768
80042648: 9001002C stw r0,44(r1)
8004264C: C8010028 lfd f0,40(r1)
80042650: EC000828 fsubs f0,f0,f1
80042654: 881901A8 lbz r0,424(r25)
80042658: 1C00000C mulli r0,r0,12
8004265C: 7C790214 add r3,r25,r0
80042660: D0030028 stfs f0,40(r3)
80042664: A81B002C lha r0,44(r27)
80042668: 6C008000 xoris r0,r0,32768
8004266C: 90010024 stw r0,36(r1)
80042670: C8010020 lfd f0,32(r1)
80042674: EC000828 fsubs f0,f0,f1
80042678: 881901A8 lbz r0,424(r25)
8004267C: 1C00000C mulli r0,r0,12
80042680: 7C790214 add r3,r25,r0
80042684: D003002C stfs f0,44(r3)
80042688: A81B002E lha r0,46(r27)
8004268C: 6C008000 xoris r0,r0,32768
80042690: 9001002C stw r0,44(r1)
80042694: C8010028 lfd f0,40(r1)
80042698: EC000828 fsubs f0,f0,f1
8004269C: 881901A8 lbz r0,424(r25)
800426A0: 1C00000C mulli r0,r0,12
800426A4: 7C790214 add r3,r25,r0
800426A8: D0030030 stfs f0,48(r3)
800426AC: 4800008C b 0x80042738
800426B0: 38000000 li r0,0
800426B4: B0190000 sth r0,0(r25)
800426B8: B0190008 sth r0,8(r25)
800426BC: B0190012 sth r0,18(r25)
800426C0: B0190010 sth r0,16(r25)
800426C4: B0190016 sth r0,22(r25)
800426C8: B0190014 sth r0,20(r25)
800426CC: 38610014 addi r3,r1,20
800426D0: C0228048 lfs f1,-32696(r2)
800426D4: FC400890 fmr f2,f1
800426D8: FC600890 fmr f3,f1
800426DC: 4BFFF815 bl 0x80041ef0
800426E0: 7C641B78 mr r4,r3
800426E4: 881901A8 lbz r0,424(r25)
800426E8: 1C00000C mulli r0,r0,12
800426EC: 7C790214 add r3,r25,r0
800426F0: 386300E8 addi r3,r3,232
800426F4: 4BFFF7B1 bl 0x80041ea4
800426F8: 38610008 addi r3,r1,8
800426FC: C0228048 lfs f1,-32696(r2)
80042700: FC400890 fmr f2,f1
80042704: FC600890 fmr f3,f1
80042708: 4BFFF7E9 bl 0x80041ef0
8004270C: 7C641B78 mr r4,r3
80042710: 881901A8 lbz r0,424(r25)
80042714: 1C00000C mulli r0,r0,12
80042718: 7C790214 add r3,r25,r0
8004271C: 38630028 addi r3,r3,40
80042720: 4BFFF785 bl 0x80041ea4
80042724: 7EC3B378 mr r3,r22
80042728: 3C808066 lis r4,-32666
8004272C: 3804B7D0 subi r0,r4,18480
80042730: 7C80EA14 add r4,r0,r29
80042734: 48000B8D bl 0x800432c0
80042738: A0790000 lhz r3,0(r25)
8004273C: A0190002 lhz r0,2(r25)
80042740: 7C600078 andc r0,r3,r0
80042744: 5400043E rlwinm r0,r0,0,16,31
80042748: B0190004 sth r0,4(r25)
8004274C: A0790002 lhz r3,2(r25)
80042750: A0190000 lhz r0,0(r25)
80042754: 7C600078 andc r0,r3,r0
80042758: 5400043E rlwinm r0,r0,0,16,31
8004275C: B0190006 sth r0,6(r25)
80042760: A0790008 lhz r3,8(r25)
80042764: A019000A lhz r0,10(r25)
80042768: 7C600078 andc r0,r3,r0
8004276C: 5400043E rlwinm r0,r0,0,16,31
80042770: B019000C sth r0,12(r25)
80042774: A079000A lhz r3,10(r25)
80042778: A0190008 lhz r0,8(r25)
8004277C: 7C600078 andc r0,r3,r0
80042780: 5400043E rlwinm r0,r0,0,16,31
80042784: B019000E sth r0,14(r25)
80042788: 38800000 li r4,0
8004278C: B0990022 sth r4,34(r25)
80042790: A0790002 lhz r3,2(r25)
80042794: A0190000 lhz r0,0(r25)
80042798: 7C030040 cmplw r3,r0
8004279C: 40820030 bne- 0x800427cc
800427A0: A0790024 lhz r3,36(r25)
800427A4: 38030001 addi r0,r3,1
800427A8: B0190024 sth r0,36(r25)
800427AC: A0190024 lhz r0,36(r25)
800427B0: 2800000C cmplwi r0,12
800427B4: 4081001C ble- 0x800427d0
800427B8: 3800000A li r0,10
800427BC: B0190024 sth r0,36(r25)
800427C0: A0190000 lhz r0,0(r25)
800427C4: B0190022 sth r0,34(r25)
800427C8: 48000008 b 0x800427d0
800427CC: B0990024 sth r4,36(r25)
800427D0: 56C3063E rlwinm r3,r22,0,24,31
800427D4: 48001B95 bl 0x80044368
800427D8: 39610060 addi r11,r1,96
800427DC: 48414CE5 bl 0x804574c0
800427E0: 80010064 lwz r0,100(r1)
800427E4: 7C0803A6 mtlr r0
800427E8: 38210060 addi r1,r1,96
800427EC: 4E800020 blr
[/spoiler]
And it didn´t work, the button acticator couldn´t be seen on adress 8001500...
lwz r11, 204 (r30) # load 32bit value into r11
stw r11, 204 (r30) # store r11 into r30 + 204 (converted to HEX)
That^ does nothing. It loads the same value back to the button activator address. What you want to do is send it to 0x80001500.
----------------------------------------
ori r12, r12, 0x1500 # load lower adress
This is not really needed. It can be coded more efficiently.
----------------------------------------
Here is how I would do it:
lwz r11, 204(r30)
lis r12, 0x8000
stw r11, 0x1500(r12)
lhz r3,204(r30)
28001500 YYYYZZZZ
Is now a button activator
I sometimes notice how dumb I am :rolleyes:
At least it worked, thx!
That´s newest hacking technology ;D
Then if you change the C2 code into an F6 code it will be region free. 8)
That´s what I did and works perfectly 8)
Quote from: Nutmeg on April 09, 2011, 11:04:06 PM
Here is how I would do it:
lwz r11, 204(r30)
lis r12, 0x8000
stw r11, 0x1500(r12)
lhz r3,204(r30)
28001500 YYYYZZZZ
Is now a button activator
I would be nervous about using 80001500. There's no telling if it's going to be used for something. It might work for one game, and not another game. I would recommend using a Gecko Register instead, since you know that's safe.
Also, you don't need to use r11, since the value you want is already in r3.
GR0 = 80001808
lhz r3,204(r30)
lis r12, 0x8000
sth r3, 0x1808(r12)
Now
28001808 YYYYZZZZ
I never ever noticed that 8001500 was filled with a value unequal 00000000.
I guess the coding is optimised now :smileyface:
0 does not mean safe. Something could expect that value to be 0 and when it's not, problems could happen.
It might not happen for games, it might break channels instead. You never know. That's the problem with the "random address in memory" approach. It's like standing in a room, lights off, with a gun, and one of your friends. Sure, the room is big, and you *probably* won't shoot your friend...
Every game I've hacked (which is not many, so my opinion is somewhat invalid) has been safe to use random addresses from 80001500 to somewhere close to 80001600 (differs for each game).
It might even be possible to increase the code capacity of the code handler because there is room at the 80001500. (I have no clue how the code handler works. This probably made no sense.)
So yeah, I agree about shooting in a dark room with your friend thing, but in this case, you're shooting straight up, where the exception is when your friend is Spiderman. (Or some bizzarre game)
That reminds of something.
Would it be possible to extend the amount of codeslines you can apply at the same time, cuz it´s automatically freezing if they are more than like 220... :-[
I'm curious, what did your regionfree button activator end up looking like in the end?
I tried looking for the disasm you showed in a post above but I couldn't find it.