Regionfree Button Activator

Started by Bully@Wiiplaza, April 02, 2011, 05:21:02 PM

Previous topic - Next topic

Bully@Wiiplaza

My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

Nutmeg

You could use a patch code.

Use the F6 codetype (region free) to find the button activator and then send the activator to the 0x80001500 memory range.
I'm inbetween your legs... that's not awkward.

Bully@Wiiplaza

#2
Button Activator Adress: 8065B89C (MH3 PAL)

Attempt (Adress: 80042508)
lis r12, 0x8000 # load upper address
ori r12, r12, 0x1500 # load lower adress
lwz r11, 204 (r30) # load 32bit value into r11
stw r11, 204 (r30) # store r11 into r30 + 204 (converted to HEX)
lhz r3,204(r30) # original instruction

[spoiler]
 CR:24222488  XER:20000000  CTR:00000000 DSIS:00400000
DAR:8065B89C SRR0:80042508 SRR1:00009032   LR:800422CC
 r0:00000000   r1:807AFC00   r2:8079FF60   r3:00000000
 r4:00000000   r5:0000000C   r6:8065B8CB   r7:00000000
 r8:8065B899   r9:00000001  r10:00070009  r11:807AFBD0
r12:00070009  r13:8079B2E0  r14:00000000  r15:00000000
r16:00000000  r17:00000000  r18:00000000  r19:00000000
r20:00000000  r21:00000000  r22:00000000  r23:80581650
r24:8065D310  r25:8065B8CC  r26:8065B808  r27:8065B868
r28:8065B832  r29:00000000  r30:8065B7D0  r31:8065AA60

 f0:3F800000   f1:07E00890   f2:15E01120   f3:1ED81BA8
 f4:24C01F10   f5:3F800000   f6:3D886B67   f7:3EAAAAAA
 f8:3E124924   f9:3DBA2E6E  f10:3D886B35  f11:3D4BDA7A
f12:34055607  f13:36FFD9FC  f14:00000000  f15:00000000
f16:00000000  f17:00000000  f18:00000000  f19:00000000
f20:00000000  f21:00000000  f22:00000000  f23:00000000
f24:00000000  f25:00000000  f26:00000000  f27:00000000
f28:00000000  f29:00000000  f30:00000000  f31:00000000
[/spoiler]
[spoiler]80042088:  9421FFA0   stwu   r1,-96(r1)
8004208C:  7C0802A6   mflr   r0
80042090:  90010064   stw   r0,100(r1)
80042094:  39610060   addi   r11,r1,96
80042098:  484153DD   bl   0x80457474
8004209C:  7C761B78   mr   r22,r3
800420A0:  3C004330   lis   r0,17200
800420A4:  90010020   stw   r0,32(r1)
800420A8:  3C004330   lis   r0,17200
800420AC:  90010028   stw   r0,40(r1)
800420B0:  1FA30350   mulli   r29,r3,848
800420B4:  3C608066   lis   r3,-32666
800420B8:  3B03B7D0   subi   r24,r3,18480
800420BC:  7FF8EA14   add   r31,r24,r29
800420C0:  3B9F0062   addi   r28,r31,98
800420C4:  3B7F0098   addi   r27,r31,152
800420C8:  3B5F0038   addi   r26,r31,56
800420CC:  3C608066   lis   r3,-32666
800420D0:  3BC3D2D0   subi   r30,r3,11568
800420D4:  3C608058   lis   r3,-32680
800420D8:  3B231630   addi   r25,r3,5680
800420DC:  A01F00D6   lhz   r0,214(r31)
800420E0:  B01F00D8   sth   r0,216(r31)
800420E4:  A01F00DE   lhz   r0,222(r31)
800420E8:  B01F00E0   sth   r0,224(r31)
800420EC:  3C608066   lis   r3,-32666
800420F0:  3863AA60   subi   r3,r3,21920
800420F4:  818308D8   lwz   r12,2264(r3)
800420F8:  7D8903A6   mtctr   r12
800420FC:  4E800421   bctrl   
80042100:  28030001   cmplwi   r3,1
80042104:  40820010   bne-   0x80042114
80042108:  7EC3B378   mr   r3,r22
8004210C:  48000785   bl   0x80042890
80042110:  480006C8   b   0x800427d8
80042114:  7FF7FB78   mr   r23,r31
80042118:  7EC3B378   mr   r3,r22
8004211C:  389F0034   addi   r4,r31,52
80042120:  484ACF21   bl   0x804ef040
80042124:  90770030   stw   r3,48(r23)
80042128:  2C160000   cmpwi   r22,0
8004212C:  40820018   bne-   0x80042144
80042130:  80170030   lwz   r0,48(r23)
80042134:  900DBA20   stw   r0,-17888(r13)
80042138:  7FE3FB78   mr   r3,r31
8004213C:  80030034   lwz   r0,52(r3)
80042140:  900DBA24   stw   r0,-17884(r13)
80042144:  80170030   lwz   r0,48(r23)
80042148:  2C00FFFE   cmpwi   r0,-2
8004214C:  41820010   beq-   0x8004215c
80042150:  483F3F51   bl   0x804360a0
80042154:  28030001   cmplwi   r3,1
80042158:  40820010   bne-   0x80042168
8004215C:  7EC3B378   mr   r3,r22
80042160:  480007C1   bl   0x80042920
80042164:  48000674   b   0x800427d8
80042168:  80170030   lwz   r0,48(r23)
8004216C:  2C000000   cmpwi   r0,0
80042170:  40820068   bne-   0x800421d8
80042174:  3C608066   lis   r3,-32666
80042178:  3803B7D0   subi   r0,r3,18480
8004217C:  7C60EA14   add   r3,r0,r29
80042180:  80030034   lwz   r0,52(r3)
80042184:  28000001   cmplwi   r0,1
80042188:  41820010   beq-   0x80042198
8004218C:  28000002   cmplwi   r0,2
80042190:  41820010   beq-   0x800421a0
80042194:  48000014   b   0x800421a8
80042198:  7F78DB78   mr   r24,r27
8004219C:  48000010   b   0x800421ac
800421A0:  7F98E378   mr   r24,r28
800421A4:  48000008   b   0x800421ac
800421A8:  7F58D378   mr   r24,r26
800421AC:  7EC3B378   mr   r3,r22
800421B0:  7F04C378   mr   r4,r24
800421B4:  484AD81D   bl   0x804ef9d0
800421B8:  7EC3B378   mr   r3,r22
800421BC:  7F04C378   mr   r4,r24
800421C0:  38A00002   li   r5,2
800421C4:  484B683D   bl   0x804f8a00
800421C8:  7EC3B378   mr   r3,r22
800421CC:  7F04C378   mr   r4,r24
800421D0:  38A00001   li   r5,1
800421D4:  484B698D   bl   0x804f8b60
800421D8:  80170030   lwz   r0,48(r23)
800421DC:  2C000000   cmpwi   r0,0
800421E0:  408200C4   bne-   0x800422a4
800421E4:  3C608066   lis   r3,-32666
800421E8:  3803B7D0   subi   r0,r3,18480
800421EC:  7C60EA14   add   r3,r0,r29
800421F0:  80030034   lwz   r0,52(r3)
800421F4:  28000002   cmplwi   r0,2
800421F8:  408200AC   bne-   0x800422a4
800421FC:  A09C002A   lhz   r4,42(r28)
80042200:  38600000   li   r3,0
80042204:  38A00000   li   r5,0
80042208:  38000004   li   r0,4
8004220C:  7C0903A6   mtctr   r0
80042210:  A01E0000   lhz   r0,0(r30)
80042214:  7C800038   and   r0,r4,r0
80042218:  2C000000   cmpwi   r0,0
8004221C:  41820010   beq-   0x8004222c
80042220:  A0190000   lhz   r0,0(r25)
80042224:  7C600378   or   r0,r3,r0
80042228:  5403043E   rlwinm   r3,r0,0,16,31
8004222C:  A01E0002   lhz   r0,2(r30)
80042230:  7C800038   and   r0,r4,r0
80042234:  2C000000   cmpwi   r0,0
80042238:  41820010   beq-   0x80042248
8004223C:  A0190002   lhz   r0,2(r25)
80042240:  7C600378   or   r0,r3,r0
80042244:  5403043E   rlwinm   r3,r0,0,16,31
80042248:  A01E0004   lhz   r0,4(r30)
8004224C:  7C800038   and   r0,r4,r0
80042250:  2C000000   cmpwi   r0,0
80042254:  41820010   beq-   0x80042264
80042258:  A0190004   lhz   r0,4(r25)
8004225C:  7C600378   or   r0,r3,r0
80042260:  5403043E   rlwinm   r3,r0,0,16,31
80042264:  A01E0006   lhz   r0,6(r30)
80042268:  7C800038   and   r0,r4,r0
8004226C:  2C000000   cmpwi   r0,0
80042270:  41820010   beq-   0x80042280
80042274:  A0190006   lhz   r0,6(r25)
80042278:  7C600378   or   r0,r3,r0
8004227C:  5403043E   rlwinm   r3,r0,0,16,31
80042280:  3BDE0008   addi   r30,r30,8
80042284:  3B390008   addi   r25,r25,8
80042288:  38A50003   addi   r5,r5,3
8004228C:  4200FF84   bdnz+   0x80042210
80042290:  B07F00D6   sth   r3,214(r31)
80042294:  7EC3B378   mr   r3,r22
80042298:  7FE4FB78   mr   r4,r31
8004229C:  48000D41   bl   0x80042fdc
800422A0:  4800002C   b   0x800422cc
800422A4:  38000000   li   r0,0
800422A8:  B01F00D6   sth   r0,214(r31)
800422AC:  B01F00DE   sth   r0,222(r31)
800422B0:  B01F00E8   sth   r0,232(r31)
800422B4:  B01F00E6   sth   r0,230(r31)
800422B8:  B01F00EC   sth   r0,236(r31)
800422BC:  B01F00EA   sth   r0,234(r31)
800422C0:  7EC3B378   mr   r3,r22
800422C4:  7FE4FB78   mr   r4,r31
800422C8:  48000D15   bl   0x80042fdc
800422CC:  A07F00D6   lhz   r3,214(r31)
800422D0:  A01F00D8   lhz   r0,216(r31)
800422D4:  7C600078   andc   r0,r3,r0
800422D8:  5400043E   rlwinm   r0,r0,0,16,31
800422DC:  B01F00DA   sth   r0,218(r31)
800422E0:  A07F00D8   lhz   r3,216(r31)
800422E4:  A01F00D6   lhz   r0,214(r31)
800422E8:  7C600078   andc   r0,r3,r0
800422EC:  5400043E   rlwinm   r0,r0,0,16,31
800422F0:  B01F00DC   sth   r0,220(r31)
800422F4:  A07F00DE   lhz   r3,222(r31)
800422F8:  A01F00E0   lhz   r0,224(r31)
800422FC:  7C600078   andc   r0,r3,r0
80042300:  5400043E   rlwinm   r0,r0,0,16,31
80042304:  B01F00E2   sth   r0,226(r31)
80042308:  A07F00E0   lhz   r3,224(r31)
8004230C:  A01F00DE   lhz   r0,222(r31)
80042310:  7C600078   andc   r0,r3,r0
80042314:  5400043E   rlwinm   r0,r0,0,16,31
80042318:  B01F00E4   sth   r0,228(r31)
8004231C:  38800000   li   r4,0
80042320:  B09F00F8   sth   r4,248(r31)
80042324:  A07F00D8   lhz   r3,216(r31)
80042328:  A01F00D6   lhz   r0,214(r31)
8004232C:  7C030040   cmplw   r3,r0
80042330:  40820030   bne-   0x80042360
80042334:  A07F00FA   lhz   r3,250(r31)
80042338:  38030001   addi   r0,r3,1
8004233C:  B01F00FA   sth   r0,250(r31)
80042340:  A01F00FA   lhz   r0,250(r31)
80042344:  2800000C   cmplwi   r0,12
80042348:  4081001C   ble-   0x80042364
8004234C:  3800000A   li   r0,10
80042350:  B01F00FA   sth   r0,250(r31)
80042354:  A01F00D6   lhz   r0,214(r31)
80042358:  B01F00F8   sth   r0,248(r31)
8004235C:  48000008   b   0x80042364
80042360:  B09F00FA   sth   r4,250(r31)
80042364:  3C608066   lis   r3,-32666
80042368:  3803B7D0   subi   r0,r3,18480
8004236C:  7FC0EA14   add   r30,r0,r29
80042370:  3B3E00FC   addi   r25,r30,252
80042374:  3C608066   lis   r3,-32666
80042378:  3B03D2F0   subi   r24,r3,11536
8004237C:  3C608058   lis   r3,-32680
80042380:  3AE31630   addi   r23,r3,5680
80042384:  A01E00CA   lhz   r0,202(r30)
80042388:  B01E00CC   sth   r0,204(r30)
8004238C:  A0190000   lhz   r0,0(r25)
80042390:  B0190002   sth   r0,2(r25)
80042394:  A0190008   lhz   r0,8(r25)
80042398:  B019000A   sth   r0,10(r25)
8004239C:  801E0030   lwz   r0,48(r30)
800423A0:  2C000000   cmpwi   r0,0
800423A4:  40820148   bne-   0x800424ec
800423A8:  3C608066   lis   r3,-32666
800423AC:  3803AA60   subi   r0,r3,21920
800423B0:  7FE0B214   add   r31,r0,r22
800423B4:  881F07E4   lbz   r0,2020(r31)
800423B8:  28000001   cmplwi   r0,1
800423BC:  4082003C   bne-   0x800423f8
800423C0:  881F07E0   lbz   r0,2016(r31)
800423C4:  7C000774   extsb   r0,r0
800423C8:  2C000078   cmpwi   r0,120
800423CC:  4082002C   bne-   0x800423f8
800423D0:  7EC3B378   mr   r3,r22
800423D4:  1CB60018   mulli   r5,r22,24
800423D8:  3C808066   lis   r4,-32666
800423DC:  3804D250   subi   r0,r4,11696
800423E0:  7C802A14   add   r4,r0,r5
800423E4:  3CA08004   lis   r5,-32764
800423E8:  38A51F08   addi   r5,r5,7944
800423EC:  484ACFD5   bl   0x804ef3c0
800423F0:  38000000   li   r0,0
800423F4:  981F07E4   stb   r0,2020(r31)
800423F8:  3C608066   lis   r3,-32666
800423FC:  3803AA60   subi   r0,r3,21920
80042400:  7C80B214   add   r4,r0,r22
80042404:  886407E0   lbz   r3,2016(r4)
80042408:  7C600774   extsb   r0,r3
8004240C:  2C000000   cmpwi   r0,0
80042410:  4081000C   ble-   0x8004241c
80042414:  3803FFFF   subi   r0,r3,1
80042418:  980407E0   stb   r0,2016(r4)
8004241C:  3C608066   lis   r3,-32666
80042420:  3803B7D0   subi   r0,r3,18480
80042424:  7C60EA14   add   r3,r0,r29
80042428:  80030034   lwz   r0,52(r3)
8004242C:  28000001   cmplwi   r0,1
80042430:  41820010   beq-   0x80042440
80042434:  28000002   cmplwi   r0,2
80042438:  41820010   beq-   0x80042448
8004243C:  48000014   b   0x80042450
80042440:  A09B0000   lhz   r4,0(r27)
80042444:  48000010   b   0x80042454
80042448:  A09C0000   lhz   r4,0(r28)
8004244C:  48000008   b   0x80042454
80042450:  A09A0000   lhz   r4,0(r26)
80042454:  38600000   li   r3,0
80042458:  38A00000   li   r5,0
8004245C:  38000004   li   r0,4
80042460:  7C0903A6   mtctr   r0
80042464:  A0180000   lhz   r0,0(r24)
80042468:  7C800038   and   r0,r4,r0
8004246C:  2C000000   cmpwi   r0,0
80042470:  41820010   beq-   0x80042480
80042474:  A0170000   lhz   r0,0(r23)
80042478:  7C600378   or   r0,r3,r0
8004247C:  5403043E   rlwinm   r3,r0,0,16,31
80042480:  A0180002   lhz   r0,2(r24)
80042484:  7C800038   and   r0,r4,r0
80042488:  2C000000   cmpwi   r0,0
8004248C:  41820010   beq-   0x8004249c
80042490:  A0170002   lhz   r0,2(r23)
80042494:  7C600378   or   r0,r3,r0
80042498:  5403043E   rlwinm   r3,r0,0,16,31
8004249C:  A0180004   lhz   r0,4(r24)
800424A0:  7C800038   and   r0,r4,r0
800424A4:  2C000000   cmpwi   r0,0
800424A8:  41820010   beq-   0x800424b8
800424AC:  A0170004   lhz   r0,4(r23)
800424B0:  7C600378   or   r0,r3,r0
800424B4:  5403043E   rlwinm   r3,r0,0,16,31
800424B8:  A0180006   lhz   r0,6(r24)
800424BC:  7C800038   and   r0,r4,r0
800424C0:  2C000000   cmpwi   r0,0
800424C4:  41820010   beq-   0x800424d4
800424C8:  A0170006   lhz   r0,6(r23)
800424CC:  7C600378   or   r0,r3,r0
800424D0:  5403043E   rlwinm   r3,r0,0,16,31
800424D4:  3B180008   addi   r24,r24,8
800424D8:  3AF70008   addi   r23,r23,8
800424DC:  38A50003   addi   r5,r5,3
800424E0:  4200FF84   bdnz+   0x80042464
800424E4:  B07E00CA   sth   r3,202(r30)
800424E8:  4800000C   b   0x800424f4
800424EC:  38000000   li   r0,0
800424F0:  B01E00CA   sth   r0,202(r30)
800424F4:  A07E00CA   lhz   r3,202(r30)
800424F8:  A01E00CC   lhz   r0,204(r30)
800424FC:  7C600078   andc   r0,r3,r0
80042500:  5400043E   rlwinm   r0,r0,0,16,31
80042504:  B01E00CE   sth   r0,206(r30)
80042508:  A07E00CC   lhz   r3,204(r30) #Break
8004250C:  A01E00CA   lhz   r0,202(r30)
80042510:  7C600078   andc   r0,r3,r0
80042514:  5400043E   rlwinm   r0,r0,0,16,31
80042518:  B01E00D0   sth   r0,208(r30)
8004251C:  38800000   li   r4,0
80042520:  B09E00D2   sth   r4,210(r30)
80042524:  A07E00CC   lhz   r3,204(r30)
80042528:  A01E00CA   lhz   r0,202(r30)
8004252C:  7C030040   cmplw   r3,r0
80042530:  40820030   bne-   0x80042560
80042534:  A07E00D4   lhz   r3,212(r30)
80042538:  38030001   addi   r0,r3,1
8004253C:  B01E00D4   sth   r0,212(r30)
80042540:  A01E00D4   lhz   r0,212(r30)
80042544:  2800000C   cmplwi   r0,12
80042548:  4081001C   ble-   0x80042564
8004254C:  3800000A   li   r0,10
80042550:  B01E00D4   sth   r0,212(r30)
80042554:  A01E00CA   lhz   r0,202(r30)
80042558:  B01E00D2   sth   r0,210(r30)
8004255C:  48000008   b   0x80042564
80042560:  B09E00D4   sth   r4,212(r30)
80042564:  887901A8   lbz   r3,424(r25)
80042568:  38030001   addi   r0,r3,1
8004256C:  5400073E   rlwinm   r0,r0,0,28,31
80042570:  981901A8   stb   r0,424(r25)
80042574:  3C608066   lis   r3,-32666
80042578:  3803B7D0   subi   r0,r3,18480
8004257C:  7C80EA14   add   r4,r0,r29
80042580:  80040030   lwz   r0,48(r4)
80042584:  2C000000   cmpwi   r0,0
80042588:  40820128   bne-   0x800426b0
8004258C:  80040034   lwz   r0,52(r4)
80042590:  28000001   cmplwi   r0,1
80042594:  4082011C   bne-   0x800426b0
80042598:  A01E00CA   lhz   r0,202(r30)
8004259C:  B0190000   sth   r0,0(r25)
800425A0:  A01E00CC   lhz   r0,204(r30)
800425A4:  B0190002   sth   r0,2(r25)
800425A8:  A01E00CE   lhz   r0,206(r30)
800425AC:  B0190004   sth   r0,4(r25)
800425B0:  A01E00D0   lhz   r0,208(r30)
800425B4:  B0190006   sth   r0,6(r25)
800425B8:  A01E00D2   lhz   r0,210(r30)
800425BC:  B0190022   sth   r0,34(r25)
800425C0:  A01E00D4   lhz   r0,212(r30)
800425C4:  B0190024   sth   r0,36(r25)
800425C8:  7EC3B378   mr   r3,r22
800425CC:  48000CF5   bl   0x800432c0
800425D0:  A81B0002   lha   r0,2(r27)
800425D4:  C8228050   lfd   f1,-32688(r2)
800425D8:  6C008000   xoris   r0,r0,32768
800425DC:  90010024   stw   r0,36(r1)
800425E0:  C8010020   lfd   f0,32(r1)
800425E4:  EC000828   fsubs   f0,f0,f1
800425E8:  881901A8   lbz   r0,424(r25)
800425EC:  1C00000C   mulli   r0,r0,12
800425F0:  7C790214   add   r3,r25,r0
800425F4:  D00300E8   stfs   f0,232(r3)
800425F8:  A81B0004   lha   r0,4(r27)
800425FC:  6C008000   xoris   r0,r0,32768
80042600:  9001002C   stw   r0,44(r1)
80042604:  C8010028   lfd   f0,40(r1)
80042608:  EC000828   fsubs   f0,f0,f1
8004260C:  881901A8   lbz   r0,424(r25)
80042610:  1C00000C   mulli   r0,r0,12
80042614:  7C790214   add   r3,r25,r0
80042618:  D00300EC   stfs   f0,236(r3)
8004261C:  A81B0006   lha   r0,6(r27)
80042620:  6C008000   xoris   r0,r0,32768
80042624:  90010024   stw   r0,36(r1)
80042628:  C8010020   lfd   f0,32(r1)
8004262C:  EC000828   fsubs   f0,f0,f1
80042630:  881901A8   lbz   r0,424(r25)
80042634:  1C00000C   mulli   r0,r0,12
80042638:  7C790214   add   r3,r25,r0
8004263C:  D00300F0   stfs   f0,240(r3)
80042640:  A81B002A   lha   r0,42(r27)
80042644:  6C008000   xoris   r0,r0,32768
80042648:  9001002C   stw   r0,44(r1)
8004264C:  C8010028   lfd   f0,40(r1)
80042650:  EC000828   fsubs   f0,f0,f1
80042654:  881901A8   lbz   r0,424(r25)
80042658:  1C00000C   mulli   r0,r0,12
8004265C:  7C790214   add   r3,r25,r0
80042660:  D0030028   stfs   f0,40(r3)
80042664:  A81B002C   lha   r0,44(r27)
80042668:  6C008000   xoris   r0,r0,32768
8004266C:  90010024   stw   r0,36(r1)
80042670:  C8010020   lfd   f0,32(r1)
80042674:  EC000828   fsubs   f0,f0,f1
80042678:  881901A8   lbz   r0,424(r25)
8004267C:  1C00000C   mulli   r0,r0,12
80042680:  7C790214   add   r3,r25,r0
80042684:  D003002C   stfs   f0,44(r3)
80042688:  A81B002E   lha   r0,46(r27)
8004268C:  6C008000   xoris   r0,r0,32768
80042690:  9001002C   stw   r0,44(r1)
80042694:  C8010028   lfd   f0,40(r1)
80042698:  EC000828   fsubs   f0,f0,f1
8004269C:  881901A8   lbz   r0,424(r25)
800426A0:  1C00000C   mulli   r0,r0,12
800426A4:  7C790214   add   r3,r25,r0
800426A8:  D0030030   stfs   f0,48(r3)
800426AC:  4800008C   b   0x80042738
800426B0:  38000000   li   r0,0
800426B4:  B0190000   sth   r0,0(r25)
800426B8:  B0190008   sth   r0,8(r25)
800426BC:  B0190012   sth   r0,18(r25)
800426C0:  B0190010   sth   r0,16(r25)
800426C4:  B0190016   sth   r0,22(r25)
800426C8:  B0190014   sth   r0,20(r25)
800426CC:  38610014   addi   r3,r1,20
800426D0:  C0228048   lfs   f1,-32696(r2)
800426D4:  FC400890   fmr   f2,f1
800426D8:  FC600890   fmr   f3,f1
800426DC:  4BFFF815   bl   0x80041ef0
800426E0:  7C641B78   mr   r4,r3
800426E4:  881901A8   lbz   r0,424(r25)
800426E8:  1C00000C   mulli   r0,r0,12
800426EC:  7C790214   add   r3,r25,r0
800426F0:  386300E8   addi   r3,r3,232
800426F4:  4BFFF7B1   bl   0x80041ea4
800426F8:  38610008   addi   r3,r1,8
800426FC:  C0228048   lfs   f1,-32696(r2)
80042700:  FC400890   fmr   f2,f1
80042704:  FC600890   fmr   f3,f1
80042708:  4BFFF7E9   bl   0x80041ef0
8004270C:  7C641B78   mr   r4,r3
80042710:  881901A8   lbz   r0,424(r25)
80042714:  1C00000C   mulli   r0,r0,12
80042718:  7C790214   add   r3,r25,r0
8004271C:  38630028   addi   r3,r3,40
80042720:  4BFFF785   bl   0x80041ea4
80042724:  7EC3B378   mr   r3,r22
80042728:  3C808066   lis   r4,-32666
8004272C:  3804B7D0   subi   r0,r4,18480
80042730:  7C80EA14   add   r4,r0,r29
80042734:  48000B8D   bl   0x800432c0
80042738:  A0790000   lhz   r3,0(r25)
8004273C:  A0190002   lhz   r0,2(r25)
80042740:  7C600078   andc   r0,r3,r0
80042744:  5400043E   rlwinm   r0,r0,0,16,31
80042748:  B0190004   sth   r0,4(r25)
8004274C:  A0790002   lhz   r3,2(r25)
80042750:  A0190000   lhz   r0,0(r25)
80042754:  7C600078   andc   r0,r3,r0
80042758:  5400043E   rlwinm   r0,r0,0,16,31
8004275C:  B0190006   sth   r0,6(r25)
80042760:  A0790008   lhz   r3,8(r25)
80042764:  A019000A   lhz   r0,10(r25)
80042768:  7C600078   andc   r0,r3,r0
8004276C:  5400043E   rlwinm   r0,r0,0,16,31
80042770:  B019000C   sth   r0,12(r25)
80042774:  A079000A   lhz   r3,10(r25)
80042778:  A0190008   lhz   r0,8(r25)
8004277C:  7C600078   andc   r0,r3,r0
80042780:  5400043E   rlwinm   r0,r0,0,16,31
80042784:  B019000E   sth   r0,14(r25)
80042788:  38800000   li   r4,0
8004278C:  B0990022   sth   r4,34(r25)
80042790:  A0790002   lhz   r3,2(r25)
80042794:  A0190000   lhz   r0,0(r25)
80042798:  7C030040   cmplw   r3,r0
8004279C:  40820030   bne-   0x800427cc
800427A0:  A0790024   lhz   r3,36(r25)
800427A4:  38030001   addi   r0,r3,1
800427A8:  B0190024   sth   r0,36(r25)
800427AC:  A0190024   lhz   r0,36(r25)
800427B0:  2800000C   cmplwi   r0,12
800427B4:  4081001C   ble-   0x800427d0
800427B8:  3800000A   li   r0,10
800427BC:  B0190024   sth   r0,36(r25)
800427C0:  A0190000   lhz   r0,0(r25)
800427C4:  B0190022   sth   r0,34(r25)
800427C8:  48000008   b   0x800427d0
800427CC:  B0990024   sth   r4,36(r25)
800427D0:  56C3063E   rlwinm   r3,r22,0,24,31
800427D4:  48001B95   bl   0x80044368
800427D8:  39610060   addi   r11,r1,96
800427DC:  48414CE5   bl   0x804574c0
800427E0:  80010064   lwz   r0,100(r1)
800427E4:  7C0803A6   mtlr   r0
800427E8:  38210060   addi   r1,r1,96
800427EC:  4E800020   blr   
[/spoiler]
And it didn´t work, the button acticator couldn´t be seen on adress 8001500...
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

Nutmeg

lwz r11, 204 (r30) # load 32bit value into r11
stw r11, 204 (r30) # store r11 into r30 + 204 (converted to HEX)


That^ does nothing.  It loads the same value back to the button activator address.  What you want to do is send it to 0x80001500.
----------------------------------------

ori r12, r12, 0x1500 # load lower adress

This is not really needed.  It can be coded more efficiently.
----------------------------------------
Here is how I would do it:

lwz r11, 204(r30)
lis r12, 0x8000
stw r11, 0x1500(r12)
lhz r3,204(r30)


28001500 YYYYZZZZ

Is now a button activator
I'm inbetween your legs... that's not awkward.

Bully@Wiiplaza

#4
I sometimes notice how dumb I am  :rolleyes:
At least it worked, thx!
That´s newest hacking technology ;D
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

Nutmeg

Then if you change the C2 code into an F6 code it will be region free.  8)
I'm inbetween your legs... that's not awkward.

Bully@Wiiplaza

That´s what I did and works perfectly 8)
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

dcx2

Quote from: Nutmeg on April 09, 2011, 11:04:06 PM
Here is how I would do it:

lwz r11, 204(r30)
lis r12, 0x8000
stw r11, 0x1500(r12)
lhz r3,204(r30)


28001500 YYYYZZZZ

Is now a button activator

I would be nervous about using 80001500.  There's no telling if it's going to be used for something.  It might work for one game, and not another game.  I would recommend using a Gecko Register instead, since you know that's safe.

Also, you don't need to use r11, since the value you want is already in r3.

GR0 = 80001808


lhz r3,204(r30)
lis r12, 0x8000
sth r3, 0x1808(r12)


Now

28001808 YYYYZZZZ

Bully@Wiiplaza

I never ever noticed that 8001500 was filled with a value unequal 00000000.
I guess the coding is optimised now :smileyface:
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

dcx2

0 does not mean safe.  Something could expect that value to be 0 and when it's not, problems could happen.

It might not happen for games, it might break channels instead.  You never know.  That's the problem with the "random address in memory" approach.  It's like standing in a room, lights off, with a gun, and one of your friends.  Sure, the room is big, and you *probably* won't shoot your friend...

Nutmeg

Every game I've hacked (which is not many, so my opinion is somewhat invalid) has been safe to use random addresses from 80001500 to somewhere close to 80001600 (differs for each game).

It might even be possible to increase the code capacity of the code handler because there is room at the 80001500.  (I have no clue how the code handler works.  This probably made no sense.)

So yeah, I agree about shooting in a dark room with your friend thing, but in this case, you're shooting straight up, where the exception is when your friend is Spiderman. (Or some bizzarre game)
I'm inbetween your legs... that's not awkward.

Bully@Wiiplaza

That reminds of something.
Would it be possible to extend the amount of codeslines you can apply at the same time, cuz it´s automatically freezing if they are more than like 220... :-[
My Wii hacking site...
http://bullywiihacks.com/

My youtube account with a lot of hacking videos...
http://www.youtube.com/user/BullyWiiPlaza

~Bully

dcx2

I'm curious, what did your regionfree button activator end up looking like in the end?

I tried looking for the disasm you showed in a post above but I couldn't find it.