MIPS: Jokering in SWES

If you know how to make a joker in any game, this might be helpful if you want to make a joker in SWES.

Controller Adresses: (These are already in real adressing)


SELECT — 08C63F62
START — 08C63F61
DPAD UP —08C63F67
DPAD RIGHT —08C63F6A
DPAD DOWN —08C63F68
DPAD LEFT —08C63F69
L TRIGGER —08C63F63
R TRIGGER —08C63F64
TRIANGLE —08C63F5E
CIRCLE —08C63F5C
CROSS —08C63F5B
SQUARE —08C63F5D

Controller Value is always 00FF.

Templates:


Hold Button Joker:
Hook
lui t9, $First half of code address + 1 if second half is more than 8000
nop
lui t8, $First half of controller address
lh t8, $Second half of controller address(t8)
addiu t7, zero, $00FF
nop
beq t8, t7, $Address of "First Half of Value (ON)"
nop
lui t6, $First Half of Value (OFF)
addiu t6, t6, $Second Half of Value (OFF)
sw t6, $Second Half of code address(t9)
jr ra
nop
lui t6, $First Half of Value (ON)
addiu t6, t6, $Second Half of value (ON)
sw t6, $Second Half of Code address(t9)
jr ra

Three Button Joker:
-Hook
-Lui t0 $First Half Of Controller Adress (+0880)
-Lbu t3 $Second Half Of Controller Adress 1(t0) //Button1
-Lbu t2 $Second Half Of Controller Adress 2(t0) //Button2
-Lbu t1 $Second Half Of Controller Adress 3(t0) //Button3
-Addiu t4 zero $00FF
-Bne t3 t4 $jr ra
-Nop
-Bne t2 t4 $jr ra
-Nop
-Bne t1 t4 $jr ra
-Lui t5 $Upper Code Adress (+0880)
-Lui t6 $Upper Value
-Addiu t6 t6 $Lower Value
-Sw t6 $Lower Code Adress(t5)
-Jr ra

Two Button Joker:
-Hook
-Lui t0 $First Half Of Controller Adress (+0880)
-Lbu t2 $Second Half Of Controller Adress 1(t0) //Button1
-Lbu t1 $Second Half Of Controller Adress 2(t0) //Button2
-Addiu t4 zero $00FF
-Nop
-Bne t2 t4 $jr ra
-Nop
-Bne t1 t4 $jr ra
-Lui t5 $Upper Code Adress (+0880)
-Lui t6 $Upper Value
-Addiu t6 t6 $Lower Value
-Sw t6 $Lower Code Adress(t5)
-Jr ra

On/Off Joker:
Hook
lui t0, $(loads first half of controller address + 0880)
lbu t9, $(loads second half of controller address 1)(t0) //On Button
lbu t0, $(loads second half of controller address 2)(t0) //Off Button
lui t1, $(loads first half of code address + 0880)
ori t2, zero, $00FF
ori t3, zero, $00FF
lui t4, $(loads first half of hacked/on value)
ori t5, t4, $(loads second half of hacked/on value)
lui t6, $(loads first half of original/off value)
ori t6, t6, $(loads second half of original/off value)
bne t9, t2, $(branches the next bne)
nop
sw t5, $(loads second half of code address)(t1)
bne t0, t3, $(branches to the jr ra)
nop
sw t6, $(loads second half of code address)(t1)
jr ra

I think that everyone will be confused, but maybe there are some people who understand it...

~..::UnLeasheD::..

Nice

Gozitan wrote:

Nice

You don't even know what this is.

Anyway, ty.

Quote :

You don't even know what this is.

Anyway, ty.

I dont cus i didnt bother to read it

What means MIPS?

nice. trying hard to understand. i think i kinda do. whats the on off code for the L button? thanks

<*>Xtr3mE~HuNt3r<*> wrote:

What means MIPS?

Microprocessor without Interlocked Pipeline Stages

I'm sure this helped you

howd you learn all this?

checkmate wrote:

<*>Xtr3mE~HuNt3r<*> wrote:

What means MIPS?

Microprocessor without Interlocked Pipeline Stages

I'm sure this helped you

Thx yes it did.

[HACK]LeaderDandino wrote:

howd you learn all this?

I see 3 ways :
- you can "feel" it, which I did but took me quite a long time.
- you can look for tutos on Google, but they could be confusing and they will show a lot of instructions that you will never use in jokers as it's also a computer assembly language.
- you can learn these basic things and try out :

** the hook (usually the first line of your joker) allows your system to read your code. Indeed its value is a jump ($ j) which you know now I think.
For example 0A200003 as a value will have this opcode and arguments :
$ j 0880000C
0880000C is the real adress of what you usually see as 0000000C. Just add 08800000. So it means when it's read by your system it will go read at the indicated adress.
The adress of the hook can be either a free adress (in this case you'll have to turn your code on in main menu) or adresses that "constantly refresh" (these can be found in existing jokers or using tutos of OHG)

** You have to choose a free area of your RAM to make your joker otherwise you could make bugs :>.<:

** In Unleashed's templates, each line is composed of the operation code, then registers arguments and then immediate arguments after the "$" :
- the arguments of this form t8 are registers. They are slots where you load values and do operations on them.
NB : in t8, the "t" means temporary that is to say that it will be cleared at the end of the routine (ie when a jr ra 03E00008 is met).
- immediate arguments are used to make an operation between them and a register and then store the result in a register for example.
- the operation codes are the instructions that the system will follow. I can tell you what the most common ones do :

addiu t4 zero $00FF (add immediate unsigned) : adds 000000FF to ... nothing (the meaning of the zero register) and stores the result in the t4 register.

lui t8 $08C6 (load unsigned immediate) : stores 08C60000 in the t8 register.

lw t9 $3CA4 (t8) (load word) : takes the value that is at the t8+3CA4 adress of the RAM and stores it in the t9 register.

sw t9 $3CA4 (t8) (store word) : it's the opposite, stores the value saved in t9 at the t8+3CA4 adress of the RAM.

beq t1 t2 $label (branch on equal) : jumps to the label (an adress) if t1 is equal to t2.

jr ra (03E00008) : sends back to the beginning of the routine (the code but the hook)

nop (no operation) : it's 00000000 and nothing is done. It has to be put between branching instructions and after a jr ra for example.

** the last step is to convert what you came to into hexadecimal form. You can do it using PS2DIS (I can't help you with it as I never used it myself) or your cheat device, which diplays opcodes and args (boring at the beginning but then you know what the hex values look like for common instructions).



Here we are. It might have been confusing

The best thing to do would be to take a template and explain it, which I shall do soon cos' I'm out of time now

wow! thanks for all the help, how old are you?

Again, good guide checkmate :p

impressive

Thx all !

[HACK]LeaderDandino wrote:

wow! thanks for all the help, how old are you?

16

unleashed or any1 can you mod this code, so u have to eather hit the l trigger twice to enable or if that isnt possible, hold down L ? it would be greatly appreaciated

#Enable Jetpack [Down]
;UnLeasHeD
;Press Down
0x0001271C 0x0A200380
0x00000E00 0x3C1908A2
0x00000E08 0x3C1808C6
0x00000E0C 0x93183F68
0x00000E10 0x240F00FF
0x00000E18 0x130F0006
0x00000E20 0x3C0E27BE
0x00000E24 0x25CEFFF0
0x00000E28 0xAF2E60E4
0x00000E2C 0x03E00008
0x00000E34 0x3C0E03E0
0x00000E38 0x25CE0008
0x00000E3C 0xAF2E60E4
0x00000E40 0x03E00008

[HACK]LeaderDandino wrote:

unleashed or any1 can you mod this code, so u have to eather hit the l trigger twice to enable or if that isnt possible, hold down L ? it would be greatly appreaciated

#Enable Jetpack [Down]
;UnLeasHeD
;Press Down
0x0001271C 0x0A200380
0x00000E00 0x3C1908A2
0x00000E08 0x3C1808C6
0x00000E0C 0x93183F68
0x00000E10 0x240F00FF
0x00000E18 0x130F0006
0x00000E20 0x3C0E27BE
0x00000E24 0x25CEFFF0
0x00000E28 0xAF2E60E4
0x00000E2C 0x03E00008
0x00000E34 0x3C0E03E0
0x00000E38 0x25CE0008
0x00000E3C 0xAF2E60E4
0x00000E40 0x03E00008

You said "down L". Do you mean L+Down ?

No holdng L . Thanks

can u speak ummm... human and not computer there... u lost me at the word opcode

no offense.. ive always wanted to make my own codes... but all i know are the basics like the "find value" function on nitepr

http://www.onehitgamer.com/threads/psp-coding-tutorial-archive-v2-0.36578/


http://www.onehitgamer.com/threads/good-psp-coding-tutorial-archive.31703/

thnx unleashed 10/10

lol, I only know basics and cba to find out more.

everyones going legit so I'm not going to learn any more about how to hack from anyone.