Wiki - GameHacking.org - User contributions [en]

Template:Game Genie

2024-04-14T18:31:03Z

Rimsky82:

{| class="wikitable" cellspacing="0" cellpadding="5" align="center" width="100%"
|-class="boxheader" valign="top"
! class="bottomtemphead" | '''[[Game Genie]]'''
|-
! class="bottomtemphead" | '''Galoob'''
|-
|class="bottomtemptext" align="center" | [[Game Genie (Game Boy)|Game Boy]] - [[Game Genie (Game Gear)|Game Gear]] - [[Game Genie (NES)|NES]] - [[Game Genie (Genesis)|Genesis]] - [[Game Genie (Super Nintendo)|Super Nintendo]] - [[Game Genie (Sega CD)|Sega CD]] (Cancelled)
|-
! class="bottomtemphead" | '''Hyperkin'''
|-
|class="bottomtemptext" align="center" | [[Game Genie (DS/DSi/3DS)‎|DS/DSi/3DS]] - [[Game Genie (PSP)|PSP]] (Cancelled) - [[Game Genie (Wii)|Wii]] (Cancelled) - [[Game Genie:Save Editor (PlayStation 3)|PlayStation 3]]
|}
<noinclude>[[Category:Templates]]</noinclude>

GameShark (Game Boy Advance)

2024-04-14T17:48:50Z

Rimsky82: /* Hardware */

[[File:GameSharkFirstModel GBA cartridge.jpg|thumb|right|160px|InterAct GameShark cartridge]]
The '''GameShark''' is a [[Game Enhancer]] for Game Boy Advance. It allows the user to enter cheat codes and download gamesaves. It comes with software that allows for users to download new cheat codes, or enter them manually with a keyboard.

Version 1 was actually a rebranded [[Action Replay (Game Boy Advance)|Action Replay]] until [[InterAct]] sold the GameShark brand name to [[Mad Catz]]. Mad Catz promptly released it's own GameShark as Version 2.

==Releases==
For the GameBoy Advance, InterAct released a single model, while MadCatz released three models. The 1st GBA model to be released was the 2001 InterAct GameShark. After that, MadCatz released the 1st GameShark SP for GBA in 2003. This is known as the 2nd GBA model. The GameShark SP devices are known as Karabiner GameSharks. All 3 models have 12 digits of code per line instead of 8, like the 1st model. The 1st model is similar to an Action Replay. the 3rd GBA model was released in 2004 with continued prodution in 2005. This MadCatz model was a white cartridge with a looped handle. This version came with PC syncing software and a USB cable but was incompatible with the GBASP. The 4th model had a similar design, but was black instead of white, and came with no software or a cable to use on the PC. This version was released in 2006 with continued production into 2007.

*'''GameShark''' (InterAct)
*'''GameShark''' (Mad Catz)
*'''GameShark SP'''

==Screenshots==
<gallery>
File:Gsa1.png|The switch (Model 1)
File:GameSharkModel1 Screen02.png|Main menu (Model 1)
</gallery>

==Hardware==
<gallery>
File:GameShark GBA Packaging 2.jpg|GameShark (1st model) box - 2001
File:GameSharkFirstModel GBA cartridge.jpg|GameShark (1st model) cartridge - 2001
File:GameSharkSPFourthModel GBA box.jpg|GameShark SP box
File:GameShark GBA Packaging 3.jpg|GameShark SP (2nd model) packaging - 2003
File:GameSharkFourthModel GBA cartridge.JPG|GameShark SP (2nd model) cartridge - 2003
File:GameSharkSecondModel GBA box.JPG|GameShark SP (3rd model) box
File:GameSharkSecondModel GBA box2.JPG|GameShark SP (3rd model) (alternate box)
File:GameSharkSecondModel GBA cartridge.JPG|GameShark (3rd model) cartridge
File:GameShark GBA packaging 4.jpg|GameShark SP (3rd model) packaging
File:Gameshark GBA Packaging.jpg|GameShark SP (4th model) box
File:GameShark_SP.gif|GameShark SP (4th model) cartridge
File:GameShark_SP_(GBA)_-_2006_and_2007.jpg| GameShark SP 2006 and 2007

</gallery>

==External Links==
*[http://store.gameshark.com/ GameShark Store]

{{GameShark}}

[[Category:GameShark]]

Hacking Game Boy Advance

2024-04-14T17:09:51Z

Rimsky82: /* Gameshark Advance Code Types */

{{Template:EnHacklopedia Header}}
==Hacking using VBA-H==

[[Image:vba_cheat.png|none|550px|center|VBA-H's Cheat Menu]]

[[Tools#VisualBoyAdvance_H|VBA-H]] (Visual Boy Advance - Hacker's Edition) is a modified version of Visual Boy Advance 1.7.2 developed by kenobi and Labmaster. As it was modified from VBA 1.7.2, it has the exact same compatibility which means that although it is compatible with the vast majority of GBA games, it will not work with all of them. The most notable games that are not compatible with this version are the Classic NES Series games.

The changes in VBA-H are all in the cheat menu. In addition to the options provided in the normal edition, VBA-SDL allows several restrictions, both by address range and difference from previous value. A flag compare option is provided as well as a way to force the displaying of results no matter how many were found.

[[Image:vba_debug.png|none|550px|center|VBA-H's disassembler]]

VBA-H provides the same disassembler that VBA provides. All registers are listed as well as the mode and flags. An R16 is listed; however this is simply CPSR mislabeled. A "Goto R15" option is provided which will move the disassembly to the latest instruction, and the window allows both ARM and THUMB to be viewed. This option is only a disassembler and not a debugger. For debugging, [[Tools#VBA-H_SDL|VBA-SDL-H]] must be used.

==Button Values==

On the GBA, the word at 0x04000130 '''always''' contains the buttons that are being pressed. The GBA stores the button values XORed with 0x3FF. The button values are as follows: 
{| class="EnHack-code"
! class="EnHack-addy" | Button
! class="EnHack-comments" | Value
|-
| class="EnHack-addy" | A
| class="EnHack-comments" | 1
|-
| class="EnHack-addy" | B
| class="EnHack-comments" | 2
|-
| class="EnHack-addy" | Select
| class="EnHack-comments" | 4
|-
| class="EnHack-addy" | Start
| class="EnHack-comments" | 8
|-
| class="EnHack-addy" | Right
| class="EnHack-comments" | 0x10
|-
| class="EnHack-addy" | Left
| class="EnHack-comments" | 0x20
|-
| class="EnHack-addy" | Up
| class="EnHack-comments" | 0x40
|-
| class="EnHack-addy" | Down
| class="EnHack-comments" | 0x80
|-
| class="EnHack-addy" | R
| class="EnHack-comments" | 0x100
|-
| class="EnHack-addy" | L
| class="EnHack-comments" | 0x200
|}

==Gameshark Advance and Action Replay v3==

===Description - Gameshark Advance===

[[Image:gsa1.png|center|Gameshark Advance Splash Screen]][[Image:arv1.png|center|Action Replay v1/2 Splash Screen]] [[Image:arv12.png|center|Action Replay v1/2 Main Screen]][[Image:arv13.png|center|Action Replay v1/2 Code Editing Screen]]

The Gameshark Advance was the original cheat device for the Gameboy Advance. While more functional than the cheat devices for the Gameboy, it is still far less functional than its equivalent for the N64. The GSA's code types include 8-, 16-, and 32-bit writes, a slide code, a 16-bit If Equal To conditional, and a 16-bit ROM patch. The GSA also does not provide a code searching feature, something that had been provided in all incarnations for the Gameboy. Finally, the codes are encrypted, a first for any handheld cheat device. In Europe, the Gameshark is referred to as the Action Replay. The two products shared a name starting with revision 3, an entirely different product referred to as ARv3.

===Gameshark Advance Code Types===

{| class="EnHack-codetypes"
! class="EnHack-type" colspan="3" | All the following codes are in RAW form. To work, they must be encrypted.
|-
! class="EnHack-type" | Code type
! class="EnHack-desc" | Description
|-
| class="EnHack-type" | 0aaaaaaa 000000xx
| class="EnHack-desc" | 8-bit RAM write Writes xx to 0aaaaaaa
|-
| class="EnHack-type" | 1aaaaaaa 0000xxxx
| class="EnHack-desc" | 16-bit RAM write Writes xxxx to 0aaaaaaa
|-
| class="EnHack-type" | 2aaaaaaa xxxxxxxx
| class="EnHack-desc" | 32-bit RAM write Writes xxxxxxxx to 0aaaaaaa
|-
| class="EnHack-type" | 3000cccc xxxxxxxx aaaaaaaa aaaaaaaa aaaaaaaa ...
| class="EnHack-desc" | 32-bit group write Writes xxxxxxxx to cccc different addresses. Due to a bug, xxxxxxxx is also written to the address xxxxxxxx. If cccc is odd, the last four bytes should be 0's.
|-
| class="EnHack-type" | 6aaaaaaa 0000xxxx
| class="EnHack-desc" | 16-bit ROM patch Intercepts reads to the address 0x08000000 + (0aaaaaaa >> 1) and returns the value xxxx when necessary. The GSA can handle a maximum of one user-defined ROM patch, and possibily zero depending on the type of master code used.
|-
| class="EnHack-type" | 6aaaaaaa 1000xxxx
| class="EnHack-desc" | 16-bit ROM patch Same as the above ROM patch except that it is enabled prior to the game booting.
|-
| class="EnHack-type" | 8a1aaaaa 000000xx
| class="EnHack-desc" | 8-bit GS Button RAM write Writes xx to 0a0aaaaa when the GS button is pressed.
|-
| class="EnHack-type" | 8a2aaaaa 0000xxxx
| class="EnHack-desc" | 16-bit GS Button RAM write Writes xxxx to 0a0aaaaa when the GS button is pressed.
|-
| class="EnHack-type" | 80F00000 0000xxxx
| class="EnHack-desc" | Slowdown on GS Button While the GS button is pressed, the GS will perform xxxx loops per call to the code handler, slowing down the game.
|-
| class="EnHack-type" | Daaaaaaa 0000xxxx
| class="EnHack-desc" | 16-bit If Equal To Executes the next code only if xxxx is equal to the value located at 0aaaaaaa.
|-
| class="EnHack-type" | E0zzxxxx aaaaaaaa
| class="EnHack-desc" | 16-bit Multiline If Equal To Executes the next zz codes only if xxxx is equal to the value located at 0aaaaaaa.
|-
| class="EnHack-type" | Faaaaaaa 00000x0y
| class="EnHack-desc" | Hook Routine (for Enablers) The GSA code handler hooks the routine at 0aaaaaaa. x determines whether or not the GSA must be turned off before starting the game. If it is 0, this is the case. y is the type of hook where it is one of the following: 1 - Executes code handler without backing up $lr. 0002 - Executes code handler and backs up $lr. 3 - Replaces a 32-bit pointer used for long branches.
|-
| class="EnHack-type" | xxxxxxxx 001DC0DE
| class="EnHack-desc" | ID Code (for Enablers) Used by GSA to autodetect games. xxxxxxxx should be the word located at 0x0800000AC.
|-
| class="EnHack-type" | DEADFACE 0000xxxx
| class="EnHack-desc" | DEADFACE Changes the encryption seeds.
|}

===Description - Action Replay v3===

[[Image:arv3.png|center|Action Replay v3 Disclaimer]][[Image:arv31.png|center|Action Replay v3 main screen]] [[Image:arv32.png|center|Action Replay v3 - Add Game]][[Image:arv33.png|center|Action Replay v3 options screen]]

After Interact went bankrupt and sold the Gameshark name rights, Datel decided to directly sell their product in North America. Because of this, the Action Replay name became used in both North America and Europe. This name synchrony began with the third revision of the AR, for the GBA. The ARv3 adds a massive number of code types, 114 in total. Additionally, the ARv3 uses a different encryption, although this has been cracked as well.

===Action Replay Code Types===

{| class="EnHack-codetypes"
! class="EnHack-type" | Type
! class="EnHack-desc" | Description
! class="EnHack-comments" | AR Crypt Code Type
|-
! class="EnHack-type" colspan="3" | Normal RAM Write Codes
|-
| class="EnHack-type" | 00a0aaaa xxxxxxyy
| class="EnHack-desc" | 8-bit RAM Write/Fill Fills the area from 0a00aaaa to 0a00aaaa + xxxxxx with yy.
| class="EnHack-comments" | 00
|-
| class="EnHack-type" | 02a0aaaa xxxxyyyy
| class="EnHack-desc" | 16-bit RAM Write/Fill Fills the area from 0a00aaaa to 0a00aaaa + xxxx * 2 with yyyy.
| class="EnHack-comments" | 01
|-
| class="EnHack-type" | 04a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit RAM Write Writes yyyyyyyy to 0a00aaaa.
| class="EnHack-comments" | 02
|-
! class="EnHack-type" colspan="3" | Pointer RAM Write Codes
|-
| class="EnHack-type" | 40a0aaaa xxxxxxyy
| class="EnHack-desc" | 8-bit Pointer RAM Write Writes yy to the address located in 0a00aaaa + xxxxxx.
| class="EnHack-comments" | 20
|-
| class="EnHack-type" | 42a0aaaa xxxxyyyy
| class="EnHack-desc" | 16-bit Pointer RAM Write Writes yyyy to the address located in 0a00aaaa + xxxx * 2.
| class="EnHack-comments" | 21
|-
| class="EnHack-type" | 44a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit Pointer RAM Write Writes yyyyyyyy to the address located in 0a00aaaa.
| class="EnHack-comments" | 22
|-
! class="EnHack-type" colspan="3" | Add Codes
|-
| class="EnHack-type" | 80a0aaaa 000000yy
| class="EnHack-desc" | 8-bit Add Code Adds yy to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 40
|-
| class="EnHack-type" | 82a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit Add Code Adds yyyy to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 41
|-
| class="EnHack-type" | 84a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit Add Code Adds yyyyyyyy to the word stored at 0a00aaaa.
| class="EnHack-comments" | 42
|-
! class="EnHack-type" colspan="3" | Write to IO Registers
|-
| class="EnHack-type" | C600aaaa 0000yyyy
| class="EnHack-desc" | 16-bit IO Register Write Writes yyyy to 0x0400aaaa.
| class="EnHack-comments" | 63
|-
| class="EnHack-type" | C700aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit IO Register Write Writes yyyyyyyy to 0x0400aaaa.
| class="EnHack-comments" | E3
|-
! class="EnHack-type" colspan="3" | If Equal To
|-
| class="EnHack-type" | 08a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If Equal To (1 line) Executes next code only if yy is equal to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 04
|-
| class="EnHack-type" | 48a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If Equal To (2 lines) Executes next two codes only if yy is equal to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 24
|-
| class="EnHack-type" | 88a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If Equal To (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is equal to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 44
|-
| class="EnHack-type" | C8a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If Equal To (Disable Codes) All codes are disabled when the byte at 0a00aaaa is not equal to yy.
| class="EnHack-comments" | 64
|-
| class="EnHack-type" | 0Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If Equal To (1 line) Executes next code only if yy is equal to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 05
|-
| class="EnHack-type" | 4Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If Equal To (2 lines) Executes next two codes only if yy is equal to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 25
|-
| class="EnHack-type" | 8Aa0aaaa 00000yyyy
| class="EnHack-desc" | 16-bit If Equal To (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is equal to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 45
|-
| class="EnHack-type" | CAa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If Equal To (Disable Codes) All codes are disabled when the halfword at 0a00aaaa is not equal to yy.
| class="EnHack-comments" | 65
|-
| class="EnHack-type" | 0Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If Equal To (1 line) Executes next code only if yy is equal to the word stored at 0a00aaaa.
| class="EnHack-comments" | 06
|-
| class="EnHack-type" | 4Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If Equal To (2 lines) Executes next two codes only if yy is equal to the word stored at 0a00aaaa.
| class="EnHack-comments" | 26
|-
| class="EnHack-type" | 8Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If Equal To (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is equal to the word stored at 0a00aaaa.
| class="EnHack-comments" | 46
|-
| class="EnHack-type" | CCa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If Equal To (Disable Codes) All codes are disabled when the word at 0a00aaaa is not equal to yy.
| class="EnHack-comments" | 66
|-
! class="EnHack-type" colspan="3" | If Not Equal To
|-
| class="EnHack-type" | 10a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If not equal To (1 line) Executes next code only if yy is not equal to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 08
|-
| class="EnHack-type" | 50a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If not equal To (2 lines) Executes next two codes only if yy is not equal to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 28
|-
| class="EnHack-type" | 90a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If not equal To (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the byte stored at 0a00aaaa.
| class="EnHack-comments" | 48
|-
| class="EnHack-type" | D0a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If not equal To (Disable Codes) All codes are disabled when the byte at 0a00aaaa is not not equal to yy.
| class="EnHack-comments" | 68
|-
| class="EnHack-type" | 12a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If not equal To (1 line) Executes next code only if yy is not equal to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 09
|-
| class="EnHack-type" | 52a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If not equal To (2 lines) Executes next two codes only if yy is not equal to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 29
|-
| class="EnHack-type" | 92a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If not equal To (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 49
|-
| class="EnHack-type" | D2a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If not equal To (Disable Codes) All codes are disabled when the halfword at 0a00aaaa is not not equal to yy.
| class="EnHack-comments" | 69
|-
| class="EnHack-type" | 14a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If not equal To (1 line) Executes next code only if yy is not equal to the word stored at 0a00aaaa.
| class="EnHack-comments" | 0A
|-
| class="EnHack-type" | 54a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If not equal To (2 lines) Executes next two codes only if yy is not equal to the word stored at 0a00aaaa.
| class="EnHack-comments" | 2A
|-
| class="EnHack-type" | 94a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If not equal To (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the word stored at 0a00aaaa.
| class="EnHack-comments" | 4A
|-
| class="EnHack-type" | D4a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If not equal To (Disable Codes) All codes are disabled when the word at 0a00aaaa is not not equal to yy.
| class="EnHack-comments" | 6A
|-
! class="EnHack-type" colspan="3" | If less than (signed)
|-
| class="EnHack-type" | 18a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (signed) (1 line) Executes next code only if yy is less than (signed) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 0C
|-
| class="EnHack-type" | 58a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (signed) (2 lines) Executes next two codes only if yy is less than (signed) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 2C
|-
| class="EnHack-type" | 98a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (signed) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 4C
|-
| class="EnHack-type" | D8a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (signed) (Disable Codes) All codes are disabled when the byte at 0a00aaaa is not less than (signed) yy.
| class="EnHack-comments" | 6C
|-
| class="EnHack-type" | 1Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (signed) (1 line) Executes next code only if yy is less than (signed) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 0D
|-
| class="EnHack-type" | 5Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (signed) (2 lines) Executes next two codes only if yy is less than (signed) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 2D
|-
| class="EnHack-type" | 9Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (signed) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 4D
|-
| class="EnHack-type" | DAa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (signed) (Disable Codes) All codes are disabled when the halfword at 0a00aaaa is not less than (signed) yy.
| class="EnHack-comments" | 6D
|-
| class="EnHack-type" | 1Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (signed) (1 line) Executes next code only if yy is less than (signed) the word stored at 0a00aaaa.
| class="EnHack-comments" | 0E
|-
| class="EnHack-type" | 5Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (signed) (2 lines) Executes next two codes only if yy is less than (signed) the word stored at 0a00aaaa.
| class="EnHack-comments" | 2E
|-
| class="EnHack-type" | 9Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (signed) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the word stored at 0a00aaaa.
| class="EnHack-comments" | 4E
|-
| class="EnHack-type" | DCa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (signed) (Disable Codes) All codes are disabled when the word at 0a00aaaa is not less than (signed) yy.
| class="EnHack-comments" | 6E
|-
! class="EnHack-type" colspan="3" | If greater than (signed)
|-
| class="EnHack-type" | 20a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (signed) (1 line) Executes next code only if yy is greater than (signed) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 10
|-
| class="EnHack-type" | 60a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (signed) (2 lines) Executes next two codes only if yy is greater than (signed) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 30
|-
| class="EnHack-type" | A0a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (signed) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 50
|-
| class="EnHack-type" | E0a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (signed) (Disable Codes) All codes are disabled when the byte at 0a00aaaa is not greater than (signed) yy.
| class="EnHack-comments" | 70
|-
| class="EnHack-type" | 21a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (signed) (1 line) Executes next code only if yy is greater than (signed) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 11
|-
| class="EnHack-type" | 61a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (signed) (2 lines) Executes next two codes only if yy is greater than (signed) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 31
|-
| class="EnHack-type" | A1a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (signed) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 51
|-
| class="EnHack-type" | E1a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (signed) (Disable Codes) All codes are disabled when the halfword at 0a00aaaa is not greater than (signed) yy.
| class="EnHack-comments" | 71
|-
| class="EnHack-type" | 22a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (signed) (1 line) Executes next code only if yy is greater than (signed) the word stored at 0a00aaaa.
| class="EnHack-comments" | 12
|-
| class="EnHack-type" | 62a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (signed) (2 lines) Executes next two codes only if yy is greater than (signed) the word stored at 0a00aaaa.
| class="EnHack-comments" | 32
|-
| class="EnHack-type" | A2a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (signed) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the word stored at 0a00aaaa.
| class="EnHack-comments" | 52
|-
| class="EnHack-type" | E2a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (signed) (Disable Codes) All codes are disabled when the word at 0a00aaaa is not greater than (signed) yy.
| class="EnHack-comments" | 72
|-
! class="EnHack-type" colspan="3" | If less than (unsigned)
|-
| class="EnHack-type" | 28a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (unsigned) (1 line) Executes next code only if yy is less than (unsigned) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 14
|-
| class="EnHack-type" | 68a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (unsigned) (2 lines) Executes next two codes only if yy is less than (unsigned) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 34
|-
| class="EnHack-type" | A8a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (unsigned) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 54
|-
| class="EnHack-type" | E8a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If less than (unsigned) (Disable Codes) All codes are disabled when the byte at 0a00aaaa is not less than (unsigned) yy.
| class="EnHack-comments" | 74
|-
| class="EnHack-type" | 2Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (unsigned) (1 line) Executes next code only if yy is less than (unsigned) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 15
|-
| class="EnHack-type" | 6Aa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (unsigned) (2 lines) Executes next two codes only if yy is less than (unsigned) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 35
|-
| class="EnHack-type" | AAa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (unsigned) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 55
|-
| class="EnHack-type" | EAa0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If less than (unsigned) (Disable Codes) All codes are disabled when the halfword at 0a00aaaa is not less than (unsigned) yy.
| class="EnHack-comments" | 75
|-
| class="EnHack-type" | 2Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (unsigned) (1 line) Executes next code only if yy is less than (unsigned) the word stored at 0a00aaaa.
| class="EnHack-comments" | 16
|-
| class="EnHack-type" | 6Ca0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (unsigned) (2 lines) Executes next two codes only if yy is less than (unsigned) the word stored at 0a00aaaa.
| class="EnHack-comments" | 36
|-
| class="EnHack-type" | ACa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (unsigned) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the word stored at 0a00aaaa.
| class="EnHack-comments" | 56
|-
| class="EnHack-type" | ECa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If less than (unsigned) (Disable Codes) All codes are disabled when the word at 0a00aaaa is not less than (unsigned) yy.
| class="EnHack-comments" | 76
|-
! class="EnHack-type" colspan="3" | If greater than (unsigned)
|-
| class="EnHack-type" | 30a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (unsigned) (1 line) Executes next code only if yy is greater than (unsigned) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 18
|-
| class="EnHack-type" | 70a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (unsigned) (2 lines) Executes next two codes only if yy is greater than (unsigned) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 38
|-
| class="EnHack-type" | B0a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (unsigned) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the byte stored at 0a00aaaa.
| class="EnHack-comments" | 58
|-
| class="EnHack-type" | F0a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If greater than (unsigned) (Disable Codes) All codes are disabled when the byte at 0a00aaaa is not greater than (unsigned) yy.
| class="EnHack-comments" | 78
|-
| class="EnHack-type" | 32a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (unsigned) (1 line) Executes next code only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 19
|-
| class="EnHack-type" | 72a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (unsigned) (2 lines) Executes next two codes only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 39
|-
| class="EnHack-type" | B2a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (unsigned) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.
| class="EnHack-comments" | 59
|-
| class="EnHack-type" | F2a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If greater than (unsigned) (Disable Codes) All codes are disabled when the halfword at 0a00aaaa is not greater than (unsigned) yy.
| class="EnHack-comments" | 79
|-
| class="EnHack-type" | 34a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (unsigned) (1 line) Executes next code only if yy is greater than (unsigned) the word stored at 0a00aaaa.
| class="EnHack-comments" | 1A
|-
| class="EnHack-type" | 74a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (unsigned) (2 lines) Executes next two codes only if yy is greater than (unsigned) the word stored at 0a00aaaa.
| class="EnHack-comments" | 3A
|-
| class="EnHack-type" | B4a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (unsigned) (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the word stored at 0a00aaaa.
| class="EnHack-comments" | 5A
|-
| class="EnHack-type" | F4a0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If greater than (unsigned) (Disable Codes) All codes are disabled when the word at 0a00aaaa is not greater than (unsigned) yy.
| class="EnHack-comments" | 7A
|-
! class="EnHack-type" colspan="3" | If AND
|-
| class="EnHack-type" | 38a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If AND (1 line) Executes next code only if yy AND the byte stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 1C
|-
| class="EnHack-type" | 78a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If AND (2 lines) Executes next two codes only if yy AND the byte stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 3C
|-
| class="EnHack-type" | B8a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If AND (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy AND the byte stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 5C
|-
| class="EnHack-type" | F8a0aaaa 000000yy
| class="EnHack-desc" | 8-bit If AND (Disable Codes) All codes are disabled when the byte at 0a00aaaa AND yy is 00.
| class="EnHack-comments" | 7C
|-
| class="EnHack-type" | 39a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If AND (1 line) Executes next code only if yy AND the halfword stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 1D
|-
| class="EnHack-type" | 79a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If AND (2 lines) Executes next two codes only if yy AND the halfword stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 3D
|-
| class="EnHack-type" | B9a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If AND (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy AND the halfword stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 5D
|-
| class="EnHack-type" | F9a0aaaa 0000yyyy
| class="EnHack-desc" | 16-bit If AND (Disable Codes) All codes are disabled when the halfword at 0a00aaaa AND yy is 00.
| class="EnHack-comments" | 7D
|-
| class="EnHack-type" | 3Aa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If AND (1 line) Executes next code only if yy AND the word stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 1E
|-
| class="EnHack-type" | 7Aa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If AND (2 lines) Executes next two codes only if yy AND the word stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 3E
|-
| class="EnHack-type" | BAa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If AND (Multi-line) All subsequent codes until the z20 code type or end of code list are executed only if yy AND the word stored at 0a00aaaa is not equal to 0.
| class="EnHack-comments" | 5E
|-
| class="EnHack-type" | FAa0aaaa yyyyyyyy
| class="EnHack-desc" | 32-bit If AND (Disable Codes) All codes are disabled when the word at 0a00aaaa AND yy is 00.
| class="EnHack-comments" | 7E
|-
! class="EnHack-type" colspan="3" | Always... codes
|-
| class="EnHack-type" | 0Ea0aaaa xxxxxxxx
| class="EnHack-desc" | Always skip next line
| class="EnHack-comments" | 07
|-
| class="EnHack-type" | 4Ea0aaaa xxxxxxxx
| class="EnHack-desc" | Always skip next two lines
| class="EnHack-comments" | 27
|-
| class="EnHack-type" | 8Ea0aaaa xxxxxxxx
| class="EnHack-desc" | Always skip remaining codes
| class="EnHack-comments" | 47
|-
| class="EnHack-type" | CEa0aaaa xxxxxxxx
| class="EnHack-desc" | Always skip all codes
| class="EnHack-comments" | 67
|-
! class="EnHack-type" colspan="3" | One line special codes
|-
| class="EnHack-type" | 00000000 xxxxxxxx
| class="EnHack-desc" | End of code list No codes after this point are executed.
| class="EnHack-comments" | z00
|-
| class="EnHack-type" | 00000000 0800xx00
| class="EnHack-desc" | Slowdown code The AR performs xx loops per code cycle, slowing the game down.
| class="EnHack-comments" | z04
|-
! class="EnHack-type" colspan="3" | Two line special codes
|-
| class="EnHack-type" | 00000000 10a0aaaa 000000xx 00000000
| class="EnHack-desc" | 8-bit AR Button RAM Write Writes xx to 0a00aaaa when the AR Button is pressed.
| class="EnHack-comments" | z08
|-
| class="EnHack-type" | 00000000 12a0aaaa 0000xxxx 00000000
| class="EnHack-desc" | 16-bit AR Button RAM Write Writes xxxx to 0a00aaaa when the AR Button is pressed.
| class="EnHack-comments" | z09
|-
| class="EnHack-type" | 00000000 14a0aaaa xxxxxxxx 00000000
| class="EnHack-desc" | 32-bit AR Button RAM Write Writes xxxxxxxx to 0a00aaaa when the AR Button is pressed.
| class="EnHack-comments" | z0A
|-
| class="EnHack-type" | 00000000 18a0aaaa 0000xxxx 00000000
| class="EnHack-desc" | 16-bit ROM Patch Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
| class="EnHack-comments" | z0C
|-
| class="EnHack-type" | 00000000 1Aa0aaaa 0000xxxx 00000000
| class="EnHack-desc" | 16-bit ROM Patch Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
| class="EnHack-comments" | z0D
|-
| class="EnHack-type" | 00000000 1Ca0aaaa 0000xxxx 00000000
| class="EnHack-desc" | 16-bit ROM Patch Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
| class="EnHack-comments" | z0E
|-
| class="EnHack-type" | 00000000 1Ea0aaaa 0000xxxx 00000000
| class="EnHack-desc" | 16-bit ROM Patch Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
| class="EnHack-comments" | z0F
|-
| class="EnHack-type" | 00000000 40000000
| class="EnHack-desc" | Execute codes normally All conditionals currently going on do not apply after this point.
| class="EnHack-comments" | z20
|-
| class="EnHack-type" | 00000000 60000000
| class="EnHack-desc" | Execute all following codes All following codes are executed regardless of anything else.
| class="EnHack-comments" | z30
|-
| class="EnHack-type" | 00000000 80a0aaaa 000000xx vvddiiii
| class="EnHack-desc" | 8-bit slide code Writes dd bytes, starting at the address 0a00aaaa with the value xx and incrementing the address by iiii and the value by vv each iteration.
| class="EnHack-comments" | z40
|-
| class="EnHack-type" | 00000000 82a0aaaa 0000xxxx vvddiiii
| class="EnHack-desc" | 16-bit slide code Writes dd halfwords, starting at the address 0a00aaaa with the value xxxx and incrementing the address by iiii * 2 and the value by vv each iteration.
| class="EnHack-comments" | z41
|-
| class="EnHack-type" | 00000000 84a0aaaa xxxxxx vvddiiii 80000000 00000000
| class="EnHack-desc" | 32-bit slide code Writes dd words, starting at the address 0a00aaaa with the value xxxxxxxx and incrementing the address by iiii * 4 and the value by vv each iteration. The final line is needed to prevent a bug in the AR from occurring.
| class="EnHack-comments" | z42
|-
! class="EnHack-type" colspan="3" | Special Codes
|-
| class="EnHack-type" | C4aaaaaa 00000bcd
| class="EnHack-desc" | Master Code Hooks the address 08aaaaaa for the code handler. if b is 1, the AR switch must be turned off when the game starts. Otherwise, it doesn't matter. c determines the number of codes the AR processes at a time. d is the type of hook. 0 is BL and 1 is Push LR then BL.
| class="EnHack-comments" | 62
|-
| class="EnHack-type" | xxxxxxxx 001DC0DE
| class="EnHack-desc" | ID Code Used by the AR to auto-detect games. xxxxxxxx should be the word at 0x080000AC.
| class="EnHack-comments" | --
|-
| class="EnHack-type" | DEADFACE xxxxxxxx
| class="EnHack-desc" | DEADFACE Changes the encryption seeds.
| class="EnHack-comments" | --
|}

===Encrypting/Decrypting Gameshark/Action Replay codes===

[[Image:arcrypt.png|none|550px|center|AR Crypt]]

Gameshark and Action Replay codes are encrypted and decrypted with [[Tools#AR_Crypt|AR Crypt]]. To encrypt codes, put the appropriate, formatted code in the left box. The choose RAW in the left radio box. On the right radio box, choose ARV1/2 for Gameshark or ARV3/4 for Action Replay. Decrypting codes works in a similar fashion. ARV1/2 or ARV3/4 on the left and RAW on the right. ARCrypt also provides an option to format codes. This only does one code at a time however. Input the address followed by the value and select the appropriate ARCrypt code type, then press the create button. Underneath the address and value, the correctly formatted code will be displayed, and will be display encrypted in the right text area. For some code types, such as slide codes, additional options will be displayed in the middle of the window. Customize these as necessary.

===Creating GS/AR master codes===

====Hacking Standard Master Codes====

To create a master code for the Gameshark or Action Replay, a ROM of the game will be required, as well as [[Tools#AR_Crypt|AR Crypt]]. In AR Crypt, go to Special, then "Find Master Code and ID Code"; Load the ROM, and the master codes will be listed. Test each master code individually with a normal code. If the code works, then the master code being used is a legitimate master code. If AR Crypt does not come up with any results or non of the possible master codes works, a non-standard master code must be hacked.

====Hacking Nonstandard Master Codes====

The information in this section is based on a post originally by Parasyte.

Both [[Tools#AR_Crypt|AR Crypt]] and [[Tools#VBA-H_SDL|VBA-SDL-H]] are required for hacking non-standard master codes, as well as a Hex Editor. Examples are provided for Baldur's Gate and Phantasy Star Collection.

=====Baldur's Gate=====

Load Baldur's Gate up into VBA-SDL and enter the gameplay part of the game. Then load up a hex editor, open the ROM, and search for 0x0047C0460847C046. This is the beginning of the long branch routine. For Baldur's Gate, it's at 0x006A9888 which is GBA address 0x086A9888. It disassembles to: 

{| class="EnHack-asm"
| class="EnHack-opcode" | 086A9888 bx
| class="EnHack-args" | r0
|-
| class="EnHack-opcode" | 086A988A mov
| class="EnHack-args" | r8, r8
| class="EnHack-comments" | <nowiki>; NOP</nowiki>
|-
| class="EnHack-opcode" | 086A988C bx
| class="EnHack-args" | r1
|-
| class="EnHack-opcode" | 086C988E mov
| class="EnHack-args" | r8, r8
|-
| class="EnHack-opcode" | 086A9890 bx
| class="EnHack-args" | r2
|-
| class="EnHack-opcode" | 086A9892 mov
| class="EnHack-args" | r8, r8
|}

etc. These bx instructions are what we want to try to hook. What we are looking for is a bx instruction which is executed many times per second. Start with the bx r0. Tell VBA-SDL to break whenever that instruction is executed (bt 086A9888) and have the game resume (c). The game doesn't break, so this isn't what we want. Go back to the debugger (F11) and move on to bx r1. Set a breakpoint on that and resume gameplay. The game breaks. This is good. Copy down the value of R1 (since we are testing bx '''r1''') and resume gameplay. It will break again. Copy down the new value of R1. Continue this process until it appears that all the possible values r1 have been copied. For this game, the values are 0x03003ef8, 0x0869FC05, 0x0869E145, 0x02000634, 0x02000514, 0x0869E3D5, and 0x0869E0D9. Now delete the breakpoint and move to another area (say, the tavern), and repeat the process. Here, the values obtained are 0x0869E3D5, 0x0869D5A1, 0x0869D165, 0x0869C881, 0x03003EF8, 0x0869FC05, 0x0869D81D, and 0x0869CF61. Now, find the common addresses. They are 0x03003EF8, 0x0869FC05, and 0x0869E3D5. Now it's time to make the mastercode.

One by one, search for each of the values in the ROM. Starting with 0x03003EF8, we must first rearrange this into the order it will appear in the ROM. Divide it into seperate bytes (0x03, 0x00, 0x3E, and 0xF8), then reverse the order, giving us 0xF83E0003. Search for this in the ROM. It is not present. Move to the next value, 0x0869FC05. Searching for 0x05FC6908 turns up four locations. This is not good. Any one of the four could be correct or, even worse, they could each be correct in a seperate part of the game. Go to the final value, 0x0869E3D5. Searching for 0xD5E36908 turns up only one location! Success. The location is 0x007EF48C. Turn the 00 into C4, and add 000084x1 as the value, where x is the register value used (r1 here). The final code is C47EF48C 00008411. If the code is being made for the Gameshark, the address should have the initial two zeros replaced with 48, and the value should be 000001x1, with x still being the register. For Gameshark, the final decrypted could is F87EF48C 00000111.

=====Phantasy Star Collection=====

It is impossible to hack a universal master code for Phantasy Star Collection, because it contains four executables. The intro does not need a master code, but each of the other three executables (the three games) require a seperate master code. For Phantasy Star II and Phantasy Star III, creating a master code is simple enough. However, for Phantasy Star, there is a problem. The Phantasy Star exectuable is located at 0x08738000, and it is impossible to create a standard BL-type master code from any address above 0x0840001C. This is further complicated by the fact that the long branch routine does not exist in the Phantasy Star executable, so creating a master code the same way as for Baldur's Gate will not work. In this case, we shall take a different approach - find the interrupt handler. These are executed several times per second, so they are perfect.

Load up Phantasy Star Collection in VBA-SDL-H. The GBA interrupt vector is always located at 0x03007FFC. Use the mw command to display the word there; it should be a pointer. For me, it is 0x020207d0. This is an ARM address, because it is an even number. Had it been THUMB, it would have been 0x020207d1. Disassemble the arm (da) starting at 0x020207d0. Here is what I have: 

{| class="EnHack-asm"
| class="EnHack-opcode" | 02020884 E59F1010 ldr
| class="EnHack-args" | r1, [$0202089C] (=$02000070)
|-
| class="EnHack-opcode" | 02020888 E0811002 add
| class="EnHack-args" | r1, r1, r2
|-
| class="EnHack-opcode" | 0202088C E5910000 ldr
| class="EnHack-args" | r0, [r1]
|-
| class="EnHack-opcode" | 02020890 E12FFF10 bx
| class="EnHack-args" | r0
|}

This code loads pointer 0x02000070 into r1. Then, it adds r2 to it.Finally, it loads a pointer from that address into r0 and branches to that address. This is a prime example of a jump table (large amount of pointers stored in RAM). Dump the jump table from 0x02000070 with the mw command: 02000070 087384A1 0873A9FD 0873AA01 0873A9FD 02000080 0873A9FD 0873AA21 0876CA91 0873A9FD 02000090 0873A9FD 0873A9FD 0873A9FD 0873A9FD 020000A0 0873A9FD 0873A9FD 00000000 00000000 

All of these pointers are odd numbers, which means they are all pointers to THUMB instructions. There are five in total: 0x087384A1, 0x0873A9FD, 0x0873AA01, 0x0873AA21, and 0x0876CA91. Disassemble each of these addresses. Be sure to convert each address into an even number by subtracting 1. Here is what we have: 

{| class="EnHack-asm"
| class="EnHack-opcode" | 087384A0 B5F0 push
| class="EnHack-args" | {r4-r7, lr}
|-
| class="EnHack-opcode" | 087384A2 4A2B ldr
| class="EnHack-args" | r2, [$08738550] (=$020004E8)
|-
| class="EnHack-opcode" | 087384A4 482B ldr
| class="EnHack-args" | r0, [$08738554] (=$04000130)
|-
| class="EnHack-opcode" | 087384A6 8801 ldrh
| class="EnHack-args" | r1, [r0, #0x0]
|-
| class="EnHack-opcode" | 087384A8 4B2B ldr
| class="EnHack-args" | r3, [$08738558] (=$000003FF)
|-
| class="EnHack-opcode" | 087384AA 1C18 add
| class="EnHack-args" | r0, r3, #0x0
|-
| class="EnHack-opcode" | 087384AC 4041 eor
| class="EnHack-args" | r1, r0
|}

 

{| class="EnHack-asm"
| class="EnHack-opcode" | 0873A9FC 4770 bx
| class="EnHack-args" | lr
|}

 

{| class="EnHack-asm"
| class="EnHack-opcode" | 0873AA00 4904 ldr
| class="EnHack-args" | r1, [$0873AA14] (=$0400000C)
|-
| class="EnHack-opcode" | 0873AA02 4A05 ldr
| class="EnHack-args" | r2, [$0873AA18] (=$00004409)
|-
| class="EnHack-opcode" | 0873AA04 1C10 add
| class="EnHack-args" | r0, r2, #0x0
|-
| class="EnHack-opcode" | 0873AA06 8008 strh
| class="EnHack-args" | r0, [r1, #0x0]
|-
| class="EnHack-opcode" | 0873AA08 3908 sub
| class="EnHack-args" | r1, #0x8
|-
| class="EnHack-opcode" | 0873AA0A 4A04 ldr
| class="EnHack-args" | r2, [$0873AA1C] (=$00007028)
|-
| class="EnHack-opcode" | 0873AA0C 1C10 add
| class="EnHack-args" | r0, r2, #0x0
|-
| class="EnHack-opcode" | 0873AA0E 8008 strh
| class="EnHack-args" | r0, [r1, #0x0]
|-
| class="EnHack-opcode" | 0873AA10 4770 bx
| class="EnHack-args" | lr
|}

 

{| class="EnHack-asm"
| class="EnHack-opcode" | 0873AA20 4770 bx
| class="EnHack-args" | lr
|}

 

{| class="EnHack-asm"
| class="EnHack-opcode" | 0876CA90 4906 ldr
| class="EnHack-args" | r1, [$0876CAAC] (=$02000052)
|-
| class="EnHack-opcode" | 0876CA92 8808 ldrh
| class="EnHack-args" | r0, [r1, #0x0]
|-
| class="EnHack-opcode" | 0876CA94 2800 cmp
| class="EnHack-args" | r0, #0x0
|-
| class="EnHack-opcode" | 0876CA96 D008 beq
| class="EnHack-args" | $0876CAAA
|-
| class="EnHack-opcode" | 0876CA98 8808 ldrh
| class="EnHack-args" | r0, [r1, #0x0]
|-
| class="EnHack-opcode" | 0876CA9A 3801 sub
| class="EnHack-args" | r0, #0x1
|-
| class="EnHack-opcode" | 0876CA9C 8008 strh
| class="EnHack-args" | r0, [r1, #0x0]
|-
| class="EnHack-opcode" | 0876CA9E 0400 lsl
| class="EnHack-args" | r0, r0, #0x10
|-
| class="EnHack-opcode" | 0876CAA0 2800 cmp
| class="EnHack-args" | r0, #0x0
|-
| class="EnHack-opcode" | 0876CAA2 D102 bne
| class="EnHack-args" | $0876CAAA
|-
| class="EnHack-opcode" | 0876CAA4 4902 ldr
| class="EnHack-args" | r1, [$0876CAB0] (=$02000054)
|-
| class="EnHack-opcode" | 0876CAA6 2001 mov
| class="EnHack-args" | r0, #0x1
|-
| class="EnHack-opcode" | 0876CAA8 7008 strb
| class="EnHack-args" | r0, [r1, #0x0]
|-
| class="EnHack-opcode" | 0876CAAA 4770 bx
| class="EnHack-args" | lr
|}

The second and fourth routines simply contain bx lr, meaning they do nothing at all. There's no reason to trust either of them. The first one is the joypad routine - very promising. Take the pointer to this routine (0x087384A1), byteswap it (0xA1847308) and search the ROM for it with a hex editor. There's only one result, and it is definitely inside the Phantasy Star executable. This pointer is located at 0x007383FC. Attach the C4 codetype (F8 for Gameshark) and the 000084x3 value (000001x3 for Gameshark). Back in the ARM assembly, the first bx instruction was bx r0. So, the x is replaced with 0. The final code is C47383FC 00008403 for AR and F87383FC 00000103 for GS.

==Codebreaker Advance and Gameshark SP==

[[Image:cba.png|center|Codebreaker Advance Disclaimer]][[Image:cba2.png|center|Codebreaker Advance Game List]] [[Image:cba3.png|center|Codebreaker Advance Code List]][[Image:cba4.png|center|Codebreaker Advance New Code Screen]]

===Description - Codebreaker Advance===

Pelican released the Codebreaker Advance shortly after the GSA came out. Like the GSA, it is a step up from its Gameboy counterpart, but lacks a trainer. Notable code types that the CBA has added include the slide code, 8- and 16-bit writes, conditionals, and a bitwise AND. However, the CBA does not implement a 32-bit RAM write or a ROM patch, both of which the GSA has. Codebreaker codes are encrypted by default, but unencrypted codes can be allowed, by not having a 9-code as the first line of a master code.

===Gameshark SP===

The Gameshark name was purchased by MadCatz, who also purchased the rights to the Codebreaker Advance software. In reality, all the Gameshark SP is, is a renamed Codebreaker Advance.

===Codebreaker/Gameshark SP code types===

{| class="EnHack-codetypes"
! class="EnHack-type" | Code type
! class="EnHack-desc" | Description
|-
| class="EnHack-type" | 0000xxxx yyyy
| class="EnHack-desc" | Master Code xxxx is the CRC of the game. yyyy is flags include: 0x0008 (CRC exists and is used to autodetect the game) and 0x0002 (Disable interrupts)
|-
| class="EnHack-type" | 1aaaaaaa xxxy
| class="EnHack-desc" | Master Code 0x0aaaaaaa is the hook address for the Codebreaker. y determines the CBA Code Handler Store Address (address = (y << 0x16) + 0x08000010) and xxx determines the hook type (0x100 is 32-bit Long Branch (THUMB), 0x200 is 32-bit Long Branch (ARM), 0x300 is 8-bit Long Branch (THUMB), and 0x400 is 8-bit Long Branch (ARM).
|-
| class="EnHack-type" | 3aaaaaaa 00xx
| class="EnHack-desc" | 8-bit RAM write xx is written to 0aaaaaaa.
|-
| class="EnHack-type" | 4aaaaaaa yyyy zzzzxxxx iiii
| class="EnHack-desc" | Slide code 0aaaaaaa is the starting address and yyyy is the starting value. xxxx is the number of repetitions with zzzz being the value increment and iiii being the address increment.
|-
| class="EnHack-type" | 6aaaaaaa yyyy
| class="EnHack-desc" | 16-bit bitwise AND ANDs the 16-bit value at the address 0aaaaaaa with yyyy and then writes it back to 0aaaaaaa.
|-
| class="EnHack-type" | 7aaaaaaa yyyy
| class="EnHack-desc" | 16-bit If Equal To Executes the next code only if the 16-bit value at the address 0aaaaaaa is equal to yyyy.
|-
| class="EnHack-type" | 8aaaaaaa yyyy
| class="EnHack-desc" | 16-bit RAM write yyyy is written to 0aaaaaaa.
|-
| class="EnHack-type" | 9yyyyyyy yyyy
| class="EnHack-desc" | Change encryption seeds. Changes encryption seeds.
|-
| class="EnHack-type" | Aaaaaaaa yyyy
| class="EnHack-desc" | 16-bit If Not Equal To Executes the next code only if the 16-bit value at the address 0aaaaaaa is not equal to yyyy.
|}

===Encrypting/Decrypting Codebreaker/Gameshark SP codes===

[[Image:cbacrypt.png|none|550px|center|CBA Crypt]]

Codebreaker (and by extension, Gameshark SP) codes are encrypted and decrypted with [[Tools#CBAcrypt|CBA Crypt]]. To use this, first put the first line of the CB master code (the one that starts with a 9) in the left box. If the first line of the master code does not start with a 9, then encryption and decryption are not necessary. Underneath the 9 code, put the codes you want to encrypt or decrypt and press the appropriate button. On the right side, the encrypted or decrypted codes will appear. The first line will be the same on both sides. Ignore this line. The rest of the box is when you need.

===Creating GSSP/CBA master codes===

To create a master code for the Codebreaker or Gameshark SP, a ROM of the game will be required, as well as [[Tools#GBAtool|GBA Tool]]. Open GBA Tool up and click the browse button. Find the load, and load it. Then press search. A list of potential master codes will be displayed. Test each master code on the game with any code. If the code works, you have a valid master code.

==ARM7 Assembly==

The GBA uses an ARM7TMDI chip. The ARM architecture provides two modes, ARM and THUMB, and well as 31 32-bit registers. Only 16 of these registers are visible at a time, with R13, R14, and R15 being for the Stack Pointer, the Link Register, and the Program Counter respectively. The ARM instruction set uses 32-bit operations, whereas the THUMB set uses 16-bit. THUMB is designed to produce smaller code with the same speed as ARM and much of the functionability. One major limitation of THUMB is that many instructions cannot access registers above R07. In ARM, 4 bits are set aside for a conditional. The operation is executed only if the current flags meet that condition. More information on ARM and THUMB can be found in the official ARM and THUMB manuals, as well as GBATek, all provided on the [[Documents|documents page]].

==Hacking using VBA-SDL-H==

[[Image:vba_sdl.png|none|550px|center|VBA-SDL-H]]

VBA-SDL-H is a modified version of VBA-SDL V1.7.2 by kenobi and Labmaster. Compatibility wise, it has the same limitations as VBA-H. VBA-SDL-H has been modified to include extra options such as Don't break on, Conditional Breaks, Break on Read, Break on Change, and Last Branch. In addition to this, it provides the same options provided by the official version of VBA-SDL.

Inside the console window, VBA-SDL-H lists all the registers, as well as CPSR, the mode, and the status flags. Additionally, the next instruction to be executed is displayed. If the ''last'' option was enabled, the same information is also provided for when the last branch occurred. This feature has some bugs, however, and does not always work properly. ''h'' brings up a list of all available commands with a description. The ''c'' command resumes the functioning of the game. ''bt'' and ''ba'' break on the THUMB and ARM addresses provided respectively, when they are executed. ''bd [number]'' deletes the corresponding ''bt'' or ''ba'' instruction. This function has a small bug in that the last remaining breakpoint must be deleted manually. bpw [address] [bytes] breaks when [address] or any addresses up to [bytes] bytes afterwards are written to. The ''cow'' changes ''bpw'' to act as a break on change, which will not break if the value being written to the specified address is the same as the address's current value. ''bpr'' functions the same way as ''bpw'', but it breaks when an address is read from instead of written to. The ''bpwc'' and ''bprc'' instruction delete all breaks on write and read, and the ''bl'' option lists all of these breakpoints. The ''db'' is used to disassemble the specified address from triggering a breakpoint. The instruction will still execute as normal, but VBA-SDL-H will ignore it with regard to breakpoints. ''cba'' and ''cbt'' instructions are also allowed. These instructions set conditional ARM and THUMB breakpoints.

The ''d'', ''da'', and ''dt'' instuctions disassemble the memory located at specified address. ''d'' disassembles in the game's current mode, while ''dt'' and ''da'' force THUMB and ARM disassembly. The next twenty operations are shown in either case. If no address is provided, disassembly begins at the current location of the game.

The ''mb'', ''mh'', and ''mw'' instructions show the memory at the location provided in terms of bytes, halfwords, and words. 0x100 bytes are shown in all cases and the ASCII representation of these bytes is provided on the right side. The ''eb'', ''eh'', and ''ew'' instructions can be used to modify these memory values; additionally, ''er'' is provided to modify the value of a register.

Miscellaneous instructions include ''io'', which displays the status of the I/O registers, ''dload'' and ''dsave'' which load and save raw data files, ''load'' and ''save'', which loads or saves an Fx style save, ''n'' which executes the next instruction, and ''radix'', which sets the print radix to the specified base. Additionally, ''verbose'' changes the verbose level, ''where'' shows the call chain, ''locals'' shows the local variables of a given address, and ''lf'' logs all output to a file. Finally, the ''print'' instruction attempts to print the value of an expression.

==Converting codes==

[http://doc.kodewerx.org/tools/gba/arcrypt.rar ARCrypt] converts codes between the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.

{{EnHacklopedia}}

{{Template: EnHacklopedia_Legal}}
[[Category: EnHacklopedia]]

Code Types (Game Boy Advance)

2024-04-13T21:12:27Z

Rimsky82: /* Codebreaker Advance */

===Codebreaker Advance===

----

{| class="wikitable"

|- class="codestop"
| Type & Format || Description || Other || Limitations

|-
| Master Code 1 0000XXXX YYYY || XXXX is the CRC value (Hash calculated using the first 64k of the rom) Flags ("YYYY"): 0008 - CRC Exists (CRC is used to autodetect the inserted game) 0002 - Disable Interupts || -- || --

|-
| Master Code 2 1XXXXXXX YYYZ || 'Z' is the CBA Code Handler Store Address (0-7) [address = ((d << 0x16) + 0x08000100)] YYY: 100 - 32-bit Long-Branch Type (Thumb) 200 - 32-bit Long-Branch Type (ARM) 300 - 8-bit(?) Long-Branch Type (Thumb) 400 - 8-bit(?) Long-Branch Type (ARM) 002 - Unknown (Odd Effect) XXXXXXX = ? || -- || --

|-
| 16-bit OR 2XXXXXXX YYYY || OR's value at address XXXXXXX with YYYY. || Tested on VBA, not tested on hardware || --

|-
| 8-bit RAM Write 3XXXXXXX 00YY || Writes YY to address XXXXXXX. || -- || --

|-
| Serial Repeater 4ZZZZZZZ YYYY AAAAXXXX VVVV || ZZZZZZZ is the address to start at and YYYY is the starting value. AAAA is the value to increment with. XXXX is the number of address iterations. And finally, VVVV is the amount added to each address iteration || -- || --

|-
| Super Code/Memwrite 5XXXXXXX YYYY ZZZZZZZZ ZZZZ ........ ZZZZZZZZ ZZZZ || XXXXXXX is the address where the writing begins, YYYY is the number of halfwords to write and ZZZZZZZZ ZZZZ are the halfwords. Note that halfwords are byte flipped, so the value of 1122 would become 2211. || Each address is automatically incremented by 2. (Non-changeable) || --

|-
| 16-bit AND 6XXXXXXX YYYY || AND's value at address XXXXXXX with YYYY. || -- || --

|-
| 16-bit If Equal To 7XXXXXXX YYYY || Activates next code if value at address XXXXXXX is equal to YYYY. || -- || --

|-
| 16-bit RAM Write 8XXXXXXX YYYY || Writes YYYY to address XXXXXXX. || -- || --

|-
| Change Encryption Seeds (if used as first code) 9YYYYYYY YYYY || Changes the encryption seeds using all 6 bytes of this code. Each game typically has one unique seed code as the first line of the master code, but multiple can exist. || -- || --

|-
| 16-bit If Not Equal To AXXXXXXX YYYY || Activates next code if value at address XXXXXXX is NOT equal to YYYY || Must be an even address. || --

|-
| If Greater Than BXXXXXXX YYYY || If address XXXXXXX's value is Greater Than YYYY, then activate the next code. || -- || --

|-
| If Lesser Than CXXXXXXX YYYY || If address XXXXXXX's value is Lesser Than YYYY, then activate the next code. || -- || --

|-
| Pad Read/Button Activator D00000X0 YYYY || If X is 2, Activates next code if YYYY includes the button currently being pressed. If X is 1, then when it's not being pressed. If X is 0, then when only the button combination is pressed and no others. || -- || --

|-
| Increment/Decrement EXXXXXXX YYYY || Increase or Decrease the value of XXXXXXX by YYYY. This code type uses value ranges to determine whether to do an increment or decrement. Incremental ranges are: 0000 - 7FFF. Decremental ranges are: 8000 - FFFF. || -- || --

|-
| 16-bit If (AND) > 0 FXXXXXXX YYYY || If the value at XXXXXXX & YYYY > 0, execute the next code. || -- || --
|}

===Pad Values===

----

<pre class="padvalues">
0002 - B
0040 - Up
0080 - Down
0020 - Left
0010 - Right
0200 - L
0100 - R
0004 - Select
0008 - Start
</pre>

{{Code Types}}
[[Category:Code Types]]

Code Types (Game Boy Advance)

2024-04-13T18:31:14Z

Rimsky82: /* Codebreaker Advance */

===Codebreaker Advance===

----

{| class="wikitable"

|- class="codestop"
| Type & Format || Description || Other || Limitations

|-
| Master Code 1 0000XXXX YYYY || XXXX is the CRC value (Hash calculated using the first 64k of the rom) Flags ("YYYY"): 0008 - CRC Exists (CRC is used to autodetect the inserted game) 0002 - Disable Interupts || -- || --

|-
| Master Code 2 1XXXXXXX YYYZ || 'Z' is the CBA Code Handler Store Address (0-7) [address = ((d << 0x16) + 0x08000100)] YYY: 100 - 32-bit Long-Branch Type (Thumb) 200 - 32-bit Long-Branch Type (ARM) 300 - 8-bit(?) Long-Branch Type (Thumb) 400 - 8-bit(?) Long-Branch Type (ARM) 002 - Unknown (Odd Effect) XXXXXXX = ? || -- || --

|-
| 16-bit OR 2XXXXXXX YYYY || OR's value at address XXXXXXX with YYYY. || Tested on VBA, not tested on hardware || --

|-
| 8-bit RAM Write 3XXXXXXX 00YY || Writes YY to address XXXXXXX. || -- || --

|-
| Serial Repeater 4ZZZZZZZ YYYY AAAAXXXX VVVV || ZZZZZZZ is the address to start at and YYYY is the starting value. AAAA is the value to increment with. XXXX is the number of address iterations. And finally, VVVV is the amount added to each address iteration || -- || --

|-
| Super Code/Memwrite 5XXXXXXX YYYY ZZZZZZZZ ZZZZ ........ ZZZZZZZZ ZZZZ || XXXXXXX is the address where the writing begins, YYYY is the number of halfwords to write and ZZZZZZZZ ZZZZ are the halfwords. Note that halfwords are byte flipped, so the value of 1122 would become 2211. || Each address is automatically incremented by 2. (Non-changeable) || --

|-
| 16-bit AND 6XXXXXXX YYYY || AND's value at address XXXXXXX with YYYY. || -- || --

|-
| 16-bit If Equal To 7XXXXXXX YYYY || Activates next code if value at address XXXXXXX is equal to YYYY. || -- || --

|-
| 16-bit RAM Write 8XXXXXXX YYYY || Writes YYYY to address XXXXXXX. || -- || --

|-
| Change Encryption Seeds (if used as first code) 9YYYYYYY YYYY || Changes the encryption seeds using all 6 bytes of this code. Each game typically has one unique seed code as the first line of the master code, but multiple can exist. || -- || --

|-
| 16-bit If Not Equal To AXXXXXXX YYYY || Activates next code if value at address XXXXXXX is NOT equal to YYYY || Must be an even address. || --

|-
| If Greater Than BXXXXXXX YYYY || If address XXXXXXX's value is Greater Than YYYY, then activate the next code. || -- || --

|-
| If Lesser Than CXXXXXXX YYYY || If address XXXXXXX's value is Lesser Than YYYY, then activate the next code. || -- || --

|-
| Pad Read/Button Activator D0000020 YYYY || Activates next code if YYYY is equal to the button currently being pressed. || -- || --

|-
| Increment/Decrement EXXXXXXX YYYY || Increase or Decrease the value of XXXXXXX by YYYY. This code type uses value ranges to determine whether to do an increment or decrement. Incremental ranges are: 0000 - 7FFF. Decremental ranges are: 8000 - FFFF. || -- || --

|-
| 16-bit If (AND) > 0 FXXXXXXX YYYY || If the value at XXXXXXX & YYYY > 0, execute the next code. || -- || --
|}

===Pad Values===

----

<pre class="padvalues">
0002 - B
0040 - Up
0080 - Down
0020 - Left
0010 - Right
0200 - L
0100 - R
0004 - Select
0008 - Start
</pre>

{{Code Types}}
[[Category:Code Types]]

Code Types (Game Boy Advance)

2024-04-13T18:28:18Z

Rimsky82: /* Codebreaker Advance */

===Codebreaker Advance===

----

{| class="wikitable"

|- class="codestop"
| Type & Format || Description || Other || Limitations

|-
| Master Code 1 0000XXXX YYYY || XXXX is the CRC value (Hash calculated using the first 64k of the rom) Flags ("YYYY"): 0008 - CRC Exists (CRC is used to autodetect the inserted game) 0002 - Disable Interupts || -- || --

|-
| Master Code 2 1XXXXXXX YYYZ || 'Z' is the CBA Code Handler Store Address (0-7) [address = ((d << 0x16) + 0x08000100)] YYY: 100 - 32-bit Long-Branch Type (Thumb) 200 - 32-bit Long-Branch Type (ARM) 300 - 8-bit(?) Long-Branch Type (Thumb) 400 - 8-bit(?) Long-Branch Type (ARM) 002 - Unknown (Odd Effect) XXXXXXX = ? || -- || --

|-
| 16-bit OR 2XXXXXXX YYYY || OR's value at address XXXXXXX with YYYY. || Tested on VBA, not tested on hardware || --

|-
| 8-bit RAM Write 3XXXXXXX 00YY || Writes YY to address XXXXXXX. || -- || --

|-
| Serial Repeater 4ZZZZZZZ YYYY AAAAXXXX VVVV || ZZZZZZZ is the address to start at and YYYY is the starting value. AAAA is the value to increment with. XXXX is the number of address iterations. And finally, VVVV is the amount added to each address iteration || -- || --

|-
| Super Code/Memwrite 5XXXXXXX YYYY ZZZZZZZZ ZZZZ ........ ZZZZZZZZ ZZZZ || XXXXXXX is the address where the writing begins, YYYY is the number of halfwords to write and ZZZZZZZZ ZZZZ are the halfwords. Note that halfwords are byte flipped, so the value of 1122 would become 2211. || Each address is automatically incremented by 2. (Non-changeable) || --

|-
| 16-bit AND 6XXXXXXX YYYY || AND's value at address XXXXXXX with YYYY. || -- || --

|-
| 16-bit If Equal To 7XXXXXXX YYYY || Activates next code if value at address XXXXXXX is equal to YYYY. || -- || --

|-
| 16-bit RAM Write 8XXXXXXX YYYY || Writes YYYY to address XXXXXXX. || -- || --

|-
| Change Encryption Seeds (if used as first code) 9YYYYYYY YYYY || Details not researched. || -- || --

|-
| 16-bit If Not Equal To AXXXXXXX YYYY || Activates next code if value at address XXXXXXX is NOT equal to YYYY || Must be an even address. || --

|-
| If Greater Than BXXXXXXX YYYY || If address XXXXXXX's value is Greater Than YYYY, then activate the next code. || -- || --

|-
| If Lesser Than CXXXXXXX YYYY || If address XXXXXXX's value is Lesser Than YYYY, then activate the next code. || -- || --

|-
| Pad Read/Button Activator D0000020 YYYY || Activates next code if YYYY is equal to the button currently being pressed. || -- || --

|-
| Increment/Decrement EXXXXXXX YYYY || Increase or Decrease the value of XXXXXXX by YYYY. This code type uses value ranges to determine whether to do an increment or decrement. Incremental ranges are: 0000 - 7FFF. Decremental ranges are: 8000 - FFFF. || -- || --

|-
| 16-bit If (AND) > 0 FXXXXXXX YYYY || If the value at XXXXXXX & YYYY > 0, execute the next code. || -- || --
|}

===Pad Values===

----

<pre class="padvalues">
0002 - B
0040 - Up
0080 - Down
0020 - Left
0010 - Right
0200 - L
0100 - R
0004 - Select
0008 - Start
</pre>

{{Code Types}}
[[Category:Code Types]]

Hacking Game Boy Advance

2024-04-12T03:02:42Z

Rimsky82: /* Action Replay Code Types */

Hacking Genesis

2012-01-20T22:49:38Z

Rimsky82: /* Decryption */

{{Template:EnHacklopedia Header}}

==Game Genie==

[[Image:Genesisgenie.jpg|Game Genie device for Sega Genesis]]

The Genesis game genie was different from all of the other genies in a couple ways. It was similar in that it intercepted ROM from the cartridge and overwrote certain bytes to achieve the desired effects. But besides obvious differences, like the shape and look of the device, the encryption scheme was also different. Genies on other systems used letters or hex digits to mask other hex digits, and swapped them around for good measure. The genesis genie actually used many different letters and numbers to mask 5-bit sequences, which were jumbled around. This was because the codes were 8 digits long, but needed to hold information for 5 bytes instead of 4.

The Genesis Game Genie used the following digits:
<pre>
ABCDEFGHJKLMNPRSTVWXYZ0123456789
</pre>

Notice they skipped I, O, Q, and U, probably so those digits weren't confused with others.

For substitution, "A" starts at 0 and it counts up from there. Here's a chart for easy access.
<table>
<tr>
<th>Digit</th>
<th>Substitute</th>
</tr>
<tr>
<td>A</td>
<td>00000</td>
</tr>
<tr>
<td>B</td>
<td>00001</td>
</tr>
<tr>
<td>C</td>
<td>00010</td>
</tr>
<tr>
<td>D</td>
<td>00011</td>
</tr>
<tr>
<td>E</td>
<td>00100</td>
</tr>
<tr>
<td>F</td>
<td>00101</td>
</tr>
<tr>
<td>G</td>
<td>00110</td>
</tr>
<tr>
<td>H</td>
<td>00111</td>
</tr>
<tr>
<td>J</td>
<td>01000</td>
</tr>
<tr>
<td>K</td>
<td>01001</td>
</tr>
<tr>
<td>L</td>
<td>01010</td>
</tr>
<tr>
<td>M</td>
<td>01011</td>
</tr>
<tr>
<td>N</td>
<td>01100</td>
</tr>
<tr>
<td>P</td>
<td>01101</td>
</tr>
<tr>
<td>R</td>
<td>01110</td>
</tr>
<tr>
<td>S</td>
<td>01111</td>
</tr>
<tr>
<td>T</td>
<td>10000</td>
</tr>
<tr>
<td>V</td>
<td>10001</td>
</tr>
<tr>
<td>W</td>
<td>10010</td>
</tr>
<tr>
<td>X</td>
<td>10011</td>
</tr>
<tr>
<td>Y</td>
<td>10100</td>
</tr>
<tr>
<td>Z</td>
<td>10101</td>
</tr>
<tr>
<td>0</td>
<td>10110</td>
</tr>
<tr>
<td>1</td>
<td>10111</td>
</tr>
<tr>
<td>2</td>
<td>11000</td>
</tr>
<tr>
<td>3</td>
<td>11001</td>
</tr>
<tr>
<td>4</td>
<td>11010</td>
</tr>
<tr>
<td>5</td>
<td>11011</td>
</tr>
<tr>
<td>6</td>
<td>11100</td>
</tr>
<tr>
<td>7</td>
<td>11101</td>
</tr>
<tr>
<td>8</td>
<td>11110</td>
</tr>
<tr>
<td>9</td>
<td>11111</td>
</tr>
</table>

===Decryption===
To get the initial binary string to decrypt a code, first you substitute each digit with it's 5-bit counterpart. We'll use Sonic 1's "Each ring counts as 8" code as an example.

<pre>
SCRA-BAX0

|-S-||-C-||-R-||-A-||-B-||-A-||-X-||-0-|
0111100010011100000000001000001001110110
</pre>

What we have left is a 40-bit string.

The address is 24-bit and comprises of the following bytes, counted from high to low. 17-18-19-20-21-22-23-24-9-10-11-12-13-14-15-16-33-34-35-36-37-38-39-40
Which gives us -
<pre>
a = (s & 0xFF0000) | ((s >> 16) & 0xFF00) | (s & 0xFF)

address = binary 000000001001110001110110, or 0x009C76
</pre>

The value is 16-bit (it is a genesis) and comprises of the following bytes, counted from high to low. 30-31-32-25-26-27-28-29-1-2-3-4-5-6-7-8
Which gives us -
<pre>
v = ((s & 0x700) << 5) | ((s >> 3) & 0x1F00) | (s >> 32)

value = binary 0101000001111000, or 0x5078
</pre>

So there you have it, this code replaces the value at the address 0x009C76 with 0x5078.

To encrypt back to genie format, just follow the steps backwards.

{{EnHacklopedia}}

{{Template:EnHacklopedia Legal}}
[[Category: EnHacklopedia]]

Hacking Genesis

2012-01-20T07:49:01Z

Rimsky82: /* Decryption */

{{Template:EnHacklopedia Header}}

==Game Genie==

[[Image:Genesisgenie.jpg|Game Genie device for Sega Genesis]]

The Genesis game genie was different from all of the other genies in a couple ways. It was similar in that it intercepted ROM from the cartridge and overwrote certain bytes to achieve the desired effects. But besides obvious differences, like the shape and look of the device, the encryption scheme was also different. Genies on other systems used letters or hex digits to mask other hex digits, and swapped them around for good measure. The genesis genie actually used many different letters and numbers to mask 5-bit sequences, which were jumbled around. This was because the codes were 8 digits long, but needed to hold information for 5 bytes instead of 4.

The Genesis Game Genie used the following digits:
<pre>
ABCDEFGHJKLMNPRSTVWXYZ0123456789
</pre>

Notice they skipped I, O, Q, and U, probably so those digits weren't confused with others.

For substitution, "A" starts at 0 and it counts up from there. Here's a chart for easy access.
<table>
<tr>
<th>Digit</th>
<th>Substitute</th>
</tr>
<tr>
<td>A</td>
<td>00000</td>
</tr>
<tr>
<td>B</td>
<td>00001</td>
</tr>
<tr>
<td>C</td>
<td>00010</td>
</tr>
<tr>
<td>D</td>
<td>00011</td>
</tr>
<tr>
<td>E</td>
<td>00100</td>
</tr>
<tr>
<td>F</td>
<td>00101</td>
</tr>
<tr>
<td>G</td>
<td>00110</td>
</tr>
<tr>
<td>H</td>
<td>00111</td>
</tr>
<tr>
<td>J</td>
<td>01000</td>
</tr>
<tr>
<td>K</td>
<td>01001</td>
</tr>
<tr>
<td>L</td>
<td>01010</td>
</tr>
<tr>
<td>M</td>
<td>01011</td>
</tr>
<tr>
<td>N</td>
<td>01100</td>
</tr>
<tr>
<td>P</td>
<td>01101</td>
</tr>
<tr>
<td>R</td>
<td>01110</td>
</tr>
<tr>
<td>S</td>
<td>01111</td>
</tr>
<tr>
<td>T</td>
<td>10000</td>
</tr>
<tr>
<td>V</td>
<td>10001</td>
</tr>
<tr>
<td>W</td>
<td>10010</td>
</tr>
<tr>
<td>X</td>
<td>10011</td>
</tr>
<tr>
<td>Y</td>
<td>10100</td>
</tr>
<tr>
<td>Z</td>
<td>10101</td>
</tr>
<tr>
<td>0</td>
<td>10110</td>
</tr>
<tr>
<td>1</td>
<td>10111</td>
</tr>
<tr>
<td>2</td>
<td>11000</td>
</tr>
<tr>
<td>3</td>
<td>11001</td>
</tr>
<tr>
<td>4</td>
<td>11010</td>
</tr>
<tr>
<td>5</td>
<td>11011</td>
</tr>
<tr>
<td>6</td>
<td>11100</td>
</tr>
<tr>
<td>7</td>
<td>11101</td>
</tr>
<tr>
<td>8</td>
<td>11110</td>
</tr>
<tr>
<td>9</td>
<td>11111</td>
</tr>
</table>

===Decryption===
To get the initial binary string to decrypt a code, first you substitute each digit with it's 5-bit counterpart. We'll use Sonic 1's "Each ring counts as 8" code as an example.

<pre>
SCRA-BAX0

|-S-||-C-||-R-||-A-||-B-||-A-||-X-||-0-|
0111100010011100000000001000001001110110
</pre>

What we have left is a 40-bit string.

The address is 24-bit and comprises of the following bytes, counted from high to low. 17-18-19-20-21-22-23-24-15-16-9-10-11-12-13-14-33-34-35-36-37-38-39-40
Which gives us -
<pre>
a = (s & 0xFF0000) | ((s >> 10) & 0xC000) | ((s >> 18) & 0x3F00) | (s & 0xFF)

address = binary 000000001001110001110110, or 0x009C76
</pre>

The value is 16-bit (it is a genesis) and comprises of the following bytes, counted from high to low. 30-31-32-25-26-27-28-29-1-2-3-4-5-6-7-8
Which gives us -
<pre>
v = ((s & 0x700) << 5) | ((s >> 3) & 0x1F00) | (s >> 32)

value = binary 0101000001111000, or 0x5078
</pre>

So there you have it, this code replaces the value at the address 0x009C76 with 0x5078.

To encrypt back to genie format, just follow the steps backwards.

{{EnHacklopedia}}

{{Template:EnHacklopedia Legal}}
[[Category: EnHacklopedia]]

User:Rimsky82

2011-11-24T05:04:12Z

Rimsky82: initial autobiography

rimsky82 joined GameHacking.org as an administrator in the Spring of 2011. He had his own site, exportcheats.com, that he had written himself and featured exporting the codes there as files for many different emulators. Since his page wasn't getting much traffic and his features were wanted on GameHacking.org, he decided to leave his site behind and join the team here.

He is currently rewriting the GameHacking.org website, integrating export features as well as many more cool features that will be unique to GH. He also hacks codes, and writes various .net programs for ROMs.

Hacking Genesis

2011-11-24T04:57:03Z

Rimsky82:

{{Template:EnHacklopedia Header}}

==Game Genie==

[[Image:Genesisgenie.jpg|Game Genie device for Sega Genesis]]

The Genesis game genie was different from all of the other genies in a couple ways. It was similar in that it intercepted ROM from the cartridge and overwrote certain bytes to achieve the desired effects. But besides obvious differences, like the shape and look of the device, the encryption scheme was also different. Genies on other systems used letters or hex digits to mask other hex digits, and swapped them around for good measure. The genesis genie actually used many different letters and numbers to mask 5-bit sequences, which were jumbled around. This was because the codes were 8 digits long, but needed to hold information for 5 bytes instead of 4.

The Genesis Game Genie used the following digits:
<pre>
ABCDEFGHJKLMNPRSTVWXYZ0123456789
</pre>

Notice they skipped I, O, Q, and U, probably so those digits weren't confused with others.

For substitution, "A" starts at 0 and it counts up from there. Here's a chart for easy access.
<table>
<tr>
<th>Digit</th>
<th>Substitute</th>
</tr>
<tr>
<td>A</td>
<td>00000</td>
</tr>
<tr>
<td>B</td>
<td>00001</td>
</tr>
<tr>
<td>C</td>
<td>00010</td>
</tr>
<tr>
<td>D</td>
<td>00011</td>
</tr>
<tr>
<td>E</td>
<td>00100</td>
</tr>
<tr>
<td>F</td>
<td>00101</td>
</tr>
<tr>
<td>G</td>
<td>00110</td>
</tr>
<tr>
<td>H</td>
<td>00111</td>
</tr>
<tr>
<td>J</td>
<td>01000</td>
</tr>
<tr>
<td>K</td>
<td>01001</td>
</tr>
<tr>
<td>L</td>
<td>01010</td>
</tr>
<tr>
<td>M</td>
<td>01011</td>
</tr>
<tr>
<td>N</td>
<td>01100</td>
</tr>
<tr>
<td>P</td>
<td>01101</td>
</tr>
<tr>
<td>R</td>
<td>01110</td>
</tr>
<tr>
<td>S</td>
<td>01111</td>
</tr>
<tr>
<td>T</td>
<td>10000</td>
</tr>
<tr>
<td>V</td>
<td>10001</td>
</tr>
<tr>
<td>W</td>
<td>10010</td>
</tr>
<tr>
<td>X</td>
<td>10011</td>
</tr>
<tr>
<td>Y</td>
<td>10100</td>
</tr>
<tr>
<td>Z</td>
<td>10101</td>
</tr>
<tr>
<td>0</td>
<td>10110</td>
</tr>
<tr>
<td>1</td>
<td>10111</td>
</tr>
<tr>
<td>2</td>
<td>11000</td>
</tr>
<tr>
<td>3</td>
<td>11001</td>
</tr>
<tr>
<td>4</td>
<td>11010</td>
</tr>
<tr>
<td>5</td>
<td>11011</td>
</tr>
<tr>
<td>6</td>
<td>11100</td>
</tr>
<tr>
<td>7</td>
<td>11101</td>
</tr>
<tr>
<td>8</td>
<td>11110</td>
</tr>
<tr>
<td>9</td>
<td>11111</td>
</tr>
</table>

===Decryption===
To get the initial binary string to decrypt a code, first you substitute each digit with it's 5-bit counterpart. We'll use Sonic 1's "Each ring counts as 8" code as an example.

<pre>
SCRA-BAX0

|-S-||-C-||-R-||-A-||-B-||-A-||-X-||-0-|
0111100010011100000000001000001001110110
</pre>

What we have left is a 40-bit string.

The address is 24-bit and comprises of the following bytes, counted from high to low. 17-18-19-20-21-22-23-24-9-10-11-12-13-14-33-34-35-36-37-38-39-40
Which gives us -
<pre>
a = (((s >> 16) & 255) << 16) | (((s >> 24) & 255) << 8) | (s & 255)

address = binary 000000001001110001110110, or 0x009C76
</pre>

The value is 16-bit (it is a genesis) and comprises of the following bytes, counted from high to low. 30-31-32-25-26-27-28-29-1-2-3-4-5-6-7-8
Which gives us -
<pre>
v = (((s >> 8) & 7) << 13) | (((s >> 11) & 31) << 8) | (s >> 32)

value = binary 0101000001111000, or 0x5078
</pre>

So there you have it, this code replaces the value at the address 0x009C76 with 0x5078.

To encrypt back to genie format, just follow the steps backwards.

{{EnHacklopedia}}

{{Template:EnHacklopedia Legal}}
[[Category: EnHacklopedia]]

Hacking Genesis

2011-11-24T04:56:35Z

Rimsky82:

{{Template:EnHacklopedia Header}}

==Game Genie==
[[Image:Genesisgenie.jpg|Game Genie device for Sega Genesis]]
The Genesis game genie was different from all of the other genies in a couple ways. It was similar in that it intercepted ROM from the cartridge and overwrote certain bytes to achieve the desired effects. But besides obvious differences, like the shape and look of the device, the encryption scheme was also different. Genies on other systems used letters or hex digits to mask other hex digits, and swapped them around for good measure. The genesis genie actually used many different letters and numbers to mask 5-bit sequences, which were jumbled around. This was because the codes were 8 digits long, but needed to hold information for 5 bytes instead of 4.

The Genesis Game Genie used the following digits:
<pre>
ABCDEFGHJKLMNPRSTVWXYZ0123456789
</pre>

Notice they skipped I, O, Q, and U, probably so those digits weren't confused with others.

For substitution, "A" starts at 0 and it counts up from there. Here's a chart for easy access.
<table>
<tr>
<th>Digit</th>
<th>Substitute</th>
</tr>
<tr>
<td>A</td>
<td>00000</td>
</tr>
<tr>
<td>B</td>
<td>00001</td>
</tr>
<tr>
<td>C</td>
<td>00010</td>
</tr>
<tr>
<td>D</td>
<td>00011</td>
</tr>
<tr>
<td>E</td>
<td>00100</td>
</tr>
<tr>
<td>F</td>
<td>00101</td>
</tr>
<tr>
<td>G</td>
<td>00110</td>
</tr>
<tr>
<td>H</td>
<td>00111</td>
</tr>
<tr>
<td>J</td>
<td>01000</td>
</tr>
<tr>
<td>K</td>
<td>01001</td>
</tr>
<tr>
<td>L</td>
<td>01010</td>
</tr>
<tr>
<td>M</td>
<td>01011</td>
</tr>
<tr>
<td>N</td>
<td>01100</td>
</tr>
<tr>
<td>P</td>
<td>01101</td>
</tr>
<tr>
<td>R</td>
<td>01110</td>
</tr>
<tr>
<td>S</td>
<td>01111</td>
</tr>
<tr>
<td>T</td>
<td>10000</td>
</tr>
<tr>
<td>V</td>
<td>10001</td>
</tr>
<tr>
<td>W</td>
<td>10010</td>
</tr>
<tr>
<td>X</td>
<td>10011</td>
</tr>
<tr>
<td>Y</td>
<td>10100</td>
</tr>
<tr>
<td>Z</td>
<td>10101</td>
</tr>
<tr>
<td>0</td>
<td>10110</td>
</tr>
<tr>
<td>1</td>
<td>10111</td>
</tr>
<tr>
<td>2</td>
<td>11000</td>
</tr>
<tr>
<td>3</td>
<td>11001</td>
</tr>
<tr>
<td>4</td>
<td>11010</td>
</tr>
<tr>
<td>5</td>
<td>11011</td>
</tr>
<tr>
<td>6</td>
<td>11100</td>
</tr>
<tr>
<td>7</td>
<td>11101</td>
</tr>
<tr>
<td>8</td>
<td>11110</td>
</tr>
<tr>
<td>9</td>
<td>11111</td>
</tr>
</table>

===Decryption===
To get the initial binary string to decrypt a code, first you substitute each digit with it's 5-bit counterpart. We'll use Sonic 1's "Each ring counts as 8" code as an example.

<pre>
SCRA-BAX0

|-S-||-C-||-R-||-A-||-B-||-A-||-X-||-0-|
0111100010011100000000001000001001110110
</pre>

What we have left is a 40-bit string.

The address is 24-bit and comprises of the following bytes, counted from high to low. 17-18-19-20-21-22-23-24-9-10-11-12-13-14-33-34-35-36-37-38-39-40
Which gives us -
<pre>
a = (((s >> 16) & 255) << 16) | (((s >> 24) & 255) << 8) | (s & 255)

address = binary 000000001001110001110110, or 0x009C76
</pre>

The value is 16-bit (it is a genesis) and comprises of the following bytes, counted from high to low. 30-31-32-25-26-27-28-29-1-2-3-4-5-6-7-8
Which gives us -
<pre>
v = (((s >> 8) & 7) << 13) | (((s >> 11) & 31) << 8) | (s >> 32)

value = binary 0101000001111000, or 0x5078
</pre>

So there you have it, this code replaces the value at the address 0x009C76 with 0x5078.

To encrypt back to genie format, just follow the steps backwards.

{{EnHacklopedia}}

{{Template:EnHacklopedia Legal}}
[[Category: EnHacklopedia]]

File:Genesisgenie.jpg

2011-11-24T04:55:33Z

Rimsky82: uploaded a new version of "File:Genesisgenie.jpg"

The Game Genie device for the Sega Genesis.

File:Genesisgenie.jpg

2011-11-24T04:53:28Z

Rimsky82: The Game Genie device for the Sega Genesis.

The Game Genie device for the Sega Genesis.

Hacking Genesis

2011-11-24T04:49:38Z

Rimsky82: started genie section

{{Template:EnHacklopedia Header}}

==Game Genie==
The Genesis game genie was different from all of the other genies in a couple ways. It was similar in that it intercepted ROM from the cartridge and overwrote certain bytes to achieve the desired effects. But besides obvious differences, like the shape and look of the device, the encryption scheme was also different. Genies on other systems used letters or hex digits to mask other hex digits, and swapped them around for good measure. The genesis genie actually used many different letters and numbers to mask 5-bit sequences, which were jumbled around. This was because the codes were 8 digits long, but needed to hold information for 5 bytes instead of 4.

The Genesis Game Genie used the following digits:
<pre>
ABCDEFGHJKLMNPRSTVWXYZ0123456789
</pre>

Notice they skipped I, O, Q, and U, probably so those digits weren't confused with others.

For substitution, "A" starts at 0 and it counts up from there. Here's a chart for easy access.
<table>
<tr>
<th>Digit</th>
<th>Substitute</th>
</tr>
<tr>
<td>A</td>
<td>00000</td>
</tr>
<tr>
<td>B</td>
<td>00001</td>
</tr>
<tr>
<td>C</td>
<td>00010</td>
</tr>
<tr>
<td>D</td>
<td>00011</td>
</tr>
<tr>
<td>E</td>
<td>00100</td>
</tr>
<tr>
<td>F</td>
<td>00101</td>
</tr>
<tr>
<td>G</td>
<td>00110</td>
</tr>
<tr>
<td>H</td>
<td>00111</td>
</tr>
<tr>
<td>J</td>
<td>01000</td>
</tr>
<tr>
<td>K</td>
<td>01001</td>
</tr>
<tr>
<td>L</td>
<td>01010</td>
</tr>
<tr>
<td>M</td>
<td>01011</td>
</tr>
<tr>
<td>N</td>
<td>01100</td>
</tr>
<tr>
<td>P</td>
<td>01101</td>
</tr>
<tr>
<td>R</td>
<td>01110</td>
</tr>
<tr>
<td>S</td>
<td>01111</td>
</tr>
<tr>
<td>T</td>
<td>10000</td>
</tr>
<tr>
<td>V</td>
<td>10001</td>
</tr>
<tr>
<td>W</td>
<td>10010</td>
</tr>
<tr>
<td>X</td>
<td>10011</td>
</tr>
<tr>
<td>Y</td>
<td>10100</td>
</tr>
<tr>
<td>Z</td>
<td>10101</td>
</tr>
<tr>
<td>0</td>
<td>10110</td>
</tr>
<tr>
<td>1</td>
<td>10111</td>
</tr>
<tr>
<td>2</td>
<td>11000</td>
</tr>
<tr>
<td>3</td>
<td>11001</td>
</tr>
<tr>
<td>4</td>
<td>11010</td>
</tr>
<tr>
<td>5</td>
<td>11011</td>
</tr>
<tr>
<td>6</td>
<td>11100</td>
</tr>
<tr>
<td>7</td>
<td>11101</td>
</tr>
<tr>
<td>8</td>
<td>11110</td>
</tr>
<tr>
<td>9</td>
<td>11111</td>
</tr>
</table>

===Decryption===
To get the initial binary string to decrypt a code, first you substitute each digit with it's 5-bit counterpart. We'll use Sonic 1's "Each ring counts as 8" code as an example.

<pre>
SCRA-BAX0

|-S-||-C-||-R-||-A-||-B-||-A-||-X-||-0-|
0111100010011100000000001000001001110110
</pre>

What we have left is a 40-bit string.

The address is 24-bit and comprises of the following bytes, counted from high to low. 17-18-19-20-21-22-23-24-9-10-11-12-13-14-33-34-35-36-37-38-39-40
Which gives us -
<pre>
a = (((s >> 16) & 255) << 16) | (((s >> 24) & 255) << 8) | (s & 255)

address = binary 000000001001110001110110, or 0x009C76
</pre>

The value is 16-bit (it is a genesis) and comprises of the following bytes, counted from high to low. 30-31-32-25-26-27-28-29-1-2-3-4-5-6-7-8
Which gives us -
<pre>
v = (((s >> 8) & 7) << 13) | (((s >> 11) & 31) << 8) | (s >> 32)

value = binary 0101000001111000, or 0x5078
</pre>

So there you have it, this code replaces the value at the address 0x009C76 with 0x5078.

To encrypt back to genie format, just follow the steps backwards.

{{EnHacklopedia}}

{{Template:EnHacklopedia Legal}}
[[Category: EnHacklopedia]]

Hacking Genesis

2011-11-24T03:19:31Z

Rimsky82: starting out with just headers and footers

{{Template:EnHacklopedia Header}}

==Game Genie==

Coming Soon...

{{EnHacklopedia}}

{{Template:EnHacklopedia Legal}}
[[Category: EnHacklopedia]]

Main Page

2011-11-17T20:56:09Z

Rimsky82: branding edits only.

<blockquote>Welcome to the Gamehacking.org wiki. The Gamehacking.org wiki is centered primarily around [[Game Enhancer|Game Enhancers]] and anything related to them. This includes articles on prominent [[:Category:People|community members]], [[:Category:Websites|websites]], [[:Category:Hacking and Game Info|hacking info]], [[:Category:Hardware Software and Accessories|software]], [[:Category:Game Enhancer Developers|developers, and publishers]]. The wiki is also used to archive [[:Category:GSHI|anything Gamehacking.org]]. 

Thus far we have accumulated [[Special:Statistics|{{NUMBEROFARTICLES}}]] [[Special:Allpages|articles]]. Feel free to contribute to the wiki as you please (after registration) as there is much work left to be done. If you contribute enough you could make the [[Top Contributors|Top 10 Contributors list]]. Please follow the [[GSHI:Guidelines|guidelines]] when contributing to the wiki.
 </blockquote>
 
 

{{Worthwhile Reading}}

Main Page

2011-11-17T20:53:36Z

Rimsky82:

<blockquote>Welcome to the '''[[GSHI]]''' wiki. The GSHI wiki is centered primarily around [[Game Enhancer|Game Enhancers]] and anything related to them. This includes articles on prominent [[:Category:People|community members]], [[:Category:Websites|websites]], [[:Category:Hacking and Game Info|hacking info]], [[:Category:Hardware Software and Accessories|software]], [[:Category:Game Enhancer Developers|developers, and publishers]]. The wiki is also used to archive [[:Category:GSHI|anything GSHI]]. 

Thus far we have accumulated [[Special:Statistics|{{NUMBEROFARTICLES}}]] [[Special:Allpages|articles]]. Feel free to contribute to the wiki as you please (after registration) as there is much work left to be done. If you contribute enough you could make the [[Top Contributors|Top 10 Contributors list]]. Please follow the [[GSHI:Guidelines|guidelines]] when contributing to the wiki.
 </blockquote>
 
 

{{Worthwhile Reading}}