Hacking Game Boy Advance - Revision history

Rimsky82: /* Gameshark Advance Code Types */

2024-04-14T17:09:51Z

Gameshark Advance Code Types

← Older revision		Revision as of 17:09, 14 April 2024
Line 111:		Line 111:
	\| class="EnHack-desc" \| DEADFACE<br />Changes the encryption seeds.		\| class="EnHack-desc" \| DEADFACE<br />Changes the encryption seeds.
	\|}		\|}


	===Description - Action Replay v3===		===Description - Action Replay v3===

Rimsky82: /* Action Replay Code Types */

2024-04-12T03:02:42Z

Action Replay Code Types

← Older revision		Revision as of 03:02, 12 April 2024
Line 255:		Line 255:
	\| class="EnHack-comments" \| 29		\| class="EnHack-comments" \| 29
	\|-		\|-
	\| class="EnHack-type" \| 92a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| 92a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If not equal To (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If not equal To (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 49		\| class="EnHack-comments" \| 49
Line 305:		Line 305:
	\| class="EnHack-comments" \| 2D		\| class="EnHack-comments" \| 2D
	\|-		\|-
	\| class="EnHack-type" \| 9Aa0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| 9Aa0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If less than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If less than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 4D		\| class="EnHack-comments" \| 4D
Line 355:		Line 355:
	\| class="EnHack-comments" \| 31		\| class="EnHack-comments" \| 31
	\|-		\|-
	\| class="EnHack-type" \| A1a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| A1a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If greater than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If greater than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 51		\| class="EnHack-comments" \| 51
Line 405:		Line 405:
	\| class="EnHack-comments" \| 35		\| class="EnHack-comments" \| 35
	\|-		\|-
	\| class="EnHack-type" \| AAa0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| AAa0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If less than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If less than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 55		\| class="EnHack-comments" \| 55
Line 455:		Line 455:
	\| class="EnHack-comments" \| 39		\| class="EnHack-comments" \| 39
	\|-		\|-
	\| class="EnHack-type" \| B2a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| B2a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If greater than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If greater than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 59		\| class="EnHack-comments" \| 59
Line 505:		Line 505:
	\| class="EnHack-comments" \| 3D		\| class="EnHack-comments" \| 3D
	\|-		\|-
	\| class="EnHack-type" \| B9a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| B9a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If AND (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy AND the halfword stored at 0a00aaaa is not equal to 0.		\| class="EnHack-desc" \| 16-bit If AND (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy AND the halfword stored at 0a00aaaa is not equal to 0.
	\| class="EnHack-comments" \| 5D		\| class="EnHack-comments" \| 5D

Dlevere: /* Converting codes */

2013-02-27T04:15:53Z

Converting codes

← Older revision		Revision as of 04:15, 27 February 2013
Line 899:		Line 899:
	==Converting codes==		==Converting codes==

	ARCrypt converts codes between the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.		[http://doc.kodewerx.org/tools/gba/arcrypt.rar ARCrypt] converts codes between the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.

Ace: /* Action Replay Code Types */ CSS typo

2008-12-05T13:09:43Z

Action Replay Code Types: CSS typo

Ace: /* Button Values */ Edited the table to make its style more in line with others like it.

2008-12-04T16:50:19Z

Button Values: Edited the table to make its style more in line with others like it.

← Older revision		Revision as of 16:50, 4 December 2008
Line 16:		Line 16:

	On the GBA, the word at 0x04000130 '''always''' contains the buttons that are being pressed. The GBA stores the button values XORed with 0x3FF. The button values are as follows:<br />		On the GBA, the word at 0x04000130 '''always''' contains the buttons that are being pressed. The GBA stores the button values XORed with 0x3FF. The button values are as follows:<br />
			{\| class="EnHack-code"
	{\| class="EnHack-~~codetypes~~"		! class="EnHack-addy" \| Button
	! class="EnHack-~~type~~" \| Button
	! class="EnHack-comments" \| Value		! class="EnHack-comments" \| Value
	\|-		\|-
	\| class="EnHack-~~type~~" \| A		\| class="EnHack-addy" \| A
	\| class="EnHack-comments" \| 1		\| class="EnHack-comments" \| 1
	\|-		\|-
	\| class="EnHack-~~type~~" \| B		\| class="EnHack-addy" \| B
	\| class="EnHack-comments" \| 2		\| class="EnHack-comments" \| 2
	\|-		\|-
	\| class="EnHack-~~type~~" \| Select		\| class="EnHack-addy" \| Select
	\| class="EnHack-comments" \| 4		\| class="EnHack-comments" \| 4
	\|-		\|-
	\| class="EnHack-~~type~~" \| Start		\| class="EnHack-addy" \| Start
	\| class="EnHack-comments" \| 8		\| class="EnHack-comments" \| 8
	\|-		\|-
	\| class="EnHack-~~type~~" \| Right		\| class="EnHack-addy" \| Right
	\| class="EnHack-comments" \| 0x10		\| class="EnHack-comments" \| 0x10
	\|-		\|-
	\| class="EnHack-~~type~~" \| Left		\| class="EnHack-addy" \| Left
	\| class="EnHack-comments" \| 0x20		\| class="EnHack-comments" \| 0x20
	\|-		\|-
	\| class="EnHack-~~type~~" \| Up		\| class="EnHack-addy" \| Up
	\| class="EnHack-comments" \| 0x40		\| class="EnHack-comments" \| 0x40
	\|-		\|-
	\| class="EnHack-~~type~~" \| Down		\| class="EnHack-addy" \| Down
	\| class="EnHack-comments" \| 0x80		\| class="EnHack-comments" \| 0x80
	\|-		\|-
	\| class="EnHack-~~type~~" \| R		\| class="EnHack-addy" \| R
	\| class="EnHack-comments" \| 0x100		\| class="EnHack-comments" \| 0x100
	\|-		\|-
	\| class="EnHack-~~type~~" \| L		\| class="EnHack-addy" \| L
	\| class="EnHack-comments" \| 0x200		\| class="EnHack-comments" \| 0x200
	\|}		\|}


	==Gameshark Advance and Action Replay v3==		==Gameshark Advance and Action Replay v3==

MathUser: /* Converting codes */

2008-12-04T16:39:21Z

Converting codes

← Older revision		Revision as of 16:39, 4 December 2008
Line 904:		Line 904:
	ARCrypt converts codes between the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.		ARCrypt converts codes between the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.


			{{EnHacklopedia}}

	{{Template: EnHacklopedia_Legal}}		{{Template: EnHacklopedia_Legal}}
	[[Category: EnHacklopedia]]		[[Category: EnHacklopedia]]

Ace at 14:38, 3 December 2008

2008-12-03T14:38:34Z

← Older revision		Revision as of 14:38, 3 December 2008
Line 58:		Line 58:
	===Description - Gameshark Advance===		===Description - Gameshark Advance===

	[[Image:gsa1.png\|center\|Gameshark Advance Splash Screen]][[Image:arv1.png\|center\|Action Replay v1/2 Splash Screen]]<br />[[Image:arv12.png\|center\|Action Replay v1/2 Main Screen]][[Image:arv13.png\|center\|Action Replay v1/2 Code Editing ~~Scren~~]]		[[Image:gsa1.png\|center\|Gameshark Advance Splash Screen]][[Image:arv1.png\|center\|Action Replay v1/2 Splash Screen]]<br />[[Image:arv12.png\|center\|Action Replay v1/2 Main Screen]][[Image:arv13.png\|center\|Action Replay v1/2 Code Editing Screen]]

	The Gameshark Advance was the original cheat device for the Gameboy Advance. While more functional than the cheat devices for the Gameboy, it is still far less functional than its equivalent for the N64. The GSA's code types include 8-, 16-, and 32-bit writes, a slide code, a 16-bit If Equal To conditional, and a 16-bit ROM patch. The GSA also does not provide a code searching feature, something that had been provided in all incarnations for the Gameboy. Finally, the codes are encrypted, a first for any handheld cheat device. In Europe, the Gameshark is referred to as the Action Replay. The two products shared a name starting with revision 3, an entirely different product referred to as ARv3.		The Gameshark Advance was the original cheat device for the Gameboy Advance. While more functional than the cheat devices for the Gameboy, it is still far less functional than its equivalent for the N64. The GSA's code types include 8-, 16-, and 32-bit writes, a slide code, a 16-bit If Equal To conditional, and a 16-bit ROM patch. The GSA also does not provide a code searching feature, something that had been provided in all incarnations for the Gameboy. Finally, the codes are encrypted, a first for any handheld cheat device. In Europe, the Gameshark is referred to as the Action Replay. The two products shared a name starting with revision 3, an entirely different product referred to as ARv3.
Line 629:		Line 629:
	[[Image:arcrypt.png\|none\|550px\|center\|AR Crypt]]		[[Image:arcrypt.png\|none\|550px\|center\|AR Crypt]]

	Gameshark and Action Replay codes are encrypted and decrypted with [[Tools#AR_Crypt\|AR Crypt]]. To encrypt codes, put the appropriate, formatted code in the left box. The choose RAW in the left radio box. On the right radio box, choose ARV1/2 for Gameshark or ARV3/4 for Action Replay. Decrypting codes works in a similar fashion. ARV1/2 or ARV3/4 on the left and RAW on the right. ARCrypt also provides an option to format codes. This only does one code at a time however. Input the address followed by the value and select the appropriate ARCrypt code type, then press the create button. Underneath the address and value, the correctly formatted code will be displayed, and will be display encrypted in the right ~~textarea~~. For some code types, such as slide codes, additional options will be displayed in the middle of the window. Customize these as necessary.		Gameshark and Action Replay codes are encrypted and decrypted with [[Tools#AR_Crypt\|AR Crypt]]. To encrypt codes, put the appropriate, formatted code in the left box. The choose RAW in the left radio box. On the right radio box, choose ARV1/2 for Gameshark or ARV3/4 for Action Replay. Decrypting codes works in a similar fashion. ARV1/2 or ARV3/4 on the left and RAW on the right. ARCrypt also provides an option to format codes. This only does one code at a time however. Input the address followed by the value and select the appropriate ARCrypt code type, then press the create button. Underneath the address and value, the correctly formatted code will be displayed, and will be display encrypted in the right text area. For some code types, such as slide codes, additional options will be displayed in the middle of the window. Customize these as necessary.


Line 644:		Line 644:
	The information in this section is based on a post originally by Parasyte.		The information in this section is based on a post originally by Parasyte.

	Both [[Tools#AR_Crypt\|AR Crypt]] and [[Tools#VBA-H_SDL\|VBA-SDL-H]] are required for hacking non-standard master codes, as well as a Hex Editor. Examples are provided for ~~Baulder~~'s Gate and Phantasy Star Collection.		Both [[Tools#AR_Crypt\|AR Crypt]] and [[Tools#VBA-H_SDL\|VBA-SDL-H]] are required for hacking non-standard master codes, as well as a Hex Editor. Examples are provided for Baldur's Gate and Phantasy Star Collection.


	=====~~Baulder~~'s Gate=====		=====Baldur's Gate=====

	Load ~~Baulder~~'s Gate up into VBA-SDL and enter the gameplay part of the game. Then load up a hex editor, open the ~~rom~~, and search for 0x0047C0460847C046. This is the beginning of the long branch routine. For ~~Baulder~~'s Gate, it's at 0x006A9888 which is GBA address 0x086A9888. It disassembles to:<br />		Load Baldur's Gate up into VBA-SDL and enter the gameplay part of the game. Then load up a hex editor, open the ROM, and search for 0x0047C0460847C046. This is the beginning of the long branch routine. For Baldur's Gate, it's at 0x006A9888 which is GBA address 0x086A9888. It disassembles to:<br />

	{\| class="EnHack-asm"		{\| class="EnHack-asm"
Line 679:		Line 679:
	=====Phantasy Star Collection=====		=====Phantasy Star Collection=====

	It is impossible to hack a universal master code for Phantasy Star Collection, because it contains four executables. The intro does not need a master code, but each of the other three executables (the three games) require a seperate master code. For Phantasy Star II and Phantasy Star III, creating a master code is simple enough. However, for Phantasy Star, there is a problem. The Phantasy Star exectuable is located at 0x08738000, and it is impossible to create a standard BL-type master code from any address above 0x0840001C. This is further complicated by the fact that the long branch routine does not exist in the Phantasy Star executable, so creating a master code the same way as for ~~Baulder~~'s Gate will not work. In this case, we shall take a different approach - find the interrupt handler. These are executed several times per second, so they are perfect.		It is impossible to hack a universal master code for Phantasy Star Collection, because it contains four executables. The intro does not need a master code, but each of the other three executables (the three games) require a seperate master code. For Phantasy Star II and Phantasy Star III, creating a master code is simple enough. However, for Phantasy Star, there is a problem. The Phantasy Star exectuable is located at 0x08738000, and it is impossible to create a standard BL-type master code from any address above 0x0840001C. This is further complicated by the fact that the long branch routine does not exist in the Phantasy Star executable, so creating a master code the same way as for Baldur's Gate will not work. In this case, we shall take a different approach - find the interrupt handler. These are executed several times per second, so they are perfect.

	Load up Phantasy Star Collection in VBA-SDL-H. The GBA interrupt vector is always located at 0x03007FFC. Use the mw command to display the word there; it should be a pointer. For me, it is 0x020207d0. This is an ARM address, because it is an even number. Had it been THUMB, it would have been 0x020207d1. Disassemble the arm (da) starting at 0x020207d0. Here is what I have:<br />		Load up Phantasy Star Collection in VBA-SDL-H. The GBA interrupt vector is always located at 0x03007FFC. Use the mw command to display the word there; it should be a pointer. For me, it is 0x020207d0. This is an ARM address, because it is an even number. Had it been THUMB, it would have been 0x020207d1. Disassemble the arm (da) starting at 0x020207d0. Here is what I have:<br />
Line 825:		Line 825:
	===Description - Codebreaker Advance===		===Description - Codebreaker Advance===

	Pelican released the Codebreaker Advance shortly after the GSA came out. Like the GSA, it is a step up from its Gameboy counterpart, but lacks a trainer. Notable code types that the CBA has added ~~includ~~ the slide code, 8- and 16-bit writes, conditionals, and a bitwise AND. However, the CBA does not implement a 32-bit RAM write or a ROM patch, both of which the GSA has. Codebreaker codes are encrypted by default, but unencrypted codes can be allowed, by not having a 9-code as the first line of a master code.		Pelican released the Codebreaker Advance shortly after the GSA came out. Like the GSA, it is a step up from its Gameboy counterpart, but lacks a trainer. Notable code types that the CBA has added include the slide code, 8- and 16-bit writes, conditionals, and a bitwise AND. However, the CBA does not implement a 32-bit RAM write or a ROM patch, both of which the GSA has. Codebreaker codes are encrypted by default, but unencrypted codes can be allowed, by not having a 9-code as the first line of a master code.


Line 882:		Line 882:
	==ARM7 Assembly==		==ARM7 Assembly==

	The GBA uses an ARM7TMDI chip. The ARM architecture provides two modes, ARM and THUMB, and well as 31 32-bit registers. Only 16 of these registers are visible at a time, with R13, R14, and R15 being for the Stack Pointer, the Link Register, and the Program Counter respectively. The ARM instruction set uses 32-bit operations, whereas the THUMB set uses 16-bit. THUMB is designed to produce smaller code with the same speed as ARM and much of the functionability. One major ~~limiation~~ of THUMB is that many instructions cannot access registers above R07. In ARM, 4 bits are set aside for a conditional. The operation is executed only if the current flags meet that condition. More information on ARM and THUMB can be found in the official ARM and THUMB manuals, as well as GBATek, all provided on the [[Documents\|documents page]].		The GBA uses an ARM7TMDI chip. The ARM architecture provides two modes, ARM and THUMB, and well as 31 32-bit registers. Only 16 of these registers are visible at a time, with R13, R14, and R15 being for the Stack Pointer, the Link Register, and the Program Counter respectively. The ARM instruction set uses 32-bit operations, whereas the THUMB set uses 16-bit. THUMB is designed to produce smaller code with the same speed as ARM and much of the functionability. One major limitation of THUMB is that many instructions cannot access registers above R07. In ARM, 4 bits are set aside for a conditional. The operation is executed only if the current flags meet that condition. More information on ARM and THUMB can be found in the official ARM and THUMB manuals, as well as GBATek, all provided on the [[Documents\|documents page]].


Line 891:		Line 891:
	VBA-SDL-H is a modified version of VBA-SDL V1.7.2 by kenobi and Labmaster. Compatibility wise, it has the same limitations as VBA-H. VBA-SDL-H has been modified to include extra options such as Don't break on, Conditional Breaks, Break on Read, Break on Change, and Last Branch. In addition to this, it provides the same options provided by the official version of VBA-SDL.		VBA-SDL-H is a modified version of VBA-SDL V1.7.2 by kenobi and Labmaster. Compatibility wise, it has the same limitations as VBA-H. VBA-SDL-H has been modified to include extra options such as Don't break on, Conditional Breaks, Break on Read, Break on Change, and Last Branch. In addition to this, it provides the same options provided by the official version of VBA-SDL.

	Inside the console window, VBA-SDL-H lists all the registers, as well as CPSR, the mode, and the status flags. Additionally, the next instruction to be executed is displayed. If the ''last'' option was enabled, the same information is also provided for when the last branch ~~occured~~. This feature has some bugs, however, and does not always work properly. ''h'' brings up a list of all available commands with a description. The ''c'' command resumes the functioning of the game. ''bt'' and ''ba'' break on the THUMB and ARM addresses provided respectively, when they are executed. ''bd [number]'' deletes the corresponding ''bt'' or ''ba'' instruction. This function has a small bug in that the last remaining breakpoint must be deleted manually. bpw [address] [bytes] breaks when [address] or any addresses up to [bytes] bytes afterwards are written to. The ''cow'' changes ''bpw'' to act as a break on change, which will not break if the value being written to the specified address is the same as the address's current value. ''bpr'' functions the same way as ''bpw'', but it breaks when an address is read from instead of written to. The ''bpwc'' and ''bprc'' instruction delete all breaks on write and read, and the ''bl'' option lists all of these breakpoints. The ''db'' is used to disassemble the specified address from triggering a breakpoint. The instruction will still execute as normal, but VBA-SDL-H will ignore it with regard to breakpoints. ''cba'' and ''cbt'' instructions are also allowed. These instructions set conditional ARM and THUMB breakpoints.		Inside the console window, VBA-SDL-H lists all the registers, as well as CPSR, the mode, and the status flags. Additionally, the next instruction to be executed is displayed. If the ''last'' option was enabled, the same information is also provided for when the last branch occurred. This feature has some bugs, however, and does not always work properly. ''h'' brings up a list of all available commands with a description. The ''c'' command resumes the functioning of the game. ''bt'' and ''ba'' break on the THUMB and ARM addresses provided respectively, when they are executed. ''bd [number]'' deletes the corresponding ''bt'' or ''ba'' instruction. This function has a small bug in that the last remaining breakpoint must be deleted manually. bpw [address] [bytes] breaks when [address] or any addresses up to [bytes] bytes afterwards are written to. The ''cow'' changes ''bpw'' to act as a break on change, which will not break if the value being written to the specified address is the same as the address's current value. ''bpr'' functions the same way as ''bpw'', but it breaks when an address is read from instead of written to. The ''bpwc'' and ''bprc'' instruction delete all breaks on write and read, and the ''bl'' option lists all of these breakpoints. The ''db'' is used to disassemble the specified address from triggering a breakpoint. The instruction will still execute as normal, but VBA-SDL-H will ignore it with regard to breakpoints. ''cba'' and ''cbt'' instructions are also allowed. These instructions set conditional ARM and THUMB breakpoints.

	The ''d'', ''da'', and ''dt'' instuctions disassemble the memory located at specified address. ''d'' disassembles in the game's current mode, while ''dt'' and ''da'' force THUMB and ARM disassembly. The next twenty operations are shown in either case. If no address is provided, disassembly begins at the current location of the game.		The ''d'', ''da'', and ''dt'' instuctions disassemble the memory located at specified address. ''d'' disassembles in the game's current mode, while ''dt'' and ''da'' force THUMB and ARM disassembly. The next twenty operations are shown in either case. If no address is provided, disassembly begins at the current location of the game.
Line 902:		Line 902:
	==Converting codes==		==Converting codes==

	ARCrypt converts codes ~~betweent~~ the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.		ARCrypt converts codes between the three formats. Put the code to be converted in the left box, choose the appropriate devices, and hit convert. AR and GS codes must be encrypted during this process.


	{{Template: EnHacklopedia_Legal}}		{{Template: EnHacklopedia_Legal}}
	[[Category: EnHacklopedia]]		[[Category: EnHacklopedia]]

Ace: Hacking Gameboy Advance moved to Hacking Game Boy Advance

2008-12-03T11:34:27Z

Hacking Gameboy Advance moved to Hacking Game Boy Advance

← Older revision	Revision as of 11:34, 3 December 2008
(No difference)

Ace at 09:47, 3 December 2008

2008-12-03T09:47:16Z

← Older revision		Revision as of 09:47, 3 December 2008
Line 1:		Line 1:
	{{Template:EnHacklopedia Header}}		{{Template:EnHacklopedia Header}}

	==Hacking using VBA-H==		==Hacking using VBA-H==

Ace at 09:40, 3 December 2008

2008-12-03T09:40:29Z

Show changes

← Older revision		Revision as of 03:02, 12 April 2024
Line 255:		Line 255:
	\| class="EnHack-comments" \| 29		\| class="EnHack-comments" \| 29
	\|-		\|-
	\| class="EnHack-type" \| 92a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| 92a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If not equal To (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If not equal To (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is not equal to the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 49		\| class="EnHack-comments" \| 49
Line 305:		Line 305:
	\| class="EnHack-comments" \| 2D		\| class="EnHack-comments" \| 2D
	\|-		\|-
	\| class="EnHack-type" \| 9Aa0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| 9Aa0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If less than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If less than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (signed) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 4D		\| class="EnHack-comments" \| 4D
Line 355:		Line 355:
	\| class="EnHack-comments" \| 31		\| class="EnHack-comments" \| 31
	\|-		\|-
	\| class="EnHack-type" \| A1a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| A1a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If greater than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If greater than (signed) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (signed) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 51		\| class="EnHack-comments" \| 51
Line 405:		Line 405:
	\| class="EnHack-comments" \| 35		\| class="EnHack-comments" \| 35
	\|-		\|-
	\| class="EnHack-type" \| AAa0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| AAa0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If less than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If less than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is less than (unsigned) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 55		\| class="EnHack-comments" \| 55
Line 455:		Line 455:
	\| class="EnHack-comments" \| 39		\| class="EnHack-comments" \| 39
	\|-		\|-
	\| class="EnHack-type" \| B2a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| B2a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If greater than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.		\| class="EnHack-desc" \| 16-bit If greater than (unsigned) (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy is greater than (unsigned) the halfword stored at 0a00aaaa.
	\| class="EnHack-comments" \| 59		\| class="EnHack-comments" \| 59
Line 505:		Line 505:
	\| class="EnHack-comments" \| 3D		\| class="EnHack-comments" \| 3D
	\|-		\|-
	\| class="EnHack-type" \| B9a0aaaa ~~00000yyyy~~		\| class="EnHack-type" \| B9a0aaaa 0000yyyy
	\| class="EnHack-desc" \| 16-bit If AND (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy AND the halfword stored at 0a00aaaa is not equal to 0.		\| class="EnHack-desc" \| 16-bit If AND (Multi-line)<br />All subsequent codes until the z20 code type or end of code list are executed only if yy AND the halfword stored at 0a00aaaa is not equal to 0.
	\| class="EnHack-comments" \| 5D		\| class="EnHack-comments" \| 5D

← Older revision		Revision as of 16:50, 4 December 2008
Line 16:		Line 16:

	On the GBA, the word at 0x04000130 '''always''' contains the buttons that are being pressed. The GBA stores the button values XORed with 0x3FF. The button values are as follows:<br />		On the GBA, the word at 0x04000130 '''always''' contains the buttons that are being pressed. The GBA stores the button values XORed with 0x3FF. The button values are as follows:<br />
			{\| class="EnHack-code"
	{\| class="EnHack-~~codetypes~~"		! class="EnHack-addy" \| Button
	! class="EnHack-~~type~~" \| Button
	! class="EnHack-comments" \| Value		! class="EnHack-comments" \| Value
	\|-		\|-
	\| class="EnHack-~~type~~" \| A		\| class="EnHack-addy" \| A
	\| class="EnHack-comments" \| 1		\| class="EnHack-comments" \| 1
	\|-		\|-
	\| class="EnHack-~~type~~" \| B		\| class="EnHack-addy" \| B
	\| class="EnHack-comments" \| 2		\| class="EnHack-comments" \| 2
	\|-		\|-
	\| class="EnHack-~~type~~" \| Select		\| class="EnHack-addy" \| Select
	\| class="EnHack-comments" \| 4		\| class="EnHack-comments" \| 4
	\|-		\|-
	\| class="EnHack-~~type~~" \| Start		\| class="EnHack-addy" \| Start
	\| class="EnHack-comments" \| 8		\| class="EnHack-comments" \| 8
	\|-		\|-
	\| class="EnHack-~~type~~" \| Right		\| class="EnHack-addy" \| Right
	\| class="EnHack-comments" \| 0x10		\| class="EnHack-comments" \| 0x10
	\|-		\|-
	\| class="EnHack-~~type~~" \| Left		\| class="EnHack-addy" \| Left
	\| class="EnHack-comments" \| 0x20		\| class="EnHack-comments" \| 0x20
	\|-		\|-
	\| class="EnHack-~~type~~" \| Up		\| class="EnHack-addy" \| Up
	\| class="EnHack-comments" \| 0x40		\| class="EnHack-comments" \| 0x40
	\|-		\|-
	\| class="EnHack-~~type~~" \| Down		\| class="EnHack-addy" \| Down
	\| class="EnHack-comments" \| 0x80		\| class="EnHack-comments" \| 0x80
	\|-		\|-
	\| class="EnHack-~~type~~" \| R		\| class="EnHack-addy" \| R
	\| class="EnHack-comments" \| 0x100		\| class="EnHack-comments" \| 0x100
	\|-		\|-
	\| class="EnHack-~~type~~" \| L		\| class="EnHack-addy" \| L
	\| class="EnHack-comments" \| 0x200		\| class="EnHack-comments" \| 0x200
	\|}		\|}


	==Gameshark Advance and Action Replay v3==		==Gameshark Advance and Action Replay v3==

← Older revision		Revision as of 13:09, 5 December 2008
Line 567:		Line 567:
	\| class="EnHack-comments" \| z09		\| class="EnHack-comments" \| z09
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 14a0aaaa<br />xxxxxxxx 00000000		\| class="EnHack-type" \| 00000000 14a0aaaa<br />xxxxxxxx 00000000
	\| class="EnHack-desc" \| 32-bit AR Button RAM Write<br />Writes xxxxxxxx to 0a00aaaa when the AR Button is pressed.		\| class="EnHack-desc" \| 32-bit AR Button RAM Write<br />Writes xxxxxxxx to 0a00aaaa when the AR Button is pressed.
	\| class="EnHack-comments" \| z0A		\| class="EnHack-comments" \| z0A
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 18a0aaaa<br />0000xxxx 00000000		\| class="EnHack-type" \| 00000000 18a0aaaa<br />0000xxxx 00000000
	\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.		\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
	\| class="EnHack-comments" \| z0C		\| class="EnHack-comments" \| z0C
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 1Aa0aaaa<br />0000xxxx 00000000		\| class="EnHack-type" \| 00000000 1Aa0aaaa<br />0000xxxx 00000000
	\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.		\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
	\| class="EnHack-comments" \| z0D		\| class="EnHack-comments" \| z0D
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 1Ca0aaaa<br />0000xxxx 00000000		\| class="EnHack-type" \| 00000000 1Ca0aaaa<br />0000xxxx 00000000
	\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.		\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
	\| class="EnHack-comments" \| z0E		\| class="EnHack-comments" \| z0E
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 1Ea0aaaa<br />0000xxxx 00000000		\| class="EnHack-type" \| 00000000 1Ea0aaaa<br />0000xxxx 00000000
	\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.		\| class="EnHack-desc" \| 16-bit ROM Patch<br />Patches 0x08000000 + (0a00aaaa >> 2) with xxxx.
	\| class="EnHack-comments" \| z0F		\| class="EnHack-comments" \| z0F
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 40000000		\| class="EnHack-type" \| 00000000 40000000
	\| class="EnHack-desc" \| Execute codes normally<br />All conditionals currently going on do not apply after this point.		\| class="EnHack-desc" \| Execute codes normally<br />All conditionals currently going on do not apply after this point.
	\| class="EnHack-comments" \| z20		\| class="EnHack-comments" \| z20
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 60000000		\| class="EnHack-type" \| 00000000 60000000
	\| class="EnHack-desc" \| Execute all following codes<br />All following codes are executed regardless of anything else.		\| class="EnHack-desc" \| Execute all following codes<br />All following codes are executed regardless of anything else.
	\| class="EnHack-comments" \| z30		\| class="EnHack-comments" \| z30
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 80a0aaaa<br />000000xx vvddiiii		\| class="EnHack-type" \| 00000000 80a0aaaa<br />000000xx vvddiiii
	\| class="EnHack-desc" \| 8-bit slide code<br />Writes dd bytes, starting at the address 0a00aaaa with the value xx and incrementing the address by iiii and the value by vv each iteration.		\| class="EnHack-desc" \| 8-bit slide code<br />Writes dd bytes, starting at the address 0a00aaaa with the value xx and incrementing the address by iiii and the value by vv each iteration.
	\| class="EnHack-comments" \| z40		\| class="EnHack-comments" \| z40
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 82a0aaaa<br />0000xxxx vvddiiii		\| class="EnHack-type" \| 00000000 82a0aaaa<br />0000xxxx vvddiiii
	\| class="EnHack-desc" \| 16-bit slide code<br />Writes dd halfwords, starting at the address 0a00aaaa with the value xxxx and incrementing the address by iiii * 2 and the value by vv each iteration.		\| class="EnHack-desc" \| 16-bit slide code<br />Writes dd halfwords, starting at the address 0a00aaaa with the value xxxx and incrementing the address by iiii * 2 and the value by vv each iteration.
	\| class="EnHack-comments" \| z41		\| class="EnHack-comments" \| z41
	\|-		\|-
	\| class="EnHack-~~types~~" \| 00000000 84a0aaaa<br />xxxxxx vvddiiii<br />80000000 00000000		\| class="EnHack-type" \| 00000000 84a0aaaa<br />xxxxxx vvddiiii<br />80000000 00000000
	\| class="EnHack-desc" \| 32-bit slide code<br />Writes dd words, starting at the address 0a00aaaa with the value xxxxxxxx and incrementing the address by iiii * 4 and the value by vv each iteration. The final line is needed to prevent a bug in the AR from occurring.		\| class="EnHack-desc" \| 32-bit slide code<br />Writes dd words, starting at the address 0a00aaaa with the value xxxxxxxx and incrementing the address by iiii * 4 and the value by vv each iteration. The final line is needed to prevent a bug in the AR from occurring.
	\| class="EnHack-comments" \| z42		\| class="EnHack-comments" \| z42
	\|-		\|-
	! class="EnHack-~~types~~" colspan="3" \| Special Codes		! class="EnHack-type" colspan="3" \| Special Codes
	\|-		\|-
	\| class="EnHack-~~types~~" \| C4aaaaaa 00000bcd		\| class="EnHack-type" \| C4aaaaaa 00000bcd
	\| class="EnHack-desc" \| Master Code<br />Hooks the address 08aaaaaa for the code handler. if b is 1, the AR switch must be turned off when the game starts. Otherwise, it doesn't matter. c determines the number of codes the AR processes at a time. d is the type of hook. 0 is BL and 1 is Push LR then BL.		\| class="EnHack-desc" \| Master Code<br />Hooks the address 08aaaaaa for the code handler. if b is 1, the AR switch must be turned off when the game starts. Otherwise, it doesn't matter. c determines the number of codes the AR processes at a time. d is the type of hook. 0 is BL and 1 is Push LR then BL.
	\| class="EnHack-comments" \| 62		\| class="EnHack-comments" \| 62
	\|-		\|-
	\| class="EnHack-~~types~~" \| xxxxxxxx 001DC0DE		\| class="EnHack-type" \| xxxxxxxx 001DC0DE
	\| class="EnHack-desc" \| ID Code<br />Used by the AR to auto-detect games. xxxxxxxx should be the word at 0x080000AC.		\| class="EnHack-desc" \| ID Code<br />Used by the AR to auto-detect games. xxxxxxxx should be the word at 0x080000AC.
	\| class="EnHack-comments" \| --		\| class="EnHack-comments" \| --
	\|-		\|-
	\| class="EnHack-~~types~~" \| DEADFACE xxxxxxxx		\| class="EnHack-type" \| DEADFACE xxxxxxxx
	\| class="EnHack-desc" \| DEADFACE<br />Changes the encryption seeds.		\| class="EnHack-desc" \| DEADFACE<br />Changes the encryption seeds.
	\| class="EnHack-comments" \| --		\| class="EnHack-comments" \| --
	\|}		\|}


	===Encrypting/Decrypting Gameshark/Action Replay codes===		===Encrypting/Decrypting Gameshark/Action Replay codes===