How To Joker On/Off and Hold

I HIGHLY Suggest You Know How To Subroutine Before This
This guide was made by TheEliteOne aka Xx958xX aka Crioshinx aka Jinzo X
Things you need to know:
Real Addressing:
Anything you do in ps2dis needs the real address, to find it you need to open your calculator, click View>>Scientific>>View>>Hex and paste your address and add 8800000 (88 with 5 zeros) add zero(s) to the begining untell it's 8 cherecters long
The Negitive Rule:
When i type 'Negitive Rule' you need to see if the second halfof waht your entering is negitive or not,
Positive:
0000 >> 7F79
Negitive:
7F80 >> FFFF
Branching:
Branches used in this guide are bne, the use two register, the first one needs to be the controller address and the second one need to be the value to activate, then that branches to the next bne, whos registers are the controller and value to de-activate, branching is used to see if your pressing the buttons to activate or not. They are usualy followed by nops. To branch something, like if i had bne t0, t3, $Branch to jr ra i would enter the real jr ra address into that line
How To Find The Controller Address:
1] Set pause game? to true under the PRX/options menu
2] Hold L and open NitePR, search 100 under hex, L=100
3] Hold R and open NitePR, search 200 under hex, R=200
4] Hold L and R and open NitePR, search 300 in hex, 100 + 200 = 300
You should have 2 results now, try them with a hex of 200, if the R trigger is to shoot you will start shooting, heres the button values, i didn't type this:
Select button = 0001
Start button = 0008
Up D-Pad button = 0010
Right D-Pad button = 0020
Down D-Pad button = 0040
Left D-Pad button = 0080
Left trigger = 0100
Right trigger = 0200
Triangle button = 1000
Circle button = 2000
Cross button = 4000
Square button = 8000
Hold button = 20000
Music Note button = 800000
Screen button = 400000
Volume up button = 100000
Volume down button = 200000
Wlan switch up = 40000
Remote hold position 80000
Add tehm to have multibel buttons
L + R = 300
Hacked Value:
Copy and Paste the address into the decoder and the value under the hex menu is your ahcked value
Heres a template for one function On/Off: (I didn't ORIGINALY type this but i typed this, without a referance)

Quote:

---

Lui t0, $First half of the real controller address
Lw t0, $Second half of the real controller addres(t0)
Lui t1, $First half of the real code address, use the Negitive Rule
Ori t2, 0, $Button value to activate
Ori t3, 0, $Button value to de-activate
Lui t4, $First half of the hacked value
Ori t5, t4 $Second half of the hacked value
Lui t6, $First half of the hex
Ori t6, t6 $Second half of the hex
Bne t0, t2, $Branches to the next bne
nop
Sw t5, $Second half of the real code address(t0)
Bne t0, t3, $Branches to the jr ra
nop
Sw t6, $Second half of the real code address(t0)
Jr ra

---

Heres what the registers mean:

Code:

---

t0=temperary 0
t1=temperary1
t2=temperary2
t3=temperary3
t4=temperary4
t5=temperary5
t6=temperary6
0=Zero
nop=No Operation

---

Heres what the commadns mean:

Code:

---

Lui=Load Upper Immediate
Lw=Load Word
Ori=Or Immidiate
Bne=Branche on not equal [this is the ONLY one i ahd to look up]
Sw=Store Word
Jr ra=Jump Register, Return Address

---

Notice how the branches registers go back to the controller and the button values? If you want to joker multible functions you need the second bne to branch to the first half of the code address for the second function, still include a jr ra, if you do reset your temperary register back to 0
You will also need a hook
Heres a Hold template:

Quote:

---

Lui t0 $first half real address
Lui t1 $First half real controller Address
lh t1 $Second Half Of real Controller Address(t1)
ori t2 t2 $Activation Value
Bne t1 t2 $Branches to JR RA
nop
lui t3 $First half hacked value
ori t3 t3 $Second half Hacked Value
sw t4 $Last half of Address(t0)
jr ra

---

They use the same commands and registers so see above if you need those, Reply if you need any help, if i did anything wrong plz let me know asap, if your a mod dont just edit and let it go, please say what i did wrong in a reply

good job.

What is a hacked value and how do you find it?

P.S. u misspelled hacked

does this actually work?

if you try it, then you'll know. :)

Copy and paste the address into the decoder, teh value under teh hex collum is your hacked value, and yes this dose work, i have found some errors in the hold template but i will edit them now

lol.. hacked value is the codes hex? and in the decoder it shows its off value..

The only way I can understand is if i ask a question, and plus I'm forgetting my english.

yeah but if it doesn't work, i dont wanna try it

Check all the codes i have made in the MOHH/2 section, i made jokers using this (i didn't copy and paste templates though)

I cant seem to find the controller addresses.

1] Open NitePR/CoderPR and set pause game? to true under teh PRX/Options menu
2] Close NitePR, hold L, wile still holing L open NitePR, search 0x00000100 in hex
3] Close NitePR, hold R, wile still holding R open NitePR, search 0x00000200 in hex
If you dont have two results:
4] Hold L and R and wile still holding them open nitePR and search 0x00000300
You will now have two results, try both them with the button values i posted in my guide. BTW you will need to use the real controller address wile jokering. Good luck!

hmm what game if i have ill find for u...

Quote:

---

Originally Posted by Fox1091

hmm what game if i have ill find for u...

---

-_- its not hard 2 find ur own

grr wtf kid deleted his post he said he couldnt find -.-

lol that happens

lol all i thought was fail

i still cant get the address. is it cuz im using mkultra?

adresses for what.. wait ill help you do u have aim? if so add meh :P... Fox1091

if its the controller address i posted how to find it above

dammit the controller adress for ftb2 : fake adressing ---> 0x0127e1e4
Real Adressing ---> 0x09a8e1e4

looks DMAed lol

nope lol its not dma

Quote:

---

Originally Posted by Jinzo X

Heres a template for one function On/Off: (I didn't ORIGINALY type this but i typed this, without a referance)

---

You contradicted yourself there... How can you not originally type something, then type it later? Makes no sense...

The template is fixed, me and some others were having some problems with it.

Lui t0, $ First half of the real controller address
Lw t0, $(t0) Second half of the real controller address
Lui t1, $ First half of the real code address, use the Negitive Rule
Ori t2, 0, $ Button value to activate
Ori t3, 0, $ Button value to de-activate
Lui t4, $ First half of the hacked value
Ori t5, t4 $ Second half of the hacked value
Lui t6, $ First half of the hex
Ori t6, t6 $ Second half of the hex
Bne t0, t2, $ Branches to the next bne
nop
Sw t6, $(t1) Second half of the real code address- this needs to be t6(t1) cause this would turn it on so save hacked value
Bne t0, t3, $ Branches to the jr ra
nop
Sw t5, $(t1) Second half of the real code address- needs to be t5(t1) to save
original value when off button is pressed
Jr ra

well try harder its simple