yep, it's a hack job but it works so far i'll just c&p it...the a8 line works ok, loading from gct rather than sending the code
Hookable sm98
A8000000 00000100
044CDECC 4800005C
can't say i've tested more than just having the game at the menu
this is the pal version
.text:804CDEB0 7C 16 E8 40 cmplw %r22, %r29
.text:804CDEB4 40 82 FF EC bne loc_804CDEA0
.text:804CDEB8 57 F6 B2 BE srwi %r22, %r31, 10
.text:804CDEBC...
yeah you're right there, it's just a return/blr and yep to the previous functions return/blr is just above it too, nothing sinister there.
so what's the odds that there's a thread running just to check/enforce the copy protection? hmm i wonder