Hacking Wii U Hacking & Homebrew Discussion

dibas

Well-Known Member
Newcomer
Joined
Sep 16, 2008
Messages
76
Trophies
1
XP
925
Country
Bahamas, The
Just in case someone is interested in turning off the gamepad's display while playing with it at command, I posted a modified version of Loadiine that allows you to do just that yesterday. I mentioned working on such a tweak a long time ago in this thread, as some might remember.

More info and download link here.

Have fun!
-dibas
 

AboodXD

I hack NSMB games, and other shiz.
Member
Joined
Oct 11, 2014
Messages
2,880
Trophies
1
Location
Not under a rock.
XP
2,922
Country
United Arab Emirates
Just in case someone is interested in turning off the gamepad's display while playing with it at command, I posted a modified version of Loadiine that allows you to do just that yesterday. I mentioned working on such a tweak a long time ago in this thread, as some might remember.

More info and download link here.

Have fun!
-dibas
What's the point?
 

DeslotlCL

GBAtemp's scalie trash
Member
Joined
Oct 28, 2015
Messages
2,847
Trophies
0
XP
2,755
Country
United States
why the need for a hack to turn off the gamepad? you can simply move it to a place where it loses its connection to the wiiu and turn it off manually :/
 

ryuutseku85

Well-Known Member
Member
Joined
Dec 14, 2015
Messages
112
Trophies
0
Age
39
XP
427
Country
France
hi everyone ,it's a nice raining at home today so what do i do ? nothing special ... exept for those who will understand this

i found something interesting in wp<z0 what do you think guys and girls who know of what i am talking about ?


Mii Maker V 50




C Root-CA00000003-CP0000000b






seg000:0000000000000140 push rdx


seg000:0000000000000141 outsd


seg000:0000000000000142 outsd


seg000:0000000000000143 jz short near ptr unk_172 (jump to unk_172)


seg000:0000000000000145 db 43h


seg000:0000000000000145 xor [r8], sil


seg000:0000000000000149 xor [rax], dh


seg000:000000000000014B xor [rax], dh


seg000:000000000000014D xor [rbx], dh


seg000:000000000000014F sub eax, 30305043h


seg000:0000000000000154 xor [rax], dh


seg000:0000000000000156 xor [rax], dh


seg000:0000000000000158 xor [rdx+0], ah




Lt.QY


seg000:0000000000000223 ; ---------------------------------------------------------------------------


seg000:0000000000000223 jz short near ptr unk_254 (jump to unk_254)


seg000:0000000000000226 push rcx


seg000:0000000000000227 pop rcx




$\"Es




seg000:0000000000000D48 ; ---------------------------------------------------------------------------


seg000:0000000000000D48 add al, 24h ; '$'


seg000:0000000000000D4A and al, [rbp+73h]


seg000:0000000000000D4D sbb dh, [rsi+530EE3FEh]


seg000:0000000000000D53 xor eax, 0A9EB3E37h


seg000:0000000000000D58 jo short loc_D2F (jump to loc_2DF)


seg000:0000000000000D5A xor [rbx+2D22CBA2h], edi


seg000:0000000000000D60 xchg eax, esi


seg000:0000000000000D60 ; ---------------------------------------------------------------------------




Root-CA00000003




seg000:0000000000000E24 ; ---------------------------------------------------------------------------


seg000:0000000000000E24 push rdx


seg000:0000000000000E25 outsd


seg000:0000000000000E26 outsd


seg000:0000000000000E27 jz short near ptr unk_E56


seg000:0000000000000E29 db 43h


seg000:0000000000000E29 xor [r8], sil


seg000:0000000000000E2D xor [rax], dh


seg000:0000000000000E2F xor [rax], dh


seg000:0000000000000E31 xor [rbx], dh


seg000:0000000000000E31 ; ---------------------------------------------------------------------------




\v/\rOV




seg000:0000000000000EB1 ; ---------------------------------------------------------------------------


seg000:0000000000000EB1 or ebp, [rdi]


seg000:0000000000000EB3 or eax, 32B6564Fh


seg000:0000000000000EB8 sti


seg000:0000000000000EB9 xchg eax, ebx


seg000:0000000000000EBA sal byte ptr [rbx-6Bh], 1


seg000:0000000000000EBA ; ---------------------------------------------------------------------------




GqS<p




seg000:0000000000000F8D ; ---------------------------------------------------------------------------


seg000:0000000000000F8D jno short near ptr unk_FE3


seg000:0000000000000F90 cmp al, 70h ; 'p'


seg000:0000000000000F90 ; ---------------------------------------------------------------------------




y\x1B4\"7^\\w




seg000:0000000000001056 ; ---------------------------------------------------------------------------


seg000:0000000000001056 jns short loc_1073 (jump to loc_1073)


seg000:0000000000001058


seg000:0000000000001058 loc_1058: ; CODE XREF: seg000:0000000000001080j


seg000:0000000000001058 xor al, 22h


seg000:0000000000001058 ; ---------------------------------------------------------------------------




JwJ7D~x




seg000:00000000000010EA ; ---------------------------------------------------------------------------


seg000:00000000000010EA ja short loc_1137 (jump to loc_1137)


seg000:00000000000010EA ; ---------------------------------------------------------------------------




13K&02c




seg000:000000000000111B ; ---------------------------------------------------------------------------


seg000:000000000000111B xor [rbx], esi


seg000:000000000000111D db 26h


seg000:000000000000111D xor [rdx], dh


seg000:0000000000001121 movzx rbx, ecx


seg000:0000000000001123 shr bl, cl


seg000:0000000000001125 db 4Fh


seg000:0000000000001125 mov r9, 4640AEF652B30296h


seg000:0000000000001125 ; ---------------------------------------------------------------------------






wp<z0






seg000:00000000000012CF ; ---------------------------------------------------------------------------


seg000:00000000000012CF ja short loc_1341 (jump to loc_1341)


seg000:00000000000012D1 cmp al, 7Ah ; 'z'


seg000:00000000000012D3 xor dh, bh


seg000:00000000000012D5 cmp ch, cl


seg000:00000000000012D7 out dx, eax


seg000:00000000000012D8 sbb al, 60h ; '`'


seg000:00000000000012DA


seg000:00000000000012DA loc_12DA: ; CODE XREF: seg000:00000000000012F3j


seg000:00000000000012DA mov esp, 7646971Dh


seg000:00000000000012DF mov dl, 3Ah ; ':'


seg000:00000000000012E1 push 0FFFFFFFF98B104CCh


seg000:00000000000012E6 push rdx


seg000:00000000000012E7 pop rbx


seg000:00000000000012E8 leave


seg000:00000000000012E9 push 0FFFFFFFFDBE21DF1h


seg000:00000000000012EE push rax


seg000:00000000000012EF in al, 0D9h


seg000:00000000000012F1 out 0F0h, eax ; AT 80287 latch clear.


seg000:00000000000012F1 ; 'Busy' gets latched upon an unmasked 287 error.


seg000:00000000000012F3 jno short loc_12DA (jump to loc_12DA)


seg000:00000000000012F3 ; ---------------------------------------------------------------------------




Tca(p




seg000:0000000000001326 ; ---------------------------------------------------------------------------


seg000:0000000000001326 push rsp


seg000:0000000000001327 movzx rsp, dword ptr [rcx+28h]


seg000:000000000000132A jo short loc_134C (jump to loc_134C)


seg000:000000000000132C jmp near ptr 48AB20FDh
 

dibas

Well-Known Member
Newcomer
Joined
Sep 16, 2008
Messages
76
Trophies
1
XP
925
Country
Bahamas, The
Found this


Yeah, that's a demo video of padcon from @memomo, he posted it here.

why the need for a hack to turn off the gamepad? you can simply move it to a place where it loses its connection to the wiiu and turn it off manually :/

As already mentioned, this allows you to keep playing with the gamepad while its display is off. I also mentioned this in my initial post here. :)
 

pwsincd

Garage Flower
Developer
Joined
Dec 4, 2011
Messages
3,686
Trophies
2
Location
Manchester UK
XP
4,484
The idea here is to try and get more people involved in understanding how to use what Hykem is working on, and give you an idea of what can be done with it.

For example:

Raw ARM/thumb code, unprocessed:
(Pretty much useless to all)
Code:
LOAD:101001CC                 DCD 0xE3A01000, 0xE3A02003, 0xE59F0E68, 0xEB00B320, 0xE59F2F2C
LOAD:101001CC                 DCD 0xE3A01603, 0xE5820000, 0xE59F0E58, 0xEB00BA7A, 0xE3500000
LOAD:101001CC                 DCD 0xBA000020, 0xE3A00802, 0xEB00BA78, 0xE3500000, 0xBA00001C
LOAD:101001CC                 DCD 0xEB00B9AB, 0xE59F0E38, 0xE3A01010, 0xEB00BA40, 0xE59F3E30
LOAD:101001CC                 DCD 0xE3500000, 0xE5830000, 0xBA000012, 0xE1A01000, 0xE59F0E20
LOAD:101001CC                 DCD 0xEB00B0F8, 0xE3500000, 0xBA000002, 0xE59F0E10, 0xE3A01FFA
LOAD:101001CC                 DCD 0xEB00BA76, 0xE59F5E00, 0xE59F0E04, 0xE5951000, 0xEB00B0EF
LOAD:101001CC                 DCD 0xE3500000, 0xBA000004, 0xE59F0DF0, 0xE3A01FFA, 0xEB00BA6D
LOAD:101001CC                 DCD 0xE3500000, 0xA0000BD
LOAD:10100274 dword_10100274  DCD 0xEB00BA16, 0xEB00BA1F, 0xE28DDE17, 0xE8BD8FF0              ; CODE XREF: LOAD:10100584j
LOAD:10100284 dword_10100284  DCD 0xE352000D, 0xA000124, 0xE3520C01, 0x1A0000CC, 0xE59F0DC0   ; CODE XREF: LOAD:101005B4j
LOAD:10100284                 DCD 0xE5903000, 0xE3530000, 0xBA0000B1, 0xE59F0E4C, 0xE3A01CC6
LOAD:10100284                 DCD 0xE3A02040, 0xEB00BA51, 0xE2509000, 0x1A06009, 0x3E05015
LOAD:10100284                 DCD 0xA00009B, 0xE59F0E2C, 0xE3A01CC6, 0xE3A02040, 0xEB00BA49

Untouched as IDA Pro will decode it.
It's better than raw, but still pretty much useless as you don't know what it's doing without Segment Names, Cleartext CallNames and Labels.
Code:
LOAD:101001CC ; ---------------------------------------------------------------------------
LOAD:101001CC                 MOV     R1, #0
LOAD:101001D0                 MOV     R2, #3
LOAD:101001D4                 LDR     R0, =unk_101400AC
LOAD:101001D8                 BL      sub_1012CE60
LOAD:101001DC ; ---------------------------------------------------------------------------
LOAD:101001DC                 LDR     R2, =unk_10145000
LOAD:101001E0                 MOV     R1, #0x300000
LOAD:101001E4                 STR     R0, [R2]
LOAD:101001E8                 LDR     R0, =unk_10146060
LOAD:101001EC                 BL      sub_1012EBDC
LOAD:101001F0 ; ---------------------------------------------------------------------------
LOAD:101001F0                 CMP     R0, #0
LOAD:101001F4                 BLT     loc_1010027C
LOAD:101001F8                 MOV     R0, #0x20000
LOAD:101001FC                 BL      sub_1012EBE4
LOAD:10100200 ; ---------------------------------------------------------------------------
LOAD:10100200                 CMP     R0, #0
LOAD:10100204                 BLT     loc_1010027C
LOAD:10100208                 BL      sub_1012E8BC
LOAD:1010020C                 LDR     R0, =unk_10146010
LOAD:10100210                 MOV     R1, #0x10
LOAD:10100214                 BL      sub_1012EB1C
LOAD:10100218 ; ---------------------------------------------------------------------------
LOAD:10100218                 LDR     R3, =unk_10146050
LOAD:1010021C                 CMP     R0, #0
LOAD:10100220                 STR     R0, [R3]
LOAD:10100224                 BLT     loc_10100274
LOAD:10100228                 MOV     R1, R0
LOAD:1010022C                 LDR     R0, =unk_101400B0
LOAD:10100230                 BL      sub_1012C618
LOAD:10100234 ; ---------------------------------------------------------------------------
LOAD:10100234                 CMP     R0, #0
LOAD:10100238                 BLT     loc_10100248
LOAD:1010023C                 LDR     R0, =unk_101400B0
LOAD:10100240                 MOV     R1, #0x3E8
LOAD:10100244                 BL      sub_1012EC24
LOAD:10100248 ; ---------------------------------------------------------------------------
LOAD:10100248
LOAD:10100248 loc_10100248                                                                    ; CODE XREF: LOAD:10100238j
LOAD:10100248                 LDR     R5, =unk_10146050
LOAD:1010024C                 LDR     R0, =unk_101400C0
LOAD:10100250                 LDR     R1, [R5]
LOAD:10100254                 BL      sub_1012C618
LOAD:10100258 ; ---------------------------------------------------------------------------
LOAD:10100258                 CMP     R0, #0
LOAD:1010025C                 BLT     loc_10100274
LOAD:10100260                 LDR     R0, =unk_101400C0
LOAD:10100264                 MOV     R1, #0x3E8
LOAD:10100268                 BL      sub_1012EC24
LOAD:1010026C ; ---------------------------------------------------------------------------
LOAD:1010026C                 CMP     R0, #0
LOAD:10100270                 BEQ     loc_1010056C
LOAD:10100274
LOAD:10100274 loc_10100274                                                                    ; CODE XREF: LOAD:10100224j
LOAD:10100274                                                                                 ; LOAD:1010025Cj ...
LOAD:10100274                 BL      sub_1012EAD4
LOAD:10100278 ; ---------------------------------------------------------------------------
LOAD:10100278                 BL      sub_1012EAFC
LOAD:1010027C ; ---------------------------------------------------------------------------
LOAD:1010027C
LOAD:1010027C loc_1010027C                                                                    ; CODE XREF: LOAD:101001F4j
LOAD:1010027C                                                                                 ; LOAD:10100204j
LOAD:1010027C                 ADD     SP, SP, #0x170
LOAD:10100280                 LDMFD   SP!, {R4-R11,PC}
LOAD:10100284 ; ---------------------------------------------------------------------------
LOAD:10100284
LOAD:10100284 loc_10100284                                                                    ; CODE XREF: LOAD:101005B4j
LOAD:10100284                 CMP     R2, #0xD
LOAD:10100288                 BEQ     loc_10100720
LOAD:1010028C                 CMP     R2, #0x100
LOAD:10100290                 BNE     loc_101005C8
LOAD:10100294                 LDR     R0, =unk_10145020
LOAD:10100298                 LDR     R3, [R0]
LOAD:1010029C                 CMP     R3, #0
LOAD:101002A0                 BLT     loc_1010056C
LOAD:101002A4                 LDR     R0, =0xCAFE
LOAD:101002A8                 MOV     R1, #0xC600
LOAD:101002AC                 MOV     R2, #0x40
LOAD:101002B0                 BL      sub_1012EBFC
LOAD:101002B4 ; ---------------------------------------------------------------------------
LOAD:101002B4                 SUBS    R9, R0, #0
LOAD:101002B8                 MOVEQ   R6, R9
LOAD:101002BC                 MOVEQ   R5, 0xFFFFFFEA
LOAD:101002C0                 BEQ     loc_10100534
LOAD:101002C4                 LDR     R0, =0xCAFE
LOAD:101002C8                 MOV     R1, #0xC600
LOAD:101002CC                 MOV     R2, #0x40
LOAD:101002D0                 BL      sub_1012EBFC
LOAD:101002D4 ; ---------------------------------------------------------------------------


Here is the same data adding in the Segment Names, Comments, CallNames and Stringing the Cleartext.
Now it can be read and understood what this section of code does.
(This is "Stage-One" labeling as I have not yet gone back and added in what the internal branches and compares do yet.)

Code:
IOS_USB:101001CC                 MOV             R1, #0
IOS_USB:101001D0                 MOV             R2, #3
IOS_USB:101001D4                 LDR             R0, =aUsb                                       ; "USB"
IOS_USB:101001D8                 BL              sub_1012CE60
IOS_USB:101001DC ; ---------------------------------------------------------------------------
IOS_USB:101001DC                 LDR             R2, =dword_10145000
IOS_USB:101001E0                 MOV             R1, #0x300000
IOS_USB:101001E4                 STR             R0, [R2]
IOS_USB:101001E8                 LDR             R0, =dword_10146060
IOS_USB:101001EC                 BL              SysCall_0x24_IOS_USB                            ; int IOS_CreateLocalProcessHeap(void *ptr, int size)
IOS_USB:101001EC                                                                                 ; Create a new local process heap of size bytes
IOS_USB:101001EC                                                                                 ; Returns -> The heap ID or error (negative value)
IOS_USB:101001F0 ; ---------------------------------------------------------------------------
IOS_USB:101001F0                 CMP             R0, #0
IOS_USB:101001F4                 BLT             loc_1010027C
IOS_USB:101001F8                 MOV             R0, #0x20000
IOS_USB:101001FC                 BL              SysCall_0x25_IOS_USB                            ; int IOS_CreateCrossProcessHeap(int size)
IOS_USB:101001FC                                                                                 ; Create a new cross process heap of size bytes
IOS_USB:101001FC                                                                                 ; Returns -> The heap ID or error (negative value)
IOS_USB:10100200 ; ---------------------------------------------------------------------------
IOS_USB:10100200                 CMP             R0, #0
IOS_USB:10100204                 BLT             loc_1010027C
IOS_USB:10100208                 BL              sub_1012E8BC
IOS_USB:1010020C                 LDR             R0, =dword_10146010
IOS_USB:10100210                 MOV             R1, #0x10
IOS_USB:10100214                 BL              SysCall_0x0C_IOS_USB                            ; int IOS_CreateMessageQueue(u32 *ptr, u32 n_msgs)
IOS_USB:10100214                                                                                 ; Create a queue at ptr, for n_msgs messages
IOS_USB:10100214                                                                                 ; Returns -> The queue ID
IOS_USB:10100218 ; ---------------------------------------------------------------------------
IOS_USB:10100218                 LDR             R3, =dword_10146050
IOS_USB:1010021C                 CMP             R0, #0
IOS_USB:10100220                 STR             R0, [R3]
IOS_USB:10100224                 BLT             loc_10100274
IOS_USB:10100228                 MOV             R1, R0
IOS_USB:1010022C                 LDR             R0, =aDevUsbproc1                               ; "/dev/usbproc1"
IOS_USB:10100230                 BL              sub_1012C618
IOS_USB:10100234 ; ---------------------------------------------------------------------------
IOS_USB:10100234                 CMP             R0, #0
IOS_USB:10100238                 BLT             loc_10100248
IOS_USB:1010023C                 LDR             R0, =aDevUsbproc1                               ; "/dev/usbproc1"
IOS_USB:10100240                 MOV             R1, #0x3E8
IOS_USB:10100244                 BL              SysCall_0x2D_IOS_USB                            ; int device_associate(const char* device, int internal_id)
IOS_USB:10100244                                                                                 ; Associates a device to the specified internal IOS ID.
IOS_USB:10100244                                                                                 ; This ID appears to correspond to the cos.xml permissions groupid?
                                                                                                 ; This syscall isn't used with devices that don't require any permissions(and are PowerPC-accessible) it seems.
                                                                                                 ; It appears when this ID isn't listed in the cos.xml groupids at all, the device is ARM-only.
IOS_USB:10100244                                                                                 ; Returns -> 0 on success
IOS_USB:10100248 ; ---------------------------------------------------------------------------
IOS_USB:10100248
IOS_USB:10100248 loc_10100248                                                                    ; CODE XREF: IOS_USB:10100238j
IOS_USB:10100248                 LDR             R5, =dword_10146050
IOS_USB:1010024C                 LDR             R0, =aDevUsbproc2                               ; "/dev/usbproc2"
IOS_USB:10100250                 LDR             R1, [R5]
IOS_USB:10100254                 BL              sub_1012C618
IOS_USB:10100258 ; ---------------------------------------------------------------------------
IOS_USB:10100258                 CMP             R0, #0
IOS_USB:1010025C                 BLT             loc_10100274
IOS_USB:10100260                 LDR             R0, =aDevUsbproc2                               ; "/dev/usbproc2"
IOS_USB:10100264                 MOV             R1, #0x3E8
IOS_USB:10100268                 BL              SysCall_0x2D_IOS_USB                            ; int device_associate(const char* device, int internal_id)
IOS_USB:10100268                                                                                 ; Associates a device to the specified internal IOS ID.
IOS_USB:10100268                                                                                 ; This ID appears to correspond to the cos.xml permissions groupid? This syscall isn't used with devices that don't require any permissions(and are PowerPC-accessible) it seems. It appears when this ID isn't listed in the cos.xml groupids at all, the device is ARM-only.
IOS_USB:10100268                                                                                 ; Returns -> 0 on success
IOS_USB:1010026C ; ---------------------------------------------------------------------------
IOS_USB:1010026C                 CMP             R0, #0
IOS_USB:10100270                 BEQ             loc_1010056C
IOS_USB:10100274
IOS_USB:10100274 loc_10100274                                                                    ; CODE XREF: IOS_USB:10100224j
IOS_USB:10100274                                                                                 ; IOS_USB:1010025Cj ...
IOS_USB:10100274                 BL              SysCall_0x03_IOS_USB                            ; int get_tid()
IOS_USB:10100274                                                                                 ; Get the current thread's ID
IOS_USB:10100274                                                                                 ; Returns -> Current threadid
IOS_USB:10100278 ; ---------------------------------------------------------------------------
IOS_USB:10100278                 BL              SysCall_0x08_IOS_USB                            ; int thread_suspend(int threadid)
IOS_USB:10100278                                                                                 ; Suspend the specified thread
IOS_USB:10100278                                                                                 ; Returns -> 0 on success
IOS_USB:1010027C ; ---------------------------------------------------------------------------
IOS_USB:1010027C
IOS_USB:1010027C loc_1010027C                                                                    ; CODE XREF: IOS_USB:101001F4j
IOS_USB:1010027C                                                                                 ; IOS_USB:10100204j
IOS_USB:1010027C                 ADD             SP, SP, #0x170
IOS_USB:10100280                 LDMFD           SP!, {R4-R11,PC}
IOS_USB:10100284 ; ---------------------------------------------------------------------------
IOS_USB:10100284
IOS_USB:10100284 loc_10100284                                                                    ; CODE XREF: IOS_USB:101005B4j
IOS_USB:10100284                 CMP             R2, #0xD
IOS_USB:10100288                 BEQ             loc_10100720
IOS_USB:1010028C                 CMP             R2, #0x100
IOS_USB:10100290                 BNE             loc_101005C8
IOS_USB:10100294                 LDR             R0, =dword_10145020
IOS_USB:10100298                 LDR             R3, [R0]
IOS_USB:1010029C                 CMP             R3, #0
IOS_USB:101002A0                 BLT             loc_1010056C
IOS_USB:101002A4                 LDR             R0, =0xCAFE
IOS_USB:101002A8                 MOV             R1, #0xC600
IOS_USB:101002AC                 MOV             R2, #0x40
IOS_USB:101002B0                 BL              SysCall_0x28_IOS_USB                            ; void* heap_alloc_aligned(int heapid, u32 size, u32 align)
IOS_USB:101002B0                                                                                 ; Allocate size bytes from the specified heap with the requested alignment
IOS_USB:101002B0                                                                                 ; Returns -> Pointer to aligned memory
IOS_USB:101002B4 ; ---------------------------------------------------------------------------
IOS_USB:101002B4                 SUBS            R9, R0, #0
IOS_USB:101002B8                 MOVEQ           R6, R9
IOS_USB:101002BC                 MOVEQ           R5, #0xFFFFFFEA
IOS_USB:101002C0                 BEQ             loc_10100534
IOS_USB:101002C4                 LDR             R0, =0xCAFE
IOS_USB:101002C8                 MOV             R1, #0xC600
IOS_USB:101002CC                 MOV             R2, #0x40
IOS_USB:101002D0                 BL              SysCall_0x28_IOS_USB                            ; void* heap_alloc_aligned(int heapid, u32 size, u32 align)
IOS_USB:101002D0                                                                                 ; Allocate size bytes from the specified heap with the requested alignment
IOS_USB:101002D0                                                                                 ; Returns -> Pointer to aligned memory
IOS_USB:101002D4 ; ---------------------------------------------------------------------------


The big problem I see is there's no "Safe Haven" for people to discuss this type of thing.
If we try to do it here, the threads keep getting clogged with offtopic posts.

All that accomplishes is delays as everyone has to work in a vacuum to keep their sanity...

-dl
i can provide one should you wish :)
 

send0r

Well-Known Member
Member
Joined
Apr 21, 2015
Messages
261
Trophies
0
Website
www.send0r.de
XP
613
Country
Germany
Yeah, that's a demo video of padcon from @memomo, he posted it here.



As already mentioned, this allows you to keep playing with the gamepad while its display is off. I also mentioned this in my initial post here. :)
Is it possibke to get padcon as a standalone homebrew (elf or mp4) for disc games or is Loadiine the only option?
 

Don Jon

Well-Known Member
Member
Joined
Nov 20, 2015
Messages
1,057
Trophies
0
Age
38
XP
1,496
Country
United States
hi everyone ,it's a nice raining at home today so what do i do ? nothing special ... exept for those who will understand this

i found something interesting in wp<z0 what do you think guys and girls who know of what i am talking about ?


Mii Maker V 50




C Root-CA00000003-CP0000000b






seg000:0000000000000140 push rdx


seg000:0000000000000141 outsd


seg000:0000000000000142 outsd


seg000:0000000000000143 jz short near ptr unk_172 (jump to unk_172)


seg000:0000000000000145 db 43h


seg000:0000000000000145 xor [r8], sil


seg000:0000000000000149 xor [rax], dh


seg000:000000000000014B xor [rax], dh


seg000:000000000000014D xor [rbx], dh


seg000:000000000000014F sub eax, 30305043h


seg000:0000000000000154 xor [rax], dh


seg000:0000000000000156 xor [rax], dh


seg000:0000000000000158 xor [rdx+0], ah




Lt.QY


seg000:0000000000000223 ; ---------------------------------------------------------------------------


seg000:0000000000000223 jz short near ptr unk_254 (jump to unk_254)


seg000:0000000000000226 push rcx


seg000:0000000000000227 pop rcx




$\"Es




seg000:0000000000000D48 ; ---------------------------------------------------------------------------


seg000:0000000000000D48 add al, 24h ; '$'


seg000:0000000000000D4A and al, [rbp+73h]


seg000:0000000000000D4D sbb dh, [rsi+530EE3FEh]


seg000:0000000000000D53 xor eax, 0A9EB3E37h


seg000:0000000000000D58 jo short loc_D2F (jump to loc_2DF)


seg000:0000000000000D5A xor [rbx+2D22CBA2h], edi


seg000:0000000000000D60 xchg eax, esi


seg000:0000000000000D60 ; ---------------------------------------------------------------------------




Root-CA00000003




seg000:0000000000000E24 ; ---------------------------------------------------------------------------


seg000:0000000000000E24 push rdx


seg000:0000000000000E25 outsd


seg000:0000000000000E26 outsd


seg000:0000000000000E27 jz short near ptr unk_E56


seg000:0000000000000E29 db 43h


seg000:0000000000000E29 xor [r8], sil


seg000:0000000000000E2D xor [rax], dh


seg000:0000000000000E2F xor [rax], dh


seg000:0000000000000E31 xor [rbx], dh


seg000:0000000000000E31 ; ---------------------------------------------------------------------------




\v/\rOV




seg000:0000000000000EB1 ; ---------------------------------------------------------------------------


seg000:0000000000000EB1 or ebp, [rdi]


seg000:0000000000000EB3 or eax, 32B6564Fh


seg000:0000000000000EB8 sti


seg000:0000000000000EB9 xchg eax, ebx


seg000:0000000000000EBA sal byte ptr [rbx-6Bh], 1


seg000:0000000000000EBA ; ---------------------------------------------------------------------------




GqS<p




seg000:0000000000000F8D ; ---------------------------------------------------------------------------


seg000:0000000000000F8D jno short near ptr unk_FE3


seg000:0000000000000F90 cmp al, 70h ; 'p'


seg000:0000000000000F90 ; ---------------------------------------------------------------------------




y\x1B4\"7^\\w




seg000:0000000000001056 ; ---------------------------------------------------------------------------


seg000:0000000000001056 jns short loc_1073 (jump to loc_1073)


seg000:0000000000001058


seg000:0000000000001058 loc_1058: ; CODE XREF: seg000:0000000000001080j


seg000:0000000000001058 xor al, 22h


seg000:0000000000001058 ; ---------------------------------------------------------------------------




JwJ7D~x




seg000:00000000000010EA ; ---------------------------------------------------------------------------


seg000:00000000000010EA ja short loc_1137 (jump to loc_1137)


seg000:00000000000010EA ; ---------------------------------------------------------------------------




13K&02c




seg000:000000000000111B ; ---------------------------------------------------------------------------


seg000:000000000000111B xor [rbx], esi


seg000:000000000000111D db 26h


seg000:000000000000111D xor [rdx], dh


seg000:0000000000001121 movzx rbx, ecx


seg000:0000000000001123 shr bl, cl


seg000:0000000000001125 db 4Fh


seg000:0000000000001125 mov r9, 4640AEF652B30296h


seg000:0000000000001125 ; ---------------------------------------------------------------------------






wp<z0






seg000:00000000000012CF ; ---------------------------------------------------------------------------


seg000:00000000000012CF ja short loc_1341 (jump to loc_1341)


seg000:00000000000012D1 cmp al, 7Ah ; 'z'


seg000:00000000000012D3 xor dh, bh


seg000:00000000000012D5 cmp ch, cl


seg000:00000000000012D7 out dx, eax


seg000:00000000000012D8 sbb al, 60h ; '`'


seg000:00000000000012DA


seg000:00000000000012DA loc_12DA: ; CODE XREF: seg000:00000000000012F3j


seg000:00000000000012DA mov esp, 7646971Dh


seg000:00000000000012DF mov dl, 3Ah ; ':'


seg000:00000000000012E1 push 0FFFFFFFF98B104CCh


seg000:00000000000012E6 push rdx


seg000:00000000000012E7 pop rbx


seg000:00000000000012E8 leave


seg000:00000000000012E9 push 0FFFFFFFFDBE21DF1h


seg000:00000000000012EE push rax


seg000:00000000000012EF in al, 0D9h


seg000:00000000000012F1 out 0F0h, eax ; AT 80287 latch clear.


seg000:00000000000012F1 ; 'Busy' gets latched upon an unmasked 287 error.


seg000:00000000000012F3 jno short loc_12DA (jump to loc_12DA)


seg000:00000000000012F3 ; ---------------------------------------------------------------------------




Tca(p




seg000:0000000000001326 ; ---------------------------------------------------------------------------


seg000:0000000000001326 push rsp


seg000:0000000000001327 movzx rsp, dword ptr [rcx+28h]


seg000:000000000000132A jo short loc_134C (jump to loc_134C)


seg000:000000000000132C jmp near ptr 48AB20FDh
5.5 Kernel now working because of this. Thanks man ur da greatest.
 
Last edited by Don Jon,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Xdqwerty @ Xdqwerty: I said yeet :angry: +1