Hacking XCXGecko: Xenoblade Chronicles X trainer GUI using pyGecko

onepiecefreak · May 25, 2016

How Loadiine now boots and play games, it will never support Internet. For that to be possible it has to run as an extra app and with permission of IOSU to be a "legitimate" program. After that it can go to the internet as the game itself and not as the yet injected entry point like mii maker.

You can cloth your male character with female clothes. You just have to find the address for the cloth the character wears and chamge the clothID to the piece you want. To bad, as I know, there is no clothID list now. So you have to figure that part out yourself. And maybe the address too. But thats easier. Just go to the address where your characters name stands in the RAM. Anywhere after there should be all character-relevant values (e.g. the body values)

Vegeta · May 25, 2016

DiscostewSM said:
This has been asked once already (but I didn't see a response to it), but will this allow the changing of your character's division? I'm playing XCX via Loadiine on 5.5.1U, decently far in the game, and I realized that I could change my division, but checking it out, it requires an internet connection (which Loadiine doesn't support yet, if ever).

I'd be interested in that too.

Nevermore · May 25, 2016

Yoooooooooooooo.

So yeah, you can the hairstyles by poking too. Thanks for bringing that up @Lisandra_brave

Now I can give the Girl A model the ponytail hairstyle (0x00F2 on offset 0x1C38E60E) from Young Girl A.

The new hairstyle

What Girl A only allows for styles

You can try to use a male hairstyle, but it most likely will look off.

Also, the two bytes after the hair offset is the "special" add-on hair toggle, the cowlick etc. And instead of being a binary On/Off, there's actually a unique value that's a "pair" with the hair. It's simply the Hair Value +0x01.

For example, this is the default "special" hair for this one.
Hair is 0x00DC, addition is 0x00DD.

And this is with a different hair add-on 0x00DF

Going into the machine reverts it to the add-on it should be. So that's why I took the pic in the menu.

I'm in the process of getting all the unique bytes for hair.

Lisandra_brave · May 26, 2016

It works exactly the same for all your party members. You can put anyone's hair on anyone else.
Portrait is based on what hair you have.

Nevermore · May 26, 2016

Awesome, this'll be fun. Yeah just gave the avatar Elma's hair. This'll be fun, haha.

Lisandra_brave · May 26, 2016

EarlAB said:
Is it possible to unrestrict female-only clothing so that guys can use it?
It'd be hilarious to see my Shrek-like character in that playboy outfit.

No, it's not. That's actually how me looking into how character data works started.

Nevermore · May 26, 2016

Heyo, so I documented what all the bytes are for all the female characters, but I have a question on how to write the codes.

https://docs.google.com/spreadsheets/d/1YQCf1UFIxMu9Ik6tRDEUr1vtGmxhoyXDAqYsQ4kvg_U/edit?usp=sharing

So the two bytes for hair/portrait for the Avatar start at 0x1C83E60E (0x1C83E60C is two bytes for the face). How would I write the code so it only overwrites those two bytes?

For example, if I do 1C38E60E 0156, it'll poke 01560000, those four 0s will go to the next two bytes. And if I do 1C388E60C 0156, it'll poke 00000156, overwriting the first two bytes for the face.

I basically made this to do quick poking, I'm gonna take screenshots of all the avatar icon faces so people can see which one goes where.

Code:

Young Girl A - 1
1C38E60E 00F2

Young Girl A - 2
1C38E60E 00E8

Young Girl A - 3
1C38E60E 00EA

Young Girl A - 4
1C38E60E 00EC

Young Girl A - 5
1C38E60E 00EE

Young Girl A - 6
1C38E60E 00F4

Young Girl A - 7
1C38E60E 00F0

Young Girl A - 8
1C38E60E 00F6

Young Girl B - 1
1C38E60E 00DE

Young Girl B - 2
1C38E60E 00D4

Young Girl B - 3
1C38E60E 00D6

Young Girl B - 4
1C38E60E 00D8

Young Girl B - 5
1C38E60E 00DA

Young Girl B - 6
1C38E60E 00DC

Young Girl B - 7
1C38E60E 00E0

Young Girl B - 8
1C38E60E 00E2

Young Girl C - 1
1C38E60E 0104

Young Girl C - 2
1C38E60E 00FC

Young Girl C - 3
1C38E60E 00FE

Young Girl C - 4
1C38E60E 0100

Young Girl C - 5
1C38E60E 0102

Young Girl C - 6
1C38E60E 0106

Young Girl C - 7
1C38E60E 0108

Young Girl C - 8
1C38E60E 010A

Girl A - 1
1C38E60E 0134

Girl A - 2
1C38E60E 0124

Girl A - 3
1C38E60E 0126

Girl A - 4
1C38E60E 0128

Girl A - 5
1C38E60E 012A

Girl A - 6
1C38E60E 012C

Girl A - 7
1C38E60E 0132

Girl A - 8
1C38E60E 0130

Girl A - 9
1C38E60E 012E

Girl B - 1
1C38E60E 011C

Girl B - 2
1C38E60E 0110

Girl B - 3
1C38E60E 0112

Girl B - 4
1C38E60E 0114

Girl B - 5
1C38E60E 0116

Girl B - 6
1C38E60E 0118

Girl B - 7
1C38E60E 011A

Girl B - 8
1C38E60E 011E

Girl B - 9
1C38E60E 0120

Woman A  - 1
1C38E60E 0140

Woman A  - 2
1C38E60E 0138

Woman A  - 3
1C38E60E 013A

Woman A  - 4
1C38E60E 013C

Woman A  - 5
1C38E60E 013E

Woman A  - 6
1C38E60E 0142

Woman A  - 7
1C38E60E 0144

Woman A  - 8
1C38E60E 0146

Woman B - 1
1C38E60E 0158

Woman B - 2
1C38E60E 014C

Woman B - 3
1C38E60E 014E

Woman B - 4
1C38E60E 0150

Woman B - 5
1C38E60E 0152

Woman B - 6
1C38E60E 0156

Woman B - 7
1C38E60E 0154

Woman B - 8
1C38E60E 015A

Lisandra_brave · May 26, 2016

00130038 mia face/hair
000E002E celica face/hair
000D002C Lin face/hair
000C002A True form Elma face/hair
000B0028 Elma face/hair
00020016 L face/hair
00090000 Boze face/hair
00030018 Lao face/hair
00070020 Doug face/hair
0005001C Gwin face/hair
000F0030 Irina face/hair
0004001A H.B. face/hair
00010014 Nagi face/hair
00120036 Hope face/hair
00110034 Alexa face/hair
00080022 Yelv face/hair
000A0026 Phog face/hair
00100032 Murderess face/hair
0006001E Frye face/hair

trigao · May 26, 2016

i cant get to connect with loadiine and wiiu 5.5.1

onepiecefreak · May 26, 2016

@trigao The best option for you now is to give us more information about how you enter loadiine and if you enabled pygecko in loadiine.

trigao · May 26, 2016

onepiecefreak said:
@trigao The best option for you now is to give us more information about how you enter loadiine and if you enabled pygecko in loadiine.

Sorry My bad

O put the latest build of loadiine on my sd
Configured the loaddine.cgf as said in loadiine op

I think here the things become wrong

Browser into loadiine.ovh and choose tcpgecko + kernel....make all steps and back to wiimenu normally
Then i browser again and choose loadiine gx2 0.3

Opens fines, game runs fine, everything is Fine but doesnt connect

And yes...both pc and console are in the same wifi

onepiecefreak · May 26, 2016

You choose the wrong payload. TCPGecko+Kernel is used to use TCPGecko in retail games or eshop games. What you need to do is to load the kernel+loadiine (whatever options are given that realize this combination) and then you have to activate pygecko in loadiine itself (yes, pygecko and TCPGecko are the "same"). After that you can load a game and can connect.

trigao · May 26, 2016

onepiecefreak said:
You choose the wrong payload. TCPGecko+Kernel is used to use TCPGecko in retail games or eshop games. What you need to do is to load the kernel+loadiine (whatever options are given that realize this combination) and then you have to activate pygecko in loadiine itself (yes, pygecko and TCPGecko are the "same"). After that you can load a game and can connect.

my options are
i think this kexploit 10 is the right?

onepiecefreak · May 26, 2016

Yes, at first you choose Kexploit10. After that go back to the browser, to this menu and choose Loadiine GX2 0.3 if you have it.

trigao · May 26, 2016

onepiecefreak said:
Yes, at first you choose Kexploit10. After that go back to the browser, to this menu and choose Loadiine GX2 0.3 if you have it.

FINALLY WORKS....I DONT HAVE ENOUGH WORDS TO THANK YOU

onepiecefreak · May 26, 2016

No problem.

haidokamui · May 27, 2016

Hello!
I have the game on disc (european version) and firmware 5.5.1. I used the tuto which explains to launch the command "java -jar HaxServer.jar" in the console and then connect with the wii u browser to kexploit31 and tcpgecko. Which works great (in the little window, I have exploits 4, Data 0 and Errors 0). After launching the game, I loaded XCXGecko (in the x32 folder that I downloaded on the official website of the little software). Then I launched JGecko U.jar and clicked on "connect". Unfortunatly, I have a message showing a lot of errors. Here the picture I took if that could help. Does someone know what I'm doing wrong, please?
Thanks a lot in advance.

Nevermore · May 27, 2016

So I kept track of all the bytes for Female Hairstyles

https://docs.google.com/spreadsheets/d/1YQCf1UFIxMu9Ik6tRDEUr1vtGmxhoyXDAqYsQ4kvg_U/edit?usp=sharing

Took pictures of all the hairstyle icons and labeled them

Then reorganized the icons pairing up the same hairstyles with each other.

Not all hairstyles work cleanly with each other. For example, using a grown woman's hairstyle may look bad on a young girl. Probably because the young girl's head is rounder, while the woman's hairstyles are narrowor.

Girl A is best face tho.

Scarecrow B · May 27, 2016

Hello. I don't know if anyone else has had this "issue" but here is what happened...

I started a new game and used XCXGecko to modify all the starters (Protagonist, Lin, Elma) to Max lv and get max money, max affinity,etc (everything maxed from the first tab of the program). The thing is that I accidentally "deleted" Lin's name and she appeared as a blank box in the party menu, I obviously corrected it and renamed her Lin again, everything seemed ok until I finished chapter 3 and the party got disbanded, I was able to find Elma in the barracks but Lin just disappeared, I have searched at different times of the day (I read in other forums that she only appears during daytime) at the barracks and I have even searched in her hearth to hearth location and nothing, sooo... now I can't start chapter 4 because every time I try it says I'm missing party members. Has anyone experienced anything similar? is there a way to manually add a npc to the party without interacting with it?

Edit. It was the affinity, after resetting Lin's affinity to 0 she appeared again.

onepiecefreak · May 27, 2016

@haidokamui You don't need JGeckoU. XCXGecko connects to the console and all the things. BTW you can't run both programs simultanously. If one TCPGecko program is connected to the WiiU no other similar software can connect to it. So close the connection of XCXGecko (or the software itself) and AFTER that you should be able to use JGeckoU. If not, you can try to disable the Autodetect IP option in JGeckoU and manually enter your WiiU's IP (obviously don't have any TCPGecko-like programs running, like I said before).

@newdoria88 That a NPC can simply vanish just it has some (or false) affinity is interesting. Maybe a game issue? That it's through the tool which only raises the value and nothing else, I can't believe that... but I thought affinity is only available after you finished the main story?

Hacking XCXGecko: Xenoblade Chronicles X trainer GUI using pyGecko

Kuriimu 2 Developer

Well-Known Member

Well-Known Member

Well-Known Member

Attachments

Well-Known Member

Well-Known Member

Well-Known Member

Well-Known Member

Ninten

Kuriimu 2 Developer

Ninten

Kuriimu 2 Developer

Ninten

Kuriimu 2 Developer

Ninten

Kuriimu 2 Developer

New Member

Attachments

Well-Known Member

ScrapTown

Kuriimu 2 Developer

Similar threads

Popular threads in this forum