Hacking Post your WiiU cheat codes here!

blueoval24

Active Member
Newcomer
Joined
Apr 6, 2017
Messages
40
Trophies
0
Age
41
XP
503
Country
United States
Update: I can't believe it! It actually worked! I've never been this excited since I first learned to hack Brawl (even though I was actually quite useless here). I'm going to experiment with this for a bit and try to understand it better. Toadstool said there were glitches, and I can see them here, but I'm still glad nonetheless.

Thank you all so much!

- Sm4shModder

Not going to lie but its super exciting when you finally find a working combo, so congrats! There a select few who are very very helpful on this board and am grateful that they lend their assistance.
That being said, if you want to take a break from smash, Im currently trying to work on freezing the mystery house timers in Super Mario 3d world NTSC. :)

A few other members have successfully gotten this to work with activators, however the codes didnt work for me (although some codes form the same person worked flawlessly) From what I gathered the timer is referencing another timer that is actually counting up (not down like in the game) so its giving me a little trouble.

Looks like I just got temp. banned... Does anyone so happen to have the value for that timer as well ;)
Yikes! do you mean from the online portion?
 
Last edited by blueoval24,
  • Like
Reactions: Sm4shModder

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
Not going to lie but its super exciting when you finally find a working combo, so congrats! There a select few who are very very helpful on this board and am grateful that they lend their assistance.
That being said, if you want to take a break from smash, Im currently trying to work on freezing the mystery house timers in Super Mario 3d world NTSC. :)
I actually was planning on hacking SM3DW to buff Mario (if possible), I'd be glad to poke around for the timers once I get it running again. :)

Yikes! do you mean from the online portion?
Yeah. That pesky 9:59 timer tho :(


Edit: Didn't somebody have a default settings modifier code around here? I thought there was one.
 
Last edited by Sm4shModder,
  • Like
Reactions: blueoval24

skoolzout1

Well-Known Member
Member
Joined
Mar 16, 2017
Messages
538
Trophies
0
Location
The Maple Syrup Aisle
XP
953
Country
Canada
Update: I can't believe it! It actually worked! I've never been this excited since I first learned to hack Brawl (even though I was actually quite useless here). I'm going to experiment with this for a bit and try to understand it better. Toadstool said there were glitches, and I can see them here, but I'm still glad nonetheless.

Thank you all so much!

- Sm4shModder
What worked? The stuff i sent you? or did Toadstool send you his stuff?
 

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
@tastymeatball Before I head off to sleep, could you tell me the process you used to find the exact values? I couldn't find it after days, yet you seemingly found it in seconds, I'd like to know as I want to improve my modding and optimization skills. For me at least, the Memory Viewer only searches it sets of 10s (e.g. xxxxxx10, xxxxxx20 xxxxxx30, etc.) yet this address had a value of "A8". I couldn't find this value from any search either.

Thank you.
 

skoolzout1

Well-Known Member
Member
Joined
Mar 16, 2017
Messages
538
Trophies
0
Location
The Maple Syrup Aisle
XP
953
Country
Canada
@tastymeatball Before I head off to sleep, could you tell me the process you used to find the exact values? I couldn't find it after days, yet you seemingly found it in seconds, I'd like to know as I want to improve my modding and optimization skills. For me at least, the Memory Viewer only searches it sets of 10s (e.g. xxxxxx10, xxxxxx20 xxxxxx30, etc.) yet this address had a value of "A8". I couldn't find this value from any search either.

Thank you.
That’s a random glitch with Jgecko. Make sure the Byte alignment says 00000004. Uncheck the automatic button beside it and recheck it and see if it changes to 4 correctly. If not, you can change it manually. It should never be 00000000
 

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
That’s a random glitch with Jgecko. Make sure the Byte alignment says 00000004. Uncheck the automatic button beside it and recheck it and see if it changes to 4 correctly. If not, you can change it manually. It should never be 00000000
Should the value be 04 as well, or can that be left alone?
 

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
Just for reference, here is my current setup:
SX1QcBE.png

Any advice?
 

skoolzout1

Well-Known Member
Member
Joined
Mar 16, 2017
Messages
538
Trophies
0
Location
The Maple Syrup Aisle
XP
953
Country
Canada
Just for reference, here is my current setup:
SX1QcBE.png

Any advice?
Keep the alignment box checked. If you ever change from 32 bits to something else, it will change the alignment accordingly for you. But if you are staying on 32 bit you can leave it on 4.

I would also uncheck “signed”
 
  • Like
Reactions: Sm4shModder

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
Default Ruleset Modifier [Sm4shmodder]
00020000 1098F220
01000100 00000000
00020000 1098F224
00000001 00000000
00020000 1098F228
0A000000 00000000
00020000 1098F22C
00000003 00000000
00020000 1098F234
08000100 00000000
Rules: Stock
Stock: 3
Custom Fighters: Off
Handicap: Off
Launch Rate: 1.0x
Stage Choice: Choose
Stock Time Limit: 8
Team Attack: On
Pause Function: On
Score Display On
Damage Display: On
SD Penalty: -1
*Doesn't work Online; May create one later.
Let me know if anyone wants a more competitive or flexible version.

@skoolzout1 I've run into a new problem now. The Offline Ruleset Modifier works just fine, however whenever I go to modify the values Online, they get reset before they can apply. Do you know what might be causing this (and how to fix it)? I know the addresses are correct, but for some reason it won't work.

Update: If I load the menu twice my changes will go through, but they won't on initial runs. Still don't know the problem/solution.

Update 2: I'm actually having problems with the Default Rules in general. Whenever I use the Menu Swap code it forces a 2 min match regardless of me or my opponent's settings.
 
Last edited by Sm4shModder,

skoolzout1

Well-Known Member
Member
Joined
Mar 16, 2017
Messages
538
Trophies
0
Location
The Maple Syrup Aisle
XP
953
Country
Canada
Default Ruleset Modifier [Sm4shmodder]
00020000 1098F220
01000100 00000000
00020000 1098F224
00000001 00000000
00020000 1098F228
0A000000 00000000
00020000 1098F22C
00000003 00000000
00020000 1098F234
08000100 00000000
Rules: Stock
Stock: 3
Custom Fighters: Off
Handicap: Off
Launch Rate: 1.0x
Stage Choice: Choose
Stock Time Limit: 8
Team Attack: On
Pause Function: On
Score Display On
Damage Display: On
SD Penalty: -1
*Doesn't work Online; May create one later.
Let me know if anyone wants a more competitive or flexible version.

@skoolzout1 I've run into a new problem now. The Offline Ruleset Modifier works just fine, however whenever I go to modify the values Online, they get reset before they can apply. Do you know what might be causing this (and how to fix it)? I know the addresses are correct, but for some reason it won't work.

Update: If I load the menu twice my changes will go through, but they won't on initial runs. Still don't know the problem/solution.

Update 2: I'm actually having problems with the Default Rules in general. Whenever I use the Menu Swap code it forces a 2 min match regardless of me or my opponent's settings.
Uhhhhh how would they get reset? If you have a code running that is writing to those addresses, they shouldnt be able to be reset since the code is writing about 120x per second. Its possible that they get reset for like a Microsecond, but it usually isnt perceivable at all
 

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
How would they get reset? If you have a code running that is writing to those addresses, they shouldnt be able to be reset since the code is writing about 120x per second. Its possible that they get reset for like a Microsecond, but it usually isnt perceivable at all
So when I go into a With Friends (test room) menu and manually set the values, they'll seemingly get "saved", and will be immune to my codes for as long as I'm in the room. This means that in the menu, no matter what I do, the values won't set on the first load. This can be fixed by exiting and reopening the menu, but by then I would've lost my opponent and it would be pointless. When analyzed through the Memory Viewer, the values are seen constantly flickering between the "saved" stats and those of my code's (hence the 120x per second). Something in the game is stopping my codes from working on the first load, so I figured you'd know more about it.
 

skoolzout1

Well-Known Member
Member
Joined
Mar 16, 2017
Messages
538
Trophies
0
Location
The Maple Syrup Aisle
XP
953
Country
Canada
So when I go into a With Friends (test room) menu and manually set the values, they'll seemingly get "saved", and will be immune to my codes for as long as I'm in the room. This means that in the menu, no matter what I do, the values won't set on the first load. This can be fixed by exiting and reopening the menu, but by then I would've lost my opponent and it would be pointless. When analyzed through the Memory Viewer, the values are seen constantly flickering between the "saved" stats and those of my code's (hence the 120x per second). Something in the game is stopping my codes from working on the first load, so I figured you'd know more about it.
That means one of two things in my experience. Either the game is literally just out matching the codes by writing to it faster. Or, there is another copy of those values that the address you found are getting their values from. In other words: find other addresses who seem to behave and change in a similar way to the addresses you already found. Try changing the new address’s value and seeing if your current addresses change with it. Then you know that your current addresses are getting their value from the new addresses you found.
 
Last edited by skoolzout1,
  • Like
Reactions: Sm4shModder

Sm4shModder

Well-Known Member
Newcomer
Joined
Jul 13, 2017
Messages
75
Trophies
0
Age
28
XP
163
Country
United States
That means one of two things in my experience. Either the game is literally just out matching the codes by writing to it faster. Or, there is another copy of those values that the address you found are getting their values from. In other words: find other addresses who seem to behave and change in a similar way to the addresses you already found. Try changing the new address’s value and seeing if your current addresses change with it. Then you know that your current addresses are getting their value from the new addresses you found.
The latter actually makes a lot of sense. It would explain why pressing the Default button would load the actual default values instead of my own. I'll poke around a bit more and try to find some leads.

Update: The true default settings may very well be inaccessible. Every attempt at a search leads back to the superficial values.
 
Last edited by Sm4shModder,

tastymeatball

Well-Known Member
Member
Joined
Nov 30, 2016
Messages
277
Trophies
0
Age
38
XP
2,483
Country
Germany
Here a partial code for Donkey Kong Tropical Freeze
Moonjump (A Gamepad)
09020000 102F48A8
00008000 00000000
00020000 XXXXXXX0
41700000 00000000
00020000 XXXXXXXC
41700000 00000000
D0000000 DEADCAFE

Follow this pointer [11453454] + 60 at the beginning of a level and replace the Xs with the first 7 digits of the found address. The code will then work until you leave the level.
I couldn't find a pointer that works everytime. The pointer mentioned before seems to change from time to time which seems to has something to do with the enemies.

EDIT:
Changed the code a little bit
Now when you press the Right Joystick it will save the current pointer at 0x11453454 to 0x4B010010 and when you press A it will use the pointer saved at 0x4B010010.
Moonjump
09020000 102F48A8
00020000 00000000
10020000 11453454
11020000 4B010010
D0000000 DEADCAFE
09020000 102F48A8
00008000 00000000
04020000 4B010010
00000000 00000000
30000000 4B010010
10000000 30000000
00120060 41700000
0012006C 41700000
D0000000 DEADCAFE

Now you just have to press the Right Joystick at the beginning of a level and you can moonjump through the level

Disable both codes between levels to prevent freezes
 
Last edited by tastymeatball,

Spadezilla

Well-Known Member
Member
Joined
Dec 19, 2013
Messages
139
Trophies
0
Age
32
XP
256
Country
United States
Hi, thank you for this ultimate resource.

I am having some trouble running tcpgecko with the codehandler and connecting J Gecko U or gecko dot net. I was able to send codes successfully once, but after that it seems that no matter what settings I try both the WiiU and PC side end up crashing.

I can provide logs of some sort if that may help development.

here are my issues

TCPGecko crashed or can't (re)connect. Is it a WiiU's side issue or Computer's side issue?
TCPGecko often crashes without releasing the connection socket, freezing all further connection attempt.
There's a modified handler version wich force a release the socket, but you need to host the exploit yourself (see the links at the top of the tutorial).

You can check if the connection issue is from TCPGecko or from your WiiU by using PyGecko.
Using PyGecko will let you see if your computer can connect to the WiiU using a different program.

1. You need to install Python 2.7 (not Python 3.0)
2. Go to pyGecko folder and open a command line there (On windows 7+ : shift+rightclick > open command line here)
3. type "python pygecko.py" without the quotes and press enter
4. type one per line and press enter (note: replace x.x.x.x with your WiiU IP):
Code:
rpc = TCPGecko('x.x.x.x')
import struct
addr = rpc.readmem(0x10000000, 4)
print(struct.unpack('>I', addr)[0])
if "rpc" command doesn't give you a timeout error, it means the code handler is installed and working. the print function will display the first 32bit of 0x10000000 range.

just a few notes:
1) pygecko.py does not exist in pygecko folder, there is purge tcpgecko syshax common and kern.py? but none of those seem to respond to the commands listed. not sure what I'm missing here.

2) assuming pygecko.py were to be found, the troubleshooting steps doesn't say what to do if the rpc command were to result in a timeout error (I believe correct answer would be reboot Homebrew Channel and run TCP Gecko again but not sure)


  • TCPGecko.elf (An important tool to load the codehandler and connect to JGecko U/TCPGecko .NET)
  • codehandler.bin (A piece of software that executes cheat codes)
both these links are broken and should be updated :)


TCPGecko can't connect
1. Be sure your network is enabled on WiiU (and that you block Nintendo update servers with a proxy, DNS or router)
2. Verify your Firewall allows network access to TCPGecko and is not blocking the port used by the program.
3. Verify your antivirus (example : AVAST!) is not blocking communication with your wiiU.
4. do not try to connect before launching the game !

what port does TCP Gecko use, and should it be forwarded through the router to the Wii U's IP? to the PC running J Gecko U? neither?



Codehandler Change log:
  • the cheat codes have now to be sent into another memory. So we can now execute assembly codes and perform syscalls!
    This has been released yet but comes with a few struggles. The new memory range has no write permission which leads to freezes. But this problem should be solved with kern_write.
    The new range is needed in order to execute assembly codes and to store cheats from an SD card (if this feature will ever be a thing)


is there any way we can download the previous version of the codehandler before this one, to see if that works more reliably?




This program has to be launched via the Homebrew Launcher. It then builds up a TCP connection between the Wii U and your computer. It allows to install the codehandler to feature cheat code execution. The socket code of it causes some games to freeze on the boot screen such as like as StarFox Zero.

is there a workaround for the socket issue?



thanks again![/QUOTE]
 

xLothwenx

Well-Known Member
Newcomer
Joined
Feb 9, 2017
Messages
90
Trophies
0
Age
44
XP
423
Country
United States
My periodic request for anti-bloom lighting:

Is there a code to disable bloom lighting/haze/smear/trash in Mario Kart 8? I might actually play the game, then.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    K3Nv2 @ K3Nv2: https://youtu.be/MddR6PTmGKg?si=mU2EO5hoE7XXSbSr