Can anybody share a "Rabbids Play" gamesave with Uplay rewards unlocked? - Uplay service closed years ago and I cannot unblock some game content!

Larkas

Member
Newcomer
Joined
Jul 28, 2019
Messages
14
Trophies
0
Age
38
XP
115
Country
Brazil
I have no idea if this is of any use to you, but have you by any chance stumbled upon this?

EDIT: This might also shed some light on what you're looking for, but I must confess I've only skimmed the surface of the article.
 

Duamutef_MC

Well-Known Member
OP
Newcomer
Joined
Mar 15, 2018
Messages
78
Trophies
0
Age
40
XP
188
Country
United Kingdom
I have no idea if this is of any use to you, but have you by any chance stumbled upon this?

EDIT: This might also shed some light on what you're looking for, but I must confess I've only skimmed the surface of the article.
Thanks mate. I had seen them before. That cheat code unblock all mini game, but doesn't add the Uplay content.

As for the other website, I contacted the crew on their website, but they seem dormant!
 
  • Like
Reactions: Larkas
Joined
Oct 19, 2021
Messages
847
Trophies
1
XP
2,313
I dunno what YOU don't understand. But that is the point. You can't "skip" this when the stuff is on uplay servers. If it would be possible, a lot of savegames without that check would float around in the world wide web.
Like I've said in a couple of my other posts, this would strongly depend on the game and how they utilized the U-Play servers. I took it upon myself to partly reverse engineer the game in question to this thread and found that it does indeed work as @Duamutef_MC states. No actual physical files are pulled from the server and installed onto the console to unlock this content, it is all already present within the main game in the first place, the server acts as a simple check to determine whether or not the content has been unlocked, it then proceeds to set a value allowing that content to be used.. Going to use Pseudo Code as an example here

if Player completed LEVEL:
unlock CONTENT
Else:
Keep Locked

This doesn't NEED a server base to work like this but I know the reasoning behind it, Ubisoft would rather create a universal API for their games to support achievements and unlockable content across all platforms (Being Wii U, PC, xbox and PlayStaion) instead of hardcoding it into each game.. Which I completely understand, you can just set a few instructions and suddenly you have a cross-platform U-Play API. So @Duamutef_MC is correct in this instance, the content isn't coming from the server, the server simply just allows the content to be used ;)

I can speak from actual experience on this topic as I have done things VERY similar in the past with a few of my friends. Gonna use another example from when we cracked PureClient. So nifty little PureClient has a server-based check inside that checks for one value that would have changed on your Wii U to see if it was legitimately purchased or not, now do you think the server suddenly downloads the entire client if it the check passes? Of course not.. It's already there within the main executable, just blocked from use if the check fails :P So solution? We patch over their server side check and API with a NOP instruction thus canceling any form of logging or checking, effectively bridging LOAD, directly to Client START. :toot:

So yes Skipping the Server check, or patching the content with a completed save game COULD work. But like I said that all depends on how the game does it's stuff! For example I gave my friend my completed Watch_Dogs save which had every achievement unlocked, guess what? Watch_Dogs' server side connection works almost exactly the same as the game in question, and they got to have every achievement including the content that came with unlocking it! The main reason @Duamutef_MC has not been able to do it this way is because the game was considered irrelevant even at release, so of course there wont be abundant save files that they can easily find.

I still stand by my other post though: Most viable solution to me is one of two things: 1, Either RAM Editing to simply make the game think the content has already been unlocked (Did this in AC III and worked like a charm) or 2, swap some textures around, for example Child wants a specific skin.. Go into the game files via FTP, locate the model and replace the Default skin with this new custom one. Classic file editing!

Edit: I can also back up mine and @Duamutef_MC 's claims on the server workings even more because when attempting connection and what not.. I used Squid Proxy to get a detailed log of everything used connection wise. The only things it tried to connect to was a simple check linked to the U-Play servers looking to see if certain checks had been passed :D
 
Last edited by Deleted member 571007,
  • Like
Reactions: rantex92

Duamutef_MC

Well-Known Member
OP
Newcomer
Joined
Mar 15, 2018
Messages
78
Trophies
0
Age
40
XP
188
Country
United Kingdom
Like I've said in a couple of my other posts, this would strongly depend on the game and how they utilized the U-Play servers. I took it upon myself to partly reverse engineer the game in question to this thread and found that it does indeed work as @Duamutef_MC states. No actual physical files are pulled from the server and installed onto the console to unlock this content, it is all already present within the main game in the first place, the server acts as a simple check to determine whether or not the content has been unlocked, it then proceeds to set a value allowing that content to be used.. Going to use Pseudo Code as an example here

if Player completed LEVEL:
unlock CONTENT
Else:
Keep Locked

This doesn't NEED a server base to work like this but I know the reasoning behind it, Ubisoft would rather create a universal API for their games to support achievements and unlockable content across all platforms (Being Wii U, PC, xbox and PlayStaion) instead of hardcoding it into each game.. Which I completely understand, you can just set a few instructions and suddenly you have a cross-platform U-Play API. So @Duamutef_MC is correct in this instance, the content isn't coming from the server, the server simply just allows the content to be used ;)

I can speak from actual experience on this topic as I have done things VERY similar in the past with a few of my friends. Gonna use another example from when we cracked PureClient. So nifty little PureClient has a server-based check inside that checks for one value that would have changed on your Wii U to see if it was legitimately purchased or not, now do you think the server suddenly downloads the entire client if it the check passes? Of course not.. It's already there within the main executable, just blocked from use if the check fails :P So solution? We patch over their server side check and API with a NOP instruction thus canceling any form of logging or checking, effectively bridging LOAD, directly to Client START. :toot:

So yes Skipping the Server check, or patching the content with a completed save game COULD work. But like I said that all depends on how the game does it's stuff! For example I gave my friend my completed Watch_Dogs save which had every achievement unlocked, guess what? Watch_Dogs' server side connection works almost exactly the same as the game in question, and they got to have every achievement including the content that came with unlocking it! The main reason @Duamutef_MC has not been able to do it this way is because the game was considered irrelevant even at release, so of course there wont be abundant save files that they can easily find.

I still stand by my other post though: Most viable solution to me is one of two things: 1, Either RAM Editing to simply make the game think the content has already been unlocked (Did this in AC III and worked like a charm) or 2, swap some textures around, for example Child wants a specific skin.. Go into the game files via FTP, locate the model and replace the Default skin with this new custom one. Classic file editing!

Edit: I can also back up mine and @Duamutef_MC 's claims on the server workings even more because when attempting connection and what not.. I used Squid Proxy to get a detailed log of everything used connection wise. The only things it tried to connect to was a simple check linked to the U-Play servers looking to see if certain checks had been passed :D

You're the one I've been waiting for! ^_^

I have 2 different savegames in .guc format that I can share. It seems like a few legible portions of the file don't change (the variables I'm trying to reassign!) Other binary values - which are obfuscated - change all over the file.

Do you need me to send you the savegame or do you have a way to access Rabbids Land elsewhere? Let me know, we might be close to solving this! :)
 
Joined
Oct 19, 2021
Messages
847
Trophies
1
XP
2,313
You're the one I've been waiting for! ^_^

I have 2 different savegames in .guc format that I can share. It seems like a few legible portions of the file don't change (the variables I'm trying to reassign!) Other binary values - which are obfuscated - change all over the file.

Do you need me to send you the savegame or do you have a way to access Rabbids Land elsewhere? Let me know, we might be close to solving this! :)
Alright so Save Game most likely isnt the most viable solution here. As I said before.. most viable solutions is either A: editing the textures (Replacing default skin with new Custom one) Or B: Editing the RAM making the game THINK you have it unlocked. The process for doing RAM Hacking can be a bit tedious though.. I haven't looked around in the game's memory yet but the process is almost always the same.. Open JGecko U and start a RAM Dump, save that file.. Then unlock a new achievement, then commence with ANOTHER RAM Dump, now.. Cross reference any values that might have changed, when you think you have a good pointer, try following it in the game's active memory, with things like achievements it should all be near eachother.

Going to use this as an example... In Minecraft Coding there are a few values to make note of (might not apply here, so dont use these exact values) first off, the most common ON value is 38600001, using this can accomplish a few things.. for example how I made my Fly code is dumped RAM when not flying, then did another RAM dump when I WAS Flying. After looking over the memory one address had changed from it's origin to 38600001 thus showing the address for FLY was active with the value 38600001. So putting that into JGecko code format, ADDRESS, VALUE.

(Forgot the actual address so gonna use an example) so the code would then look like

12345678 38600001

thus allowing Flying anywhere in the game since the game now thinks it's allowed, RAM Tampering!

This explanation is VERYYYY watered down though and probably not the best thing to go off of.. First time trying to relay my knowledge to other people :lol:

However my SECOND solution would require less knowledge.. Once again using Minecraft as an example here, say you're bored of the default skin packs, well after browsing the files you can come across the skin pack directory, and oh look! Villains.pck, we dont want that anymore.. So we REPLACE that file with our new custom one! Once loaded into the game you now have custom skins.. Get what I'm saying? So if you want a skin for Rabbids Land, try finding the model for the skin you want, then REPLACE the default skin with the one you want! For example (using fake file names ;) ) Download Brown_Rabbid, now you locate Default_Rabbit, then go on to rename Brown_Rabbid to Default_Rabbid and replace the file! And voila, model swapping!
 

Duamutef_MC

Well-Known Member
OP
Newcomer
Joined
Mar 15, 2018
Messages
78
Trophies
0
Age
40
XP
188
Country
United Kingdom
I fired up TCP Gecko. There are *way* too randomly intermittent values in the main loop thread. I was expecting a single value to change when the rabbit color is chosen. It is not the case. Hundreds of cycles are running and cascade repeating hex sequencies across hundreds of addresses.

Also, the file system is highly compressed, and a texture change won't fool my kid either (he wants all paint jars to be available!)

I am starting to think that unless a savefile can be scavenged somewhere this is a lost battle.
 
Joined
Oct 19, 2021
Messages
847
Trophies
1
XP
2,313
I fired up TCP Gecko. There are *way* too randomly intermittent values in the main loop thread. I was expecting a single value to change when the rabbit color is chosen. It is not the case. Hundreds of cycles are running and cascade repeating hex sequencies across hundreds of addresses.

Also, the file system is highly compressed, and a texture change won't fool my kid either (he wants all paint jars to be available!)

I am starting to think that unless a savefile can be scavenged somewhere this is a lost battle.
Probably.. In my case I could most likely manage to make an unlock achievements code if I crack at it for a few days, but I honestly just don't have the time to. I wish you good luck though!
 

Duamutef_MC

Well-Known Member
OP
Newcomer
Joined
Mar 15, 2018
Messages
78
Trophies
0
Age
40
XP
188
Country
United Kingdom
Bumping this... anybody with a Rabbids Land savegame here? :)

Let me know... I've contacted all of Reddit and eBay already about this - as well as the ZenHax hacking community - but they've been quite silent!
 

Escancoranco

Active Member
Newcomer
Joined
Feb 13, 2021
Messages
26
Trophies
0
Age
29
Location
Internet Street, Morioh
Website
soychico.trucoteca.com
XP
148
Country
Spain
so i kinda have an update on this
ive been watching ALL rabbids land gameplay videos on youtube, tried contacting everyone that had uplay things unlocked, today i came across with this video, in which the uplay section doesnt even appear in the main menu (and in other videos of same channel and that one you can see extras music section, increased coin limit in videos possibly the uplay video already unlocked, dunnoabout the minigame but YOU CAN SEE THE GREY RABBID), downloaded the japanese eshop version (which btw supports multiple languages, or at least spanish too) , and sadly uplay was still there, im downloading the disc version rn to see if its different but so it takes me less time ill go thru emulator just to see if its there or not, if it is ill convert disc wux file into an installable wup/app version and download it on my wii u to extract the save data, im sure this is leading somewhere! grey rabbid, we are on our way!
Post automatically merged:

I HAVE AMAZING NEWS!! JAPANESE DISC VERSION COMES WITH UNLOCKABLE THROUGH PLAYTHROUGH CONTENT!! And yes, it also works in other languages, i already tested it, music section, uplay minigame and extra video are there along with grey rabbid, all this can be unlocked with the konami code too btw! I have the WUX disc file, the common key, and the almost impossible to find disc title key, with this i should be able to convert it into an app folder so it can be installable through wup installer, i havent tried if you can use the japanese disc save with the american eshop version, but i assume not since uplay isnt even in this version, youll have to redownload it all again and do everything again (or use the konami code, write the names of the rabbid users you had on previous version and act like nothing happened)
Post automatically merged:

so i kinda have an update on this
ive been watching ALL rabbids land gameplay videos on youtube, tried contacting everyone that had uplay things unlocked, today i came across with this video, in which the uplay section doesnt even appear in the main menu (and in other videos of same channel and that one you can see extras music section, increased coin limit in videos possibly the uplay video already unlocked, dunnoabout the minigame but YOU CAN SEE THE GREY RABBID), downloaded the japanese eshop version (which btw supports multiple languages, or at least spanish too) , and sadly uplay was still there, im downloading the disc version rn to see if its different but so it takes me less time ill go thru emulator just to see if its there or not, if it is ill convert disc wux file into an installable wup/app version and download it on my wii u to extract the save data, im sure this is leading somewhere! grey rabbid, we are on our way!
Post automatically merged:

I HAVE AMAZING NEWS!! JAPANESE DISC VERSION COMES WITH UNLOCKABLE THROUGH PLAYTHROUGH CONTENT!! And yes, it also works in other languages, i already tested it, music section, uplay minigame and extra video are there along with grey rabbid, all this can be unlocked with the konami code too btw! I have the WUX disc file, the common key, and the almost impossible to find disc title key, with this i should be able to convert it into an app folder so it can be installable through wup installer, i havent tried if you can use the japanese disc save with the american eshop version, but i assume not since uplay isnt even in this version, youll have to redownload it all again and do everything again (or use the konami code, write the names of the rabbid users you had on previous version and act like nothing happened)
welp, ive got bad news, game somehow knows when its played as disc format and when its played as an app, making this almost useless since it activates uplay, however it lets you watch the uplay video for some reason, but no minigame, music section or grey rabbid, heres a save, youll be able to use it on other regions tho, comes with the video but since uplay was never activated it doesnt count it for other stuff, only on the video for some reason?? it also counts the coins from the uplay minigame
 

Attachments

  • 2_E0112D70_FFFFFFFF.zip
    1 KB · Views: 21
Last edited by Escancoranco,

Escancoranco

Active Member
Newcomer
Joined
Feb 13, 2021
Messages
26
Trophies
0
Age
29
Location
Internet Street, Morioh
Website
soychico.trucoteca.com
XP
148
Country
Spain
so i kinda have an update on this
ive been watching ALL rabbids land gameplay videos on youtube, tried contacting everyone that had uplay things unlocked, today i came across with this video, in which the uplay section doesnt even appear in the main menu (and in other videos of same channel and that one you can see extras music section, increased coin limit in videos possibly the uplay video already unlocked, dunnoabout the minigame but YOU CAN SEE THE GREY RABBID), downloaded the japanese eshop version (which btw supports multiple languages, or at least spanish too) , and sadly uplay was still there, im downloading the disc version rn to see if its different but so it takes me less time ill go thru emulator just to see if its there or not, if it is ill convert disc wux file into an installable wup/app version and download it on my wii u to extract the save data, im sure this is leading somewhere! grey rabbid, we are on our way!
Post automatically merged:

I HAVE AMAZING NEWS!! JAPANESE DISC VERSION COMES WITH UNLOCKABLE THROUGH PLAYTHROUGH CONTENT!! And yes, it also works in other languages, i already tested it, music section, uplay minigame and extra video are there along with grey rabbid, all this can be unlocked with the konami code too btw! I have the WUX disc file, the common key, and the almost impossible to find disc title key, with this i should be able to convert it into an app folder so it can be installable through wup installer, i havent tried if you can use the japanese disc save with the american eshop version, but i assume not since uplay isnt even in this version, youll have to redownload it all again and do everything again (or use the konami code, write the names of the rabbid users you had on previous version and act like nothing happened)
Post automatically merged:


welp, ive got bad news, game somehow knows when its played as disc format and when its played as an app, making this almost useless since it activates uplay, however it lets you watch the uplay video for some reason, but no minigame, music section or grey rabbid, heres a save, youll be able to use it on other regions tho, comes with the video but since uplay was never activated it doesnt count it for other stuff, only on the video for some reason?? it also counts the coins from the uplay minigame
alright heres what we know, japanese disc version is the ONLY one that comes with this stuff already unlocked, buying one of those is like 40$+, converting to app doesnt work, cemu only loads title screen, leaving us with only 1 option, loadiine, i tried and it also reads the game as an eshop title, HOWEVER there is a method in loadiine which allows you to play games by a legit disc of smash for wii u, opening the disc then overwriting its data AND titleid to the selected game, this is perfect since you can find those for way cheaper 10-30$, however since i dont have a disc i cant prove this works, we need to find someone who does have a disc and is willing to try (which at least has more chances of happenning than anyone owning rabbids land and a uplay save) if anyone knows someone with that disc PLEASE ask them for help, if it works, you will only have to buy that disc and launch the game on a less convenient app but will be able to fully use it, this is the only way
 

Escancoranco

Active Member
Newcomer
Joined
Feb 13, 2021
Messages
26
Trophies
0
Age
29
Location
Internet Street, Morioh
Website
soychico.trucoteca.com
XP
148
Country
Spain
alright heres what we know, japanese disc version is the ONLY one that comes with this stuff already unlocked, buying one of those is like 40$+, converting to app doesnt work, cemu only loads title screen, leaving us with only 1 option, loadiine, i tried and it also reads the game as an eshop title, HOWEVER there is a method in loadiine which allows you to play games by a legit disc of smash for wii u, opening the disc then overwriting its data AND titleid to the selected game, this is perfect since you can find those for way cheaper 10-30$, however since i dont have a disc i cant prove this works, we need to find someone who does have a disc and is willing to try (which at least has more chances of happenning than anyone owning rabbids land and a uplay save) if anyone knows someone with that disc PLEASE ask them for help, if it works, you will only have to buy that disc and launch the game on a less convenient app but will be able to fully use it, this is the only way
alright bad news, tried this with an art academy atelier disc (which is the only other disc aside of smash compatible of running on loadiine) and it detects region of the disc, not console since i tried spiik already, so unless i get an art academy or smash 4 japanese disc, its buying a japanese rabbids land disc
luckily smash 4 is pretty cheap, couldnt find any art academy disc on sale and rabbids land goes over 40€
so unless we ram edit it or edit the save somehow we are pretty screwed, also since daumutef sold his wii u i am now the only person on the entire internet currently researching a way to get this
but its also kinda cool to see the game search for if it is running on a japanese disc specifically or else it will activate uplay
 

ilikegoldengrahams

Well-Known Member
Newcomer
Joined
Oct 20, 2014
Messages
73
Trophies
0
Age
38
XP
196
Country
I hope this works for you. Everything is unlocked, including all of the Uplay content. All I ask is that you keep the Rabbids love alive, and tell everyone how awesome a property the Rabbids are. :D

Extracted though SaveMii on my PAL copy, set as "all users".

Place, unzipped into ROOT/wiiu/backups on your SD, copy the backup over to your Wii U and fingers crossed, hoping you should be good to go!! :yayu:

Please let me know if there is any more I can do.
 

Attachments

  • 000500001010fc00.zip
    1.5 KB · Views: 17
Last edited by ilikegoldengrahams,
  • Like
Reactions: Lostbhoy

Escancoranco

Active Member
Newcomer
Joined
Feb 13, 2021
Messages
26
Trophies
0
Age
29
Location
Internet Street, Morioh
Website
soychico.trucoteca.com
XP
148
Country
Spain
Unfortunately, it looks like they haven't been active for a while. Hoping they have a glance and manage to clock this... :unsure:
1679873578826.png
yeah about that i contacted him on reddit not long ago, and its pretty much useless for him now, not for me tho, installing european version rn, save already is on sd card and i think i either did something wrong or it was the japanese game, ill inform you later if i can install it and if i had luck with it, thank you so much!!
Post automatically merged:

I hope this works for you. Everything is unlocked, including all of the Uplay content. All I ask is that you keep the Rabbids love alive, and tell everyone how awesome a property the Rabbids are. :D

Extracted though SaveMii on my PAL copy, set as "all users".

Place, unzipped into ROOT/wiiu/backups on your SD, copy the backup over to your Wii U and fingers crossed, hoping you should be good to go!! :yayu:

Please let me know if there is any more I can do.
so just tried it and the save is completely empty, no trophies, no uplay rewards, nothing, you sure this is the correct save?
 
Last edited by Escancoranco,
  • Love
Reactions: ilikegoldengrahams

ilikegoldengrahams

Well-Known Member
Newcomer
Joined
Oct 20, 2014
Messages
73
Trophies
0
Age
38
XP
196
Country
Gah, my bad! I think I selected the wrong option in SaveMii and now pretty sure I've got the right one.

I don't quite fully understand how other users can use my save at the moment though. Is it just a case of modifying a filename?...

Hoping this is the right one anyways.
 

Attachments

  • 000500001010fc00.zip
    3.1 KB · Views: 13

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Veho @ Veho:
    Mkay.
  • Veho @ Veho:
    I just ordered another package from China just to spite you.
  • SylverReZ @ SylverReZ:
    Communism lol
  • SylverReZ @ SylverReZ:
    OUR products
  • The Real Jdbye @ The Real Jdbye:
    @LeoTCK actually good quality products are dying out because they can't compete with dropshipped chinese crap
    +2
  • BakerMan @ BakerMan:
    @LeoTCK is your partner the sascrotch or smth?
  • Xdqwerty @ Xdqwerty:
    Good morning
  • Xdqwerty @ Xdqwerty:
    Out of nowhere I got several scars on my forearm and part of my arm and it really itches.
  • AdRoz78 @ AdRoz78:
    Hey, I bought a modchip today and it says "New 2040plus" in the top left corner. Is this a legit chip or was I scammed?
  • Veho @ Veho:
    @AdRoz78 start a thread and post a photo of the chip.
    +2
  • Xdqwerty @ Xdqwerty:
    Yawn
  • S @ salazarcosplay:
    and good morning everyone
    +1
  • K3Nv2 @ K3Nv2:
    @BakerMan, his partner is Luke
  • Sicklyboy @ Sicklyboy:
    Sup nerds
    +1
  • Flame @ Flame:
    oh hi, Sickly
  • K3Nv2 @ K3Nv2:
    Oh hi flame
  • S @ salazarcosplay:
    @K3Nv2 what was your ps4 situation
  • S @ salazarcosplay:
    did you always have a ps4 you never updated
  • S @ salazarcosplay:
    or were you able to get new ps4 tracking it \
    as soon as the hack was announced
  • S @ salazarcosplay:
    or did you have to find a used one with the lower firm ware that was not updated
  • K3Nv2 @ K3Nv2:
    I got this ps4 at launch and never updated since 9.0
  • K3Nv2 @ K3Nv2:
    You got a good chance of buying a used one and asking the seller how often they used or even ask for a picteof not updating just tell them don't update
    K3Nv2 @ K3Nv2: You got a good chance of buying a used one and asking the seller how often they used or even ask...