Hacking New Classic Controller Hacks

Maeson said:

...The deflicker modification is universal, if we're talking about disabling the code and not merely changing the filter type.

Click to expand...

Vague Rant said:

This would definitely be a pretty low priority for me because the GameCube version of Twilight Princess already exists and is designed with the intention of being played with button controls. You can even find Gecko codes to enable widescreen support, so ultimately the experience of playing the GameCube version on Wii or Wii U with either GameCube or Classic controls via Nintendont is already very good.

Click to expand...

Vague Rant said:

I think all the school lessons are a bunch of motion-based minigames?

Click to expand...

Vague Rant said:

If I do come to this one, it might end up that I only do the normal gameplay stuff and you'd have to switch back to a real Wiimote and Nunchuk to do the motion classes

Click to expand...

Vague Rant said:

I've just updated the Excite Truck post with those changes, so now you can use the Home Button Menu normally and remapping is easier

Click to expand...

tech_A_nina said:

Have you tried the deflicker filter option as well? I would love to play this game on the wii u gamepad, but it's just too much blur for my eyes. Maybe it's possible to integrate the deactivated deflicker to the main.dol just like in super mario galaxy.
@Vague Rant do you know if the deflicker code of super mario galaxy will also work on little king's story?

Click to expand...

Vague Rant said:

View attachment 458554

I want to be clear off the bat that this is not a Classic Controller hack, but I'm not starting a new thread for "I got rid of the Nunchuk notice on a game that supports the GameCube controller." On startup, this game checks whether there is a Nunchuk or Classic Controller in the Wiimote. Notably, it doesn't even check if there is a Wiimote connected, it goes straight to checking whether there's a valid extension controller. Good one. This is fine if you want to play with Nunchuk or Classic Controller, but it means you need a second controller handy just to get to the part with GameCube controller support. Also, it's Resident Evil 4, I'm not doing an intro where I explain what Resident Evil 4 is. Highlight for @lauty29 who noted this issue's existence.

Spoiler: Splash Screen Skip Gecko Codes

USAEuropeGermanyJapan (Rev 0)Japan (Rev 1)

1. Code:

   Skip Nunchuk Splash Screen [Vague Rant]
   0416B260 38600001
   
   Skip All Splash Screens [Vague Rant]
   0416B088 38000001

2. Code:

   Skip Nunchuk Splash Screen [Vague Rant]
   0416B094 38600001
   
   Skip All Splash Screens [Vague Rant]
   0416AEBC 38000001

3. Code:

   Skip Nunchuk Splash Screen [Vague Rant]
   0416B0C8 38600001
   
   Skip All Splash Screens [Vague Rant]
   0416AEF0 38000001

4. Code:

   Skip Nunchuk Splash Screen [Vague Rant]
   0416ADDC 38600001
   
   Skip All Splash Screens [Vague Rant]
   0416AC04 38000001

5. Code:

   Skip Nunchuk Splash Screen [Vague Rant]
   0416B1E8 38600001
   
   Skip All Splash Screens [Vague Rant]
   0416AD28 38000001

General Notes​

• There's two codes here. The first skips over just the "insert a Nunchuk" error, while the second skips all of the boot screens: the Wiimote strap warning, Nunchuk error and mature content warning. If you're using a GameCube controller (and no Wiimote), you can get past the Wiimote strap screen by just waiting a few seconds, but if you want to get to the game faster, you can just skip all of them. If you're using the code to skip all splashes, you don't need to use the Nunchuk one as well. It won't hurt anything though, so you can if you want.
• If you're looking to play in German, you should probably stick to the Europe release. I don't know much about this Wii version, but on GameCube the German release removed two game modes entirely. The standard Europe release still has German language support, so I don't know if there's any reason to play the Germany-specific version.

Technical Notes​

• The most interesting thing to note here is that the SDK SCGetLanguage() function runs before displaying these screens, since they need to be localized for each supported language. After finding the first one through "proper" reverse engineering and seeing how it worked, when porting to the rest I was able to just find GetLanguage and walk back to the caller. This might be a workable approach to finding these splash screens in other games if anyone is looking to similarly modify or remove them.

Click to expand...

creedof69 said:

Hello, firstly I would like to hug you to have realized a child dream. That is super impressive and want to say thank you, really. I looked for bypass this screen for many years without any success (I'm not from hacking scene, just know how to edit with hex but don't know how hex works ^^)

So, as I bought a Wii U recently, is there a way to port a gecko code directly in the main dol iso ? In order to make it works as a Wii U VC inject.
I'm sure that search "0416B094" by hexadecimal and replace it by "38600001" will not be enough ^^.

Do you have some advices ? And again, thank you kindly

Click to expand...

Vague Rant said:

I think it should be doable for Little King's Story as well, as long as nothing goes wrong. Some games (only one in my experience so far: Bit.Trip Complete) really hate the way I handle analog stick D-Pad emulation and will crash when it's added--fortunately it wasn't practical in that game anyway since you needed the Left Stick as a separate input. But I'll come back to Little King's Story at some point and see if I can add the IR pointer and camera rotation on the Right Stick.

1. Unfortunately not, priiloader is skipped entirely when booting into Wii VC titles. You skip the entire Home Menu, which is also why there's no region locking on injections (doesn't mean they'll always work, but they'll always boot). It's worth mentioning, though, that the priiloader deflicker hack is specifically for disabling the deflicker filter inside the Wii Home Menu. It patches the Home Menu's copy of GXSetCopyFilter() to disable the filter but every game comes with their own copy, so it only affects the Home Menu itself.
   
   
2. That's a really good question. I saw the same note when looking into Kirby a bit and I couldn't find any obvious way to patch the contents of a Dolphin GameSettings file directly into the main.dol, so maybe they literally just copied and pasted every single patch there with a hex editor and a lot of free time?
   
   My idea for when/if I get to looking at Kirby properly is to basically do a find-replace to turn the .ini file into a Riivolution .xml, since Wiimm's wit tool can apply Riivolution XML patches directly to a .dol. So my idea is ultimately: manually convert that file to Riivolution-style .xml, apply that XML to the main.dol, generate a .ips from the clean to the hacked main.dol, then share the .ips.

---

View attachment 470648

Alien Crush Returns revived the cult hit pinball series spawned by Compile on the PC Engine/TurboGrafx-16. Arriving after a 16-year hiatus (after 1992's Jaki Crush for Super Famicom), Tamsoft returns to the H. R. Giger and Alien (as in the movies)-inspired universe of Alien Crush. Besides its uniquely biological art style, the Crush series has always taken a more consciously video game-y approach to virtual pinball, with roaming enemies, boss battles and level transitions that would be impossible on a physical table. This entry was the first to introduce multiple tables as well as free DLC add-ons to extend the life of the game. Although, the latter hasn't been available since 2014. Hmm.

Highlight for @NestorM who was interested in this game.

Spoiler: Gecko Codes

Besides the Classic Controller hack, we've also got some bonus stuff here. That includes a minor aspect ratio fix and the restoration of all DLC content--which I want to stress again was all free and built into the game, simply unlocked by connecting to Nintendo WFC, which is no longer possible.

USAEURJPN

1. Code:

   Classic Controller Support [Vague Rant]
   C20D5750 00000003
   28000002 4082000C
   386308F0 4E800020
   28000001 00000000
   C20D57C4 00000003
   28000002 4082000C
   38640060 4E800020
   28000001 00000000
   C21991EC 00000005
   C03E04A8 801E0004
   70000080 41820018
   48000009 4059999A
   7C8802A6 C0240000
   D03E04AC 00000000
   C2199C08 00000024
   90010024 2C040000
   40820110 8803005C
   2C000002 40820104
   48000021 801830E0
   3FAAAAAB 3C75C28F
   00000000 00000000
   3DCCCCCD 3F800000
   7CA802A6 90A1000C
   5727083C 38E7000C
   C0030074 FC000210
   C0230078 FC200A10
   FC00082A C0450014
   FC001040 4180000C
   38C0012C 48000014
   7CC53AAE 28060000
   408100A0 38C6FFFF
   7CC53B2E 38C00002
   98C3005E 81850000
   7D8803A6 4E800021
   2C030001 7FE3FB78
   80A1000C C0450004
   40820008 EC4200B2
   C0650008 C0030020
   C0230074 FC211024
   4800002D D0030020
   C0030024 C0230078
   FC200850 48000019
   D0030024 80010024
   7C0803A6 38210020
   4E800020 FC0100FA
   C0250018 FC000800
   4180000C FC000890
   48000014 FC200850
   FC000800 41810008
   FC000890 4E800020
   60000000 00000000
   0419AAC0 7FC3F378
   C219B1B0 0000001A
   2C040002 408200C0
   38800001 71200800
   41820008 60E78000
   71200001 41820008
   60E70008 71204000
   41820008 60E70004
   71200002 41820008
   60E70001 71208000
   41820008 60E70002
   71200010 41820008
   60E70800 71200040
   41820008 60E70400
   71200008 41820008
   60E70080 71200020
   41820008 60E72000
   71202000 41820008
   60E70001 71200200
   41820008 60E74000
   71200080 41820008
   60E72000 71200004
   41820008 60E70400
   71200400 41820008
   60E70010 71201000
   41820008 60E71000
   7CE83B78 70E09FFF
   60000000 00000000

   Code:

   All DLC Downloaded [Vague Rant]
   C2025D80 00000005
   80034368 60004400
   90034368 80034364
   60003C08 64000400
   90034364 7C030378
   3800FFFF 00000000

   Code:

   Force 704 viWidth [Vague Rant]
   041607A4 38A00008
   041607D0 38C002C0

2. Code:

   Classic Controller Support [Vague Rant]
   C20D5C40 00000003
   28000002 4082000C
   386308F0 4E800020
   28000001 00000000
   C20D5CB4 00000003
   28000002 4082000C
   38640060 4E800020
   28000001 00000000
   C21998EC 00000005
   C03E04A8 801E0004
   70000080 41820018
   48000009 4059999A
   7C8802A6 C0240000
   D03E04AC 00000000
   C219A308 00000024
   90010024 2C040000
   40820110 8803005C
   2C000002 40820104
   48000021 801837E0
   3FAAAAAB 3C75C28F
   00000000 00000000
   3DCCCCCD 3F800000
   7CA802A6 90A1000C
   5727083C 38E7000C
   C0030074 FC000210
   C0230078 FC200A10
   FC00082A C0450014
   FC001040 4180000C
   38C0012C 48000014
   7CC53AAE 28060000
   408100A0 38C6FFFF
   7CC53B2E 38C00002
   98C3005E 81850000
   7D8803A6 4E800021
   2C030001 7FE3FB78
   80A1000C C0450004
   40820008 EC4200B2
   C0650008 C0030020
   C0230074 FC211024
   4800002D D0030020
   C0030024 C0230078
   FC200850 48000019
   D0030024 80010024
   7C0803A6 38210020
   4E800020 FC0100FA
   C0250018 FC000800
   4180000C FC000890
   48000014 FC200850
   FC000800 41810008
   FC000890 4E800020
   60000000 00000000
   0419B1C0 7FC3F378
   C219B8B0 0000001A
   2C040002 408200C0
   38800001 71200800
   41820008 60E78000
   71200001 41820008
   60E70008 71204000
   41820008 60E70004
   71200002 41820008
   60E70001 71208000
   41820008 60E70002
   71200010 41820008
   60E70800 71200040
   41820008 60E70400
   71200008 41820008
   60E70080 71200020
   41820008 60E72000
   71202000 41820008
   60E70001 71200200
   41820008 60E74000
   71200080 41820008
   60E72000 71200004
   41820008 60E70400
   71200400 41820008
   60E70010 71201000
   41820008 60E71000
   7CE83B78 70E09FFF
   60000000 00000000

   Code:

   All DLC Downloaded [Vague Rant]
   C2026184 00000005
   80034368 60004400
   90034368 80034364
   60003C08 64000400
   90034364 7C030378
   3800FFFF 00000000

   Code:

   Force 704 viWidth
   04160EA4 38A00008
   04160ED0 38C002C0

3. Code:

   Classic Controller Support [Vague Rant]
   C20D4E44 00000003
   28000002 4082000C
   386308F0 4E800020
   28000001 00000000
   C20D4EB8 00000003
   28000002 4082000C
   38640060 4E800020
   28000001 00000000
   C2198920 00000005
   C03E04A8 801E0004
   70000080 41820018
   48000009 4059999A
   7C8802A6 C0240000
   D03E04AC 00000000
   C219933C 00000024
   90010024 2C040000
   40820110 8803005C
   2C000002 40820104
   48000021 801827D4
   3FAAAAAB 3C75C28F
   00000000 00000000
   3DCCCCCD 3F800000
   7CA802A6 90A1000C
   5727083C 38E7000C
   C0030074 FC000210
   C0230078 FC200A10
   FC00082A C0450014
   FC001040 4180000C
   38C0012C 48000014
   7CC53AAE 28060000
   408100A0 38C6FFFF
   7CC53B2E 38C00002
   98C3005E 81850000
   7D8803A6 4E800021
   2C030001 7FE3FB78
   80A1000C C0450004
   40820008 EC4200B2
   C0650008 C0030020
   C0230074 FC211024
   4800002D D0030020
   C0030024 C0230078
   FC200850 48000019
   D0030024 80010024
   7C0803A6 38210020
   4E800020 FC0100FA
   C0250018 FC000800
   4180000C FC000890
   48000014 FC200850
   FC000800 41810008
   FC000890 4E800020
   60000000 00000000
   0419A1F4 7FC3F378
   C219A8E4 0000001A
   2C040002 408200C0
   38800001 71200800
   41820008 60E78000
   71200001 41820008
   60E70008 71204000
   41820008 60E70004
   71200002 41820008
   60E70001 71208000
   41820008 60E70002
   71200010 41820008
   60E70800 71200040
   41820008 60E70400
   71200008 41820008
   60E70080 71200020
   41820008 60E72000
   71202000 41820008
   60E70001 71200200
   41820008 60E74000
   71200080 41820008
   60E72000 71200004
   41820008 60E70400
   71200400 41820008
   60E70010 71201000
   41820008 60E71000
   7CE83B78 70E09FFF
   60000000 00000000

   Code:

   All DLC Downloaded [Vague Rant]
   C202534C 00000005
   80034368 60004400
   90034368 80034364
   60003C08 64000400
   90034364 7C030378
   3800FFFF 00000000

   Code:

   Force 704 viWidth [Vague Rant]
   0415FE98 38A00008
   0415FEC4 38C002C0

Spoiler: Script for building pre-patched WAD

View attachment 470651

The archive above includes several tools, IPS patches and a Windows batch script to make applying this hack directly to a WAD relatively painless.

In addition to that ZIP, you will need:

• an Alien Crush Returns WAD (USA, EUR or JPN)
• common-key.bin

I will not help you find either of the above.

To use the script:

1. extract the ZIP file somewhere sensible
   
   
2. add the common-key.bin to that directory
   
   
3. drag and drop your Alien Crush Returns WAD onto the apply-patch.bat file
   
   • alternatively, you can run the script directly and drag and drop the WAD into the window that opens or just type the path to your WAD manually
   
   
4. answer the y/n prompts for which patches you want to apply
   
   
5. once you're ready, the script will use the included tools to unpack, patch and repack a new WAD with your chosen patches
   
   • the original WAD will not be modified
   
   
6. do whatever you normally would do with a WAD file

As a general rule, you shouldn't download and run random executables and batch scripts you find on the Internet. If you can't or don't want to run any of these on your machine, the IPS patches are included in the patches directory and you can figure out how to apply them in whatever way you feel comfortable. There is a readme.txt included with slightly more details on how to apply the patches in platform-agnostic terms (e.g. "Unpack your WAD").

Button Mapping​

​

Wii Remote	Classic Controller	Function
Wiimote Home	Home Works normally except for being on the Right Stick	Open/Close Home Menu
Wiimote D-Pad	D-Pad L (Left)	Menus Navigation Gameplay Shoot Ball (Down) Previous/Next Action (Left/Right)
Wiimote A	A	Menus Confirm Gameplay Use Action
Wiimote B	B ZR	Menus Cancel Gameplay Right Flipper
Wiimote 1 & 2	Not mapped	Not used?
Wiimote Plus	Plus	Menus Submit High Score
Wiimote Minus	Minus	Gameplay Pause
Wiimote Shake	X	Gameplay Tilt Table
Wiimote Pointer	Right Stick	Home Button Menu Navigation
Nunchuk Stick	Left Stick	Menus Navigation Gameplay Shoot Ball (Down) Previous/Next Action (Left/Right)
Nunchuk C	R	Gameplay Next Action
Nunchuk Z	Y ZL	Gameplay Left Flipper

General Notes​

• Another WiiWare, another dual-mode release. If you're just loading from a USB loader, the Gecko codes will be easier. If you need the WAD to have the hacks built-in, use the patch script.
  
  
• The button layout is mostly self-explanatory so I'll cover the mildly weird stuff.
  
  • The flippers are double mapped on Y/B and ZL/ZR. This was mostly only done so that B could be mapped letter-for-letter, which makes menu navigation much nicer. But since it's possible to use Classic B to trigger the right flipper, I figured Y may as well be another option for the left flipper, in case anybody prefers to play using the face buttons. That said, ZL/ZR seem like the most natural inputs (on the CC Pro, anyway).
    
    
  • The Nunchuk C button is used to cycle to the next Action Ball (ability triggered with the A button), which can also be done by pressing the Wiimote D-Pad or Nunchuk Stick Right. Since this is more of a "rightward" movement, I put this on Classic R instead of Classic L where it would normally be. On Classic L, I put D-Pad Left so you can cycle left/right through the Action Balls that way if you prefer.
  
  
• To briefly explain the Force viWidth 704 code: the Wii does not have square pixels, it has tall/thin rectangular pixels. When developing a game, studios would ideally factor this into their 2D and 3D rendering to ensure that everything looks the way they intended it. However, many Wii developers just didn't. Alien Crush Returns is designed for square pixels, so when displayed on the Wii, the pinballs are pin-ovals, etc.
  
  • Forcing a wider viWidth corrects for this by sacrificing a little bit of sharpness. If pixel clarity is more important to you than correct aspect ratio, don't use this code. On the other hand, if you want round, ball-shaped balls, do use this code.
  
  
• The DLC is back! I want to say again (for the third time) that the DLC was always free and included in the game. Each "DLC" is actually a single bit in your save file which would be set for you automatically when you started up the game with Internet access. I don't believe there are any legal or ethical issues here but if any mods are uncomfortable, feel free to edit/delete my post or ask me to do the same.
  
  • The way DLC worked in this game was somewhat unique in that the "downloads" weren't always immediately accessible to the player. Alien Crush Returns features a number of Action Balls. Only the Speed Ball is available by default, all others (even if they have already been downloaded) must be unlocked through gameplay. The spoiler below explains how to unlock all of the Action Balls.
    
    Spoiler: Action Ball unlock methods

    • Reverse Ball: beat the first boss in Story Mode
      
      
    • Split Ball: beat the second boss in Story Mode
      
      
    • Tractor Ball (DLC): complete Story Mode
      
      
    • Bomb Ball (DLC): score 3 million on Arcade Stage 1
      
      
    • Paralyze Ball (DLC): score 3 million on Arcade Stage 2
      
      
    • Trap Ball (DLC): score 3 million on Arcade Stage 3
    
    
  • In addition to the Action Balls, there are three more DLCs: an additional stage in Story Mode, a No-Tilt Mode where you are never penalized for tilting the table and an additional difficulty level, Insane (or Expert in the Japanese release). These are available without any additional unlock conditions.

Technical Notes​

Spoiler: Boring

Classic Controller hack breakdown:

• C2: bypass title screen Nunchuk check
  
  
• C2: bypass gameplay Nunchuk check (rude, I already told you, I definitely have a Nunchuk)
  
  
• C2 in read_kpad_acc(): tilt the table with a button
  
  
• C2 in calc_dpd_variable(): infra-red pointer support
  
  
• 04 in read_kpad_stick(): redirect Classic Controller left stick into Nunchuk analog stick
  
  
• C2 in KPADRead(): button injector

DLC hack breakdown:

• C2: when the game checks your save after starting or loading a game, intercept that check, ori/oris in the DLC bits and write the result back into memory

Aspect ratio hack breakdown:

• 04 and 04 in VIConfigure(): ignore the actual viXOrigin and viWidth values reported by the GXRenderModeObj and replace them with 8 and 704, respectively

Instead of doing it all by hand like I did for Blaster Master Overdrive, when implementing the WiiWare WAD patches I got ChatGPT to help me write a Python script which takes an insertion address, destination address and an assembly payload like this:

Code:

python branch-generator.py 800D4E44 802764A0 crush\title_nunchuk_check.asm

... and converts them into Riivolution-compatible XML like this:

XML:

<memory offset="0x800D4E44" value="481A165C" />
<memory offset="0x802764A0" value="280000024082000C386308F04E800020280000014BE5E994" />

It also feeds me back the next destination address so that I can do multiple successive patches. Once that's done I can apply the Riivolution hack to the main.dol using wit dolpatch. This is a horrible messy workaround and the code is hideous since it's half AI and half "I have no idea how Python works," but it's a lot nicer than manually calculating branch distances and poking them into the main.dol via hex editor.

If anybody asks for the code they can have it, but it's definitely gross. Leaves behind temp files and stuff because all I cared about was getting something running which made generating IPS patches slightly less awful. I might try to clean it up and post it somewhere but I also might just keep using it as a broken semi-functional disaster area, who knows. Either way, this should make future WiiWare hacks more approachable for me; I wasn't looking forward to doing another after Blaster Master.

Click to expand...

prince_h said:

Any chances for Zelda Skyward sword to receive this amazing upgrade?

Click to expand...