Hacking Post your WiiU cheat codes here!

lex luthor

Well-Known Member
Member
Joined
Sep 9, 2010
Messages
276
Trophies
0
XP
251
Country
United States
In what specific screen do I have to input Character code(SSB) because every time I poke the screen wont load anymore. I'm using the Onion Knight Pygecko with Miimaker version of Loadiine.
 

Amani

Someone who wants to get banned
Member
Joined
Apr 7, 2015
Messages
121
Trophies
0
XP
71
Country
United States
For Splatoon:

1. Could I change the stats of a weapon? Specifically the Hero Shot Replica. And I do NOT want to max out all stats.

2. Could I change the amount of experience earned for winning online matches to 100?
 

aracom

Well-Known Member
Member
Joined
Oct 1, 2015
Messages
476
Trophies
0
XP
363
Country
Gambia, The
For Splatoon:

1. Could I change the stats of a weapon? Specifically the Hero Shot Replica. And I do NOT want to max out all stats.

2. Could I change the amount of experience earned for winning online matches to 100?
Oh, yea, you can do that, and it's so easy that you could find it by just looking through the files. But wasn't there that neat rule that says we aren't allowed to post online cheats? :P

BTW, you would get a timeout in minutes and a ban if you do it again, so I would be careful.
 

3dsiziritai

Active Member
Newcomer
Joined
Oct 26, 2015
Messages
39
Trophies
0
XP
604
Country
Mario Kart 8 (J) v4.1
I think it's possible to carry out (E) and (U).

All CUP Gold Trophy and 3 Star
2F74710C 03030303
2F747110 03030303
2F747114 03030303
2F74712C 03030303
2F747130 03030303
2F747134 03030303
2F74714C 03030303
2F747150 03030303
2F747154 03030303
2F74716C 03030303
2F747170 03030303
2F747174 03030303
2F74718C 03030303
2F747190 03030303
2F747194 03030303
2F74720C 03030303
2F747210 03030303
2F747214 03030303
2F74722C 03030303
2F747230 03030303
2F747234 03030303
2F74724C 03030303
2F747250 03030303
2F747254 03030303
2F74726C 03030303
2F747270 03030303
2F747274 03030303
2F74728C 03030303
2F747290 03030303
2F747294 03030303

All Course Unlock
2F748668 03030303
2F74866C 03030303

All Character Unlock
2F748690 03030303
2F748694 03030303
2F748698 03030303
2F74869C 03030303
2F7486A0 03030303
2F7486A4 03030303
2F7486A8 03030303
2F7486AC 03030000

All Kart Unlock
2F7486D0 03030303
2F7486D4 03030303
2F7486D8 03030303
2F7486DC 03030303
2F7486E0 03030303
2F7486E4 03030303
2F7486E8 03030000

All Tire Unlock
2F748710 03030303
2F748714 03030303
2F748718 03030303
2F74871C 03030303
2F748720 03030000

All Glider Unlock
2F748750 03030303
2F748754 03030303
2F748758 03030303

All Sticker Unlock
2F748798 00000303
2F74879C 03030303
2F7487A0 03030303
2F7487A4 03030303
2F7487A8 03030303
2F7487AC 03030303
2F7487B0 03030303
2F7487B4 03030303
2F7487B8 03030303
2F7487BC 03030303
2F7487C0 03030303
2F7487C4 03030303
2F7487C8 03030303
2F7487CC 03030303
2F7487D0 03030303
2F7487D4 03030303
2F7487D8 03030303
2F7487DC 03030303
2F7487E0 03030303
2F7487E4 03030303
2F7487E8 03030303
2F7487EC 03030303
2F7487F0 03030303

All amiibo avatar Unlock
2F74D228 0071FEFF
 

Deathwing Zero

Well-Known Member
Member
Joined
May 22, 2010
Messages
228
Trophies
0
Age
38
Location
Can-uh-duh
Website
Visit site
XP
409
Country
Canada
Found some more stuff for Hyrule Warriors 1.7.0. on the original adventure map.

Hyrule Warriors 1.7.0/eShop/USA
Have 6 Compasses
35515C24 06

Have 6 Bombs
35515C25 06

Have 6 Candles
35515C26 06

Have 6 Ladders
35515C27 06

Have 6 Power Bracelets
35515C28 06

Have 6 Water Bombs
35515C29 06

Have 6 Digging Mitts
35515C2A 06

Have 6 Ice Arrows
35515C2B 06

Have 6 Rafts
35515C2C 06

Have 6 Hookshots
35515C2D 06

Have 6 Recorders
35515C2E 06

Have 6 Harps
35515C2F 06
Same as above but 4 items in one code

Have 5 Compasses, Bombs, Candles and Ladders
35515C24 06060606

Have 5 Power Bracelets, Water bombs, Digging Mitt and Ice Arrows
35515C28 06060606

Have 5 Rafts, Hookshots, Recorders and Harps
35515C2C 06060606
Have 6 Compasses
3551AC7C 06

Have 6 Bombs
3551AC7D 06

Have 6 Candles
3551AC7E 06

Have 6 Ladders
3551AC7F 06

Have 6 Power Bracelets
35515AC80 06

Have 6 Water Bombs
3551AC81 06

Have 6 Digging Mitts
3551AC82 06

Have 6 Ice Arrows
3551AC83 06

Have 6 Rafts
3551AC84 06

Have 6 Hookshots
3551AC85 06

Have 6 Recorders
3551AC86 06

Have 6 Harps
3551AC87 06
Have 5 Compasses, Bombs, Candles and Ladders
3551AC7C 06060606

Have 5 Power Bracelets, Water bombs, Digging Mitt and Ice Arrows
3551AC80 06060606

Have 5 Rafts, Hookshots, Recorders and Harps
3551AC84 06060606
Have 6 Compasses
3551D4A8 06

Have 6 Bombs
3551D4A9 06

Have 6 Water bombs
3551D4AD 06

Have 6 Digging Mitts
3551D4AE 06

Have 6 Lanterns
3551D4B4 06

Have 6 Jars
3551D4B5 06

Have 6 Fishing Rods
3551D4B6 06

Have 6 Clawshots
3551D4B7 06

Have 6 Spinners
3551D4B8 06

Have 6 Ooccoo
3551D4B9 06

Have 6 Tears of Light
3551D4BA 06

Have 6 Tears of Twilight
3551D4BB 06
Have 6 Compasses and Bombs
3551D4A8 0606

Have 6 Water Bombs and Digging Mitts
3551D4AD 0606

Have 6 Lanterns, Jars, Fishing Rods and Clawshots
3551D4B4 06060606

Have 6 Spinners, Ooccoo, Tears Of Light and Tears of Twilight
3551D4B8 06060606
Have 99 "Hours"
355222F4 63

Have 6 Compasses
3551FCD4 06

Have 6 Bombs
3551FCD5 06

Have 6 Ice Arrows
3551FCDB 06

Have 6 Song of Time
3551FCE8 06

Have 6 Inverted Song of Time
3551FCE9 06

Have 6 Deku Sticks
3551FCEA 06

Have 6 Deku Mask
3551FCEB 06

Have 6 Goron Mask
3551FCEC 06

Have 6 Zora Mask
35515FCED 06

Have 6 Mask of Truth
35515FCEE 06

Have 6 Majora's Mask
35515FCEF 06

Have 6 Giant Summons
3551FCF0 06
Have 6 Compasses and Bombs
3551FCD4 0606

Have 6 Song Of Time, Inverted Song of Time, Deku Sticks and Deku Masks
3551FCE8 06060606

Have 6 Goron Masks, Zora Masks, Mask of Truth and Majora's Mask
3551FCEC 06060606

It seems if you put a value higher than 6 it just reduces it to 5 after you use one anyway. Also, I found locations to open up specific tiles but I can't quite understand how it works, so I didn't post it.

EDIT: Info correction.

EDIT2: Twilight Map codes are a little weird. Not really sure why they're set the way they are, but oh well. One map left to go!

EDIT3: All done. I don't know what the last item is called in Termina, so I just called it a Giant Summon, since that's what it says it does. Hope these help someone other than myself out! Have fun.
 
Last edited by Deathwing Zero,

FunThomas

Well-Known Member
Member
Joined
Jan 10, 2016
Messages
652
Trophies
0
XP
2,016
Country
Gambia, The
does someone have some hints on using tcpgecko with loadiine ?

i'm using https://gbatemp.net/threads/release-loadiinev4-pygecko.408902/

but all the games crashes at a very early stage of examination or directly at the beginning
mario kart 8 after every course
new luigi after some seconds

would be good if there are some hints for me

can someone pls give me a hint how to start searching in mk8 (dont know which version it is) the items i get or for speed ?
 
Last edited by FunThomas,

FunThomas

Well-Known Member
Member
Joined
Jan 10, 2016
Messages
652
Trophies
0
XP
2,016
Country
Gambia, The
so i hope somone answers my next question :)

i tried to find a cheat for yoshis woolly world eu disc and found a adress to change the hearts
then i wrote down the adress i found and made a dump from 10000000 to 48000000

then i searched that same item in other levels an did the same process so now i have 4 adresses and 4 Dumps -> the dumps named like the adresses i found :)

I tried with pointer searcher 2.0 :

loaded the dump and inserted the adress i found for this dump, activated pointer to pointer search and then started pointer search,
but after analysing the first file i tried the same procedure for the second file and it says no pointer found directly after starting to search :(

Then i tried "Wii U Pointer Search.jar" but that doesn't allow me do do search :(
i set the folder for dumps set the other setting like in the tutorial video
and then click read memory dumps -> it reads some seconds and comes back but then the "perform search" button is still grey :(

when i start it from my second pc i get the following error message:

c:\!!\!_ww_dumps2>java -jar Wii_U_Pointer_Search.jar
Missing attributes for JarRsrcLoader in Manifest (Rsrc-Main-Class, Rsrc-Class-Path)
Exception in thread "main" java.lang.NullPointerException
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoader.java:46)

does someone have some hints what is wrong here ?
 
Last edited by FunThomas,

FunThomas

Well-Known Member
Member
Joined
Jan 10, 2016
Messages
652
Trophies
0
XP
2,016
Country
Gambia, The
if someone wants to try the same like me

in Yoshis woolly world eu disc the hearts are at most between 2A000000 and 2AFFFFFF after 3 Searches most times you have the right address

but i cant use the pointersearch with the dumps to find the right pointer :(

would be nice if someone else could try to search for
 

FunThomas

Well-Known Member
Member
Joined
Jan 10, 2016
Messages
652
Trophies
0
XP
2,016
Country
Gambia, The
so i found for New Super Luigi U EU Loadiine version

99 lives (set in the worldview)
364C516F 00000063

99 coins in level
3E7CEFC7 00000063

Highscore in level
3E7CEFCB 05F5E0FF

but for the time i only find
3E88F677
the value its the number displayed in the corner but it cant be modified -> can someone explain how to find what writes at this address ?
 

rendering

Member
Newcomer
Joined
Feb 13, 2016
Messages
11
Trophies
0
XP
84
Country
United States
Bayonetta 2 (test on JPN and USA version)

can't be hit(full invincibility)(will affect Witch Time)
0D5D9AFC 480000DC

press ZR can start Witch Time anytime anywhere
0D5D18D0 3C800000
0D5D18D4 909C0000
0D5D18D8 3C80447A
0D5D18DC 909C0008

must mirror the executable range to virtual memory range at 0xA0000000


an example to use this code with pyGecko-master in 5.3.2
with normal kernel exploit and normal tcpgecko installer

before starting the game

go to browser

edit the tcpgecko.py (change two parts)

def validrange(self, address, length):
if 0x01000000 <= address and address + length <= 0x01800000: return True
elif 0x0E000000 <= address and address + length <= 0x10000000: return True #Depends on game
elif 0x10000000 <= address and address + length <= 0x50000000: return True #Doesn't quite go to 5
elif 0xE0000000 <= address and address + length <= 0xE4000000: return True
elif 0xE8000000 <= address and address + length <= 0xEA000000: return True
elif 0xF4000000 <= address and address + length <= 0xF6000000: return True
elif 0xF6000000 <= address and address + length <= 0xF6800000: return True
elif 0xF8000000 <= address and address + length <= 0xFB000000: return True
elif 0xFB000000 <= address and address + length <= 0xFB800000: return True
elif 0xFFFE0000 <= address and address + length <= 0xFFFFFFFF: return True
else: return True #(<-- change False to True)

def validaccess(self, address, length, access):
if 0x01000000 <= address and address + length <= 0x01800000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0x0E000000 <= address and address + length <= 0x10000000: #Depends on game, may be EG 0x0E3
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0x10000000 <= address and address + length <= 0x50000000:
if access.lower() == "read": return True
if access.lower() == "write": return True
elif 0xE0000000 <= address and address + length <= 0xE4000000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0xE8000000 <= address and address + length <= 0xEA000000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0xF4000000 <= address and address + length <= 0xF6000000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0xF6000000 <= address and address + length <= 0xF6800000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0xF8000000 <= address and address + length <= 0xFB000000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0xFB000000 <= address and address + length <= 0xFB800000:
if access.lower() == "read": return True
if access.lower() == "write": return False
elif 0xFFFE0000 <= address and address + length <= 0xFFFFFFFF:
if access.lower() == "read": return True
if access.lower() == "write": return True
else: return True #(<-- change False to True)

then run Module


tcp=TCPGecko("x.x.x.x") (<-- wiiu IP)

when connected

tcp.writekern(0xFFEAAA5C,0x28305800)

tcp.writekern(0xFFEAAA58,0x80000000)

tcp.s.close()

then end the browser

start the game

then use TCPGeckodNET(A0-Range) or pyGecko-master
to poke address 0xAD5D9AFC value from 408200DC to 480000DC
will ok
 
Last edited by rendering,

Ailuros27

Well-Known Member
Member
Joined
Apr 7, 2015
Messages
732
Trophies
0
XP
421
Country
United States
I could use some help understanding that Bayonetta 2 thing. What file am I editing, exactly? Also, sorry I didn't get around to porting the basic Splatoon codes this time around. I haven't been playing it a lot, and have been busy with work and my newly-downgraded 3DS.
 

rendering

Member
Newcomer
Joined
Feb 13, 2016
Messages
11
Trophies
0
XP
84
Country
United States
If you are using pygecko, you will find tcpgecko.py in the pygecko folder, edit that file will done, but if you are only using TCPGeckodNET, and TCPGeckodNET no writekern function, you need a different tcpgecko installer to map the 0xA0000000 to physical address 0x80000000.
 
Last edited by rendering,

Ailuros27

Well-Known Member
Member
Joined
Apr 7, 2015
Messages
732
Trophies
0
XP
421
Country
United States
So in tcpgecko.py I'm just changing two "false" values to "true"? And in this:
then run Module
tcp=TCPGecko("x.x.x.x") (<-- wiiu IP)
when connected
tcp.writekern(0xFFEAAA5C,0x28305800)
tcp.writekern(0xFFEAAA58,0x80000000)
tcp.s.close()
then end the browser
start the game

So, by run the module, you mean, install tcpgecko via the browser as usual, then input those commands in python on the computer, then close the browser and start the game. After all that, you can use pygecko master to poke the addresses?
 

rendering

Member
Newcomer
Joined
Feb 13, 2016
Messages
11
Trophies
0
XP
84
Country
United States
yes, if you do everything correctly, pygecko or TCPGeckodNET(A0-Range) in the first page both ok, and those codes are for disc version, though I only test them with us and jp version, but there is a possibility that eu version aslo work
 
Last edited by rendering,

Hero Q8

Well-Known Member
Member
Joined
Sep 14, 2009
Messages
126
Trophies
1
Age
40
XP
1,173
need help am on 5.3.2 FW

i just got super smash but it seem it has 5.4.0 update

what i wanna know do pygecko work on 5.4.0 with loadiine ?
 

CosmoCortney

i snack raw pasta and chew lollipops
OP
Member
Joined
Apr 18, 2013
Messages
1,768
Trophies
2
Location
on the cool side of the pillow
Website
follow-the-white-rabbit.wtf
XP
3,017
Country
Germany
Twilight Princess HD (EUR (untested on other regions. but may also work))

Inf. Rupees
10647B4E 07D0

All/Max. hearts
10647B4B 64

Inf. Lantern Oil
10647B52 6000

Inf Slingshot Nuts
10647C3C 63

Have Lantern
10647BE4 48


Have Bottle 1
10647BEF XX

Have Bottle 2
10647BF0 XX

Have Bottle 3
10647BF1 XX

Have Bottle 4
10647BF2 XX

Empty: 60
Red Potion: 61, 69
(Unused) Magic Potion: 62
Blue Potion: 63
Milk x2: 64
Milk x1: 65
Lantern Oil: 66, 68
Water: 67
Nasty Soup: 6A
Hot Spring Water: 6B, 6D
Fairy: 6C
Pseudo Lantern oil: 6E



Have Fishing Rod
10647BF8

Have Sling Shot
10647BFB 4B


Replace grass with cats
0062949C 010EFF00

No Music
10681328 00000000

Day Time modifier
10647B7C
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    BakerMan @ BakerMan: oof