Hacking Post your WiiU cheat codes here!

[TheWord21]

If you look at bullywiiplaza's github, the newest tcpgecko.elf has the codehabdler.bin file built-in, so you no longer need to worry about it.

Wait, I need a "codehabdler.bin" file? Seems I've been using the wrong thing all this time...! (I'm kidding, of course).

 

[SirNapkin1334]

Another kind of "workaround" code which could be enhanced soon but also still works now.

Zelda: Breath of the Wild [EU]

Walk through Walls/Objects [Deathwolf1000]
C0000009 60000000
3D60XXXX 616BXXXX
818B0000 3DA0102F
61AD48AA A1AD0000
2C0D0280 4082000C # Button 1
398C0100 918B0000
2C0D0180 4082000C # Button 2
398CFF00 918B0000
3C40010F 60426AE0
7C4903A6 4E800420

Code includes already a preset:
Press LZ+Dpad-UP = first direction.
Press LZ+Dpad-Down = second (opposite) direction.

Feel free to change buttons by yourself

Spoiler: code in action

Information:
The "character slide/walking directions" triggered by the buttons doesn't mean that looking forward makes the character going/sliding forward! The buttons have always the opposite direction (forward - backward / left - right --> depends on how the character is placed! It can be controlled by walking via joystick and pressing a button at the same time to access all directions precise. In fact it forces the character to go through all things. I recommend using the teleporter code to save your coordinates or moonjump before going through things, you might fall down because of no ground at some points/places.

Requirement is still needed yet to fill out the XXXX values as an address (it's stated above). Same steps like the teleporter code but only need to subtract 0x48 bytes from the found address, that's it.

Hey, I'm really confused on how to obtain the X values. I just want to use it to go through a suspicious, huge stone slab door in Hebra. I swear I saw a fire through the cracks, and I want to see if you can go through it. Can somoene give me a simpler explanation how to use it?

 

[Dekirai]

Made some codes for Mario & Luigi - Partners in Time (EUROPE VERSION)

DELETED.
Addresses are dynamic and I can't find pointers for it.

 

[skoolzout1]

Hey, I'm really confused on how to obtain the X values. I just want to use it to go through a suspicious, huge stone slab door in Hebra. I swear I saw a fire through the cracks, and I want to see if you can go through it. Can somoene give me a simpler explanation how to use it?

yes, dont use it. its long outdated.

Use my noclip 2.0 code found on my pastebin in my signature

 

[SirNapkin1334]

yes, dont use it. its long outdated.

Use my noclip 2.0 code found on my pastebin in my signature

Well, I actually figured out how to solve the puzzle, but it'll be cool to mess around a bit.
Wow, you have a ton of codes! Can't wait to try them out. Do you know where I can find that code that lets people paraglide wherever they want to? And do I have to use infinite stamina, or does it have that built-in? Thanks.

 

[skoolzout1]

Well, I actually figured out how to solve the puzzle, but it'll be cool to mess around a bit.
Wow, you have a ton of codes! Can't wait to try them out. Do you know where I can find that code that lets people paraglide wherever they want to? And do I have to use infinite stamina, or does it have that built-in? Thanks.

I think the code you're thinking of is moon jump, but my noclip code is pretty much an advanced moonjump code. You don't need infinite stamina in order for the codes to stay working, but it's a good thing to have

 

[TheWord21]

Made some codes for Mario & Luigi - Partners in Time (EUROPE VERSION)

DELETED.
Addresses are dynamic and I can't find pointers for it.

Well, that sucks. I think you said you couldn't find any pointers for M&L - SS, either... I can tell you that Explorers of Sky is pretty static in its' stat addresses. I just can't find the offsets that allow you to recruit Pokemon in unrecruitable dungeons. With that Easy Recruit code, you could do exactly that.

 

[SirNapkin1334]

I think the code you're thinking of is moon jump, but my noclip code is pretty much an advanced moonjump code. You don't need infinite stamina in order for the codes to stay working, but it's a good thing to have

Oh, I see, so the moonjump works while you're paragliding. Interesting. How would I make a code? I had a great idea for one that I've never seen before.

 

[skoolzout1]

Oh, I see, so the moonjump works while you're paragliding. Interesting. How would I make a code? I had a great idea for one that I've never seen before.

If i could tell you how to make a code in one message, i would. Im sorry to say you'll have to do some research on your own. Check out some cheat engine tutorials. its an easier place to start than starting on wii u in my opinion. and the skills transfer over.

--------------------- MERGED ---------------------------

@Dekirai Did you try dumping the entire game when searching for pointers? and also of course enabling a super high offset value? Bully said negative offsets arent working, but you should still be able to find something for a simple mario game lol.

 

[Dekirai]

If i could tell you how to make a code in one message, i would. Im sorry to say you'll have to do some research on your own. Check out some cheat engine tutorials. its an easier place to start than starting on wii u in my opinion. and the skills transfer over.

--------------------- MERGED ---------------------------

@Dekirai Did you try dumping the entire game when searching for pointers? and also of course enabling a super high offset value? Bully said negative offsets arent working, but you should still be able to find something for a simple mario game lol.

No, I haven't tried to dump the whole game. But I tried to use a freaking high offset value and it still was 0 founds.
Somehow I can't launch this game anymore. Always getting blackscreen. Lol.

Edit:

@skoolzout1 Well I tried it again with the Pointer Search by dumping the whole data section
I still get 0 results with a maximum offset of 20000
I can't go higher with it, since my PC freezes then. :/

I also noticed that the addresses arent that much dynamic.. you know..

Sometimes the address for coins is 167C71A4 .. then 167C72A4 .. or a complete different one. I only had 3 addresses for now,

Whatever.. A "fix" would be to do savestates after you stop playing the game, to prevent that the memory gets refreshed after a boot up

 

[Ailuros27]

Does anyone have an updated XML of JGecko U codes for the latest version of Hyrule Warriors? For some reason mine doesn't work on the latest version of TCPGecko.elf. I wanted to set up some SD cheats, but none of my codes even work with JGecko U, even though my XML says it was for 1.12.0. I know it worked some months ago, so I'm at a loss as to why it suddenly doesn't work now.

 

[SirNapkin1334]

Does anyone have an updated XML of JGecko U codes for the latest version of Hyrule Warriors? For some reason mine doesn't work on the latest version of TCPGecko.elf. I wanted to set up some SD cheats, but none of my codes even work with JGecko U, even though my XML says it was for 1.12.0. I know it worked some months ago, so I'm at a loss as to why it suddenly doesn't work now.

I don't even know how to setup SD cheats. How do you?

 

[Ailuros27]

I don't even know how to setup SD cheats. How do you?

You connect to the game with JGecko U, then check the codes you want to have active, and then select Export GCTU. That will put a GCTU file in the folder where JGecko U is located. Then move that a folder at the root of your SD card called "codes" I think. Then when you use tcpgecko later, press X to load it with the codehandler and SD cheats option.

 

[SirNapkin1334]

You connect to the game with JGecko U, then check the codes you want to have active, and then select Export GCTU. That will put a GCTU file in the folder where JGecko U is located. Then move that a folder at the root of your SD card called "codes" I think. Then when you use tcpgecko later, press X to load it with the codehandler and SD cheats option.

Ah. I see.

 

[DarkFlare69]

For anyone who wants to do a string write loop in C/ASM, here are some examples I wrote. This is equivalent to the 02 codetype.

Original code:

020200A0 30699564
413E0000 00000004
00000000 00000000

C example of the above code:

#define value 0x413E0000

__attribute__((noinline))
void test()
{
    int address = 0x30699564; // address you're starting at. you can use pointers but make sure the final variable name is address
    for (int i = 0; i < 0xA0; i++) // start of the loop. it'll loop for A0 * 4 bytes.
    {
        *(unsigned int *) address = value;
        address += 4; // this is where the * 4 comes in above. since its a 32 bit write (in this examples case) this will write to every address for 280 bytes.
    }
}

ASM example of the above code:

lis r9, 0x3069
ori r9, r9, 0x9560 // load address into r9
lis r10, 0x413E // load value into r10
li r8, 0xA0
mtctr r8 // load A0 into count register
stwu r10, 4 (r9) // store value 
bdnz+ -4 // repeat and loop

Hopefully this helps some people.

 

[RyDog]

For anyone who wants to do a string write loop in C/ASM, here are some examples I wrote. This is equivalent to the 02 codetype.

Original code:

020200A0 30699564
413E0000 00000004
00000000 00000000

C example of the above code:

#define value 0x413E0000

__attribute__((noinline))
void test()
{
    int address = 0x30699564; // address you're starting at. you can use pointers but make sure the final variable name is address
    for (int i = 0; i < 0xA0; i++) // start of the loop. it'll loop for A0 * 4 bytes.
    {
        *(unsigned int *) address = value;
        address += 4; // this is where the * 4 comes in above. since its a 32 bit write (in this examples case) this will write to every address for 280 bytes.
    }
}

ASM example of the above code:

lis r9, 0x3069
ori r9, r9, 0x9560 // load address into r9
lis r10, 0x413E // load value into r10
li r8, 0xA0
mtctr r8 // load A0 into count register
stwu r10, 4 (r9) // store value
bdnz+ -4 // repeat and loop

Hopefully this helps some people.

Very good !

 

[tastymeatball]

Two codes for Super Mario Maker EU Version 1.46
Moonjump (Press A on Gamepad)
09020000 102EFA64
00008000 00000000
30000000 270A6EC4
10000000 50000000
0012002C 40800000
D0000000 DEADCAFE

Always have Mystery Mushroom Power up
30000000 270A6EC4
10000000 50000000
0012039C 00000007
*Works with every style. You will always be small and can take unlimited hits.

 

[TheWord21]

Since the DS Virtual Console uses 16000000 for its' offset, here's a couple of dumps of Explorers of Sky [NTSC-U]

https://www.mediafire.com/file/n7sg3gq8pmg8xg8/EoS 1.bin
https://www.mediafire.com/file/383z6p7rhd1eedw/EoS 2.bin

Now, in one dump, I'm in a dungeon where you cannot recruit Pokemon and in a dungeon where you can. I'm trying to find the offset that activates that, but am having no luck so far. Can anyone help me out?

 

[DarkFlare69]

Since the DS Virtual Console uses 16000000 for its' offset, here's a couple of dumps of Explorers of Sky [NTSC-U]

https://www.mediafire.com/file/n7sg3gq8pmg8xg8/EoS 1.bin
https://www.mediafire.com/file/383z6p7rhd1eedw/EoS 2.bin

Now, in one dump, I'm in a dungeon where you cannot recruit Pokemon and in a dungeon where you can. I'm trying to find the offset that activates that, but am having no luck so far. Can anyone help me out?

Have you searched for a boolean? 1 when you can and 0 when you can't. it'll definitely take a long time since you only have 2 values you can search for.

 

[TheWord21]

Have you searched for a boolean? 1 when you can and 0 when you can't. it'll definitely take a long time since you only have 2 values you can search for.

That's what I was afraid of... doesn't make it any easier when you don't have a RAM/ROM Map to refer to. I'll have to try that and see if it does anything.