Mario Kart Wii Gecko Codes, Cheats, & Hacks
Portal

Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  

Search Forums

(Advanced Search)

Forum Statistics
» Members: 410
» Latest member: vabold
» Forum threads: 1,430
» Forum posts: 7,920

Full Statistics

Online Users
There are currently 66 online users.
» 0 Member(s) | 63 Guest(s)
Applebot, Bing, Google

Latest Threads
Make it to 10,000
Forum: General Discussion
Last Post: WhatisLoaf
Yesterday, 09:09 PM
» Replies: 2,450
» Views: 1,595,227
Hybrid Drift [Ismy]
Forum: Offline Non-Item
Last Post: Seeky
01-21-2022, 04:24 PM
» Replies: 1
» Views: 184
Coding Questions and othe...
Forum: Code Support / Help / Requests
Last Post: Vega
01-12-2022, 11:22 PM
» Replies: 94
» Views: 7,784
What got you into Hacking...
Forum: Hacking General Discussion
Last Post: Hackwiz
01-07-2022, 01:14 PM
» Replies: 22
» Views: 21,432
DBZ BT3 Transform to Whoe...
Forum: General Discussion
Last Post: Vega
01-03-2022, 01:52 AM
» Replies: 0
» Views: 172
at what PAL address is th...
Forum: Code Support / Help / Requests
Last Post: Seeky
12-31-2021, 11:20 AM
» Replies: 1
» Views: 149
How did you find this Sit...
Forum: General Discussion
Last Post: Hackwiz
12-30-2021, 12:20 PM
» Replies: 15
» Views: 10,792
How to set a breakpoint o...
Forum: Hacking General Discussion
Last Post: Seeky
12-25-2021, 09:00 PM
» Replies: 1
» Views: 274
Structure and Class Docum...
Forum: Resources and References
Last Post: em_eight
12-24-2021, 07:13 PM
» Replies: 7
» Views: 2,389
Prediction Removal [Stebl...
Forum: Online Non-Item
Last Post: Vega
12-24-2021, 03:20 PM
» Replies: 0
» Views: 252

 
  Hybrid Drift [Ismy]
Posted by: TheIsmy64 - 01-21-2022, 04:21 PM - Forum: Offline Non-Item - Replies (1)

I've been working on this code for a while. Basically, if you select Automatic Drift in the menu, you can both drift automatically and manually during the same race (one excludes the other, you can't do both at the exact same time, though). Whenever the player isn't drifting, the default mode is Automatic Drift, so wheelie nudging is possible without losing speed.

Only known issue is that the camera kinda freaks out when you release a manual drift, but it's not too distracting (on bikes it's worse than on karts).

Showcase on rDKM Time Trials:
https://cdn.discordapp.com/attachments/7...t_Clip.mp4

Shoutouts to CLF78 and stebler for helping me with Ghidra, documentation and with some ASM stuff.

NTSC-U
C2572568 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C2572AA8 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C2577744 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C25777B4 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C25778A4 00000003
540006F7 4082000C
38000000 900301C8
60000000 00000000
C2577B60 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C2577F54 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C25783F4 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C258E284 00000006
807E0004 70630084
4182001C 887E0017
706300EF 987E0017
887E0004 706300EF
987E0004 7FC3F378
60000000 00000000
0058DCEA 00000020
0458E23C 60000000

PAL
C2578dcc 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C257930c 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C257dfa8 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C257e018 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C257e108 00000003
540006F7 4082000C
38000000 900301C8
60000000 00000000
C257e3c4 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C257e7b8 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C257ec58 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C2594aa8 00000006
807E0004 70630084
4182001C 887E0017
706300EF 987E0017
887E0004 706300EF
987E0004 7FC3F378
60000000 00000000
0059450e 00000020
04594a60 60000000

NTSC-J
C257874C 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C2578C8C 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C257D928 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C257D998 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C257DA88 00000003
540006F7 4082000C
38000000 900301C8
60000000 00000000
C257DD44 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C257E138 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C257E5D8 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C2594428 00000006
807E0004 70630084
4182001C 887E0017
706300EF 987E0017
887E0004 706300EF
987E0004 7FC3F378
60000000 00000000
00593E8E 00000020
045943E0 60000000

NTSC-K
C2566E24 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C2567364 00000006
819C0000 818C0000
818C0014 818C0000
818C0004 2C0C0002
4182000C 38000000
48000008 80030014
60000000 00000000
C256C000 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C256C070 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C256C160 00000003
540006F7 4082000C
38000000 900301C8
60000000 00000000
C256C41C 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C256C810 00000004
80030014 540C04A5
4182000C 60000010
90030014 80030004
60000000 00000000
C256CCB0 00000004
80040014 540C04A5
4182000C 60000010
90040014 80040004
60000000 00000000
C2582B00 00000006
807E0004 70630084
4182001C 887E0017
706300EF 987E0017
887E0004 706300EF
987E0004 7FC3F378
60000000 00000000
00582566 00000020
04582AB8 60000000

Code:
################################
# [1] Always check drift input #
################################
# nop @0x80594a60 PAL


#############################
# [2] Manual Drift Enabling #
#############################
# Inject @0x80594aa8 PAL
# PlayerSub1c is in r30

# Load bitfield 0 and check if we're trying to hop/we're manually drifting already
lwz            r3, 0x4(r30)
andi.        r3, r3, 0x84
beq-        end

# If we are, then clear the drift mode bit in bitfield 4
lbz            r3, 0x17(r30)
andi.        r3, r3, 0xEF
stb            r3, 0x17(r30)

# And the automatic drift bit in bitfield 0
lbz            r3, 0x4(r30)
andi.        r3, r3, 0xEF
stb            r3, 0x4(r30)

# Original Instruction
end:
mr            r3, r30


##############################
# [3] Manual Drift Disabling #
##############################
# [3.1, 3.2] #
##############
# Inject @0x8057dfa8, @0x8057e7b8 PAL
# PlayerSub1c is in r3

# Check if we selected Manual Drift on the menu
lwz            r0, 0x14(r3)
rlwinm.        r12, r0, 0, 18, 18
beq            end

# Set the drift mode bit in bitfield 4
ori            r0, r0, 0x10
stw            r0, 0x14(r3)

# Original Instruction
end:
lwz            r0, 0x4(r3)

###################
# [3.3, 3.4, 3.5] #
###################
# Inject @0x8057e018, @0x8057e3c4, @0x8057ec58 PAL
# PlayerSub1c is in r4

# Check if we selected Manual Drift on the menu
lwz            r0, 0x14(r4)
rlwinm.        r12, r0, 0, 18, 18
beq            end

# Set the drift mode bit in bitfield 4
ori            r0, r0, 0x10
stw            r0, 0x14(r4)

# Original Instruction
end:
lwz            r0, 0x4(r4)


########################################
# [4] Do updateManual if outside drift #
########################################
# Inject @0x8057930c, @0x80578dcc PAL
# PlayerSub10 is in r28
# r12 is safe

# Check if we're an inside drifting bike or not
lwz            r12, 0(r28)
lwz            r12, 0(r12)
lwz            r12, 0x14(r12)
lwz            r12, 0(r12)
lwz            r12, 0x4(r12)
cmpwi        r12, 2
beq            end

# If we're not, load a dummy number to skip the next bne
li            r0, 0
b            end2

# Else, do the Original Instruction
end:
lwz            r0, 0x14(r3)
end2:


#########################
# [5] Outside Drift fix #
#########################
# Inject @0x8057e108 PAL
# PlayerSub10 is in r3

# Original Instruction
rlwinm.        r0, r0, 0x0, 0x1b, 0x1b
bne            end

# If we're on manual, fix our angle
li            r0, 0
stw            r0, 0x1C8(r3)

end:


################################################################
# [6] Set unused bit 13 in bitfield 4 for Manual Drift Support #
################################################################
# 00 @0x8059450e PAL 00000020
Print this item

  DBZ BT3 Transform to Whoever & Whenever [Vega]
Posted by: Vega - 01-03-2022, 01:52 AM - Forum: General Discussion - No Replies

Had some issues in the past trying to make this code. The other day I decided to do some more decomp and finally figured out everything I needed to do to make this possible. Shy

This game is a lot of fun!
Print this item

  at what PAL address is this value located?
Posted by: weeg - 12-31-2021, 11:00 AM - Forum: Code Support / Help / Requests - Replies (1)

[Image: JO7sjKY.png]
i tried to find it the 0x808B5FC4 vtable, without success

Print this item

  How to set a breakpoint on a pointer in Dolphin?
Posted by: weeg - 12-25-2021, 08:50 PM - Forum: Hacking General Discussion - Replies (1)

how do i set a breakpoint on a pointer in dolphin?

Print this item

  Prediction Removal [Stebler]
Posted by: Vega - 12-24-2021, 03:20 PM - Forum: Online Non-Item - No Replies

Prediction Removal [Stebler]

NTSC-U
0488D610 3F800000

PAL
04891B28 3F800000

NTSC-J
04891178 3F800000

NTSC-K
0487FF30 3F800000

Code creator: Stebler

Print this item

  Change Min VR/BR Limit [Unnamed]
Posted by: Unnamed - 12-12-2021, 09:46 AM - Forum: Incomplete & Outdated Codes - No Replies

Change Min VR/BR Limit


NTSC-U (untested)
02528E06 0000XXXX
02528E0E 0000XXXX
0261C3DE 0000XXXX
0261C3E6 0000XXXX
02834AAE 0000XXXX
02834AB6 0000XXXX
0283A79E 0000XXXX
0283A7A6 0000XXXX
0261C46E 0000XXXX
0261C476 0000XXXX
02834B1A 0000XXXX
02834B22 0000XXXX
0283A882 0000XXXX
0283A88A 0000XXXX

PAL
0252D27A 0000XXXX
0252D282 0000XXXX
0264F6F2 0000XXXX
0264F6FA 0000XXXX
0285653E 0000XXXX
02856546 0000XXXX
0285C22E 0000XXXX
0285C236 0000XXXX
0264F782 0000XXXX
0264F78A 0000XXXX
028565AA 0000XXXX
028565B2 0000XXXX
0285C312 0000XXXX
0285C31A 0000XXXX

NTSC-J (untested)
0252CBFA 0000XXXX
0252CC02 0000XXXX
0264ED5E 0000XXXX
0264ED66 0000XXXX
02855BAA 0000XXXX
02855BB2 0000XXXX
0285B89A 0000XXXX
0285B8A2 0000XXXX
0264EDEE 0000XXXX
0264EDF6 0000XXXX
02855C16 0000XXXX
02855C1E 0000XXXX
0285B97E 0000XXXX
0285B986 0000XXXX

NTSC-K (untested)
0251B2D2 0000XXXX
0251B2DA 0000XXXX
0263DA0A 0000XXXX
0263DA12 0000XXXX
028448FE 0000XXXX
02844906 0000XXXX
0284A5EE 0000XXXX
0284A5F6 0000XXXX
0263DA9A 0000XXXX
0263DAA2 0000XXXX
0284496A 0000XXXX
02844972 0000XXXX
0284A6D2 0000XXXX
0284A6DA 0000XXXX


XXXX = new minimum VR/BR limit in hex, Example: XXXX = 1388 (5000)

Code Creator: Unnamed

Print this item

  Which Computer Operating System do you use?
Posted by: Vega - 12-06-2021, 01:29 AM - Forum: General Discussion - Replies (6)

Well since I have asked about Browsers, it would make sense to know what Computer OS that you all use. If it's multiple, whats your 'main' OS?

For me, Debian 10. Excellent OS. It just works.

Print this item

  Coding Questions and other Quandaries
Posted by: Hackwiz - 12-05-2021, 11:44 PM - Forum: Code Support / Help / Requests - Replies (94)

Howdy all,

I have encountered something I’ve never seen before while hacking, perhaps you can shed some light as to what is going on.

The game I am hacking is “Anima- Ark of Sinners.” (USA) Wiiware.

Specifically, I am looking for an infinite health code.

The address for the protagonist’s [Celia] health changes every time the game is booted. This can usually be hacked using ASM, but in this case, it appears the address the actual game code itself is stored at, changes as well.

- I started a new game, and when I took control of Celia, with a full health bar, created a save state.

- I found her health address to be at: 91D31454 000000C8

- The return on breakpoint when taking damage: 80E9AA08 stw r3, 0x0014 (r29)

- So I re-wrote the code like this:

80E9AA08  stw r3, 0x0014 (r29)
                li r11, 0xC8
                lis r12, 0x91D3
                stw r11, 0x1454(r12)


Works great until one of four things happen:

1) I deactivate the code and allow Celia to die.

2) Celia falls to her death.

3) A new area of the game is entered.

4) The game is rebooted, and my save state is not used.

In any of these cases, her health address changes, and the address where the store command is changes also.

I have let her die 5 times and ran a BP on all the new health addresses and came up with a new address where the store command is every time e.g.

80E9AA08    stw r3, 0x0014 (r29) r29 = 91D31440
80E##### stw r3, 0x0014 (r29) r29 = 9#######
80E##### stw r3, 0x0014 (r29) r29 = 9#######
80E##### stw r3, 0x0014 (r29) r29 = 9#######
80E##### stw r3, 0x0014 (r29) r29 = 9#######

What gives?????

If anyone wants to check it out, the quick way to her health is a word search on 000000C8

You’ll get 5** returns.

Take a hit from an enemy and do a decreased value search. You’ll end up with 2 or 3 returns.

It’s pretty obvious which one it is.


Looking forward to your insight!


HW

Print this item

  Hello!!!!
Posted by: Hackwiz - 12-05-2021, 01:51 PM - Forum: Introductions - Replies (2)

First off, thanks for all the awesome tutorials/guides Vega. Reading the programming guide could be a bit perplexing, but your examples on how the commands are used made it easy to understand. At the same time, it made it easier to understand the programming guide as well

I would say that in the last year I have went from mid-beginner to mid-intermediate level in hacking skills.

Also, I haven't really done any hacking on MKWii. I mostly hack on games that have no existing codes.

With that in mind, I hope I am welcome to ask questions about hacking, on games I may be currently working on, (I've got a doosey).

If so, where is the appropriate place to ask?

Glad I found this site to feed my addiction lol.

Btw, brilliant registration system!!!!!

Print this item

  Finish Music Modifier [MrBean35000vr]
Posted by: TheNinjaKingOW - 12-03-2021, 01:38 AM - Forum: Visual & Sound Effects - Replies (1)

This code allows the user to change the music that plays when a race ends to any brstm in the game.

NTSC-U
0470a944 386000XX

PAL
047123e8 386000XX

NTSC-J
04711a54 386000XX

NTSC-K
04700790 386000XX

XX = Music ID of BRSTM to be played

Print this item