+- Mario Kart Wii Gecko Codes, Cheats, & Hacks (https://mariokartwii.com)
+-- Forum: Cheat Codes (https://mariokartwii.com/forumdisplay.php?fid=51)
+--- Forum: Online Non-Item (https://mariokartwii.com/forumdisplay.php?fid=52)
+--- Thread: Serial Number Spoofer [Vega] (/showthread.php?tid=1016)
Serial Number Spoofer [Vega] - Vega - 01-05-2019
Serial Number Spoofer [Vega]
This code will allow you to spoof both parts of your serial number. Those are the Product Code and the 'SerNo'. The Product Code is the two or three digit letter code that comes right before your 9 digit number 'SerNo' that is on the outside sticker of the Wii. For example, on older American Wiis, this product Code is LU. On newer American Wiis (family model wiis, no GCN ports), the product code is KU. Another example is that some older European Wiis have the product code of LEH.
NOTES (read this if you are intending to use this to bypass a ban):
Nintendo uses a certain order/range when applying serial numbers depending on when the Console was built. You simply can't put any Product Code + SerNo combination/setup you would like. Because if a server mod (who knows these certain orders/ranges like I do) sees an impossible Product Code + SerNo combo, then he/she knows you are using spoofer codes and you will get banned. View the Guide listed below to ensure your spoofed values are a legit 'combination' and within the legit range.
Guide:
List of legit Product Code (GGHHKK) values, then proper SerNo value range accordingly:
4C4546 = LEF (European); Serno must start with the values 3130, or 3230
4C4548 = LEH (European); Serno must start with the values 3130
4C454D = LEM (European); SerNo starting values unknown (maybe someone can get those...)
4C5500 = LU (American); SerNo must start with the value 31, 33, or 35
4B5500 = KU (American); SerNo must start with the values 3130, or 3430
4C4A46 = LJF (Japanese); SerNo must start with the value 3130
4C4A48 = LJH (Japanese); SerNo must start with the values 3132
4C4A4D = LJM (Japanese); SerNo must start with the values 3130
4C4148 = LAH (Australian); SerNo must start with the values 3130, 3131, or 3132
4C5446 = LTF (Taiwanese); SerNo must start with the values 3130, or 3230
4C5448 = LTH (Taiwanese); SerNo starting values unknown (maybe someone can get those...)
4C4B48 = LKH (Korean); SerNo starting values unknown (maybe someone can get those...)
4C4B4D = LKM (Korean; SerNo must start with the values 3130
SerNo (NNPPRRTTUUVVXXYYZZ) Values:
30 = 0
31 = 1
32 = 2
33 = 3
34 = 4
35 = 5
36 = 6
37 = 7
38 = 8
39 = 9
NTSC-U
C21B23E4 00000007
3D80GGHH 618CKK00
91960000 3D80NNPP
618CRRTT 919FFFE0
3D80UUVV 618CXXYY
919FFFE4 398000ZZ
999FFFE8 2C030000
60000000 00000000
PAL
C21B2484 00000007
3D80GGHH 618CKK00
91960000 3D80NNPP
618CRRTT 919FFFE0
3D80UUVV 618CXXYY
919FFFE4 398000ZZ
999FFFE8 2C030000
60000000 00000000
NTSC-J
C21B23A4 00000007
3D80GGHH 618CKK00
91960000 3D80NNPP
618CRRTT 919FFFE0
3D80UUVV 618CXXYY
919FFFE4 398000ZZ
999FFFE8 2C030000
60000000 00000000
NTSC-K
C21B27E0 00000007
3D80GGHH 618CKK00
91960000 3D80NNPP
618CRRTT 919FFFE0
3D80UUVV 618CXXYY
919FFFE4 398000ZZ
999FFFE8 2C030000
60000000 00000000
Source:
#~~~~~~~~~~~~~~~~#
# START ASSEMBLY #
#~~~~~~~~~~~~~~~~#
#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
# Summary: #
# The code's address is the first instruction after the function SCGetProductSN #
# is completed. Thus certain registers hold key memory addresses that we #
# can use to edit the Product Code and SerNo before the Server reads it. #
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
# Register Notes: #
# r31 minus 0x20 = Address that points to Start of SerNo #
# r4 would work too (minus -0xA) however it is part of a #
# loop address depending of the length of the current SerNo #
# in the User's setting.txt. Therefore, if r4 was used, #
# it would fail if the User's original SerNo is not the #
# proper length of 9 digits. #
# r22 holds the Product Code Address #
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
# Set & Store Product Code (LEH used as example) #
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
lis r12, 0x4C45
ori r12, r12, 0x4800
stw r12, 0 (r22)
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
# Set & Store SerNo (123456789 used as example) #
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~#
lis r12, 0x3132
ori r12, r12, 0x3334
stw r12, -0x20 (r31)
lis r12, 0x3536
ori r12, r12, 0x3738
stw r12, -0x1C (r31)
li r12, 0x39
stb r12, -0x18 (r31)
#~~~~~~~~~~~~~~~~~~~~~#
# Default Instruction #
#~~~~~~~~~~~~~~~~~~~~~#
cmpwi r3, 0
#
#~~~~~~~~~~~~~~#
# END ASSEMBLY #
#~~~~~~~~~~~~~~#
Code creator: Vega
Code credits: Megazig (SCGetProductCode; SCGetProductSN)
RE: Serial Number Spoofer - ChrisHansen - 07-13-2019
Where did you get that SerNo values must start with those digits? According to this only "10" may follow the LEH prefix, but my Wii's serial number starts with "LEH15".
RE: Serial Number Spoofer - Vega - 07-14-2019
The values were gathered from data collected from multiple hacking/modding sites in regards to bootmii boot2 compatibility/incompatibility, it's simply impossible to get every Serial Number 'range'. Is your Wii capable of installing Bootmii as Boot2?