Hacking #FEGecko: Trainer GUI for Tokyo Mirage Sessions #FE

xamphear

Member
Newcomer
Joined
Dec 16, 2005
Messages
21
Trophies
1
Website
Visit site
XP
561
Country
United States
It should be:

Skill Book & Clap Track
49aef50c 00630063

Treasure Key
49aef530 00630000

Prestige Star 1
49aef98e 0063

Prestige Star 2&3
49aef990 00630063

Prestige Star 4&5
49aef994 00630063

Prestige Star 6
49aef998 00630000

Master Seal
49aef964 00630000

The third one you tried should've worked. I'm not sure why it wouldn't have.
Maybe I screwed something up. I'll boot it up fresh and try that address/value pair and see what happens and update this post in a few minutes.

Edit: Got it working. I was trying it via the "Custom Codes" tab and that was failing across the board. I pasted those entries into the codes text file and instead of trying to give myself 99 (the item caps out at 40) with 00630000 i went with 40, 00280000 and that worked! Thanks for your help.

Edit 2: Anyone got an address for Tome?
 
Last edited by xamphear,

askara

Well-Known Member
Member
Joined
Feb 12, 2013
Messages
238
Trophies
1
XP
935
Country
stupid question but i cant connect with TCPgecko all all but this connect and work fine(thx!). can i use this app on other game(by using global address offset)?
 

FatalRed

Member
Newcomer
Joined
Jul 15, 2016
Messages
19
Trophies
0
Age
43
XP
46
Country
Canada
stupid question but i cant connect with TCPgecko all all but this connect and work fine(thx!). can i use this app on other game(by using global address offset)?
Yes, if you know what range to scan. It doesn't process large ranges as well as TCPgecko, so you have to be pretty close. I just tried scanning and was successful in entering custom codes for Hyrule Warriors with SFEgecko.
 

firetoan

Member
Newcomer
Joined
Jul 31, 2016
Messages
11
Trophies
0
XP
104
Country
United States
Maybe I screwed something up. I'll boot it up fresh and try that address/value pair and see what happens and update this post in a few minutes.

Edit: Got it working. I was trying it via the "Custom Codes" tab and that was failing across the board. I pasted those entries into the codes text file and instead of trying to give myself 99 (the item caps out at 40) with 00630000 i went with 40, 00280000 and that worked! Thanks for your help.

Edit 2: Anyone got an address for Tome?
Ask and ye shall receive.

#FEGecko Offset: 49AEF50A.

I've also made JGecko codes based off of these codes, I've found (almost) every material so you can make every carnage immediately. Also, I've done prestige codes, incense codes, and others. There are individual materiel codes as well as a master that gives you 80 of every material for carnages. I also did a code for 10 master seals.

Side note, I never want to do this again.

PS if you want to port these to #FEGecko, just subtract the offset. 2841140. I think I've finally contributed to the hacking world, haha.

EDIT: I've added them as a spoiler, as well as found war testaments. (49AEF99C) #FEGecko offset.

Have 10 Master Seals
00010000 4C330AA4
0000000A 00000000

War Testaments (10)
00010000 4C330ADC
0000000A 00000000

Treasure Keys (5)
00010000 4C330670
00000005 00000000

Have 10 Tomes/Skill Books/Clap Tracks
00010000 4C33064a
0000000A 00000000
00010000 4C33064C
0000000A 00000000
00010000 4C33064e
0000000A 00000000

Max Yen
00020000 4C3305A8
05F5E0FF 00000000

Have 80 Melmarks
00020000 4C330DAC
00000050 00000000

Have 80 of all Prestige
00010000 4C330ACE
00000050 00000000
00010000 4C330AD0
00000050 00000000
00010000 4C330AD2
00000050 00000000
00010000 4C330AD4
00000050 00000000
00010000 4C330AD6
00000050 00000000
00010000 4C330AD8
00000050 00000000

Have all Incense (10)
00010000 4C33062C
0000000A 00000000
00010000 4C33062E
0000000A 00000000
00010000 4C330630
0000000A 00000000
00010000 4C330632
0000000A 00000000
00010000 4C330634
0000000A 00000000
00010000 4C330636
0000000A 00000000
00010000 4C330638
0000000A 00000000

All Enemy Forces (80)
00010000 4C3307AE
00000050 00000000
00010000 4C3307B0
00000050 00000000
00010000 4C3307B2
00000050 00000000
00010000 4C3307B4
00000050 00000000
00010000 4C3307B6
00000050 00000000
00010000 4C3307B8
00000050 00000000
00010000 4C3307BA
00000050 00000000
00010000 4C3307BC
00000050 00000000
00010000 4C3307BE
00000050 00000000
00010000 4C3307C0
00000050 00000000
00010000 4C3307C2
00000050 00000000
00010000 4C3307C4
00000050 00000000
00010000 4C3307C6
00000050 00000000
00010000 4C3307C8
00000050 00000000
00010000 4C3307CA
00000050 00000000
00010000 4C3307CC
00000050 00000000
00010000 4C3307CE
00000050 00000000
00010000 4C3307D0
00000050 00000000
00010000 4C3307D4
00000050 00000000
00010000 4C3307D6
00000050 00000000
00010000 4C3307D8
00000050 00000000
00010000 4C3307DA
00000050 00000000
00010000 4C3307DC
00000050 00000000
00010000 4C3307DE
00000050 00000000
00010000 4C3307E0
00000050 00000000
00010000 4C3307E2
00000050 00000000
00010000 4C3307E4
00000050 00000000
00010000 4C3307E6
00000050 00000000
00010000 4C3307E8
00000050 00000000
00010000 4C3307EC
00000050 00000000
00010000 4C3307FE
00000050 00000000
00010000 4C330800
00000050 00000000
00010000 4C330802
00000050 00000000
00010000 4C330806
00000050 00000000
00010000 4C330808
00000050 00000000
00010000 4C33080A
00000050 00000000
00010000 4C33080E
00000050 00000000
00010000 4C330810
00000050 00000000
00010000 4C330812
00000050 00000000
00010000 4C330816
00000050 00000000
00010000 4C330818
00000050 00000000
00010000 4C33081A
00000050 00000000
00010000 4C33081E
00000050 00000000
00010000 4C330820
00000050 00000000
00010000 4C330822
00000050 00000000
00010000 4C330826
00000050 00000000
00010000 4C330828
00000050 00000000
00010000 4C33082A
00000050 00000000
00010000 4C33082E
00000050 00000000
00010000 4C330830
00000050 00000000
00010000 4C330832
00000050 00000000
00010000 4C330836
00000050 00000000
00010000 4C330838
00000050 00000000
00010000 4C33083A
00000050 00000000
00010000 4C33083E
00000050 00000000
00010000 4C330840
00000050 00000000
00010000 4C330842
00000050 00000000
00010000 4C330846
00000050 00000000
00010000 4C330848
00000050 00000000
00010000 4C33084A
00000050 00000000

All Enemy Items (80)
00010000 4C3308EE
00000050 00000000
00010000 4C3308f2
00000050 00000000
00010000 4C3308f6
00000050 00000000
00010000 4C3308fe
00000050 00000000
00010000 4C330902
00000050 00000000
00010000 4C330906
00000050 00000000
00010000 4C33090a
00000050 00000000
00010000 4C33090e
00000050 00000000
00010000 4C330912
00000050 00000000
00010000 4C330916
00000050 00000000
00010000 4C33091E
00000050 00000000
00010000 4C330922
00000050 00000000
00010000 4C330926
00000050 00000000
00010000 4C33092A
00000050 00000000
00010000 4C33092E
00000050 00000000
00010000 4C330932
00000050 00000000
00010000 4C33093A
00000050 00000000
00010000 4C33093E
00000050 00000000
00010000 4C330942
00000050 00000000
00010000 4C330946
00000050 00000000
00010000 4C33094A
00000050 00000000
00010000 4C33094E
00000050 00000000
00010000 4C330952
00000050 00000000
00010000 4C330956
00000050 00000000
00010000 4C33095A
00000050 00000000
00010000 4C33095E
00000050 00000000
00010000 4C330962
00000050 00000000
00010000 4C33096A
00000050 00000000
00010000 4C33098E
00000050 00000000
00010000 4C330992
00000050 00000000
00010000 4C330996
00000050 00000000
00010000 4C33099E
00000050 00000000
00010000 4C3309A2
00000050 00000000
00010000 4C3309A6
00000050 00000000
00010000 4C3309AE
00000050 00000000
00010000 4C3309B2
00000050 00000000
00010000 4C3309B6
00000050 00000000
00010000 4C3309BE
00000050 00000000
00010000 4C3309C2
00000050 00000000
00010000 4C3309C6
00000050 00000000
00010000 4C3309CE
00000050 00000000
00010000 4C3309D2
00000050 00000000
00010000 4C3309D6
00000050 00000000
00010000 4C3309DE
00000050 00000000
00010000 4C3309E2
00000050 00000000
00010000 4C3309E6
00000050 00000000
00010000 4C3309EE
00000050 00000000
00010000 4C3309F2
00000050 00000000
00010000 4C3309F6
00000050 00000000
00010000 4C3309FE
00000050 00000000
00010000 4C330A02
00000050 00000000
00010000 4C330A06
00000050 00000000
00010000 4C330A0E
00000050 00000000
00010000 4C330A12
00000050 00000000
00010000 4C330A16
00000050 00000000
00010000 4C330A1E
00000050 00000000
00010000 4C330A22
00000050 00000000
00010000 4C330A26
00000050 00000000
 
Last edited by firetoan,

Madikan

Well-Known Member
Newcomer
Joined
Aug 3, 2014
Messages
66
Trophies
0
XP
2,235
Country
Belgium
I just read through this entire topic just trying to figure out how all of this works, it's a lot harder than XCX...

EDIT : And I finally found my correct offset (which is +0x2840000) but the problem is that I can only edit one or two values, and sometimes none...
It worked with my money value and first EXP value but it didn't work after those two. I just get a "timed out" error (i.e. READ Itsuki HP [3] failed: timed out). Even if I try to fetch or edit the value of one of the two that worked before, I get a timed out error.

When I try to disconnect and reconnect it doesn't want to connect to my Wii U's IP anymore (timed out error again).
I usually have to wait for a couple minutes before trying again and for whatever reason it works then...

Has it something to do with my wifi settings or firewall ?
 
Last edited by Madikan,

Insidious611

Well-Known Member
Member
Joined
Oct 23, 2010
Messages
167
Trophies
1
XP
343
Country
United States
Just wanted to confirm that +0x2840000 (integer 42205184) works fine for me.

I'm running
WiiU 5.5.1 (unspoofed)
Loadiine GX2 0.3
Tokyo Mirage Sessions #FE US, Restoration Patch Applied


This may or may not be useful (I think it may just be a TCPGecko issue, potentially something to do with it erroneously keeping a session open) but if I let my computer go into standby while SFEGecko is open, when I return from standby I get the "remote session forcibly closed" error, and then if I quit SFEGecko and start it up again, I can connect but whenever I try to read/poke a value it times out. Seemingly the only way to fix this is to restart the game.
 
Last edited by Insidious611,
  • Like
Reactions: jublix and Trine

FASILT

Member
Newcomer
Joined
Sep 9, 2016
Messages
9
Trophies
0
Age
27
XP
48
Country
United States
First time trying this sort of thing but I really can't get it to work. I guess I can't seem to find the right offset value for my setup(5.5.1 JP Wii U running JP disk version). Trying to look for the offset value with the amount of yen always returns an error(ie it won't even search for anything) and none of the preset values seem to work. Is there an easier way to find the offset value? I do have homebrew set up.

EDIT: Gonna specify the errors and I get

Trying to search for my yen value from 0x4E000000 and 0x4EFFFFFF returns the "Specified upper bound (0x4EFFFFFF) must be within 4-multiple of orig. code address" error

Trying to search 0x4C200000 to 0x4C400000 or 0x4C000000 to 0x4D000000 returns "Scan range (2097156 bytes) will take too long for pyGecko; specify smaller address range or use Gecko.NET instead"

I had gotten it to search for something before but it ended up returning some 130 possibles and I forgot what I was searching and what the range was(the offset I tried didn't work anyway).

And I'm not even sure if I'm using it right, since I've tried some codes for things I do have(like detritus) and I'll put in the code under custom code and the program will say POKE and the hex value but nothing changes on my actual game, no matter what I try(enter battle/leave, save game and load, talk to Tiki)

So I'd really like some help, I'm fairly certain it's just the offset isn't right.

Edit 2: I tried using TCPGecko to search for it but trying the ranges that said would take too long previously returned no results and the first range crashed the game, so now I'm really lost.

Here's a memory dump of my game, don't know if that'll help but thought I'd include it. Not sure if I did it in the right range, I just use the defaults it had.

http://www23.zippyshare.com/v/2CtmWmXY/file.html
 
Last edited by FASILT,

Plaidray

Well-Known Member
Newcomer
Joined
Oct 25, 2016
Messages
71
Trophies
0
Age
34
XP
335
Country
Gambia, The
Hi i am new here i would like to know is there any way to mod the save data for Pal version :)
Also i have the Disc version and no homebrew on my Wii U would like to have a starter new game plus save data for Lunatic mode :)
 

Plaidray

Well-Known Member
Newcomer
Joined
Oct 25, 2016
Messages
71
Trophies
0
Age
34
XP
335
Country
Gambia, The
Anyone can i use on pal disc version of the game ??
I dont have homebrew on my Wii U i would just like to have a save on Lunatic mode like new game plus only without levels but all itmes skills and weapons -__-
 
Last edited by Plaidray,

Safo

Well-Known Member
Newcomer
Joined
Feb 2, 2016
Messages
69
Trophies
0
Age
33
XP
108
Country
Canada
So after some developments, I dumped my TMS#FE NA disc, changed it to loadiine format, patched it with restoration patch, packed it into WUPinstaller format, and installed it to my Wii U home menu.

Now how do I get this to work with that version of the game? I can't find any workable offsets.
 

mangotowel

Well-Known Member
Newcomer
Joined
Jun 3, 2016
Messages
63
Trophies
0
Age
30
XP
356
Country
United States
Has anyone managed to get this to work without un-patching the game in 5.5.1

If you're using the +0x2840000 offset (which i think is what works for the restoration patch) then from the codes that have been posted just use an online hex calculator and subtract 1140 (also hex) from it, the resulting code will be usable now for your offset. Example : Skillbook and ClapTrack code = 4C33064C - 1140 = 4C32F50C <--This is your new Code. You then just put the number you want after that so it becomes 4C32F50C 00630063 for 99 of both skillbooks and claptracks.

Heres the unity materials after subtracting 1140 from them all. These are from the codes posted on page 3 from Bino420 and FatalRed, i just adjusted them to work for me.


4C32F66C 00000063
4C32F670 00630063
4C32F674 00630063
4C32F678 00630063
4C32F67C 00630063
4C32F680 00630063
4C32F684 00630063
4C32F688 00630063
4C32F68C 00630063
4C32F690 00630063
4C32F694 00630063
4C32F698 00630063
4C32F69C 00630063
4C32F6A0 00630063
4C32F6A4 00630063
4C32F6A8 00630000
4C32F6AC 00630000
4C32F6Be 00000063
4C32F6C0 00630063
4C32F6C6 00000063
4C32F6C8 00630063
4C32F6CC 00000063
4C32F6D0 00630063
4C32F6D4 00000063
4C32F6D8 00630063
4C32F6DC 00000063
4C32F6E0 00630063
4C32F6E4 00000063
4C32F6E8 00630063
4C32F6EC 00000063
4C32F6F0 00630063
4C32F6F4 00000063
4C32F6F8 00630063
4C32F6FC 00000063
4C32F700 00630063
4C32F706 00000063
4C32F708 00630063
4C32F7AC 00000063
4C32F7B0 00000063
4C32F7B4 00000063
4C32F7B8 00000063
4C32F7BC 00000063
4C32F7C0 00000063
4C32F7C4 00000063
4C32F7C8 00000063
4C32F7CC 00000063
4C32F7D0 00000063
4C32F7D4 00000063
4C32F7DC 00000063
4C32F7E0 00000063
4C32F7E4 00000063
4C32F7E8 00000063
4C32F7EC 00000063
4C32F7F0 00000063
4C32F7F8 00000063
4C32F7FC 00000063
4C32F800 00000063
4C32F804 00000063
4C32F808 00000063
4C32F80C 00000063
4C32F810 00000063
4C32F814 00000063
4C32F818 00000063
4C32F81C 00000063
4C32F820 00000063
4C32F828 00000063
4C32F84C 00000063
4C32F850 00000063
4C32F854 00000063
4C32F85C 00000063
4C32F860 00000063
4C32F864 00000063
4C32F86C 00000063
4C32F870 00000063
4C32F874 00000063
4C32F87C 00000063
4C32F880 00000063
4C32F884 00000063
4C32F88C 00000063
4C32F890 00000063
4C32F894 00000063
4C32F89C 00000063
4C32F8A0 00000063
4C32F8A4 00000063
4C32F8AC 00000063
4C32F8B0 00000063
4C32F8B4 00000063
4C32F8BC 00000063
4C32F8C0 00000063
4C32F8C4 00000063
4C32F8CC 00000063
4C32F8D0 00000063
4C32F8D4 00000063
4C32F8DC 00000063
4C32F8E0 00000063
4C32F8E4 00630063
 
Last edited by mangotowel,

Korados

Well-Known Member
Member
Joined
Sep 12, 2009
Messages
329
Trophies
1
Location
Hamburg
XP
999
Country
Germany
I have a question: Are you planning to include more features, like setting the Carnage Inheritance to Max
or including the missing Performas? Furthermore, when you create the Performas with the trainer, you can't use them if
you haven't collected them for real at least once. Is there a way to change this?
 

SoulEater98

Well-Known Member
Newcomer
Joined
Nov 6, 2010
Messages
68
Trophies
1
XP
658
Country
United States
I'm trying to use the yen codes but nothing happens when I use it. Which offset should I use for the codes to work? I tried this (42209600 (+0x2841140: Loadiine GX2 0.3 / 5.5.X US)) but nothing happens I have the patched version installed on USB. Currently using haxchi/mocha cfw. System version is 5.5.1


Edit: Never mind, I found the offset I needed from page 5, thanks!
 
Last edited by SoulEater98,

Wei_Yu

New Member
Newbie
Joined
Oct 7, 2017
Messages
2
Trophies
0
Age
59
XP
45
Country
United States
Ah that's right, I added that check. Okay, first try these ranges:
US/EU: 0x49AE0000 to 0x49B00000
JP: 0x4C200000 to 0x4C400000

If those don't work, try the following (wider) ranges:

US/EU: 0x49000000 to 0x4A000000
JP: 0x4C000000 to 0x4D000000

I am on USA Haxchi 5.5.2. Loadiine is not supported yet so I WUP Installed a patched EUR version of the game. Finding the offset is like impossible. The offset is probably huge but I can only search a very small range due the restriction. Can it be relaxed? I do not care if I have to wait 30 minutes for a search, if I can actually it instead of having 0 candidates 100 times
 

Beyondlsd

Active Member
Newcomer
Joined
Sep 16, 2013
Messages
37
Trophies
0
Age
43
XP
320
Country
United States
having a similar issue to others. i joined the modded Wii U game late.

i have a 5.5.2 running Haxchi
installed TCPGecko from the homebrew launcher apps screen
i converted my Disc US version to be restoration patched and then installed via WUP.

can't seem to find the right offset to help with codes or finding the right Yen value.

is this thread too far gone?

thanks
 

rbsk

Well-Known Member
Newcomer
Joined
May 10, 2016
Messages
64
Trophies
0
Age
39
XP
96
Country
United States
Just download something like jGeckoU and start searching from 0x40000000 to 0x4D000000 at 0x1000000 increments for your yen value. It might take you 5-10 minutes total to do so - but you will find the code and can use that to calculate the offset.
(note: be sure to search for the value in base 16 and not base 10 - e.g. the starting amount of yen is 5000, so 0x1388 [without the 0x] is your search value at that point)
 

cheeser101

New Member
Newbie
Joined
Feb 4, 2018
Messages
2
Trophies
0
Age
34
XP
58
Country
United States
Just download something like jGeckoU and start searching from 0x40000000 to 0x4D000000 at 0x1000000 increments for your yen value. It might take you 5-10 minutes total to do so - but you will find the code and can use that to calculate the offset.
(note: be sure to search for the value in base 16 and not base 10 - e.g. the starting amount of yen is 5000, so 0x1388 [without the 0x] is your search value at that point)
What do you mean by base 16? I'm on 5.5.2 unpatched US WUP installer and I find lots of values. Poking any values with JGecko U doesn't ever seem to do anything. I'm at a total loss and My save got corrupted a while back. I was hoping I could use #FEGecko to try and get back to my spot. (Speaking of which, if anyone has a save file in chapter 3 they are willing to share from SaveMii, HMU)
 
  • Like
Reactions: Beyondlsd

Beyondlsd

Active Member
Newcomer
Joined
Sep 16, 2013
Messages
37
Trophies
0
Age
43
XP
320
Country
United States
What do you mean by base 16? I'm on 5.5.2 unpatched US WUP installer and I find lots of values. Poking any values with JGecko U doesn't ever seem to do anything. I'm at a total loss and My save got corrupted a while back. I was hoping I could use #FEGecko to try and get back to my spot. (Speaking of which, if anyone has a save file in chapter 3 they are willing to share from SaveMii, HMU)

I am currently in chapter 3, and will send over. Should note I bought the DLC, so if you don't have it, I am not sure the save will load. Will hopefully get a chance to boot up the wiiu tomorrow.
 

Beyondlsd

Active Member
Newcomer
Joined
Sep 16, 2013
Messages
37
Trophies
0
Age
43
XP
320
Country
United States
I am currently in chapter 3, and will send over. Should note I bought the DLC, so if you don't have it, I am not sure the save will load. Will hopefully get a chance to boot up the wiiu tomorrow.

save file in chapter 3 playing on easy. used SaveMii Mod (compatible with Haxchi 5.5.2) should also note i converted my disc to an app and then patched it and running the uncensored game.
 

Attachments

  • 00050000101ed800.7z
    10.5 KB · Views: 194
Last edited by Beyondlsd,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Materia_tofu @ Materia_tofu:
    im not a very bright individual, but we live and we learn
  • SylverReZ @ SylverReZ:
    @Materia_tofu, We do learn a lot from plenty of talented individuals.
  • Materia_tofu @ Materia_tofu:
    this is true! i learned how to make soundfont remixes from a friend back in 2021
    +1
  • BakerMan @ BakerMan:
    Update on my brother: He's home now, tired and hungry, obviously, but other than that, seems to be doing fine.
    +2
  • Veho @ Veho:
    That's a relief to hear. Do you know what happened?
  • SylverReZ @ SylverReZ:
    @BakerMan, Any idea what happened? I hope that your brother's doing good.
  • BakerMan @ BakerMan:
    Well, from what I've heard from my parents, he had a seizure last night, perhaps an epileptic episode, fucking died, had a near death experience, my dad called the paramedics, they showed up, took him to the hospital, and he woke up covered in tubes, and started complaining.
  • BakerMan @ BakerMan:
    He couldn't eat until after his MRI, when he had a bomb pop.
  • BakerMan @ BakerMan:
    What matters now is that he's doing alright.
  • Veho @ Veho:
    But you still don't know what it was?
  • Veho @ Veho:
    Has he had seizures before?
  • The Real Jdbye @ The Real Jdbye:
    apparently stress can cause seizures, my brother had one during a test once
  • The Real Jdbye @ The Real Jdbye:
    never had one before that, and never had one since
  • Redleviboy123 @ Redleviboy123:
    Question about game texture chanching Do i need an own game id?
  • The Real Jdbye @ The Real Jdbye:
    @Veho for those that want to
    experience being sonic the hedgehog
  • Veho @ Veho:
    Ah, you mean
    furries.
  • The Real Jdbye @ The Real Jdbye:
    well, sonic fans are a whole separate thing from furries
  • The Real Jdbye @ The Real Jdbye:
    like bronys
  • The Real Jdbye @ The Real Jdbye:
    sonic porn is too weird even for me
  • Dumpflam @ Dumpflam:
    bruh
  • Dumpflam @ Dumpflam:
    guys how do i delete a post
  • The Real Jdbye @ The Real Jdbye:
    you don't
  • The Real Jdbye @ The Real Jdbye:
    you can report it and request deletion
    The Real Jdbye @ The Real Jdbye: you can report it and request deletion