Hacking XCXGecko: Xenoblade Chronicles X trainer GUI using pyGecko

[Gadorach]

I was thinking that we either keep but comment them out, or simply ignore them. BTW in auto-incr mode, if you leave the new text field empty and press Enter, it will skip to next ID.

Well, for materials, I'm thinking that the byte length is too short, as beyond a few of these coming up, the vast majority come up as "ITM_MTR_TEST_caption", as can be seen here:

#Materials



68 D7 ITM_MTR_TEST_caption

68 01 ITM_MTR_TEST_caption

68 02 ITM_MTR_MECH_02_Name

68 03 Golden Fir Tree

68 04 Golden Medal

68 05 Golden Chalice

68 06 Gold Ingot

68 07 Golden Cedar

68 08 ITM_MTR025401_02_Nam

68 09 ITM_MTR025401_03_Nam

68 0A ITM_MTR061001_07_Name

68 0B ITM_MTR061001_08_Name

68 0C ITM_MTR061001_09_Name

68 0D ITM_MTR061201_01_Name

68 0E ITM_MTR061201_02_Name

68 0F ITM_MTR061201_03_Name

68 10 ITM_MTR061201_04_Name

68 11 ITM_MTR061201_05_Name

68 12 ITM_MTR061201_06_Name

68 13 ITM_MTR_TEST_caption

68 14 ITM_MTR_TEST_caption

68 15 ITM_MTR_TEST_caption

68 16 ITM_MTR_TEST_caption

68 17 ITM_MTR_TEST_caption

68 18 ITM_MTR_TEST_caption

68 19 ITM_MTR_TEST_caption

68 1A ITM_MTR_TEST_caption

68 1B ITM_MTR_TEST_caption

68 1C ITM_MTR_TEST_caption

68 1D ITM_MTR_TEST_caption

68 1E ITM_MTR_TEST_caption

68 1F ITM_MTR_TEST_caption

68 20 ITM_MTR_TEST_caption

68 21 ITM_MTR_TEST_caption

68 22 ITM_MTR_TEST_caption

68 23 ITM_MTR_TEST_caption

68 24 ITM_MTR_TEST_caption

68 25 ITM_MTR_TEST_caption

68 26 ITM_MTR_TEST_caption

68 27 ITM_MTR_TEST_caption

68 28 ITM_MTR_TEST_caption

68 29 ITM_MTR_TEST_caption

68 2A ITM_MTR_TEST_caption

68 2B ITM_MTR_TEST_caption

68 2C ITM_MTR_TEST_caption

68 2D ITM_MTR_TEST_caption

68 2E ITM_MTR_TEST_caption

68 2F ITM_MTR_TEST_caption

68 30 ITM_MTR_TEST_caption

68 31 ITM_MTR_TEST_caption

68 32 ITM_MTR_TEST_caption

68 33 ITM_MTR_TEST_caption

68 34 ITM_MTR_TEST_caption

68 35 ITM_MTR_TEST_caption

68 36 ITM_MTR_TEST_caption

68 37 ITM_MTR_TEST_caption

68 38 ITM_MTR_TEST_caption

68 39 ITM_MTR_TEST_caption

68 3A ITM_MTR_TEST_caption

68 3B ITM_MTR_TEST_caption

I jumped around a bit too and all I found were a bunch of those test objects with the same name.

 

[MiMiCAX]

Well, for materials, I'm thinking that the byte length is too short, as beyond a few of these coming up, the vast majority come up as "ITM_MTR_TEST_caption", as can be seen here:

#Materials



68 D7 ITM_MTR_TEST_caption

68 01 ITM_MTR_TEST_caption

68 02 ITM_MTR_MECH_02_Name

68 03 Golden Fir Tree

68 04 Golden Medal

68 05 Golden Chalice

68 06 Gold Ingot

68 07 Golden Cedar

68 08 ITM_MTR025401_02_Nam

68 09 ITM_MTR025401_03_Nam

68 0A ITM_MTR061001_07_Name

68 0B ITM_MTR061001_08_Name

68 0C ITM_MTR061001_09_Name

68 0D ITM_MTR061201_01_Name

68 0E ITM_MTR061201_02_Name

68 0F ITM_MTR061201_03_Name

68 10 ITM_MTR061201_04_Name

68 11 ITM_MTR061201_05_Name

68 12 ITM_MTR061201_06_Name

68 13 ITM_MTR_TEST_caption

68 14 ITM_MTR_TEST_caption

68 15 ITM_MTR_TEST_caption

68 16 ITM_MTR_TEST_caption

68 17 ITM_MTR_TEST_caption

68 18 ITM_MTR_TEST_caption

68 19 ITM_MTR_TEST_caption

68 1A ITM_MTR_TEST_caption

68 1B ITM_MTR_TEST_caption

68 1C ITM_MTR_TEST_caption

68 1D ITM_MTR_TEST_caption

68 1E ITM_MTR_TEST_caption

68 1F ITM_MTR_TEST_caption

68 20 ITM_MTR_TEST_caption

68 21 ITM_MTR_TEST_caption

68 22 ITM_MTR_TEST_caption

68 23 ITM_MTR_TEST_caption

68 24 ITM_MTR_TEST_caption

68 25 ITM_MTR_TEST_caption

68 26 ITM_MTR_TEST_caption

68 27 ITM_MTR_TEST_caption

68 28 ITM_MTR_TEST_caption

68 29 ITM_MTR_TEST_caption

68 2A ITM_MTR_TEST_caption

68 2B ITM_MTR_TEST_caption

68 2C ITM_MTR_TEST_caption

68 2D ITM_MTR_TEST_caption

68 2E ITM_MTR_TEST_caption

68 2F ITM_MTR_TEST_caption

68 30 ITM_MTR_TEST_caption

68 31 ITM_MTR_TEST_caption

68 32 ITM_MTR_TEST_caption

68 33 ITM_MTR_TEST_caption

68 34 ITM_MTR_TEST_caption

68 35 ITM_MTR_TEST_caption

68 36 ITM_MTR_TEST_caption

68 37 ITM_MTR_TEST_caption

68 38 ITM_MTR_TEST_caption

68 39 ITM_MTR_TEST_caption

68 3A ITM_MTR_TEST_caption

68 3B ITM_MTR_TEST_caption

I jumped around a bit too and all I found were a bunch of those test objects with the same name.

I just confirmed that item ID fills up (at least) 10 bytes, although when I poked a high ID, XCX crashed back to the title screen. I'll modify XCXGecko to match, but be wary of these crashes

Also, can you run XCXGecko in Python, or do I have to release another binary?

 

[Gadorach]

I just confirmed that item ID fills up (at least) 10 bytes, although when I poked a high ID, XCX crashed back to the title screen. I'll modify XCXGecko to match, but be wary of these crashes

Also, can you run XCXGecko in Python, or do I have to release another binary?

I'm pretty sure it's just the materials, and probably the weapons/armor, that have the giant data table. I've been finding pretty much all the important items so far just fine as-is. For the binary vs. python, though I CAN use the python code directly, you know the binary is much easier to work with as well as I do haha.
By the way, have you looked into the Art Slot ID's yet?


EDIT: SHIT JUST GOT REAL

74 D7 Sword of Legendaryness

Well, here's how far I got before my console crashed anyway. I'm tired from a 10h shift, so I'm going to sleep, enjoy.

#Important Items

74 01 Conner's Comm Device
74 02 Windshield Glass
74 03 Bobby's Watch
74 04 Gnarlbranch Sap
74 05 Legen-dar
74 06 Smelly Legen-dar
74 07 Slice of Bread
74 08 Deep Blue Gem
74 09 Large Stuffed Lobster
74 0A Stuffed Lobster
74 0B Meal Ticket
74 0C Suid Bones
74 0D Ma-non Hunting Kit
74 0E Bronze Blatta Card
74 0F Bronze Cinicula Card
74 10 Bronze Petramand Card
74 11 Silver Simius Card
74 12 Silver Evello Card
74 13 Silver Xiphias Card
74 14 Silver Mortifole Card
74 15 Silver Nopopotomus Card
74 17 Natural Pearl
74 20 White Gold Ore
74 21 Briggs's Key
74 22 Fosdyke's Key
74 23 Moorehouse's Key
74 27 Quegga's Note
74 2A Keycard
74 2B ID Card
74 2C ID Card
74 2D ID Card
74 2F Ajoa's ID card
74 33 Ice Cream Cake
74 34 Malyteth's Bottle
74 37 Nopon Contract
74 39 Nopon Gemstone
74 3D Vi Sezha's Bracelet
74 3E Ge Jewhe's Dagger
74 41 Ringstone
74 44 Zazazon's Package
74 45 Hazardous Container
74 46 Hazardous Fuel Cell
74 47 Nio's IOU
74 48 Sapphire Ring
74 52 Lumenoa Leaf
74 53 Gorkwa
74 54 Run'tonam's Right Arm
74 57 Traylan's Gorkwa
74 5A White Whale Parts
74 5E Ian's ID Card
74 5F Nalu's Present
74 60 Dadapon's Sunglasses
74 61 Dodonga Treaty
74 62 Dorian Treaty
74 63 Wrathian Part
74 64 Med Kit
74 65 Internment Camp Key
74 67 Skell License
74 6B White Whale Parts
74 6C L-002 Power Cable
74 6D Skell License Certificate
74 72 Tissue Sample
74 73 Mia's Comm Device
74 74 Phosphorus-Tree Seed
74 75 Container Key
74 79 Grenade Pizza
74 7A Frozen Pizza
74 7B Ajiba's Key
74 7C Mujiba's Key
74 7D Dancer's Clothes
74 7E Crimson Tear
74 87 New Weapon Blueprint
74 89 Summoning Goggles
74 8A Senirapa Water
74 8C Zirtodiamond
74 8D Golbogga's Disk
74 8F Tykki Sap
74 91 Gray Keycard
74 92 Rectangular Chest
74 99 Kula's Cargo
74 9B Aerozium
74 9C Guardian Etherscale
74 A3 Hilal Stronghold Key
74 A4 Mimeosome Left Arm
74 A5 L-002 Experimental Plant
74 A6 Reverend's Journal
74 A7 Flemtide
74 A8 Floatstone Shard
74 A9 Blood-Soaked Beast Fur
74 AA Law's Pendant
74 AB Three Swords
74 AC Pearl Necklace
74 AD Data Unit FN093
74 AE Repair Kit
74 AF Aganeba Alloy
74 B0 Cockpit Wreckage
74 B1 Engine Wreckage
74 B2 Zu Pharg Wreckage
74 B3 Junk
74 B4 Data Unit FN094
74 B5 Mimeosome Head
74 B6 Mimeosome Torso
74 B7 Mimeosome Left Leg
74 B8 Mimeosome Right Leg
74 B9 First Barrier Key
74 BB Cleansing Moss
74 BC Locket
74 BD Star Sand
74 BE Violet Crystal
74 BF Emerian Relic
74 C0 Missing Drive
74 C1 Broken Data Probe
74 C2 Heart Stone
74 C5 Mount M'gando Stone
74 C6 Jelly Weeds
74 C7 New-Weapon Remains
74 CB Sampling Bottle
74 CC Solar Starship Map
74 CD Hamburger
74 CE Hot Dog
74 CF Data Unit FN095
74 D0 Data Unit FN096
74 D1 Data Unit FN097
74 D2 Practice Data Probe
74 D3 Toxic Chemical Bomb
74 D4 Med Kit
74 D5 Noble Silk
74 D6 Data Unit FN098
74 D7 Sword of Legendaryness
74 D8 Unbreakable Sword
74 D9 Voltant
74 DA Keycard
74 DB Troylan's Gorkwa
74 DC Traditional Orphean Drug
74 DD Weapon Test Data
74 DE Second Barrier Key
74 DF Third Barrier Key
74 E0 Phogrium
74 E1 Massive Ring Fragment
74 E2 Butte Ruin Fragments
74 E3 North Coast Riddle Rock
74 E4 Communication Data
74 E5 Medical Data
74 E6 Gubura Cabbage Leaf
74 E7 Gubura Cabbage Leaf (reading description causes game crash)

 

[MiMiCAX]

I'm pretty sure it's just the materials, and probably the weapons/armor, that have the giant data table. I've been finding pretty much all the important items so far just fine as-is. For the binary vs. python, though I CAN use the python code directly, you know the binary is much easier to work with as well as I do haha.
By the way, have you looked into the Art Slot ID's yet?


EDIT: SHIT JUST GOT REAL

74 D7 Sword of Legendaryness

DOOD SPOILERS I was expecting Muimui's questline to troll me after N hours of carrot-on-the-stick...

Here's the pre-binary release with 10-bit item IDs. Again, be wary of crash-to-title if you poke an illegal item ID.

Characters' set art slots, or at least their displays, appear to be located immediately after each char's rank exp (e.g. for Nagi it's 1C38EC72). The 8 slots each occupy 2 bytes, where the first seems to be the art ID, and the 2nd is the art lvl. I already tried setting the lvl higher, but that doesn't do anything, and resets after changing the art.

 

[Gadorach]

DOOD SPOILERS I was expecting Muimui's questline to troll me after N hours of carrot-on-the-stick...

Here's the pre-binary release with 10-bit item IDs. Again, be wary of crash-to-title if you poke an illegal item ID.

Characters' set art slots, or at least their displays, appear to be located immediately after each char's rank exp (e.g. for Nagi it's 1C38EC72). The 8 slots each occupy 2 bytes, where the first seems to be the art ID, and the 2nd is the art lvl. I already tried setting the lvl higher, but that doesn't do anything, and resets after changing the art.

No need to set the level, just need to change it to a valid one so I CAN change it without causing an illegal exception lmao

 

[MiMiCAX]

No need to set the level, just need to change it to a valid one so I CAN change it without causing an illegal exception lmao

Clearly you can do it manually using Gecko dotNet. Much less usable interface though, lol.

 

[Gadorach]

Clearly you can do it manually using Gecko dotNet. Much less usable interface though, lol.

Pretty much, but it would be neat to be able to force-set whatever skills you want to your slots, regardless of your current class. Also, giving all my companions a healing art would probably keep me from dying against bosses as much lmao

 

[Gadorach]

Well, I have no more time today to work on it, but here's the current list (sans-test items)

Also, this is probably the most useful one here for start-of-game hacks:

#Important Items
74 67 Skell License

 

[Scrire]

Hi guys and merry xmas, sorry but i really don't understand something. When i go to web browser on wiiu and open exploit.wiiubrew ecc. after clicking one of those links and the new page is open, nothing happens after several minutes, what's wrong?

P.S. I haven't done/installed anything on my wiiu before doing this

 

[Gadorach]

Hi guys and merry xmas, sorry but i really don't understand something. When i go to web browser on wiiu and open exploit.wiiubrew ecc. after clicking one of those links and the new page is open, nothing happens after several minutes, what's wrong?

P.S. I haven't done/installed anything on my wiiu before doing this

Well, for one, considering your post count, I'm guessing you haven't checked to see if you're on 5.5.0FW or not yet. This stuff only works on 5.3.2FW and below right now.

 

[Scrire]

Well, for one, considering your post count, I'm guessing you haven't checked to see if you're on 5.5.0FW or not yet. This stuff only works on 5.3.2FW and below right now.

No i have the correct version but nothing happens when i load one of those links, what can i do?

 

[MiMiCAX]

No i have the correct version but nothing happens when i load one of those links, what can i do?

from https://gbatemp.net/threads/the-definitive-guide-to-wii-u-hacking.396828/:

NOTE: If this is the first time you are running the exploit and your game pad freezes and/or random pixels appear on the game pad and TV, this is normal. It is a corrupted crash (called crash 3). This happens to everyone the first time running it. You must turn the Wii U off by holding the power button or unplug it, then try again... and again... and again, until it works. It may work in 1 try, 10 tries, 50 tries, 100 tries, or possibly even more. KEEP TRYING and try the steps below.

Also, see:
https://gbatemp.net/threads/downloa...ly-no-5-4-no-5-5.398623/page-107#post-5831123

Please use one of those posts for non-XCXGecko questions.

 

[Gadorach]

No i have the correct version but nothing happens when i load one of those links, what can i do?

For me, I do this:

1) Open Web Browser -> main page -> settings -> Reset Save Data
2) Restart Wii U
3) Open Web Browser
4) Open three new tabs, 4 in total
5) Set them to Google Image Results
6) Search up four different things, one in each tab (I used cats, dogs, birds, and fish last time)
7) Close the web browser, open it again, close all other tabs if they're still open
8) Go to http://exploit.wiibrew.net in the last remaining tab and then hold the power button on your Wii U pad
9) When Console starts back up, give it about 10s to finish loading everything and then open the web browser again
10) exploit.wiiubrew.net should be loaded instantly, so run the kernel exploit you want (I use the multikernel loader), and hopefully it won't fail the race attack
11) If it failed the race attack, close the auto-launched system settings app, open the web browser, and try again from step 10

 

[ErdeFB]

This tool has been indispensable to me when it comes to crafting. This game is like a Korean MMORPG at times when farming for materials. Thank you for your dedication towards this software.

 

[Ailuros27]

Well, all the codes will probably need to be found again. There's apparently an update to the game.

 

[ErdeFB]

Well, all the codes will probably need to be found again. There's apparently an update to the game.

If this is the case, we can only hope the values have not changed.

 

[Ailuros27]

I don't know man. I've used WUPinstaller to search every dang integer between the last update (32) and 255 and can't find one.

--------------------- MERGED ---------------------------

Never mind.

--------------------- MERGED ---------------------------

I had my hard drive plugged into the wrong system. The Wii is sitting beneath the Wii U, and for some reason I had my Wii U's drive plugged into the Wii.

 

[Drak0rex]

Would it be possible to change Lin's armor models back to the japanese versions?

 

[MiMiCAX]

Would it be possible to change Lin's armor models back to the japanese versions?

Not via a cheat code. Search for the forum posting about Xenoblade Chronicles X UNDUB or UNCENSORED.

--------------------- MERGED ---------------------------

I don't know man. I've used WUPinstaller to search every dang integer between the last update (32) and 255 and can't find one.

--------------------- MERGED ---------------------------

Never mind.

--------------------- MERGED ---------------------------

I had my hard drive plugged into the wrong system. The Wii is sitting beneath the Wii U, and for some reason I had my Wii U's drive plugged into the Wii.

so which is it? Is there an update or not?
Also, the vast majority of codes are based on offsets from a few fixed addresses (e.g. name of main player, name of Nagi, ..., probably those 2 are the main ones). It shouldn't be hard to deduce all the codes again if there really is an update.

 

[Ailuros27]

There is no update yet. I was able to access the game once I plugged the hard drive into the proper system.

--------------------- MERGED ---------------------------

Also, I may have found the key to getting the protagonist mods to stick. I searched for values that matched what my character's were and found a second set of addresses containing an exact duplicate of the info in the ones previously found. They match my character's height and breast measurements exactly, and are close enough I'm pretty sure that this isn't a mere coincidence. I poked them with the values I wanted, along with the addresses Miz Joker discovered and they've all stayed constant at what I poked them to be. Before, when I poked just Miz Joker's addresses, they eventually got reset even while playing the game, and especially when saving or quitting. Now, they seem to be staying constant. I'm going to close the game and load it back up, and see what happens. Wish me luck!

These are the addresses:

Secondary Addresses?
1C38E630 3F73E426
1C38E634 3F8020C4
1C38E638 3F8020C4
1C38E63C 3F8020C4

--------------------- MERGED ---------------------------

Success! I closed the game and reopened it, and when I reconnected, the values in all eight slots were exactly the same as when I left!

--------------------- MERGED ---------------------------

So from now on, try poking pairs of addresses for the protagonist. For example, the first one from Miz Joker's list + the first one from mine, etc. Of course, if those are pointers, then just recreate the process I used by searching for the default float value of "3F8020C4" (1.001) as that's what all the protagonist's breast values are by default in the Western releases. Height is the first value in my list, followed by breast depth, height, and width.