gamecube cheat creation help

[hawkeyes]

hello everyone.
I am trying to create a cheat code for pokemon colosseum(usa) using the dolphin emulator
I have the code here:

x98 Item Slot 1
00408e53 00000062

(the actual found address is 80408e53)

it works fine in dolphin,but when i copy it to my cheat file for my wii,it just freezes the game.
i am trying to load the code through nintendont using usbloader gx
any help creating a working max bag item code would be greatly appreciated!

[Hackwiz]

I would try a button activated code.

First you need to find the address that a button press is registered at.

I looked in the manual and seen that the Z button is not used.

-Go into the game
-Do not press any buttons.
-Do a 2 byte exact value search for 0000
-Now press and hold Z
-Do a 2 byte exact value search for 0010

-Repeat as needed to get the number or search returns down.

When you see an address that goes back and forth between 0000 and 0010
when you push the Z button, you've found your guy.

Now enter that memory address into this code:

28XXXXXX 00000010
00408E53 00000062
E0000000 00000000

XXXXXX -> button address


Examples:

Let's say the address you found is: 00329CBF

Simply put the 28 in place of the 00 -> 28329CBF

If the address is something like: 01329CBF

Add the 28 to the 01 -> 29329CBF


Give it a try. This way 00408E53 isn't jammed with 00000062 during the boot up process, until you push the Z button when safely in game.

If I can get my Gamecube portion of dolphin to work correctly, I'll take a look.

Let me know what happens.

[hawkeyes]

actualy i find that the address shifts
but there is an out of battle pointer
but it doesnt seem to do anything for me...
maybe you can figure it out

here is the pointer code mentioned above

Base Pointer
48000000 8047ADB8
DE000000 80008180

as for the button activators,those are in the attached txt file as well...

I got it from gc-forever website in the wiird offset table text file,here:

[Hackwiz]

So you tried the code?:


28401C28 00000010
00408E53 00000062
E0000000 00000000

[hawkeyes]

Yeah i have...I have even tried that code with the pointer
but I recently found that the address shifts upon each reboot of the game,so a simple button activator isn’t gonna cut it...
and the pointer doesn’t help either...

[Hackwiz]

Dynamic Memory Addressing. I've been befuddled by this few times. Don't think I'll be able to help you.

[hawkeyes]

Ok thanks for your time either way

[Hackwiz]

I was messing around with this last night. It seems to me the only way to change the quantity in the slots, is to change the code as the game is transferring the game save info into it's (Dynamic) memory address. The next thing you or I could try, is to create a save state right before the game save transfer, find the address slot 1 is at, load the save state, and run a break-point on that address. This is based on the assumption that enough of the game's code has loaded that it has already been determined what offsets will be used in address location of Slot 1 etc...
Incidentally, once you find the address for the Qty. in slot 1, and open that memory region, you can manipulate the item contained in the slot and Qty.

[Hackwiz]

I may have found a way, and then some.

x98 Item Slot 1
00408e53 00000062

(the actual found address is 80408e53)

Yes the address changes with every boot up.
I found the items list started at 0x8046E58C in my save state.

Save state is the key.

If you have a save state already that your:

x98 Item Slot 1
00408e53 00000062

(the actual found address is 80408e53)

is valid in, your half way home.

If not, you'll have to hack the starting address of the item list during your current game and create a save state.

In your code (00408e53 00000062), you are writing to the byte that holds the items quantity.

The byte that holds the item itself, is just two bytes before it.

So to change the current item and quantity, you would write the whole word with item and quantity.
The items and quantities are consecutive in addresses.

04408E50 00160063 (99 Super Potion)
04408E54 000D0063 (99 Potion)
04408E58 000E0063 (99 Antidote)
04408E5C 000F0063 (99 Burn Heal)
04408E60 00100063 (99 Ice Heal)
04408E64 00120063 (99 Paralyze Heal)
04408E68 00110063 (99 Awakening)
04408E6C 00170063 (99 Full Heal)

I found 257 different items, so the word being written can range from 0x00010063 -> 0x01020063

Let me know if you have a save state with an address for slot #1 quantity.
If not, find it.

Just do a word search on a known item value from above, and the quantity you have (I'm sure its not 99),
and you should be able to locate quickly the block your items are stored at.

Using the slot #1 address as the starting point, I was able to use this code and give myself every item (the 257 I found. there may be more???),
with a quantity of 99.

0646E58C 00000408 #Your address will be different; enter yours here 06###### 00000408. ###### must start on the byte preceding the item value for slot #1.
00010063 00020063
00030063 00040063
00050063 00060063
00070063 00080063
00090063 000A0063
000B0063 000C0063
000D0063 000E0063
000F0063 00100063
00110063 00120063
00130063 00140063
00150063 00160063
00170063 00180063
00190063 001A0063
001B0063 001C0063
001D0063 001E0063
001F0063 00200063
00210063 00220063
00230063 00240063
00250063 00260063
00270063 00280063
00290063 002A0063
002B0063 002C0063
002D0063 002E0063
002F0063 00300063
00310063 00320063
00330063 00340063
00350063 00360063
00370063 00380063
00390063 003A0063
003B0063 003C0063
003D0063 003E0063
003F0063 00400063
00410063 00420063
00430063 00440063
00450063 00460063
00470063 00480063
00490063 004A0063
004B0063 004C0063
004D0063 004E0063
004F0063 00500063
00510063 00520063
00530063 00540063
00550063 00560063
00570063 00580063
00590063 005A0063
005B0063 005C0063
005D0063 005E0063
005F0063 00600063
00610063 00620063
00630063 00640063
00650063 00660063
00670063 00680063
00690063 006A0063
006B0063 006C0063
006D0063 006E0063
006F0063 00700063
00710063 00720063
00730063 00740063
00750063 00760063
00770063 00780063
00790063 007A0063
007B0063 007C0063
007D0063 007E0063
007F0063 00800063
00810063 00820063
00830063 00840063
00850063 00860063
00870063 00880063
00890063 008A0063
008B0063 008C0063
008D0063 008E0063
008F0063 00900063
00910063 00920063
00930063 00940063
00950063 00960063
00970063 00980063
00990063 009A0063
009B0063 009C0063
009D0063 009E0063
009F0063 00A00063
00A10063 00A20063
00A30063 00A40063
00A50063 00A60063
00A70063 00A80063
00A90063 00AA0063
00AB0063 00AC0063
00AD0063 00AE0063
00AF0063 00B00063
00B10063 00B20063
00B30063 00B40063
00B50063 00B60063
00B70063 00B80063
00B90063 00BA0063
00BB0063 00BC0063
00BD0063 00BE0063
00BF0063 00C00063
00C10063 00C20063
00C30063 00C40063
00C50063 00C60063
00C70063 00C80063
00C90063 00CA0063
00CB0063 00CC0063
00CD0063 00CE0063
00CF0063 00D00063
00D10063 00D20063
00D30063 00D40063
00D50063 00D60063
00D70063 00D80063
00D90063 00DA0063
00DB0063 00DC0063
00DD0063 00DE0063
00DF0063 00E00063
00E10063 00E20063
00E30063 00E40063
00E50063 00E60063
00E70063 00E80063
00E90063 00EA0063
00EB0063 00EC0063
00ED0063 00EE0063
00EF0063 00F00063
00F10063 00F20063
00F30063 00F40063
00F50063 00F60063
00F70063 00F80063
00F90063 00FA0063
00FB0063 00FC0063
00FD0063 00FE0063
00FF0063 01010063
01020063 00000000
E0000000 80008000

You have to boot the game up with the code deactivated in Dolphin code manager or it will crash.
Once you are in to your game and have control of your character, quickly activate/deactivate the code (no longer than 1 second, about the time it takes to click/un-click),
or the game will come to a screeching halt.

At this point, you should be able to save your game (game save, not save state), and then transfer your game save to the SD card in the Wii.

Here's a video on how to do that:

https://www.youtube.com/watch?v=l2iPz5ScmOU

Going to try this with my Wii tonight.