Zelda: Breath of the Wild (CEMU)

[Zircon]

when i try to activate a cheat ce just stops responding then after waiting for sometime it's working again but the cheat isn't enabled

Yep, that's a sign that CE can't find the aob pattern specified. I'll write something up and post soon.

Which versions of everything are you using? (OS, CEMU/BOTW version?)

oki thanks !
Os :Windows 7
Cemu 1.8.0b
BOTW :EUR version
save folder name (i think it might be different if it's another version) : dcac9927

How to use this cheat table?

1. Install Cheat Engine
2. Double-click the .CT file in order to open it.
3. Click the PC icon in Cheat Engine in order to select the game process.
4. Keep the list.
5. Activate the trainer options by checking boxes or setting values from 0 to 1

[Postposterous]

Posted a quick and dirty "how to" here: [Link]

[Zircon]

great thanks for your time and the video it's well exlained gonna try that ^^
i just was gonna try but i have "????" in the script is it normal?^^

Spoiler

45 89 b4 35 e0 01 00 00 41 8b 74 2d 0c 0f ce 41 8b bc 35 e4 01 00 00 0f cf 41 8b 54 3d 14 0f ca 41 89 d0 45 8b 4c 2d 00 41 0f c9 b8 ?? ?? ?? 01 89 84 24 bc 02 00 00 89 54 24 04 89 74 24 10 89 7c 24 34 44 89 84 24 c0 02 00 00 44 89 4c 24 14 8b 84 24 c0 02 00 00 c7 84 24 bc 02 00 00 ?? ?? ?? 01 48 89 c2 48 01 c0 4c 01 f8 ff a0 00 00 00 24 8b ac 24 80 00 00 00 83 ac 24 b4 02 00 00 03 41 8b 74 2d 08 0f ce 83 fe 00 0f 9c 84 24 8c 02 00 00 0f 9f 84 24 8d 02 00 00 0f 94 84 24 8e 02 00 00 89 74 24 10 0f 84 97 00 00 00 8b ac 24 80 00 00 00 8b 74 24 10 83 ac 24 b4 02 00 00 08 ba 00 00 00 00 49 89 d6 41 0f ce 45 89 b4 35 e0 01 00 00 41 8b 74 2d 08 0f ce 45 8b 94 35 e4 01 00 00 41 0f ca 47 8b 5c 15 14 41 0f cb 45 89 d8 45 8b 4c 2d 00 41 0f c9 b8 ?? ?? ?? 01 89 84 24 bc 02 00 00 89 54 24 04 89 74 24 10 44 89 84 24 c0 02 00 00 44 89 4c 24 14 44 89 54 24 2c 44 89 5c 24 30 8b 84 24 c0 02 00 00 c7 84 24 bc 02 00 00 ?? ?? ?? 01 48 89 c2 48 01 c0 4c 01 f8 ff a0 00 00 00 24 8b ac 24 80 00 00 00 83 ac 24 b4 02 00 00 03 41 8b 74 2d 10 0f ce 83 fe 00 0f 9c 84 24 8c 02 00 00 0f 9f 84 24 8d 02 00 00 0f 94 84 24 8e 02 00 00 89 74 24 10 0f 84 cb 00 00 00 83 ac 24 b4 02 00 00 01 c7 84 24 bc 02 00 00 ?? ?? ?? 01 b8 ?? ?? ?? 01 48 89 c2 48 01 c0 4c 01 f8 ff a0 00 00 00 24 8b ac 24 80 00 00 00 83 ac 24 b4 02 00 00 04 45 8b 64 2d 00 41 0f cc 49 89 e9 41 83 c1 1c 41 8b 74 2d 10 0f ce 89 74 24 10 44 89 4c 24 14 44 89 64 24 18 c7 84 24 bc 02 00 00 ?? ?? ?? 01 b8 ?? ?? ?? 01 48 89 c2 48 01 c0 4c 01 f8 ff a0 00 00 00 24 8b ac 24 80 00 00 00 83 ac 24 b4 02 00 00 04 45 8b 64 2d 00 41 0f cc 49 89 e9 41 83 c1 14 41 8b 74 2d 10 0f ce 89 74 24 10 44 89 4c 24 14 44 89 64 24 18 c7 84 24 bc 02 00 00 ?? ?? ?? 01 b8 ?? ?? ?? 01 48 89 c2 48 01 c0 4c 01 f8 ff a0 00 00 00 24 8b 5c 24 08 83 ac 24 b4 02 00 00 05 41 8b 54 1d 14 0f ca 41 8b 6c 1d 0c 0f cd 89 d0 83 c3 10 89 84 24 bc 02 00 00 89 54 24 04 89 5c 24 08 89 ac 24 80 00 00 00 8b 84 24 bc 02 00 00 48 89 c2 48 01 c0 4c 01 f8 ff a0 00 00 00 24 00 8b 84 24 80 00 00 00 83 ac 24 b4 02 00 00 06 41 8b 54 05 0c 0f ca 41 8b 9c 15 e4 01 00 00 0f cb 41 8b 6c 1d 14 0f cd 89 ee 41 8b 7c 05 00 0f cf 41 b8 ?? ?? ?? 01 89 54 24 10 89 5c 24 34 89 6c 24 04 89 b4 24 c0 02 00 00 89 7c 24 14 44 89 84 24 bc 02 00 00

do i simply delete them or they are meant to be replaced by ce ?


Edit 2 i tried :
45 89 b4 35 e0 01 00 00 : found nothing
45 89 b4 35 e0 01 : nothing
45 89 b4 35 e0 : 4 results i replaced them by code that does nothing didn't work in game (normal jump) screenshot in spoiler :

Spoiler

[Link]

tried to reduce to :
45 89 b4 35 :481 results lol

[M1CR0H4CK3R]

@Zircon, do you have MEM_PRIVATE enabled in Settings > Scan Settings? Almost all memory allocated by Cemu is marked Private.

Edit: Also, your BOTW must be USA, because my folder is also dcac9927, and I'm using USA version.

[Zircon]

@Zircon, do you have MEM_PRIVATE enabled in Settings > Scan Settings? Almost all memory allocated by Cemu is marked Private.

Edit: Also, your BOTW must be USA, because my folder is also dcac9927, and I'm using USA version.

hiya
yes it is enabled only one which isn't enabled is MEM_MAPPED
my BOTW is EU as you can see on my screenshot on the top of the window ^^

[Postposterous]

great thanks for your time and the video it's well exlained gonna try that ^^
i just was gonna try but i have "????" in the script is it normal?

?? Are used as wild cards in CE. It simply tells CE to accept any character in that slot. I tried this CT on another computer in my house and got results similar to what you're describing. None of my scripts in the cheat table worked. Maybe if I can get it solved there, THAT ct will be compatible for you (and others.). I'll try to find some time soon.

Also started using CE 6.7. I hadn't considered CE version as having an impact, but maybe it does.

[M1CR0H4CK3R]

@Zircon, 'Executable' should be set to 'Don't care' in order to find almost any of these.

Edit: Also, most can be found easier if 'Executable' is unchecked (off). Stamina only returns 1 result with that setting unchecked, for example.

[Zircon]

great thanks for your time and the video it's well exlained gonna try that ^^
i just was gonna try but i have "????" in the script is it normal?

?? Are used as wild cards in CE. It simply tells CE to accept any character in that slot. I tried this CT on another computer in my house and got results similar to what you're describing. None of my scripts in the cheat table worked. Maybe if I can get it solved there, THAT ct will be compatible for you (and others.). I'll try to find some time soon.

Also started using CE 6.7. I hadn't considered CE version as having an impact, but maybe it does.

oki thanks i downloaded CE 6.7 after trying with 6.6 i thought i might have more luck with the newest version ^^

@M1CR0H4CK3R thanks for your help also ^^ i just tried what you said but with executable unchecked i didn't even get a result for 45 89 b4 sadly =s

[M1CR0H4CK3R]

@Zircon, I'm currently using CE 6.5, and all of these work for me. Could you try with 6.5 under the same settings?

Also, Cemu gets the region of the game from the <gamefolder>\meta\meta.xml file (the dcac9927 is the crc32 checksum of a certain hexadecimal region of the U-King.rpx file, so that's why I'm saying that you have the USA version), so it could be that you have a US version with an incorrect meta.xml file. I've only seen one version like that online, though, and it's unlikely that you are using that exact version. Is your game from Wii U USB Helper, MapleSeed2, or is it from a website? You might want to delete your copy of the game and use Wii U USB Helper if you got the game from a website. I had problems with Drivium's CT at first as well because I was using an EU game with a USA 1.1.2 update (for some reason only his stamina cheat worked for me at that time). There is a possibility that your game was mislabeled, and that you're having the exact same issue.

[Zircon]

@Zircon, I'm currently using CE 6.5, and all of these work for me. Could you try with 6.5 under the same settings?

Also, Cemu gets the region of the game from the <gamefolder>\meta\meta.xml file (the dcac9927 is the crc32 checksum of a certain hexadecimal region of the U-King.rpx file, so that's why I'm saying that you have the USA version), so it could be that you have a US version with an incorrect meta.xml file. I've only seen one version like that online, though, and it's unlikely that you are using that exact version. Is your game from Wii U USB Helper, MapleSeed2, or is it from a website? You might want to delete your copy of the game and use Wii U USB Helper if you got the game from a website. I had problems with Drivium's CT at first as well because I was using an EU game with a USA 1.1.2 update (for some reason only his stamina cheat worked for me at that time). There is a possibility that your game was mislabeled, and that you're having the exact same issue.

thanks again
i downloaded my game from wii u usb helper(eu version update and dlc) i just tried with CE 6.5 still nothing works for me not even stamina cheat (same for 6.6 and 6.7) also tried to look for the array of bytes of the mid air jump cheat found the same as with 6.6 and 6.7 (when i "replace with a code that does nothing" it doesn't change anything in game (normal jumps))
here's the xml content if you would like to compare :

xml

<?xml version="1.0" encoding="utf-8"?>
<menu type="complex" access="777">
<version type="unsignedInt" length="4">33</version>
<product_code type="string" length="32">WUP-P-ALZP</product_code>
<content_platform type="string" length="32">WUP</content_platform>
<company_code type="string" length="8">0001</company_code>
<mastering_date type="string" length="32"></mastering_date>
<logo_type type="unsignedInt" length="4">0</logo_type>
<app_launch_type type="hexBinary" length="4">00000000</app_launch_type>
<invisible_flag type="hexBinary" length="4">00000000</invisible_flag>
<no_managed_flag type="hexBinary" length="4">00000000</no_managed_flag>
<no_event_log type="hexBinary" length="4">00000000</no_event_log>
<no_icon_database type="hexBinary" length="4">00000000</no_icon_database>
<launching_flag type="hexBinary" length="4">00000005</launching_flag>
<install_flag type="hexBinary" length="4">00000000</install_flag>
<closing_msg type="unsignedInt" length="4">1</closing_msg>
<title_version type="unsignedInt" length="4">80</title_version>
<title_id type="hexBinary" length="8">00050000101C9500</title_id>
<group_id type="hexBinary" length="4">00001C95</group_id>
<boss_id type="hexBinary" length="8">0000000000000000</boss_id>
<os_version type="hexBinary" length="8">000500101000400A</os_version>
<app_size type="hexBinary" length="8">0000000000000000</app_size>
<common_save_size type="hexBinary" length="8">0000000000000000</common_save_size>
<account_save_size type="hexBinary" length="8">0000000003F00000</account_save_size>
<common_boss_size type="hexBinary" length="8">0000000000000000</common_boss_size>
<account_boss_size type="hexBinary" length="8">0000000000100000</account_boss_size>
<save_no_rollback type="unsignedInt" length="4">0</save_no_rollback>
<join_game_id type="hexBinary" length="4">00000000</join_game_id>
<join_game_mode_mask type="hexBinary" length="8">0000000000000000</join_game_mode_mask>
<bg_daemon_enable type="unsignedInt" length="4">1</bg_daemon_enable>
<olv_accesskey type="unsignedInt" length="4">98307003</olv_accesskey>
<wood_tin type="unsignedInt" length="4">1059213100</wood_tin>
<e_manual type="unsignedInt" length="4">1</e_manual>
<e_manual_version type="unsignedInt" length="4">0</e_manual_version>
<region type="hexBinary" length="4">00000004</region>
<pc_cero type="unsignedInt" length="4">128</pc_cero>
<pc_esrb type="unsignedInt" length="4">128</pc_esrb>
<pc_bbfc type="unsignedInt" length="4">192</pc_bbfc>
<pc_usk type="unsignedInt" length="4">12</pc_usk>
<pc_pegi_gen type="unsignedInt" length="4">12</pc_pegi_gen>
<pc_pegi_fin type="unsignedInt" length="4">192</pc_pegi_fin>
<pc_pegi_prt type="unsignedInt" length="4">12</pc_pegi_prt>
<pc_pegi_bbfc type="unsignedInt" length="4">12</pc_pegi_bbfc>
<pc_cob type="unsignedInt" length="4">13</pc_cob>
<pc_grb type="unsignedInt" length="4">128</pc_grb>
<pc_cgsrr type="unsignedInt" length="4">128</pc_cgsrr>
<pc_oflc type="unsignedInt" length="4">13</pc_oflc>
<pc_reserved0 type="unsignedInt" length="4">192</pc_reserved0>
<pc_reserved1 type="unsignedInt" length="4">192</pc_reserved1>
<pc_reserved2 type="unsignedInt" length="4">192</pc_reserved2>
<pc_reserved3 type="unsignedInt" length="4">192</pc_reserved3>
<ext_dev_nunchaku type="unsignedInt" length="4">0</ext_dev_nunchaku>
<ext_dev_classic type="unsignedInt" length="4">0</ext_dev_classic>
<ext_dev_urcc type="unsignedInt" length="4">0</ext_dev_urcc>
<ext_dev_board type="unsignedInt" length="4">0</ext_dev_board>
<ext_dev_usb_keyboard type="unsignedInt" length="4">0</ext_dev_usb_keyboard>
<ext_dev_etc type="unsignedInt" length="4">0</ext_dev_etc>
<ext_dev_etc_name type="string" length="512"></ext_dev_etc_name>
<eula_version type="unsignedInt" length="4">0</eula_version>
<drc_use type="unsignedInt" length="4">1</drc_use>
<network_use type="unsignedInt" length="4">1</network_use>
<online_account_use type="unsignedInt" length="4">1</online_account_use>
<direct_boot type="unsignedInt" length="4">0</direct_boot>
<reserved_flag0 type="hexBinary" length="4">00010001</reserved_flag0>
<reserved_flag1 type="hexBinary" length="4">00000000</reserved_flag1>
<reserved_flag2 type="hexBinary" length="4">00000000</reserved_flag2>
<reserved_flag3 type="hexBinary" length="4">00000000</reserved_flag3>
<reserved_flag4 type="hexBinary" length="4">00000000</reserved_flag4>
<reserved_flag5 type="hexBinary" length="4">00000000</reserved_flag5>
<reserved_flag6 type="hexBinary" length="4">00000003</reserved_flag6>
<reserved_flag7 type="hexBinary" length="4">00000001</reserved_flag7>
<longname_ja type="string" length="512">ゼルダの伝説
ブレス オブ ザ ワイルド</longname_ja>
<longname_en type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_en>
<longname_fr type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_fr>
<longname_de type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_de>
<longname_it type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_it>
<longname_es type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_es>
<longname_zhs type="string" length="512"></longname_zhs>
<longname_ko type="string" length="512"></longname_ko>
<longname_nl type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_nl>
<longname_pt type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_pt>
<longname_ru type="string" length="512">The Legend of Zelda
Breath of the Wild</longname_ru>
<longname_zht type="string" length="512"></longname_zht>
<shortname_ja type="string" length="256">ブレス オブ ザ ワイルド</shortname_ja>
<shortname_en type="string" length="256">Breath of the Wild</shortname_en>
<shortname_fr type="string" length="256">Breath of the Wild</shortname_fr>
<shortname_de type="string" length="256">Breath of the Wild</shortname_de>
<shortname_it type="string" length="256">Breath of the Wild</shortname_it>
<shortname_es type="string" length="256">Breath of the Wild</shortname_es>
<shortname_zhs type="string" length="256"></shortname_zhs>
<shortname_ko type="string" length="256"></shortname_ko>
<shortname_nl type="string" length="256">Breath of the Wild</shortname_nl>
<shortname_pt type="string" length="256">Breath of the Wild</shortname_pt>
<shortname_ru type="string" length="256">Breath of the Wild</shortname_ru>
<shortname_zht type="string" length="256"></shortname_zht>
<publisher_ja type="string" length="256">Nintendo</publisher_ja>
<publisher_en type="string" length="256">Nintendo</publisher_en>
<publisher_fr type="string" length="256">Nintendo</publisher_fr>
<publisher_de type="string" length="256">Nintendo</publisher_de>
<publisher_it type="string" length="256">Nintendo</publisher_it>
<publisher_es type="string" length="256">Nintendo</publisher_es>
<publisher_zhs type="string" length="256"></publisher_zhs>
<publisher_ko type="string" length="256"></publisher_ko>
<publisher_nl type="string" length="256">Nintendo</publisher_nl>
<publisher_pt type="string" length="256">Nintendo</publisher_pt>
<publisher_ru type="string" length="256">Nintendo</publisher_ru>
<publisher_zht type="string" length="256"></publisher_zht>
<add_on_unique_id0 type="hexBinary" length="4">00001C95</add_on_unique_id0>
<add_on_unique_id1 type="hexBinary" length="4">00000000</add_on_unique_id1>
<add_on_unique_id2 type="hexBinary" length="4">00000000</add_on_unique_id2>
<add_on_unique_id3 type="hexBinary" length="4">00000000</add_on_unique_id3>
<add_on_unique_id4 type="hexBinary" length="4">00000000</add_on_unique_id4>
<add_on_unique_id5 type="hexBinary" length="4">00000000</add_on_unique_id5>
<add_on_unique_id6 type="hexBinary" length="4">00000000</add_on_unique_id6>
<add_on_unique_id7 type="hexBinary" length="4">00000000</add_on_unique_id7>
<add_on_unique_id8 type="hexBinary" length="4">00000000</add_on_unique_id8>
<add_on_unique_id9 type="hexBinary" length="4">00000000</add_on_unique_id9>
<add_on_unique_id10 type="hexBinary" length="4">00000000</add_on_unique_id10>
<add_on_unique_id11 type="hexBinary" length="4">00000000</add_on_unique_id11>
<add_on_unique_id12 type="hexBinary" length="4">00000000</add_on_unique_id12>
<add_on_unique_id13 type="hexBinary" length="4">00000000</add_on_unique_id13>
<add_on_unique_id14 type="hexBinary" length="4">00000000</add_on_unique_id14>
<add_on_unique_id15 type="hexBinary" length="4">00000000</add_on_unique_id15>
<add_on_unique_id16 type="hexBinary" length="4">00000000</add_on_unique_id16>
<add_on_unique_id17 type="hexBinary" length="4">00000000</add_on_unique_id17>
<add_on_unique_id18 type="hexBinary" length="4">00000000</add_on_unique_id18>
<add_on_unique_id19 type="hexBinary" length="4">00000000</add_on_unique_id19>
<add_on_unique_id20 type="hexBinary" length="4">00000000</add_on_unique_id20>
<add_on_unique_id21 type="hexBinary" length="4">00000000</add_on_unique_id21>
<add_on_unique_id22 type="hexBinary" length="4">00000000</add_on_unique_id22>
<add_on_unique_id23 type="hexBinary" length="4">00000000</add_on_unique_id23>
<add_on_unique_id24 type="hexBinary" length="4">00000000</add_on_unique_id24>
<add_on_unique_id25 type="hexBinary" length="4">00000000</add_on_unique_id25>
<add_on_unique_id26 type="hexBinary" length="4">00000000</add_on_unique_id26>
<add_on_unique_id27 type="hexBinary" length="4">00000000</add_on_unique_id27>
<add_on_unique_id28 type="hexBinary" length="4">00000000</add_on_unique_id28>
<add_on_unique_id29 type="hexBinary" length="4">00000000</add_on_unique_id29>
<add_on_unique_id30 type="hexBinary" length="4">00000000</add_on_unique_id30>
<add_on_unique_id31 type="hexBinary" length="4">00000000</add_on_unique_id31>
</menu>

[svetlan]

Hello guys, the table works on 1.8.1 ? thx

[Postposterous]

@Zircon - I posted an alternate cheat table in the OP. It only has a few cheats. Like I mentioned before, I tested my original CT on another PC I have in the house with basically the same specs - same version of everything. Only difference being hardware. Yet, all of the aob's are different and instructions are vastly different. Managed to hack a few of the same cheats. I'd like you to try it to see if these work for you. If they do, I'll continue trying to hack the same cheats as the other CT. Chances are, there'd be more than just you that require the alternate version. It's proven much more challenging to hack cheats for. The instructions don't seem as intuitive to follow as the other. Where the key instruction for my previous cheat is a "MOV" (nopping it achieves the results I want), the new one is an "ADD (nopping it crashing the game)." Anyway, lemme know!

[Postposterous]

Attached a CT with a modified script technique to LUA to allow for smaller AOB's and hopefully increase compatibility. Calling attachment "InDev" until I hear that the cheats are working for people. Tested with BOTW 1.3.0 and CEMU 1.8.1b.

[Postposterous]

Finished adding several new cheats including:
-Instantly restore master sword
-Several speed levels (links walking speed)
-Weapon/Shield swapping (limited, until I learn how to pass the control to the user)
-HIGH durability for all weapons/shields in inventory (+16777215)

Anxious to hear if weapon swapping and durability are working for people.

[Postposterous]

Now that I know how to manipulate inventory, I've been mapping them all out. Starting with Armor. ~200 items just for your legs! lol. This includes all dlc and special items.

Currently trying to educate myself on creating drop down selection in CE.