Hacking Injecting into Wii VC on Wii U

Alex-NK

Member
Newcomer
Joined
Sep 14, 2009
Messages
23
Trophies
1
XP
295
Country
I tried to merge nfs files. And this is results:
1.PNG 2.PNG 3.PNG
 

asper

Well-Known Member
Member
Joined
May 14, 2010
Messages
942
Trophies
1
XP
2,030
Country
United States
My very small findings on the subject that I will call "EGGS Header" (1st 0x200 bytes of the \content\hif_000000.NFS file):
QdqXTuU.png


0x0000: 45 47 47 53 (EGGS in ASCII) = "Magic Bytes" (always the same)
0x0004: 00 01 10 11 = ???? (always the same)
0x0008: 69 6D FB EC 89 30 2B A3 = ???? (always change; some kind of hash/check?)
0x0010: 00 00 00 09 = "Section" Value (it tells how many 8bytes-"sections" are after that - look at orange boxes, each box identifies 1 section)
0x0014: 00 00 00 00 00 00 00 01 = 1st section (seems to be always the same)
0x001C: 00 00 00 08 00 00 00 02 = 2nd section (seems to be always the same)
0x0024: 00 00 1F 00 00 00 1F 58 = 3rd section (00 00 1F 00 seems to be always the same, the other 4 bytes seem to always change)
etc.
- From 4th section and above values seem to always change.
- Lower section number found until now is 3 (9 game schecked).
- Higher section number found is 9.
- Section numbers seems not to be related to the number of the .NFS files contained in the \content folder.
- After the last section all is filled with FFFF until 0x1FB).
- Green-rounded values seems to be always incrementing reading them from the lower to the higher section number.
0x01FC: 53 47 47 45 (SGGE = EGGS reverted - always the same)

There seems to be no bytes related to game region in that header.

\code\rvlt.tik seems to contain a key (starting at offset 0x1BF, surely it is an AES encrypted key), maybe used to decrypt data starting at 0x200 of the .NFS files, but this must be verified).
 
Last edited by asper,

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,214
Trophies
2
XP
34,229
Country
Mexico
Resident Evil 4 doesn't use this feature sadly but Xenoblade definitely does and I think Pandora's Tower does too.
Yeah you are right, I assumed that since re4 for Wii had CCP support they would have added that in too, seems like they didn't.
So, it seems only Xenoblade has Gamepad support at the moment.
 
  • Like
Reactions: zeldaism

C0mm4nd_

Aspirant Wii U homebrew dev :P
Member
Joined
Oct 9, 2016
Messages
697
Trophies
0
Website
127.0.0.1
XP
540
Country
Italy
My very small findings on the subject that I will call "EGGS Header" (1st 0x200 bytes of the \content\hif_000000.NFS file):
QdqXTuU.png


0x0000: 45 47 47 53 (EGGS in ASCII) = "Magic Bytes" (always the same)
0x0004: 00 01 10 11 = ???? (always the same)
0x0008: 69 6D FB EC 89 30 2B A3 = ???? (always change; some kind of hash/check?)
0x0010: 00 00 00 09 = "Section" Value (it tells how many 8bytes-"sections" are after that - look at orange boxes, each box identifies 1 section)
0x0014: 00 00 00 00 00 00 00 01 = 1st section (seems to be always the same)
0x001C: 00 00 00 08 00 00 00 02 = 2nd section (seems to be always the same)
0x0024: 00 00 1F 00 00 00 1F 58 = 3rd section (00 00 1F 00 seems to be always the same, the other 4 bytes seem to always change)
etc.
- From 4th section and above values seem to always change.
- Lower section number found until now is 3 (9 game schecked).
- Higher section number found is 9.
- Section numbers seems not to be related to the number of the .NFS files contained in the \content folder.
- After the last section all is filled with FFFF until 0x1FB).
- Green-rounded values seems to be always incrementing reading them from the lower to the higher section number.
0x01FC: 53 47 47 45 (SGGE = EGGS reverted - always the same)

There seems to be no bytes related to game region in that header.

\code\rvlt.tik seems to contain a key (starting at offset 0x1BF, surely it is an AES encrypted key), maybe used to decrypt data starting at 0x200 of the .NFS files, but this must be verified).
So there's an header from 0x0000 to 0x01F0 (256 byte)
 
Last edited by C0mm4nd_,

Zonse

Member
Newcomer
Joined
Oct 21, 2016
Messages
21
Trophies
0
Age
32
XP
51
Country
Canada
Yeah you are right, I assumed that since re4 for Wii had CCP support they would have added that in too, seems like they didn't.
So, it seems only Xenoblade has Gamepad support at the moment.

From what I read somewhere on the internet a while back, RE4 has a strange way of detecting the CCP, and Nintendo simply didn't bother to fix it for the VC release. I found a decent list of games that support the gamepad here: http://www.neogaf.com/forum/showthread.php?t=1180109

Donkey Kong Country Returns - NO
Kirby's Epic Yarn - NO
Kirby's Return to Dream Land - NO
Mario Sports Mix - YES
Metroid Prime: Trilogy - NO
Muramasa: The Demon Blade- YES
New Super Mario Bros. Wii - NO
Pandora's Tower - YES
PokéPark Wii: Pikachu's Adventure - NO
Punch-Out!! - NO
Resident Evil 4: Wii Edition - NO (despite having CC support)
Sin & Punishment: Star Successor - YES
Super Mario Galaxy - NO
Super Mario Galaxy 2 - NO
Trauma Team - NO
Xenoblade Chronicles - YES
Zack & Wiki: Quest for Barbaros' Treasure - NO
Zangeki no Reginleiv - YES
 

Farael

Member
Newcomer
Joined
Jan 27, 2015
Messages
24
Trophies
0
Age
29
Location
Várzea Paulista
XP
104
Country
Brazil
I'm curious. If I get the NFS files from New Super Mario Bros Wii and inject into another game like Super Mario Galaxy 2, will it work? Did anyone try this yet?
 

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,214
Trophies
2
XP
34,229
Country
Mexico
I'm curious. If I get the NFS files from New Super Mario Bros Wii and inject into another game like Super Mario Galaxy 2, will it work? Did anyone try this yet?
Try it out :P
Although I suggest trying using Xenoblade as the base, and try to put other games into it to see if "somehow" the games are now playable through Gamepad instead of forced Wiimote.
New Super Mario Bros Wii into Xenoblade is a good contender to test this, since I remember that game having CCP support too.
 

Farael

Member
Newcomer
Joined
Jan 27, 2015
Messages
24
Trophies
0
Age
29
Location
Várzea Paulista
XP
104
Country
Brazil
And how do you get NFS files?

NSMBWii is also on the eShop, I would just use that.


Try it out :P
Although I suggest trying using Xenoblade as the base, and try to put other games into it to see if "somehow" the games are now playable through Gamepad instead of forced Wiimote.
New Super Mario Bros Wii into Xenoblade is a good contender to test this, since I remember that game having CCP support too.

Isn't the fw.img that "tells" the vWii when to boot with gamepad enabled? I think I'll try changing NSMBWii fw.img with the Xenoblade fw.img first, because it's less work.
 

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,214
Trophies
2
XP
34,229
Country
Mexico
NSMBWii is also on the eShop, I would just use that.




Isn't the fw.img that "tells" the vWii when to boot with gamepad enabled? I think I'll try changing NSMBWii fw.img with the Xenoblade fw.img first, because it's less work.
Thhat might work too, let us know how it goes.
 

Farael

Member
Newcomer
Joined
Jan 27, 2015
Messages
24
Trophies
0
Age
29
Location
Várzea Paulista
XP
104
Country
Brazil
Just tried it. Unfortunately it doesn't work, still tells me to use the Wii Remote to pick where I want the game image to show, and in-game it still says "Wii software can't be controlled by the Wii U GamePad"

*sigh*
 
  • Like
Reactions: zeldaism

ShadowOne333

QVID PRO QVO
Editorial Team
Joined
Jan 17, 2013
Messages
12,214
Trophies
2
XP
34,229
Country
Mexico
Just tried it. Unfortunately it doesn't work, still tells me to use the Wii Remote to pick where I want the game image to show, and in-game it still says "Wii software can't be controlled by the Wii U GamePad"

*sigh*
So it's not the fw.img then, what other files vary between the two which is not the fw.img?
What about the frisbiiU.rpx?
 
  • Like
Reactions: zeldaism

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • BigOnYa @ BigOnYa:
    What a weird game
  • K3Nv2 @ K3Nv2:
    Yeah I wanted to see shards of the titanic
  • BigOnYa @ BigOnYa:
    I kept thinking jaws was gonna come up and attack
  • K3Nv2 @ K3Nv2:
    Jaws is on a diet
  • K3Nv2 @ K3Nv2:
    Damn power went out
  • BigOnYa @ BigOnYa:
    Ok xdqwerty, your little bro prob tripped On the cord and unplugged you
  • K3Nv2 @ K3Nv2:
    Ya I'm afraid of the dark hug me
  • BigOnYa @ BigOnYa:
    Grab and hold close your AncientBoi doll.
  • K3Nv2 @ K3Nv2:
    Damn didn't charge my external battery either
  • BigOnYa @ BigOnYa:
    Take the batteries out of your SuperStabber3000... Or is it gas powered?
  • K3Nv2 @ K3Nv2:
    I stole batteries from your black mamba
    +1
  • K3Nv2 @ K3Nv2:
    My frozen food better hold up for an hour I know that
  • BigOnYa @ BigOnYa:
    Or else gonna be a big lunch and dinner tomorrow.
  • BigOnYa @ BigOnYa:
    Did you pay your power bill? Or give all yo money to my wife, again.
  • K3Nv2 @ K3Nv2:
    Oh good the estimated time is the same exact time they just said
    +1
  • BigOnYa @ BigOnYa:
    Load up your pc and monitor, and head to a McDonalds dining room, they have free WiFi
  • K3Nv2 @ K3Nv2:
    Sir please watch your porn in the bathroom
    +2
  • BigOnYa @ BigOnYa:
    No sir we can not sell you anymore apple pies, after what you did with the last one.
  • K3Nv2 @ K3Nv2:
    We ran out
  • HiradeGirl @ HiradeGirl:
    for your life
    +1
  • K3Nv2 @ K3Nv2:
    My life has no value my fat ass is staying right here
    K3Nv2 @ K3Nv2: https://youtube.com/shorts/2n3nUOadWxM?si=7QMANPmqPdFcdlfm