Hacking Wii U Hacking & Homebrew Discussion

[Marionumber1]

After some reverse engineering and me realizing my dumb mistake, NWP and I managed to read the interface descriptors for attached USB devices. I documented what we have so far here. Next will be figuring out the interface descriptor format and moving on to other functions.

 

[TeamScriptKiddies]

Interestingly enough, it's too low for our current browser exploit, unless he decides to port it.

I'm still on 4.1.0U , if you need me to test anything

 

[Crewman]

Can someone tell me how to get the input file needed for the symbole demangler, posted earlier in this thread, out of a rpl file?

 

[naxil]

who in this thread have used the usbgecko modded for wiiu? like marcan do 2year ago?

 

[Marionumber1]

who in this thread have used the usbgecko modded for wiiu? like marcan do 2year ago?

fail0verflow used a USB Gecko with the Wii U for RPC (remote control of the Wii U from a PC) and dumping data. We prefer to use the network to do this, as it's easier and doesn't require special hardware (that's also hard to get).

 

[Deleted User]

Behold, le first custom BFSTM out for public viewing!

https://www.dropbox.com/s/iqi56wfeu8uwohk/kirby.bfstm?dl=0

Of course, there isn't really much use for this until TCPGecko is compatible with recent Wii U firmware, though you can still listen to it by downloading VGMStream, which you can get the BFSTM version here:
https://www.dropbox.com/s/b1un7t47km90p8t/BFSTMvgstreamzip.zip?dl=0

(Also, I'll actually be taking requests for awhile. Probably up until I get the tutorial up and going.
Now, since the BFSTM format is all figured out, I can move on to a different music format. .nus3bank. (Which is the format used for Smash Bros. Wii U & 3DS)
It appears that the .nus3bank is an archive containing the actual music format, which is IDSP, and to me, it looks quite familiar to other formats so this shouldn't be too hard to figure out.

 

[IbbyPlays]

Can someone tell me how to get the input file needed for the symbole demangler, posted earlier in this thread, out of a rpl file?

You can probably get them from the os using NUSPY

 

[Mr. Mysterio]

Behold, le first custom BFSTM out for public viewing!

https://www.dropbox.com/s/iqi56wfeu8uwohk/kirby.bfstm?dl=0

Of course, there isn't really much use for this until TCPGecko is compatible with recent Wii U firmware, though you can still listen to it by downloading VGMStream, which you can get the BFSTM version here:
https://www.dropbox.com/s/b1un7t47km90p8t/BFSTMvgstreamzip.zip?dl=0

(Also, I'll actually be taking requests for awhile. Probably up until I get the tutorial up and going.
Now, since the BFSTM format is all figured out, I can move on to a different music format. .nus3bank. (Which is the format used for Smash Bros. Wii U & 3DS)
It appears that the .nus3bank is an archive containing the actual music format, which is IDSP, and to me, it looks quite familiar to other formats so this shouldn't be too hard to figure out.

Way to go! It works very well on other game's BFSTM files too! I tested it on Mario Kart 8's Grumble Volcano BFSTM and the output WAV was perfect quality!

 

[naxil]

Question.. While on a hacked kernel and stuff... would it still be possible for hacked console to update to newer released firmware

Like spoof it like wii did same with xbox 360 jtag... spoof to latest dash with xebuild without losing exploit or bricking system?

with 360 u make a complete new nand image with original fw data patched for rgh or jtag. every time microsoft make new fw , dev update xebuild for giveto us the rgh update and flash it to nand. here is a exploit and i think it not need nand modification like xbox. probably in future wiiu dev permitt wiiu os mod ( like ciosu or. browser downgrade) and we can flash/mod wiiu nand via homebrew... if i say something wrong please correct me

 

[NWPlayer123]

The nice thing is that Nintendo made a clean seperation line between OS and data. All OS-related code is stored in the Wii U NAND bank, while all data and applications are on the eMMC. Assuming patching NAND calls is done correctly, there should be next to no harm done with an emuNAND. Nintendo themselves can't even tell, unless they specifically put in code to try to see if NAND calls are patched, which I doubt they'll do. Of course this'll still require an IOSU exploit, but we're getting there

 

[naxil]

The nice thing is that Nintendo made a clean seperation line between OS and data. All OS-related code is stored in the Wii U NAND bank, while all data and applications are on the eMMC. Assuming patching NAND calls is done correctly, there should be next to no harm done with an emuNAND. Nintendo themselves can't even tell, unless they specifically put in code to try to see if NAND calls are patched, which I doubt they'll do. Of course this'll still require an IOSU exploit, but we're getting there

rgh and raceattack use the reset on 360 i think is used for disable some protection and the co.nsole accept fw patch and a very little nand data mod (xell is a piece of art for my opinion but unfortunately libxenon isnt used like microsoft xdk ). wiiu can have something like xell in future? or like devkitpro? i remember lot of chatting around hack wiiumodeq after d1 and i remember some TRUSTED dev tellme about libogc modification (idont remember if heavy mod or not) for work on wiiu.... (and i remember a primitive isoloader but probably is a joke)

 

[uyjulian]

The nice thing is that Nintendo made a clean seperation line between OS and data. All OS-related code is stored in the Wii U NAND bank, while all data and applications are on the eMMC. Assuming patching NAND calls is done correctly, there should be next to no harm done with an emuNAND. Nintendo themselves can't even tell, unless they specifically put in code to try to see if NAND calls are patched, which I doubt they'll do. Of course this'll still require an IOSU exploit, but we're getting there

what is that 5-7 GB of taken up space on the Wii U then?

 

[OriginalHamster]

what is that 5-7 GB of taken up space on the Wii U then?

At launch factory Wii Us didn't have Wii channel, Miiverse, and other apps installed by default IIRC, I guess they take away some eMMC space, other like Mii editor, Daily stats could be stored in the eMMC too, although they are not visible in the data management.

 

[NWPlayer123]

what is that 5-7 GB of taken up space on the Wii U then?

I'm not sure what is where, but probably NAND just has everything in OSv11 (all RPLs, root.rpx, loader, IOSU, kernel), and all base applications that OriginalHamster mentioned are stored on eMMC, since they use the same /vol/content structure that NAND doesn't have.

 

[kardus]

There is supposed to be an update being lauched on the 15th, correct? I was thinking about buying a game or two off the e-shop since I will likely be holding off on upgrading until the OK is given that the new OS is safe too.

 

[KungFuzion]

There is supposed to be an update being lauched on the 15th, correct? I was thinking about buying a game or two off the e-shop since I will likely be holding off on upgrading until the OK is given that the new OS is safe too.

I'm not sure, where did you get your info from?

 

[Xuman]

There is supposed to be an update being lauched on the 15th, correct? I was thinking about buying a game or two off the e-shop since I will likely be holding off on upgrading until the OK is given that the new OS is safe too.

No idea if true, but, in case, since it IS the mewtwo smash day, I'll follow your idea and grab some gems.

 

[soneek]

Behold, le first custom BFSTM out for public viewing!

https://www.dropbox.com/s/iqi56wfeu8uwohk/kirby.bfstm?dl=0

Of course, there isn't really much use for this until TCPGecko is compatible with recent Wii U firmware, though you can still listen to it by downloading VGMStream, which you can get the BFSTM version here:
https://www.dropbox.com/s/b1un7t47km90p8t/BFSTMvgstreamzip.zip?dl=0

(Also, I'll actually be taking requests for awhile. Probably up until I get the tutorial up and going.
Now, since the BFSTM format is all figured out, I can move on to a different music format. .nus3bank. (Which is the format used for Smash Bros. Wii U & 3DS)
It appears that the .nus3bank is an archive containing the actual music format, which is IDSP, and to me, it looks quite familiar to other formats so this shouldn't be too hard to figure out.

I can add stereo BFSTM downloading to Brawl Custom Music like I did with BCSTM, though it'll be more of a priority to me once file replacements are possible for everyone.

I'll send you a quickbms script I wrote for nus3bank once I get home. I came across some issues when running it on some SFX archives in Smash for Wii U, but I haven't looked much at it since then. It worked fine with every other NUS3 archive I've checked from other games.

 

[MrRean]

Behold, le first custom BFSTM out for public viewing!

https://www.dropbox.com/s/iqi56wfeu8uwohk/kirby.bfstm?dl=0

Of course, there isn't really much use for this until TCPGecko is compatible with recent Wii U firmware, though you can still listen to it by downloading VGMStream, which you can get the BFSTM version here:
https://www.dropbox.com/s/b1un7t47km90p8t/BFSTMvgstreamzip.zip?dl=0

(Also, I'll actually be taking requests for awhile. Probably up until I get the tutorial up and going.
Now, since the BFSTM format is all figured out, I can move on to a different music format. .nus3bank. (Which is the format used for Smash Bros. Wii U & 3DS)
It appears that the .nus3bank is an archive containing the actual music format, which is IDSP, and to me, it looks quite familiar to other formats so this shouldn't be too hard to figure out.

Nice! Glad to see people are working to get shit hacked.

 

[TotalInsanity4]

No idea if true, but, in case, since it IS the mewtwo smash day, I'll follow your idea and grab some gems.

Here's hoping it isn't :x I'd enjoy a few more weeks of eShop access

Come to think of it, I think it's just an update for Sm4sh, not the system. I believe I heard that in the Direct, but maybe it's just wishful thinking