Hacking Wii U Hacking & Homebrew Discussion

[FIX94]

In the last versions of cafiine i released, the server saves file paths in log files. (if you mean "all files of the game" (like tcpgecko does in FSA tab), well cafiine doesn't work that way, it just logs a file when it is opened by the game)

For me I very often get "Attempted to read past the end of the stream." does that mean it cant actually print out the file path because its too long or something like that?

 

[golden45]

For me I very often get "Attempted to read past the end of the stream." does that mean it cant actually print out the file path because its too long or something like that?

It means that the connection has been closed.

What really happen : when the game adds a client to access filesystem functions (FSAddClientEx), cafiine connects to the server with a new socket, the server then creates a new thread associated to this socket.
When the game open a file, cafiine sends the file path to the server (with the socket associated to the client used to open the file).
But often this client does not open any file (there are many other functions in filesystem).
When the client is deleted (FSDelClient), the associated socket is simply closed on cafiine side, this is why you have this message on the server.

I added a log file for each connection, maybe it was not the best thing to do, just look for the bigger .txt log file =)

 

[FIX94]

But often this client does not open any file (there are many other functions in filesystem).

I assume that means replacing NES and/or SNES VC files is not possible then, there is nothing useful listen in either of them, too bad.

 

[golden45]

I assume that means replacing NES and/or SNES VC files is not possible then, there is nothing useful listen in either of them, too bad.

I can't say, I don't have any VC to try that. But if I remember correctly, it was not possible with NES and SNES VC.

 

[gamesquest1]

i think gba also has the rom stored elsewhere, only NDS and N64 work with rom injections atm afaik....unless you feel like poking an entire rom into ram

 

[wj44]

snes/nes rom injection works fine for me.

 

[pedro702]

snes/nes rom injection works fine for me.

any chance you post the file path and the name of the rom they use?

 

[wj44]

any chance you post the file path and the name of the rom they use?

no Cafiine.
You can inject it with TCP Gecko.
upload the rom to Address: 10502250
source.

 

[pedro702]

no Cafiine.
You can inject it with TCP Gecko.
upload the rom to Address: 10502250
source.

so both nes ans snes use that same adress?

 

[Cyan]

you can send/write binary files with TCPgecko client?

 

[wj44]

so both nes ans snes use that same adress?

Probably Yes.

you can send/write binary files with TCPgecko dot net?

You can select upload data in Memory Viewer Tab.

 

[gamesquest1]

oh well if thats the case then gba VC injects should be possible by injecting the rom at 0x34571100 (although i dont know if thats a fixed address or if it varies from game to game), but for megaman battle network 3 the rom is stored there

 

[fiveighteen]

@wj44 Which TCP Gecko Client are you using? I also found that 10502250 address last week, but I don't see any way to upload data in any tab of TCP Gecko.

 

[Cyan]

I didn't know. Thanks.
Too bad the options are all disabled and grey'd out when not connected.

 

[wj44]

@wj44 Which TCP Gecko Client are you using? I also found that 10502250 address last week, but I don't see any way to upload data in any tab of TCP Gecko.

Right click the Memory Box

 

[FIX94]

Right click the Memory Box

that worked for me, I assume the games are included in the executable or something because even after manually reading FS I couldnt find a trace of a ROM. Too bad the first game I tried, super mario kart doesnt work, for reference super mario world came up no problem heh.

 

[VinsCool]

no Cafiine.
You can inject it with TCP Gecko.
upload the rom to Address: 10502250
source.

Mother of god! Thank you for sharing this to us!
Really apprecieated.

--------------------- MERGED ---------------------------

that worked for me, I assume the games are included in the executable or something because even after manually reading FS I couldnt find a trace of a ROM. Too bad the first game I tried, super mario kart doesnt work, for reference super mario world came up no problem heh.

That was my first thought too.

 

[fiveighteen]

that worked for me, I assume the games are included in the executable or something because even after manually reading FS I couldnt find a trace of a ROM. Too bad the first game I tried, super mario kart doesnt work, for reference super mario world came up no problem heh.

What VC game are you injecting into? I have Super Mario Kart VC and I verified it's identical to the ROM. Weird...

Spoiler: WORKING

Bike Daisuki! Hashiriya Damashii - Riders Spirits (Japan)
Lock On

Spoiler: NOT WORKING

Paper Boy 2
Super Mario World
F-Zero
Pilot Wings (Main menu works, missions black screen)
Super F1 Circus Gaiden (Japan)

Tried to inject Super Mario All-Stars + Super Mario World and it killed the connection to TCP Gecko during upload, likely because SMAS+SMW is 2560KB instead of 512KB for Super Mario Kart lol.

The best place to inject is from is the main VC menu after the game starts, right? And in TCP Gecko Client you go to 10502250, right click on it, and upload the ROM?[/spoiler]

 

[FIX94]

What VC game are you injecting into? I have Super Mario Kart VC and I verified it's identical to the ROM. Weird...

I tried injecting Paper Boy 2 into Super Mario Kart and it just went to a black screen and froze, even though they are both 512KB.

Tried to inject Super Mario All-Stars + Super Mario World and it killed the connection to TCP Gecko during upload, likely because SMAS+SMW is 2560KB instead of 512KB for Super Mario Kart lol.

Trying Super Mario World now.

The best place to inject is from is the main VC menu after the game starts, right? And in TCP Gecko Client you go to 10502250, right click on it, and upload the ROM?

I do have both f-zero and super metroid, using super metroid since it has a 3MB ROM inside, I always go into the VC menu, replace the file, then reset the game. So, for me working in super metroid are:

Spoiler

super mario world
street fighter 2
mortal combat
contra 3
mega man x
zelda alttp,BS zelda alttp remix
BS f-zero 2 gp
super star wars; all 3
final fantasy 2
ninja gaiden trilogy (needed to use the f1 version since I have a pal wiiu)
hong kong 97 (thanks avgn for making me try this)
super castlevania 4
super ghouls n ghosts
super double dragon
super punch-out
kirbys avalanche (eu ghost trap worked, us was region locked)
kirbys dream course
terminator, terminator 2
tetris attack (only f1 version works, get piracy screen otherwise)
tetris 2 (only f2 version works, get piracy screen otherwise)
worms (to press stuff in the menus you need to use select)
akumajou dracula xx
espn speedworld
f1 roc race of champions
gt racing
test drive 2
tmnt turtles in time
sim city
micro machines, micro machines 2
mario paint (joystick hack h8 runs great )
smw+super mario all-stars (needed to use o1+f1 cause pal)
batman returns

not working are:

Spoiler

yoshis island
super mario all-stars (region lock)
super mario kart
mega man x2,x3,7
rockman and forte (4mb)
bigger kirby games (4mb)
donkey kong country games (4mb)
chrono trigger (4mb)
terranigma (4mb)
killer instinct (4mb)
starfox/starwing
starfox 2 beta
doom
wolfenstein 3d
final fantasy 3U,5J
earthbound
earthworm jim
BS zelda 1 remake
pilotwings (full console crash with eu and us, jap freezes on missions)
super noahs ark 3d (had to try)
sim city 2000
super bomberman
street fighter 2 turbo
ballz 3d

 

[fiveighteen]

I envy you being able to test so fast. It's taking me 15 mins just to get the exploit and codehandler to work to test one ROM.