Hacking Wii U USB loading - install WiiU games to USB or internal memory

ThunderbInazuma

Well-Known Member
Member
Joined
Aug 31, 2015
Messages
507
Trophies
0
Location
Under Your Bed
XP
2,099
Country
Portugal
You can install ONLY games which exists in disc format. eShop only version can't be installed because the ticket is tied to the console used to buy that game.
Just a theory, but, if we extract the ticket from a eShop only game from one console (source), found where the ticket has the Console "ID" or the NNID linked, could we change that info from the source console to the Target console info? It's just a theory, I don't know to much of how these things work, so It's just my imagination xD
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
46
Location
Engine room, learning
XP
15,662
Country
France
Just a theory, but, if we extract the ticket from a eShop only game from one console (source), found where the ticket has the Console "ID" or the NNID linked, could we change that info from the source console to the Target console info? It's just a theory, I don't know to much of how these things work, so It's just my imagination xD
yes, but the signature will not match anymore so it will also require "signature check" patch from a CFW.
currently, the CFW has only "WUP server" enabled, there's no signature patch option yet.
be patient, it will come :)

play with what you have currently, don't be too greedy :P
everything comes if you wait.
 

BIFFTAZ

Well-Known Member
Member
Joined
Jul 26, 2010
Messages
596
Trophies
1
XP
846
Country
I think I'm too noob to understand the WiiU scene.
I'll just do what to do ! :wink:

--------------------- MERGED ---------------------------

Ok @DanTheMan827

--------------------- MERGED ---------------------------

Final question : WUD is all the content of the game ?
Like what Loadiine load ?

Know what a .ISO is? Its simular, Its a WiiU disc image. All you need from that WUD is the title.tik, The rest of the game (99.9% of it) you download from NUSgrabber. Add the title.tik to DanTheMan827 & it will modify the title.tik & download the game in one go. All you have to do the is copy game from DanTheMan827 program folder to your SD card & install with Wupinstaller.
 
  • Like
Reactions: nooby89

ThunderbInazuma

Well-Known Member
Member
Joined
Aug 31, 2015
Messages
507
Trophies
0
Location
Under Your Bed
XP
2,099
Country
Portugal
yes, but the signature will not match anymore so it will also require "signature check" patch from a CFW.
currently, the CFW has only "WUP server" enabled, there's no signature patch option yet.
be patient, it will come :)

play with what you have currently, don't be too greedy :P
everything comes if you wait.
Ok. Could you explain me a little better what is the Signature? I've been reading about that since I started following the 3DS Scene, but never understand that.

Actually, I don't care about games from eShop, since I already have the games I wanted, but I said that minding to help some other people.
 

plasma

GBAtemp's Artificial Lifeform
Member
Joined
May 15, 2009
Messages
1,670
Trophies
1
Location
Inazuma TM Caravan
XP
2,686
Country
United Kingdom
I know in the first post it says DLC cant be used so use loadiine for that, but is someone working on getting illegit DLC to work?
(not gonna look through 138 pages for that answer)
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
46
Location
Engine room, learning
XP
15,662
Country
France
Actually, I don't care about games from eShop, since I already have the games I wanted, but I said that minding to help some other people.
to explain quickly, the signature is a way to detect if a file has been modified.
the signature is generated with a Private key (cryptography) by analysing the file's content and producing an unique ID. that ID is included in the file, and can't be modified or re-generated (only Nintendo can).
if the file is modified, the included signature will not match the file's content and the console will refuse to use that file.

Signature patching is a method to edit the function used by the console to verify this signature and always tell the console the signature match the file's content, even if it's not.
 

|<roni&g

Well-Known Member
Member
Joined
Nov 18, 2010
Messages
453
Trophies
1
Location
UK
XP
2,188
Country
United States
trying to get somewhere with this, but the 3 games im after, cod bo2, ghosts & wii sports club theres problems and barriers

-ghosts wud is "not available on nintendo servers" through newnus
-bo2 i cant find a eur wud file
-wii sports club same problem, cant find a eur wud.

this has a long way to go, im sure it will be simplified in a few weeks
 

Scott Pilgrim

Well-Known Member
Newcomer
Joined
Jan 3, 2016
Messages
86
Trophies
0
XP
192
Country
United States
@Cyan I made a tool that can automatically patch the .tik file if needed and will download the associated title data using NUSgrabber based on the data contained in the .tik file... (so no searching for the title ID)

It can also download directly to the install folder if the user so wishes...

Nothing other than the exe is needed since NUSgrabber is included.

https://github.com/DanTheMan827/uTikDownloadHelper/releases

I just wanted to say thank you. It's awesome!
 

ThunderbInazuma

Well-Known Member
Member
Joined
Aug 31, 2015
Messages
507
Trophies
0
Location
Under Your Bed
XP
2,099
Country
Portugal
to explain quickly, the signature is a way to detect if a file has been modified.
the signature is generated with a Private key (cryptography) by analysing the file's content and producing an unique ID. that ID is included in the file, and can't be modified or re-generated (only Nintendo can).
if the file is modified, the included signature will not match the file's content and the console will refuse to use that file.

Signature patching is a method to edit the function used by the console to verify this signature and always tell the console the signature is good, even if it's not.
So... Wait a moment, to use this method we actually are using, don't wee need to edit the Ticket? Since we are editing the tickets, shouldn't it detect that we modified it?
 

raspy

Active Member
Newcomer
Joined
Sep 14, 2009
Messages
30
Trophies
0
XP
190
Country
Canada
What am I doing wrong? The instructions are easy to follow but I can't even see straight.

I am on 5.5.1 and I am self-hosting. Testing a 128GB Lexar Jumpdrive (S55, USB 3.0) formatted as FAT32 with cluster 64k and a 8GB micro SDHC formatted as FAT32 with a microSD to SD adapter.

On the microSD card I have the following folder structure:
- sd\wiiu\apps
- sd\install

Using "NEW-NUSGrabber" I downloaded a title "encrypted" for the region of my WiiU and created a modified ticket by dragging the original "title.tik" (also corresponding to the region of my WiiU) onto the program called "tik_modifier.exe". It created the file "title_modified.tik" and I renamed it to "title.tik" and then replaced the original with the modified version. I placed all the contents (.app, .h3, etc.) of my title including the modified ticket in the "install" folder of the SD card.

The WiiU system formatted the 128GB USB jumpdrive when I plugged it in for the first time. I load up the internet browser and it goes straight to the homebrew launcher. I select the modified version of wup installer and press "X" to install to USB and the screen goes white with the Wii U logo but nothing happens after that and then it goes back to the screen to select "A" or "X". But when I use the non-modified wup installer I receive the message "error: install error code 0xFFFBF446" and then it goes back to the "A" and "X" selection screen.

Does anyone know what my issue could be and how I would get this working?

Thank you, :yaywii:

Nevermind! User error :rofl2:

I somehow downloaded the contents under "Game Updates" instead of "Full Titles" when I realize the folder size was only 58.4MB instead of 2.8GB for the actual game. It installed in under 10 minutes and finished at 99%. I see the game in the wii menu and it loads perfectly. Thank you to the devs for this wonderful method because loading times will greatly be better however I still love loadiine for region free and many other reasons :bow:
 
Last edited by raspy,

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,749
Trophies
4
Age
46
Location
Engine room, learning
XP
15,662
Country
France
-ghosts wud is "not available on nintendo servers" through newnus : Nothing can be done about it. Shop version is required to install the game.
-bo2 i cant find a eur wud file : someone will dump the ticket from a console. WUD is not required anymore but you need to depend on someone else doing it for you.
-wii sports club same problem, cant find a eur wud. it's the game which is full in its update form? download the update instead of the full game. the full game is only a dummy. the update ID actually contains the full game (and the ticket!)

this has a long way to go, im sure it will be simplified in a few weeks

So... Wait a moment, to use this method we actually are using, don't wee need to edit the Ticket? Since we are editing the tickets, shouldn't it detect that we modified it?
Yes, you are right.
By editing the Game type (byte 0x01) from 0x3 (disc) to 0x1 (eshop) the signature is not good anymore.
By maybe simple hazard, the signature only change by 1 byte when we change 1 byte in the file. converting "03" to "01" needs only XORing byte 0x10 with value "2" to make the signature good again !

that's maybe a flaw in the way the RSA signature is working.

editing another byte elsewhere is the file probably break the signature in a bigger way than just a single XORed byte, and without the private key we can't generate the proper signature. only a signature check patch will be possible to bypass this.
I don't know how the brazilian team noticed or found that only one byte was changed in the signature.
 

DanTheMan827

Well-Known Member
Member
Joined
May 3, 2015
Messages
639
Trophies
0
Age
33
Location
Wisconsin
XP
621
Country
United States
So... Wait a moment, to use this method we actually are using, don't wee need to edit the Ticket? Since we are editing the tickets, shouldn't it detect that we modified it?
2 bytes of data get modified in the ticket and that makes the Wii U allow the install and at the same time doesn't break the existing signature check (somehow)
 
Last edited by DanTheMan827,

ElYubiYubi

GBATemp Maniac
Member
Joined
Apr 9, 2013
Messages
2,397
Trophies
1
XP
1,795
Country
Puerto Rico
FB_IMG_1477178977501.jpg
 
  • Like
Reactions: nooby89

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    BigOnYa @ BigOnYa: After watching, that I feel like I'm on them already +1