Hacking wfsdump - PC util for dumping WFS devices (WiiU File System)

  • Thread starter Thread starter EyeKey
  • Start date Start date
  • Views Views 84,632
  • Replies Replies 203
  • Likes Likes 41
What do you mean? It fails to extract the file?
nfs files are stored in some weird way. can't read them using ftpiiu-everywhere or other tools. when trying to read using wfs-fuse the files are all zero.
NPPWpEA.png
expected content from an extracted download (EGGS/SGGE header):
EPkcu0i.png
also in the FST format they're stored using type 0x02, instead of 0x00 for normal files.
 
Last edited by ihaveahax,
Hello,
I tried dumping from my backup .img file and get the error in cmd:

wfsdump' is not recognized as an internal or external command, operable program or batch file

Please see screenshot here: https://photos.app.goo.gl/wAizPRTzWZGYN6f72

yeah, you need to launch a command prompt with admin privileges. You can do that from Windows Explorer. Just enter the folder where you put the executable, otp.bin and seeprom. bin then open the"File" menu in Windows explorer to do that.
View attachment 95249

Then you determine evertyhing and type in the command.

I used powershell and discovered that my USB drive is \\.\PHYSICALDRIVE2.
My OTP dump is called otp.bin.
My SEEPROM dump is called seeprom.bin.
I want to dump the files in a folder called "dump"

So this is what I typed in:
wfsdump --input \\.\PHYSICALDRIVE2 --otp otp.bin --seeprom seeprom.bin --output dump
 
Hello,
I tried dumping from my backup .img file and get the error in cmd:

wfsdump' is not recognized as an internal or external command, operable program or batch file

Please see screenshot here: https://photos.app.goo.gl/wAizPRTzWZGYN6f72
As noted on the github release page, the program was renamed to wfs-extract.exe. That's why you see wfs-extract.exe in your directory list. Enter wfs-extract instead of wfsdump.
 
  • Like
Reactions: 528491
Thank you @nexusmtz . I tried dumping from image files previously created in Win32DiskImager, UBIT and imageusb. I got following results:
My question. Did I get a useable dump folder, even though the .exe stopped working?
 
Thank you @nexusmtz . I tried dumping from image files previously created in Win32DiskImager, UBIT and imageusb. I got following results:
My question. Did I get a useable dump folder, even though the .exe stopped working?
Hmm, the crash is a bug. Can you run it with --verbos and send me the output privately?
 
@EyeKey
Ah, I had this dumb suspicion when the nfs files couldn't be read but didn't really think Nintendo would do it.

So today I remembered it and took a look at the dump of the encrypted disk and found out I my dumb theory was actually correct...
The nfs files can't be decrypted by your tool because they're stored raw, without any encryption at all.
That makes sense because they're loaded by the Virtual Console's IOS in vWii and Nintendo wouldn't bother to add WFS support to that as well.
 
Last edited by piratesephiroth,
  • Like
Reactions: Pachee
@EyeKey
Ah, I had this dumb suspicion when the nfs files couldn't be read but didn't really think Nintendo would do it.

So today I remembered it and took a look at the dump of the encrypted disk and found out I my dumb theory was actually correct...
The nfs files can't be decrypted by your tool because they're stored raw, without any encryption at all.
That makes sense because they're loaded by the Virtual Console's IOS in vWii and Nintendo wouldn't bother to add WFS support to that as well.
Nice find. Few weeks ago I figured out that one of the flags in the attributes of a file is whether it is encrypted or not. I can add support for that flag.
Does my program print "Error: Failed to.." when trying to dump those files? because it should have if the decryption has failed.
 
  • Like
Reactions: Pachee
Nice find. Few weeks ago I figured out that one of the flags in the attributes of a file is whether it is encrypted or not. I can add support for that flag.
Does my program print "Error: Failed to.." when trying to dump those files? because it should have if the decryption has failed.

yup, "failed to read"

KYtalVS.png
 
Last edited by piratesephiroth,

Site & Scene News

Popular threads in this forum