Tutorial  Updated

Wii on Wii U Virtual Console: Injecting Games

Requirements:
WiiScrubber v1.40;
nfs2iso2nfs v0.5.4; it may require the Wii common Key. You can use wiiscrubber's key.bin renamed to wii_common_key.bin.
A clean rip of your Wii game;
The extracted contents of a Wii VC title for the Wii U (except the .nfs files);
-the 2 below require java to be installed-
jnustool (requires Wii U common key so you'll have to search online - hint: it begins with D7B0. Open the "config" file in notepad and paste the key inside, replacing [COMMONKEY]);
NUSpacker (must be @ihaveamac's version, requires Wii U common key as well)

Current limitations:
It's possible to use the gamepad to emulate ONLY the Classic Controller.
Wii Remote emulation is possible but there's no gyroscope or infrared commands (at least for now).
(Input emulation patches by @FIX94)

The game must be already compatible with the Classic Controller but that isn't a guarantee that it's going to work.
Here's a compatibility list: http://wiki.gbatemp.net/wiki/WiiU_VC_Wii_inject_compatibility_list

Integrity checks are still in place so only clean disc rips work.
The game iso must be pristine: untrimmed, unscrubbed and the partitions signed.
No homebrew, no mods, no wimmfi patched games until sigpatches are implemented.

Patched isos work now! Original idea by @Tock46!

Homebrew works now, even a special version of Nintendont by @FIX94

Trimmed isos still don't work, at least not isos trimmed by WiiScrubber.



HOW TO DO IT


0. Downloading a Wii VC Title
This may be illegal and I'm just telling you so you don't ever do it by mistake OK?
You can use the command line to download games' contents directly if you know the title id and title key.
I heard you can get them on a certain titlekeys site...

Once you have that, this is the command
Code:
java -jar JNUSTool.jar TITLEID TITLEKEY

NmNYbOu.png


Note: You should get a game that contains the latest revision of fw.img (r590), that's the only version supported by @FIX94's patches.
Here's some info you can use to verify that you have a good file:
Size: 1785497 bytes.
CRC32: E2F27E9B
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA: A5A75EBF3164874830A1D5992495DE510AB3F74E

Now here's a list of some titles that contain the preferred fw.img (verified mostly by @fejich and @markehmus)
DONKEY KONG JUNGLE BEAT [VBXE01]
Kirby's Epic Yarn [VARE01]
Lost in Shadow [VA8E01]
Mario Strikers Charged [VBFE01]
Mario Super Sluggers [VBHE01]
Pandora's Tower [VAPE01]
PIKMIN 2 [VBTE01]
PIKMIN [VBUE01]
Resident Evil 4 Wii Edition [VBDE01]
Resident Evil The Umbrella Chronicles [VBWE01]
Rhythm Heaven Fever [VAKE01]
Sin and Punishment Star Successor [VALE01]
Super Mario Galaxy [VBKJ01]
Super Paper Mario [VBBE01]
The Legend of Zelda Skyward Sword [VANE01]
Trauma Team [VA6E01]
Wario Land Shake It [VBGE01]
WARIO WARE SMOOTH MOVES [VBVE01]





-----------------------------------------------

1. WiiScrubber
First setup WiiScrubber. Remember it needs the Wii common keys so run MakeKeyBin.exe first and do as it says.
Run it and open you iso. Right-click the UPDATE partition and select "Delete partition". Confirm.
uE02Phr.png


Now click on the + box to expand the DATA partition, then expand partition.bin.
Right click tmd.bin, select "Extract" and save it.
Do the same with ticket.bin.
jJPl3Wy.png


Rename the extracted ticket.bin to rvlt.tik
Rename the extracted tmd.bin to rvlt.tmd

Copy/move both files to the "code" folder of the Wii VC title.

Your iso is now ready and you can close WiiScrubber.


2. nfs2iso2nfs
Move your iso to the "content" folder of the Wii VC. Rename the file to "game.iso".
The content folder should contain only game.iso and the "assets" folder. Delete any nfs files that are still present.

Copy nfs2iso2nfs.exe to the content folder and run it. If everything is in place, it will begin the conversion process.
It should take around 15 minutes. Its console window will close when it's finished.
Once it ends you can delete your iso file and nfs2iso2nfs.exe (and wii_common_key.bin if it exists).
The content folder should contain only the nfs files and the "assets" folder.

Optional: You can enable Classic Controller emulation for playing using only the gamepad.
Open meta.xml (it's in the meta folder) in notepad.
Look for the line
Code:
<drc_use type="unsignedInt" length="4">1</drc_use>

replace it with
Code:
<drc_use type="unsignedInt" length="4">65537</drc_use>
and save the file.
Note that this will only work if the game supports the Classic Controller.
If it doesn't either it won't boot or you won't be able to do anything and only the gamepad's power button will work.
Here's a list of such games: https://wiki.gbatemp.net/wiki/List_of_Wii_games_compatible_with_Classic_Controller


3.NUSpacker
The final part, building the installation files.
NUSpacker requires the Wii U common key. You should find it online and then open the file "encryptKeyWith" with
notepad and paste the key inside (hint: it begins with D7B0)

It's also a command line tool so you'll have to write down the commands, or simply create a new text file,
write the command inside, save it and change the extension from .txt to .bat

I recommend copying the Wii VC folder (that contains the other 3 folders, code, content and meta) to nuspacker's folder.
That will make everything easier.

The command works like this (replace with the names of your own folders)
If you folders have spaces in their names, enclose them in quotation marks, like "Just Dance".
Code:
java -jar nuspacker.jar -in GAME_FOLDER -out INSTALATION_FILES_FOLDER

Wiait until it finishes the process.
Now just copy the folder with the installation data to the "install" folder SD card, run a CFW and install it with WUP Installer GX2!

PS: If you make a nonfunctional game, remember to uninstall it before trying again.
If you install a fiunctional game over a broken installation, it will still appear as broken.
 

Attachments

  • WiiScrubber [V-1.40 A-2009].rar
    528.8 KB · Views: 1,374
  • NUSpacker.zip
    59.6 KB · Views: 1,330
  • jnustool.zip
    99.6 KB · Views: 1,417
  • nfs2iso2nfs v0.5.4.zip
    11.3 KB · Views: 865
Last edited by piratesephiroth, , Reason: updated nfs2nfs2iso

pedro702

Well-Known Member
Member
Joined
Mar 3, 2014
Messages
12,720
Trophies
2
Age
33
XP
8,700
Country
Portugal
I tried something similar with RE4 but the Gamepad couldn't be recognised. Probably because the game needs to be played by Wiimote + Nunchuck?
RE4 is officialy released by nintendo as a wii vc title and even then it cannot make the gamepad work, im guessing they used the code very wierdly and nintendo couldnt patch the CC emulation.
 
Last edited by pedro702,

ploggy

WAKA! WAKA!
Member
Joined
Aug 29, 2007
Messages
4,818
Trophies
2
XP
7,847
Country
United Kingdom
RE4 is officialy released by nintendont as a wii vc title and even then it cannot make the gamepad work, im guessing they used the code very wierdly and nintendo couldnt patch the CC emulation.
Yeah there's deffo something weird about that game. I'm lucky I prefer the Wiimote/Nunchuck Controls :)
 

FIX94

Former Staff
Former Staff
Joined
Dec 3, 2009
Messages
7,284
Trophies
0
Age
29
Location
???
XP
11,238
Country
Germany
So I pushed a library (and demo) for gamepad input that can be implemented relatively easily in homebrew.
https://github.com/FIX94/libwiidrc

Right now the only patches that'll make it work are for the fw.img r590 (crc32 e2f27e9b) and are as follows:
offset 0x1478A from 0x6818 to 0x2000 (wiimote passthrough)
Thats the wiimote patch I explained yesterday, still required.

These next 2 are rather ugly:
offset 0x115C2 from 2800D00349022209F004FF1D to F004FF2148022109F004FEF9 (custom function)
offset 0x14E92 from F001FAB9 to F7FCFB95 (jump to custom function)
Basically the gamepad memory is cached so I had to figure out a way to flush that cache after a read, turns out I had to do it in quite the ugly way.

And lastly are these 2 short ones:
offset 0x17A880 from 0x2000 to 0x2001 (to disable ahbprot)
offset 0x17E81C from 0x2201 to 0x2200 (to disable memprot)
That will allow full hardware access from homebrew just like you have when you boot homebrew with the homebrew channel, may be useful for all sorts of things, in this case it is just used to read out the actual gamepad data without having to move it.
 

fejich

Well-Known Member
Newcomer
Joined
Nov 26, 2016
Messages
49
Trophies
0
Age
32
XP
118
Country
China
E1A907D5
文件: D:\JUNS\Xenoblade Chronicles [VAEE01]\code\fw.img
大小: 1789408 字节
修改时间: 2017年9月14日, 9:12:38
MD5: 4DF41FB30CA3D8CC43F4EB6034589A0F
SHA1: 39BE96EB749DDC3F05BE03126F0803B778EE420C
CRC32: E1A907D5


4C419C0F
文件: D:\JUNS\Donkey Kong Country Returns [VABE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:03:17
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\Punch-Out!! [VACE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:02:51
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\Metroid Prime Trilogy [VAGE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:01:30
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\Super Mario Galaxy 2 [VAAE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:13:11
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\Metroid Other M [VAHE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:12:10
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\Donkey Kong Country Returns [VABE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:03:17
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\Kirby's Adventure Wii [VADP01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:02:02
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\New Super Mario Bros. Wii [VAFJ01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:13:43
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F

文件: D:\JUNS\PokéPark Wii Pikachu’s Adventure [VAJE01]\code\fw.img
大小: 1789485 字节
修改时间: 2017年9月14日, 9:14:05
MD5: 6EE856CB942091CF8AAF0F6AA2AE1AB0
SHA1: 56187FDB96971DB77EFA290A5883442246AD7277
CRC32: 4C419C0F


E2F27E9B
文件: D:\JUNS\PIKMIN 2 [VBTE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:14:57
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\PIKMIN [VBUE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:15:20
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\Resident Evil The Umbrella Chronicles [VBWE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:15:43
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\WARIO WARE SMOOTH MOVES [VBVE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:16:13
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\DONKEY KONG JUNGLE BEAT [VBXE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:16:39
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\Super Mario Galaxy [VBKJ01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:00:27
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\Kirby's Epic Yarn [VARE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:05:38
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B

文件: D:\JUNS\The Legend of Zelda Skyward Sword [VANE01]\code\fw.img
大小: 1785497 字节
修改时间: 2017年9月14日, 9:05:12
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA1: A5A75EBF3164874830A1D5992495DE510AB3F74E
CRC32: E2F27E9B
 
  • Like
Reactions: daxtsu

leseratte

Wiimmfi Team
Member
Joined
Jun 2, 2012
Messages
453
Trophies
1
XP
1,859
Country
Germany
Hey guys, any way someone could start a thread on patching the fw.img? It would be nice to have it organised.
I have been reading all the threads about the fw.img, collecting all the patches and ported them to the three different versions (however most of them are untested). I am going to create a tool to automate the patch process for all the patches and will add my documentation (the list of all the patches for all versions) when I release it.

Right now the only patches that'll make it work are for the fw.img r590 (crc32 e2f27e9b) and are as follows:
offset 0x1478A from 0x6818 to 0x2000 (wiimote passthrough)
Thats the wiimote patch I explained yesterday, still required.

What about 0x119a0 from 0x138ba004 to 0x13210000 (which was part of the Wiimote patch)? Is that needed, too?
 

wicksand420

Well-Known Member
Member
Joined
Nov 13, 2016
Messages
2,787
Trophies
1
Age
39
XP
2,295
Country
United States
I have been reading all the threads about the fw.img, collecting all the patches and ported them to the three different versions (however most of them are untested). I am going to create a tool to automate the patch process for all the patches and will add my documentation (the list of all the patches for all versions) when I release it.



What about 0x119a0 from 0x138ba004 to 0x13210000 (which was part of the Wiimote patch)? Is that needed, too?
Sounds awesome!!
 

FIX94

Former Staff
Former Staff
Joined
Dec 3, 2009
Messages
7,284
Trophies
0
Age
29
Location
???
XP
11,238
Country
Germany
What about 0x119a0 from 0x138ba004 to 0x13210000 (which was part of the Wiimote patch)? Is that needed, too?
that one was just needed because yesterday I didnt have a way of getting full hardware access so those upper memory areas werent readable, now though with disabling ahbprot and memprot reading that area out is no problem anymore of course.
 

leseratte

Wiimmfi Team
Member
Joined
Jun 2, 2012
Messages
453
Trophies
1
XP
1,859
Country
Germany
So the two new patches (17a880 and 17e81c) can also replace the 0x119a0 in the "wiimote and gamepad" patch? Or does that one still require the 119a0 patch?
 

FIX94

Former Staff
Former Staff
Joined
Dec 3, 2009
Messages
7,284
Trophies
0
Age
29
Location
???
XP
11,238
Country
Germany
So the two new patches (17a880 and 17e81c) can also replace the 0x119a0 in the "wiimote and gamepad" patch? Or does that one still require the 119a0 patch?
the 0x119a0 patch was never required for anything, it was just a cheap quick hack to see if I can read out the gamepad data at all to prove its possible, but now that I have a proper library for it and have full hardware access thanks to the 0x17A880 and 0x17E81C patches its not required anymore.
 

wolf-snake

Well-Known Member
Member
Joined
Feb 5, 2009
Messages
1,556
Trophies
2
XP
3,009
Country
Mexico
So do Wii games converted from WBFS to ISO work? i wanna test Metal Slug Complete (Japanese version of Metal Slug Antology for the Wii) because unlike the international versions this one support the classic controller and the only dump i managed to find for this game was a wbfs file.
 

markehmus

Well-Known Member
Member
Joined
Jul 26, 2008
Messages
1,521
Trophies
0
Age
112
Location
in the GAME
XP
1,279
Country
Canada

wolf-snake

Well-Known Member
Member
Joined
Feb 5, 2009
Messages
1,556
Trophies
2
XP
3,009
Country
Mexico
Well managed to inject Metal Slug JP version and boots fine, some garble text in some places, i even reached the option menu using the gamepad emulating a wiimote and it does indeed have classic controller support unlike the international versions but every time i try to select the classic controller the game crashes, it might be because the gamepad is emulating a sideways wiimote and once i choose Classic Controller as player one controller the game tries to do the Wiimote and classic controls inputs at the same time. Is there a way to disable that?
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    SylverReZ @ SylverReZ: https://youtu.be/ab8GtuPdrUQ +1