Tutorial  Updated

Wii on Wii U Virtual Console: Injecting Games

Requirements:
WiiScrubber v1.40;
nfs2iso2nfs v0.5.4; it may require the Wii common Key. You can use wiiscrubber's key.bin renamed to wii_common_key.bin.
A clean rip of your Wii game;
The extracted contents of a Wii VC title for the Wii U (except the .nfs files);
-the 2 below require java to be installed-
jnustool (requires Wii U common key so you'll have to search online - hint: it begins with D7B0. Open the "config" file in notepad and paste the key inside, replacing [COMMONKEY]);
NUSpacker (must be @ihaveamac's version, requires Wii U common key as well)

Current limitations:
It's possible to use the gamepad to emulate ONLY the Classic Controller.
Wii Remote emulation is possible but there's no gyroscope or infrared commands (at least for now).
(Input emulation patches by @FIX94)

The game must be already compatible with the Classic Controller but that isn't a guarantee that it's going to work.
Here's a compatibility list: http://wiki.gbatemp.net/wiki/WiiU_VC_Wii_inject_compatibility_list

Integrity checks are still in place so only clean disc rips work.
The game iso must be pristine: untrimmed, unscrubbed and the partitions signed.
No homebrew, no mods, no wimmfi patched games until sigpatches are implemented.

Patched isos work now! Original idea by @Tock46!

Homebrew works now, even a special version of Nintendont by @FIX94

Trimmed isos still don't work, at least not isos trimmed by WiiScrubber.



HOW TO DO IT


0. Downloading a Wii VC Title
This may be illegal and I'm just telling you so you don't ever do it by mistake OK?
You can use the command line to download games' contents directly if you know the title id and title key.
I heard you can get them on a certain titlekeys site...

Once you have that, this is the command
Code:
java -jar JNUSTool.jar TITLEID TITLEKEY

NmNYbOu.png


Note: You should get a game that contains the latest revision of fw.img (r590), that's the only version supported by @FIX94's patches.
Here's some info you can use to verify that you have a good file:
Size: 1785497 bytes.
CRC32: E2F27E9B
MD5: 3CAF52A9A440EEE4F125A3AD22E305C8
SHA: A5A75EBF3164874830A1D5992495DE510AB3F74E

Now here's a list of some titles that contain the preferred fw.img (verified mostly by @fejich and @markehmus)
DONKEY KONG JUNGLE BEAT [VBXE01]
Kirby's Epic Yarn [VARE01]
Lost in Shadow [VA8E01]
Mario Strikers Charged [VBFE01]
Mario Super Sluggers [VBHE01]
Pandora's Tower [VAPE01]
PIKMIN 2 [VBTE01]
PIKMIN [VBUE01]
Resident Evil 4 Wii Edition [VBDE01]
Resident Evil The Umbrella Chronicles [VBWE01]
Rhythm Heaven Fever [VAKE01]
Sin and Punishment Star Successor [VALE01]
Super Mario Galaxy [VBKJ01]
Super Paper Mario [VBBE01]
The Legend of Zelda Skyward Sword [VANE01]
Trauma Team [VA6E01]
Wario Land Shake It [VBGE01]
WARIO WARE SMOOTH MOVES [VBVE01]





-----------------------------------------------

1. WiiScrubber
First setup WiiScrubber. Remember it needs the Wii common keys so run MakeKeyBin.exe first and do as it says.
Run it and open you iso. Right-click the UPDATE partition and select "Delete partition". Confirm.
uE02Phr.png


Now click on the + box to expand the DATA partition, then expand partition.bin.
Right click tmd.bin, select "Extract" and save it.
Do the same with ticket.bin.
jJPl3Wy.png


Rename the extracted ticket.bin to rvlt.tik
Rename the extracted tmd.bin to rvlt.tmd

Copy/move both files to the "code" folder of the Wii VC title.

Your iso is now ready and you can close WiiScrubber.


2. nfs2iso2nfs
Move your iso to the "content" folder of the Wii VC. Rename the file to "game.iso".
The content folder should contain only game.iso and the "assets" folder. Delete any nfs files that are still present.

Copy nfs2iso2nfs.exe to the content folder and run it. If everything is in place, it will begin the conversion process.
It should take around 15 minutes. Its console window will close when it's finished.
Once it ends you can delete your iso file and nfs2iso2nfs.exe (and wii_common_key.bin if it exists).
The content folder should contain only the nfs files and the "assets" folder.

Optional: You can enable Classic Controller emulation for playing using only the gamepad.
Open meta.xml (it's in the meta folder) in notepad.
Look for the line
Code:
<drc_use type="unsignedInt" length="4">1</drc_use>

replace it with
Code:
<drc_use type="unsignedInt" length="4">65537</drc_use>
and save the file.
Note that this will only work if the game supports the Classic Controller.
If it doesn't either it won't boot or you won't be able to do anything and only the gamepad's power button will work.
Here's a list of such games: https://wiki.gbatemp.net/wiki/List_of_Wii_games_compatible_with_Classic_Controller


3.NUSpacker
The final part, building the installation files.
NUSpacker requires the Wii U common key. You should find it online and then open the file "encryptKeyWith" with
notepad and paste the key inside (hint: it begins with D7B0)

It's also a command line tool so you'll have to write down the commands, or simply create a new text file,
write the command inside, save it and change the extension from .txt to .bat

I recommend copying the Wii VC folder (that contains the other 3 folders, code, content and meta) to nuspacker's folder.
That will make everything easier.

The command works like this (replace with the names of your own folders)
If you folders have spaces in their names, enclose them in quotation marks, like "Just Dance".
Code:
java -jar nuspacker.jar -in GAME_FOLDER -out INSTALATION_FILES_FOLDER

Wiait until it finishes the process.
Now just copy the folder with the installation data to the "install" folder SD card, run a CFW and install it with WUP Installer GX2!

PS: If you make a nonfunctional game, remember to uninstall it before trying again.
If you install a fiunctional game over a broken installation, it will still appear as broken.
 

Attachments

  • WiiScrubber [V-1.40 A-2009].rar
    528.8 KB · Views: 1,377
  • NUSpacker.zip
    59.6 KB · Views: 1,334
  • jnustool.zip
    99.6 KB · Views: 1,420
  • nfs2iso2nfs v0.5.4.zip
    11.3 KB · Views: 869
Last edited by piratesephiroth, , Reason: updated nfs2nfs2iso

FIX94

Former Staff
Former Staff
Joined
Dec 3, 2009
Messages
7,284
Trophies
0
Age
30
Location
???
XP
11,248
Country
Germany
Mind giving a checksum for before and after you added the patches?
I never even applied the patches myself, just gave out some offsets of where I thought the patches should work (which they did in the end :P) but I guess I can give you the hashes for the clean fw.img I looked at.
MD5: 3caf52a9a440eee4f125a3ad22e305c8
SHA-1 [160]: a5a75ebf3164874830a1d5992495de510ab3f74e
CRC32: e2f27e9b
 

Tock46

Active Member
Newcomer
Joined
Aug 21, 2017
Messages
35
Trophies
0
Age
30
XP
112
Country
Germany
I never even applied the patches myself, just gave out some offsets of where I thought the patches should work (which they did in the end :P) but I guess I can give you the hashes for the clean fw.img I looked at.
The first patch (vertical Wii Mote) also works for fw.img r569 (SMG2) and r570 (Xenoblade). Sadly the others dont seem to be that easy to find^^. The Wii VC only uses r569, r570 and r590 (Rhythm for example). They are also identical in each region.
 

FIX94

Former Staff
Former Staff
Joined
Dec 3, 2009
Messages
7,284
Trophies
0
Age
30
Location
???
XP
11,248
Country
Germany
When I try to boot Nintendont it says it needs <ahb_access/> enabled in the Meta.xml (even though it is) and locks up/reboots (cant remember which)
Just setting it in the meta.xml doesnt help, whatever first loads on the wii has to have it disabled already (which is normally the job of the homebrew channel), you could probably patch it in the fw.img though by searching for this:
685B22EC0052189B681B
and replacing it by this:
685B22EC0052189B23FF
to just disable AHBPROT on whatever gets loaded first.
 

leseratte

Wiimmfi Team
Member
Joined
Jun 2, 2012
Messages
453
Trophies
1
XP
1,859
Country
Germany
Probably because they (try to) reload to a cIOS to use the hard drive.

But I'd be interested in having Gamepad + Wiimote support at the same time. Do you think it'd be possible to patch the fw.img to allow that, so in MKWii one player can use the gamepad and the others Wheel, Nunchuk, CC?
 
Last edited by leseratte,

ploggy

WAKA! WAKA!
Member
Joined
Aug 29, 2007
Messages
4,826
Trophies
2
XP
7,894
Country
United Kingdom
Just setting it in the meta.xml doesnt help, whatever first loads on the wii has to have it disabled already (which is normally the job of the homebrew channel), you could probably patch it in the fw.img though by searching for this:
685B22EC0052189B681B
and replacing it by this:
685B22EC0052189B23FF
to just disable AHBPROT on whatever gets loaded first.
I patched my fw.img with those changes but it still gives the same error?
I'll try with Nintendont directly..

EDIT: nope :(
 
Last edited by ploggy,

craftsk8

Well-Known Member
Newcomer
Joined
May 18, 2016
Messages
56
Trophies
0
Age
39
XP
104
Country
Serbia, Republic of
Does anyone already maked injection of No More Heros?
Trying so many iso every region and no one workes.
In the compactability list is marked as WORKS with 1:1 dump, stock fw.img.
Can anyone share it?
No More Heroes 2 only a PAL version works but need an NTFS.
 

FIX94

Former Staff
Former Staff
Joined
Dec 3, 2009
Messages
7,284
Trophies
0
Age
30
Location
???
XP
11,248
Country
Germany
I patched my fw.img with those changes but it still gives the same error?
that may mean that actually it never reloads the IOS into a real one but just changes the IOS number handed over to fake reload. This would mean none of nintendonts patches apply since its not real IOS58 (all patches in nintendont are hardcoded for IOS58 only) so it just throws the same error at you as if AHBPROT was still enabled, nintendonts error messages just arent smart enough to distinguish between those issues.
 

leseratte

Wiimmfi Team
Member
Joined
Jun 2, 2012
Messages
453
Trophies
1
XP
1,859
Country
Germany
Sadly, no. It's either Gamepad or Wiimote.

I tried pressing home, going into the Wii home (pause) menu and register a wiimote there. Didn't work.
I tried registering a Wiimote inside Mario Kart Wii by pressing "+" during player selection. Didn't work.

Apparently, the VC supports either Gamepad or Wiimote, not both.
I really hope someone can make a patch for this.
 

piratesephiroth

I wish I could read
OP
Member
Joined
Sep 5, 2013
Messages
3,453
Trophies
2
Age
103
XP
3,234
Country
Brazil
Sideways wiimote (requires the abode and below code) the abode code alone emulates normal holding wiimote.
11B59=left,11B61=right,11B6F=down,11B7D=up
so put following values for sideways sideways wiimote
11B59=02,11B61=03,11B6F=01,11B7D=00

that may mean that actually it never reloads the IOS into a real one but just changes the IOS number handed over to fake reload. This would mean none of nintendonts patches apply since its not real IOS58 (all patches in nintendont are hardcoded for IOS58 only) so it just throws the same error at you as if AHBPROT was still enabled, nintendonts error messages just arent smart enough to distinguish between those issues.

I just noticed that the "sideways wii remote" patching isn't necessary, at least for the fw.img packed with Rhythm Heaven Fever.
The d-pad already functions as expected if we enable Wii Remote emulation.
Applying that patch will only rotate the d-pad counterclockwise, simulating a VERTICALLY held Wii Remote.
 
Last edited by piratesephiroth,
  • Like
Reactions: zeldaism

ploggy

WAKA! WAKA!
Member
Joined
Aug 29, 2007
Messages
4,826
Trophies
2
XP
7,894
Country
United Kingdom
that may mean that actually it never reloads the IOS into a real one but just changes the IOS number handed over to fake reload. This would mean none of nintendonts patches apply since its not real IOS58 (all patches in nintendont are hardcoded for IOS58 only) so it just throws the same error at you as if AHBPROT was still enabled, nintendonts error messages just arent smart enough to distinguish between those issues.
I dont know :(
I just got this Syscheck by booting the VC directly into the Syscheck dol :)

Code:
sysCheck v1.6.2 by Erik Spyder

Region unknown
The system menu v610 is running under IOS255 (rev 65535)
Hollywood v0x0
Console ID: XXXXXXXXXXXX
Boot2 v0
Found 92 titles
Found 32 IOS on this console
No IOS Stub on this console

IOS (revision),IOS Stub,Trucha Bug,ES Identify,Flash Access,NAND Access,Boot2 Access,USB 2.0
IOS9 (rev 1290),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS12 (rev 782),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS13 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS14 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS15 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS17 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS21 (rev 1295),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS22 (rev 1550),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS28 (rev 2063),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS31 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS33 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS34 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS35 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS36 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS37 (rev 5919),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS38 (rev 4380),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS41 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS43 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS45 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS46 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS48 (rev 4380),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS53 (rev 5919),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS55 (rev 5919),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS56 (rev 5918),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS57 (rev 6175),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS58 (rev 6432),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS59 (rev 9249),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS62 (rev 6942),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS80 (rev 7200),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS249 (rev 21010),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS250 (rev 21010),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS251 (rev 21010),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled


Report generated on 2017/09/12

It's different from the one I did when loading through WiiXplorer.
Code:
sysCheck v1.6.2 by Erik Spyder

Region unknown
The system menu v610 is running under IOS58 (rev 6432)
Hollywood v0x0
Console ID: XXXXXXXXXX
Boot2 v0
Found 92 titles
Found 32 IOS on this console
No IOS Stub on this console

IOS (revision),IOS Stub,Trucha Bug,ES Identify,Flash Access,NAND Access,Boot2 Access,USB 2.0
IOS9 (rev 1290),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS12 (rev 782),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS13 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS14 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS15 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS17 (rev 1288),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS21 (rev 1295),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS22 (rev 1550),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS28 (rev 2063),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS31 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS33 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS34 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS35 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS36 (rev 3864),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS37 (rev 5919),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS38 (rev 4380),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS41 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS43 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS45 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS46 (rev 3863),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS48 (rev 4380),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS53 (rev 5919),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS55 (rev 5919),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS56 (rev 5918),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS57 (rev 6175),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS58 (rev 6432),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS59 (rev 9249),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS62 (rev 6942),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS80 (rev 7200),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS249 (rev 21010),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS250 (rev 21010),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled
IOS251 (rev 21010),No,Disabled,Disabled,Disabled,Disabled,Disabled,Disabled

Report generated on 2017/09/11
I don't know of that helps any? but it seems WiiXplorer does reboot into ios58..
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    SylverReZ @ SylverReZ: @K3Nv2 https://www.youtube.com/watch?v=9yWIobzBdKc