Hacking Acquiring Wii U game main executable

[BullyWiiPlaza]

How can the main executable of a Wii U game be dumped? I believe they are called rpl or rpx files. For modding and compatibility issues with certain games, it would be useful to access them. I didn't really find any information on how to do it.

When the pyGecko codehandler crashes the game, further investigation is needed. Here's a GitHub issue related to that:
https://github.com/wiiudev/pyGecko/issues/2

Also for modding it would be useful to see how and where file signatures are checked:
http://gbatemp.net/threads/black-ops-2-fastfile-modding.396317/

Thank you

 

[Hiccup]

Is this a physical game?

 

[BullyWiiPlaza]

Is this a physical game?

Yeah

 

[Mazamin]

You can access it by the wud, so the raw image, but with wii u homebrews i don't know how to dump or inject.

 

[Lory171]

How can the main executable of a Wii U game be dumped? I believe they are called rpl or rpx files. For modding and compatibility issues with certain games, it would be useful to access them. I didn't really find any information on how to do it.

When the pyGecko codehandler crashes the game, further investigation is needed. Here's a GitHub issue related to that:
https://github.com/wiiudev/pyGecko/issues/2

Also for modding it would be useful to see how and where file signatures are checked:
http://gbatemp.net/threads/black-ops-2-fastfile-modding.396317/

Thank you

Game.rpx (main executable), cos.xml and app.xml (settings and values) are all stored inside the data partition on the code folder (data/code). This folder cannot be dumped as now because of some security from Nintendo, and your only possibility is too get it from scene releases.
The signature I think are stored inside the system partition (system/) and this partition is not accessible by kernel so it can't be dumped, again the only way is by scene releases.
As of now the user can only access data/content.

Edit:

You can access it by the wud, so the raw image, but with wii u homebrews i don't know how to dump or inject.

You actually can't dump disc images (.wud)

 

[Marionumber1]

Since we can fake our IOSU permissions with the kernel exploit, it should be possible to mount the code directory. We just need to figure out what the loader does, which can be done through reversing loader.elf or logging all IOSU requests (I have a tool for the latter).

 

[Mazamin]

Game.rpx (main executable), cos.xml and app.xml (settings and values) are all stored inside the data partition on the code folder (data/code). This folder cannot be dumped as now because of some security from Nintendo, and your only possibility is too get it from scene releases.
The signature I think are stored inside the system partition (system/) and this partition is not accessible by kernel so it can't be dumped, again the only way is by scene releases.
As of now the user can only access data/content.

Edit:

You actually can't dump disc images (.wud)

But you can download them

 

[FR0ZN]

I'm pretty sure he's after the Black Ops 2 main executeable to get the decryption key for the fastfiles
Only problem I currently see here, is that there is no BO2 scene release afaik

 

[BullyWiiPlaza]

I'm pretty sure he's after the Black Ops 2 main executeable to get the decryption key for the fastfiles

I already have the decryption key but I need to patch the executable still for the fastfile signature verification most likely and since the pyGecko codehandler freezes it will serve another good purpose

 

[nastys]

I already have the decryption key but I need to patch the executable still for the fastfile signature verification most likely and since the pyGecko codehandler freezes it will serve another good purpose

Wait, how can you replace the executable?

 

[BullyWiiPlaza]

Wait, how can you replace the executable?

I don't know yet

 

[Dr.Hacknik]

Woah...Woah....WOAAAHH!! Your telling me, that the Wii U's file system arrangement or how it's organized has been, basically Dumped??
Where have i been, must have been in a dark cave for too long.

 

[MrRean]

to get the rpx you have to dump the encrypted data and decrypt it, you'll get code on the first chunk

 

[Marionumber1]

to get the rpx you have to dump the encrypted data and decrypt it, you'll get code on the first chunk

You can't dump the encrypted data off the Wii U without IOSU access.

 

[MrRean]

I don't know yet

The closest thing to ASM right now is editing memory through TCPGecko.