Injecting into Wii VC on Wii U

Discussion in 'Wii U - Hacking & Backup Loaders' started by CeeDee, Nov 29, 2016.

  1. CeeDee
    OP

    CeeDee hm?~

    Member
    3,826
    5,382
    May 4, 2014
    United States
    somewhere
    Alright, I've got nothing on this.

    I've got a decrypted copy of an eShop Wii VC game (Mario Galaxy 2) and apparently, the Galaxy 2 game itself is in some some strange split file format, with files named "hif_000000.nfs" through "hif_000005.nfs"
    All except hif_000005 are 250MB, with the last one being the remainder of the game, like a standard split RAR archive, but it's not.
    The beginning of the first file starts with "EGGS" which I'm unsure if it's a reference to Yoshi, or something else entirely, but nothing I've tried can open these.

    I'll probably upload it somewhere, if anyone else wants to take a look at it.
    Here's what the file system looks like:

    upload_2016-11-28_20-31-18.png
     
    iVcU, CatmanFan, Quantumcat and 3 others like this.


  2. Irastris

    Irastris Just another fag with a suggestive avatar

    Member
    1,005
    570
    May 3, 2015
    United States
    Sorry, but as of my writing this, no one has reverse-enginerred the .nfs format in order to be capable of creating Wii VC injects.

    However, someone has been working hard at figuring out exactly how OSv1 works, and from what I've read of his findings, it may be possible to create a sort of forwarder that could load Wii games in the SNEEK (extracted filesystem) format. Don't get your hopes up, though.
     
    CeeDee likes this.
  3. KiiWii

    KiiWii GBAtemp Psycho!

    Member
    3,818
    1,339
    Nov 17, 2008
    United Kingdom
    FrisbiiU made me lol.

    Will be great when we can inject these too.
     
    smileyhead, CatmanFan and CeeDee like this.
  4. CeeDee
    OP

    CeeDee hm?~

    Member
    3,826
    5,382
    May 4, 2014
    United States
    somewhere
    Can I get a link to this? It'd be rather nice to read into.
     
  5. ItsKipz

    ItsKipz l33t hax0r

    Member
    1,659
    994
    Sep 9, 2016
    United States
    The C: drive
    Woah, whats that fw.img up there?
     
    CeeDee likes this.
  6. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    Probably a custom fw.img(vWii).
    Someone said that he can launch Wii VC title from redNAND. This can be an explaination (dunno)

    — Posts automatically merged - Please don't double post! —

    I decrypted a game too for seeing these things
     
    CeeDee likes this.
  7. ItsKipz

    ItsKipz l33t hax0r

    Member
    1,659
    994
    Sep 9, 2016
    United States
    The C: drive
    Is anyone here brave enough to launch that via cfwbooter? dissecting that fw.img might help with the vwii on rednand problem.
     
    CeeDee likes this.
  8. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    It should be launched from vWii I think

    — Posts automatically merged - Please don't double post! —

    I think .nfs files are a encrypted splitted wbfs/iso
     
    CeeDee and zeldaism like this.
  9. CatmanFan

    CatmanFan nope

    Member
    1,285
    408
    Aug 14, 2016
    Morocco
    Has anyone tried launching the vWii fw.img from CFWBooter yet?
     
    CeeDee likes this.
  10. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    It won't work
     
    CeeDee likes this.
  11. CuriousTommy

    CuriousTommy GBAtemp Fan

    Member
    422
    114
    Jul 22, 2014
    United States
    Is it possible to open the fw.ing?
     
    CeeDee likes this.
  12. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    With an hex editor
     
    CeeDee likes this.
  13. CatmanFan

    CatmanFan nope

    Member
    1,285
    408
    Aug 14, 2016
    Morocco
    From where? PC or Wii U?

    If you try opening it with WiiXplorer from vWii itself, probably won't work. Try opening the file from Windows Explorer on PC and it give you the prompt to burn it to CD/DVD, which isn't really useful unless you're making a SNES Station PS2 disc or trying to make (v)Wii backup discs.
     
    CeeDee likes this.
  14. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    Ok... opened the img and found these intersting bytes
    2F 64 65 76 2F 75 73 62 2F 6F 68 30 00 00 00 00 6F 6C 64 20 68 75 62 20 69 6E 73 74 0A 00 00 00 13 8A 1E 2C 13 8A 1D A6 13 8A 1D AE 13 8A 1E 3C 13 8A 1E 58 13 8A 1E 8A 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1C CC 13 8A 1D 28 13 8A 1D EC 13 8A 1D 9E 13 8A 1D B6 13 8A 1D 9E 65 72 72 6F 72 3A 20 61 62 6F 72 74 65 64 20 67 65 74 20 64 65 76 20 64 73 63 0A 00 28 6E 75 6C 6C 29 00 00 28 6E 69 6C 29 00 00 00 13
     
    CeeDee likes this.
  15. ihaveamac

    ihaveamac GBAtemp Guru

    Member
    5,467
    5,961
    Apr 20, 2015
    United States
    Tigard, OR
    might be useful to show what the bytes are in text, too
    Code:
    00000000: 2f64 6576 2f75 7362 2f6f 6830 0000 0000  /dev/usb/oh0....
    00000010: 6f6c 6420 6875 6220 696e 7374 0a00 0000  old hub inst....
    00000020: 138a 1e2c 138a 1da6 138a 1dae 138a 1e3c  ...,...........<
    00000030: 138a 1e58 138a 1e8a 138a 1ccc 138a 1ccc  ...X............
    00000040: 138a 1ccc 138a 1ccc 138a 1ccc 138a 1ccc  ................
    00000050: 138a 1ccc 138a 1ccc 138a 1ccc 138a 1ccc  ................
    00000060: 138a 1d28 138a 1dec 138a 1d9e 138a 1db6  ...(............
    00000070: 138a 1d9e 6572 726f 723a 2061 626f 7274  ....error: abort
    00000080: 6564 2067 6574 2064 6576 2064 7363 0a00  ed get dev dsc..
    00000090: 286e 756c 6c29 0000 286e 696c 2900 0000  (null)..(nil)...
    000000a0: 13                                       .
    
     
    CeeDee and CuriousTommy like this.
  16. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    Warning: Spoilers inside!
    From 0x00002E90 to 0x0000305F

    Warning: Spoilers inside!
    From 0x00004E90 to 0x0000502F

    From 0x00006FD0 to 0x0000725F and others

    — Posts automatically merged - Please don't double post! —

    In frisbiiU this: [SDK+Nintendo:Error_2_4_0]
    Code:
    5B 53 44 4B 2B 4E 69 6E 74 65 6E 64 6F 3A 45 72 72 6F 72 5F 32 5F 34 5F 30 5D
     
    Last edited by C0mm4nd_, Dec 4, 2016
    CeeDee likes this.
  17. ItsKipz

    ItsKipz l33t hax0r

    Member
    1,659
    994
    Sep 9, 2016
    United States
    The C: drive
    aborted get dev disk? usb/oh0? hmmm...
     
    CeeDee likes this.
  18. Irastris

    Irastris Just another fag with a suggestive avatar

    Member
    1,005
    570
    May 3, 2015
    United States
    Sorry, I don't believe there's a thread anywhere. The info I was talking about was being discussed on the WiiUBru IRC chat.
     
    KiiWii and CeeDee like this.
  19. jose1209

    jose1209 Member

    Newcomer
    28
    17
    Jul 2, 2007
    Burkina Faso

    this is interesting,
    i'v seen a .wbfs file of galaxy2 and the size was 1355776 bytes, this looks close to the 5X250 mb +l ast smaller .nfs file.

    have you compare the iso wbfs with the ""splitted files"" joined (1+2+3+4+5) ? maybe it's not encrypted...

    a vc n64 decrypted have folders: code, meta, content, in content you can find a folder ROM, with a rom image (non crypted) of the game allowing injecting in a easy way roms.
    so why the NFS file should be encrypted ? the others files seems to be a "basic" loader, that mount the wbfs and lunch the game via the channel VWII.

    it could be interesting to swap 2 VCWII NFS files (brick risk anyway !) to see if the loader cares what it runs.
     
  20. C0mm4nd_

    C0mm4nd_ Aspirant Wii U homebrew dev :P

    Member
    697
    337
    Oct 9, 2016
    Italy
    Another thing is trying to load a vWii VC with loadiine

    — Posts automatically merged - Please don't double post! —

    Tried to load fw.img and nothing. It doesn't load
     
    TotalInsanity4 likes this.