Hacking MarioKart Pwns

[iDarkTrace]

as this doesn't need "trucha bug",
would it be possible to do it like the "DISCSWAP"?
replacing the main.dol in INSTALLER partition with LoadMii.dol?

This seems QUITE interesting. Anybody want to try it out and see if it works? If I get time, I'll test.

P.S:
BTW.... I'm looking at the partitions..

Is the INSTALLER partition NOT supposed to have +/- Box at the left?
Bit worried here

...

 

[jason_y]

as this doesn't need "trucha bug",
would it be possible to do it like the "DISCSWAP"?
replacing the main.dol in INSTALLER partition with LoadMii.dol?

This seems QUITE interesting. Anybody want to try it out and see if it works? If I get time, I'll test.

P.S:
BTW.... I'm looking at the partitions..

Is the INSTALLER partition NOT supposed to have +/- Box at the left?
Bit worried here

...

oh i've tested it already, just don't know why it returns to the Wii menu itself(quit the game)...

about MarioKart INSTALLER partition, mine isn't (BAD), +/- buttons are still there...

 

[airline38]

i dont know if wiiscrubber will let you replace the partition due to its size. i just made mine with a little tool i made and a hex editor.

So far, here is what I did and I ran into a BIG error.

1. Start WiiScrubber
2. Load SSBB DVD5 iso
3. Right click 'Data Partition'
4. 'Unencrypted Partition' -> Save
5. At around 75%ish, I get an io_read error. When I press okay I get decrypt read error. And it loops forever until I terminate with Task Manager.

Anybody succeeded in getting Indiana in?

Edit: Also tried it with Encrypted Partition.
I'll try an Indiana Jones iso.

I did the same as you by using LEGO Indiana Jones and I can get the IMG file w/o problem (about 4.1GB)

My problem is I don't know how to replace installer partition (Mario Kart) with the IMG file I extracted from LEGO Indiana.
(got the error message : file too big to load into partition)

 

[airline38]

i dont know if wiiscrubber will let you replace the partition due to its size. i just made mine with a little tool i made and a hex editor.

Can you tell us how you did ? Is it possoble to share ur tool ?

 

[iDarkTrace]

oh i've tested it already, just don't know why it returns to the Wii menu itself(quit the game)...

about MarioKart INSTALLER partition, mine isn't (BAD), +/- buttons are still there...

Uhoh... well I burned the ISO on a disc, the game works fine and that channel installer works fine as well.

 

[Abkarino]

as this doesn't need "trucha bug",
would it be possible to do it like the "DISCSWAP"?
replacing the main.dol in INSTALLER partition with LoadMii.dol?

This seems QUITE interesting. Anybody want to try it out and see if it works? If I get time, I'll test.

P.S:
BTW.... I'm looking at the partitions..

Is the INSTALLER partition NOT supposed to have +/- Box at the left?
Bit worried here

...

I thought that you have a bad image my own backup have a good installer partition try to dump it again if you have your original DVD

here's my own backup image loaded into WiiScrubber 1.4

 

[iDarkTrace]

I thought that you have a bad image my own backup have a good installer partition try to dump it again if you have your original DVD

here's my own backup image loaded into WiiScrubber 1.4

o.o Err.. Well I will use it nonetheless, see if it still works.

Edit: Tested. When I say yes, the game goes black screen and freezes. Time to find another ISO.

Btw, I successfully extracted Lego Data Partition.

 

[airline38]

o.o Err.. Well I will use it nonetheless, see if it still works.

Edit: Tested. When I say yes, the game goes black screen and freezes. Time to find another ISO.

Btw, I successfully extracted Lego Data Partition.

Did u find a way to add LEGO Data partition to Mario Kart's Installer partition ?

 

[iDarkTrace]

o.o Err.. Well I will use it nonetheless, see if it still works.

Edit: Tested. When I say yes, the game goes black screen and freezes. Time to find another ISO.

Btw, I successfully extracted Lego Data Partition.

Did u find a way to add LEGO Data partition to Mario Kart's Installer partition ?

I didn't add, deleted the MKWii iso because of the "bad" installer I had. Right after I deleted it, I just realized that we are just replacing, overwrite if you will, a partition, therefore I don't think it matters if the Installer Partition is bad. (I hope...? Right giantpune?)

I will extract the iso from the disc and attempt adding the LEGO Data partition to the Mario Kart's Installer partition. I will return.

 

[iDarkTrace]

Hey airline38!!

Like what you are seeing?

To replace a partition, you must:
1. Make sure you save the LEGO Data Partition
2. Load up the Mario Kart Wii ISO
3. Right-Click the Installer Partition
4. Go to Unencrypted Partition
5. Click Load
6. Find your saved LEGO Data Partition and click Ok.
7. It should start replacing

My new problem now is that I MIGHT need a Dual-Layer disk... still replacing as we speak...

Thanks alot giantpune btw

Loads of love.

 

[airline38]

Hey airline38!!

Like what you are seeing?

To replace a partition, you must:
1. Make sure you save the LEGO Data Partition
2. Load up the Mario Kart Wii ISO
3. Right-Click the Installer Partition
4. Go to Unencrypted Partition
5. Click Load
6. Find your saved LEGO Data Partition and click Ok.
7. It should start replacing

My new problem now is that I MIGHT need a Dual-Layer disk... still replacing as we speak...

Thanks alot giantpune btw

Loads of love.

I did the same as you last night.

However, after the replacing process , I found the ISO size is over 8GB which is over a normal D9 capacity.

Another problem is I found the partition.bin (after replacing) is changed. (different from the partition.bin
of the original LEGO DATA partition ) It means even I can burn this ISO , it won't work under the normal
IOS33 (the IOS of Mario Kart installer partition).

This will against giantpune's result. That's why I asked for a correct way to replace installer partition.

Make sense ?

 

[iDarkTrace]

8.6GB here, DAMN.

Hm, you're right. The data in the LEGO Data partition has been changed...
It might still work, haven't tried it yet.

So much for SAVING the partition... I'll go buy a DVD+RW later.

P.S: Should I remove the update partition? To decrease the size. Or is that not recommended?

 

[wes11ph]

so any way to boot ssbb?

 

[giantpune]

you can remove the update partition and put the data partition at 0x50000 to save some space

ive been trying to tweek my stuff a bit to get SSBB to chainload. so far no luck

 

[iDarkTrace]

you can remove the update partition and put the data partition at 0x50000 to save some space

ive been trying to tweek my stuff a bit to get SSBB to chainload. so far no luck

Kk created a backup just incase.

Btw, I burnt the 8.6 on a DVD5 anyways. MKWii boots fine.
Problem is when I go to the channel installer and answer yes, it goes back to Wii Menu.

I was to expect that anyways I guess. Heheheh. I'll keep testing and try to shrink this iso.

Edit: Giantpune, the current is 0XA5140000 and it can't go to 0x50000. Should I just put it to minimum?
Edit2: Yeah I put it to minimum. Hehe. Burning another disc right now.
Edit3: The Wii tells me to turn off the power after putting in the 2nd disc. I'll put my two cents on the memory change...
Giantpune tell me, was your MKWii Installer Partition labeled "Bad" or labeled "Installer Partition"?

 

[giantpune]

you should just not use wiiscrubber if it wont let you do what you want to do. dust off your hex editor and then you dont have anything telling you what you can and cant do.

 

[iDarkTrace]

you should just not use wiiscrubber if it wont let you do what you want to do. dust off your hex editor and then you dont have anything telling you what you can and cant do.

lol, last time I used a hex editor, it was to hack Kingdom Hearts 358/2 Days, and must I say it was a success

*headache* Yah.. sure I'm gonna go pick one up. >_>

Edit: Hold it, you got Indy to work didn't you pune? What do I need to look out for, I'm a newb at this hacking business, still in highschool, I like learning this stuff though

.

So far I'm looking for a difference in the Indy Lego Data partitions since it got mysteriously modified when I replaced the installer partition.

P.S: Didn't answer my previous question: "Giantpune tell me, was your MKWii Installer Partition labeled "Bad" or labeled "Installer Partition"?"

Edit2: 3rd disk. Yes it was the memory change. Made another copy, deleted the update partition; made no other modification.
It allowed a bit more memory so instead of sending me to the Wii Menu, it sent me to the GAME

....HOWEVER, it gave me an error message telling me to turn off the Wii, but I think it came from the Indy and not MKWii. It was in japanese. (Could the act of the modification to the partition.. dunno.)
I'll take a picture later, not sure where my folks put the camera lol. I get the feeling I won't need to hex-edit anything. Just need to get myself a DL DVD+RW and I should be set.

 

[giantpune]

i dont know how else to say this... i didnt use wiiscrubber. my partition was not labeled anything.

heres some stuff from the first ISO i made that actually worked ( ended up being 8.2 GB ) this was before i got my next idea about how to shrink it farther. note that wiiscrubber reports the wrong size.

Spoiler

ÂÂID & type:ÂÂÂÂÂÂ RMCE01, ISO
ÂÂFile size:ÂÂÂÂÂÂ 20e970000/hex = 8834711552 = 8425 MiB
ÂÂDisc name:ÂÂÂÂÂÂ MarioKartWii
ÂÂRegion:ÂÂÂÂÂÂÂÂÂÂNTSC [NTSC]
ÂÂRegion setting:ÂÂ1 / 80 26 80 80ÂÂ80 80 80 80
ÂÂDirectories:ÂÂÂÂÂÂÂÂ587
ÂÂFiles:ÂÂÂÂÂÂÂÂÂÂÂÂ11252
ÂÂUsed ISO blocks: 149047 * 32 KiB = 4658 MiB

ÂÂPartition table #0, partition #0, type 0 [DATA]:
ÂÂÂÂPartition is encrypted.
ÂÂÂÂPartition key: 3a5355c4 42d15e7d b68be79c c3d34d44
ÂÂÂÂboot.bin, id: RMCE01
ÂÂÂÂboot.bin, title: MarioKartWii
ÂÂÂÂÂÂTIK:ÂÂÂÂÂÂÂÂÂÂ0 ..ÂÂÂÂÂÂ 2c0 ->ÂÂÂÂ 50000 ..ÂÂÂÂ 502c0, size:ÂÂÂÂÂÂ 2c0/hex =ÂÂÂÂÂÂÂÂ704
ÂÂÂÂÂÂTMD:ÂÂÂÂÂÂÂÂ2c0 ..ÂÂÂÂÂÂ 4c8 ->ÂÂÂÂ 502c0 ..ÂÂÂÂ 504c8, size:ÂÂÂÂÂÂ 208/hex =ÂÂÂÂÂÂÂÂ520
ÂÂÂÂÂÂCERT:ÂÂÂÂÂÂ 4e0 ..ÂÂÂÂÂÂ ee0 ->ÂÂÂÂ 504e0 ..ÂÂÂÂ 50ee0, size:ÂÂÂÂÂÂ a00/hex =ÂÂÂÂÂÂ 2560
ÂÂÂÂÂÂH3:ÂÂÂÂÂÂÂÂ8000 ..ÂÂÂÂ 20000 ->ÂÂÂÂ 58000 ..ÂÂÂÂ 70000, size:ÂÂÂÂ 18000/hex =ÂÂÂÂÂÂ98304
ÂÂÂÂÂÂData:ÂÂÂÂ 20000 .. 105ec0000 ->ÂÂÂÂ 70000 .. 105f10000, size: 105ea0000/hex = 4394188800
ÂÂÂÂTMD:
ÂÂÂÂÂÂIssuer:ÂÂÂÂÂÂÂÂÂÂRoot-CA00000001-CP00000004
ÂÂÂÂÂÂSignature type:ÂÂÂÂÂÂ10001/hex =ÂÂÂÂÂÂ65537
ÂÂÂÂÂÂVersion:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ 0
ÂÂÂÂÂÂCA version:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSigner version:ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSytem version:ÂÂ 00000001 00000024 = IOS 36 = IOS 0x24
ÂÂÂÂÂÂTitle ID:ÂÂÂÂÂÂÂÂ00010004 524d4345 = '....RMCE'
ÂÂÂÂÂÂTitle type:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂGroup ID:ÂÂÂÂÂÂÂÂÂÂÂÂ 3031/hex =ÂÂÂÂÂÂ12337
ÂÂÂÂÂÂAccess rights:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂTitle version:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂBoot index:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂN(content):ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂContent #0, ID:ÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, index:ÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, type:ÂÂÂÂÂÂÂÂ3/hex =ÂÂÂÂÂÂÂÂÂÂ3
ÂÂÂÂÂÂContent #0, size: fdba8000/hex = 4256858112
ÂÂÂÂÂÂContent #0, hash: bce17ccd 7b83679a 9dd502f8 ee6f0a17 f49c174a

ÂÂPartition table #0, partition #1, type 2 [CHANNEL]:
ÂÂÂÂPartition is encrypted.
ÂÂÂÂPartition key: 86c958bc e58be4ed 92a8f0e0 6c2162a1
ÂÂÂÂboot.bin, id: RLIP64
ÂÂÂÂboot.bin, title: LEGO® Indiana Jones?: The Original Adventures
ÂÂÂÂÂÂTIK:ÂÂÂÂÂÂÂÂÂÂ0 ..ÂÂÂÂÂÂ 2c0 -> 105f30000 .. 105f302c0, size:ÂÂÂÂÂÂ 2c0/hex =ÂÂÂÂÂÂÂÂ704
ÂÂÂÂÂÂTMD:ÂÂÂÂÂÂÂÂ2c0 ..ÂÂÂÂÂÂ 4c8 -> 105f302c0 .. 105f304c8, size:ÂÂÂÂÂÂ 208/hex =ÂÂÂÂÂÂÂÂ520
ÂÂÂÂÂÂCERT:ÂÂÂÂÂÂ 4e0 ..ÂÂÂÂÂÂ ee0 -> 105f304e0 .. 105f30ee0, size:ÂÂÂÂÂÂ a00/hex =ÂÂÂÂÂÂ 2560
ÂÂÂÂÂÂH3:ÂÂÂÂÂÂÂÂ8000 ..ÂÂÂÂ 20000 -> 105f38000 .. 105f50000, size:ÂÂÂÂ 18000/hex =ÂÂÂÂÂÂ98304
ÂÂÂÂÂÂData:ÂÂÂÂ 20000 .. 107bc0000 -> 105f50000 .. 20daf0000, size: 107ba0000/hex = 4424597504
ÂÂÂÂTMD:
ÂÂÂÂÂÂIssuer:ÂÂÂÂÂÂÂÂÂÂRoot-CA00000001-CP00000004
ÂÂÂÂÂÂSignature type:ÂÂÂÂÂÂ10001/hex =ÂÂÂÂÂÂ65537
ÂÂÂÂÂÂVersion:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ 0
ÂÂÂÂÂÂCA version:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSigner version:ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSytem version:ÂÂ 00000001 00000021 = IOS 33 = IOS 0x21
ÂÂÂÂÂÂTitle ID:ÂÂÂÂÂÂÂÂ00010000 524c4950 = '....RLIP'
ÂÂÂÂÂÂTitle type:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂGroup ID:ÂÂÂÂÂÂÂÂÂÂÂÂ 3634/hex =ÂÂÂÂÂÂ13876
ÂÂÂÂÂÂAccess rights:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂTitle version:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂBoot index:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂN(content):ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂContent #0, ID:ÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, index:ÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, type:ÂÂÂÂÂÂÂÂ3/hex =ÂÂÂÂÂÂÂÂÂÂ3
ÂÂÂÂÂÂContent #0, size: ff7c0000/hex = 4286316544
ÂÂÂÂÂÂContent #0, hash: 97b17740 7d031ac4 de85d178 81b3533a c4cbcd15


ÂÂISO Memory Map:

ÂÂÂÂÂÂÂÂÂÂunused :ÂÂ off(beg) ..ÂÂ off(end) :ÂÂÂÂÂÂsize : info
ÂÂÂÂ------------------------------------------------------------------------------------------
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂÂÂÂÂ0 ..ÂÂÂÂÂÂÂÂ100 :ÂÂÂÂÂÂ 100 : Header, magic=5d-1c-9e-a3, id=RMCE01
ÂÂÂÂÂÂÂÂÂÂ 3ff00 :ÂÂÂÂÂÂ40000 ..ÂÂÂÂÂÂ40020 :ÂÂÂÂÂÂÂÂ20 : Partition address table
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ40020 ..ÂÂÂÂÂÂ40030 :ÂÂÂÂÂÂÂÂ10 : Partition table #0 with 2 partitions
ÂÂÂÂÂÂÂÂÂÂÂÂdfd0 :ÂÂÂÂÂÂ4e000 ..ÂÂÂÂÂÂ4e020 :ÂÂÂÂÂÂÂÂ20 : Region settings, region=1
ÂÂÂÂÂÂÂÂÂÂÂÂ1fdc :ÂÂÂÂÂÂ4fffc ..ÂÂÂÂÂÂ50000 :ÂÂÂÂÂÂÂÂ 4 : Magic2: c3-f8-1a-8e
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ50000 ..ÂÂÂÂÂÂ502c0 :ÂÂÂÂÂÂ 2c0 : P.0.0 DATA: ticket, id=RMCE
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ502c0 ..ÂÂÂÂÂÂ504c8 :ÂÂÂÂÂÂ 208 : P.0.0 DATA: tmd, ios=36, id=RMCE
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ18 :ÂÂÂÂÂÂ504e0 ..ÂÂÂÂÂÂ50ee0 :ÂÂÂÂÂÂ a00 : P.0.0 DATA: cert
ÂÂÂÂÂÂÂÂÂÂÂÂ7120 :ÂÂÂÂÂÂ58000 ..ÂÂÂÂÂÂ70000 :ÂÂÂÂ 18000 : P.0.0 DATA: h3
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ70000 ..ÂÂÂÂ 378000 :ÂÂÂÂ308000 : P.0.0 DATA: data+fst, N(fst)=2071
ÂÂÂÂÂÂÂÂ60d18000 :ÂÂ 61090000 ..ÂÂ105f10000 :ÂÂa4e80000 : P.0.0 DATA: data+fst
ÂÂÂÂÂÂÂÂÂÂ 20000 :ÂÂ105f30000 ..ÂÂ105f302c0 :ÂÂÂÂÂÂ 2c0 : P.0.1 CHANNEL: ticket, id=RLIP
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂ105f302c0 ..ÂÂ105f304c8 :ÂÂÂÂÂÂ 208 : P.0.1 CHANNEL: tmd, ios=33, id=RLIP
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ18 :ÂÂ105f304e0 ..ÂÂ105f30ee0 :ÂÂÂÂÂÂ a00 : P.0.1 CHANNEL: cert
ÂÂÂÂÂÂÂÂÂÂÂÂ7120 :ÂÂ105f38000 ..ÂÂ105f50000 :ÂÂÂÂ 18000 : P.0.1 CHANNEL: h3
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂ105f50000 ..ÂÂ106490000 :ÂÂÂÂ540000 : P.0.1 CHANNEL: data+fst, N(fst)=9740
ÂÂÂÂÂÂÂÂ89bc8000 :ÂÂ190058000 ..ÂÂ20daf0000 :ÂÂ7da98000 : P.0.1 CHANNEL: data+fst
ÂÂÂÂÂÂÂÂÂÂe80000 :ÂÂ20e970000 ..ÂÂ20e970000 :ÂÂÂÂÂÂÂÂ 0 : -- End of file/disc --

 

[dn_angel000]

Hey I'm playing Mario Kart Wii on USB Loader GX and was wondering if I were playing on Wifi would Nintendo b able 2 know if I acually had the game or it was running off a Loader?? lol

 

[iDarkTrace]

i dont know how else to say this... i didnt use wiiscrubber. my partition was not labeled anything.

heres some stuff from the first ISO i made that actually worked ( ended up being 8.2 GB ) this was before i got my next idea about how to shrink it farther. note that wiiscrubber reports the wrong size.

Nice GUI... *shakes head*
Err, oh yeah, I noticed Wiiscrubber was reporting a wrong size. Kinda lame.
Meh, next thing to do is to buy a DL DVD+RW. Thanks for the information giantpune

. Helped me tons.
I'll report back when I buy and test.