Hacking MarioKart Pwns

[airline38]

mine came out to 8.2GB. DVDs

Can you let us know how did you burn the 8.2GB ISO file by using a normal DL (8.5GB) disc ?

or you only used WODE to simulate/run this 8.2GB file ?

I tried again to use the same parameters (105ee0000 107bc0000) to merge Mario Kart+LEGO partition then
got the 8.21GB ISO file .

However, no matter I used Imgburn or Nero , they all showed me the ISO file is too big to burn. (under a normal 8.5GB DL disc)

I don't know if there is anyone who is able to burn the 8.2GB file successfully ? If so, can someone explain how to make it ?

 

[giantpune]

there is no way in the world this will work with conventional usb loading. it switches partitions = IOS reload. and sneek's di doesnt support multiple partitions. one could easily change the DI module in sneek to support this stuff for testing purposes, but dont even think about doing it with a cIOS usb loader.

Here is the rabbids game being used for the same purpose

http://www.youtube.com/watch?v=NuPAlFZLArA

Spoiler

ÂÂID & type:ÂÂÂÂÂÂ RGWX41, ISO
ÂÂFile size:ÂÂÂÂÂÂ 20c648000/hex = 8797847552 = 8390 MiB
ÂÂDisc name:ÂÂÂÂÂÂ Rabbids Go Home
ÂÂRegion:ÂÂÂÂÂÂÂÂÂÂRegion free [RFÂÂ]
ÂÂRegion setting:ÂÂ2 / 80 80 80 00ÂÂ07 07 06 07
ÂÂDirectories:ÂÂÂÂÂÂÂÂ542
ÂÂFiles:ÂÂÂÂÂÂÂÂÂÂÂÂ 9425
ÂÂUsed ISO blocks: 139685 * 32 KiB = 4365 MiB

ÂÂPartition table #0, partition #0, type 0 [DATA]:
ÂÂÂÂPartition is encrypted.
ÂÂÂÂPartition key: fa32ec71 33003e61 324cf708 7577a1b8
ÂÂÂÂboot.bin, id: RGWX41
ÂÂÂÂboot.bin, title: Rabbids Go Home
ÂÂÂÂÂÂTIK:ÂÂÂÂÂÂÂÂÂÂ0 ..ÂÂÂÂÂÂ 2c0 ->ÂÂÂÂ 50000 ..ÂÂÂÂ 502c0, size:ÂÂÂÂÂÂ 2c0/hex =ÂÂÂÂÂÂÂÂ704
ÂÂÂÂÂÂTMD:ÂÂÂÂÂÂÂÂ2c0 ..ÂÂÂÂÂÂ 4c8 ->ÂÂÂÂ 502c0 ..ÂÂÂÂ 504c8, size:ÂÂÂÂÂÂ 208/hex =ÂÂÂÂÂÂÂÂ520
ÂÂÂÂÂÂCERT:ÂÂÂÂÂÂ 4e0 ..ÂÂÂÂÂÂ ee0 ->ÂÂÂÂ 504e0 ..ÂÂÂÂ 50ee0, size:ÂÂÂÂÂÂ a00/hex =ÂÂÂÂÂÂ 2560
ÂÂÂÂÂÂH3:ÂÂÂÂÂÂÂÂ8000 ..ÂÂÂÂ 20000 ->ÂÂÂÂ 58000 ..ÂÂÂÂ 70000, size:ÂÂÂÂ 18000/hex =ÂÂÂÂÂÂ98304
ÂÂÂÂÂÂData:ÂÂÂÂ 20000 .. 104a38000 ->ÂÂÂÂ 70000 .. 104a88000, size: 104a18000/hex = 4372660224
ÂÂÂÂTMD:
ÂÂÂÂÂÂIssuer:ÂÂÂÂÂÂÂÂÂÂRoot-CA00000001-CP00000004
ÂÂÂÂÂÂSignature type:ÂÂÂÂÂÂ10001/hex =ÂÂÂÂÂÂ65537
ÂÂÂÂÂÂVersion:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ 0
ÂÂÂÂÂÂCA version:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSigner version:ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSytem version:ÂÂ 00000001 00000037 = IOS 55 = IOS 0x37
ÂÂÂÂÂÂTitle ID:ÂÂÂÂÂÂÂÂ00010004 52475758 = '....RGWX'
ÂÂÂÂÂÂTitle type:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂGroup ID:ÂÂÂÂÂÂÂÂÂÂÂÂ 3431/hex =ÂÂÂÂÂÂ13361
ÂÂÂÂÂÂAccess rights:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂTitle version:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂBoot index:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂN(content):ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂContent #0, ID:ÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, index:ÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, type:ÂÂÂÂÂÂÂÂ3/hex =ÂÂÂÂÂÂÂÂÂÂ3
ÂÂÂÂÂÂContent #0, size: fc7c0000/hex = 4235984896
ÂÂÂÂÂÂContent #0, hash: 8d66d35c 5ab5b4d2 92bffea4 c2cd675e 98069cc4

ÂÂPartition table #0, partition #1, type 2 [CHANNEL]:
ÂÂÂÂPartition is encrypted.
ÂÂÂÂPartition key: 86c958bc e58be4ed 92a8f0e0 6c2162a1
ÂÂÂÂboot.bin, id: RLIP64
ÂÂÂÂboot.bin, title: LEGO® Indiana Jones(tm): The Original Adventures
ÂÂÂÂÂÂTIK:ÂÂÂÂÂÂÂÂÂÂ0 ..ÂÂÂÂÂÂ 2c0 -> 104a88000 .. 104a882c0, size:ÂÂÂÂÂÂ 2c0/hex =ÂÂÂÂÂÂÂÂ704
ÂÂÂÂÂÂTMD:ÂÂÂÂÂÂÂÂ2c0 ..ÂÂÂÂÂÂ 4c8 -> 104a882c0 .. 104a884c8, size:ÂÂÂÂÂÂ 208/hex =ÂÂÂÂÂÂÂÂ520
ÂÂÂÂÂÂCERT:ÂÂÂÂÂÂ 4e0 ..ÂÂÂÂÂÂ ee0 -> 104a884e0 .. 104a88ee0, size:ÂÂÂÂÂÂ a00/hex =ÂÂÂÂÂÂ 2560
ÂÂÂÂÂÂH3:ÂÂÂÂÂÂÂÂ8000 ..ÂÂÂÂ 20000 -> 104a90000 .. 104aa8000, size:ÂÂÂÂ 18000/hex =ÂÂÂÂÂÂ98304
ÂÂÂÂÂÂData:ÂÂÂÂ 20000 .. 107bc0000 -> 104aa8000 .. 20c648000, size: 107ba0000/hex = 4424597504
ÂÂÂÂTMD:
ÂÂÂÂÂÂIssuer:ÂÂÂÂÂÂÂÂÂÂRoot-CA00000001-CP00000004
ÂÂÂÂÂÂSignature type:ÂÂÂÂÂÂ10001/hex =ÂÂÂÂÂÂ65537
ÂÂÂÂÂÂVersion:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ 0
ÂÂÂÂÂÂCA version:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSigner version:ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂSytem version:ÂÂ 00000001 00000021 = IOS 33 = IOS 0x21
ÂÂÂÂÂÂTitle ID:ÂÂÂÂÂÂÂÂ00010000 524c4950 = '....RLIP'
ÂÂÂÂÂÂTitle type:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂGroup ID:ÂÂÂÂÂÂÂÂÂÂÂÂ 3634/hex =ÂÂÂÂÂÂ13876
ÂÂÂÂÂÂAccess rights:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂTitle version:ÂÂÂÂÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂBoot index:ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂN(content):ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ1/hex =ÂÂÂÂÂÂÂÂÂÂ1
ÂÂÂÂÂÂContent #0, ID:ÂÂÂÂÂÂÂÂÂÂ0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, index:ÂÂÂÂÂÂ 0/hex =ÂÂÂÂÂÂÂÂÂÂ0
ÂÂÂÂÂÂContent #0, type:ÂÂÂÂÂÂÂÂ3/hex =ÂÂÂÂÂÂÂÂÂÂ3
ÂÂÂÂÂÂContent #0, size: ff7c0000/hex = 4286316544
ÂÂÂÂÂÂContent #0, hash: 97b17740 7d031ac4 de85d178 81b3533a c4cbcd15


ÂÂISO Memory Map:

ÂÂÂÂÂÂÂÂÂÂunused :ÂÂ off(beg) ..ÂÂ off(end) :ÂÂÂÂÂÂsize : info
ÂÂÂÂ------------------------------------------------------------------------------------------
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂÂÂÂÂ0 ..ÂÂÂÂÂÂÂÂ100 :ÂÂÂÂÂÂ 100 : Header, magic=5d-1c-9e-a3, id=RGWX41
ÂÂÂÂÂÂÂÂÂÂ 3ff00 :ÂÂÂÂÂÂ40000 ..ÂÂÂÂÂÂ40020 :ÂÂÂÂÂÂÂÂ20 : Partition address table
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ40020 ..ÂÂÂÂÂÂ40030 :ÂÂÂÂÂÂÂÂ10 : Partition table #0 with 2 partitions
ÂÂÂÂÂÂÂÂÂÂÂÂdfd0 :ÂÂÂÂÂÂ4e000 ..ÂÂÂÂÂÂ4e020 :ÂÂÂÂÂÂÂÂ20 : Region settings, region=2
ÂÂÂÂÂÂÂÂÂÂÂÂ1fdc :ÂÂÂÂÂÂ4fffc ..ÂÂÂÂÂÂ50000 :ÂÂÂÂÂÂÂÂ 4 : Magic2: c3-f8-1a-8e
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ50000 ..ÂÂÂÂÂÂ502c0 :ÂÂÂÂÂÂ 2c0 : P.0.0 DATA: ticket, id=RGWX
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ502c0 ..ÂÂÂÂÂÂ504c8 :ÂÂÂÂÂÂ 208 : P.0.0 DATA: tmd, ios=55, id=RGWX
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ18 :ÂÂÂÂÂÂ504e0 ..ÂÂÂÂÂÂ50ee0 :ÂÂÂÂÂÂ a00 : P.0.0 DATA: cert
ÂÂÂÂÂÂÂÂÂÂÂÂ7120 :ÂÂÂÂÂÂ58000 ..ÂÂÂÂÂÂ70000 :ÂÂÂÂ 18000 : P.0.0 DATA: h3
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂÂÂÂÂ70000 ..ÂÂÂÂ 668000 :ÂÂÂÂ5f8000 : P.0.0 DATA: data+fst, N(fst)=199
ÂÂÂÂÂÂÂÂ71d18000 :ÂÂ 72380000 ..ÂÂ104a80000 :ÂÂ92700000 : P.0.0 DATA: data+fst
ÂÂÂÂÂÂÂÂÂÂÂÂ8000 :ÂÂ104a88000 ..ÂÂ104a882c0 :ÂÂÂÂÂÂ 2c0 : P.0.1 CHANNEL: ticket, id=RLIP
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂ104a882c0 ..ÂÂ104a884c8 :ÂÂÂÂÂÂ 208 : P.0.1 CHANNEL: tmd, ios=33, id=RLIP
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂ18 :ÂÂ104a884e0 ..ÂÂ104a88ee0 :ÂÂÂÂÂÂ a00 : P.0.1 CHANNEL: cert
ÂÂÂÂÂÂÂÂÂÂÂÂ7120 :ÂÂ104a90000 ..ÂÂ104aa8000 :ÂÂÂÂ 18000 : P.0.1 CHANNEL: h3
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂ104aa8000 ..ÂÂ104fe8000 :ÂÂÂÂ540000 : P.0.1 CHANNEL: data+fst, N(fst)=9740
ÂÂÂÂÂÂÂÂ89bc8000 :ÂÂ18ebb0000 ..ÂÂ20c648000 :ÂÂ7da98000 : P.0.1 CHANNEL: data+fst
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ :ÂÂ20c648000 ..ÂÂ20c648000 :ÂÂÂÂÂÂÂÂ 0 : -- End of file/disc --

if people still cant figure this out, you cant mail me your wii along with a retail copy of mariokart, a sd card with the hackmii installer, and 20usd. i dont feel bad taking money for this since i have already shared exactly how to make these images for free. the $20 is a convenience fee.

 

[wes11ph]

any percent of success with ssbb?... i doing it too.
does the DL partition have a conflict on SL partitions?

 

[giantpune]

i haven't even been able to get a trimmed-down version of SSBB to boot this way yet. i think it may have something to do with the same thing that causes that game not to be able to be autobooted, but i still haven't given up on it.

 

[Abkarino]

i haven't even been able to get a trimmed-down version of SSBB to boot this way yet. i think it may have something to do with the same thing that causes that game not to be able to be autobooted, but i still haven't given up on it.

That's sound bad i hope that we can do it using SSBB since it doesn't need any previous game save so we can use it in a condition of 003 Korean Wii to fix it using this way

 

[George Dawes]

Anything other than 4.3 can be hacked easily on any firmware using either version of bannerbomb.

I'm not sure where I said otherwise.

 

[iDarkTrace]

Oy, so does Wii Fit AND Wii Fit Plus work? I found an installer partition in Wii Fit Plus.

Edit1: Can't play Wii Fit Plus without Wii Balance Board.
Edit2: Someone already said Wii Fit works.
Edit3: Ooooooooooooh, nvm, none of them work without Wii Balance Board.

Gah forget it. I'll just stick with the ISO I have now, it loaded perfectly, all I need now is a DL 8.5GB DVD+RW.

MKWii + SSBB - Reported not working by giantpune. He is still testing. (Error 001 I believe?)
MKWii + Indy - Tested and working
RavingRabbids + Indy - Tested and working
RavingRabbids + SSBB - Not tested

Ah one more thing, UNLESS you have a Wii Balance Board, do not even attempt Wii Fit OR Wii Fit Plus + Indy OR SSBB; you'll be wasting your time.

 

[linuxares]

Do you think the same can be a complished by the Sam & Max games?

I'm not really sure since its not the same as Mariokart with the channels but it still have a "IOS Reload" when it boots a episode.

 

[cthg]

Do you think the same can be a complished by the Sam & Max games?

I'm not really sure since its not the same as Mariokart with the channels but it still have a "IOS Reload" when it boots a episode.

I don't think so. I think this only works because Mario Kart stores the channel on a completely different parition on the wii disk which is never hash checked so the 2048 bit encryption does not have to be signed. It just loads whatever on the other partition.

So I guess all modchips do is let you play dvd-r's the encryption still has to be right apparently. You need trucha hack to play modified games.

 

[smf]

I don't think so. I think this only works because Mario Kart stores the channel on a completely different parition on the wii disk which is never hash checked so the 2048 bit encryption does not have to be signed. It just loads whatever on the other partition.

The hashes are checked, but the partition you are injecting is signed. For anything else you need a trucha bugged ios.

 

[linuxares]

Ah cool, then I got that answered

 

[Deleted member 180466]

Do you think the same can be a complished by the Sam & Max games?

I'm not really sure since its not the same as Mariokart with the channels but it still have a "IOS Reload" when it boots a episode.

I don't think so. I think this only works because Mario Kart stores the channel on a completely different parition on the wii disk which is never hash checked so the 2048 bit encryption does not have to be signed. It just loads whatever on the other partition.

So I guess all modchips do is let you play dvd-r's the encryption still has to be right apparently. You need trucha hack to play modified games.

But these masterpieces in Super Smash Bros. Brawl, do they not is in their own partitions?

 

[cthg]

Do you think the same can be a complished by the Sam & Max games?

I'm not really sure since its not the same as Mariokart with the channels but it still have a "IOS Reload" when it boots a episode.

I don't think so. I think this only works because Mario Kart stores the channel on a completely different parition on the wii disk which is never hash checked so the 2048 bit encryption does not have to be signed. It just loads whatever on the other partition.

So I guess all modchips do is let you play dvd-r's the encryption still has to be right apparently. You need trucha hack to play modified games.

But these masterpieces in Super Smash Bros. Brawl, do they not is in their own partitions?

They are all in the same partition so most likely it tries to load the specific file.

 

[giantpune]

the trials are on their own partitions, but you still need the SSBB 6.1GB partition along with whatever you replace the trial with. its much bigger than using mariokart or wiifit.


btw, heres the sizes if gotten so far using full, signed partitions using "wit MIX --overlay"
mariokart -> indiana jones = 8.2GB
rabbids go home -> indiana jones = 8.2GB
wii fit -> indiana jones = 5.4GB
wii fit plus -> indiana jones = 6.2GB

 

[manvslife12]

Oy, so does Wii Fit AND Wii Fit Plus work? I found an installer partition in Wii Fit Plus.

Edit1: Can't play Wii Fit Plus without Wii Balance Board.
Edit2: Someone already said Wii Fit works.
Edit3: Ooooooooooooh, nvm, none of them work without Wii Balance Board.

Gah forget it. I'll just stick with the ISO I have now, it loaded perfectly, all I need now is a DL 8.5GB DVD+RW.

MKWii + SSBB - Reported not working by giantpune. He is still testing. (Error 001 I believe?)
MKWii + Indy - Tested and working
RavingRabbids + Indy - Tested and working
RavingRabbids + SSBB - Not tested

Ah one more thing, UNLESS you have a Wii Balance Board, do not even attempt Wii Fit OR Wii Fit Plus + Indy OR SSBB; you'll be wasting your time.

Thanks you so much. I got answered. Still waiting for SSBB work

 

[airline38]

Not sure if anyone is aware of the ISO file size difference between PC and DISC.

The 8.2GB size file in PC should be calculated by 8.2 x 1024 = 8397 MB (1GB=1024MB)

However, a 8.5GB DL disc capacity is actually only 8.5 x 1000 / 1024 = 8300 MB
because DISC industry normally treat 1GB = 1000 MB

That's why I said I had problem to burn the 8.2GB file by using a 8.5GB DL disc.

If anyone had tried to burn the merged file (Mario Kart+Lego Indiana) , he/she should
understand what I said.

 

[Abkarino]

Oy, so does Wii Fit AND Wii Fit Plus work? I found an installer partition in Wii Fit Plus.

Edit1: Can't play Wii Fit Plus without Wii Balance Board.
Edit2: Someone already said Wii Fit works.
Edit3: Ooooooooooooh, nvm, none of them work without Wii Balance Board.

Gah forget it. I'll just stick with the ISO I have now, it loaded perfectly, all I need now is a DL 8.5GB DVD+RW.

MKWii + SSBB - Reported not working by giantpune. He is still testing. (Error 001 I believe?)
MKWii + Indy - Tested and working
RavingRabbids + Indy - Tested and working
RavingRabbids + SSBB - Not tested

Ah one more thing, UNLESS you have a Wii Balance Board, do not even attempt Wii Fit OR Wii Fit Plus + Indy OR SSBB; you'll be wasting your time.

Thanks you so much. I got answered. Still waiting for SSBB work

Me also waiting for SSBB to work

 

[Abkarino]

the trials are on their own partitions, but you still need the SSBB 6.1GB partition along with whatever you replace the trial with. its much bigger than using mariokart or wiifit.


btw, heres the sizes if gotten so far using full, signed partitions using "wit MIX --overlay"
mariokart -> indiana jones = 8.2GB
rabbids go home -> indiana jones = 8.2GB
wii fit -> indiana jones = 5.4GB
wii fit plus -> indiana jones = 6.2GB

@giantpune: sorry giantpune can you tell me if you just tested it using a WODE or any DVD-ROM Drive emulator or you just burnt it to DL-DVD and test it and if so what about a Layer Brick do you left it as default setting or used a special Layer Brick offset?

Thanks in advance

 

[giantpune]

i didnt burn a single disc for this. i never have burned a wii game that worked right and i didnt feel like wasting dvds to figure it out. there are ( in theory ) still a couple ways to get these isos to shrink down to well under the 8.2GB size they are now, but are not really even tested yet.

 

[airline38]

i didnt burn a single disc for this. i never have burned a wii game that worked right and i didnt feel like wasting dvds to figure it out. there are ( in theory ) still a couple ways to get these isos to shrink down to well under the 8.2GB size they are now, but are not really even tested yet.

Can you advise those 'couple ways to shrink down the 8.2GB file' clearly ? I would like to be a volunteer to test any way you suggest.