Hacking [OLD] Loadiine backup loader for WiiU 5.3.2 ONLY (NO 5.4 NO 5.5!)

[Wiiunator]

also darksider 2 working in both modes with resident evil XMLs... i don't know why but this trick works a treat

--------------------- MERGED ---------------------------

I wanna jump on the loadiine wagon too !
Which 64 GB SD card should i buy or avoid ?
I don't need without integred wifi lan and i aim for best performance

any class 10 Sd card will be fine, UHS-1 U3 is overkill because the wii u sd slot can't go that fast...

 

[Cyan]

actually used xml from resident evil, and assassins creed 4 works

Yes, that's a way to fix games if yuo don't have the xml.
a lot of games are using identical values.
all working games on 3.0 are probably sharing the same xml data than SSBU or miimaker, that's why it worked fine.
some games might needs values shared by other games (Resident evil == assassin creed 4, for example).

So, if you don't have XML, I'll explain again what you can do (it's lost in this thread):

- Hope the default xml data is enough
- extract it from WUD (need disc key)
- extract if from eshop full game (need NUS key)
- extract if from eshop update (no Key needed)
- extract if from memory with your original disc (Not released yet.. a dumper will be available later, or use TCPGecko memory dump maybe)
- copy from a different game
- share it with other users (no copyright, it's only values, but don't forget to edit the Title_ID)
- create your own (random value ? will be hard but take examples on other games to find usual values. EclipseSin is doing that for VC DS/N64 .. good luck ! you can do it ! ... wait for the xml data extractor )

The EASIEST is extracting it from an eshop update, if an update is available.

 

[kingsora831]

anyone test mario party 10 with the new update?
Its on sale on BF , but if it works with loadline then i wont have to pick it up and save the cash for Xenoblade.
Dont need a physical copy if it doesnt have online or dlc for it. (Like Xenoblade does)

 

[julio.apc16]

that precise version of the xml file to run: Donkey Kong Country Tropical Freeze EUR (+ 1.0.1 update) loadiine?

 

[Cyan]

that precise version of the xml file to run: Donkey Kong Country Tropical Freeze EUR (+ 1.0.1 update) loadiine?

use Nusgrabber 0005000E10138300
then use Cdecrypt and copy all the files to your game's folder to get latest update. it will contains the needed xml

or maybe I didn't understood your question.

 

[EclipseSin]

that precise version of the xml file to run: Donkey Kong Country Tropical Freeze EUR (+ 1.0.1 update) loadiine?

IF you download the latest update using UWizard, and decrypt content, you can use that one.

I am not sure if there has been a new update or not, but you can copy files from latest update to Donkey Kong and play fine.

Yes, that's a way to fix games if yuo don't have the xml.
a lot of games are using identical values.
all working games on 3.0 are probably sharing the same xml data than SSBU or miimaker, that's why it worked fine.
some games might needs values shared by other games (Resident evil == assassin creed 4, for example).

So, if you don't have XML, I'll explain again what you can do (it's lost in this thread):

- Hope the default xml data is enough
- extract it from WUD (need disc key)
- extract if from eshop full game (need NUS key)
- extract if from eshop update (no Key needed)
- copy from a different game
- share it with other users (no copyright, it's only values)
- create your own (random value ? will be hard but take examples on other games to find usual values. EclipseSin is doing that for VC DS/N64 .. good luck ! you can do it ! ... wait for the xml data extractor )

The EASIEST is extracting it from an eshop update, if an update is available.

If you get a game and it doesn't have an XML, try to find an update for the game if it has one. It is by far the easiest way to get the XML files.

I've managed. To get an ISI, a 160-2200, and a crashed white screen so far on 64/DS VC. lol.

 

[ihateu3]

that precise version of the xml file to run: Donkey Kong Country Tropical Freeze EUR (+ 1.0.1 update) loadiine?

Spoiler

"app.xml" should be

<?xml version="1.0" encoding="UTF-8"?>
<app access="777" type="complex">
<version type="unsignedInt" length="4">15</version>
<os_version type="hexBinary" length="8">000500101000400A</os_version>
<title_id type="hexBinary" length="8">0005000010137F00</title_id>
<title_version type="hexBinary" length="2">0002</title_version>
<sdk_version type="unsignedInt" length="4">20911</sdk_version>
<app_type type="hexBinary" length="4">80000000</app_type>
<group_id type="hexBinary" length="4">0000137F</group_id>
<os_mask type="hexBinary" length="32">0000000000000000000000000000000000000000000000000000000000000000</os_mask>
</app>

"cos.xml" should be

<?xml version="1.0" encoding="UTF-8"?>
<app access="777" type="complex">
<version type="unsignedInt" length="4">18</version>
<cmdFlags type="unsignedInt" length="4">0</cmdFlags>
<argstr type="string" length="4096">rs10_production.rpx</argstr>
<avail_size type="hexBinary" length="4">00000000</avail_size>
<codegen_size type="hexBinary" length="4">00000000</codegen_size>
<codegen_core type="hexBinary" length="4">00000001</codegen_core>
<max_size type="hexBinary" length="4">40000000</max_size>
<max_codesize type="hexBinary" length="4">01500000</max_codesize>

<permissions type="complex">
<p0 type="complex">
<group type="unsignedInt" length="4"> 1</group>
<mask type="hexBinary" length="8">000000000000FF00</mask>
</p0>
<!--BSP-->

<p1 type="complex">
<group type="unsignedInt" length="4"> 3</group>
<mask type="hexBinary" length="8">0000000000000007</mask>
</p1>
<!--DK -->

<p2 type="complex">
<group type="unsignedInt" length="4"> 9</group>
<mask type="hexBinary" length="8">FFFFFFFFFFFFFFFF</mask>
</p2>
<!--USB CLS DRV-->

<p3 type="complex">
<group type="unsignedInt" length="4">12</group>
<mask type="hexBinary" length="8">0000000000000001</mask>
</p3>
<!--UHS-->

<p4 type="complex">
<group type="unsignedInt" length="4">11</group>
<mask type="hexBinary" length="8">0000000030B03001</mask>
</p4>
<!--FS -->

<p5 type="complex">
<group type="unsignedInt" length="4">13</group>
<mask type="hexBinary" length="8">0000000000000011</mask>
</p5>
<!--MCP-->

<p6 type="complex">
<group type="unsignedInt" length="4">14</group>
<mask type="hexBinary" length="8">0000000000000000</mask>
</p6>
<!--NIM-->

<p7 type="complex">
<group type="unsignedInt" length="4">15</group>
<mask type="hexBinary" length="8">0000000000000003</mask>
</p7>
<!--ACT (account)-->

<p8 type="complex">
<group type="unsignedInt" length="4">16</group>
<mask type="hexBinary" length="8">0000000000000003</mask>
</p8>
<!--FPD-->

<p9 type="complex">
<group type="unsignedInt" length="4">17</group>
<mask type="hexBinary" length="8">0000000000000001</mask>
</p9>
<!--BOSS-->

<p10 type="complex">
<group type="unsignedInt" length="4">18</group>
<mask type="hexBinary" length="8">0000000000000001</mask>
</p10>
<!--ACP-->

<p11 type="complex">
<group type="unsignedInt" length="4">19</group>
<mask type="hexBinary" length="8">0000000000000001</mask>
</p11>
<!--PDM-->

<p12 type="complex">
<group type="unsignedInt" length="4">20</group>
<mask type="hexBinary" length="8">0000000000000003</mask>
</p12>
<!--AC-->

<p13 type="complex">
<group type="unsignedInt" length="4">21</group>
<mask type="hexBinary" length="8">0000000000000001</mask>
</p13>
<!--NDM-->

<p14 type="complex">
<group type="unsignedInt" length="4">22</group>
<mask type="hexBinary" length="8">0000000000000001</mask>
</p14>
<!--NSEC-->

</permissions>
<default_stack0_size type="hexBinary" length="4">00000000</default_stack0_size>
<default_stack1_size type="hexBinary" length="4">00000000</default_stack1_size>
<default_stack2_size type="hexBinary" length="4">00000000</default_stack2_size>
<default_redzone0_size type="hexBinary" length="4">00000000</default_redzone0_size>
<default_redzone1_size type="hexBinary" length="4">00000000</default_redzone1_size>
<default_redzone2_size type="hexBinary" length="4">00000000</default_redzone2_size>
<exception_stack0_size type="hexBinary" length="4">00001000</exception_stack0_size>
<exception_stack1_size type="hexBinary" length="4">00001000</exception_stack1_size>
<exception_stack2_size type="hexBinary" length="4">00001000</exception_stack2_size>
</app>

 

[dekuleon]

Thanks for your hard work dear developers!

My country is following the steps to become a comunist country and Nintendo games now cost 1/2 of a montly minimum wage, almost 3x more expensive than 1 year ago.

Now thanks to loadiine I can keep my genuine games perfectly preserved on the original case and play them directly from the SD card, this is awesome!

 

[Cyan]

"app.xml" should be [...]

thanks for sharing, but I fixed it for you

when sharing, please don't include the "+ or -" used to expand the branches, located in front of the tags.
and please, use spoilers if the post is too long. thanks

 

[Reecey]

Splatoon is a special case. The kernel exploit removes the area it is using. We could however remove the changes made by kernel exploit after Mii Menu is launched as it is not needed at that point anymore. That could help that game. I didnt think of it yesterday but now that I think of it, it might work.



"Klicking the eshop button"
The online feature is not working at all. It might be crashing because of that. But from your stack dump it looks like it can't execute code from 0xE6483EC. That means to me that there is no code execution access to that area in that moment. It could have something to do with us setup IBAT4 for our usage and override the kernel setup of it. Maybe IBAT4 is reserved for eshop?



From our tests (n1ghty and Cyan) MK8 works if it is not updated from both Mii Maker and Smash Bros and even exit the game to System Menu. If you update the game to the current update, it will not work anymore from Mii Maker but still work from Smash Bros. Though it freezes when you go back to System Menu.



There is a trick if you are missing XML files and it was working before on Smash Bros Mode:
Just use app.xml and cos.xml from Smash Bros as a replacement .



Not necessarily. In contrairy it could have fixed it. I did not test it and I dont think n1ghty or Cyan tested it either. It means we moved our code away from the "Ninty code section" instead of placing it in between there to a completly different region (the Home Menu region starting at physical memory address 0x2CAE1000).



You are wrong here. It doesnt matter if it is Wii U or PS 3. If you have kernel level code execution, you can do this kind of stuff on both as you own the PPC side completely. There is always a chunk of memory that is not used and if you have 2 GB of RAM it is really very unlikely that there is not a single 8 MB chunk that is never used. What we do here is actually use a DATA only memory as CODE execution memory. Because we can setup IBATs with supervisor execution level we can setup us the code execution region of our choise. Of course it should be somewhere where the code/data area in the best case is never used or usually not used in the case of our application.

@dimok . I would be very happy to be able to use a separate kernal access for Splatoon. I don't think that would be a problem for many as long as it worked and you never know if Splatoon needs this revsion of the kernal for access then the probability is more games in the futute will need this too so it would not be a waste of time just doing it for the one game.

 

[Xirix]

Do you need to be online all the time when using loadiine? Or can you turn your wireless off after the game has loaded?

 

[EclipseSin]

Do you need to be online all the time when using loadiine? Or can you turn your wireless off after the game has loaded?

You dont even need to go online. Just local. Set your DNS servers on the Wii U to all 0's (000.000.000.000) and host the exploits on your computer or cell phone. Entering settings will reset the hack and you have to start over. Though you could always unplug a router lol

 

[Xirix]

You dont even need to go online. Just local. Set your DNS servers on the Wii U to all 0's (000.000.000.000) and host the exploits on your computer or cell phone. Entering settings will reset the hack and you have to start over. Though you could always unplug a router lol

Oh that's interesting, can it be done non-wirelessly then? I know you can get LAN adapters that work with the Wii U and I have a PC near my Wii U, would it work with a direct connection and not using a router or hub?

 

[MattBlacK85]

Hi guys, thank you for this great work on the Wii U.
Is it just me but it seems that the multikernel from eclipsesin website is more error then the normal (loadiine) kexploit.
I want to self host it so maybe it's more reliable then. Where can i find the lastest multikernel (updated for loadiine 4.0)?
Thank you all.

 

[EclipseSin]

Oh that's interesting, can it be done non-wirelessly then? I know you can get LAN adapters that work with the Wii U and I have a PC near my Wii U, would it work with a direct connection and not using a router or hub?

Honestly, I'm not sure about using crossover cables with the Wii U. But yes, a LAN adapter compatible with a Wii U in general should work. The "net" is only needed to launch the html files. Some have even began to think about these new SD Cards that provide a wireless http server all in one package.

 

[jammybudga777]

I tried eclipsin page yesterday and it crashed both times as soon as I click on the page.I havnt tried self hosting it yet

 

[EclipseSin]

I tried eclipsin page yesterday and it crashed both times as soon as I click on the page.I havnt tried self hosting it yet

It (loadiine) is giving me freezing issues if I use settings, instead of shutting down the Wii U, to try and run the hack again if it fails. Other than that, it should be working the same as before. Only loadiine was updated. The Kernel, and Loadiine kernel are the same versions from before. And multi-kernel is both together so you can select which one you want to use, and is optional if you want to use it. Just letting you know.

 

[jammybudga777]

It (loadiine) is giving me freezing issues if I use settings, instead of shutting down the Wii U, to try and run the hack again if it fails. Other than that, it should be working the same as before. Only loadiine was updated. The Kernel, and Loadiine kernel are the same versions from before. And multi-kernel is both together so you can select which one you want to use, and is optional if you want to use it. Just letting you know.

I don't think I have ever successfully loaded your page. I normally use wj44 site but I don't think he has updated loadiine since v4 release. PS great work everyone on the new release

 

[EclipseSin]

I don't think I have ever successfully loaded your page. I normally use wj44 site but I don't think he has updated loadiine since v4 release. PS great work everyone on the new release

Strange. It works for others and myself just fine. If wj44's works, mine should. My index and it's css are a whopping 2,522 bytes

 

[jammybudga777]

I go on my Wii u browser and go to definitive guide for Wii u hacking. On that page is your link address I press on!! Must be something wrong my end as in see loads of people sayij they use you're site