Wii U Menu Discoveries

Discussion in 'Wii U - Hacking & Backup Loaders' started by C0mm4nd_, Dec 27, 2016.

  1. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    So in this post, I'll write all my discoveries 'bout Wii U Menu

    Location:
    storage_mlc/sys/title/00050010/10040200 (EU)
    storage_mlc/sys/title/00050010/10040100 (USA)

    "Directories"
    Code:
    meta/
         iconTex.tga - An icon with the Wii U Logo, not used though
         bootTvTex.tga - Black, not used
         bootDrcTex.tga - Black, not used
         bootLogoTex.tga - "Nintendo" not used though
         bootMovie.h264
         meta.xml - WUP-N-HASP (EU) Name: "Wii U Menu/Menu Wii U"
    code/
         title.tmd
         title.fst
         preload.txt - "app.xml cos.xml men.rpx"
         men.rpx - Should be the menu executable
         cos.xml
         app.xml
    content/  - good part
         factory/
               layout.txt - should be the default menu scheme for JPN (?)
         common/system/
               timeStamp.txt - (?) It contains a date and an hour (Seeming the time when it was builded?)
                revision.txt - 38945 (?, version)
                 RegionLang.txt - cLangXX(for me En) cRegionXX(for me Eu) (region and language for Wii U Menu)
         common/sound/men/
               cafe_barista_men.bfsar (Should be the default sound)
               stream/BGM_SET_ACS.bfstm (Should be the account selection?)
         common/package - textures?
               Set2.pack
               Men2.pack - TV Textures (Miiverse plaza)
               Men.pack - DRC Textures (Home Menu, this should be modified for custom themes)
               Acs2.pack
         XX(Eu for me)/Model
               ConfigTvCap_XX.szs
               AccountTvCap_XX.szs
         XXYYYY(XX= region YYYY= language)/Olive
               1stNUP.xml (Miiverse Plaza offline)
         XXYYYY/Message
               AllMessage.szs - Menu messages
    
     
    Last edited by C0mm4nd_, Dec 27, 2016
    VinsCool, I pwned U!, Convour and 3 others like this.


  2. Ryccardo

    Ryccardo WiiUaboo

    Member
    2,501
    1,101
    Feb 13, 2015
    Italy
    Imola
    content/{languages}/*.szs are SZS/Yaz0 compressed files which contain 2 layers of Sarc archives. Inside is the text!
     
  3. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    :P, unpacking soon

    — Posts automatically merged - Please don't double post! —

    ConfigTvCap and AccountTvCap contains gsys.brfes
    (btw, I know there's an utility for handling Wii U Formats but I don't remember the name)

    — Posts automatically merged - Please don't double post! —

    AllMessages.szs contains over 9000 .msbt and .brfes
     
  4. Ryccardo

    Ryccardo WiiUaboo

    Member
    2,501
    1,101
    Feb 13, 2015
    Italy
    Imola
    And most of them are duplicates and/or things that are actually part of the settings instead of Home (maybe used only for the initial setup)...
     
  5. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    Btw boot screens shouldn't be sign checked
     
  6. Mega-Mew

    Mega-Mew €

    Member
    401
    609
    May 10, 2015
    France
    0x6B59E8
  7. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    asd, btw 1stNUP.xml is what the Mii (offline mode) are saying
    And now we know that Men2.pack is the TV pack
    and Men.pack is the DRC pack
     
    FlappyFalco likes this.
  8. Arck

    Arck GBAtemp Advanced Fan

    Member
    622
    278
    Mar 13, 2016
    lol nice meme

    how did you inject the file back ? :P
     
  9. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    Repacking all and replacing

    — Posts automatically merged - Please don't double post! —

    Btw, is that your sysNAND or your redNAND?
     
  10. Arck

    Arck GBAtemp Advanced Fan

    Member
    622
    278
    Mar 13, 2016
    no joke.

    I mean which software to inject it back ?

    Not the way to extract/repack
    :rolleyes:
     
  11. CatmanFan

    CatmanFan TrashTemp Advanced Fan

    Member
    748
    180
    Aug 14, 2016
    Morocco
    Stately West Manor
    So can we just edit the Wii U Menu files, transfer them back to the Wii U and have a modified Wii U Menu? It can have a risk of brick though...
     
  12. Mega-Mew

    Mega-Mew €

    Member
    401
    609
    May 10, 2015
    France
    0x6B59E8
    sysNAND.

    Just used Cafiine.
     
    VinsCool, I pwned U! and Arck like this.
  13. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    I actually dunno if they're sig checked.
    Btw, redNAND modding should be safe
     
  14. CatmanFan

    CatmanFan TrashTemp Advanced Fan

    Member
    748
    180
    Aug 14, 2016
    Morocco
    Stately West Manor
    I know that already.

    Also, I think only the bootscreen and icon should be sig checked, I don't even know.
     
  15. Arck

    Arck GBAtemp Advanced Fan

    Member
    622
    278
    Mar 13, 2016
    thanks

    I know it's not hard to see which file do what, I just want to search new file format to write tool
     
    CatmanFan likes this.
  16. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    So if we use CBHC to load SDCafiine and then the patched/unpatched home menu... permanent themed menu
     
    CatmanFan likes this.
  17. Arck

    Arck GBAtemp Advanced Fan

    Member
    622
    278
    Mar 13, 2016
    Or whatever coldboothax with home menu file replaced will work.

    — Posts automatically merged - Please don't double post! —

    btw it's really a bad way, why would you use sdcafiine if we have sign patch directly when we boot ?
     
    ZoNtendo likes this.
  18. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    dunno, they can be sig checked

    — Posts automatically merged - Please don't double post! —

    For now that's only redNand
     
  19. lebrawurschd

    lebrawurschd GBAtemp Regular

    Member
    219
    44
    Jan 1, 2016
    Gambia, The
    we dont have sign patch directly when we boot cbhc boot order autoboot haxchi -> cfw
    you still have to be careful about messing around with system files
    its always better to have a backup and a working hardmod xD
     
  20. C0mm4nd_
    OP

    C0mm4nd_ GBATemp Fan

    Member
    493
    207
    Oct 9, 2016
    Italy
    Or using SDCafiine