Hacking WiiU VC game injection working on 5.3.2

[the_randomizer]

so we can inject but not dump?..weird. hmm, this is indeed in its infancy

Yup, that's why I'm swapping headers, maybe at some point we can extract, but the injection app was made like, maybe four or five days ago

 

[teampleb]

Awesome. I'll have to try this. My Wii U is still on like 3.X. My gamepad broke so I stopped using it. Just got one on Ebay.

 

[ploggy]

I just had an idea. In Smash WiiU (I cant remember the exact option) but somewhere in the settings it's possible to play certain Nintendo games from the past (snes,nes etc..)but they're not full and are timed. My question is would it be possible to inject other full games in their place?
Maybe an alternative to having a VC game downloaded?

Edit: Although thinking about it even if it were possible I think saving would be an issue.

 

[PhyChris]

how do you know what header the VC rom had?

 

[the_randomizer]

how do you know what header the VC rom had?

We don't, there's still a lot we don't know, all we've been doing is matching non-working games with the headers of the ROMs used in working VC games. We can't just sit here and not try something, you know? Hence why we're experimenting. DKC and Super Metroid are good bases to use, so naturally, we swap non-working games' headers with the ones the VC uses, or think that they use.

 

[PhyChris]

We don't, there's still a lot we don't know, all we've been doing is matching non-working games with the headers of the ROMs used in working VC games. We can't just sit here and not try something, you know? Hence why we're experimenting. DKC and Super Metroid are good bases to use, so naturally, we swap non-working games' headers with the ones the VC uses, or think that they use.

So header-less roms don't work?

I know I'm getting annoying with all these questions haha

 

[the_randomizer]

So header-less roms don't work?

I know I'm getting annoying with all these questions haha

I haven't tested those to be honest, I really don't know what the crap I'm doing half the time, but I want to get special chip games. Those working on the Wii U don't seem to be able to answer the can and cants about what we can do with the VC. To sum up, I really don't know half of what's going on, headered vs. headerless, I really don't know, and I'm sorry my responses are inadequate. I wish I could help make a program that extracts VC wads, but my skills in programmer are not exactly satisfactory. Sorry.

I really don't know, maybe all my testing's been in vain.

 

[TotalInsanity4]

I just had an idea. In Smash WiiU (I cant remember the exact option) but somewhere in the settings it's possible to play certain Nintendo games from the past (snes,nes etc..)but they're not full and are timed. My question is would it be possible to inject other full games in their place?
Maybe an alternative to having a VC game downloaded?

Edit: Although thinking about it even if it were possible I think saving would be an issue.

Or even just removing the time restriction

 

[ploggy]

Or even just removing the time restriction

I thought that too first but I think some of the games (fzero for example) start directly ingame which suggest they aren't full roms just snippets of the game.

 

[PhyChris]

I haven't tested those to be honest, I really don't know what the crap I'm doing half the time, but I want to get special chip games. Those working on the Wii U don't seem to be able to answer the can and cants about what we can do with the VC. To sum up, I really don't know half of what's going on, headered vs. headerless, I really don't know, and I'm sorry my responses are inadequate. I wish I could help make a program that extracts VC wads, but my skills in programmer are not exactly satisfactory. Sorry.

I really don't know, maybe all my testing's been in vain.

thats cool, I have enough to make a conclusion. games that use enhancement chips 'may' have a flag in the header identifying what enhancement chip it is using. its doubtfull nintendo downloaded roms from the net with the headers other people tacked on. they most likely made there own.
in order to move ahead now you will need to find the vanilla rom in system ram and dump it, look at the actual header nintendo is using. then remove the header and compare it to the cart dump.

 

[the_randomizer]

thats cool, I have enough to make a conclusion. games that use enhancement chips 'may' have a flag in the header identifying what enhancement chips it is using. its doubtfull nintendo downloaded roms from the net with the headers other people tacked on. they most likely made there own.
in order to move ahead now you will need to find the vanilla rom in system ram and dump it, look at the actual header nintendo is using. then remove the header and compare it to the cart dump.

Ugh, damn that sounds tedious, unfortunately, there's no way for me to do that, I suppose that would implicate the testing I've done thus far has been for naught. Go fig -_- All I've been able to find is what each byte in a header does from here http://www.smwiki.net/wiki/Internal_ROM_Header

ROM Registration Data

# SNES Address PC Address (headered) Length Name
1 $00:FFB0 0x0081B0 2 bytes Maker code
2 $00:FFB2 0x0081B2 4 bytes Game code
3 $00:FFB6 0x0081B6 7 bytes Fixed Value ($00)
4 $00:FFBD 0x0081BD 1 byte Expansion RAM size
5 $00:FFBE 0x0081BE 1 byte Special version
6 $00:FFBF 0x0081BF 1 byte Cartridge type

ROM Specifications

# SNES Address PC Address (headered) Length Name
7 $00:FFC0 0x0081C0 21 bytes Internal ROM Name
8 $00:FFD5 0x0081D5 1 byte Map Mode
9 $00:FFD6 0x0081D6 1 byte ROM Type
10 $00:FFD7 0x0081D7 1 byte ROM Size
11 $00:FFD8 0x0081D8 1 byte SRAM Size
12 $00:FFD9 0x0081D9 1 byte Destination code
13 $00:FFDA 0x0081DA 1 byte Fixed value ($33)
14 $00:FFDB 0x0081DB 1 byte Version #
15 $00:FFDC 0x0081DC 2 bytes Complement check
16 $00:FFDE 0x0081DE 2 bytes Checksum

Then the site also has vector ROM maps

ROM Addresses
PC (headered) SNES Length Description (native mode)
0x0081E0 $00:FFE0 4 bytes Unused
0x0081E4 $00:FFE4 2 bytes Coprocessor Empowerment
0x0081E6 $00:FFE6 2 bytes Program Break
0x0081E8 $00:FFE8 2 bytes ABORT
0x0081EA $00:FFEA 2 bytes Non-maskable Interrupt
0x0081EC $00:FFEC 2 bytes Reset (unused)
0x0081EE $00:FFEE 2 bytes Interrupt request

ROM Addresses
PC (headered) SNES Length Description (emulation mode)
0x0081F0 $00:FFF0 4 bytes Unused
0x0081F4 $00:FFF4 2 bytes Coprocessor Empowerment
0x0081F6 $00:FFF6 2 bytes Program Break
0x0081F8 $00:FFF8 2 bytes ABORT
0x0081FA $00:FFFA 2 bytes Non-maskable Interrupt
0x0081FC $00:FFFC 2 bytes Reset (used)
0x0081FE $00:FFFE 2 bytes Interrupt request

I'm wondering is 0x0081F4 is related to the enhancement chips.

 

[puss2puss]

Sorry if it has been answer, but i didnt really follow this thread yet..
..but i.m wondering, would modified snes roms work? Like, supermetroid's version with new textures and new maps? (i think it.s called super metroid phazon version..)

 

[FIX94]

Sorry if it has been answer, but i didnt really follow this thread yet..
..but i.m wondering, would modified snes roms work? Like, supermetroid's version with new textures and new maps? (i think it.s called super metroid phazon version..)

since I could run a ton of unlicensed and homebrew games in my test I dont see a reason to why this would not work.

 

[PhyChris]

one last question. there is no way to tell if nintendo follows that header format. has anyone looked at a header from an actual nintendo VC dump? i mean from a wii or 3DS VC Game? that would give a big hint provided nintendo used the same headers for the WiiU roms.

 

[the_randomizer]

since I could run a ton of unlicensed and homebrew games in my test I dont see a reason to why this would not work.

Bah, maybe my testing has been in vain, I can't even figure out why enhancement chips don't even work, why some VC bases work where others have failed, you know? I feel like I've been wasting my time -_- Damn, guess enhancement chip games are unusable.

 

[PhyChris]

I feel like I've been wasting my time -_-

nah, you filled me in on useful info. someone had to test all this shit haha

edit: I almost forgot. has anyone tried to inject the same game with enhancement chip back in?

 

[the_randomizer]

nah, you filled me in on useful info. someone had to test all this shit haha

I mean, I can't even get enhancement chip games to work, and it's pissing me off, no one has been able to figure out why either. Sorry, just..ugh. Not in the best of spirits right now due to an unrelated incident.

 

[PhyChris]

I mean, I can't even get enhancement chip games to work, and it's pissing me off, no one has been able to figure out why either. Sorry, just..ugh. Not in the best of spirits right now due to an unrelated incident.

have you tried injecting the same game with enhancement chip back in?

 

[the_randomizer]

have you tried injecting the same game with enhancement chip back in?

Doesn't work, the enhancement chip games don't let me inject anything. Super FX is likely impossible since it may not be in their code. *Sigh* The only game I could inject in a Kirby game was ActRaiser but the game ran half speed, so far, none of the programmers have looked into this. I must be the only one "working" on Snes VC hacking. Very close to giving up, if these header hacks don't work....IDK what I'll do.

 

[fiveighteen]

FYI, you can dump ROMs. I just dumped Super Mario Kart and tested it on SNES9X. It seemed to have some audio issues, but that is prob due to the emulator. Files looked the same in a hex editor. More testing to come to compare them.

1) Find out how large the game you want to dump is
2) Find out where the start of the ROM is: we know this... SNES (and I believe NES?) games start at 10502250
3) Find out where your ROM ends... Google 0x10502250 + 0xYOURROMSIZE for easy calculation
4) TCP Gecko Client -> Tools -> fill in Memory Dumping Start and End
5) Hit Dump

Ex: Super Mario Kart is 512KB, or 0x80000
ROM starts at 0x10502250
ROM ends at 0x10502250 + 0x80000 = 0x10582250
Put 10502250 and 10582250 in and dump it: will work for all 512KB games
Rename to .sfc to load into emulator