Hack Wii save files

Post Reply
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Hack Wii save files

Post by BenoitRen » Sun Feb 23, 2014 11:47 pm

Is there some documentation about the Wii's save files or an application that can process them? I'd like to edit the save file of one of the Wii games I have, but from the limited documentation I found, it's encrypted. But seeing as Dolphin knows how to create them, surely someone knows about the file format in detail?
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Mon Feb 24, 2014 1:33 am

Apparently this tool called "tachtig" (80 in Dutch, what the heck?) does also decrypt them. But you have to compile it yourself, along with "twintig" (20 in Dutch). What a pain.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
User avatar
emu_kidid
Site Admin
Posts: 4539
Joined: Mon Mar 29, 2010 10:06 am
Location: Australia
Contact:

Re: Hack Wii save files

Post by emu_kidid » Mon Feb 24, 2014 1:51 am

Yes, these are the standard tools of the trade so to speak. I'm sure there are compiled versions floating around on the internet, or perhaps even tools to dump decrypted saves and then tools to put them back on to the Wii.
Image
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Mon Feb 24, 2014 2:57 pm

There is a tool to dump non-encrypted saves from your Wii and put them back in, but they require a cIOS...

At any rate, I just found FE100 and will give it a try.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Mon Feb 24, 2014 4:32 pm

It seems like these days "Windows port" really means "we packed it in a .NET project". AARGH
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
User avatar
iamdablasta
Posts: 327
Joined: Thu Jan 30, 2014 9:24 pm

Re: Hack Wii save files

Post by iamdablasta » Mon Feb 24, 2014 4:36 pm

BenoitRen wrote:There is a tool to dump non-encrypted saves from your Wii and put them back in, but they require a cIOS...

At any rate, I just found FE100 and will give it a try.
Having many cIOS for various purposes isn't a bad thing you know, I've got plenty for different backup enabling (dvd, usb, sd, cMIOS etc) and are very pleased with them.
Of course, not everyone is comfortable with changing system files and I'll respect that.
the game
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Mon Feb 24, 2014 4:46 pm

BenoitRen wrote:It seems like these days "Windows port" really means "we packed it in a .NET project". AARGH
Actually, to be fair, it's the updated version of the port made by WiiCrazy that .NET-ified it.
iamdablasta wrote:Having many cIOS for various purposes isn't a bad thing you know
They're frequently linked to piracy, and there has been no need for them for a long time, now. I did try using one once, but that didn't work out.

So yeah, I'd rather not touch my system files.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Mon Feb 24, 2014 9:02 pm

Anyone have any tips for reverse engineering save files? All kinds of values change even after having bought an item. Some of it is obviously position data.

What I'm trying to find is the value that identifies a save file as being loaded with bonuses awarded after the game finds a clear save of the previous game in the series.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Tue Feb 25, 2014 12:49 am

What puzzles me most right now are the first eight bytes. Here is a binary comparison between two save files taken between 7 seconds of each other:
Image
I think the first four bytes are some kind of checksum, and the next four bytes some kind of date (based on seeing the value always getting a little higher in each save file I make, and the difference becoming larger the more time has passed).

The only other change in the file is a 01 becoming a 02, because it's the second time the game was saved.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
tueidj
Posts: 564
Joined: Fri May 03, 2013 6:57 am

Re: Hack Wii save files

Post by tueidj » Tue Feb 25, 2014 4:19 am

The second set of 8 bytes (00 60 62 8d d6 69 07 68 in the first file) is the time the file was saved, in CPU ticks; divide it by 60750000 and it should give the number of seconds since 1 Jan 2000.
The four bytes after that (00 00 00 C8) might be the recorded play time in seconds? Just a guess based on how it changed.
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Tue Feb 25, 2014 11:34 am

tueidj wrote:The second set of 8 bytes (00 60 62 8d d6 69 07 68 in the first file) is the time the file was saved, in CPU ticks; divide it by 60750000 and it should give the number of seconds since 1 Jan 2000.
Whoops, those are eight bytes, not four bytes; my mistake. At any rate, thanks for clearing that up.
The four bytes after that (00 00 00 C8) might be the recorded play time in seconds?
That's what I think, too. All the other comparisons support that.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Tue Feb 25, 2014 7:26 pm

Still no idea how to figure out the checksum. I've ran some checksum algorithms on the file using HxD, but none of them match. One option would be to use Dolphin in tandem with a debugger, but my computer isn't powerful enough for that.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
User avatar
Streetwalker
Posts: 1736
Joined: Mon Dec 30, 2013 7:50 am
Location: Israel

Re: Hack Wii save files

Post by Streetwalker » Tue Feb 25, 2014 7:57 pm

You could also check out the Dolphin source but I'm not sure it would help.
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Tue Feb 25, 2014 10:22 pm

Someone on another board suggested the same thing. It wouldn't help, though. This isn't something that's shared with all Wii save files; it's game-specific.

At any rate, I'm not going to bother putting more effort into this. The reason I bothered in the first place is that I thought the clear save detection was required to unlock a bonus story event. However, this is not the case; all it does is add some extra items and money at the start of the game. This explains why I didn't find a flag.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
User avatar
emu_kidid
Site Admin
Posts: 4539
Joined: Mon Mar 29, 2010 10:06 am
Location: Australia
Contact:

Re: Hack Wii save files

Post by emu_kidid » Tue Feb 25, 2014 10:33 pm

You should have mentioned what game it was, maybe someone else would've seen something about that game save format before.
Image
BenoitRen
Posts: 263
Joined: Sun Jul 29, 2012 3:37 pm

Re: Hack Wii save files

Post by BenoitRen » Tue Feb 25, 2014 11:37 pm

I didn't mention the game to keep discussion focused on the topic. Most people don't like the game much.
Hardware: Wii (PAL)
Hardware configuration: System Menu 4.1E, Priiloader
Swiss boot method: Modified Wii Swiss Booter provided by Extrems
Software medium: Retail discs
barcapedro
Posts: 6
Joined: Fri Jul 05, 2013 9:07 pm

Re: Hack Wii save files

Post by barcapedro » Sun Mar 16, 2014 6:27 pm

tueidj wrote:The second set of 8 bytes (00 60 62 8d d6 69 07 68 in the first file) is the time the file was saved, in CPU ticks; divide it by 60750000 and it should give the number of seconds since 1 Jan 2000.
The four bytes after that (00 00 00 C8) might be the recorded play time in seconds? Just a guess based on how it changed.
That's interesting...
Post Reply