Hardware [RELEASE] RVT-H Tool

GerbilSoft

Well-Known Member
OP
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
35
XP
4,269
Country
United States
Announcing RVT-H Tool v1.0: https://github.com/GerbilSoft/rvthtool/releases/tag/v1.0

RVT.jpg


RVT-H Tool is a utility for managing Nintendo RVT-H Reader systems. Among other things, it supports:
  • Dumping images from the RVT-H Reader (`extract` command)
  • Installing images onto the RVT-H Reader (`import` command)
  • Undeleting images on the RVT-H Reader (`undelete` command)
  • Recrypting images from Debug to Retail Fakesigned and vice-versa.

What isn't supported at the moment is converting unencrypted images to Retail Fakesigned. RVT-H prototypes are typically unencrypted, and unencrypted images aren't supported by either Dolphin or USB loaders. My initial attempt at recrypting these images didn't work correctly, but I decided it would be better to release the tool sooner rather than later so the images could at least be dumped and preserved, even if they can't be run on non-devkit hardware at the moment.

RVT-H FAQ:

Q: Did you crack the special encryption used by RVT-H Readers that isn't used by any other Nintendo system?
A: There is no special encryption. The HDD itself is unencrypted and doesn't have any sort of hard disk password, unlike NPDP cartridges. The HDD has a non-standard layout, but it was trivial to decode. For more information on the HDD layout, see: rvth_notes.md

Q: But when i plug in my RVT-H Reader, Windows says it doesn't recognize the file system!
A: That's because the RVT-H HDD doesn't have a Master Boot Record. Windows only recognizes storage devices with an MBR (or GPT, which has a protective MBR). rvthtool will be able to access the HDD anyway. Just make sure you don't allow Windows to "initialize" or "format" the system.

Q; What about the disc images on the RVT-H Reader?
A: Disc images may either be encrypted using the RVT-R common key, or unencrypted. Encrypted images have been supported by Dolphin since January 12, 2017. I don't know of any USB loaders that support debug-encrypted images at the moment; however, you can use rvthtool's `--recrypt` option to convert the debug-encrypted image to Retail Fakesigned.

Unencrypted images are not currently supported by anything.

Q: But what about installing retail games on the RVT-H Reader?
A: Both GameCube and Wii games can be installed using rvthtool. All GameCube games can be installed with no issues, since GameCube didn't use any sort of encryption. For Wii games, rvthtool automatically converts retail-encrypted images to debug encryption. Note that you must have the corresponding IOS version installed in order to run the game. In particular, debug versions of IOS36 and IOS58 seem to be very difficult to find, and I haven't located them yet.

Games with multiple partitions, e.g. Super Smash Bros. Brawl, also seem to have some issues. Note that Brawl requires IOS36. It is possible to modify the TMD to use IOS56, but I encountered a crash after the Mario vs. Kirby battle in Subspace Emissary when doing this.

Dual-layer games require two banks. rvthtool will not overwrite banks that are in use, so you must use the `delete` command first in order to delete two contiguous banks, then use the `import` command to import the dual-layer game into the first bank.

Q: Why does your RVT-H Reader show Bank 11? I thought they were limited to 8!
A: ( ͡° ͜ʖ ͡°) Early RVT-H Reader systems were shipped with a 40 GB HDD, which can only hold 8 images. Later systems include an 80 GB HDD, possibly because the 40 GB drive was no longer manufactured. The system is still limited to 8 banks by default, but with some tweaking, it's possible to use more. See rvth_notes.md for more information.

rvthtool does not currently support expanding the bank table automatically; doing so requires manual hex editing.

EDIT: v1.0 was released a month ago, but I forgot to update this post.
 
Last edited by GerbilSoft, , Reason: +v1.0

pstrick

Banned!
Banned
Joined
Jul 6, 2018
Messages
23
Trophies
0
Age
44
XP
285
Country
United States
Announcing RVT-H Tool v0.9:



RVT-H Tool is a utility for managing Nintendo RVT-H Reader systems. Among other things, it supports:
  • Dumping images from the RVT-H Reader (`extract` command)
  • Installing images onto the RVT-H Reader (`import` command)
  • Undeleting images on the RVT-H Reader (`undelete` command)
  • Recrypting images from Debug to Retail Fakesigned and vice-versa.


Can you help me with compiling this?
On windows 10 x64, I get an error when running cmake telling me it can't find qt5.
On Ubuntu 18.04 x64, I get an error after I run the makefile (that cmake created) telling me that it can't find a certain file.

i can provide more details if needed. I have all the errors saved as I text file and I can recreate them easily enough.
 

pstrick

Banned!
Banned
Joined
Jul 6, 2018
Messages
23
Trophies
0
Age
44
XP
285
Country
United States
Looks like my issue was having a space in a directory name for a directory a few above the rvth folder.

I've been killing myself for two days because I like fancy file names.

arg.

Program compiled fine and installed. Testing now.
 

GerbilSoft

Well-Known Member
OP
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
35
XP
4,269
Country
United States
Looks like my issue was having a space in a directory name for a directory a few above the rvth folder.

I've been killing myself for two days because I like fancy file names.

arg.

Program compiled fine and installed. Testing now.
The various Unix-style make utilities are known to have issues with spaces in filenames, though it could be because one of the CMake scripts in the rvthtool project is missing quotes. I'll check it again later.

If you do have any undumped images from an RVT-H Reader, feel free to post the output from rvthtool indicating what's on the system. Currently, the only publicly-released RVT-H dumps are a bunch of Skylanders prototypes. (I have a few The Last Story localization prototypes but haven't had the chance to release them yet.)
 

pstrick

Banned!
Banned
Joined
Jul 6, 2018
Messages
23
Trophies
0
Age
44
XP
285
Country
United States
The various Unix-style make utilities are known to have issues with spaces in filenames, though it could be because one of the CMake scripts in the rvthtool project is missing quotes. I'll check it again later.

If you do have any undumped images from an RVT-H Reader, feel free to post the output from rvthtool indicating what's on the system. Currently, the only publicly-released RVT-H dumps are a bunch of Skylanders prototypes. (I have a few The Last Story localization prototypes but haven't had the chance to release them yet.)

The contents seem pretty similar between the systems that I have. I undeleted a bunch on interesting utilities.
Everything will be released (probably over on AG), whenever I have the time to upload.

If you want me to test anything specifically with the tool, let me know.

RVT-H Tool v1.0+
Copyright (c) 2018 by David Korth.

RVT-H Bank Table: [8 banks]

Bank 1: Wii (Single-Layer)
- LBA start: 0x00300009
- LBA length: 0x00800000
- Timestamp: 2010/02/17 22:22:25
- Game ID: RABAZZ
- Title: Green Lantern: A Justice League Game
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 53
- Encryption: None
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 2: Wii (Single-Layer) [DELETED]
- LBA start: 0x00BC4A09
- LBA length: 0x008C4A00
- Timestamp: Unknown
- Game ID: RIJE69
- Title: GIJoe
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 53
- Encryption: None
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 3: Wii (Single-Layer) [DELETED]
- LBA start: 0x01489409
- LBA length: 0x008C4A00
- Timestamp: Unknown
- Game ID: RELSAB
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: JPN
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 4: Wii (Single-Layer) [DELETED]
- LBA start: 0x01D4DE09
- LBA length: 0x008C4A00
- Timestamp: Unknown
- Game ID: RELSAB
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 5: Wii (Single-Layer) [DELETED]
- LBA start: 0x02612809
- LBA length: 0x008C4A00
- Timestamp: Unknown
- Game ID: 100J01
- Title: RVL_DIAG_Ver4_4
- Disc #: 0
- Revision: 0
- Region code: JPN
- IOS version: 4
- Encryption: None
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 6: Wii (Single-Layer) [DELETED]
- LBA start: 0x02ED7209
- LBA length: 0x008C4A00
- Timestamp: Unknown
- Game ID: RABA01
- Title: Update Program
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 7: GameCube [DELETED]
- LBA start: 0x0379BC09
- LBA length: 0x002B82C0
- Timestamp: Unknown
- Game ID: 060J01
- Title: DIAG_Ver3_1_1
- Disc #: 0
- Revision: 0
- Region code: JPN

Bank 8: Wii (Single-Layer) [DELETED]
- LBA start: 0x04060609
- LBA length: 0x008C4A00
- Timestamp: Unknown
- Game ID: RELSAB
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: JPN
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

RVT-H Tool v1.0+
Copyright (c) 2018 by David Korth.

RVT-H Bank Table: [8 banks]

Bank 1: Wii (Single-Layer)
- LBA start: 0x00300009
- LBA length: 0x00800000
- Timestamp: 2010/02/12 14:34:28
- Game ID: RABAZZ
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 53
- Encryption: None
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 2: Wii (Single-Layer)
- LBA start: 0x00BC4A09
- LBA length: 0x008C4A00
- Timestamp: 2018/07/08 23:22:14
- Game ID: RIJE69
- Title: GIJoe
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 53
- Encryption: None
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 3: Wii (Single-Layer)
- LBA start: 0x01489409
- LBA length: 0x008C4A00
- Timestamp: 2018/07/08 23:22:52
- Game ID: RELSAB
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: JPN
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 4: Wii (Single-Layer)
- LBA start: 0x01D4DE09
- LBA length: 0x008C4A00
- Timestamp: 2018/07/08 23:23:09
- Game ID: RELSAB
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 5: Wii (Single-Layer)
- LBA start: 0x02612809
- LBA length: 0x008C4A00
- Timestamp: 2018/07/08 23:23:13
- Game ID: 100J01
- Title: RVL_DIAG_Ver4_4
- Disc #: 0
- Revision: 0
- Region code: JPN
- IOS version: 4
- Encryption: None
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 6: Wii (Single-Layer)
- LBA start: 0x02ED7209
- LBA length: 0x008C4A00
- Timestamp: 2018/07/08 23:23:16
- Game ID: RABA01
- Title: Update Program
- Disc #: 0
- Revision: 0
- Region code: USA
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug

Bank 7: GameCube
- LBA start: 0x0379BC09
- LBA length: 0x002B82C0
- Timestamp: 2018/07/08 23:23:18
- Game ID: 060J01
- Title: DIAG_Ver3_1_1
- Disc #: 0
- Revision: 0
- Region code: JPN

Bank 8: Wii (Single-Layer)
- LBA start: 0x04060609
- LBA length: 0x008C4A00
- Timestamp: 2018/07/08 23:23:20
- Game ID: RELSAB
- Title: Sample Game Name
- Disc #: 0
- Revision: 0
- Region code: JPN
- IOS version: 9
- Encryption: Debug
- Ticket Signature: Debug
- TMD Signature: Debug
 
Last edited by pstrick,
  • Like
Reactions: GerbilSoft

GerbilSoft

Well-Known Member
OP
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
35
XP
4,269
Country
United States
A bit late, but better late than never: rvthtool 1.1.1 is out. It fixes some issues accessing RVT-H Reader devices on Windows, and uses a "fake" NHCD bank table if the real one was wiped for some reason. (I've encountered two systems with a wiped bank table header.)

https://github.com/GerbilSoft/rvthtool/releases/tag/v1.1.1

(Sidenote: v1.1 had a showstopping bug that prevented extracting any images from RVT-H Readers, which is why I released v1.1.1 almost immediately afterwards.)

Some planned stuff for rvthtool 2.0:
  • A Qt5-based GUI. (See below)
  • wadresign, a tool to re-sign debug WADs as fakesigned retail and vice-versa. (The name "wadtool" was already taken.) This will also support converting WADs from early SDKs to the "standard" format used by all later versions.

Here's a preview of the qrvthtool GUI:
qrvthtool.2018-09-22.f3ab0647.RVT-H.14.png
 
Last edited by GerbilSoft, , Reason: Clarify WAD stuff.
  • Like
Reactions: pstrick

shano4321

New Member
Newbie
Joined
Mar 25, 2019
Messages
2
Trophies
0
Age
41
XP
58
Country
Australia
Hi and thanks for creating this tool! Just want to check my steps to get it running. I've just received an RVT-H and am on a Win 8.1 64bit PC. I installed the 64 bit MSVC 2017 runtime and downloaded version rvthtool_1.1.1-win64. I've connected the RVT-H to the PC via USB and power on the RVT-H; I can confirm in disk manager a 'Disk 2' of 37.26gb capacity appears. I enter command prompt (run as administrator) and localise to the folder with rvthtool then run 'rvthtool query' but just get "ERROR: Querying devices is not available on this system."
Any help would be greatly appreciated :)
 

Attachments

  • rvthtool error.png
    rvthtool error.png
    16.3 KB · Views: 291

shano4321

New Member
Newbie
Joined
Mar 25, 2019
Messages
2
Trophies
0
Age
41
XP
58
Country
Australia
Hi and thanks for creating this tool! Just want to check my steps to get it running. I've just received an RVT-H and am on a Win 8.1 64bit PC. I installed the 64 bit MSVC 2017 runtime and downloaded version rvthtool_1.1.1-win64. I've connected the RVT-H to the PC via USB and power on the RVT-H; I can confirm in disk manager a 'Disk 2' of 37.26gb capacity appears. I enter command prompt (run as administrator) and localise to the folder with rvthtool then run 'rvthtool query' but just get "ERROR: Querying devices is not available on this system."
Any help would be greatly appreciated :)
Oops just read the --help and realised it's not available in this Windows version
 

Attachments

  • rvthtool list8.png
    rvthtool list8.png
    7.8 KB · Views: 230
  • rvthtool list4-7.png
    rvthtool list4-7.png
    31.9 KB · Views: 328
  • rvthtool list1-3.png
    rvthtool list1-3.png
    33 KB · Views: 285
Last edited by shano4321,

037B

Member
Newcomer
Joined
Oct 18, 2018
Messages
6
Trophies
0
Age
26
Location
United Kingdom
XP
109
Country
United Kingdom
Any ETA on the GUI version, will this tool allow me to convert retail wads to work on my NDEV I've tried with show mii wads but install fails with error -2011 which according to the Nmenu pdf from the Wii SDK is because the WAD file failed a validity check.
 
Last edited by 037B,

GerbilSoft

Well-Known Member
OP
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
35
XP
4,269
Country
United States
Any ETA on the GUI version, will this tool allow me to convert retail wads to work on my NDEV I've tried with show mii wads but install fails with error -2011 which according to the Nmenu pdf from the Wii SDK is because the WAD file failed a validity check.
I'm including a command line tool called `wadresign` that will allow converting retail to debug. There won't be a GUI frontend for it.

The RVT-H Tool GUI won't be very useful for NDEV, since NDEV doesn't have an internal hard drive. The command line version can be used to convert a retail disc image to debug for use with NDEV ODEM, though note that certain debug IOSes (36, 58) seem to be missing in action.
 

pstrick

Banned!
Banned
Joined
Jul 6, 2018
Messages
23
Trophies
0
Age
44
XP
285
Country
United States
I have been messing around with IOSs recently and have a couple questions:

Is there a difference between the IOS versions of RVT-R and RVT-H?
I think the RVT R has 88mb of ram while the RVT H has 128 mb of RAM?

Is there a way to write retail encrypted discs without re-encrypting them with the dev key? (keeping them as retail?)
 

GerbilSoft

Well-Known Member
OP
Member
Joined
Mar 8, 2012
Messages
2,395
Trophies
2
Age
35
XP
4,269
Country
United States
I have been messing around with IOSs recently and have a couple questions:

Is there a difference between the IOS versions of RVT-R and RVT-H?
I think the RVT R has 88mb of ram while the RVT H has 128 mb of RAM?

Is there a way to write retail encrypted discs without re-encrypting them with the dev key? (keeping them as retail?)
There are two versions of the debug build of IOS: one for 64 MB systems (RVT-R Reader), one for 128 MB systems (RVT-H Reader, NDEV). I'm pretty sure the only difference is static memory allocation and/or module load addresses. (It should be possible to install a 64 MB IOS on a 128 MB system, but the other way around will likely result in crashes.)

For writing retail-encrypted discs, you could just burn a retail GCM the same way you'd burn a pirated game for retail systems. If you mean burning an RVT-R with retail encryption, I'm not sure why you'd want to do that, since RVT-R Readers won't be capable of running it.
 

pstrick

Banned!
Banned
Joined
Jul 6, 2018
Messages
23
Trophies
0
Age
44
XP
285
Country
United States
*** WARNING: WAD file '../todebug/zeldaSNESntsc.wad': Invalid common key index 251.

*** ERROR: WAD file '../todebug/zeldaSNESntsc.wad' footer size is too big. (736; should be less than 128 KB)


Any ideas? I can't resign any VC wads.
I get these two errors no matter what I try. I have used a handful of NTSC VC wads from SNES and NES games.

This is a fresh build of wadresign on Ubuntu 18.04 x64.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • Psionic Roshambo @ Psionic Roshambo:
    But you said pine apple...
  • Psionic Roshambo @ Psionic Roshambo:
    Ughh gonna be bored today, class for new job has a lot of networking material and I'm certified in that already...
  • Veho @ Veho:
    Peen apple.
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    "pine unf apple" doesn't count! Lol
  • Psionic Roshambo @ Psionic Roshambo:
    Employee code of conduct videos are awesome!!! Did you know eating the other employees is bad? I didn't know... Lol
    +1
  • AncientBoi @ AncientBoi:
    Anymore males there? :blush:
  • Psionic Roshambo @ Psionic Roshambo:
    All of us lol
  • Psionic Roshambo @ Psionic Roshambo:
    I got free every channel so that's awesome lol
    +1
  • AncientBoi @ AncientBoi:
    Give me ALL the gay pron channels, since you won't be watching them :blush::D
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Lol they exist?
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Hmmm so Mario Does Luigi's plumbing is a bad movie? Lol
  • Psionic Roshambo @ Psionic Roshambo:
    These videos are soooo dry
  • Psionic Roshambo @ Psionic Roshambo:
    Please click all suspicious links sent your email
    +1
  • BigOnYa @ BigOnYa:
    What to do today? Cut grass for 3-4 hours, or just get drunk and play video games... Hmm
    +1
  • BigOnYa @ BigOnYa:
    I need a remote controlled mower, so I can sit on the couch and do both.
  • BigOnYa @ BigOnYa:
    Sounds good to me, video games and booze it is then.
    +1
  • denpafan @ denpafan:
    Good choice
    +1
  • BigOnYa @ BigOnYa:
    Now what to play, Starfield or Fallout4. And what to drink, beer or Whiskey and Coke. Such tough decisions.
  • BigOnYa @ BigOnYa:
    Looks like its whiskey & coke, only 4 beers left. And think ill start with Falllout. :grog:
  • rqkaiju2 @ rqkaiju2:
    THIS IMAGE IS SO SCARY WTF. THAT SURE AS HELL IS NOT A CAT THATS LIKE A FUCKING DEMON

    Untitled2.png
  • Psionic Roshambo @ Psionic Roshambo:
    Bonus points for running things over with the lawn mower?
    Psionic Roshambo @ Psionic Roshambo: Bonus points for running things over with the lawn mower?