Hacking Custom Fakesigned update iso

[lulwut]

SystemMenu-v949.wad

that just made me want to punch a child in the face

 

[Hells Guardian]

LMAO system menu v 949. That must be that generic SM 1.0 look alike that someone made. System menu 1.0 wad is not possible to obtain from any source I've seen on the web please correct me if I'm wrong.

 

[mauifrog]

LMAO system menu v 949. That must be that generic SM 1.0 look alike that someone made. System menu 1.0 wad is not possible to obtain from any source I've seen on the web please correct me if I'm wrong.

Your wrong, sorry

 

[Streamlinehd]

Just a tip Mauifrog...

You have the wrong versions set in your __update.inf file. You have IOS60 set to 04 10 which is the hex value of v1040. You need to change that to ff 00 to make it IOS60 v65280. You also have the same issue with your system menu, it's set at 01 21 which would be menu 289. You have to change that to 03 b5 to make it menu 949.

You can find these settings in the 16-bytes above the FIRMWARE60.255.0 line and the 16-bytes above the SYSTEM MENU V949 line when viewing the file with a hex editor. Offsets 78 79 and 278 279 to be exact.

 

[mauifrog]

Awesome thank you, I will have a look at that tonight

 

[Streamlinehd]

Also, Bushing made a similar disc a while ago that you may want to have a look at. It's not easy to find but if you google "update-menu-for-ntsc.iso" you should be able to find it.

Here's a link to the original post back in 2008

http://hackmii.com/2008/05/ntsc-semi-brick-fix/

 

[mauifrog]

Yes I have that disc and have been using it as a base.

 

[Streamlinehd]

This paragraph worries me though...

Bushing: System Menu v289 is the newest NTSC version of the system menu available on Nintendo’s download servers; it’s what you will get if you go into the Settings Menu and perform an update. I packed it into a WAD, and maintained the original, valid Nintendo signature, so it should be safe to install. (The disc, however, is fakesigned. This should not be a problem.)

Patching the system menu to v949 will mess up the signature. I would assume this means it has to somehow be fakesigned in addition to the partition. It would likely be the same scenario for the system menu IOS.

 

[mauifrog]

The system iOS would need to be patched, and the iso fakesigned.

 

[Streamlinehd]

Any luck? If you haven't already, you need to change the settings in fst.bin to match your wads. I haven't had a chance to pick up more dvd-r yet so I can't test the disc but I have all the files configured. This would be the only way to fix the Dop-IOS bug on SM 4.3 without a nand programmer so I want to help get this working.

 

[mauifrog]

No, I have not had any luck. I did make a new fst.bin with the partiton builder, but so far no luck.

 

[Streamlinehd]

I did it!!!!!!!!!!!!!!!!

Successfully made an update partition that downgrades the system menu. I will release the disc later today on Wiihacks!!

 

[Fishaman P]

I did it!!!!!!!!!!!!!!!!

Successfully made an update partition that downgrades the system menu. I will release the disc later today on Wiihacks!!

Great. Now for boot2...

 

[Streamlinehd]

Already working on that.

 

[Hells Guardian]

wrong. boot 2 being downgraded is useless. even if you downgrade boot 2 you can't install bootmii there if you couldn't before. it's not the boot 2 that has a problem it's boot 1. If the boot1 has the signing bug fixed then there is no way to install bootmii boot2 short of actually cracking Big N's encryptions. This is because all boot0's do not have the signing bug present in them so we can't install fakesigned content to the boot1 slot without bricking. Oh and because boot0 is stored on a chip that is a one time write only chip we can't tamper with that either. So in short don't hold your breath.

 

[mauifrog]

I did it!!!!!!!!!!!!!!!!

Successfully made an update partition that downgrades the system menu. I will release the disc later today on Wiihacks!!

Awesome work, that should help some people.

Why would you want to downgrade boot2? It won't get bootmii installed.

 

[Streamlinehd]

Thanks. Not downgrade boot2 but install a higher revision of v4 so it can't be overwritten.


Heres a video of the disc in action:

http://www.youtube.com/watch?v=1G_Gcyzs-to

 

[Hells Guardian]

In which case ignore my rant from above. Just note that if you are patching boot2 you must have a vunerable boot1 or the results would be a pricy paperweight especially since a boot2 version patch would have to be installed by wad it would simply overwrite bootmii and if there was a problem it would leave the system broken. even if the patched version was based on a bootmii boot2.

 

[Streamlinehd]

Yes of course Hells Guardian. I'm not a newb even though it says otherwise under my name

 

[WiiShizzza]

didn't follow the whole thread, but if that's the true, that is some nice piece of code with so much potential.