Hacking Downgrading IOS 15 on 4.3 Virgin wii

[LTK]

Hey. Just wondering has anyone found a way to do this without needed SSBB or Indiana Jones first? (for a virgin wii)

 

[FenrirWolf]

Nope. With the death of bannerbomb, the days of SD-card-only hacking are gone.

 

[LTK]

I see. So which of the two methods is best? I'll go out and buy one of them tomorrow

 

[Riley]

Lego indiana jones is cheaper. You could also just rent the game.

 

[harmor]

I have a theoretical question.

I assume the reason you can't simply install an old version of IOS15 is because of the revision number.
Here's my question... Would it be possible in any way to change the revision number of IOS15 to be lower than the version that can be fakesigned?
If so then could you install the trucha-bugged IOS15 over-top of the current IOS15?

 

[FenrirWolf]

Pretty sure the exploit that allowed exactly that to happen has been used and patched already.

 

[elmariachi]

I see. So which of the two methods is best? I'll go out and buy one of them tomorrow

SSBB is NTSC Wii's only, since you're from the UK buy the Indy PAL game

 

[fogbank]

I have a theoretical question.

I assume the reason you can't simply install an old version of IOS15 is because of the revision number.
Here's my question... Would it be possible in any way to change the revision number of IOS15 to be lower than the version that can be fakesigned?
If so then could you install the trucha-bugged IOS15 over-top of the current IOS15?

This is exactly what Trucha Bug Restorer does.

You cannot do this with a WAD of IOS15 because you then break the signature (hash no longer matches). Trucha Bug Restorer exploits a flaw in the process of adding a title to the NAND. In simple terms it:1. Starts the process of adding the title, which copies the contents of the title to the /tmp directory on the NAND
2. Modifies the TMD in the /tmp directory, setting the revision to 0.
3. Finishes the process of adding the title, which copies the contents of the title (including modified TMD) to the appropriate directory on the NAND
The new 4.3 IOS versions check the signature before step #3 in the above process, causing TBR to fail (because of the modified TMD). The older IOS versions did not do this check.

 

[icebrg5]

Does this seem right for a virgin wii? or am i missing steps? to many steps.


*MMM = multi mod manager*

Load SSBB smash stack hack

it loads MMM from boot.dol on root of sd

select wad manager

install ios41.wad(using any ios liek original poster said)

restart MMM select app manager

load TBR

downgrade ios15(load from sd card)

restart TBR

patch and install ios 36(from sd card)

load MMM

install HBC,BOOTMII

Load HBC

then install priiloader

enable hacks.

load HBC

load MMM

wad manager

install all cios versions you want 249v19.222,223

 

[Krestent]

Is it necessary to downgrade IOS15 in the first place? Can't we just use IOS41 to install cIOS?

 

[Slowking]

Is it necessary to downgrade IOS15 in the first place? Can't we just use IOS41 to install cIOS?

no trucha bug in IOS41

 

[Kratozero]

at icebrg5:

Installing priiloader will not conflict with the sysme menu because some ios are stubbed on the 4.3 update?

How about following the guide you posted and after having the IOS 36 with trucha bug, we install cIOS 60 from the darkcorp package(or any compatible IOS for SM 4.1) then System Menu 4.1, then HBC, then we can hack the wii normally.

What do you think about it?

 

[icebrg5]

at icebrg5:

Installing priiloader will not conflict with the sysme menu because some ios are stubbed on the 4.3 update?

How about following the guide you posted and after having the IOS 36 with trucha bug, we install cIOS 60 from the darkcorp package(or any compatible IOS for SM 4.1) then System Menu 4.1, then HBC, then we can hack the wii normally.

What do you think about it?

I thought priiloader just messed with the system menu ios regardless of what it was.
I'm not sure if its set to use a certain ios or whatever when moving the system menu.

and yeah it would be possible after the ios36 patch to just run wad manager again and then install the latest non stub of ios70
and then system menu 4.2

After that you could use dop mii or dop ios to patch is so you could still play ww and vc from sd card menu.


sound right?

 

[Kratozero]

Well, i was thinking about 4.1 because the priiloader hacks i have are better on 4.1 than 4.2, and i can run all region GC backup discs.
Can the old preloader 0.29 be installed or do i need priiloader?
Seems like a good idea, right?

 

[icebrg5]

i think you will need priiloader

sounds good to me

how to do you go about patching the system menu ios so you can play vc and ww from the sd card menu?

 

[airline38]

Hello there, I have a thinking to deal with 4.3J virgin Wii .

1. Play a new game (with 4.3U firmware in it) on the 4.3J virgin Wii . So the 4.3J Wii
should be changed to a 4.3U Wii ( could be semi-brick).

2. As long as 4.3J Wii is changed to a 4.3U Wii , I can follow the way to use SSBB or Indiana Pwns
to hack the machine.

Please take a look and give me some comments. Thanks !!

 

[thiefstar]

Hello there, I have a thinking to deal with 4.3J virgin Wii .

1. Play a new game (with 4.3U firmware in it) on the 4.3J virgin Wii . So the 4.3J Wii
should be changed to a 4.3U Wii ( could be semi-brick).

2. As long as 4.3J Wii is changed to a 4.3U Wii , I can follow the way to use SSBB or Indiana Pwns
to hack the machine.

Please take a look and give me some comments. Thanks !!

If I remember correctly, you do that the result is

AREA=USA
VIDEO=NTSC
GAME=JP

So you still can't read the diffrent area DVD Game.

EDIT:

sorry, from the beginning you can't read the diffrent area DVD Game.

 

[Dr. Clipper]

Yeah, even if you used a hardware mod to allow you to play the game region free, it doesn't give you the other sys menu. It just semi-bricks you.

 

[airline38]

If I remember correctly, you do that the result is

AREA=USA
VIDEO=NTSC
GAME=JP

So you still can't read the diffrent area DVD Game.

EDIT:

sorry, from the beginning you can't read the diffrent area DVD Game.

Oops ............... yes, you are right. The 4.3J Wii can't read any USA game ........
(I was thinking I had my 4.3J SM hacked so I can read any area game ....)

 

[Techrev]

Ok, just for a summary.

Virgin WII, 4.3u

Recommend using a GC controller.

With the Wii controller, after installing IOS41 I found it worked better using MMM to run TBR to downgrade IOS15. (Lots of rebooting, MMM crashed a lot. Probably worked only after 2 or 3 tries on afterage) Same to patch IOS 36, run MMM, then TBR from MMM App manager. Same again to restore IOS15

Then I had to use MMM with IOS36 to delete IOS41, the stubs, IOS34, IOS70

Then I used MMM to downgrade IOS34, and IOS70 with the IOS70 I got in the 4.3 fix. I'm not sure what of this is necessary, but its what I did.

After that I was able to install hackmii, and priiloader, CIOS38, etc, etc. Homebrew browser up now

.

EDIT: Used Indiana Pwns