Hacking Offsets and Editing

[illinialex24]

offset=0x813345A0
value=0x60000000


This will be quite useful.

I currently am trying to fix Wii System Menu wad 4.2U. Obviously, I have no idea.

 

[SifJar]

That's a preloader hack. To actually apply it to the WAD, upack it, decrypt the contents, open 00000008.app in a HEX editor, go to 0x813345A0-0x8132FAE0, and change the value of it and the next 4 bytes (i.e. next 4 boxes) to 60000000. Then reencrypt the contents and repack the WAD. If you dont understand what I mean, sorry. Wait for someone else to make a patcher or something.

 

[illinialex24]

I understand, thanks. I'm used to an NUS Downloader, thanks

 

[illinialex24]

Except 1 issue. There is no 00000008.app or whatever, there are many things like this:

00000087

But no 0's then an 8.

 

[SifJar]

did you tick decrypt?

 

[illinialex24]

For some reason it doesn't find key.bin but I got it. Sorry, I understand your instructions but yeah, I don't have a decrypt option for some reason. I'll read on it, don't answer it yet. I don't wanna be spoonfed.

 

[SifJar]

sure the key.bin is correct? did you paste in the common key in notepad or something? if so, open key.bin in a hex editor, delete everything, and paste in the common key as hex.

 

[illinialex24]

Yeah I named it improperly before. Got it, thanks. Ok I'll edit this and test it out thanks

.

 

[SifJar]

out of curiosity, how do you intend to rencrypt it? if you dont know, i have an idea which may work.

 

[illinialex24]

Can I hear your idea??

 

[SifJar]

Redownload the System Menu with NUSD when you've edited 00000008.app and tick the trucha box this time (you need to click on the loading bar to make the tick box appear). Then once it has downloaded, click to edit the files in it, then click to add a file, and add your edited 00000008.app file. It should encrypt it for you. Then click finished, and it should be ready. You may then need to use a wad packer to make it a wad, or NUSD may do that for you, not sure.

 

[illinialex24]

Good idea, one issue.

Here are the app files I got:

0000000a.app
0000000b.app
0000000c.app
0000005a.app
00000009.app
00000059.app
00000086.app
00000087.app
00000088.app

The sizes are all above 100 kb except for the 5a, 59 and 86 .app files.

 

[SifJar]

hmm, what region is that? i downloaded pal and got different ones...no matter. open them all in a hex editor in turn, and find the one more than 100kb which doesnt start have U8 at the start. Thats the one you want.

 

[illinialex24]

Ok cool thanks

 

[SifJar]

I tried it myself, and I couldnt get NUSD to renencrypt the .app file. It kept telling me the file already existed in the title, even when I deleted it. You may have to use an encryption program and a wadpacker.

 

[s3phir0th115]

If I can find a decryptor and encryptor for this, I'll start right on with this. With the editing done properly, this is safer than the method I was thinking of.

 

[SifJar]

what was that method? i'm curious now

 

[illinialex24]

Ok, I got homework so I might do this later.

 

[s3phir0th115]

what was that method? i'm curious now

My idea was to:

1. Use NUSD to create a System Menu 4.2 wad.
2. Use a tool to install a trucha patched IOS70.
3. Install System Menu 4.2 with wad manager, and hope to God it goes back to the homebrew channel when it's done.
4. Run the preloader installer (when .30 is available as one.) And make DAMN sure you have a hacks.ini to stop 4.2 from deleting your homebrew.
5. Then boot up and hope everything worked.

Of course, directly patching the System Menu wad would avoid requiring preloader. But, then there is the risk of brickage if you mess it up.

 

[WiiCrazy]

for anyone interested..