Hacking Possiable ways to softmod the Wii

[night_chrono]

none of that is my code. I have a very BASIC understanding of C and C++ and my understanding of the wii specific workings is even lower. I just put 2 and 2 together that sounded good. If teq comes by and says that it is not practical/possible then I would take his word.

 

[teq]

none of that is my code. I have a very BASIC understanding of C and C++ and my understanding of the wii specific workings is even lower. I just put 2 and 2 together that sounded good. If teq comes by and says that it is not practical/possible then I would take his word.

According to Erant, Starlet prevents this from being recieved by the drive.


It would be viable if you could get around Starlet, but so would a lot of other things.

 

[zidane_genome]

Ok, shifting gears...

What is it that the Wii Discs send to the DVD drive to make it read the disc? I mean, is it a "password" of sorts, or does it search for a specific string of data on a disc?

If we could inject that directly into an IOS patch, wouldn't that work?

 

[blinktoday]

If we could inject that directly into an IOS patch, wouldn't that work?

That's the same method that nitrotux is suggesting, correct me if I'm wrong though.
He suggests that you inject your own code into, I don't exactly what type of code though.

But what I don't understand is that he says that someone very high in wii hacking comfirmed that theory, but Erant suggests it's not possible.

 

[teq]

Ok, shifting gears...

What is it that the Wii Discs send to the DVD drive to make it read the disc? I mean, is it a "password" of sorts, or does it search for a specific string of data on a disc?

If we could inject that directly into an IOS patch, wouldn't that work?

It's a combination of things.

It's the header on the disc, it's the optional BCA, and it's the encryption.

 

[zidane_genome]

I know this is against the rules (kinda), so i'm not going to ask for it, but it would be really nice to view the IOS code... can't find it anywhere online, and have no idea on how to dump the NAND (every time I try, it fails)

 

[teq]

I know this is against the rules (kinda), so i'm not going to ask for it, but it would be really nice to view the IOS code... can't find it anywhere online, and have no idea on how to dump the NAND (every time I try, it fails)

Better start learning assembly then....

 

[teonintyfive]

I was under the impression that some GC roms are elf and dol... if we get to make Wii iso's to elf's won't we be able to boot them?

 

[zidane_genome]

I know this is against the rules (kinda), so i'm not going to ask for it, but it would be really nice to view the IOS code... can't find it anywhere online, and have no idea on how to dump the NAND (every time I try, it fails)

Better start learning assembly then....

I meant the "decoded" versions... where someone "reversed" it back into C

 

[arctic_flame]

I meant the "decoded" versions... where someone "reversed" it back into C

You'd have to do it by hand.

 

[DarkSzero]

I think that a softmod would work better as an ISO loader, than trying to allow burned discs to be read by the Wii.
Something like you boot a channel, and it searches many places for wii iso in any USB Mass Storages, or even computers in the network that are sharing the iso. One problem for that, is the USB2.0 Support must be unlocked in order for this to work, if it even exists.

I find it much more pratical to just boot a channel, and select a game from a list, than having the mess with discs.

Just my 2 cents.

 

[nitrotux]

I'm looking for people that have hooked up their Wii's DVD drive to their PC and can use Erant's dvdtool.

If you have such a setup or have the Wii's DVD firmware for me to disassemble, then send me a PM if you want to help out with a dvd drive softmod.

Thanks

 

[teq]

I'm looking for people that have hooked up their Wii's DVD drive to their PC and can use Erant's dvdtool.

If you have such a setup or have the Wii's DVD firmware for me to disassemble, then send me a PM if you want to help out with a dvd drive softmod.

Thanks

It won't really help with a softmod, considering it's already been outlined that the drive can't be sent the debug command by any usual means.

There must be a way around this, though I can't think of what it could be...

 

[nitrotux]

There's a good chance there is a possible exploit in the commands that are allowed to be sent to the DVD drive.

And, the DVD firmware is needed in any case. With debug commands, you still need to understand which exploit code to upload.

 

[teq]

There's a good chance there is a possible exploit in the commands that are allowed to be sent to the DVD drive.

And, the DVD firmware is needed in any case. With debug commands, you still need to understand which exploit code to upload.

Maybe so, but the code you need is already available via open source modchips... you just can't address the memory from software.

 

[Jacobeian]

yep, I really think you should leave the "debug mode method" where it was until last week... svpe & erant's post were pretty clear about this... and this mean all of this shit have already been tested for ages

the hole they discovered is probably somewhere else in IOS and related to unknown Starlet hardware features (and apparently commandable through software)... I would love to know more, this is really passionating but this would probably remain a shared secret now

 

[BiscuitCookie]

ok I'm not good at hacking, coding etc.
So everyone is talking about how to get debug used, the problem is that starlet is in the way. Isn't it logical then to see how starlet works and try to bypass/hack it? (yea I know it's easier said than done)

 

[dobbod]

According to all the hints Marcan left @ elotrolado.net, there's a way to actually read from DVD-Rs without a softmod (and this is what they had discovered), and I think this is what should be found at first.

Creating a SD/USB loader, via a custom IOS that redirects /dev/di requests to an ISO image on the SD, should be tecnically possible, but more difficult.

I know this is against the rules (kinda), so i'm not going to ask for it, but it would be really nice to view the IOS code... can't find it anywhere online, and have no idea on how to dump the NAND (every time I try, it fails)

You can't get the code as itself, only disassemble it through IDA. You can extract the IOS by getting a game that has the IOS you want to extract on the update partition, dumping it, and then using Wiitools, Trucha Signer, or whatever, extract the IOS WAD file from the ISO you get after dumping it. Then extract the WAD with WadTools, and then you have the binaries.

 

[teq]

According to all the hints Marcan left @ elotrolado.net, there's a way to actually read from DVD-Rs without a softmod (and this is what they had discovered), and I think this is what should be found at first.

I'd like to read this. Can you direct me to the thread?

 

[Hellfenix]

Well we can already read from DVD-R's using waninkoko's cIOS no?

I don't know if it's been asked/answered before but is it possible to boot a game from another channel than the disk channel?
Is that what GeckOS does?