Hacking PRELOADER v.25 Released

[fishears]

so, in the hack.ini at the first post. there are duplicate entries, kinda.

[skip disk update new usa]
version=289
offset=0x813791A0
value=0x60000000
[skip disk update new usa]
version=289
offset=0x813791A4
value=0x60000000

each one shows up seperately in the system hacks screen. would i have to enable both of them for the hack to work. also, should i delete the hack.ini on the wii before i enable these or will the hack.ini just be overwritten?

oh, yeah. this program is super cool. i made a video http://www.sendspace.com/file/lcmkvn
its a .mod file. i couldnt upload to a site, its 105mb. lol

Add any new hacks to the bottom of you original hacks.ini or just grab the new one with all the known hacks included.
Yes, you enable them both to enable the hack

 

[Adr990]

Winamp
VLC
WMP gives error playing the mod file

 

[fishears]

Winamp
VLC
WMP gives error playing the mod file

I think the .mod file is a dead end for this thread. Shall we drop it and stick to working on Preloader?

 

[Adr990]

Winamp
VLC
WMP gives error playing the mod file

I think the .mod file is a dead end for this thread. Shall we drop it and stick to working on Preloader?

Ok ok...

But... I need a little help.

I dumped my NAND

Now, I think to know it is not needed but...

How do I make hacks for the System menu? like NoCopy?

I asked it before but still no understanding...

 

[Skarface05]

Back on topic - wahooo ---- Has anyone looked at the source that ironmask posted or the idea from wiicrazy;

just took a look in menupatcher's code... adding a few lines to it actually makes your intended backup launcher... I don't have much time to play with it... so just passing the simple idea...

In sysmenu.c, in function s32 Sysmenu_Load(u32 *entry, u16 index)
CODE
/* Open content */
fd = ES_OpenContent(index);
if (fd < 0)
return fd;

/* Read content */
ret = ES_ReadContent(fd, (u8 *)&dol, sizeof(dolhdr));
if (ret < 0)
return ret;
..snip...


Change the above code (and the snipped part in the function) so that it loads the sys menu dol from sd card...(simple file open/read/seek/close operation) compile it and put the menupatcher into sd card along with the sys menu dol so that preloader autoboots menupatcher... then menupatcher should work...

You should be changing ES_OpenContent, ES_SeekContent, ES_ReadContent, ES_CloseContent calls to the equivalents for normal file system calls...

Or the harder but much simpler approach... find how preloader renames the sys menu dol content in the nand and change the code to open that instead...

Sorry dudez, really have no time to play with it...

Feel free to open a thread and make the above a question and start hacking..

Now guys - lets all put our heads together and become one and sort this out once and for all tonight

 

[Rudolf]

Boot It, a wii-linux booting .dol was released yesterday.
Boot it - WiiBrew

Don't have the time to try it now, if anyone does, please post the results for booting with preloader.

 

[fishears]

Boot It, a wii-linux booting .dol was released yesterday.
Boot it - WiiBrew

Don't have the time to try it now, if anyone does, please post the results for booting with preloader.

it's an elf so I doubt it will work...

 

[digitydogs]

@scarface... i've been working on the menu patcher code for two days, although im trying something different from what they have suggested.... I think if we can locate the new values for these lines we can get menupatcher to work with preloader and autoboot


#define SYSMENU_ADDR 0x8132FF80

 

[fishears]

So Preloader does replace the sys menu... well it replaces it and moves it somewhere else?
In that case Preloader has probably taken its titleid too so that it gets called by boot2 instead of the sys menu.
Which leaves us needing to know the new titleid of the sys menu because it looks like you already know the size and address, digitydogs
Can you get the titleid from the 10000043.app file?

 

[WiiCrazy]

Talking on wiidev... now know the following about preloader

title/00000001/00000002/content/00000043.app < that is preloader right now
10000043.app is the system menu (renamed)

Hmm, then loading that content should work... let me give it a go...

edit: not worked... it's either not 10000043.app or there is something else that makes the menupatcher crash... possibly messing with the state flags...

 

[digitydogs]

Wiicrazy if you get the new title id can you please post it, as soon as i have that i can recompile a (hopefully) working version of menu patcher, at which point i will release it to the board so we can have the (currently) ultimate no mod chip solution

 

[WiiCrazy]

Wiicrazy if you get the new title id can you please post it, as soon as i have that i can recompile a (hopefully) working version of menu patcher, at which point i will release it to the board so we can have the (currently) ultimate no mod chip solution

Well I have both my wiis modded... actually not much caring about these... I'm playing with it just for the fun of it...

it's right that it's moved to 10000043.app...just checked with fs browser app...

edit: well tested several different things, they didn't work... it well may be an issue with the preloader because everytime I tried the app just unexceptionally froze... I even put debug strings and sleep statements so I can see where it freezed... nopez... no luck...
next time I'll try to use it with loaders like front sd elf loader... that way at least I can choose what I can run... of course if front sd elf loader doesn't coredump...

could someone try if front sd elf loader works with preloader?

 

[Rudolf]

Boot It, a wii-linux booting .dol was released yesterday.
Boot it - WiiBrew

Don't have the time to try it now, if anyone does, please post the results for booting with preloader.

it's an elf so I doubt it will work...

Thanks for the quick reply. Wasn't able to download the file when I posted and since I heard no word about the forwarder-dols working with this app. I probably have to wait for .elf support.

Keep up the good work.

 

[Patryc]

Will there be a full tutorial for this app at some point? I realize there is a short one on the first page.

 

[WiiCrazy]

Here is some more information about menupatcher with preloader case..
Just looked the code up in system menu disassembly, ios reload patch does no more than tell the system menu to force ios249 onto the game... it doesn't change the ios for system menu... it accomplishes that with the Ios reload call in the application itself so that system menu use 249.... the extra patch is for the game...

So using ios reload patch with preloader is useless unless system menu booted with a custom ios...

 

[digitydogs]

searching through my altered source i see that i removed the line that invokes the ios reload stuff, as using it with all IOS altered is pointless, and it still loads preloader. i think the whole issue for invoking the system menu in this case is the SYSMENU_ADDR and SYSMENU_TITLEID addresses, as they are used for system menu's location and rebooting. moving it to a different app has to have changed these values. relevant examples from source.

/* Retrieve TMD length */
ret = ES_GetStoredTMDSize(SYSMENU_TITLEID, &len);
/* Retrieve TMD */
ret = ES_GetStoredTMD(SYSMENU_TITLEID, p_tmd, len);
/* Patch system menu */
Sysmenu_Patch((u8 *)SYSMENU_ADDR, SYSMENU_LEN);
and
SYS_ResetSystem(SYS_SHUTDOWN, 0, 0);
DCFlushRange((u8 *)SYSMENU_ADDR, SYSMENU_LEN);

 

[WiiCrazy]

searching through my altered source i see that i removed the line that invokes the ios reload stuff, as using it with all IOS altered is pointless, and it still loads preloader. i think the whole issue for invoking the system menu in this case is the SYSMENU_ADDR and SYSMENU_TITLEID addresses, as they are used for system menu's location and rebooting. moving it to a different app has to have changed these values. relevant examples from source.

/* Retrieve TMD length */
ret = ES_GetStoredTMDSize(SYSMENU_TITLEID, &len);
/* Retrieve TMD */
ret = ES_GetStoredTMD(SYSMENU_TITLEID, p_tmd, len);
/* Patch system menu */
Sysmenu_Patch((u8 *)SYSMENU_ADDR, SYSMENU_LEN);
and
SYS_ResetSystem(SYS_SHUTDOWN, 0, 0);
DCFlushRange((u8 *)SYSMENU_ADDR, SYSMENU_LEN);

Removing the content doesn't mean the dol should be loaded to a different address!! Why don't you understand?

SYSMENU_ADDR, SYSMENU_TITLEID, SYSMENU_ADDR, SYSMENU_LEN... all are same... with preloader or not... only thing changes is the boot index in the tmd or the file pointed by the boot index... the latter probably...

preloader doesn't boot stuff properly, that's the main reason it's failing...

I didn't tried the channel version of things... maybe that way my modified menupatchers may work

 

[digitydogs]

what i don't understand is how you can move a programs location in memory and have all the pointers to it remain the same. I understand the length remaining the same as the menu size doesn't change but isnt preloader now in memory as app 43 and offsetting the memory location of system menu by the space it takes up?

 

[WiiCrazy]

what i don't understand is how you can move a programs location in memory and have all the pointers to it remain the same. I understand the length remaining the same as the menu size doesn't change but isnt preloader now in memory as app 43 and offsetting the memory location of system menu by the space it takes up?

that app file is in the nand... think it as harddisk in the pc's... the memory which you are talking about... which there are constants about in the menupatcher is completely another thing...

 

[Jizmo]

Wiicrazy if you get the new title id can you please post it, as soon as i have that i can recompile a (hopefully) working version of menu patcher, at which point i will release it to the board so we can have the (currently) ultimate no mod chip solution

Well I have both my wiis modded... actually not much caring about these... I'm playing with it just for the fun of it...

it's right that it's moved to 10000043.app...just checked with fs browser app...

edit: well tested several different things, they didn't work... it well may be an issue with the preloader because everytime I tried the app just unexceptionally froze... I even put debug strings and sleep statements so I can see where it freezed... nopez... no luck...
next time I'll try to use it with loaders like front sd elf loader... that way at least I can choose what I can run... of course if front sd elf loader doesn't coredump...

could someone try if front sd elf loader works with preloader?

Crazy.... My results with Front SD Loader,

Wii Setup:
USA NTSC System Menu 3.2
CIOSCORP IOS Installed
Preloader 0.25 Installed

Im able to boot into it from the twilight hack and it then was able to load and elf from the elf folder.

Did you want it converted and tested as a .dol file?

EDIT: I ran elf to dol converter on it and it wouldn't run from PreLoader. (black screen freeze)
EDIT2: The converted frontsdloader.dol does work from Homebrew Channel

That should be the info you wanted i think. If you need more let me know.

Last word I heard about the .dol problems with preloade was the Crediar tried two dols and they worked. Don't know exactly what that means but seemed to me it was like saying don't have time to mess with it. It's hearsay but that's what I heard. I am in no way demeaning him here as to his decision to develop the app as he sees fit. Just passing hearsay info. I have been told he is aware of SD dol loading issues though.