Hacking PRELOADER v.25 Released

[digitydogs]

Good luck crazy... Keep us updated.

 

[WiiCrazy]

It worked!

Here it is you can test it, just a POC... (you can expand it as either piece of crap or proof of concept)

http://www.tepetaklak.com/data/poc.rar

Here is the instructions,

1. Get the 10000043.app using fs browser from your wii (it's system menu dol)
2. Put it at the root of your sd card with name ntsc.dol... don't mind the name my wii is ntsc so I named it that way... thing will work regardless of system menu region
3. Install the poclauncher.dol using preloader
4. Make the crazymenuz.dol a channel... title id should be IRON
5. Boot the poclauncher.dol using preloader....

Now poclauncher.dol will launch the channel which will patch the system menu... and you'll end up in recovery menu...

There are lots of sleep statements in the code at the moment so it's a bit slow... now next task is to incorporate the needed menu patches into this...

ps1: sorry it doesn't yet have all the patches that menupatcher has but that's easy work...
ps2: channel reloads to ios 249 before loading system menu so you should have ios 249 installed...
ps3: i'll put an only ios reloading version so that you can test if backups shown in the disc channel... after the break...

 

[IronMask]

Nice work Wiicrazy! Can't wait to see this to a point of completion...

 

[fishears]

 

[Jizmo]

I can't find the 10000043.app with FS Browser.... what am I overlooking. Everything in place and working except I don't have my NTSC.dol file yet.
Little help pointing me in right direction.

EDIT: It is at this point autobooting the poclauncher.dol which is loading the IRON Menu Patcher channel. Leading to eventual code dump. I guess it's expecting to find NTSC.dol?

 

[digitydogs]

00000001/000000002/content/100000043.app if memory serves.

 

[WiiBlaster]

I can't find the 10000043.app with FS Browser.... what am I overlooking. Everything in place and working except I don't have my NTSC.dol file yet.
Little help pointing me in right direction.

EDIT: It is at this point autobooting the poclauncher.dol which is loading the IRON Menu Patcher channel. Leading to eventual code dump. I guess it's expecting to find NTSC.dol?

Do you have preloader installed you should find 10000043 no prob, or have you found it already

 

[WiiCrazy]

Ok here is the bare IOS 249 reloading one...

http://www.tepetaklak.com/data/crazymenuz.rar

Now I should incorporate the update check & region free & nocopy patches... simple but too much work...

You can instead get a starfall patched system menu dol and use that... (of course get that and put in the root of sd card with name ntsc.dol)

ps: on a non preloader installed system it's 00000043.app.... it's 10000043.app on a system with preloader installed...

ps2: so anyone got successfully into recovery menu? or into system menu that shows the banners of backups? (those who don't have custom ios patched ioses)

 

[digitydogs]

@wiicrazy... any chance of getting the source .... i want to look into adding in said patches and a few others.

 

[Jizmo]

Ok, things moving so quickly... but I'll post first result anyways...

1 Extracted the System Menu and renamed it ntsc.dol on root of SD
2 Autobooted poclauncher.dol which loaded the MenuPatcher IRON ID Channel
3 This Channel Generated the following....

after the loading text section
and the loading data section

Patch not found
Patch not found
Patch code found at 815992d4
Patch not found
Patch not found
Searching for recovery patch
Patch found at 81595cd8, patching with 4bffea91


NTSC Wii/Preloader/CIOSCORP

 

[WiiCrazy]

Ok, things moving so quickly... but I'll post first result anyways...

1 Extracted the System Menu and renamed it ntsc.dol on root of SD
2 Autobooted poclauncher.dol which loaded the MenuPatcher IRON ID Channel
3 This Channel Generated the following....

after the loading text section
and the loading data section

Patch not found
Patch not found
Patch code found at 815992d4
Patch not found
Patch not found
Searching for recovery patch
Patch found at 81595cd8, patching with 4bffea91


NTSC Wii/Preloader/CIOSCORP

Hmm, and then... recovery menu?

QUOTE(digitydogs @ Jan 18 2009, 01:02 AM) @wiicrazy... any chance of getting the source .... i want to look into adding in said patches and a few others.

Well source code is now very ugly... I'll release it at some point probably after incorporating the patches... someone competent in programming could speed this a bit up... I don't have much time to do that...

 

[Jizmo]

Ok here is the bare IOS 249 reloading one...

[url=http://www.tepetaklak.com/data/crazymenuz.rar]http://www.tepetaklak.com/data/crazymenuz.rar[/url]

Now I should incorporate the update check & region free & nocopy patches... simple but too much work...

You can instead get a starfall patched system menu dol and use that... (of course get that and put in the root of sd card with name ntsc.dol)

ps: on a non preloader installed system it's 00000043.app.... it's 10000043.app on a system with preloader installed...

ps2: so anyone got successfully into recovery menu? or into system menu that shows the banners of backups? (those who don't have custom ios patched ioses)

We're on it like flies on shit. I'll do the starfall patched system menu thing after we get this updated channel finished


Posts merged

QUOTE(Jizmo @ Jan 18 2009, 01:04 AM) Ok, things moving so quickly... but I'll post first result anyways...

1 Extracted the System Menu and renamed it ntsc.dol on root of SD
2 Autobooted poclauncher.dol which loaded the MenuPatcher IRON ID Channel
3 This Channel Generated the following....

after the loading text section
and the loading data section

Patch not found
Patch not found
Patch code found at 815992d4
Patch not found
Patch not found
Searching for recovery patch
Patch found at 81595cd8, patching with 4bffea91


NTSC Wii/Preloader/CIOSCORP

Hmm, and then... recovery menu?

NO, just hangs frozen after the 4bffea91......
After second reboot i shows all Patch not found.....

 

[WiiCrazy]

NO, just hangs frozen after the 4bffea91......
After second reboot i shows all Patch not found.....

Interesting...Are you sure you copied the correct dol?
for ntsc it should be 3,671,296 bytes

ps: by the way you should not be using menu patcher at this point, since it's not compatible with preloader... you should be making the crazymenuz.dol into a channel with title id IRON

 

[Jizmo]

Crazy.... please clarify one thing....

I'm going to reinstall system menu to remove preloader essentially.

I'll then install starfall applying patches.

Should I make the SystemMenu dump with FS Dumper at this point or after I install Preloader?

 

[WiiCrazy]

Crazy.... please clarify one thing....

I'm going to reinstall system menu to remove preloader essentially.

I'll then install starfall applying patches.

Should I make the SystemMenu dump with FS Dumper at this point or after I install Preloader?

It doesn't matter... if you make it before it's 0...43.app , if you dump it after it's 1...43.app...

ps: by the way incorporated the menu patcher's patches... nocopy patch didn't work for me I don't know why... but you can test it for region free+update check
http://www.tepetaklak.com/data/crazymenuz2.rar
you don't have to make it into channel for testing... you can just launch it via wiiload... behaviour is the same...

 

[Skarface05]

Wow - Thanks for all your efforts WiiCrazy

Lets hope this helps us with the overall goal which im sure no doubt it will

 

[Jizmo]

Ironmask and I have it booting to system menu. No Out of Region working yet, but currently exploring the Starfall options enabled dumped SystemMenu.

I do have the correct NTSC.dol We're making progress.

 

[IronMask]

Ok... this is what I have... I went in with FS_Dumper... extracted 1000043.app in 000001/0000002/content

This was with preloader installed...

I made a .wad with crazymenuz.dol in with WADder.
copied 1000043.app to root of sd card and renamed it ntsc.dol
copied poclauncher.dol and installed it as my auto.dol

reset wii to auto load .dol... got to system menu (hoorah)
stuck a PAL 1:1 in my ntsc console... didn't show in disc channel.

I have all hacks enabled on preloader and previously installed starfall with options and then installed preloader...

I also tried copying renaming the old 0000043.app from my NAND dump before I patched all the ioses with cios before installing cIOS corp.. I am almost positive i did have starfall w/ options then...anyways!

same results when I renamed that one ntsc.dol and stuck it into root of sd card... am I overlooking something as well... anyone have a ntsc.dol they can shoot me??????

Thanks

So I got it partially working by loading system menu on autoboot .dol... so thats probably a good sign I would assume.

 

[digitydogs]

Yep out of region not running yet. skip update check didn't work either, in region backups still work from disc channel as always

 

[WiiCrazy]

Ironmask and I have it booting to system menu. No Out of Region working yet, but currently exploring the Starfall options enabled dumped SystemMenu.

I do have the correct NTSC.dol We're making progress.

Ok, let's hear what you say then... I have a modchip so I can't test the region free and other stuff... nocopy not working bothering me atm... either wanin's patches are not good or I have a problem....