Hacking PRELOADER v.25 Released

[IronMask]

Yea the NAND recovery tools has a nice ring to it... Shizzle!

This just seems to get more interesting and more challenging by the minute... I don't know if these are good signs or bad signs for the Scene...

 

[fishears]

good for the scene and bad for playing backups

 

[WiiCrazy]

As I previously said... I changed the ES_ calls to read the system menu dol into the sd card filesystem calls and now I can load the system menu dol from sd card... It runs fine through homebrew channel on a preloader installed system... so any kind of system menu patcher can coexist with preloader this way...

Anyway, I went further and tried my app with preloader... it crashed... removed the ios reload call... it went a bit further till the system menu dol loading step (file reading) , it failed there...

So it could even be an libogc issue afterall... I'll add extra logging to the app and see where exactly freezes...

 

[fishears]

Nice work so far though WiiCrazy.

Instinct tells me these problem calls rely on the System Menu being loaded in order to work - that would explain your results (and problems I'm having myself). Do we know if Preloader even loads an IOS to do what it does?

 

[WiiCrazy]

Nice work so far though WiiCrazy.

Instinct tells me these problem calls rely on the System Menu being loaded in order to work - that would explain your results (and problems I'm having myself). Do we know if Preloader even loads an IOS to do what it does?

It doesn't need to boot one probably... it should have been booted by the system (possibly boot2) at that time... and that should be the one that system menu uses since preloader hijacks system menu's place... if it can or does reload the ios... dunno...

 

[IronMask]

So supposedly there are some Korean Wii's that have a "fixed" boot1. This means that Nintendo has blocked some wiis already from running bootmii... though the bootmii installer will make sure that the system has the "vulnerable" boot1. What this ultimately means, Nintendo has already prepared, to some degree, for "bootmii" type-hacks...so basically there about 40 milliion "vulnerable" wii's out there.. Do you possess one of these?!

Let's hope we all do gang!

http://vgchartz.com/

 

[noobwarrior7]

boot2 bootstraps IOS, and IOS boot sysmenu, but when you have preloader installed, it boots it instead....

...could a part of the problem be that some unfullfilled command(s) from the initial booting of the sysmenu, which is in our case preloader, is causing a problem sending the commands we want?

 

[Adr990]

Ohh, so if I dump my WII_FS... (Nand encrypted)

I can make some of those hex line hacks too? (With IDA , right? I could be wrong with the name.

)

And is this some good Guide for it?
http://74.125.77.132/search?q=cache:1zYPbc...t=clnk&cd=2

I'm I correct? If not, help me to the right way, please.

Thanks.

 

[WiiCrazy]

Here is the verdict...
Ios reloading through libogc do not work... fat initialization too... probably a bunch of other functions could be failing too...

that's the case for a dol booted through preloader of course...

boot2 bootstraps IOS, and IOS boot sysmenu, but when you have preloader installed, it boots it instead....

...could a part of the problem be that some unfullfilled command(s) from the initial booting of the sysmenu, which is in our case preloader, is causing a problem sending the commands we want?

Well dunno, probably crediar has the answer for this question...

 

[noobwarrior7]

in two words:

"that sucks."

 

[fishears]

We're basically waiting on Crediar for the dol booting fix he said he was looking into. I'm going to take a break until there's an update to the app cos I'm spending way too much time compiling changes then getting on my knees in front of the Wii holding that damn reset button in

None of the functions we need for this work. End of story (for now)

 

[WiiCrazy]

Well I'll try a few things more...
1. Change the system menu loading code to read the system menu dol from nand but instead of using ES_OpenContent call using ISFS calls...
2. Make something simple that boots a channel which will be the system menu patcher and see if it works...
3. Pack my patcher as a channel with the title id of homebrew channel and try to autoboot it with preloader

 

[IronMask]

Now that sounds like a plan! Don't give up without a fight!

 

[WiiCrazy]

Ok, I started with launching a channel and it works

Now need to pack my patcher as a channel.... or are there any menupatcher channels... that would be easier to test?

 

[digitydogs]

there is a waninkoko menu patcher channel around somewhere... i'll check my sd card and pm it to you if you want

 

[slaphappygamer]

great progress, dude.

 

[digitydogs]

PM'd the link

 

[WiiCrazy]

It's better I pack the wad with blank images... it will not be used directly through system menu anyway...

@digitydogs : thanks, I'll try that too, but now I remembered my statement, vanilla menu patcher will not work with preloader... I'll get to it later...

 

[Jizmo]

Ok, I started with launching a channel and it works

Now need to pack my patcher as a channel.... or are there any menupatcher channels... that would be easier to test?

Do you mean a menu patcher channel that works with CIOSCORP/Preloader installed combination? I'm not sure exactly what IOS combination your working with here?

The Red Squirrel Menu Rebooter is a nice little compact .wad package and contains a blank image but doesn't work with PreLoader currently... at least not with my install.

EDIT: Now where did I put that helmet?

 

[WiiCrazy]

WTF... wadder built a 4MB channel wad...

Yes menu patcher will not work as it is with preloader... but with my loading of system menu dol from sd card it should work... maybe health warning skip part may not work since it doesn't run on top of a system menu but there shouldn't be problems with the other parts...

Now I made my patcher a channel... will install that... and see if it can patch the system menu...