Hacking PRELOADER v.25 Released

[daxtsu]

Blaze: Nope, just you. I turned my Wii on[loaded preloader, I don't do autoboot], hit load SysMenu, home button -> Wii Menu[resets to preloader], then hit load Sysmenu again and it didn't crash.

 

[BL4Z3D247]

Blaze: Nope, just you. I turned my Wii on[loaded preloader, I don't do autoboot], hit load SysMenu, home button -> Wii Menu[resets to preloader], then hit load Sysmenu again and it didn't crash.

ok i see what i was doing differently, i was holding the power button to return to preloader... the home button to go back to preloader it is, works great now, thanks

 

[aquilino]

Hello there am addition load_dol of WiiCrazy when menupatcher and now it patches systemmenu.dol

1. Get the 10000043.app or 10000046.app using fs browser from your wii (it's system menu dol)
2. Put it at the root of your sd card with name ntsc.dol or Pal.dol

3. Boot the menupatcher.dol using preloader or HBC


menu_patcher_test

I tested

load Games ok

Region free Wii games ok

Skip disc update ok

P.D when you return to the menu there are no patches.

not because

 

[Patryc]

Hello there am addition load_dol of WiiCrazy when menupatcher and now it patches systemmenu.dol

1. Get the 10000043.app or 10000046.app using fs browser from your wii (it's system menu dol)
2. Put it at the root of your sd card with name ntsc.dol or Pal.dol

3. Boot the menupatcher.dol using preloader or HBC


menu_patcher_test

I tested

load Games ok

Region free Wii games ok

Skip disc update ok

P.D when you return to the menu there are no patches.

not because

Not wishing to be rude, because I know English is not your first language, but I can't quite understand this. Can someone explain exactly what it does?

 

[aquilino]

menupatcher waninkoko modified

 

[aquilino]

load_dol =

Well here is the quick and dirty hack I made to the existing patcher(s), loading the system menu dol from sd card instead of nand...

CODEFILE * HEDE_OpenContent(u16 index)
{
ÂÂÂÂFILE * fp;
ÂÂÂÂ
ÂÂÂÂif (index==0) {
ÂÂÂÂÂÂÂÂfp = fopen("sd:/NTSC.dol","rb");
ÂÂÂÂÂÂÂÂreturn fp;
ÂÂÂÂ} else {
ÂÂÂÂÂÂÂÂfp = fopen("sd:/PAL.dol","rb");
ÂÂÂÂÂÂÂÂreturn fp;
ÂÂÂÂ}
}

//This is a quick and dirty hack so it's just reading the file
//using a 4 byte buffer...
s32 HEDE_ReadContent(FILE * file, u8 *data, u32 data_size)
{
ÂÂÂÂu8 * datap;
ÂÂÂÂdatap=data;
ÂÂÂÂu8 buf[4];
ÂÂÂÂu32 count = data_size/4;
ÂÂÂÂs32 totalread = 0;
ÂÂÂÂprintf("Reading %x bytes into %x\n", data_size, (u32)data);
ÂÂÂÂwhile(count--)
ÂÂÂÂ{
ÂÂÂÂÂÂÂÂtotalread+=fread(buf, 4,1, file);
ÂÂÂÂÂÂÂÂmemcpy(datap, buf, 4);
ÂÂÂÂÂÂÂÂdatap+=4;
ÂÂÂÂÂÂÂÂ
ÂÂÂÂ}
ÂÂÂÂprintf("Read %x bytes\n", totalread);
ÂÂÂÂreturn totalread;
}

s32 HEDE_SeekContent(FILE * file, s32 where, s32 whence)
{
ÂÂÂÂreturn fseek(file, where, whence);
}

s32 HEDE_CloseContent(FILE * file)
{
ÂÂÂÂreturn fclose(file);
}


void loadDol(u16 index) {
ÂÂÂÂprintf("Initting fat\n");
ÂÂÂÂ//sleep(1);
ÂÂÂÂfatInitDefault();
ÂÂÂÂprintf("Fat Initialized\n");
ÂÂÂÂ
ÂÂÂÂu32 i;
ÂÂÂÂstatic dolheader _dolfile __attribute__((aligned(32)));
ÂÂÂÂdolheader *dolfile = &_dolfile;
ÂÂÂÂprintf("Opening system menu dol from sd card\n");
ÂÂÂÂ//sleep(1);
ÂÂÂÂFILE * s = HEDE_OpenContent(index);
ÂÂÂÂif(s==NULL) {
ÂÂÂÂÂÂÂÂprintf("Error opening content exiting\n");
ÂÂÂÂÂÂÂÂfprintf(stderr, "ERROR: %s\n", strerror(errno));
ÂÂÂÂÂÂÂÂ//sleep(1);
ÂÂÂÂÂÂÂÂexit(1);
ÂÂÂÂ}
ÂÂÂÂprintf("System menu dol opened\n");
ÂÂÂÂ//sleep(1);
ÂÂÂÂprintf("! %d\n", HEDE_ReadContent(s, dolfile, sizeof(dolheader)));
ÂÂÂÂmemset ((void *) dolfile->bss_start, 0, dolfile->bss_size);
ÂÂÂÂprintf("Bss set\n");
ÂÂÂÂ//sleep(1);
ÂÂÂÂfor (i = 0; i < 7; i++) {
ÂÂÂÂÂÂÂÂif(dolfile->data_start < sizeof(dolheader)) continue;
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂprintf ("loading text section %u @ 0x%08x "
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ"(0x%08x bytes)\n",
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂi, dolfile->text_start,
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂdolfile->text_size);
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂVIDEO_WaitVSync();

ÂÂÂÂÂÂÂÂÂÂÂÂif (HEDE_SeekContent(s, dolfile->text_pos, 0)!=0) die("Can't seek");
ÂÂÂÂÂÂÂÂÂÂÂÂ HEDE_ReadContent(s, dolfile->text_start, dolfile->text_size);
ÂÂÂÂ
ÂÂÂÂÂÂÂÂ}

ÂÂÂÂÂÂÂÂfor(i = 0; i < 11; i++) {
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂif(dolfile->data_start < sizeof(dolheader)) continue;
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂprintf ("loading data section %u @ 0x%08x "
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ"(0x%08x bytes)\n",
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂi, dolfile->data_start,
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂdolfile->data_size);
ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂVIDEO_WaitVSync();

ÂÂÂÂÂÂÂÂÂÂÂÂif (HEDE_SeekContent(s, dolfile->data_pos, 0)!=0)ÂÂdie("Can't seek");
ÂÂÂÂÂÂÂÂÂÂÂÂHEDE_ReadContent(s, dolfile->data_start, dolfile->data_size);
ÂÂÂÂÂÂÂÂ}

ÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂVIDEO_WaitVSync();

ÂÂÂÂÂÂÂÂ
ÂÂÂÂÂÂÂÂ
ÂÂÂÂÂÂÂÂHEDE_CloseContent(s);
ÂÂÂÂ
}

 

[goku1980]

has anyone noticed fors got his wiis back?????????? yes its true

 

[Skarface05]

Aquilino - So, I don't understand what your trying to say? Please try to elaborate a bit on what you are doing.

 

[BL4Z3D247]

he modified waninkoko's menupatcher i'm assuming

EDIT: ok yeah i put it together, he added to WiiCrazy's modifications to waninkoko's menupatcher

 

[aquilino]

he modified waninkoko's menupatcher i'm assuming

EDIT: ok yeah i put it together, he added to WiiCrazy's modifications to waninkoko's menupatcher

added the patch to read the menu system dol the wii ok

EDIT:YES BL4Z3D247

 

[aquilino]

it is the patch of wiicrazy applied in menupatcher wanin

it is so difficult to understand

 

[noobwarrior7]

I think we got it, it loads the system menu ".app" file from the SD-Card, using IOS 249. SO...If you set this to autoboot through preloader, it'll be EXACTLY like a patched system menu, except the menu on the actual NAND is safe and secure, which is the culmination of what everyone has wanted for a while.

If that is true, very nice work.

 

[aquilino]

I think we got it, it loads the system menu ".app" file from the SD-Card, using IOS 249. SO...If you set this to autoboot through preloader, it'll be EXACTLY like a patched system menu, except the menu on the actual NAND is safe and secure, which is the culmination of what everyone has wanted for a while.

If that is true, very nice work.

exact noobwarrior7

1 problem :when you return to the menu of wii does not stay so that it returns to the system nand not to the system of the SD that is the only problem

 

[noobwarrior7]

thats not a problem for me....youve done well.

 

[goku1980]

aquilino so is this running for ntsc wiis also i know thers an issue (or was) between pal and ntsc

 

[WiiCrazy]

Modified menu patcher was just an intermediate release...

Ok here is an updated release of modified menu loader by raven... (with sources of course)

http://www.tepetaklak.com/data/menu_loader_recovery.rar

The idea is, you can autoboot to recovery menu with disc update checks removed & diagnostic disc check removed and menu forced to ios 249....

Dunno if that means something...
I tested this only on a pal wii, disc update check patch possibly will not work on a ntsc or jap wii... if you have a starfalled system that's no problem actually...

Put your system menu dol in the root of the sd card with name sysmenu.dol

!!! I'm not responsible for any damage you inflict on your wii using this program....

 

[BL4Z3D247]

he modified waninkoko's menupatcher i'm assuming

EDIT: ok yeah i put it together, he added to WiiCrazy's modifications to waninkoko's menupatcher

added the patch to read the menu system dol the wii ok

EDIT:YES BL4Z3D247

ok that's a bit more clear, thanks

 

[hetoan2]

sorry to be a noob, but how do I get the system menu.dol?

i can't find where it is in the browser >_

 

[ether2802]

ok so now what do we need?? poclauncher autobooted and redirected towards this menupatcher...???

 

[WiiCrazy]

@aquilino

It's nice to see someone doing the code injection!

But beware, last time I checked using that with preloader prevented me to open my sd saves... Though can't test the ios 249 stuff...

ps: hmm, it can be an issue with the libraries in my devkitpro installation too... since menu loader did the same thing on a non preloader
installed system.... can you compile the last one I uploaded and share with us?