Hacking RestoreMii

[svpe]

svpe@main ~ $ ./wii/wiiki/pywii/pywii-tools/tmdinfo.py wii/wiiki/wiimpersonator/title/0000000100000002/tmd.417
TMD file wii/wiiki/wiimpersonator/title/0000000100000002/tmd.417:
TMD:
ÂÂVersions: 0, CA CRL 0, Signer CRL 0, System 1-60
ÂÂTitle ID: 00000001-00000002 ('\x00\x00\x00\x01'-'\x00\x00\x00\x02')
ÂÂTitle Type: 1
ÂÂGroup ID: '\x00\x01'
ÂÂAccess Rights: 0x00000000
ÂÂTitle Version: 0x1a1
ÂÂBoot Index: 8
ÂÂContents:
ÂÂ IDÂÂÂÂÂÂ Index TypeÂÂÂÂSizeÂÂÂÂÂÂÂÂ Hash
ÂÂ 00000071 0ÂÂÂÂ 0x1ÂÂÂÂ 0x40ÂÂÂÂÂÂÂÂ fb 80 1b 25 3c f7 f6 f5 f4 0c be 57 c8 c1 bf 59 6b 69 f1 16
ÂÂ 00000072 1ÂÂÂÂ 0x1ÂÂÂÂ 0x61a7a7ÂÂÂÂ ef 67 c7 7f 8b 6f 0d 39 be 17 f2 43 5e 1a 0f 3d 4c 45 c6 54
ÂÂ 00000009 2ÂÂÂÂ 0x8001ÂÂ0x45940fÂÂÂÂ f5 dd 17 b3 20 0d d4 d6 be 2b 25 b5 77 c9 9e 5f 94 1b 73 24
ÂÂ 0000000A 3ÂÂÂÂ 0x8001ÂÂ0x28b9f4ÂÂÂÂ 32 b3 39 cb bb 50 7d 50 27 79 25 9a 78 66 99 5d 03 0b 1d 88
ÂÂ 0000000B 4ÂÂÂÂ 0x8001ÂÂ0xa7984ÂÂÂÂÂÂ5f 1b b7 b0 27 94 b1 4e 88 b7 22 69 a3 37 6d 23 05 1d ad 1d
ÂÂ 0000000C 5ÂÂÂÂ 0x8001ÂÂ0x37adfcÂÂÂÂ 4f ad 97 fd 4a 28 8c 47 e0 58 7f 3b bd 29 23 79 f8 70 9e b9
ÂÂ 00000059 6ÂÂÂÂ 0x8001ÂÂ0x42880ÂÂÂÂÂÂ29 3d 73 42 60 ac 99 f4 d3 de 75 31 0a 7d 27 34 66 f6 be 08
ÂÂ 0000005A 7ÂÂÂÂ 0x8001ÂÂ0xcfe0ÂÂÂÂÂÂ 53 4d 29 52 fe 2f 66 43 70 d8 36 4b 9a 0a 0d 1f 55 a0 59 31
ÂÂ 00000073 8ÂÂÂÂ 0x1ÂÂÂÂ 0x3b0500ÂÂÂÂ a2 b2 d7 e9 9a 22 9d 60 3f 09 02 45 b1 87 47 2d 34 5a 3b 9d
svpe@main ~ $ ./wii/wiiki/pywii/pywii-tools/wadinfo.py Desktop/RestoreMii4.0U.wad.wad
WARNING: OLD FAKESIGNED TICKET WITH BAD KEY OFFSET, ASSUMING NORMAL COMMON KEY
Wii Wad:
Header 0x20 Type 'Is' Certs 0xa00 Tik 0x2a4 TMD 0x328 Data 0x1521b80 @ 0x1040 Footer 0x40
ETicket:
ÂÂTitle ID: '\x00\x00\x00\x01\x00\x00\x00\x02'
ÂÂTitle key IV: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 00
ÂÂTitle key (encrypted): 86 6b 69 6b 65 6b 61 6b 69 6b 72 75 6c 65 73 21
ÂÂCommon key index: 146
ÂÂTitle key (decrypted): b2 13 11 d2 6c 5f 5d 75 50 63 90 3b 8b 8d 6f 17
ETicket signed by Root-CA00000001-XS00000003 using RSA-2048: 00 9c f2 d9 97 e5 7c 0d 77 f2 e4 97 66 6a d2 5b db 9a 67 1d [BUG]
ÂÂÂÂSignature hash: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
TMD:
ÂÂVersions: 0, CA CRL 0, Signer CRL 0, System 1-60
ÂÂTitle ID: 00000001-00000002 ('\x00\x00\x00\x01'-'\x00\x00\x00\x02')
ÂÂTitle Type: 1
ÂÂGroup ID: '\x00\x01'
ÂÂAccess Rights: 0x00000000
ÂÂTitle Version: 0x1a1
ÂÂBoot Index: 8
ÂÂContents:
ÂÂ IDÂÂÂÂÂÂ Index TypeÂÂÂÂSizeÂÂÂÂÂÂÂÂ Hash
ÂÂ 00000071 0ÂÂÂÂ 0x1ÂÂÂÂ 0x40ÂÂÂÂÂÂÂÂ fb 80 1b 25 3c f7 f6 f5 f4 0c be 57 c8 c1 bf 59 6b 69 f1 16
ÂÂ 00000072 1ÂÂÂÂ 0x1ÂÂÂÂ 0x61a7a7ÂÂÂÂ ef 67 c7 7f 8b 6f 0d 39 be 17 f2 43 5e 1a 0f 3d 4c 45 c6 54
ÂÂ 00000009 2ÂÂÂÂ 0x8001ÂÂ0x45940fÂÂÂÂ f5 dd 17 b3 20 0d d4 d6 be 2b 25 b5 77 c9 9e 5f 94 1b 73 24
ÂÂ 0000000A 3ÂÂÂÂ 0x8001ÂÂ0x28b9f4ÂÂÂÂ 32 b3 39 cb bb 50 7d 50 27 79 25 9a 78 66 99 5d 03 0b 1d 88
ÂÂ 0000000B 4ÂÂÂÂ 0x8001ÂÂ0xa7984ÂÂÂÂÂÂ5f 1b b7 b0 27 94 b1 4e 88 b7 22 69 a3 37 6d 23 05 1d ad 1d
ÂÂ 0000000C 5ÂÂÂÂ 0x8001ÂÂ0x37adfcÂÂÂÂ 4f ad 97 fd 4a 28 8c 47 e0 58 7f 3b bd 29 23 79 f8 70 9e b9
ÂÂ 00000059 6ÂÂÂÂ 0x8001ÂÂ0x42880ÂÂÂÂÂÂ29 3d 73 42 60 ac 99 f4 d3 de 75 31 0a 7d 27 34 66 f6 be 08
ÂÂ 0000005A 7ÂÂÂÂ 0x8001ÂÂ0xcfe0ÂÂÂÂÂÂ 53 4d 29 52 fe 2f 66 43 70 d8 36 4b 9a 0a 0d 1f 55 a0 59 31
ÂÂ 00000073 8ÂÂÂÂ 0x1ÂÂÂÂ 0x3b0500ÂÂÂÂ a2 b2 d7 e9 9a 22 9d 60 3f 09 02 45 b1 87 47 2d 34 5a 3b 9d
TMD signed by Root-CA00000001-CP00000004 using RSA-2048: 00 af e9 4e 6d fe 22 1b 9e 65 78 a2 62 70 a8 d9 bc 9f 7b 64 [BUG]
ÂÂÂÂSignature hash: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
All content SHA-1 hashes are valid
Certificates:
ÂÂ- XS00000003 (RSA-2048)
ÂÂÂÂ Certificate signed by Root-CA00000001 using RSA-2048: d7 0a a0 54 90 af 79 3e 49 10 af 47 9a 76 0f d2 75 f5 ad 12 [OK]
ÂÂ- CA00000001 (RSA-2048)
ÂÂÂÂ Certificate signed by Root using RSA-4096: 6f 47 c8 5c b1 aa ee 83 b1 1d 73 3f 19 fe 6c 7e 8e 2f e4 50 [OK]
ÂÂ- CP00000004 (RSA-2048)
ÂÂÂÂ Certificate signed by Root-CA00000001 using RSA-2048: 8d 4f ff f1 ba f5 f0 07 b8 b4 bd f9 03 b5 00 ad e5 e8 20 fc [OK]

It's a fakesigned(!!) but non-modified system menu 4.0 wad. I hear you also call this fail.

 

[wiiman123]

And how is a fakesigned systemmenu 4.0 wad suppose to fix a full wii brick by installing it prior to the acutal bricking.

This is also a dangerous wad for noobs that are on 3.4 and under. That might in desperation try to install this hoping that its some preemptive fix all bricks wad for their Wiis. I can see the brickfest already.

TMD info of "RestoreMii4.0U.wad.wad"
Path: '000000010000002'
Type: System Title
TitleID: System Menu Version: 417
IOS Flag: IOS60
Data files: 9
Size: 10269363 - 22159510 byte (79 - 170 blocks)

EDIT: If this contains IOS60 as Vidboy claims then it should techincally be safe to upgrade with to 4.0 and unbrick using preloader.

 

[jinxvorheeze]

*Has been proven wrong on page 4. Good job Vidboy.

 

[Wack0]

I agree with this. You can't install 1-2 and 1-60 as 1-2. It just won't work. I would just abandon the idea as most bricks are bad installs of 1-2, or wrong region 1-2 installs; and 1-2 installs overwrite preloader. I'd only code an "unbricker" once preloader 0.3 comes out (cause it patches boot2 to load preloader rather than 1-2, theres a youtube video as proof). And when it does, I just might ..

~Wack0

 

[SpAM_CAN]

I'm sorry to say this (as I am around your age) but this is a load of crap. It will not work.

 

[wiiman123]

Modchips on Wiis with Trucha fixed IOSs & autoboot homebrew discs, can also unbrick full bricked Wiis.

 

[vettacossx]

can this be used on a say for example 3.2U wii bricked and can load preloader and hbc through preloader....

so if this is used on a bricked 3.2U and we apply the 4.0 wadfix will it simply update it to 4.0 and unbricked the console? and if so will we retain our already installed channels like normal? (the homebrew channel) so we can keep teh brew?


or do you reccomend waiting for a 3.2 build of the fix?

 

[wiiman123]

EDIT: If this contains IOS60 as Vidboy claims then it should techincally be techincally safe to upgrade with to 4.0 and unbrick using preloader. I haven't tested it though. Don't want 4.0

 

[twofive]

can this be used on a say for example 3.2U wii bricked and can load preloader and hbc through preloader....

so if this is used on a bricked 3.2U and we apply the 4.0 wadfix will it simply update it to 4.0 and unbrick the cnsole?

No, goddamnit, no!
THIS WILL NOT UNBRICK ANYTHING!

If you install this load of a bunch of a whole big bucket of crap then you should expect a white brickstone hooked up to your TV.
LISTEN!

So, ban this damn kid and finally remove that link.

 

[DPyro]

Remove the download link before the noobs get wind of this!

 

[twofive]

Did anyone recognize that dumb kid's signature?
Did he actually make that with Paint ?!

Buy Photoshop, or at least pirate it if you cannot afford it!

 

[Vidboy10]

Dude, ill post a video to show you proof that its real.

I want you to post video of you downgrading to Firmware 3.2, then using AnyTitleDeleter to remove IOS 60, then finally using the wad to upgrade to 4.0 since this wad contains IOS 60.

Done.

 

[wiiman123]

Shows us how you plan on loading this wad when you actual brick your Wii and you have no preloader or on a virgin 4.0 with no modchip.

 

[Vidboy10]

Shows us how you plan on loading this wad when you actual brick your Wii and you have no preloader or on a virgin 4.0 with no modchip.

Dude...
Read the Q&A.

 

[wiiman123]

Ya.. ahah.. preloader...

you can just simply install IOS 60 & system menu 4.0 in two wads to achieve the exactly same thing. Plus upgrading should be done the Waninkoko way.

1 file vs 2 files.

What about those that never intend to use preloader? They are still screwed.

 

[Adr990]

Hmm, okay...

It is good for noobs forgetting Install IOS60 with the System menu 4.0...

(I think...?)

But it isn't anything special more than doing it manual:

(Preloader installed with Installed a theme brick/Banner Brick)
(Which you also can fix with WAD Manager uninstall the banner brick wad or SoftMii Tweak reinstalling a good / original skin.)
Install IOS60 & Install system menu 4.0 = Same results...

Note:
Both ways with this 'Restore Mii' / Manual install IOS60 & Systememnu 4.0.
Will remove Preloader start up.* ( Use NandClean to really remove it. - http://gbatemp.net/index.php?showtopic=151590 )

*There will be more problems than just that , but I forgot... Hmm... (Either if you come from other FW / PL 0.28 or other)

 

[Vidboy10]

It's Okay guys i have your Respects of saying that you could manuly install SystemMenu4.0.wad and IOS60.wad but this is just my thing for noobs.

BTW, Updated first post with video and edited some of the Q&A.

 

[wiiman123]

I have nothing against it as long as it works. Great for unbricking with preloader for noobs if it is packed the way you say it is.

Should still follow the waninkoko way of upgrading to 4.0 and using IOS60/61 Patcher.

 

[vettacossx]

btw im not bricked it was hypothetical and a simple question i dont need the lip thanks twofive ive been on 3.2 for YEARS and have no intention upgrading when my USB drive is sufficient for ALL my needs

but yeah ive been around since tetris for the twilight hack but thanks for the disrespectful tude bro...lol

second of all I SUPPORT THIS however just a tip next time have the proof already posted in a High quality video just to save from the assholes being well....assholes...also to prevent newbs from bricking using this you may want to make a DETAILED read me file with the DO's and DONT's in there

so no one can give you any grief over bricks you should also post a "warning i am not responsible for the use of these files ...use at your own risk it is possible to brick your wii if you do not follow the read me properly...

May i suggest editing the first post with "coming soon" and better prepare the release...start a new thread and you may find less ASSHOLES and asshole comments...lol

THANKS FOR BEING A CONTRIBUTOR instead of a "whiner"

 

[Vidboy10]

btw im not bricked it was hypothetical and a simple question i dont need the lip thanks twofive ive been on 3.2 for YEARS and have no intention upgrading when my USB drive is sufficient for ALL my needs

but yeah ive been around since tetris for the twilight hack but thanks for the disrespectful tude bro...lol

second of all I SUPPORT THIS however just a tip next time have the proof already posted in a High quality video just to save from the assholes being well....assholes...also to prevent newbs from bricking using this you may want to make a DETAILED read me file with the DO's and DONT's in there

so no one can give you any grief over bricks you should also post a "warning i am not responsible for the use of these files ...use at your own risk it is possible to brick your wii if you do not follow the read me properly...

May i suggest editing the first post with "coming soon" and better prepare the release...start a new thread and you may find less ASSHOLES and asshole comments...lol

THANKS FOR BEING A CONTRIBUTOR instead of a "whiner"

Wow, i feel amazed that's coming from Vetta...
Thanks for the advice mate. i really apreaticate it.