Hacking savemiifrii

[djdynamite123]

And no there aren't thousands ways to brick the wii at least until someone decides to write malicious software for homebrewers...

I beg to differ. There are tons of ways of fucking up your wii. It just happens that the vast majority of them can be classified into a small set of groups because it's the same people doing the same stupid shit over and over and over again

.

Agreed marcan

 

[ausdamn]

hahaha classic.. pulls out dance mat.. ohh wait its for my ps2. damn!

 

[WiiCrazy]

As a customer of course I do expect a tracked shipment... It's possible to get lost if it's sent just like a letter... I agree 13$ is a lot compared to the 2$... I didn't bitch about it either personally or through public... You can see my posts here and there about that ...

I was too offered a pressed copy of that freeloader btw, since I had already ordered a savemii I just declined that offer... And I'm really grateful as to the support about the system menu patching using an apploader way before the launch of the savemii...

Anyway I won't discuss your excuses about one or two unread email... And getting this further will be of no help to anything at all...

 

[marcan]

As a customer of course I do expect a tracked shipment...
Then pay for it. You're getting free shipping, you shouldn't have any expectations. Do you get tracked shiping when you order a $1 triwing screwdriver from DealExtreme, shipped? Didn't think so.

QUOTE(WiiCrazy @ Nov 4 2008, 02:01 PM) I was too offered a pressed copy of that freeloader btw, since I had already ordered a savemii I just declined that offer... And I'm really grateful as to the support about the system menu patching using an apploader way before the launch of the savemii...

What does freeloader have to do with SaveMii? Freeloader is utterly useless if your Wii is bricked and it won't even try to run discs in the first place.

 

[djdynamite123]

What does freeloader have to do with SaveMii? Freeloader is utterly useless if your Wii is bricked and it won't even try to run discs in the first place.

Lol, true..


........has anyone banner bricked there wii on firmware 3.3 (without modchip) and tried this recovery mode with gc-pad.....with TP hack already on data management, have they managed to load up TP and boot up manager etc?

 

[Slowking]

As a customer of course I do expect a tracked shipment...

Then pay for it. You're getting free shipping, you shouldn't have any expectations. Do you get tracked shiping when you order a $1 triwing screwdriver from DealExtreme, shipped? Didn't think so.

Uhm yeah you do. You get a tracking number for everything you buy from them. Then again they ship from Hongkong and it's dirt cheap over there.

But at topic: Since nobody knew that you could enter the recovery menu through a GC controller before savemii was massproduced in china, I can fully understand marcan and bushing keeping this fact for themselfs for the time being. I would have done the same. You just don't thorw your money out of the window...

 

[djdynamite123]

But at topic: Since nobody knew that you could enter the recovery menu through a GC controller before savemii was massproduced in china, I can fully understand marcan and bushing keeping this fact for themselfs for the time being. I would have done the same. You just don't thorw your money out of the window...

very true, just there are many sceptical about it*

 

[WiiCrazy]

Congratulations, you can read two lines of asm code. That doesn't quite suffice to make the connection from a register compare to a pad read hundreds of instructions earlier in the sequence, especially considering that they don't share any stack offsets. Looking at the stack frame view might have helped, but I don't usually keep that view open in IDA.

Yeah you can read them all but can't make it into something viable... Just look at these two instructions closely... you see they are branching to the same normal boot procedure if the compare doesn't succeed... So how do you really do the reverse engineering if you can't even make anything out of this specific condition? All it takes after finding that is to dig this to the root...

seg006:81374CAC bne loc_81374CC8

seg006:81374CBC bne loc_81374CC8

For those 1000pcs on production I suggest you to enhance the design of the fpga chip at least and add more value in it so you can easily sell them off... though I think you should have done that from the start...
It's not an FPGA, it's a CPLD. 36 bits of register memory. We have three LEDs. What are we going to do, sell it as a debugging aid for BootMii problems (if the yellow light comes on, the SD card read failed)? Not very sellable. We don't even have an oscillator, so all actions have to be synced to requests from the console.

I thought it was a more capable fpga... you are right probably you can't make something out of that... maybe integrating even a pic there may help it to make it a debugging device like usbgecko...

The "system files corrupted" crap is part of the C++ framework that comprises the system menu GUI and which starts at mainmenu(), which is normal mode. None of that crap runs in IRD mode. It's a stupid simple main routine which calls the BS2 state machine functions. I highly doubt BS2 cares to initialize the C++ framework to display an error message (and, as you say, most of it is async, so it couldn't anyway).

Well I'll test that... I don't have time at the moment since I'm at work...

QUOTE

Bootmii is nothing for all those already bricked... right? So you took the same path as me and fiddled with an apploader... If you can patch diag disc check function then you can patch recovery mode check too... right?

Wrong, because once the BS2 state machine is running it's too late to get into IRD mode. And I didn't fiddle with the apploader. It's our bog standard GPLed apploader with a special build of menuloader as the payload DOL.

I beg to differ. There are tons of ways of fucking up your wii. It just happens that the vast majority of them can be classified into a small set of groups because it's the same people doing the same stupid shit over and over and over again.

No it's because of the title system (be it ios/system menu/vc/wiiware/savegame) in the wii... bricks are produced by installing an improper title... messing with nand files can be another cause... A person installing x title with bad banners and B person installing y title with bad banners will not give you two type of bricks, sorry... The same with the opera bricks probably and semi-bricks...

I don't think it's impossible since you got complete control of the system menu once you have a hook in there.... Though it's not an easy patch...

 

[WiiCrazy]

As a customer of course I do expect a tracked shipment...
Then pay for it. You're getting free shipping, you shouldn't have any expectations. Do you get tracked shiping when you order a $1 triwing screwdriver from DealExtreme, shipped? Didn't think so.

QUOTE(WiiCrazy @ Nov 4 2008, 02:01 PM) I was too offered a pressed copy of that freeloader btw, since I had already ordered a savemii I just declined that offer... And I'm really grateful as to the support about the system menu patching using an apploader way before the launch of the savemii...

What does freeloader have to do with SaveMii? Freeloader is utterly useless if your Wii is bricked and it won't even try to run discs in the first place.

Oh comparing a 30$ purchase with 1$... you are making me laugh... and I am talking about general expectations... If you do read my whole sentence there you can see that actually I didn't bothered with it... You are just trying to take this into a senseless debate about shipping and stuff...

Read bushing's statement way above my post... that freeloader is capable of patching system menu through loading an elf from sd card... did I compared it to a savemii in general?

 

[skawo96]

How the hell are you susposed to boot Zelda with this?

 

[Arm the Homeless]

How the hell are you susposed to boot Zelda with this?

Insert a original Zelda disk.

 

[skawo96]

How the hell are you susposed to boot Zelda with this?

Insert a original Zelda disk.

When disc is inserted the (EUR 3.2) disappears and that's it. No Zelda, let's play black screen.

 

[Maikel Steneker]

I'll just throw in my comments as well

No one is an asshole for not releasing this information. SaveMii wasn't advertised as the perfect tool for repairing your Wii. Unlike with other products, there was a lot of detailed information which explained what the SaveMii did, in which cases you could use it etc.

If my Wii would have been bricked, I would have bought it at once.

If that would've happened, I would have paid 30 euros to fix a Wii which I couldn't use anymore. Also, I would have a permanent tool to recover my Wii in an easy way.

I don't know about you guys, but I wouldn't feel screwed over.

Let's assume that Team Twiizers knew about this from the beginning. The would have been developing hardware that they knew was completely unnecessary. It would have cost a lot of time, and they would have known that any moment someone could find out about this. Also, they would take the risk of ordering 1000 units from the factory, while they knew that someone could release this information.

This is just not logical. Team Twiizers found out about this too late, and the only reason why they didn't release it is because they would have great financial losses. What's morally wrong about that?

 

[Scorpei]

I'll just throw in my comments as well

No one is an asshole for not releasing this information. SaveMii wasn't advertised as the perfect tool for repairing your Wii. Unlike with other products, there was a lot of detailed information which explained what the SaveMii did, in which cases you could use it etc.

If my Wii would have been bricked, I would have bought it at once.

If that would've happened, I would have paid 30 euros to fix a Wii which I couldn't use anymore. Also, I would have a permanent tool to recover my Wii in an easy way.

I don't know about you guys, but I wouldn't feel screwed over.

Let's assume that Team Twiizers knew about this from the beginning. The would have been developing hardware that they knew was completely unnecessary. It would have cost a lot of time, and they would have known that any moment someone could find out about this. Also, they would take the risk of ordering 1000 units from the factory, while they knew that someone could release this information.

This is just not logical. Team Twiizers found out about this too late, and the only reason why they didn't release it is because they would have great financial losses. What's morally wrong about that?

QFT, though I dunno to what extent Bushing/Marcan knew about this controller pad hack. Regardless though I don't know the intimate details (though I thought that they didn't order anything to be manufactured and that they did it from home...). Also, developements will always be made. You could also be mad at Intel for selling you a Pentium 3 back in the day when they KNEW they would be making the Pentium 4 which is faster and cheaper (when it was out for a while). Granted in this case it is buying a product or not buying one.

Still though, 30 euros to fix a bricked Wii at a point in time where no other method existed to do so (effectivly saving you 200 euros for a new Wii).

 

[Maikel Steneker]

I'll just throw in my comments as well

No one is an asshole for not releasing this information. SaveMii wasn't advertised as the perfect tool for repairing your Wii. Unlike with other products, there was a lot of detailed information which explained what the SaveMii did, in which cases you could use it etc.

If my Wii would have been bricked, I would have bought it at once.

If that would've happened, I would have paid 30 euros to fix a Wii which I couldn't use anymore. Also, I would have a permanent tool to recover my Wii in an easy way.

I don't know about you guys, but I wouldn't feel screwed over.

Let's assume that Team Twiizers knew about this from the beginning. The would have been developing hardware that they knew was completely unnecessary. It would have cost a lot of time, and they would have known that any moment someone could find out about this. Also, they would take the risk of ordering 1000 units from the factory, while they knew that someone could release this information.

This is just not logical. Team Twiizers found out about this too late, and the only reason why they didn't release it is because they would have great financial losses. What's morally wrong about that?

QFT, though I dunno to what extent Bushing/Marcan knew about this controller pad hack. Regardless though I don't know the intimate details (though I thought that they didn't order anything to be manufactured and that they did it from home...).

Actually, if I understood correctly they are now producing 1000 of them in a factory. That's why they didn't tell us about this: it would mean committing financial suicide.

 

[WiiCrazy]

Btw... how did crediar put gamecube Y button press recovery menu support in the starfall?

What kind of a patch is it?, I can't currently do any disassembly right now...

 

[djdynamite123]

Actually, if I understood correctly they are now producing 1000 of them in a factory. That's why they didn't tell us about this: it would mean committing financial suicide.

Exactly hardwork should be paid for, even though now there's the most simple option people are moaning about savemii.......(some ways you can feel done by especially if you have bought one recently) but let it go.........Its a financial Jungle out there.....Would would you do?................... Exactly the same

 

[djdynamite123]

Btw... how did crediar put gamecube Y button press recovery menu support in the starfall?

Must be some sort of code, that makes the wii think all 4 pad buttons are been pressed instead only the Y is.. i don't know something like that though.

 

[WiiCrazy]

Btw... how did crediar put gamecube Y button press recovery menu support in the starfall?

Must be some sort of code, that makes the wii think all 4 pad buttons are been pressed instead only the Y is.. i don't know something like that though.

Well the point is if it's just a simple patch to that compare instruction above I posted then it's a great possibility that crediar knew way before he released starfall that recovery menu can be activated through gamecube controller.

 

[djdynamite123]

Well the point is if it's just a simple patch to that compare instruction above I posted then it's a great possibility that crediar knew way before he released starfall that recovery menu can be activated through gamecube controller.

quite possibly

Ive just posted a topic on HBC9 read!!