Hacking System Menu questions/thoughts

[IronMask]

Well if someone makes it... I will be willing to test it... I have great recovering skills...

 

[Zeek03]

Wiigator is reading!

Do you think you could help here?

 

[IronMask]

If I could speak for WiiGator, I would say you guys are fucking nuts! haha

 

[Deleted User]

which folder would the cIOS be installed in.
I found IOS 36 in "TITLE00000010000024\CONTENT" and packed it as a wad, but i need the 0000001.app from the cIOS i think?

 

[buby78]

if i got starfall installed is it safe to try this
did i understand this right open the wad and change the 1.app with the one in rev7

 

[WiiGator]

Ok, I already thought that installing cIOS over all installed IOSes would work, but I didn't tried it.
I didn't wanted to brick my Wii and it is much more dangerous then just installing a cIOS to IOS249.
Nintendo will not be able to handle this. I have internal information from Nintendo that they are already have problems to handle normal updates (correctly signed stuff).
If the system is completely based on fake-signed stuff, where everybody installs a random choosen IOS, there is a possibilty that an official Nintendo update will lead to a brick. They will not be able test all custom configurations.

Here are some answers to questions in the thread:
1. The rebooter patches the System Menu to always use IOS249. This is done by replacing the first bytes of:
0x7f, 0x06, 0xc3, 0x78,
0x7f, 0x25, 0xcb, 0x78,
0x38, 0x7e, 0x02, 0xc0,
0x4c, 0xc6, 0x31, 0x82
by:
0x3b, 0x20, 0x00, 0x01,
0x3b, 0x00, 0x00, 0xf9
where 0xf9 is IOS249. If you add this patch also all original games will use this IOS. So the compatibilty is lower for original games.

2. The DVD speed for original and backups will be same as before.

3. This will not help to get GameCube backups working. Only MIOS is responsible for this. I need just to clear one bit in a register to get DVD video access, but as I said before the games use the wrong DVD commands.

 

[WiiBlaster]

which folder would the cIOS be installed in.
I found IOS 36 in "TITLE00000010000024\CONTENT" and packed it as a wad, but i need the 0000001.app from the cIOS i think?


take the 00000001.app file from the CIOS rev7 after you unpack it and then after you unpack a IOS
only ios28-ios55 work by the way, just overwrite the 00000001.app file in the IOS folder with the cios rev7 app file and then copy all the files from the IOS folder and paste them were the wad packer tool is and then click on pack wad thats it, it craps out a CIOS IOS wad.lol

QUOTE(WiiGator @ Jan 6 2009, 12:44 AM) Ok, I already thought that installing cIOS over all installed IOSes would work, but I didn't tried it.
I didn't wanted to brick my Wii and it is much more dangerous then just installing a cIOS to IOS249.
Nintendo will not be able to handle this. I have internal information from Nintendo that they are already have problems to handle normal updates (correctly signed stuff).
If the system is completely based on fake-signed stuff, where everybody installs a random choosen IOS, there is a possibilty that an official Nintendo update will lead to a brick. They will not be able test all custom configurations.

Here are some answers to questions in the thread:
1. The rebooter patches the System Menu to always use IOS249. This is done by replacing the first bytes of:
0x7f, 0x06, 0xc3, 0x78,
0x7f, 0x25, 0xcb, 0x78,
0x38, 0x7e, 0x02, 0xc0,
0x4c, 0xc6, 0x31, 0x82
by:
0x3b, 0x20, 0x00, 0x01,
0x3b, 0x00, 0x00, 0xf9
where 0xf9 is IOS249. If you add this patch also all original games will use this IOS. So the compatibilty is lower for original games.

2. The DVD speed for original and backups will be same as before.

3. This will not help to get GameCube backups working. Only MIOS is responsible for this. I need just to clear one bit in a register to get DVD video access, but as I said before the games use the wrong DVD commands.

Thanks i hadn't thought about that, So after doing this Future updates could be a bad thing?

 

[friknfrak]

To my understanding, BootMii (when we see it released) will be a "BOOT2" forwarder that mounts the front-SD card and directs when to find "next" code to run as an alternative to booting to the NAND SYSMENU.

Honestly, I think we'll have ALOT more luck toying with modified SYSMENU's once we have this amazing tool in hand. AND, it'll be 99.9% brick-proof in doing so.

I stopped my SYSMENU mod activity in regards to hardcoding IOS's for now (even though I have a donor Wii to play with). I'm more interested to see what can be acomplished with BootMii.

I'm not saying you all should stop too. We gotta learn from trial and error right? But it cannot be stressed enough, if you go poking sticks into your Wii THIS DEEP, you might end up with a $250 paper weight.

Happy hunting and honestly, good luck.

I am currently researching more into BOOT2 forwarding methods as of now. Wish me luck

 

[Deleted User]

yeh err....how do i extract the 0000001.app from a .dol?

 

[friknfrak]

yeh err....how do i extract the 0000001.app from a .dol?

Dude. Please stop right now. Go read up on IOS Patching. Then if you feel confident after that go ahead and continue.

*HINT* - .app files will be in WAD's not DOL's. But again. READ UP FIRST!

 

[digitydogs]

3. This will not help to get GameCube backups working. Only MIOS is responsible for this. I need just to clear one bit in a register to get DVD video access, but as I said before the games use the wrong DVD commands.

So for gamecube backups we will need to develop an on the fly dvd command patcher to translate dvd commands.... hmm any other ideas how to handle this? where is ppc_gba, need his take on this since hes had access to the info alot longer and may have some theories.

 

[WiiBlaster]

yeh err....how do i extract the 0000001.app from a .dol?

Dont use the Installer use the CIOSrev7 WAD

 

[Deleted User]

meeehhhhhh....
F*** this shet...
I'll just wait till you guys figure it all out and use it then....
Just like the good old days of mporpg hacking....

 

[forbore]

I got a Q:

If we do put the menu patcher code in the SysMenu, then the comp. will be lower. Couldn't we make a simple menu that says something like Normal Menu and Backup Capable Menu instead of that ugly Health screen? The Backup Capable menu would load the menupatcher code. That would allow us to play both our backups, and of course, ALL of our originals.

 

[ether2802]

What we need is a piece of code telling at the SysMenu that if it's a DVD what the drive is reading, then use the IOS249 and only IOS249, for everything else the Wii should behave like normal, but guess where that piece of code should be....???

 

[digitydogs]

Once bootmii comes out and we can choose what boots on system start then we could do this. As it stands now you would have to install over top of the one you have each time you wanted to use change from original to backup menu. Which would be bad for your systems memory and gives you alot more chances for your menu to become corrupt during an install.
Ether now that is alot more realistic... could be as simple as an if else statement but even then we would probably need to alter the IOS the system menu is running off of... not sure if it would be safe to code it directly into the menu itself... Ill mention this to fors for csm if he hasnt already thought of it.

 

[ether2802]

ok then we should drop this path we are going to untill BootMii comes out, or someone have a piece of code capable of solving this...!!!

 

[digitydogs]

Just had another concern with the use x for dvd option... once we get to the point of running gamecube backups this method could interfere with them, as it would try to use the ios249 instead of the mios since it would be on a dvd. and i think gamecube backups are alot closer than anyone realizes, before anyone starts with the whole will or wont we have gamecube backups discussion

 

[IronMask]

yea yea bootmii bitemii

dammit

 

[digitydogs]

We may not even have to wait for bootmii... depends on what dashboard is capable of when fors releases it later this month.